# Vulnerabilities published in 2025 - [MAL-2025-42121](https://insights.sbomify.com/MAL-2025-42121/): Malicious code in z-sub (npm) (malicious package) - [MAL-2025-42120](https://insights.sbomify.com/MAL-2025-42120/): Malicious code in z-object (npm) (malicious package) - [MAL-2025-4212](https://insights.sbomify.com/MAL-2025-4212/): Malicious code in colorate (PyPI) (malicious package) - [MAL-2025-42119](https://insights.sbomify.com/MAL-2025-42119/): Malicious code in z-miss (npm) (malicious package) - [MAL-2025-42118](https://insights.sbomify.com/MAL-2025-42118/): Malicious code in xavialonzo (npm) (malicious package) - [MAL-2025-42117](https://insights.sbomify.com/MAL-2025-42117/): Malicious code in winston-log (npm) (malicious package) - [MAL-2025-42116](https://insights.sbomify.com/MAL-2025-42116/): Malicious code in wealthsimple-mcp-server (npm) (malicious package) - [MAL-2025-42115](https://insights.sbomify.com/MAL-2025-42115/): Malicious code in we3.js (npm) (malicious package) - [MAL-2025-42114](https://insights.sbomify.com/MAL-2025-42114/): Malicious code in wb3.js (npm) (malicious package) - [MAL-2025-42113](https://insights.sbomify.com/MAL-2025-42113/): Malicious code in vortex-logger (npm) (malicious package) - [MAL-2025-42112](https://insights.sbomify.com/MAL-2025-42112/): Malicious code in vite-tsconfig-optimized (npm) (malicious package) - [MAL-2025-42111](https://insights.sbomify.com/MAL-2025-42111/): Malicious code in vite-ts-icon (npm) (malicious package) - [MAL-2025-42110](https://insights.sbomify.com/MAL-2025-42110/): Malicious code in vite-mobcss-log (npm) (malicious package) - [MAL-2025-4211](https://insights.sbomify.com/MAL-2025-4211/): Malicious code in ckr (PyPI) (malicious package) - [MAL-2025-42109](https://insights.sbomify.com/MAL-2025-42109/): Malicious code in visitorprofilenodeserv (npm) (malicious package) - [MAL-2025-42108](https://insights.sbomify.com/MAL-2025-42108/): Malicious code in viam (npm) (malicious package) - [MAL-2025-42107](https://insights.sbomify.com/MAL-2025-42107/): Malicious code in valid-sha256 (npm) (malicious package) - [MAL-2025-42106](https://insights.sbomify.com/MAL-2025-42106/): Malicious code in user-event-13 (npm) (malicious package) - [MAL-2025-42105](https://insights.sbomify.com/MAL-2025-42105/): Malicious code in universalsdk234 (npm) (malicious package) - [MAL-2025-42104](https://insights.sbomify.com/MAL-2025-42104/): Malicious code in truflee (npm) (malicious package) - [MAL-2025-42103](https://insights.sbomify.com/MAL-2025-42103/): Malicious code in truffel (npm) (malicious package) - [MAL-2025-42102](https://insights.sbomify.com/MAL-2025-42102/): Malicious code in trslip (npm) (malicious package) - [MAL-2025-42101](https://insights.sbomify.com/MAL-2025-42101/): Malicious code in todayistheday123 (npm) (malicious package) - [MAL-2025-42100](https://insights.sbomify.com/MAL-2025-42100/): Malicious code in tjsontype (npm) (malicious package) - [MAL-2025-421](https://insights.sbomify.com/MAL-2025-421/): Malicious code in coinbase-parser (npm) (malicious package) - [MAL-2025-42099](https://insights.sbomify.com/MAL-2025-42099/): Malicious code in testingfor123 (npm) (malicious package) - [MAL-2025-42098](https://insights.sbomify.com/MAL-2025-42098/): Malicious code in tested123 (npm) (malicious package) - [MAL-2025-42097](https://insights.sbomify.com/MAL-2025-42097/): Malicious code in test-lwcs (npm) (malicious package) - [MAL-2025-42096](https://insights.sbomify.com/MAL-2025-42096/): Malicious code in tearsheet.module (npm) (malicious package) - [MAL-2025-42095](https://insights.sbomify.com/MAL-2025-42095/): Malicious code in tailwindcss-animate-ui (npm) (malicious package) - [MAL-2025-42094](https://insights.sbomify.com/MAL-2025-42094/): Malicious code in tailwind-supabase (npm) (malicious package) - [MAL-2025-42093](https://insights.sbomify.com/MAL-2025-42093/): Malicious code in tailwind-style-overrides (npm) (malicious package) - [MAL-2025-42092](https://insights.sbomify.com/MAL-2025-42092/): Malicious code in tailwind-react-mui (npm) (malicious package) - [MAL-2025-42091](https://insights.sbomify.com/MAL-2025-42091/): Malicious code in tailwind-configs (npm) (malicious package) - [MAL-2025-42090](https://insights.sbomify.com/MAL-2025-42090/): Malicious code in tailwind-class-overrides (npm) (malicious package) - [MAL-2025-4209](https://insights.sbomify.com/MAL-2025-4209/): Malicious code in chain-validator (PyPI) (malicious package) - [MAL-2025-42089](https://insights.sbomify.com/MAL-2025-42089/): Malicious code in stevecarella (npm) (malicious package) - [MAL-2025-42088](https://insights.sbomify.com/MAL-2025-42088/): Malicious code in sqrt_module (npm) (malicious package) - [MAL-2025-42087](https://insights.sbomify.com/MAL-2025-42087/): Malicious code in soyagyu (npm) (malicious package) - [MAL-2025-42086](https://insights.sbomify.com/MAL-2025-42086/): Malicious code in some-other-config-you-use (npm) (malicious package) - [MAL-2025-42085](https://insights.sbomify.com/MAL-2025-42085/): Malicious code in solidity-utils-docify (npm) (malicious package) - [MAL-2025-42084](https://insights.sbomify.com/MAL-2025-42084/): Malicious code in skipmetoo (npm) (malicious package) - [MAL-2025-42083](https://insights.sbomify.com/MAL-2025-42083/): Malicious code in sessions-logger (npm) (malicious package) - [MAL-2025-42082](https://insights.sbomify.com/MAL-2025-42082/): Malicious code in session-logger (npm) (malicious package) - [MAL-2025-42081](https://insights.sbomify.com/MAL-2025-42081/): Malicious code in sensitive-paths-focus (npm) (malicious package) - [MAL-2025-42080](https://insights.sbomify.com/MAL-2025-42080/): Malicious code in schemacachiie (npm) (malicious package) - [MAL-2025-4208](https://insights.sbomify.com/MAL-2025-4208/): Malicious code in bytedmemfdd345 (PyPI) (malicious package) - [MAL-2025-42079](https://insights.sbomify.com/MAL-2025-42079/): Malicious code in saudi-riyal-font (npm) (malicious package) - [MAL-2025-42078](https://insights.sbomify.com/MAL-2025-42078/): Malicious code in salesforcedx-vscode-core (npm) (malicious package) - [MAL-2025-42077](https://insights.sbomify.com/MAL-2025-42077/): Malicious code in salesforcedx-vscode-apex (npm) (malicious package) - [MAL-2025-42076](https://insights.sbomify.com/MAL-2025-42076/): Malicious code in safe-winston (npm) (malicious package) - [MAL-2025-42075](https://insights.sbomify.com/MAL-2025-42075/): Malicious code in ryuzakil (npm) (malicious package) - [MAL-2025-42074](https://insights.sbomify.com/MAL-2025-42074/): Malicious code in rtk-service (npm) (malicious package) - [MAL-2025-42073](https://insights.sbomify.com/MAL-2025-42073/): Malicious code in rtk-logger (npm) (malicious package) - [MAL-2025-42072](https://insights.sbomify.com/MAL-2025-42072/): Malicious code in rtk-log (npm) (malicious package) - [MAL-2025-42071](https://insights.sbomify.com/MAL-2025-42071/): Malicious code in reve-wix-test (npm) (malicious package) - [MAL-2025-42070](https://insights.sbomify.com/MAL-2025-42070/): Malicious code in relay-twilio (npm) (malicious package) - [MAL-2025-4207](https://insights.sbomify.com/MAL-2025-4207/): Malicious code in byted-torch-monitor (PyPI) (malicious package) - [MAL-2025-42069](https://insights.sbomify.com/MAL-2025-42069/): Malicious code in redux-toolkit-rts (npm) (malicious package) - [MAL-2025-42068](https://insights.sbomify.com/MAL-2025-42068/): Malicious code in redux-saga-inspector (npm) (malicious package) - [MAL-2025-42067](https://insights.sbomify.com/MAL-2025-42067/): Malicious code in redux-saga-guard (npm) (malicious package) - [MAL-2025-42066](https://insights.sbomify.com/MAL-2025-42066/): Malicious code in redux-saga-devtool (npm) (malicious package) - [MAL-2025-42065](https://insights.sbomify.com/MAL-2025-42065/): Malicious code in react-router-html (npm) (malicious package) - [MAL-2025-42064](https://insights.sbomify.com/MAL-2025-42064/): Malicious code in react-eslint-type (npm) (malicious package) - [MAL-2025-42063](https://insights.sbomify.com/MAL-2025-42063/): Malicious code in random-generator-pkg (npm) (malicious package) - [MAL-2025-42062](https://insights.sbomify.com/MAL-2025-42062/): Malicious code in random-datas (npm) (malicious package) - [MAL-2025-42061](https://insights.sbomify.com/MAL-2025-42061/): Malicious code in random-billy-pkg (npm) (malicious package) - [MAL-2025-42060](https://insights.sbomify.com/MAL-2025-42060/): Malicious code in raml-toolkit (npm) (malicious package) - [MAL-2025-4206](https://insights.sbomify.com/MAL-2025-4206/): Malicious code in ark-vmp-reverse (PyPI) (malicious package) - [MAL-2025-42059](https://insights.sbomify.com/MAL-2025-42059/): Malicious code in pwn4arn (npm) (malicious package) - [MAL-2025-42058](https://insights.sbomify.com/MAL-2025-42058/): Malicious code in proc-log-error (npm) (malicious package) - [MAL-2025-42057](https://insights.sbomify.com/MAL-2025-42057/): Malicious code in playwright-test-plugin (npm) (malicious package) - [MAL-2025-42056](https://insights.sbomify.com/MAL-2025-42056/): Malicious code in pglite-2 (npm) (malicious package) - [MAL-2025-42055](https://insights.sbomify.com/MAL-2025-42055/): Malicious code in petstore-integration-test (npm) (malicious package) - [MAL-2025-42054](https://insights.sbomify.com/MAL-2025-42054/): Malicious code in parser-tson (npm) (malicious package) - [MAL-2025-42053](https://insights.sbomify.com/MAL-2025-42053/): Malicious code in parser-session (npm) (malicious package) - [MAL-2025-42052](https://insights.sbomify.com/MAL-2025-42052/): Malicious code in parcel-plugin-envvar-allowlist (npm) (malicious package) - [MAL-2025-42051](https://insights.sbomify.com/MAL-2025-42051/): Malicious code in paper-dropdown-input (npm) (malicious package) - [MAL-2025-42050](https://insights.sbomify.com/MAL-2025-42050/): Malicious code in oclif-typescript (npm) (malicious package) - [MAL-2025-4205](https://insights.sbomify.com/MAL-2025-4205/): Malicious code in alchemyrpcs (PyPI) (malicious package) - [MAL-2025-42049](https://insights.sbomify.com/MAL-2025-42049/): Malicious code in oclif-dev (npm) (malicious package) - [MAL-2025-42048](https://insights.sbomify.com/MAL-2025-42048/): Malicious code in nullsaferaw (npm) (malicious package) - [MAL-2025-42047](https://insights.sbomify.com/MAL-2025-42047/): Malicious code in notthis (npm) (malicious package) - [MAL-2025-42046](https://insights.sbomify.com/MAL-2025-42046/): Malicious code in notification-layer (npm) (malicious package) - [MAL-2025-42045](https://insights.sbomify.com/MAL-2025-42045/): Malicious code in notification-displayer (npm) (malicious package) - [MAL-2025-42044](https://insights.sbomify.com/MAL-2025-42044/): Malicious code in not-shadowed (npm) (malicious package) - [MAL-2025-42043](https://insights.sbomify.com/MAL-2025-42043/): Malicious code in nodespode (npm) (malicious package) - [MAL-2025-42042](https://insights.sbomify.com/MAL-2025-42042/): Malicious code in node-winston (npm) (malicious package) - [MAL-2025-42041](https://insights.sbomify.com/MAL-2025-42041/): Malicious code in node-pdfmake (npm) (malicious package) - [MAL-2025-42040](https://insights.sbomify.com/MAL-2025-42040/): Malicious code in node-nvm-ssh (npm) (malicious package) - [MAL-2025-4204](https://insights.sbomify.com/MAL-2025-4204/): Malicious code in aiolitesql (PyPI) (malicious package) - [MAL-2025-42039](https://insights.sbomify.com/MAL-2025-42039/): Malicious code in node-ms-styles (npm) (malicious package) - [MAL-2025-42038](https://insights.sbomify.com/MAL-2025-42038/): Malicious code in node-logger-sdk (npm) (malicious package) - [MAL-2025-42037](https://insights.sbomify.com/MAL-2025-42037/): Malicious code in node-logflow (npm) (malicious package) - [MAL-2025-42036](https://insights.sbomify.com/MAL-2025-42036/): Malicious code in node-log-config (npm) (malicious package) - [MAL-2025-42035](https://insights.sbomify.com/MAL-2025-42035/): Malicious code in node-fetch-v3 (npm) (malicious package) - [MAL-2025-42034](https://insights.sbomify.com/MAL-2025-42034/): Malicious code in nmt-admin (npm) (malicious package) - [MAL-2025-42033](https://insights.sbomify.com/MAL-2025-42033/): Malicious code in namaframwork (npm) (malicious package) - [MAL-2025-42032](https://insights.sbomify.com/MAL-2025-42032/): Malicious code in mycli123 (npm) (malicious package) - [MAL-2025-42031](https://insights.sbomify.com/MAL-2025-42031/): Malicious code in muxflux (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/646/