# Vulnerabilities published in 2025 - [MAL-2025-43841](https://insights.sbomify.com/MAL-2025-43841/): Malicious code in coach-improve-screen (npm) (malicious package) - [MAL-2025-43840](https://insights.sbomify.com/MAL-2025-43840/): Malicious code in coach-gas-police (npm) (malicious package) - [MAL-2025-4384](https://insights.sbomify.com/MAL-2025-4384/): Malicious code in package-meta-resolver (npm) (malicious package) - [MAL-2025-43839](https://insights.sbomify.com/MAL-2025-43839/): Malicious code in coach-fix-composed (npm) (malicious package) - [MAL-2025-43838](https://insights.sbomify.com/MAL-2025-43838/): Malicious code in co-in-mas-ter-free-spins-trhgrfr (npm) (malicious package) - [MAL-2025-43837](https://insights.sbomify.com/MAL-2025-43837/): Malicious code in co-in-mas-ter-free-spins-rthrtg (npm) (malicious package) - [MAL-2025-43836](https://insights.sbomify.com/MAL-2025-43836/): Malicious code in co-in-mas-ter-free-spins-2023-dflme (npm) (malicious package) - [MAL-2025-43835](https://insights.sbomify.com/MAL-2025-43835/): Malicious code in cluster-slidev-acamar-enceladus (npm) (malicious package) - [MAL-2025-43834](https://insights.sbomify.com/MAL-2025-43834/): Malicious code in cluster-dynamo-cressida-zooarchaeology (npm) (malicious package) - [MAL-2025-43833](https://insights.sbomify.com/MAL-2025-43833/): Malicious code in club-shop-rope (npm) (malicious package) - [MAL-2025-43832](https://insights.sbomify.com/MAL-2025-43832/): Malicious code in cloud-zephyr-oaw109-project (npm) (malicious package) - [MAL-2025-43831](https://insights.sbomify.com/MAL-2025-43831/): Malicious code in close-queen-happen (npm) (malicious package) - [MAL-2025-43830](https://insights.sbomify.com/MAL-2025-43830/): Malicious code in cliff-jellyfish-wfm030-project (npm) (malicious package) - [MAL-2025-4383](https://insights.sbomify.com/MAL-2025-4383/): Malicious code in osd_tp_custom_visualizations (npm) (malicious package) - [MAL-2025-43829](https://insights.sbomify.com/MAL-2025-43829/): Malicious code in cli-shelljs-exoplanetology-indus (npm) (malicious package) - [MAL-2025-43828](https://insights.sbomify.com/MAL-2025-43828/): Malicious code in cli-public-proxima-oberon (npm) (malicious package) - [MAL-2025-43827](https://insights.sbomify.com/MAL-2025-43827/): Malicious code in cli-colors-enceladus-izar (npm) (malicious package) - [MAL-2025-43826](https://insights.sbomify.com/MAL-2025-43826/): Malicious code in cli-bulma-elara-dynamo (npm) (malicious package) - [MAL-2025-43825](https://insights.sbomify.com/MAL-2025-43825/): Malicious code in cladistics-decoherence-perseus-parcel (npm) (malicious package) - [MAL-2025-43824](https://insights.sbomify.com/MAL-2025-43824/): Malicious code in citra-tempe70-breki (npm) (malicious package) - [MAL-2025-43823](https://insights.sbomify.com/MAL-2025-43823/): Malicious code in citra-sroto99-breki (npm) (malicious package) - [MAL-2025-43822](https://insights.sbomify.com/MAL-2025-43822/): Malicious code in citra-serimuka92-breki (npm) (malicious package) - [MAL-2025-43821](https://insights.sbomify.com/MAL-2025-43821/): Malicious code in citra-rendang88-breki (npm) (malicious package) - [MAL-2025-43820](https://insights.sbomify.com/MAL-2025-43820/): Malicious code in citra-otak-otak96-breki (npm) (malicious package) - [MAL-2025-4382](https://insights.sbomify.com/MAL-2025-4382/): Malicious code in node-window-rendering (npm) (malicious package) - [MAL-2025-43819](https://insights.sbomify.com/MAL-2025-43819/): Malicious code in citra-mendoan36-kyuki (npm) (malicious package) - [MAL-2025-43818](https://insights.sbomify.com/MAL-2025-43818/): Malicious code in citra-mangut4-kyuki (npm) (malicious package) - [MAL-2025-43817](https://insights.sbomify.com/MAL-2025-43817/): Malicious code in citra-kue10-breki (npm) (malicious package) - [MAL-2025-43816](https://insights.sbomify.com/MAL-2025-43816/): Malicious code in citra-asinan56-kyuki (npm) (malicious package) - [MAL-2025-43815](https://insights.sbomify.com/MAL-2025-43815/): Malicious code in citadel_tqbm9_re32p_pulse (npm) (malicious package) - [MAL-2025-43814](https://insights.sbomify.com/MAL-2025-43814/): Malicious code in citadel_3nhht_ey5od_ocean (npm) (malicious package) - [MAL-2025-43813](https://insights.sbomify.com/MAL-2025-43813/): Malicious code in cindy-ubi42-kyuki (npm) (malicious package) - [MAL-2025-43812](https://insights.sbomify.com/MAL-2025-43812/): Malicious code in cindy-tahutek65-kyuki (npm) (malicious package) - [MAL-2025-43811](https://insights.sbomify.com/MAL-2025-43811/): Malicious code in cindy-rangi48-breki (npm) (malicious package) - [MAL-2025-43810](https://insights.sbomify.com/MAL-2025-43810/): Malicious code in cindy-pisang4-kyuki (npm) (malicious package) - [MAL-2025-4381](https://insights.sbomify.com/MAL-2025-4381/): Malicious code in next-config-log (npm) (malicious package) - [MAL-2025-43809](https://insights.sbomify.com/MAL-2025-43809/): Malicious code in cindy-ongol-ongol38-breki (npm) (malicious package) - [MAL-2025-43808](https://insights.sbomify.com/MAL-2025-43808/): Malicious code in cindy-mieaceh5-kyuki (npm) (malicious package) - [MAL-2025-43807](https://insights.sbomify.com/MAL-2025-43807/): Malicious code in cindy-mendut24-kyuki (npm) (malicious package) - [MAL-2025-43806](https://insights.sbomify.com/MAL-2025-43806/): Malicious code in cindy-lodeh87-breki (npm) (malicious package) - [MAL-2025-43805](https://insights.sbomify.com/MAL-2025-43805/): Malicious code in cindy-klipo71-breki (npm) (malicious package) - [MAL-2025-43804](https://insights.sbomify.com/MAL-2025-43804/): Malicious code in cici-tumis21-kyuki (npm) (malicious package) - [MAL-2025-43803](https://insights.sbomify.com/MAL-2025-43803/): Malicious code in cici-tongseng35-kyuki (npm) (malicious package) - [MAL-2025-43802](https://insights.sbomify.com/MAL-2025-43802/): Malicious code in cici-sroto35-breki (npm) (malicious package) - [MAL-2025-43801](https://insights.sbomify.com/MAL-2025-43801/): Malicious code in cici-rangi58-breki (npm) (malicious package) - [MAL-2025-43800](https://insights.sbomify.com/MAL-2025-43800/): Malicious code in cici-ragi25-breki (npm) (malicious package) - [MAL-2025-4380](https://insights.sbomify.com/MAL-2025-4380/): Malicious code in netvis (npm) (malicious package) - [MAL-2025-438](https://insights.sbomify.com/MAL-2025-438/): Malicious code in dropbox-tests (npm) (malicious package) - [MAL-2025-43799](https://insights.sbomify.com/MAL-2025-43799/): Malicious code in cici-nasipecel39-breki (npm) (malicious package) - [MAL-2025-43798](https://insights.sbomify.com/MAL-2025-43798/): Malicious code in cici-lapis60-breki (npm) (malicious package) - [MAL-2025-43797](https://insights.sbomify.com/MAL-2025-43797/): Malicious code in cici-kue90-kyuki (npm) (malicious package) - [MAL-2025-43796](https://insights.sbomify.com/MAL-2025-43796/): Malicious code in cici-kue68-breki (npm) (malicious package) - [MAL-2025-43795](https://insights.sbomify.com/MAL-2025-43795/): Malicious code in cici-kemplang46-breki (npm) (malicious package) - [MAL-2025-43794](https://insights.sbomify.com/MAL-2025-43794/): Malicious code in cici-kacang64-breki (npm) (malicious package) - [MAL-2025-43793](https://insights.sbomify.com/MAL-2025-43793/): Malicious code in cici-jamblang50-kyuki (npm) (malicious package) - [MAL-2025-43792](https://insights.sbomify.com/MAL-2025-43792/): Malicious code in cici-gandul54-breki (npm) (malicious package) - [MAL-2025-43791](https://insights.sbomify.com/MAL-2025-43791/): Malicious code in cici-bakwan51-breki (npm) (malicious package) - [MAL-2025-43790](https://insights.sbomify.com/MAL-2025-43790/): Malicious code in chuxuezhede-mingxiangshu (npm) (malicious package) - [MAL-2025-4379](https://insights.sbomify.com/MAL-2025-4379/): Malicious code in mysteryicons (npm) (malicious package) - [MAL-2025-43789](https://insights.sbomify.com/MAL-2025-43789/): Malicious code in chromedriver-mdx-update-enceladus (npm) (malicious package) - [MAL-2025-43788](https://insights.sbomify.com/MAL-2025-43788/): Malicious code in chromedriver-css-minimizer-webpack-plugin-petrology-on (npm) (malicious package) - [MAL-2025-43787](https://insights.sbomify.com/MAL-2025-43787/): Malicious code in chosen-seeing-many (npm) (malicious package) - [MAL-2025-43786](https://insights.sbomify.com/MAL-2025-43786/): Malicious code in chongsu-xinling (npm) (malicious package) - [MAL-2025-43785](https://insights.sbomify.com/MAL-2025-43785/): Malicious code in child-process-query-sagitta-chakra-ui (npm) (malicious package) - [MAL-2025-43784](https://insights.sbomify.com/MAL-2025-43784/): Malicious code in cherry-watermelon-grape-smlaa (npm) (malicious package) - [MAL-2025-43783](https://insights.sbomify.com/MAL-2025-43783/): Malicious code in cherry-vista-yot511-project (npm) (malicious package) - [MAL-2025-43782](https://insights.sbomify.com/MAL-2025-43782/): Malicious code in cherry-reef-ovi707-project (npm) (malicious package) - [MAL-2025-43781](https://insights.sbomify.com/MAL-2025-43781/): Malicious code in cherry-banana-juliet-xoyyn (npm) (malicious package) - [MAL-2025-43780](https://insights.sbomify.com/MAL-2025-43780/): Malicious code in chengshi-lieren-zhihu-wenzhang (npm) (malicious package) - [MAL-2025-4378](https://insights.sbomify.com/MAL-2025-4378/): Malicious code in my-check-inline-loader-plugin (npm) (malicious package) - [MAL-2025-43779](https://insights.sbomify.com/MAL-2025-43779/): Malicious code in chenchangwen-lianai-baodian-vol4 (npm) (malicious package) - [MAL-2025-43778](https://insights.sbomify.com/MAL-2025-43778/): Malicious code in chenchangwen-lianai-baodian-vol3 (npm) (malicious package) - [MAL-2025-43777](https://insights.sbomify.com/MAL-2025-43777/): Malicious code in chenchangwen-lianai-baodian-vol2 (npm) (malicious package) - [MAL-2025-43776](https://insights.sbomify.com/MAL-2025-43776/): Malicious code in chenchangwen-lianai-baodian-vol1 (npm) (malicious package) - [MAL-2025-43775](https://insights.sbomify.com/MAL-2025-43775/): Malicious code in checking-ip (npm) (malicious package) - [MAL-2025-43774](https://insights.sbomify.com/MAL-2025-43774/): Malicious code in charon-prettier-stylelint-kuiperbelt-websockets (npm) (malicious package) - [MAL-2025-43773](https://insights.sbomify.com/MAL-2025-43773/): Malicious code in charlie-oscar-grape-xxtdt (npm) (malicious package) - [MAL-2025-43772](https://insights.sbomify.com/MAL-2025-43772/): Malicious code in charlie-nectarine-alpha-gwxpd (npm) (malicious package) - [MAL-2025-43771](https://insights.sbomify.com/MAL-2025-43771/): Malicious code in charlie-lemon-raspberry-gpwad (npm) (malicious package) - [MAL-2025-43770](https://insights.sbomify.com/MAL-2025-43770/): Malicious code in chaoling-qihao-vol3 (npm) (malicious package) - [MAL-2025-4377](https://insights.sbomify.com/MAL-2025-4377/): Malicious code in mtfe_cos_track (npm) (malicious package) - [MAL-2025-43769](https://insights.sbomify.com/MAL-2025-43769/): Malicious code in chaoling-qihao-vol2 (npm) (malicious package) - [MAL-2025-43768](https://insights.sbomify.com/MAL-2025-43768/): Malicious code in chaoling-qihao-vol1 (npm) (malicious package) - [MAL-2025-43767](https://insights.sbomify.com/MAL-2025-43767/): Malicious code in chaoji-yuehuixue-zhijingdian-huashu (npm) (malicious package) - [MAL-2025-43766](https://insights.sbomify.com/MAL-2025-43766/): Malicious code in chaoji-yuehuixue-youjian-liebiao-huizong (npm) (malicious package) - [MAL-2025-43765](https://insights.sbomify.com/MAL-2025-43765/): Malicious code in chaoji-xiyinli (npm) (malicious package) - [MAL-2025-43764](https://insights.sbomify.com/MAL-2025-43764/): Malicious code in chaoji-dashanxue (npm) (malicious package) - [MAL-2025-43763](https://insights.sbomify.com/MAL-2025-43763/): Malicious code in changelog-uninstall-sirius-jupiter (npm) (malicious package) - [MAL-2025-43762](https://insights.sbomify.com/MAL-2025-43762/): Malicious code in changelog-metabolomics-adonis-eigenstate (npm) (malicious package) - [MAL-2025-43761](https://insights.sbomify.com/MAL-2025-43761/): Malicious code in changelog-duplex-hermes-mini-css-extract-plugin (npm) (malicious package) - [MAL-2025-43760](https://insights.sbomify.com/MAL-2025-43760/): Malicious code in chalk-nightmare-config-tethys (npm) (malicious package) - [MAL-2025-4376](https://insights.sbomify.com/MAL-2025-4376/): Malicious code in mshop2 (npm) (malicious package) - [MAL-2025-43759](https://insights.sbomify.com/MAL-2025-43759/): Malicious code in chalk-fusion-cladistics-ignite (npm) (malicious package) - [MAL-2025-43758](https://insights.sbomify.com/MAL-2025-43758/): Malicious code in chakra-ui-cryptography-zenith-cassini (npm) (malicious package) - [MAL-2025-43757](https://insights.sbomify.com/MAL-2025-43757/): Malicious code in chai-zenith-rocket-hydra (npm) (malicious package) - [MAL-2025-43756](https://insights.sbomify.com/MAL-2025-43756/): Malicious code in chai-version-asthenosphere-fermion (npm) (malicious package) - [MAL-2025-43755](https://insights.sbomify.com/MAL-2025-43755/): Malicious code in chai-prettier-plugin-markdown-weywot-ichnology (npm) (malicious package) - [MAL-2025-43754](https://insights.sbomify.com/MAL-2025-43754/): Malicious code in chai-leda-pavo-mongoose (npm) (malicious package) - [MAL-2025-43753](https://insights.sbomify.com/MAL-2025-43753/): Malicious code in chai-bootes-graviton-venus (npm) (malicious package) - [MAL-2025-43752](https://insights.sbomify.com/MAL-2025-43752/): Malicious code in cg-scratch-zh (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/627/