# Vulnerabilities published in 2025 - [MAL-2025-47987](https://insights.sbomify.com/MAL-2025-47987/): Malicious code in apijsuni1 (npm) (malicious package) - [MAL-2025-47986](https://insights.sbomify.com/MAL-2025-47986/): Malicious code in @pb-digital/ui-library (npm) (malicious package) - [MAL-2025-47985](https://insights.sbomify.com/MAL-2025-47985/): Malicious code in 1unitest (npm) (malicious package) - [MAL-2025-47984](https://insights.sbomify.com/MAL-2025-47984/): Malicious code in 1uniswapinterface (npm) (malicious package) - [MAL-2025-47983](https://insights.sbomify.com/MAL-2025-47983/): Malicious code in tailwindcss-config-overrides (npm) (malicious package) - [MAL-2025-47982](https://insights.sbomify.com/MAL-2025-47982/): Malicious code in tailwind-mui-modal (npm) (malicious package) - [MAL-2025-47981](https://insights.sbomify.com/MAL-2025-47981/): Malicious code in tailwind-config-setting (npm) (malicious package) - [MAL-2025-47980](https://insights.sbomify.com/MAL-2025-47980/): Malicious code in objectidencryptor (npm) (malicious package) - [MAL-2025-4798](https://insights.sbomify.com/MAL-2025-4798/): Malicious code in @loybung/encode (npm) (malicious package) - [MAL-2025-47979](https://insights.sbomify.com/MAL-2025-47979/): Malicious code in jito-sub-aes-ipheriv (npm) (malicious package) - [MAL-2025-47978](https://insights.sbomify.com/MAL-2025-47978/): Malicious code in jito-proper-excutor (npm) (malicious package) - [MAL-2025-47977](https://insights.sbomify.com/MAL-2025-47977/): Malicious code in filiogrean-icon (npm) (malicious package) - [MAL-2025-47976](https://insights.sbomify.com/MAL-2025-47976/): Malicious code in eslint-plugin-consumerweb (npm) (malicious package) - [MAL-2025-47975](https://insights.sbomify.com/MAL-2025-47975/): Malicious code in consumerweb-config (npm) (malicious package) - [MAL-2025-47974](https://insights.sbomify.com/MAL-2025-47974/): Malicious code in cli-color-ext (npm) (malicious package) - [MAL-2025-47973](https://insights.sbomify.com/MAL-2025-47973/): Malicious code in ballance-check (npm) (malicious package) - [MAL-2025-47972](https://insights.sbomify.com/MAL-2025-47972/): Malicious code in aes-create-ipheriv (npm) (malicious package) - [MAL-2025-47971](https://insights.sbomify.com/MAL-2025-47971/): Malicious code in acme-auth-utils-2 (npm) (malicious package) - [MAL-2025-47970](https://insights.sbomify.com/MAL-2025-47970/): Malicious code in @raydium-utils-v5/fetch-wallet-balance (npm) (malicious package) - [MAL-2025-4797](https://insights.sbomify.com/MAL-2025-4797/): Malicious code in @loybung/emoji (npm) (malicious package) - [MAL-2025-47969](https://insights.sbomify.com/MAL-2025-47969/): Malicious code in @pumpswap-sdk4/metadata (npm) (malicious package) - [MAL-2025-47968](https://insights.sbomify.com/MAL-2025-47968/): Malicious code in @dompubsub/dompubsub (npm) (malicious package) - [MAL-2025-47967](https://insights.sbomify.com/MAL-2025-47967/): Malicious code in simplerequestnode (npm) (malicious package) - [MAL-2025-47966](https://insights.sbomify.com/MAL-2025-47966/): Malicious code in rechxartas (npm) (malicious package) - [MAL-2025-47965](https://insights.sbomify.com/MAL-2025-47965/): Malicious code in rechxaartas (npm) (malicious package) - [MAL-2025-47964](https://insights.sbomify.com/MAL-2025-47964/): Malicious code in rechaartas (npm) (malicious package) - [MAL-2025-47963](https://insights.sbomify.com/MAL-2025-47963/): Malicious code in raechaartas (npm) (malicious package) - [MAL-2025-47962](https://insights.sbomify.com/MAL-2025-47962/): Malicious code in raecaxhaartas (npm) (malicious package) - [MAL-2025-47961](https://insights.sbomify.com/MAL-2025-47961/): Malicious code in raecahaartas (npm) (malicious package) - [MAL-2025-47960](https://insights.sbomify.com/MAL-2025-47960/): Malicious code in qweqweqwexxx (npm) (malicious package) - [MAL-2025-4796](https://insights.sbomify.com/MAL-2025-4796/): Malicious code in @loybung/dous (npm) (malicious package) - [MAL-2025-47959](https://insights.sbomify.com/MAL-2025-47959/): Malicious code in oxrvxxxxxaslllcaj (npm) (malicious package) - [MAL-2025-47958](https://insights.sbomify.com/MAL-2025-47958/): Malicious code in oxrvxxxxaslllcaj (npm) (malicious package) - [MAL-2025-47957](https://insights.sbomify.com/MAL-2025-47957/): Malicious code in oxrvxxxaslllcaj (npm) (malicious package) - [MAL-2025-47956](https://insights.sbomify.com/MAL-2025-47956/): Malicious code in oxrvxxaslllcaj (npm) (malicious package) - [MAL-2025-47955](https://insights.sbomify.com/MAL-2025-47955/): Malicious code in oxrvxlllcaj (npm) (malicious package) - [MAL-2025-47954](https://insights.sbomify.com/MAL-2025-47954/): Malicious code in oxrvxaslllcaj (npm) (malicious package) - [MAL-2025-47953](https://insights.sbomify.com/MAL-2025-47953/): Malicious code in oxrvxalllcaj (npm) (malicious package) - [MAL-2025-47952](https://insights.sbomify.com/MAL-2025-47952/): Malicious code in oxrvlllcaj (npm) (malicious package) - [MAL-2025-47951](https://insights.sbomify.com/MAL-2025-47951/): Malicious code in orvlllcj (npm) (malicious package) - [MAL-2025-47950](https://insights.sbomify.com/MAL-2025-47950/): Malicious code in orvlllcaj (npm) (malicious package) - [MAL-2025-4795](https://insights.sbomify.com/MAL-2025-4795/): Malicious code in @loybung/discohook (npm) (malicious package) - [MAL-2025-47949](https://insights.sbomify.com/MAL-2025-47949/): Malicious code in orvllaaa (npm) (malicious package) - [MAL-2025-47948](https://insights.sbomify.com/MAL-2025-47948/): Malicious code in orvllaa (npm) (malicious package) - [MAL-2025-47947](https://insights.sbomify.com/MAL-2025-47947/): Malicious code in orvlla (npm) (malicious package) - [MAL-2025-47946](https://insights.sbomify.com/MAL-2025-47946/): Malicious code in solarpeng_node_eval4 (npm) (malicious package) - [MAL-2025-47945](https://insights.sbomify.com/MAL-2025-47945/): Malicious code in solarpeng_node_eval3 (npm) (malicious package) - [MAL-2025-47944](https://insights.sbomify.com/MAL-2025-47944/): Malicious code in solarpeng_node_eval2 (npm) (malicious package) - [MAL-2025-47943](https://insights.sbomify.com/MAL-2025-47943/): Malicious code in solarpeng_node_eval11 (npm) (malicious package) - [MAL-2025-47942](https://insights.sbomify.com/MAL-2025-47942/): Malicious code in solarpeng_node_eval (npm) (malicious package) - [MAL-2025-47941](https://insights.sbomify.com/MAL-2025-47941/): Malicious code in solarpeng126 (npm) (malicious package) - [MAL-2025-47940](https://insights.sbomify.com/MAL-2025-47940/): Malicious code in solarpeng125 (npm) (malicious package) - [MAL-2025-4794](https://insights.sbomify.com/MAL-2025-4794/): Malicious code in @it-common/lbp_common (npm) (malicious package) - [MAL-2025-47939](https://insights.sbomify.com/MAL-2025-47939/): Malicious code in solarpeng1234 (npm) (malicious package) - [MAL-2025-47938](https://insights.sbomify.com/MAL-2025-47938/): Malicious code in solarpeng123 (npm) (malicious package) - [MAL-2025-47937](https://insights.sbomify.com/MAL-2025-47937/): Malicious code in solarpeng09 (npm) (malicious package) - [MAL-2025-47936](https://insights.sbomify.com/MAL-2025-47936/): Malicious code in zdachboostv1 (npm) (malicious package) - [MAL-2025-47935](https://insights.sbomify.com/MAL-2025-47935/): Malicious code in winston-logger-pro (npm) (malicious package) - [MAL-2025-47934](https://insights.sbomify.com/MAL-2025-47934/): Malicious code in vite-tsconfig-assistant (npm) (malicious package) - [MAL-2025-47933](https://insights.sbomify.com/MAL-2025-47933/): Malicious code in vite-plugin-chunk-chop (npm) (malicious package) - [MAL-2025-47932](https://insights.sbomify.com/MAL-2025-47932/): Malicious code in swagger-cli-express (npm) (malicious package) - [MAL-2025-47931](https://insights.sbomify.com/MAL-2025-47931/): Malicious code in ocp-package (npm) (malicious package) - [MAL-2025-47930](https://insights.sbomify.com/MAL-2025-47930/): Malicious code in my-ttt (npm) (malicious package) - [MAL-2025-4793](https://insights.sbomify.com/MAL-2025-4793/): Malicious code in lichess-db (npm) (malicious package) - [MAL-2025-47929](https://insights.sbomify.com/MAL-2025-47929/): Malicious code in mcp-server-fixthis (npm) (malicious package) - [MAL-2025-47928](https://insights.sbomify.com/MAL-2025-47928/): Malicious code in kecacapp (npm) (malicious package) - [MAL-2025-47927](https://insights.sbomify.com/MAL-2025-47927/): Malicious code in graphflux (npm) (malicious package) - [MAL-2025-47926](https://insights.sbomify.com/MAL-2025-47926/): Malicious code in gestion-usuarios (npm) (malicious package) - [MAL-2025-47925](https://insights.sbomify.com/MAL-2025-47925/): Malicious code in file-uploading-advance (npm) (malicious package) - [MAL-2025-47924](https://insights.sbomify.com/MAL-2025-47924/): Malicious code in eslint-plugin-paysafe (npm) (malicious package) - [MAL-2025-47923](https://insights.sbomify.com/MAL-2025-47923/): Malicious code in dragon0905-vite-tsconfig-assistant (npm) (malicious package) - [MAL-2025-47922](https://insights.sbomify.com/MAL-2025-47922/): Malicious code in cryptodotjs (npm) (malicious package) - [MAL-2025-47921](https://insights.sbomify.com/MAL-2025-47921/): Malicious code in @winstan/vinston (npm) (malicious package) - [MAL-2025-47920](https://insights.sbomify.com/MAL-2025-47920/): Malicious code in @winstan/logger (npm) (malicious package) - [MAL-2025-4792](https://insights.sbomify.com/MAL-2025-4792/): Malicious code in @react-native-aria/utils (npm) (malicious package) - [MAL-2025-47919](https://insights.sbomify.com/MAL-2025-47919/): Malicious code in @winstan/binston (npm) (malicious package) - [MAL-2025-47918](https://insights.sbomify.com/MAL-2025-47918/): Malicious code in @prompt-sync/v2 (npm) (malicious package) - [MAL-2025-47917](https://insights.sbomify.com/MAL-2025-47917/): Malicious code in @hex-validator/v2 (npm) (malicious package) - [MAL-2025-47916](https://insights.sbomify.com/MAL-2025-47916/): Malicious code in @hash-validator/v2 (npm) (malicious package) - [MAL-2025-47915](https://insights.sbomify.com/MAL-2025-47915/): Malicious code in @dotevn/utils (npm) (malicious package) - [MAL-2025-47914](https://insights.sbomify.com/MAL-2025-47914/): Malicious code in @dotevn/config (npm) (malicious package) - [MAL-2025-47913](https://insights.sbomify.com/MAL-2025-47913/): Malicious code in @bs58-utils/wrapper (npm) (malicious package) - [MAL-2025-47912](https://insights.sbomify.com/MAL-2025-47912/): Malicious code in nileleetpkg (npm) (malicious package) - [MAL-2025-47911](https://insights.sbomify.com/MAL-2025-47911/): Malicious code in niletestpkg2 (npm) (malicious package) - [MAL-2025-47910](https://insights.sbomify.com/MAL-2025-47910/): Malicious code in @aviatrixdev/flight-suit (npm) (malicious package) - [MAL-2025-4791](https://insights.sbomify.com/MAL-2025-4791/): Malicious code in @react-native-aria/toggle (npm) (malicious package) - [MAL-2025-47909](https://insights.sbomify.com/MAL-2025-47909/): Malicious code in nilepkg6 (npm) (malicious package) - [MAL-2025-47908](https://insights.sbomify.com/MAL-2025-47908/): Malicious code in stack-ui-elements (npm) (malicious package) - [MAL-2025-47907](https://insights.sbomify.com/MAL-2025-47907/): Malicious code in dify-web (npm) (malicious package) - [MAL-2025-47906](https://insights.sbomify.com/MAL-2025-47906/): Malicious code in react-rails-builds (npm) (malicious package) - [MAL-2025-47905](https://insights.sbomify.com/MAL-2025-47905/): Malicious code in lc-http (npm) (malicious package) - [MAL-2025-47904](https://insights.sbomify.com/MAL-2025-47904/): Malicious code in react-device-mockup-js (npm) (malicious package) - [MAL-2025-47903](https://insights.sbomify.com/MAL-2025-47903/): Malicious code in mockup-plugin-js (npm) (malicious package) - [MAL-2025-47902](https://insights.sbomify.com/MAL-2025-47902/): Malicious code in mockup-device-js (npm) (malicious package) - [MAL-2025-47901](https://insights.sbomify.com/MAL-2025-47901/): Malicious code in odoo-sfu (npm) (malicious package) - [MAL-2025-47900](https://insights.sbomify.com/MAL-2025-47900/): Malicious code in kss-node-handlebars-builder (npm) (malicious package) - [MAL-2025-4790](https://insights.sbomify.com/MAL-2025-4790/): Malicious code in @react-native-aria/tabs (npm) (malicious package) - [MAL-2025-479](https://insights.sbomify.com/MAL-2025-479/): Malicious code in google-connect (npm) (malicious package) - [MAL-2025-47899](https://insights.sbomify.com/MAL-2025-47899/): Malicious code in @peterwiener/l (npm) (malicious package) - [MAL-2025-47898](https://insights.sbomify.com/MAL-2025-47898/): Malicious code in @peterwiener/hoodle-plugins-manager (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/581/