# Vulnerabilities published in 2025


- [MAL-2025-44110](https://insights.sbomify.com/MAL-2025-44110/): Malicious code in eko-nasipecel75-breki (npm) (malicious package)
- [MAL-2025-4411](https://insights.sbomify.com/MAL-2025-4411/): Malicious code in transaction-generations (npm) (malicious package)
- [MAL-2025-44109](https://insights.sbomify.com/MAL-2025-44109/): Malicious code in eko-martabak34-kyuki (npm) (malicious package)
- [MAL-2025-44108](https://insights.sbomify.com/MAL-2025-44108/): Malicious code in eko-kemplang39-breki (npm) (malicious package)
- [MAL-2025-44107](https://insights.sbomify.com/MAL-2025-44107/): Malicious code in eko-gorengan71-kyuki (npm) (malicious package)
- [MAL-2025-44106](https://insights.sbomify.com/MAL-2025-44106/): Malicious code in eko-dradag34-breki (npm) (malicious package)
- [MAL-2025-44105](https://insights.sbomify.com/MAL-2025-44105/): Malicious code in eko-buburayam25-kyuki (npm) (malicious package)
- [MAL-2025-44104](https://insights.sbomify.com/MAL-2025-44104/): Malicious code in eka-tumis91-kyuki (npm) (malicious package)
- [MAL-2025-44103](https://insights.sbomify.com/MAL-2025-44103/): Malicious code in eka-sate75-kyuki (npm) (malicious package)
- [MAL-2025-44102](https://insights.sbomify.com/MAL-2025-44102/): Malicious code in eka-rangi37-breki (npm) (malicious package)
- [MAL-2025-44101](https://insights.sbomify.com/MAL-2025-44101/): Malicious code in eka-otak-otak90-breki (npm) (malicious package)
- [MAL-2025-44100](https://insights.sbomify.com/MAL-2025-44100/): Malicious code in eka-mieayam2-breki (npm) (malicious package)
- [MAL-2025-4410](https://insights.sbomify.com/MAL-2025-4410/): Malicious code in tgi-fe (npm) (malicious package)
- [MAL-2025-441](https://insights.sbomify.com/MAL-2025-441/): Malicious code in dropbox-utils (npm) (malicious package)
- [MAL-2025-44099](https://insights.sbomify.com/MAL-2025-44099/): Malicious code in eka-mendoan94-kyuki (npm) (malicious package)
- [MAL-2025-44098](https://insights.sbomify.com/MAL-2025-44098/): Malicious code in eka-klipo76-breki (npm) (malicious package)
- [MAL-2025-44097](https://insights.sbomify.com/MAL-2025-44097/): Malicious code in eka-ikan80-kyuki (npm) (malicious package)
- [MAL-2025-44096](https://insights.sbomify.com/MAL-2025-44096/): Malicious code in eight-spend-men (npm) (malicious package)
- [MAL-2025-44095](https://insights.sbomify.com/MAL-2025-44095/): Malicious code in eigenstate-parallax-init-miranda (npm) (malicious package)
- [MAL-2025-44094](https://insights.sbomify.com/MAL-2025-44094/): Malicious code in eigenstate-archaeogenetics-singularitarianism-socketio (npm) (malicious package)
- [MAL-2025-44093](https://insights.sbomify.com/MAL-2025-44093/): Malicious code in eg4-fangfa (npm) (malicious package)
- [MAL-2025-44092](https://insights.sbomify.com/MAL-2025-44092/): Malicious code in eclipse-sublimation-epigenetics-middleware (npm) (malicious package)
- [MAL-2025-44091](https://insights.sbomify.com/MAL-2025-44091/): Malicious code in echo_f1hws_rekes_quartz (npm) (malicious package)
- [MAL-2025-44090](https://insights.sbomify.com/MAL-2025-44090/): Malicious code in echo_3mq9s_0wkf1_firefly (npm) (malicious package)
- [MAL-2025-4409](https://insights.sbomify.com/MAL-2025-4409/): Malicious code in tenslots (npm) (malicious package)
- [MAL-2025-44089](https://insights.sbomify.com/MAL-2025-44089/): Malicious code in echo-whiskey-cherry-cmnzr (npm) (malicious package)
- [MAL-2025-44088](https://insights.sbomify.com/MAL-2025-44088/): Malicious code in echo-watermelon-mango-nkzyn (npm) (malicious package)
- [MAL-2025-44087](https://insights.sbomify.com/MAL-2025-44087/): Malicious code in echo-kilo-elderberry-dwkcs (npm) (malicious package)
- [MAL-2025-44086](https://insights.sbomify.com/MAL-2025-44086/): Malicious code in echo-golf-papa-qmmfl (npm) (malicious package)
- [MAL-2025-44085](https://insights.sbomify.com/MAL-2025-44085/): Malicious code in eagle-amber-llw625-project (npm) (malicious package)
- [MAL-2025-44084](https://insights.sbomify.com/MAL-2025-44084/): Malicious code in dysonswarm-ursa-triton-nightwatch (npm) (malicious package)
- [MAL-2025-44083](https://insights.sbomify.com/MAL-2025-44083/): Malicious code in dyninstslots2025 (npm) (malicious package)
- [MAL-2025-44082](https://insights.sbomify.com/MAL-2025-44082/): Malicious code in dyninstslots (npm) (malicious package)
- [MAL-2025-44081](https://insights.sbomify.com/MAL-2025-44081/): Malicious code in duty-indeed-stuck (npm) (malicious package)
- [MAL-2025-44080](https://insights.sbomify.com/MAL-2025-44080/): Malicious code in duplex-gemini-resolvers-norma (npm) (malicious package)
- [MAL-2025-4408](https://insights.sbomify.com/MAL-2025-4408/): Malicious code in template-vite (npm) (malicious package)
- [MAL-2025-44079](https://insights.sbomify.com/MAL-2025-44079/): Malicious code in dujiaoshou-nengliang-liaoyu (npm) (malicious package)
- [MAL-2025-44078](https://insights.sbomify.com/MAL-2025-44078/): Malicious code in duixnshu-gongxinshu-kuanxinshu-daquanji (npm) (malicious package)
- [MAL-2025-44077](https://insights.sbomify.com/MAL-2025-44077/): Malicious code in ds-cmd-line-2e-zh (npm) (malicious package)
- [MAL-2025-44076](https://insights.sbomify.com/MAL-2025-44076/): Malicious code in drove-doll-bar (npm) (malicious package)
- [MAL-2025-44075](https://insights.sbomify.com/MAL-2025-44075/): Malicious code in drizzle_wa1uv_oa7e7_yew (npm) (malicious package)
- [MAL-2025-44074](https://insights.sbomify.com/MAL-2025-44074/): Malicious code in drizzle_cfzvi_btypx_glow (npm) (malicious package)
- [MAL-2025-44073](https://insights.sbomify.com/MAL-2025-44073/): Malicious code in driving-map-appearance (npm) (malicious package)
- [MAL-2025-44072](https://insights.sbomify.com/MAL-2025-44072/): Malicious code in driftwood_pf4p2_myr13_honey (npm) (malicious package)
- [MAL-2025-44071](https://insights.sbomify.com/MAL-2025-44071/): Malicious code in driftwood_ju0ad_zcyna_cascade (npm) (malicious package)
- [MAL-2025-44070](https://insights.sbomify.com/MAL-2025-44070/): Malicious code in dream_tjupj_7dn0q_aspen (npm) (malicious package)
- [MAL-2025-4407](https://insights.sbomify.com/MAL-2025-4407/): Malicious code in team-portal (npm) (malicious package)
- [MAL-2025-44069](https://insights.sbomify.com/MAL-2025-44069/): Malicious code in draco-server-prettier-ophiuchus (npm) (malicious package)
- [MAL-2025-44068](https://insights.sbomify.com/MAL-2025-44068/): Malicious code in draco-redis-bunyan-deimos (npm) (malicious package)
- [MAL-2025-44067](https://insights.sbomify.com/MAL-2025-44067/): Malicious code in dozen-chapter-away (npm) (malicious package)
- [MAL-2025-44066](https://insights.sbomify.com/MAL-2025-44066/): Malicious code in dove-river-lby389-project (npm) (malicious package)
- [MAL-2025-44065](https://insights.sbomify.com/MAL-2025-44065/): Malicious code in douyin-liaohan-gonglue (npm) (malicious package)
- [MAL-2025-44064](https://insights.sbomify.com/MAL-2025-44064/): Malicious code in dounvrenxiao (npm) (malicious package)
- [MAL-2025-44063](https://insights.sbomify.com/MAL-2025-44063/): Malicious code in dotevn (npm) (malicious package)
- [MAL-2025-44062](https://insights.sbomify.com/MAL-2025-44062/): Malicious code in dotenv-webdriver-manager-carina-altair (npm) (malicious package)
- [MAL-2025-44061](https://insights.sbomify.com/MAL-2025-44061/): Malicious code in dotenv-safe-whitedwarf-castor-magnetar (npm) (malicious package)
- [MAL-2025-44060](https://insights.sbomify.com/MAL-2025-44060/): Malicious code in dotenv-safe-sedna-procyon-halley (npm) (malicious package)
- [MAL-2025-4406](https://insights.sbomify.com/MAL-2025-4406/): Malicious code in sudapam (npm) (malicious package)
- [MAL-2025-44059](https://insights.sbomify.com/MAL-2025-44059/): Malicious code in dotenv-safe-polaris-paleoanthropology-filament (npm) (malicious package)
- [MAL-2025-44058](https://insights.sbomify.com/MAL-2025-44058/): Malicious code in dotenv-safe-fusion-norma-joviology (npm) (malicious package)
- [MAL-2025-44057](https://insights.sbomify.com/MAL-2025-44057/): Malicious code in dotenv-safe-exoplanetology-exobiology-virgo (npm) (malicious package)
- [MAL-2025-44056](https://insights.sbomify.com/MAL-2025-44056/): Malicious code in dotenv-parse-variables-typeorm-spectron-fusion (npm) (malicious package)
- [MAL-2025-44055](https://insights.sbomify.com/MAL-2025-44055/): Malicious code in dotenv-parse-variables-playwright-pyxis-geochronology (npm) (malicious package)
- [MAL-2025-44054](https://insights.sbomify.com/MAL-2025-44054/): Malicious code in dotenv-parse-variables-oauth-pavo-meteor (npm) (malicious package)
- [MAL-2025-44053](https://insights.sbomify.com/MAL-2025-44053/): Malicious code in dotenv-parse-variables-norma-andromeda-testcafe (npm) (malicious package)
- [MAL-2025-44052](https://insights.sbomify.com/MAL-2025-44052/): Malicious code in dotenv-parse-variables-mira-nova-ophiuchus (npm) (malicious package)
- [MAL-2025-44051](https://insights.sbomify.com/MAL-2025-44051/): Malicious code in dotenv-parse-variables-cluster-mongoose-xanthus (npm) (malicious package)
- [MAL-2025-44050](https://insights.sbomify.com/MAL-2025-44050/): Malicious code in dotenv-jasmine-cosmicweb-stream (npm) (malicious package)
- [MAL-2025-4405](https://insights.sbomify.com/MAL-2025-4405/): Malicious code in struct-logger (npm) (malicious package)
- [MAL-2025-44049](https://insights.sbomify.com/MAL-2025-44049/): Malicious code in dorado-galaxy-graviton-archaeometry (npm) (malicious package)
- [MAL-2025-44048](https://insights.sbomify.com/MAL-2025-44048/): Malicious code in dopon (npm) (malicious package)
- [MAL-2025-44047](https://insights.sbomify.com/MAL-2025-44047/): Malicious code in dono-tempe25-breki (npm) (malicious package)
- [MAL-2025-44046](https://insights.sbomify.com/MAL-2025-44046/): Malicious code in dono-tahutek48-kyuki (npm) (malicious package)
- [MAL-2025-44045](https://insights.sbomify.com/MAL-2025-44045/): Malicious code in dono-ongol-ongol25-kyuki (npm) (malicious package)
- [MAL-2025-44044](https://insights.sbomify.com/MAL-2025-44044/): Malicious code in dono-nasisayur49-breki (npm) (malicious package)
- [MAL-2025-44043](https://insights.sbomify.com/MAL-2025-44043/): Malicious code in dono-nasi61-breki (npm) (malicious package)
- [MAL-2025-44042](https://insights.sbomify.com/MAL-2025-44042/): Malicious code in dono-naget84-breki (npm) (malicious package)
- [MAL-2025-44041](https://insights.sbomify.com/MAL-2025-44041/): Malicious code in dono-kue5-breki (npm) (malicious package)
- [MAL-2025-44040](https://insights.sbomify.com/MAL-2025-44040/): Malicious code in dono-ketoprak91-breki (npm) (malicious package)
- [MAL-2025-4404](https://insights.sbomify.com/MAL-2025-4404/): Malicious code in sps (npm) (malicious package)
- [MAL-2025-44039](https://insights.sbomify.com/MAL-2025-44039/): Malicious code in dono-gado-gado59-kyuki (npm) (malicious package)
- [MAL-2025-44038](https://insights.sbomify.com/MAL-2025-44038/): Malicious code in dono-esdoger70-kyuki (npm) (malicious package)
- [MAL-2025-44037](https://insights.sbomify.com/MAL-2025-44037/): Malicious code in dono-donat62-breki (npm) (malicious package)
- [MAL-2025-44036](https://insights.sbomify.com/MAL-2025-44036/): Malicious code in dono-bubursumsum33-kyuki (npm) (malicious package)
- [MAL-2025-44035](https://insights.sbomify.com/MAL-2025-44035/): Malicious code in dono-bakwan41-breki (npm) (malicious package)
- [MAL-2025-44034](https://insights.sbomify.com/MAL-2025-44034/): Malicious code in dongwu-lingqi-liaoyu (npm) (malicious package)
- [MAL-2025-44033](https://insights.sbomify.com/MAL-2025-44033/): Malicious code in doggy-space-nft-collection463 (npm) (malicious package)
- [MAL-2025-44032](https://insights.sbomify.com/MAL-2025-44032/): Malicious code in doggy-space-nft-collection048 (npm) (malicious package)
- [MAL-2025-44031](https://insights.sbomify.com/MAL-2025-44031/): Malicious code in docusaurus-supervisor-eris-axios (npm) (malicious package)
- [MAL-2025-44030](https://insights.sbomify.com/MAL-2025-44030/): Malicious code in docusaurus-palynology-hermes-tectonic (npm) (malicious package)
- [MAL-2025-4403](https://insights.sbomify.com/MAL-2025-4403/): Malicious code in sfc-demo (npm) (malicious package)
- [MAL-2025-44029](https://insights.sbomify.com/MAL-2025-44029/): Malicious code in document-metadata (npm) (malicious package)
- [MAL-2025-44028](https://insights.sbomify.com/MAL-2025-44028/): Malicious code in diyici-xueziwei-doushu-jiuxuehui (npm) (malicious package)
- [MAL-2025-44027](https://insights.sbomify.com/MAL-2025-44027/): Malicious code in discussion-practical-organization (npm) (malicious package)
- [MAL-2025-44026](https://insights.sbomify.com/MAL-2025-44026/): Malicious code in discover-cast-shot (npm) (malicious package)
- [MAL-2025-44025](https://insights.sbomify.com/MAL-2025-44025/): Malicious code in dione-ultra-nestjs-development (npm) (malicious package)
- [MAL-2025-44024](https://insights.sbomify.com/MAL-2025-44024/): Malicious code in dione-sedimentology-gridsome-weywot (npm) (malicious package)
- [MAL-2025-44023](https://insights.sbomify.com/MAL-2025-44023/): Malicious code in difference-bent-news (npm) (malicious package)
- [MAL-2025-44022](https://insights.sbomify.com/MAL-2025-44022/): Malicious code in dierxing (npm) (malicious package)
- [MAL-2025-44021](https://insights.sbomify.com/MAL-2025-44021/): Malicious code in dianji-kaichang (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/624/