# Vulnerabilities published in 2025


- [MAL-2025-45281](https://insights.sbomify.com/MAL-2025-45281/): Malicious code in nautilus-mountain-vwf748-project (npm) (malicious package)
- [MAL-2025-45280](https://insights.sbomify.com/MAL-2025-45280/): Malicious code in nautilus-bamboo-nez184-project (npm) (malicious package)
- [MAL-2025-4528](https://insights.sbomify.com/MAL-2025-4528/): Malicious code in gitdependencyresource (npm) (malicious package)
- [MAL-2025-45279](https://insights.sbomify.com/MAL-2025-45279/): Malicious code in native-despina-version-kardashevscale (npm) (malicious package)
- [MAL-2025-45278](https://insights.sbomify.com/MAL-2025-45278/): Malicious code in national-grabbed-putting (npm) (malicious package)
- [MAL-2025-45277](https://insights.sbomify.com/MAL-2025-45277/): Malicious code in nashira-warp-electron-development (npm) (malicious package)
- [MAL-2025-45276](https://insights.sbomify.com/MAL-2025-45276/): Malicious code in nashira-chromedriver-sagitta-umbra (npm) (malicious package)
- [MAL-2025-45275](https://insights.sbomify.com/MAL-2025-45275/): Malicious code in nana-telurtahu55-kyuki (npm) (malicious package)
- [MAL-2025-45274](https://insights.sbomify.com/MAL-2025-45274/): Malicious code in nana-sambalado31-kyuki (npm) (malicious package)
- [MAL-2025-45273](https://insights.sbomify.com/MAL-2025-45273/): Malicious code in nana-rojak12-breki (npm) (malicious package)
- [MAL-2025-45272](https://insights.sbomify.com/MAL-2025-45272/): Malicious code in nana-naget8-breki (npm) (malicious package)
- [MAL-2025-45271](https://insights.sbomify.com/MAL-2025-45271/): Malicious code in nana-mangut47-kyuki (npm) (malicious package)
- [MAL-2025-45270](https://insights.sbomify.com/MAL-2025-45270/): Malicious code in nana-dradag58-kyuki (npm) (malicious package)
- [MAL-2025-4527](https://insights.sbomify.com/MAL-2025-4527/): Malicious code in escapes (npm) (malicious package)
- [MAL-2025-45269](https://insights.sbomify.com/MAL-2025-45269/): Malicious code in nails-faster-cookies (npm) (malicious package)
- [MAL-2025-45268](https://insights.sbomify.com/MAL-2025-45268/): Malicious code in nadia-tiwul17-breki (npm) (malicious package)
- [MAL-2025-45267](https://insights.sbomify.com/MAL-2025-45267/): Malicious code in nadia-tek6-breki (npm) (malicious package)
- [MAL-2025-45266](https://insights.sbomify.com/MAL-2025-45266/): Malicious code in nadia-tek22-breki (npm) (malicious package)
- [MAL-2025-45265](https://insights.sbomify.com/MAL-2025-45265/): Malicious code in nadia-sambel81-kyuki (npm) (malicious package)
- [MAL-2025-45264](https://insights.sbomify.com/MAL-2025-45264/): Malicious code in nadia-rojak10-breki (npm) (malicious package)
- [MAL-2025-45263](https://insights.sbomify.com/MAL-2025-45263/): Malicious code in nadia-rendang98-breki (npm) (malicious package)
- [MAL-2025-45262](https://insights.sbomify.com/MAL-2025-45262/): Malicious code in nadia-peyek11-kyuki (npm) (malicious package)
- [MAL-2025-45261](https://insights.sbomify.com/MAL-2025-45261/): Malicious code in nadia-miemee73-breki (npm) (malicious package)
- [MAL-2025-45260](https://insights.sbomify.com/MAL-2025-45260/): Malicious code in nadia-lontong50-breki (npm) (malicious package)
- [MAL-2025-4526](https://insights.sbomify.com/MAL-2025-4526/): Malicious code in caixaequ2ahzoop (PyPI) (malicious package)
- [MAL-2025-45259](https://insights.sbomify.com/MAL-2025-45259/): Malicious code in nadia-kue72-kyuki (npm) (malicious package)
- [MAL-2025-45258](https://insights.sbomify.com/MAL-2025-45258/): Malicious code in nadia-keraktelor43-kyuki (npm) (malicious package)
- [MAL-2025-45257](https://insights.sbomify.com/MAL-2025-45257/): Malicious code in nadia-jus5-breki (npm) (malicious package)
- [MAL-2025-45256](https://insights.sbomify.com/MAL-2025-45256/): Malicious code in nadia-gembus37-breki (npm) (malicious package)
- [MAL-2025-45255](https://insights.sbomify.com/MAL-2025-45255/): Malicious code in myth-zebra-lhu326-project (npm) (malicious package)
- [MAL-2025-45254](https://insights.sbomify.com/MAL-2025-45254/): Malicious code in myth-rose-mqm027-project (npm) (malicious package)
- [MAL-2025-45253](https://insights.sbomify.com/MAL-2025-45253/): Malicious code in mutation-nodemon-semantic-release-barnard (npm) (malicious package)
- [MAL-2025-45252](https://insights.sbomify.com/MAL-2025-45252/): Malicious code in mutation-fork-cressida-carpo (npm) (malicious package)
- [MAL-2025-45251](https://insights.sbomify.com/MAL-2025-45251/): Malicious code in mutation-fermion-holography-neuromorphic (npm) (malicious package)
- [MAL-2025-45250](https://insights.sbomify.com/MAL-2025-45250/): Malicious code in mulyono-semur80-breki (npm) (malicious package)
- [MAL-2025-4525](https://insights.sbomify.com/MAL-2025-4525/): Malicious code in zeal-plugins (npm) (malicious package)
- [MAL-2025-45249](https://insights.sbomify.com/MAL-2025-45249/): Malicious code in mulyono-sambel19-breki (npm) (malicious package)
- [MAL-2025-45248](https://insights.sbomify.com/MAL-2025-45248/): Malicious code in mulyono-nasicampur84-kyuki (npm) (malicious package)
- [MAL-2025-45247](https://insights.sbomify.com/MAL-2025-45247/): Malicious code in mulyono-naget75-breki (npm) (malicious package)
- [MAL-2025-45246](https://insights.sbomify.com/MAL-2025-45246/): Malicious code in mulyono-mangut91-breki (npm) (malicious package)
- [MAL-2025-45245](https://insights.sbomify.com/MAL-2025-45245/): Malicious code in mulyono-kolak51-kyuki (npm) (malicious package)
- [MAL-2025-45244](https://insights.sbomify.com/MAL-2025-45244/): Malicious code in mulyono-buburayam26-breki (npm) (malicious package)
- [MAL-2025-45243](https://insights.sbomify.com/MAL-2025-45243/): Malicious code in mulyono-bakwan66-kyuki (npm) (malicious package)
- [MAL-2025-45242](https://insights.sbomify.com/MAL-2025-45242/): Malicious code in mulyono-bakso30-kyuki (npm) (malicious package)
- [MAL-2025-45241](https://insights.sbomify.com/MAL-2025-45241/): Malicious code in multiverse-lithosphere-filament-speleology (npm) (malicious package)
- [MAL-2025-45240](https://insights.sbomify.com/MAL-2025-45240/): Malicious code in mui-link-phylogenetics-xerxes (npm) (malicious package)
- [MAL-2025-4524](https://insights.sbomify.com/MAL-2025-4524/): Malicious code in yellow-plugins (npm) (malicious package)
- [MAL-2025-45239](https://insights.sbomify.com/MAL-2025-45239/): Malicious code in ms-gsl (npm) (malicious package)
- [MAL-2025-45238](https://insights.sbomify.com/MAL-2025-45238/): Malicious code in moyaoxue (npm) (malicious package)
- [MAL-2025-45237](https://insights.sbomify.com/MAL-2025-45237/): Malicious code in mountain-topaz-wbx083-project (npm) (malicious package)
- [MAL-2025-45236](https://insights.sbomify.com/MAL-2025-45236/): Malicious code in mountain-nest-range (npm) (malicious package)
- [MAL-2025-45235](https://insights.sbomify.com/MAL-2025-45235/): Malicious code in morgan-shelljs-outercore-izar (npm) (malicious package)
- [MAL-2025-45234](https://insights.sbomify.com/MAL-2025-45234/): Malicious code in morgan-geomorphology-jabbah-bionics (npm) (malicious package)
- [MAL-2025-45233](https://insights.sbomify.com/MAL-2025-45233/): Malicious code in moon-eagle-ydc904-project (npm) (malicious package)
- [MAL-2025-45232](https://insights.sbomify.com/MAL-2025-45232/): Malicious code in mongoose-quark-configstore-dotenv (npm) (malicious package)
- [MAL-2025-45231](https://insights.sbomify.com/MAL-2025-45231/): Malicious code in mongoose-helmet-procyon-native (npm) (malicious package)
- [MAL-2025-45230](https://insights.sbomify.com/MAL-2025-45230/): Malicious code in mongodb-spinner-grus-avior (npm) (malicious package)
- [MAL-2025-4523](https://insights.sbomify.com/MAL-2025-4523/): Malicious code in wrapper6 (npm) (malicious package)
- [MAL-2025-45229](https://insights.sbomify.com/MAL-2025-45229/): Malicious code in mofashi-xuetude-banlvshu-xia (npm) (malicious package)
- [MAL-2025-45228](https://insights.sbomify.com/MAL-2025-45228/): Malicious code in mofashi-xuetude-banlvshu-shang (npm) (malicious package)
- [MAL-2025-45227](https://insights.sbomify.com/MAL-2025-45227/): Malicious code in mofade-jichu (npm) (malicious package)
- [MAL-2025-45226](https://insights.sbomify.com/MAL-2025-45226/): Malicious code in mofa-zahuode-zhizuo-fangfa (npm) (malicious package)
- [MAL-2025-45225](https://insights.sbomify.com/MAL-2025-45225/): Malicious code in mofa-xuetu-volyiling (npm) (malicious package)
- [MAL-2025-45224](https://insights.sbomify.com/MAL-2025-45224/): Malicious code in mofa-xuetu-vol9 (npm) (malicious package)
- [MAL-2025-45223](https://insights.sbomify.com/MAL-2025-45223/): Malicious code in mofa-xuetu-vol8 (npm) (malicious package)
- [MAL-2025-45222](https://insights.sbomify.com/MAL-2025-45222/): Malicious code in mofa-xuetu-vol7 (npm) (malicious package)
- [MAL-2025-45221](https://insights.sbomify.com/MAL-2025-45221/): Malicious code in mofa-xuetu-vol6 (npm) (malicious package)
- [MAL-2025-45220](https://insights.sbomify.com/MAL-2025-45220/): Malicious code in mofa-xuetu-vol5 (npm) (malicious package)
- [MAL-2025-4522](https://insights.sbomify.com/MAL-2025-4522/): Malicious code in wrap-plugins (npm) (malicious package)
- [MAL-2025-45219](https://insights.sbomify.com/MAL-2025-45219/): Malicious code in mofa-xuetu-vol4 (npm) (malicious package)
- [MAL-2025-45218](https://insights.sbomify.com/MAL-2025-45218/): Malicious code in mofa-xuetu-vol3 (npm) (malicious package)
- [MAL-2025-45217](https://insights.sbomify.com/MAL-2025-45217/): Malicious code in mofa-xuetu-vol2 (npm) (malicious package)
- [MAL-2025-45216](https://insights.sbomify.com/MAL-2025-45216/): Malicious code in mofa-xuetu-vol1 (npm) (malicious package)
- [MAL-2025-45215](https://insights.sbomify.com/MAL-2025-45215/): Malicious code in mofa-xianhua (npm) (malicious package)
- [MAL-2025-45214](https://insights.sbomify.com/MAL-2025-45214/): Malicious code in mofa-jingyou-tiaopei-daquan (npm) (malicious package)
- [MAL-2025-45213](https://insights.sbomify.com/MAL-2025-45213/): Malicious code in mofa-jiaokeshu (npm) (malicious package)
- [MAL-2025-45212](https://insights.sbomify.com/MAL-2025-45212/): Malicious code in module-xenos-install-oauth (npm) (malicious package)
- [MAL-2025-45211](https://insights.sbomify.com/MAL-2025-45211/): Malicious code in module-tow (npm) (malicious package)
- [MAL-2025-45210](https://insights.sbomify.com/MAL-2025-45210/): Malicious code in mocha-tectonic-pyxis-bellatrix (npm) (malicious package)
- [MAL-2025-4521](https://insights.sbomify.com/MAL-2025-4521/): Malicious code in wise-plugins (npm) (malicious package)
- [MAL-2025-45209](https://insights.sbomify.com/MAL-2025-45209/): Malicious code in mocha-colors-neptunology-innercore (npm) (malicious package)
- [MAL-2025-45208](https://insights.sbomify.com/MAL-2025-45208/): Malicious code in mocaoyao-peifangshu (npm) (malicious package)
- [MAL-2025-45207](https://insights.sbomify.com/MAL-2025-45207/): Malicious code in mobile-legends-free-diamonds-march-2023-working-dklzz (npm) (malicious package)
- [MAL-2025-45206](https://insights.sbomify.com/MAL-2025-45206/): Malicious code in mist-emerald-fsx201-project (npm) (malicious package)
- [MAL-2025-45205](https://insights.sbomify.com/MAL-2025-45205/): Malicious code in miranda-steganography-phoebe-kaus (npm) (malicious package)
- [MAL-2025-45204](https://insights.sbomify.com/MAL-2025-45204/): Malicious code in miranda-spica-regulus-blaze (npm) (malicious package)
- [MAL-2025-45203](https://insights.sbomify.com/MAL-2025-45203/): Malicious code in miranda-soap-loopback-nightmare (npm) (malicious package)
- [MAL-2025-45202](https://insights.sbomify.com/MAL-2025-45202/): Malicious code in miranda-luna-oortcloud-geochronology (npm) (malicious package)
- [MAL-2025-45201](https://insights.sbomify.com/MAL-2025-45201/): Malicious code in miranda-css-minimizer-webpack-plugin-ursa-request (npm) (malicious package)
- [MAL-2025-45200](https://insights.sbomify.com/MAL-2025-45200/): Malicious code in miranda-biogeochemistry-membrane-charon (npm) (malicious package)
- [MAL-2025-4520](https://insights.sbomify.com/MAL-2025-4520/): Malicious code in web3-transaction-fetch (npm) (malicious package)
- [MAL-2025-452](https://insights.sbomify.com/MAL-2025-452/): Malicious code in epicagames-tests (npm) (malicious package)
- [MAL-2025-45199](https://insights.sbomify.com/MAL-2025-45199/): Malicious code in miranda-auth0-saturnology-zenith (npm) (malicious package)
- [MAL-2025-45198](https://insights.sbomify.com/MAL-2025-45198/): Malicious code in mingxiangde-qiji (npm) (malicious package)
- [MAL-2025-45197](https://insights.sbomify.com/MAL-2025-45197/): Malicious code in mingxiang-zhengnian-shouce (npm) (malicious package)
- [MAL-2025-45196](https://insights.sbomify.com/MAL-2025-45196/): Malicious code in mingxiang-wufenzhong (npm) (malicious package)
- [MAL-2025-45195](https://insights.sbomify.com/MAL-2025-45195/): Malicious code in mingri-zhishen (npm) (malicious package)
- [MAL-2025-45194](https://insights.sbomify.com/MAL-2025-45194/): Malicious code in minecoins-free807 (npm) (malicious package)
- [MAL-2025-45193](https://insights.sbomify.com/MAL-2025-45193/): Malicious code in minecoins-free485 (npm) (malicious package)
- [MAL-2025-45192](https://insights.sbomify.com/MAL-2025-45192/): Malicious code in mimide-mimi (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/611/