Supply Chain Incidents

MAL-2025-191421

Malicious code in selenium-session (npm)

MAL-2025-191266

Malicious code in @oku-ui/primitive (npm)

MAL-2025-191196

Malicious code in @browserbasehq/mcp-server-browserbase (npm)

MAL-2025-191362

Malicious code in @voiceflow/npm-package-json-lint-config (npm)

MAL-2025-191264

Malicious code in @oku-ui/portal (npm)

MAL-2025-191228

Malicious code in @huntersofbook/auth-vue (npm)

MAL-2025-191256

Malicious code in @oku-ui/direction (npm)

MAL-2025-191274

Malicious code in @oku-ui/slider (npm)

MAL-2025-191212

Malicious code in @dev-blinq/cucumber-js (npm)

MAL-2025-191350

Malicious code in @voiceflow/git-branch-check (npm)

MAL-2025-191233

Malicious code in @huntersofbook/ui (npm)

MAL-2025-191393

Malicious code in dialogflow-es (npm)

MAL-2025-191404

Malicious code in quickswap-ads-list (npm)

MAL-2025-191397

Malicious code in hyper-fullfacing (npm)

MAL-2025-191366

Malicious code in @voiceflow/prettier-config (npm)

MAL-2025-191368

Malicious code in @voiceflow/runtime (npm)

MAL-2025-191353

Malicious code in @voiceflow/husky-config (npm)

MAL-2025-191376

Malicious code in @voiceflow/storybook-config (npm)

MAL-2025-191319

Malicious code in @silgi/scalar (npm)

MAL-2025-191232

Malicious code in @huntersofbook/i18n (npm)

MAL-2025-191279

Malicious code in @oku-ui/toggle-group (npm)

MAL-2025-191292

Malicious code in @posthog/icons (npm)

MAL-2025-191255

Malicious code in @oku-ui/dialog (npm)

MAL-2025-191402

Malicious code in posthog-js (npm)