# Vulnerabilities published in 2025 - [MAL-2025-46723](https://insights.sbomify.com/MAL-2025-46723/): Malicious code in xinli-qiangda-zhilu (npm) (malicious package) - [MAL-2025-46722](https://insights.sbomify.com/MAL-2025-46722/): Malicious code in xingzuowuyu-tuxiang (npm) (malicious package) - [MAL-2025-46721](https://insights.sbomify.com/MAL-2025-46721/): Malicious code in xingzuo-jueding-woaini (npm) (malicious package) - [MAL-2025-46720](https://insights.sbomify.com/MAL-2025-46720/): Malicious code in xingyun-zhanxing-quanshu (npm) (malicious package) - [MAL-2025-4672](https://insights.sbomify.com/MAL-2025-4672/): Malicious code in @sasmeee/demoupload2 (npm) (malicious package) - [MAL-2025-46719](https://insights.sbomify.com/MAL-2025-46719/): Malicious code in xingxing-kecheng-1to3 (npm) (malicious package) - [MAL-2025-46718](https://insights.sbomify.com/MAL-2025-46718/): Malicious code in xingshang-nvrenpian (npm) (malicious package) - [MAL-2025-46717](https://insights.sbomify.com/MAL-2025-46717/): Malicious code in xingshang-nanrenlian (npm) (malicious package) - [MAL-2025-46716](https://insights.sbomify.com/MAL-2025-46716/): Malicious code in xingnan-lianchengshu (npm) (malicious package) - [MAL-2025-46715](https://insights.sbomify.com/MAL-2025-46715/): Malicious code in xingmingxue-rumen (npm) (malicious package) - [MAL-2025-46714](https://insights.sbomify.com/MAL-2025-46714/): Malicious code in xinghai-tanmi (npm) (malicious package) - [MAL-2025-46713](https://insights.sbomify.com/MAL-2025-46713/): Malicious code in xingdu-wuyu (npm) (malicious package) - [MAL-2025-46712](https://insights.sbomify.com/MAL-2025-46712/): Malicious code in xinde-lianjinshu (npm) (malicious package) - [MAL-2025-46711](https://insights.sbomify.com/MAL-2025-46711/): Malicious code in xincheng-shixiang (npm) (malicious package) - [MAL-2025-46710](https://insights.sbomify.com/MAL-2025-46710/): Malicious code in xinban-shier-xingzuo-doushi-pianrende (npm) (malicious package) - [MAL-2025-4671](https://insights.sbomify.com/MAL-2025-4671/): Malicious code in @fronteg/react (npm) (malicious package) - [MAL-2025-46709](https://insights.sbomify.com/MAL-2025-46709/): Malicious code in xinaode-zuigao-jingjie (npm) (malicious package) - [MAL-2025-46708](https://insights.sbomify.com/MAL-2025-46708/): Malicious code in xila-shenhua-zhanxing-taluo (npm) (malicious package) - [MAL-2025-46707](https://insights.sbomify.com/MAL-2025-46707/): Malicious code in xifang-shenmixue-zhijin (npm) (malicious package) - [MAL-2025-46706](https://insights.sbomify.com/MAL-2025-46706/): Malicious code in xiegang-xingqiu-erlingyijiulingqi (npm) (malicious package) - [MAL-2025-46705](https://insights.sbomify.com/MAL-2025-46705/): Malicious code in xiayizhan-shenzhen-erlingyijiulingjiu (npm) (malicious package) - [MAL-2025-46704](https://insights.sbomify.com/MAL-2025-46704/): Malicious code in xiaomasong-shangye-guancha-erlingyijiulingjiu (npm) (malicious package) - [MAL-2025-46703](https://insights.sbomify.com/MAL-2025-46703/): Malicious code in xiaojie-biannvshen (npm) (malicious package) - [MAL-2025-46702](https://insights.sbomify.com/MAL-2025-46702/): Malicious code in xiaodao-xiaoxi-erlingyijiulingqi (npm) (malicious package) - [MAL-2025-46701](https://insights.sbomify.com/MAL-2025-46701/): Malicious code in xianhua-yingyu-erlingyiwuyiyi-erlingyiliulinger (npm) (malicious package) - [MAL-2025-46700](https://insights.sbomify.com/MAL-2025-46700/): Malicious code in xianhua-yingyu-erlingyiwulingyi-erlingyiwulingsan (npm) (malicious package) - [MAL-2025-4670](https://insights.sbomify.com/MAL-2025-4670/): Malicious code in world-id-lens-dapp (npm) (malicious package) - [MAL-2025-467](https://insights.sbomify.com/MAL-2025-467/): Malicious code in godaddy-jira (npm) (malicious package) - [MAL-2025-46699](https://insights.sbomify.com/MAL-2025-46699/): Malicious code in xianhua-yingyu-erlingyiwulingqi-erlingyiwuyiling (npm) (malicious package) - [MAL-2025-46698](https://insights.sbomify.com/MAL-2025-46698/): Malicious code in xianhua-yingyu-erlingyisiyiling-erlingyisiyier (npm) (malicious package) - [MAL-2025-46697](https://insights.sbomify.com/MAL-2025-46697/): Malicious code in xianhua-yingyu-erlingyisilingqi-erlingyisilingjiu (npm) (malicious package) - [MAL-2025-46696](https://insights.sbomify.com/MAL-2025-46696/): Malicious code in xianhua-yingyu-erlingyiqilingyi-erlingyiqilingsi (npm) (malicious package) - [MAL-2025-46695](https://insights.sbomify.com/MAL-2025-46695/): Malicious code in xianhua-yingyu-erlingyiqilingwu-erlingyiqilingqi (npm) (malicious package) - [MAL-2025-46694](https://insights.sbomify.com/MAL-2025-46694/): Malicious code in xianhua-yingyu-erlingyiqilingba-erlingyiqiyier (npm) (malicious package) - [MAL-2025-46693](https://insights.sbomify.com/MAL-2025-46693/): Malicious code in xianhua-yingyu-erlingyiliulingsan-erlingyiliulingwu (npm) (malicious package) - [MAL-2025-46692](https://insights.sbomify.com/MAL-2025-46692/): Malicious code in xiangyuzhou-xiadingdan (npm) (malicious package) - [MAL-2025-46691](https://insights.sbomify.com/MAL-2025-46691/): Malicious code in xiangxin-jiushi-liliang (npm) (malicious package) - [MAL-2025-46690](https://insights.sbomify.com/MAL-2025-46690/): Malicious code in xiangguang-dakai (npm) (malicious package) - [MAL-2025-4669](https://insights.sbomify.com/MAL-2025-4669/): Malicious code in world-id-poap (npm) (malicious package) - [MAL-2025-46689](https://insights.sbomify.com/MAL-2025-46689/): Malicious code in xiandai-yiciyuan-vol3 (npm) (malicious package) - [MAL-2025-46688](https://insights.sbomify.com/MAL-2025-46688/): Malicious code in xiandai-yiciyuan-vol2 (npm) (malicious package) - [MAL-2025-46687](https://insights.sbomify.com/MAL-2025-46687/): Malicious code in xiandai-yiciyuan-vol1 (npm) (malicious package) - [MAL-2025-46686](https://insights.sbomify.com/MAL-2025-46686/): Malicious code in xiandai-xinxi-jiansuo (npm) (malicious package) - [MAL-2025-46685](https://insights.sbomify.com/MAL-2025-46685/): Malicious code in xiandai-xbaliu-huibian-yuyan-chengxu-sheji (npm) (malicious package) - [MAL-2025-46684](https://insights.sbomify.com/MAL-2025-46684/): Malicious code in xiandai-tixi-jiegoue-youhua-bianyiqi (npm) (malicious package) - [MAL-2025-46683](https://insights.sbomify.com/MAL-2025-46683/): Malicious code in xiandai-shujuku-guanli (npm) (malicious package) - [MAL-2025-46682](https://insights.sbomify.com/MAL-2025-46682/): Malicious code in xiandai-bazi-minglixue-gangyao (npm) (malicious package) - [MAL-2025-46681](https://insights.sbomify.com/MAL-2025-46681/): Malicious code in xi-tau-query-virtualize-user (npm) (malicious package) - [MAL-2025-46680](https://insights.sbomify.com/MAL-2025-46680/): Malicious code in xi-book-try-scale-data (npm) (malicious package) - [MAL-2025-4668](https://insights.sbomify.com/MAL-2025-4668/): Malicious code in claude-pr-action (npm) (malicious package) - [MAL-2025-46679](https://insights.sbomify.com/MAL-2025-46679/): Malicious code in xerxes-writable-nightwatch-pavo (npm) (malicious package) - [MAL-2025-46678](https://insights.sbomify.com/MAL-2025-46678/): Malicious code in xenos-configstore-arcturus-cosmiconfig (npm) (malicious package) - [MAL-2025-46677](https://insights.sbomify.com/MAL-2025-46677/): Malicious code in xenon-impulse-elektra-ophiuchus (npm) (malicious package) - [MAL-2025-46676](https://insights.sbomify.com/MAL-2025-46676/): Malicious code in xenon-hydra-react-bootstrap-leda (npm) (malicious package) - [MAL-2025-46675](https://insights.sbomify.com/MAL-2025-46675/): Malicious code in xenon-auth-jabbah-materialize (npm) (malicious package) - [MAL-2025-46674](https://insights.sbomify.com/MAL-2025-46674/): Malicious code in xenobiology-telesto-eleventy-nestjs (npm) (malicious package) - [MAL-2025-46673](https://insights.sbomify.com/MAL-2025-46673/): Malicious code in xenobiology-nashira-gulp-bootes (npm) (malicious package) - [MAL-2025-46672](https://insights.sbomify.com/MAL-2025-46672/): Malicious code in xbalingxbaliu-huibian-yuyan-yujisuanji-tixi-jiegou (npm) (malicious package) - [MAL-2025-46671](https://insights.sbomify.com/MAL-2025-46671/): Malicious code in xaver-soto1-breki (npm) (malicious package) - [MAL-2025-46670](https://insights.sbomify.com/MAL-2025-46670/): Malicious code in xaver-mieayam60-breki (npm) (malicious package) - [MAL-2025-4667](https://insights.sbomify.com/MAL-2025-4667/): Malicious code in checkout-sparse (npm) (malicious package) - [MAL-2025-46669](https://insights.sbomify.com/MAL-2025-46669/): Malicious code in xaver-lontong32-kyuki (npm) (malicious package) - [MAL-2025-46668](https://insights.sbomify.com/MAL-2025-46668/): Malicious code in xaver-lepet99-breki (npm) (malicious package) - [MAL-2025-46667](https://insights.sbomify.com/MAL-2025-46667/): Malicious code in xaver-keraktelor4-kyuki (npm) (malicious package) - [MAL-2025-46666](https://insights.sbomify.com/MAL-2025-46666/): Malicious code in xaver-kepok39-breki (npm) (malicious package) - [MAL-2025-46665](https://insights.sbomify.com/MAL-2025-46665/): Malicious code in xaver-jengkol36-breki (npm) (malicious package) - [MAL-2025-46664](https://insights.sbomify.com/MAL-2025-46664/): Malicious code in xaver-gulai30-kyuki (npm) (malicious package) - [MAL-2025-46663](https://insights.sbomify.com/MAL-2025-46663/): Malicious code in xaver-empal45-breki (npm) (malicious package) - [MAL-2025-46662](https://insights.sbomify.com/MAL-2025-46662/): Malicious code in xanthus-rest-package-rocket (npm) (malicious package) - [MAL-2025-46661](https://insights.sbomify.com/MAL-2025-46661/): Malicious code in xanthus-polaris-hapi-nova (npm) (malicious package) - [MAL-2025-46660](https://insights.sbomify.com/MAL-2025-46660/): Malicious code in xanadu-csrf-module-npm (npm) (malicious package) - [MAL-2025-46659](https://insights.sbomify.com/MAL-2025-46659/): Malicious code in wunianye-yinshi-liaoyufa (npm) (malicious package) - [MAL-2025-46658](https://insights.sbomify.com/MAL-2025-46658/): Malicious code in wuciyuande-linghun-yangsheng (npm) (malicious package) - [MAL-2025-46657](https://insights.sbomify.com/MAL-2025-46657/): Malicious code in wuai-pojie-tuoke-pojiequ-erlingyijiulingwu-lingliu (npm) (malicious package) - [MAL-2025-46656](https://insights.sbomify.com/MAL-2025-46656/): Malicious code in wuai-pojie-tuoke-pojiequ-erlingyijiulingqi-lingba (npm) (malicious package) - [MAL-2025-46655](https://insights.sbomify.com/MAL-2025-46655/): Malicious code in wuai-pojie-tuoke-pojiequ-erlingyijiulingjiu-yier (npm) (malicious package) - [MAL-2025-46654](https://insights.sbomify.com/MAL-2025-46654/): Malicious code in writable-eslint-config-proxima-vulcan (npm) (malicious package) - [MAL-2025-46653](https://insights.sbomify.com/MAL-2025-46653/): Malicious code in wormhole-iota-hologram-resonance (npm) (malicious package) - [MAL-2025-46652](https://insights.sbomify.com/MAL-2025-46652/): Malicious code in working-free-spins-coin-master-2023-fjekde (npm) (malicious package) - [MAL-2025-46651](https://insights.sbomify.com/MAL-2025-46651/): Malicious code in working-free-coin-master-spins-2023-sddkdlz (npm) (malicious package) - [MAL-2025-46650](https://insights.sbomify.com/MAL-2025-46650/): Malicious code in working-fortnite-vbucks-gener-tor-2023-fejzkdlz (npm) (malicious package) - [MAL-2025-46649](https://insights.sbomify.com/MAL-2025-46649/): Malicious code in working-april-coin-master-free-spins-yrhgre (npm) (malicious package) - [MAL-2025-46648](https://insights.sbomify.com/MAL-2025-46648/): Malicious code in working-april-coin-master-free-spins-rfkel (npm) (malicious package) - [MAL-2025-46647](https://insights.sbomify.com/MAL-2025-46647/): Malicious code in working-april-co-in-mas-ter-free-spins-rthrtg (npm) (malicious package) - [MAL-2025-46646](https://insights.sbomify.com/MAL-2025-46646/): Malicious code in wokao-xiyinli-faze-zhuandao-sanqianwan (npm) (malicious package) - [MAL-2025-46645](https://insights.sbomify.com/MAL-2025-46645/): Malicious code in wode-tongling-haoyou (npm) (malicious package) - [MAL-2025-46644](https://insights.sbomify.com/MAL-2025-46644/): Malicious code in winston-yakutsk-aldebaran-hydra (npm) (malicious package) - [MAL-2025-46643](https://insights.sbomify.com/MAL-2025-46643/): Malicious code in winston-sequelize-augmentedreality-eris (npm) (malicious package) - [MAL-2025-46642](https://insights.sbomify.com/MAL-2025-46642/): Malicious code in winston-loopback-nodejs-bulma (npm) (malicious package) - [MAL-2025-46641](https://insights.sbomify.com/MAL-2025-46641/): Malicious code in winston-global-proxima-metalsmith (npm) (malicious package) - [MAL-2025-46640](https://insights.sbomify.com/MAL-2025-46640/): Malicious code in winston-elara-semantic-release-tethys (npm) (malicious package) - [MAL-2025-4664](https://insights.sbomify.com/MAL-2025-4664/): Malicious code in new-presentation-api (npm) (malicious package) - [MAL-2025-46639](https://insights.sbomify.com/MAL-2025-46639/): Malicious code in winston-datalog (npm) (malicious package) - [MAL-2025-46638](https://insights.sbomify.com/MAL-2025-46638/): Malicious code in windows-sdks (npm) (malicious package) - [MAL-2025-46637](https://insights.sbomify.com/MAL-2025-46637/): Malicious code in wind-decode-serialize-balance-xml (npm) (malicious package) - [MAL-2025-46636](https://insights.sbomify.com/MAL-2025-46636/): Malicious code in winboxmy2025 (npm) (malicious package) - [MAL-2025-46635](https://insights.sbomify.com/MAL-2025-46635/): Malicious code in winboxmy (npm) (malicious package) - [MAL-2025-46634](https://insights.sbomify.com/MAL-2025-46634/): Malicious code in winboxcasino2025 (npm) (malicious package) - [MAL-2025-46633](https://insights.sbomify.com/MAL-2025-46633/): Malicious code in winbox88trust1 (npm) (malicious package) - [MAL-2025-46632](https://insights.sbomify.com/MAL-2025-46632/): Malicious code in winbox88my3_2025 (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/595/