Supply Chain Incidents

MAL-2026-11631

Malicious code in @onereach/si-checkbox-group (npm)

MAL-2026-11650

Malicious code in @onereach/slack-helpers (npm)

MAL-2026-11708

Malicious code in @or-sdk/library-source (npm)

MAL-2026-11722

Malicious code in @or-sdk/qna (npm)

MAL-2026-11553

Malicious code in @arv-bedrock/auth (npm)

MAL-2026-11965

Malicious code in conv-context-next (npm)

MAL-2026-11721

Malicious code in @or-sdk/providers (npm)

MAL-2026-11556

Malicious code in @arv-bedrock/auth-sso-backend (npm)

MAL-2026-11611

Malicious code in @onereach/or-file-uploader-next (npm)

MAL-2026-11557

Malicious code in @arv-bedrock/logger (npm)

MAL-2026-11976

Malicious code in native-frontend-orb (npm)

MAL-2026-11555

Malicious code in @arv-bedrock/auth-sso (npm)

MAL-2026-11742

Malicious code in @ornikar/babel-preset-react (npm)

MAL-2026-11778

Malicious code in @ornikar/stylelint-config (npm)

MAL-2026-11774

Malicious code in @ornikar/rollup-config (npm)

MAL-2026-11761

Malicious code in @ornikar/jest-config-react-native-web (npm)

MAL-2026-11766

Malicious code in @ornikar/prettier-config (npm)

MAL-2026-11758

Malicious code in @ornikar/jest-config (npm)

MAL-2026-11771

Malicious code in @ornikar/repo-config (npm)

MAL-2026-11755

Malicious code in @ornikar/eslint-plugin-ornikar (npm)

MAL-2026-11740

Malicious code in @ornikar/babel-preset-base (npm)

MAL-2026-11770

Malicious code in @ornikar/renovate-config (npm)

MAL-2026-11753

Malicious code in @ornikar/eslint-config-typescript-react (npm)

MAL-2026-11973

Malicious code in frontend-orb (npm)