Supply Chain Incidents

MAL-2025-191332

Malicious code in @voiceflow/anthropic (npm)

MAL-2025-191388

Malicious code in @vucod/email (npm)

MAL-2025-191211

Malicious code in @dev-blinq/blinqioclient (npm)

MAL-2025-191354

Malicious code in @voiceflow/logger (npm)

MAL-2025-191296

Malicious code in @posthog/migrator3000-plugin (npm)

MAL-2025-191361

Malicious code in @voiceflow/nestjs-timeout (npm)

MAL-2025-191349

Malicious code in @voiceflow/general-types (npm)

MAL-2025-191334

Malicious code in @voiceflow/backend-utils (npm)

MAL-2025-191395

Malicious code in eslint-config-kinvey-flex-service (npm)

MAL-2025-191196

Malicious code in @browserbasehq/mcp-server-browserbase (npm)

MAL-2025-191266

Malicious code in @oku-ui/primitive (npm)

MAL-2025-191393

Malicious code in dialogflow-es (npm)

MAL-2025-191404

Malicious code in quickswap-ads-list (npm)

MAL-2025-191366

Malicious code in @voiceflow/prettier-config (npm)

MAL-2025-191397

Malicious code in hyper-fullfacing (npm)

MAL-2025-191370

Malicious code in @voiceflow/sdk-runtime (npm)

MAL-2025-191269

Malicious code in @oku-ui/provide (npm)

MAL-2025-191190

Malicious code in @antstackio/json-to-graphql (npm)

MAL-2025-191375

Malicious code in @voiceflow/stitches-react (npm)

MAL-2025-191365

Malicious code in @voiceflow/pino-pretty (npm)

MAL-2025-191258

Malicious code in @oku-ui/focus-guards (npm)

MAL-2025-191288

Malicious code in @pergel/nuxt (npm)

MAL-2025-191379

Malicious code in @voiceflow/tsconfig (npm)

MAL-2025-191422

Malicious code in selenium-session-client (npm)