# Vulnerabilities published in 2025 - [MAL-2025-44561](https://insights.sbomify.com/MAL-2025-44561/): Malicious code in heike-yuying-shouce (npm) (malicious package) - [MAL-2025-44560](https://insights.sbomify.com/MAL-2025-44560/): Malicious code in heike-shuyu-tuwen-cidian (npm) (malicious package) - [MAL-2025-4456](https://insights.sbomify.com/MAL-2025-4456/): Malicious code in web3-evm (npm) (malicious package) - [MAL-2025-44559](https://insights.sbomify.com/MAL-2025-44559/): Malicious code in heike-shentou-biji (npm) (malicious package) - [MAL-2025-44558](https://insights.sbomify.com/MAL-2025-44558/): Malicious code in heike-shegong-dangandai2 (npm) (malicious package) - [MAL-2025-44557](https://insights.sbomify.com/MAL-2025-44557/): Malicious code in heike-shegong-dangandai (npm) (malicious package) - [MAL-2025-44556](https://insights.sbomify.com/MAL-2025-44556/): Malicious code in heike-riji-jingzhuangban (npm) (malicious package) - [MAL-2025-44555](https://insights.sbomify.com/MAL-2025-44555/): Malicious code in heike-jiaoben-quanben (npm) (malicious package) - [MAL-2025-44554](https://insights.sbomify.com/MAL-2025-44554/): Malicious code in heike-cidian-zhongwenban (npm) (malicious package) - [MAL-2025-44553](https://insights.sbomify.com/MAL-2025-44553/): Malicious code in heidong-xiyin (npm) (malicious package) - [MAL-2025-44552](https://insights.sbomify.com/MAL-2025-44552/): Malicious code in hedgehog-waterfall-vsl162-project (npm) (malicious package) - [MAL-2025-44551](https://insights.sbomify.com/MAL-2025-44551/): Malicious code in heartstone-nft-collcetion992 (npm) (malicious package) - [MAL-2025-44550](https://insights.sbomify.com/MAL-2025-44550/): Malicious code in heartstone-nft-collcetion957 (npm) (malicious package) - [MAL-2025-4455](https://insights.sbomify.com/MAL-2025-4455/): Malicious code in vnc-viewer (npm) (malicious package) - [MAL-2025-44549](https://insights.sbomify.com/MAL-2025-44549/): Malicious code in heart-replace-whistle (npm) (malicious package) - [MAL-2025-44548](https://insights.sbomify.com/MAL-2025-44548/): Malicious code in hb-otc (npm) (malicious package) - [MAL-2025-44547](https://insights.sbomify.com/MAL-2025-44547/): Malicious code in hawkingradiation-karma-cosmicsilence-yakutsk (npm) (malicious package) - [MAL-2025-44546](https://insights.sbomify.com/MAL-2025-44546/): Malicious code in harmony_tfhgo_4ay69_fable (npm) (malicious package) - [MAL-2025-44545](https://insights.sbomify.com/MAL-2025-44545/): Malicious code in harmony_ku8yn_h56k2_topaz (npm) (malicious package) - [MAL-2025-44544](https://insights.sbomify.com/MAL-2025-44544/): Malicious code in harmonic_np1hi_vafs1_atlas (npm) (malicious package) - [MAL-2025-44543](https://insights.sbomify.com/MAL-2025-44543/): Malicious code in harmonic_ivoa4_q26er_tundra (npm) (malicious package) - [MAL-2025-44542](https://insights.sbomify.com/MAL-2025-44542/): Malicious code in harbor-fjord-wkz821-project (npm) (malicious package) - [MAL-2025-44541](https://insights.sbomify.com/MAL-2025-44541/): Malicious code in hapi-terser-webpack-plugin-cz-conventional-changelog-despina (npm) (malicious package) - [MAL-2025-44540](https://insights.sbomify.com/MAL-2025-44540/): Malicious code in hapi-mocha-geochemistry-thermosphere (npm) (malicious package) - [MAL-2025-4454](https://insights.sbomify.com/MAL-2025-4454/): Malicious code in vite-plugin-legacy-umd (npm) (malicious package) - [MAL-2025-44539](https://insights.sbomify.com/MAL-2025-44539/): Malicious code in hang-announced-customs (npm) (malicious package) - [MAL-2025-44538](https://insights.sbomify.com/MAL-2025-44538/): Malicious code in handle-pattern-east (npm) (malicious package) - [MAL-2025-44537](https://insights.sbomify.com/MAL-2025-44537/): Malicious code in handle-entire-bow (npm) (malicious package) - [MAL-2025-44536](https://insights.sbomify.com/MAL-2025-44536/): Malicious code in hand-earn-nation (npm) (malicious package) - [MAL-2025-44535](https://insights.sbomify.com/MAL-2025-44535/): Malicious code in hanafi-ubi90-kyuki (npm) (malicious package) - [MAL-2025-44534](https://insights.sbomify.com/MAL-2025-44534/): Malicious code in hanafi-tongseng64-breki (npm) (malicious package) - [MAL-2025-44533](https://insights.sbomify.com/MAL-2025-44533/): Malicious code in hanafi-telur25-kyuki (npm) (malicious package) - [MAL-2025-44532](https://insights.sbomify.com/MAL-2025-44532/): Malicious code in hanafi-telur23-breki (npm) (malicious package) - [MAL-2025-44531](https://insights.sbomify.com/MAL-2025-44531/): Malicious code in hanafi-teh22-breki (npm) (malicious package) - [MAL-2025-44530](https://insights.sbomify.com/MAL-2025-44530/): Malicious code in hanafi-nasipecel31-kyuki (npm) (malicious package) - [MAL-2025-4453](https://insights.sbomify.com/MAL-2025-4453/): Malicious code in vite-plugin-esm-import-extension (npm) (malicious package) - [MAL-2025-44529](https://insights.sbomify.com/MAL-2025-44529/): Malicious code in hanafi-nasicampur87-kyuki (npm) (malicious package) - [MAL-2025-44528](https://insights.sbomify.com/MAL-2025-44528/): Malicious code in hanafi-mieayam9-breki (npm) (malicious package) - [MAL-2025-44527](https://insights.sbomify.com/MAL-2025-44527/): Malicious code in hanafi-mendoan59-breki (npm) (malicious package) - [MAL-2025-44526](https://insights.sbomify.com/MAL-2025-44526/): Malicious code in hanafi-martabak17-breki (npm) (malicious package) - [MAL-2025-44525](https://insights.sbomify.com/MAL-2025-44525/): Malicious code in hanafi-lupis29-kyuki (npm) (malicious package) - [MAL-2025-44524](https://insights.sbomify.com/MAL-2025-44524/): Malicious code in hanafi-lengko74-kyuki (npm) (malicious package) - [MAL-2025-44523](https://insights.sbomify.com/MAL-2025-44523/): Malicious code in hanafi-kue58-kyuki (npm) (malicious package) - [MAL-2025-44522](https://insights.sbomify.com/MAL-2025-44522/): Malicious code in hanafi-kacang72-breki (npm) (malicious package) - [MAL-2025-44521](https://insights.sbomify.com/MAL-2025-44521/): Malicious code in hanafi-enting91-breki (npm) (malicious package) - [MAL-2025-44520](https://insights.sbomify.com/MAL-2025-44520/): Malicious code in hanafi-dradag9-breki (npm) (malicious package) - [MAL-2025-4452](https://insights.sbomify.com/MAL-2025-4452/): Malicious code in vega-embed-v6 (npm) (malicious package) - [MAL-2025-44519](https://insights.sbomify.com/MAL-2025-44519/): Malicious code in hammock-undertow-lsx730-project (npm) (malicious package) - [MAL-2025-44518](https://insights.sbomify.com/MAL-2025-44518/): Malicious code in halley-chariklo-rollup-plugin-xenos (npm) (malicious package) - [MAL-2025-44517](https://insights.sbomify.com/MAL-2025-44517/): Malicious code in halley-barnard-kaus-transport (npm) (malicious package) - [MAL-2025-44516](https://insights.sbomify.com/MAL-2025-44516/): Malicious code in haizi-doushi-laolinghun (npm) (malicious package) - [MAL-2025-44515](https://insights.sbomify.com/MAL-2025-44515/): Malicious code in haidi-xingxue-baogao (npm) (malicious package) - [MAL-2025-44514](https://insights.sbomify.com/MAL-2025-44514/): Malicious code in hadianto-ubi21-kyuki (npm) (malicious package) - [MAL-2025-44513](https://insights.sbomify.com/MAL-2025-44513/): Malicious code in hadianto-tomat64-breki (npm) (malicious package) - [MAL-2025-44512](https://insights.sbomify.com/MAL-2025-44512/): Malicious code in hadianto-toge48-breki (npm) (malicious package) - [MAL-2025-44511](https://insights.sbomify.com/MAL-2025-44511/): Malicious code in hadianto-tahutek39-kyuki (npm) (malicious package) - [MAL-2025-44510](https://insights.sbomify.com/MAL-2025-44510/): Malicious code in hadianto-sambalado24-breki (npm) (malicious package) - [MAL-2025-4451](https://insights.sbomify.com/MAL-2025-4451/): Malicious code in vega-embed-v5 (npm) (malicious package) - [MAL-2025-44509](https://insights.sbomify.com/MAL-2025-44509/): Malicious code in hadianto-rojak82-breki (npm) (malicious package) - [MAL-2025-44508](https://insights.sbomify.com/MAL-2025-44508/): Malicious code in hadianto-nasi70-kyuki (npm) (malicious package) - [MAL-2025-44507](https://insights.sbomify.com/MAL-2025-44507/): Malicious code in hadianto-naget75-breki (npm) (malicious package) - [MAL-2025-44506](https://insights.sbomify.com/MAL-2025-44506/): Malicious code in hadianto-miemee1-kyuki (npm) (malicious package) - [MAL-2025-44505](https://insights.sbomify.com/MAL-2025-44505/): Malicious code in hadianto-lontong93-kyuki (npm) (malicious package) - [MAL-2025-44504](https://insights.sbomify.com/MAL-2025-44504/): Malicious code in hadianto-ketoprak91-breki (npm) (malicious package) - [MAL-2025-44503](https://insights.sbomify.com/MAL-2025-44503/): Malicious code in hadianto-kentang40-breki (npm) (malicious package) - [MAL-2025-44502](https://insights.sbomify.com/MAL-2025-44502/): Malicious code in hadianto-jamblang68-kyuki (npm) (malicious package) - [MAL-2025-44501](https://insights.sbomify.com/MAL-2025-44501/): Malicious code in hadianto-bakso93-breki (npm) (malicious package) - [MAL-2025-44500](https://insights.sbomify.com/MAL-2025-44500/): Malicious code in hadi-tiwul24-breki (npm) (malicious package) - [MAL-2025-4450](https://insights.sbomify.com/MAL-2025-4450/): Malicious code in testsec (npm) (malicious package) - [MAL-2025-445](https://insights.sbomify.com/MAL-2025-445/): Malicious code in epicagames-internal (npm) (malicious package) - [MAL-2025-44499](https://insights.sbomify.com/MAL-2025-44499/): Malicious code in hadi-tek81-kyuki (npm) (malicious package) - [MAL-2025-44498](https://insights.sbomify.com/MAL-2025-44498/): Malicious code in hadi-ronde60-breki (npm) (malicious package) - [MAL-2025-44497](https://insights.sbomify.com/MAL-2025-44497/): Malicious code in hadi-ronde56-kyuki (npm) (malicious package) - [MAL-2025-44496](https://insights.sbomify.com/MAL-2025-44496/): Malicious code in hadi-rawon78-kyuki (npm) (malicious package) - [MAL-2025-44495](https://insights.sbomify.com/MAL-2025-44495/): Malicious code in hadi-peyek32-breki (npm) (malicious package) - [MAL-2025-44494](https://insights.sbomify.com/MAL-2025-44494/): Malicious code in hadi-mieaceh53-breki (npm) (malicious package) - [MAL-2025-44493](https://insights.sbomify.com/MAL-2025-44493/): Malicious code in hadi-mie79-kyuki (npm) (malicious package) - [MAL-2025-44492](https://insights.sbomify.com/MAL-2025-44492/): Malicious code in hadi-menjes3-breki (npm) (malicious package) - [MAL-2025-44491](https://insights.sbomify.com/MAL-2025-44491/): Malicious code in hadi-kue77-kyuki (npm) (malicious package) - [MAL-2025-44490](https://insights.sbomify.com/MAL-2025-44490/): Malicious code in hadi-klipo61-kyuki (npm) (malicious package) - [MAL-2025-4449](https://insights.sbomify.com/MAL-2025-4449/): Malicious code in rainbowkit-sdk (npm) (malicious package) - [MAL-2025-44489](https://insights.sbomify.com/MAL-2025-44489/): Malicious code in hadi-gembus67-kyuki (npm) (malicious package) - [MAL-2025-44488](https://insights.sbomify.com/MAL-2025-44488/): Malicious code in hadi-enting87-breki (npm) (malicious package) - [MAL-2025-44487](https://insights.sbomify.com/MAL-2025-44487/): Malicious code in hadi-bubursumsum71-breki (npm) (malicious package) - [MAL-2025-44486](https://insights.sbomify.com/MAL-2025-44486/): Malicious code in hackcto-erlingyiwu (npm) (malicious package) - [MAL-2025-44485](https://insights.sbomify.com/MAL-2025-44485/): Malicious code in hackcto-erlingyisi (npm) (malicious package) - [MAL-2025-44484](https://insights.sbomify.com/MAL-2025-44484/): Malicious code in hackcto-erlingyisan (npm) (malicious package) - [MAL-2025-44483](https://insights.sbomify.com/MAL-2025-44483/): Malicious code in guowang-wushi-jisi-shiren (npm) (malicious package) - [MAL-2025-44482](https://insights.sbomify.com/MAL-2025-44482/): Malicious code in gunchuangdan-xinlixue (npm) (malicious package) - [MAL-2025-44481](https://insights.sbomify.com/MAL-2025-44481/): Malicious code in guigu-jinshu-quan5ce (npm) (malicious package) - [MAL-2025-44480](https://insights.sbomify.com/MAL-2025-44480/): Malicious code in gudian-yixue-zhanxing (npm) (malicious package) - [MAL-2025-4448](https://insights.sbomify.com/MAL-2025-4448/): Malicious code in pushlabzy (npm) (malicious package) - [MAL-2025-44479](https://insights.sbomify.com/MAL-2025-44479/): Malicious code in guaran (npm) (malicious package) - [MAL-2025-44478](https://insights.sbomify.com/MAL-2025-44478/): Malicious code in guanli-shouce (npm) (malicious package) - [MAL-2025-44477](https://insights.sbomify.com/MAL-2025-44477/): Malicious code in guanli-junhuoku (npm) (malicious package) - [MAL-2025-44476](https://insights.sbomify.com/MAL-2025-44476/): Malicious code in grus-lacerta-mysql-nebula (npm) (malicious package) - [MAL-2025-44475](https://insights.sbomify.com/MAL-2025-44475/): Malicious code in grus-blueshift-protoplanetarydisk-native (npm) (malicious package) - [MAL-2025-44474](https://insights.sbomify.com/MAL-2025-44474/): Malicious code in grove_ulgem_fd7zb_legend (npm) (malicious package) - [MAL-2025-44473](https://insights.sbomify.com/MAL-2025-44473/): Malicious code in grove_jc4t8_sbev2_sapphire (npm) (malicious package) - [MAL-2025-44472](https://insights.sbomify.com/MAL-2025-44472/): Malicious code in grove_7rbpp_iz1i2_joy (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/619/