# Vulnerabilities published in 2025


- [MAL-2025-49336](https://insights.sbomify.com/MAL-2025-49336/): Malicious code in dowload_ebok_life_on_earth_by_mike_dooley_sncwl (npm) (malicious package)
- [MAL-2025-49335](https://insights.sbomify.com/MAL-2025-49335/): Malicious code in dowload_ebok_before_dawn_vampire_fallen_book_1_by_morgan_rice_fjwc4 (npm) (malicious package)
- [MAL-2025-49334](https://insights.sbomify.com/MAL-2025-49334/): Malicious code in dowload_ebok_a_guerra_de_hitler_e_o_horror_do_holocausto_by_scott_s_f_meaker_k644u (npm) (malicious package)
- [MAL-2025-49333](https://insights.sbomify.com/MAL-2025-49333/): Malicious code in crediteligibilityserv (npm) (malicious package)
- [MAL-2025-49332](https://insights.sbomify.com/MAL-2025-49332/): Malicious code in capes-template-angular (npm) (malicious package)
- [MAL-2025-49331](https://insights.sbomify.com/MAL-2025-49331/): Malicious code in 8jfiesaf83 (npm) (malicious package)
- [MAL-2025-49330](https://insights.sbomify.com/MAL-2025-49330/): Malicious code in wdk-pricing-provider (npm) (malicious package)
- [MAL-2025-4933](https://insights.sbomify.com/MAL-2025-4933/): Malicious code in cmp-spid-login (npm) (malicious package)
- [MAL-2025-49329](https://insights.sbomify.com/MAL-2025-49329/): Malicious code in react-ui-animates (npm) (malicious package)
- [MAL-2025-49328](https://insights.sbomify.com/MAL-2025-49328/): Malicious code in parallel-coordinates (npm) (malicious package)
- [MAL-2025-49327](https://insights.sbomify.com/MAL-2025-49327/): Malicious code in orderly-network-config (npm) (malicious package)
- [MAL-2025-49326](https://insights.sbomify.com/MAL-2025-49326/): Malicious code in monophonic (npm) (malicious package)
- [MAL-2025-49325](https://insights.sbomify.com/MAL-2025-49325/): Malicious code in monoblast (npm) (malicious package)
- [MAL-2025-49324](https://insights.sbomify.com/MAL-2025-49324/): Malicious code in make-vis-flexible (npm) (malicious package)
- [MAL-2025-49323](https://insights.sbomify.com/MAL-2025-49323/): Malicious code in kingasd (npm) (malicious package)
- [MAL-2025-49322](https://insights.sbomify.com/MAL-2025-49322/): Malicious code in containerization-assist (npm) (malicious package)
- [MAL-2025-49321](https://insights.sbomify.com/MAL-2025-49321/): Malicious code in axis-tools (npm) (malicious package)
- [MAL-2025-49320](https://insights.sbomify.com/MAL-2025-49320/): Malicious code in python-requirements-inspector (PyPI) (malicious package)
- [MAL-2025-4932](https://insights.sbomify.com/MAL-2025-4932/): Malicious code in uniswap-v4-scratchpad-poc (npm) (malicious package)
- [MAL-2025-49319](https://insights.sbomify.com/MAL-2025-49319/): Malicious code in web3-1-4 (npm) (malicious package)
- [MAL-2025-49318](https://insights.sbomify.com/MAL-2025-49318/): Malicious code in stark-recurser (npm) (malicious package)
- [MAL-2025-49317](https://insights.sbomify.com/MAL-2025-49317/): Malicious code in solc_0.5.3 (npm) (malicious package)
- [MAL-2025-49316](https://insights.sbomify.com/MAL-2025-49316/): Malicious code in my-team-tools (npm) (malicious package)
- [MAL-2025-49315](https://insights.sbomify.com/MAL-2025-49315/): Malicious code in mbed-js-ble (npm) (malicious package)
- [MAL-2025-49314](https://insights.sbomify.com/MAL-2025-49314/): Malicious code in mbed-js (npm) (malicious package)
- [MAL-2025-49313](https://insights.sbomify.com/MAL-2025-49313/): Malicious code in fec-cms (npm) (malicious package)
- [MAL-2025-49312](https://insights.sbomify.com/MAL-2025-49312/): Malicious code in ethers-5 (npm) (malicious package)
- [MAL-2025-49311](https://insights.sbomify.com/MAL-2025-49311/): Malicious code in balancer-labs-sor-v1 (npm) (malicious package)
- [MAL-2025-49310](https://insights.sbomify.com/MAL-2025-49310/): Malicious code in faker-python (PyPI) (malicious package)
- [MAL-2025-4931](https://insights.sbomify.com/MAL-2025-4931/): Malicious code in volehai-poc (npm) (malicious package)
- [MAL-2025-49309](https://insights.sbomify.com/MAL-2025-49309/): Malicious code in webswing-directdraw-javascript (npm) (malicious package)
- [MAL-2025-49308](https://insights.sbomify.com/MAL-2025-49308/): Malicious code in u8ymp15aglfp7y (npm) (malicious package)
- [MAL-2025-49307](https://insights.sbomify.com/MAL-2025-49307/): Malicious code in sechub-openapi-typescript (npm) (malicious package)
- [MAL-2025-49306](https://insights.sbomify.com/MAL-2025-49306/): Malicious code in sechub-openapi-ts-client (npm) (malicious package)
- [MAL-2025-49305](https://insights.sbomify.com/MAL-2025-49305/): Malicious code in radial-chart (npm) (malicious package)
- [MAL-2025-49304](https://insights.sbomify.com/MAL-2025-49304/): Malicious code in kubeflow (npm) (malicious package)
- [MAL-2025-49303](https://insights.sbomify.com/MAL-2025-49303/): Malicious code in baseline-server (npm) (malicious package)
- [MAL-2025-49302](https://insights.sbomify.com/MAL-2025-49302/): Malicious code in vity-toolkit (npm) (malicious package)
- [MAL-2025-49301](https://insights.sbomify.com/MAL-2025-49301/): Malicious code in spectral-utils (npm) (malicious package)
- [MAL-2025-49300](https://insights.sbomify.com/MAL-2025-49300/): Malicious code in new-route-matrix (npm) (malicious package)
- [MAL-2025-4930](https://insights.sbomify.com/MAL-2025-4930/): Malicious code in os-apps-ui-curvelibrary (npm) (malicious package)
- [MAL-2025-493](https://insights.sbomify.com/MAL-2025-493/): Malicious code in iberia-sdk (npm) (malicious package)
- [MAL-2025-49299](https://insights.sbomify.com/MAL-2025-49299/): Malicious code in gunpowder-ghost-curse (npm) (malicious package)
- [MAL-2025-49298](https://insights.sbomify.com/MAL-2025-49298/): Malicious code in frontend-buenaspracticas (npm) (malicious package)
- [MAL-2025-49297](https://insights.sbomify.com/MAL-2025-49297/): Malicious code in express-document-sdk (npm) (malicious package)
- [MAL-2025-49296](https://insights.sbomify.com/MAL-2025-49296/): Malicious code in ecto-utils (npm) (malicious package)
- [MAL-2025-49295](https://insights.sbomify.com/MAL-2025-49295/): Malicious code in dx_auth2_app (npm) (malicious package)
- [MAL-2025-49294](https://insights.sbomify.com/MAL-2025-49294/): Malicious code in da-lit (npm) (malicious package)
- [MAL-2025-49293](https://insights.sbomify.com/MAL-2025-49293/): Malicious code in @dvargas135/gunpowder-ghost (npm) (malicious package)
- [MAL-2025-49292](https://insights.sbomify.com/MAL-2025-49292/): Malicious code in @alexandrsarioglo/npm-ghost-htb (npm) (malicious package)
- [MAL-2025-49291](https://insights.sbomify.com/MAL-2025-49291/): Malicious code in year_dropdown (npm) (malicious package)
- [MAL-2025-49290](https://insights.sbomify.com/MAL-2025-49290/): Malicious code in test882 (npm) (malicious package)
- [MAL-2025-4929](https://insights.sbomify.com/MAL-2025-4929/): Malicious code in thisisatestllll (npm) (malicious package)
- [MAL-2025-49289](https://insights.sbomify.com/MAL-2025-49289/): Malicious code in test881 (npm) (malicious package)
- [MAL-2025-49288](https://insights.sbomify.com/MAL-2025-49288/): Malicious code in random-packaging (npm) (malicious package)
- [MAL-2025-49287](https://insights.sbomify.com/MAL-2025-49287/): Malicious code in month_year_dropdown (npm) (malicious package)
- [MAL-2025-49286](https://insights.sbomify.com/MAL-2025-49286/): Malicious code in gunpowder-ghost (npm) (malicious package)
- [MAL-2025-49285](https://insights.sbomify.com/MAL-2025-49285/): Malicious code in groupstrap (npm) (malicious package)
- [MAL-2025-49284](https://insights.sbomify.com/MAL-2025-49284/): Malicious code in gel-iconfont (npm) (malicious package)
- [MAL-2025-49283](https://insights.sbomify.com/MAL-2025-49283/): Malicious code in gel-gss (npm) (malicious package)
- [MAL-2025-49282](https://insights.sbomify.com/MAL-2025-49282/): Malicious code in ect-472839 (npm) (malicious package)
- [MAL-2025-49281](https://insights.sbomify.com/MAL-2025-49281/): Malicious code in blackbeard-navigator-ctf (npm) (malicious package)
- [MAL-2025-49280](https://insights.sbomify.com/MAL-2025-49280/): Malicious code in bcp-security-package-update (npm) (malicious package)
- [MAL-2025-4928](https://insights.sbomify.com/MAL-2025-4928/): Malicious code in supersccan (npm) (malicious package)
- [MAL-2025-49279](https://insights.sbomify.com/MAL-2025-49279/): Malicious code in @qwant-internal/datahub-logger (npm) (malicious package)
- [MAL-2025-49278](https://insights.sbomify.com/MAL-2025-49278/): Malicious code in @asarioglo/npm-ghost-htb (npm) (malicious package)
- [MAL-2025-49277](https://insights.sbomify.com/MAL-2025-49277/): Malicious code in @asarioglo/ect-472839 (npm) (malicious package)
- [MAL-2025-49276](https://insights.sbomify.com/MAL-2025-49276/): Malicious code in vue2-script-ext-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-49275](https://insights.sbomify.com/MAL-2025-49275/): Malicious code in unplugin-vue-component (npm) (malicious package)
- [MAL-2025-49274](https://insights.sbomify.com/MAL-2025-49274/): Malicious code in web3-wc (npm) (malicious package)
- [MAL-2025-49273](https://insights.sbomify.com/MAL-2025-49273/): Malicious code in ve-hemi-actions (npm) (malicious package)
- [MAL-2025-49272](https://insights.sbomify.com/MAL-2025-49272/): Malicious code in telegram-bot-starter (npm) (malicious package)
- [MAL-2025-49271](https://insights.sbomify.com/MAL-2025-49271/): Malicious code in telegram-bot-start (npm) (malicious package)
- [MAL-2025-49270](https://insights.sbomify.com/MAL-2025-49270/): Malicious code in style-tailwind-variant (npm) (malicious package)
- [MAL-2025-4927](https://insights.sbomify.com/MAL-2025-4927/): Malicious code in ods-core-v1 (npm) (malicious package)
- [MAL-2025-49269](https://insights.sbomify.com/MAL-2025-49269/): Malicious code in soxhob-client (npm) (malicious package)
- [MAL-2025-49268](https://insights.sbomify.com/MAL-2025-49268/): Malicious code in salli-tg-api (npm) (malicious package)
- [MAL-2025-49267](https://insights.sbomify.com/MAL-2025-49267/): Malicious code in sai-tg-api (npm) (malicious package)
- [MAL-2025-49266](https://insights.sbomify.com/MAL-2025-49266/): Malicious code in sabay-tg-api (npm) (malicious package)
- [MAL-2025-49265](https://insights.sbomify.com/MAL-2025-49265/): Malicious code in sabaoa-tg-api (npm) (malicious package)
- [MAL-2025-49264](https://insights.sbomify.com/MAL-2025-49264/): Malicious code in react-icon-pkg (npm) (malicious package)
- [MAL-2025-49263](https://insights.sbomify.com/MAL-2025-49263/): Malicious code in pixelblm (npm) (malicious package)
- [MAL-2025-49262](https://insights.sbomify.com/MAL-2025-49262/): Malicious code in node-base58 (npm) (malicious package)
- [MAL-2025-49261](https://insights.sbomify.com/MAL-2025-49261/): Malicious code in icon-react-fork (npm) (malicious package)
- [MAL-2025-49260](https://insights.sbomify.com/MAL-2025-49260/): Malicious code in hemi-viem-stake-actions (npm) (malicious package)
- [MAL-2025-4926](https://insights.sbomify.com/MAL-2025-4926/): Malicious code in mh-swagger-api (npm) (malicious package)
- [MAL-2025-49259](https://insights.sbomify.com/MAL-2025-49259/): Malicious code in hemi-tunnel-actions (npm) (malicious package)
- [MAL-2025-49258](https://insights.sbomify.com/MAL-2025-49258/): Malicious code in genesis-drop-actions (npm) (malicious package)
- [MAL-2025-49257](https://insights.sbomify.com/MAL-2025-49257/): Malicious code in fork-spoon-fork (npm) (malicious package)
- [MAL-2025-49256](https://insights.sbomify.com/MAL-2025-49256/): Malicious code in custom-tg-bot-plan (npm) (malicious package)
- [MAL-2025-49255](https://insights.sbomify.com/MAL-2025-49255/): Malicious code in custom-telegram-bot-api (npm) (malicious package)
- [MAL-2025-49254](https://insights.sbomify.com/MAL-2025-49254/): Malicious code in cursor-ai-fork (npm) (malicious package)
- [MAL-2025-49253](https://insights.sbomify.com/MAL-2025-49253/): Malicious code in cordova-plugin-globalization.moment (npm) (malicious package)
- [MAL-2025-49252](https://insights.sbomify.com/MAL-2025-49252/): Malicious code in botty-fork-baby (npm) (malicious package)
- [MAL-2025-49251](https://insights.sbomify.com/MAL-2025-49251/): Malicious code in bael-god-thanks (npm) (malicious package)
- [MAL-2025-49250](https://insights.sbomify.com/MAL-2025-49250/): Malicious code in bael-god-api (npm) (malicious package)
- [MAL-2025-4925](https://insights.sbomify.com/MAL-2025-4925/): Malicious code in cockpit-header-icon-components (npm) (malicious package)
- [MAL-2025-49249](https://insights.sbomify.com/MAL-2025-49249/): Malicious code in bael-god-admin (npm) (malicious package)
- [MAL-2025-49248](https://insights.sbomify.com/MAL-2025-49248/): Malicious code in abeya-tg-api (npm) (malicious package)
- [MAL-2025-49247](https://insights.sbomify.com/MAL-2025-49247/): Malicious code in siren-lament (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/566/