# Vulnerabilities published in 2025


- [MAL-2025-47716](https://insights.sbomify.com/MAL-2025-47716/): Malicious code in pnpm_prune_lockfile_v8 (npm) (malicious package)
- [MAL-2025-47715](https://insights.sbomify.com/MAL-2025-47715/): Malicious code in pnpm_lockfile_file_v9 (npm) (malicious package)
- [MAL-2025-47714](https://insights.sbomify.com/MAL-2025-47714/): Malicious code in pnpm_lockfile_file_v8 (npm) (malicious package)
- [MAL-2025-47713](https://insights.sbomify.com/MAL-2025-47713/): Malicious code in playbook-builder-webapp (npm) (malicious package)
- [MAL-2025-47712](https://insights.sbomify.com/MAL-2025-47712/): Malicious code in phi3ext (npm) (malicious package)
- [MAL-2025-47711](https://insights.sbomify.com/MAL-2025-47711/): Malicious code in peer3 (npm) (malicious package)
- [MAL-2025-47710](https://insights.sbomify.com/MAL-2025-47710/): Malicious code in peer1 (npm) (malicious package)
- [MAL-2025-4771](https://insights.sbomify.com/MAL-2025-4771/): Malicious code in third-party-dep-b (npm) (malicious package)
- [MAL-2025-47709](https://insights.sbomify.com/MAL-2025-47709/): Malicious code in paseto3 (npm) (malicious package)
- [MAL-2025-47708](https://insights.sbomify.com/MAL-2025-47708/): Malicious code in otlp-trace-export (npm) (malicious package)
- [MAL-2025-47707](https://insights.sbomify.com/MAL-2025-47707/): Malicious code in otlp-metrics-export (npm) (malicious package)
- [MAL-2025-47706](https://insights.sbomify.com/MAL-2025-47706/): Malicious code in org.mixedrealitytoolkit.uxcore (npm) (malicious package)
- [MAL-2025-47705](https://insights.sbomify.com/MAL-2025-47705/): Malicious code in org.mixedrealitytoolkit.standardassets (npm) (malicious package)
- [MAL-2025-47704](https://insights.sbomify.com/MAL-2025-47704/): Malicious code in org.mixedrealitytoolkit.spatialmanipulation (npm) (malicious package)
- [MAL-2025-47703](https://insights.sbomify.com/MAL-2025-47703/): Malicious code in org.mixedrealitytoolkit.core (npm) (malicious package)
- [MAL-2025-47702](https://insights.sbomify.com/MAL-2025-47702/): Malicious code in openai-airline-agentsdk-demo-3w (npm) (malicious package)
- [MAL-2025-47701](https://insights.sbomify.com/MAL-2025-47701/): Malicious code in nuget.castle-core (npm) (malicious package)
- [MAL-2025-47700](https://insights.sbomify.com/MAL-2025-47700/): Malicious code in nodejs-example-google-cloud-trace (npm) (malicious package)
- [MAL-2025-4770](https://insights.sbomify.com/MAL-2025-4770/): Malicious code in third-party-dep-a (npm) (malicious package)
- [MAL-2025-477](https://insights.sbomify.com/MAL-2025-477/): Malicious code in godaddy-utils (npm) (malicious package)
- [MAL-2025-47699](https://insights.sbomify.com/MAL-2025-47699/): Malicious code in nodejs-example-google-cloud-monitoring (npm) (malicious package)
- [MAL-2025-47698](https://insights.sbomify.com/MAL-2025-47698/): Malicious code in node-ts-esm-web (npm) (malicious package)
- [MAL-2025-47697](https://insights.sbomify.com/MAL-2025-47697/): Malicious code in node-ts-esm (npm) (malicious package)
- [MAL-2025-47696](https://insights.sbomify.com/MAL-2025-47696/): Malicious code in node-ts-cjs-web (npm) (malicious package)
- [MAL-2025-47695](https://insights.sbomify.com/MAL-2025-47695/): Malicious code in node-ts-cjs (npm) (malicious package)
- [MAL-2025-47694](https://insights.sbomify.com/MAL-2025-47694/): Malicious code in ng-dev (npm) (malicious package)
- [MAL-2025-47693](https://insights.sbomify.com/MAL-2025-47693/): Malicious code in native-preview (npm) (malicious package)
- [MAL-2025-47692](https://insights.sbomify.com/MAL-2025-47692/): Malicious code in mysl-dumpdiscord (npm) (malicious package)
- [MAL-2025-47691](https://insights.sbomify.com/MAL-2025-47691/): Malicious code in my-test-yuyuy (npm) (malicious package)
- [MAL-2025-47690](https://insights.sbomify.com/MAL-2025-47690/): Malicious code in multiturn-prompts-agent (npm) (malicious package)
- [MAL-2025-4769](https://insights.sbomify.com/MAL-2025-4769/): Malicious code in test_for-pentest_test_dependcie (npm) (malicious package)
- [MAL-2025-47689](https://insights.sbomify.com/MAL-2025-47689/): Malicious code in model-viewer-docs (npm) (malicious package)
- [MAL-2025-47688](https://insights.sbomify.com/MAL-2025-47688/): Malicious code in max-quantity (npm) (malicious package)
- [MAL-2025-47687](https://insights.sbomify.com/MAL-2025-47687/): Malicious code in maplesle16 (npm) (malicious package)
- [MAL-2025-47686](https://insights.sbomify.com/MAL-2025-47686/): Malicious code in loyalty-extension (npm) (malicious package)
- [MAL-2025-47685](https://insights.sbomify.com/MAL-2025-47685/): Malicious code in live-canvas-tests (npm) (malicious package)
- [MAL-2025-47684](https://insights.sbomify.com/MAL-2025-47684/): Malicious code in kotlin-wasm-package-lock-project-test (npm) (malicious package)
- [MAL-2025-47683](https://insights.sbomify.com/MAL-2025-47683/): Malicious code in kotlin-wasm-package-lock-project (npm) (malicious package)
- [MAL-2025-47682](https://insights.sbomify.com/MAL-2025-47682/): Malicious code in jnakfnksnkankknknksngksgksnksgksgksk (npm) (malicious package)
- [MAL-2025-47681](https://insights.sbomify.com/MAL-2025-47681/): Malicious code in internal-vscode-extension (npm) (malicious package)
- [MAL-2025-47680](https://insights.sbomify.com/MAL-2025-47680/): Malicious code in inicontohrcekak (npm) (malicious package)
- [MAL-2025-4768](https://insights.sbomify.com/MAL-2025-4768/): Malicious code in test_for-pentest (npm) (malicious package)
- [MAL-2025-47679](https://insights.sbomify.com/MAL-2025-47679/): Malicious code in indigoeln (npm) (malicious package)
- [MAL-2025-47678](https://insights.sbomify.com/MAL-2025-47678/): Malicious code in hub-state-api (npm) (malicious package)
- [MAL-2025-47677](https://insights.sbomify.com/MAL-2025-47677/): Malicious code in html-webpack-plugin-4 (npm) (malicious package)
- [MAL-2025-47676](https://insights.sbomify.com/MAL-2025-47676/): Malicious code in howto-gallery-betas (npm) (malicious package)
- [MAL-2025-47675](https://insights.sbomify.com/MAL-2025-47675/): Malicious code in google-profanity-words (npm) (malicious package)
- [MAL-2025-47674](https://insights.sbomify.com/MAL-2025-47674/): Malicious code in gatsby-plugin-apollo-onetrust (npm) (malicious package)
- [MAL-2025-47673](https://insights.sbomify.com/MAL-2025-47673/): Malicious code in folklore73 (npm) (malicious package)
- [MAL-2025-47672](https://insights.sbomify.com/MAL-2025-47672/): Malicious code in financial-research-agent (npm) (malicious package)
- [MAL-2025-47671](https://insights.sbomify.com/MAL-2025-47671/): Malicious code in fake-package-name (npm) (malicious package)
- [MAL-2025-47670](https://insights.sbomify.com/MAL-2025-47670/): Malicious code in expvariantassignmentsdk (npm) (malicious package)
- [MAL-2025-4767](https://insights.sbomify.com/MAL-2025-4767/): Malicious code in tcp-app-activation-react (npm) (malicious package)
- [MAL-2025-47669](https://insights.sbomify.com/MAL-2025-47669/): Malicious code in express-xmlrequest (npm) (malicious package)
- [MAL-2025-47668](https://insights.sbomify.com/MAL-2025-47668/): Malicious code in example-third-party-queries-caching (npm) (malicious package)
- [MAL-2025-47667](https://insights.sbomify.com/MAL-2025-47667/): Malicious code in example-partytown (npm) (malicious package)
- [MAL-2025-47666](https://insights.sbomify.com/MAL-2025-47666/): Malicious code in example-nestjs-api (npm) (malicious package)
- [MAL-2025-47665](https://insights.sbomify.com/MAL-2025-47665/): Malicious code in example-legacy-customer-account-flow (npm) (malicious package)
- [MAL-2025-47664](https://insights.sbomify.com/MAL-2025-47664/): Malicious code in example-infinite-scroll (npm) (malicious package)
- [MAL-2025-47663](https://insights.sbomify.com/MAL-2025-47663/): Malicious code in example-fastify-web (npm) (malicious package)
- [MAL-2025-47662](https://insights.sbomify.com/MAL-2025-47662/): Malicious code in example-express-web (npm) (malicious package)
- [MAL-2025-47661](https://insights.sbomify.com/MAL-2025-47661/): Malicious code in example-custom-cart-method (npm) (malicious package)
- [MAL-2025-47660](https://insights.sbomify.com/MAL-2025-47660/): Malicious code in example-b2b (npm) (malicious package)
- [MAL-2025-4766](https://insights.sbomify.com/MAL-2025-4766/): Malicious code in swap-token-list (npm) (malicious package)
- [MAL-2025-47659](https://insights.sbomify.com/MAL-2025-47659/): Malicious code in ethereum-toolkit-1 (npm) (malicious package)
- [MAL-2025-47658](https://insights.sbomify.com/MAL-2025-47658/): Malicious code in eslint-v9232 (npm) (malicious package)
- [MAL-2025-47657](https://insights.sbomify.com/MAL-2025-47657/): Malicious code in eslint-v92 (npm) (malicious package)
- [MAL-2025-47656](https://insights.sbomify.com/MAL-2025-47656/): Malicious code in enrichable-markdown-render (npm) (malicious package)
- [MAL-2025-47655](https://insights.sbomify.com/MAL-2025-47655/): Malicious code in emitteryhubs (npm) (malicious package)
- [MAL-2025-47654](https://insights.sbomify.com/MAL-2025-47654/): Malicious code in e2e-test-server (npm) (malicious package)
- [MAL-2025-47653](https://insights.sbomify.com/MAL-2025-47653/): Malicious code in d-aliased2 (npm) (malicious package)
- [MAL-2025-47652](https://insights.sbomify.com/MAL-2025-47652/): Malicious code in d-aliased1 (npm) (malicious package)
- [MAL-2025-47651](https://insights.sbomify.com/MAL-2025-47651/): Malicious code in customer-preference (npm) (malicious package)
- [MAL-2025-47650](https://insights.sbomify.com/MAL-2025-47650/): Malicious code in custom-breadcrumbs (npm) (malicious package)
- [MAL-2025-4765](https://insights.sbomify.com/MAL-2025-4765/): Malicious code in staging-tools (npm) (malicious package)
- [MAL-2025-47649](https://insights.sbomify.com/MAL-2025-47649/): Malicious code in cua-server (npm) (malicious package)
- [MAL-2025-47648](https://insights.sbomify.com/MAL-2025-47648/): Malicious code in com.yasirkula.nativeshare (npm) (malicious package)
- [MAL-2025-47647](https://insights.sbomify.com/MAL-2025-47647/): Malicious code in com.unity.xr.mock-hmd (npm) (malicious package)
- [MAL-2025-47646](https://insights.sbomify.com/MAL-2025-47646/): Malicious code in com.unity.xr.hands (npm) (malicious package)
- [MAL-2025-47645](https://insights.sbomify.com/MAL-2025-47645/): Malicious code in com.unity.xr.core-utils (npm) (malicious package)
- [MAL-2025-47644](https://insights.sbomify.com/MAL-2025-47644/): Malicious code in com.unity.tiny (npm) (malicious package)
- [MAL-2025-47643](https://insights.sbomify.com/MAL-2025-47643/): Malicious code in com.unity.test-framework.utp-reporter (npm) (malicious package)
- [MAL-2025-47642](https://insights.sbomify.com/MAL-2025-47642/): Malicious code in com.unity.test-framework.graphics.performance (npm) (malicious package)
- [MAL-2025-47641](https://insights.sbomify.com/MAL-2025-47641/): Malicious code in com.unity.test-framework.build (npm) (malicious package)
- [MAL-2025-47640](https://insights.sbomify.com/MAL-2025-47640/): Malicious code in com.unity.sysroot.linux-x86_64 (npm) (malicious package)
- [MAL-2025-4764](https://insights.sbomify.com/MAL-2025-4764/): Malicious code in sechub-web-ui (npm) (malicious package)
- [MAL-2025-47639](https://insights.sbomify.com/MAL-2025-47639/): Malicious code in com.unity.sysroot (npm) (malicious package)
- [MAL-2025-47638](https://insights.sbomify.com/MAL-2025-47638/): Malicious code in com.unity.spatial-framework-core (npm) (malicious package)
- [MAL-2025-47637](https://insights.sbomify.com/MAL-2025-47637/): Malicious code in com.unity.simulation.core (npm) (malicious package)
- [MAL-2025-47636](https://insights.sbomify.com/MAL-2025-47636/): Malicious code in com.unity.simulation.capture (npm) (malicious package)
- [MAL-2025-47635](https://insights.sbomify.com/MAL-2025-47635/): Malicious code in com.unity.serialization (npm) (malicious package)
- [MAL-2025-47634](https://insights.sbomify.com/MAL-2025-47634/): Malicious code in com.unity.rendering.hybrid (npm) (malicious package)
- [MAL-2025-47633](https://insights.sbomify.com/MAL-2025-47633/): Malicious code in com.unity.quicksearch (npm) (malicious package)
- [MAL-2025-47632](https://insights.sbomify.com/MAL-2025-47632/): Malicious code in com.unity.process-server (npm) (malicious package)
- [MAL-2025-47631](https://insights.sbomify.com/MAL-2025-47631/): Malicious code in com.unity.multiplayer.mlapi (npm) (malicious package)
- [MAL-2025-47630](https://insights.sbomify.com/MAL-2025-47630/): Malicious code in com.unity.gis.high-precision-framework (npm) (malicious package)
- [MAL-2025-4763](https://insights.sbomify.com/MAL-2025-4763/): Malicious code in samba-core (npm) (malicious package)
- [MAL-2025-47629](https://insights.sbomify.com/MAL-2025-47629/): Malicious code in com.unity.external.test-protocol (npm) (malicious package)
- [MAL-2025-47628](https://insights.sbomify.com/MAL-2025-47628/): Malicious code in com.unity.editor.tasks (npm) (malicious package)
- [MAL-2025-47627](https://insights.sbomify.com/MAL-2025-47627/): Malicious code in com.unity.dots.runtime (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/584/