See the full list of npm packages compromised in the "Keyv / Cacheable Supply Chain Compromise - Aug 2026" [View compromised packages].
Find out if you have vulnerabilities that put you at risk
Test your applicationsAPPLICATION
OPERATING SYSTEM
Affects @onereach/billing-shared | Versions =27.2.2=27.2.1
Has fix
npmPublished 4 Aug 2026
Affects @onereach/or-browser-next | Versions =0.0.11=0.0.12
Has fix
npmPublished 4 Aug 2026
Affects @onereach/salesforce-miaw-client | Versions =0.0.4=0.0.3
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-code | Versions =0.6.4=0.6.5
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-radio-group | Versions =0.3.6=0.3.5
Has fix
npmPublished 4 Aug 2026
Affects @onereach/lambda-invocation | Versions =1.2.2=1.2.1
Has fix
npmPublished 4 Aug 2026
Affects @onereach/ckeditor5-build-classic | Versions =30.0.1=30.0.2
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-textinput | Versions =0.5.5=0.5.6
Has fix
npmPublished 4 Aug 2026
Affects @or-sdk/markdowner | Versions =0.5.1=0.5.2
Has fix
npmPublished 4 Aug 2026
Affects @or-sdk/mcp-tools | Versions =0.5.2=0.5.3
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-step-chooser | Versions =0.4.4=0.4.5
Has fix
npmPublished 4 Aug 2026
Affects @onereach/cb-schema-translator | Versions =1.3.1=1.3.2
Has fix
npmPublished 4 Aug 2026
Affects conv-context-next | Versions =1.0.1=1.0.3=1.0.2
Has fix
npmPublished 4 Aug 2026
Affects @onereach/step-conversation | Versions =1.0.41=1.0.42
Has fix
npmPublished 4 Aug 2026
Affects @or-sdk/api-tokens-lambda | Versions =1.4.3=1.4.2
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-root | Versions =0.9.5=0.9.4
Has fix
npmPublished 4 Aug 2026
Affects @onereach/si-a-button | Versions =0.0.4=0.0.3
Has fix
npmPublished 4 Aug 2026
Affects @onereach/step-voice | Versions =7.0.33=7.0.32
Has fix
npmPublished 4 Aug 2026
Affects @onereach/orest-jest-presets | Versions =0.0.3=0.0.4
Has fix
npmPublished 4 Aug 2026
Affects example-js-project | Versions =1.0.4=1.0.2=1.0.3
Has fix
npmPublished 4 Aug 2026
Affects @or-sdk/data-hub-svc | Versions =2.3.5=2.3.6
Has fix
npmPublished 4 Aug 2026
Affects @onereach/idw-init-account-resources | Versions =1.0.2=1.0.1
Has fix
npmPublished 4 Aug 2026
Affects @onereach/step-run-snowflake-query | Versions =0.1.2=0.1.1
Has fix
npmPublished 4 Aug 2026
Affects @onereach/orest-vue-demi-vue3 | Versions =0.0.5=0.0.4
Has fix
npmPublished 4 Aug 2026
Affects @onereach/expression-components | Versions =9.1.1=9.1.2
Has fix
npmPublished 4 Aug 2026
Affects @or-sdk/library-types-v2 | Versions =9.0.1=9.0.2
Has fix
npmPublished 4 Aug 2026
Affects @onereach/or-sdk-agent-cli | Versions =0.0.7=0.0.6
Has fix
npmPublished 4 Aug 2026
Affects @onereach/postcss-scoped-selector | Versions =1.2.2=1.2.1
Has fix
npmPublished 4 Aug 2026
Affects @or-sdk/discovery | Versions =1.12.2=1.12.1
Has fix
npmPublished 4 Aug 2026
Affects @onereach/rwc-client | Versions =6.4.7=6.4.8
Has fix
npmPublished 4 Aug 2026