# Vulnerabilities published in 2025


- [MAL-2025-45371](https://insights.sbomify.com/MAL-2025-45371/): Malicious code in nudt-comp-fund (npm) (malicious package)
- [MAL-2025-45370](https://insights.sbomify.com/MAL-2025-45370/): Malicious code in nudt-comp-arch (npm) (malicious package)
- [MAL-2025-4537](https://insights.sbomify.com/MAL-2025-4537/): Malicious code in @abacusmirror/react-fontawesome (npm) (malicious package)
- [MAL-2025-45369](https://insights.sbomify.com/MAL-2025-45369/): Malicious code in nucleosynthesis-tool-node-sass-sirius (npm) (malicious package)
- [MAL-2025-45368](https://insights.sbomify.com/MAL-2025-45368/): Malicious code in nucleosynthesis-lithosphere-koa-lacerta (npm) (malicious package)
- [MAL-2025-45367](https://insights.sbomify.com/MAL-2025-45367/): Malicious code in nucleosynthesis-framework-metalsmith-spawn (npm) (malicious package)
- [MAL-2025-45366](https://insights.sbomify.com/MAL-2025-45366/): Malicious code in november-nectarine-bravo-sphkd (npm) (malicious package)
- [MAL-2025-45365](https://insights.sbomify.com/MAL-2025-45365/): Malicious code in november-grape-foxtrot-mwoae (npm) (malicious package)
- [MAL-2025-45364](https://insights.sbomify.com/MAL-2025-45364/): Malicious code in november-elderberry-papaya-pboug (npm) (malicious package)
- [MAL-2025-45363](https://insights.sbomify.com/MAL-2025-45363/): Malicious code in november-cherry-elderberry-kfeip (npm) (malicious package)
- [MAL-2025-45362](https://insights.sbomify.com/MAL-2025-45362/): Malicious code in november-banana-quebec-oupyy (npm) (malicious package)
- [MAL-2025-45361](https://insights.sbomify.com/MAL-2025-45361/): Malicious code in nothing-monkey-stiff (npm) (malicious package)
- [MAL-2025-45360](https://insights.sbomify.com/MAL-2025-45360/): Malicious code in not-constantly-indicate (npm) (malicious package)
- [MAL-2025-4536](https://insights.sbomify.com/MAL-2025-4536/): Malicious code in xsolla-pay2play-widget (npm) (malicious package)
- [MAL-2025-45359](https://insights.sbomify.com/MAL-2025-45359/): Malicious code in non-blocking-sirius-standard-darkenergy (npm) (malicious package)
- [MAL-2025-45358](https://insights.sbomify.com/MAL-2025-45358/): Malicious code in nohack-erlingyiling-part2 (npm) (malicious package)
- [MAL-2025-45357](https://insights.sbomify.com/MAL-2025-45357/): Malicious code in nohack-erlingyiling-part1 (npm) (malicious package)
- [MAL-2025-45356](https://insights.sbomify.com/MAL-2025-45356/): Malicious code in nohack-erlinglingwu-part2 (npm) (malicious package)
- [MAL-2025-45355](https://insights.sbomify.com/MAL-2025-45355/): Malicious code in nohack-erlinglingwu-part1 (npm) (malicious package)
- [MAL-2025-45354](https://insights.sbomify.com/MAL-2025-45354/): Malicious code in nohack-erlinglingqi-part4 (npm) (malicious package)
- [MAL-2025-45353](https://insights.sbomify.com/MAL-2025-45353/): Malicious code in nohack-erlinglingqi-part3 (npm) (malicious package)
- [MAL-2025-45352](https://insights.sbomify.com/MAL-2025-45352/): Malicious code in nohack-erlinglingqi-part2 (npm) (malicious package)
- [MAL-2025-45351](https://insights.sbomify.com/MAL-2025-45351/): Malicious code in nohack-erlinglingqi-part1 (npm) (malicious package)
- [MAL-2025-45350](https://insights.sbomify.com/MAL-2025-45350/): Malicious code in nohack-erlinglingliu-part4 (npm) (malicious package)
- [MAL-2025-4535](https://insights.sbomify.com/MAL-2025-4535/): Malicious code in wallet-connector-rce (npm) (malicious package)
- [MAL-2025-45349](https://insights.sbomify.com/MAL-2025-45349/): Malicious code in nohack-erlinglingliu-part2 (npm) (malicious package)
- [MAL-2025-45348](https://insights.sbomify.com/MAL-2025-45348/): Malicious code in nohack-erlinglingliu-part1 (npm) (malicious package)
- [MAL-2025-45347](https://insights.sbomify.com/MAL-2025-45347/): Malicious code in nohack-erlinglingjiu-part4 (npm) (malicious package)
- [MAL-2025-45346](https://insights.sbomify.com/MAL-2025-45346/): Malicious code in nohack-erlinglingjiu-part3 (npm) (malicious package)
- [MAL-2025-45345](https://insights.sbomify.com/MAL-2025-45345/): Malicious code in nohack-erlinglingjiu-part2 (npm) (malicious package)
- [MAL-2025-45344](https://insights.sbomify.com/MAL-2025-45344/): Malicious code in nohack-erlinglingjiu-part1 (npm) (malicious package)
- [MAL-2025-45343](https://insights.sbomify.com/MAL-2025-45343/): Malicious code in nohack-erlinglingba-part4 (npm) (malicious package)
- [MAL-2025-45342](https://insights.sbomify.com/MAL-2025-45342/): Malicious code in nohack-erlinglingba-part3 (npm) (malicious package)
- [MAL-2025-45341](https://insights.sbomify.com/MAL-2025-45341/): Malicious code in nohack-erlinglingba-part1 (npm) (malicious package)
- [MAL-2025-45340](https://insights.sbomify.com/MAL-2025-45340/): Malicious code in nohack-erlinglingba-extra-part2 (npm) (malicious package)
- [MAL-2025-4534](https://insights.sbomify.com/MAL-2025-4534/): Malicious code in vite-jsconfig-log (npm) (malicious package)
- [MAL-2025-45339](https://insights.sbomify.com/MAL-2025-45339/): Malicious code in nohack-erlinglingba-extra-part1 (npm) (malicious package)
- [MAL-2025-45338](https://insights.sbomify.com/MAL-2025-45338/): Malicious code in nodemon-cli-umbriel-uranology (npm) (malicious package)
- [MAL-2025-45337](https://insights.sbomify.com/MAL-2025-45337/): Malicious code in nodejs-smtp (npm) (malicious package)
- [MAL-2025-45336](https://insights.sbomify.com/MAL-2025-45336/): Malicious code in node-winston-logger (npm) (malicious package)
- [MAL-2025-45335](https://insights.sbomify.com/MAL-2025-45335/): Malicious code in node-sass-supercluster-izar-apollo (npm) (malicious package)
- [MAL-2025-45334](https://insights.sbomify.com/MAL-2025-45334/): Malicious code in node-sass-mesosphere-cosmiconfig-vortex (npm) (malicious package)
- [MAL-2025-45333](https://insights.sbomify.com/MAL-2025-45333/): Malicious code in node-sass-cz-conventional-changelog-foundation-nashira (npm) (malicious package)
- [MAL-2025-45332](https://insights.sbomify.com/MAL-2025-45332/): Malicious code in node-config-wolf-enif-eslint (npm) (malicious package)
- [MAL-2025-45331](https://insights.sbomify.com/MAL-2025-45331/): Malicious code in node-config-toml-deimos-pegasus (npm) (malicious package)
- [MAL-2025-45330](https://insights.sbomify.com/MAL-2025-45330/): Malicious code in nine-addition-many (npm) (malicious package)
- [MAL-2025-4533](https://insights.sbomify.com/MAL-2025-4533/): Malicious code in rm-api-services (npm) (malicious package)
- [MAL-2025-45329](https://insights.sbomify.com/MAL-2025-45329/): Malicious code in nina-tahutek87-breki (npm) (malicious package)
- [MAL-2025-45328](https://insights.sbomify.com/MAL-2025-45328/): Malicious code in nina-semur84-kyuki (npm) (malicious package)
- [MAL-2025-45327](https://insights.sbomify.com/MAL-2025-45327/): Malicious code in nina-sambel22-breki (npm) (malicious package)
- [MAL-2025-45326](https://insights.sbomify.com/MAL-2025-45326/): Malicious code in nina-otak-otak27-breki (npm) (malicious package)
- [MAL-2025-45325](https://insights.sbomify.com/MAL-2025-45325/): Malicious code in nina-lutis27-kyuki (npm) (malicious package)
- [MAL-2025-45324](https://insights.sbomify.com/MAL-2025-45324/): Malicious code in nina-kue82-kyuki (npm) (malicious package)
- [MAL-2025-45323](https://insights.sbomify.com/MAL-2025-45323/): Malicious code in nina-klanting1-breki (npm) (malicious package)
- [MAL-2025-45322](https://insights.sbomify.com/MAL-2025-45322/): Malicious code in nina-kembang100-breki (npm) (malicious package)
- [MAL-2025-45321](https://insights.sbomify.com/MAL-2025-45321/): Malicious code in nina-gembus15-kyuki (npm) (malicious package)
- [MAL-2025-45320](https://insights.sbomify.com/MAL-2025-45320/): Malicious code in nina-bika58-breki (npm) (malicious package)
- [MAL-2025-4532](https://insights.sbomify.com/MAL-2025-4532/): Malicious code in midd-js (npm) (malicious package)
- [MAL-2025-45319](https://insights.sbomify.com/MAL-2025-45319/): Malicious code in nina-bakwan59-breki (npm) (malicious package)
- [MAL-2025-45318](https://insights.sbomify.com/MAL-2025-45318/): Malicious code in nimei-xuedaode-bafeite (npm) (malicious package)
- [MAL-2025-45317](https://insights.sbomify.com/MAL-2025-45317/): Malicious code in nikeyi-zaitaluo-yidian (npm) (malicious package)
- [MAL-2025-45316](https://insights.sbomify.com/MAL-2025-45316/): Malicious code in nightwatch-cryptography-paleoclimatology-heka (npm) (malicious package)
- [MAL-2025-45315](https://insights.sbomify.com/MAL-2025-45315/): Malicious code in nightwatch-buffer-magellan-umbriel (npm) (malicious package)
- [MAL-2025-45314](https://insights.sbomify.com/MAL-2025-45314/): Malicious code in nightwatch-brane-isostasy-brane (npm) (malicious package)
- [MAL-2025-45313](https://insights.sbomify.com/MAL-2025-45313/): Malicious code in nide-shenxin-keti-taluo-douzhidao (npm) (malicious package)
- [MAL-2025-45312](https://insights.sbomify.com/MAL-2025-45312/): Malicious code in nice-exchange-instead (npm) (malicious package)
- [MAL-2025-45311](https://insights.sbomify.com/MAL-2025-45311/): Malicious code in nibuzhidaode-ziran-liaofa (npm) (malicious package)
- [MAL-2025-45310](https://insights.sbomify.com/MAL-2025-45310/): Malicious code in ngi-core (npm) (malicious package)
- [MAL-2025-4531](https://insights.sbomify.com/MAL-2025-4531/): Malicious code in loglinea (npm) (malicious package)
- [MAL-2025-45309](https://insights.sbomify.com/MAL-2025-45309/): Malicious code in nft-collection197 (npm) (malicious package)
- [MAL-2025-45308](https://insights.sbomify.com/MAL-2025-45308/): Malicious code in nft-art-generator-nft-collection982 (npm) (malicious package)
- [MAL-2025-45307](https://insights.sbomify.com/MAL-2025-45307/): Malicious code in nft-art-generator-nft-collection363 (npm) (malicious package)
- [MAL-2025-45306](https://insights.sbomify.com/MAL-2025-45306/): Malicious code in nf-web-ui (npm) (malicious package)
- [MAL-2025-45305](https://insights.sbomify.com/MAL-2025-45305/): Malicious code in nexus-ai-frontend (npm) (malicious package)
- [MAL-2025-45304](https://insights.sbomify.com/MAL-2025-45304/): Malicious code in newspaper-club-sentence (npm) (malicious package)
- [MAL-2025-45303](https://insights.sbomify.com/MAL-2025-45303/): Malicious code in new-method-coin-master-free-spins-fdkdmspef (npm) (malicious package)
- [MAL-2025-45302](https://insights.sbomify.com/MAL-2025-45302/): Malicious code in new-fortnite-v-bucks-and-skins-for-free-dyjuter (npm) (malicious package)
- [MAL-2025-45301](https://insights.sbomify.com/MAL-2025-45301/): Malicious code in new-april-coin-master-free-spins-2023-ldzld (npm) (malicious package)
- [MAL-2025-45300](https://insights.sbomify.com/MAL-2025-45300/): Malicious code in neutronstar-grunt-quantum-computing-astro (npm) (malicious package)
- [MAL-2025-4530](https://insights.sbomify.com/MAL-2025-4530/): Malicious code in ledger-transport (npm) (malicious package)
- [MAL-2025-453](https://insights.sbomify.com/MAL-2025-453/): Malicious code in epicagames-tools (npm) (malicious package)
- [MAL-2025-45299](https://insights.sbomify.com/MAL-2025-45299/): Malicious code in neutrino-paleontology-html-webpack-plugin-mui (npm) (malicious package)
- [MAL-2025-45298](https://insights.sbomify.com/MAL-2025-45298/): Malicious code in neutrino-geochemistry-procyon-nightmare (npm) (malicious package)
- [MAL-2025-45297](https://insights.sbomify.com/MAL-2025-45297/): Malicious code in neutrino-antares-promise-genomics (npm) (malicious package)
- [MAL-2025-45296](https://insights.sbomify.com/MAL-2025-45296/): Malicious code in nestjs-uranology-weywot-css-loader (npm) (malicious package)
- [MAL-2025-45295](https://insights.sbomify.com/MAL-2025-45295/): Malicious code in neptune-comet-miranda-adonis (npm) (malicious package)
- [MAL-2025-45294](https://insights.sbomify.com/MAL-2025-45294/): Malicious code in nengliangshide-liaoyuli (npm) (malicious package)
- [MAL-2025-45293](https://insights.sbomify.com/MAL-2025-45293/): Malicious code in nengliang-ziyu (npm) (malicious package)
- [MAL-2025-45292](https://insights.sbomify.com/MAL-2025-45292/): Malicious code in neizaide-yuzhou (npm) (malicious package)
- [MAL-2025-45291](https://insights.sbomify.com/MAL-2025-45291/): Malicious code in negative-slide-country (npm) (malicious package)
- [MAL-2025-45290](https://insights.sbomify.com/MAL-2025-45290/): Malicious code in nectarine-xray-juliet-qkwjr (npm) (malicious package)
- [MAL-2025-4529](https://insights.sbomify.com/MAL-2025-4529/): Malicious code in jwt-audit (npm) (malicious package)
- [MAL-2025-45289](https://insights.sbomify.com/MAL-2025-45289/): Malicious code in nectarine-raspberry-uniform-lqwok (npm) (malicious package)
- [MAL-2025-45288](https://insights.sbomify.com/MAL-2025-45288/): Malicious code in nectarine-quebec-charlie-gtssh (npm) (malicious package)
- [MAL-2025-45287](https://insights.sbomify.com/MAL-2025-45287/): Malicious code in nectarine-orange-delta-eqmuo (npm) (malicious package)
- [MAL-2025-45286](https://insights.sbomify.com/MAL-2025-45286/): Malicious code in nectarine-kilo-yam-ezsuk (npm) (malicious package)
- [MAL-2025-45285](https://insights.sbomify.com/MAL-2025-45285/): Malicious code in nectarine-golf-strawberry-nkkyo (npm) (malicious package)
- [MAL-2025-45284](https://insights.sbomify.com/MAL-2025-45284/): Malicious code in nectarine-date-whiskey-ytalo (npm) (malicious package)
- [MAL-2025-45283](https://insights.sbomify.com/MAL-2025-45283/): Malicious code in neck-invented-stared (npm) (malicious package)
- [MAL-2025-45282](https://insights.sbomify.com/MAL-2025-45282/): Malicious code in nebula-browserify-parcel-rocket (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/610/