Supply Chain Incidents

MAL-2025-191336

Malicious code in @voiceflow/body-parser (npm)

MAL-2025-191278

Malicious code in @oku-ui/toggle (npm)

MAL-2025-191387

Malicious code in @voiceflow/widget (npm)

MAL-2025-191281

Malicious code in @oku-ui/tooltip (npm)

MAL-2025-191304

Malicious code in @productdevbook/motion (npm)

MAL-2025-191283

Malicious code in @oku-ui/visually-hidden (npm)

MAL-2025-191268

Malicious code in @oku-ui/progress (npm)

MAL-2025-191332

Malicious code in @voiceflow/anthropic (npm)

MAL-2025-191338

Malicious code in @voiceflow/circleci-config-sdk-orb-import (npm)

MAL-2025-191211

Malicious code in @dev-blinq/blinqioclient (npm)

MAL-2025-191388

Malicious code in @vucod/email (npm)

MAL-2025-191196

Malicious code in @browserbasehq/mcp-server-browserbase (npm)

MAL-2025-191361

Malicious code in @voiceflow/nestjs-timeout (npm)

MAL-2025-191296

Malicious code in @posthog/migrator3000-plugin (npm)

MAL-2025-191354

Malicious code in @voiceflow/logger (npm)

MAL-2025-191349

Malicious code in @voiceflow/general-types (npm)

MAL-2025-191395

Malicious code in eslint-config-kinvey-flex-service (npm)

MAL-2025-191334

Malicious code in @voiceflow/backend-utils (npm)

MAL-2025-191266

Malicious code in @oku-ui/primitive (npm)

MAL-2025-191393

Malicious code in dialogflow-es (npm)

MAL-2025-191404

Malicious code in quickswap-ads-list (npm)

MAL-2025-191366

Malicious code in @voiceflow/prettier-config (npm)

MAL-2025-191397

Malicious code in hyper-fullfacing (npm)

MAL-2025-191370

Malicious code in @voiceflow/sdk-runtime (npm)