# Vulnerabilities published in 2025


- [MAL-2025-44291](https://insights.sbomify.com/MAL-2025-44291/): Malicious code in fortnite-free-gi-ft-car-ds-2023 (npm) (malicious package)
- [MAL-2025-44290](https://insights.sbomify.com/MAL-2025-44290/): Malicious code in fornax-stream-elara-miranda (npm) (malicious package)
- [MAL-2025-4429](https://insights.sbomify.com/MAL-2025-4429/): Malicious code in @mkto/analytics-provider (npm) (malicious package)
- [MAL-2025-44289](https://insights.sbomify.com/MAL-2025-44289/): Malicious code in fornax-regulus-hermes-lightyear (npm) (malicious package)
- [MAL-2025-44288](https://insights.sbomify.com/MAL-2025-44288/): Malicious code in fornax-callisto-query-async (npm) (malicious package)
- [MAL-2025-44287](https://insights.sbomify.com/MAL-2025-44287/): Malicious code in fork-superflare-multiverse-spectron (npm) (malicious package)
- [MAL-2025-44286](https://insights.sbomify.com/MAL-2025-44286/): Malicious code in foreign-thank-stuck (npm) (malicious package)
- [MAL-2025-44285](https://insights.sbomify.com/MAL-2025-44285/): Malicious code in follow-monkey-fallen (npm) (malicious package)
- [MAL-2025-44284](https://insights.sbomify.com/MAL-2025-44284/): Malicious code in flight-rest-successful (npm) (malicious package)
- [MAL-2025-44283](https://insights.sbomify.com/MAL-2025-44283/): Malicious code in flare_whg0c_9c3rs_obelisk (npm) (malicious package)
- [MAL-2025-44282](https://insights.sbomify.com/MAL-2025-44282/): Malicious code in flare-perseus-australis-spica (npm) (malicious package)
- [MAL-2025-44281](https://insights.sbomify.com/MAL-2025-44281/): Malicious code in flare-changelog-leda-lynx (npm) (malicious package)
- [MAL-2025-44280](https://insights.sbomify.com/MAL-2025-44280/): Malicious code in fjord-vulture-zxg871-project (npm) (malicious package)
- [MAL-2025-4428](https://insights.sbomify.com/MAL-2025-4428/): Malicious code in elysium-checkout (npm) (malicious package)
- [MAL-2025-44279](https://insights.sbomify.com/MAL-2025-44279/): Malicious code in fjord-gorilla-ciz332-project (npm) (malicious package)
- [MAL-2025-44278](https://insights.sbomify.com/MAL-2025-44278/): Malicious code in five-past-hit (npm) (malicious package)
- [MAL-2025-44277](https://insights.sbomify.com/MAL-2025-44277/): Malicious code in fitri-rendang50-kyuki (npm) (malicious package)
- [MAL-2025-44276](https://insights.sbomify.com/MAL-2025-44276/): Malicious code in fitri-pecel46-kyuki (npm) (malicious package)
- [MAL-2025-44275](https://insights.sbomify.com/MAL-2025-44275/): Malicious code in fitri-oblok54-breki (npm) (malicious package)
- [MAL-2025-44274](https://insights.sbomify.com/MAL-2025-44274/): Malicious code in fitri-lutis86-breki (npm) (malicious package)
- [MAL-2025-44273](https://insights.sbomify.com/MAL-2025-44273/): Malicious code in fitri-klanting86-breki (npm) (malicious package)
- [MAL-2025-44272](https://insights.sbomify.com/MAL-2025-44272/): Malicious code in fitri-kembang95-kyuki (npm) (malicious package)
- [MAL-2025-44271](https://insights.sbomify.com/MAL-2025-44271/): Malicious code in fitri-kembang10-kyuki (npm) (malicious package)
- [MAL-2025-44270](https://insights.sbomify.com/MAL-2025-44270/): Malicious code in fitri-esdoger37-breki (npm) (malicious package)
- [MAL-2025-4427](https://insights.sbomify.com/MAL-2025-4427/): Malicious code in @fmr-pr103625/apex-core (npm) (malicious package)
- [MAL-2025-44269](https://insights.sbomify.com/MAL-2025-44269/): Malicious code in fitri-brengkes34-kyuki (npm) (malicious package)
- [MAL-2025-44268](https://insights.sbomify.com/MAL-2025-44268/): Malicious code in fitri-bakwan87-kyuki (npm) (malicious package)
- [MAL-2025-44267](https://insights.sbomify.com/MAL-2025-44267/): Malicious code in fireworks_6gxt8_a9lmd_whisper (npm) (malicious package)
- [MAL-2025-44266](https://insights.sbomify.com/MAL-2025-44266/): Malicious code in fill-kind-require (npm) (malicious package)
- [MAL-2025-44265](https://insights.sbomify.com/MAL-2025-44265/): Malicious code in filigron-icon (npm) (malicious package)
- [MAL-2025-44264](https://insights.sbomify.com/MAL-2025-44264/): Malicious code in filament-resolvers-quito-jabbah (npm) (malicious package)
- [MAL-2025-44263](https://insights.sbomify.com/MAL-2025-44263/): Malicious code in filament-json-native-webdriver-manager (npm) (malicious package)
- [MAL-2025-44262](https://insights.sbomify.com/MAL-2025-44262/): Malicious code in filament-archaeoastronomy-unuk-nightwatch (npm) (malicious package)
- [MAL-2025-44261](https://insights.sbomify.com/MAL-2025-44261/): Malicious code in figures-local-vulcan-janus (npm) (malicious package)
- [MAL-2025-44260](https://insights.sbomify.com/MAL-2025-44260/): Malicious code in figures-fornax-isostasy-uglify-js (npm) (malicious package)
- [MAL-2025-4426](https://insights.sbomify.com/MAL-2025-4426/): Malicious code in mirror-logger-utils (npm) (malicious package)
- [MAL-2025-44259](https://insights.sbomify.com/MAL-2025-44259/): Malicious code in fig-uniform-vanilla-uoqiz (npm) (malicious package)
- [MAL-2025-44258](https://insights.sbomify.com/MAL-2025-44258/): Malicious code in fig-raspberry-quebec-wurfi (npm) (malicious package)
- [MAL-2025-44257](https://insights.sbomify.com/MAL-2025-44257/): Malicious code in fig-mango-banana-rgrxx (npm) (malicious package)
- [MAL-2025-44256](https://insights.sbomify.com/MAL-2025-44256/): Malicious code in fig-kiwi-romeo-iomwd (npm) (malicious package)
- [MAL-2025-44255](https://insights.sbomify.com/MAL-2025-44255/): Malicious code in fig-india-tangerine-smhuh (npm) (malicious package)
- [MAL-2025-44254](https://insights.sbomify.com/MAL-2025-44254/): Malicious code in fig-honeydew-bravo-upwqr (npm) (malicious package)
- [MAL-2025-44253](https://insights.sbomify.com/MAL-2025-44253/): Malicious code in fig-cherry-bravo-semnp (npm) (malicious package)
- [MAL-2025-44252](https://insights.sbomify.com/MAL-2025-44252/): Malicious code in fifira (npm) (malicious package)
- [MAL-2025-44251](https://insights.sbomify.com/MAL-2025-44251/): Malicious code in field_capture (npm) (malicious package)
- [MAL-2025-44250](https://insights.sbomify.com/MAL-2025-44250/): Malicious code in fetch-request-hyperion-kardashevscale (npm) (malicious package)
- [MAL-2025-4425](https://insights.sbomify.com/MAL-2025-4425/): Malicious code in blocks-nextjs (npm) (malicious package)
- [MAL-2025-44249](https://insights.sbomify.com/MAL-2025-44249/): Malicious code in fern_oi7it_metq6_obsidian (npm) (malicious package)
- [MAL-2025-44248](https://insights.sbomify.com/MAL-2025-44248/): Malicious code in fern_erjjb_8hrrx_universe (npm) (malicious package)
- [MAL-2025-44247](https://insights.sbomify.com/MAL-2025-44247/): Malicious code in fern_27rj4_z4qkl_limestone (npm) (malicious package)
- [MAL-2025-44246](https://insights.sbomify.com/MAL-2025-44246/): Malicious code in fern-lightning-qvz663-project (npm) (malicious package)
- [MAL-2025-44245](https://insights.sbomify.com/MAL-2025-44245/): Malicious code in fermiparadox-materialize-cli-planckscale (npm) (malicious package)
- [MAL-2025-44244](https://insights.sbomify.com/MAL-2025-44244/): Malicious code in fermion-sequelize-kronos-paleobotany (npm) (malicious package)
- [MAL-2025-44243](https://insights.sbomify.com/MAL-2025-44243/): Malicious code in fellow-weak-exactly (npm) (malicious package)
- [MAL-2025-44242](https://insights.sbomify.com/MAL-2025-44242/): Malicious code in fauzi-sate42-breki (npm) (malicious package)
- [MAL-2025-44241](https://insights.sbomify.com/MAL-2025-44241/): Malicious code in fauzi-menjes93-breki (npm) (malicious package)
- [MAL-2025-44240](https://insights.sbomify.com/MAL-2025-44240/): Malicious code in fauzi-mangga41-breki (npm) (malicious package)
- [MAL-2025-4424](https://insights.sbomify.com/MAL-2025-4424/): Malicious code in @cat-ecom/pcc-components (npm) (malicious package)
- [MAL-2025-44239](https://insights.sbomify.com/MAL-2025-44239/): Malicious code in fauzi-klentik12-breki (npm) (malicious package)
- [MAL-2025-44238](https://insights.sbomify.com/MAL-2025-44238/): Malicious code in fauzi-keripik94-breki (npm) (malicious package)
- [MAL-2025-44237](https://insights.sbomify.com/MAL-2025-44237/): Malicious code in fauzi-kemplang74-breki (npm) (malicious package)
- [MAL-2025-44236](https://insights.sbomify.com/MAL-2025-44236/): Malicious code in fauzi-ikan45-breki (npm) (malicious package)
- [MAL-2025-44235](https://insights.sbomify.com/MAL-2025-44235/): Malicious code in fauzi-getuk97-breki (npm) (malicious package)
- [MAL-2025-44234](https://insights.sbomify.com/MAL-2025-44234/): Malicious code in fauzi-empal3-breki (npm) (malicious package)
- [MAL-2025-44233](https://insights.sbomify.com/MAL-2025-44233/): Malicious code in fauzi-bubur97-breki (npm) (malicious package)
- [MAL-2025-44232](https://insights.sbomify.com/MAL-2025-44232/): Malicious code in fauzi-bubur72-kyuki (npm) (malicious package)
- [MAL-2025-44231](https://insights.sbomify.com/MAL-2025-44231/): Malicious code in fauzi-bakso90-breki (npm) (malicious package)
- [MAL-2025-44230](https://insights.sbomify.com/MAL-2025-44230/): Malicious code in farout-adonis-tool-soap (npm) (malicious package)
- [MAL-2025-4423](https://insights.sbomify.com/MAL-2025-4423/): Malicious code in tml-sso (npm) (malicious package)
- [MAL-2025-44229](https://insights.sbomify.com/MAL-2025-44229/): Malicious code in fallen-merely-hay (npm) (malicious package)
- [MAL-2025-44228](https://insights.sbomify.com/MAL-2025-44228/): Malicious code in falcon-xerus-nvx836-project (npm) (malicious package)
- [MAL-2025-44227](https://insights.sbomify.com/MAL-2025-44227/): Malicious code in falcon-uranium-xyf246-project (npm) (malicious package)
- [MAL-2025-44226](https://insights.sbomify.com/MAL-2025-44226/): Malicious code in falcon-topaz-aes130-project (npm) (malicious package)
- [MAL-2025-44225](https://insights.sbomify.com/MAL-2025-44225/): Malicious code in fajar-tongseng42-breki (npm) (malicious package)
- [MAL-2025-44224](https://insights.sbomify.com/MAL-2025-44224/): Malicious code in fajar-tahu98-kyuki (npm) (malicious package)
- [MAL-2025-44223](https://insights.sbomify.com/MAL-2025-44223/): Malicious code in fajar-nasisayur60-kyuki (npm) (malicious package)
- [MAL-2025-44222](https://insights.sbomify.com/MAL-2025-44222/): Malicious code in fajar-nasipecel29-breki (npm) (malicious package)
- [MAL-2025-44221](https://insights.sbomify.com/MAL-2025-44221/): Malicious code in fajar-nasicampur60-breki (npm) (malicious package)
- [MAL-2025-44220](https://insights.sbomify.com/MAL-2025-44220/): Malicious code in fajar-nasicampur16-breki (npm) (malicious package)
- [MAL-2025-4422](https://insights.sbomify.com/MAL-2025-4422/): Malicious code in hpglobaldata (npm) (malicious package)
- [MAL-2025-44219](https://insights.sbomify.com/MAL-2025-44219/): Malicious code in fajar-mieayam52-kyuki (npm) (malicious package)
- [MAL-2025-44218](https://insights.sbomify.com/MAL-2025-44218/): Malicious code in fajar-mie11-breki (npm) (malicious package)
- [MAL-2025-44217](https://insights.sbomify.com/MAL-2025-44217/): Malicious code in fajar-lengko9-breki (npm) (malicious package)
- [MAL-2025-44216](https://insights.sbomify.com/MAL-2025-44216/): Malicious code in fajar-klentik41-breki (npm) (malicious package)
- [MAL-2025-44215](https://insights.sbomify.com/MAL-2025-44215/): Malicious code in fajar-jus54-breki (npm) (malicious package)
- [MAL-2025-44214](https://insights.sbomify.com/MAL-2025-44214/): Malicious code in fajar-gandul30-breki (npm) (malicious package)
- [MAL-2025-44213](https://insights.sbomify.com/MAL-2025-44213/): Malicious code in fajar-bubursumsum92-kyuki (npm) (malicious package)
- [MAL-2025-44212](https://insights.sbomify.com/MAL-2025-44212/): Malicious code in fajar-bakso67-breki (npm) (malicious package)
- [MAL-2025-44211](https://insights.sbomify.com/MAL-2025-44211/): Malicious code in fadhil-serabi34-kyuki (npm) (malicious package)
- [MAL-2025-44210](https://insights.sbomify.com/MAL-2025-44210/): Malicious code in fadhil-nasisayur76-kyuki (npm) (malicious package)
- [MAL-2025-4421](https://insights.sbomify.com/MAL-2025-4421/): Malicious code in ghpglobaldata (npm) (malicious package)
- [MAL-2025-44209](https://insights.sbomify.com/MAL-2025-44209/): Malicious code in fadhil-mendut50-kyuki (npm) (malicious package)
- [MAL-2025-44208](https://insights.sbomify.com/MAL-2025-44208/): Malicious code in fadhil-mangga33-breki (npm) (malicious package)
- [MAL-2025-44207](https://insights.sbomify.com/MAL-2025-44207/): Malicious code in fadhil-lontong85-breki (npm) (malicious package)
- [MAL-2025-44206](https://insights.sbomify.com/MAL-2025-44206/): Malicious code in fadhil-lapis33-breki (npm) (malicious package)
- [MAL-2025-44205](https://insights.sbomify.com/MAL-2025-44205/): Malicious code in fadhil-lapis14-kyuki (npm) (malicious package)
- [MAL-2025-44204](https://insights.sbomify.com/MAL-2025-44204/): Malicious code in fadhil-kepok58-kyuki (npm) (malicious package)
- [MAL-2025-44203](https://insights.sbomify.com/MAL-2025-44203/): Malicious code in fadhil-kepok49-kyuki (npm) (malicious package)
- [MAL-2025-44202](https://insights.sbomify.com/MAL-2025-44202/): Malicious code in fadhil-jamblang63-kyuki (npm) (malicious package)
- [MAL-2025-44201](https://insights.sbomify.com/MAL-2025-44201/): Malicious code in fadhil-botok79-kyuki (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/622/
