malware
npm
@servicetitan/react-ioc
discovered 2026-08-04ServiceTitan react-ioc. Representative of ~141 compromised @servicetitan packages. Compromised via st-team account. Variant B payload.
Threat types
credential_stealer worm persistence
Malicious versions
- 38.1.4
