Supply Chain Incidents

MAL-2025-191354

Malicious code in @voiceflow/logger (npm)

MAL-2025-191296

Malicious code in @posthog/migrator3000-plugin (npm)

MAL-2025-191376

Malicious code in @voiceflow/storybook-config (npm)

MAL-2025-191276

Malicious code in @oku-ui/tabs (npm)

MAL-2025-191338

Malicious code in @voiceflow/circleci-config-sdk-orb-import (npm)

MAL-2025-191369

Malicious code in @voiceflow/runtime-client-js (npm)

MAL-2025-191332

Malicious code in @voiceflow/anthropic (npm)

MAL-2025-191211

Malicious code in @dev-blinq/blinqioclient (npm)

MAL-2025-191256

Malicious code in @oku-ui/direction (npm)

MAL-2025-191361

Malicious code in @voiceflow/nestjs-timeout (npm)

MAL-2025-191388

Malicious code in @vucod/email (npm)

MAL-2025-191266

Malicious code in @oku-ui/primitive (npm)

MAL-2025-191279

Malicious code in @oku-ui/toggle-group (npm)

MAL-2025-191261

Malicious code in @oku-ui/motion-nuxt (npm)

MAL-2025-191382

Malicious code in @voiceflow/verror (npm)

MAL-2025-191358

Malicious code in @voiceflow/nestjs-mongodb (npm)

MAL-2025-191370

Malicious code in @voiceflow/sdk-runtime (npm)

MAL-2025-191400

Malicious code in nuxt-keycloak (npm)

MAL-2025-191372

Malicious code in @voiceflow/semantic-release-config (npm)

MAL-2025-191285

Malicious code in @pergel/module-box (npm)

MAL-2025-191284

Malicious code in @pergel/cli (npm)

MAL-2025-191319

Malicious code in @silgi/scalar (npm)

MAL-2025-191249

Malicious code in @oku-ui/arrow (npm)

MAL-2025-191351

Malicious code in @voiceflow/google-dfes-types (npm)