# Vulnerabilities published in 2025


- [MAL-2025-49156](https://insights.sbomify.com/MAL-2025-49156/): Malicious code in epic-gulp-utils (npm) (malicious package)
- [MAL-2025-49155](https://insights.sbomify.com/MAL-2025-49155/): Malicious code in epic-gtm-url-checker (npm) (malicious package)
- [MAL-2025-49154](https://insights.sbomify.com/MAL-2025-49154/): Malicious code in epic-graphql-types (npm) (malicious package)
- [MAL-2025-49153](https://insights.sbomify.com/MAL-2025-49153/): Malicious code in epic-graphql-schema (npm) (malicious package)
- [MAL-2025-49152](https://insights.sbomify.com/MAL-2025-49152/): Malicious code in epic-google-maps-tools (npm) (malicious package)
- [MAL-2025-49151](https://insights.sbomify.com/MAL-2025-49151/): Malicious code in epic-games-nav (npm) (malicious package)
- [MAL-2025-49150](https://insights.sbomify.com/MAL-2025-49150/): Malicious code in epic-games-footer (npm) (malicious package)
- [MAL-2025-4915](https://insights.sbomify.com/MAL-2025-4915/): Malicious code in @velorum/browser-authenticator (npm) (malicious package)
- [MAL-2025-49149](https://insights.sbomify.com/MAL-2025-49149/): Malicious code in epic-freight (npm) (malicious package)
- [MAL-2025-49148](https://insights.sbomify.com/MAL-2025-49148/): Malicious code in epic-fortnite-styles (npm) (malicious package)
- [MAL-2025-49147](https://insights.sbomify.com/MAL-2025-49147/): Malicious code in epic-fortnite-server (npm) (malicious package)
- [MAL-2025-49146](https://insights.sbomify.com/MAL-2025-49146/): Malicious code in epic-fortnite-react (npm) (malicious package)
- [MAL-2025-49145](https://insights.sbomify.com/MAL-2025-49145/): Malicious code in epic-fortnite-build (npm) (malicious package)
- [MAL-2025-49144](https://insights.sbomify.com/MAL-2025-49144/): Malicious code in epic-file-upload (npm) (malicious package)
- [MAL-2025-49143](https://insights.sbomify.com/MAL-2025-49143/): Malicious code in epic-eula-service (npm) (malicious package)
- [MAL-2025-49142](https://insights.sbomify.com/MAL-2025-49142/): Malicious code in epic-eula (npm) (malicious package)
- [MAL-2025-49141](https://insights.sbomify.com/MAL-2025-49141/): Malicious code in epic-env-utils (npm) (malicious package)
- [MAL-2025-49140](https://insights.sbomify.com/MAL-2025-49140/): Malicious code in epic-dynamo-utils (npm) (malicious package)
- [MAL-2025-4914](https://insights.sbomify.com/MAL-2025-4914/): Malicious code in @portal-reporting/report-ui-templates (npm) (malicious package)
- [MAL-2025-49139](https://insights.sbomify.com/MAL-2025-49139/): Malicious code in epic-diesel-store (npm) (malicious package)
- [MAL-2025-49138](https://insights.sbomify.com/MAL-2025-49138/): Malicious code in epic-diesel-services (npm) (malicious package)
- [MAL-2025-49137](https://insights.sbomify.com/MAL-2025-49137/): Malicious code in epic-diesel-products (npm) (malicious package)
- [MAL-2025-49136](https://insights.sbomify.com/MAL-2025-49136/): Malicious code in epic-diesel-library (npm) (malicious package)
- [MAL-2025-49135](https://insights.sbomify.com/MAL-2025-49135/): Malicious code in epic-diesel-form (npm) (malicious package)
- [MAL-2025-49134](https://insights.sbomify.com/MAL-2025-49134/): Malicious code in epic-diesel-feed (npm) (malicious package)
- [MAL-2025-49133](https://insights.sbomify.com/MAL-2025-49133/): Malicious code in epic-diesel-components (npm) (malicious package)
- [MAL-2025-49132](https://insights.sbomify.com/MAL-2025-49132/): Malicious code in epic-diesel-common (npm) (malicious package)
- [MAL-2025-49131](https://insights.sbomify.com/MAL-2025-49131/): Malicious code in epic-diesel-androidlauncher (npm) (malicious package)
- [MAL-2025-49130](https://insights.sbomify.com/MAL-2025-49130/): Malicious code in epic-diesel-affiliate (npm) (malicious package)
- [MAL-2025-4913](https://insights.sbomify.com/MAL-2025-4913/): Malicious code in zlib1g-dev (npm) (malicious package)
- [MAL-2025-49129](https://insights.sbomify.com/MAL-2025-49129/): Malicious code in epic-creators-analytics (npm) (malicious package)
- [MAL-2025-49128](https://insights.sbomify.com/MAL-2025-49128/): Malicious code in epic-core (npm) (malicious package)
- [MAL-2025-49127](https://insights.sbomify.com/MAL-2025-49127/): Malicious code in epic-consent-dialog (npm) (malicious package)
- [MAL-2025-49126](https://insights.sbomify.com/MAL-2025-49126/): Malicious code in epic-config (npm) (malicious package)
- [MAL-2025-49125](https://insights.sbomify.com/MAL-2025-49125/): Malicious code in epic-common-node (npm) (malicious package)
- [MAL-2025-49124](https://insights.sbomify.com/MAL-2025-49124/): Malicious code in epic-common (npm) (malicious package)
- [MAL-2025-49123](https://insights.sbomify.com/MAL-2025-49123/): Malicious code in epic-comment-rating-service (npm) (malicious package)
- [MAL-2025-49122](https://insights.sbomify.com/MAL-2025-49122/): Malicious code in epic-comment-rating-frontend (npm) (malicious package)
- [MAL-2025-49121](https://insights.sbomify.com/MAL-2025-49121/): Malicious code in epic-comment-rating (npm) (malicious package)
- [MAL-2025-49120](https://insights.sbomify.com/MAL-2025-49120/): Malicious code in epic-code-redemption (npm) (malicious package)
- [MAL-2025-4912](https://insights.sbomify.com/MAL-2025-4912/): Malicious code in yux-utils (npm) (malicious package)
- [MAL-2025-49119](https://insights.sbomify.com/MAL-2025-49119/): Malicious code in epic-blog-frontend (npm) (malicious package)
- [MAL-2025-49118](https://insights.sbomify.com/MAL-2025-49118/): Malicious code in epic-asset-uploader-ui (npm) (malicious package)
- [MAL-2025-49117](https://insights.sbomify.com/MAL-2025-49117/): Malicious code in epic-angular-ui-codemirror (npm) (malicious package)
- [MAL-2025-49116](https://insights.sbomify.com/MAL-2025-49116/): Malicious code in epic-analytics-worker (npm) (malicious package)
- [MAL-2025-49115](https://insights.sbomify.com/MAL-2025-49115/): Malicious code in epic-alt-utils (npm) (malicious package)
- [MAL-2025-49114](https://insights.sbomify.com/MAL-2025-49114/): Malicious code in epic-adminportal-frontend (npm) (malicious package)
- [MAL-2025-49113](https://insights.sbomify.com/MAL-2025-49113/): Malicious code in epic-admin-node-services (npm) (malicious package)
- [MAL-2025-49112](https://insights.sbomify.com/MAL-2025-49112/): Malicious code in eos-media (npm) (malicious package)
- [MAL-2025-49111](https://insights.sbomify.com/MAL-2025-49111/): Malicious code in egstore-graphql-client (npm) (malicious package)
- [MAL-2025-49110](https://insights.sbomify.com/MAL-2025-49110/): Malicious code in com.apple.unityplugin.spatialcontroller (npm) (malicious package)
- [MAL-2025-4911](https://insights.sbomify.com/MAL-2025-4911/): Malicious code in yt606060-utils (npm) (malicious package)
- [MAL-2025-49109](https://insights.sbomify.com/MAL-2025-49109/): Malicious code in blendertools (npm) (malicious package)
- [MAL-2025-49108](https://insights.sbomify.com/MAL-2025-49108/): Malicious code in aligntrue (npm) (malicious package)
- [MAL-2025-49107](https://insights.sbomify.com/MAL-2025-49107/): Malicious code in account-merge-site (npm) (malicious package)
- [MAL-2025-49106](https://insights.sbomify.com/MAL-2025-49106/): Malicious code in @spicywombat/testprivate (npm) (malicious package)
- [MAL-2025-49105](https://insights.sbomify.com/MAL-2025-49105/): Malicious code in @ra-web-tech-ui-toolkit/common-utils (npm) (malicious package)
- [MAL-2025-49104](https://insights.sbomify.com/MAL-2025-49104/): Malicious code in @item-shop-data/client (npm) (malicious package)
- [MAL-2025-49103](https://insights.sbomify.com/MAL-2025-49103/): Malicious code in @epicgames/testprivate (npm) (malicious package)
- [MAL-2025-49102](https://insights.sbomify.com/MAL-2025-49102/): Malicious code in @epicgames/epic-core (npm) (malicious package)
- [MAL-2025-49101](https://insights.sbomify.com/MAL-2025-49101/): Malicious code in muleforge (npm) (malicious package)
- [MAL-2025-49100](https://insights.sbomify.com/MAL-2025-49100/): Malicious code in dynamic-import-node (npm) (malicious package)
- [MAL-2025-4910](https://insights.sbomify.com/MAL-2025-4910/): Malicious code in winfsp (npm) (malicious package)
- [MAL-2025-491](https://insights.sbomify.com/MAL-2025-491/): Malicious code in iberia-parser (npm) (malicious package)
- [MAL-2025-49099](https://insights.sbomify.com/MAL-2025-49099/): Malicious code in @raux/ra-react-big-calendar (npm) (malicious package)
- [MAL-2025-49098](https://insights.sbomify.com/MAL-2025-49098/): Malicious code in @dealmgmt/grid (npm) (malicious package)
- [MAL-2025-49097](https://insights.sbomify.com/MAL-2025-49097/): Malicious code in int_affirm_controllers (npm) (malicious package)
- [MAL-2025-49096](https://insights.sbomify.com/MAL-2025-49096/): Malicious code in example-icrc35-shared-library (npm) (malicious package)
- [MAL-2025-49095](https://insights.sbomify.com/MAL-2025-49095/): Malicious code in create-response (npm) (malicious package)
- [MAL-2025-49094](https://insights.sbomify.com/MAL-2025-49094/): Malicious code in app_storefront_core (npm) (malicious package)
- [MAL-2025-49093](https://insights.sbomify.com/MAL-2025-49093/): Malicious code in zustand.js (npm) (malicious package)
- [MAL-2025-49092](https://insights.sbomify.com/MAL-2025-49092/): Malicious code in typescriptjs (npm) (malicious package)
- [MAL-2025-49091](https://insights.sbomify.com/MAL-2025-49091/): Malicious code in react-router-dom.js (npm) (malicious package)
- [MAL-2025-49090](https://insights.sbomify.com/MAL-2025-49090/): Malicious code in quantum-packages (npm) (malicious package)
- [MAL-2025-4909](https://insights.sbomify.com/MAL-2025-4909/): Malicious code in whatwg-node (npm) (malicious package)
- [MAL-2025-49089](https://insights.sbomify.com/MAL-2025-49089/): Malicious code in operations-packages (npm) (malicious package)
- [MAL-2025-49088](https://insights.sbomify.com/MAL-2025-49088/): Malicious code in nodemonjs (npm) (malicious package)
- [MAL-2025-49087](https://insights.sbomify.com/MAL-2025-49087/): Malicious code in geopost-angular-components (npm) (malicious package)
- [MAL-2025-49086](https://insights.sbomify.com/MAL-2025-49086/): Malicious code in ethetsjs (npm) (malicious package)
- [MAL-2025-49085](https://insights.sbomify.com/MAL-2025-49085/): Malicious code in ethesjs (npm) (malicious package)
- [MAL-2025-49084](https://insights.sbomify.com/MAL-2025-49084/): Malicious code in etherdjs (npm) (malicious package)
- [MAL-2025-49083](https://insights.sbomify.com/MAL-2025-49083/): Malicious code in esg-odf-common (npm) (malicious package)
- [MAL-2025-49082](https://insights.sbomify.com/MAL-2025-49082/): Malicious code in dizcordjs (npm) (malicious package)
- [MAL-2025-49081](https://insights.sbomify.com/MAL-2025-49081/): Malicious code in dezcord.js (npm) (malicious package)
- [MAL-2025-49080](https://insights.sbomify.com/MAL-2025-49080/): Malicious code in deezcord.js (npm) (malicious package)
- [MAL-2025-4908](https://insights.sbomify.com/MAL-2025-4908/): Malicious code in waterline-mongo-native (npm) (malicious package)
- [MAL-2025-49079](https://insights.sbomify.com/MAL-2025-49079/): Malicious code in zohocrm-nodejs-sdk-3.0 (npm) (malicious package)
- [MAL-2025-49078](https://insights.sbomify.com/MAL-2025-49078/): Malicious code in zeus-mex-user-profile (npm) (malicious package)
- [MAL-2025-49077](https://insights.sbomify.com/MAL-2025-49077/): Malicious code in zeus-me-ops-tool (npm) (malicious package)
- [MAL-2025-49076](https://insights.sbomify.com/MAL-2025-49076/): Malicious code in xo-validation (npm) (malicious package)
- [MAL-2025-49075](https://insights.sbomify.com/MAL-2025-49075/): Malicious code in xo-ui-components (npm) (malicious package)
- [MAL-2025-49074](https://insights.sbomify.com/MAL-2025-49074/): Malicious code in xo-tracking (npm) (malicious package)
- [MAL-2025-49073](https://insights.sbomify.com/MAL-2025-49073/): Malicious code in xo-title (npm) (malicious package)
- [MAL-2025-49072](https://insights.sbomify.com/MAL-2025-49072/): Malicious code in xo-third-party-components (npm) (malicious package)
- [MAL-2025-49071](https://insights.sbomify.com/MAL-2025-49071/): Malicious code in xo-styles (npm) (malicious package)
- [MAL-2025-49070](https://insights.sbomify.com/MAL-2025-49070/): Malicious code in xo-shipping-options (npm) (malicious package)
- [MAL-2025-4907](https://insights.sbomify.com/MAL-2025-4907/): Malicious code in vyre-utils (npm) (malicious package)
- [MAL-2025-49069](https://insights.sbomify.com/MAL-2025-49069/): Malicious code in xo-shipping-change (npm) (malicious package)
- [MAL-2025-49068](https://insights.sbomify.com/MAL-2025-49068/): Malicious code in xo-login-components (npm) (malicious package)
- [MAL-2025-49067](https://insights.sbomify.com/MAL-2025-49067/): Malicious code in xo-form-components (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/568/