# Vulnerabilities published in 2025 - [MAL-2025-4249](https://insights.sbomify.com/MAL-2025-4249/): Malicious code in trxtwo (PyPI) (malicious package) - [MAL-2025-42489](https://insights.sbomify.com/MAL-2025-42489/): Malicious code in @erboladaiorg/illum-in (npm) (malicious package) - [MAL-2025-42488](https://insights.sbomify.com/MAL-2025-42488/): Malicious code in @erboladaiorg/ea-aliquam (npm) (malicious package) - [MAL-2025-42487](https://insights.sbomify.com/MAL-2025-42487/): Malicious code in @eooce/ws (npm) (malicious package) - [MAL-2025-42486](https://insights.sbomify.com/MAL-2025-42486/): Malicious code in @eooce/sbx (npm) (malicious package) - [MAL-2025-42485](https://insights.sbomify.com/MAL-2025-42485/): Malicious code in @ember-velcro/monorepo-root (npm) (malicious package) - [MAL-2025-42484](https://insights.sbomify.com/MAL-2025-42484/): Malicious code in @ellentorg/voluptatum-asperiores-beatae (npm) (malicious package) - [MAL-2025-42483](https://insights.sbomify.com/MAL-2025-42483/): Malicious code in @ellentorg/voluptatibus-voluptates-qui (npm) (malicious package) - [MAL-2025-42482](https://insights.sbomify.com/MAL-2025-42482/): Malicious code in @ellentorg/soluta-architecto-nesciunt (npm) (malicious package) - [MAL-2025-42481](https://insights.sbomify.com/MAL-2025-42481/): Malicious code in @ellentorg/quo-debitis-odio (npm) (malicious package) - [MAL-2025-42480](https://insights.sbomify.com/MAL-2025-42480/): Malicious code in @ellentorg/possimus-eius-quos (npm) (malicious package) - [MAL-2025-4248](https://insights.sbomify.com/MAL-2025-4248/): Malicious code in trxone (PyPI) (malicious package) - [MAL-2025-42479](https://insights.sbomify.com/MAL-2025-42479/): Malicious code in @ellentorg/literate (npm) (malicious package) - [MAL-2025-42478](https://insights.sbomify.com/MAL-2025-42478/): Malicious code in @ellentorg/fugiat-ipsa-id (npm) (malicious package) - [MAL-2025-42477](https://insights.sbomify.com/MAL-2025-42477/): Malicious code in @ellentorg/expedita-accusantium-aliquid (npm) (malicious package) - [MAL-2025-42476](https://insights.sbomify.com/MAL-2025-42476/): Malicious code in @ellentorg/congenial-giggle (npm) (malicious package) - [MAL-2025-42475](https://insights.sbomify.com/MAL-2025-42475/): Malicious code in @dramateas/voluptatum-perferendis-laboriosam-dolor (npm) (malicious package) - [MAL-2025-42474](https://insights.sbomify.com/MAL-2025-42474/): Malicious code in @dramateas/unde-odio-cum-omnis (npm) (malicious package) - [MAL-2025-42473](https://insights.sbomify.com/MAL-2025-42473/): Malicious code in @dramateas/sunt-animi-distinctio-necessitatibus (npm) (malicious package) - [MAL-2025-42472](https://insights.sbomify.com/MAL-2025-42472/): Malicious code in @dramateas/sequi-ex-id-sit (npm) (malicious package) - [MAL-2025-42471](https://insights.sbomify.com/MAL-2025-42471/): Malicious code in @dramateas/saepe-maiores-delectus-laborum (npm) (malicious package) - [MAL-2025-42470](https://insights.sbomify.com/MAL-2025-42470/): Malicious code in @dramateas/repellat-in-expedita-reprehenderit (npm) (malicious package) - [MAL-2025-4247](https://insights.sbomify.com/MAL-2025-4247/): Malicious code in tronlix (PyPI) (malicious package) - [MAL-2025-42469](https://insights.sbomify.com/MAL-2025-42469/): Malicious code in @dramateas/quibusdam-at-quos-fugiat (npm) (malicious package) - [MAL-2025-42468](https://insights.sbomify.com/MAL-2025-42468/): Malicious code in @dramateas/quas-mollitia-quas-dolorem (npm) (malicious package) - [MAL-2025-42467](https://insights.sbomify.com/MAL-2025-42467/): Malicious code in @dramateas/porro-in-provident-perspiciatis (npm) (malicious package) - [MAL-2025-42466](https://insights.sbomify.com/MAL-2025-42466/): Malicious code in @dramateas/porro-in-corporis-explicabo (npm) (malicious package) - [MAL-2025-42465](https://insights.sbomify.com/MAL-2025-42465/): Malicious code in @dramateas/placeat-dolor-omnis-nihil (npm) (malicious package) - [MAL-2025-42464](https://insights.sbomify.com/MAL-2025-42464/): Malicious code in @dramateas/omnis-fuga-quo-fuga (npm) (malicious package) - [MAL-2025-42463](https://insights.sbomify.com/MAL-2025-42463/): Malicious code in @dramateas/officia-nisi-ipsum-vel (npm) (malicious package) - [MAL-2025-42462](https://insights.sbomify.com/MAL-2025-42462/): Malicious code in @dramateas/nostrum-voluptas-eius-occaecati (npm) (malicious package) - [MAL-2025-42461](https://insights.sbomify.com/MAL-2025-42461/): Malicious code in @dramateas/neque-laborum-distinctio-quod (npm) (malicious package) - [MAL-2025-42460](https://insights.sbomify.com/MAL-2025-42460/): Malicious code in @dramateas/natus-eveniet-reiciendis-et (npm) (malicious package) - [MAL-2025-4246](https://insights.sbomify.com/MAL-2025-4246/): Malicious code in tronlibpy (PyPI) (malicious package) - [MAL-2025-42459](https://insights.sbomify.com/MAL-2025-42459/): Malicious code in @dramateas/labore-maxime-ab-harum (npm) (malicious package) - [MAL-2025-42458](https://insights.sbomify.com/MAL-2025-42458/): Malicious code in @dramateas/ipsam-saepe-accusamus-corrupti (npm) (malicious package) - [MAL-2025-42457](https://insights.sbomify.com/MAL-2025-42457/): Malicious code in @dramateas/incidunt-iste-tenetur-minima (npm) (malicious package) - [MAL-2025-42456](https://insights.sbomify.com/MAL-2025-42456/): Malicious code in @dramateas/incidunt-ea-pariatur-sequi (npm) (malicious package) - [MAL-2025-42455](https://insights.sbomify.com/MAL-2025-42455/): Malicious code in @dramateas/expedita-odio-optio-in (npm) (malicious package) - [MAL-2025-42454](https://insights.sbomify.com/MAL-2025-42454/): Malicious code in @dramateas/exercitationem-harum-illo-fugit (npm) (malicious package) - [MAL-2025-42453](https://insights.sbomify.com/MAL-2025-42453/): Malicious code in @dramateas/excepturi-quae-quibusdam-in (npm) (malicious package) - [MAL-2025-42452](https://insights.sbomify.com/MAL-2025-42452/): Malicious code in @dramateas/et-maxime-cupiditate-dignissimos (npm) (malicious package) - [MAL-2025-42451](https://insights.sbomify.com/MAL-2025-42451/): Malicious code in @dramateas/et-ad-voluptatum-iure (npm) (malicious package) - [MAL-2025-42450](https://insights.sbomify.com/MAL-2025-42450/): Malicious code in @dramateas/eligendi-voluptate-ut-incidunt (npm) (malicious package) - [MAL-2025-4245](https://insights.sbomify.com/MAL-2025-4245/): Malicious code in tronlib (PyPI) (malicious package) - [MAL-2025-42449](https://insights.sbomify.com/MAL-2025-42449/): Malicious code in @dramateas/eaque-nihil-harum-voluptatibus (npm) (malicious package) - [MAL-2025-42448](https://insights.sbomify.com/MAL-2025-42448/): Malicious code in @dramateas/dolores-fugiat-ipsum-officiis (npm) (malicious package) - [MAL-2025-42447](https://insights.sbomify.com/MAL-2025-42447/): Malicious code in @dramateas/doloremque-corrupti-non-eveniet (npm) (malicious package) - [MAL-2025-42446](https://insights.sbomify.com/MAL-2025-42446/): Malicious code in @dramateas/deleniti-vero-natus-maiores (npm) (malicious package) - [MAL-2025-42445](https://insights.sbomify.com/MAL-2025-42445/): Malicious code in @dramateas/cum-laboriosam-consequatur-laboriosam (npm) (malicious package) - [MAL-2025-42444](https://insights.sbomify.com/MAL-2025-42444/): Malicious code in @dramateas/cum-cum-iste-est (npm) (malicious package) - [MAL-2025-42443](https://insights.sbomify.com/MAL-2025-42443/): Malicious code in @dramateas/corrupti-ipsum-deleniti-porro (npm) (malicious package) - [MAL-2025-42442](https://insights.sbomify.com/MAL-2025-42442/): Malicious code in @dramateas/consectetur-numquam-similique-enim (npm) (malicious package) - [MAL-2025-42441](https://insights.sbomify.com/MAL-2025-42441/): Malicious code in @dramateas/consectetur-iusto-laborum-nisi (npm) (malicious package) - [MAL-2025-42440](https://insights.sbomify.com/MAL-2025-42440/): Malicious code in @dramateas/consectetur-impedit-corrupti-ea (npm) (malicious package) - [MAL-2025-4244](https://insights.sbomify.com/MAL-2025-4244/): Malicious code in tronix (PyPI) (malicious package) - [MAL-2025-42439](https://insights.sbomify.com/MAL-2025-42439/): Malicious code in @dramateas/consectetur-aspernatur-ex-nostrum (npm) (malicious package) - [MAL-2025-42438](https://insights.sbomify.com/MAL-2025-42438/): Malicious code in @dramateas/commodi-voluptatem-laboriosam-odio (npm) (malicious package) - [MAL-2025-42437](https://insights.sbomify.com/MAL-2025-42437/): Malicious code in @dramateas/beatae-voluptatem-sed-facere (npm) (malicious package) - [MAL-2025-42436](https://insights.sbomify.com/MAL-2025-42436/): Malicious code in @dramateas/beatae-ea-ullam-magni (npm) (malicious package) - [MAL-2025-42435](https://insights.sbomify.com/MAL-2025-42435/): Malicious code in @dramateas/at-sint-ipsam-possimus (npm) (malicious package) - [MAL-2025-42434](https://insights.sbomify.com/MAL-2025-42434/): Malicious code in @dramateas/at-culpa-incidunt-nostrum (npm) (malicious package) - [MAL-2025-42433](https://insights.sbomify.com/MAL-2025-42433/): Malicious code in @dramateas/asperiores-ipsa-eaque-tempora (npm) (malicious package) - [MAL-2025-42432](https://insights.sbomify.com/MAL-2025-42432/): Malicious code in @dramateas/animi-voluptatum-quae-quisquam (npm) (malicious package) - [MAL-2025-42431](https://insights.sbomify.com/MAL-2025-42431/): Malicious code in @dramateas/aliquid-aliquam-incidunt-exercitationem (npm) (malicious package) - [MAL-2025-42430](https://insights.sbomify.com/MAL-2025-42430/): Malicious code in @dramateas/ad-provident-deserunt-quisquam (npm) (malicious package) - [MAL-2025-4243](https://insights.sbomify.com/MAL-2025-4243/): Malicious code in tronclient (PyPI) (malicious package) - [MAL-2025-42429](https://insights.sbomify.com/MAL-2025-42429/): Malicious code in @dramateas/ad-magni-reprehenderit-dolorum (npm) (malicious package) - [MAL-2025-42428](https://insights.sbomify.com/MAL-2025-42428/): Malicious code in @dramaorg/reprehenderit-quo-nihil (npm) (malicious package) - [MAL-2025-42427](https://insights.sbomify.com/MAL-2025-42427/): Malicious code in @dramaorg/repellendus-dolores-ratione (npm) (malicious package) - [MAL-2025-42426](https://insights.sbomify.com/MAL-2025-42426/): Malicious code in @dramaorg/quam-minus-maxime (npm) (malicious package) - [MAL-2025-42425](https://insights.sbomify.com/MAL-2025-42425/): Malicious code in @dramaorg/odit-dolorem (npm) (malicious package) - [MAL-2025-42424](https://insights.sbomify.com/MAL-2025-42424/): Malicious code in @dramaorg/fuga-veritatis-non (npm) (malicious package) - [MAL-2025-42423](https://insights.sbomify.com/MAL-2025-42423/): Malicious code in @dramaorg/exercitationem-eius (npm) (malicious package) - [MAL-2025-42422](https://insights.sbomify.com/MAL-2025-42422/): Malicious code in @dramaorg/esse-eius (npm) (malicious package) - [MAL-2025-42421](https://insights.sbomify.com/MAL-2025-42421/): Malicious code in @dramaorg/dicta-iusto (npm) (malicious package) - [MAL-2025-42420](https://insights.sbomify.com/MAL-2025-42420/): Malicious code in @diotobtea/totam-voluptatum (npm) (malicious package) - [MAL-2025-4242](https://insights.sbomify.com/MAL-2025-4242/): Malicious code in timsingapi (PyPI) (malicious package) - [MAL-2025-42419](https://insights.sbomify.com/MAL-2025-42419/): Malicious code in @diotobtea/sapiente-provident (npm) (malicious package) - [MAL-2025-42418](https://insights.sbomify.com/MAL-2025-42418/): Malicious code in @diotobtea/ratione-illum (npm) (malicious package) - [MAL-2025-42417](https://insights.sbomify.com/MAL-2025-42417/): Malicious code in @diotobtea/quae-accusamus (npm) (malicious package) - [MAL-2025-42416](https://insights.sbomify.com/MAL-2025-42416/): Malicious code in @diotobtea/pariatur-culpa (npm) (malicious package) - [MAL-2025-42415](https://insights.sbomify.com/MAL-2025-42415/): Malicious code in @diotobtea/odit-nobis (npm) (malicious package) - [MAL-2025-42414](https://insights.sbomify.com/MAL-2025-42414/): Malicious code in @diotobtea/laborum-hic (npm) (malicious package) - [MAL-2025-42413](https://insights.sbomify.com/MAL-2025-42413/): Malicious code in @diotobtea/labore-accusantium (npm) (malicious package) - [MAL-2025-42412](https://insights.sbomify.com/MAL-2025-42412/): Malicious code in @diotobtea/iusto-consequuntur (npm) (malicious package) - [MAL-2025-42411](https://insights.sbomify.com/MAL-2025-42411/): Malicious code in @diotobtea/iusto-architecto (npm) (malicious package) - [MAL-2025-42410](https://insights.sbomify.com/MAL-2025-42410/): Malicious code in @diotobtea/incidunt-ut (npm) (malicious package) - [MAL-2025-4241](https://insights.sbomify.com/MAL-2025-4241/): Malicious code in solanautil (PyPI) (malicious package) - [MAL-2025-42409](https://insights.sbomify.com/MAL-2025-42409/): Malicious code in @diotobtea/esse-iste (npm) (malicious package) - [MAL-2025-42408](https://insights.sbomify.com/MAL-2025-42408/): Malicious code in @diotobtea/doloribus-ad (npm) (malicious package) - [MAL-2025-42407](https://insights.sbomify.com/MAL-2025-42407/): Malicious code in @diotobtea/distinctio-ullam (npm) (malicious package) - [MAL-2025-42406](https://insights.sbomify.com/MAL-2025-42406/): Malicious code in @diotobtea/deserunt-enim (npm) (malicious package) - [MAL-2025-42405](https://insights.sbomify.com/MAL-2025-42405/): Malicious code in @devtea2027/qui-error-soluta-iusto (npm) (malicious package) - [MAL-2025-42404](https://insights.sbomify.com/MAL-2025-42404/): Malicious code in @devtea2027/est-laborum-eligendi-ipsum (npm) (malicious package) - [MAL-2025-42403](https://insights.sbomify.com/MAL-2025-42403/): Malicious code in @devtea2026/reiciendis-et-accusantium-maxime (npm) (malicious package) - [MAL-2025-42402](https://insights.sbomify.com/MAL-2025-42402/): Malicious code in @devtea2026/quo-odio-nobis-labore (npm) (malicious package) - [MAL-2025-42401](https://insights.sbomify.com/MAL-2025-42401/): Malicious code in @devtea2026/qui-quos-laborum-amet (npm) (malicious package) - [MAL-2025-42400](https://insights.sbomify.com/MAL-2025-42400/): Malicious code in @devtea2026/quae-cupiditate-quisquam-qui (npm) (malicious package) - [MAL-2025-4240](https://insights.sbomify.com/MAL-2025-4240/): Malicious code in solana-test-suite (PyPI) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/642/