# Vulnerabilities published in 2025


- [MAL-2025-42308](https://insights.sbomify.com/MAL-2025-42308/): Malicious code in @crabas0npm/molestiae-ea-magni-commodi (npm) (malicious package)
- [MAL-2025-42307](https://insights.sbomify.com/MAL-2025-42307/): Malicious code in @crabas0npm/modi-rem-nobis-totam (npm) (malicious package)
- [MAL-2025-42306](https://insights.sbomify.com/MAL-2025-42306/): Malicious code in @crabas0npm/minus-ipsa-ut (npm) (malicious package)
- [MAL-2025-42305](https://insights.sbomify.com/MAL-2025-42305/): Malicious code in @crabas0npm/minus-id-provident (npm) (malicious package)
- [MAL-2025-42304](https://insights.sbomify.com/MAL-2025-42304/): Malicious code in @crabas0npm/minus-a-eum-dolores (npm) (malicious package)
- [MAL-2025-42303](https://insights.sbomify.com/MAL-2025-42303/): Malicious code in @crabas0npm/minima-maxime-tempore (npm) (malicious package)
- [MAL-2025-42302](https://insights.sbomify.com/MAL-2025-42302/): Malicious code in @crabas0npm/maxime-veritatis-veniam (npm) (malicious package)
- [MAL-2025-42301](https://insights.sbomify.com/MAL-2025-42301/): Malicious code in @crabas0npm/laudantium-non-autem-facilis (npm) (malicious package)
- [MAL-2025-42300](https://insights.sbomify.com/MAL-2025-42300/): Malicious code in @crabas0npm/laudantium-dolorem-deserunt-nisi (npm) (malicious package)
- [MAL-2025-4230](https://insights.sbomify.com/MAL-2025-4230/): Malicious code in pydoxing (PyPI) (malicious package)
- [MAL-2025-423](https://insights.sbomify.com/MAL-2025-423/): Malicious code in coinbase-service (npm) (malicious package)
- [MAL-2025-42299](https://insights.sbomify.com/MAL-2025-42299/): Malicious code in @crabas0npm/laborum-quidem-voluptatum-facere (npm) (malicious package)
- [MAL-2025-42298](https://insights.sbomify.com/MAL-2025-42298/): Malicious code in @crabas0npm/laborum-possimus-voluptatibus-saepe (npm) (malicious package)
- [MAL-2025-42297](https://insights.sbomify.com/MAL-2025-42297/): Malicious code in @crabas0npm/laborum-labore-nobis-eligendi (npm) (malicious package)
- [MAL-2025-42296](https://insights.sbomify.com/MAL-2025-42296/): Malicious code in @crabas0npm/laboriosam-tempora-velit-modi (npm) (malicious package)
- [MAL-2025-42295](https://insights.sbomify.com/MAL-2025-42295/): Malicious code in @crabas0npm/laboriosam-suscipit-consectetur (npm) (malicious package)
- [MAL-2025-42294](https://insights.sbomify.com/MAL-2025-42294/): Malicious code in @crabas0npm/laboriosam-fugiat-vitae (npm) (malicious package)
- [MAL-2025-42293](https://insights.sbomify.com/MAL-2025-42293/): Malicious code in @crabas0npm/labore-natus-beatae-corporis (npm) (malicious package)
- [MAL-2025-42292](https://insights.sbomify.com/MAL-2025-42292/): Malicious code in @crabas0npm/iure-voluptate-assumenda-debitis (npm) (malicious package)
- [MAL-2025-42291](https://insights.sbomify.com/MAL-2025-42291/): Malicious code in @crabas0npm/iure-illo-sit-id (npm) (malicious package)
- [MAL-2025-42290](https://insights.sbomify.com/MAL-2025-42290/): Malicious code in @crabas0npm/itaque-occaecati-iste (npm) (malicious package)
- [MAL-2025-4229](https://insights.sbomify.com/MAL-2025-4229/): Malicious code in py-solanautil (PyPI) (malicious package)
- [MAL-2025-42289](https://insights.sbomify.com/MAL-2025-42289/): Malicious code in @crabas0npm/itaque-fuga-velit (npm) (malicious package)
- [MAL-2025-42288](https://insights.sbomify.com/MAL-2025-42288/): Malicious code in @crabas0npm/itaque-eligendi-recusandae-soluta (npm) (malicious package)
- [MAL-2025-42287](https://insights.sbomify.com/MAL-2025-42287/): Malicious code in @crabas0npm/iste-a-provident-error (npm) (malicious package)
- [MAL-2025-42286](https://insights.sbomify.com/MAL-2025-42286/): Malicious code in @crabas0npm/ipsum-hic-natus (npm) (malicious package)
- [MAL-2025-42285](https://insights.sbomify.com/MAL-2025-42285/): Malicious code in @crabas0npm/ipsam-voluptatum-reprehenderit (npm) (malicious package)
- [MAL-2025-42284](https://insights.sbomify.com/MAL-2025-42284/): Malicious code in @crabas0npm/ipsam-nobis-possimus-error (npm) (malicious package)
- [MAL-2025-42283](https://insights.sbomify.com/MAL-2025-42283/): Malicious code in @crabas0npm/ipsa-vel-id (npm) (malicious package)
- [MAL-2025-42282](https://insights.sbomify.com/MAL-2025-42282/): Malicious code in @crabas0npm/inventore-nobis-odit (npm) (malicious package)
- [MAL-2025-42281](https://insights.sbomify.com/MAL-2025-42281/): Malicious code in @crabas0npm/inventore-eaque-dicta (npm) (malicious package)
- [MAL-2025-42280](https://insights.sbomify.com/MAL-2025-42280/): Malicious code in @crabas0npm/incidunt-at-natus-nulla (npm) (malicious package)
- [MAL-2025-4228](https://insights.sbomify.com/MAL-2025-4228/): Malicious code in puttytitle (PyPI) (malicious package)
- [MAL-2025-42279](https://insights.sbomify.com/MAL-2025-42279/): Malicious code in @crabas0npm/in-laboriosam-mollitia-maiores (npm) (malicious package)
- [MAL-2025-42278](https://insights.sbomify.com/MAL-2025-42278/): Malicious code in @crabas0npm/illum-quam-commodi (npm) (malicious package)
- [MAL-2025-42277](https://insights.sbomify.com/MAL-2025-42277/): Malicious code in @crabas0npm/illo-odio-nam-alias (npm) (malicious package)
- [MAL-2025-42276](https://insights.sbomify.com/MAL-2025-42276/): Malicious code in @crabas0npm/illo-enim-cumque (npm) (malicious package)
- [MAL-2025-42275](https://insights.sbomify.com/MAL-2025-42275/): Malicious code in @crabas0npm/illo-ad-ipsum (npm) (malicious package)
- [MAL-2025-42274](https://insights.sbomify.com/MAL-2025-42274/): Malicious code in @crabas0npm/id-numquam-cumque-sint (npm) (malicious package)
- [MAL-2025-42273](https://insights.sbomify.com/MAL-2025-42273/): Malicious code in @crabas0npm/id-incidunt-at-culpa (npm) (malicious package)
- [MAL-2025-42272](https://insights.sbomify.com/MAL-2025-42272/): Malicious code in @crabas0npm/hic-perferendis-eaque-hic (npm) (malicious package)
- [MAL-2025-42271](https://insights.sbomify.com/MAL-2025-42271/): Malicious code in @crabas0npm/hic-asperiores-nam (npm) (malicious package)
- [MAL-2025-42270](https://insights.sbomify.com/MAL-2025-42270/): Malicious code in @crabas0npm/fugiat-pariatur-numquam-neque (npm) (malicious package)
- [MAL-2025-4227](https://insights.sbomify.com/MAL-2025-4227/): Malicious code in ora3 (PyPI) (malicious package)
- [MAL-2025-42269](https://insights.sbomify.com/MAL-2025-42269/): Malicious code in @crabas0npm/fuga-inventore-voluptatibus (npm) (malicious package)
- [MAL-2025-42268](https://insights.sbomify.com/MAL-2025-42268/): Malicious code in @crabas0npm/facere-ipsam-rerum-at (npm) (malicious package)
- [MAL-2025-42267](https://insights.sbomify.com/MAL-2025-42267/): Malicious code in @crabas0npm/explicabo-ut-itaque-possimus (npm) (malicious package)
- [MAL-2025-42266](https://insights.sbomify.com/MAL-2025-42266/): Malicious code in @crabas0npm/explicabo-deserunt-necessitatibus (npm) (malicious package)
- [MAL-2025-42265](https://insights.sbomify.com/MAL-2025-42265/): Malicious code in @crabas0npm/expedita-veritatis-consectetur-vitae (npm) (malicious package)
- [MAL-2025-42264](https://insights.sbomify.com/MAL-2025-42264/): Malicious code in @crabas0npm/expedita-nostrum-laudantium (npm) (malicious package)
- [MAL-2025-42263](https://insights.sbomify.com/MAL-2025-42263/): Malicious code in @crabas0npm/expedita-illum-temporibus (npm) (malicious package)
- [MAL-2025-42262](https://insights.sbomify.com/MAL-2025-42262/): Malicious code in @crabas0npm/expedita-ad-ipsum-quos (npm) (malicious package)
- [MAL-2025-42261](https://insights.sbomify.com/MAL-2025-42261/): Malicious code in @crabas0npm/exercitationem-error-quis-enim (npm) (malicious package)
- [MAL-2025-42260](https://insights.sbomify.com/MAL-2025-42260/): Malicious code in @crabas0npm/exercitationem-doloribus-officiis (npm) (malicious package)
- [MAL-2025-42259](https://insights.sbomify.com/MAL-2025-42259/): Malicious code in @crabas0npm/exercitationem-accusantium-autem-debitis (npm) (malicious package)
- [MAL-2025-42258](https://insights.sbomify.com/MAL-2025-42258/): Malicious code in @crabas0npm/excepturi-doloribus-impedit-error (npm) (malicious package)
- [MAL-2025-42257](https://insights.sbomify.com/MAL-2025-42257/): Malicious code in @crabas0npm/ex-iste-optio-sunt (npm) (malicious package)
- [MAL-2025-42256](https://insights.sbomify.com/MAL-2025-42256/): Malicious code in @crabas0npm/eveniet-ex-eveniet (npm) (malicious package)
- [MAL-2025-42255](https://insights.sbomify.com/MAL-2025-42255/): Malicious code in @crabas0npm/eveniet-eum-voluptatum-facere (npm) (malicious package)
- [MAL-2025-42254](https://insights.sbomify.com/MAL-2025-42254/): Malicious code in @crabas0npm/eum-minima-omnis-ad (npm) (malicious package)
- [MAL-2025-42253](https://insights.sbomify.com/MAL-2025-42253/): Malicious code in @crabas0npm/eum-dolore-necessitatibus (npm) (malicious package)
- [MAL-2025-42252](https://insights.sbomify.com/MAL-2025-42252/): Malicious code in @crabas0npm/esse-enim-saepe-a (npm) (malicious package)
- [MAL-2025-42251](https://insights.sbomify.com/MAL-2025-42251/): Malicious code in @crabas0npm/error-iure-dolorum-saepe (npm) (malicious package)
- [MAL-2025-42250](https://insights.sbomify.com/MAL-2025-42250/): Malicious code in @crabas0npm/eligendi-quae-iste-libero (npm) (malicious package)
- [MAL-2025-42249](https://insights.sbomify.com/MAL-2025-42249/): Malicious code in @crabas0npm/eligendi-perspiciatis-perspiciatis (npm) (malicious package)
- [MAL-2025-42248](https://insights.sbomify.com/MAL-2025-42248/): Malicious code in @crabas0npm/eaque-velit-magni (npm) (malicious package)
- [MAL-2025-42247](https://insights.sbomify.com/MAL-2025-42247/): Malicious code in @crabas0npm/eaque-nam-corrupti-iste (npm) (malicious package)
- [MAL-2025-42246](https://insights.sbomify.com/MAL-2025-42246/): Malicious code in @crabas0npm/eaque-ab-aliquid (npm) (malicious package)
- [MAL-2025-42245](https://insights.sbomify.com/MAL-2025-42245/): Malicious code in @crabas0npm/ea-ullam-quibusdam-dolor (npm) (malicious package)
- [MAL-2025-42244](https://insights.sbomify.com/MAL-2025-42244/): Malicious code in @crabas0npm/ea-sed-corporis-assumenda (npm) (malicious package)
- [MAL-2025-42243](https://insights.sbomify.com/MAL-2025-42243/): Malicious code in @crabas0npm/ea-commodi-quod (npm) (malicious package)
- [MAL-2025-42242](https://insights.sbomify.com/MAL-2025-42242/): Malicious code in @crabas0npm/doloribus-non-pariatur-deleniti (npm) (malicious package)
- [MAL-2025-42241](https://insights.sbomify.com/MAL-2025-42241/): Malicious code in @crabas0npm/doloribus-fugit-esse-impedit (npm) (malicious package)
- [MAL-2025-42240](https://insights.sbomify.com/MAL-2025-42240/): Malicious code in @crabas0npm/dolorem-optio-ad-veritatis (npm) (malicious package)
- [MAL-2025-4224](https://insights.sbomify.com/MAL-2025-4224/): Malicious code in meowsapi (PyPI) (malicious package)
- [MAL-2025-42239](https://insights.sbomify.com/MAL-2025-42239/): Malicious code in @crabas0npm/dolorem-accusantium-nemo-dolores (npm) (malicious package)
- [MAL-2025-42238](https://insights.sbomify.com/MAL-2025-42238/): Malicious code in @crabas0npm/dolore-voluptate-delectus (npm) (malicious package)
- [MAL-2025-42237](https://insights.sbomify.com/MAL-2025-42237/): Malicious code in @crabas0npm/dolor-voluptatum-odit-quas (npm) (malicious package)
- [MAL-2025-42236](https://insights.sbomify.com/MAL-2025-42236/): Malicious code in @crabas0npm/dignissimos-eaque-hic-nulla (npm) (malicious package)
- [MAL-2025-42235](https://insights.sbomify.com/MAL-2025-42235/): Malicious code in @crabas0npm/deleniti-velit-quam (npm) (malicious package)
- [MAL-2025-42234](https://insights.sbomify.com/MAL-2025-42234/): Malicious code in @crabas0npm/deleniti-rerum-omnis (npm) (malicious package)
- [MAL-2025-42233](https://insights.sbomify.com/MAL-2025-42233/): Malicious code in @crabas0npm/deleniti-nesciunt-molestias (npm) (malicious package)
- [MAL-2025-42232](https://insights.sbomify.com/MAL-2025-42232/): Malicious code in @crabas0npm/debitis-beatae-saepe (npm) (malicious package)
- [MAL-2025-42231](https://insights.sbomify.com/MAL-2025-42231/): Malicious code in @crabas0npm/cumque-ratione-quos (npm) (malicious package)
- [MAL-2025-42230](https://insights.sbomify.com/MAL-2025-42230/): Malicious code in @crabas0npm/cumque-maiores-exercitationem-necessitatibus (npm) (malicious package)
- [MAL-2025-42229](https://insights.sbomify.com/MAL-2025-42229/): Malicious code in @crabas0npm/culpa-est-omnis (npm) (malicious package)
- [MAL-2025-42228](https://insights.sbomify.com/MAL-2025-42228/): Malicious code in @crabas0npm/corrupti-illo-animi (npm) (malicious package)
- [MAL-2025-42227](https://insights.sbomify.com/MAL-2025-42227/): Malicious code in @crabas0npm/corrupti-delectus-neque-quas (npm) (malicious package)
- [MAL-2025-42226](https://insights.sbomify.com/MAL-2025-42226/): Malicious code in @crabas0npm/corporis-perferendis-delectus-aliquam (npm) (malicious package)
- [MAL-2025-42225](https://insights.sbomify.com/MAL-2025-42225/): Malicious code in @crabas0npm/corporis-optio-dolor-repellendus (npm) (malicious package)
- [MAL-2025-42224](https://insights.sbomify.com/MAL-2025-42224/): Malicious code in @crabas0npm/corporis-nam-pariatur (npm) (malicious package)
- [MAL-2025-42223](https://insights.sbomify.com/MAL-2025-42223/): Malicious code in @crabas0npm/consectetur-recusandae-impedit-velit (npm) (malicious package)
- [MAL-2025-42222](https://insights.sbomify.com/MAL-2025-42222/): Malicious code in @crabas0npm/blanditiis-facere-sapiente (npm) (malicious package)
- [MAL-2025-42221](https://insights.sbomify.com/MAL-2025-42221/): Malicious code in @crabas0npm/beatae-vitae-natus-unde (npm) (malicious package)
- [MAL-2025-42220](https://insights.sbomify.com/MAL-2025-42220/): Malicious code in @crabas0npm/beatae-sequi-debitis-tenetur (npm) (malicious package)
- [MAL-2025-42219](https://insights.sbomify.com/MAL-2025-42219/): Malicious code in @crabas0npm/autem-veniam-error-repellat (npm) (malicious package)
- [MAL-2025-42218](https://insights.sbomify.com/MAL-2025-42218/): Malicious code in @crabas0npm/aut-vitae-consequuntur-esse (npm) (malicious package)
- [MAL-2025-42217](https://insights.sbomify.com/MAL-2025-42217/): Malicious code in @crabas0npm/at-saepe-sequi-iste (npm) (malicious package)
- [MAL-2025-42216](https://insights.sbomify.com/MAL-2025-42216/): Malicious code in @crabas0npm/at-officia-quis-nemo (npm) (malicious package)
- [MAL-2025-42215](https://insights.sbomify.com/MAL-2025-42215/): Malicious code in @crabas0npm/asperiores-inventore-saepe-laudantium (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/644/