# Vulnerabilities published in 2025 - [MAL-2025-43751](https://insights.sbomify.com/MAL-2025-43751/): Malicious code in cfan-erlingyiyi-part2 (npm) (malicious package) - [MAL-2025-43750](https://insights.sbomify.com/MAL-2025-43750/): Malicious code in cfan-erlingyiyi-part1 (npm) (malicious package) - [MAL-2025-4375](https://insights.sbomify.com/MAL-2025-4375/): Malicious code in mockup-plugin (npm) (malicious package) - [MAL-2025-43749](https://insights.sbomify.com/MAL-2025-43749/): Malicious code in cfan-erlingyiwu-part6 (npm) (malicious package) - [MAL-2025-43748](https://insights.sbomify.com/MAL-2025-43748/): Malicious code in cfan-erlingyiwu-part5 (npm) (malicious package) - [MAL-2025-43747](https://insights.sbomify.com/MAL-2025-43747/): Malicious code in cfan-erlingyiwu-part4 (npm) (malicious package) - [MAL-2025-43746](https://insights.sbomify.com/MAL-2025-43746/): Malicious code in cfan-erlingyiwu-part3 (npm) (malicious package) - [MAL-2025-43745](https://insights.sbomify.com/MAL-2025-43745/): Malicious code in cfan-erlingyiwu-part2 (npm) (malicious package) - [MAL-2025-43744](https://insights.sbomify.com/MAL-2025-43744/): Malicious code in cfan-erlingyiwu-part1 (npm) (malicious package) - [MAL-2025-43743](https://insights.sbomify.com/MAL-2025-43743/): Malicious code in cfan-erlingyisi-part4 (npm) (malicious package) - [MAL-2025-43742](https://insights.sbomify.com/MAL-2025-43742/): Malicious code in cfan-erlingyisi-part3 (npm) (malicious package) - [MAL-2025-43741](https://insights.sbomify.com/MAL-2025-43741/): Malicious code in cfan-erlingyisi-part2 (npm) (malicious package) - [MAL-2025-43740](https://insights.sbomify.com/MAL-2025-43740/): Malicious code in cfan-erlingyisi-part1 (npm) (malicious package) - [MAL-2025-4374](https://insights.sbomify.com/MAL-2025-4374/): Malicious code in mix-hub-web (npm) (malicious package) - [MAL-2025-43739](https://insights.sbomify.com/MAL-2025-43739/): Malicious code in cfan-erlingyisan-part4 (npm) (malicious package) - [MAL-2025-43738](https://insights.sbomify.com/MAL-2025-43738/): Malicious code in cfan-erlingyisan-part3 (npm) (malicious package) - [MAL-2025-43737](https://insights.sbomify.com/MAL-2025-43737/): Malicious code in cfan-erlingyisan-part1 (npm) (malicious package) - [MAL-2025-43736](https://insights.sbomify.com/MAL-2025-43736/): Malicious code in cfan-erlingyier-part4 (npm) (malicious package) - [MAL-2025-43735](https://insights.sbomify.com/MAL-2025-43735/): Malicious code in cfan-erlingyier-part3 (npm) (malicious package) - [MAL-2025-43734](https://insights.sbomify.com/MAL-2025-43734/): Malicious code in cfan-erlingyier-part2 (npm) (malicious package) - [MAL-2025-43733](https://insights.sbomify.com/MAL-2025-43733/): Malicious code in cfan-erlingyier-part1 (npm) (malicious package) - [MAL-2025-43732](https://insights.sbomify.com/MAL-2025-43732/): Malicious code in cfan-erlinglingqi-part4 (npm) (malicious package) - [MAL-2025-43731](https://insights.sbomify.com/MAL-2025-43731/): Malicious code in cfan-erlinglingqi-part3 (npm) (malicious package) - [MAL-2025-43730](https://insights.sbomify.com/MAL-2025-43730/): Malicious code in cfan-erlinglingqi-part2 (npm) (malicious package) - [MAL-2025-4373](https://insights.sbomify.com/MAL-2025-4373/): Malicious code in mbm-dgacha (npm) (malicious package) - [MAL-2025-43729](https://insights.sbomify.com/MAL-2025-43729/): Malicious code in cfan-erlinglingqi-part1 (npm) (malicious package) - [MAL-2025-43728](https://insights.sbomify.com/MAL-2025-43728/): Malicious code in cfan-erlinglingliu-part4 (npm) (malicious package) - [MAL-2025-43727](https://insights.sbomify.com/MAL-2025-43727/): Malicious code in cfan-erlinglingliu-part3 (npm) (malicious package) - [MAL-2025-43726](https://insights.sbomify.com/MAL-2025-43726/): Malicious code in cfan-erlinglingliu-part2 (npm) (malicious package) - [MAL-2025-43725](https://insights.sbomify.com/MAL-2025-43725/): Malicious code in cfan-erlinglingliu-part1 (npm) (malicious package) - [MAL-2025-43724](https://insights.sbomify.com/MAL-2025-43724/): Malicious code in ceres-commitizen-octans-build (npm) (malicious package) - [MAL-2025-43723](https://insights.sbomify.com/MAL-2025-43723/): Malicious code in centaurus-scripts-node-sass-npm (npm) (malicious package) - [MAL-2025-43722](https://insights.sbomify.com/MAL-2025-43722/): Malicious code in centaurus-ablation-test-phoebe (npm) (malicious package) - [MAL-2025-43721](https://insights.sbomify.com/MAL-2025-43721/): Malicious code in centauri-venus-reveal-md-sirius (npm) (malicious package) - [MAL-2025-43720](https://insights.sbomify.com/MAL-2025-43720/): Malicious code in centauri-ophiuchus-paleontology-juno (npm) (malicious package) - [MAL-2025-4372](https://insights.sbomify.com/MAL-2025-4372/): Malicious code in makitest_npm (npm) (malicious package) - [MAL-2025-43719](https://insights.sbomify.com/MAL-2025-43719/): Malicious code in centauri-io-xanthus-yildun (npm) (malicious package) - [MAL-2025-43718](https://insights.sbomify.com/MAL-2025-43718/): Malicious code in celeste-spica-release-it-hydra (npm) (malicious package) - [MAL-2025-43717](https://insights.sbomify.com/MAL-2025-43717/): Malicious code in ceh-vyiyi-mod-allinone (npm) (malicious package) - [MAL-2025-43716](https://insights.sbomify.com/MAL-2025-43716/): Malicious code in ceh-vyiyi-labman-allinone (npm) (malicious package) - [MAL-2025-43715](https://insights.sbomify.com/MAL-2025-43715/): Malicious code in ceh-vyiling-mod-allinone (npm) (malicious package) - [MAL-2025-43714](https://insights.sbomify.com/MAL-2025-43714/): Malicious code in cat-kale-tyy434-project (npm) (malicious package) - [MAL-2025-43713](https://insights.sbomify.com/MAL-2025-43713/): Malicious code in cat-igloo-oii506-project (npm) (malicious package) - [MAL-2025-43712](https://insights.sbomify.com/MAL-2025-43712/): Malicious code in cat-emerald-wpg440-project (npm) (malicious package) - [MAL-2025-43711](https://insights.sbomify.com/MAL-2025-43711/): Malicious code in cast-younger-screen (npm) (malicious package) - [MAL-2025-43710](https://insights.sbomify.com/MAL-2025-43710/): Malicious code in cassini-jasmine-nuxtjs-sagitta (npm) (malicious package) - [MAL-2025-4371](https://insights.sbomify.com/MAL-2025-4371/): Malicious code in leetrjohn (npm) (malicious package) - [MAL-2025-43709](https://insights.sbomify.com/MAL-2025-43709/): Malicious code in cassini-async-fomalhaut-testcafe (npm) (malicious package) - [MAL-2025-43708](https://insights.sbomify.com/MAL-2025-43708/): Malicious code in cascade_fvmjn_cyisf_ocean (npm) (malicious package) - [MAL-2025-43707](https://insights.sbomify.com/MAL-2025-43707/): Malicious code in cascade_d37t1_ztyfo_vortex (npm) (malicious package) - [MAL-2025-43706](https://insights.sbomify.com/MAL-2025-43706/): Malicious code in cascade_3aoch_rty49_wander (npm) (malicious package) - [MAL-2025-43705](https://insights.sbomify.com/MAL-2025-43705/): Malicious code in cascade-wisp-evc586-project (npm) (malicious package) - [MAL-2025-43704](https://insights.sbomify.com/MAL-2025-43704/): Malicious code in cascade-kiwi-odc042-project (npm) (malicious package) - [MAL-2025-43703](https://insights.sbomify.com/MAL-2025-43703/): Malicious code in cascade-emerald-clf852-project (npm) (malicious package) - [MAL-2025-43702](https://insights.sbomify.com/MAL-2025-43702/): Malicious code in careful-fur-noon (npm) (malicious package) - [MAL-2025-43701](https://insights.sbomify.com/MAL-2025-43701/): Malicious code in capella-heka-deneb-duplex (npm) (malicious package) - [MAL-2025-43700](https://insights.sbomify.com/MAL-2025-43700/): Malicious code in caozong-xinlixue (npm) (malicious package) - [MAL-2025-4370](https://insights.sbomify.com/MAL-2025-4370/): Malicious code in leaderjohn (npm) (malicious package) - [MAL-2025-437](https://insights.sbomify.com/MAL-2025-437/): Malicious code in dropbox-test (npm) (malicious package) - [MAL-2025-43699](https://insights.sbomify.com/MAL-2025-43699/): Malicious code in caokong-renxinde-zhapian-xinlixue (npm) (malicious package) - [MAL-2025-43698](https://insights.sbomify.com/MAL-2025-43698/): Malicious code in caokong-renxinde-yiqilingge-jiqiao (npm) (malicious package) - [MAL-2025-43697](https://insights.sbomify.com/MAL-2025-43697/): Malicious code in candra-tempe26-kyuki (npm) (malicious package) - [MAL-2025-43696](https://insights.sbomify.com/MAL-2025-43696/): Malicious code in candra-peyek94-breki (npm) (malicious package) - [MAL-2025-43695](https://insights.sbomify.com/MAL-2025-43695/): Malicious code in candra-mieaceh54-kyuki (npm) (malicious package) - [MAL-2025-43694](https://insights.sbomify.com/MAL-2025-43694/): Malicious code in candra-keripik48-breki (npm) (malicious package) - [MAL-2025-43693](https://insights.sbomify.com/MAL-2025-43693/): Malicious code in candra-getas89-breki (npm) (malicious package) - [MAL-2025-43692](https://insights.sbomify.com/MAL-2025-43692/): Malicious code in candra-enting34-breki (npm) (malicious package) - [MAL-2025-43691](https://insights.sbomify.com/MAL-2025-43691/): Malicious code in candra-dodol1-breki (npm) (malicious package) - [MAL-2025-43690](https://insights.sbomify.com/MAL-2025-43690/): Malicious code in callisto-testcafe-css-minimizer-webpack-plugin-version (npm) (malicious package) - [MAL-2025-4369](https://insights.sbomify.com/MAL-2025-4369/): Malicious code in lcs-sistic-integration (npm) (malicious package) - [MAL-2025-43689](https://insights.sbomify.com/MAL-2025-43689/): Malicious code in callback-scorpius-planetology-wavefunction (npm) (malicious package) - [MAL-2025-43688](https://insights.sbomify.com/MAL-2025-43688/): Malicious code in callback-cybernetics-readable-eridanus (npm) (malicious package) - [MAL-2025-43687](https://insights.sbomify.com/MAL-2025-43687/): Malicious code in caikangyongde-shuohua-zhidao (npm) (malicious package) - [MAL-2025-43686](https://insights.sbomify.com/MAL-2025-43686/): Malicious code in caijing-zhanxing-quanshu (npm) (malicious package) - [MAL-2025-43685](https://insights.sbomify.com/MAL-2025-43685/): Malicious code in caifude-xiyinli-faze (npm) (malicious package) - [MAL-2025-43684](https://insights.sbomify.com/MAL-2025-43684/): Malicious code in cage-farm-current (npm) (malicious package) - [MAL-2025-43683](https://insights.sbomify.com/MAL-2025-43683/): Malicious code in by-wealth-led (npm) (malicious package) - [MAL-2025-43682](https://insights.sbomify.com/MAL-2025-43682/): Malicious code in butterfly-zenith-vhm989-project (npm) (malicious package) - [MAL-2025-43681](https://insights.sbomify.com/MAL-2025-43681/): Malicious code in butterfly-ant-bff740-project (npm) (malicious package) - [MAL-2025-43680](https://insights.sbomify.com/MAL-2025-43680/): Malicious code in bunyan-xanadu-spica-pegasus (npm) (malicious package) - [MAL-2025-4368](https://insights.sbomify.com/MAL-2025-4368/): Malicious code in kyutai-client (npm) (malicious package) - [MAL-2025-43679](https://insights.sbomify.com/MAL-2025-43679/): Malicious code in bunyan-wavefunction-eleventy-radioastronomy (npm) (malicious package) - [MAL-2025-43678](https://insights.sbomify.com/MAL-2025-43678/): Malicious code in bunyan-spica-optimize-css-assets-webpack-plugin-await (npm) (malicious package) - [MAL-2025-43677](https://insights.sbomify.com/MAL-2025-43677/): Malicious code in bunyan-lacerta-electron-builder-semantic-ui (npm) (malicious package) - [MAL-2025-43676](https://insights.sbomify.com/MAL-2025-43676/): Malicious code in bulma-nodejs-achernar-farout (npm) (malicious package) - [MAL-2025-43675](https://insights.sbomify.com/MAL-2025-43675/): Malicious code in bulma-csrf-polaris-terser (npm) (malicious package) - [MAL-2025-43674](https://insights.sbomify.com/MAL-2025-43674/): Malicious code in building-attached-food (npm) (malicious package) - [MAL-2025-43673](https://insights.sbomify.com/MAL-2025-43673/): Malicious code in buffer-sqlite-titan-subscription (npm) (malicious package) - [MAL-2025-43672](https://insights.sbomify.com/MAL-2025-43672/): Malicious code in buffer-materialize-pulsar-grus (npm) (malicious package) - [MAL-2025-43671](https://insights.sbomify.com/MAL-2025-43671/): Malicious code in buffer-express-eslint-plugin-halley (npm) (malicious package) - [MAL-2025-43670](https://insights.sbomify.com/MAL-2025-43670/): Malicious code in buffalo-yonder-sru375-project (npm) (malicious package) - [MAL-2025-4367](https://insights.sbomify.com/MAL-2025-4367/): Malicious code in koishi-plugin-pinhaofa (npm) (malicious package) - [MAL-2025-43669](https://insights.sbomify.com/MAL-2025-43669/): Malicious code in budi-tek45-breki (npm) (malicious package) - [MAL-2025-43668](https://insights.sbomify.com/MAL-2025-43668/): Malicious code in budi-ruwet47-breki (npm) (malicious package) - [MAL-2025-43667](https://insights.sbomify.com/MAL-2025-43667/): Malicious code in budi-rawon66-kyuki (npm) (malicious package) - [MAL-2025-43666](https://insights.sbomify.com/MAL-2025-43666/): Malicious code in budi-peyek60-breki (npm) (malicious package) - [MAL-2025-43665](https://insights.sbomify.com/MAL-2025-43665/): Malicious code in budi-papeda99-kyuki (npm) (malicious package) - [MAL-2025-43664](https://insights.sbomify.com/MAL-2025-43664/): Malicious code in budi-lengko96-breki (npm) (malicious package) - [MAL-2025-43663](https://insights.sbomify.com/MAL-2025-43663/): Malicious code in budi-bubursumsum17-kyuki (npm) (malicious package) - [MAL-2025-43662](https://insights.sbomify.com/MAL-2025-43662/): Malicious code in brook-zenith-enb578-project (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/628/