discovered 2026-08-04
ServiceTitan react-ioc. Representative of ~141 compromised @servicetitan packages. Compromised via st-team account. Variant B payload.