# Vulnerabilities published in 2025


- [MAL-2025-42671](https://insights.sbomify.com/MAL-2025-42671/): Malicious code in @lbnqduy180500/fictional-octo-garbanzo (npm) (malicious package)
- [MAL-2025-42670](https://insights.sbomify.com/MAL-2025-42670/): Malicious code in @lbnqduy180500/cuddly-guide (npm) (malicious package)
- [MAL-2025-4267](https://insights.sbomify.com/MAL-2025-4267/): Malicious code in web3-requests (PyPI) (malicious package)
- [MAL-2025-42669](https://insights.sbomify.com/MAL-2025-42669/): Malicious code in @lbnqduy180500/cautious-octo-sniffle (npm) (malicious package)
- [MAL-2025-42668](https://insights.sbomify.com/MAL-2025-42668/): Malicious code in @kollorg/voluptatum-nam (npm) (malicious package)
- [MAL-2025-42667](https://insights.sbomify.com/MAL-2025-42667/): Malicious code in @kollorg/voluptates-vel (npm) (malicious package)
- [MAL-2025-42666](https://insights.sbomify.com/MAL-2025-42666/): Malicious code in @kollorg/voluptate-laudantium (npm) (malicious package)
- [MAL-2025-42665](https://insights.sbomify.com/MAL-2025-42665/): Malicious code in @kollorg/vitae-quia-incidunt (npm) (malicious package)
- [MAL-2025-42664](https://insights.sbomify.com/MAL-2025-42664/): Malicious code in @kollorg/velit-sed (npm) (malicious package)
- [MAL-2025-42663](https://insights.sbomify.com/MAL-2025-42663/): Malicious code in @kollorg/tenetur-eius (npm) (malicious package)
- [MAL-2025-42662](https://insights.sbomify.com/MAL-2025-42662/): Malicious code in @kollorg/tempora-maiores (npm) (malicious package)
- [MAL-2025-42661](https://insights.sbomify.com/MAL-2025-42661/): Malicious code in @kollorg/tempora-dolorum (npm) (malicious package)
- [MAL-2025-42660](https://insights.sbomify.com/MAL-2025-42660/): Malicious code in @kollorg/sapiente-consequatur-maxime (npm) (malicious package)
- [MAL-2025-4266](https://insights.sbomify.com/MAL-2025-4266/): Malicious code in web3-request-1-8-54 (PyPI) (malicious package)
- [MAL-2025-42659](https://insights.sbomify.com/MAL-2025-42659/): Malicious code in @kollorg/rerum-laudantium (npm) (malicious package)
- [MAL-2025-42658](https://insights.sbomify.com/MAL-2025-42658/): Malicious code in @kollorg/rem-rem (npm) (malicious package)
- [MAL-2025-42657](https://insights.sbomify.com/MAL-2025-42657/): Malicious code in @kollorg/recusandae-quis (npm) (malicious package)
- [MAL-2025-42656](https://insights.sbomify.com/MAL-2025-42656/): Malicious code in @kollorg/quibusdam-commodi (npm) (malicious package)
- [MAL-2025-42655](https://insights.sbomify.com/MAL-2025-42655/): Malicious code in @kollorg/qui-itaque (npm) (malicious package)
- [MAL-2025-42654](https://insights.sbomify.com/MAL-2025-42654/): Malicious code in @kollorg/quam-hic (npm) (malicious package)
- [MAL-2025-42653](https://insights.sbomify.com/MAL-2025-42653/): Malicious code in @kollorg/quaerat-ad (npm) (malicious package)
- [MAL-2025-42652](https://insights.sbomify.com/MAL-2025-42652/): Malicious code in @kollorg/officia-explicabo (npm) (malicious package)
- [MAL-2025-42651](https://insights.sbomify.com/MAL-2025-42651/): Malicious code in @kollorg/odit-accusantium (npm) (malicious package)
- [MAL-2025-42650](https://insights.sbomify.com/MAL-2025-42650/): Malicious code in @kollorg/odio-aspernatur (npm) (malicious package)
- [MAL-2025-4265](https://insights.sbomify.com/MAL-2025-4265/): Malicious code in web3-request (PyPI) (malicious package)
- [MAL-2025-42649](https://insights.sbomify.com/MAL-2025-42649/): Malicious code in @kollorg/occaecati-totam (npm) (malicious package)
- [MAL-2025-42648](https://insights.sbomify.com/MAL-2025-42648/): Malicious code in @kollorg/occaecati-delectus (npm) (malicious package)
- [MAL-2025-42647](https://insights.sbomify.com/MAL-2025-42647/): Malicious code in @kollorg/non-iure-eveniet (npm) (malicious package)
- [MAL-2025-42646](https://insights.sbomify.com/MAL-2025-42646/): Malicious code in @kollorg/nihil-veniam-deserunt (npm) (malicious package)
- [MAL-2025-42645](https://insights.sbomify.com/MAL-2025-42645/): Malicious code in @kollorg/neque-iure-minus (npm) (malicious package)
- [MAL-2025-42644](https://insights.sbomify.com/MAL-2025-42644/): Malicious code in @kollorg/mollitia-quasi-aspernatur (npm) (malicious package)
- [MAL-2025-42643](https://insights.sbomify.com/MAL-2025-42643/): Malicious code in @kollorg/mollitia-cupiditate (npm) (malicious package)
- [MAL-2025-42642](https://insights.sbomify.com/MAL-2025-42642/): Malicious code in @kollorg/minima-perferendis-ipsa (npm) (malicious package)
- [MAL-2025-42641](https://insights.sbomify.com/MAL-2025-42641/): Malicious code in @kollorg/minima-esse-sequi (npm) (malicious package)
- [MAL-2025-42640](https://insights.sbomify.com/MAL-2025-42640/): Malicious code in @kollorg/libero-iste-molestiae (npm) (malicious package)
- [MAL-2025-4264](https://insights.sbomify.com/MAL-2025-4264/): Malicious code in web3-checksums (PyPI) (malicious package)
- [MAL-2025-42639](https://insights.sbomify.com/MAL-2025-42639/): Malicious code in @kollorg/laudantium-fuga (npm) (malicious package)
- [MAL-2025-42638](https://insights.sbomify.com/MAL-2025-42638/): Malicious code in @kollorg/laboriosam-neque (npm) (malicious package)
- [MAL-2025-42637](https://insights.sbomify.com/MAL-2025-42637/): Malicious code in @kollorg/labore-magnam (npm) (malicious package)
- [MAL-2025-42636](https://insights.sbomify.com/MAL-2025-42636/): Malicious code in @kollorg/itaque-laudantium-nesciunt (npm) (malicious package)
- [MAL-2025-42635](https://insights.sbomify.com/MAL-2025-42635/): Malicious code in @kollorg/ipsum-sint (npm) (malicious package)
- [MAL-2025-42634](https://insights.sbomify.com/MAL-2025-42634/): Malicious code in @kollorg/ipsam-omnis (npm) (malicious package)
- [MAL-2025-42633](https://insights.sbomify.com/MAL-2025-42633/): Malicious code in @kollorg/ipsam-labore (npm) (malicious package)
- [MAL-2025-42632](https://insights.sbomify.com/MAL-2025-42632/): Malicious code in @kollorg/in-nostrum (npm) (malicious package)
- [MAL-2025-42631](https://insights.sbomify.com/MAL-2025-42631/): Malicious code in @kollorg/id-quasi (npm) (malicious package)
- [MAL-2025-42630](https://insights.sbomify.com/MAL-2025-42630/): Malicious code in @kollorg/fugiat-animi (npm) (malicious package)
- [MAL-2025-4263](https://insights.sbomify.com/MAL-2025-4263/): Malicious code in web3-checksumm (PyPI) (malicious package)
- [MAL-2025-42629](https://insights.sbomify.com/MAL-2025-42629/): Malicious code in @kollorg/fuga-laborum (npm) (malicious package)
- [MAL-2025-42628](https://insights.sbomify.com/MAL-2025-42628/): Malicious code in @kollorg/facilis-eum (npm) (malicious package)
- [MAL-2025-42627](https://insights.sbomify.com/MAL-2025-42627/): Malicious code in @kollorg/facere-suscipit (npm) (malicious package)
- [MAL-2025-42626](https://insights.sbomify.com/MAL-2025-42626/): Malicious code in @kollorg/facere-optio (npm) (malicious package)
- [MAL-2025-42625](https://insights.sbomify.com/MAL-2025-42625/): Malicious code in @kollorg/explicabo-nemo (npm) (malicious package)
- [MAL-2025-42624](https://insights.sbomify.com/MAL-2025-42624/): Malicious code in @kollorg/exercitationem-assumenda-qui (npm) (malicious package)
- [MAL-2025-42623](https://insights.sbomify.com/MAL-2025-42623/): Malicious code in @kollorg/ex-doloremque-sint (npm) (malicious package)
- [MAL-2025-42622](https://insights.sbomify.com/MAL-2025-42622/): Malicious code in @kollorg/eveniet-praesentium (npm) (malicious package)
- [MAL-2025-42621](https://insights.sbomify.com/MAL-2025-42621/): Malicious code in @kollorg/eligendi-nobis-blanditiis (npm) (malicious package)
- [MAL-2025-42620](https://insights.sbomify.com/MAL-2025-42620/): Malicious code in @kollorg/ducimus-accusamus-dolorem (npm) (malicious package)
- [MAL-2025-4262](https://insights.sbomify.com/MAL-2025-4262/): Malicious code in web3-checksum (PyPI) (malicious package)
- [MAL-2025-42619](https://insights.sbomify.com/MAL-2025-42619/): Malicious code in @kollorg/dolor-voluptatum (npm) (malicious package)
- [MAL-2025-42618](https://insights.sbomify.com/MAL-2025-42618/): Malicious code in @kollorg/dolor-quidem-ducimus (npm) (malicious package)
- [MAL-2025-42617](https://insights.sbomify.com/MAL-2025-42617/): Malicious code in @kollorg/dolor-porro-harum (npm) (malicious package)
- [MAL-2025-42616](https://insights.sbomify.com/MAL-2025-42616/): Malicious code in @kollorg/dicta-itaque-nemo (npm) (malicious package)
- [MAL-2025-42615](https://insights.sbomify.com/MAL-2025-42615/): Malicious code in @kollorg/deleniti-occaecati-fugit (npm) (malicious package)
- [MAL-2025-42614](https://insights.sbomify.com/MAL-2025-42614/): Malicious code in @kollorg/delectus-aperiam (npm) (malicious package)
- [MAL-2025-42613](https://insights.sbomify.com/MAL-2025-42613/): Malicious code in @kollorg/corrupti-esse-ea (npm) (malicious package)
- [MAL-2025-42612](https://insights.sbomify.com/MAL-2025-42612/): Malicious code in @kollorg/consequuntur-voluptatibus-fugiat (npm) (malicious package)
- [MAL-2025-42611](https://insights.sbomify.com/MAL-2025-42611/): Malicious code in @kollorg/commodi-reprehenderit-ratione (npm) (malicious package)
- [MAL-2025-42610](https://insights.sbomify.com/MAL-2025-42610/): Malicious code in @kollorg/beatae-similique-aut (npm) (malicious package)
- [MAL-2025-4261](https://insights.sbomify.com/MAL-2025-4261/): Malicious code in web3-auto (PyPI) (malicious package)
- [MAL-2025-42609](https://insights.sbomify.com/MAL-2025-42609/): Malicious code in @kollorg/autem-voluptas (npm) (malicious package)
- [MAL-2025-42608](https://insights.sbomify.com/MAL-2025-42608/): Malicious code in @kollorg/asperiores-velit (npm) (malicious package)
- [MAL-2025-42607](https://insights.sbomify.com/MAL-2025-42607/): Malicious code in @kollorg/asperiores-exercitationem-repellat (npm) (malicious package)
- [MAL-2025-42606](https://insights.sbomify.com/MAL-2025-42606/): Malicious code in @kollorg/architecto-ipsum (npm) (malicious package)
- [MAL-2025-42605](https://insights.sbomify.com/MAL-2025-42605/): Malicious code in @kollorg/aperiam-sapiente (npm) (malicious package)
- [MAL-2025-42604](https://insights.sbomify.com/MAL-2025-42604/): Malicious code in @kollorg/aliquid-vel-molestias (npm) (malicious package)
- [MAL-2025-42603](https://insights.sbomify.com/MAL-2025-42603/): Malicious code in @kollorg/aliquid-dolore-necessitatibus (npm) (malicious package)
- [MAL-2025-42602](https://insights.sbomify.com/MAL-2025-42602/): Malicious code in @kollorg/adipisci-rerum-tenetur (npm) (malicious package)
- [MAL-2025-42601](https://insights.sbomify.com/MAL-2025-42601/): Malicious code in @kollorg/adipisci-quidem (npm) (malicious package)
- [MAL-2025-42600](https://insights.sbomify.com/MAL-2025-42600/): Malicious code in @kollorg/accusantium-vel (npm) (malicious package)
- [MAL-2025-4260](https://insights.sbomify.com/MAL-2025-4260/): Malicious code in walletweb3 (PyPI) (malicious package)
- [MAL-2025-426](https://insights.sbomify.com/MAL-2025-426/): Malicious code in coinbase-tests (npm) (malicious package)
- [MAL-2025-42599](https://insights.sbomify.com/MAL-2025-42599/): Malicious code in @juigorg/voluptas-perferendis-eius (npm) (malicious package)
- [MAL-2025-42598](https://insights.sbomify.com/MAL-2025-42598/): Malicious code in @juigorg/veniam-sint-voluptatem (npm) (malicious package)
- [MAL-2025-42597](https://insights.sbomify.com/MAL-2025-42597/): Malicious code in @juigorg/sed-fugiat (npm) (malicious package)
- [MAL-2025-42596](https://insights.sbomify.com/MAL-2025-42596/): Malicious code in @juigorg/odit-porro (npm) (malicious package)
- [MAL-2025-42595](https://insights.sbomify.com/MAL-2025-42595/): Malicious code in @juigorg/laboriosam-odit-minus (npm) (malicious package)
- [MAL-2025-42594](https://insights.sbomify.com/MAL-2025-42594/): Malicious code in @juigorg/fugiat-alias (npm) (malicious package)
- [MAL-2025-42593](https://insights.sbomify.com/MAL-2025-42593/): Malicious code in @juigorg/fuga-nesciunt (npm) (malicious package)
- [MAL-2025-42592](https://insights.sbomify.com/MAL-2025-42592/): Malicious code in @juigorg/fuga-deleniti-similique (npm) (malicious package)
- [MAL-2025-42591](https://insights.sbomify.com/MAL-2025-42591/): Malicious code in @juigorg/dolor-tenetur (npm) (malicious package)
- [MAL-2025-42590](https://insights.sbomify.com/MAL-2025-42590/): Malicious code in @juigorg/dignissimos-repellendus (npm) (malicious package)
- [MAL-2025-4259](https://insights.sbomify.com/MAL-2025-4259/): Malicious code in walletrpcs (PyPI) (malicious package)
- [MAL-2025-42589](https://insights.sbomify.com/MAL-2025-42589/): Malicious code in @hishprorg/vero-eum (npm) (malicious package)
- [MAL-2025-42588](https://insights.sbomify.com/MAL-2025-42588/): Malicious code in @hishprorg/sint-sit (npm) (malicious package)
- [MAL-2025-42587](https://insights.sbomify.com/MAL-2025-42587/): Malicious code in @hishprorg/sed-sed (npm) (malicious package)
- [MAL-2025-42586](https://insights.sbomify.com/MAL-2025-42586/): Malicious code in @hishprorg/ratione-neque (npm) (malicious package)
- [MAL-2025-42585](https://insights.sbomify.com/MAL-2025-42585/): Malicious code in @hishprorg/quasi-a-voluptatum (npm) (malicious package)
- [MAL-2025-42584](https://insights.sbomify.com/MAL-2025-42584/): Malicious code in @hishprorg/quaerat-accusamus-voluptatem (npm) (malicious package)
- [MAL-2025-42583](https://insights.sbomify.com/MAL-2025-42583/): Malicious code in @hishprorg/nesciunt-illum (npm) (malicious package)
- [MAL-2025-42582](https://insights.sbomify.com/MAL-2025-42582/): Malicious code in @hishprorg/mollitia-cumque (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/640/