Malicious Packages

    Dashboard / Malicious Packages

    ID
    Packages
    Summary
    Published
    Attributes

    @servicetitan/anvil2-mcp

    Malicious code in @servicetitan/anvil2-mcp (npm)

    4 Aug 2026
    No fix available

    @servicetitan/docs-uikit

    Malicious code in @servicetitan/docs-uikit (npm)

    4 Aug 2026
    No fix available

    @or-sdk/card-templates

    Malicious code in @or-sdk/card-templates (npm)

    4 Aug 2026
    No fix available

    @onereach/si-text-message

    Malicious code in @onereach/si-text-message (npm)

    4 Aug 2026
    No fix available

    @servicetitan/anvil-css-utilities

    Malicious code in @servicetitan/anvil-css-utilities (npm)

    4 Aug 2026
    No fix available

    @servicetitan/assist-ui

    Malicious code in @servicetitan/assist-ui (npm)

    4 Aug 2026
    No fix available

    @onereach/orest-cli

    Malicious code in @onereach/orest-cli (npm)

    4 Aug 2026
    No fix available

    @thiennq/docs-viewer

    Malicious code in @thiennq/docs-viewer (npm)

    4 Aug 2026
    No fix available

    @servicetitan/install

    Malicious code in @servicetitan/install (npm)

    4 Aug 2026
    No fix available

    @servicetitan/eslint-plugin

    Malicious code in @servicetitan/eslint-plugin (npm)

    4 Aug 2026
    No fix available

    @servicetitan/hammer-icon

    Malicious code in @servicetitan/hammer-icon (npm)

    4 Aug 2026
    No fix available

    @servicetitan/anvil-icons

    Malicious code in @servicetitan/anvil-icons (npm)

    4 Aug 2026
    No fix available

    @hubsync/web-sdk-react

    Malicious code in @hubsync/web-sdk-react (npm)

    4 Aug 2026
    No fix available

    @qlik/sprout-react

    Malicious code in @qlik/sprout-react (npm)

    4 Aug 2026
    No fix available

    @servicetitan/anvil-themes

    Malicious code in @servicetitan/anvil-themes (npm)

    4 Aug 2026
    No fix available

    @servicetitan/marketing-widgets

    Malicious code in @servicetitan/marketing-widgets (npm)

    4 Aug 2026
    No fix available

    @servicetitan/web-components

    Malicious code in @servicetitan/web-components (npm)

    4 Aug 2026
    No fix available

    @picsart/gen-ai

    Malicious code in @picsart/gen-ai (npm)

    4 Aug 2026
    No fix available

    @ornikar/graphql-config

    Malicious code in @ornikar/graphql-config (npm)

    4 Aug 2026
    No fix available

    @ornikar/eslint-plugin-neverthrow

    Malicious code in @ornikar/eslint-plugin-neverthrow (npm)

    4 Aug 2026
    No fix available

    @or-sdk/chat

    Malicious code in @or-sdk/chat (npm)

    4 Aug 2026
    No fix available

    @onereach/get-version-data

    Malicious code in @onereach/get-version-data (npm)

    4 Aug 2026
    No fix available

    @or-sdk/library-categories

    Malicious code in @or-sdk/library-categories (npm)

    4 Aug 2026
    No fix available

    @onereach/cb-schema-translator

    Malicious code in @onereach/cb-schema-translator (npm)

    4 Aug 2026
    No fix available

    @or-sdk/graph

    Malicious code in @or-sdk/graph (npm)

    4 Aug 2026
    No fix available

    @onereach/styles

    Malicious code in @onereach/styles (npm)

    4 Aug 2026
    No fix available

    @servicetitan/log-service

    Malicious code in @servicetitan/log-service (npm)

    4 Aug 2026
    No fix available

    @or-sdk/library-types-v2

    Malicious code in @or-sdk/library-types-v2 (npm)

    4 Aug 2026
    No fix available

    @onereach/idw-contracts

    Malicious code in @onereach/idw-contracts (npm)

    4 Aug 2026
    No fix available

    rwc-client

    Malicious code in rwc-client (npm)

    4 Aug 2026
    No fix available

    @servicetitan/hammer-token

    Malicious code in @servicetitan/hammer-token (npm)

    4 Aug 2026
    No fix available

    @servicetitan/toolbelt-shared-registry

    Malicious code in @servicetitan/toolbelt-shared-registry (npm)

    4 Aug 2026
    No fix available

    @onereach/si-a-button

    Malicious code in @onereach/si-a-button (npm)

    4 Aug 2026
    No fix available

    @onereach/si-checkbox

    Malicious code in @onereach/si-checkbox (npm)

    4 Aug 2026
    No fix available

    @servicetitan/tanstack-query-mobx

    Malicious code in @servicetitan/tanstack-query-mobx (npm)

    4 Aug 2026
    No fix available

    @onereach/idw-init-account-resources

    Malicious code in @onereach/idw-init-account-resources (npm)

    4 Aug 2026
    No fix available

    @servicetitan/hammer-react

    Malicious code in @servicetitan/hammer-react (npm)

    4 Aug 2026
    No fix available

    @or-sdk/base

    Malicious code in @or-sdk/base (npm)

    4 Aug 2026
    No fix available

    @onereach/or-sdk-agent-cli

    Malicious code in @onereach/or-sdk-agent-cli (npm)

    4 Aug 2026
    No fix available

    @or-sdk/authorizer

    Malicious code in @or-sdk/authorizer (npm)

    4 Aug 2026
    No fix available

    @onereach/si-datepicker

    Malicious code in @onereach/si-datepicker (npm)

    4 Aug 2026
    No fix available

    @onereach/channel-transformer

    Malicious code in @onereach/channel-transformer (npm)

    4 Aug 2026
    No fix available

    @or-sdk/queue-manager

    Malicious code in @or-sdk/queue-manager (npm)

    4 Aug 2026
    No fix available

    @servicetitan/anvil-fonts

    Malicious code in @servicetitan/anvil-fonts (npm)

    4 Aug 2026
    No fix available

    @onereach/si-collapsible-group

    Malicious code in @onereach/si-collapsible-group (npm)

    4 Aug 2026
    No fix available

    @or-sdk/permissions-lambda

    Malicious code in @or-sdk/permissions-lambda (npm)

    4 Aug 2026
    No fix available

    @onereach/idw-ui-components

    Malicious code in @onereach/idw-ui-components (npm)

    4 Aug 2026
    No fix available

    @or-sdk/ccp

    Malicious code in @or-sdk/ccp (npm)

    4 Aug 2026
    No fix available

    @or-sdk/contacts

    Malicious code in @or-sdk/contacts (npm)

    4 Aug 2026
    No fix available

    @onereach/rwc-client

    Malicious code in @onereach/rwc-client (npm)

    4 Aug 2026
    No fix available