Supply Chain Incidents

MAL-2025-191276

Malicious code in @oku-ui/tabs (npm)

MAL-2025-191388

Malicious code in @vucod/email (npm)

MAL-2025-191354

Malicious code in @voiceflow/logger (npm)

MAL-2025-191296

Malicious code in @posthog/migrator3000-plugin (npm)

MAL-2025-191361

Malicious code in @voiceflow/nestjs-timeout (npm)

MAL-2025-191255

Malicious code in @oku-ui/dialog (npm)

MAL-2025-191279

Malicious code in @oku-ui/toggle-group (npm)

MAL-2025-191261

Malicious code in @oku-ui/motion-nuxt (npm)

MAL-2025-191369

Malicious code in @voiceflow/runtime-client-js (npm)

MAL-2025-191382

Malicious code in @voiceflow/verror (npm)

MAL-2025-191376

Malicious code in @voiceflow/storybook-config (npm)

MAL-2025-191358

Malicious code in @voiceflow/nestjs-mongodb (npm)

MAL-2025-191372

Malicious code in @voiceflow/semantic-release-config (npm)

MAL-2025-191370

Malicious code in @voiceflow/sdk-runtime (npm)

MAL-2025-191400

Malicious code in nuxt-keycloak (npm)

MAL-2025-191284

Malicious code in @pergel/cli (npm)

MAL-2025-191197

Malicious code in @browserbasehq/sdk-functions (npm)

MAL-2025-191285

Malicious code in @pergel/module-box (npm)

MAL-2025-191249

Malicious code in @oku-ui/arrow (npm)

MAL-2025-191351

Malicious code in @voiceflow/google-dfes-types (npm)

MAL-2025-191384

Malicious code in @voiceflow/vitest-config (npm)

MAL-2025-191289

Malicious code in @posthog/bitbucket-release-tracker (npm)

MAL-2025-191319

Malicious code in @silgi/scalar (npm)

MAL-2025-191381

Malicious code in @voiceflow/utils-designer (npm)