See the full list of npm packages compromised in the "Keyv / Cacheable Supply Chain Compromise - Aug 2026" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
Affects @onereach/types-contacts-api | Versions =9.0.10
Has fix
npmPublished 4 Aug 2026
Affects @onereach/ts-memoize | Versions =1.0.4
Has fix
npmPublished 4 Aug 2026
Affects @onereach/time-interpreter | Versions =1.0.32
Has fix
npmPublished 4 Aug 2026
Affects @onereach/step-voice | Versions =7.0.32=7.0.33=7.0.34
Has fix
npmPublished 4 Aug 2026
Affects @onereach/step-run-snowflake-query | Versions =0.1.3
Has fix
npmPublished 4 Aug 2026
Affects @onereach/step-conversation | Versions =1.0.43
Has fix
npmPublished 4 Aug 2026
Affects @onereach/step-components | Versions =0.1.39
Has fix
npmPublished 4 Aug 2026
Affects @onereach/slack-helpers | Versions =1.0.5
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-validated-timestring-input | Versions =0.3.7
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-textinput | Versions =0.5.7
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-text-message | Versions =0.4.7
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-switch | Versions =0.4.7
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-step-chooser | Versions =0.4.6
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-select | Versions =0.1.5
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-radio-group | Versions =0.3.7
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-merge-tag-input | Versions =0.4.7
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-header | Versions =0.4.13=0.4.14
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-dropdown-simple | Versions =0.4.7
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-dropdown-advanced | Versions =0.4.7
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-divider | Versions =0.4.13
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-copyable-text | Versions =0.4.13
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-collapsible-group | Versions =0.6.6
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-checkbox | Versions =0.6.7
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-alert | Versions =0.4.13
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-a-button | Versions =0.0.5
Has fix
npmPublished 4 Aug 2026
Affects @onereach/salesforce-miaw-client | Versions =0.0.5
Has fix
npmPublished 4 Aug 2026