# Vulnerabilities published in 2025 - [MAL-2025-43120](https://insights.sbomify.com/MAL-2025-43120/): Malicious code in @zalastax/nolb-amw (npm) (malicious package) - [MAL-2025-4312](https://insights.sbomify.com/MAL-2025-4312/): Malicious code in client-controls-module (npm) (malicious package) - [MAL-2025-43119](https://insights.sbomify.com/MAL-2025-43119/): Malicious code in @zalastax/nolb-amv (npm) (malicious package) - [MAL-2025-43118](https://insights.sbomify.com/MAL-2025-43118/): Malicious code in @zalastax/nolb-amu (npm) (malicious package) - [MAL-2025-43117](https://insights.sbomify.com/MAL-2025-43117/): Malicious code in @zalastax/nolb-ali1 (npm) (malicious package) - [MAL-2025-43116](https://insights.sbomify.com/MAL-2025-43116/): Malicious code in @zalastax/nolb-ald (npm) (malicious package) - [MAL-2025-43115](https://insights.sbomify.com/MAL-2025-43115/): Malicious code in @zalastax/nolb-al_ (npm) (malicious package) - [MAL-2025-43114](https://insights.sbomify.com/MAL-2025-43114/): Malicious code in @zalastax/nolb-al4 (npm) (malicious package) - [MAL-2025-43113](https://insights.sbomify.com/MAL-2025-43113/): Malicious code in @zalastax/nolb-aio (npm) (malicious package) - [MAL-2025-43112](https://insights.sbomify.com/MAL-2025-43112/): Malicious code in @zalastax/nolb-ain (npm) (malicious package) - [MAL-2025-43111](https://insights.sbomify.com/MAL-2025-43111/): Malicious code in @zalastax/nolb-aim (npm) (malicious package) - [MAL-2025-43110](https://insights.sbomify.com/MAL-2025-43110/): Malicious code in @zalastax/nolb-addc (npm) (malicious package) - [MAL-2025-4311](https://insights.sbomify.com/MAL-2025-4311/): Malicious code in client-authentication-module (npm) (malicious package) - [MAL-2025-43109](https://insights.sbomify.com/MAL-2025-43109/): Malicious code in @zalastax/nolb-a2 (npm) (malicious package) - [MAL-2025-43108](https://insights.sbomify.com/MAL-2025-43108/): Malicious code in @zalastax/nolb-_z5 (npm) (malicious package) - [MAL-2025-43107](https://insights.sbomify.com/MAL-2025-43107/): Malicious code in @zalastax/nolb-_z3 (npm) (malicious package) - [MAL-2025-43106](https://insights.sbomify.com/MAL-2025-43106/): Malicious code in @zalastax/nolb-_z2 (npm) (malicious package) - [MAL-2025-43105](https://insights.sbomify.com/MAL-2025-43105/): Malicious code in @zalastax/nolb-_yau (npm) (malicious package) - [MAL-2025-43104](https://insights.sbomify.com/MAL-2025-43104/): Malicious code in @zalastax/nolb-_y- (npm) (malicious package) - [MAL-2025-43103](https://insights.sbomify.com/MAL-2025-43103/): Malicious code in @zalastax/nolb-_xy (npm) (malicious package) - [MAL-2025-43102](https://insights.sbomify.com/MAL-2025-43102/): Malicious code in @zalastax/nolb-_xx (npm) (malicious package) - [MAL-2025-43101](https://insights.sbomify.com/MAL-2025-43101/): Malicious code in @zalastax/nolb-_xw (npm) (malicious package) - [MAL-2025-43100](https://insights.sbomify.com/MAL-2025-43100/): Malicious code in @zalastax/nolb-_wk (npm) (malicious package) - [MAL-2025-4310](https://insights.sbomify.com/MAL-2025-4310/): Malicious code in chromastore (npm) (malicious package) - [MAL-2025-431](https://insights.sbomify.com/MAL-2025-431/): Malicious code in dropbox-oauth (npm) (malicious package) - [MAL-2025-43099](https://insights.sbomify.com/MAL-2025-43099/): Malicious code in @zalastax/nolb-_wab (npm) (malicious package) - [MAL-2025-43098](https://insights.sbomify.com/MAL-2025-43098/): Malicious code in @zalastax/nolb-_w6 (npm) (malicious package) - [MAL-2025-43097](https://insights.sbomify.com/MAL-2025-43097/): Malicious code in @zalastax/nolb-_w5 (npm) (malicious package) - [MAL-2025-43096](https://insights.sbomify.com/MAL-2025-43096/): Malicious code in @zalastax/nolb-_w4 (npm) (malicious package) - [MAL-2025-43095](https://insights.sbomify.com/MAL-2025-43095/): Malicious code in @zalastax/nolb-_vl (npm) (malicious package) - [MAL-2025-43094](https://insights.sbomify.com/MAL-2025-43094/): Malicious code in @zalastax/nolb-_vib (npm) (malicious package) - [MAL-2025-43093](https://insights.sbomify.com/MAL-2025-43093/): Malicious code in @zalastax/nolb-_via (npm) (malicious package) - [MAL-2025-43092](https://insights.sbomify.com/MAL-2025-43092/): Malicious code in @zalastax/nolb-_vi9 (npm) (malicious package) - [MAL-2025-43091](https://insights.sbomify.com/MAL-2025-43091/): Malicious code in @zalastax/nolb-_usx (npm) (malicious package) - [MAL-2025-43090](https://insights.sbomify.com/MAL-2025-43090/): Malicious code in @zalastax/nolb-_types_a (npm) (malicious package) - [MAL-2025-4309](https://insights.sbomify.com/MAL-2025-4309/): Malicious code in choosetreasure (npm) (malicious package) - [MAL-2025-43089](https://insights.sbomify.com/MAL-2025-43089/): Malicious code in @zalastax/nolb-_types_3 (npm) (malicious package) - [MAL-2025-43088](https://insights.sbomify.com/MAL-2025-43088/): Malicious code in @zalastax/nolb-_types_1 (npm) (malicious package) - [MAL-2025-43087](https://insights.sbomify.com/MAL-2025-43087/): Malicious code in @zalastax/nolb-_try (npm) (malicious package) - [MAL-2025-43086](https://insights.sbomify.com/MAL-2025-43086/): Malicious code in @zalastax/nolb-_trivikr-test_q (npm) (malicious package) - [MAL-2025-43085](https://insights.sbomify.com/MAL-2025-43085/): Malicious code in @zalastax/nolb-_trivikr-test_p (npm) (malicious package) - [MAL-2025-43084](https://insights.sbomify.com/MAL-2025-43084/): Malicious code in @zalastax/nolb-_trivikr-test_n (npm) (malicious package) - [MAL-2025-43083](https://insights.sbomify.com/MAL-2025-43083/): Malicious code in @zalastax/nolb-_tesd (npm) (malicious package) - [MAL-2025-43082](https://insights.sbomify.com/MAL-2025-43082/): Malicious code in @zalastax/nolb-_tesc (npm) (malicious package) - [MAL-2025-43081](https://insights.sbomify.com/MAL-2025-43081/): Malicious code in @zalastax/nolb-_tes_ (npm) (malicious package) - [MAL-2025-43080](https://insights.sbomify.com/MAL-2025-43080/): Malicious code in @zalastax/nolb-_tes- (npm) (malicious package) - [MAL-2025-4308](https://insights.sbomify.com/MAL-2025-4308/): Malicious code in child-youth-promotion-banner (npm) (malicious package) - [MAL-2025-43079](https://insights.sbomify.com/MAL-2025-43079/): Malicious code in @zalastax/nolb-_syy (npm) (malicious package) - [MAL-2025-43078](https://insights.sbomify.com/MAL-2025-43078/): Malicious code in @zalastax/nolb-_swu (npm) (malicious package) - [MAL-2025-43077](https://insights.sbomify.com/MAL-2025-43077/): Malicious code in @zalastax/nolb-_swt (npm) (malicious package) - [MAL-2025-43076](https://insights.sbomify.com/MAL-2025-43076/): Malicious code in @zalastax/nolb-_sws (npm) (malicious package) - [MAL-2025-43075](https://insights.sbomify.com/MAL-2025-43075/): Malicious code in @zalastax/nolb-_strd (npm) (malicious package) - [MAL-2025-43074](https://insights.sbomify.com/MAL-2025-43074/): Malicious code in @zalastax/nolb-_smi (npm) (malicious package) - [MAL-2025-43073](https://insights.sbomify.com/MAL-2025-43073/): Malicious code in @zalastax/nolb-_smh (npm) (malicious package) - [MAL-2025-43072](https://insights.sbomify.com/MAL-2025-43072/): Malicious code in @zalastax/nolb-_smg (npm) (malicious package) - [MAL-2025-43071](https://insights.sbomify.com/MAL-2025-43071/): Malicious code in @zalastax/nolb-_smf (npm) (malicious package) - [MAL-2025-43070](https://insights.sbomify.com/MAL-2025-43070/): Malicious code in @zalastax/nolb-_sim (npm) (malicious package) - [MAL-2025-4307](https://insights.sbomify.com/MAL-2025-4307/): Malicious code in cardbuild (npm) (malicious package) - [MAL-2025-43069](https://insights.sbomify.com/MAL-2025-43069/): Malicious code in @zalastax/nolb-_sil (npm) (malicious package) - [MAL-2025-43068](https://insights.sbomify.com/MAL-2025-43068/): Malicious code in @zalastax/nolb-_show (npm) (malicious package) - [MAL-2025-43067](https://insights.sbomify.com/MAL-2025-43067/): Malicious code in @zalastax/nolb-_shov (npm) (malicious package) - [MAL-2025-43066](https://insights.sbomify.com/MAL-2025-43066/): Malicious code in @zalastax/nolb-_shou (npm) (malicious package) - [MAL-2025-43065](https://insights.sbomify.com/MAL-2025-43065/): Malicious code in @zalastax/nolb-_serd (npm) (malicious package) - [MAL-2025-43064](https://insights.sbomify.com/MAL-2025-43064/): Malicious code in @zalastax/nolb-_run (npm) (malicious package) - [MAL-2025-43063](https://insights.sbomify.com/MAL-2025-43063/): Malicious code in @zalastax/nolb-_rum (npm) (malicious package) - [MAL-2025-43062](https://insights.sbomify.com/MAL-2025-43062/): Malicious code in @zalastax/nolb-_rul (npm) (malicious package) - [MAL-2025-43061](https://insights.sbomify.com/MAL-2025-43061/): Malicious code in @zalastax/nolb-_reav (npm) (malicious package) - [MAL-2025-43060](https://insights.sbomify.com/MAL-2025-43060/): Malicious code in @zalastax/nolb-_reactj (npm) (malicious package) - [MAL-2025-4306](https://insights.sbomify.com/MAL-2025-4306/): Malicious code in btcjs-lib (npm) (malicious package) - [MAL-2025-43059](https://insights.sbomify.com/MAL-2025-43059/): Malicious code in @zalastax/nolb-_reacti (npm) (malicious package) - [MAL-2025-43058](https://insights.sbomify.com/MAL-2025-43058/): Malicious code in @zalastax/nolb-_ra9 (npm) (malicious package) - [MAL-2025-43057](https://insights.sbomify.com/MAL-2025-43057/): Malicious code in @zalastax/nolb-_pir (npm) (malicious package) - [MAL-2025-43056](https://insights.sbomify.com/MAL-2025-43056/): Malicious code in @zalastax/nolb-_piq (npm) (malicious package) - [MAL-2025-43055](https://insights.sbomify.com/MAL-2025-43055/): Malicious code in @zalastax/nolb-_pip (npm) (malicious package) - [MAL-2025-43054](https://insights.sbomify.com/MAL-2025-43054/): Malicious code in @zalastax/nolb-_pin (npm) (malicious package) - [MAL-2025-43053](https://insights.sbomify.com/MAL-2025-43053/): Malicious code in @zalastax/nolb-_pew (npm) (malicious package) - [MAL-2025-43052](https://insights.sbomify.com/MAL-2025-43052/): Malicious code in @zalastax/nolb-_pev (npm) (malicious package) - [MAL-2025-43051](https://insights.sbomify.com/MAL-2025-43051/): Malicious code in @zalastax/nolb-_pau (npm) (malicious package) - [MAL-2025-43050](https://insights.sbomify.com/MAL-2025-43050/): Malicious code in @zalastax/nolb-_pat (npm) (malicious package) - [MAL-2025-4305](https://insights.sbomify.com/MAL-2025-4305/): Malicious code in blog-client (npm) (malicious package) - [MAL-2025-43049](https://insights.sbomify.com/MAL-2025-43049/): Malicious code in @zalastax/nolb-_pas (npm) (malicious package) - [MAL-2025-43048](https://insights.sbomify.com/MAL-2025-43048/): Malicious code in @zalastax/nolb-_o (npm) (malicious package) - [MAL-2025-43047](https://insights.sbomify.com/MAL-2025-43047/): Malicious code in @zalastax/nolb-_noonnu_7 (npm) (malicious package) - [MAL-2025-43046](https://insights.sbomify.com/MAL-2025-43046/): Malicious code in @zalastax/nolb-_noonnu_6 (npm) (malicious package) - [MAL-2025-43045](https://insights.sbomify.com/MAL-2025-43045/): Malicious code in @zalastax/nolb-_noonnu_3 (npm) (malicious package) - [MAL-2025-43044](https://insights.sbomify.com/MAL-2025-43044/): Malicious code in @zalastax/nolb-_noonnu_1 (npm) (malicious package) - [MAL-2025-43043](https://insights.sbomify.com/MAL-2025-43043/): Malicious code in @zalastax/nolb-_nge (npm) (malicious package) - [MAL-2025-43042](https://insights.sbomify.com/MAL-2025-43042/): Malicious code in @zalastax/nolb-_ngd (npm) (malicious package) - [MAL-2025-43041](https://insights.sbomify.com/MAL-2025-43041/): Malicious code in @zalastax/nolb-_neg (npm) (malicious package) - [MAL-2025-43040](https://insights.sbomify.com/MAL-2025-43040/): Malicious code in @zalastax/nolb-_nef (npm) (malicious package) - [MAL-2025-4304](https://insights.sbomify.com/MAL-2025-4304/): Malicious code in bkwebportal (npm) (malicious package) - [MAL-2025-43039](https://insights.sbomify.com/MAL-2025-43039/): Malicious code in @zalastax/nolb-_nee (npm) (malicious package) - [MAL-2025-43038](https://insights.sbomify.com/MAL-2025-43038/): Malicious code in @zalastax/nolb-_ned (npm) (malicious package) - [MAL-2025-43037](https://insights.sbomify.com/MAL-2025-43037/): Malicious code in @zalastax/nolb-_maxl (npm) (malicious package) - [MAL-2025-43036](https://insights.sbomify.com/MAL-2025-43036/): Malicious code in @zalastax/nolb-_maxk (npm) (malicious package) - [MAL-2025-43035](https://insights.sbomify.com/MAL-2025-43035/): Malicious code in @zalastax/nolb-_maxj (npm) (malicious package) - [MAL-2025-43034](https://insights.sbomify.com/MAL-2025-43034/): Malicious code in @zalastax/nolb-_maxi (npm) (malicious package) - [MAL-2025-43033](https://insights.sbomify.com/MAL-2025-43033/): Malicious code in @zalastax/nolb-_malp (npm) (malicious package) - [MAL-2025-43032](https://insights.sbomify.com/MAL-2025-43032/): Malicious code in @zalastax/nolb-_malo (npm) (malicious package) - [MAL-2025-43031](https://insights.sbomify.com/MAL-2025-43031/): Malicious code in @zalastax/nolb-_maln (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/635/