Supply Chain Incidents

MAL-2025-191433

Malicious code in tcsp (npm)

MAL-2025-191401

Malicious code in pkg-readme (npm)

MAL-2025-191333

Malicious code in @voiceflow/api-sdk (npm)

MAL-2025-191369

Malicious code in @voiceflow/runtime-client-js (npm)

MAL-2025-191381

Malicious code in @voiceflow/utils-designer (npm)

MAL-2025-191356

Malicious code in @voiceflow/natural-language-commander (npm)

MAL-2025-191335

Malicious code in @voiceflow/base-types (npm)

MAL-2025-191374

Malicious code in @voiceflow/slate-serializer (npm)

MAL-2025-191295

Malicious code in @posthog/lemon-ui (npm)

MAL-2025-191248

Malicious code in @oku-ui/alert-dialog (npm)

MAL-2025-191371

Malicious code in @voiceflow/secrets-provider (npm)

MAL-2025-191253

Malicious code in @oku-ui/collapsible (npm)

MAL-2025-191186

Malicious code in @alexcolls/nuxt-ux (npm)

MAL-2025-191394

Malicious code in drop-events-on-property-plugin (npm)

MAL-2025-191251

Malicious code in @oku-ui/avatar (npm)

MAL-2025-191360

Malicious code in @voiceflow/nestjs-redis (npm)

MAL-2025-191331

Malicious code in @voiceflow/alexa-types (npm)

MAL-2025-191364

Malicious code in @voiceflow/pino (npm)

MAL-2025-191275

Malicious code in @oku-ui/switch (npm)

MAL-2025-191240

Malicious code in @kvytech/medusa-plugin-promotion (npm)

MAL-2025-191396

Malicious code in gatsby-plugin-antd (npm)

MAL-2025-191344

Malicious code in @voiceflow/encryption (npm)

MAL-2025-191297

Malicious code in @posthog/netdata-event-processing (npm)

MAL-2025-191290

Malicious code in @posthog/filter-out-plugin (npm)