# Vulnerabilities published in 2025


- [MAL-2025-43030](https://insights.sbomify.com/MAL-2025-43030/): Malicious code in @zalastax/nolb-_m5 (npm) (malicious package)
- [MAL-2025-4303](https://insights.sbomify.com/MAL-2025-4303/): Malicious code in bkeat-pytest (npm) (malicious package)
- [MAL-2025-43029](https://insights.sbomify.com/MAL-2025-43029/): Malicious code in @zalastax/nolb-_m4 (npm) (malicious package)
- [MAL-2025-43028](https://insights.sbomify.com/MAL-2025-43028/): Malicious code in @zalastax/nolb-_m3 (npm) (malicious package)
- [MAL-2025-43027](https://insights.sbomify.com/MAL-2025-43027/): Malicious code in @zalastax/nolb-_m2 (npm) (malicious package)
- [MAL-2025-43026](https://insights.sbomify.com/MAL-2025-43026/): Malicious code in @zalastax/nolb-_juh (npm) (malicious package)
- [MAL-2025-43025](https://insights.sbomify.com/MAL-2025-43025/): Malicious code in @zalastax/nolb-_jug (npm) (malicious package)
- [MAL-2025-43024](https://insights.sbomify.com/MAL-2025-43024/): Malicious code in @zalastax/nolb-_juf (npm) (malicious package)
- [MAL-2025-43023](https://insights.sbomify.com/MAL-2025-43023/): Malicious code in @zalastax/nolb-_jah (npm) (malicious package)
- [MAL-2025-43022](https://insights.sbomify.com/MAL-2025-43022/): Malicious code in @zalastax/nolb-_jag (npm) (malicious package)
- [MAL-2025-43021](https://insights.sbomify.com/MAL-2025-43021/): Malicious code in @zalastax/nolb-_jaf (npm) (malicious package)
- [MAL-2025-43020](https://insights.sbomify.com/MAL-2025-43020/): Malicious code in @zalastax/nolb-_itr (npm) (malicious package)
- [MAL-2025-4302](https://insights.sbomify.com/MAL-2025-4302/): Malicious code in badoo-frontend (npm) (malicious package)
- [MAL-2025-43019](https://insights.sbomify.com/MAL-2025-43019/): Malicious code in @zalastax/nolb-_itq (npm) (malicious package)
- [MAL-2025-43018](https://insights.sbomify.com/MAL-2025-43018/): Malicious code in @zalastax/nolb-_itp (npm) (malicious package)
- [MAL-2025-43017](https://insights.sbomify.com/MAL-2025-43017/): Malicious code in @zalastax/nolb-_ito (npm) (malicious package)
- [MAL-2025-43016](https://insights.sbomify.com/MAL-2025-43016/): Malicious code in @zalastax/nolb-_itn (npm) (malicious package)
- [MAL-2025-43015](https://insights.sbomify.com/MAL-2025-43015/): Malicious code in @zalastax/nolb-_hyper_fun_fluentui-icon-g (npm) (malicious package)
- [MAL-2025-43014](https://insights.sbomify.com/MAL-2025-43014/): Malicious code in @zalastax/nolb-_hyper_fun_fluentui-icon-f (npm) (malicious package)
- [MAL-2025-43013](https://insights.sbomify.com/MAL-2025-43013/): Malicious code in @zalastax/nolb-_hyper_fun_fluentui-icon-e (npm) (malicious package)
- [MAL-2025-43012](https://insights.sbomify.com/MAL-2025-43012/): Malicious code in @zalastax/nolb-_hv (npm) (malicious package)
- [MAL-2025-43011](https://insights.sbomify.com/MAL-2025-43011/): Malicious code in @zalastax/nolb-_huz (npm) (malicious package)
- [MAL-2025-43010](https://insights.sbomify.com/MAL-2025-43010/): Malicious code in @zalastax/nolb-_hu (npm) (malicious package)
- [MAL-2025-4301](https://insights.sbomify.com/MAL-2025-4301/): Malicious code in arcademinigame (npm) (malicious package)
- [MAL-2025-43009](https://insights.sbomify.com/MAL-2025-43009/): Malicious code in @zalastax/nolb-_hou (npm) (malicious package)
- [MAL-2025-43008](https://insights.sbomify.com/MAL-2025-43008/): Malicious code in @zalastax/nolb-_hot (npm) (malicious package)
- [MAL-2025-43007](https://insights.sbomify.com/MAL-2025-43007/): Malicious code in @zalastax/nolb-_hos (npm) (malicious package)
- [MAL-2025-43006](https://insights.sbomify.com/MAL-2025-43006/): Malicious code in @zalastax/nolb-_hor (npm) (malicious package)
- [MAL-2025-43005](https://insights.sbomify.com/MAL-2025-43005/): Malicious code in @zalastax/nolb-_functions-io-labs-perfor (npm) (malicious package)
- [MAL-2025-43004](https://insights.sbomify.com/MAL-2025-43004/): Malicious code in @zalastax/nolb-_functions-io-labs-perfo (npm) (malicious package)
- [MAL-2025-43003](https://insights.sbomify.com/MAL-2025-43003/): Malicious code in @zalastax/nolb-_fog (npm) (malicious package)
- [MAL-2025-43002](https://insights.sbomify.com/MAL-2025-43002/): Malicious code in @zalastax/nolb-_fof (npm) (malicious package)
- [MAL-2025-43001](https://insights.sbomify.com/MAL-2025-43001/): Malicious code in @zalastax/nolb-_foe (npm) (malicious package)
- [MAL-2025-43000](https://insights.sbomify.com/MAL-2025-43000/): Malicious code in @zalastax/nolb-_fiw (npm) (malicious package)
- [MAL-2025-4300](https://insights.sbomify.com/MAL-2025-4300/): Malicious code in appium-rn-id (npm) (malicious package)
- [MAL-2025-430](https://insights.sbomify.com/MAL-2025-430/): Malicious code in dropbox-model (npm) (malicious package)
- [MAL-2025-43](https://insights.sbomify.com/MAL-2025-43/): Malicious code in grafana-sentry-datasource (npm) (malicious package)
- [MAL-2025-42999](https://insights.sbomify.com/MAL-2025-42999/): Malicious code in @zalastax/nolb-_fiv (npm) (malicious package)
- [MAL-2025-42998](https://insights.sbomify.com/MAL-2025-42998/): Malicious code in @zalastax/nolb-_fiu (npm) (malicious package)
- [MAL-2025-42997](https://insights.sbomify.com/MAL-2025-42997/): Malicious code in @zalastax/nolb-_fit (npm) (malicious package)
- [MAL-2025-42996](https://insights.sbomify.com/MAL-2025-42996/): Malicious code in @zalastax/nolb-_eda (npm) (malicious package)
- [MAL-2025-42995](https://insights.sbomify.com/MAL-2025-42995/): Malicious code in @zalastax/nolb-_ed9 (npm) (malicious package)
- [MAL-2025-42994](https://insights.sbomify.com/MAL-2025-42994/): Malicious code in @zalastax/nolb-_ed6 (npm) (malicious package)
- [MAL-2025-42993](https://insights.sbomify.com/MAL-2025-42993/): Malicious code in @zalastax/nolb-_dsr-rollback-org-m (npm) (malicious package)
- [MAL-2025-42992](https://insights.sbomify.com/MAL-2025-42992/): Malicious code in @zalastax/nolb-_dsr-rollback-org-l (npm) (malicious package)
- [MAL-2025-42991](https://insights.sbomify.com/MAL-2025-42991/): Malicious code in @zalastax/nolb-_dsr-rollback-org-k (npm) (malicious package)
- [MAL-2025-42990](https://insights.sbomify.com/MAL-2025-42990/): Malicious code in @zalastax/nolb-_dsr-rollback-org-j (npm) (malicious package)
- [MAL-2025-4299](https://insights.sbomify.com/MAL-2025-4299/): Malicious code in all-star-2019 (npm) (malicious package)
- [MAL-2025-42989](https://insights.sbomify.com/MAL-2025-42989/): Malicious code in @zalastax/nolb-_dsr-rollback-a (npm) (malicious package)
- [MAL-2025-42988](https://insights.sbomify.com/MAL-2025-42988/): Malicious code in @zalastax/nolb-_dsr-role (npm) (malicious package)
- [MAL-2025-42987](https://insights.sbomify.com/MAL-2025-42987/): Malicious code in @zalastax/nolb-_dsr-roi (npm) (malicious package)
- [MAL-2025-42986](https://insights.sbomify.com/MAL-2025-42986/): Malicious code in @zalastax/nolb-_coo (npm) (malicious package)
- [MAL-2025-42985](https://insights.sbomify.com/MAL-2025-42985/): Malicious code in @zalastax/nolb-_conz (npm) (malicious package)
- [MAL-2025-42984](https://insights.sbomify.com/MAL-2025-42984/): Malicious code in @zalastax/nolb-_con (npm) (malicious package)
- [MAL-2025-42983](https://insights.sbomify.com/MAL-2025-42983/): Malicious code in @zalastax/nolb-_co2 (npm) (malicious package)
- [MAL-2025-42982](https://insights.sbomify.com/MAL-2025-42982/): Malicious code in @zalastax/nolb-_co0 (npm) (malicious package)
- [MAL-2025-42981](https://insights.sbomify.com/MAL-2025-42981/): Malicious code in @zalastax/nolb-_cloudm (npm) (malicious package)
- [MAL-2025-42980](https://insights.sbomify.com/MAL-2025-42980/): Malicious code in @zalastax/nolb-_cloudl (npm) (malicious package)
- [MAL-2025-4298](https://insights.sbomify.com/MAL-2025-4298/): Malicious code in agic-code-standards (npm) (malicious package)
- [MAL-2025-42979](https://insights.sbomify.com/MAL-2025-42979/): Malicious code in @zalastax/nolb-_cloudk (npm) (malicious package)
- [MAL-2025-42978](https://insights.sbomify.com/MAL-2025-42978/): Malicious code in @zalastax/nolb-_cloudi (npm) (malicious package)
- [MAL-2025-42977](https://insights.sbomify.com/MAL-2025-42977/): Malicious code in @zalastax/nolb-_appm (npm) (malicious package)
- [MAL-2025-42976](https://insights.sbomify.com/MAL-2025-42976/): Malicious code in @zalastax/nolb-_appl (npm) (malicious package)
- [MAL-2025-42975](https://insights.sbomify.com/MAL-2025-42975/): Malicious code in @zalastax/nolb-_appk (npm) (malicious package)
- [MAL-2025-42974](https://insights.sbomify.com/MAL-2025-42974/): Malicious code in @zalastax/nolb-_alo (npm) (malicious package)
- [MAL-2025-42973](https://insights.sbomify.com/MAL-2025-42973/): Malicious code in @zalastax/nolb-_aln (npm) (malicious package)
- [MAL-2025-42972](https://insights.sbomify.com/MAL-2025-42972/): Malicious code in @zalastax/nolb-_alm (npm) (malicious package)
- [MAL-2025-42971](https://insights.sbomify.com/MAL-2025-42971/): Malicious code in @zalastax/nolb-_alifd_theme-y (npm) (malicious package)
- [MAL-2025-42970](https://insights.sbomify.com/MAL-2025-42970/): Malicious code in @zalastax/nolb-_alifd_theme-x (npm) (malicious package)
- [MAL-2025-4297](https://insights.sbomify.com/MAL-2025-4297/): Malicious code in admin-id (npm) (malicious package)
- [MAL-2025-42969](https://insights.sbomify.com/MAL-2025-42969/): Malicious code in @zalastax/nolb-_alifd_theme-w (npm) (malicious package)
- [MAL-2025-42968](https://insights.sbomify.com/MAL-2025-42968/): Malicious code in @zalastax/nolb-_alifd_theme-v (npm) (malicious package)
- [MAL-2025-42967](https://insights.sbomify.com/MAL-2025-42967/): Malicious code in @tt4b-vmok/standalone-vue (npm) (malicious package)
- [MAL-2025-42966](https://insights.sbomify.com/MAL-2025-42966/): Malicious code in @tt4b-vmok/standalone (npm) (malicious package)
- [MAL-2025-42965](https://insights.sbomify.com/MAL-2025-42965/): Malicious code in @trp-ta-nitro/secrets-nodejs (npm) (malicious package)
- [MAL-2025-42964](https://insights.sbomify.com/MAL-2025-42964/): Malicious code in @trp-beacon-ui-kit/style-tokens (npm) (malicious package)
- [MAL-2025-42963](https://insights.sbomify.com/MAL-2025-42963/): Malicious code in @tobiasredfield/simple-web-app-package (npm) (malicious package)
- [MAL-2025-42962](https://insights.sbomify.com/MAL-2025-42962/): Malicious code in @teasource/voluptatum-esse-ducimus (npm) (malicious package)
- [MAL-2025-42961](https://insights.sbomify.com/MAL-2025-42961/): Malicious code in @teasource/voluptates-deserunt-esse (npm) (malicious package)
- [MAL-2025-42960](https://insights.sbomify.com/MAL-2025-42960/): Malicious code in @teasource/veniam-officiis-rem (npm) (malicious package)
- [MAL-2025-4296](https://insights.sbomify.com/MAL-2025-4296/): Malicious code in accumulate-win (npm) (malicious package)
- [MAL-2025-42959](https://insights.sbomify.com/MAL-2025-42959/): Malicious code in @teasource/totam-odit-vitae (npm) (malicious package)
- [MAL-2025-42958](https://insights.sbomify.com/MAL-2025-42958/): Malicious code in @teasource/sed-repellat-cupiditate (npm) (malicious package)
- [MAL-2025-42957](https://insights.sbomify.com/MAL-2025-42957/): Malicious code in @teasource/rerum-consectetur-quod (npm) (malicious package)
- [MAL-2025-42956](https://insights.sbomify.com/MAL-2025-42956/): Malicious code in @teasource/provident-quos-at (npm) (malicious package)
- [MAL-2025-42955](https://insights.sbomify.com/MAL-2025-42955/): Malicious code in @teasource/placeat-cum-id (npm) (malicious package)
- [MAL-2025-42954](https://insights.sbomify.com/MAL-2025-42954/): Malicious code in @teasource/perspiciatis-facere-impedit (npm) (malicious package)
- [MAL-2025-42953](https://insights.sbomify.com/MAL-2025-42953/): Malicious code in @teasource/omnis-adipisci-dolorum (npm) (malicious package)
- [MAL-2025-42952](https://insights.sbomify.com/MAL-2025-42952/): Malicious code in @teasource/nisi-neque-rerum (npm) (malicious package)
- [MAL-2025-42951](https://insights.sbomify.com/MAL-2025-42951/): Malicious code in @teasource/nihil-molestiae-necessitatibus (npm) (malicious package)
- [MAL-2025-42950](https://insights.sbomify.com/MAL-2025-42950/): Malicious code in @teasource/neque-atque-ducimus (npm) (malicious package)
- [MAL-2025-4295](https://insights.sbomify.com/MAL-2025-4295/): Malicious code in @sl4x0/internal-package (npm) (malicious package)
- [MAL-2025-42949](https://insights.sbomify.com/MAL-2025-42949/): Malicious code in @teasource/nemo-nostrum-quos (npm) (malicious package)
- [MAL-2025-42948](https://insights.sbomify.com/MAL-2025-42948/): Malicious code in @teasource/modi-molestiae-culpa (npm) (malicious package)
- [MAL-2025-42947](https://insights.sbomify.com/MAL-2025-42947/): Malicious code in @teasource/maiores-asperiores-molestias (npm) (malicious package)
- [MAL-2025-42946](https://insights.sbomify.com/MAL-2025-42946/): Malicious code in @teasource/libero-delectus-error (npm) (malicious package)
- [MAL-2025-42945](https://insights.sbomify.com/MAL-2025-42945/): Malicious code in @teasource/labore-quo-velit (npm) (malicious package)
- [MAL-2025-42944](https://insights.sbomify.com/MAL-2025-42944/): Malicious code in @teasource/itaque-totam-voluptatem (npm) (malicious package)
- [MAL-2025-42943](https://insights.sbomify.com/MAL-2025-42943/): Malicious code in @teasource/iste-rem-dolor (npm) (malicious package)
- [MAL-2025-42942](https://insights.sbomify.com/MAL-2025-42942/): Malicious code in @teasource/ipsam-sint-mollitia (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/636/