# Vulnerabilities published in 2025


- [MAL-2025-47897](https://insights.sbomify.com/MAL-2025-47897/): Malicious code in @imou/web-front-basic-alg (npm) (malicious package)
- [MAL-2025-47896](https://insights.sbomify.com/MAL-2025-47896/): Malicious code in @igh/server-updater-ssh-l1 (npm) (malicious package)
- [MAL-2025-47895](https://insights.sbomify.com/MAL-2025-47895/): Malicious code in typing-extensions (npm) (malicious package)
- [MAL-2025-47894](https://insights.sbomify.com/MAL-2025-47894/): Malicious code in pyrsistent (npm) (malicious package)
- [MAL-2025-47893](https://insights.sbomify.com/MAL-2025-47893/): Malicious code in pyflakes (npm) (malicious package)
- [MAL-2025-47892](https://insights.sbomify.com/MAL-2025-47892/): Malicious code in pycodestyle (npm) (malicious package)
- [MAL-2025-47891](https://insights.sbomify.com/MAL-2025-47891/): Malicious code in pkgutil-resolve-name (npm) (malicious package)
- [MAL-2025-47890](https://insights.sbomify.com/MAL-2025-47890/): Malicious code in mongodb-cd (npm) (malicious package)
- [MAL-2025-4789](https://insights.sbomify.com/MAL-2025-4789/): Malicious code in @react-native-aria/switch (npm) (malicious package)
- [MAL-2025-47889](https://insights.sbomify.com/MAL-2025-47889/): Malicious code in mccabe (npm) (malicious package)
- [MAL-2025-47888](https://insights.sbomify.com/MAL-2025-47888/): Malicious code in lovable-react (npm) (malicious package)
- [MAL-2025-47887](https://insights.sbomify.com/MAL-2025-47887/): Malicious code in lovable-js (npm) (malicious package)
- [MAL-2025-47886](https://insights.sbomify.com/MAL-2025-47886/): Malicious code in importlib-resources (npm) (malicious package)
- [MAL-2025-47885](https://insights.sbomify.com/MAL-2025-47885/): Malicious code in helper-validator-identifier (npm) (malicious package)
- [MAL-2025-47884](https://insights.sbomify.com/MAL-2025-47884/): Malicious code in cryptonote-util (npm) (malicious package)
- [MAL-2025-47883](https://insights.sbomify.com/MAL-2025-47883/): Malicious code in com.unity.2d.spriteshape (npm) (malicious package)
- [MAL-2025-47882](https://insights.sbomify.com/MAL-2025-47882/): Malicious code in com.unity.2d.pixel-perfect (npm) (malicious package)
- [MAL-2025-47881](https://insights.sbomify.com/MAL-2025-47881/): Malicious code in coder-v2 (npm) (malicious package)
- [MAL-2025-47880](https://insights.sbomify.com/MAL-2025-47880/): Malicious code in blockscout-frontend (npm) (malicious package)
- [MAL-2025-4788](https://insights.sbomify.com/MAL-2025-4788/): Malicious code in @react-native-aria/slider (npm) (malicious package)
- [MAL-2025-47879](https://insights.sbomify.com/MAL-2025-47879/): Malicious code in affected-tests (npm) (malicious package)
- [MAL-2025-47878](https://insights.sbomify.com/MAL-2025-47878/): Malicious code in ancestry-header-footer-proxy (npm) (malicious package)
- [MAL-2025-47877](https://insights.sbomify.com/MAL-2025-47877/): Malicious code in ancestry-axios (npm) (malicious package)
- [MAL-2025-47876](https://insights.sbomify.com/MAL-2025-47876/): Malicious code in fc-system-testing (npm) (malicious package)
- [MAL-2025-47875](https://insights.sbomify.com/MAL-2025-47875/): Malicious code in tikweb (PyPI) (malicious package)
- [MAL-2025-47874](https://insights.sbomify.com/MAL-2025-47874/): Malicious code in node-db-init (npm) (malicious package)
- [MAL-2025-47873](https://insights.sbomify.com/MAL-2025-47873/): Malicious code in node-converter (npm) (malicious package)
- [MAL-2025-47872](https://insights.sbomify.com/MAL-2025-47872/): Malicious code in cors-init (npm) (malicious package)
- [MAL-2025-47871](https://insights.sbomify.com/MAL-2025-47871/): Malicious code in trendwatch (npm) (malicious package)
- [MAL-2025-47870](https://insights.sbomify.com/MAL-2025-47870/): Malicious code in vite-plugin-parse-js (npm) (malicious package)
- [MAL-2025-4787](https://insights.sbomify.com/MAL-2025-4787/): Malicious code in @react-native-aria/separator (npm) (malicious package)
- [MAL-2025-47869](https://insights.sbomify.com/MAL-2025-47869/): Malicious code in tailwindcss-animators (npm) (malicious package)
- [MAL-2025-47868](https://insights.sbomify.com/MAL-2025-47868/): Malicious code in bioql (PyPI) (malicious package)
- [MAL-2025-47867](https://insights.sbomify.com/MAL-2025-47867/): Malicious code in rack-test (npm) (malicious package)
- [MAL-2025-47866](https://insights.sbomify.com/MAL-2025-47866/): Malicious code in zenith.svg-loader (npm) (malicious package)
- [MAL-2025-47865](https://insights.sbomify.com/MAL-2025-47865/): Malicious code in wide-lib (npm) (malicious package)
- [MAL-2025-47864](https://insights.sbomify.com/MAL-2025-47864/): Malicious code in v-pure-tooltip (npm) (malicious package)
- [MAL-2025-47863](https://insights.sbomify.com/MAL-2025-47863/): Malicious code in test-prob-to2324 (npm) (malicious package)
- [MAL-2025-47862](https://insights.sbomify.com/MAL-2025-47862/): Malicious code in stylelint-config-twbs-applestrap (npm) (malicious package)
- [MAL-2025-47861](https://insights.sbomify.com/MAL-2025-47861/): Malicious code in purple-npm (npm) (malicious package)
- [MAL-2025-47860](https://insights.sbomify.com/MAL-2025-47860/): Malicious code in postscribed (npm) (malicious package)
- [MAL-2025-4786](https://insights.sbomify.com/MAL-2025-4786/): Malicious code in @react-native-aria/radio (npm) (malicious package)
- [MAL-2025-47859](https://insights.sbomify.com/MAL-2025-47859/): Malicious code in pmcrypto-v6-canary (npm) (malicious package)
- [MAL-2025-47858](https://insights.sbomify.com/MAL-2025-47858/): Malicious code in pega-package-dependency (npm) (malicious package)
- [MAL-2025-47857](https://insights.sbomify.com/MAL-2025-47857/): Malicious code in pc-analytics-promotion-creation-core (npm) (malicious package)
- [MAL-2025-47856](https://insights.sbomify.com/MAL-2025-47856/): Malicious code in pc-analytics-promotion-creation-client (npm) (malicious package)
- [MAL-2025-47855](https://insights.sbomify.com/MAL-2025-47855/): Malicious code in openwhisk-probot-builder (npm) (malicious package)
- [MAL-2025-47854](https://insights.sbomify.com/MAL-2025-47854/): Malicious code in node-melitk-config (npm) (malicious package)
- [MAL-2025-47853](https://insights.sbomify.com/MAL-2025-47853/): Malicious code in mshops-seo-ui (npm) (malicious package)
- [MAL-2025-47852](https://insights.sbomify.com/MAL-2025-47852/): Malicious code in metereorpreter-test2-dns (npm) (malicious package)
- [MAL-2025-47851](https://insights.sbomify.com/MAL-2025-47851/): Malicious code in metereorpreter-test1 (npm) (malicious package)
- [MAL-2025-47850](https://insights.sbomify.com/MAL-2025-47850/): Malicious code in kite-public (npm) (malicious package)
- [MAL-2025-4785](https://insights.sbomify.com/MAL-2025-4785/): Malicious code in @react-native-aria/overlays (npm) (malicious package)
- [MAL-2025-47849](https://insights.sbomify.com/MAL-2025-47849/): Malicious code in gna_university (npm) (malicious package)
- [MAL-2025-47848](https://insights.sbomify.com/MAL-2025-47848/): Malicious code in epc-booking-insights-core (npm) (malicious package)
- [MAL-2025-47847](https://insights.sbomify.com/MAL-2025-47847/): Malicious code in dawid-insecure-npm (npm) (malicious package)
- [MAL-2025-47846](https://insights.sbomify.com/MAL-2025-47846/): Malicious code in com.unity.device-simulator.devices (npm) (malicious package)
- [MAL-2025-47845](https://insights.sbomify.com/MAL-2025-47845/): Malicious code in chia.dock1 (npm) (malicious package)
- [MAL-2025-47844](https://insights.sbomify.com/MAL-2025-47844/): Malicious code in autobahn-testsuite-docker (npm) (malicious package)
- [MAL-2025-47843](https://insights.sbomify.com/MAL-2025-47843/): Malicious code in airbyte-webapp (npm) (malicious package)
- [MAL-2025-47842](https://insights.sbomify.com/MAL-2025-47842/): Malicious code in @web-ib/chevre (npm) (malicious package)
- [MAL-2025-47841](https://insights.sbomify.com/MAL-2025-47841/): Malicious code in @rsi-arquitectura/rsi-configuration-module (npm) (malicious package)
- [MAL-2025-47840](https://insights.sbomify.com/MAL-2025-47840/): Malicious code in @pvz-admin/shared (npm) (malicious package)
- [MAL-2025-4784](https://insights.sbomify.com/MAL-2025-4784/): Malicious code in @react-native-aria/menu (npm) (malicious package)
- [MAL-2025-47839](https://insights.sbomify.com/MAL-2025-47839/): Malicious code in @my-pvz/ui-kit (npm) (malicious package)
- [MAL-2025-47838](https://insights.sbomify.com/MAL-2025-47838/): Malicious code in @lanyer640/mcp-runcommand-server (npm) (malicious package)
- [MAL-2025-47837](https://insights.sbomify.com/MAL-2025-47837/): Malicious code in vite-plugin-chunk (npm) (malicious package)
- [MAL-2025-47836](https://insights.sbomify.com/MAL-2025-47836/): Malicious code in vite-next-logger (npm) (malicious package)
- [MAL-2025-47835](https://insights.sbomify.com/MAL-2025-47835/): Malicious code in tailwindcss-animation-ux (npm) (malicious package)
- [MAL-2025-47834](https://insights.sbomify.com/MAL-2025-47834/): Malicious code in react-repack (npm) (malicious package)
- [MAL-2025-47833](https://insights.sbomify.com/MAL-2025-47833/): Malicious code in react-lovable (npm) (malicious package)
- [MAL-2025-47832](https://insights.sbomify.com/MAL-2025-47832/): Malicious code in react-content-parser (npm) (malicious package)
- [MAL-2025-47831](https://insights.sbomify.com/MAL-2025-47831/): Malicious code in notificationalerts (npm) (malicious package)
- [MAL-2025-47830](https://insights.sbomify.com/MAL-2025-47830/): Malicious code in nodeapi-json (npm) (malicious package)
- [MAL-2025-4783](https://insights.sbomify.com/MAL-2025-4783/): Malicious code in @react-native-aria/listbox (npm) (malicious package)
- [MAL-2025-47829](https://insights.sbomify.com/MAL-2025-47829/): Malicious code in node-notifications (npm) (malicious package)
- [MAL-2025-47828](https://insights.sbomify.com/MAL-2025-47828/): Malicious code in mongoose-ci (npm) (malicious package)
- [MAL-2025-47827](https://insights.sbomify.com/MAL-2025-47827/): Malicious code in mongodb-ci (npm) (malicious package)
- [MAL-2025-47826](https://insights.sbomify.com/MAL-2025-47826/): Malicious code in rc-phoenix-tpp-upper-funnel (npm) (malicious package)
- [MAL-2025-47825](https://insights.sbomify.com/MAL-2025-47825/): Malicious code in phoenix-upper-funnel (npm) (malicious package)
- [MAL-2025-47824](https://insights.sbomify.com/MAL-2025-47824/): Malicious code in phoenix-privacy (npm) (malicious package)
- [MAL-2025-47823](https://insights.sbomify.com/MAL-2025-47823/): Malicious code in phoenix-platform (npm) (malicious package)
- [MAL-2025-47822](https://insights.sbomify.com/MAL-2025-47822/): Malicious code in phoenix-analytics (npm) (malicious package)
- [MAL-2025-47821](https://insights.sbomify.com/MAL-2025-47821/): Malicious code in commondatalayer-framework (npm) (malicious package)
- [MAL-2025-47820](https://insights.sbomify.com/MAL-2025-47820/): Malicious code in propeller-solver-core (PyPI) (malicious package)
- [MAL-2025-4782](https://insights.sbomify.com/MAL-2025-4782/): Malicious code in @react-native-aria/interactions (npm) (malicious package)
- [MAL-2025-47819](https://insights.sbomify.com/MAL-2025-47819/): Malicious code in mahmoudtest (npm) (malicious package)
- [MAL-2025-47818](https://insights.sbomify.com/MAL-2025-47818/): Malicious code in com.unity.2d.psdimporter (npm) (malicious package)
- [MAL-2025-47817](https://insights.sbomify.com/MAL-2025-47817/): Malicious code in rsi-configuration-module (npm) (malicious package)
- [MAL-2025-47816](https://insights.sbomify.com/MAL-2025-47816/): Malicious code in your-gem-name12 (RubyGems) (malicious package)
- [MAL-2025-47815](https://insights.sbomify.com/MAL-2025-47815/): Malicious code in sqlcommenter_rails (RubyGems) (malicious package)
- [MAL-2025-47814](https://insights.sbomify.com/MAL-2025-47814/): Malicious code in zenomenallib (PyPI) (malicious package)
- [MAL-2025-47813](https://insights.sbomify.com/MAL-2025-47813/): Malicious code in worldnex (PyPI) (malicious package)
- [MAL-2025-47812](https://insights.sbomify.com/MAL-2025-47812/): Malicious code in woowoowo (PyPI) (malicious package)
- [MAL-2025-47811](https://insights.sbomify.com/MAL-2025-47811/): Malicious code in vcdiff-py (PyPI) (malicious package)
- [MAL-2025-47810](https://insights.sbomify.com/MAL-2025-47810/): Malicious code in tronwebwpy (PyPI) (malicious package)
- [MAL-2025-4781](https://insights.sbomify.com/MAL-2025-4781/): Malicious code in @react-native-aria/focus (npm) (malicious package)
- [MAL-2025-47809](https://insights.sbomify.com/MAL-2025-47809/): Malicious code in tronwalletpy (PyPI) (malicious package)
- [MAL-2025-47808](https://insights.sbomify.com/MAL-2025-47808/): Malicious code in tronkeyspy (PyPI) (malicious package)
- [MAL-2025-47807](https://insights.sbomify.com/MAL-2025-47807/): Malicious code in tronkeypy (PyPI) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/582/