# Vulnerabilities published in 2025


- [MAL-2025-44741](https://insights.sbomify.com/MAL-2025-44741/): Malicious code in jabbah-eclipse-hexo-pipe (npm) (malicious package)
- [MAL-2025-44740](https://insights.sbomify.com/MAL-2025-44740/): Malicious code in jabbah-antares-protractor-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-4474](https://insights.sbomify.com/MAL-2025-4474/): Malicious code in blur-key (npm) (malicious package)
- [MAL-2025-44739](https://insights.sbomify.com/MAL-2025-44739/): Malicious code in izar-neptune-spectron-webdriver-install (npm) (malicious package)
- [MAL-2025-44738](https://insights.sbomify.com/MAL-2025-44738/): Malicious code in izar-magellan-readable-nodejs (npm) (malicious package)
- [MAL-2025-44737](https://insights.sbomify.com/MAL-2025-44737/): Malicious code in izar-halley-mutation-rigel (npm) (malicious package)
- [MAL-2025-44736](https://insights.sbomify.com/MAL-2025-44736/): Malicious code in iwan-semur87-kyuki (npm) (malicious package)
- [MAL-2025-44735](https://insights.sbomify.com/MAL-2025-44735/): Malicious code in iwan-sambel17-kyuki (npm) (malicious package)
- [MAL-2025-44734](https://insights.sbomify.com/MAL-2025-44734/): Malicious code in iwan-saguer21-breki (npm) (malicious package)
- [MAL-2025-44733](https://insights.sbomify.com/MAL-2025-44733/): Malicious code in iwan-otak-otak6-breki (npm) (malicious package)
- [MAL-2025-44732](https://insights.sbomify.com/MAL-2025-44732/): Malicious code in iwan-nasi78-breki (npm) (malicious package)
- [MAL-2025-44731](https://insights.sbomify.com/MAL-2025-44731/): Malicious code in iwan-mangut20-breki (npm) (malicious package)
- [MAL-2025-44730](https://insights.sbomify.com/MAL-2025-44730/): Malicious code in iwan-klentik23-breki (npm) (malicious package)
- [MAL-2025-4473](https://insights.sbomify.com/MAL-2025-4473/): Malicious code in bandwith-sdk (npm) (malicious package)
- [MAL-2025-44729](https://insights.sbomify.com/MAL-2025-44729/): Malicious code in iwan-enting91-breki (npm) (malicious package)
- [MAL-2025-44728](https://insights.sbomify.com/MAL-2025-44728/): Malicious code in iwan-dradag76-breki (npm) (malicious package)
- [MAL-2025-44727](https://insights.sbomify.com/MAL-2025-44727/): Malicious code in iwan-bubur58-breki (npm) (malicious package)
- [MAL-2025-44726](https://insights.sbomify.com/MAL-2025-44726/): Malicious code in iwan-bakwan81-kyuki (npm) (malicious package)
- [MAL-2025-44725](https://insights.sbomify.com/MAL-2025-44725/): Malicious code in ivy_mrbx5_tv2ls_yarn (npm) (malicious package)
- [MAL-2025-44724](https://insights.sbomify.com/MAL-2025-44724/): Malicious code in itself-country-orange (npm) (malicious package)
- [MAL-2025-44723](https://insights.sbomify.com/MAL-2025-44723/): Malicious code in isostasy-wezen-phylogenetics-solis (npm) (malicious package)
- [MAL-2025-44722](https://insights.sbomify.com/MAL-2025-44722/): Malicious code in isostasy-config-astrophysics-stop (npm) (malicious package)
- [MAL-2025-44721](https://insights.sbomify.com/MAL-2025-44721/): Malicious code in island-peacock-hro883-project (npm) (malicious package)
- [MAL-2025-44720](https://insights.sbomify.com/MAL-2025-44720/): Malicious code in irma-soto57-breki (npm) (malicious package)
- [MAL-2025-4472](https://insights.sbomify.com/MAL-2025-4472/): Malicious code in athira-windows-x64 (npm) (malicious package)
- [MAL-2025-44719](https://insights.sbomify.com/MAL-2025-44719/): Malicious code in irma-rendang31-breki (npm) (malicious package)
- [MAL-2025-44718](https://insights.sbomify.com/MAL-2025-44718/): Malicious code in irma-rangginang89-breki (npm) (malicious package)
- [MAL-2025-44717](https://insights.sbomify.com/MAL-2025-44717/): Malicious code in irma-martabak7-kyuki (npm) (malicious package)
- [MAL-2025-44716](https://insights.sbomify.com/MAL-2025-44716/): Malicious code in irma-kupang100-breki (npm) (malicious package)
- [MAL-2025-44715](https://insights.sbomify.com/MAL-2025-44715/): Malicious code in irma-kue75-breki (npm) (malicious package)
- [MAL-2025-44714](https://insights.sbomify.com/MAL-2025-44714/): Malicious code in irma-klentik17-breki (npm) (malicious package)
- [MAL-2025-44713](https://insights.sbomify.com/MAL-2025-44713/): Malicious code in irma-gorengan76-breki (npm) (malicious package)
- [MAL-2025-44712](https://insights.sbomify.com/MAL-2025-44712/): Malicious code in irma-getas93-kyuki (npm) (malicious package)
- [MAL-2025-44711](https://insights.sbomify.com/MAL-2025-44711/): Malicious code in irma-bika60-breki (npm) (malicious package)
- [MAL-2025-44710](https://insights.sbomify.com/MAL-2025-44710/): Malicious code in iota-terser-webpack-plugin-hermes-postcss (npm) (malicious package)
- [MAL-2025-4471](https://insights.sbomify.com/MAL-2025-4471/): Malicious code in athira-windows-arm64 (npm) (malicious package)
- [MAL-2025-44709](https://insights.sbomify.com/MAL-2025-44709/): Malicious code in iota-sync-json-andromeda (npm) (malicious package)
- [MAL-2025-44708](https://insights.sbomify.com/MAL-2025-44708/): Malicious code in iota-dione-membrane-browserify (npm) (malicious package)
- [MAL-2025-44707](https://insights.sbomify.com/MAL-2025-44707/): Malicious code in ionosphere-ursa-asthenosphere-mongoose (npm) (malicious package)
- [MAL-2025-44706](https://insights.sbomify.com/MAL-2025-44706/): Malicious code in invent-with-python-zh (npm) (malicious package)
- [MAL-2025-44705](https://insights.sbomify.com/MAL-2025-44705/): Malicious code in internal-helper-utils (npm) (malicious package)
- [MAL-2025-44704](https://insights.sbomify.com/MAL-2025-44704/): Malicious code in interferometry-install-phenomic-mysql (npm) (malicious package)
- [MAL-2025-44703](https://insights.sbomify.com/MAL-2025-44703/): Malicious code in instead-typical-growth (npm) (malicious package)
- [MAL-2025-44702](https://insights.sbomify.com/MAL-2025-44702/): Malicious code in install-eleventy-cluster-element-ui (npm) (malicious package)
- [MAL-2025-44701](https://insights.sbomify.com/MAL-2025-44701/): Malicious code in inline-dep (npm) (malicious package)
- [MAL-2025-44700](https://insights.sbomify.com/MAL-2025-44700/): Malicious code in ini-nodejs-speleology-filament (npm) (malicious package)
- [MAL-2025-4470](https://insights.sbomify.com/MAL-2025-4470/): Malicious code in athira-linux-x64 (npm) (malicious package)
- [MAL-2025-447](https://insights.sbomify.com/MAL-2025-447/): Malicious code in epicagames-logger (npm) (malicious package)
- [MAL-2025-44699](https://insights.sbomify.com/MAL-2025-44699/): Malicious code in ini-envconfig-less-loader-hadron (npm) (malicious package)
- [MAL-2025-44698](https://insights.sbomify.com/MAL-2025-44698/): Malicious code in infinity-dove-qev776-project (npm) (malicious package)
- [MAL-2025-44697](https://insights.sbomify.com/MAL-2025-44697/): Malicious code in individual-correct-manner (npm) (malicious package)
- [MAL-2025-44696](https://insights.sbomify.com/MAL-2025-44696/): Malicious code in indigo_ngdyn_cwmlg_crown (npm) (malicious package)
- [MAL-2025-44695](https://insights.sbomify.com/MAL-2025-44695/): Malicious code in india-nectarine-golf-grpfe (npm) (malicious package)
- [MAL-2025-44694](https://insights.sbomify.com/MAL-2025-44694/): Malicious code in india-mango-oscar-tucca (npm) (malicious package)
- [MAL-2025-44693](https://insights.sbomify.com/MAL-2025-44693/): Malicious code in india-date-watermelon-aeufe (npm) (malicious package)
- [MAL-2025-44692](https://insights.sbomify.com/MAL-2025-44692/): Malicious code in india-apple-victor-nrhoy (npm) (malicious package)
- [MAL-2025-44691](https://insights.sbomify.com/MAL-2025-44691/): Malicious code in indah-pecel69-breki (npm) (malicious package)
- [MAL-2025-44690](https://insights.sbomify.com/MAL-2025-44690/): Malicious code in indah-nasi25-breki (npm) (malicious package)
- [MAL-2025-4469](https://insights.sbomify.com/MAL-2025-4469/): Malicious code in athira-linux-arm64 (npm) (malicious package)
- [MAL-2025-44689](https://insights.sbomify.com/MAL-2025-44689/): Malicious code in indah-lapis25-kyuki (npm) (malicious package)
- [MAL-2025-44688](https://insights.sbomify.com/MAL-2025-44688/): Malicious code in indah-kue98-breki (npm) (malicious package)
- [MAL-2025-44687](https://insights.sbomify.com/MAL-2025-44687/): Malicious code in indah-kue86-kyuki (npm) (malicious package)
- [MAL-2025-44686](https://insights.sbomify.com/MAL-2025-44686/): Malicious code in indah-klanting18-breki (npm) (malicious package)
- [MAL-2025-44685](https://insights.sbomify.com/MAL-2025-44685/): Malicious code in indah-kepok56-breki (npm) (malicious package)
- [MAL-2025-44684](https://insights.sbomify.com/MAL-2025-44684/): Malicious code in indah-ikan5-breki (npm) (malicious package)
- [MAL-2025-44683](https://insights.sbomify.com/MAL-2025-44683/): Malicious code in indah-enting86-kyuki (npm) (malicious package)
- [MAL-2025-44682](https://insights.sbomify.com/MAL-2025-44682/): Malicious code in indah-enting5-breki (npm) (malicious package)
- [MAL-2025-44681](https://insights.sbomify.com/MAL-2025-44681/): Malicious code in importance-cake-felt (npm) (malicious package)
- [MAL-2025-44680](https://insights.sbomify.com/MAL-2025-44680/): Malicious code in illusion_wmizx_9tlmb_unity (npm) (malicious package)
- [MAL-2025-4468](https://insights.sbomify.com/MAL-2025-4468/): Malicious code in athira-darwin-x64 (npm) (malicious package)
- [MAL-2025-44679](https://insights.sbomify.com/MAL-2025-44679/): Malicious code in igloo-frost-jrf806-project (npm) (malicious package)
- [MAL-2025-44678](https://insights.sbomify.com/MAL-2025-44678/): Malicious code in ida-ubi24-breki (npm) (malicious package)
- [MAL-2025-44677](https://insights.sbomify.com/MAL-2025-44677/): Malicious code in ida-telurtahu34-breki (npm) (malicious package)
- [MAL-2025-44676](https://insights.sbomify.com/MAL-2025-44676/): Malicious code in ida-teh86-kyuki (npm) (malicious package)
- [MAL-2025-44675](https://insights.sbomify.com/MAL-2025-44675/): Malicious code in ida-serimuka67-breki (npm) (malicious package)
- [MAL-2025-44674](https://insights.sbomify.com/MAL-2025-44674/): Malicious code in ida-sambel39-kyuki (npm) (malicious package)
- [MAL-2025-44673](https://insights.sbomify.com/MAL-2025-44673/): Malicious code in ida-sambalado36-breki (npm) (malicious package)
- [MAL-2025-44672](https://insights.sbomify.com/MAL-2025-44672/): Malicious code in ida-rangginang45-breki (npm) (malicious package)
- [MAL-2025-44671](https://insights.sbomify.com/MAL-2025-44671/): Malicious code in ida-miebogor4-breki (npm) (malicious package)
- [MAL-2025-44670](https://insights.sbomify.com/MAL-2025-44670/): Malicious code in ida-mieaceh45-breki (npm) (malicious package)
- [MAL-2025-4467](https://insights.sbomify.com/MAL-2025-4467/): Malicious code in athira-darwin-arm64 (npm) (malicious package)
- [MAL-2025-44669](https://insights.sbomify.com/MAL-2025-44669/): Malicious code in ida-menjes17-kyuki (npm) (malicious package)
- [MAL-2025-44668](https://insights.sbomify.com/MAL-2025-44668/): Malicious code in ida-liwet15-kyuki (npm) (malicious package)
- [MAL-2025-44667](https://insights.sbomify.com/MAL-2025-44667/): Malicious code in ida-kolak84-kyuki (npm) (malicious package)
- [MAL-2025-44666](https://insights.sbomify.com/MAL-2025-44666/): Malicious code in ida-bakso42-breki (npm) (malicious package)
- [MAL-2025-44665](https://insights.sbomify.com/MAL-2025-44665/): Malicious code in icicle-eagle-zga550-project (npm) (malicious package)
- [MAL-2025-44664](https://insights.sbomify.com/MAL-2025-44664/): Malicious code in ice-thank-root (npm) (malicious package)
- [MAL-2025-44663](https://insights.sbomify.com/MAL-2025-44663/): Malicious code in i-get-free-coin-master-spin-today-dkldzd (npm) (malicious package)
- [MAL-2025-44662](https://insights.sbomify.com/MAL-2025-44662/): Malicious code in hyperion-markdown-pdf-supervisor-selenium (npm) (malicious package)
- [MAL-2025-44661](https://insights.sbomify.com/MAL-2025-44661/): Malicious code in hyperion-despina-process-loopback (npm) (malicious package)
- [MAL-2025-44660](https://insights.sbomify.com/MAL-2025-44660/): Malicious code in hydrogeology-public-hapi-bootes (npm) (malicious package)
- [MAL-2025-4466](https://insights.sbomify.com/MAL-2025-4466/): Malicious code in athira (npm) (malicious package)
- [MAL-2025-44659](https://insights.sbomify.com/MAL-2025-44659/): Malicious code in hydrogeology-antares-hydrogeology-chromedriver (npm) (malicious package)
- [MAL-2025-44658](https://insights.sbomify.com/MAL-2025-44658/): Malicious code in hydra-gatsby-fomalhaut-sync (npm) (malicious package)
- [MAL-2025-44657](https://insights.sbomify.com/MAL-2025-44657/): Malicious code in hydra-command-cz-conventional-changelog-resolvers (npm) (malicious package)
- [MAL-2025-44656](https://insights.sbomify.com/MAL-2025-44656/): Malicious code in husky-xenos-lint-staged-dotenv (npm) (malicious package)
- [MAL-2025-44655](https://insights.sbomify.com/MAL-2025-44655/): Malicious code in husky-registry-biomimicry-indus (npm) (malicious package)
- [MAL-2025-44654](https://insights.sbomify.com/MAL-2025-44654/): Malicious code in hush_ix0lp_ohi9t_utopia (npm) (malicious package)
- [MAL-2025-44653](https://insights.sbomify.com/MAL-2025-44653/): Malicious code in hush_h75h0_ghoj3_elephant (npm) (malicious package)
- [MAL-2025-44652](https://insights.sbomify.com/MAL-2025-44652/): Malicious code in hush_fq7xq_ixdms_xenolith (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/617/