# Vulnerabilities published in 2025


- [MAL-2025-43481](https://insights.sbomify.com/MAL-2025-43481/): Malicious code in apollo-nightwatch-xanadu-iota (npm) (malicious package)
- [MAL-2025-43480](https://insights.sbomify.com/MAL-2025-43480/): Malicious code in apollo-development-eridanus-babel (npm) (malicious package)
- [MAL-2025-4348](https://insights.sbomify.com/MAL-2025-4348/): Malicious code in fs-path-info (npm) (malicious package)
- [MAL-2025-43479](https://insights.sbomify.com/MAL-2025-43479/): Malicious code in apex-spawn-typeorm-delphinus (npm) (malicious package)
- [MAL-2025-43478](https://insights.sbomify.com/MAL-2025-43478/): Malicious code in apachecn-vuln-wiki (npm) (malicious package)
- [MAL-2025-43477](https://insights.sbomify.com/MAL-2025-43477/): Malicious code in apachecn-sys-zh (npm) (malicious package)
- [MAL-2025-43476](https://insights.sbomify.com/MAL-2025-43476/): Malicious code in apachecn-socengi-wiki (npm) (malicious package)
- [MAL-2025-43475](https://insights.sbomify.com/MAL-2025-43475/): Malicious code in apachecn-sec-zh-pt2 (npm) (malicious package)
- [MAL-2025-43474](https://insights.sbomify.com/MAL-2025-43474/): Malicious code in apachecn-react-zh-pt2 (npm) (malicious package)
- [MAL-2025-43473](https://insights.sbomify.com/MAL-2025-43473/): Malicious code in apachecn-react-zh (npm) (malicious package)
- [MAL-2025-43472](https://insights.sbomify.com/MAL-2025-43472/): Malicious code in apachecn-re-wiki (npm) (malicious package)
- [MAL-2025-43471](https://insights.sbomify.com/MAL-2025-43471/): Malicious code in apachecn-oj-wiki (npm) (malicious package)
- [MAL-2025-43470](https://insights.sbomify.com/MAL-2025-43470/): Malicious code in apachecn-node-zh-pt2 (npm) (malicious package)
- [MAL-2025-4347](https://insights.sbomify.com/MAL-2025-4347/): Malicious code in feng-npm-test666 (npm) (malicious package)
- [MAL-2025-43469](https://insights.sbomify.com/MAL-2025-43469/): Malicious code in apachecn-ml-zh-pt2 (npm) (malicious package)
- [MAL-2025-43468](https://insights.sbomify.com/MAL-2025-43468/): Malicious code in apachecn-linux-zh-pt3 (npm) (malicious package)
- [MAL-2025-43467](https://insights.sbomify.com/MAL-2025-43467/): Malicious code in apachecn-js-zh-pt4 (npm) (malicious package)
- [MAL-2025-43466](https://insights.sbomify.com/MAL-2025-43466/): Malicious code in apachecn-js-zh-pt3 (npm) (malicious package)
- [MAL-2025-43465](https://insights.sbomify.com/MAL-2025-43465/): Malicious code in apachecn-jquery-zh-pt2 (npm) (malicious package)
- [MAL-2025-43464](https://insights.sbomify.com/MAL-2025-43464/): Malicious code in apachecn-javaweb-zh-pt2 (npm) (malicious package)
- [MAL-2025-43463](https://insights.sbomify.com/MAL-2025-43463/): Malicious code in apachecn-indie-wiki (npm) (malicious package)
- [MAL-2025-43462](https://insights.sbomify.com/MAL-2025-43462/): Malicious code in apachecn-html-css-zh-pt3 (npm) (malicious package)
- [MAL-2025-43461](https://insights.sbomify.com/MAL-2025-43461/): Malicious code in apachecn-html-css-zh-pt2 (npm) (malicious package)
- [MAL-2025-43460](https://insights.sbomify.com/MAL-2025-43460/): Malicious code in apachecn-ds-zh-pt3 (npm) (malicious package)
- [MAL-2025-4346](https://insights.sbomify.com/MAL-2025-4346/): Malicious code in feature-runtime (npm) (malicious package)
- [MAL-2025-43459](https://insights.sbomify.com/MAL-2025-43459/): Malicious code in apachecn-dl-zh-pt3 (npm) (malicious package)
- [MAL-2025-43458](https://insights.sbomify.com/MAL-2025-43458/): Malicious code in apachecn-dl-zh-pt2 (npm) (malicious package)
- [MAL-2025-43457](https://insights.sbomify.com/MAL-2025-43457/): Malicious code in apachecn-devops-zh-pt5 (npm) (malicious package)
- [MAL-2025-43456](https://insights.sbomify.com/MAL-2025-43456/): Malicious code in antimatter-commitlint-config-angular-archaeoastronomy-lint (npm) (malicious package)
- [MAL-2025-43455](https://insights.sbomify.com/MAL-2025-43455/): Malicious code in antelope_lg2gn_lu22f_maple (npm) (malicious package)
- [MAL-2025-43454](https://insights.sbomify.com/MAL-2025-43454/): Malicious code in antd-dione-gridsome-wolf (npm) (malicious package)
- [MAL-2025-43453](https://insights.sbomify.com/MAL-2025-43453/): Malicious code in antd-cressida-gulp-sqlite (npm) (malicious package)
- [MAL-2025-43452](https://insights.sbomify.com/MAL-2025-43452/): Malicious code in antares-stream-duplex-lightyear (npm) (malicious package)
- [MAL-2025-43451](https://insights.sbomify.com/MAL-2025-43451/): Malicious code in antares-native-ablation-soap (npm) (malicious package)
- [MAL-2025-43450](https://insights.sbomify.com/MAL-2025-43450/): Malicious code in antares-interstellarmedium-corvus-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-4345](https://insights.sbomify.com/MAL-2025-4345/): Malicious code in fc-card-overview (npm) (malicious package)
- [MAL-2025-43449](https://insights.sbomify.com/MAL-2025-43449/): Malicious code in ant-gorge-oyl690-project (npm) (malicious package)
- [MAL-2025-43448](https://insights.sbomify.com/MAL-2025-43448/): Malicious code in anjing-mingxiangde-liliang-xyiling (npm) (malicious package)
- [MAL-2025-43447](https://insights.sbomify.com/MAL-2025-43447/): Malicious code in andromeda-stratosphere-pm2-cosmos (npm) (malicious package)
- [MAL-2025-43446](https://insights.sbomify.com/MAL-2025-43446/): Malicious code in andi-pisang59-breki (npm) (malicious package)
- [MAL-2025-43445](https://insights.sbomify.com/MAL-2025-43445/): Malicious code in andi-oncom64-breki (npm) (malicious package)
- [MAL-2025-43444](https://insights.sbomify.com/MAL-2025-43444/): Malicious code in andi-nasipecel85-breki (npm) (malicious package)
- [MAL-2025-43443](https://insights.sbomify.com/MAL-2025-43443/): Malicious code in andi-lapis55-breki (npm) (malicious package)
- [MAL-2025-43442](https://insights.sbomify.com/MAL-2025-43442/): Malicious code in andi-gaplek80-kyuki (npm) (malicious package)
- [MAL-2025-43441](https://insights.sbomify.com/MAL-2025-43441/): Malicious code in altair-paleoclimatology-wavefunction-library (npm) (malicious package)
- [MAL-2025-43440](https://insights.sbomify.com/MAL-2025-43440/): Malicious code in altair-blaze-html-webpack-plugin-ora (npm) (malicious package)
- [MAL-2025-4344](https://insights.sbomify.com/MAL-2025-4344/): Malicious code in fc-accordion (npm) (malicious package)
- [MAL-2025-43439](https://insights.sbomify.com/MAL-2025-43439/): Malicious code in alphard-pipe-phoebe-antimatter (npm) (malicious package)
- [MAL-2025-43438](https://insights.sbomify.com/MAL-2025-43438/): Malicious code in alpha-zucchini-tango-yadve (npm) (malicious package)
- [MAL-2025-43437](https://insights.sbomify.com/MAL-2025-43437/): Malicious code in alpha-watermelon-romeo-yivln (npm) (malicious package)
- [MAL-2025-43436](https://insights.sbomify.com/MAL-2025-43436/): Malicious code in alpha-orange-fig-davzb (npm) (malicious package)
- [MAL-2025-43435](https://insights.sbomify.com/MAL-2025-43435/): Malicious code in alpha-november-lemon-enndq (npm) (malicious package)
- [MAL-2025-43434](https://insights.sbomify.com/MAL-2025-43434/): Malicious code in alpha-mike-golf-euckn (npm) (malicious package)
- [MAL-2025-43433](https://insights.sbomify.com/MAL-2025-43433/): Malicious code in alpha-kiwi-quince-osutd (npm) (malicious package)
- [MAL-2025-43432](https://insights.sbomify.com/MAL-2025-43432/): Malicious code in alpha-juliet-orange-mndgx (npm) (malicious package)
- [MAL-2025-43431](https://insights.sbomify.com/MAL-2025-43431/): Malicious code in algol-koa-xenos-redis (npm) (malicious package)
- [MAL-2025-43430](https://insights.sbomify.com/MAL-2025-43430/): Malicious code in algol-cross-env-biomimicry-semantic-ui (npm) (malicious package)
- [MAL-2025-4343](https://insights.sbomify.com/MAL-2025-4343/): Malicious code in event-sharing-demo (npm) (malicious package)
- [MAL-2025-43429](https://insights.sbomify.com/MAL-2025-43429/): Malicious code in algol-achernar-kastra-restart (npm) (malicious package)
- [MAL-2025-43428](https://insights.sbomify.com/MAL-2025-43428/): Malicious code in aldebaran-sirius-umbriel-element-ui (npm) (malicious package)
- [MAL-2025-43427](https://insights.sbomify.com/MAL-2025-43427/): Malicious code in aldebaran-kuiperbelt-eris-capella (npm) (malicious package)
- [MAL-2025-43426](https://insights.sbomify.com/MAL-2025-43426/): Malicious code in alchemy_lw6g5_a7dyi_jade (npm) (malicious package)
- [MAL-2025-43425](https://insights.sbomify.com/MAL-2025-43425/): Malicious code in aishi-weiyide-zhenxiang (npm) (malicious package)
- [MAL-2025-43424](https://insights.sbomify.com/MAL-2025-43424/): Malicious code in airbnb-petrology-polaris-singularitarianism (npm) (malicious package)
- [MAL-2025-43423](https://insights.sbomify.com/MAL-2025-43423/): Malicious code in agus-tumis16-breki (npm) (malicious package)
- [MAL-2025-43422](https://insights.sbomify.com/MAL-2025-43422/): Malicious code in agus-sambel63-kyuki (npm) (malicious package)
- [MAL-2025-43421](https://insights.sbomify.com/MAL-2025-43421/): Malicious code in agus-saguer2-breki (npm) (malicious package)
- [MAL-2025-43420](https://insights.sbomify.com/MAL-2025-43420/): Malicious code in agus-rujak45-breki (npm) (malicious package)
- [MAL-2025-4342](https://insights.sbomify.com/MAL-2025-4342/): Malicious code in estatement-fe (npm) (malicious package)
- [MAL-2025-43419](https://insights.sbomify.com/MAL-2025-43419/): Malicious code in agus-mendut30-breki (npm) (malicious package)
- [MAL-2025-43418](https://insights.sbomify.com/MAL-2025-43418/): Malicious code in agus-ikan85-breki (npm) (malicious package)
- [MAL-2025-43417](https://insights.sbomify.com/MAL-2025-43417/): Malicious code in agus-brengkes49-kyuki (npm) (malicious package)
- [MAL-2025-43416](https://insights.sbomify.com/MAL-2025-43416/): Malicious code in aether-venus-lacerta-less-loader (npm) (malicious package)
- [MAL-2025-43415](https://insights.sbomify.com/MAL-2025-43415/): Malicious code in aether-loop-gulp-aldebaran (npm) (malicious package)
- [MAL-2025-43414](https://insights.sbomify.com/MAL-2025-43414/): Malicious code in aether-hyperion-proteomics-ophiuchus (npm) (malicious package)
- [MAL-2025-43413](https://insights.sbomify.com/MAL-2025-43413/): Malicious code in adonis-robotics-cordelia-higgs (npm) (malicious package)
- [MAL-2025-43412](https://insights.sbomify.com/MAL-2025-43412/): Malicious code in adonis-parallax-betelgeuse-aether (npm) (malicious package)
- [MAL-2025-43411](https://insights.sbomify.com/MAL-2025-43411/): Malicious code in adonis-await-winston-non-blocking (npm) (malicious package)
- [MAL-2025-43410](https://insights.sbomify.com/MAL-2025-43410/): Malicious code in ade-wajit68-breki (npm) (malicious package)
- [MAL-2025-4341](https://insights.sbomify.com/MAL-2025-4341/): Malicious code in eslint-typescript-runtime-check (npm) (malicious package)
- [MAL-2025-43409](https://insights.sbomify.com/MAL-2025-43409/): Malicious code in ade-tempe50-breki (npm) (malicious package)
- [MAL-2025-43408](https://insights.sbomify.com/MAL-2025-43408/): Malicious code in ade-telurtahu12-kyuki (npm) (malicious package)
- [MAL-2025-43407](https://insights.sbomify.com/MAL-2025-43407/): Malicious code in ade-tek59-kyuki (npm) (malicious package)
- [MAL-2025-43406](https://insights.sbomify.com/MAL-2025-43406/): Malicious code in ade-sambel2-kyuki (npm) (malicious package)
- [MAL-2025-43405](https://insights.sbomify.com/MAL-2025-43405/): Malicious code in ade-ruwet38-kyuki (npm) (malicious package)
- [MAL-2025-43404](https://insights.sbomify.com/MAL-2025-43404/): Malicious code in ade-rangi43-breki (npm) (malicious package)
- [MAL-2025-43403](https://insights.sbomify.com/MAL-2025-43403/): Malicious code in ade-martabak2-breki (npm) (malicious package)
- [MAL-2025-43402](https://insights.sbomify.com/MAL-2025-43402/): Malicious code in ade-lupis3-kyuki (npm) (malicious package)
- [MAL-2025-43401](https://insights.sbomify.com/MAL-2025-43401/): Malicious code in ade-kue88-breki (npm) (malicious package)
- [MAL-2025-43400](https://insights.sbomify.com/MAL-2025-43400/): Malicious code in ade-ketoprak52-breki (npm) (malicious package)
- [MAL-2025-4340](https://insights.sbomify.com/MAL-2025-4340/): Malicious code in eslint-config-rth (npm) (malicious package)
- [MAL-2025-434](https://insights.sbomify.com/MAL-2025-434/): Malicious code in dropbox-service (npm) (malicious package)
- [MAL-2025-43399](https://insights.sbomify.com/MAL-2025-43399/): Malicious code in ade-bika67-breki (npm) (malicious package)
- [MAL-2025-43398](https://insights.sbomify.com/MAL-2025-43398/): Malicious code in acorn-iris-hyt518-project (npm) (malicious package)
- [MAL-2025-43397](https://insights.sbomify.com/MAL-2025-43397/): Malicious code in acorn-cascade-rws647-project (npm) (malicious package)
- [MAL-2025-43396](https://insights.sbomify.com/MAL-2025-43396/): Malicious code in achernar-meteor-wavefunction-titan (npm) (malicious package)
- [MAL-2025-43395](https://insights.sbomify.com/MAL-2025-43395/): Malicious code in achernar-draco-slidev-test (npm) (malicious package)
- [MAL-2025-43394](https://insights.sbomify.com/MAL-2025-43394/): Malicious code in accretion-sociobiology-transport-ophiuchus (npm) (malicious package)
- [MAL-2025-43393](https://insights.sbomify.com/MAL-2025-43393/): Malicious code in acamar-ariel-barnard-paleoclimatology (npm) (malicious package)
- [MAL-2025-43392](https://insights.sbomify.com/MAL-2025-43392/): Malicious code in abseits_soccer-888 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/631/