# Vulnerabilities published in 2025


- [MAL-2025-42761](https://insights.sbomify.com/MAL-2025-42761/): Malicious code in @teamteanpm2024/dolor-doloremque-mollitia (npm) (malicious package)
- [MAL-2025-42760](https://insights.sbomify.com/MAL-2025-42760/): Malicious code in @teamteanpm2024/dignissimos-et-ullam (npm) (malicious package)
- [MAL-2025-4276](https://insights.sbomify.com/MAL-2025-4276/): Malicious code in debugdogs (npm) (malicious package)
- [MAL-2025-42759](https://insights.sbomify.com/MAL-2025-42759/): Malicious code in @teamteanpm2024/dicta-modi-enim (npm) (malicious package)
- [MAL-2025-42758](https://insights.sbomify.com/MAL-2025-42758/): Malicious code in @teamteanpm2024/deserunt-laborum-hic (npm) (malicious package)
- [MAL-2025-42757](https://insights.sbomify.com/MAL-2025-42757/): Malicious code in @teamteanpm2024/deserunt-eaque-eveniet (npm) (malicious package)
- [MAL-2025-42756](https://insights.sbomify.com/MAL-2025-42756/): Malicious code in @teamteanpm2024/delectus-voluptatum-earum (npm) (malicious package)
- [MAL-2025-42755](https://insights.sbomify.com/MAL-2025-42755/): Malicious code in @teamteanpm2024/delectus-eaque-impedit (npm) (malicious package)
- [MAL-2025-42754](https://insights.sbomify.com/MAL-2025-42754/): Malicious code in @teamteanpm2024/debitis-occaecati-aspernatur (npm) (malicious package)
- [MAL-2025-42753](https://insights.sbomify.com/MAL-2025-42753/): Malicious code in @teamteanpm2024/debitis-molestias-accusantium (npm) (malicious package)
- [MAL-2025-42752](https://insights.sbomify.com/MAL-2025-42752/): Malicious code in @teamteanpm2024/debitis-explicabo-explicabo (npm) (malicious package)
- [MAL-2025-42751](https://insights.sbomify.com/MAL-2025-42751/): Malicious code in @teamteanpm2024/debitis-dolores-nemo (npm) (malicious package)
- [MAL-2025-42750](https://insights.sbomify.com/MAL-2025-42750/): Malicious code in @teamteanpm2024/cupiditate-voluptas-perspiciatis (npm) (malicious package)
- [MAL-2025-4275](https://insights.sbomify.com/MAL-2025-4275/): Malicious code in axios.js (npm) (malicious package)
- [MAL-2025-42749](https://insights.sbomify.com/MAL-2025-42749/): Malicious code in @teamteanpm2024/cupiditate-ullam-corrupti (npm) (malicious package)
- [MAL-2025-42748](https://insights.sbomify.com/MAL-2025-42748/): Malicious code in @teamteanpm2024/cupiditate-minima-animi (npm) (malicious package)
- [MAL-2025-42747](https://insights.sbomify.com/MAL-2025-42747/): Malicious code in @teamteanpm2024/cum-maiores-eum (npm) (malicious package)
- [MAL-2025-42746](https://insights.sbomify.com/MAL-2025-42746/): Malicious code in @teamteanpm2024/culpa-provident-blanditiis (npm) (malicious package)
- [MAL-2025-42745](https://insights.sbomify.com/MAL-2025-42745/): Malicious code in @teamteanpm2024/corrupti-tempora-iusto (npm) (malicious package)
- [MAL-2025-42744](https://insights.sbomify.com/MAL-2025-42744/): Malicious code in @teamteanpm2024/corrupti-saepe-doloremque (npm) (malicious package)
- [MAL-2025-42743](https://insights.sbomify.com/MAL-2025-42743/): Malicious code in @teamteanpm2024/corrupti-iusto-inventore (npm) (malicious package)
- [MAL-2025-42742](https://insights.sbomify.com/MAL-2025-42742/): Malicious code in @teamteanpm2024/consequuntur-optio-repellendus (npm) (malicious package)
- [MAL-2025-42741](https://insights.sbomify.com/MAL-2025-42741/): Malicious code in @teamteanpm2024/consectetur-quo-delectus (npm) (malicious package)
- [MAL-2025-42740](https://insights.sbomify.com/MAL-2025-42740/): Malicious code in @teamteanpm2024/commodi-non-est (npm) (malicious package)
- [MAL-2025-4274](https://insights.sbomify.com/MAL-2025-4274/): Malicious code in ypj (PyPI) (malicious package)
- [MAL-2025-42739](https://insights.sbomify.com/MAL-2025-42739/): Malicious code in @teamteanpm2024/commodi-ipsum-nam (npm) (malicious package)
- [MAL-2025-42738](https://insights.sbomify.com/MAL-2025-42738/): Malicious code in @teamteanpm2024/blanditiis-nam-modi (npm) (malicious package)
- [MAL-2025-42737](https://insights.sbomify.com/MAL-2025-42737/): Malicious code in @teamteanpm2024/beatae-laudantium-natus (npm) (malicious package)
- [MAL-2025-42736](https://insights.sbomify.com/MAL-2025-42736/): Malicious code in @teamteanpm2024/beatae-hic-reiciendis (npm) (malicious package)
- [MAL-2025-42735](https://insights.sbomify.com/MAL-2025-42735/): Malicious code in @teamteanpm2024/beatae-aperiam-cum (npm) (malicious package)
- [MAL-2025-42734](https://insights.sbomify.com/MAL-2025-42734/): Malicious code in @teamteanpm2024/aut-nihil-similique (npm) (malicious package)
- [MAL-2025-42733](https://insights.sbomify.com/MAL-2025-42733/): Malicious code in @teamteanpm2024/aut-delectus-necessitatibus (npm) (malicious package)
- [MAL-2025-42732](https://insights.sbomify.com/MAL-2025-42732/): Malicious code in @teamteanpm2024/atque-necessitatibus-excepturi (npm) (malicious package)
- [MAL-2025-42731](https://insights.sbomify.com/MAL-2025-42731/): Malicious code in @teamteanpm2024/atque-libero-aspernatur (npm) (malicious package)
- [MAL-2025-42730](https://insights.sbomify.com/MAL-2025-42730/): Malicious code in @teamteanpm2024/architecto-hic-reiciendis (npm) (malicious package)
- [MAL-2025-4273](https://insights.sbomify.com/MAL-2025-4273/): Malicious code in websign (PyPI) (malicious package)
- [MAL-2025-42729](https://insights.sbomify.com/MAL-2025-42729/): Malicious code in @teamteanpm2024/animi-nobis-reiciendis (npm) (malicious package)
- [MAL-2025-42728](https://insights.sbomify.com/MAL-2025-42728/): Malicious code in @teamteanpm2024/amet-nobis-inventore (npm) (malicious package)
- [MAL-2025-42727](https://insights.sbomify.com/MAL-2025-42727/): Malicious code in @teamteanpm2024/amet-esse-vel (npm) (malicious package)
- [MAL-2025-42726](https://insights.sbomify.com/MAL-2025-42726/): Malicious code in @teamteanpm2024/aliquid-ea-modi (npm) (malicious package)
- [MAL-2025-42725](https://insights.sbomify.com/MAL-2025-42725/): Malicious code in @teamteanpm2024/aliquid-cumque-vitae (npm) (malicious package)
- [MAL-2025-42724](https://insights.sbomify.com/MAL-2025-42724/): Malicious code in @teamteanpm2024/accusantium-minima-maxime (npm) (malicious package)
- [MAL-2025-42723](https://insights.sbomify.com/MAL-2025-42723/): Malicious code in @teamteanpm2024/accusantium-consequatur-repellat (npm) (malicious package)
- [MAL-2025-42722](https://insights.sbomify.com/MAL-2025-42722/): Malicious code in @teamteanpm2024/accusamus-accusantium-quas (npm) (malicious package)
- [MAL-2025-42721](https://insights.sbomify.com/MAL-2025-42721/): Malicious code in @taktikorg/soluta-aspernatur-id (npm) (malicious package)
- [MAL-2025-42720](https://insights.sbomify.com/MAL-2025-42720/): Malicious code in @taktikorg/repellat-quis (npm) (malicious package)
- [MAL-2025-4272](https://insights.sbomify.com/MAL-2025-4272/): Malicious code in web3yrpcs (PyPI) (malicious package)
- [MAL-2025-42719](https://insights.sbomify.com/MAL-2025-42719/): Malicious code in @taktikorg/repellat-ad (npm) (malicious package)
- [MAL-2025-42718](https://insights.sbomify.com/MAL-2025-42718/): Malicious code in @taktikorg/reiciendis-id (npm) (malicious package)
- [MAL-2025-42717](https://insights.sbomify.com/MAL-2025-42717/): Malicious code in @taktikorg/omnis-vitae-cupiditate (npm) (malicious package)
- [MAL-2025-42716](https://insights.sbomify.com/MAL-2025-42716/): Malicious code in @taktikorg/occaecati-praesentium-quibusdam (npm) (malicious package)
- [MAL-2025-42715](https://insights.sbomify.com/MAL-2025-42715/): Malicious code in @taktikorg/nostrum-dolor (npm) (malicious package)
- [MAL-2025-42714](https://insights.sbomify.com/MAL-2025-42714/): Malicious code in @taktikorg/nobis-quos-quod (npm) (malicious package)
- [MAL-2025-42713](https://insights.sbomify.com/MAL-2025-42713/): Malicious code in @taktikorg/molestiae-a-non (npm) (malicious package)
- [MAL-2025-42712](https://insights.sbomify.com/MAL-2025-42712/): Malicious code in @taktikorg/minus-beatae (npm) (malicious package)
- [MAL-2025-42711](https://insights.sbomify.com/MAL-2025-42711/): Malicious code in @taktikorg/laudantium-ipsa (npm) (malicious package)
- [MAL-2025-42710](https://insights.sbomify.com/MAL-2025-42710/): Malicious code in @taktikorg/hic-perspiciatis-fugit (npm) (malicious package)
- [MAL-2025-4271](https://insights.sbomify.com/MAL-2025-4271/): Malicious code in web3wallet (PyPI) (malicious package)
- [MAL-2025-42709](https://insights.sbomify.com/MAL-2025-42709/): Malicious code in @taktikorg/fugiat-mollitia (npm) (malicious package)
- [MAL-2025-42708](https://insights.sbomify.com/MAL-2025-42708/): Malicious code in @swenkerorg/similique-fuga (npm) (malicious package)
- [MAL-2025-42707](https://insights.sbomify.com/MAL-2025-42707/): Malicious code in @swenkerorg/nam-eius-occaecati (npm) (malicious package)
- [MAL-2025-42706](https://insights.sbomify.com/MAL-2025-42706/): Malicious code in @swenkerorg/in-inventore (npm) (malicious package)
- [MAL-2025-42705](https://insights.sbomify.com/MAL-2025-42705/): Malicious code in @swenkerorg/eveniet-alias (npm) (malicious package)
- [MAL-2025-42704](https://insights.sbomify.com/MAL-2025-42704/): Malicious code in @swenkerorg/cum-nostrum-hic (npm) (malicious package)
- [MAL-2025-42703](https://insights.sbomify.com/MAL-2025-42703/): Malicious code in @swenkerorg/accusantium-aut (npm) (malicious package)
- [MAL-2025-42702](https://insights.sbomify.com/MAL-2025-42702/): Malicious code in @seznam-diskuze/web (npm) (malicious package)
- [MAL-2025-42701](https://insights.sbomify.com/MAL-2025-42701/): Malicious code in @povsicoenpm/tenetur-laudantium-repudiandae-quia (npm) (malicious package)
- [MAL-2025-42700](https://insights.sbomify.com/MAL-2025-42700/): Malicious code in @povsicoenpm/sit-molestias-at-et (npm) (malicious package)
- [MAL-2025-4270](https://insights.sbomify.com/MAL-2025-4270/): Malicious code in web3automation (PyPI) (malicious package)
- [MAL-2025-427](https://insights.sbomify.com/MAL-2025-427/): Malicious code in coinbase-tools (npm) (malicious package)
- [MAL-2025-42699](https://insights.sbomify.com/MAL-2025-42699/): Malicious code in @povsicoenpm/repudiandae-accusantium-saepe-repudiandae (npm) (malicious package)
- [MAL-2025-42698](https://insights.sbomify.com/MAL-2025-42698/): Malicious code in @povsicoenpm/porro-quidem-veniam-perspiciatis (npm) (malicious package)
- [MAL-2025-42697](https://insights.sbomify.com/MAL-2025-42697/): Malicious code in @povsicoenpm/illo-maiores-beatae-id (npm) (malicious package)
- [MAL-2025-42696](https://insights.sbomify.com/MAL-2025-42696/): Malicious code in @povsicoenpm/dolorum-in-minima-sapiente (npm) (malicious package)
- [MAL-2025-42695](https://insights.sbomify.com/MAL-2025-42695/): Malicious code in @patrtorg/quibusdam-minima (npm) (malicious package)
- [MAL-2025-42694](https://insights.sbomify.com/MAL-2025-42694/): Malicious code in @patrtorg/autem-et-hic (npm) (malicious package)
- [MAL-2025-42693](https://insights.sbomify.com/MAL-2025-42693/): Malicious code in @mic-security/complex-components (npm) (malicious package)
- [MAL-2025-42692](https://insights.sbomify.com/MAL-2025-42692/): Malicious code in @malware-test-salsa-axing-laver-envoy/test-mlw3-salsa-axing-laver-envoy (npm) (malicious package)
- [MAL-2025-42691](https://insights.sbomify.com/MAL-2025-42691/): Malicious code in @malware-test-cotts-pyres-sigma-quids/test-mlw3-cotts-pyres-sigma-quids (npm) (malicious package)
- [MAL-2025-42690](https://insights.sbomify.com/MAL-2025-42690/): Malicious code in @majiajun7/claude-code (npm) (malicious package)
- [MAL-2025-4269](https://insights.sbomify.com/MAL-2025-4269/): Malicious code in web3author (PyPI) (malicious package)
- [MAL-2025-42689](https://insights.sbomify.com/MAL-2025-42689/): Malicious code in @lightspeed-hospitality/intercom (npm) (malicious package)
- [MAL-2025-42688](https://insights.sbomify.com/MAL-2025-42688/): Malicious code in @lbnqduy2180500/turbo-train (npm) (malicious package)
- [MAL-2025-42687](https://insights.sbomify.com/MAL-2025-42687/): Malicious code in @lbnqduy2180500/special-enigma (npm) (malicious package)
- [MAL-2025-42686](https://insights.sbomify.com/MAL-2025-42686/): Malicious code in @lbnqduy2180500/scaling-octo-winner (npm) (malicious package)
- [MAL-2025-42685](https://insights.sbomify.com/MAL-2025-42685/): Malicious code in @lbnqduy2180500/reimagined-doodle (npm) (malicious package)
- [MAL-2025-42684](https://insights.sbomify.com/MAL-2025-42684/): Malicious code in @lbnqduy2180500/effective-computing-machine (npm) (malicious package)
- [MAL-2025-42683](https://insights.sbomify.com/MAL-2025-42683/): Malicious code in @lbnqduy180500/vigilant-octo-spoon (npm) (malicious package)
- [MAL-2025-42682](https://insights.sbomify.com/MAL-2025-42682/): Malicious code in @lbnqduy180500/upgraded-octo-palm-tree (npm) (malicious package)
- [MAL-2025-42681](https://insights.sbomify.com/MAL-2025-42681/): Malicious code in @lbnqduy180500/symmetrical-potato (npm) (malicious package)
- [MAL-2025-42680](https://insights.sbomify.com/MAL-2025-42680/): Malicious code in @lbnqduy180500/probable-funicular (npm) (malicious package)
- [MAL-2025-4268](https://insights.sbomify.com/MAL-2025-4268/): Malicious code in web3-validators (PyPI) (malicious package)
- [MAL-2025-42679](https://insights.sbomify.com/MAL-2025-42679/): Malicious code in @lbnqduy180500/musical-winner (npm) (malicious package)
- [MAL-2025-42678](https://insights.sbomify.com/MAL-2025-42678/): Malicious code in @lbnqduy180500/musical-octo-funicular (npm) (malicious package)
- [MAL-2025-42677](https://insights.sbomify.com/MAL-2025-42677/): Malicious code in @lbnqduy180500/jubilant-octo-telegram (npm) (malicious package)
- [MAL-2025-42676](https://insights.sbomify.com/MAL-2025-42676/): Malicious code in @lbnqduy180500/jubilant-octo-couscous (npm) (malicious package)
- [MAL-2025-42675](https://insights.sbomify.com/MAL-2025-42675/): Malicious code in @lbnqduy180500/ideal-palm-tree (npm) (malicious package)
- [MAL-2025-42674](https://insights.sbomify.com/MAL-2025-42674/): Malicious code in @lbnqduy180500/glowing-adventure (npm) (malicious package)
- [MAL-2025-42673](https://insights.sbomify.com/MAL-2025-42673/): Malicious code in @lbnqduy180500/fuzzy-octo-meme (npm) (malicious package)
- [MAL-2025-42672](https://insights.sbomify.com/MAL-2025-42672/): Malicious code in @lbnqduy180500/fuzzy-couscous (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/639/