Supply Chain Incidents

MAL-2026-11598

Malicious code in @onereach/expression-components (npm)

MAL-2026-11669

Malicious code in @or-sdk/api-tokens (npm)

MAL-2026-11632

Malicious code in @onereach/si-code (npm)

MAL-2026-11661

Malicious code in @onereach/ui-components-common (npm)

MAL-2026-11699

Malicious code in @or-sdk/idw (npm)

MAL-2026-11599

Malicious code in @onereach/font-icons (npm)

MAL-2026-11676

Malicious code in @or-sdk/billing-internal (npm)

MAL-2026-11653

Malicious code in @onereach/step-conversation (npm)

MAL-2026-11702

Malicious code in @or-sdk/invitations (npm)

MAL-2026-11588

Malicious code in @onereach/bandwidth-steps-voice-bxml (npm)

MAL-2026-11672

Malicious code in @or-sdk/auth (npm)

MAL-2026-11700

Malicious code in @or-sdk/idw-public (npm)

MAL-2026-11607

Malicious code in @onereach/messengers-infobip-sdk (npm)

MAL-2026-11667

Malicious code in @or-sdk/adapters (npm)

MAL-2026-11695

Malicious code in @or-sdk/flows (npm)

MAL-2026-11587

Malicious code in @onereach/authorizer-helper (npm)

MAL-2026-11697

Malicious code in @or-sdk/hitl (npm)

MAL-2026-11655

Malicious code in @onereach/step-voice (npm)

MAL-2026-11711

Malicious code in @or-sdk/lookup (npm)

MAL-2026-11589

Malicious code in @onereach/billing-dto (npm)

MAL-2026-11734

Malicious code in @or-sdk/transcripts (npm)

MAL-2026-11644

Malicious code in @onereach/si-select (npm)

MAL-2026-11668

Malicious code in @or-sdk/agents (npm)

MAL-2026-11698

Malicious code in @or-sdk/identifiers (npm)