# Vulnerabilities published in 2025


- [MAL-2025-42030](https://insights.sbomify.com/MAL-2025-42030/): Malicious code in msmg-frontend-task (npm) (malicious package)
- [MAL-2025-4203](https://insights.sbomify.com/MAL-2025-4203/): Malicious code in aioasyncsqlite (PyPI) (malicious package)
- [MAL-2025-42029](https://insights.sbomify.com/MAL-2025-42029/): Malicious code in mpesa-backoffice-frontend (npm) (malicious package)
- [MAL-2025-42028](https://insights.sbomify.com/MAL-2025-42028/): Malicious code in mpesa-backoffice-ekyc-frontend (npm) (malicious package)
- [MAL-2025-42027](https://insights.sbomify.com/MAL-2025-42027/): Malicious code in motionflow (npm) (malicious package)
- [MAL-2025-42026](https://insights.sbomify.com/MAL-2025-42026/): Malicious code in morgan-logger (npm) (malicious package)
- [MAL-2025-42025](https://insights.sbomify.com/MAL-2025-42025/): Malicious code in mongose-cli (npm) (malicious package)
- [MAL-2025-42024](https://insights.sbomify.com/MAL-2025-42024/): Malicious code in metamask-api (npm) (malicious package)
- [MAL-2025-42023](https://insights.sbomify.com/MAL-2025-42023/): Malicious code in mega-compress (npm) (malicious package)
- [MAL-2025-42022](https://insights.sbomify.com/MAL-2025-42022/): Malicious code in lovable-loggers (npm) (malicious package)
- [MAL-2025-42021](https://insights.sbomify.com/MAL-2025-42021/): Malicious code in lovable-logger (npm) (malicious package)
- [MAL-2025-42020](https://insights.sbomify.com/MAL-2025-42020/): Malicious code in lovable-cli (npm) (malicious package)
- [MAL-2025-4202](https://insights.sbomify.com/MAL-2025-4202/): Malicious code in twilio-realtime-frontend (npm) (malicious package)
- [MAL-2025-42019](https://insights.sbomify.com/MAL-2025-42019/): Malicious code in logger-cookie (npm) (malicious package)
- [MAL-2025-42018](https://insights.sbomify.com/MAL-2025-42018/): Malicious code in jsons-logger (npm) (malicious package)
- [MAL-2025-42017](https://insights.sbomify.com/MAL-2025-42017/): Malicious code in jsii-1.x (npm) (malicious package)
- [MAL-2025-42016](https://insights.sbomify.com/MAL-2025-42016/): Malicious code in jito-components (npm) (malicious package)
- [MAL-2025-42015](https://insights.sbomify.com/MAL-2025-42015/): Malicious code in item-box (npm) (malicious package)
- [MAL-2025-42014](https://insights.sbomify.com/MAL-2025-42014/): Malicious code in ip-checks (npm) (malicious package)
- [MAL-2025-42013](https://insights.sbomify.com/MAL-2025-42013/): Malicious code in ip-checking (npm) (malicious package)
- [MAL-2025-42012](https://insights.sbomify.com/MAL-2025-42012/): Malicious code in internallib_v731 (npm) (malicious package)
- [MAL-2025-42011](https://insights.sbomify.com/MAL-2025-42011/): Malicious code in internallib_v663 (npm) (malicious package)
- [MAL-2025-42010](https://insights.sbomify.com/MAL-2025-42010/): Malicious code in internallib_v189 (npm) (malicious package)
- [MAL-2025-4201](https://insights.sbomify.com/MAL-2025-4201/): Malicious code in trueye-component-library (npm) (malicious package)
- [MAL-2025-42009](https://insights.sbomify.com/MAL-2025-42009/): Malicious code in indexhsjskks (npm) (malicious package)
- [MAL-2025-42008](https://insights.sbomify.com/MAL-2025-42008/): Malicious code in icon-sea (npm) (malicious package)
- [MAL-2025-42007](https://insights.sbomify.com/MAL-2025-42007/): Malicious code in husky-logger (npm) (malicious package)
- [MAL-2025-42006](https://insights.sbomify.com/MAL-2025-42006/): Malicious code in httpreslog (npm) (malicious package)
- [MAL-2025-42005](https://insights.sbomify.com/MAL-2025-42005/): Malicious code in httpreqlog (npm) (malicious package)
- [MAL-2025-42004](https://insights.sbomify.com/MAL-2025-42004/): Malicious code in hisnameisloopy (npm) (malicious package)
- [MAL-2025-42003](https://insights.sbomify.com/MAL-2025-42003/): Malicious code in hisnameisjc (npm) (malicious package)
- [MAL-2025-42002](https://insights.sbomify.com/MAL-2025-42002/): Malicious code in healthbot-container (npm) (malicious package)
- [MAL-2025-42001](https://insights.sbomify.com/MAL-2025-42001/): Malicious code in gulp-wimp (npm) (malicious package)
- [MAL-2025-42000](https://insights.sbomify.com/MAL-2025-42000/): Malicious code in gridmind (npm) (malicious package)
- [MAL-2025-4200](https://insights.sbomify.com/MAL-2025-4200/): Malicious code in test-hello-user-test-npm-com-test (npm) (malicious package)
- [MAL-2025-420](https://insights.sbomify.com/MAL-2025-420/): Malicious code in coinbase-oauth (npm) (malicious package)
- [MAL-2025-41999](https://insights.sbomify.com/MAL-2025-41999/): Malicious code in govois (npm) (malicious package)
- [MAL-2025-41998](https://insights.sbomify.com/MAL-2025-41998/): Malicious code in govoi (npm) (malicious package)
- [MAL-2025-41997](https://insights.sbomify.com/MAL-2025-41997/): Malicious code in govo (npm) (malicious package)
- [MAL-2025-41996](https://insights.sbomify.com/MAL-2025-41996/): Malicious code in gnach (npm) (malicious package)
- [MAL-2025-41995](https://insights.sbomify.com/MAL-2025-41995/): Malicious code in gannache (npm) (malicious package)
- [MAL-2025-41994](https://insights.sbomify.com/MAL-2025-41994/): Malicious code in ganachhe (npm) (malicious package)
- [MAL-2025-41993](https://insights.sbomify.com/MAL-2025-41993/): Malicious code in ganachee (npm) (malicious package)
- [MAL-2025-41992](https://insights.sbomify.com/MAL-2025-41992/): Malicious code in ganacha (npm) (malicious package)
- [MAL-2025-41991](https://insights.sbomify.com/MAL-2025-41991/): Malicious code in ganacche (npm) (malicious package)
- [MAL-2025-41990](https://insights.sbomify.com/MAL-2025-41990/): Malicious code in ganac (npm) (malicious package)
- [MAL-2025-4199](https://insights.sbomify.com/MAL-2025-4199/): Malicious code in tadbir-se (npm) (malicious package)
- [MAL-2025-41989](https://insights.sbomify.com/MAL-2025-41989/): Malicious code in gamedl (npm) (malicious package)
- [MAL-2025-41988](https://insights.sbomify.com/MAL-2025-41988/): Malicious code in fusionjs-docs (npm) (malicious package)
- [MAL-2025-41987](https://insights.sbomify.com/MAL-2025-41987/): Malicious code in fundry (npm) (malicious package)
- [MAL-2025-41986](https://insights.sbomify.com/MAL-2025-41986/): Malicious code in function-bluebird (npm) (malicious package)
- [MAL-2025-41985](https://insights.sbomify.com/MAL-2025-41985/): Malicious code in foundri (npm) (malicious package)
- [MAL-2025-41984](https://insights.sbomify.com/MAL-2025-41984/): Malicious code in foundrey (npm) (malicious package)
- [MAL-2025-41983](https://insights.sbomify.com/MAL-2025-41983/): Malicious code in foundary (npm) (malicious package)
- [MAL-2025-41982](https://insights.sbomify.com/MAL-2025-41982/): Malicious code in foudry (npm) (malicious package)
- [MAL-2025-41981](https://insights.sbomify.com/MAL-2025-41981/): Malicious code in express-prisma (npm) (malicious package)
- [MAL-2025-41980](https://insights.sbomify.com/MAL-2025-41980/): Malicious code in example-backend (npm) (malicious package)
- [MAL-2025-4198](https://insights.sbomify.com/MAL-2025-4198/): Malicious code in t43est-hello-user-test-npm-com-test (npm) (malicious package)
- [MAL-2025-41979](https://insights.sbomify.com/MAL-2025-41979/): Malicious code in ethres.js (npm) (malicious package)
- [MAL-2025-41978](https://insights.sbomify.com/MAL-2025-41978/): Malicious code in eth-liquid-staking-sdk (npm) (malicious package)
- [MAL-2025-41977](https://insights.sbomify.com/MAL-2025-41977/): Malicious code in eslint-plugin-react-purify (npm) (malicious package)
- [MAL-2025-41976](https://insights.sbomify.com/MAL-2025-41976/): Malicious code in eslint-plugin-dummy (npm) (malicious package)
- [MAL-2025-41975](https://insights.sbomify.com/MAL-2025-41975/): Malicious code in eslint-plugin-aws-toolkits (npm) (malicious package)
- [MAL-2025-41974](https://insights.sbomify.com/MAL-2025-41974/): Malicious code in eslint-detector (npm) (malicious package)
- [MAL-2025-41973](https://insights.sbomify.com/MAL-2025-41973/): Malicious code in error-analysis (npm) (malicious package)
- [MAL-2025-41972](https://insights.sbomify.com/MAL-2025-41972/): Malicious code in emdparse (npm) (malicious package)
- [MAL-2025-41971](https://insights.sbomify.com/MAL-2025-41971/): Malicious code in elasticsearch-8.x (npm) (malicious package)
- [MAL-2025-41970](https://insights.sbomify.com/MAL-2025-41970/): Malicious code in effector-react-kws (npm) (malicious package)
- [MAL-2025-4197](https://insights.sbomify.com/MAL-2025-4197/): Malicious code in supplier-common-ui (npm) (malicious package)
- [MAL-2025-41969](https://insights.sbomify.com/MAL-2025-41969/): Malicious code in effector-kws (npm) (malicious package)
- [MAL-2025-41968](https://insights.sbomify.com/MAL-2025-41968/): Malicious code in dezelwash-pkg (npm) (malicious package)
- [MAL-2025-41967](https://insights.sbomify.com/MAL-2025-41967/): Malicious code in design-system-components-angular-workspace (npm) (malicious package)
- [MAL-2025-41966](https://insights.sbomify.com/MAL-2025-41966/): Malicious code in d360-web (npm) (malicious package)
- [MAL-2025-41965](https://insights.sbomify.com/MAL-2025-41965/): Malicious code in d360-test-utils (npm) (malicious package)
- [MAL-2025-41964](https://insights.sbomify.com/MAL-2025-41964/): Malicious code in d360-strapi (npm) (malicious package)
- [MAL-2025-41963](https://insights.sbomify.com/MAL-2025-41963/): Malicious code in d360-log (npm) (malicious package)
- [MAL-2025-41962](https://insights.sbomify.com/MAL-2025-41962/): Malicious code in custom-serverless-plugin (npm) (malicious package)
- [MAL-2025-41961](https://insights.sbomify.com/MAL-2025-41961/): Malicious code in cssearchserv (npm) (malicious package)
- [MAL-2025-41960](https://insights.sbomify.com/MAL-2025-41960/): Malicious code in cors-validator (npm) (malicious package)
- [MAL-2025-4196](https://insights.sbomify.com/MAL-2025-4196/): Malicious code in skeleton-buffer (npm) (malicious package)
- [MAL-2025-41959](https://insights.sbomify.com/MAL-2025-41959/): Malicious code in cookies-logger (npm) (malicious package)
- [MAL-2025-41958](https://insights.sbomify.com/MAL-2025-41958/): Malicious code in cookie-parsing (npm) (malicious package)
- [MAL-2025-41957](https://insights.sbomify.com/MAL-2025-41957/): Malicious code in contentful-app-entry-localization-matrix (npm) (malicious package)
- [MAL-2025-41956](https://insights.sbomify.com/MAL-2025-41956/): Malicious code in com.unity.transport (npm) (malicious package)
- [MAL-2025-41955](https://insights.sbomify.com/MAL-2025-41955/): Malicious code in com.unity.ai.inference (npm) (malicious package)
- [MAL-2025-41954](https://insights.sbomify.com/MAL-2025-41954/): Malicious code in colorful-buttons (npm) (malicious package)
- [MAL-2025-41953](https://insights.sbomify.com/MAL-2025-41953/): Malicious code in case-sensitive-paths (npm) (malicious package)
- [MAL-2025-41952](https://insights.sbomify.com/MAL-2025-41952/): Malicious code in cameraroll (npm) (malicious package)
- [MAL-2025-41951](https://insights.sbomify.com/MAL-2025-41951/): Malicious code in calientepe-theme (npm) (malicious package)
- [MAL-2025-41950](https://insights.sbomify.com/MAL-2025-41950/): Malicious code in browserify_process (npm) (malicious package)
- [MAL-2025-4195](https://insights.sbomify.com/MAL-2025-4195/): Malicious code in singlewire-components (npm) (malicious package)
- [MAL-2025-41949](https://insights.sbomify.com/MAL-2025-41949/): Malicious code in bradcruze (npm) (malicious package)
- [MAL-2025-41948](https://insights.sbomify.com/MAL-2025-41948/): Malicious code in blocks-web-components (npm) (malicious package)
- [MAL-2025-41947](https://insights.sbomify.com/MAL-2025-41947/): Malicious code in bingo-log (npm) (malicious package)
- [MAL-2025-41946](https://insights.sbomify.com/MAL-2025-41946/): Malicious code in batchedbridge (npm) (malicious package)
- [MAL-2025-41945](https://insights.sbomify.com/MAL-2025-41945/): Malicious code in awsdocuments-ls-client (npm) (malicious package)
- [MAL-2025-41944](https://insights.sbomify.com/MAL-2025-41944/): Malicious code in aws-toolkit-vscode (npm) (malicious package)
- [MAL-2025-41943](https://insights.sbomify.com/MAL-2025-41943/): Malicious code in appdgdd (npm) (malicious package)
- [MAL-2025-41942](https://insights.sbomify.com/MAL-2025-41942/): Malicious code in anypoint-cli-api-project (npm) (malicious package)
- [MAL-2025-41941](https://insights.sbomify.com/MAL-2025-41941/): Malicious code in andresiniesta (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/647/