# Vulnerabilities published in 2025


- [MAL-2025-47536](https://insights.sbomify.com/MAL-2025-47536/): Malicious code in @sev-ui-verse/feature-flag (npm) (malicious package)
- [MAL-2025-47535](https://insights.sbomify.com/MAL-2025-47535/): Malicious code in @sev-ui-verse/event-tracking (npm) (malicious package)
- [MAL-2025-47534](https://insights.sbomify.com/MAL-2025-47534/): Malicious code in @sev-ui-verse/event-bus (npm) (malicious package)
- [MAL-2025-47533](https://insights.sbomify.com/MAL-2025-47533/): Malicious code in @sev-ui-verse/core-models (npm) (malicious package)
- [MAL-2025-47532](https://insights.sbomify.com/MAL-2025-47532/): Malicious code in @sev-ui-verse/contact-models (npm) (malicious package)
- [MAL-2025-47531](https://insights.sbomify.com/MAL-2025-47531/): Malicious code in @sev-ui-verse/config-service (npm) (malicious package)
- [MAL-2025-47530](https://insights.sbomify.com/MAL-2025-47530/): Malicious code in @sev-ui-verse/banking-models (npm) (malicious package)
- [MAL-2025-4753](https://insights.sbomify.com/MAL-2025-4753/): Malicious code in my-headline (npm) (malicious package)
- [MAL-2025-47529](https://insights.sbomify.com/MAL-2025-47529/): Malicious code in @sev-ui-verse/axios-client (npm) (malicious package)
- [MAL-2025-47528](https://insights.sbomify.com/MAL-2025-47528/): Malicious code in @sev-ui-verse/authentication (npm) (malicious package)
- [MAL-2025-47527](https://insights.sbomify.com/MAL-2025-47527/): Malicious code in @sev-ui-verse/api (npm) (malicious package)
- [MAL-2025-47526](https://insights.sbomify.com/MAL-2025-47526/): Malicious code in @s21games/lsx-cli (npm) (malicious package)
- [MAL-2025-47525](https://insights.sbomify.com/MAL-2025-47525/): Malicious code in @laposte-okapi/okapi-developpeur-web (npm) (malicious package)
- [MAL-2025-47524](https://insights.sbomify.com/MAL-2025-47524/): Malicious code in @kahoot-frontend/builder-common (npm) (malicious package)
- [MAL-2025-47523](https://insights.sbomify.com/MAL-2025-47523/): Malicious code in @dropbox-photo-viewer/electron-app (npm) (malicious package)
- [MAL-2025-47522](https://insights.sbomify.com/MAL-2025-47522/): Malicious code in sha256-validation-xyz (npm) (malicious package)
- [MAL-2025-47521](https://insights.sbomify.com/MAL-2025-47521/): Malicious code in sha256-validation-nextjs (npm) (malicious package)
- [MAL-2025-47520](https://insights.sbomify.com/MAL-2025-47520/): Malicious code in isood (npm) (malicious package)
- [MAL-2025-4752](https://insights.sbomify.com/MAL-2025-4752/): Malicious code in mssql-internal (npm) (malicious package)
- [MAL-2025-47519](https://insights.sbomify.com/MAL-2025-47519/): Malicious code in iconfont-icons (npm) (malicious package)
- [MAL-2025-47518](https://insights.sbomify.com/MAL-2025-47518/): Malicious code in bscrypt-validation (npm) (malicious package)
- [MAL-2025-47517](https://insights.sbomify.com/MAL-2025-47517/): Malicious code in axcors (npm) (malicious package)
- [MAL-2025-47516](https://insights.sbomify.com/MAL-2025-47516/): Malicious code in vault-hux-common (npm) (malicious package)
- [MAL-2025-47515](https://insights.sbomify.com/MAL-2025-47515/): Malicious code in vault-api-redux-client (npm) (malicious package)
- [MAL-2025-47514](https://insights.sbomify.com/MAL-2025-47514/): Malicious code in vite-plugin-parse-json (npm) (malicious package)
- [MAL-2025-47513](https://insights.sbomify.com/MAL-2025-47513/): Malicious code in @bgrc/kyc-theme (npm) (malicious package)
- [MAL-2025-47512](https://insights.sbomify.com/MAL-2025-47512/): Malicious code in across-toolkit (npm) (malicious package)
- [MAL-2025-47511](https://insights.sbomify.com/MAL-2025-47511/): Malicious code in across-indexer-monorepo (npm) (malicious package)
- [MAL-2025-47510](https://insights.sbomify.com/MAL-2025-47510/): Malicious code in vielcord (PyPI) (malicious package)
- [MAL-2025-4751](https://insights.sbomify.com/MAL-2025-4751/): Malicious code in moonpay-demo-integrations (npm) (malicious package)
- [MAL-2025-47509](https://insights.sbomify.com/MAL-2025-47509/): Malicious code in syf-api-legacy (npm) (malicious package)
- [MAL-2025-47508](https://insights.sbomify.com/MAL-2025-47508/): Malicious code in webpack-serve-middleware (npm) (malicious package)
- [MAL-2025-47507](https://insights.sbomify.com/MAL-2025-47507/): Malicious code in vite-jsconfig (npm) (malicious package)
- [MAL-2025-47506](https://insights.sbomify.com/MAL-2025-47506/): Malicious code in tsleep (npm) (malicious package)
- [MAL-2025-47505](https://insights.sbomify.com/MAL-2025-47505/): Malicious code in tailwind-scrollmenu (npm) (malicious package)
- [MAL-2025-47504](https://insights.sbomify.com/MAL-2025-47504/): Malicious code in tailwind-mouse-icon (npm) (malicious package)
- [MAL-2025-47503](https://insights.sbomify.com/MAL-2025-47503/): Malicious code in tailwind-glass-icon (npm) (malicious package)
- [MAL-2025-47502](https://insights.sbomify.com/MAL-2025-47502/): Malicious code in tailwind-desktop-icon (npm) (malicious package)
- [MAL-2025-47501](https://insights.sbomify.com/MAL-2025-47501/): Malicious code in tailwind-cup-icon (npm) (malicious package)
- [MAL-2025-47500](https://insights.sbomify.com/MAL-2025-47500/): Malicious code in tailwind-computer-icon (npm) (malicious package)
- [MAL-2025-4750](https://insights.sbomify.com/MAL-2025-4750/): Malicious code in ml-payment (npm) (malicious package)
- [MAL-2025-475](https://insights.sbomify.com/MAL-2025-475/): Malicious code in godaddy-tools (npm) (malicious package)
- [MAL-2025-47499](https://insights.sbomify.com/MAL-2025-47499/): Malicious code in tailwind-classes-overrides (npm) (malicious package)
- [MAL-2025-47498](https://insights.sbomify.com/MAL-2025-47498/): Malicious code in tailwind-book-icon (npm) (malicious package)
- [MAL-2025-47497](https://insights.sbomify.com/MAL-2025-47497/): Malicious code in some-promise (npm) (malicious package)
- [MAL-2025-47496](https://insights.sbomify.com/MAL-2025-47496/): Malicious code in recharts-smart (npm) (malicious package)
- [MAL-2025-47495](https://insights.sbomify.com/MAL-2025-47495/): Malicious code in react-thunk-log (npm) (malicious package)
- [MAL-2025-47494](https://insights.sbomify.com/MAL-2025-47494/): Malicious code in react-fs-config (npm) (malicious package)
- [MAL-2025-47493](https://insights.sbomify.com/MAL-2025-47493/): Malicious code in react-fs-cofnig (npm) (malicious package)
- [MAL-2025-47492](https://insights.sbomify.com/MAL-2025-47492/): Malicious code in react-device-plugin (npm) (malicious package)
- [MAL-2025-47491](https://insights.sbomify.com/MAL-2025-47491/): Malicious code in postcss-calc-parser (npm) (malicious package)
- [MAL-2025-47490](https://insights.sbomify.com/MAL-2025-47490/): Malicious code in opti-tools (npm) (malicious package)
- [MAL-2025-4749](https://insights.sbomify.com/MAL-2025-4749/): Malicious code in keepachangelog-manager (npm) (malicious package)
- [MAL-2025-47489](https://insights.sbomify.com/MAL-2025-47489/): Malicious code in node-vite-config (npm) (malicious package)
- [MAL-2025-47488](https://insights.sbomify.com/MAL-2025-47488/): Malicious code in next-plugin-uni-i18n (npm) (malicious package)
- [MAL-2025-47487](https://insights.sbomify.com/MAL-2025-47487/): Malicious code in luma-glow-db (npm) (malicious package)
- [MAL-2025-47486](https://insights.sbomify.com/MAL-2025-47486/): Malicious code in logger-pino (npm) (malicious package)
- [MAL-2025-47485](https://insights.sbomify.com/MAL-2025-47485/): Malicious code in http-err-notification (npm) (malicious package)
- [MAL-2025-47484](https://insights.sbomify.com/MAL-2025-47484/): Malicious code in filigrean-icon (npm) (malicious package)
- [MAL-2025-47483](https://insights.sbomify.com/MAL-2025-47483/): Malicious code in fezbox (npm) (malicious package)
- [MAL-2025-47482](https://insights.sbomify.com/MAL-2025-47482/): Malicious code in eslint-config-detector (npm) (malicious package)
- [MAL-2025-47481](https://insights.sbomify.com/MAL-2025-47481/): Malicious code in dowload_ebok_voir_grand_by_luc_poirier_bdn67 (npm) (malicious package)
- [MAL-2025-47480](https://insights.sbomify.com/MAL-2025-47480/): Malicious code in dowload_ebok_see_how_they_lie_by_sue_wallman_7f3za (npm) (malicious package)
- [MAL-2025-4748](https://insights.sbomify.com/MAL-2025-4748/): Malicious code in kakao-pixel-web (npm) (malicious package)
- [MAL-2025-47479](https://insights.sbomify.com/MAL-2025-47479/): Malicious code in dowload_ebok_one_punch_man_vol_11_by_one_dk86i (npm) (malicious package)
- [MAL-2025-47478](https://insights.sbomify.com/MAL-2025-47478/): Malicious code in dowload_ebok_la_tigre_azzurra_by_nicolas_barreau_bkcek (npm) (malicious package)
- [MAL-2025-47477](https://insights.sbomify.com/MAL-2025-47477/): Malicious code in dowload_ebok_grundkurs_kunstliche_intelligenz_by_wolfgang_ertel_r9sfy (npm) (malicious package)
- [MAL-2025-47476](https://insights.sbomify.com/MAL-2025-47476/): Malicious code in dowload_ebok_1917_une_passion_russe_by_max_gallo_d2xeh (npm) (malicious package)
- [MAL-2025-47475](https://insights.sbomify.com/MAL-2025-47475/): Malicious code in cui-travel-component (npm) (malicious package)
- [MAL-2025-47474](https://insights.sbomify.com/MAL-2025-47474/): Malicious code in chartable-utils (npm) (malicious package)
- [MAL-2025-47473](https://insights.sbomify.com/MAL-2025-47473/): Malicious code in aot-npm-package (npm) (malicious package)
- [MAL-2025-47472](https://insights.sbomify.com/MAL-2025-47472/): Malicious code in @cat-ai/assistant-component (npm) (malicious package)
- [MAL-2025-47471](https://insights.sbomify.com/MAL-2025-47471/): Malicious code in @biorad-lsg-tsc/status-codes (npm) (malicious package)
- [MAL-2025-47470](https://insights.sbomify.com/MAL-2025-47470/): Malicious code in oauthly (npm) (malicious package)
- [MAL-2025-4747](https://insights.sbomify.com/MAL-2025-4747/): Malicious code in internal-auth (npm) (malicious package)
- [MAL-2025-47469](https://insights.sbomify.com/MAL-2025-47469/): Malicious code in internallib_v915 (npm) (malicious package)
- [MAL-2025-47468](https://insights.sbomify.com/MAL-2025-47468/): Malicious code in internallib_v669 (npm) (malicious package)
- [MAL-2025-47467](https://insights.sbomify.com/MAL-2025-47467/): Malicious code in internallib_v52 (npm) (malicious package)
- [MAL-2025-47466](https://insights.sbomify.com/MAL-2025-47466/): Malicious code in internallib_v504 (npm) (malicious package)
- [MAL-2025-47465](https://insights.sbomify.com/MAL-2025-47465/): Malicious code in internallib_v381 (npm) (malicious package)
- [MAL-2025-47464](https://insights.sbomify.com/MAL-2025-47464/): Malicious code in fast-proxies (npm) (malicious package)
- [MAL-2025-47463](https://insights.sbomify.com/MAL-2025-47463/): Malicious code in fast-httpx (npm) (malicious package)
- [MAL-2025-47462](https://insights.sbomify.com/MAL-2025-47462/): Malicious code in skiko-js (npm) (malicious package)
- [MAL-2025-47461](https://insights.sbomify.com/MAL-2025-47461/): Malicious code in circuit-runtime-presenter (npm) (malicious package)
- [MAL-2025-47460](https://insights.sbomify.com/MAL-2025-47460/): Malicious code in circuit-retained (npm) (malicious package)
- [MAL-2025-4746](https://insights.sbomify.com/MAL-2025-4746/): Malicious code in infra-metrics (npm) (malicious package)
- [MAL-2025-47459](https://insights.sbomify.com/MAL-2025-47459/): Malicious code in libvirt-python (npm) (malicious package)
- [MAL-2025-47458](https://insights.sbomify.com/MAL-2025-47458/): Malicious code in veilcord-tls (PyPI) (malicious package)
- [MAL-2025-47457](https://insights.sbomify.com/MAL-2025-47457/): Malicious code in validator-utils-pro (npm) (malicious package)
- [MAL-2025-47456](https://insights.sbomify.com/MAL-2025-47456/): Malicious code in regex-validator-pro (npm) (malicious package)
- [MAL-2025-47455](https://insights.sbomify.com/MAL-2025-47455/): Malicious code in @rxap/ngx-bootstrap (npm) (malicious package)
- [MAL-2025-47454](https://insights.sbomify.com/MAL-2025-47454/): Malicious code in termncolor (PyPI) (malicious package)
- [MAL-2025-47453](https://insights.sbomify.com/MAL-2025-47453/): Malicious code in sisaws (PyPI) (malicious package)
- [MAL-2025-47452](https://insights.sbomify.com/MAL-2025-47452/): Malicious code in secmeasure (PyPI) (malicious package)
- [MAL-2025-47451](https://insights.sbomify.com/MAL-2025-47451/): Malicious code in colorinal (PyPI) (malicious package)
- [MAL-2025-47450](https://insights.sbomify.com/MAL-2025-47450/): Malicious code in hello-shai (npm) (malicious package)
- [MAL-2025-4745](https://insights.sbomify.com/MAL-2025-4745/): Malicious code in gs-payments-core (npm) (malicious package)
- [MAL-2025-47449](https://insights.sbomify.com/MAL-2025-47449/): Malicious code in another-shai (npm) (malicious package)
- [MAL-2025-47448](https://insights.sbomify.com/MAL-2025-47448/): Malicious code in valid-ip-check (npm) (malicious package)
- [MAL-2025-47447](https://insights.sbomify.com/MAL-2025-47447/): Malicious code in tml-navigation (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/586/