# Vulnerabilities published in 2025 - [MAL-2025-47356](https://insights.sbomify.com/MAL-2025-47356/): Malicious code in ts-jito (npm) (malicious package) - [MAL-2025-47355](https://insights.sbomify.com/MAL-2025-47355/): Malicious code in ts-imports (npm) (malicious package) - [MAL-2025-47354](https://insights.sbomify.com/MAL-2025-47354/): Malicious code in transform-remove-console (npm) (malicious package) - [MAL-2025-47353](https://insights.sbomify.com/MAL-2025-47353/): Malicious code in thangved-react-grid (npm) (malicious package) - [MAL-2025-47352](https://insights.sbomify.com/MAL-2025-47352/): Malicious code in tg-seq-gen (npm) (malicious package) - [MAL-2025-47351](https://insights.sbomify.com/MAL-2025-47351/): Malicious code in tg-redbird (npm) (malicious package) - [MAL-2025-47350](https://insights.sbomify.com/MAL-2025-47350/): Malicious code in tg-client-query-builder (npm) (malicious package) - [MAL-2025-4735](https://insights.sbomify.com/MAL-2025-4735/): Malicious code in conventional-changelog-action (npm) (malicious package) - [MAL-2025-47349](https://insights.sbomify.com/MAL-2025-47349/): Malicious code in teselagen-interval-tree (npm) (malicious package) - [MAL-2025-47348](https://insights.sbomify.com/MAL-2025-47348/): Malicious code in sensay-cli (npm) (malicious package) - [MAL-2025-47347](https://insights.sbomify.com/MAL-2025-47347/): Malicious code in rxnt-kue (npm) (malicious package) - [MAL-2025-47346](https://insights.sbomify.com/MAL-2025-47346/): Malicious code in rxnt-healthchecks-nestjs (npm) (malicious package) - [MAL-2025-47345](https://insights.sbomify.com/MAL-2025-47345/): Malicious code in rxnt-authentication (npm) (malicious package) - [MAL-2025-47344](https://insights.sbomify.com/MAL-2025-47344/): Malicious code in react-jsonschema-rxnt-extras (npm) (malicious package) - [MAL-2025-47343](https://insights.sbomify.com/MAL-2025-47343/): Malicious code in react-jsonschema-form-extras (npm) (malicious package) - [MAL-2025-47342](https://insights.sbomify.com/MAL-2025-47342/): Malicious code in react-jsonschema-form-conditionals (npm) (malicious package) - [MAL-2025-47341](https://insights.sbomify.com/MAL-2025-47341/): Malicious code in react-complaint-image (npm) (malicious package) - [MAL-2025-47340](https://insights.sbomify.com/MAL-2025-47340/): Malicious code in printjs-rpk (npm) (malicious package) - [MAL-2025-4734](https://insights.sbomify.com/MAL-2025-4734/): Malicious code in com.meta.utilities (npm) (malicious package) - [MAL-2025-47339](https://insights.sbomify.com/MAL-2025-47339/): Malicious code in pm2-gelf-json (npm) (malicious package) - [MAL-2025-47338](https://insights.sbomify.com/MAL-2025-47338/): Malicious code in ove-auto-annotate (npm) (malicious package) - [MAL-2025-47337](https://insights.sbomify.com/MAL-2025-47337/): Malicious code in oradm-to-sqlz (npm) (malicious package) - [MAL-2025-47336](https://insights.sbomify.com/MAL-2025-47336/): Malicious code in oradm-to-gql (npm) (malicious package) - [MAL-2025-47335](https://insights.sbomify.com/MAL-2025-47335/): Malicious code in openzeppelin-compact (npm) (malicious package) - [MAL-2025-47334](https://insights.sbomify.com/MAL-2025-47334/): Malicious code in oci-plugin-compliance (npm) (malicious package) - [MAL-2025-47333](https://insights.sbomify.com/MAL-2025-47333/): Malicious code in oci-console-plugin-registry (npm) (malicious package) - [MAL-2025-47332](https://insights.sbomify.com/MAL-2025-47332/): Malicious code in ngx-ws (npm) (malicious package) - [MAL-2025-47331](https://insights.sbomify.com/MAL-2025-47331/): Malicious code in mstate-react (npm) (malicious package) - [MAL-2025-47330](https://insights.sbomify.com/MAL-2025-47330/): Malicious code in mstate-dev-react (npm) (malicious package) - [MAL-2025-4733](https://insights.sbomify.com/MAL-2025-4733/): Malicious code in c2pa-js (npm) (malicious package) - [MAL-2025-47329](https://insights.sbomify.com/MAL-2025-47329/): Malicious code in mstate-cli (npm) (malicious package) - [MAL-2025-47328](https://insights.sbomify.com/MAL-2025-47328/): Malicious code in monorepo-next (npm) (malicious package) - [MAL-2025-47327](https://insights.sbomify.com/MAL-2025-47327/): Malicious code in mcp-knowledge-graph (npm) (malicious package) - [MAL-2025-47326](https://insights.sbomify.com/MAL-2025-47326/): Malicious code in mcp-knowledge-base (npm) (malicious package) - [MAL-2025-47325](https://insights.sbomify.com/MAL-2025-47325/): Malicious code in mcfly-semantic-release (npm) (malicious package) - [MAL-2025-47324](https://insights.sbomify.com/MAL-2025-47324/): Malicious code in login-tokenizer (npm) (malicious package) - [MAL-2025-47323](https://insights.sbomify.com/MAL-2025-47323/): Malicious code in kinyongi-poc (npm) (malicious package) - [MAL-2025-47322](https://insights.sbomify.com/MAL-2025-47322/): Malicious code in kinyongi (npm) (malicious package) - [MAL-2025-47321](https://insights.sbomify.com/MAL-2025-47321/): Malicious code in keithowan (npm) (malicious package) - [MAL-2025-47320](https://insights.sbomify.com/MAL-2025-47320/): Malicious code in jumpgate (npm) (malicious package) - [MAL-2025-4732](https://insights.sbomify.com/MAL-2025-4732/): Malicious code in bsamba (npm) (malicious package) - [MAL-2025-47319](https://insights.sbomify.com/MAL-2025-47319/): Malicious code in jsonwebjstoken (npm) (malicious package) - [MAL-2025-47318](https://insights.sbomify.com/MAL-2025-47318/): Malicious code in json-rules-engine-simplified (npm) (malicious package) - [MAL-2025-47317](https://insights.sbomify.com/MAL-2025-47317/): Malicious code in html-to-base64-image (npm) (malicious package) - [MAL-2025-47316](https://insights.sbomify.com/MAL-2025-47316/): Malicious code in graphql-sequelize-teselagen (npm) (malicious package) - [MAL-2025-47315](https://insights.sbomify.com/MAL-2025-47315/): Malicious code in globalize-rpk (npm) (malicious package) - [MAL-2025-47314](https://insights.sbomify.com/MAL-2025-47314/): Malicious code in gatepass (npm) (malicious package) - [MAL-2025-47313](https://insights.sbomify.com/MAL-2025-47313/): Malicious code in eslint-config-teselagen (npm) (malicious package) - [MAL-2025-47312](https://insights.sbomify.com/MAL-2025-47312/): Malicious code in encounter-playground (npm) (malicious package) - [MAL-2025-47311](https://insights.sbomify.com/MAL-2025-47311/): Malicious code in ember-velcro (npm) (malicious package) - [MAL-2025-47310](https://insights.sbomify.com/MAL-2025-47310/): Malicious code in ember-url-hash-polyfill (npm) (malicious package) - [MAL-2025-4731](https://insights.sbomify.com/MAL-2025-4731/): Malicious code in beacon-labs-translations (npm) (malicious package) - [MAL-2025-47309](https://insights.sbomify.com/MAL-2025-47309/): Malicious code in ember-headless-table (npm) (malicious package) - [MAL-2025-47308](https://insights.sbomify.com/MAL-2025-47308/): Malicious code in ember-headless-form-yup (npm) (malicious package) - [MAL-2025-47307](https://insights.sbomify.com/MAL-2025-47307/): Malicious code in ember-headless-form (npm) (malicious package) - [MAL-2025-47306](https://insights.sbomify.com/MAL-2025-47306/): Malicious code in ember-browser-services (npm) (malicious package) - [MAL-2025-47305](https://insights.sbomify.com/MAL-2025-47305/): Malicious code in devextreme-angular-rpk (npm) (malicious package) - [MAL-2025-47304](https://insights.sbomify.com/MAL-2025-47304/): Malicious code in cucumber-js-browserstack (npm) (malicious package) - [MAL-2025-47303](https://insights.sbomify.com/MAL-2025-47303/): Malicious code in create-hest-app (npm) (malicious package) - [MAL-2025-47302](https://insights.sbomify.com/MAL-2025-47302/): Malicious code in cordova-voxeet (npm) (malicious package) - [MAL-2025-47301](https://insights.sbomify.com/MAL-2025-47301/): Malicious code in cordova-plugin-voxeet2 (npm) (malicious package) - [MAL-2025-47300](https://insights.sbomify.com/MAL-2025-47300/): Malicious code in config-cordova (npm) (malicious package) - [MAL-2025-4730](https://insights.sbomify.com/MAL-2025-4730/): Malicious code in apple-api-fake (npm) (malicious package) - [MAL-2025-473](https://insights.sbomify.com/MAL-2025-473/): Malicious code in godaddy-test (npm) (malicious package) - [MAL-2025-47299](https://insights.sbomify.com/MAL-2025-47299/): Malicious code in conditionsjs (npm) (malicious package) - [MAL-2025-47298](https://insights.sbomify.com/MAL-2025-47298/): Malicious code in browser-webdriver-downloader (npm) (malicious package) - [MAL-2025-47297](https://insights.sbomify.com/MAL-2025-47297/): Malicious code in alert-codestreamer (npm) (malicious package) - [MAL-2025-47296](https://insights.sbomify.com/MAL-2025-47296/): Malicious code in aktsii-gazproma-kupit-fizicheskomu-yxpir9hpn (npm) (malicious package) - [MAL-2025-47295](https://insights.sbomify.com/MAL-2025-47295/): Malicious code in airpilot (npm) (malicious package) - [MAL-2025-47294](https://insights.sbomify.com/MAL-2025-47294/): Malicious code in airchief (npm) (malicious package) - [MAL-2025-47293](https://insights.sbomify.com/MAL-2025-47293/): Malicious code in ace-colorpicker-rpk (npm) (malicious package) - [MAL-2025-47292](https://insights.sbomify.com/MAL-2025-47292/): Malicious code in @yoobic/yobi (npm) (malicious package) - [MAL-2025-47291](https://insights.sbomify.com/MAL-2025-47291/): Malicious code in @yoobic/design-system (npm) (malicious package) - [MAL-2025-47290](https://insights.sbomify.com/MAL-2025-47290/): Malicious code in @ui-ux-gang/devextreme-rpk (npm) (malicious package) - [MAL-2025-4729](https://insights.sbomify.com/MAL-2025-4729/): Malicious code in adobe-parcel-transformer-test-app (npm) (malicious package) - [MAL-2025-47289](https://insights.sbomify.com/MAL-2025-47289/): Malicious code in @ui-ux-gang/devextreme-angular-rpk (npm) (malicious package) - [MAL-2025-47288](https://insights.sbomify.com/MAL-2025-47288/): Malicious code in @tnf-dev/react (npm) (malicious package) - [MAL-2025-47287](https://insights.sbomify.com/MAL-2025-47287/): Malicious code in @tnf-dev/mui (npm) (malicious package) - [MAL-2025-47286](https://insights.sbomify.com/MAL-2025-47286/): Malicious code in @tnf-dev/js (npm) (malicious package) - [MAL-2025-47285](https://insights.sbomify.com/MAL-2025-47285/): Malicious code in @tnf-dev/core (npm) (malicious package) - [MAL-2025-47284](https://insights.sbomify.com/MAL-2025-47284/): Malicious code in @tnf-dev/api (npm) (malicious package) - [MAL-2025-47283](https://insights.sbomify.com/MAL-2025-47283/): Malicious code in @things-factory/auth-base (npm) (malicious package) - [MAL-2025-47282](https://insights.sbomify.com/MAL-2025-47282/): Malicious code in @things-factory/attachment-base (npm) (malicious package) - [MAL-2025-47281](https://insights.sbomify.com/MAL-2025-47281/): Malicious code in @thangved/callback-window (npm) (malicious package) - [MAL-2025-47280](https://insights.sbomify.com/MAL-2025-47280/): Malicious code in @teselagen/ui (npm) (malicious package) - [MAL-2025-4728](https://insights.sbomify.com/MAL-2025-4728/): Malicious code in actions-languageservice (npm) (malicious package) - [MAL-2025-47279](https://insights.sbomify.com/MAL-2025-47279/): Malicious code in @teselagen/sequence-utils (npm) (malicious package) - [MAL-2025-47278](https://insights.sbomify.com/MAL-2025-47278/): Malicious code in @teselagen/react-table (npm) (malicious package) - [MAL-2025-47277](https://insights.sbomify.com/MAL-2025-47277/): Malicious code in @teselagen/react-list (npm) (malicious package) - [MAL-2025-47276](https://insights.sbomify.com/MAL-2025-47276/): Malicious code in @teselagen/range-utils (npm) (malicious package) - [MAL-2025-47275](https://insights.sbomify.com/MAL-2025-47275/): Malicious code in @teselagen/ove (npm) (malicious package) - [MAL-2025-47274](https://insights.sbomify.com/MAL-2025-47274/): Malicious code in @teselagen/liquibase-tools (npm) (malicious package) - [MAL-2025-47273](https://insights.sbomify.com/MAL-2025-47273/): Malicious code in @teselagen/file-utils (npm) (malicious package) - [MAL-2025-47272](https://insights.sbomify.com/MAL-2025-47272/): Malicious code in @teselagen/bounce-loader (npm) (malicious package) - [MAL-2025-47271](https://insights.sbomify.com/MAL-2025-47271/): Malicious code in @teselagen/bio-parsers (npm) (malicious package) - [MAL-2025-47270](https://insights.sbomify.com/MAL-2025-47270/): Malicious code in @rxnt/providerdashboard-client (npm) (malicious package) - [MAL-2025-4727](https://insights.sbomify.com/MAL-2025-4727/): Malicious code in ach-spa-facephi (npm) (malicious package) - [MAL-2025-47269](https://insights.sbomify.com/MAL-2025-47269/): Malicious code in @rxnt/phr-client (npm) (malicious package) - [MAL-2025-47268](https://insights.sbomify.com/MAL-2025-47268/): Malicious code in @rxnt/patientencounter-client (npm) (malicious package) - [MAL-2025-47267](https://insights.sbomify.com/MAL-2025-47267/): Malicious code in @rxnt/mobile-ui-kit (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/588/