# Vulnerabilities published in 2024 - [MAL-2025-900](https://insights.sbomify.com/MAL-2025-900/): Malicious code in apache-airflow-providers-edge (PyPI) (malicious package) - [MAL-2025-846](https://insights.sbomify.com/MAL-2025-846/): Malicious code in lib-jitsi-meet-sample (npm) (malicious package) - [MAL-2025-842](https://insights.sbomify.com/MAL-2025-842/): Malicious code in jitsi-meet-load-test (npm) (malicious package) - [MAL-2025-8](https://insights.sbomify.com/MAL-2025-8/): Malicious code in 4m-clean-shopify-app (npm) (malicious package) - [MAL-2025-6622](https://insights.sbomify.com/MAL-2025-6622/): Malicious code in your-module-name (PyPI) (malicious package) - [MAL-2025-6600](https://insights.sbomify.com/MAL-2025-6600/): Malicious code in testpysecure (PyPI) (malicious package) - [MAL-2025-6584](https://insights.sbomify.com/MAL-2025-6584/): Malicious code in shiva123456 (PyPI) (malicious package) - [MAL-2025-6582](https://insights.sbomify.com/MAL-2025-6582/): Malicious code in sensadway (PyPI) (malicious package) - [MAL-2025-6580](https://insights.sbomify.com/MAL-2025-6580/): Malicious code in rwimodeling (PyPI) (malicious package) - [MAL-2025-6566](https://insights.sbomify.com/MAL-2025-6566/): Malicious code in piprce (PyPI) (malicious package) - [MAL-2025-6551](https://insights.sbomify.com/MAL-2025-6551/): Malicious code in murkh1111 (PyPI) (malicious package) - [MAL-2025-6536](https://insights.sbomify.com/MAL-2025-6536/): Malicious code in libspatialindex (PyPI) (malicious package) - [MAL-2025-6528](https://insights.sbomify.com/MAL-2025-6528/): Malicious code in jd-mlops (PyPI) (malicious package) - [MAL-2025-6526](https://insights.sbomify.com/MAL-2025-6526/): Malicious code in is-number-object (PyPI) (malicious package) - [MAL-2025-6525](https://insights.sbomify.com/MAL-2025-6525/): Malicious code in interasdasdnal-data-parser (PyPI) (malicious package) - [MAL-2025-6519](https://insights.sbomify.com/MAL-2025-6519/): Malicious code in greensadway (PyPI) (malicious package) - [MAL-2025-6516](https://insights.sbomify.com/MAL-2025-6516/): Malicious code in graphemer (PyPI) (malicious package) - [MAL-2025-6512](https://insights.sbomify.com/MAL-2025-6512/): Malicious code in google-appengine-ext (PyPI) (malicious package) - [MAL-2025-6511](https://insights.sbomify.com/MAL-2025-6511/): Malicious code in globrex (PyPI) (malicious package) - [MAL-2025-6510](https://insights.sbomify.com/MAL-2025-6510/): Malicious code in glob-to-regexp (PyPI) (malicious package) - [MAL-2025-6499](https://insights.sbomify.com/MAL-2025-6499/): Malicious code in elbloadmonitor (PyPI) (malicious package) - [MAL-2025-6480](https://insights.sbomify.com/MAL-2025-6480/): Malicious code in cloudx-base (PyPI) (malicious package) - [MAL-2025-6479](https://insights.sbomify.com/MAL-2025-6479/): Malicious code in cloudx-auth (PyPI) (malicious package) - [MAL-2025-6460](https://insights.sbomify.com/MAL-2025-6460/): Malicious code in babel-preset-current-node-syntax (PyPI) (malicious package) - [MAL-2025-6436](https://insights.sbomify.com/MAL-2025-6436/): Malicious code in ateslassia (PyPI) (malicious package) - [MAL-2025-6430](https://insights.sbomify.com/MAL-2025-6430/): Malicious code in alksdjpureranser (PyPI) (malicious package) - [MAL-2025-6428](https://insights.sbomify.com/MAL-2025-6428/): Malicious code in 0x000testqwe (PyPI) (malicious package) - [MAL-2025-5239](https://insights.sbomify.com/MAL-2025-5239/): Malicious code in youreallydontwantthispackage2132 (PyPI) (malicious package) - [MAL-2025-5144](https://insights.sbomify.com/MAL-2025-5144/): Malicious code in whel (PyPI) (malicious package) - [MAL-2025-5143](https://insights.sbomify.com/MAL-2025-5143/): Malicious code in whee11 (PyPI) (malicious package) - [MAL-2025-5132](https://insights.sbomify.com/MAL-2025-5132/): Malicious code in saml-helper (PyPI) (malicious package) - [MAL-2025-5131](https://insights.sbomify.com/MAL-2025-5131/): Malicious code in s3ffs (PyPI) (malicious package) - [MAL-2025-5125](https://insights.sbomify.com/MAL-2025-5125/): Malicious code in rapyd-logger (PyPI) (malicious package) - [MAL-2025-5117](https://insights.sbomify.com/MAL-2025-5117/): Malicious code in hackmiami (PyPI) (malicious package) - [MAL-2025-5116](https://insights.sbomify.com/MAL-2025-5116/): Malicious code in gwpythonsectt2 (PyPI) (malicious package) - [MAL-2025-5115](https://insights.sbomify.com/MAL-2025-5115/): Malicious code in gwpythonsectt1 (PyPI) (malicious package) - [MAL-2025-5114](https://insights.sbomify.com/MAL-2025-5114/): Malicious code in fsspecc (PyPI) (malicious package) - [MAL-2025-5108](https://insights.sbomify.com/MAL-2025-5108/): Malicious code in crypt0graphyy (PyPI) (malicious package) - [MAL-2025-5101](https://insights.sbomify.com/MAL-2025-5101/): Malicious code in c8tks94kspjyhtb (PyPI) (malicious package) - [MAL-2025-5100](https://insights.sbomify.com/MAL-2025-5100/): Malicious code in c8tks94kspjghtb (PyPI) (malicious package) - [MAL-2025-5099](https://insights.sbomify.com/MAL-2025-5099/): Malicious code in c8test (PyPI) (malicious package) - [MAL-2025-5097](https://insights.sbomify.com/MAL-2025-5097/): Malicious code in atlasctf-21-prod-22 (PyPI) (malicious package) - [MAL-2025-4700](https://insights.sbomify.com/MAL-2025-4700/): Malicious code in packagemurder (PyPI) (malicious package) - [MAL-2025-4699](https://insights.sbomify.com/MAL-2025-4699/): Malicious code in cugraph-service-client (PyPI) (malicious package) - [MAL-2025-4698](https://insights.sbomify.com/MAL-2025-4698/): Malicious code in cugraph-dgl (PyPI) (malicious package) - [MAL-2025-4666](https://insights.sbomify.com/MAL-2025-4666/): Malicious code in proto-google-cloud-dlp-v2beta1 (PyPI) (malicious package) - [MAL-2025-4665](https://insights.sbomify.com/MAL-2025-4665/): Malicious code in grpc-google-bigtable-v2 (PyPI) (malicious package) - [MAL-2025-4257](https://insights.sbomify.com/MAL-2025-4257/): Malicious code in vfsrcetest (PyPI) (malicious package) - [MAL-2025-4256](https://insights.sbomify.com/MAL-2025-4256/): Malicious code in vfsrce18 (PyPI) (malicious package) - [MAL-2025-4239](https://insights.sbomify.com/MAL-2025-4239/): Malicious code in rqeuets (PyPI) (malicious package) - [MAL-2025-4226](https://insights.sbomify.com/MAL-2025-4226/): Malicious code in merpe (PyPI) (malicious package) - [MAL-2025-4225](https://insights.sbomify.com/MAL-2025-4225/): Malicious code in merbe (PyPI) (malicious package) - [MAL-2025-4223](https://insights.sbomify.com/MAL-2025-4223/): Malicious code in mcp-xyz (PyPI) (malicious package) - [MAL-2025-4222](https://insights.sbomify.com/MAL-2025-4222/): Malicious code in kms-tls-sdk (PyPI) (malicious package) - [MAL-2025-4215](https://insights.sbomify.com/MAL-2025-4215/): Malicious code in discord-boteasy (PyPI) (malicious package) - [MAL-2025-4214](https://insights.sbomify.com/MAL-2025-4214/): Malicious code in deepseek-fake (PyPI) (malicious package) - [MAL-2025-4213](https://insights.sbomify.com/MAL-2025-4213/): Malicious code in ctftestsowwy (PyPI) (malicious package) - [MAL-2025-4210](https://insights.sbomify.com/MAL-2025-4210/): Malicious code in chosenrce18 (PyPI) (malicious package) - [MAL-2025-42](https://insights.sbomify.com/MAL-2025-42/): Malicious code in littelbitx0 (PyPI) (malicious package) - [MAL-2025-41756](https://insights.sbomify.com/MAL-2025-41756/): Malicious code in rtxt-dep4 (PyPI) (malicious package) - [MAL-2025-41755](https://insights.sbomify.com/MAL-2025-41755/): Malicious code in rtxt-dep3 (PyPI) (malicious package) - [MAL-2025-41690](https://insights.sbomify.com/MAL-2025-41690/): Malicious code in incaperror (PyPI) (malicious package) - [MAL-2025-3863](https://insights.sbomify.com/MAL-2025-3863/): Malicious code in c8tsdk (PyPI) (malicious package) - [MAL-2025-3600](https://insights.sbomify.com/MAL-2025-3600/): Malicious code in hello-wordl (PyPI) (malicious package) - [MAL-2025-36](https://insights.sbomify.com/MAL-2025-36/): Malicious code in rtpoc1 (PyPI) (malicious package) - [MAL-2025-3565](https://insights.sbomify.com/MAL-2025-3565/): Malicious code in soultracker (PyPI) (malicious package) - [MAL-2025-3471](https://insights.sbomify.com/MAL-2025-3471/): Malicious code in story-mcp-hub (PyPI) (malicious package) - [MAL-2025-3466](https://insights.sbomify.com/MAL-2025-3466/): Malicious code in requests-rapidl (PyPI) (malicious package) - [MAL-2025-3465](https://insights.sbomify.com/MAL-2025-3465/): Malicious code in requests-rapid (PyPI) (malicious package) - [MAL-2025-3464](https://insights.sbomify.com/MAL-2025-3464/): Malicious code in request-wizard (PyPI) (malicious package) - [MAL-2025-3458](https://insights.sbomify.com/MAL-2025-3458/): Malicious code in pydiolag6688 (PyPI) (malicious package) - [MAL-2025-3453](https://insights.sbomify.com/MAL-2025-3453/): Malicious code in package-346234293 (PyPI) (malicious package) - [MAL-2025-3452](https://insights.sbomify.com/MAL-2025-3452/): Malicious code in mytonctrl (PyPI) (malicious package) - [MAL-2025-3451](https://insights.sbomify.com/MAL-2025-3451/): Malicious code in multiutils (PyPI) (malicious package) - [MAL-2025-3278](https://insights.sbomify.com/MAL-2025-3278/): Malicious code in subdomainer (PyPI) (malicious package) - [MAL-2025-3208](https://insights.sbomify.com/MAL-2025-3208/): Malicious code in quizdom (PyPI) (malicious package) - [MAL-2025-3018](https://insights.sbomify.com/MAL-2025-3018/): Malicious code in whalebone7-poc (PyPI) (malicious package) - [MAL-2025-3005](https://insights.sbomify.com/MAL-2025-3005/): Malicious code in szn-search-mlops-serp-downloader (PyPI) (malicious package) - [MAL-2025-2992](https://insights.sbomify.com/MAL-2025-2992/): Malicious code in python-dateutil-malicious (PyPI) (malicious package) - [MAL-2025-2984](https://insights.sbomify.com/MAL-2025-2984/): Malicious code in package-name-here (PyPI) (malicious package) - [MAL-2025-2983](https://insights.sbomify.com/MAL-2025-2983/): Malicious code in otc-metadata (PyPI) (malicious package) - [MAL-2025-2981](https://insights.sbomify.com/MAL-2025-2981/): Malicious code in opengrep (PyPI) (malicious package) - [MAL-2025-2979](https://insights.sbomify.com/MAL-2025-2979/): Malicious code in nifty-cli (PyPI) (malicious package) - [MAL-2025-2964](https://insights.sbomify.com/MAL-2025-2964/): Malicious code in flamepro (PyPI) (malicious package) - [MAL-2025-2961](https://insights.sbomify.com/MAL-2025-2961/): Malicious code in evil-pkg2 (PyPI) (malicious package) - [MAL-2025-2960](https://insights.sbomify.com/MAL-2025-2960/): Malicious code in evil-pkg1 (PyPI) (malicious package) - [MAL-2025-2959](https://insights.sbomify.com/MAL-2025-2959/): Malicious code in evil-pkg (PyPI) (malicious package) - [MAL-2025-2955](https://insights.sbomify.com/MAL-2025-2955/): Malicious code in dbsxrchpro (PyPI) (malicious package) - [MAL-2025-2943](https://insights.sbomify.com/MAL-2025-2943/): Malicious code in canvas-crawler (PyPI) (malicious package) - [MAL-2025-2011](https://insights.sbomify.com/MAL-2025-2011/): Malicious code in wasig4321 (PyPI) (malicious package) - [MAL-2025-2010](https://insights.sbomify.com/MAL-2025-2010/): Malicious code in waseem4321 (PyPI) (malicious package) - [MAL-2025-2009](https://insights.sbomify.com/MAL-2025-2009/): Malicious code in w7-poc (PyPI) (malicious package) - [MAL-2025-1997](https://insights.sbomify.com/MAL-2025-1997/): Malicious code in testospkg (PyPI) (malicious package) - [MAL-2025-1976](https://insights.sbomify.com/MAL-2025-1976/): Malicious code in googleapis-googleapis-grpc-python (PyPI) (malicious package) - [MAL-2025-1973](https://insights.sbomify.com/MAL-2025-1973/): Malicious code in example-vizsla-tutorial (PyPI) (malicious package) - [MAL-2025-1971](https://insights.sbomify.com/MAL-2025-1971/): Malicious code in deepseekai (PyPI) (malicious package) - [MAL-2025-1970](https://insights.sbomify.com/MAL-2025-1970/): Malicious code in deepseeek (PyPI) (malicious package) - [MAL-2025-1969](https://insights.sbomify.com/MAL-2025-1969/): Malicious code in d5e54ncy1337 (PyPI) (malicious package) - [MAL-2025-1968](https://insights.sbomify.com/MAL-2025-1968/): Malicious code in d5e54nc32y1337 (PyPI) (malicious package) - [MAL-2025-1961](https://insights.sbomify.com/MAL-2025-1961/): Malicious code in akatest (PyPI) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2024/page/6/