Supply Chain Incidents

MAL-2025-191251

Malicious code in @oku-ui/avatar (npm)

MAL-2025-191288

Malicious code in @pergel/nuxt (npm)

MAL-2025-191365

Malicious code in @voiceflow/pino-pretty (npm)

MAL-2025-191275

Malicious code in @oku-ui/switch (npm)

MAL-2025-191385

Malicious code in @voiceflow/voice-types (npm)

MAL-2025-191301

Malicious code in @productdevbook/animejs-vue (npm)

MAL-2025-191186

Malicious code in @alexcolls/nuxt-ux (npm)

MAL-2025-191379

Malicious code in @voiceflow/tsconfig (npm)

MAL-2025-191433

Malicious code in tcsp (npm)

MAL-2025-191359

Malicious code in @voiceflow/nestjs-rate-limit (npm)

MAL-2025-191394

Malicious code in drop-events-on-property-plugin (npm)

MAL-2025-191198

Malicious code in @browserbasehq/stagehand (npm)

MAL-2025-191422

Malicious code in selenium-session-client (npm)

MAL-2025-191210

Malicious code in @dev-blinq/ai-qa-logic (npm)

MAL-2025-191447

Malicious code in vf-oss-template (npm)

MAL-2025-191401

Malicious code in pkg-readme (npm)

MAL-2025-191380

Malicious code in @voiceflow/tsconfig-paths (npm)

MAL-2025-191241

Malicious code in @livecms/live-edit (npm)

MAL-2025-191233

Malicious code in @huntersofbook/ui (npm)

MAL-2025-191189

Malicious code in @antstackio/graphql-body-parser (npm)

MAL-2025-191196

Malicious code in @browserbasehq/mcp-server-browserbase (npm)

MAL-2025-191413

Malicious code in ra-auth-firebase (npm)

MAL-2025-191192

Malicious code in @bdkinc/knex-ibmi (npm)

MAL-2025-191450

Malicious code in @axinom/mosaic-cli (npm)