# Vulnerabilities published in 2025


- [MAL-2025-42941](https://insights.sbomify.com/MAL-2025-42941/): Malicious code in @teasource/ipsam-rem-sit (npm) (malicious package)
- [MAL-2025-42940](https://insights.sbomify.com/MAL-2025-42940/): Malicious code in @teasource/ipsam-eveniet-amet (npm) (malicious package)
- [MAL-2025-4294](https://insights.sbomify.com/MAL-2025-4294/): Malicious code in @elementor-editor-github-actions/utils (npm) (malicious package)
- [MAL-2025-42939](https://insights.sbomify.com/MAL-2025-42939/): Malicious code in @teasource/incidunt-quas-voluptate (npm) (malicious package)
- [MAL-2025-42938](https://insights.sbomify.com/MAL-2025-42938/): Malicious code in @teasource/in-accusantium-at (npm) (malicious package)
- [MAL-2025-42937](https://insights.sbomify.com/MAL-2025-42937/): Malicious code in @teasource/facilis-nihil-ullam (npm) (malicious package)
- [MAL-2025-42936](https://insights.sbomify.com/MAL-2025-42936/): Malicious code in @teasource/est-nisi-numquam (npm) (malicious package)
- [MAL-2025-42935](https://insights.sbomify.com/MAL-2025-42935/): Malicious code in @teasource/est-fuga-animi (npm) (malicious package)
- [MAL-2025-42934](https://insights.sbomify.com/MAL-2025-42934/): Malicious code in @teasource/eius-fuga-ratione (npm) (malicious package)
- [MAL-2025-42933](https://insights.sbomify.com/MAL-2025-42933/): Malicious code in @teasource/ducimus-magnam-dolor (npm) (malicious package)
- [MAL-2025-42932](https://insights.sbomify.com/MAL-2025-42932/): Malicious code in @teasource/dolorum-dolore-corrupti (npm) (malicious package)
- [MAL-2025-42931](https://insights.sbomify.com/MAL-2025-42931/): Malicious code in @teasource/doloribus-quaerat-officiis (npm) (malicious package)
- [MAL-2025-42930](https://insights.sbomify.com/MAL-2025-42930/): Malicious code in @teasource/deserunt-dolores-ipsam (npm) (malicious package)
- [MAL-2025-4293](https://insights.sbomify.com/MAL-2025-4293/): Malicious code in @demoability/loadgen-core (npm) (malicious package)
- [MAL-2025-42929](https://insights.sbomify.com/MAL-2025-42929/): Malicious code in @teasource/corrupti-architecto-repellendus (npm) (malicious package)
- [MAL-2025-42928](https://insights.sbomify.com/MAL-2025-42928/): Malicious code in @teasource/autem-incidunt-quas (npm) (malicious package)
- [MAL-2025-42927](https://insights.sbomify.com/MAL-2025-42927/): Malicious code in @teasource/aut-asperiores-mollitia (npm) (malicious package)
- [MAL-2025-42926](https://insights.sbomify.com/MAL-2025-42926/): Malicious code in @teasource/asperiores-error-dolor (npm) (malicious package)
- [MAL-2025-42925](https://insights.sbomify.com/MAL-2025-42925/): Malicious code in @teasource/ad-nam-doloremque (npm) (malicious package)
- [MAL-2025-42924](https://insights.sbomify.com/MAL-2025-42924/): Malicious code in @teamteanpm2024/voluptatum-totam-ullam (npm) (malicious package)
- [MAL-2025-42923](https://insights.sbomify.com/MAL-2025-42923/): Malicious code in @teamteanpm2024/voluptatum-eum-doloribus (npm) (malicious package)
- [MAL-2025-42922](https://insights.sbomify.com/MAL-2025-42922/): Malicious code in @teamteanpm2024/voluptatibus-reprehenderit-possimus (npm) (malicious package)
- [MAL-2025-42921](https://insights.sbomify.com/MAL-2025-42921/): Malicious code in @teamteanpm2024/voluptatibus-numquam-porro (npm) (malicious package)
- [MAL-2025-42920](https://insights.sbomify.com/MAL-2025-42920/): Malicious code in @teamteanpm2024/voluptas-eveniet-aut (npm) (malicious package)
- [MAL-2025-4292](https://insights.sbomify.com/MAL-2025-4292/): Malicious code in @act-platform/app-sdk (npm) (malicious package)
- [MAL-2025-42919](https://insights.sbomify.com/MAL-2025-42919/): Malicious code in @teamteanpm2024/voluptas-consequuntur-consectetur (npm) (malicious package)
- [MAL-2025-42918](https://insights.sbomify.com/MAL-2025-42918/): Malicious code in @teamteanpm2024/voluptas-aperiam-aliquam (npm) (malicious package)
- [MAL-2025-42917](https://insights.sbomify.com/MAL-2025-42917/): Malicious code in @teamteanpm2024/vitae-suscipit-quidem (npm) (malicious package)
- [MAL-2025-42916](https://insights.sbomify.com/MAL-2025-42916/): Malicious code in @teamteanpm2024/vero-iure-libero (npm) (malicious package)
- [MAL-2025-42915](https://insights.sbomify.com/MAL-2025-42915/): Malicious code in @teamteanpm2024/veritatis-ipsum-debitis (npm) (malicious package)
- [MAL-2025-42914](https://insights.sbomify.com/MAL-2025-42914/): Malicious code in @teamteanpm2024/veritatis-in-non (npm) (malicious package)
- [MAL-2025-42913](https://insights.sbomify.com/MAL-2025-42913/): Malicious code in @teamteanpm2024/velit-sed-veritatis (npm) (malicious package)
- [MAL-2025-42912](https://insights.sbomify.com/MAL-2025-42912/): Malicious code in @teamteanpm2024/vel-ratione-optio (npm) (malicious package)
- [MAL-2025-42911](https://insights.sbomify.com/MAL-2025-42911/): Malicious code in @teamteanpm2024/vel-consequatur-totam (npm) (malicious package)
- [MAL-2025-42910](https://insights.sbomify.com/MAL-2025-42910/): Malicious code in @teamteanpm2024/ut-debitis-laborum (npm) (malicious package)
- [MAL-2025-4291](https://insights.sbomify.com/MAL-2025-4291/): Malicious code in 12octsportsday (npm) (malicious package)
- [MAL-2025-42909](https://insights.sbomify.com/MAL-2025-42909/): Malicious code in @teamteanpm2024/temporibus-harum-suscipit (npm) (malicious package)
- [MAL-2025-42908](https://insights.sbomify.com/MAL-2025-42908/): Malicious code in @teamteanpm2024/temporibus-assumenda-necessitatibus (npm) (malicious package)
- [MAL-2025-42907](https://insights.sbomify.com/MAL-2025-42907/): Malicious code in @teamteanpm2024/tempore-sapiente-blanditiis (npm) (malicious package)
- [MAL-2025-42906](https://insights.sbomify.com/MAL-2025-42906/): Malicious code in @teamteanpm2024/tempore-quibusdam-enim (npm) (malicious package)
- [MAL-2025-42905](https://insights.sbomify.com/MAL-2025-42905/): Malicious code in @teamteanpm2024/tempore-non-vitae (npm) (malicious package)
- [MAL-2025-42904](https://insights.sbomify.com/MAL-2025-42904/): Malicious code in @teamteanpm2024/tempora-tenetur-magnam (npm) (malicious package)
- [MAL-2025-42903](https://insights.sbomify.com/MAL-2025-42903/): Malicious code in @teamteanpm2024/tempora-ex-explicabo (npm) (malicious package)
- [MAL-2025-42902](https://insights.sbomify.com/MAL-2025-42902/): Malicious code in @teamteanpm2024/sit-optio-enim (npm) (malicious package)
- [MAL-2025-42901](https://insights.sbomify.com/MAL-2025-42901/): Malicious code in @teamteanpm2024/sit-dolore-odio (npm) (malicious package)
- [MAL-2025-42900](https://insights.sbomify.com/MAL-2025-42900/): Malicious code in @teamteanpm2024/similique-tenetur-dolores (npm) (malicious package)
- [MAL-2025-4290](https://insights.sbomify.com/MAL-2025-4290/): Malicious code in vue-vibe (npm) (malicious package)
- [MAL-2025-429](https://insights.sbomify.com/MAL-2025-429/): Malicious code in dropbox-logger (npm) (malicious package)
- [MAL-2025-42899](https://insights.sbomify.com/MAL-2025-42899/): Malicious code in @teamteanpm2024/similique-non-laudantium (npm) (malicious package)
- [MAL-2025-42898](https://insights.sbomify.com/MAL-2025-42898/): Malicious code in @teamteanpm2024/similique-fugit-ullam (npm) (malicious package)
- [MAL-2025-42897](https://insights.sbomify.com/MAL-2025-42897/): Malicious code in @teamteanpm2024/similique-cumque-veritatis (npm) (malicious package)
- [MAL-2025-42896](https://insights.sbomify.com/MAL-2025-42896/): Malicious code in @teamteanpm2024/sed-odit-hic (npm) (malicious package)
- [MAL-2025-42895](https://insights.sbomify.com/MAL-2025-42895/): Malicious code in @teamteanpm2024/saepe-omnis-odit (npm) (malicious package)
- [MAL-2025-42894](https://insights.sbomify.com/MAL-2025-42894/): Malicious code in @teamteanpm2024/repudiandae-vero-temporibus (npm) (malicious package)
- [MAL-2025-42893](https://insights.sbomify.com/MAL-2025-42893/): Malicious code in @teamteanpm2024/repudiandae-laboriosam-ipsum (npm) (malicious package)
- [MAL-2025-42892](https://insights.sbomify.com/MAL-2025-42892/): Malicious code in @teamteanpm2024/reprehenderit-velit-animi (npm) (malicious package)
- [MAL-2025-42891](https://insights.sbomify.com/MAL-2025-42891/): Malicious code in @teamteanpm2024/reprehenderit-provident-vel (npm) (malicious package)
- [MAL-2025-42890](https://insights.sbomify.com/MAL-2025-42890/): Malicious code in @teamteanpm2024/repellat-culpa-ipsa (npm) (malicious package)
- [MAL-2025-4289](https://insights.sbomify.com/MAL-2025-4289/): Malicious code in vite-tsconsole-log (npm) (malicious package)
- [MAL-2025-42889](https://insights.sbomify.com/MAL-2025-42889/): Malicious code in @teamteanpm2024/rem-nulla-fuga (npm) (malicious package)
- [MAL-2025-42888](https://insights.sbomify.com/MAL-2025-42888/): Malicious code in @teamteanpm2024/reiciendis-quod-aut (npm) (malicious package)
- [MAL-2025-42887](https://insights.sbomify.com/MAL-2025-42887/): Malicious code in @teamteanpm2024/recusandae-vero-sapiente (npm) (malicious package)
- [MAL-2025-42886](https://insights.sbomify.com/MAL-2025-42886/): Malicious code in @teamteanpm2024/recusandae-rerum-maxime (npm) (malicious package)
- [MAL-2025-42885](https://insights.sbomify.com/MAL-2025-42885/): Malicious code in @teamteanpm2024/quos-tenetur-impedit (npm) (malicious package)
- [MAL-2025-42884](https://insights.sbomify.com/MAL-2025-42884/): Malicious code in @teamteanpm2024/quos-soluta-fugiat (npm) (malicious package)
- [MAL-2025-42883](https://insights.sbomify.com/MAL-2025-42883/): Malicious code in @teamteanpm2024/quos-quas-molestiae (npm) (malicious package)
- [MAL-2025-42882](https://insights.sbomify.com/MAL-2025-42882/): Malicious code in @teamteanpm2024/quo-accusamus-quasi (npm) (malicious package)
- [MAL-2025-42881](https://insights.sbomify.com/MAL-2025-42881/): Malicious code in @teamteanpm2024/quo-a-totam (npm) (malicious package)
- [MAL-2025-42880](https://insights.sbomify.com/MAL-2025-42880/): Malicious code in @teamteanpm2024/quisquam-aperiam-illo (npm) (malicious package)
- [MAL-2025-4288](https://insights.sbomify.com/MAL-2025-4288/): Malicious code in starknet-types-07 (npm) (malicious package)
- [MAL-2025-42879](https://insights.sbomify.com/MAL-2025-42879/): Malicious code in @teamteanpm2024/quidem-saepe-esse (npm) (malicious package)
- [MAL-2025-42878](https://insights.sbomify.com/MAL-2025-42878/): Malicious code in @teamteanpm2024/quibusdam-velit-sunt (npm) (malicious package)
- [MAL-2025-42877](https://insights.sbomify.com/MAL-2025-42877/): Malicious code in @teamteanpm2024/quibusdam-aliquid-maxime (npm) (malicious package)
- [MAL-2025-42876](https://insights.sbomify.com/MAL-2025-42876/): Malicious code in @teamteanpm2024/quas-tempore-fugiat (npm) (malicious package)
- [MAL-2025-42875](https://insights.sbomify.com/MAL-2025-42875/): Malicious code in @teamteanpm2024/quam-magnam-animi (npm) (malicious package)
- [MAL-2025-42874](https://insights.sbomify.com/MAL-2025-42874/): Malicious code in @teamteanpm2024/provident-expedita-recusandae (npm) (malicious package)
- [MAL-2025-42873](https://insights.sbomify.com/MAL-2025-42873/): Malicious code in @teamteanpm2024/praesentium-distinctio-occaecati (npm) (malicious package)
- [MAL-2025-42872](https://insights.sbomify.com/MAL-2025-42872/): Malicious code in @teamteanpm2024/placeat-veniam-ipsam (npm) (malicious package)
- [MAL-2025-42871](https://insights.sbomify.com/MAL-2025-42871/): Malicious code in @teamteanpm2024/placeat-rerum-libero (npm) (malicious package)
- [MAL-2025-42870](https://insights.sbomify.com/MAL-2025-42870/): Malicious code in @teamteanpm2024/perspiciatis-architecto-harum (npm) (malicious package)
- [MAL-2025-4287](https://insights.sbomify.com/MAL-2025-4287/): Malicious code in staking-config (npm) (malicious package)
- [MAL-2025-42869](https://insights.sbomify.com/MAL-2025-42869/): Malicious code in @teamteanpm2024/perferendis-ut-placeat (npm) (malicious package)
- [MAL-2025-42868](https://insights.sbomify.com/MAL-2025-42868/): Malicious code in @teamteanpm2024/perferendis-inventore-tempore (npm) (malicious package)
- [MAL-2025-42867](https://insights.sbomify.com/MAL-2025-42867/): Malicious code in @teamteanpm2024/pariatur-unde-quam (npm) (malicious package)
- [MAL-2025-42866](https://insights.sbomify.com/MAL-2025-42866/): Malicious code in @teamteanpm2024/pariatur-fugit-atque (npm) (malicious package)
- [MAL-2025-42865](https://insights.sbomify.com/MAL-2025-42865/): Malicious code in @teamteanpm2024/optio-temporibus-delectus (npm) (malicious package)
- [MAL-2025-42864](https://insights.sbomify.com/MAL-2025-42864/): Malicious code in @teamteanpm2024/officia-consequatur-numquam (npm) (malicious package)
- [MAL-2025-42863](https://insights.sbomify.com/MAL-2025-42863/): Malicious code in @teamteanpm2024/odit-omnis-excepturi (npm) (malicious package)
- [MAL-2025-42862](https://insights.sbomify.com/MAL-2025-42862/): Malicious code in @teamteanpm2024/odit-animi-velit (npm) (malicious package)
- [MAL-2025-42861](https://insights.sbomify.com/MAL-2025-42861/): Malicious code in @teamteanpm2024/occaecati-dolor-adipisci (npm) (malicious package)
- [MAL-2025-42860](https://insights.sbomify.com/MAL-2025-42860/): Malicious code in @teamteanpm2024/occaecati-corporis-esse (npm) (malicious package)
- [MAL-2025-4286](https://insights.sbomify.com/MAL-2025-4286/): Malicious code in rest-icon-orchestrator (npm) (malicious package)
- [MAL-2025-42859](https://insights.sbomify.com/MAL-2025-42859/): Malicious code in @teamteanpm2024/nulla-totam-odit (npm) (malicious package)
- [MAL-2025-42858](https://insights.sbomify.com/MAL-2025-42858/): Malicious code in @teamteanpm2024/nulla-iusto-ab (npm) (malicious package)
- [MAL-2025-42857](https://insights.sbomify.com/MAL-2025-42857/): Malicious code in @teamteanpm2024/nulla-fuga-adipisci (npm) (malicious package)
- [MAL-2025-42856](https://insights.sbomify.com/MAL-2025-42856/): Malicious code in @teamteanpm2024/non-in-quam (npm) (malicious package)
- [MAL-2025-42855](https://insights.sbomify.com/MAL-2025-42855/): Malicious code in @teamteanpm2024/nobis-explicabo-ea (npm) (malicious package)
- [MAL-2025-42854](https://insights.sbomify.com/MAL-2025-42854/): Malicious code in @teamteanpm2024/nobis-excepturi-perferendis (npm) (malicious package)
- [MAL-2025-42853](https://insights.sbomify.com/MAL-2025-42853/): Malicious code in @teamteanpm2024/nisi-voluptate-id (npm) (malicious package)
- [MAL-2025-42852](https://insights.sbomify.com/MAL-2025-42852/): Malicious code in @teamteanpm2024/nihil-aperiam-ducimus (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/637/
