# Vulnerabilities published in 2025 - [MAL-2025-44200](https://insights.sbomify.com/MAL-2025-44200/): Malicious code in fadhil-bika68-kyuki (npm) (malicious package) - [MAL-2025-4420](https://insights.sbomify.com/MAL-2025-4420/): Malicious code in zzr-react-custom-widget (npm) (malicious package) - [MAL-2025-442](https://insights.sbomify.com/MAL-2025-442/): Malicious code in epicagames-admin (npm) (malicious package) - [MAL-2025-44199](https://insights.sbomify.com/MAL-2025-44199/): Malicious code in fachaibiz2025 (npm) (malicious package) - [MAL-2025-44198](https://insights.sbomify.com/MAL-2025-44198/): Malicious code in face-kids-correct (npm) (malicious package) - [MAL-2025-44197](https://insights.sbomify.com/MAL-2025-44197/): Malicious code in fable_wwulp_kgeku_coral (npm) (malicious package) - [MAL-2025-44196](https://insights.sbomify.com/MAL-2025-44196/): Malicious code in exosphere-cybernetics-zephyr-nova (npm) (malicious package) - [MAL-2025-44195](https://insights.sbomify.com/MAL-2025-44195/): Malicious code in exoplanet-webdriverio-bootes-resolvers (npm) (malicious package) - [MAL-2025-44194](https://insights.sbomify.com/MAL-2025-44194/): Malicious code in exist-buffalo-industrial (npm) (malicious package) - [MAL-2025-44193](https://insights.sbomify.com/MAL-2025-44193/): Malicious code in exec-exoplanetology-hercules-titan (npm) (malicious package) - [MAL-2025-44192](https://insights.sbomify.com/MAL-2025-44192/): Malicious code in exchange-liquid-higher (npm) (malicious package) - [MAL-2025-44191](https://insights.sbomify.com/MAL-2025-44191/): Malicious code in evoke_wwixv_c5ba5_serenade (npm) (malicious package) - [MAL-2025-44190](https://insights.sbomify.com/MAL-2025-44190/): Malicious code in evoke_pnhix_ebygb_horizon (npm) (malicious package) - [MAL-2025-4419](https://insights.sbomify.com/MAL-2025-4419/): Malicious code in zdauth (npm) (malicious package) - [MAL-2025-44189](https://insights.sbomify.com/MAL-2025-44189/): Malicious code in evoke_4e9ce_h2zct_quiver (npm) (malicious package) - [MAL-2025-44188](https://insights.sbomify.com/MAL-2025-44188/): Malicious code in evergreen-nocturne-mvv900-project (npm) (malicious package) - [MAL-2025-44187](https://insights.sbomify.com/MAL-2025-44187/): Malicious code in evergreen-igloo-qbr602-project (npm) (malicious package) - [MAL-2025-44186](https://insights.sbomify.com/MAL-2025-44186/): Malicious code in everglow-lilypad-mhu889-project (npm) (malicious package) - [MAL-2025-44185](https://insights.sbomify.com/MAL-2025-44185/): Malicious code in everest-vista-xsm449-project (npm) (malicious package) - [MAL-2025-44184](https://insights.sbomify.com/MAL-2025-44184/): Malicious code in everest-eagle-fkz954-project (npm) (malicious package) - [MAL-2025-44183](https://insights.sbomify.com/MAL-2025-44183/): Malicious code in eventhoriz-pulsar-yakutsk-decoherence (npm) (malicious package) - [MAL-2025-44182](https://insights.sbomify.com/MAL-2025-44182/): Malicious code in eventhoriz-lint-await-stop (npm) (malicious package) - [MAL-2025-44181](https://insights.sbomify.com/MAL-2025-44181/): Malicious code in eventhoriz-hologram-uranology-vega (npm) (malicious package) - [MAL-2025-44180](https://insights.sbomify.com/MAL-2025-44180/): Malicious code in eventhoriz-chromedriver-pegasus-loopback (npm) (malicious package) - [MAL-2025-4418](https://insights.sbomify.com/MAL-2025-4418/): Malicious code in xlog-admin-portal (npm) (malicious package) - [MAL-2025-44179](https://insights.sbomify.com/MAL-2025-44179/): Malicious code in eventhoriz-apex-centaurus-leda (npm) (malicious package) - [MAL-2025-44178](https://insights.sbomify.com/MAL-2025-44178/): Malicious code in event-sirius-antares-darkenergy (npm) (malicious package) - [MAL-2025-44177](https://insights.sbomify.com/MAL-2025-44177/): Malicious code in event-centaurus-unuk-aquarius (npm) (malicious package) - [MAL-2025-44176](https://insights.sbomify.com/MAL-2025-44176/): Malicious code in event-atlas-selenium-jest (npm) (malicious package) - [MAL-2025-44175](https://insights.sbomify.com/MAL-2025-44175/): Malicious code in europa-vuetify-spectroscopy-rigel (npm) (malicious package) - [MAL-2025-44174](https://insights.sbomify.com/MAL-2025-44174/): Malicious code in europa-eris-magellan-biogeochemistry (npm) (malicious package) - [MAL-2025-44173](https://insights.sbomify.com/MAL-2025-44173/): Malicious code in eslint-plugin-outercore-mysql-io (npm) (malicious package) - [MAL-2025-44172](https://insights.sbomify.com/MAL-2025-44172/): Malicious code in eslint-plugin-miranda-karma-neutrino (npm) (malicious package) - [MAL-2025-44171](https://insights.sbomify.com/MAL-2025-44171/): Malicious code in eslint-plugin-gridsome-zenobia-sync (npm) (malicious package) - [MAL-2025-44170](https://insights.sbomify.com/MAL-2025-44170/): Malicious code in eslint-logger (npm) (malicious package) - [MAL-2025-4417](https://insights.sbomify.com/MAL-2025-4417/): Malicious code in wsticket (npm) (malicious package) - [MAL-2025-44169](https://insights.sbomify.com/MAL-2025-44169/): Malicious code in eslint-geoarchaeology-sagitta-chromedriver (npm) (malicious package) - [MAL-2025-44168](https://insights.sbomify.com/MAL-2025-44168/): Malicious code in eslint-css-minimizer-webpack-plugin-metabolomics-centaurus (npm) (malicious package) - [MAL-2025-44167](https://insights.sbomify.com/MAL-2025-44167/): Malicious code in eslint-config-nebula-hapi-aurora (npm) (malicious package) - [MAL-2025-44166](https://insights.sbomify.com/MAL-2025-44166/): Malicious code in erwin-telurtahu72-breki (npm) (malicious package) - [MAL-2025-44165](https://insights.sbomify.com/MAL-2025-44165/): Malicious code in erwin-tapai94-kyuki (npm) (malicious package) - [MAL-2025-44164](https://insights.sbomify.com/MAL-2025-44164/): Malicious code in erwin-takokak69-breki (npm) (malicious package) - [MAL-2025-44163](https://insights.sbomify.com/MAL-2025-44163/): Malicious code in erwin-sambel50-kyuki (npm) (malicious package) - [MAL-2025-44162](https://insights.sbomify.com/MAL-2025-44162/): Malicious code in erwin-saguer96-breki (npm) (malicious package) - [MAL-2025-44161](https://insights.sbomify.com/MAL-2025-44161/): Malicious code in erwin-saguer54-breki (npm) (malicious package) - [MAL-2025-44160](https://insights.sbomify.com/MAL-2025-44160/): Malicious code in erwin-ikan37-breki (npm) (malicious package) - [MAL-2025-4416](https://insights.sbomify.com/MAL-2025-4416/): Malicious code in web-ssar (npm) (malicious package) - [MAL-2025-44159](https://insights.sbomify.com/MAL-2025-44159/): Malicious code in erwin-gorengan56-breki (npm) (malicious package) - [MAL-2025-44158](https://insights.sbomify.com/MAL-2025-44158/): Malicious code in erwin-dradag91-kyuki (npm) (malicious package) - [MAL-2025-44157](https://insights.sbomify.com/MAL-2025-44157/): Malicious code in erwin-dradag77-breki (npm) (malicious package) - [MAL-2025-44156](https://insights.sbomify.com/MAL-2025-44156/): Malicious code in ershierge-jinsheng-linghun-keti (npm) (malicious package) - [MAL-2025-44155](https://insights.sbomify.com/MAL-2025-44155/): Malicious code in eris-interferometry-astrochemistry-sequelize (npm) (malicious package) - [MAL-2025-44154](https://insights.sbomify.com/MAL-2025-44154/): Malicious code in erick-tahu24-breki (npm) (malicious package) - [MAL-2025-44153](https://insights.sbomify.com/MAL-2025-44153/): Malicious code in erick-serimuka29-kyuki (npm) (malicious package) - [MAL-2025-44152](https://insights.sbomify.com/MAL-2025-44152/): Malicious code in erick-kue26-breki (npm) (malicious package) - [MAL-2025-44151](https://insights.sbomify.com/MAL-2025-44151/): Malicious code in erick-gembus33-breki (npm) (malicious package) - [MAL-2025-44150](https://insights.sbomify.com/MAL-2025-44150/): Malicious code in erick-empal43-kyuki (npm) (malicious package) - [MAL-2025-4415](https://insights.sbomify.com/MAL-2025-4415/): Malicious code in utility-capsule (npm) (malicious package) - [MAL-2025-44149](https://insights.sbomify.com/MAL-2025-44149/): Malicious code in erick-dradag79-breki (npm) (malicious package) - [MAL-2025-44148](https://insights.sbomify.com/MAL-2025-44148/): Malicious code in erci-xiyin (npm) (malicious package) - [MAL-2025-44147](https://insights.sbomify.com/MAL-2025-44147/): Malicious code in equinox-rate-limiter-auriga-dotenv-parse-variables (npm) (malicious package) - [MAL-2025-44146](https://insights.sbomify.com/MAL-2025-44146/): Malicious code in equinox-castor-centauri-cressida (npm) (malicious package) - [MAL-2025-44145](https://insights.sbomify.com/MAL-2025-44145/): Malicious code in equinox-bootes-lyra-playwright (npm) (malicious package) - [MAL-2025-44144](https://insights.sbomify.com/MAL-2025-44144/): Malicious code in epxreso (npm) (malicious package) - [MAL-2025-44143](https://insights.sbomify.com/MAL-2025-44143/): Malicious code in epimetheus-registry-delphinus-aldebaran (npm) (malicious package) - [MAL-2025-44142](https://insights.sbomify.com/MAL-2025-44142/): Malicious code in epimetheus-html-webpack-plugin-markdown-style-loader (npm) (malicious package) - [MAL-2025-44141](https://insights.sbomify.com/MAL-2025-44141/): Malicious code in entanglement-csrf-wasat-avior (npm) (malicious package) - [MAL-2025-44140](https://insights.sbomify.com/MAL-2025-44140/): Malicious code in enough-park-near (npm) (malicious package) - [MAL-2025-4414](https://insights.sbomify.com/MAL-2025-4414/): Malicious code in user-auth-prod (npm) (malicious package) - [MAL-2025-44139](https://insights.sbomify.com/MAL-2025-44139/): Malicious code in engine-birthday-account (npm) (malicious package) - [MAL-2025-44138](https://insights.sbomify.com/MAL-2025-44138/): Malicious code in enceladus-altair-dependencies-eventhoriz (npm) (malicious package) - [MAL-2025-44137](https://insights.sbomify.com/MAL-2025-44137/): Malicious code in empty-forward-does (npm) (malicious package) - [MAL-2025-44136](https://insights.sbomify.com/MAL-2025-44136/): Malicious code in ember_sgi6w_fwfdj_arcade (npm) (malicious package) - [MAL-2025-44135](https://insights.sbomify.com/MAL-2025-44135/): Malicious code in ember_sa6zt_jioue_willow (npm) (malicious package) - [MAL-2025-44134](https://insights.sbomify.com/MAL-2025-44134/): Malicious code in ember_1r0ce_nstrp_aroma (npm) (malicious package) - [MAL-2025-44133](https://insights.sbomify.com/MAL-2025-44133/): Malicious code in eleventy-webdriver-mocha-draco-iota (npm) (malicious package) - [MAL-2025-44132](https://insights.sbomify.com/MAL-2025-44132/): Malicious code in eleven-giving-however (npm) (malicious package) - [MAL-2025-44131](https://insights.sbomify.com/MAL-2025-44131/): Malicious code in elephant_qdwx8_znbb4_quasar (npm) (malicious package) - [MAL-2025-44130](https://insights.sbomify.com/MAL-2025-44130/): Malicious code in elephant_4cicd_q7o3n_cascade (npm) (malicious package) - [MAL-2025-4413](https://insights.sbomify.com/MAL-2025-4413/): Malicious code in url-project (npm) (malicious package) - [MAL-2025-44129](https://insights.sbomify.com/MAL-2025-44129/): Malicious code in element-ui-xenon-uranology-bunyan (npm) (malicious package) - [MAL-2025-44128](https://insights.sbomify.com/MAL-2025-44128/): Malicious code in element-ui-public-publish-sync (npm) (malicious package) - [MAL-2025-44127](https://insights.sbomify.com/MAL-2025-44127/): Malicious code in element-ui-cryptography-gravity-quito (npm) (malicious package) - [MAL-2025-44126](https://insights.sbomify.com/MAL-2025-44126/): Malicious code in elektra-subscription-webdriver-manager-kastra (npm) (malicious package) - [MAL-2025-44125](https://insights.sbomify.com/MAL-2025-44125/): Malicious code in elektra-lynx-prompts-link (npm) (malicious package) - [MAL-2025-44124](https://insights.sbomify.com/MAL-2025-44124/): Malicious code in elektra-cross-env-deimos-ganymede (npm) (malicious package) - [MAL-2025-44123](https://insights.sbomify.com/MAL-2025-44123/): Malicious code in electron-redshift-hexo-nucleosynthesis (npm) (malicious package) - [MAL-2025-44122](https://insights.sbomify.com/MAL-2025-44122/): Malicious code in electron-postcss-io-dynamo (npm) (malicious package) - [MAL-2025-44121](https://insights.sbomify.com/MAL-2025-44121/): Malicious code in electron-gridsome-nuxtjs-elektra (npm) (malicious package) - [MAL-2025-44120](https://insights.sbomify.com/MAL-2025-44120/): Malicious code in elderberry-oscar-watermelon-wbeef (npm) (malicious package) - [MAL-2025-4412](https://insights.sbomify.com/MAL-2025-4412/): Malicious code in upyun-uploader (npm) (malicious package) - [MAL-2025-44119](https://insights.sbomify.com/MAL-2025-44119/): Malicious code in elderberry-november-sierra-frwuh (npm) (malicious package) - [MAL-2025-44118](https://insights.sbomify.com/MAL-2025-44118/): Malicious code in elderberry-november-romeo-ondsq (npm) (malicious package) - [MAL-2025-44117](https://insights.sbomify.com/MAL-2025-44117/): Malicious code in elara-whitedwarf-membrane-bioinformatics (npm) (malicious package) - [MAL-2025-44116](https://insights.sbomify.com/MAL-2025-44116/): Malicious code in elara-postgres-auth-rigel (npm) (malicious package) - [MAL-2025-44115](https://insights.sbomify.com/MAL-2025-44115/): Malicious code in eko-wajit91-kyuki (npm) (malicious package) - [MAL-2025-44114](https://insights.sbomify.com/MAL-2025-44114/): Malicious code in eko-tongseng66-breki (npm) (malicious package) - [MAL-2025-44113](https://insights.sbomify.com/MAL-2025-44113/): Malicious code in eko-toge92-kyuki (npm) (malicious package) - [MAL-2025-44112](https://insights.sbomify.com/MAL-2025-44112/): Malicious code in eko-tahu91-breki (npm) (malicious package) - [MAL-2025-44111](https://insights.sbomify.com/MAL-2025-44111/): Malicious code in eko-rujak3-breki (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/623/