# Vulnerabilities published in 2025


- [MAL-2025-41850](https://insights.sbomify.com/MAL-2025-41850/): Malicious code in @espace-client-axafr/dashboard-standard-card (npm) (malicious package)
- [MAL-2025-4185](https://insights.sbomify.com/MAL-2025-4185/): Malicious code in matter_build_action (npm) (malicious package)
- [MAL-2025-41849](https://insights.sbomify.com/MAL-2025-41849/): Malicious code in @espace-client-axafr/dashboard-detail-card (npm) (malicious package)
- [MAL-2025-41848](https://insights.sbomify.com/MAL-2025-41848/): Malicious code in @espace-client-axafr/contract-selection (npm) (malicious package)
- [MAL-2025-41847](https://insights.sbomify.com/MAL-2025-41847/): Malicious code in @espace-client-axafr/contact-form (npm) (malicious package)
- [MAL-2025-41846](https://insights.sbomify.com/MAL-2025-41846/): Malicious code in @espace-client-axafr/confirmation-screen (npm) (malicious package)
- [MAL-2025-41845](https://insights.sbomify.com/MAL-2025-41845/): Malicious code in @espace-client-axafr/configure-store (npm) (malicious package)
- [MAL-2025-41844](https://insights.sbomify.com/MAL-2025-41844/): Malicious code in @espace-client-axafr/completer-arret-travail (npm) (malicious package)
- [MAL-2025-41843](https://insights.sbomify.com/MAL-2025-41843/): Malicious code in @espace-client-axafr/chat-genesys-auth (npm) (malicious package)
- [MAL-2025-41842](https://insights.sbomify.com/MAL-2025-41842/): Malicious code in @espace-client-axafr/certificate-auto (npm) (malicious package)
- [MAL-2025-41841](https://insights.sbomify.com/MAL-2025-41841/): Malicious code in @espace-client-axafr/bonus-euro-plus (npm) (malicious package)
- [MAL-2025-41840](https://insights.sbomify.com/MAL-2025-41840/): Malicious code in @espace-client-axafr/block-advisor (npm) (malicious package)
- [MAL-2025-4184](https://insights.sbomify.com/MAL-2025-4184/): Malicious code in manage-this (npm) (malicious package)
- [MAL-2025-41839](https://insights.sbomify.com/MAL-2025-41839/): Malicious code in @espace-client-axafr/bloc-business (npm) (malicious package)
- [MAL-2025-41838](https://insights.sbomify.com/MAL-2025-41838/): Malicious code in @espace-client-axafr/banniere-alerte-client (npm) (malicious package)
- [MAL-2025-41837](https://insights.sbomify.com/MAL-2025-41837/): Malicious code in @espace-client-axafr/atp-digital (npm) (malicious package)
- [MAL-2025-41836](https://insights.sbomify.com/MAL-2025-41836/): Malicious code in @espace-client-axafr/arret-travail (npm) (malicious package)
- [MAL-2025-41835](https://insights.sbomify.com/MAL-2025-41835/): Malicious code in @espace-client-axafr/api-mapping (npm) (malicious package)
- [MAL-2025-41834](https://insights.sbomify.com/MAL-2025-41834/): Malicious code in @espace-client-axafr/alert-resilience-message (npm) (malicious package)
- [MAL-2025-41833](https://insights.sbomify.com/MAL-2025-41833/): Malicious code in @espace-client-axafr/advisor-list (npm) (malicious package)
- [MAL-2025-41832](https://insights.sbomify.com/MAL-2025-41832/): Malicious code in @espace-client-axafr/advisor-details (npm) (malicious package)
- [MAL-2025-41831](https://insights.sbomify.com/MAL-2025-41831/): Malicious code in @espace-client-axafr/advisor (npm) (malicious package)
- [MAL-2025-41830](https://insights.sbomify.com/MAL-2025-41830/): Malicious code in @callcenter-frontend/ui-components (npm) (malicious package)
- [MAL-2025-4183](https://insights.sbomify.com/MAL-2025-4183/): Malicious code in icloud-sod (npm) (malicious package)
- [MAL-2025-41829](https://insights.sbomify.com/MAL-2025-41829/): Malicious code in @callcenter-frontend/ui (npm) (malicious package)
- [MAL-2025-41828](https://insights.sbomify.com/MAL-2025-41828/): Malicious code in @callcenter-frontend/shared-types (npm) (malicious package)
- [MAL-2025-41827](https://insights.sbomify.com/MAL-2025-41827/): Malicious code in @callcenter-frontend/services (npm) (malicious package)
- [MAL-2025-41826](https://insights.sbomify.com/MAL-2025-41826/): Malicious code in @callcenter-frontend/helpers (npm) (malicious package)
- [MAL-2025-41825](https://insights.sbomify.com/MAL-2025-41825/): Malicious code in @callcenter-frontend/api (npm) (malicious package)
- [MAL-2025-41824](https://insights.sbomify.com/MAL-2025-41824/): Malicious code in @axaclient-socle-front/webmodule (npm) (malicious package)
- [MAL-2025-41823](https://insights.sbomify.com/MAL-2025-41823/): Malicious code in @axaclient-socle-front/redux-helpers (npm) (malicious package)
- [MAL-2025-41822](https://insights.sbomify.com/MAL-2025-41822/): Malicious code in cyclic-dep-explicit-1 (npm) (malicious package)
- [MAL-2025-41821](https://insights.sbomify.com/MAL-2025-41821/): Malicious code in esm-package (npm) (malicious package)
- [MAL-2025-41820](https://insights.sbomify.com/MAL-2025-41820/): Malicious code in openmct-e2e (npm) (malicious package)
- [MAL-2025-4182](https://insights.sbomify.com/MAL-2025-4182/): Malicious code in hypernova-simple-example (npm) (malicious package)
- [MAL-2025-41819](https://insights.sbomify.com/MAL-2025-41819/): Malicious code in @hpx-core-experiences/react-my-account-commons (npm) (malicious package)
- [MAL-2025-41818](https://insights.sbomify.com/MAL-2025-41818/): Malicious code in azure-service-bus-emulator-node-sample (npm) (malicious package)
- [MAL-2025-41817](https://insights.sbomify.com/MAL-2025-41817/): Malicious code in contentprocessor_web (npm) (malicious package)
- [MAL-2025-41816](https://insights.sbomify.com/MAL-2025-41816/): Malicious code in teshf (npm) (malicious package)
- [MAL-2025-41815](https://insights.sbomify.com/MAL-2025-41815/): Malicious code in teshjsss (npm) (malicious package)
- [MAL-2025-41814](https://insights.sbomify.com/MAL-2025-41814/): Malicious code in typescript-api-project (npm) (malicious package)
- [MAL-2025-41813](https://insights.sbomify.com/MAL-2025-41813/): Malicious code in react-media-template-ts (npm) (malicious package)
- [MAL-2025-41812](https://insights.sbomify.com/MAL-2025-41812/): Malicious code in editor-script-box (npm) (malicious package)
- [MAL-2025-41811](https://insights.sbomify.com/MAL-2025-41811/): Malicious code in focusnode (npm) (malicious package)
- [MAL-2025-41810](https://insights.sbomify.com/MAL-2025-41810/): Malicious code in ambmock.sol (npm) (malicious package)
- [MAL-2025-4181](https://insights.sbomify.com/MAL-2025-4181/): Malicious code in hello-user-test-npm-com-test (npm) (malicious package)
- [MAL-2025-41809](https://insights.sbomify.com/MAL-2025-41809/): Malicious code in payment-banner (npm) (malicious package)
- [MAL-2025-41808](https://insights.sbomify.com/MAL-2025-41808/): Malicious code in example-subscriptions (npm) (malicious package)
- [MAL-2025-41807](https://insights.sbomify.com/MAL-2025-41807/): Malicious code in example-multipass (npm) (malicious package)
- [MAL-2025-41806](https://insights.sbomify.com/MAL-2025-41806/): Malicious code in example-hydrogen-express (npm) (malicious package)
- [MAL-2025-41805](https://insights.sbomify.com/MAL-2025-41805/): Malicious code in omniauth-pro-sante-connect (RubyGems) (malicious package)
- [MAL-2025-41804](https://insights.sbomify.com/MAL-2025-41804/): Malicious code in zlib1g-dev (PyPI) (malicious package)
- [MAL-2025-41803](https://insights.sbomify.com/MAL-2025-41803/): Malicious code in zking (PyPI) (malicious package)
- [MAL-2025-41802](https://insights.sbomify.com/MAL-2025-41802/): Malicious code in zhopaorlaaato (PyPI) (malicious package)
- [MAL-2025-41801](https://insights.sbomify.com/MAL-2025-41801/): Malicious code in youtube-new (PyPI) (malicious package)
- [MAL-2025-41800](https://insights.sbomify.com/MAL-2025-41800/): Malicious code in xorg-renderproto (PyPI) (malicious package)
- [MAL-2025-4180](https://insights.sbomify.com/MAL-2025-4180/): Malicious code in gs-uitk-set-utils (npm) (malicious package)
- [MAL-2025-418](https://insights.sbomify.com/MAL-2025-418/): Malicious code in coinbase-cloud (npm) (malicious package)
- [MAL-2025-41799](https://insights.sbomify.com/MAL-2025-41799/): Malicious code in xoloyuaezcqixu (PyPI) (malicious package)
- [MAL-2025-41798](https://insights.sbomify.com/MAL-2025-41798/): Malicious code in xoloowlowpzeke (PyPI) (malicious package)
- [MAL-2025-41797](https://insights.sbomify.com/MAL-2025-41797/): Malicious code in xolonavrylpbeb (PyPI) (malicious package)
- [MAL-2025-41796](https://insights.sbomify.com/MAL-2025-41796/): Malicious code in xolofyxkotqwko (PyPI) (malicious package)
- [MAL-2025-41795](https://insights.sbomify.com/MAL-2025-41795/): Malicious code in xoloazfgyobkaw (PyPI) (malicious package)
- [MAL-2025-41794](https://insights.sbomify.com/MAL-2025-41794/): Malicious code in web5 (PyPI) (malicious package)
- [MAL-2025-41793](https://insights.sbomify.com/MAL-2025-41793/): Malicious code in virtualebv (PyPI) (malicious package)
- [MAL-2025-41792](https://insights.sbomify.com/MAL-2025-41792/): Malicious code in uploder-rubika (PyPI) (malicious package)
- [MAL-2025-41791](https://insights.sbomify.com/MAL-2025-41791/): Malicious code in upgrade-requests (PyPI) (malicious package)
- [MAL-2025-41790](https://insights.sbomify.com/MAL-2025-41790/): Malicious code in tsesyx (PyPI) (malicious package)
- [MAL-2025-4179](https://insights.sbomify.com/MAL-2025-4179/): Malicious code in gs-uitk-promise-utils (npm) (malicious package)
- [MAL-2025-41789](https://insights.sbomify.com/MAL-2025-41789/): Malicious code in trongridperm (PyPI) (malicious package)
- [MAL-2025-41788](https://insights.sbomify.com/MAL-2025-41788/): Malicious code in trongridapi (PyPI) (malicious package)
- [MAL-2025-41787](https://insights.sbomify.com/MAL-2025-41787/): Malicious code in tronapisync (PyPI) (malicious package)
- [MAL-2025-41786](https://insights.sbomify.com/MAL-2025-41786/): Malicious code in triple-equal (PyPI) (malicious package)
- [MAL-2025-41785](https://insights.sbomify.com/MAL-2025-41785/): Malicious code in totallysafe (PyPI) (malicious package)
- [MAL-2025-41784](https://insights.sbomify.com/MAL-2025-41784/): Malicious code in toolbelt-requests (PyPI) (malicious package)
- [MAL-2025-41783](https://insights.sbomify.com/MAL-2025-41783/): Malicious code in tkinnter2 (PyPI) (malicious package)
- [MAL-2025-41782](https://insights.sbomify.com/MAL-2025-41782/): Malicious code in tkinnter (PyPI) (malicious package)
- [MAL-2025-41781](https://insights.sbomify.com/MAL-2025-41781/): Malicious code in thisisthedaventestz (PyPI) (malicious package)
- [MAL-2025-41780](https://insights.sbomify.com/MAL-2025-41780/): Malicious code in thisisthedaventest (PyPI) (malicious package)
- [MAL-2025-4178](https://insights.sbomify.com/MAL-2025-4178/): Malicious code in gs-uitk-analytics-common (npm) (malicious package)
- [MAL-2025-41779](https://insights.sbomify.com/MAL-2025-41779/): Malicious code in this-is-vvvv (PyPI) (malicious package)
- [MAL-2025-41778](https://insights.sbomify.com/MAL-2025-41778/): Malicious code in tf-nightly-2-0-preview (PyPI) (malicious package)
- [MAL-2025-41777](https://insights.sbomify.com/MAL-2025-41777/): Malicious code in testpackageroietest4 (PyPI) (malicious package)
- [MAL-2025-41776](https://insights.sbomify.com/MAL-2025-41776/): Malicious code in testpackageroietest3 (PyPI) (malicious package)
- [MAL-2025-41775](https://insights.sbomify.com/MAL-2025-41775/): Malicious code in testpackageroietest2 (PyPI) (malicious package)
- [MAL-2025-41774](https://insights.sbomify.com/MAL-2025-41774/): Malicious code in testcase100 (PyPI) (malicious package)
- [MAL-2025-41773](https://insights.sbomify.com/MAL-2025-41773/): Malicious code in test-tetdssa (PyPI) (malicious package)
- [MAL-2025-41772](https://insights.sbomify.com/MAL-2025-41772/): Malicious code in telemaster (PyPI) (malicious package)
- [MAL-2025-41771](https://insights.sbomify.com/MAL-2025-41771/): Malicious code in telegrampremiumfix (PyPI) (malicious package)
- [MAL-2025-41770](https://insights.sbomify.com/MAL-2025-41770/): Malicious code in supersafepackage (PyPI) (malicious package)
- [MAL-2025-4177](https://insights.sbomify.com/MAL-2025-4177/): Malicious code in gs-pwm-utilities (npm) (malicious package)
- [MAL-2025-41769](https://insights.sbomify.com/MAL-2025-41769/): Malicious code in steembase (PyPI) (malicious package)
- [MAL-2025-41768](https://insights.sbomify.com/MAL-2025-41768/): Malicious code in st-py-de-cli (PyPI) (malicious package)
- [MAL-2025-41767](https://insights.sbomify.com/MAL-2025-41767/): Malicious code in spykes (PyPI) (malicious package)
- [MAL-2025-41766](https://insights.sbomify.com/MAL-2025-41766/): Malicious code in spoof-user-agent (PyPI) (malicious package)
- [MAL-2025-41765](https://insights.sbomify.com/MAL-2025-41765/): Malicious code in speedyrequests (PyPI) (malicious package)
- [MAL-2025-41764](https://insights.sbomify.com/MAL-2025-41764/): Malicious code in someeebbb (PyPI) (malicious package)
- [MAL-2025-41763](https://insights.sbomify.com/MAL-2025-41763/): Malicious code in some-other-package (PyPI) (malicious package)
- [MAL-2025-41762](https://insights.sbomify.com/MAL-2025-41762/): Malicious code in solution-maker (PyPI) (malicious package)
- [MAL-2025-41761](https://insights.sbomify.com/MAL-2025-41761/): Malicious code in smartsheet (PyPI) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/649/