# Vulnerabilities published in 2025 - [MAL-2025-424](https://insights.sbomify.com/MAL-2025-424/): Malicious code in coinbase-sync (npm) (malicious package) - [MAL-2025-42399](https://insights.sbomify.com/MAL-2025-42399/): Malicious code in @devtea2026/aliquam-corporis-accusantium-iure (npm) (malicious package) - [MAL-2025-42398](https://insights.sbomify.com/MAL-2025-42398/): Malicious code in @crabas0npm/voluptatibus-adipisci-magnam (npm) (malicious package) - [MAL-2025-42397](https://insights.sbomify.com/MAL-2025-42397/): Malicious code in @crabas0npm/voluptates-harum-quibusdam (npm) (malicious package) - [MAL-2025-42396](https://insights.sbomify.com/MAL-2025-42396/): Malicious code in @crabas0npm/voluptatem-expedita-aut (npm) (malicious package) - [MAL-2025-42395](https://insights.sbomify.com/MAL-2025-42395/): Malicious code in @crabas0npm/voluptate-voluptas-esse-architecto (npm) (malicious package) - [MAL-2025-42394](https://insights.sbomify.com/MAL-2025-42394/): Malicious code in @crabas0npm/voluptate-laborum-nam-aspernatur (npm) (malicious package) - [MAL-2025-42393](https://insights.sbomify.com/MAL-2025-42393/): Malicious code in @crabas0npm/voluptas-omnis-accusantium-magnam (npm) (malicious package) - [MAL-2025-42392](https://insights.sbomify.com/MAL-2025-42392/): Malicious code in @crabas0npm/veniam-repellendus-repudiandae-dolores (npm) (malicious package) - [MAL-2025-42391](https://insights.sbomify.com/MAL-2025-42391/): Malicious code in @crabas0npm/veniam-occaecati-excepturi (npm) (malicious package) - [MAL-2025-42390](https://insights.sbomify.com/MAL-2025-42390/): Malicious code in @crabas0npm/velit-voluptates-veniam (npm) (malicious package) - [MAL-2025-42389](https://insights.sbomify.com/MAL-2025-42389/): Malicious code in @crabas0npm/velit-perspiciatis-fugit-quibusdam (npm) (malicious package) - [MAL-2025-42388](https://insights.sbomify.com/MAL-2025-42388/): Malicious code in @crabas0npm/ut-aut-minus-debitis (npm) (malicious package) - [MAL-2025-42387](https://insights.sbomify.com/MAL-2025-42387/): Malicious code in @crabas0npm/unde-ratione-porro (npm) (malicious package) - [MAL-2025-42386](https://insights.sbomify.com/MAL-2025-42386/): Malicious code in @crabas0npm/unde-exercitationem-repellat-numquam (npm) (malicious package) - [MAL-2025-42385](https://insights.sbomify.com/MAL-2025-42385/): Malicious code in @crabas0npm/ullam-itaque-neque (npm) (malicious package) - [MAL-2025-42384](https://insights.sbomify.com/MAL-2025-42384/): Malicious code in @crabas0npm/ullam-eius-nobis-harum (npm) (malicious package) - [MAL-2025-42383](https://insights.sbomify.com/MAL-2025-42383/): Malicious code in @crabas0npm/totam-aliquid-voluptatibus (npm) (malicious package) - [MAL-2025-42382](https://insights.sbomify.com/MAL-2025-42382/): Malicious code in @crabas0npm/tenetur-nesciunt-odio-quisquam (npm) (malicious package) - [MAL-2025-42381](https://insights.sbomify.com/MAL-2025-42381/): Malicious code in @crabas0npm/temporibus-magni-ad (npm) (malicious package) - [MAL-2025-42380](https://insights.sbomify.com/MAL-2025-42380/): Malicious code in @crabas0npm/tempore-vel-provident-adipisci (npm) (malicious package) - [MAL-2025-4238](https://insights.sbomify.com/MAL-2025-4238/): Malicious code in reqinstall (PyPI) (malicious package) - [MAL-2025-42379](https://insights.sbomify.com/MAL-2025-42379/): Malicious code in @crabas0npm/tempore-odio-eligendi-esse (npm) (malicious package) - [MAL-2025-42378](https://insights.sbomify.com/MAL-2025-42378/): Malicious code in @crabas0npm/tempora-natus-accusamus (npm) (malicious package) - [MAL-2025-42377](https://insights.sbomify.com/MAL-2025-42377/): Malicious code in @crabas0npm/sunt-odit-veritatis (npm) (malicious package) - [MAL-2025-42376](https://insights.sbomify.com/MAL-2025-42376/): Malicious code in @crabas0npm/soluta-pariatur-recusandae-incidunt (npm) (malicious package) - [MAL-2025-42375](https://insights.sbomify.com/MAL-2025-42375/): Malicious code in @crabas0npm/soluta-alias-cumque-alias (npm) (malicious package) - [MAL-2025-42374](https://insights.sbomify.com/MAL-2025-42374/): Malicious code in @crabas0npm/sit-ea-consequatur (npm) (malicious package) - [MAL-2025-42373](https://insights.sbomify.com/MAL-2025-42373/): Malicious code in @crabas0npm/sint-voluptas-officia (npm) (malicious package) - [MAL-2025-42372](https://insights.sbomify.com/MAL-2025-42372/): Malicious code in @crabas0npm/sint-quas-itaque (npm) (malicious package) - [MAL-2025-42371](https://insights.sbomify.com/MAL-2025-42371/): Malicious code in @crabas0npm/sint-deleniti-quam-minima (npm) (malicious package) - [MAL-2025-42370](https://insights.sbomify.com/MAL-2025-42370/): Malicious code in @crabas0npm/similique-maiores-quis (npm) (malicious package) - [MAL-2025-4237](https://insights.sbomify.com/MAL-2025-4237/): Malicious code in rblxfando (PyPI) (malicious package) - [MAL-2025-42369](https://insights.sbomify.com/MAL-2025-42369/): Malicious code in @crabas0npm/similique-ipsam-omnis-non (npm) (malicious package) - [MAL-2025-42368](https://insights.sbomify.com/MAL-2025-42368/): Malicious code in @crabas0npm/sequi-rerum-ut (npm) (malicious package) - [MAL-2025-42367](https://insights.sbomify.com/MAL-2025-42367/): Malicious code in @crabas0npm/sequi-facilis-natus (npm) (malicious package) - [MAL-2025-42366](https://insights.sbomify.com/MAL-2025-42366/): Malicious code in @crabas0npm/sed-itaque-tempora-id (npm) (malicious package) - [MAL-2025-42365](https://insights.sbomify.com/MAL-2025-42365/): Malicious code in @crabas0npm/sed-consequatur-ad (npm) (malicious package) - [MAL-2025-42364](https://insights.sbomify.com/MAL-2025-42364/): Malicious code in @crabas0npm/sapiente-neque-mollitia (npm) (malicious package) - [MAL-2025-42363](https://insights.sbomify.com/MAL-2025-42363/): Malicious code in @crabas0npm/sapiente-molestiae-est (npm) (malicious package) - [MAL-2025-42362](https://insights.sbomify.com/MAL-2025-42362/): Malicious code in @crabas0npm/saepe-maxime-corrupti-labore (npm) (malicious package) - [MAL-2025-42361](https://insights.sbomify.com/MAL-2025-42361/): Malicious code in @crabas0npm/saepe-ipsum-tenetur-provident (npm) (malicious package) - [MAL-2025-42360](https://insights.sbomify.com/MAL-2025-42360/): Malicious code in @crabas0npm/reprehenderit-velit-provident (npm) (malicious package) - [MAL-2025-4236](https://insights.sbomify.com/MAL-2025-4236/): Malicious code in pythonbitcoinlib (PyPI) (malicious package) - [MAL-2025-42359](https://insights.sbomify.com/MAL-2025-42359/): Malicious code in @crabas0npm/reprehenderit-at-iste-aperiam (npm) (malicious package) - [MAL-2025-42358](https://insights.sbomify.com/MAL-2025-42358/): Malicious code in @crabas0npm/reiciendis-dicta-quo (npm) (malicious package) - [MAL-2025-42357](https://insights.sbomify.com/MAL-2025-42357/): Malicious code in @crabas0npm/ratione-nemo-saepe (npm) (malicious package) - [MAL-2025-42356](https://insights.sbomify.com/MAL-2025-42356/): Malicious code in @crabas0npm/quos-molestias-aliquid (npm) (malicious package) - [MAL-2025-42355](https://insights.sbomify.com/MAL-2025-42355/): Malicious code in @crabas0npm/quo-suscipit-itaque (npm) (malicious package) - [MAL-2025-42354](https://insights.sbomify.com/MAL-2025-42354/): Malicious code in @crabas0npm/quisquam-maiores-nemo-hic (npm) (malicious package) - [MAL-2025-42353](https://insights.sbomify.com/MAL-2025-42353/): Malicious code in @crabas0npm/quisquam-aut-mollitia (npm) (malicious package) - [MAL-2025-42352](https://insights.sbomify.com/MAL-2025-42352/): Malicious code in @crabas0npm/quibusdam-porro-eius-adipisci (npm) (malicious package) - [MAL-2025-42351](https://insights.sbomify.com/MAL-2025-42351/): Malicious code in @crabas0npm/quibusdam-debitis-facilis-veniam (npm) (malicious package) - [MAL-2025-42350](https://insights.sbomify.com/MAL-2025-42350/): Malicious code in @crabas0npm/quia-incidunt-adipisci-possimus (npm) (malicious package) - [MAL-2025-4235](https://insights.sbomify.com/MAL-2025-4235/): Malicious code in pythonbinance (PyPI) (malicious package) - [MAL-2025-42349](https://insights.sbomify.com/MAL-2025-42349/): Malicious code in @crabas0npm/quia-consequatur-aut (npm) (malicious package) - [MAL-2025-42348](https://insights.sbomify.com/MAL-2025-42348/): Malicious code in @crabas0npm/qui-eaque-maxime-eligendi (npm) (malicious package) - [MAL-2025-42347](https://insights.sbomify.com/MAL-2025-42347/): Malicious code in @crabas0npm/quasi-quibusdam-nam-eos (npm) (malicious package) - [MAL-2025-42346](https://insights.sbomify.com/MAL-2025-42346/): Malicious code in @crabas0npm/quasi-nemo-error (npm) (malicious package) - [MAL-2025-42345](https://insights.sbomify.com/MAL-2025-42345/): Malicious code in @crabas0npm/quasi-maiores-exercitationem-commodi (npm) (malicious package) - [MAL-2025-42344](https://insights.sbomify.com/MAL-2025-42344/): Malicious code in @crabas0npm/quas-unde-incidunt-omnis (npm) (malicious package) - [MAL-2025-42343](https://insights.sbomify.com/MAL-2025-42343/): Malicious code in @crabas0npm/quam-natus-dolorum (npm) (malicious package) - [MAL-2025-42342](https://insights.sbomify.com/MAL-2025-42342/): Malicious code in @crabas0npm/quae-ab-maiores (npm) (malicious package) - [MAL-2025-42341](https://insights.sbomify.com/MAL-2025-42341/): Malicious code in @crabas0npm/provident-nihil-esse-nemo (npm) (malicious package) - [MAL-2025-42340](https://insights.sbomify.com/MAL-2025-42340/): Malicious code in @crabas0npm/provident-nihil-error-quos (npm) (malicious package) - [MAL-2025-4234](https://insights.sbomify.com/MAL-2025-4234/): Malicious code in python-coinbase (PyPI) (malicious package) - [MAL-2025-42339](https://insights.sbomify.com/MAL-2025-42339/): Malicious code in @crabas0npm/possimus-necessitatibus-provident-vel (npm) (malicious package) - [MAL-2025-42338](https://insights.sbomify.com/MAL-2025-42338/): Malicious code in @crabas0npm/porro-voluptatum-asperiores-consectetur (npm) (malicious package) - [MAL-2025-42337](https://insights.sbomify.com/MAL-2025-42337/): Malicious code in @crabas0npm/perspiciatis-eveniet-doloribus (npm) (malicious package) - [MAL-2025-42336](https://insights.sbomify.com/MAL-2025-42336/): Malicious code in @crabas0npm/perspiciatis-dicta-quam (npm) (malicious package) - [MAL-2025-42335](https://insights.sbomify.com/MAL-2025-42335/): Malicious code in @crabas0npm/perferendis-cupiditate-accusantium-dignissimos (npm) (malicious package) - [MAL-2025-42334](https://insights.sbomify.com/MAL-2025-42334/): Malicious code in @crabas0npm/pariatur-qui-possimus (npm) (malicious package) - [MAL-2025-42333](https://insights.sbomify.com/MAL-2025-42333/): Malicious code in @crabas0npm/pariatur-corporis-alias (npm) (malicious package) - [MAL-2025-42332](https://insights.sbomify.com/MAL-2025-42332/): Malicious code in @crabas0npm/omnis-soluta-vitae (npm) (malicious package) - [MAL-2025-42331](https://insights.sbomify.com/MAL-2025-42331/): Malicious code in @crabas0npm/officia-pariatur-quis (npm) (malicious package) - [MAL-2025-42330](https://insights.sbomify.com/MAL-2025-42330/): Malicious code in @crabas0npm/odit-expedita-dolor-harum (npm) (malicious package) - [MAL-2025-4233](https://insights.sbomify.com/MAL-2025-4233/): Malicious code in pystile (PyPI) (malicious package) - [MAL-2025-42329](https://insights.sbomify.com/MAL-2025-42329/): Malicious code in @crabas0npm/odio-reprehenderit-explicabo (npm) (malicious package) - [MAL-2025-42328](https://insights.sbomify.com/MAL-2025-42328/): Malicious code in @crabas0npm/occaecati-maiores-nihil-molestiae (npm) (malicious package) - [MAL-2025-42327](https://insights.sbomify.com/MAL-2025-42327/): Malicious code in @crabas0npm/nulla-molestias-eligendi (npm) (malicious package) - [MAL-2025-42326](https://insights.sbomify.com/MAL-2025-42326/): Malicious code in @crabas0npm/nostrum-possimus-labore-corrupti (npm) (malicious package) - [MAL-2025-42325](https://insights.sbomify.com/MAL-2025-42325/): Malicious code in @crabas0npm/nostrum-optio-consequatur (npm) (malicious package) - [MAL-2025-42324](https://insights.sbomify.com/MAL-2025-42324/): Malicious code in @crabas0npm/nostrum-nesciunt-odio-odit (npm) (malicious package) - [MAL-2025-42323](https://insights.sbomify.com/MAL-2025-42323/): Malicious code in @crabas0npm/nostrum-dignissimos-illo-labore (npm) (malicious package) - [MAL-2025-42322](https://insights.sbomify.com/MAL-2025-42322/): Malicious code in @crabas0npm/nobis-sed-ratione (npm) (malicious package) - [MAL-2025-42321](https://insights.sbomify.com/MAL-2025-42321/): Malicious code in @crabas0npm/nobis-corrupti-esse-ducimus (npm) (malicious package) - [MAL-2025-42320](https://insights.sbomify.com/MAL-2025-42320/): Malicious code in @crabas0npm/nihil-voluptas-veritatis (npm) (malicious package) - [MAL-2025-4232](https://insights.sbomify.com/MAL-2025-4232/): Malicious code in pyinitialyze (PyPI) (malicious package) - [MAL-2025-42319](https://insights.sbomify.com/MAL-2025-42319/): Malicious code in @crabas0npm/nihil-nisi-soluta-adipisci (npm) (malicious package) - [MAL-2025-42318](https://insights.sbomify.com/MAL-2025-42318/): Malicious code in @crabas0npm/nihil-culpa-officia-repudiandae (npm) (malicious package) - [MAL-2025-42317](https://insights.sbomify.com/MAL-2025-42317/): Malicious code in @crabas0npm/nesciunt-consequatur-ut-quod (npm) (malicious package) - [MAL-2025-42316](https://insights.sbomify.com/MAL-2025-42316/): Malicious code in @crabas0npm/neque-quos-sequi (npm) (malicious package) - [MAL-2025-42315](https://insights.sbomify.com/MAL-2025-42315/): Malicious code in @crabas0npm/neque-at-voluptas-incidunt (npm) (malicious package) - [MAL-2025-42314](https://insights.sbomify.com/MAL-2025-42314/): Malicious code in @crabas0npm/natus-asperiores-error-quisquam (npm) (malicious package) - [MAL-2025-42313](https://insights.sbomify.com/MAL-2025-42313/): Malicious code in @crabas0npm/mollitia-ab-ut (npm) (malicious package) - [MAL-2025-42312](https://insights.sbomify.com/MAL-2025-42312/): Malicious code in @crabas0npm/molestias-velit-nostrum (npm) (malicious package) - [MAL-2025-42311](https://insights.sbomify.com/MAL-2025-42311/): Malicious code in @crabas0npm/molestias-perspiciatis-quae (npm) (malicious package) - [MAL-2025-42310](https://insights.sbomify.com/MAL-2025-42310/): Malicious code in @crabas0npm/molestias-molestias-voluptatibus (npm) (malicious package) - [MAL-2025-4231](https://insights.sbomify.com/MAL-2025-4231/): Malicious code in pyiniter (PyPI) (malicious package) - [MAL-2025-42309](https://insights.sbomify.com/MAL-2025-42309/): Malicious code in @crabas0npm/molestiae-quod-dolores (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/643/