Supply Chain Incidents

MAL-2025-191463

Malicious code in initial-path (npm)

MAL-2025-191462

Malicious code in react-svgs-helper (npm)

MAL-2025-191461

Malicious code in baidu-src-test3 (npm)

MAL-2025-191460

Malicious code in baidu-src-test (npm)

MAL-2025-191459

Malicious code in @vleo-dev/a11y-js-service (npm)

MAL-2025-191421

Malicious code in selenium-session (npm)

MAL-2025-191345

Malicious code in @voiceflow/eslint-config (npm)

MAL-2025-191355

Malicious code in @voiceflow/metrics (npm)

MAL-2025-191228

Malicious code in @huntersofbook/auth-vue (npm)

MAL-2025-191188

Malicious code in @antstackio/express-graphql-proxy (npm)

MAL-2025-191402

Malicious code in posthog-js (npm)

MAL-2025-191301

Malicious code in @productdevbook/animejs-vue (npm)

MAL-2025-191369

Malicious code in @voiceflow/runtime-client-js (npm)

MAL-2025-191389

Malicious code in axios-cancelable (npm)

MAL-2025-191376

Malicious code in @voiceflow/storybook-config (npm)

MAL-2025-191276

Malicious code in @oku-ui/tabs (npm)

MAL-2025-191340

Malicious code in @voiceflow/common (npm)

MAL-2025-191382

Malicious code in @voiceflow/verror (npm)

MAL-2025-191232

Malicious code in @huntersofbook/i18n (npm)

MAL-2025-191282

Malicious code in @oku-ui/utils (npm)

MAL-2025-191284

Malicious code in @pergel/cli (npm)

MAL-2025-191259

Malicious code in @oku-ui/hover-card (npm)

MAL-2025-191390

Malicious code in ceviz (npm)

MAL-2025-191289

Malicious code in @posthog/bitbucket-release-tracker (npm)