# Vulnerabilities published in 2025 - [MAL-2025-48436](https://insights.sbomify.com/MAL-2025-48436/): Malicious code in tailwind-utilx (npm) (malicious package) - [MAL-2025-48435](https://insights.sbomify.com/MAL-2025-48435/): Malicious code in pino-logging (npm) (malicious package) - [MAL-2025-48434](https://insights.sbomify.com/MAL-2025-48434/): Malicious code in internal-plugin-lifecycle-card (npm) (malicious package) - [MAL-2025-48433](https://insights.sbomify.com/MAL-2025-48433/): Malicious code in corp-ais-client-my-channel-lib (npm) (malicious package) - [MAL-2025-48432](https://insights.sbomify.com/MAL-2025-48432/): Malicious code in company-browser-package (npm) (malicious package) - [MAL-2025-48431](https://insights.sbomify.com/MAL-2025-48431/): Malicious code in enjin-docs (npm) (malicious package) - [MAL-2025-48430](https://insights.sbomify.com/MAL-2025-48430/): Malicious code in debug-mj-v3 (npm) (malicious package) - [MAL-2025-4843](https://insights.sbomify.com/MAL-2025-4843/): Malicious code in libffi-dev (npm) (malicious package) - [MAL-2025-48429](https://insights.sbomify.com/MAL-2025-48429/): Malicious code in debug-mj (npm) (malicious package) - [MAL-2025-48428](https://insights.sbomify.com/MAL-2025-48428/): Malicious code in package-f (npm) (malicious package) - [MAL-2025-48427](https://insights.sbomify.com/MAL-2025-48427/): Malicious code in batchw-test-common-config (npm) (malicious package) - [MAL-2025-48426](https://insights.sbomify.com/MAL-2025-48426/): Malicious code in vite-plugin-parseflow (npm) (malicious package) - [MAL-2025-48425](https://insights.sbomify.com/MAL-2025-48425/): Malicious code in synthetixio-deps-security-notice (npm) (malicious package) - [MAL-2025-48424](https://insights.sbomify.com/MAL-2025-48424/): Malicious code in summerfi-typescript-config-security-notice (npm) (malicious package) - [MAL-2025-48423](https://insights.sbomify.com/MAL-2025-48423/): Malicious code in summerfi-eslint-config-security-notice (npm) (malicious package) - [MAL-2025-48422](https://insights.sbomify.com/MAL-2025-48422/): Malicious code in deficonnect-private-sdk (npm) (malicious package) - [MAL-2025-48421](https://insights.sbomify.com/MAL-2025-48421/): Malicious code in deficonnect-internal-utils (npm) (malicious package) - [MAL-2025-48420](https://insights.sbomify.com/MAL-2025-48420/): Malicious code in curve-ui-kit-security-notice (npm) (malicious package) - [MAL-2025-4842](https://insights.sbomify.com/MAL-2025-4842/): Malicious code in knn-kdtreejs (npm) (malicious package) - [MAL-2025-48419](https://insights.sbomify.com/MAL-2025-48419/): Malicious code in cryptocom-private-api (npm) (malicious package) - [MAL-2025-48418](https://insights.sbomify.com/MAL-2025-48418/): Malicious code in cryptocom-internal-auth (npm) (malicious package) - [MAL-2025-48417](https://insights.sbomify.com/MAL-2025-48417/): Malicious code in cryptocom-corp-tools (npm) (malicious package) - [MAL-2025-48416](https://insights.sbomify.com/MAL-2025-48416/): Malicious code in yajusenpai (npm) (malicious package) - [MAL-2025-48415](https://insights.sbomify.com/MAL-2025-48415/): Malicious code in scouthus921 (npm) (malicious package) - [MAL-2025-48414](https://insights.sbomify.com/MAL-2025-48414/): Malicious code in csv-parsing-xyz (npm) (malicious package) - [MAL-2025-48413](https://insights.sbomify.com/MAL-2025-48413/): Malicious code in aps-configurator-inventor (npm) (malicious package) - [MAL-2025-48412](https://insights.sbomify.com/MAL-2025-48412/): Malicious code in private-callouts (npm) (malicious package) - [MAL-2025-48411](https://insights.sbomify.com/MAL-2025-48411/): Malicious code in private-callout-queue (npm) (malicious package) - [MAL-2025-48410](https://insights.sbomify.com/MAL-2025-48410/): Malicious code in kmf-cookiecatcher (npm) (malicious package) - [MAL-2025-4841](https://insights.sbomify.com/MAL-2025-4841/): Malicious code in keypress-win (npm) (malicious package) - [MAL-2025-48409](https://insights.sbomify.com/MAL-2025-48409/): Malicious code in internal-greeter-utils (npm) (malicious package) - [MAL-2025-48408](https://insights.sbomify.com/MAL-2025-48408/): Malicious code in company-request-access (npm) (malicious package) - [MAL-2025-48407](https://insights.sbomify.com/MAL-2025-48407/): Malicious code in company-overview (npm) (malicious package) - [MAL-2025-48406](https://insights.sbomify.com/MAL-2025-48406/): Malicious code in company-logo (npm) (malicious package) - [MAL-2025-48405](https://insights.sbomify.com/MAL-2025-48405/): Malicious code in company-access-pending (npm) (malicious package) - [MAL-2025-48404](https://insights.sbomify.com/MAL-2025-48404/): Malicious code in akdump (npm) (malicious package) - [MAL-2025-48403](https://insights.sbomify.com/MAL-2025-48403/): Malicious code in akasearch (npm) (malicious package) - [MAL-2025-48402](https://insights.sbomify.com/MAL-2025-48402/): Malicious code in wt-react (npm) (malicious package) - [MAL-2025-48401](https://insights.sbomify.com/MAL-2025-48401/): Malicious code in supplychain-firewall-benchmark-hello (npm) (malicious package) - [MAL-2025-48400](https://insights.sbomify.com/MAL-2025-48400/): Malicious code in graphorbit (npm) (malicious package) - [MAL-2025-4840](https://insights.sbomify.com/MAL-2025-4840/): Malicious code in karma-spec-filter (npm) (malicious package) - [MAL-2025-484](https://insights.sbomify.com/MAL-2025-484/): Malicious code in iberia-api (npm) (malicious package) - [MAL-2025-48399](https://insights.sbomify.com/MAL-2025-48399/): Malicious code in xssnn20251 (npm) (malicious package) - [MAL-2025-48398](https://insights.sbomify.com/MAL-2025-48398/): Malicious code in ven0m90test1 (npm) (malicious package) - [MAL-2025-48397](https://insights.sbomify.com/MAL-2025-48397/): Malicious code in ven0m90test (npm) (malicious package) - [MAL-2025-48396](https://insights.sbomify.com/MAL-2025-48396/): Malicious code in validate-here-services (npm) (malicious package) - [MAL-2025-48395](https://insights.sbomify.com/MAL-2025-48395/): Malicious code in solhint-plugin-namechain (npm) (malicious package) - [MAL-2025-48394](https://insights.sbomify.com/MAL-2025-48394/): Malicious code in react-dnd-html5-backend-14 (npm) (malicious package) - [MAL-2025-48393](https://insights.sbomify.com/MAL-2025-48393/): Malicious code in optional-native-module-xyz (npm) (malicious package) - [MAL-2025-48392](https://insights.sbomify.com/MAL-2025-48392/): Malicious code in ninjaleetpkg1 (npm) (malicious package) - [MAL-2025-48391](https://insights.sbomify.com/MAL-2025-48391/): Malicious code in ninjaleetpkg (npm) (malicious package) - [MAL-2025-48390](https://insights.sbomify.com/MAL-2025-48390/): Malicious code in niletestpkg1 (npm) (malicious package) - [MAL-2025-4839](https://insights.sbomify.com/MAL-2025-4839/): Malicious code in jsons-pack (npm) (malicious package) - [MAL-2025-48389](https://insights.sbomify.com/MAL-2025-48389/): Malicious code in niletestpkg (npm) (malicious package) - [MAL-2025-48388](https://insights.sbomify.com/MAL-2025-48388/): Malicious code in nilepkg9 (npm) (malicious package) - [MAL-2025-48387](https://insights.sbomify.com/MAL-2025-48387/): Malicious code in nilepkg8 (npm) (malicious package) - [MAL-2025-48386](https://insights.sbomify.com/MAL-2025-48386/): Malicious code in nilepkg7 (npm) (malicious package) - [MAL-2025-48385](https://insights.sbomify.com/MAL-2025-48385/): Malicious code in nilepkg5 (npm) (malicious package) - [MAL-2025-48384](https://insights.sbomify.com/MAL-2025-48384/): Malicious code in nilepkg4 (npm) (malicious package) - [MAL-2025-48383](https://insights.sbomify.com/MAL-2025-48383/): Malicious code in nilepkg3 (npm) (malicious package) - [MAL-2025-48382](https://insights.sbomify.com/MAL-2025-48382/): Malicious code in nilepkg2 (npm) (malicious package) - [MAL-2025-48381](https://insights.sbomify.com/MAL-2025-48381/): Malicious code in nilepkg10 (npm) (malicious package) - [MAL-2025-48380](https://insights.sbomify.com/MAL-2025-48380/): Malicious code in nilepkg1 (npm) (malicious package) - [MAL-2025-4838](https://insights.sbomify.com/MAL-2025-4838/): Malicious code in javascript-heap (npm) (malicious package) - [MAL-2025-48379](https://insights.sbomify.com/MAL-2025-48379/): Malicious code in nileninjapocpkg3 (npm) (malicious package) - [MAL-2025-48378](https://insights.sbomify.com/MAL-2025-48378/): Malicious code in nileninjapocpkg2 (npm) (malicious package) - [MAL-2025-48377](https://insights.sbomify.com/MAL-2025-48377/): Malicious code in nileninjapocpkg1 (npm) (malicious package) - [MAL-2025-48376](https://insights.sbomify.com/MAL-2025-48376/): Malicious code in nileninjapocpkg (npm) (malicious package) - [MAL-2025-48375](https://insights.sbomify.com/MAL-2025-48375/): Malicious code in nileninjapkg6 (npm) (malicious package) - [MAL-2025-48374](https://insights.sbomify.com/MAL-2025-48374/): Malicious code in nileninjapkg5 (npm) (malicious package) - [MAL-2025-48373](https://insights.sbomify.com/MAL-2025-48373/): Malicious code in nileninjapkg4 (npm) (malicious package) - [MAL-2025-48372](https://insights.sbomify.com/MAL-2025-48372/): Malicious code in nileninjapkg3 (npm) (malicious package) - [MAL-2025-48371](https://insights.sbomify.com/MAL-2025-48371/): Malicious code in nileninjapkg2 (npm) (malicious package) - [MAL-2025-48370](https://insights.sbomify.com/MAL-2025-48370/): Malicious code in nileninjapkg (npm) (malicious package) - [MAL-2025-4837](https://insights.sbomify.com/MAL-2025-4837/): Malicious code in jasmine-marbers (npm) (malicious package) - [MAL-2025-48369](https://insights.sbomify.com/MAL-2025-48369/): Malicious code in java-common (npm) (malicious package) - [MAL-2025-48368](https://insights.sbomify.com/MAL-2025-48368/): Malicious code in ios-signing-common (npm) (malicious package) - [MAL-2025-48367](https://insights.sbomify.com/MAL-2025-48367/): Malicious code in hzero-ued-icon (npm) (malicious package) - [MAL-2025-48366](https://insights.sbomify.com/MAL-2025-48366/): Malicious code in hoodle-plugins-manager (npm) (malicious package) - [MAL-2025-48365](https://insights.sbomify.com/MAL-2025-48365/): Malicious code in heyheyhey (npm) (malicious package) - [MAL-2025-48364](https://insights.sbomify.com/MAL-2025-48364/): Malicious code in flight-debug (npm) (malicious package) - [MAL-2025-48363](https://insights.sbomify.com/MAL-2025-48363/): Malicious code in filen-apps (npm) (malicious package) - [MAL-2025-48362](https://insights.sbomify.com/MAL-2025-48362/): Malicious code in eslint-plugin-react-discord (npm) (malicious package) - [MAL-2025-48361](https://insights.sbomify.com/MAL-2025-48361/): Malicious code in eslint-plugin-custom-msal-w (npm) (malicious package) - [MAL-2025-48360](https://insights.sbomify.com/MAL-2025-48360/): Malicious code in e2e-test-utils-w (npm) (malicious package) - [MAL-2025-4836](https://insights.sbomify.com/MAL-2025-4836/): Malicious code in import-remotes (npm) (malicious package) - [MAL-2025-48359](https://insights.sbomify.com/MAL-2025-48359/): Malicious code in creact-native-performance-lists-profiler (npm) (malicious package) - [MAL-2025-48358](https://insights.sbomify.com/MAL-2025-48358/): Malicious code in codat-snippets (npm) (malicious package) - [MAL-2025-48357](https://insights.sbomify.com/MAL-2025-48357/): Malicious code in checkout-ui-extensions-react (npm) (malicious package) - [MAL-2025-48356](https://insights.sbomify.com/MAL-2025-48356/): Malicious code in chain-xor (npm) (malicious package) - [MAL-2025-48355](https://insights.sbomify.com/MAL-2025-48355/): Malicious code in card-present-integration (npm) (malicious package) - [MAL-2025-48354](https://insights.sbomify.com/MAL-2025-48354/): Malicious code in @testerconfusion/malicious-poc (npm) (malicious package) - [MAL-2025-48353](https://insights.sbomify.com/MAL-2025-48353/): Malicious code in @pwnedshell/nn (npm) (malicious package) - [MAL-2025-48352](https://insights.sbomify.com/MAL-2025-48352/): Malicious code in @igh/server-updater-ssh-l2 (npm) (malicious package) - [MAL-2025-48351](https://insights.sbomify.com/MAL-2025-48351/): Malicious code in @igh/server-updater-ssh (npm) (malicious package) - [MAL-2025-48350](https://insights.sbomify.com/MAL-2025-48350/): Malicious code in @global-engineering-shared/gweb-material-global (npm) (malicious package) - [MAL-2025-4835](https://insights.sbomify.com/MAL-2025-4835/): Malicious code in iceberg-api (npm) (malicious package) - [MAL-2025-48349](https://insights.sbomify.com/MAL-2025-48349/): Malicious code in webpack-load-css-branch (npm) (malicious package) - [MAL-2025-48348](https://insights.sbomify.com/MAL-2025-48348/): Malicious code in simple-scr-app (npm) (malicious package) - [MAL-2025-48347](https://insights.sbomify.com/MAL-2025-48347/): Malicious code in simple-app-theme (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/576/