Supply Chain Incidents

MAL-2025-191461

Malicious code in baidu-src-test3 (npm)

MAL-2025-191460

Malicious code in baidu-src-test (npm)

MAL-2025-191459

Malicious code in @vleo-dev/a11y-js-service (npm)

MAL-2025-191276

Malicious code in @oku-ui/tabs (npm)

MAL-2025-191382

Malicious code in @voiceflow/verror (npm)

MAL-2025-191284

Malicious code in @pergel/cli (npm)

MAL-2025-191289

Malicious code in @posthog/bitbucket-release-tracker (npm)

MAL-2025-191357

Malicious code in @voiceflow/nestjs-common (npm)

MAL-2025-191378

Malicious code in @voiceflow/test-common (npm)

MAL-2025-191363

Malicious code in @voiceflow/openai (npm)

MAL-2025-191351

Malicious code in @voiceflow/google-dfes-types (npm)

MAL-2025-191341

Malicious code in @voiceflow/default-prompt-wrappers (npm)

MAL-2025-191254

Malicious code in @oku-ui/collection (npm)

MAL-2025-191178

Malicious code in @actbase/native (npm)

MAL-2025-191391

Malicious code in command-irail (npm)

MAL-2025-191273

Malicious code in @oku-ui/separator (npm)

MAL-2025-191285

Malicious code in @pergel/module-box (npm)

MAL-2025-191286

Malicious code in @pergel/module-graphql (npm)

MAL-2025-191384

Malicious code in @voiceflow/vitest-config (npm)

MAL-2025-191398

Malicious code in my-saeed-lib (npm)

MAL-2025-191301

Malicious code in @productdevbook/animejs-vue (npm)

MAL-2025-191403

Malicious code in prompt-eng-server (npm)

MAL-2025-191433

Malicious code in tcsp (npm)

MAL-2025-191401

Malicious code in pkg-readme (npm)