Supply Chain Incidents

MAL-2026-11818

Malicious code in @servicetitan/anvil-icons (npm)

MAL-2026-11564

Malicious code in @hubsync/web-sdk-react (npm)

MAL-2026-11820

Malicious code in @servicetitan/anvil-themes (npm)

MAL-2026-11808

Malicious code in @qlik/sprout-react (npm)

MAL-2026-11897

Malicious code in @servicetitan/marketing-widgets (npm)

MAL-2026-11949

Malicious code in @servicetitan/web-components (npm)

MAL-2026-11782

Malicious code in @picsart/gen-ai (npm)

MAL-2026-11756

Malicious code in @ornikar/graphql-config (npm)

MAL-2026-11754

Malicious code in @ornikar/eslint-plugin-neverthrow (npm)

MAL-2026-11682

Malicious code in @or-sdk/chat (npm)

MAL-2026-11600

Malicious code in @onereach/get-version-data (npm)

MAL-2026-11707

Malicious code in @or-sdk/library-categories (npm)

MAL-2026-11591

Malicious code in @onereach/cb-schema-translator (npm)

MAL-2026-11696

Malicious code in @or-sdk/graph (npm)

MAL-2026-11656

Malicious code in @onereach/styles (npm)

MAL-2026-11889

Malicious code in @servicetitan/log-service (npm)

MAL-2026-11710

Malicious code in @or-sdk/library-types-v2 (npm)

MAL-2026-11602

Malicious code in @onereach/idw-contracts (npm)

MAL-2026-11985

Malicious code in rwc-client (npm)

MAL-2026-11875

Malicious code in @servicetitan/hammer-token (npm)

MAL-2026-11945

Malicious code in @servicetitan/toolbelt-shared-registry (npm)

MAL-2026-11630

Malicious code in @onereach/si-checkbox (npm)

MAL-2026-11628

Malicious code in @onereach/si-a-button (npm)

MAL-2026-11930

Malicious code in @servicetitan/tanstack-query-mobx (npm)