# Vulnerabilities published in 2025


- [MAL-2025-48887](https://insights.sbomify.com/MAL-2025-48887/): Malicious code in withnotificationx (npm) (malicious package)
- [MAL-2025-48886](https://insights.sbomify.com/MAL-2025-48886/): Malicious code in warm-components (npm) (malicious package)
- [MAL-2025-48885](https://insights.sbomify.com/MAL-2025-48885/): Malicious code in vite-react-chunker (npm) (malicious package)
- [MAL-2025-48884](https://insights.sbomify.com/MAL-2025-48884/): Malicious code in vite-chunk-tools (npm) (malicious package)
- [MAL-2025-48883](https://insights.sbomify.com/MAL-2025-48883/): Malicious code in verification-workers (npm) (malicious package)
- [MAL-2025-48882](https://insights.sbomify.com/MAL-2025-48882/): Malicious code in verdi-chat-library (npm) (malicious package)
- [MAL-2025-48881](https://insights.sbomify.com/MAL-2025-48881/): Malicious code in uui-nextjs-template (npm) (malicious package)
- [MAL-2025-48880](https://insights.sbomify.com/MAL-2025-48880/): Malicious code in ttb-design-system-webview (npm) (malicious package)
- [MAL-2025-4888](https://insights.sbomify.com/MAL-2025-4888/): Malicious code in springboot-js (npm) (malicious package)
- [MAL-2025-48879](https://insights.sbomify.com/MAL-2025-48879/): Malicious code in test218745612938 (npm) (malicious package)
- [MAL-2025-48878](https://insights.sbomify.com/MAL-2025-48878/): Malicious code in test-utils-vue3 (npm) (malicious package)
- [MAL-2025-48877](https://insights.sbomify.com/MAL-2025-48877/): Malicious code in test-mlw2-squeg-villi-thaws-tyned (npm) (malicious package)
- [MAL-2025-48876](https://insights.sbomify.com/MAL-2025-48876/): Malicious code in test-mlw2-perms-inurn-lores-decks (npm) (malicious package)
- [MAL-2025-48875](https://insights.sbomify.com/MAL-2025-48875/): Malicious code in test-mlw2-neeze-telae-tutee-wimps (npm) (malicious package)
- [MAL-2025-48874](https://insights.sbomify.com/MAL-2025-48874/): Malicious code in test-mlw2-image-hable-mayed-hance (npm) (malicious package)
- [MAL-2025-48873](https://insights.sbomify.com/MAL-2025-48873/): Malicious code in test-mlw2-burgs-trior-howls-grapy (npm) (malicious package)
- [MAL-2025-48872](https://insights.sbomify.com/MAL-2025-48872/): Malicious code in test-mlw1-perms-inurn-lores-decks (npm) (malicious package)
- [MAL-2025-48871](https://insights.sbomify.com/MAL-2025-48871/): Malicious code in test-mlw1-image-hable-mayed-hance (npm) (malicious package)
- [MAL-2025-48870](https://insights.sbomify.com/MAL-2025-48870/): Malicious code in test-mlw1-burgs-trior-howls-grapy (npm) (malicious package)
- [MAL-2025-4887](https://insights.sbomify.com/MAL-2025-4887/): Malicious code in spring-security-test (npm) (malicious package)
- [MAL-2025-48869](https://insights.sbomify.com/MAL-2025-48869/): Malicious code in skiko-wasm-js (npm) (malicious package)
- [MAL-2025-48868](https://insights.sbomify.com/MAL-2025-48868/): Malicious code in skiko-js-wasm-runtime (npm) (malicious package)
- [MAL-2025-48867](https://insights.sbomify.com/MAL-2025-48867/): Malicious code in sevilla-test-pkg (npm) (malicious package)
- [MAL-2025-48866](https://insights.sbomify.com/MAL-2025-48866/): Malicious code in sevilla-test-package (npm) (malicious package)
- [MAL-2025-48865](https://insights.sbomify.com/MAL-2025-48865/): Malicious code in sessionfiy (npm) (malicious package)
- [MAL-2025-48864](https://insights.sbomify.com/MAL-2025-48864/): Malicious code in productivity-suite-todos-fragment (npm) (malicious package)
- [MAL-2025-48863](https://insights.sbomify.com/MAL-2025-48863/): Malicious code in productivity-suite-todo-lists-fragment (npm) (malicious package)
- [MAL-2025-48862](https://insights.sbomify.com/MAL-2025-48862/): Malicious code in productivity-suite-shared-library (npm) (malicious package)
- [MAL-2025-48861](https://insights.sbomify.com/MAL-2025-48861/): Malicious code in productivity-suite-news-fragment (npm) (malicious package)
- [MAL-2025-48860](https://insights.sbomify.com/MAL-2025-48860/): Malicious code in productivity-suite-login-fragment (npm) (malicious package)
- [MAL-2025-4886](https://insights.sbomify.com/MAL-2025-4886/): Malicious code in soracom-xmas-pi (npm) (malicious package)
- [MAL-2025-48859](https://insights.sbomify.com/MAL-2025-48859/): Malicious code in productivity-suite (npm) (malicious package)
- [MAL-2025-48858](https://insights.sbomify.com/MAL-2025-48858/): Malicious code in patrik_workflow_request (npm) (malicious package)
- [MAL-2025-48857](https://insights.sbomify.com/MAL-2025-48857/): Malicious code in op-frontend-commons (npm) (malicious package)
- [MAL-2025-48856](https://insights.sbomify.com/MAL-2025-48856/): Malicious code in node-hs-logger (npm) (malicious package)
- [MAL-2025-48855](https://insights.sbomify.com/MAL-2025-48855/): Malicious code in node-dev-config (npm) (malicious package)
- [MAL-2025-48854](https://insights.sbomify.com/MAL-2025-48854/): Malicious code in node-chart-config (npm) (malicious package)
- [MAL-2025-48853](https://insights.sbomify.com/MAL-2025-48853/): Malicious code in metadata-collector-somewhere-in-galaxy (npm) (malicious package)
- [MAL-2025-48852](https://insights.sbomify.com/MAL-2025-48852/): Malicious code in meta-service-boost-90s (npm) (malicious package)
- [MAL-2025-48851](https://insights.sbomify.com/MAL-2025-48851/): Malicious code in meta-api-boostx-v2-pro (npm) (malicious package)
- [MAL-2025-48850](https://insights.sbomify.com/MAL-2025-48850/): Malicious code in ketcher-react-app (npm) (malicious package)
- [MAL-2025-4885](https://insights.sbomify.com/MAL-2025-4885/): Malicious code in solders (npm) (malicious package)
- [MAL-2025-48849](https://insights.sbomify.com/MAL-2025-48849/): Malicious code in internal-test-utils-test (npm) (malicious package)
- [MAL-2025-48848](https://insights.sbomify.com/MAL-2025-48848/): Malicious code in internal-test-utils (npm) (malicious package)
- [MAL-2025-48847](https://insights.sbomify.com/MAL-2025-48847/): Malicious code in internal-runtime-test (npm) (malicious package)
- [MAL-2025-48846](https://insights.sbomify.com/MAL-2025-48846/): Malicious code in internal-runtime (npm) (malicious package)
- [MAL-2025-48845](https://insights.sbomify.com/MAL-2025-48845/): Malicious code in img-region-select-app (npm) (malicious package)
- [MAL-2025-48844](https://insights.sbomify.com/MAL-2025-48844/): Malicious code in humhub (npm) (malicious package)
- [MAL-2025-48843](https://insights.sbomify.com/MAL-2025-48843/): Malicious code in http-message-signatures-extension (npm) (malicious package)
- [MAL-2025-48842](https://insights.sbomify.com/MAL-2025-48842/): Malicious code in filen-drive (npm) (malicious package)
- [MAL-2025-48841](https://insights.sbomify.com/MAL-2025-48841/): Malicious code in example-ssr (npm) (malicious package)
- [MAL-2025-48840](https://insights.sbomify.com/MAL-2025-48840/): Malicious code in eslint-plugin-ethereumjs (npm) (malicious package)
- [MAL-2025-4884](https://insights.sbomify.com/MAL-2025-4884/): Malicious code in smart-request-buffers (npm) (malicious package)
- [MAL-2025-48839](https://insights.sbomify.com/MAL-2025-48839/): Malicious code in epxresser (npm) (malicious package)
- [MAL-2025-48838](https://insights.sbomify.com/MAL-2025-48838/): Malicious code in eithernet-test-fixtures-test (npm) (malicious package)
- [MAL-2025-48837](https://insights.sbomify.com/MAL-2025-48837/): Malicious code in eithernet-test-fixtures (npm) (malicious package)
- [MAL-2025-48836](https://insights.sbomify.com/MAL-2025-48836/): Malicious code in eithernet-test (npm) (malicious package)
- [MAL-2025-48835](https://insights.sbomify.com/MAL-2025-48835/): Malicious code in eithernet (npm) (malicious package)
- [MAL-2025-48834](https://insights.sbomify.com/MAL-2025-48834/): Malicious code in echats-js (npm) (malicious package)
- [MAL-2025-48833](https://insights.sbomify.com/MAL-2025-48833/): Malicious code in detect-web-app (npm) (malicious package)
- [MAL-2025-48832](https://insights.sbomify.com/MAL-2025-48832/): Malicious code in dayotestgraphite (npm) (malicious package)
- [MAL-2025-48831](https://insights.sbomify.com/MAL-2025-48831/): Malicious code in dayotest21938 (npm) (malicious package)
- [MAL-2025-48830](https://insights.sbomify.com/MAL-2025-48830/): Malicious code in cross-sessions (npm) (malicious package)
- [MAL-2025-4883](https://insights.sbomify.com/MAL-2025-4883/): Malicious code in server-tiny-log (npm) (malicious package)
- [MAL-2025-48829](https://insights.sbomify.com/MAL-2025-48829/): Malicious code in counterbrowser-test (npm) (malicious package)
- [MAL-2025-48828](https://insights.sbomify.com/MAL-2025-48828/): Malicious code in counterbrowser (npm) (malicious package)
- [MAL-2025-48827](https://insights.sbomify.com/MAL-2025-48827/): Malicious code in cms-layout-server (npm) (malicious package)
- [MAL-2025-48826](https://insights.sbomify.com/MAL-2025-48826/): Malicious code in circuitx-overlays-test (npm) (malicious package)
- [MAL-2025-48825](https://insights.sbomify.com/MAL-2025-48825/): Malicious code in circuitx-overlays (npm) (malicious package)
- [MAL-2025-48824](https://insights.sbomify.com/MAL-2025-48824/): Malicious code in circuitx-navigation-test (npm) (malicious package)
- [MAL-2025-48823](https://insights.sbomify.com/MAL-2025-48823/): Malicious code in circuitx-navigation (npm) (malicious package)
- [MAL-2025-48822](https://insights.sbomify.com/MAL-2025-48822/): Malicious code in circuitx-gesture-navigation-test (npm) (malicious package)
- [MAL-2025-48821](https://insights.sbomify.com/MAL-2025-48821/): Malicious code in circuitx-gesture-navigation (npm) (malicious package)
- [MAL-2025-48820](https://insights.sbomify.com/MAL-2025-48820/): Malicious code in circuitx-effects-test (npm) (malicious package)
- [MAL-2025-4882](https://insights.sbomify.com/MAL-2025-4882/): Malicious code in server-log-engine (npm) (malicious package)
- [MAL-2025-48819](https://insights.sbomify.com/MAL-2025-48819/): Malicious code in circuitx-effects (npm) (malicious package)
- [MAL-2025-48818](https://insights.sbomify.com/MAL-2025-48818/): Malicious code in circuit-test-test (npm) (malicious package)
- [MAL-2025-48817](https://insights.sbomify.com/MAL-2025-48817/): Malicious code in circuit-test (npm) (malicious package)
- [MAL-2025-48816](https://insights.sbomify.com/MAL-2025-48816/): Malicious code in circuit-sharedelements-test (npm) (malicious package)
- [MAL-2025-48815](https://insights.sbomify.com/MAL-2025-48815/): Malicious code in circuit-sharedelements (npm) (malicious package)
- [MAL-2025-48814](https://insights.sbomify.com/MAL-2025-48814/): Malicious code in circuit-runtime-ui-test (npm) (malicious package)
- [MAL-2025-48813](https://insights.sbomify.com/MAL-2025-48813/): Malicious code in circuit-runtime-ui (npm) (malicious package)
- [MAL-2025-48812](https://insights.sbomify.com/MAL-2025-48812/): Malicious code in circuit-runtime-test (npm) (malicious package)
- [MAL-2025-48811](https://insights.sbomify.com/MAL-2025-48811/): Malicious code in circuit-runtime-screen-test (npm) (malicious package)
- [MAL-2025-48810](https://insights.sbomify.com/MAL-2025-48810/): Malicious code in circuit-runtime-screen (npm) (malicious package)
- [MAL-2025-4881](https://insights.sbomify.com/MAL-2025-4881/): Malicious code in server-bare-log (npm) (malicious package)
- [MAL-2025-48809](https://insights.sbomify.com/MAL-2025-48809/): Malicious code in circuit-runtime-presenter-test (npm) (malicious package)
- [MAL-2025-48808](https://insights.sbomify.com/MAL-2025-48808/): Malicious code in circuit-runtime (npm) (malicious package)
- [MAL-2025-48807](https://insights.sbomify.com/MAL-2025-48807/): Malicious code in circuit-retained-test (npm) (malicious package)
- [MAL-2025-48806](https://insights.sbomify.com/MAL-2025-48806/): Malicious code in circuit-overlay-test (npm) (malicious package)
- [MAL-2025-48805](https://insights.sbomify.com/MAL-2025-48805/): Malicious code in circuit-overlay (npm) (malicious package)
- [MAL-2025-48804](https://insights.sbomify.com/MAL-2025-48804/): Malicious code in circuit-foundation-test (npm) (malicious package)
- [MAL-2025-48803](https://insights.sbomify.com/MAL-2025-48803/): Malicious code in circuit-foundation (npm) (malicious package)
- [MAL-2025-48802](https://insights.sbomify.com/MAL-2025-48802/): Malicious code in circuit-codegen-annotations-test (npm) (malicious package)
- [MAL-2025-48801](https://insights.sbomify.com/MAL-2025-48801/): Malicious code in circuit-codegen-annotations (npm) (malicious package)
- [MAL-2025-48800](https://insights.sbomify.com/MAL-2025-48800/): Malicious code in circuit-backstack-test (npm) (malicious package)
- [MAL-2025-4880](https://insights.sbomify.com/MAL-2025-4880/): Malicious code in scrapy-user-agents (npm) (malicious package)
- [MAL-2025-488](https://insights.sbomify.com/MAL-2025-488/): Malicious code in iberia-checkout (npm) (malicious package)
- [MAL-2025-48799](https://insights.sbomify.com/MAL-2025-48799/): Malicious code in circuit-backstack (npm) (malicious package)
- [MAL-2025-48798](https://insights.sbomify.com/MAL-2025-48798/): Malicious code in cic9 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/571/