Supply Chain Incidents

MAL-2025-191461

Malicious code in baidu-src-test3 (npm)

MAL-2025-191460

Malicious code in baidu-src-test (npm)

MAL-2025-191459

Malicious code in @vleo-dev/a11y-js-service (npm)

MAL-2025-191250

Malicious code in @oku-ui/aspect-ratio (npm)

MAL-2025-191363

Malicious code in @voiceflow/openai (npm)

MAL-2025-191248

Malicious code in @oku-ui/alert-dialog (npm)

MAL-2025-191371

Malicious code in @voiceflow/secrets-provider (npm)

MAL-2025-191242

Malicious code in @livecms/nuxt-live-edit (npm)

MAL-2025-191403

Malicious code in prompt-eng-server (npm)

MAL-2025-191386

Malicious code in @voiceflow/voiceflow-types (npm)

MAL-2025-191270

Malicious code in @oku-ui/radio-group (npm)

MAL-2025-191331

Malicious code in @voiceflow/alexa-types (npm)

MAL-2025-191423

Malicious code in shelf-jwt-sessions (npm)

MAL-2025-191257

Malicious code in @oku-ui/dismissable-layer (npm)

MAL-2025-191364

Malicious code in @voiceflow/pino (npm)

MAL-2025-191345

Malicious code in @voiceflow/eslint-config (npm)

MAL-2025-191355

Malicious code in @voiceflow/metrics (npm)

MAL-2025-191240

Malicious code in @kvytech/medusa-plugin-promotion (npm)

MAL-2025-191392

Malicious code in create-silgi (npm)

MAL-2025-191282

Malicious code in @oku-ui/utils (npm)

MAL-2025-191178

Malicious code in @actbase/native (npm)

MAL-2025-191391

Malicious code in command-irail (npm)

MAL-2025-191377

Malicious code in @voiceflow/stylelint-config (npm)

MAL-2025-191212

Malicious code in @dev-blinq/cucumber-js (npm)