# Vulnerabilities published in 2025


- [MAL-2025-42214](https://insights.sbomify.com/MAL-2025-42214/): Malicious code in @crabas0npm/asperiores-aspernatur-unde-cupiditate (npm) (malicious package)
- [MAL-2025-42213](https://insights.sbomify.com/MAL-2025-42213/): Malicious code in @crabas0npm/aperiam-possimus-atque (npm) (malicious package)
- [MAL-2025-42212](https://insights.sbomify.com/MAL-2025-42212/): Malicious code in @crabas0npm/aperiam-non-facere-occaecati (npm) (malicious package)
- [MAL-2025-42211](https://insights.sbomify.com/MAL-2025-42211/): Malicious code in @crabas0npm/amet-sint-rerum-quasi (npm) (malicious package)
- [MAL-2025-42210](https://insights.sbomify.com/MAL-2025-42210/): Malicious code in @crabas0npm/amet-quas-quo (npm) (malicious package)
- [MAL-2025-4221](https://insights.sbomify.com/MAL-2025-4221/): Malicious code in keybard (PyPI) (malicious package)
- [MAL-2025-42209](https://insights.sbomify.com/MAL-2025-42209/): Malicious code in @crabas0npm/amet-autem-magnam-odit (npm) (malicious package)
- [MAL-2025-42208](https://insights.sbomify.com/MAL-2025-42208/): Malicious code in @crabas0npm/amet-accusamus-itaque (npm) (malicious package)
- [MAL-2025-42207](https://insights.sbomify.com/MAL-2025-42207/): Malicious code in @crabas0npm/alias-mollitia-quia (npm) (malicious package)
- [MAL-2025-42206](https://insights.sbomify.com/MAL-2025-42206/): Malicious code in @crabas0npm/alias-dolorum-corrupti-sint (npm) (malicious package)
- [MAL-2025-42205](https://insights.sbomify.com/MAL-2025-42205/): Malicious code in @crabas0npm/alias-consequuntur-ea (npm) (malicious package)
- [MAL-2025-42204](https://insights.sbomify.com/MAL-2025-42204/): Malicious code in @crabas0npm/adipisci-aperiam-iste-quidem (npm) (malicious package)
- [MAL-2025-42203](https://insights.sbomify.com/MAL-2025-42203/): Malicious code in @crabas0npm/ad-sint-minus (npm) (malicious package)
- [MAL-2025-42202](https://insights.sbomify.com/MAL-2025-42202/): Malicious code in @crabas0npm/ad-inventore-corporis-in (npm) (malicious package)
- [MAL-2025-42201](https://insights.sbomify.com/MAL-2025-42201/): Malicious code in @crabas0npm/accusantium-officiis-incidunt (npm) (malicious package)
- [MAL-2025-42200](https://insights.sbomify.com/MAL-2025-42200/): Malicious code in @crabas0npm/accusantium-consectetur-eveniet (npm) (malicious package)
- [MAL-2025-4220](https://insights.sbomify.com/MAL-2025-4220/): Malicious code in glean-indexing-api-client (PyPI) (malicious package)
- [MAL-2025-422](https://insights.sbomify.com/MAL-2025-422/): Malicious code in coinbase-payment (npm) (malicious package)
- [MAL-2025-42199](https://insights.sbomify.com/MAL-2025-42199/): Malicious code in @crabas0npm/ab-suscipit-sunt (npm) (malicious package)
- [MAL-2025-42198](https://insights.sbomify.com/MAL-2025-42198/): Malicious code in @crabas0npm/ab-similique-voluptas-ipsa (npm) (malicious package)
- [MAL-2025-42197](https://insights.sbomify.com/MAL-2025-42197/): Malicious code in @crabas0npm/ab-laboriosam-similique-illum (npm) (malicious package)
- [MAL-2025-42196](https://insights.sbomify.com/MAL-2025-42196/): Malicious code in @crabas0npm/ab-doloribus-mollitia (npm) (malicious package)
- [MAL-2025-42195](https://insights.sbomify.com/MAL-2025-42195/): Malicious code in @crabas0npm/a-pariatur-non-autem (npm) (malicious package)
- [MAL-2025-42194](https://insights.sbomify.com/MAL-2025-42194/): Malicious code in @com-delta-omnichannel/core (npm) (malicious package)
- [MAL-2025-42193](https://insights.sbomify.com/MAL-2025-42193/): Malicious code in @com-delta-idp/core (npm) (malicious package)
- [MAL-2025-42192](https://insights.sbomify.com/MAL-2025-42192/): Malicious code in @chatgptclaudeclub/claude-code (npm) (malicious package)
- [MAL-2025-42191](https://insights.sbomify.com/MAL-2025-42191/): Malicious code in @bugtestester/simple-web-app-package (npm) (malicious package)
- [MAL-2025-42190](https://insights.sbomify.com/MAL-2025-42190/): Malicious code in @auro-formkit/config (npm) (malicious package)
- [MAL-2025-4219](https://insights.sbomify.com/MAL-2025-4219/): Malicious code in free-internet-dns (PyPI) (malicious package)
- [MAL-2025-42189](https://insights.sbomify.com/MAL-2025-42189/): Malicious code in @apachesling/slingpost (npm) (malicious package)
- [MAL-2025-42188](https://insights.sbomify.com/MAL-2025-42188/): Malicious code in @apachesling/slingpackager (npm) (malicious package)
- [MAL-2025-42187](https://insights.sbomify.com/MAL-2025-42187/): Malicious code in @amigatechdocs/core (npm) (malicious package)
- [MAL-2025-42186](https://insights.sbomify.com/MAL-2025-42186/): Malicious code in @amiga-fwk-nodejs/metrics (npm) (malicious package)
- [MAL-2025-42185](https://insights.sbomify.com/MAL-2025-42185/): Malicious code in @amiga-fwk-nodejs/log (npm) (malicious package)
- [MAL-2025-42184](https://insights.sbomify.com/MAL-2025-42184/): Malicious code in 90000-coin-master-free-spins-rflmre (npm) (malicious package)
- [MAL-2025-42183](https://insights.sbomify.com/MAL-2025-42183/): Malicious code in 80000-coin-master-free-spins-rrtger (npm) (malicious package)
- [MAL-2025-42182](https://insights.sbomify.com/MAL-2025-42182/): Malicious code in 70k-free-coin-master-spins-2023-dkzldki (npm) (malicious package)
- [MAL-2025-42181](https://insights.sbomify.com/MAL-2025-42181/): Malicious code in 60000-coin-master-free-spins-rflmre (npm) (malicious package)
- [MAL-2025-42180](https://insights.sbomify.com/MAL-2025-42180/): Malicious code in 50000-free-coin-master-spins-updated-kfekdz (npm) (malicious package)
- [MAL-2025-4218](https://insights.sbomify.com/MAL-2025-4218/): Malicious code in evillib-cli-demo (PyPI) (malicious package)
- [MAL-2025-42179](https://insights.sbomify.com/MAL-2025-42179/): Malicious code in 50000-free-coin-master-spins-dkzdlz (npm) (malicious package)
- [MAL-2025-42178](https://insights.sbomify.com/MAL-2025-42178/): Malicious code in 50000-free-coin-master-spins-dkfdeld (npm) (malicious package)
- [MAL-2025-42177](https://insights.sbomify.com/MAL-2025-42177/): Malicious code in 50000-coin-master-free-spins-rflmre (npm) (malicious package)
- [MAL-2025-42176](https://insights.sbomify.com/MAL-2025-42176/): Malicious code in 40000-free-coin-master-spins-dzdkef (npm) (malicious package)
- [MAL-2025-42175](https://insights.sbomify.com/MAL-2025-42175/): Malicious code in 40000-coin-master-free-spins-yukgrg (npm) (malicious package)
- [MAL-2025-42174](https://insights.sbomify.com/MAL-2025-42174/): Malicious code in 30000-coin-master-free-spins-ryhfsse (npm) (malicious package)
- [MAL-2025-42173](https://insights.sbomify.com/MAL-2025-42173/): Malicious code in 2025dyninstslots (npm) (malicious package)
- [MAL-2025-42172](https://insights.sbomify.com/MAL-2025-42172/): Malicious code in 2023-free-spins-coin-master-dsdzldz (npm) (malicious package)
- [MAL-2025-42171](https://insights.sbomify.com/MAL-2025-42171/): Malicious code in 2023-fortnite-free-v-bucks-and-skins-updated-dklzd (npm) (malicious package)
- [MAL-2025-42170](https://insights.sbomify.com/MAL-2025-42170/): Malicious code in 2023-coin-master-free-unlimited-spins-zdkzk (npm) (malicious package)
- [MAL-2025-4217](https://insights.sbomify.com/MAL-2025-4217/): Malicious code in el1t3 (PyPI) (malicious package)
- [MAL-2025-42169](https://insights.sbomify.com/MAL-2025-42169/): Malicious code in 2023-coin-master-free-spins-zzdezb (npm) (malicious package)
- [MAL-2025-42168](https://insights.sbomify.com/MAL-2025-42168/): Malicious code in 2023-coin-master-free-spins-szzsz (npm) (malicious package)
- [MAL-2025-42167](https://insights.sbomify.com/MAL-2025-42167/): Malicious code in 2023-coin-master-free-spins-sregrfz (npm) (malicious package)
- [MAL-2025-42166](https://insights.sbomify.com/MAL-2025-42166/): Malicious code in 2023-coin-master-free-spins-segrefz (npm) (malicious package)
- [MAL-2025-42165](https://insights.sbomify.com/MAL-2025-42165/): Malicious code in 2023-coin-master-free-spins-kddlz (npm) (malicious package)
- [MAL-2025-42164](https://insights.sbomify.com/MAL-2025-42164/): Malicious code in 13k-free-fortnite-v-bucks-dkzledz (npm) (malicious package)
- [MAL-2025-42163](https://insights.sbomify.com/MAL-2025-42163/): Malicious code in 13500-free-vbucks-fortnite-klhykgf (npm) (malicious package)
- [MAL-2025-42162](https://insights.sbomify.com/MAL-2025-42162/): Malicious code in 13500-free-fortnite-v-bucks-updated-dkdzk (npm) (malicious package)
- [MAL-2025-42161](https://insights.sbomify.com/MAL-2025-42161/): Malicious code in 100k-coin-master-free-spins-fdgergr (npm) (malicious package)
- [MAL-2025-42160](https://insights.sbomify.com/MAL-2025-42160/): Malicious code in 100000-coin-master-free-spins-dkfefdzd (npm) (malicious package)
- [MAL-2025-4216](https://insights.sbomify.com/MAL-2025-4216/): Malicious code in easyascii (PyPI) (malicious package)
- [MAL-2025-42159](https://insights.sbomify.com/MAL-2025-42159/): Malicious code in bohr-web (npm) (malicious package)
- [MAL-2025-42158](https://insights.sbomify.com/MAL-2025-42158/): Malicious code in yui2-treeview (npm) (malicious package)
- [MAL-2025-42157](https://insights.sbomify.com/MAL-2025-42157/): Malicious code in yui2-animation (npm) (malicious package)
- [MAL-2025-42156](https://insights.sbomify.com/MAL-2025-42156/): Malicious code in panel-keylogger-sim (npm) (malicious package)
- [MAL-2025-42155](https://insights.sbomify.com/MAL-2025-42155/): Malicious code in moodle-core_filepicker (npm) (malicious package)
- [MAL-2025-42154](https://insights.sbomify.com/MAL-2025-42154/): Malicious code in moodle-core-widget-focusafterclose (npm) (malicious package)
- [MAL-2025-42153](https://insights.sbomify.com/MAL-2025-42153/): Malicious code in moodle-core-tooltip (npm) (malicious package)
- [MAL-2025-42152](https://insights.sbomify.com/MAL-2025-42152/): Malicious code in moodle-core-notification-dialogue (npm) (malicious package)
- [MAL-2025-42151](https://insights.sbomify.com/MAL-2025-42151/): Malicious code in moodle-core-lockscroll (npm) (malicious package)
- [MAL-2025-42150](https://insights.sbomify.com/MAL-2025-42150/): Malicious code in jfrog-alfheim (npm) (malicious package)
- [MAL-2025-42149](https://insights.sbomify.com/MAL-2025-42149/): Malicious code in theia-killercoda-extension (npm) (malicious package)
- [MAL-2025-42148](https://insights.sbomify.com/MAL-2025-42148/): Malicious code in my-javascript-project (npm) (malicious package)
- [MAL-2025-42147](https://insights.sbomify.com/MAL-2025-42147/): Malicious code in file-dependency (npm) (malicious package)
- [MAL-2025-42146](https://insights.sbomify.com/MAL-2025-42146/): Malicious code in rtk-wake (npm) (malicious package)
- [MAL-2025-42145](https://insights.sbomify.com/MAL-2025-42145/): Malicious code in logging-winston (npm) (malicious package)
- [MAL-2025-42144](https://insights.sbomify.com/MAL-2025-42144/): Malicious code in library.cycle.e (npm) (malicious package)
- [MAL-2025-42143](https://insights.sbomify.com/MAL-2025-42143/): Malicious code in collabs-influencer-ui (npm) (malicious package)
- [MAL-2025-42142](https://insights.sbomify.com/MAL-2025-42142/): Malicious code in brave-real-launcher (npm) (malicious package)
- [MAL-2025-42141](https://insights.sbomify.com/MAL-2025-42141/): Malicious code in ds-header (npm) (malicious package)
- [MAL-2025-42140](https://insights.sbomify.com/MAL-2025-42140/): Malicious code in tailwind-react-icon (npm) (malicious package)
- [MAL-2025-42139](https://insights.sbomify.com/MAL-2025-42139/): Malicious code in tailwind-config-overrides (npm) (malicious package)
- [MAL-2025-42138](https://insights.sbomify.com/MAL-2025-42138/): Malicious code in mathy-console (npm) (malicious package)
- [MAL-2025-42137](https://insights.sbomify.com/MAL-2025-42137/): Malicious code in brave-real-launcher-v2 (npm) (malicious package)
- [MAL-2025-42136](https://insights.sbomify.com/MAL-2025-42136/): Malicious code in newrelic-infrastructure (npm) (malicious package)
- [MAL-2025-42135](https://insights.sbomify.com/MAL-2025-42135/): Malicious code in camelize-http-headers (npm) (malicious package)
- [MAL-2025-42134](https://insights.sbomify.com/MAL-2025-42134/): Malicious code in polyfliof92 (npm) (malicious package)
- [MAL-2025-42133](https://insights.sbomify.com/MAL-2025-42133/): Malicious code in eslint-plugin-rdv-insertion (npm) (malicious package)
- [MAL-2025-42132](https://insights.sbomify.com/MAL-2025-42132/): Malicious code in test343tttt (npm) (malicious package)
- [MAL-2025-42131](https://insights.sbomify.com/MAL-2025-42131/): Malicious code in pp-react-segmented-controller (npm) (malicious package)
- [MAL-2025-42130](https://insights.sbomify.com/MAL-2025-42130/): Malicious code in pp-react-icons (npm) (malicious package)
- [MAL-2025-42129](https://insights.sbomify.com/MAL-2025-42129/): Malicious code in pp-react-grid (npm) (malicious package)
- [MAL-2025-42128](https://insights.sbomify.com/MAL-2025-42128/): Malicious code in berachain-metadata (npm) (malicious package)
- [MAL-2025-42127](https://insights.sbomify.com/MAL-2025-42127/): Malicious code in azure-ipam-ui (npm) (malicious package)
- [MAL-2025-42126](https://insights.sbomify.com/MAL-2025-42126/): Malicious code in azure-functions-templates-build (npm) (malicious package)
- [MAL-2025-42125](https://insights.sbomify.com/MAL-2025-42125/): Malicious code in @liquid-web/core-services (npm) (malicious package)
- [MAL-2025-42124](https://insights.sbomify.com/MAL-2025-42124/): Malicious code in @flight-common/services (npm) (malicious package)
- [MAL-2025-42123](https://insights.sbomify.com/MAL-2025-42123/): Malicious code in @flight-common/models (npm) (malicious package)
- [MAL-2025-42122](https://insights.sbomify.com/MAL-2025-42122/): Malicious code in @flight-common/components (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/645/