# Vulnerabilities published in 2025


- [MAL-2025-41940](https://insights.sbomify.com/MAL-2025-41940/): Malicious code in amazon-vendor-analytics-mcp-server (npm) (malicious package)
- [MAL-2025-4194](https://insights.sbomify.com/MAL-2025-4194/): Malicious code in shimmer_placeholder (npm) (malicious package)
- [MAL-2025-41939](https://insights.sbomify.com/MAL-2025-41939/): Malicious code in amazon-seller-analytics-mcp-server (npm) (malicious package)
- [MAL-2025-41938](https://insights.sbomify.com/MAL-2025-41938/): Malicious code in amazon-q-vscode (npm) (malicious package)
- [MAL-2025-41937](https://insights.sbomify.com/MAL-2025-41937/): Malicious code in alchmey-sdk (npm) (malicious package)
- [MAL-2025-41936](https://insights.sbomify.com/MAL-2025-41936/): Malicious code in ai-dial-chat (npm) (malicious package)
- [MAL-2025-41935](https://insights.sbomify.com/MAL-2025-41935/): Malicious code in accumulateinfo (npm) (malicious package)
- [MAL-2025-41934](https://insights.sbomify.com/MAL-2025-41934/): Malicious code in @xd37hxassent/copilot-poc-jira (npm) (malicious package)
- [MAL-2025-41933](https://insights.sbomify.com/MAL-2025-41933/): Malicious code in @rbapp/utils (npm) (malicious package)
- [MAL-2025-41932](https://insights.sbomify.com/MAL-2025-41932/): Malicious code in @rbapp/store (npm) (malicious package)
- [MAL-2025-41931](https://insights.sbomify.com/MAL-2025-41931/): Malicious code in @rbapp/services (npm) (malicious package)
- [MAL-2025-41930](https://insights.sbomify.com/MAL-2025-41930/): Malicious code in @rbapp/pages (npm) (malicious package)
- [MAL-2025-4193](https://insights.sbomify.com/MAL-2025-4193/): Malicious code in sechub-website (npm) (malicious package)
- [MAL-2025-41929](https://insights.sbomify.com/MAL-2025-41929/): Malicious code in @rbapp/models (npm) (malicious package)
- [MAL-2025-41928](https://insights.sbomify.com/MAL-2025-41928/): Malicious code in @rbapp/i18n (npm) (malicious package)
- [MAL-2025-41927](https://insights.sbomify.com/MAL-2025-41927/): Malicious code in @rbapp/environment (npm) (malicious package)
- [MAL-2025-41926](https://insights.sbomify.com/MAL-2025-41926/): Malicious code in @rbapp/constants (npm) (malicious package)
- [MAL-2025-41925](https://insights.sbomify.com/MAL-2025-41925/): Malicious code in @rbapp/components (npm) (malicious package)
- [MAL-2025-41924](https://insights.sbomify.com/MAL-2025-41924/): Malicious code in @rbacore/utils (npm) (malicious package)
- [MAL-2025-41923](https://insights.sbomify.com/MAL-2025-41923/): Malicious code in @rbacore/services (npm) (malicious package)
- [MAL-2025-41922](https://insights.sbomify.com/MAL-2025-41922/): Malicious code in @rbacore/providers (npm) (malicious package)
- [MAL-2025-41921](https://insights.sbomify.com/MAL-2025-41921/): Malicious code in @rbacore/models (npm) (malicious package)
- [MAL-2025-41920](https://insights.sbomify.com/MAL-2025-41920/): Malicious code in @rbacore/mappers (npm) (malicious package)
- [MAL-2025-4192](https://insights.sbomify.com/MAL-2025-4192/): Malicious code in qasj (npm) (malicious package)
- [MAL-2025-41919](https://insights.sbomify.com/MAL-2025-41919/): Malicious code in @rbacore/i8n (npm) (malicious package)
- [MAL-2025-41918](https://insights.sbomify.com/MAL-2025-41918/): Malicious code in @rbacore/errors (npm) (malicious package)
- [MAL-2025-41917](https://insights.sbomify.com/MAL-2025-41917/): Malicious code in @rbacore/enums (npm) (malicious package)
- [MAL-2025-41916](https://insights.sbomify.com/MAL-2025-41916/): Malicious code in @rbacore/constants (npm) (malicious package)
- [MAL-2025-41915](https://insights.sbomify.com/MAL-2025-41915/): Malicious code in @rbacore/components (npm) (malicious package)
- [MAL-2025-41914](https://insights.sbomify.com/MAL-2025-41914/): Malicious code in @ibm-integration/flow-canvas (npm) (malicious package)
- [MAL-2025-41913](https://insights.sbomify.com/MAL-2025-41913/): Malicious code in @faisal.m.zayed/saudi-riyal-font (npm) (malicious package)
- [MAL-2025-41912](https://insights.sbomify.com/MAL-2025-41912/): Malicious code in @espace-client-axafr/vsup (npm) (malicious package)
- [MAL-2025-41911](https://insights.sbomify.com/MAL-2025-41911/): Malicious code in @espace-client-axafr/user-profile-acceptance (npm) (malicious package)
- [MAL-2025-41910](https://insights.sbomify.com/MAL-2025-41910/): Malicious code in @espace-client-axafr/user-profile (npm) (malicious package)
- [MAL-2025-4191](https://insights.sbomify.com/MAL-2025-4191/): Malicious code in pulse-candidate (npm) (malicious package)
- [MAL-2025-41909](https://insights.sbomify.com/MAL-2025-41909/): Malicious code in @espace-client-axafr/update-social-security (npm) (malicious package)
- [MAL-2025-41908](https://insights.sbomify.com/MAL-2025-41908/): Malicious code in @espace-client-axafr/tchat-ecco (npm) (malicious package)
- [MAL-2025-41907](https://insights.sbomify.com/MAL-2025-41907/): Malicious code in @espace-client-axafr/sticker-policy-list (npm) (malicious package)
- [MAL-2025-41906](https://insights.sbomify.com/MAL-2025-41906/): Malicious code in @espace-client-axafr/standard-card (npm) (malicious package)
- [MAL-2025-41905](https://insights.sbomify.com/MAL-2025-41905/): Malicious code in @espace-client-axafr/sso-agipi (npm) (malicious package)
- [MAL-2025-41904](https://insights.sbomify.com/MAL-2025-41904/): Malicious code in @espace-client-axafr/social-security-input (npm) (malicious package)
- [MAL-2025-41903](https://insights.sbomify.com/MAL-2025-41903/): Malicious code in @espace-client-axafr/skeleton (npm) (malicious package)
- [MAL-2025-41902](https://insights.sbomify.com/MAL-2025-41902/): Malicious code in @espace-client-axafr/shared-types (npm) (malicious package)
- [MAL-2025-41901](https://insights.sbomify.com/MAL-2025-41901/): Malicious code in @espace-client-axafr/section-derniers-documents (npm) (malicious package)
- [MAL-2025-41900](https://insights.sbomify.com/MAL-2025-41900/): Malicious code in @espace-client-axafr/sdj (npm) (malicious package)
- [MAL-2025-4190](https://insights.sbomify.com/MAL-2025-4190/): Malicious code in pragmatic-drag-and-drop (npm) (malicious package)
- [MAL-2025-419](https://insights.sbomify.com/MAL-2025-419/): Malicious code in coinbase-connect (npm) (malicious package)
- [MAL-2025-41899](https://insights.sbomify.com/MAL-2025-41899/): Malicious code in @espace-client-axafr/savings-webservices (npm) (malicious package)
- [MAL-2025-41898](https://insights.sbomify.com/MAL-2025-41898/): Malicious code in @espace-client-axafr/savings-types (npm) (malicious package)
- [MAL-2025-41897](https://insights.sbomify.com/MAL-2025-41897/): Malicious code in @espace-client-axafr/savings-summary-card (npm) (malicious package)
- [MAL-2025-41896](https://insights.sbomify.com/MAL-2025-41896/): Malicious code in @espace-client-axafr/savings-distribution (npm) (malicious package)
- [MAL-2025-41895](https://insights.sbomify.com/MAL-2025-41895/): Malicious code in @espace-client-axafr/savings-card (npm) (malicious package)
- [MAL-2025-41894](https://insights.sbomify.com/MAL-2025-41894/): Malicious code in @espace-client-axafr/round-button (npm) (malicious package)
- [MAL-2025-41893](https://insights.sbomify.com/MAL-2025-41893/): Malicious code in @espace-client-axafr/rib-v2 (npm) (malicious package)
- [MAL-2025-41892](https://insights.sbomify.com/MAL-2025-41892/): Malicious code in @espace-client-axafr/rib (npm) (malicious package)
- [MAL-2025-41891](https://insights.sbomify.com/MAL-2025-41891/): Malicious code in @espace-client-axafr/resiliation-3-clics (npm) (malicious package)
- [MAL-2025-41890](https://insights.sbomify.com/MAL-2025-41890/): Malicious code in @espace-client-axafr/resiliation (npm) (malicious package)
- [MAL-2025-4189](https://insights.sbomify.com/MAL-2025-4189/): Malicious code in porrtal-workspace (npm) (malicious package)
- [MAL-2025-41889](https://insights.sbomify.com/MAL-2025-41889/): Malicious code in @espace-client-axafr/remplacement-auto (npm) (malicious package)
- [MAL-2025-41888](https://insights.sbomify.com/MAL-2025-41888/): Malicious code in @espace-client-axafr/remboursements (npm) (malicious package)
- [MAL-2025-41887](https://insights.sbomify.com/MAL-2025-41887/): Malicious code in @espace-client-axafr/reimbursements-info (npm) (malicious package)
- [MAL-2025-41886](https://insights.sbomify.com/MAL-2025-41886/): Malicious code in @espace-client-axafr/redux-contrib (npm) (malicious package)
- [MAL-2025-41885](https://insights.sbomify.com/MAL-2025-41885/): Malicious code in @espace-client-axafr/redux-ajax-auth (npm) (malicious package)
- [MAL-2025-41884](https://insights.sbomify.com/MAL-2025-41884/): Malicious code in @espace-client-axafr/redirection-angel (npm) (malicious package)
- [MAL-2025-41883](https://insights.sbomify.com/MAL-2025-41883/): Malicious code in @espace-client-axafr/popin-resilience (npm) (malicious package)
- [MAL-2025-41882](https://insights.sbomify.com/MAL-2025-41882/): Malicious code in @espace-client-axafr/popin-header (npm) (malicious package)
- [MAL-2025-41881](https://insights.sbomify.com/MAL-2025-41881/): Malicious code in @espace-client-axafr/popin-footer (npm) (malicious package)
- [MAL-2025-41880](https://insights.sbomify.com/MAL-2025-41880/): Malicious code in @espace-client-axafr/popin-arkea (npm) (malicious package)
- [MAL-2025-4188](https://insights.sbomify.com/MAL-2025-4188/): Malicious code in pdfgenei (npm) (malicious package)
- [MAL-2025-41879](https://insights.sbomify.com/MAL-2025-41879/): Malicious code in @espace-client-axafr/phygital-offres (npm) (malicious package)
- [MAL-2025-41878](https://insights.sbomify.com/MAL-2025-41878/): Malicious code in @espace-client-axafr/performance-indicator (npm) (malicious package)
- [MAL-2025-41877](https://insights.sbomify.com/MAL-2025-41877/): Malicious code in @espace-client-axafr/paiement-cotisation (npm) (malicious package)
- [MAL-2025-41876](https://insights.sbomify.com/MAL-2025-41876/): Malicious code in @espace-client-axafr/pages-editoriales (npm) (malicious package)
- [MAL-2025-41875](https://insights.sbomify.com/MAL-2025-41875/): Malicious code in @espace-client-axafr/page-user-profile (npm) (malicious package)
- [MAL-2025-41874](https://insights.sbomify.com/MAL-2025-41874/): Malicious code in @espace-client-axafr/page-details-contrat (npm) (malicious package)
- [MAL-2025-41873](https://insights.sbomify.com/MAL-2025-41873/): Malicious code in @espace-client-axafr/page-debranchement-agipi (npm) (malicious package)
- [MAL-2025-41872](https://insights.sbomify.com/MAL-2025-41872/): Malicious code in @espace-client-axafr/otp-form (npm) (malicious package)
- [MAL-2025-41871](https://insights.sbomify.com/MAL-2025-41871/): Malicious code in @espace-client-axafr/otp-code (npm) (malicious package)
- [MAL-2025-41870](https://insights.sbomify.com/MAL-2025-41870/): Malicious code in @espace-client-axafr/new-rib (npm) (malicious package)
- [MAL-2025-4187](https://insights.sbomify.com/MAL-2025-4187/): Malicious code in o-date (npm) (malicious package)
- [MAL-2025-41869](https://insights.sbomify.com/MAL-2025-41869/): Malicious code in @espace-client-axafr/mise-en-avant (npm) (malicious package)
- [MAL-2025-41868](https://insights.sbomify.com/MAL-2025-41868/): Malicious code in @espace-client-axafr/mes-documents-contrat (npm) (malicious package)
- [MAL-2025-41867](https://insights.sbomify.com/MAL-2025-41867/): Malicious code in @espace-client-axafr/lme (npm) (malicious package)
- [MAL-2025-41866](https://insights.sbomify.com/MAL-2025-41866/): Malicious code in @espace-client-axafr/latest-reimbursements (npm) (malicious package)
- [MAL-2025-41865](https://insights.sbomify.com/MAL-2025-41865/): Malicious code in @espace-client-axafr/kyc-widget (npm) (malicious package)
- [MAL-2025-41864](https://insights.sbomify.com/MAL-2025-41864/): Malicious code in @espace-client-axafr/juridica (npm) (malicious package)
- [MAL-2025-41863](https://insights.sbomify.com/MAL-2025-41863/): Malicious code in @espace-client-axafr/icc-mon-auto (npm) (malicious package)
- [MAL-2025-41862](https://insights.sbomify.com/MAL-2025-41862/): Malicious code in @espace-client-axafr/icc-ma-maison (npm) (malicious package)
- [MAL-2025-41861](https://insights.sbomify.com/MAL-2025-41861/): Malicious code in @espace-client-axafr/healthcare-upload (npm) (malicious package)
- [MAL-2025-41860](https://insights.sbomify.com/MAL-2025-41860/): Malicious code in @espace-client-axafr/greeting-message (npm) (malicious package)
- [MAL-2025-4186](https://insights.sbomify.com/MAL-2025-4186/): Malicious code in node-telegram-bots-api (npm) (malicious package)
- [MAL-2025-41859](https://insights.sbomify.com/MAL-2025-41859/): Malicious code in @espace-client-axafr/global-popin (npm) (malicious package)
- [MAL-2025-41858](https://insights.sbomify.com/MAL-2025-41858/): Malicious code in @espace-client-axafr/formulaire-contact-unifie (npm) (malicious package)
- [MAL-2025-41857](https://insights.sbomify.com/MAL-2025-41857/): Malicious code in @espace-client-axafr/file-upload-block (npm) (malicious package)
- [MAL-2025-41856](https://insights.sbomify.com/MAL-2025-41856/): Malicious code in @espace-client-axafr/fetch-helper (npm) (malicious package)
- [MAL-2025-41855](https://insights.sbomify.com/MAL-2025-41855/): Malicious code in @espace-client-axafr/eretrait (npm) (malicious package)
- [MAL-2025-41854](https://insights.sbomify.com/MAL-2025-41854/): Malicious code in @espace-client-axafr/document-menu (npm) (malicious package)
- [MAL-2025-41853](https://insights.sbomify.com/MAL-2025-41853/): Malicious code in @espace-client-axafr/document-card (npm) (malicious package)
- [MAL-2025-41852](https://insights.sbomify.com/MAL-2025-41852/): Malicious code in @espace-client-axafr/demat-contract (npm) (malicious package)
- [MAL-2025-41851](https://insights.sbomify.com/MAL-2025-41851/): Malicious code in @espace-client-axafr/declaration-sinistre-auto (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/648/