Supply Chain Incidents

MAL-2025-191425

Malicious code in silgi (npm)

MAL-2025-191188

Malicious code in @antstackio/express-graphql-proxy (npm)

MAL-2025-191294

Malicious code in @posthog/laudspeaker-plugin (npm)

MAL-2025-191268

Malicious code in @oku-ui/progress (npm)

MAL-2025-191259

Malicious code in @oku-ui/hover-card (npm)

MAL-2025-191390

Malicious code in ceviz (npm)

MAL-2025-191283

Malicious code in @oku-ui/visually-hidden (npm)

MAL-2025-191380

Malicious code in @voiceflow/tsconfig-paths (npm)

MAL-2025-191399

Malicious code in n8n-nodes-viral-app (npm)

MAL-2025-191291

Malicious code in @posthog/heartbeat-plugin (npm)

MAL-2025-191445

Malicious code in v-plausible (npm)

MAL-2025-191300

Malicious code in @posthog/zendesk-plugin (npm)

MAL-2025-191320

Malicious code in @silgi/yoga (npm)

MAL-2025-191241

Malicious code in @livecms/live-edit (npm)

MAL-2025-191367

Malicious code in @voiceflow/react-chat (npm)

MAL-2025-191349

Malicious code in @voiceflow/general-types (npm)

MAL-2025-191296

Malicious code in @posthog/migrator3000-plugin (npm)

MAL-2025-191354

Malicious code in @voiceflow/logger (npm)

MAL-2025-191385

Malicious code in @voiceflow/voice-types (npm)

MAL-2025-191185

Malicious code in @alexcolls/nuxt-socket.io (npm)

MAL-2025-191198

Malicious code in @browserbasehq/stagehand (npm)

MAL-2025-191267

Malicious code in @oku-ui/primitives-nuxt (npm)

MAL-2025-191395

Malicious code in eslint-config-kinvey-flex-service (npm)

MAL-2025-191447

Malicious code in vf-oss-template (npm)