Supply Chain Incidents

MAL-2026-11596

Malicious code in @onereach/content-builder (npm)

MAL-2026-11797

Malicious code in @qlik/eslint-config-vue (npm)

MAL-2026-11641

Malicious code in @onereach/si-merge-tag-input (npm)

MAL-2026-11887

Malicious code in @servicetitan/line-item-editor (npm)

MAL-2026-11664

Malicious code in @onereach/webform (npm)

MAL-2026-11900

Malicious code in @servicetitan/micro-frontend (npm)

MAL-2026-11914

Malicious code in @servicetitan/responsive (npm)

MAL-2026-11906

Malicious code in @servicetitan/moneyout-api-client (npm)

MAL-2026-11870

Malicious code in @servicetitan/form (npm)

MAL-2026-11894

Malicious code in @servicetitan/marketing-integration-widgets (npm)

MAL-2026-11616

Malicious code in @onereach/orest-jest-presets (npm)

MAL-2026-11849

Malicious code in @servicetitan/data-query (npm)

MAL-2026-11944

Malicious code in @servicetitan/tokens (npm)

MAL-2026-11819

Malicious code in @servicetitan/anvil-react (npm)

MAL-2026-11932

Malicious code in @servicetitan/testing-library (npm)

MAL-2026-11927

Malicious code in @servicetitan/stylelint-config (npm)

MAL-2026-11871

Malicious code in @servicetitan/form-state (npm)

MAL-2026-11850

Malicious code in @servicetitan/datadog-rum (npm)

MAL-2026-11884

Malicious code in @servicetitan/launchdarkly-service (npm)

MAL-2026-11859

Malicious code in @servicetitan/error-boundary (npm)

MAL-2026-11860

Malicious code in @servicetitan/eslint-config (npm)

MAL-2026-11822

Malicious code in @servicetitan/anvil2 (npm)

MAL-2026-11987

Malicious code in sn-listbox (npm)

MAL-2026-11566

Malicious code in @nebula.js/cli-build (npm)