# Vulnerabilities published in 2025


- [MAL-2025-44651](https://insights.sbomify.com/MAL-2025-44651/): Malicious code in husband-welcome-past (npm) (malicious package)
- [MAL-2025-44650](https://insights.sbomify.com/MAL-2025-44650/): Malicious code in huoxi-mofa (npm) (malicious package)
- [MAL-2025-4465](https://insights.sbomify.com/MAL-2025-4465/): Malicious code in andes-landings (npm) (malicious package)
- [MAL-2025-44649](https://insights.sbomify.com/MAL-2025-44649/): Malicious code in hundun-mofa-xuexi-shouce (npm) (malicious package)
- [MAL-2025-44648](https://insights.sbomify.com/MAL-2025-44648/): Malicious code in huixuan-yuzhou-vol2a (npm) (malicious package)
- [MAL-2025-44647](https://insights.sbomify.com/MAL-2025-44647/): Malicious code in hugo-xenos-soap-deneb (npm) (malicious package)
- [MAL-2025-44646](https://insights.sbomify.com/MAL-2025-44646/): Malicious code in hugo-stop-callback-bootstrap (npm) (malicious package)
- [MAL-2025-44645](https://insights.sbomify.com/MAL-2025-44645/): Malicious code in hudu-mofa (npm) (malicious package)
- [MAL-2025-44644](https://insights.sbomify.com/MAL-2025-44644/): Malicious code in huaying-taluo-zhidao-shouce (npm) (malicious package)
- [MAL-2025-44643](https://insights.sbomify.com/MAL-2025-44643/): Malicious code in huashu-guanli-daquan-langji (npm) (malicious package)
- [MAL-2025-44642](https://insights.sbomify.com/MAL-2025-44642/): Malicious code in huanben-guizong-liuyao-yuce-zhinan (npm) (malicious package)
- [MAL-2025-44641](https://insights.sbomify.com/MAL-2025-44641/): Malicious code in huajing-liaoyushu (npm) (malicious package)
- [MAL-2025-44640](https://insights.sbomify.com/MAL-2025-44640/): Malicious code in huainanren-nvren-wufa-diyude-youhuo (npm) (malicious package)
- [MAL-2025-4464](https://insights.sbomify.com/MAL-2025-4464/): Malicious code in airdrop-interface-markets (npm) (malicious package)
- [MAL-2025-44639](https://insights.sbomify.com/MAL-2025-44639/): Malicious code in huainanhai-riji (npm) (malicious package)
- [MAL-2025-44638](https://insights.sbomify.com/MAL-2025-44638/): Malicious code in huaidan-zhidao (npm) (malicious package)
- [MAL-2025-44637](https://insights.sbomify.com/MAL-2025-44637/): Malicious code in huadiaodeqian-douhui-ziji-liuhuilai (npm) (malicious package)
- [MAL-2025-44636](https://insights.sbomify.com/MAL-2025-44636/): Malicious code in html-webpack-plugin-middleware-plutology-impulse (npm) (malicious package)
- [MAL-2025-44635](https://insights.sbomify.com/MAL-2025-44635/): Malicious code in html-webpack-plugin-babel-express-inquirer (npm) (malicious package)
- [MAL-2025-44634](https://insights.sbomify.com/MAL-2025-44634/): Malicious code in how-to-win-free-fortnite-v-bucks-zfzefzf (npm) (malicious package)
- [MAL-2025-44633](https://insights.sbomify.com/MAL-2025-44633/): Malicious code in how-to-get-v-bucks-for-free-zdkkef (npm) (malicious package)
- [MAL-2025-44632](https://insights.sbomify.com/MAL-2025-44632/): Malicious code in how-to-get-free-spins-in-coin-master-2023-dkfkf (npm) (malicious package)
- [MAL-2025-44631](https://insights.sbomify.com/MAL-2025-44631/): Malicious code in how-to-get-free-coin-master-spins-april-2023-djzdk (npm) (malicious package)
- [MAL-2025-44630](https://insights.sbomify.com/MAL-2025-44630/): Malicious code in how-to-generate-robux-codes-2023-dfklzd (npm) (malicious package)
- [MAL-2025-4463](https://insights.sbomify.com/MAL-2025-4463/): Malicious code in airdrop-interface-ad (npm) (malicious package)
- [MAL-2025-44629](https://insights.sbomify.com/MAL-2025-44629/): Malicious code in how-i-get-robux-codes-march-2023-dkzzdarg (npm) (malicious package)
- [MAL-2025-44628](https://insights.sbomify.com/MAL-2025-44628/): Malicious code in how-i-get-fortnite-vbucks-codes-for-free-jzldlz (npm) (malicious package)
- [MAL-2025-44627](https://insights.sbomify.com/MAL-2025-44627/): Malicious code in hotel-ugli-oscar-ylhqa (npm) (malicious package)
- [MAL-2025-44626](https://insights.sbomify.com/MAL-2025-44626/): Malicious code in hotel-sierra-charlie-agdeg (npm) (malicious package)
- [MAL-2025-44625](https://insights.sbomify.com/MAL-2025-44625/): Malicious code in hotel-november-orange-teqks (npm) (malicious package)
- [MAL-2025-44624](https://insights.sbomify.com/MAL-2025-44624/): Malicious code in hotel-lima-charlie-gwkmz (npm) (malicious package)
- [MAL-2025-44623](https://insights.sbomify.com/MAL-2025-44623/): Malicious code in hotel-elderberry-romeo-saxfp (npm) (malicious package)
- [MAL-2025-44622](https://insights.sbomify.com/MAL-2025-44622/): Malicious code in hot-buried-mental (npm) (malicious package)
- [MAL-2025-44621](https://insights.sbomify.com/MAL-2025-44621/): Malicious code in horizon_1pxfg_lxkto_limestone (npm) (malicious package)
- [MAL-2025-44620](https://insights.sbomify.com/MAL-2025-44620/): Malicious code in horizon-nebula-xhj744-project (npm) (malicious package)
- [MAL-2025-4462](https://insights.sbomify.com/MAL-2025-4462/): Malicious code in @cyb3rsh4ykh/neondatabase (npm) (malicious package)
- [MAL-2025-44619](https://insights.sbomify.com/MAL-2025-44619/): Malicious code in hongwan-juexing-v3 (npm) (malicious package)
- [MAL-2025-44618](https://insights.sbomify.com/MAL-2025-44618/): Malicious code in hongse-huanghou (npm) (malicious package)
- [MAL-2025-44617](https://insights.sbomify.com/MAL-2025-44617/): Malicious code in honeydew-watermelon-golf-zungw (npm) (malicious package)
- [MAL-2025-44616](https://insights.sbomify.com/MAL-2025-44616/): Malicious code in honeydew-uniform-india-molfp (npm) (malicious package)
- [MAL-2025-44615](https://insights.sbomify.com/MAL-2025-44615/): Malicious code in honeydew-ugli-zulu-bzgbp (npm) (malicious package)
- [MAL-2025-44614](https://insights.sbomify.com/MAL-2025-44614/): Malicious code in honeydew-strawberry-uniform-wgptz (npm) (malicious package)
- [MAL-2025-44613](https://insights.sbomify.com/MAL-2025-44613/): Malicious code in honeydew-strawberry-elderberry-hvlik (npm) (malicious package)
- [MAL-2025-44612](https://insights.sbomify.com/MAL-2025-44612/): Malicious code in honeydew-elderberry-vanilla-wjwxg (npm) (malicious package)
- [MAL-2025-44611](https://insights.sbomify.com/MAL-2025-44611/): Malicious code in honeydew-echo-raspberry-liuag (npm) (malicious package)
- [MAL-2025-44610](https://insights.sbomify.com/MAL-2025-44610/): Malicious code in honeydew-alpha-raspberry-pgmdr (npm) (malicious package)
- [MAL-2025-4461](https://insights.sbomify.com/MAL-2025-4461/): Malicious code in arc-offsec-custom-library (npm) (malicious package)
- [MAL-2025-44609](https://insights.sbomify.com/MAL-2025-44609/): Malicious code in honey-unicorn-kso579-project (npm) (malicious package)
- [MAL-2025-44608](https://insights.sbomify.com/MAL-2025-44608/): Malicious code in holography-ursa-restart-jupiter (npm) (malicious package)
- [MAL-2025-44607](https://insights.sbomify.com/MAL-2025-44607/): Malicious code in holography-karma-plutology-cryonics (npm) (malicious package)
- [MAL-2025-44606](https://insights.sbomify.com/MAL-2025-44606/): Malicious code in holography-australis-pavo-magnetar (npm) (malicious package)
- [MAL-2025-44605](https://insights.sbomify.com/MAL-2025-44605/): Malicious code in hollow-iceberg-uif020-project (npm) (malicious package)
- [MAL-2025-44604](https://insights.sbomify.com/MAL-2025-44604/): Malicious code in hill-bound-write (npm) (malicious package)
- [MAL-2025-44603](https://insights.sbomify.com/MAL-2025-44603/): Malicious code in high-perhaps-final (npm) (malicious package)
- [MAL-2025-44602](https://insights.sbomify.com/MAL-2025-44602/): Malicious code in higgs-server-avior-yildun (npm) (malicious package)
- [MAL-2025-44601](https://insights.sbomify.com/MAL-2025-44601/): Malicious code in hercules-grus-css-loader-package (npm) (malicious package)
- [MAL-2025-44600](https://insights.sbomify.com/MAL-2025-44600/): Malicious code in heoubonuobonuode-xingfu-qiji (npm) (malicious package)
- [MAL-2025-4460](https://insights.sbomify.com/MAL-2025-4460/): Malicious code in winstons-logger (npm) (malicious package)
- [MAL-2025-446](https://insights.sbomify.com/MAL-2025-446/): Malicious code in epicagames-jira (npm) (malicious package)
- [MAL-2025-44599](https://insights.sbomify.com/MAL-2025-44599/): Malicious code in hendra-tumis47-breki (npm) (malicious package)
- [MAL-2025-44598](https://insights.sbomify.com/MAL-2025-44598/): Malicious code in hendra-toge22-kyuki (npm) (malicious package)
- [MAL-2025-44597](https://insights.sbomify.com/MAL-2025-44597/): Malicious code in hendra-tempe93-breki (npm) (malicious package)
- [MAL-2025-44596](https://insights.sbomify.com/MAL-2025-44596/): Malicious code in hendra-sambel82-kyuki (npm) (malicious package)
- [MAL-2025-44595](https://insights.sbomify.com/MAL-2025-44595/): Malicious code in hendra-pecel30-kyuki (npm) (malicious package)
- [MAL-2025-44594](https://insights.sbomify.com/MAL-2025-44594/): Malicious code in hendra-miemee66-breki (npm) (malicious package)
- [MAL-2025-44593](https://insights.sbomify.com/MAL-2025-44593/): Malicious code in hendra-miebogor42-kyuki (npm) (malicious package)
- [MAL-2025-44592](https://insights.sbomify.com/MAL-2025-44592/): Malicious code in hendra-kue62-breki (npm) (malicious package)
- [MAL-2025-44591](https://insights.sbomify.com/MAL-2025-44591/): Malicious code in hendra-donat44-kyuki (npm) (malicious package)
- [MAL-2025-44590](https://insights.sbomify.com/MAL-2025-44590/): Malicious code in helmet-antares-meissa-koa (npm) (malicious package)
- [MAL-2025-4459](https://insights.sbomify.com/MAL-2025-4459/): Malicious code in winston-core (npm) (malicious package)
- [MAL-2025-44589](https://insights.sbomify.com/MAL-2025-44589/): Malicious code in hello-arc-windows (npm) (malicious package)
- [MAL-2025-44588](https://insights.sbomify.com/MAL-2025-44588/): Malicious code in hello-arc (npm) (malicious package)
- [MAL-2025-44587](https://insights.sbomify.com/MAL-2025-44587/): Malicious code in helios-magellan-server-helmet (npm) (malicious package)
- [MAL-2025-44586](https://insights.sbomify.com/MAL-2025-44586/): Malicious code in heliophysics-sedimentology-paleoclimatology-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-44585](https://insights.sbomify.com/MAL-2025-44585/): Malicious code in heliophysics-cosmochemistry-xenobiology-gravitationalwave (npm) (malicious package)
- [MAL-2025-44584](https://insights.sbomify.com/MAL-2025-44584/): Malicious code in heliophysics-comet-rollup-plugin-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-44583](https://insights.sbomify.com/MAL-2025-44583/): Malicious code in heka-hercules-react-bootstrap-darkenergy (npm) (malicious package)
- [MAL-2025-44582](https://insights.sbomify.com/MAL-2025-44582/): Malicious code in heix-heike-rumen (npm) (malicious package)
- [MAL-2025-44581](https://insights.sbomify.com/MAL-2025-44581/): Malicious code in heix-erlingyiyi-part4 (npm) (malicious package)
- [MAL-2025-44580](https://insights.sbomify.com/MAL-2025-44580/): Malicious code in heix-erlinglingwu-part4 (npm) (malicious package)
- [MAL-2025-4458](https://insights.sbomify.com/MAL-2025-4458/): Malicious code in webmaker-sso (npm) (malicious package)
- [MAL-2025-44579](https://insights.sbomify.com/MAL-2025-44579/): Malicious code in heix-erlinglingwu-part3 (npm) (malicious package)
- [MAL-2025-44578](https://insights.sbomify.com/MAL-2025-44578/): Malicious code in heix-erlinglingwu-part2 (npm) (malicious package)
- [MAL-2025-44577](https://insights.sbomify.com/MAL-2025-44577/): Malicious code in heix-erlinglingwu-part1 (npm) (malicious package)
- [MAL-2025-44576](https://insights.sbomify.com/MAL-2025-44576/): Malicious code in heix-erlinglingsan-part6 (npm) (malicious package)
- [MAL-2025-44575](https://insights.sbomify.com/MAL-2025-44575/): Malicious code in heix-erlinglingsan-part5 (npm) (malicious package)
- [MAL-2025-44574](https://insights.sbomify.com/MAL-2025-44574/): Malicious code in heix-erlinglingsan-part4 (npm) (malicious package)
- [MAL-2025-44573](https://insights.sbomify.com/MAL-2025-44573/): Malicious code in heix-erlinglingsan-part3 (npm) (malicious package)
- [MAL-2025-44572](https://insights.sbomify.com/MAL-2025-44572/): Malicious code in heix-erlinglingqi-part4 (npm) (malicious package)
- [MAL-2025-44571](https://insights.sbomify.com/MAL-2025-44571/): Malicious code in heix-erlinglingqi-part3 (npm) (malicious package)
- [MAL-2025-44570](https://insights.sbomify.com/MAL-2025-44570/): Malicious code in heix-erlinglingqi-part2 (npm) (malicious package)
- [MAL-2025-4457](https://insights.sbomify.com/MAL-2025-4457/): Malicious code in web3ether (npm) (malicious package)
- [MAL-2025-44569](https://insights.sbomify.com/MAL-2025-44569/): Malicious code in heix-erlinglingqi-part1 (npm) (malicious package)
- [MAL-2025-44568](https://insights.sbomify.com/MAL-2025-44568/): Malicious code in heix-erlinglingliu-part4 (npm) (malicious package)
- [MAL-2025-44567](https://insights.sbomify.com/MAL-2025-44567/): Malicious code in heix-erlinglingliu-part3 (npm) (malicious package)
- [MAL-2025-44566](https://insights.sbomify.com/MAL-2025-44566/): Malicious code in heix-erlinglingliu-part2 (npm) (malicious package)
- [MAL-2025-44565](https://insights.sbomify.com/MAL-2025-44565/): Malicious code in heix-erlinglingliu-part1 (npm) (malicious package)
- [MAL-2025-44564](https://insights.sbomify.com/MAL-2025-44564/): Malicious code in heix-erlinglinger-part2 (npm) (malicious package)
- [MAL-2025-44563](https://insights.sbomify.com/MAL-2025-44563/): Malicious code in heix-erlinglinger-part1 (npm) (malicious package)
- [MAL-2025-44562](https://insights.sbomify.com/MAL-2025-44562/): Malicious code in heike-zhuliu-gongji-daquan (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/618/