malware
npm
@or-sdk/auth
discovered 2026-08-04OneReach @or-sdk/auth. Representative of ~73 compromised @or-sdk packages. Compromised via onereach.user account. Variant B payload.
Threat types
credential_stealer worm persistence
Malicious versions
- 0.38.1
- 0.38.2
