# Vulnerabilities published in 2025 - [MAL-2025-43931](https://insights.sbomify.com/MAL-2025-43931/): Malicious code in daily-links-coin-master-free-spins-rrfez (npm) (malicious package) - [MAL-2025-43930](https://insights.sbomify.com/MAL-2025-43930/): Malicious code in daily-links-coin-master-free-spins-rgrszrz (npm) (malicious package) - [MAL-2025-4393](https://insights.sbomify.com/MAL-2025-4393/): Malicious code in react-stitches (npm) (malicious package) - [MAL-2025-43929](https://insights.sbomify.com/MAL-2025-43929/): Malicious code in daily-links-coin-master-free-spins-lmtz (npm) (malicious package) - [MAL-2025-43928](https://insights.sbomify.com/MAL-2025-43928/): Malicious code in daily-links-coin-master-free-spins-2023-dsfe (npm) (malicious package) - [MAL-2025-43927](https://insights.sbomify.com/MAL-2025-43927/): Malicious code in dageng-laoshi-chaozhun-ziweipai (npm) (malicious package) - [MAL-2025-43926](https://insights.sbomify.com/MAL-2025-43926/): Malicious code in daduhui-paoniu-shouce (npm) (malicious package) - [MAL-2025-43925](https://insights.sbomify.com/MAL-2025-43925/): Malicious code in dadi-nengliang-lvmofa (npm) (malicious package) - [MAL-2025-43924](https://insights.sbomify.com/MAL-2025-43924/): Malicious code in dactyl-nightwatch-electron-apex (npm) (malicious package) - [MAL-2025-43923](https://insights.sbomify.com/MAL-2025-43923/): Malicious code in cypress-private-fetch-exosphere (npm) (malicious package) - [MAL-2025-43922](https://insights.sbomify.com/MAL-2025-43922/): Malicious code in cygnus-uninstall-prettier-stylelint-start (npm) (malicious package) - [MAL-2025-43921](https://insights.sbomify.com/MAL-2025-43921/): Malicious code in cygnus-dotenv-parse-variables-pm2-sequelize (npm) (malicious package) - [MAL-2025-43920](https://insights.sbomify.com/MAL-2025-43920/): Malicious code in cybernetics-paleobotany-xanadu-blaze (npm) (malicious package) - [MAL-2025-4392](https://insights.sbomify.com/MAL-2025-4392/): Malicious code in react-loggers (npm) (malicious package) - [MAL-2025-43919](https://insights.sbomify.com/MAL-2025-43919/): Malicious code in cybernetics-nashira-ichnology-izar (npm) (malicious package) - [MAL-2025-43918](https://insights.sbomify.com/MAL-2025-43918/): Malicious code in cybernetics-cordelia-cressida-zenobia (npm) (malicious package) - [MAL-2025-43917](https://insights.sbomify.com/MAL-2025-43917/): Malicious code in cybernetics-callisto-commitizen-rollup-plugin (npm) (malicious package) - [MAL-2025-43916](https://insights.sbomify.com/MAL-2025-43916/): Malicious code in curve-duck-possible (npm) (malicious package) - [MAL-2025-43915](https://insights.sbomify.com/MAL-2025-43915/): Malicious code in csv-readable-exosphere-style-loader (npm) (malicious package) - [MAL-2025-43914](https://insights.sbomify.com/MAL-2025-43914/): Malicious code in csv-astroinformatics-docusaurus-speleology (npm) (malicious package) - [MAL-2025-43913](https://insights.sbomify.com/MAL-2025-43913/): Malicious code in css-minimizer-webpack-plugin-taphonomy-tectonic-hydra (npm) (malicious package) - [MAL-2025-43912](https://insights.sbomify.com/MAL-2025-43912/): Malicious code in crown_ngtqh_u3hyc_raven (npm) (malicious package) - [MAL-2025-43911](https://insights.sbomify.com/MAL-2025-43911/): Malicious code in cross-env-proteomics-superposition-geomorphology (npm) (malicious package) - [MAL-2025-43910](https://insights.sbomify.com/MAL-2025-43910/): Malicious code in cross-env-html-webpack-plugin-writable-dactyl (npm) (malicious package) - [MAL-2025-4391](https://insights.sbomify.com/MAL-2025-4391/): Malicious code in rapper-wish (npm) (malicious package) - [MAL-2025-43909](https://insights.sbomify.com/MAL-2025-43909/): Malicious code in cressida-promise-reveal-md-nashira (npm) (malicious package) - [MAL-2025-43908](https://insights.sbomify.com/MAL-2025-43908/): Malicious code in cressida-higgs-carina-mysql (npm) (malicious package) - [MAL-2025-43907](https://insights.sbomify.com/MAL-2025-43907/): Malicious code in cressida-darkmatter-bootstrap-luna (npm) (malicious package) - [MAL-2025-43906](https://insights.sbomify.com/MAL-2025-43906/): Malicious code in cream-gas-among (npm) (malicious package) - [MAL-2025-43905](https://insights.sbomify.com/MAL-2025-43905/): Malicious code in cosmos-gulp-cli-rollup-plugin (npm) (malicious package) - [MAL-2025-43904](https://insights.sbomify.com/MAL-2025-43904/): Malicious code in cosmology-browserify-blazar-greatfilter (npm) (malicious package) - [MAL-2025-43903](https://insights.sbomify.com/MAL-2025-43903/): Malicious code in cosmochemistry-gridsome-epimetheus-sequelize (npm) (malicious package) - [MAL-2025-43902](https://insights.sbomify.com/MAL-2025-43902/): Malicious code in cosmochemistry-ethology-avior-ophiuchus (npm) (malicious package) - [MAL-2025-43901](https://insights.sbomify.com/MAL-2025-43901/): Malicious code in cosmicsilence-nightwatch-wavefunction-rest (npm) (malicious package) - [MAL-2025-43900](https://insights.sbomify.com/MAL-2025-43900/): Malicious code in cosmiconfig-vortex-proxima-repository (npm) (malicious package) - [MAL-2025-4390](https://insights.sbomify.com/MAL-2025-4390/): Malicious code in raffle-node (npm) (malicious package) - [MAL-2025-439](https://insights.sbomify.com/MAL-2025-439/): Malicious code in dropbox-tools (npm) (malicious package) - [MAL-2025-43899](https://insights.sbomify.com/MAL-2025-43899/): Malicious code in cosmiconfig-build-javascript-ini (npm) (malicious package) - [MAL-2025-43898](https://insights.sbomify.com/MAL-2025-43898/): Malicious code in correct-eager-aside (npm) (malicious package) - [MAL-2025-43897](https://insights.sbomify.com/MAL-2025-43897/): Malicious code in coronalmassejection-javascript-telesto-ethology (npm) (malicious package) - [MAL-2025-43896](https://insights.sbomify.com/MAL-2025-43896/): Malicious code in corner-ear-dig (npm) (malicious package) - [MAL-2025-43895](https://insights.sbomify.com/MAL-2025-43895/): Malicious code in cordelia-quasar-gravity-commitlint-config-angular (npm) (malicious package) - [MAL-2025-43894](https://insights.sbomify.com/MAL-2025-43894/): Malicious code in cordelia-gulp-plutology-multiverse (npm) (malicious package) - [MAL-2025-43893](https://insights.sbomify.com/MAL-2025-43893/): Malicious code in cordelia-csv-nightmare-exosphere (npm) (malicious package) - [MAL-2025-43892](https://insights.sbomify.com/MAL-2025-43892/): Malicious code in copilotstudio-console (npm) (malicious package) - [MAL-2025-43891](https://insights.sbomify.com/MAL-2025-43891/): Malicious code in cool-rays-appearance (npm) (malicious package) - [MAL-2025-43890](https://insights.sbomify.com/MAL-2025-43890/): Malicious code in cooegamess (npm) (malicious package) - [MAL-2025-4389](https://insights.sbomify.com/MAL-2025-4389/): Malicious code in prettier-config-rth (npm) (malicious package) - [MAL-2025-43889](https://insights.sbomify.com/MAL-2025-43889/): Malicious code in convict-fomalhaut-morgan-cross-env (npm) (malicious package) - [MAL-2025-43888](https://insights.sbomify.com/MAL-2025-43888/): Malicious code in convict-betelgeuse-archaeoastronomy-xml (npm) (malicious package) - [MAL-2025-43887](https://insights.sbomify.com/MAL-2025-43887/): Malicious code in contoso.frontend.web (npm) (malicious package) - [MAL-2025-43886](https://insights.sbomify.com/MAL-2025-43886/): Malicious code in continent-slope-went (npm) (malicious package) - [MAL-2025-43885](https://insights.sbomify.com/MAL-2025-43885/): Malicious code in congyi-daon-langji (npm) (malicious package) - [MAL-2025-43884](https://insights.sbomify.com/MAL-2025-43884/): Malicious code in congxinshou-daodashi-xunlian-jihua (npm) (malicious package) - [MAL-2025-43883](https://insights.sbomify.com/MAL-2025-43883/): Malicious code in congxinling-daoxibaode-liaoyu (npm) (malicious package) - [MAL-2025-43882](https://insights.sbomify.com/MAL-2025-43882/): Malicious code in congress-lady-short (npm) (malicious package) - [MAL-2025-43881](https://insights.sbomify.com/MAL-2025-43881/): Malicious code in configstore-oberon-proxima-duplex (npm) (malicious package) - [MAL-2025-43880](https://insights.sbomify.com/MAL-2025-43880/): Malicious code in configstore-graviton-halley-polaris (npm) (malicious package) - [MAL-2025-4388](https://insights.sbomify.com/MAL-2025-4388/): Malicious code in plugin-helper (npm) (malicious package) - [MAL-2025-43879](https://insights.sbomify.com/MAL-2025-43879/): Malicious code in config-subscription-quasar-await (npm) (malicious package) - [MAL-2025-43878](https://insights.sbomify.com/MAL-2025-43878/): Malicious code in config-odin-io-procyon (npm) (malicious package) - [MAL-2025-43877](https://insights.sbomify.com/MAL-2025-43877/): Malicious code in concurrently-promise-umbriel-mdx (npm) (malicious package) - [MAL-2025-43876](https://insights.sbomify.com/MAL-2025-43876/): Malicious code in commitlint-sedimentology-got-css-loader (npm) (malicious package) - [MAL-2025-43875](https://insights.sbomify.com/MAL-2025-43875/): Malicious code in commitlint-query-loop-gulp (npm) (malicious package) - [MAL-2025-43874](https://insights.sbomify.com/MAL-2025-43874/): Malicious code in commitlint-pm2-proxima-dotenv-safe (npm) (malicious package) - [MAL-2025-43873](https://insights.sbomify.com/MAL-2025-43873/): Malicious code in commitlint-nightmare-websockets-boson (npm) (malicious package) - [MAL-2025-43872](https://insights.sbomify.com/MAL-2025-43872/): Malicious code in commitlint-config-angular-photon-plutology-bioinformatics (npm) (malicious package) - [MAL-2025-43871](https://insights.sbomify.com/MAL-2025-43871/): Malicious code in commitizen-stratosphere-karma-blazar (npm) (malicious package) - [MAL-2025-43870](https://insights.sbomify.com/MAL-2025-43870/): Malicious code in commitizen-fomalhaut-slidev-mocha (npm) (malicious package) - [MAL-2025-4387](https://insights.sbomify.com/MAL-2025-4387/): Malicious code in performance-appraisal (npm) (malicious package) - [MAL-2025-43869](https://insights.sbomify.com/MAL-2025-43869/): Malicious code in command-halley-sagitta-changelog (npm) (malicious package) - [MAL-2025-43868](https://insights.sbomify.com/MAL-2025-43868/): Malicious code in command-frontend-leda-zephyr (npm) (malicious package) - [MAL-2025-43867](https://insights.sbomify.com/MAL-2025-43867/): Malicious code in comfortable-farmer-hand (npm) (malicious package) - [MAL-2025-43866](https://insights.sbomify.com/MAL-2025-43866/): Malicious code in comet-json-proxima-kastra (npm) (malicious package) - [MAL-2025-43865](https://insights.sbomify.com/MAL-2025-43865/): Malicious code in column-car-vast (npm) (malicious package) - [MAL-2025-43864](https://insights.sbomify.com/MAL-2025-43864/): Malicious code in colorwizgamess (npm) (malicious package) - [MAL-2025-43863](https://insights.sbomify.com/MAL-2025-43863/): Malicious code in coin-mastr-free-spins-links (npm) (malicious package) - [MAL-2025-43862](https://insights.sbomify.com/MAL-2025-43862/): Malicious code in coin-master-unlimited-free-spins-working-jefkekd (npm) (malicious package) - [MAL-2025-43861](https://insights.sbomify.com/MAL-2025-43861/): Malicious code in coin-master-unlimited-free-spins-leld62 (npm) (malicious package) - [MAL-2025-43860](https://insights.sbomify.com/MAL-2025-43860/): Malicious code in coin-master-spins-links-for-free-zdzad (npm) (malicious package) - [MAL-2025-4386](https://insights.sbomify.com/MAL-2025-4386/): Malicious code in pdfplumber (npm) (malicious package) - [MAL-2025-43859](https://insights.sbomify.com/MAL-2025-43859/): Malicious code in coin-master-spins-free-april-2023-efkdz (npm) (malicious package) - [MAL-2025-43858](https://insights.sbomify.com/MAL-2025-43858/): Malicious code in coin-master-spins-for-free-2023-updated-edjgrfe (npm) (malicious package) - [MAL-2025-43857](https://insights.sbomify.com/MAL-2025-43857/): Malicious code in coin-master-spins-2023-april-dskdkzd (npm) (malicious package) - [MAL-2025-43856](https://insights.sbomify.com/MAL-2025-43856/): Malicious code in coin-master-free-spins-trick-march-2023-ekdlzd (npm) (malicious package) - [MAL-2025-43855](https://insights.sbomify.com/MAL-2025-43855/): Malicious code in coin-master-free-spins-method-2023-working-and-updated-kefle (npm) (malicious package) - [MAL-2025-43854](https://insights.sbomify.com/MAL-2025-43854/): Malicious code in coin-master-free-spins-april-2023-fjdk (npm) (malicious package) - [MAL-2025-43853](https://insights.sbomify.com/MAL-2025-43853/): Malicious code in coin-master-free-spins-2023-links-zezetfc (npm) (malicious package) - [MAL-2025-43852](https://insights.sbomify.com/MAL-2025-43852/): Malicious code in coin-master-free-spins-2023-links-zezdefcv (npm) (malicious package) - [MAL-2025-43851](https://insights.sbomify.com/MAL-2025-43851/): Malicious code in coin-master-free-spins-2023-links-xqszze (npm) (malicious package) - [MAL-2025-43850](https://insights.sbomify.com/MAL-2025-43850/): Malicious code in coin-master-free-spins-2023-links-iokujy (npm) (malicious package) - [MAL-2025-4385](https://insights.sbomify.com/MAL-2025-4385/): Malicious code in payment-gateway-internal (npm) (malicious package) - [MAL-2025-43849](https://insights.sbomify.com/MAL-2025-43849/): Malicious code in coin-master-free-spins-2023-links-dled (npm) (malicious package) - [MAL-2025-43848](https://insights.sbomify.com/MAL-2025-43848/): Malicious code in coin-master-free-spins-2023-links-dfdsfe (npm) (malicious package) - [MAL-2025-43847](https://insights.sbomify.com/MAL-2025-43847/): Malicious code in coin-master-free-spins-2023-dkzdk (npm) (malicious package) - [MAL-2025-43846](https://insights.sbomify.com/MAL-2025-43846/): Malicious code in coin-master-free-spins-2023-co-ins-zkdkz (npm) (malicious package) - [MAL-2025-43845](https://insights.sbomify.com/MAL-2025-43845/): Malicious code in coin-master-free-spin-updated-2023-ddkedkhyht (npm) (malicious package) - [MAL-2025-43844](https://insights.sbomify.com/MAL-2025-43844/): Malicious code in coin-master-free-spin-2023-fadsdz (npm) (malicious package) - [MAL-2025-43843](https://insights.sbomify.com/MAL-2025-43843/): Malicious code in coin-master-50000-free-spins-dkdezd (npm) (malicious package) - [MAL-2025-43842](https://insights.sbomify.com/MAL-2025-43842/): Malicious code in coffee-small-lake (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/626/