# Vulnerabilities published in 2025


- [MAL-2025-47086](https://insights.sbomify.com/MAL-2025-47086/): Malicious code in service-config-endpoint-provider (npm) (malicious package)
- [MAL-2025-47085](https://insights.sbomify.com/MAL-2025-47085/): Malicious code in secured-ssh (npm) (malicious package)
- [MAL-2025-47084](https://insights.sbomify.com/MAL-2025-47084/): Malicious code in sdk-ethers (npm) (malicious package)
- [MAL-2025-47083](https://insights.sbomify.com/MAL-2025-47083/): Malicious code in react-dhtml (npm) (malicious package)
- [MAL-2025-47082](https://insights.sbomify.com/MAL-2025-47082/): Malicious code in purchasetesterexpo (npm) (malicious package)
- [MAL-2025-47081](https://insights.sbomify.com/MAL-2025-47081/): Malicious code in publicrepouixxe (npm) (malicious package)
- [MAL-2025-47080](https://insights.sbomify.com/MAL-2025-47080/): Malicious code in node-header-api (npm) (malicious package)
- [MAL-2025-4708](https://insights.sbomify.com/MAL-2025-4708/): Malicious code in www-cfg (npm) (malicious package)
- [MAL-2025-47079](https://insights.sbomify.com/MAL-2025-47079/): Malicious code in mrxfunc (npm) (malicious package)
- [MAL-2025-47078](https://insights.sbomify.com/MAL-2025-47078/): Malicious code in mongose-ci (npm) (malicious package)
- [MAL-2025-47077](https://insights.sbomify.com/MAL-2025-47077/): Malicious code in mockupnul (npm) (malicious package)
- [MAL-2025-47076](https://insights.sbomify.com/MAL-2025-47076/): Malicious code in mcp-lumin (npm) (malicious package)
- [MAL-2025-47075](https://insights.sbomify.com/MAL-2025-47075/): Malicious code in lovable-ci (npm) (malicious package)
- [MAL-2025-47074](https://insights.sbomify.com/MAL-2025-47074/): Malicious code in levidtcppe-levi-icons (npm) (malicious package)
- [MAL-2025-47073](https://insights.sbomify.com/MAL-2025-47073/): Malicious code in jsonjoy.com (npm) (malicious package)
- [MAL-2025-47072](https://insights.sbomify.com/MAL-2025-47072/): Malicious code in issueprocessor (npm) (malicious package)
- [MAL-2025-47071](https://insights.sbomify.com/MAL-2025-47071/): Malicious code in internallib_v773 (npm) (malicious package)
- [MAL-2025-47070](https://insights.sbomify.com/MAL-2025-47070/): Malicious code in hubmabels (npm) (malicious package)
- [MAL-2025-4707](https://insights.sbomify.com/MAL-2025-4707/): Malicious code in virtru-private (npm) (malicious package)
- [MAL-2025-47069](https://insights.sbomify.com/MAL-2025-47069/): Malicious code in hrpqwq123 (npm) (malicious package)
- [MAL-2025-47068](https://insights.sbomify.com/MAL-2025-47068/): Malicious code in hrpqwq (npm) (malicious package)
- [MAL-2025-47067](https://insights.sbomify.com/MAL-2025-47067/): Malicious code in hrpqvq123 (npm) (malicious package)
- [MAL-2025-47066](https://insights.sbomify.com/MAL-2025-47066/): Malicious code in hrpqvq (npm) (malicious package)
- [MAL-2025-47065](https://insights.sbomify.com/MAL-2025-47065/): Malicious code in hrpq1wq123 (npm) (malicious package)
- [MAL-2025-47064](https://insights.sbomify.com/MAL-2025-47064/): Malicious code in hrphelpall (npm) (malicious package)
- [MAL-2025-47063](https://insights.sbomify.com/MAL-2025-47063/): Malicious code in hrpdesign (npm) (malicious package)
- [MAL-2025-47062](https://insights.sbomify.com/MAL-2025-47062/): Malicious code in hr1pq1wq123 (npm) (malicious package)
- [MAL-2025-47061](https://insights.sbomify.com/MAL-2025-47061/): Malicious code in gram-utilz (npm) (malicious package)
- [MAL-2025-47060](https://insights.sbomify.com/MAL-2025-47060/): Malicious code in frontend-eng-interview (npm) (malicious package)
- [MAL-2025-4706](https://insights.sbomify.com/MAL-2025-4706/): Malicious code in virtru-design-params (npm) (malicious package)
- [MAL-2025-47059](https://insights.sbomify.com/MAL-2025-47059/): Malicious code in flashbot-sdk-eth (npm) (malicious package)
- [MAL-2025-47058](https://insights.sbomify.com/MAL-2025-47058/): Malicious code in epxressoo (npm) (malicious package)
- [MAL-2025-47057](https://insights.sbomify.com/MAL-2025-47057/): Malicious code in data-version-service (npm) (malicious package)
- [MAL-2025-47056](https://insights.sbomify.com/MAL-2025-47056/): Malicious code in crew-toolbox (npm) (malicious package)
- [MAL-2025-47055](https://insights.sbomify.com/MAL-2025-47055/): Malicious code in cornerstone_ui_core (npm) (malicious package)
- [MAL-2025-47054](https://insights.sbomify.com/MAL-2025-47054/): Malicious code in car-configuration (npm) (malicious package)
- [MAL-2025-47053](https://insights.sbomify.com/MAL-2025-47053/): Malicious code in bundleliep (npm) (malicious package)
- [MAL-2025-47052](https://insights.sbomify.com/MAL-2025-47052/): Malicious code in audi-footnote-reference-service (npm) (malicious package)
- [MAL-2025-47051](https://insights.sbomify.com/MAL-2025-47051/): Malicious code in @team-event/v2 (npm) (malicious package)
- [MAL-2025-47050](https://insights.sbomify.com/MAL-2025-47050/): Malicious code in @team-event/team-event-amplitude-events (npm) (malicious package)
- [MAL-2025-4705](https://insights.sbomify.com/MAL-2025-4705/): Malicious code in launch-darkly-provider (npm) (malicious package)
- [MAL-2025-47049](https://insights.sbomify.com/MAL-2025-47049/): Malicious code in @team-event/services (npm) (malicious package)
- [MAL-2025-47048](https://insights.sbomify.com/MAL-2025-47048/): Malicious code in @team-event/models (npm) (malicious package)
- [MAL-2025-47047](https://insights.sbomify.com/MAL-2025-47047/): Malicious code in @self-sell/store (npm) (malicious package)
- [MAL-2025-47046](https://insights.sbomify.com/MAL-2025-47046/): Malicious code in @self-sell/self-sell-amplitude-events (npm) (malicious package)
- [MAL-2025-47045](https://insights.sbomify.com/MAL-2025-47045/): Malicious code in @self-sell/guards (npm) (malicious package)
- [MAL-2025-47044](https://insights.sbomify.com/MAL-2025-47044/): Malicious code in @self-sell/components (npm) (malicious package)
- [MAL-2025-47043](https://insights.sbomify.com/MAL-2025-47043/): Malicious code in @oneaudi/unified-web-common (npm) (malicious package)
- [MAL-2025-47042](https://insights.sbomify.com/MAL-2025-47042/): Malicious code in @oneaudi/current-carline-service (npm) (malicious package)
- [MAL-2025-47041](https://insights.sbomify.com/MAL-2025-47041/): Malicious code in @navancorp/ta-fe-components (npm) (malicious package)
- [MAL-2025-47040](https://insights.sbomify.com/MAL-2025-47040/): Malicious code in @liquid-web/utils (npm) (malicious package)
- [MAL-2025-4704](https://insights.sbomify.com/MAL-2025-4704/): Malicious code in stake-config (npm) (malicious package)
- [MAL-2025-47039](https://insights.sbomify.com/MAL-2025-47039/): Malicious code in @liquid-web/services (npm) (malicious package)
- [MAL-2025-47038](https://insights.sbomify.com/MAL-2025-47038/): Malicious code in @liquid-web/models (npm) (malicious package)
- [MAL-2025-47037](https://insights.sbomify.com/MAL-2025-47037/): Malicious code in @liquid-web/mileage (npm) (malicious package)
- [MAL-2025-47036](https://insights.sbomify.com/MAL-2025-47036/): Malicious code in @liquid-web/interceptors (npm) (malicious package)
- [MAL-2025-47035](https://insights.sbomify.com/MAL-2025-47035/): Malicious code in @liquid-web/guards (npm) (malicious package)
- [MAL-2025-47034](https://insights.sbomify.com/MAL-2025-47034/): Malicious code in @liquid-web/external-cards (npm) (malicious package)
- [MAL-2025-47033](https://insights.sbomify.com/MAL-2025-47033/): Malicious code in @liquid-web/common (npm) (malicious package)
- [MAL-2025-47032](https://insights.sbomify.com/MAL-2025-47032/): Malicious code in @liquid-web/app-services (npm) (malicious package)
- [MAL-2025-47031](https://insights.sbomify.com/MAL-2025-47031/): Malicious code in @jsonjoy-com/base64 (npm) (malicious package)
- [MAL-2025-47030](https://insights.sbomify.com/MAL-2025-47030/): Malicious code in @google_cloud/projectify (npm) (malicious package)
- [MAL-2025-4703](https://insights.sbomify.com/MAL-2025-4703/): Malicious code in sa-sdk-v5 (npm) (malicious package)
- [MAL-2025-47029](https://insights.sbomify.com/MAL-2025-47029/): Malicious code in @google_cloud/precise-date (npm) (malicious package)
- [MAL-2025-47028](https://insights.sbomify.com/MAL-2025-47028/): Malicious code in @flashbotts/ethers-provider-bundle (npm) (malicious package)
- [MAL-2025-47027](https://insights.sbomify.com/MAL-2025-47027/): Malicious code in prebid-universal-creative (npm) (malicious package)
- [MAL-2025-47026](https://insights.sbomify.com/MAL-2025-47026/): Malicious code in prebid (npm) (malicious package)
- [MAL-2025-47025](https://insights.sbomify.com/MAL-2025-47025/): Malicious code in @coveops/abi (npm) (malicious package)
- [MAL-2025-47024](https://insights.sbomify.com/MAL-2025-47024/): Malicious code in xml-request-parser (npm) (malicious package)
- [MAL-2025-47023](https://insights.sbomify.com/MAL-2025-47023/): Malicious code in x-session-parser (npm) (malicious package)
- [MAL-2025-47022](https://insights.sbomify.com/MAL-2025-47022/): Malicious code in typed-fp (npm) (malicious package)
- [MAL-2025-47021](https://insights.sbomify.com/MAL-2025-47021/): Malicious code in rushstack-lockfile-explorer (npm) (malicious package)
- [MAL-2025-47020](https://insights.sbomify.com/MAL-2025-47020/): Malicious code in netflix-dea (npm) (malicious package)
- [MAL-2025-4702](https://insights.sbomify.com/MAL-2025-4702/): Malicious code in lpgoffers-api-contract (npm) (malicious package)
- [MAL-2025-47019](https://insights.sbomify.com/MAL-2025-47019/): Malicious code in jsexports-utils (npm) (malicious package)
- [MAL-2025-47018](https://insights.sbomify.com/MAL-2025-47018/): Malicious code in internal-test-helpers (npm) (malicious package)
- [MAL-2025-47017](https://insights.sbomify.com/MAL-2025-47017/): Malicious code in image_classification (npm) (malicious package)
- [MAL-2025-47016](https://insights.sbomify.com/MAL-2025-47016/): Malicious code in filigren-icon (npm) (malicious package)
- [MAL-2025-47015](https://insights.sbomify.com/MAL-2025-47015/): Malicious code in checking-ips (npm) (malicious package)
- [MAL-2025-47014](https://insights.sbomify.com/MAL-2025-47014/): Malicious code in braintree-sdk (npm) (malicious package)
- [MAL-2025-47013](https://insights.sbomify.com/MAL-2025-47013/): Malicious code in arjvg (npm) (malicious package)
- [MAL-2025-47012](https://insights.sbomify.com/MAL-2025-47012/): Malicious code in airbnb-with-tracking (npm) (malicious package)
- [MAL-2025-47011](https://insights.sbomify.com/MAL-2025-47011/): Malicious code in airbnb-slider (npm) (malicious package)
- [MAL-2025-47010](https://insights.sbomify.com/MAL-2025-47010/): Malicious code in @pa-client/power-code-sdk (npm) (malicious package)
- [MAL-2025-4701](https://insights.sbomify.com/MAL-2025-4701/): Malicious code in bu_account_js_sdk (npm) (malicious package)
- [MAL-2025-47009](https://insights.sbomify.com/MAL-2025-47009/): Malicious code in @magda/semantic-indexer-sdk (npm) (malicious package)
- [MAL-2025-47008](https://insights.sbomify.com/MAL-2025-47008/): Malicious code in @js-to-lua/lua-types (npm) (malicious package)
- [MAL-2025-47007](https://insights.sbomify.com/MAL-2025-47007/): Malicious code in @js-to-lua/lua-conversion-utils (npm) (malicious package)
- [MAL-2025-47006](https://insights.sbomify.com/MAL-2025-47006/): Malicious code in @js-to-lua/handler-utils (npm) (malicious package)
- [MAL-2025-47005](https://insights.sbomify.com/MAL-2025-47005/): Malicious code in @js-to-lua/fast-follow-commands (npm) (malicious package)
- [MAL-2025-47004](https://insights.sbomify.com/MAL-2025-47004/): Malicious code in @js-to-lua/convert (npm) (malicious package)
- [MAL-2025-47003](https://insights.sbomify.com/MAL-2025-47003/): Malicious code in @i22/scroll-animation (npm) (malicious package)
- [MAL-2025-47002](https://insights.sbomify.com/MAL-2025-47002/): Malicious code in @i22/rocket (npm) (malicious package)
- [MAL-2025-47001](https://insights.sbomify.com/MAL-2025-47001/): Malicious code in @exarad/verfuegbarkeitspruefung-vue2 (npm) (malicious package)
- [MAL-2025-47000](https://insights.sbomify.com/MAL-2025-47000/): Malicious code in @dtpk-cc/components (npm) (malicious package)
- [MAL-2025-470](https://insights.sbomify.com/MAL-2025-470/): Malicious code in godaddy-sdk (npm) (malicious package)
- [MAL-2025-47](https://insights.sbomify.com/MAL-2025-47/): Malicious code in walletcore-gen (npm) (malicious package)
- [MAL-2025-46999](https://insights.sbomify.com/MAL-2025-46999/): Malicious code in @amazon-bedrock-agents-healthcare-lifesciences/docs (npm) (malicious package)
- [MAL-2025-46998](https://insights.sbomify.com/MAL-2025-46998/): Malicious code in tdm-shared-core-library (npm) (malicious package)
- [MAL-2025-46997](https://insights.sbomify.com/MAL-2025-46997/): Malicious code in codex-monorepo (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/591/