Supply Chain Incidents

MAL-2026-11757

Malicious code in @ornikar/intl-config (npm)

MAL-2026-11744

Malicious code in @ornikar/commitlint-config (npm)

MAL-2026-11745

Malicious code in @ornikar/eslint-config (npm)

MAL-2026-11752

Malicious code in @ornikar/eslint-config-typescript-nestjs (npm)

MAL-2026-11751

Malicious code in @ornikar/eslint-config-typescript (npm)

MAL-2026-11848

Malicious code in @servicetitan/culture (npm)

MAL-2026-11665

Malicious code in @or-sdk/account-settings (npm)

MAL-2026-11652

Malicious code in @onereach/step-components (npm)

MAL-2026-11737

Malicious code in @or-sdk/views (npm)

MAL-2026-11649

Malicious code in @onereach/si-validated-timestring-input (npm)

MAL-2026-11687

Malicious code in @or-sdk/deployer (npm)

MAL-2026-11929

Malicious code in @servicetitan/table (npm)

MAL-2026-11920

Malicious code in @servicetitan/standalone-root (npm)

MAL-2026-11829

Malicious code in @servicetitan/anvil2-mcp (npm)

MAL-2026-11854

Malicious code in @servicetitan/docs-uikit (npm)

MAL-2026-11679

Malicious code in @or-sdk/card-templates (npm)

MAL-2026-11815

Malicious code in @servicetitan/anvil-css-utilities (npm)

MAL-2026-11647

Malicious code in @onereach/si-text-message (npm)

MAL-2026-11830

Malicious code in @servicetitan/assist-ui (npm)

MAL-2026-11614

Malicious code in @onereach/orest-cli (npm)

MAL-2026-11952

Malicious code in @thiennq/docs-viewer (npm)

MAL-2026-11879

Malicious code in @servicetitan/install (npm)

MAL-2026-11861

Malicious code in @servicetitan/eslint-plugin (npm)

MAL-2026-11873

Malicious code in @servicetitan/hammer-icon (npm)