Supply Chain Incidents

MAL-2026-11715

Malicious code in @or-sdk/password (npm)

MAL-2026-11590

Malicious code in @onereach/billing-shared (npm)

MAL-2026-11684

Malicious code in @or-sdk/content-request (npm)

MAL-2026-11648

Malicious code in @onereach/si-textinput (npm)

MAL-2026-11716

Malicious code in @or-sdk/payments (npm)

MAL-2026-11726

Malicious code in @or-sdk/sku-builder (npm)

MAL-2026-11688

Malicious code in @or-sdk/deployments (npm)

MAL-2026-11691

Malicious code in @or-sdk/event-manager (npm)

MAL-2026-11593

Malicious code in @onereach/channel-transformers (npm)

MAL-2026-11595

Malicious code in @onereach/condition-builder (npm)

MAL-2026-11703

Malicious code in @or-sdk/key-value-storage (npm)

MAL-2026-11689

Malicious code in @or-sdk/discovery (npm)

MAL-2026-11729

Malicious code in @or-sdk/step-templates (npm)

MAL-2026-11733

Malicious code in @or-sdk/tickets (npm)

MAL-2026-11623

Malicious code in @onereach/regex-helper (npm)

MAL-2026-11643

Malicious code in @onereach/si-root (npm)

MAL-2026-11645

Malicious code in @onereach/si-step-chooser (npm)

MAL-2026-11662

Malicious code in @onereach/ui-components-vue2 (npm)

MAL-2026-11730

Malicious code in @or-sdk/store (npm)

MAL-2026-11685

Malicious code in @or-sdk/data-hub (npm)

MAL-2026-11678

Malicious code in @or-sdk/bots (npm)

MAL-2026-11720

Malicious code in @or-sdk/pgsql (npm)

MAL-2026-11732

Malicious code in @or-sdk/tags (npm)

MAL-2026-11692

Malicious code in @or-sdk/files (npm)