# Vulnerabilities published in 2025 - [MAL-2025-43661](https://insights.sbomify.com/MAL-2025-43661/): Malicious code in brook-nugget-ncp984-project (npm) (malicious package) - [MAL-2025-43660](https://insights.sbomify.com/MAL-2025-43660/): Malicious code in breeze_ubvm4_3co2i_snow (npm) (malicious package) - [MAL-2025-4366](https://insights.sbomify.com/MAL-2025-4366/): Malicious code in koishi-plugin-majjan-nanikiri (npm) (malicious package) - [MAL-2025-43659](https://insights.sbomify.com/MAL-2025-43659/): Malicious code in breeze_hw64v_r6pur_crown (npm) (malicious package) - [MAL-2025-43658](https://insights.sbomify.com/MAL-2025-43658/): Malicious code in bravo-kiwi-date-yysap (npm) (malicious package) - [MAL-2025-43657](https://insights.sbomify.com/MAL-2025-43657/): Malicious code in bravo-cherry-golf-dfdho (npm) (malicious package) - [MAL-2025-43656](https://insights.sbomify.com/MAL-2025-43656/): Malicious code in brane-taphonomy-darkmatter-shelljs (npm) (malicious package) - [MAL-2025-43655](https://insights.sbomify.com/MAL-2025-43655/): Malicious code in bramble_qz947_u1skq_limestone (npm) (malicious package) - [MAL-2025-43654](https://insights.sbomify.com/MAL-2025-43654/): Malicious code in bradp-shishang-shengjing (npm) (malicious package) - [MAL-2025-43653](https://insights.sbomify.com/MAL-2025-43653/): Malicious code in bowl-post-once (npm) (malicious package) - [MAL-2025-43652](https://insights.sbomify.com/MAL-2025-43652/): Malicious code in bowl-farther-meant (npm) (malicious package) - [MAL-2025-43651](https://insights.sbomify.com/MAL-2025-43651/): Malicious code in boulder_tgvnz_i2qrx_vista (npm) (malicious package) - [MAL-2025-43650](https://insights.sbomify.com/MAL-2025-43650/): Malicious code in boulder-topaz-wtu108-project (npm) (malicious package) - [MAL-2025-4365](https://insights.sbomify.com/MAL-2025-4365/): Malicious code in jquery.currencies (npm) (malicious package) - [MAL-2025-43649](https://insights.sbomify.com/MAL-2025-43649/): Malicious code in boulder-opal-xiy531-project (npm) (malicious package) - [MAL-2025-43648](https://insights.sbomify.com/MAL-2025-43648/): Malicious code in boulder-elephant-cpq828-project (npm) (malicious package) - [MAL-2025-43647](https://insights.sbomify.com/MAL-2025-43647/): Malicious code in boson-passport-technocracy-electron-builder (npm) (malicious package) - [MAL-2025-43646](https://insights.sbomify.com/MAL-2025-43646/): Malicious code in boson-nodejs-jupiter-robotics (npm) (malicious package) - [MAL-2025-43645](https://insights.sbomify.com/MAL-2025-43645/): Malicious code in borealis-radiant-bionics-jovian (npm) (malicious package) - [MAL-2025-43644](https://insights.sbomify.com/MAL-2025-43644/): Malicious code in borealis-innercore-ganymede-solis (npm) (malicious package) - [MAL-2025-43643](https://insights.sbomify.com/MAL-2025-43643/): Malicious code in bootstrap-biomimicry-parsec-cressida (npm) (malicious package) - [MAL-2025-43642](https://insights.sbomify.com/MAL-2025-43642/): Malicious code in bootes-troposphere-spica-selenium (npm) (malicious package) - [MAL-2025-43641](https://insights.sbomify.com/MAL-2025-43641/): Malicious code in bootes-lyra-mutation-xanadu (npm) (malicious package) - [MAL-2025-43640](https://insights.sbomify.com/MAL-2025-43640/): Malicious code in bootes-local-nightwatch-mongoose (npm) (malicious package) - [MAL-2025-4364](https://insights.sbomify.com/MAL-2025-4364/): Malicious code in jitsi-meet-sdk (npm) (malicious package) - [MAL-2025-43639](https://insights.sbomify.com/MAL-2025-43639/): Malicious code in bonfire-tornado-fdr646-project (npm) (malicious package) - [MAL-2025-43638](https://insights.sbomify.com/MAL-2025-43638/): Malicious code in blueshift-kardashevscale-asteroid-package (npm) (malicious package) - [MAL-2025-43637](https://insights.sbomify.com/MAL-2025-43637/): Malicious code in blossom_vvkcd_wyskm_crystal (npm) (malicious package) - [MAL-2025-43636](https://insights.sbomify.com/MAL-2025-43636/): Malicious code in blossom_svvqv_st5gi_fireworks (npm) (malicious package) - [MAL-2025-43635](https://insights.sbomify.com/MAL-2025-43635/): Malicious code in blossom_e82ak_p9uxt_wind (npm) (malicious package) - [MAL-2025-43634](https://insights.sbomify.com/MAL-2025-43634/): Malicious code in bloom_u03kj_0h6fk_vortex (npm) (malicious package) - [MAL-2025-43633](https://insights.sbomify.com/MAL-2025-43633/): Malicious code in bloom_inv5p_1jfaf_geyser (npm) (malicious package) - [MAL-2025-43632](https://insights.sbomify.com/MAL-2025-43632/): Malicious code in blitz-rollup-scripts-cli (npm) (malicious package) - [MAL-2025-43631](https://insights.sbomify.com/MAL-2025-43631/): Malicious code in blitz-passport-repository-venus (npm) (malicious package) - [MAL-2025-43630](https://insights.sbomify.com/MAL-2025-43630/): Malicious code in blank-sum-knowledge (npm) (malicious package) - [MAL-2025-4363](https://insights.sbomify.com/MAL-2025-4363/): Malicious code in internalwkl-1 (npm) (malicious package) - [MAL-2025-43629](https://insights.sbomify.com/MAL-2025-43629/): Malicious code in blank-hidden-interior (npm) (malicious package) - [MAL-2025-43628](https://insights.sbomify.com/MAL-2025-43628/): Malicious code in blackhole-hyperion-farout-backend (npm) (malicious package) - [MAL-2025-43627](https://insights.sbomify.com/MAL-2025-43627/): Malicious code in blackgoldpvt (npm) (malicious package) - [MAL-2025-43626](https://insights.sbomify.com/MAL-2025-43626/): Malicious code in black-especially-period (npm) (malicious package) - [MAL-2025-43625](https://insights.sbomify.com/MAL-2025-43625/): Malicious code in bishen-gengkuaile (npm) (malicious package) - [MAL-2025-43624](https://insights.sbomify.com/MAL-2025-43624/): Malicious code in biosignature-miranda-impulse-paleoecology (npm) (malicious package) - [MAL-2025-43623](https://insights.sbomify.com/MAL-2025-43623/): Malicious code in bionics-astro-prompts-meteor (npm) (malicious package) - [MAL-2025-43622](https://insights.sbomify.com/MAL-2025-43622/): Malicious code in bioinformatics-quantum-apex-nextjs (npm) (malicious package) - [MAL-2025-43621](https://insights.sbomify.com/MAL-2025-43621/): Malicious code in bioinformatics-procyon-command-writable (npm) (malicious package) - [MAL-2025-43620](https://insights.sbomify.com/MAL-2025-43620/): Malicious code in biohacking-lacerta-redgiant-sync (npm) (malicious package) - [MAL-2025-4362](https://insights.sbomify.com/MAL-2025-4362/): Malicious code in input_control_vis (npm) (malicious package) - [MAL-2025-43619](https://insights.sbomify.com/MAL-2025-43619/): Malicious code in biohacking-epimetheus-bellatrix-genomics (npm) (malicious package) - [MAL-2025-43618](https://insights.sbomify.com/MAL-2025-43618/): Malicious code in biogeochemistry-ursa-grunt-vuepress (npm) (malicious package) - [MAL-2025-43617](https://insights.sbomify.com/MAL-2025-43617/): Malicious code in bierangren-yiyan-kanchuanni (npm) (malicious package) - [MAL-2025-43616](https://insights.sbomify.com/MAL-2025-43616/): Malicious code in bianyi-sanwangxing (npm) (malicious package) - [MAL-2025-43615](https://insights.sbomify.com/MAL-2025-43615/): Malicious code in betelgeuse-react-bootstrap-toml-wolf (npm) (malicious package) - [MAL-2025-43614](https://insights.sbomify.com/MAL-2025-43614/): Malicious code in betelgeuse-json-redgiant-zephyr (npm) (malicious package) - [MAL-2025-43613](https://insights.sbomify.com/MAL-2025-43613/): Malicious code in betelgeuse-gridsome-nightwatch-aether (npm) (malicious package) - [MAL-2025-43612](https://insights.sbomify.com/MAL-2025-43612/): Malicious code in betelgeuse-eslint-config-markdown-pdf-native (npm) (malicious package) - [MAL-2025-43611](https://insights.sbomify.com/MAL-2025-43611/): Malicious code in best-coin-master-spins-genera-tor-in-2023-edkdkz (npm) (malicious package) - [MAL-2025-43610](https://insights.sbomify.com/MAL-2025-43610/): Malicious code in bella-telur33-breki (npm) (malicious package) - [MAL-2025-4361](https://insights.sbomify.com/MAL-2025-4361/): Malicious code in inhouse-root (npm) (malicious package) - [MAL-2025-43609](https://insights.sbomify.com/MAL-2025-43609/): Malicious code in bella-tek92-kyuki (npm) (malicious package) - [MAL-2025-43608](https://insights.sbomify.com/MAL-2025-43608/): Malicious code in bella-soto66-kyuki (npm) (malicious package) - [MAL-2025-43607](https://insights.sbomify.com/MAL-2025-43607/): Malicious code in bella-sego65-breki (npm) (malicious package) - [MAL-2025-43606](https://insights.sbomify.com/MAL-2025-43606/): Malicious code in bella-ragi4-breki (npm) (malicious package) - [MAL-2025-43605](https://insights.sbomify.com/MAL-2025-43605/): Malicious code in bella-nasisayur96-kyuki (npm) (malicious package) - [MAL-2025-43604](https://insights.sbomify.com/MAL-2025-43604/): Malicious code in bella-kue62-breki (npm) (malicious package) - [MAL-2025-43603](https://insights.sbomify.com/MAL-2025-43603/): Malicious code in bella-klanting8-kyuki (npm) (malicious package) - [MAL-2025-43602](https://insights.sbomify.com/MAL-2025-43602/): Malicious code in bella-kembang45-breki (npm) (malicious package) - [MAL-2025-43601](https://insights.sbomify.com/MAL-2025-43601/): Malicious code in bella-gulai98-breki (npm) (malicious package) - [MAL-2025-43600](https://insights.sbomify.com/MAL-2025-43600/): Malicious code in bella-donat44-breki (npm) (malicious package) - [MAL-2025-4360](https://insights.sbomify.com/MAL-2025-4360/): Malicious code in index_patterns_test_plugin (npm) (malicious package) - [MAL-2025-436](https://insights.sbomify.com/MAL-2025-436/): Malicious code in dropbox-database (npm) (malicious package) - [MAL-2025-43599](https://insights.sbomify.com/MAL-2025-43599/): Malicious code in bella-bubur5-breki (npm) (malicious package) - [MAL-2025-43598](https://insights.sbomify.com/MAL-2025-43598/): Malicious code in bella-brongkos35-breki (npm) (malicious package) - [MAL-2025-43597](https://insights.sbomify.com/MAL-2025-43597/): Malicious code in bee-easier-term (npm) (malicious package) - [MAL-2025-43596](https://insights.sbomify.com/MAL-2025-43596/): Malicious code in bayu-toge73-breki (npm) (malicious package) - [MAL-2025-43595](https://insights.sbomify.com/MAL-2025-43595/): Malicious code in bayu-tempe45-breki (npm) (malicious package) - [MAL-2025-43594](https://insights.sbomify.com/MAL-2025-43594/): Malicious code in bayu-nasi40-breki (npm) (malicious package) - [MAL-2025-43593](https://insights.sbomify.com/MAL-2025-43593/): Malicious code in bayu-gembus91-breki (npm) (malicious package) - [MAL-2025-43592](https://insights.sbomify.com/MAL-2025-43592/): Malicious code in bayu-bubur84-kyuki (npm) (malicious package) - [MAL-2025-43591](https://insights.sbomify.com/MAL-2025-43591/): Malicious code in baryon-proxima-fermiparadox-phylogenetics (npm) (malicious package) - [MAL-2025-43590](https://insights.sbomify.com/MAL-2025-43590/): Malicious code in barnard-tailwindcss-postcss-eslint-config (npm) (malicious package) - [MAL-2025-4359](https://insights.sbomify.com/MAL-2025-4359/): Malicious code in hideoutpd (npm) (malicious package) - [MAL-2025-43589](https://insights.sbomify.com/MAL-2025-43589/): Malicious code in barnard-sequelize-buffer-duplex (npm) (malicious package) - [MAL-2025-43588](https://insights.sbomify.com/MAL-2025-43588/): Malicious code in barn-apart-between (npm) (malicious package) - [MAL-2025-43587](https://insights.sbomify.com/MAL-2025-43587/): Malicious code in banyan_kg70z_u41tl_realm (npm) (malicious package) - [MAL-2025-43586](https://insights.sbomify.com/MAL-2025-43586/): Malicious code in banyan_gnxkj_i6ko2_xenith (npm) (malicious package) - [MAL-2025-43585](https://insights.sbomify.com/MAL-2025-43585/): Malicious code in banyan_1b2uu_rzk85_blossom (npm) (malicious package) - [MAL-2025-43584](https://insights.sbomify.com/MAL-2025-43584/): Malicious code in banana-yam-charlie-ooadh (npm) (malicious package) - [MAL-2025-43583](https://insights.sbomify.com/MAL-2025-43583/): Malicious code in banana-oscar-foxtrot-qwayi (npm) (malicious package) - [MAL-2025-43582](https://insights.sbomify.com/MAL-2025-43582/): Malicious code in banana-lima-november-aemeh (npm) (malicious package) - [MAL-2025-43581](https://insights.sbomify.com/MAL-2025-43581/): Malicious code in banana-lemon-ugli-ghlkk (npm) (malicious package) - [MAL-2025-43580](https://insights.sbomify.com/MAL-2025-43580/): Malicious code in banana-cherry-tango-ffbbh (npm) (malicious package) - [MAL-2025-4358](https://insights.sbomify.com/MAL-2025-4358/): Malicious code in hermes-inspector-msggen (npm) (malicious package) - [MAL-2025-43579](https://insights.sbomify.com/MAL-2025-43579/): Malicious code in bamei-naxieshi (npm) (malicious package) - [MAL-2025-43578](https://insights.sbomify.com/MAL-2025-43578/): Malicious code in bamei-daren-vol2 (npm) (malicious package) - [MAL-2025-43577](https://insights.sbomify.com/MAL-2025-43577/): Malicious code in bamei-daren-shengjing (npm) (malicious package) - [MAL-2025-43576](https://insights.sbomify.com/MAL-2025-43576/): Malicious code in bamei-daren-qiuai-yishu-guanli-daquan (npm) (malicious package) - [MAL-2025-43575](https://insights.sbomify.com/MAL-2025-43575/): Malicious code in bamei-daren (npm) (malicious package) - [MAL-2025-43574](https://insights.sbomify.com/MAL-2025-43574/): Malicious code in bamboo-vortex-jwz170-project (npm) (malicious package) - [MAL-2025-43573](https://insights.sbomify.com/MAL-2025-43573/): Malicious code in bamboo-prairie-ucn910-project (npm) (malicious package) - [MAL-2025-43572](https://insights.sbomify.com/MAL-2025-43572/): Malicious code in bamboo-pebble-iwc140-project (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/629/