Supply Chain Incidents

MAL-2025-191372

Malicious code in @voiceflow/semantic-release-config (npm)

MAL-2025-191381

Malicious code in @voiceflow/utils-designer (npm)

MAL-2025-191250

Malicious code in @oku-ui/aspect-ratio (npm)

MAL-2025-191212

Malicious code in @dev-blinq/cucumber-js (npm)

MAL-2025-191255

Malicious code in @oku-ui/dialog (npm)

MAL-2025-191338

Malicious code in @voiceflow/circleci-config-sdk-orb-import (npm)

MAL-2025-191332

Malicious code in @voiceflow/anthropic (npm)

MAL-2025-191211

Malicious code in @dev-blinq/blinqioclient (npm)

MAL-2025-191351

Malicious code in @voiceflow/google-dfes-types (npm)

MAL-2025-191264

Malicious code in @oku-ui/portal (npm)

MAL-2025-191384

Malicious code in @voiceflow/vitest-config (npm)

MAL-2025-191388

Malicious code in @vucod/email (npm)

MAL-2025-191361

Malicious code in @voiceflow/nestjs-timeout (npm)

MAL-2025-191198

Malicious code in @browserbasehq/stagehand (npm)

MAL-2025-191370

Malicious code in @voiceflow/sdk-runtime (npm)

MAL-2025-191277

Malicious code in @oku-ui/toast (npm)

MAL-2025-191447

Malicious code in vf-oss-template (npm)

MAL-2025-191425

Malicious code in silgi (npm)

MAL-2025-191300

Malicious code in @posthog/zendesk-plugin (npm)

MAL-2025-191185

Malicious code in @alexcolls/nuxt-socket.io (npm)

MAL-2025-191267

Malicious code in @oku-ui/primitives-nuxt (npm)

MAL-2025-191302

Malicious code in @productdevbook/auth (npm)

MAL-2025-191421

Malicious code in selenium-session (npm)

MAL-2025-191179

Malicious code in @afetcan/api (npm)