# Vulnerabilities published in 2025


- [MAL-2025-47266](https://insights.sbomify.com/MAL-2025-47266/): Malicious code in @rxnt/ambientiqstandaloneapi-client (npm) (malicious package)
- [MAL-2025-47265](https://insights.sbomify.com/MAL-2025-47265/): Malicious code in @pumpfun-sdk/metadata (npm) (malicious package)
- [MAL-2025-47264](https://insights.sbomify.com/MAL-2025-47264/): Malicious code in @pumpfun-sdk/bn-converter (npm) (malicious package)
- [MAL-2025-47263](https://insights.sbomify.com/MAL-2025-47263/): Malicious code in @operato/utils (npm) (malicious package)
- [MAL-2025-47262](https://insights.sbomify.com/MAL-2025-47262/): Malicious code in @operato/shell (npm) (malicious package)
- [MAL-2025-47261](https://insights.sbomify.com/MAL-2025-47261/): Malicious code in @operato/pull-to-refresh (npm) (malicious package)
- [MAL-2025-47260](https://insights.sbomify.com/MAL-2025-47260/): Malicious code in @operato/popup (npm) (malicious package)
- [MAL-2025-4726](https://insights.sbomify.com/MAL-2025-4726/): Malicious code in connectnodewebclient (npm) (malicious package)
- [MAL-2025-47259](https://insights.sbomify.com/MAL-2025-47259/): Malicious code in @operato/layout (npm) (malicious package)
- [MAL-2025-47258](https://insights.sbomify.com/MAL-2025-47258/): Malicious code in @operato/input (npm) (malicious package)
- [MAL-2025-47257](https://insights.sbomify.com/MAL-2025-47257/): Malicious code in @operato/i18n (npm) (malicious package)
- [MAL-2025-47256](https://insights.sbomify.com/MAL-2025-47256/): Malicious code in @operato/help (npm) (malicious package)
- [MAL-2025-47255](https://insights.sbomify.com/MAL-2025-47255/): Malicious code in @operato/graphql (npm) (malicious package)
- [MAL-2025-47254](https://insights.sbomify.com/MAL-2025-47254/): Malicious code in @operato/data-grist (npm) (malicious package)
- [MAL-2025-47253](https://insights.sbomify.com/MAL-2025-47253/): Malicious code in @operato/board (npm) (malicious package)
- [MAL-2025-47252](https://insights.sbomify.com/MAL-2025-47252/): Malicious code in @openzeppelin-compact/utils (npm) (malicious package)
- [MAL-2025-47251](https://insights.sbomify.com/MAL-2025-47251/): Malicious code in @openzeppelin-compact/fungible-token (npm) (malicious package)
- [MAL-2025-47250](https://insights.sbomify.com/MAL-2025-47250/): Malicious code in @openzeppelin-compact/compact (npm) (malicious package)
- [MAL-2025-4725](https://insights.sbomify.com/MAL-2025-4725/): Malicious code in frontegg-nuxt-example (npm) (malicious package)
- [MAL-2025-47249](https://insights.sbomify.com/MAL-2025-47249/): Malicious code in @nexe/logger (npm) (malicious package)
- [MAL-2025-47248](https://insights.sbomify.com/MAL-2025-47248/): Malicious code in @nexe/eslint-config (npm) (malicious package)
- [MAL-2025-47247](https://insights.sbomify.com/MAL-2025-47247/): Malicious code in @nexe/config-manager (npm) (malicious package)
- [MAL-2025-47246](https://insights.sbomify.com/MAL-2025-47246/): Malicious code in @morphodao/morpho-core-v1 (npm) (malicious package)
- [MAL-2025-47245](https://insights.sbomify.com/MAL-2025-47245/): Malicious code in @hestjs/validation (npm) (malicious package)
- [MAL-2025-47244](https://insights.sbomify.com/MAL-2025-47244/): Malicious code in @hestjs/scalar (npm) (malicious package)
- [MAL-2025-47243](https://insights.sbomify.com/MAL-2025-47243/): Malicious code in @hestjs/logger (npm) (malicious package)
- [MAL-2025-47242](https://insights.sbomify.com/MAL-2025-47242/): Malicious code in @hestjs/eslint-config (npm) (malicious package)
- [MAL-2025-47241](https://insights.sbomify.com/MAL-2025-47241/): Malicious code in @hestjs/demo (npm) (malicious package)
- [MAL-2025-47240](https://insights.sbomify.com/MAL-2025-47240/): Malicious code in @hestjs/cqrs (npm) (malicious package)
- [MAL-2025-4724](https://insights.sbomify.com/MAL-2025-4724/): Malicious code in next-pwa-template (npm) (malicious package)
- [MAL-2025-47239](https://insights.sbomify.com/MAL-2025-47239/): Malicious code in @hestjs/core (npm) (malicious package)
- [MAL-2025-47238](https://insights.sbomify.com/MAL-2025-47238/): Malicious code in @fastifyv4/fastifyv4 (npm) (malicious package)
- [MAL-2025-47237](https://insights.sbomify.com/MAL-2025-47237/): Malicious code in @crowdstrike/tailwind-toucan-base (npm) (malicious package)
- [MAL-2025-47236](https://insights.sbomify.com/MAL-2025-47236/): Malicious code in @crowdstrike/logscale-search (npm) (malicious package)
- [MAL-2025-47235](https://insights.sbomify.com/MAL-2025-47235/): Malicious code in @crowdstrike/glide-core (npm) (malicious package)
- [MAL-2025-47234](https://insights.sbomify.com/MAL-2025-47234/): Malicious code in @crowdstrike/foundry-js (npm) (malicious package)
- [MAL-2025-47233](https://insights.sbomify.com/MAL-2025-47233/): Malicious code in @crowdstrike/commitlint (npm) (malicious package)
- [MAL-2025-47232](https://insights.sbomify.com/MAL-2025-47232/): Malicious code in @cnx-ui/cnx-ui-core (npm) (malicious package)
- [MAL-2025-47231](https://insights.sbomify.com/MAL-2025-47231/): Malicious code in 1xbet-prilozhenie-android-guid-bu43so24l (npm) (malicious package)
- [MAL-2025-47230](https://insights.sbomify.com/MAL-2025-47230/): Malicious code in yoo-styles (npm) (malicious package)
- [MAL-2025-4723](https://insights.sbomify.com/MAL-2025-4723/): Malicious code in 0x000asdqwe (npm) (malicious package)
- [MAL-2025-47229](https://insights.sbomify.com/MAL-2025-47229/): Malicious code in tbssnch (npm) (malicious package)
- [MAL-2025-47228](https://insights.sbomify.com/MAL-2025-47228/): Malicious code in remark-preset-lint-crowdstrike (npm) (malicious package)
- [MAL-2025-47227](https://insights.sbomify.com/MAL-2025-47227/): Malicious code in eslint-config-crowdstrike-node (npm) (malicious package)
- [MAL-2025-47226](https://insights.sbomify.com/MAL-2025-47226/): Malicious code in eslint-config-crowdstrike (npm) (malicious package)
- [MAL-2025-47225](https://insights.sbomify.com/MAL-2025-47225/): Malicious code in @yoobic/jpeg-camera-es6 (npm) (malicious package)
- [MAL-2025-47224](https://insights.sbomify.com/MAL-2025-47224/): Malicious code in @things-factory/integration-marketplace (npm) (malicious package)
- [MAL-2025-47223](https://insights.sbomify.com/MAL-2025-47223/): Malicious code in @things-factory/integration-base (npm) (malicious package)
- [MAL-2025-47222](https://insights.sbomify.com/MAL-2025-47222/): Malicious code in @things-factory/env (npm) (malicious package)
- [MAL-2025-47221](https://insights.sbomify.com/MAL-2025-47221/): Malicious code in @things-factory/email-base (npm) (malicious package)
- [MAL-2025-47220](https://insights.sbomify.com/MAL-2025-47220/): Malicious code in @operato/styles (npm) (malicious package)
- [MAL-2025-4722](https://insights.sbomify.com/MAL-2025-4722/): Malicious code in base_sdk_const (npm) (malicious package)
- [MAL-2025-47219](https://insights.sbomify.com/MAL-2025-47219/): Malicious code in @operato/headroom (npm) (malicious package)
- [MAL-2025-47218](https://insights.sbomify.com/MAL-2025-47218/): Malicious code in @crowdstrike/logscale-parser-edit (npm) (malicious package)
- [MAL-2025-47217](https://insights.sbomify.com/MAL-2025-47217/): Malicious code in @crowdstrike/logscale-file-editor (npm) (malicious package)
- [MAL-2025-47216](https://insights.sbomify.com/MAL-2025-47216/): Malicious code in @crowdstrike/logscale-dashboard (npm) (malicious package)
- [MAL-2025-47215](https://insights.sbomify.com/MAL-2025-47215/): Malicious code in @crowdstrike/falcon-shoelace (npm) (malicious package)
- [MAL-2025-47214](https://insights.sbomify.com/MAL-2025-47214/): Malicious code in updox (npm) (malicious package)
- [MAL-2025-47213](https://insights.sbomify.com/MAL-2025-47213/): Malicious code in ts-gaussian (npm) (malicious package)
- [MAL-2025-47212](https://insights.sbomify.com/MAL-2025-47212/): Malicious code in texttweak-pro (npm) (malicious package)
- [MAL-2025-47211](https://insights.sbomify.com/MAL-2025-47211/): Malicious code in tailwind-configs-viewer (npm) (malicious package)
- [MAL-2025-47210](https://insights.sbomify.com/MAL-2025-47210/): Malicious code in swc-plugin-component-annotate (npm) (malicious package)
- [MAL-2025-4721](https://insights.sbomify.com/MAL-2025-4721/): Malicious code in payu-ui-v2 (npm) (malicious package)
- [MAL-2025-47209](https://insights.sbomify.com/MAL-2025-47209/): Malicious code in strutils-pro (npm) (malicious package)
- [MAL-2025-47208](https://insights.sbomify.com/MAL-2025-47208/): Malicious code in strmaster-pro (npm) (malicious package)
- [MAL-2025-47207](https://insights.sbomify.com/MAL-2025-47207/): Malicious code in stringmaster-pro (npm) (malicious package)
- [MAL-2025-47206](https://insights.sbomify.com/MAL-2025-47206/): Malicious code in string-setup-helper (npm) (malicious package)
- [MAL-2025-47205](https://insights.sbomify.com/MAL-2025-47205/): Malicious code in str-validator-utils (npm) (malicious package)
- [MAL-2025-47204](https://insights.sbomify.com/MAL-2025-47204/): Malicious code in setup-helper-module (npm) (malicious package)
- [MAL-2025-47203](https://insights.sbomify.com/MAL-2025-47203/): Malicious code in react-prop (npm) (malicious package)
- [MAL-2025-47202](https://insights.sbomify.com/MAL-2025-47202/): Malicious code in nri-kube-events (npm) (malicious package)
- [MAL-2025-47201](https://insights.sbomify.com/MAL-2025-47201/): Malicious code in notifications-layer (npm) (malicious package)
- [MAL-2025-47200](https://insights.sbomify.com/MAL-2025-47200/): Malicious code in ngx-trend (npm) (malicious package)
- [MAL-2025-4720](https://insights.sbomify.com/MAL-2025-4720/): Malicious code in sess-store (npm) (malicious package)
- [MAL-2025-472](https://insights.sbomify.com/MAL-2025-472/): Malicious code in godaddy-sync (npm) (malicious package)
- [MAL-2025-47199](https://insights.sbomify.com/MAL-2025-47199/): Malicious code in ngx-toastr (npm) (malicious package)
- [MAL-2025-47198](https://insights.sbomify.com/MAL-2025-47198/): Malicious code in ngx-color (npm) (malicious package)
- [MAL-2025-47197](https://insights.sbomify.com/MAL-2025-47197/): Malicious code in ngx-bootstrap (npm) (malicious package)
- [MAL-2025-47196](https://insights.sbomify.com/MAL-2025-47196/): Malicious code in ng2-file-upload (npm) (malicious package)
- [MAL-2025-47195](https://insights.sbomify.com/MAL-2025-47195/): Malicious code in newrelic-pixie (npm) (malicious package)
- [MAL-2025-47194](https://insights.sbomify.com/MAL-2025-47194/): Malicious code in newrelic-logging (npm) (malicious package)
- [MAL-2025-47193](https://insights.sbomify.com/MAL-2025-47193/): Malicious code in newrelic-infra-operator (npm) (malicious package)
- [MAL-2025-47192](https://insights.sbomify.com/MAL-2025-47192/): Malicious code in mysteryxyz228 (npm) (malicious package)
- [MAL-2025-47191](https://insights.sbomify.com/MAL-2025-47191/): Malicious code in mysql-dumpdiscord (npm) (malicious package)
- [MAL-2025-47190](https://insights.sbomify.com/MAL-2025-47190/): Malicious code in mse-eme-capabilities.js (npm) (malicious package)
- [MAL-2025-4719](https://insights.sbomify.com/MAL-2025-4719/): Malicious code in sess-mgmt (npm) (malicious package)
- [MAL-2025-47189](https://insights.sbomify.com/MAL-2025-47189/): Malicious code in middleware-loggers (npm) (malicious package)
- [MAL-2025-47188](https://insights.sbomify.com/MAL-2025-47188/): Malicious code in lovable-cookies-logger (npm) (malicious package)
- [MAL-2025-47187](https://insights.sbomify.com/MAL-2025-47187/): Malicious code in koa2-swagger-ui (npm) (malicious package)
- [MAL-2025-47186](https://insights.sbomify.com/MAL-2025-47186/): Malicious code in jsonstylizer (npm) (malicious package)
- [MAL-2025-47185](https://insights.sbomify.com/MAL-2025-47185/): Malicious code in jnscript (npm) (malicious package)
- [MAL-2025-47184](https://insights.sbomify.com/MAL-2025-47184/): Malicious code in internallib_v89 (npm) (malicious package)
- [MAL-2025-47183](https://insights.sbomify.com/MAL-2025-47183/): Malicious code in internallib_v819 (npm) (malicious package)
- [MAL-2025-47182](https://insights.sbomify.com/MAL-2025-47182/): Malicious code in internallib_v320 (npm) (malicious package)
- [MAL-2025-47181](https://insights.sbomify.com/MAL-2025-47181/): Malicious code in internallib_v102 (npm) (malicious package)
- [MAL-2025-47180](https://insights.sbomify.com/MAL-2025-47180/): Malicious code in http-req-logger (npm) (malicious package)
- [MAL-2025-4718](https://insights.sbomify.com/MAL-2025-4718/): Malicious code in pay-reconciler (npm) (malicious package)
- [MAL-2025-47179](https://insights.sbomify.com/MAL-2025-47179/): Malicious code in eth-node-utils (npm) (malicious package)
- [MAL-2025-47178](https://insights.sbomify.com/MAL-2025-47178/): Malicious code in eslints-logger (npm) (malicious package)
- [MAL-2025-47177](https://insights.sbomify.com/MAL-2025-47177/): Malicious code in err-notification (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/589/