# Vulnerabilities published in 2025


- [MAL-2025-47806](https://insights.sbomify.com/MAL-2025-47806/): Malicious code in trongitpy (PyPI) (malicious package)
- [MAL-2025-47805](https://insights.sbomify.com/MAL-2025-47805/): Malicious code in trongithpy (PyPI) (malicious package)
- [MAL-2025-47804](https://insights.sbomify.com/MAL-2025-47804/): Malicious code in titifel-pypi (PyPI) (malicious package)
- [MAL-2025-47803](https://insights.sbomify.com/MAL-2025-47803/): Malicious code in titifel-pyip (PyPI) (malicious package)
- [MAL-2025-47802](https://insights.sbomify.com/MAL-2025-47802/): Malicious code in testt-test (PyPI) (malicious package)
- [MAL-2025-47801](https://insights.sbomify.com/MAL-2025-47801/): Malicious code in svcmanagement (PyPI) (malicious package)
- [MAL-2025-47800](https://insights.sbomify.com/MAL-2025-47800/): Malicious code in randar303 (PyPI) (malicious package)
- [MAL-2025-4780](https://insights.sbomify.com/MAL-2025-4780/): Malicious code in @react-native-aria/disclosure (npm) (malicious package)
- [MAL-2025-478](https://insights.sbomify.com/MAL-2025-478/): Malicious code in google-admin (npm) (malicious package)
- [MAL-2025-47799](https://insights.sbomify.com/MAL-2025-47799/): Malicious code in python-ledgercommon (PyPI) (malicious package)
- [MAL-2025-47798](https://insights.sbomify.com/MAL-2025-47798/): Malicious code in python-datetil (PyPI) (malicious package)
- [MAL-2025-47797](https://insights.sbomify.com/MAL-2025-47797/): Malicious code in python-dateitil (PyPI) (malicious package)
- [MAL-2025-47796](https://insights.sbomify.com/MAL-2025-47796/): Malicious code in python-amazon-doc-utils (PyPI) (malicious package)
- [MAL-2025-47795](https://insights.sbomify.com/MAL-2025-47795/): Malicious code in pytensorlite (PyPI) (malicious package)
- [MAL-2025-47794](https://insights.sbomify.com/MAL-2025-47794/): Malicious code in py-sys-utils (PyPI) (malicious package)
- [MAL-2025-47793](https://insights.sbomify.com/MAL-2025-47793/): Malicious code in pacakegenow (PyPI) (malicious package)
- [MAL-2025-47792](https://insights.sbomify.com/MAL-2025-47792/): Malicious code in osanlizer (PyPI) (malicious package)
- [MAL-2025-47791](https://insights.sbomify.com/MAL-2025-47791/): Malicious code in nukeport (PyPI) (malicious package)
- [MAL-2025-47790](https://insights.sbomify.com/MAL-2025-47790/): Malicious code in nukecount (PyPI) (malicious package)
- [MAL-2025-4779](https://insights.sbomify.com/MAL-2025-4779/): Malicious code in @react-native-aria/combobox (npm) (malicious package)
- [MAL-2025-47789](https://insights.sbomify.com/MAL-2025-47789/): Malicious code in nukebount (PyPI) (malicious package)
- [MAL-2025-47788](https://insights.sbomify.com/MAL-2025-47788/): Malicious code in noonutil (PyPI) (malicious package)
- [MAL-2025-47787](https://insights.sbomify.com/MAL-2025-47787/): Malicious code in mevguard (PyPI) (malicious package)
- [MAL-2025-47786](https://insights.sbomify.com/MAL-2025-47786/): Malicious code in medoen (PyPI) (malicious package)
- [MAL-2025-47785](https://insights.sbomify.com/MAL-2025-47785/): Malicious code in lolcrazy (PyPI) (malicious package)
- [MAL-2025-47784](https://insights.sbomify.com/MAL-2025-47784/): Malicious code in license-checker (PyPI) (malicious package)
- [MAL-2025-47783](https://insights.sbomify.com/MAL-2025-47783/): Malicious code in libgomp (PyPI) (malicious package)
- [MAL-2025-47782](https://insights.sbomify.com/MAL-2025-47782/): Malicious code in learning-pypi-demo-nisimi (PyPI) (malicious package)
- [MAL-2025-47781](https://insights.sbomify.com/MAL-2025-47781/): Malicious code in krakenvirus (PyPI) (malicious package)
- [MAL-2025-47780](https://insights.sbomify.com/MAL-2025-47780/): Malicious code in kraken-virus (PyPI) (malicious package)
- [MAL-2025-4778](https://insights.sbomify.com/MAL-2025-4778/): Malicious code in @react-native-aria/checkbox (npm) (malicious package)
- [MAL-2025-47779](https://insights.sbomify.com/MAL-2025-47779/): Malicious code in kimportsetup (PyPI) (malicious package)
- [MAL-2025-47778](https://insights.sbomify.com/MAL-2025-47778/): Malicious code in k7eela (PyPI) (malicious package)
- [MAL-2025-47777](https://insights.sbomify.com/MAL-2025-47777/): Malicious code in k7eel (PyPI) (malicious package)
- [MAL-2025-47776](https://insights.sbomify.com/MAL-2025-47776/): Malicious code in k7eeel (PyPI) (malicious package)
- [MAL-2025-47775](https://insights.sbomify.com/MAL-2025-47775/): Malicious code in ipfind-microtip (PyPI) (malicious package)
- [MAL-2025-47774](https://insights.sbomify.com/MAL-2025-47774/): Malicious code in importsetup (PyPI) (malicious package)
- [MAL-2025-47773](https://insights.sbomify.com/MAL-2025-47773/): Malicious code in iamenumerat (PyPI) (malicious package)
- [MAL-2025-47772](https://insights.sbomify.com/MAL-2025-47772/): Malicious code in hydenmj (PyPI) (malicious package)
- [MAL-2025-47771](https://insights.sbomify.com/MAL-2025-47771/): Malicious code in hacktool (PyPI) (malicious package)
- [MAL-2025-47770](https://insights.sbomify.com/MAL-2025-47770/): Malicious code in fuckyoubitch (PyPI) (malicious package)
- [MAL-2025-4777](https://insights.sbomify.com/MAL-2025-4777/): Malicious code in @react-native-aria/button (npm) (malicious package)
- [MAL-2025-47769](https://insights.sbomify.com/MAL-2025-47769/): Malicious code in fucknukerbro (PyPI) (malicious package)
- [MAL-2025-47768](https://insights.sbomify.com/MAL-2025-47768/): Malicious code in fucknuker (PyPI) (malicious package)
- [MAL-2025-47767](https://insights.sbomify.com/MAL-2025-47767/): Malicious code in fucknukeer (PyPI) (malicious package)
- [MAL-2025-47766](https://insights.sbomify.com/MAL-2025-47766/): Malicious code in fuckingnuker (PyPI) (malicious package)
- [MAL-2025-47765](https://insights.sbomify.com/MAL-2025-47765/): Malicious code in fifam5tl (PyPI) (malicious package)
- [MAL-2025-47764](https://insights.sbomify.com/MAL-2025-47764/): Malicious code in etherweb3 (PyPI) (malicious package)
- [MAL-2025-47763](https://insights.sbomify.com/MAL-2025-47763/): Malicious code in enumeratiam (PyPI) (malicious package)
- [MAL-2025-47762](https://insights.sbomify.com/MAL-2025-47762/): Malicious code in electrum-bch (PyPI) (malicious package)
- [MAL-2025-47761](https://insights.sbomify.com/MAL-2025-47761/): Malicious code in eenomenallib (PyPI) (malicious package)
- [MAL-2025-47760](https://insights.sbomify.com/MAL-2025-47760/): Malicious code in editidle (PyPI) (malicious package)
- [MAL-2025-4776](https://insights.sbomify.com/MAL-2025-4776/): Malicious code in @gluestack-ui/utils (npm) (malicious package)
- [MAL-2025-47759](https://insights.sbomify.com/MAL-2025-47759/): Malicious code in doxer (PyPI) (malicious package)
- [MAL-2025-47758](https://insights.sbomify.com/MAL-2025-47758/): Malicious code in django-aerospike-sessions (PyPI) (malicious package)
- [MAL-2025-47757](https://insights.sbomify.com/MAL-2025-47757/): Malicious code in discordext (PyPI) (malicious package)
- [MAL-2025-47756](https://insights.sbomify.com/MAL-2025-47756/): Malicious code in datetime-zones (PyPI) (malicious package)
- [MAL-2025-47755](https://insights.sbomify.com/MAL-2025-47755/): Malicious code in data-processing-utils (PyPI) (malicious package)
- [MAL-2025-47754](https://insights.sbomify.com/MAL-2025-47754/): Malicious code in consolecolornew (PyPI) (malicious package)
- [MAL-2025-47753](https://insights.sbomify.com/MAL-2025-47753/): Malicious code in comedrivewithmeman (PyPI) (malicious package)
- [MAL-2025-47752](https://insights.sbomify.com/MAL-2025-47752/): Malicious code in cffi-curl (PyPI) (malicious package)
- [MAL-2025-47751](https://insights.sbomify.com/MAL-2025-47751/): Malicious code in buildpeople (PyPI) (malicious package)
- [MAL-2025-47750](https://insights.sbomify.com/MAL-2025-47750/): Malicious code in btcli (PyPI) (malicious package)
- [MAL-2025-4775](https://insights.sbomify.com/MAL-2025-4775/): Malicious code in vite-plugin-esm-federation (npm) (malicious package)
- [MAL-2025-47749](https://insights.sbomify.com/MAL-2025-47749/): Malicious code in brotli-python (PyPI) (malicious package)
- [MAL-2025-47748](https://insights.sbomify.com/MAL-2025-47748/): Malicious code in bitensor-cli (PyPI) (malicious package)
- [MAL-2025-47747](https://insights.sbomify.com/MAL-2025-47747/): Malicious code in binance-sdk-ebate (PyPI) (malicious package)
- [MAL-2025-47746](https://insights.sbomify.com/MAL-2025-47746/): Malicious code in awesome-tools-collection (PyPI) (malicious package)
- [MAL-2025-47745](https://insights.sbomify.com/MAL-2025-47745/): Malicious code in anrok (PyPI) (malicious package)
- [MAL-2025-47744](https://insights.sbomify.com/MAL-2025-47744/): Malicious code in anrk (PyPI) (malicious package)
- [MAL-2025-47743](https://insights.sbomify.com/MAL-2025-47743/): Malicious code in winstem-logging (npm) (malicious package)
- [MAL-2025-47742](https://insights.sbomify.com/MAL-2025-47742/): Malicious code in vscode-sanddance (npm) (malicious package)
- [MAL-2025-47741](https://insights.sbomify.com/MAL-2025-47741/): Malicious code in vite-linting-js (npm) (malicious package)
- [MAL-2025-47740](https://insights.sbomify.com/MAL-2025-47740/): Malicious code in vega-morphcharts-test-es6 (npm) (malicious package)
- [MAL-2025-4774](https://insights.sbomify.com/MAL-2025-4774/): Malicious code in cwttools (npm) (malicious package)
- [MAL-2025-47739](https://insights.sbomify.com/MAL-2025-47739/): Malicious code in varshade-7z (npm) (malicious package)
- [MAL-2025-47738](https://insights.sbomify.com/MAL-2025-47738/): Malicious code in uva-functions (npm) (malicious package)
- [MAL-2025-47737](https://insights.sbomify.com/MAL-2025-47737/): Malicious code in uva-frontend (npm) (malicious package)
- [MAL-2025-47736](https://insights.sbomify.com/MAL-2025-47736/): Malicious code in utility-nodes (npm) (malicious package)
- [MAL-2025-47735](https://insights.sbomify.com/MAL-2025-47735/): Malicious code in traceviz-angular-hovercard (npm) (malicious package)
- [MAL-2025-47734](https://insights.sbomify.com/MAL-2025-47734/): Malicious code in traceviz-angular-axes (npm) (malicious package)
- [MAL-2025-47733](https://insights.sbomify.com/MAL-2025-47733/): Malicious code in traceviz (npm) (malicious package)
- [MAL-2025-47732](https://insights.sbomify.com/MAL-2025-47732/): Malicious code in theme-hackermode (npm) (malicious package)
- [MAL-2025-47731](https://insights.sbomify.com/MAL-2025-47731/): Malicious code in test-grabber-package-xyz789 (npm) (malicious package)
- [MAL-2025-47730](https://insights.sbomify.com/MAL-2025-47730/): Malicious code in synthetics-sdk-broken-links (npm) (malicious package)
- [MAL-2025-4773](https://insights.sbomify.com/MAL-2025-4773/): Malicious code in zoro-gep-sdk (npm) (malicious package)
- [MAL-2025-47729](https://insights.sbomify.com/MAL-2025-47729/): Malicious code in swagger-generation (npm) (malicious package)
- [MAL-2025-47728](https://insights.sbomify.com/MAL-2025-47728/): Malicious code in sqrt-enhanced (npm) (malicious package)
- [MAL-2025-47727](https://insights.sbomify.com/MAL-2025-47727/): Malicious code in sessionxml (npm) (malicious package)
- [MAL-2025-47726](https://insights.sbomify.com/MAL-2025-47726/): Malicious code in sendbird-ai-agent-samples (npm) (malicious package)
- [MAL-2025-47725](https://insights.sbomify.com/MAL-2025-47725/): Malicious code in sandbox-resources (npm) (malicious package)
- [MAL-2025-47724](https://insights.sbomify.com/MAL-2025-47724/): Malicious code in research-bot (npm) (malicious package)
- [MAL-2025-47723](https://insights.sbomify.com/MAL-2025-47723/): Malicious code in remote-dom-1 (npm) (malicious package)
- [MAL-2025-47722](https://insights.sbomify.com/MAL-2025-47722/): Malicious code in realtime-twilio (npm) (malicious package)
- [MAL-2025-47721](https://insights.sbomify.com/MAL-2025-47721/): Malicious code in react-datasheet-example (npm) (malicious package)
- [MAL-2025-47720](https://insights.sbomify.com/MAL-2025-47720/): Malicious code in raas-client-app (npm) (malicious package)
- [MAL-2025-4772](https://insights.sbomify.com/MAL-2025-4772/): Malicious code in yasssinhami (npm) (malicious package)
- [MAL-2025-47719](https://insights.sbomify.com/MAL-2025-47719/): Malicious code in publicmapa (npm) (malicious package)
- [MAL-2025-47718](https://insights.sbomify.com/MAL-2025-47718/): Malicious code in polyfill039 (npm) (malicious package)
- [MAL-2025-47717](https://insights.sbomify.com/MAL-2025-47717/): Malicious code in pnpm_prune_lockfile_v9 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/583/