# Vulnerabilities published in 2025


- [MAL-2025-48706](https://insights.sbomify.com/MAL-2025-48706/): Malicious code in ldhemrdhs92004 (npm) (malicious package)
- [MAL-2025-48705](https://insights.sbomify.com/MAL-2025-48705/): Malicious code in ldhemrdhs84006 (npm) (malicious package)
- [MAL-2025-48704](https://insights.sbomify.com/MAL-2025-48704/): Malicious code in ldhemrdhs83600 (npm) (malicious package)
- [MAL-2025-48703](https://insights.sbomify.com/MAL-2025-48703/): Malicious code in ldhemrdhs79029 (npm) (malicious package)
- [MAL-2025-48702](https://insights.sbomify.com/MAL-2025-48702/): Malicious code in ldhemrdhs60214 (npm) (malicious package)
- [MAL-2025-48701](https://insights.sbomify.com/MAL-2025-48701/): Malicious code in ldhemrdhs60152 (npm) (malicious package)
- [MAL-2025-48700](https://insights.sbomify.com/MAL-2025-48700/): Malicious code in ldhemrdhs60015 (npm) (malicious package)
- [MAL-2025-4870](https://insights.sbomify.com/MAL-2025-4870/): Malicious code in quake-web (npm) (malicious package)
- [MAL-2025-487](https://insights.sbomify.com/MAL-2025-487/): Malicious code in iberia-cache (npm) (malicious package)
- [MAL-2025-48699](https://insights.sbomify.com/MAL-2025-48699/): Malicious code in ldhemrdhs51214 (npm) (malicious package)
- [MAL-2025-48698](https://insights.sbomify.com/MAL-2025-48698/): Malicious code in ldhchukyso (npm) (malicious package)
- [MAL-2025-48697](https://insights.sbomify.com/MAL-2025-48697/): Malicious code in kubernetes-agent (npm) (malicious package)
- [MAL-2025-48696](https://insights.sbomify.com/MAL-2025-48696/): Malicious code in kong-manager (npm) (malicious package)
- [MAL-2025-48695](https://insights.sbomify.com/MAL-2025-48695/): Malicious code in jvector-release (npm) (malicious package)
- [MAL-2025-48694](https://insights.sbomify.com/MAL-2025-48694/): Malicious code in irb (npm) (malicious package)
- [MAL-2025-48693](https://insights.sbomify.com/MAL-2025-48693/): Malicious code in internal-links-autocomplete-id (npm) (malicious package)
- [MAL-2025-48692](https://insights.sbomify.com/MAL-2025-48692/): Malicious code in infobip-calls-showcase (npm) (malicious package)
- [MAL-2025-48691](https://insights.sbomify.com/MAL-2025-48691/): Malicious code in hyatt-residential-roster (npm) (malicious package)
- [MAL-2025-48690](https://insights.sbomify.com/MAL-2025-48690/): Malicious code in hyatt-avatar (npm) (malicious package)
- [MAL-2025-4869](https://insights.sbomify.com/MAL-2025-4869/): Malicious code in pyserial (npm) (malicious package)
- [MAL-2025-48689](https://insights.sbomify.com/MAL-2025-48689/): Malicious code in hyatt-album (npm) (malicious package)
- [MAL-2025-48688](https://insights.sbomify.com/MAL-2025-48688/): Malicious code in helm-charts-monorepo (npm) (malicious package)
- [MAL-2025-48687](https://insights.sbomify.com/MAL-2025-48687/): Malicious code in graphclient (npm) (malicious package)
- [MAL-2025-48686](https://insights.sbomify.com/MAL-2025-48686/): Malicious code in global-utils-helper-2025 (npm) (malicious package)
- [MAL-2025-48685](https://insights.sbomify.com/MAL-2025-48685/): Malicious code in gitlab-accountid (npm) (malicious package)
- [MAL-2025-48684](https://insights.sbomify.com/MAL-2025-48684/): Malicious code in garud-production (npm) (malicious package)
- [MAL-2025-48683](https://insights.sbomify.com/MAL-2025-48683/): Malicious code in frontend-vite (npm) (malicious package)
- [MAL-2025-48682](https://insights.sbomify.com/MAL-2025-48682/): Malicious code in flow-docscanner-db (npm) (malicious package)
- [MAL-2025-48681](https://insights.sbomify.com/MAL-2025-48681/): Malicious code in feature-reporter (npm) (malicious package)
- [MAL-2025-48680](https://insights.sbomify.com/MAL-2025-48680/): Malicious code in env-app (npm) (malicious package)
- [MAL-2025-4868](https://insights.sbomify.com/MAL-2025-4868/): Malicious code in pyiceberg (npm) (malicious package)
- [MAL-2025-48679](https://insights.sbomify.com/MAL-2025-48679/): Malicious code in duckduckgo-eslint-config-poc (npm) (malicious package)
- [MAL-2025-48678](https://insights.sbomify.com/MAL-2025-48678/): Malicious code in ds-valentines (npm) (malicious package)
- [MAL-2025-48677](https://insights.sbomify.com/MAL-2025-48677/): Malicious code in doyouknowyourstuff (npm) (malicious package)
- [MAL-2025-48676](https://insights.sbomify.com/MAL-2025-48676/): Malicious code in dhwinsw (npm) (malicious package)
- [MAL-2025-48675](https://insights.sbomify.com/MAL-2025-48675/): Malicious code in dhsvrkioshdbank (npm) (malicious package)
- [MAL-2025-48674](https://insights.sbomify.com/MAL-2025-48674/): Malicious code in dhrunner00 (npm) (malicious package)
- [MAL-2025-48673](https://insights.sbomify.com/MAL-2025-48673/): Malicious code in dhqr92010 (npm) (malicious package)
- [MAL-2025-48672](https://insights.sbomify.com/MAL-2025-48672/): Malicious code in dhqr92004 (npm) (malicious package)
- [MAL-2025-48671](https://insights.sbomify.com/MAL-2025-48671/): Malicious code in dhpm2 (npm) (malicious package)
- [MAL-2025-48670](https://insights.sbomify.com/MAL-2025-48670/): Malicious code in dhpgemrdhs95006 (npm) (malicious package)
- [MAL-2025-4867](https://insights.sbomify.com/MAL-2025-4867/): Malicious code in pydantic (npm) (malicious package)
- [MAL-2025-48669](https://insights.sbomify.com/MAL-2025-48669/): Malicious code in dhpgemrdhs95005 (npm) (malicious package)
- [MAL-2025-48668](https://insights.sbomify.com/MAL-2025-48668/): Malicious code in dhpgemrdhs94010 (npm) (malicious package)
- [MAL-2025-48667](https://insights.sbomify.com/MAL-2025-48667/): Malicious code in dhpgemrdhs94006 (npm) (malicious package)
- [MAL-2025-48666](https://insights.sbomify.com/MAL-2025-48666/): Malicious code in dhpgemrdhs92092 (npm) (malicious package)
- [MAL-2025-48665](https://insights.sbomify.com/MAL-2025-48665/): Malicious code in dhpgemrdhs92011 (npm) (malicious package)
- [MAL-2025-48664](https://insights.sbomify.com/MAL-2025-48664/): Malicious code in dhpgemrdhs92010 (npm) (malicious package)
- [MAL-2025-48663](https://insights.sbomify.com/MAL-2025-48663/): Malicious code in dhpgemrdhs92009 (npm) (malicious package)
- [MAL-2025-48662](https://insights.sbomify.com/MAL-2025-48662/): Malicious code in dhpgemrdhs920072 (npm) (malicious package)
- [MAL-2025-48661](https://insights.sbomify.com/MAL-2025-48661/): Malicious code in dhpgemrdhs92007 (npm) (malicious package)
- [MAL-2025-48660](https://insights.sbomify.com/MAL-2025-48660/): Malicious code in dhpgemrdhs92006 (npm) (malicious package)
- [MAL-2025-4866](https://insights.sbomify.com/MAL-2025-4866/): Malicious code in pullapprove-alt (npm) (malicious package)
- [MAL-2025-48659](https://insights.sbomify.com/MAL-2025-48659/): Malicious code in dhpgemrdhs92004 (npm) (malicious package)
- [MAL-2025-48658](https://insights.sbomify.com/MAL-2025-48658/): Malicious code in dhpgemrdhs84006 (npm) (malicious package)
- [MAL-2025-48657](https://insights.sbomify.com/MAL-2025-48657/): Malicious code in dhpgemrdhs83600 (npm) (malicious package)
- [MAL-2025-48656](https://insights.sbomify.com/MAL-2025-48656/): Malicious code in dhpgemrdhs79029 (npm) (malicious package)
- [MAL-2025-48655](https://insights.sbomify.com/MAL-2025-48655/): Malicious code in dhpgemrdhs60214 (npm) (malicious package)
- [MAL-2025-48654](https://insights.sbomify.com/MAL-2025-48654/): Malicious code in dhpgemrdhs60152 (npm) (malicious package)
- [MAL-2025-48653](https://insights.sbomify.com/MAL-2025-48653/): Malicious code in dhpgemrdhs60015 (npm) (malicious package)
- [MAL-2025-48652](https://insights.sbomify.com/MAL-2025-48652/): Malicious code in dhpgemrdhs51214 (npm) (malicious package)
- [MAL-2025-48651](https://insights.sbomify.com/MAL-2025-48651/): Malicious code in dhnas (npm) (malicious package)
- [MAL-2025-48650](https://insights.sbomify.com/MAL-2025-48650/): Malicious code in dhkioshdbank (npm) (malicious package)
- [MAL-2025-4865](https://insights.sbomify.com/MAL-2025-4865/): Malicious code in processwithcloudevents-client (npm) (malicious package)
- [MAL-2025-48649](https://insights.sbomify.com/MAL-2025-48649/): Malicious code in dhhdbank92086 (npm) (malicious package)
- [MAL-2025-48648](https://insights.sbomify.com/MAL-2025-48648/): Malicious code in dhhdbank92015 (npm) (malicious package)
- [MAL-2025-48647](https://insights.sbomify.com/MAL-2025-48647/): Malicious code in dhhdbank92013 (npm) (malicious package)
- [MAL-2025-48646](https://insights.sbomify.com/MAL-2025-48646/): Malicious code in dhhdbank87015 (npm) (malicious package)
- [MAL-2025-48645](https://insights.sbomify.com/MAL-2025-48645/): Malicious code in dhhdbank83600 (npm) (malicious package)
- [MAL-2025-48644](https://insights.sbomify.com/MAL-2025-48644/): Malicious code in dhemrdhs95006 (npm) (malicious package)
- [MAL-2025-48643](https://insights.sbomify.com/MAL-2025-48643/): Malicious code in dhemrdhs95005 (npm) (malicious package)
- [MAL-2025-48642](https://insights.sbomify.com/MAL-2025-48642/): Malicious code in dhemrdhs94010 (npm) (malicious package)
- [MAL-2025-48641](https://insights.sbomify.com/MAL-2025-48641/): Malicious code in dhemrdhs94006 (npm) (malicious package)
- [MAL-2025-48640](https://insights.sbomify.com/MAL-2025-48640/): Malicious code in dhemrdhs92092 (npm) (malicious package)
- [MAL-2025-4864](https://insights.sbomify.com/MAL-2025-4864/): Malicious code in playwright-coverage (npm) (malicious package)
- [MAL-2025-48639](https://insights.sbomify.com/MAL-2025-48639/): Malicious code in dhemrdhs92011 (npm) (malicious package)
- [MAL-2025-48638](https://insights.sbomify.com/MAL-2025-48638/): Malicious code in dhemrdhs92010 (npm) (malicious package)
- [MAL-2025-48637](https://insights.sbomify.com/MAL-2025-48637/): Malicious code in dhemrdhs92009 (npm) (malicious package)
- [MAL-2025-48636](https://insights.sbomify.com/MAL-2025-48636/): Malicious code in dhemrdhs920072 (npm) (malicious package)
- [MAL-2025-48635](https://insights.sbomify.com/MAL-2025-48635/): Malicious code in dhemrdhs92007 (npm) (malicious package)
- [MAL-2025-48634](https://insights.sbomify.com/MAL-2025-48634/): Malicious code in dhemrdhs92006 (npm) (malicious package)
- [MAL-2025-48633](https://insights.sbomify.com/MAL-2025-48633/): Malicious code in dhemrdhs92004 (npm) (malicious package)
- [MAL-2025-48632](https://insights.sbomify.com/MAL-2025-48632/): Malicious code in dhemrdhs84006 (npm) (malicious package)
- [MAL-2025-48631](https://insights.sbomify.com/MAL-2025-48631/): Malicious code in dhemrdhs83600 (npm) (malicious package)
- [MAL-2025-48630](https://insights.sbomify.com/MAL-2025-48630/): Malicious code in dhemrdhs79029 (npm) (malicious package)
- [MAL-2025-4863](https://insights.sbomify.com/MAL-2025-4863/): Malicious code in pipreqs (npm) (malicious package)
- [MAL-2025-48629](https://insights.sbomify.com/MAL-2025-48629/): Malicious code in dhemrdhs60214 (npm) (malicious package)
- [MAL-2025-48628](https://insights.sbomify.com/MAL-2025-48628/): Malicious code in dhemrdhs60152 (npm) (malicious package)
- [MAL-2025-48627](https://insights.sbomify.com/MAL-2025-48627/): Malicious code in dhemrdhs60015 (npm) (malicious package)
- [MAL-2025-48626](https://insights.sbomify.com/MAL-2025-48626/): Malicious code in dhemrdhs51214 (npm) (malicious package)
- [MAL-2025-48625](https://insights.sbomify.com/MAL-2025-48625/): Malicious code in dhchukyso (npm) (malicious package)
- [MAL-2025-48624](https://insights.sbomify.com/MAL-2025-48624/): Malicious code in de-sxm-reactlib (npm) (malicious package)
- [MAL-2025-48623](https://insights.sbomify.com/MAL-2025-48623/): Malicious code in datadog-eventhub-forwarder (npm) (malicious package)
- [MAL-2025-48622](https://insights.sbomify.com/MAL-2025-48622/): Malicious code in data-gsyb11 (npm) (malicious package)
- [MAL-2025-48621](https://insights.sbomify.com/MAL-2025-48621/): Malicious code in cypress-typescript (npm) (malicious package)
- [MAL-2025-48620](https://insights.sbomify.com/MAL-2025-48620/): Malicious code in cucumber-js-cypress-cucumber (npm) (malicious package)
- [MAL-2025-4862](https://insights.sbomify.com/MAL-2025-4862/): Malicious code in opt-einsum (npm) (malicious package)
- [MAL-2025-48619](https://insights.sbomify.com/MAL-2025-48619/): Malicious code in cross-app (npm) (malicious package)
- [MAL-2025-48618](https://insights.sbomify.com/MAL-2025-48618/): Malicious code in coreipc (npm) (malicious package)
- [MAL-2025-48617](https://insights.sbomify.com/MAL-2025-48617/): Malicious code in cloud-data (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/573/