# Vulnerabilities published in 2025 - [MAL-2025-47446](https://insights.sbomify.com/MAL-2025-47446/): Malicious code in tml-fallback (npm) (malicious package) - [MAL-2025-47445](https://insights.sbomify.com/MAL-2025-47445/): Malicious code in tailwindcss-color-icons-lite (npm) (malicious package) - [MAL-2025-47444](https://insights.sbomify.com/MAL-2025-47444/): Malicious code in tailwind-color-icon (npm) (malicious package) - [MAL-2025-47443](https://insights.sbomify.com/MAL-2025-47443/): Malicious code in strutil-pro (npm) (malicious package) - [MAL-2025-47442](https://insights.sbomify.com/MAL-2025-47442/): Malicious code in string-mapper (npm) (malicious package) - [MAL-2025-47441](https://insights.sbomify.com/MAL-2025-47441/): Malicious code in semvre (npm) (malicious package) - [MAL-2025-47440](https://insights.sbomify.com/MAL-2025-47440/): Malicious code in regex-validator-utils (npm) (malicious package) - [MAL-2025-4744](https://insights.sbomify.com/MAL-2025-4744/): Malicious code in gs-payments (npm) (malicious package) - [MAL-2025-47439](https://insights.sbomify.com/MAL-2025-47439/): Malicious code in porscheofficial (npm) (malicious package) - [MAL-2025-47438](https://insights.sbomify.com/MAL-2025-47438/): Malicious code in pega-dependency-package (npm) (malicious package) - [MAL-2025-47437](https://insights.sbomify.com/MAL-2025-47437/): Malicious code in malicious-package-test (npm) (malicious package) - [MAL-2025-47436](https://insights.sbomify.com/MAL-2025-47436/): Malicious code in lynx-explorer (npm) (malicious package) - [MAL-2025-47435](https://insights.sbomify.com/MAL-2025-47435/): Malicious code in lynx-dev (npm) (malicious package) - [MAL-2025-47434](https://insights.sbomify.com/MAL-2025-47434/): Malicious code in eslint-plugin-whatever (npm) (malicious package) - [MAL-2025-47433](https://insights.sbomify.com/MAL-2025-47433/): Malicious code in epc-help-widget (npm) (malicious package) - [MAL-2025-47432](https://insights.sbomify.com/MAL-2025-47432/): Malicious code in axois-helper (npm) (malicious package) - [MAL-2025-47431](https://insights.sbomify.com/MAL-2025-47431/): Malicious code in ansi-styl (npm) (malicious package) - [MAL-2025-47430](https://insights.sbomify.com/MAL-2025-47430/): Malicious code in @jupiter-sdk/trade (npm) (malicious package) - [MAL-2025-4743](https://insights.sbomify.com/MAL-2025-4743/): Malicious code in flagd-playground (npm) (malicious package) - [MAL-2025-47429](https://insights.sbomify.com/MAL-2025-47429/): Malicious code in @bonk-sdk/sha256 (npm) (malicious package) - [MAL-2025-47428](https://insights.sbomify.com/MAL-2025-47428/): Malicious code in @bonk-sdk/ipfs (npm) (malicious package) - [MAL-2025-47427](https://insights.sbomify.com/MAL-2025-47427/): Malicious code in tml-footer (npm) (malicious package) - [MAL-2025-47426](https://insights.sbomify.com/MAL-2025-47426/): Malicious code in playground_root (npm) (malicious package) - [MAL-2025-47425](https://insights.sbomify.com/MAL-2025-47425/): Malicious code in storj-satellite (npm) (malicious package) - [MAL-2025-47424](https://insights.sbomify.com/MAL-2025-47424/): Malicious code in windap-web (npm) (malicious package) - [MAL-2025-47423](https://insights.sbomify.com/MAL-2025-47423/): Malicious code in ng-imports-checker (npm) (malicious package) - [MAL-2025-47422](https://insights.sbomify.com/MAL-2025-47422/): Malicious code in devextreme-rpk (npm) (malicious package) - [MAL-2025-47421](https://insights.sbomify.com/MAL-2025-47421/): Malicious code in @strong-energetic/test-banned-file (npm) (malicious package) - [MAL-2025-47420](https://insights.sbomify.com/MAL-2025-47420/): Malicious code in @basic-ui-components-stc/basic-ui-components (npm) (malicious package) - [MAL-2025-4742](https://insights.sbomify.com/MAL-2025-4742/): Malicious code in esm-imports (npm) (malicious package) - [MAL-2025-47419](https://insights.sbomify.com/MAL-2025-47419/): Malicious code in webpikes (npm) (malicious package) - [MAL-2025-47418](https://insights.sbomify.com/MAL-2025-47418/): Malicious code in web3rpcs (npm) (malicious package) - [MAL-2025-47417](https://insights.sbomify.com/MAL-2025-47417/): Malicious code in web3-ws (npm) (malicious package) - [MAL-2025-47416](https://insights.sbomify.com/MAL-2025-47416/): Malicious code in voip-callkit (npm) (malicious package) - [MAL-2025-47415](https://insights.sbomify.com/MAL-2025-47415/): Malicious code in top-crawl-agents (npm) (malicious package) - [MAL-2025-47414](https://insights.sbomify.com/MAL-2025-47414/): Malicious code in testcatplzignore (npm) (malicious package) - [MAL-2025-47413](https://insights.sbomify.com/MAL-2025-47413/): Malicious code in supply_chain_test_quang (npm) (malicious package) - [MAL-2025-47412](https://insights.sbomify.com/MAL-2025-47412/): Malicious code in suchinind (npm) (malicious package) - [MAL-2025-47411](https://insights.sbomify.com/MAL-2025-47411/): Malicious code in stolbovsaseeminglyinnocentpackage5 (npm) (malicious package) - [MAL-2025-47410](https://insights.sbomify.com/MAL-2025-47410/): Malicious code in simplemoduleonetestone (npm) (malicious package) - [MAL-2025-4741](https://insights.sbomify.com/MAL-2025-4741/): Malicious code in educational-depconf-poc (npm) (malicious package) - [MAL-2025-47409](https://insights.sbomify.com/MAL-2025-47409/): Malicious code in sbrugna (npm) (malicious package) - [MAL-2025-47408](https://insights.sbomify.com/MAL-2025-47408/): Malicious code in pega-dependency-confusion-package (npm) (malicious package) - [MAL-2025-47407](https://insights.sbomify.com/MAL-2025-47407/): Malicious code in oss-fuzz (npm) (malicious package) - [MAL-2025-47406](https://insights.sbomify.com/MAL-2025-47406/): Malicious code in mstate-angular (npm) (malicious package) - [MAL-2025-47405](https://insights.sbomify.com/MAL-2025-47405/): Malicious code in moduletestsimpletest5 (npm) (malicious package) - [MAL-2025-47404](https://insights.sbomify.com/MAL-2025-47404/): Malicious code in mobioffice-cli (npm) (malicious package) - [MAL-2025-47403](https://insights.sbomify.com/MAL-2025-47403/): Malicious code in kreme-circuits (npm) (malicious package) - [MAL-2025-47402](https://insights.sbomify.com/MAL-2025-47402/): Malicious code in kecks (npm) (malicious package) - [MAL-2025-47401](https://insights.sbomify.com/MAL-2025-47401/): Malicious code in igame (npm) (malicious package) - [MAL-2025-47400](https://insights.sbomify.com/MAL-2025-47400/): Malicious code in db-evo (npm) (malicious package) - [MAL-2025-4740](https://insights.sbomify.com/MAL-2025-4740/): Malicious code in dev-api-client (npm) (malicious package) - [MAL-2025-474](https://insights.sbomify.com/MAL-2025-474/): Malicious code in godaddy-tests (npm) (malicious package) - [MAL-2025-47399](https://insights.sbomify.com/MAL-2025-47399/): Malicious code in com.db.internetportal.es.dbolb-dbcore-theme (npm) (malicious package) - [MAL-2025-47398](https://insights.sbomify.com/MAL-2025-47398/): Malicious code in capacitorandroidpermissions (npm) (malicious package) - [MAL-2025-47397](https://insights.sbomify.com/MAL-2025-47397/): Malicious code in capacitor-plugin-vonage (npm) (malicious package) - [MAL-2025-47396](https://insights.sbomify.com/MAL-2025-47396/): Malicious code in capacitor-plugin-ihealth (npm) (malicious package) - [MAL-2025-47395](https://insights.sbomify.com/MAL-2025-47395/): Malicious code in capacitor-plugin-healthapp (npm) (malicious package) - [MAL-2025-47394](https://insights.sbomify.com/MAL-2025-47394/): Malicious code in capacitor-notificationhandler (npm) (malicious package) - [MAL-2025-47393](https://insights.sbomify.com/MAL-2025-47393/): Malicious code in bsd-form-ui-kit (npm) (malicious package) - [MAL-2025-47392](https://insights.sbomify.com/MAL-2025-47392/): Malicious code in @things-factory/shell (npm) (malicious package) - [MAL-2025-47391](https://insights.sbomify.com/MAL-2025-47391/): Malicious code in @pc-analytics-filter/core (npm) (malicious package) - [MAL-2025-47390](https://insights.sbomify.com/MAL-2025-47390/): Malicious code in @nativescript-community/ui-material-ripple (npm) (malicious package) - [MAL-2025-4739](https://insights.sbomify.com/MAL-2025-4739/): Malicious code in db-prod-interno (npm) (malicious package) - [MAL-2025-47389](https://insights.sbomify.com/MAL-2025-47389/): Malicious code in @nativescript-community/ui-material-bottom-navigation (npm) (malicious package) - [MAL-2025-47388](https://insights.sbomify.com/MAL-2025-47388/): Malicious code in @nativescript-community/ui-label (npm) (malicious package) - [MAL-2025-47387](https://insights.sbomify.com/MAL-2025-47387/): Malicious code in @nativescript-community/ui-document-picker (npm) (malicious package) - [MAL-2025-47386](https://insights.sbomify.com/MAL-2025-47386/): Malicious code in @gc-crm/gc-crm-lib (npm) (malicious package) - [MAL-2025-47385](https://insights.sbomify.com/MAL-2025-47385/): Malicious code in @art-ws/web-app (npm) (malicious package) - [MAL-2025-47384](https://insights.sbomify.com/MAL-2025-47384/): Malicious code in @art-ws/ssl-info (npm) (malicious package) - [MAL-2025-47383](https://insights.sbomify.com/MAL-2025-47383/): Malicious code in @art-ws/slf (npm) (malicious package) - [MAL-2025-47382](https://insights.sbomify.com/MAL-2025-47382/): Malicious code in @art-ws/prettier (npm) (malicious package) - [MAL-2025-47381](https://insights.sbomify.com/MAL-2025-47381/): Malicious code in @art-ws/package-base (npm) (malicious package) - [MAL-2025-47380](https://insights.sbomify.com/MAL-2025-47380/): Malicious code in @art-ws/openapi (npm) (malicious package) - [MAL-2025-4738](https://insights.sbomify.com/MAL-2025-4738/): Malicious code in db-prd (npm) (malicious package) - [MAL-2025-47379](https://insights.sbomify.com/MAL-2025-47379/): Malicious code in @art-ws/http-server (npm) (malicious package) - [MAL-2025-47378](https://insights.sbomify.com/MAL-2025-47378/): Malicious code in @art-ws/fastify-http-server (npm) (malicious package) - [MAL-2025-47377](https://insights.sbomify.com/MAL-2025-47377/): Malicious code in @art-ws/eslint (npm) (malicious package) - [MAL-2025-47376](https://insights.sbomify.com/MAL-2025-47376/): Malicious code in @art-ws/di-node (npm) (malicious package) - [MAL-2025-47375](https://insights.sbomify.com/MAL-2025-47375/): Malicious code in @art-ws/di (npm) (malicious package) - [MAL-2025-47374](https://insights.sbomify.com/MAL-2025-47374/): Malicious code in @art-ws/db-context (npm) (malicious package) - [MAL-2025-47373](https://insights.sbomify.com/MAL-2025-47373/): Malicious code in @art-ws/config-ts (npm) (malicious package) - [MAL-2025-47372](https://insights.sbomify.com/MAL-2025-47372/): Malicious code in @art-ws/config-eslint (npm) (malicious package) - [MAL-2025-47371](https://insights.sbomify.com/MAL-2025-47371/): Malicious code in @art-ws/common (npm) (malicious package) - [MAL-2025-47370](https://insights.sbomify.com/MAL-2025-47370/): Malicious code in @ahmedhfarag/ngx-virtual-scroller (npm) (malicious package) - [MAL-2025-4737](https://insights.sbomify.com/MAL-2025-4737/): Malicious code in corp-config (npm) (malicious package) - [MAL-2025-47369](https://insights.sbomify.com/MAL-2025-47369/): Malicious code in @ahmedhfarag/ngx-perfect-scrollbar (npm) (malicious package) - [MAL-2025-47368](https://insights.sbomify.com/MAL-2025-47368/): Malicious code in zarabotok-na-obmenakh-bitkoinakh-d7rqlq46s (npm) (malicious package) - [MAL-2025-47367](https://insights.sbomify.com/MAL-2025-47367/): Malicious code in zarabotok-na-kriptovaliute-dlia-nachinaiushchikh-forum-5vff29khr (npm) (malicious package) - [MAL-2025-47366](https://insights.sbomify.com/MAL-2025-47366/): Malicious code in yargs-help-output (npm) (malicious package) - [MAL-2025-47365](https://insights.sbomify.com/MAL-2025-47365/): Malicious code in xo-wallet-components (npm) (malicious package) - [MAL-2025-47364](https://insights.sbomify.com/MAL-2025-47364/): Malicious code in xo-tray-height (npm) (malicious package) - [MAL-2025-47363](https://insights.sbomify.com/MAL-2025-47363/): Malicious code in xo-guest-components (npm) (malicious package) - [MAL-2025-47362](https://insights.sbomify.com/MAL-2025-47362/): Malicious code in working_tests (npm) (malicious package) - [MAL-2025-47361](https://insights.sbomify.com/MAL-2025-47361/): Malicious code in wdio-web-reporter (npm) (malicious package) - [MAL-2025-47360](https://insights.sbomify.com/MAL-2025-47360/): Malicious code in verror-extra (npm) (malicious package) - [MAL-2025-4736](https://insights.sbomify.com/MAL-2025-4736/): Malicious code in copy-package-contents (npm) (malicious package) - [MAL-2025-47359](https://insights.sbomify.com/MAL-2025-47359/): Malicious code in ve-editor (npm) (malicious package) - [MAL-2025-47358](https://insights.sbomify.com/MAL-2025-47358/): Malicious code in ve-bamreader (npm) (malicious package) - [MAL-2025-47357](https://insights.sbomify.com/MAL-2025-47357/): Malicious code in tvi-cli (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/587/