Supply Chain Incidents

MAL-2025-191391

Malicious code in command-irail (npm)

MAL-2025-191433

Malicious code in tcsp (npm)

MAL-2025-191401

Malicious code in pkg-readme (npm)

MAL-2025-191374

Malicious code in @voiceflow/slate-serializer (npm)

MAL-2025-191369

Malicious code in @voiceflow/runtime-client-js (npm)

MAL-2025-191274

Malicious code in @oku-ui/slider (npm)

MAL-2025-191360

Malicious code in @voiceflow/nestjs-redis (npm)

MAL-2025-191273

Malicious code in @oku-ui/separator (npm)

MAL-2025-191396

Malicious code in gatsby-plugin-antd (npm)

MAL-2025-191344

Malicious code in @voiceflow/encryption (npm)

MAL-2025-191179

Malicious code in @afetcan/api (npm)

MAL-2025-191275

Malicious code in @oku-ui/switch (npm)

MAL-2025-191347

Malicious code in @voiceflow/exception (npm)

MAL-2025-191248

Malicious code in @oku-ui/alert-dialog (npm)

MAL-2025-191371

Malicious code in @voiceflow/secrets-provider (npm)

MAL-2025-191251

Malicious code in @oku-ui/avatar (npm)

MAL-2025-191331

Malicious code in @voiceflow/alexa-types (npm)

MAL-2025-191336

Malicious code in @voiceflow/body-parser (npm)

MAL-2025-191334

Malicious code in @voiceflow/backend-utils (npm)

MAL-2025-191364

Malicious code in @voiceflow/pino (npm)

MAL-2025-191281

Malicious code in @oku-ui/tooltip (npm)

MAL-2025-191240

Malicious code in @kvytech/medusa-plugin-promotion (npm)

MAL-2025-191268

Malicious code in @oku-ui/progress (npm)

MAL-2025-191283

Malicious code in @oku-ui/visually-hidden (npm)