# Vulnerabilities published in 2025 - [MAL-2025-44020](https://insights.sbomify.com/MAL-2025-44020/): Malicious code in dianhua-duanxin-bamei-youxi (npm) (malicious package) - [MAL-2025-4402](https://insights.sbomify.com/MAL-2025-4402/): Malicious code in sellyourvault (npm) (malicious package) - [MAL-2025-44019](https://insights.sbomify.com/MAL-2025-44019/): Malicious code in dian-tongseng39-kyuki (npm) (malicious package) - [MAL-2025-44018](https://insights.sbomify.com/MAL-2025-44018/): Malicious code in dian-sambalado74-kyuki (npm) (malicious package) - [MAL-2025-44017](https://insights.sbomify.com/MAL-2025-44017/): Malicious code in dian-rawon33-breki (npm) (malicious package) - [MAL-2025-44016](https://insights.sbomify.com/MAL-2025-44016/): Malicious code in dian-nasiuduk30-kyuki (npm) (malicious package) - [MAL-2025-44015](https://insights.sbomify.com/MAL-2025-44015/): Malicious code in dian-menjes57-breki (npm) (malicious package) - [MAL-2025-44014](https://insights.sbomify.com/MAL-2025-44014/): Malicious code in dian-lodeh1-kyuki (npm) (malicious package) - [MAL-2025-44013](https://insights.sbomify.com/MAL-2025-44013/): Malicious code in dian-kupang25-breki (npm) (malicious package) - [MAL-2025-44012](https://insights.sbomify.com/MAL-2025-44012/): Malicious code in dian-kripik99-kyuki (npm) (malicious package) - [MAL-2025-44011](https://insights.sbomify.com/MAL-2025-44011/): Malicious code in dian-klipo63-kyuki (npm) (malicious package) - [MAL-2025-44010](https://insights.sbomify.com/MAL-2025-44010/): Malicious code in dian-gudeg11-breki (npm) (malicious package) - [MAL-2025-4401](https://insights.sbomify.com/MAL-2025-4401/): Malicious code in seatalk-rn-leave-calendar (npm) (malicious package) - [MAL-2025-44009](https://insights.sbomify.com/MAL-2025-44009/): Malicious code in dian-brongkos52-kyuki (npm) (malicious package) - [MAL-2025-44008](https://insights.sbomify.com/MAL-2025-44008/): Malicious code in dewi-tomat52-breki (npm) (malicious package) - [MAL-2025-44007](https://insights.sbomify.com/MAL-2025-44007/): Malicious code in dewi-taiwan84-kyuki (npm) (malicious package) - [MAL-2025-44006](https://insights.sbomify.com/MAL-2025-44006/): Malicious code in dewi-semur64-kyuki (npm) (malicious package) - [MAL-2025-44005](https://insights.sbomify.com/MAL-2025-44005/): Malicious code in dewi-sambalado12-breki (npm) (malicious package) - [MAL-2025-44004](https://insights.sbomify.com/MAL-2025-44004/): Malicious code in dewi-peyek49-breki (npm) (malicious package) - [MAL-2025-44003](https://insights.sbomify.com/MAL-2025-44003/): Malicious code in dewi-nasi9-kyuki (npm) (malicious package) - [MAL-2025-44002](https://insights.sbomify.com/MAL-2025-44002/): Malicious code in dewi-naget94-kyuki (npm) (malicious package) - [MAL-2025-44001](https://insights.sbomify.com/MAL-2025-44001/): Malicious code in dewi-kolak13-breki (npm) (malicious package) - [MAL-2025-44000](https://insights.sbomify.com/MAL-2025-44000/): Malicious code in dewi-botok45-breki (npm) (malicious package) - [MAL-2025-4400](https://insights.sbomify.com/MAL-2025-4400/): Malicious code in seatable (npm) (malicious package) - [MAL-2025-440](https://insights.sbomify.com/MAL-2025-440/): Malicious code in dropbox-user (npm) (malicious package) - [MAL-2025-44](https://insights.sbomify.com/MAL-2025-44/): Malicious code in lana-docs-site (npm) (malicious package) - [MAL-2025-43999](https://insights.sbomify.com/MAL-2025-43999/): Malicious code in dewdrop-labyrinth-xjo190-project (npm) (malicious package) - [MAL-2025-43998](https://insights.sbomify.com/MAL-2025-43998/): Malicious code in dewdrop-hill-apc766-project (npm) (malicious package) - [MAL-2025-43997](https://insights.sbomify.com/MAL-2025-43997/): Malicious code in dewdrop-ecosystem-wtk745-project (npm) (malicious package) - [MAL-2025-43996](https://insights.sbomify.com/MAL-2025-43996/): Malicious code in dewanto-tumis31-breki (npm) (malicious package) - [MAL-2025-43995](https://insights.sbomify.com/MAL-2025-43995/): Malicious code in dewanto-sate73-breki (npm) (malicious package) - [MAL-2025-43994](https://insights.sbomify.com/MAL-2025-43994/): Malicious code in dewanto-sasag48-kyuki (npm) (malicious package) - [MAL-2025-43993](https://insights.sbomify.com/MAL-2025-43993/): Malicious code in dewanto-ruwet69-kyuki (npm) (malicious package) - [MAL-2025-43992](https://insights.sbomify.com/MAL-2025-43992/): Malicious code in dewanto-rangginang49-breki (npm) (malicious package) - [MAL-2025-43991](https://insights.sbomify.com/MAL-2025-43991/): Malicious code in dewanto-mendoan46-breki (npm) (malicious package) - [MAL-2025-43990](https://insights.sbomify.com/MAL-2025-43990/): Malicious code in dewanto-mangut6-kyuki (npm) (malicious package) - [MAL-2025-4399](https://insights.sbomify.com/MAL-2025-4399/): Malicious code in seamless-sppmy (npm) (malicious package) - [MAL-2025-43989](https://insights.sbomify.com/MAL-2025-43989/): Malicious code in dewanto-lepet42-breki (npm) (malicious package) - [MAL-2025-43988](https://insights.sbomify.com/MAL-2025-43988/): Malicious code in dewanto-lapis91-kyuki (npm) (malicious package) - [MAL-2025-43987](https://insights.sbomify.com/MAL-2025-43987/): Malicious code in dewanto-kripik67-kyuki (npm) (malicious package) - [MAL-2025-43986](https://insights.sbomify.com/MAL-2025-43986/): Malicious code in dewanto-ketoprak46-breki (npm) (malicious package) - [MAL-2025-43985](https://insights.sbomify.com/MAL-2025-43985/): Malicious code in dewanto-keripik51-breki (npm) (malicious package) - [MAL-2025-43984](https://insights.sbomify.com/MAL-2025-43984/): Malicious code in dewanto-kepok75-breki (npm) (malicious package) - [MAL-2025-43983](https://insights.sbomify.com/MAL-2025-43983/): Malicious code in dewanto-kacang49-breki (npm) (malicious package) - [MAL-2025-43982](https://insights.sbomify.com/MAL-2025-43982/): Malicious code in dewanto-jus27-kyuki (npm) (malicious package) - [MAL-2025-43981](https://insights.sbomify.com/MAL-2025-43981/): Malicious code in dew_cjnhr_v8obg_prairie (npm) (malicious package) - [MAL-2025-43980](https://insights.sbomify.com/MAL-2025-43980/): Malicious code in development-else-especially (npm) (malicious package) - [MAL-2025-4398](https://insights.sbomify.com/MAL-2025-4398/): Malicious code in seacloud-database (npm) (malicious package) - [MAL-2025-43979](https://insights.sbomify.com/MAL-2025-43979/): Malicious code in determine-remain-about (npm) (malicious package) - [MAL-2025-43978](https://insights.sbomify.com/MAL-2025-43978/): Malicious code in despina-sync-forever-forever (npm) (malicious package) - [MAL-2025-43977](https://insights.sbomify.com/MAL-2025-43977/): Malicious code in despina-nashira-iota-biohacking (npm) (malicious package) - [MAL-2025-43976](https://insights.sbomify.com/MAL-2025-43976/): Malicious code in desk-shirt-book (npm) (malicious package) - [MAL-2025-43975](https://insights.sbomify.com/MAL-2025-43975/): Malicious code in desert-valley-pdo855-project (npm) (malicious package) - [MAL-2025-43974](https://insights.sbomify.com/MAL-2025-43974/): Malicious code in desert-shake-new (npm) (malicious package) - [MAL-2025-43973](https://insights.sbomify.com/MAL-2025-43973/): Malicious code in desert-cat-lne445-project (npm) (malicious package) - [MAL-2025-43972](https://insights.sbomify.com/MAL-2025-43972/): Malicious code in deptu (npm) (malicious package) - [MAL-2025-43971](https://insights.sbomify.com/MAL-2025-43971/): Malicious code in deptri (npm) (malicious package) - [MAL-2025-43970](https://insights.sbomify.com/MAL-2025-43970/): Malicious code in depsven (npm) (malicious package) - [MAL-2025-4397](https://insights.sbomify.com/MAL-2025-4397/): Malicious code in rth-host-helper (npm) (malicious package) - [MAL-2025-43969](https://insights.sbomify.com/MAL-2025-43969/): Malicious code in depsik (npm) (malicious package) - [MAL-2025-43968](https://insights.sbomify.com/MAL-2025-43968/): Malicious code in depone (npm) (malicious package) - [MAL-2025-43967](https://insights.sbomify.com/MAL-2025-43967/): Malicious code in depnin (npm) (malicious package) - [MAL-2025-43966](https://insights.sbomify.com/MAL-2025-43966/): Malicious code in depfor (npm) (malicious package) - [MAL-2025-43965](https://insights.sbomify.com/MAL-2025-43965/): Malicious code in depfif (npm) (malicious package) - [MAL-2025-43964](https://insights.sbomify.com/MAL-2025-43964/): Malicious code in depenve (npm) (malicious package) - [MAL-2025-43963](https://insights.sbomify.com/MAL-2025-43963/): Malicious code in dependencies-backend-mutation-string (npm) (malicious package) - [MAL-2025-43962](https://insights.sbomify.com/MAL-2025-43962/): Malicious code in depend-spirit-monkey (npm) (malicious package) - [MAL-2025-43961](https://insights.sbomify.com/MAL-2025-43961/): Malicious code in depeit (npm) (malicious package) - [MAL-2025-43960](https://insights.sbomify.com/MAL-2025-43960/): Malicious code in deneb-socketio-sass-loader-rollup-plugin (npm) (malicious package) - [MAL-2025-4396](https://insights.sbomify.com/MAL-2025-4396/): Malicious code in routing-config (npm) (malicious package) - [MAL-2025-43959](https://insights.sbomify.com/MAL-2025-43959/): Malicious code in dendrochronology-gulp-auriga-duplex (npm) (malicious package) - [MAL-2025-43958](https://insights.sbomify.com/MAL-2025-43958/): Malicious code in demeter-protocol (npm) (malicious package) - [MAL-2025-43957](https://insights.sbomify.com/MAL-2025-43957/): Malicious code in delta-cherry-yam-svnlt (npm) (malicious package) - [MAL-2025-43956](https://insights.sbomify.com/MAL-2025-43956/): Malicious code in delta-alpha-charlie-jkmkg (npm) (malicious package) - [MAL-2025-43955](https://insights.sbomify.com/MAL-2025-43955/): Malicious code in delphinus-sirius-proxima-string (npm) (malicious package) - [MAL-2025-43954](https://insights.sbomify.com/MAL-2025-43954/): Malicious code in delphinus-rehype-sync-cassini (npm) (malicious package) - [MAL-2025-43953](https://insights.sbomify.com/MAL-2025-43953/): Malicious code in delphinus-electron-lithosphere-biohacking (npm) (malicious package) - [MAL-2025-43952](https://insights.sbomify.com/MAL-2025-43952/): Malicious code in deimos-eslint-plugin-remark-spica (npm) (malicious package) - [MAL-2025-43951](https://insights.sbomify.com/MAL-2025-43951/): Malicious code in deimos-epimetheus-apollo-fornax (npm) (malicious package) - [MAL-2025-43950](https://insights.sbomify.com/MAL-2025-43950/): Malicious code in daybreak_vy9x0_9vouu_unicorn (npm) (malicious package) - [MAL-2025-4395](https://insights.sbomify.com/MAL-2025-4395/): Malicious code in refreshrewards (npm) (malicious package) - [MAL-2025-43949](https://insights.sbomify.com/MAL-2025-43949/): Malicious code in daweix-fangfa (npm) (malicious package) - [MAL-2025-43948](https://insights.sbomify.com/MAL-2025-43948/): Malicious code in date-uniform-fig-idgvt (npm) (malicious package) - [MAL-2025-43947](https://insights.sbomify.com/MAL-2025-43947/): Malicious code in date-papa-raspberry-wpsqi (npm) (malicious package) - [MAL-2025-43946](https://insights.sbomify.com/MAL-2025-43946/): Malicious code in date-nectarine-grape-jprgq (npm) (malicious package) - [MAL-2025-43945](https://insights.sbomify.com/MAL-2025-43945/): Malicious code in date-lemon-xigua-ktasf (npm) (malicious package) - [MAL-2025-43944](https://insights.sbomify.com/MAL-2025-43944/): Malicious code in date-banana-mango-wwutn (npm) (malicious package) - [MAL-2025-43943](https://insights.sbomify.com/MAL-2025-43943/): Malicious code in dashan-shengjing (npm) (malicious package) - [MAL-2025-43942](https://insights.sbomify.com/MAL-2025-43942/): Malicious code in darkness-curious-between (npm) (malicious package) - [MAL-2025-43941](https://insights.sbomify.com/MAL-2025-43941/): Malicious code in darkenergy-tool-algol-spica (npm) (malicious package) - [MAL-2025-43940](https://insights.sbomify.com/MAL-2025-43940/): Malicious code in dapo-hexiegande-bayizhong-fangfa (npm) (malicious package) - [MAL-2025-4394](https://insights.sbomify.com/MAL-2025-4394/): Malicious code in react-xterm2 (npm) (malicious package) - [MAL-2025-43939](https://insights.sbomify.com/MAL-2025-43939/): Malicious code in dangxiade-liliang (npm) (malicious package) - [MAL-2025-43938](https://insights.sbomify.com/MAL-2025-43938/): Malicious code in dangerous-form-political (npm) (malicious package) - [MAL-2025-43937](https://insights.sbomify.com/MAL-2025-43937/): Malicious code in dangdai-zhanxing-yanjiu (npm) (malicious package) - [MAL-2025-43936](https://insights.sbomify.com/MAL-2025-43936/): Malicious code in dangdai-gudian-zhanxing-yanjiu (npm) (malicious package) - [MAL-2025-43935](https://insights.sbomify.com/MAL-2025-43935/): Malicious code in dandelion-honey-roe710-project (npm) (malicious package) - [MAL-2025-43934](https://insights.sbomify.com/MAL-2025-43934/): Malicious code in daliusheng-tongjie-zhong (npm) (malicious package) - [MAL-2025-43933](https://insights.sbomify.com/MAL-2025-43933/): Malicious code in daliuren-zhinan (npm) (malicious package) - [MAL-2025-43932](https://insights.sbomify.com/MAL-2025-43932/): Malicious code in daliuren-duanan-shuzheng (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/625/