# Vulnerabilities published in 2025


- [MAL-2025-49246](https://insights.sbomify.com/MAL-2025-49246/): Malicious code in json-schema-to-typescript-example (npm) (malicious package)
- [MAL-2025-49245](https://insights.sbomify.com/MAL-2025-49245/): Malicious code in tailwindcss-utility (npm) (malicious package)
- [MAL-2025-49244](https://insights.sbomify.com/MAL-2025-49244/): Malicious code in windows_registry_editor (npm) (malicious package)
- [MAL-2025-49243](https://insights.sbomify.com/MAL-2025-49243/): Malicious code in ve.zz (npm) (malicious package)
- [MAL-2025-49242](https://insights.sbomify.com/MAL-2025-49242/): Malicious code in test-bfosberry (npm) (malicious package)
- [MAL-2025-49241](https://insights.sbomify.com/MAL-2025-49241/): Malicious code in store-webpack-config (npm) (malicious package)
- [MAL-2025-49240](https://insights.sbomify.com/MAL-2025-49240/): Malicious code in store-std (npm) (malicious package)
- [MAL-2025-4924](https://insights.sbomify.com/MAL-2025-4924/): Malicious code in ac-shared-instance (npm) (malicious package)
- [MAL-2025-49239](https://insights.sbomify.com/MAL-2025-49239/): Malicious code in store-service-worker (npm) (malicious package)
- [MAL-2025-49238](https://insights.sbomify.com/MAL-2025-49238/): Malicious code in ssp-config-management-tool (npm) (malicious package)
- [MAL-2025-49237](https://insights.sbomify.com/MAL-2025-49237/): Malicious code in set-egs-backend (npm) (malicious package)
- [MAL-2025-49236](https://insights.sbomify.com/MAL-2025-49236/): Malicious code in react-router-kitt (npm) (malicious package)
- [MAL-2025-49235](https://insights.sbomify.com/MAL-2025-49235/): Malicious code in qa-egs-rollback (npm) (malicious package)
- [MAL-2025-49234](https://insights.sbomify.com/MAL-2025-49234/): Malicious code in player-support-tools-ui (npm) (malicious package)
- [MAL-2025-49233](https://insights.sbomify.com/MAL-2025-49233/): Malicious code in mod-manager (npm) (malicious package)
- [MAL-2025-49232](https://insights.sbomify.com/MAL-2025-49232/): Malicious code in mms-tools (npm) (malicious package)
- [MAL-2025-49231](https://insights.sbomify.com/MAL-2025-49231/): Malicious code in mms-thin-client (npm) (malicious package)
- [MAL-2025-49230](https://insights.sbomify.com/MAL-2025-49230/): Malicious code in mms-simulation (npm) (malicious package)
- [MAL-2025-4923](https://insights.sbomify.com/MAL-2025-4923/): Malicious code in ac-mvc-cid (npm) (malicious package)
- [MAL-2025-49229](https://insights.sbomify.com/MAL-2025-49229/): Malicious code in mms-service (npm) (malicious package)
- [MAL-2025-49228](https://insights.sbomify.com/MAL-2025-49228/): Malicious code in mms-ref-dedserver (npm) (malicious package)
- [MAL-2025-49227](https://insights.sbomify.com/MAL-2025-49227/): Malicious code in mms-ref-client (npm) (malicious package)
- [MAL-2025-49226](https://insights.sbomify.com/MAL-2025-49226/): Malicious code in jira-lint (npm) (malicious package)
- [MAL-2025-49225](https://insights.sbomify.com/MAL-2025-49225/): Malicious code in greet-test (npm) (malicious package)
- [MAL-2025-49224](https://insights.sbomify.com/MAL-2025-49224/): Malicious code in generator-epic-react (npm) (malicious package)
- [MAL-2025-49223](https://insights.sbomify.com/MAL-2025-49223/): Malicious code in eslint-config-epic (npm) (malicious package)
- [MAL-2025-49222](https://insights.sbomify.com/MAL-2025-49222/): Malicious code in epic-webpack-utils (npm) (malicious package)
- [MAL-2025-49221](https://insights.sbomify.com/MAL-2025-49221/): Malicious code in epic-webpack-node-externals (npm) (malicious package)
- [MAL-2025-49220](https://insights.sbomify.com/MAL-2025-49220/): Malicious code in epic-webpack-hot-dev-client (npm) (malicious package)
- [MAL-2025-4922](https://insights.sbomify.com/MAL-2025-4922/): Malicious code in ac-ajax (npm) (malicious package)
- [MAL-2025-49219](https://insights.sbomify.com/MAL-2025-49219/): Malicious code in epic-webpack-config (npm) (malicious package)
- [MAL-2025-49218](https://insights.sbomify.com/MAL-2025-49218/): Malicious code in epic-web-video-player (npm) (malicious package)
- [MAL-2025-49217](https://insights.sbomify.com/MAL-2025-49217/): Malicious code in epic-web-sso (npm) (malicious package)
- [MAL-2025-49216](https://insights.sbomify.com/MAL-2025-49216/): Malicious code in epic-web-purchase-frontend (npm) (malicious package)
- [MAL-2025-49215](https://insights.sbomify.com/MAL-2025-49215/): Malicious code in epic-web-payment-management-sandbox (npm) (malicious package)
- [MAL-2025-49214](https://insights.sbomify.com/MAL-2025-49214/): Malicious code in epic-web-payment-management-iframe (npm) (malicious package)
- [MAL-2025-49213](https://insights.sbomify.com/MAL-2025-49213/): Malicious code in epic-web-payment-management (npm) (malicious package)
- [MAL-2025-49212](https://insights.sbomify.com/MAL-2025-49212/): Malicious code in epic-visualizations (npm) (malicious package)
- [MAL-2025-49211](https://insights.sbomify.com/MAL-2025-49211/): Malicious code in epic-video-player (npm) (malicious package)
- [MAL-2025-49210](https://insights.sbomify.com/MAL-2025-49210/): Malicious code in epic-ui-toolkit (npm) (malicious package)
- [MAL-2025-4921](https://insights.sbomify.com/MAL-2025-4921/): Malicious code in frontend-tests (npm) (malicious package)
- [MAL-2025-49209](https://insights.sbomify.com/MAL-2025-49209/): Malicious code in epic-ui-test (npm) (malicious package)
- [MAL-2025-49208](https://insights.sbomify.com/MAL-2025-49208/): Malicious code in epic-ue-utils (npm) (malicious package)
- [MAL-2025-49207](https://insights.sbomify.com/MAL-2025-49207/): Malicious code in epic-ue-spotlight (npm) (malicious package)
- [MAL-2025-49206](https://insights.sbomify.com/MAL-2025-49206/): Malicious code in epic-ue-shared (npm) (malicious package)
- [MAL-2025-49205](https://insights.sbomify.com/MAL-2025-49205/): Malicious code in epic-ue-newsletter (npm) (malicious package)
- [MAL-2025-49204](https://insights.sbomify.com/MAL-2025-49204/): Malicious code in epic-ue-map (npm) (malicious package)
- [MAL-2025-49203](https://insights.sbomify.com/MAL-2025-49203/): Malicious code in epic-ue-header-footer (npm) (malicious package)
- [MAL-2025-49202](https://insights.sbomify.com/MAL-2025-49202/): Malicious code in epic-ue-feed (npm) (malicious package)
- [MAL-2025-49201](https://insights.sbomify.com/MAL-2025-49201/): Malicious code in epic-ue-components (npm) (malicious package)
- [MAL-2025-49200](https://insights.sbomify.com/MAL-2025-49200/): Malicious code in epic-ue-blog (npm) (malicious package)
- [MAL-2025-4920](https://insights.sbomify.com/MAL-2025-4920/): Malicious code in lazy-logrocket (npm) (malicious package)
- [MAL-2025-492](https://insights.sbomify.com/MAL-2025-492/): Malicious code in iberia-payment (npm) (malicious package)
- [MAL-2025-49199](https://insights.sbomify.com/MAL-2025-49199/): Malicious code in epic-typeface (npm) (malicious package)
- [MAL-2025-49198](https://insights.sbomify.com/MAL-2025-49198/): Malicious code in epic-tracking (npm) (malicious package)
- [MAL-2025-49197](https://insights.sbomify.com/MAL-2025-49197/): Malicious code in epic-tools-devkit (npm) (malicious package)
- [MAL-2025-49196](https://insights.sbomify.com/MAL-2025-49196/): Malicious code in epic-tools-core (npm) (malicious package)
- [MAL-2025-49195](https://insights.sbomify.com/MAL-2025-49195/): Malicious code in epic-ticket-loader (npm) (malicious package)
- [MAL-2025-49194](https://insights.sbomify.com/MAL-2025-49194/): Malicious code in epic-support-ticket-submission (npm) (malicious package)
- [MAL-2025-49193](https://insights.sbomify.com/MAL-2025-49193/): Malicious code in epic-sticky-header (npm) (malicious package)
- [MAL-2025-49192](https://insights.sbomify.com/MAL-2025-49192/): Malicious code in epic-sso (npm) (malicious package)
- [MAL-2025-49191](https://insights.sbomify.com/MAL-2025-49191/): Malicious code in epic-service-worker (npm) (malicious package)
- [MAL-2025-49190](https://insights.sbomify.com/MAL-2025-49190/): Malicious code in epic-service-client (npm) (malicious package)
- [MAL-2025-4919](https://insights.sbomify.com/MAL-2025-4919/): Malicious code in fallback-screen (npm) (malicious package)
- [MAL-2025-49189](https://insights.sbomify.com/MAL-2025-49189/): Malicious code in epic-seller-portal-frontend (npm) (malicious package)
- [MAL-2025-49188](https://insights.sbomify.com/MAL-2025-49188/): Malicious code in epic-react-webpack-starter (npm) (malicious package)
- [MAL-2025-49187](https://insights.sbomify.com/MAL-2025-49187/): Malicious code in epic-react-testing (npm) (malicious package)
- [MAL-2025-49186](https://insights.sbomify.com/MAL-2025-49186/): Malicious code in epic-react-test-utils (npm) (malicious package)
- [MAL-2025-49185](https://insights.sbomify.com/MAL-2025-49185/): Malicious code in epic-react-survey (npm) (malicious package)
- [MAL-2025-49184](https://insights.sbomify.com/MAL-2025-49184/): Malicious code in epic-react-slick (npm) (malicious package)
- [MAL-2025-49183](https://insights.sbomify.com/MAL-2025-49183/): Malicious code in epic-react-search (npm) (malicious package)
- [MAL-2025-49182](https://insights.sbomify.com/MAL-2025-49182/): Malicious code in epic-react-form (npm) (malicious package)
- [MAL-2025-49181](https://insights.sbomify.com/MAL-2025-49181/): Malicious code in epic-react-common (npm) (malicious package)
- [MAL-2025-49180](https://insights.sbomify.com/MAL-2025-49180/): Malicious code in epic-react-carousel (npm) (malicious package)
- [MAL-2025-4918](https://insights.sbomify.com/MAL-2025-4918/): Malicious code in ac-object (npm) (malicious package)
- [MAL-2025-49179](https://insights.sbomify.com/MAL-2025-49179/): Malicious code in epic-react-blog (npm) (malicious package)
- [MAL-2025-49178](https://insights.sbomify.com/MAL-2025-49178/): Malicious code in epic-path-utils (npm) (malicious package)
- [MAL-2025-49177](https://insights.sbomify.com/MAL-2025-49177/): Malicious code in epic-openapi-codegen (npm) (malicious package)
- [MAL-2025-49176](https://insights.sbomify.com/MAL-2025-49176/): Malicious code in epic-okta-express-middleware (npm) (malicious package)
- [MAL-2025-49175](https://insights.sbomify.com/MAL-2025-49175/): Malicious code in epic-offline-token-verifier-node (npm) (malicious package)
- [MAL-2025-49174](https://insights.sbomify.com/MAL-2025-49174/): Malicious code in epic-node-services-common (npm) (malicious package)
- [MAL-2025-49173](https://insights.sbomify.com/MAL-2025-49173/): Malicious code in epic-node-services (npm) (malicious package)
- [MAL-2025-49172](https://insights.sbomify.com/MAL-2025-49172/): Malicious code in epic-node-sailthru (npm) (malicious package)
- [MAL-2025-49171](https://insights.sbomify.com/MAL-2025-49171/): Malicious code in epic-node-purchase (npm) (malicious package)
- [MAL-2025-49170](https://insights.sbomify.com/MAL-2025-49170/): Malicious code in epic-node-marketo (npm) (malicious package)
- [MAL-2025-4917](https://insights.sbomify.com/MAL-2025-4917/): Malicious code in ac-mvc-data-provider (npm) (malicious package)
- [MAL-2025-49169](https://insights.sbomify.com/MAL-2025-49169/): Malicious code in epic-node-ecom-services (npm) (malicious package)
- [MAL-2025-49168](https://insights.sbomify.com/MAL-2025-49168/): Malicious code in epic-node-cms (npm) (malicious package)
- [MAL-2025-49167](https://insights.sbomify.com/MAL-2025-49167/): Malicious code in epic-node-cluster (npm) (malicious package)
- [MAL-2025-49166](https://insights.sbomify.com/MAL-2025-49166/): Malicious code in epic-node-blog (npm) (malicious package)
- [MAL-2025-49165](https://insights.sbomify.com/MAL-2025-49165/): Malicious code in epic-native-client-utils (npm) (malicious package)
- [MAL-2025-49164](https://insights.sbomify.com/MAL-2025-49164/): Malicious code in epic-minimalist-blog (npm) (malicious package)
- [MAL-2025-49163](https://insights.sbomify.com/MAL-2025-49163/): Malicious code in epic-messages-common (npm) (malicious package)
- [MAL-2025-49162](https://insights.sbomify.com/MAL-2025-49162/): Malicious code in epic-localization (npm) (malicious package)
- [MAL-2025-49161](https://insights.sbomify.com/MAL-2025-49161/): Malicious code in epic-launchdarkly (npm) (malicious package)
- [MAL-2025-49160](https://insights.sbomify.com/MAL-2025-49160/): Malicious code in epic-js-error-reporting (npm) (malicious package)
- [MAL-2025-4916](https://insights.sbomify.com/MAL-2025-4916/): Malicious code in @yahoo-engadget/i13n (npm) (malicious package)
- [MAL-2025-49159](https://insights.sbomify.com/MAL-2025-49159/): Malicious code in epic-i18n (npm) (malicious package)
- [MAL-2025-49158](https://insights.sbomify.com/MAL-2025-49158/): Malicious code in epic-http-proxy (npm) (malicious package)
- [MAL-2025-49157](https://insights.sbomify.com/MAL-2025-49157/): Malicious code in epic-hooks (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/567/