# Vulnerabilities published in 2025


- [MAL-2025-46000](https://insights.sbomify.com/MAL-2025-46000/): Malicious code in sfly-web-vitals (npm) (malicious package)
- [MAL-2025-4600](https://insights.sbomify.com/MAL-2025-4600/): Malicious code in odin-security1 (npm) (malicious package)
- [MAL-2025-460](https://insights.sbomify.com/MAL-2025-460/): Malicious code in godaddy-cache (npm) (malicious package)
- [MAL-2025-46](https://insights.sbomify.com/MAL-2025-46/): Malicious code in solanacore (npm) (malicious package)
- [MAL-2025-45999](https://insights.sbomify.com/MAL-2025-45999/): Malicious code in sfly-services (npm) (malicious package)
- [MAL-2025-45998](https://insights.sbomify.com/MAL-2025-45998/): Malicious code in sequelize-sedna-phoebe-webpack (npm) (malicious package)
- [MAL-2025-45997](https://insights.sbomify.com/MAL-2025-45997/): Malicious code in semantic-ui-sublimation-sedna-octans (npm) (malicious package)
- [MAL-2025-45996](https://insights.sbomify.com/MAL-2025-45996/): Malicious code in semantic-ui-selenium-test-postcss (npm) (malicious package)
- [MAL-2025-45995](https://insights.sbomify.com/MAL-2025-45995/): Malicious code in semantic-release-metalsmith-mini-css-extract-plugin-framework (npm) (malicious package)
- [MAL-2025-45994](https://insights.sbomify.com/MAL-2025-45994/): Malicious code in semantic-release-dotenv-safe-commitlint-node-sass (npm) (malicious package)
- [MAL-2025-45993](https://insights.sbomify.com/MAL-2025-45993/): Malicious code in semantic-release-aether-quantum-elara (npm) (malicious package)
- [MAL-2025-45992](https://insights.sbomify.com/MAL-2025-45992/): Malicious code in selenology-protractor-metabolomics-bionics (npm) (malicious package)
- [MAL-2025-45991](https://insights.sbomify.com/MAL-2025-45991/): Malicious code in selenology-blackhole-non-blocking-xanadu (npm) (malicious package)
- [MAL-2025-45990](https://insights.sbomify.com/MAL-2025-45990/): Malicious code in selenology-biohacking-css-loader-planckscale (npm) (malicious package)
- [MAL-2025-4599](https://insights.sbomify.com/MAL-2025-4599/): Malicious code in nexpi-session (npm) (malicious package)
- [MAL-2025-45989](https://insights.sbomify.com/MAL-2025-45989/): Malicious code in selenium-ini-algol-restart (npm) (malicious package)
- [MAL-2025-45988](https://insights.sbomify.com/MAL-2025-45988/): Malicious code in seismology-xenon-chalk-commitlint (npm) (malicious package)
- [MAL-2025-45987](https://insights.sbomify.com/MAL-2025-45987/): Malicious code in seismology-playwright-epimetheus-areology (npm) (malicious package)
- [MAL-2025-45986](https://insights.sbomify.com/MAL-2025-45986/): Malicious code in seikon (npm) (malicious package)
- [MAL-2025-45985](https://insights.sbomify.com/MAL-2025-45985/): Malicious code in sedna-vuetify-zooarchaeology-nightwatch (npm) (malicious package)
- [MAL-2025-45984](https://insights.sbomify.com/MAL-2025-45984/): Malicious code in sedna-regulus-rollup-plugin-phoebe (npm) (malicious package)
- [MAL-2025-45983](https://insights.sbomify.com/MAL-2025-45983/): Malicious code in sedna-json-wavefunction-indus (npm) (malicious package)
- [MAL-2025-45982](https://insights.sbomify.com/MAL-2025-45982/): Malicious code in sedimentology-semantic-release-cordelia-rehype (npm) (malicious package)
- [MAL-2025-45981](https://insights.sbomify.com/MAL-2025-45981/): Malicious code in season-sold-nice (npm) (malicious package)
- [MAL-2025-45980](https://insights.sbomify.com/MAL-2025-45980/): Malicious code in scripts-mysql-package-graphql (npm) (malicious package)
- [MAL-2025-4598](https://insights.sbomify.com/MAL-2025-4598/): Malicious code in motion-exts (npm) (malicious package)
- [MAL-2025-45979](https://insights.sbomify.com/MAL-2025-45979/): Malicious code in scripts-lint-staged-cygnus-mongoose (npm) (malicious package)
- [MAL-2025-45978](https://insights.sbomify.com/MAL-2025-45978/): Malicious code in scripts-cybernetics-aurora-event (npm) (malicious package)
- [MAL-2025-45977](https://insights.sbomify.com/MAL-2025-45977/): Malicious code in scorpius-lightyear-prettier-readable (npm) (malicious package)
- [MAL-2025-45976](https://insights.sbomify.com/MAL-2025-45976/): Malicious code in sayuki (npm) (malicious package)
- [MAL-2025-45975](https://insights.sbomify.com/MAL-2025-45975/): Malicious code in savanna-yucca-ovl568-project (npm) (malicious package)
- [MAL-2025-45974](https://insights.sbomify.com/MAL-2025-45974/): Malicious code in savanna-peony-bqo298-project (npm) (malicious package)
- [MAL-2025-45973](https://insights.sbomify.com/MAL-2025-45973/): Malicious code in satiya-mingxiang (npm) (malicious package)
- [MAL-2025-45972](https://insights.sbomify.com/MAL-2025-45972/): Malicious code in sari-tumis76-breki (npm) (malicious package)
- [MAL-2025-45971](https://insights.sbomify.com/MAL-2025-45971/): Malicious code in sari-soto27-breki (npm) (malicious package)
- [MAL-2025-45970](https://insights.sbomify.com/MAL-2025-45970/): Malicious code in sari-sambel78-breki (npm) (malicious package)
- [MAL-2025-4597](https://insights.sbomify.com/MAL-2025-4597/): Malicious code in http-parse (npm) (malicious package)
- [MAL-2025-45969](https://insights.sbomify.com/MAL-2025-45969/): Malicious code in sari-rojak42-kyuki (npm) (malicious package)
- [MAL-2025-45968](https://insights.sbomify.com/MAL-2025-45968/): Malicious code in sari-rangginang1-breki (npm) (malicious package)
- [MAL-2025-45967](https://insights.sbomify.com/MAL-2025-45967/): Malicious code in sari-peyek91-breki (npm) (malicious package)
- [MAL-2025-45966](https://insights.sbomify.com/MAL-2025-45966/): Malicious code in sari-miemee99-breki (npm) (malicious package)
- [MAL-2025-45965](https://insights.sbomify.com/MAL-2025-45965/): Malicious code in sari-miebogor88-breki (npm) (malicious package)
- [MAL-2025-45964](https://insights.sbomify.com/MAL-2025-45964/): Malicious code in sari-mieaceh63-breki (npm) (malicious package)
- [MAL-2025-45963](https://insights.sbomify.com/MAL-2025-45963/): Malicious code in sari-martabak26-breki (npm) (malicious package)
- [MAL-2025-45962](https://insights.sbomify.com/MAL-2025-45962/): Malicious code in sari-mangut92-breki (npm) (malicious package)
- [MAL-2025-45961](https://insights.sbomify.com/MAL-2025-45961/): Malicious code in sari-mangga24-breki (npm) (malicious package)
- [MAL-2025-45960](https://insights.sbomify.com/MAL-2025-45960/): Malicious code in sari-lapis84-breki (npm) (malicious package)
- [MAL-2025-4596](https://insights.sbomify.com/MAL-2025-4596/): Malicious code in ext-hash (npm) (malicious package)
- [MAL-2025-45959](https://insights.sbomify.com/MAL-2025-45959/): Malicious code in sari-kupang33-breki (npm) (malicious package)
- [MAL-2025-45958](https://insights.sbomify.com/MAL-2025-45958/): Malicious code in sari-getas29-breki (npm) (malicious package)
- [MAL-2025-45957](https://insights.sbomify.com/MAL-2025-45957/): Malicious code in sari-gado-gado93-breki (npm) (malicious package)
- [MAL-2025-45956](https://insights.sbomify.com/MAL-2025-45956/): Malicious code in sapphire-forest-lht755-project (npm) (malicious package)
- [MAL-2025-45955](https://insights.sbomify.com/MAL-2025-45955/): Malicious code in sanshitian-xuehui-linghun-chuti (npm) (malicious package)
- [MAL-2025-45954](https://insights.sbomify.com/MAL-2025-45954/): Malicious code in sanddance-test-umd (npm) (malicious package)
- [MAL-2025-45953](https://insights.sbomify.com/MAL-2025-45953/): Malicious code in sample-package02 (npm) (malicious package)
- [MAL-2025-45952](https://insights.sbomify.com/MAL-2025-45952/): Malicious code in salt-surface-indicate (npm) (malicious package)
- [MAL-2025-45951](https://insights.sbomify.com/MAL-2025-45951/): Malicious code in saisi-zaoqike-1to4 (npm) (malicious package)
- [MAL-2025-45950](https://insights.sbomify.com/MAL-2025-45950/): Malicious code in saisi-rangni-chengwei-mingyunde-chuangzaozhe (npm) (malicious package)
- [MAL-2025-4595](https://insights.sbomify.com/MAL-2025-4595/): Malicious code in express-authgen (npm) (malicious package)
- [MAL-2025-45949](https://insights.sbomify.com/MAL-2025-45949/): Malicious code in sails-wavefunction-cosmicweb-webpack (npm) (malicious package)
- [MAL-2025-45948](https://insights.sbomify.com/MAL-2025-45948/): Malicious code in sail-wrapped-nice (npm) (malicious package)
- [MAL-2025-45947](https://insights.sbomify.com/MAL-2025-45947/): Malicious code in sagitta-phoebe-paleoecology-csv (npm) (malicious package)
- [MAL-2025-45946](https://insights.sbomify.com/MAL-2025-45946/): Malicious code in sagitta-lint-staged-io-boson (npm) (malicious package)
- [MAL-2025-45945](https://insights.sbomify.com/MAL-2025-45945/): Malicious code in sagitta-html-webpack-plugin-element-ui-fomalhaut (npm) (malicious package)
- [MAL-2025-45944](https://insights.sbomify.com/MAL-2025-45944/): Malicious code in sagitta-hexo-jupiter-gacrux (npm) (malicious package)
- [MAL-2025-45943](https://insights.sbomify.com/MAL-2025-45943/): Malicious code in sagitta-gemini-nashira-thuban (npm) (malicious package)
- [MAL-2025-45942](https://insights.sbomify.com/MAL-2025-45942/): Malicious code in sagitta-capella-eventhoriz-bellatrix (npm) (malicious package)
- [MAL-2025-45941](https://insights.sbomify.com/MAL-2025-45941/): Malicious code in sadr-pyxis-mongodb-quito (npm) (malicious package)
- [MAL-2025-45940](https://insights.sbomify.com/MAL-2025-45940/): Malicious code in sadr-photon-mocha-umbra (npm) (malicious package)
- [MAL-2025-4594](https://insights.sbomify.com/MAL-2025-4594/): Malicious code in blesx (npm) (malicious package)
- [MAL-2025-45939](https://insights.sbomify.com/MAL-2025-45939/): Malicious code in sadr-multiverse-markdown-xo (npm) (malicious package)
- [MAL-2025-45938](https://insights.sbomify.com/MAL-2025-45938/): Malicious code in sad-type-root (npm) (malicious package)
- [MAL-2025-45937](https://insights.sbomify.com/MAL-2025-45937/): Malicious code in ryukini (npm) (malicious package)
- [MAL-2025-45936](https://insights.sbomify.com/MAL-2025-45936/): Malicious code in rxcegame (npm) (malicious package)
- [MAL-2025-45935](https://insights.sbomify.com/MAL-2025-45935/): Malicious code in run-script-zephyr-dotenv-safe-bionics (npm) (malicious package)
- [MAL-2025-45934](https://insights.sbomify.com/MAL-2025-45934/): Malicious code in run-script-ganymede-npm-miranda (npm) (malicious package)
- [MAL-2025-45933](https://insights.sbomify.com/MAL-2025-45933/): Malicious code in rumen-guaiji-nvjiside-linghun-lvcheng (npm) (malicious package)
- [MAL-2025-45932](https://insights.sbomify.com/MAL-2025-45932/): Malicious code in ruhe-zuohao-haizide-qingxu-jiaoyang (npm) (malicious package)
- [MAL-2025-45931](https://insights.sbomify.com/MAL-2025-45931/): Malicious code in ruhe-peiyang-shouhuanyingde-haizi (npm) (malicious package)
- [MAL-2025-45930](https://insights.sbomify.com/MAL-2025-45930/): Malicious code in ruhe-peiyang-mianxiang-weilaide-haizi (npm) (malicious package)
- [MAL-2025-4593](https://insights.sbomify.com/MAL-2025-4593/): Malicious code in @mpsemea/fspay-smartpay-logging-web-sdk (npm) (malicious package)
- [MAL-2025-45929](https://insights.sbomify.com/MAL-2025-45929/): Malicious code in ruhe-kaifa-haizide-yuedu-qianli (npm) (malicious package)
- [MAL-2025-45928](https://insights.sbomify.com/MAL-2025-45928/): Malicious code in ruhe-kaifa-haizide-yingyu-qianli (npm) (malicious package)
- [MAL-2025-45927](https://insights.sbomify.com/MAL-2025-45927/): Malicious code in ruhe-kaifa-haizide-shuxue-qianli (npm) (malicious package)
- [MAL-2025-45926](https://insights.sbomify.com/MAL-2025-45926/): Malicious code in ruhe-huoyong-feixing-ziwei (npm) (malicious package)
- [MAL-2025-45925](https://insights.sbomify.com/MAL-2025-45925/): Malicious code in ruhe-guanhao-haizide-shili (npm) (malicious package)
- [MAL-2025-45924](https://insights.sbomify.com/MAL-2025-45924/): Malicious code in rudi-tiwul85-kyuki (npm) (malicious package)
- [MAL-2025-45923](https://insights.sbomify.com/MAL-2025-45923/): Malicious code in rudi-tempe98-breki (npm) (malicious package)
- [MAL-2025-45922](https://insights.sbomify.com/MAL-2025-45922/): Malicious code in rudi-telur23-breki (npm) (malicious package)
- [MAL-2025-45921](https://insights.sbomify.com/MAL-2025-45921/): Malicious code in rudi-soto81-breki (npm) (malicious package)
- [MAL-2025-45920](https://insights.sbomify.com/MAL-2025-45920/): Malicious code in rudi-rujak24-breki (npm) (malicious package)
- [MAL-2025-4592](https://insights.sbomify.com/MAL-2025-4592/): Malicious code in @bugbounty208/sdk (npm) (malicious package)
- [MAL-2025-45919](https://insights.sbomify.com/MAL-2025-45919/): Malicious code in rudi-rangi97-breki (npm) (malicious package)
- [MAL-2025-45918](https://insights.sbomify.com/MAL-2025-45918/): Malicious code in rudi-ongol-ongol45-kyuki (npm) (malicious package)
- [MAL-2025-45917](https://insights.sbomify.com/MAL-2025-45917/): Malicious code in rudi-oblok52-breki (npm) (malicious package)
- [MAL-2025-45916](https://insights.sbomify.com/MAL-2025-45916/): Malicious code in rudi-mangut16-breki (npm) (malicious package)
- [MAL-2025-45915](https://insights.sbomify.com/MAL-2025-45915/): Malicious code in rudi-lontong93-kyuki (npm) (malicious package)
- [MAL-2025-45914](https://insights.sbomify.com/MAL-2025-45914/): Malicious code in rudi-lapis7-breki (npm) (malicious package)
- [MAL-2025-45913](https://insights.sbomify.com/MAL-2025-45913/): Malicious code in rudi-kue77-kyuki (npm) (malicious package)
- [MAL-2025-45912](https://insights.sbomify.com/MAL-2025-45912/): Malicious code in rudi-jengkol27-breki (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/603/