Supply Chain Incidents

MAL-2025-191390

Malicious code in ceviz (npm)

MAL-2025-191359

Malicious code in @voiceflow/nestjs-rate-limit (npm)

MAL-2025-191259

Malicious code in @oku-ui/hover-card (npm)

MAL-2025-191210

Malicious code in @dev-blinq/ai-qa-logic (npm)

MAL-2025-191399

Malicious code in n8n-nodes-viral-app (npm)

MAL-2025-191291

Malicious code in @posthog/heartbeat-plugin (npm)

MAL-2025-191445

Malicious code in v-plausible (npm)

MAL-2025-191320

Malicious code in @silgi/yoga (npm)

MAL-2025-191423

Malicious code in shelf-jwt-sessions (npm)

MAL-2025-191189

Malicious code in @antstackio/graphql-body-parser (npm)

MAL-2025-191388

Malicious code in @vucod/email (npm)

MAL-2025-191367

Malicious code in @voiceflow/react-chat (npm)

MAL-2025-191271

Malicious code in @oku-ui/roving-focus (npm)

MAL-2025-191262

Malicious code in @oku-ui/popover (npm)

MAL-2025-191385

Malicious code in @voiceflow/voice-types (npm)

MAL-2025-191253

Malicious code in @oku-ui/collapsible (npm)

MAL-2025-191198

Malicious code in @browserbasehq/stagehand (npm)

MAL-2025-191386

Malicious code in @voiceflow/voiceflow-types (npm)

MAL-2025-191290

Malicious code in @posthog/filter-out-plugin (npm)

MAL-2025-191180

Malicious code in @afetcan/storage (npm)

MAL-2025-191297

Malicious code in @posthog/netdata-event-processing (npm)

MAL-2025-191447

Malicious code in vf-oss-template (npm)

MAL-2025-191357

Malicious code in @voiceflow/nestjs-common (npm)

MAL-2025-191212

Malicious code in @dev-blinq/cucumber-js (npm)