Supply Chain Incidents

MAL-2025-191357

Malicious code in @voiceflow/nestjs-common (npm)

MAL-2025-191212

Malicious code in @dev-blinq/cucumber-js (npm)

MAL-2025-191255

Malicious code in @oku-ui/dialog (npm)

MAL-2025-191196

Malicious code in @browserbasehq/mcp-server-browserbase (npm)

MAL-2025-191362

Malicious code in @voiceflow/npm-package-json-lint-config (npm)

MAL-2025-191356

Malicious code in @voiceflow/natural-language-commander (npm)

MAL-2025-191350

Malicious code in @voiceflow/git-branch-check (npm)

MAL-2025-191361

Malicious code in @voiceflow/nestjs-timeout (npm)

MAL-2025-191345

Malicious code in @voiceflow/eslint-config (npm)

MAL-2025-191355

Malicious code in @voiceflow/metrics (npm)

MAL-2025-191346

Malicious code in @voiceflow/eslint-plugin (npm)

MAL-2025-191376

Malicious code in @voiceflow/storybook-config (npm)

MAL-2025-191252

Malicious code in @oku-ui/checkbox (npm)

MAL-2025-191232

Malicious code in @huntersofbook/i18n (npm)

MAL-2025-191292

Malicious code in @posthog/icons (npm)

MAL-2025-191228

Malicious code in @huntersofbook/auth-vue (npm)

MAL-2025-191264

Malicious code in @oku-ui/portal (npm)

MAL-2025-191402

Malicious code in posthog-js (npm)

MAL-2025-191272

Malicious code in @oku-ui/scroll-area (npm)

MAL-2025-191294

Malicious code in @posthog/laudspeaker-plugin (npm)

MAL-2025-191187

Malicious code in @antstackio/eslint-config-antstack (npm)

MAL-2025-191293

Malicious code in @posthog/intercom-plugin (npm)

MAL-2025-191389

Malicious code in axios-cancelable (npm)

MAL-2025-191382

Malicious code in @voiceflow/verror (npm)