# Vulnerabilities published in 2025 - [MAL-2025-48346](https://insights.sbomify.com/MAL-2025-48346/): Malicious code in scr-web-production (npm) (malicious package) - [MAL-2025-48345](https://insights.sbomify.com/MAL-2025-48345/): Malicious code in scr-theme-production (npm) (malicious package) - [MAL-2025-48344](https://insights.sbomify.com/MAL-2025-48344/): Malicious code in scr-notification-system (npm) (malicious package) - [MAL-2025-48343](https://insights.sbomify.com/MAL-2025-48343/): Malicious code in scr-file-theme (npm) (malicious package) - [MAL-2025-48342](https://insights.sbomify.com/MAL-2025-48342/): Malicious code in scr-database (npm) (malicious package) - [MAL-2025-48341](https://insights.sbomify.com/MAL-2025-48341/): Malicious code in scr-cloud-project (npm) (malicious package) - [MAL-2025-48340](https://insights.sbomify.com/MAL-2025-48340/): Malicious code in project-serum (npm) (malicious package) - [MAL-2025-4834](https://insights.sbomify.com/MAL-2025-4834/): Malicious code in http-proxy-error (npm) (malicious package) - [MAL-2025-48339](https://insights.sbomify.com/MAL-2025-48339/): Malicious code in mad-8.2.1.2.2.8 (npm) (malicious package) - [MAL-2025-48338](https://insights.sbomify.com/MAL-2025-48338/): Malicious code in mad-4.2.1.2.2.8 (npm) (malicious package) - [MAL-2025-48337](https://insights.sbomify.com/MAL-2025-48337/): Malicious code in mad-3.2.1.2.2.8 (npm) (malicious package) - [MAL-2025-48336](https://insights.sbomify.com/MAL-2025-48336/): Malicious code in mad-1.2.8.2.2.8 (npm) (malicious package) - [MAL-2025-48335](https://insights.sbomify.com/MAL-2025-48335/): Malicious code in mad-1.2.7.2.2.8 (npm) (malicious package) - [MAL-2025-48334](https://insights.sbomify.com/MAL-2025-48334/): Malicious code in mad-1.2.6.2.2.8 (npm) (malicious package) - [MAL-2025-48333](https://insights.sbomify.com/MAL-2025-48333/): Malicious code in mad-1.2.5.2.2.8 (npm) (malicious package) - [MAL-2025-48332](https://insights.sbomify.com/MAL-2025-48332/): Malicious code in mad-1.2.4.2.2.8 (npm) (malicious package) - [MAL-2025-48331](https://insights.sbomify.com/MAL-2025-48331/): Malicious code in mad-1.2.3.2.2.8 (npm) (malicious package) - [MAL-2025-48330](https://insights.sbomify.com/MAL-2025-48330/): Malicious code in mad-1.2.2.2.2.8 (npm) (malicious package) - [MAL-2025-4833](https://insights.sbomify.com/MAL-2025-4833/): Malicious code in gwnodejssectest1 (npm) (malicious package) - [MAL-2025-48329](https://insights.sbomify.com/MAL-2025-48329/): Malicious code in internallib_v838 (npm) (malicious package) - [MAL-2025-48328](https://insights.sbomify.com/MAL-2025-48328/): Malicious code in internallib_v730-teste (npm) (malicious package) - [MAL-2025-48327](https://insights.sbomify.com/MAL-2025-48327/): Malicious code in internallib_v600 (npm) (malicious package) - [MAL-2025-48326](https://insights.sbomify.com/MAL-2025-48326/): Malicious code in internallib_v190 (npm) (malicious package) - [MAL-2025-48325](https://insights.sbomify.com/MAL-2025-48325/): Malicious code in internallib_v14 (npm) (malicious package) - [MAL-2025-48324](https://insights.sbomify.com/MAL-2025-48324/): Malicious code in internallib_v125 (npm) (malicious package) - [MAL-2025-48323](https://insights.sbomify.com/MAL-2025-48323/): Malicious code in eslint-config-jest (npm) (malicious package) - [MAL-2025-48322](https://insights.sbomify.com/MAL-2025-48322/): Malicious code in vite-babel-plugin-es6-promise (npm) (malicious package) - [MAL-2025-48321](https://insights.sbomify.com/MAL-2025-48321/): Malicious code in react-ui-toast (npm) (malicious package) - [MAL-2025-48320](https://insights.sbomify.com/MAL-2025-48320/): Malicious code in react-tediter (npm) (malicious package) - [MAL-2025-4832](https://insights.sbomify.com/MAL-2025-4832/): Malicious code in gunicorn (npm) (malicious package) - [MAL-2025-48319](https://insights.sbomify.com/MAL-2025-48319/): Malicious code in pretty-format-setting (npm) (malicious package) - [MAL-2025-48318](https://insights.sbomify.com/MAL-2025-48318/): Malicious code in nodelog-lite (npm) (malicious package) - [MAL-2025-48317](https://insights.sbomify.com/MAL-2025-48317/): Malicious code in cloak-withdraw-proofs (npm) (malicious package) - [MAL-2025-48316](https://insights.sbomify.com/MAL-2025-48316/): Malicious code in analytics-data-collection-fe (npm) (malicious package) - [MAL-2025-48315](https://insights.sbomify.com/MAL-2025-48315/): Malicious code in ing-util-analytics6 (npm) (malicious package) - [MAL-2025-48314](https://insights.sbomify.com/MAL-2025-48314/): Malicious code in my-unique-package-here (npm) (malicious package) - [MAL-2025-48313](https://insights.sbomify.com/MAL-2025-48313/): Malicious code in vue-analytics-plugin (npm) (malicious package) - [MAL-2025-48312](https://insights.sbomify.com/MAL-2025-48312/): Malicious code in superbet-icons (npm) (malicious package) - [MAL-2025-48311](https://insights.sbomify.com/MAL-2025-48311/): Malicious code in webpack-css-branch-loader (npm) (malicious package) - [MAL-2025-48310](https://insights.sbomify.com/MAL-2025-48310/): Malicious code in vite-plugin-vue-layout (npm) (malicious package) - [MAL-2025-4831](https://insights.sbomify.com/MAL-2025-4831/): Malicious code in google-auth-httplib2 (npm) (malicious package) - [MAL-2025-48309](https://insights.sbomify.com/MAL-2025-48309/): Malicious code in vite-plugin-parse (npm) (malicious package) - [MAL-2025-48308](https://insights.sbomify.com/MAL-2025-48308/): Malicious code in vite-plugin-es6-babel (npm) (malicious package) - [MAL-2025-48307](https://insights.sbomify.com/MAL-2025-48307/): Malicious code in tailwindcss-remotion (npm) (malicious package) - [MAL-2025-48306](https://insights.sbomify.com/MAL-2025-48306/): Malicious code in tailwindcss-animatexs (npm) (malicious package) - [MAL-2025-48305](https://insights.sbomify.com/MAL-2025-48305/): Malicious code in tailwind-style-components (npm) (malicious package) - [MAL-2025-48304](https://insights.sbomify.com/MAL-2025-48304/): Malicious code in simple-icon-maker (npm) (malicious package) - [MAL-2025-48303](https://insights.sbomify.com/MAL-2025-48303/): Malicious code in react-toast-ui (npm) (malicious package) - [MAL-2025-48302](https://insights.sbomify.com/MAL-2025-48302/): Malicious code in qrcode-pretty-react (npm) (malicious package) - [MAL-2025-48301](https://insights.sbomify.com/MAL-2025-48301/): Malicious code in mongodb-orn (npm) (malicious package) - [MAL-2025-48300](https://insights.sbomify.com/MAL-2025-48300/): Malicious code in lovable-ts (npm) (malicious package) - [MAL-2025-4830](https://insights.sbomify.com/MAL-2025-4830/): Malicious code in fyre-utils (npm) (malicious package) - [MAL-2025-483](https://insights.sbomify.com/MAL-2025-483/): Malicious code in iberia-analytics (npm) (malicious package) - [MAL-2025-48299](https://insights.sbomify.com/MAL-2025-48299/): Malicious code in log4action (npm) (malicious package) - [MAL-2025-48298](https://insights.sbomify.com/MAL-2025-48298/): Malicious code in matrix-charts (npm) (malicious package) - [MAL-2025-48297](https://insights.sbomify.com/MAL-2025-48297/): Malicious code in shakti-platform (npm) (malicious package) - [MAL-2025-48296](https://insights.sbomify.com/MAL-2025-48296/): Malicious code in react-icons-loader (npm) (malicious package) - [MAL-2025-48295](https://insights.sbomify.com/MAL-2025-48295/): Malicious code in pino-node (npm) (malicious package) - [MAL-2025-48294](https://insights.sbomify.com/MAL-2025-48294/): Malicious code in nf-iso-properties (npm) (malicious package) - [MAL-2025-48293](https://insights.sbomify.com/MAL-2025-48293/): Malicious code in kn-nf-iso-properties-kn1 (npm) (malicious package) - [MAL-2025-48292](https://insights.sbomify.com/MAL-2025-48292/): Malicious code in flight-suit (npm) (malicious package) - [MAL-2025-48291](https://insights.sbomify.com/MAL-2025-48291/): Malicious code in eslint-js-config (npm) (malicious package) - [MAL-2025-48290](https://insights.sbomify.com/MAL-2025-48290/): Malicious code in @pcxm/gasket-single-spa (npm) (malicious package) - [MAL-2025-4829](https://insights.sbomify.com/MAL-2025-4829/): Malicious code in express-jscookie (npm) (malicious package) - [MAL-2025-48289](https://insights.sbomify.com/MAL-2025-48289/): Malicious code in @evo-tech/backoffice-test-api (npm) (malicious package) - [MAL-2025-48288](https://insights.sbomify.com/MAL-2025-48288/): Malicious code in tw-webkit-universal (npm) (malicious package) - [MAL-2025-48287](https://insights.sbomify.com/MAL-2025-48287/): Malicious code in sp-web-utils-lib (npm) (malicious package) - [MAL-2025-48286](https://insights.sbomify.com/MAL-2025-48286/): Malicious code in mshops-web-metrics-components (npm) (malicious package) - [MAL-2025-48285](https://insights.sbomify.com/MAL-2025-48285/): Malicious code in mp3-web-lib (npm) (malicious package) - [MAL-2025-48284](https://insights.sbomify.com/MAL-2025-48284/): Malicious code in melichat-chat-library (npm) (malicious package) - [MAL-2025-48283](https://insights.sbomify.com/MAL-2025-48283/): Malicious code in internal-checkout-bricks (npm) (malicious package) - [MAL-2025-48282](https://insights.sbomify.com/MAL-2025-48282/): Malicious code in frontend-prevent-open-redirect (npm) (malicious package) - [MAL-2025-48281](https://insights.sbomify.com/MAL-2025-48281/): Malicious code in frontend-photoswipe (npm) (malicious package) - [MAL-2025-48280](https://insights.sbomify.com/MAL-2025-48280/): Malicious code in frontend-metrics-collector-sdk (npm) (malicious package) - [MAL-2025-4828](https://insights.sbomify.com/MAL-2025-4828/): Malicious code in espresso-idling-resource (npm) (malicious package) - [MAL-2025-48279](https://insights.sbomify.com/MAL-2025-48279/): Malicious code in frontend-layout (npm) (malicious package) - [MAL-2025-48278](https://insights.sbomify.com/MAL-2025-48278/): Malicious code in frontend-google-tag-manager (npm) (malicious package) - [MAL-2025-48277](https://insights.sbomify.com/MAL-2025-48277/): Malicious code in dt-frontend-utils (npm) (malicious package) - [MAL-2025-48276](https://insights.sbomify.com/MAL-2025-48276/): Malicious code in cx-hub-interaction-ui-lib (npm) (malicious package) - [MAL-2025-48275](https://insights.sbomify.com/MAL-2025-48275/): Malicious code in cx-contact-hub-lib (npm) (malicious package) - [MAL-2025-48274](https://insights.sbomify.com/MAL-2025-48274/): Malicious code in cbt-gs-switcher-library (npm) (malicious package) - [MAL-2025-48273](https://insights.sbomify.com/MAL-2025-48273/): Malicious code in buyingflow-core-nav-web (npm) (malicious package) - [MAL-2025-48272](https://insights.sbomify.com/MAL-2025-48272/): Malicious code in andes-react-floater (npm) (malicious package) - [MAL-2025-48271](https://insights.sbomify.com/MAL-2025-48271/): Malicious code in advertising-charts (npm) (malicious package) - [MAL-2025-48270](https://insights.sbomify.com/MAL-2025-48270/): Malicious code in nodelogex (npm) (malicious package) - [MAL-2025-4827](https://insights.sbomify.com/MAL-2025-4827/): Malicious code in eslint-parser-vue (npm) (malicious package) - [MAL-2025-48269](https://insights.sbomify.com/MAL-2025-48269/): Malicious code in vite-next-loggers (npm) (malicious package) - [MAL-2025-48268](https://insights.sbomify.com/MAL-2025-48268/): Malicious code in vite-configs-viewer (npm) (malicious package) - [MAL-2025-48267](https://insights.sbomify.com/MAL-2025-48267/): Malicious code in react-outcome-error-alert (npm) (malicious package) - [MAL-2025-48266](https://insights.sbomify.com/MAL-2025-48266/): Malicious code in react-copack (npm) (malicious package) - [MAL-2025-48265](https://insights.sbomify.com/MAL-2025-48265/): Malicious code in phoenix-experience (npm) (malicious package) - [MAL-2025-48264](https://insights.sbomify.com/MAL-2025-48264/): Malicious code in orbital-ledger (npm) (malicious package) - [MAL-2025-48263](https://insights.sbomify.com/MAL-2025-48263/): Malicious code in nodemon-pkg (npm) (malicious package) - [MAL-2025-48262](https://insights.sbomify.com/MAL-2025-48262/): Malicious code in mad-5.0.0.2.2.8. (npm) (malicious package) - [MAL-2025-48261](https://insights.sbomify.com/MAL-2025-48261/): Malicious code in mad-4.0.1.2.2.8. (npm) (malicious package) - [MAL-2025-48260](https://insights.sbomify.com/MAL-2025-48260/): Malicious code in mad-4.0.0.2.2.8. (npm) (malicious package) - [MAL-2025-4826](https://insights.sbomify.com/MAL-2025-4826/): Malicious code in ember-reactive-decorators (npm) (malicious package) - [MAL-2025-48259](https://insights.sbomify.com/MAL-2025-48259/): Malicious code in mad-3.0.2.2.2.8. (npm) (malicious package) - [MAL-2025-48258](https://insights.sbomify.com/MAL-2025-48258/): Malicious code in mad-3.0.1.2.2.8. (npm) (malicious package) - [MAL-2025-48257](https://insights.sbomify.com/MAL-2025-48257/): Malicious code in mad-3.0.0.2.2.8. (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/577/