Supply Chain Incidents

MAL-2025-191423

Malicious code in shelf-jwt-sessions (npm)

MAL-2025-191363

Malicious code in @voiceflow/openai (npm)

MAL-2025-191178

Malicious code in @actbase/native (npm)

MAL-2025-191240

Malicious code in @kvytech/medusa-plugin-promotion (npm)

MAL-2025-191391

Malicious code in command-irail (npm)

MAL-2025-191392

Malicious code in create-silgi (npm)

MAL-2025-191335

Malicious code in @voiceflow/base-types (npm)

MAL-2025-191264

Malicious code in @oku-ui/portal (npm)

MAL-2025-191348

Malicious code in @voiceflow/fetch (npm)

MAL-2025-191377

Malicious code in @voiceflow/stylelint-config (npm)

MAL-2025-191179

Malicious code in @afetcan/api (npm)

MAL-2025-191374

Malicious code in @voiceflow/slate-serializer (npm)

MAL-2025-191385

Malicious code in @voiceflow/voice-types (npm)

MAL-2025-191360

Malicious code in @voiceflow/nestjs-redis (npm)

MAL-2025-191319

Malicious code in @silgi/scalar (npm)

MAL-2025-191344

Malicious code in @voiceflow/encryption (npm)

MAL-2025-191339

Malicious code in @voiceflow/commitlint-config (npm)

MAL-2025-191249

Malicious code in @oku-ui/arrow (npm)

MAL-2025-191383

Malicious code in @voiceflow/vite-config (npm)

MAL-2025-191396

Malicious code in gatsby-plugin-antd (npm)

MAL-2025-191352

Malicious code in @voiceflow/google-types (npm)

MAL-2025-191214

Malicious code in @dev-blinq/ui-systems (npm)

MAL-2025-191447

Malicious code in vf-oss-template (npm)

MAL-2025-191347

Malicious code in @voiceflow/exception (npm)