# Vulnerabilities published in 2025 - [MAL-2025-47176](https://insights.sbomify.com/MAL-2025-47176/): Malicious code in chunk-logger (npm) (malicious package) - [MAL-2025-47175](https://insights.sbomify.com/MAL-2025-47175/): Malicious code in basic-validator-pro (npm) (malicious package) - [MAL-2025-47174](https://insights.sbomify.com/MAL-2025-47174/): Malicious code in basic-pump-sdk (npm) (malicious package) - [MAL-2025-47173](https://insights.sbomify.com/MAL-2025-47173/): Malicious code in autopush-manager (npm) (malicious package) - [MAL-2025-47172](https://insights.sbomify.com/MAL-2025-47172/): Malicious code in angulartics2 (npm) (malicious package) - [MAL-2025-47171](https://insights.sbomify.com/MAL-2025-47171/): Malicious code in @triniwiz/nativescript-pdf (npm) (malicious package) - [MAL-2025-47170](https://insights.sbomify.com/MAL-2025-47170/): Malicious code in @nstudio/xplat-utils (npm) (malicious package) - [MAL-2025-4717](https://insights.sbomify.com/MAL-2025-4717/): Malicious code in pay-internal (npm) (malicious package) - [MAL-2025-47169](https://insights.sbomify.com/MAL-2025-47169/): Malicious code in @nstudio/xplat (npm) (malicious package) - [MAL-2025-47168](https://insights.sbomify.com/MAL-2025-47168/): Malicious code in @nstudio/web-angular (npm) (malicious package) - [MAL-2025-47167](https://insights.sbomify.com/MAL-2025-47167/): Malicious code in @nstudio/web (npm) (malicious package) - [MAL-2025-47166](https://insights.sbomify.com/MAL-2025-47166/): Malicious code in @nstudio/ui-collectionview (npm) (malicious package) - [MAL-2025-47165](https://insights.sbomify.com/MAL-2025-47165/): Malicious code in @nstudio/nativescript-loading-indicator (npm) (malicious package) - [MAL-2025-47164](https://insights.sbomify.com/MAL-2025-47164/): Malicious code in @nstudio/nativescript-checkbox (npm) (malicious package) - [MAL-2025-47163](https://insights.sbomify.com/MAL-2025-47163/): Malicious code in @nstudio/focus (npm) (malicious package) - [MAL-2025-47162](https://insights.sbomify.com/MAL-2025-47162/): Malicious code in @nstudio/angular (npm) (malicious package) - [MAL-2025-47161](https://insights.sbomify.com/MAL-2025-47161/): Malicious code in @nativescript-community/ui-pulltorefresh (npm) (malicious package) - [MAL-2025-47160](https://insights.sbomify.com/MAL-2025-47160/): Malicious code in @nativescript-community/ui-pager (npm) (malicious package) - [MAL-2025-4716](https://insights.sbomify.com/MAL-2025-4716/): Malicious code in pay-gateway (npm) (malicious package) - [MAL-2025-47159](https://insights.sbomify.com/MAL-2025-47159/): Malicious code in @nativescript-community/ui-material-tabs (npm) (malicious package) - [MAL-2025-47158](https://insights.sbomify.com/MAL-2025-47158/): Malicious code in @nativescript-community/ui-material-core-tabs (npm) (malicious package) - [MAL-2025-47157](https://insights.sbomify.com/MAL-2025-47157/): Malicious code in @nativescript-community/ui-material-core (npm) (malicious package) - [MAL-2025-47156](https://insights.sbomify.com/MAL-2025-47156/): Malicious code in @nativescript-community/ui-material-bottomsheet (npm) (malicious package) - [MAL-2025-47155](https://insights.sbomify.com/MAL-2025-47155/): Malicious code in @nativescript-community/ui-image (npm) (malicious package) - [MAL-2025-47154](https://insights.sbomify.com/MAL-2025-47154/): Malicious code in @nativescript-community/ui-drawer (npm) (malicious package) - [MAL-2025-47153](https://insights.sbomify.com/MAL-2025-47153/): Malicious code in @nativescript-community/ui-collectionview (npm) (malicious package) - [MAL-2025-47152](https://insights.sbomify.com/MAL-2025-47152/): Malicious code in @nativescript-community/typeorm (npm) (malicious package) - [MAL-2025-47151](https://insights.sbomify.com/MAL-2025-47151/): Malicious code in @nativescript-community/text (npm) (malicious package) - [MAL-2025-47150](https://insights.sbomify.com/MAL-2025-47150/): Malicious code in @nativescript-community/sqlite (npm) (malicious package) - [MAL-2025-4715](https://insights.sbomify.com/MAL-2025-4715/): Malicious code in fin-logger (npm) (malicious package) - [MAL-2025-47149](https://insights.sbomify.com/MAL-2025-47149/): Malicious code in @nativescript-community/sentry (npm) (malicious package) - [MAL-2025-47148](https://insights.sbomify.com/MAL-2025-47148/): Malicious code in @nativescript-community/perms (npm) (malicious package) - [MAL-2025-47147](https://insights.sbomify.com/MAL-2025-47147/): Malicious code in @nativescript-community/gesturehandler (npm) (malicious package) - [MAL-2025-47146](https://insights.sbomify.com/MAL-2025-47146/): Malicious code in @nativescript-community/arraybuffers (npm) (malicious package) - [MAL-2025-47145](https://insights.sbomify.com/MAL-2025-47145/): Malicious code in @huobi-lib/vulcan-js-sdk (npm) (malicious package) - [MAL-2025-47144](https://insights.sbomify.com/MAL-2025-47144/): Malicious code in @ctrl/ts-base32 (npm) (malicious package) - [MAL-2025-47143](https://insights.sbomify.com/MAL-2025-47143/): Malicious code in @ctrl/transmission (npm) (malicious package) - [MAL-2025-47142](https://insights.sbomify.com/MAL-2025-47142/): Malicious code in @ctrl/torrent-file (npm) (malicious package) - [MAL-2025-47141](https://insights.sbomify.com/MAL-2025-47141/): Malicious code in @ctrl/tinycolor (npm) (malicious package) - [MAL-2025-47140](https://insights.sbomify.com/MAL-2025-47140/): Malicious code in @ctrl/shared-torrent (npm) (malicious package) - [MAL-2025-4714](https://insights.sbomify.com/MAL-2025-4714/): Malicious code in fin-core (npm) (malicious package) - [MAL-2025-47139](https://insights.sbomify.com/MAL-2025-47139/): Malicious code in @ctrl/react-adsense (npm) (malicious package) - [MAL-2025-47138](https://insights.sbomify.com/MAL-2025-47138/): Malicious code in @ctrl/qbittorrent (npm) (malicious package) - [MAL-2025-47137](https://insights.sbomify.com/MAL-2025-47137/): Malicious code in @ctrl/ngx-rightclick (npm) (malicious package) - [MAL-2025-47136](https://insights.sbomify.com/MAL-2025-47136/): Malicious code in @ctrl/ngx-emoji-mart (npm) (malicious package) - [MAL-2025-47135](https://insights.sbomify.com/MAL-2025-47135/): Malicious code in @ctrl/ngx-csv (npm) (malicious package) - [MAL-2025-47134](https://insights.sbomify.com/MAL-2025-47134/): Malicious code in @ctrl/ngx-codemirror (npm) (malicious package) - [MAL-2025-47133](https://insights.sbomify.com/MAL-2025-47133/): Malicious code in @ctrl/magnet-link (npm) (malicious package) - [MAL-2025-47132](https://insights.sbomify.com/MAL-2025-47132/): Malicious code in @ctrl/golang-template (npm) (malicious package) - [MAL-2025-47131](https://insights.sbomify.com/MAL-2025-47131/): Malicious code in @ctrl/deluge (npm) (malicious package) - [MAL-2025-47130](https://insights.sbomify.com/MAL-2025-47130/): Malicious code in @account-portal/ui-toolkit-react (npm) (malicious package) - [MAL-2025-4713](https://insights.sbomify.com/MAL-2025-4713/): Malicious code in fin-connector (npm) (malicious package) - [MAL-2025-47129](https://insights.sbomify.com/MAL-2025-47129/): Malicious code in kreme-crypto (npm) (malicious package) - [MAL-2025-47128](https://insights.sbomify.com/MAL-2025-47128/): Malicious code in vui-vform (npm) (malicious package) - [MAL-2025-47127](https://insights.sbomify.com/MAL-2025-47127/): Malicious code in vessel (npm) (malicious package) - [MAL-2025-47126](https://insights.sbomify.com/MAL-2025-47126/): Malicious code in simplemoduleonetest (npm) (malicious package) - [MAL-2025-47125](https://insights.sbomify.com/MAL-2025-47125/): Malicious code in ome-api (npm) (malicious package) - [MAL-2025-47124](https://insights.sbomify.com/MAL-2025-47124/): Malicious code in moduleonetest (npm) (malicious package) - [MAL-2025-47123](https://insights.sbomify.com/MAL-2025-47123/): Malicious code in ifood-consumer-help-v2 (npm) (malicious package) - [MAL-2025-47122](https://insights.sbomify.com/MAL-2025-47122/): Malicious code in hrprce123 (npm) (malicious package) - [MAL-2025-47121](https://insights.sbomify.com/MAL-2025-47121/): Malicious code in hrprce (npm) (malicious package) - [MAL-2025-47120](https://insights.sbomify.com/MAL-2025-47120/): Malicious code in hrpqvq123111 (npm) (malicious package) - [MAL-2025-4712](https://insights.sbomify.com/MAL-2025-4712/): Malicious code in bank-utils (npm) (malicious package) - [MAL-2025-47119](https://insights.sbomify.com/MAL-2025-47119/): Malicious code in hrp9873 (npm) (malicious package) - [MAL-2025-47118](https://insights.sbomify.com/MAL-2025-47118/): Malicious code in hrp987 (npm) (malicious package) - [MAL-2025-47117](https://insights.sbomify.com/MAL-2025-47117/): Malicious code in falcon-login (npm) (malicious package) - [MAL-2025-47116](https://insights.sbomify.com/MAL-2025-47116/): Malicious code in dev.voltstro.nativearrayspanextensions (npm) (malicious package) - [MAL-2025-47115](https://insights.sbomify.com/MAL-2025-47115/): Malicious code in brfsddd (npm) (malicious package) - [MAL-2025-47114](https://insights.sbomify.com/MAL-2025-47114/): Malicious code in actor-storage (npm) (malicious package) - [MAL-2025-47113](https://insights.sbomify.com/MAL-2025-47113/): Malicious code in @tr61/test-pkg (npm) (malicious package) - [MAL-2025-47112](https://insights.sbomify.com/MAL-2025-47112/): Malicious code in @tr61/core-pkg (npm) (malicious package) - [MAL-2025-47111](https://insights.sbomify.com/MAL-2025-47111/): Malicious code in @corp-ais/mychannel-shared-libs (npm) (malicious package) - [MAL-2025-47110](https://insights.sbomify.com/MAL-2025-47110/): Malicious code in @aledade-org/dsi (npm) (malicious package) - [MAL-2025-4711](https://insights.sbomify.com/MAL-2025-4711/): Malicious code in bank-auth (npm) (malicious package) - [MAL-2025-47109](https://insights.sbomify.com/MAL-2025-47109/): Malicious code in copperflame (npm) (malicious package) - [MAL-2025-47108](https://insights.sbomify.com/MAL-2025-47108/): Malicious code in vusd-lib (npm) (malicious package) - [MAL-2025-47107](https://insights.sbomify.com/MAL-2025-47107/): Malicious code in vite-plugin-uni-i18n (npm) (malicious package) - [MAL-2025-47106](https://insights.sbomify.com/MAL-2025-47106/): Malicious code in vite-plugin-morgan (npm) (malicious package) - [MAL-2025-47105](https://insights.sbomify.com/MAL-2025-47105/): Malicious code in threads5 (npm) (malicious package) - [MAL-2025-47104](https://insights.sbomify.com/MAL-2025-47104/): Malicious code in tailwind-classname-overrides (npm) (malicious package) - [MAL-2025-47103](https://insights.sbomify.com/MAL-2025-47103/): Malicious code in snapshot-vks (npm) (malicious package) - [MAL-2025-47102](https://insights.sbomify.com/MAL-2025-47102/): Malicious code in react-dropzone-log (npm) (malicious package) - [MAL-2025-47101](https://insights.sbomify.com/MAL-2025-47101/): Malicious code in quick-navigation-interface (npm) (malicious package) - [MAL-2025-47100](https://insights.sbomify.com/MAL-2025-47100/): Malicious code in polkadot-apps (npm) (malicious package) - [MAL-2025-4710](https://insights.sbomify.com/MAL-2025-4710/): Malicious code in kubernetes.io (npm) (malicious package) - [MAL-2025-471](https://insights.sbomify.com/MAL-2025-471/): Malicious code in godaddy-service (npm) (malicious package) - [MAL-2025-47099](https://insights.sbomify.com/MAL-2025-47099/): Malicious code in moduletestsimple5 (npm) (malicious package) - [MAL-2025-47098](https://insights.sbomify.com/MAL-2025-47098/): Malicious code in mcp-chat-client (npm) (malicious package) - [MAL-2025-47097](https://insights.sbomify.com/MAL-2025-47097/): Malicious code in json-rules-engine-examples (npm) (malicious package) - [MAL-2025-47096](https://insights.sbomify.com/MAL-2025-47096/): Malicious code in graphchain (npm) (malicious package) - [MAL-2025-47095](https://insights.sbomify.com/MAL-2025-47095/): Malicious code in func-analysis (npm) (malicious package) - [MAL-2025-47094](https://insights.sbomify.com/MAL-2025-47094/): Malicious code in eth-exec-txs (npm) (malicious package) - [MAL-2025-47093](https://insights.sbomify.com/MAL-2025-47093/): Malicious code in @s21games/game-engine (npm) (malicious package) - [MAL-2025-47092](https://insights.sbomify.com/MAL-2025-47092/): Malicious code in @cryptochords/shared (npm) (malicious package) - [MAL-2025-47091](https://insights.sbomify.com/MAL-2025-47091/): Malicious code in tripactions (npm) (malicious package) - [MAL-2025-47090](https://insights.sbomify.com/MAL-2025-47090/): Malicious code in tianqishengqishi (npm) (malicious package) - [MAL-2025-4709](https://insights.sbomify.com/MAL-2025-4709/): Malicious code in arc-offsec-custom-library6 (npm) (malicious package) - [MAL-2025-47089](https://insights.sbomify.com/MAL-2025-47089/): Malicious code in sos-models (npm) (malicious package) - [MAL-2025-47088](https://insights.sbomify.com/MAL-2025-47088/): Malicious code in sos-angular (npm) (malicious package) - [MAL-2025-47087](https://insights.sbomify.com/MAL-2025-47087/): Malicious code in showroom-navigation (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/590/