Supply Chain Incidents

MAL-2026-11603

Malicious code in @onereach/idw-init-account-resources (npm)

MAL-2026-11874

Malicious code in @servicetitan/hammer-react (npm)

MAL-2026-11674

Malicious code in @or-sdk/base (npm)

MAL-2026-11613

Malicious code in @onereach/or-sdk-agent-cli (npm)

MAL-2026-11673

Malicious code in @or-sdk/authorizer (npm)

MAL-2026-11635

Malicious code in @onereach/si-datepicker (npm)

MAL-2026-11592

Malicious code in @onereach/channel-transformer (npm)

MAL-2026-11816

Malicious code in @servicetitan/anvil-fonts (npm)

MAL-2026-11723

Malicious code in @or-sdk/queue-manager (npm)

MAL-2026-11719

Malicious code in @or-sdk/permissions-lambda (npm)

MAL-2026-11633

Malicious code in @onereach/si-collapsible-group (npm)

MAL-2026-11605

Malicious code in @onereach/idw-ui-components (npm)

MAL-2026-11683

Malicious code in @or-sdk/contacts (npm)

MAL-2026-11681

Malicious code in @or-sdk/ccp (npm)

MAL-2026-11852

Malicious code in @servicetitan/design-system (npm)

MAL-2026-11626

Malicious code in @onereach/rwc-client (npm)

MAL-2026-11624

Malicious code in @onereach/regular-expressions (npm)

MAL-2026-11620

Malicious code in @onereach/phonenumber-interpreter (npm)

MAL-2026-11686

Malicious code in @or-sdk/data-hub-svc (npm)

MAL-2026-11724

Malicious code in @or-sdk/sdk-api (npm)

MAL-2026-11705

Malicious code in @or-sdk/knowledge-models (npm)

MAL-2026-11725

Malicious code in @or-sdk/settings (npm)

MAL-2026-11948

Malicious code in @servicetitan/va-mfe-loader (npm)

MAL-2026-11921

Malicious code in @servicetitan/standalone-tm-api (npm)