# Vulnerabilities published in 2025 - [MAL-2025-41760](https://insights.sbomify.com/MAL-2025-41760/): Malicious code in set7 (PyPI) (malicious package) - [MAL-2025-4176](https://insights.sbomify.com/MAL-2025-4176/): Malicious code in gs-pwm-ooba (npm) (malicious package) - [MAL-2025-41759](https://insights.sbomify.com/MAL-2025-41759/): Malicious code in scraperworldapi (PyPI) (malicious package) - [MAL-2025-41758](https://insights.sbomify.com/MAL-2025-41758/): Malicious code in sample-module (PyPI) (malicious package) - [MAL-2025-41757](https://insights.sbomify.com/MAL-2025-41757/): Malicious code in rubyreq (PyPI) (malicious package) - [MAL-2025-41754](https://insights.sbomify.com/MAL-2025-41754/): Malicious code in rtxt-dep1 (PyPI) (malicious package) - [MAL-2025-41753](https://insights.sbomify.com/MAL-2025-41753/): Malicious code in rsacracker (PyPI) (malicious package) - [MAL-2025-41752](https://insights.sbomify.com/MAL-2025-41752/): Malicious code in rqrqrq (PyPI) (malicious package) - [MAL-2025-41751](https://insights.sbomify.com/MAL-2025-41751/): Malicious code in rq-websites (PyPI) (malicious package) - [MAL-2025-41750](https://insights.sbomify.com/MAL-2025-41750/): Malicious code in ros2-demo-py (PyPI) (malicious package) - [MAL-2025-4175](https://insights.sbomify.com/MAL-2025-4175/): Malicious code in glovers-acquisition (npm) (malicious package) - [MAL-2025-41749](https://insights.sbomify.com/MAL-2025-41749/): Malicious code in rickquests (PyPI) (malicious package) - [MAL-2025-41748](https://insights.sbomify.com/MAL-2025-41748/): Malicious code in reversepkg (PyPI) (malicious package) - [MAL-2025-41747](https://insights.sbomify.com/MAL-2025-41747/): Malicious code in requires-python (PyPI) (malicious package) - [MAL-2025-41746](https://insights.sbomify.com/MAL-2025-41746/): Malicious code in requests-util (PyPI) (malicious package) - [MAL-2025-41745](https://insights.sbomify.com/MAL-2025-41745/): Malicious code in requests-beta (PyPI) (malicious package) - [MAL-2025-41744](https://insights.sbomify.com/MAL-2025-41744/): Malicious code in requests-2022 (PyPI) (malicious package) - [MAL-2025-41743](https://insights.sbomify.com/MAL-2025-41743/): Malicious code in request-util (PyPI) (malicious package) - [MAL-2025-41742](https://insights.sbomify.com/MAL-2025-41742/): Malicious code in requesgs (PyPI) (malicious package) - [MAL-2025-41741](https://insights.sbomify.com/MAL-2025-41741/): Malicious code in requeqts (PyPI) (malicious package) - [MAL-2025-41740](https://insights.sbomify.com/MAL-2025-41740/): Malicious code in reqeuest-new (PyPI) (malicious package) - [MAL-2025-4174](https://insights.sbomify.com/MAL-2025-4174/): Malicious code in genesys-lib (npm) (malicious package) - [MAL-2025-41739](https://insights.sbomify.com/MAL-2025-41739/): Malicious code in reqeuest-2022 (PyPI) (malicious package) - [MAL-2025-41738](https://insights.sbomify.com/MAL-2025-41738/): Malicious code in reqests-2022 (PyPI) (malicious package) - [MAL-2025-41737](https://insights.sbomify.com/MAL-2025-41737/): Malicious code in reqest-2022 (PyPI) (malicious package) - [MAL-2025-41736](https://insights.sbomify.com/MAL-2025-41736/): Malicious code in regexparam (PyPI) (malicious package) - [MAL-2025-41735](https://insights.sbomify.com/MAL-2025-41735/): Malicious code in rbx1325382 (PyPI) (malicious package) - [MAL-2025-41734](https://insights.sbomify.com/MAL-2025-41734/): Malicious code in rbx1325 (PyPI) (malicious package) - [MAL-2025-41733](https://insights.sbomify.com/MAL-2025-41733/): Malicious code in rbx-cookie (PyPI) (malicious package) - [MAL-2025-41732](https://insights.sbomify.com/MAL-2025-41732/): Malicious code in rbx-autohit (PyPI) (malicious package) - [MAL-2025-41731](https://insights.sbomify.com/MAL-2025-41731/): Malicious code in rblxsetup (PyPI) (malicious package) - [MAL-2025-41730](https://insights.sbomify.com/MAL-2025-41730/): Malicious code in raknet-testing-package2 (PyPI) (malicious package) - [MAL-2025-4173](https://insights.sbomify.com/MAL-2025-4173/): Malicious code in gatsby-theme-newrelic (npm) (malicious package) - [MAL-2025-41729](https://insights.sbomify.com/MAL-2025-41729/): Malicious code in raknet-testing-package (PyPI) (malicious package) - [MAL-2025-41728](https://insights.sbomify.com/MAL-2025-41728/): Malicious code in pyxhttp (PyPI) (malicious package) - [MAL-2025-41727](https://insights.sbomify.com/MAL-2025-41727/): Malicious code in pythonsftpservermanuel (PyPI) (malicious package) - [MAL-2025-41726](https://insights.sbomify.com/MAL-2025-41726/): Malicious code in pythonroblox (PyPI) (malicious package) - [MAL-2025-41725](https://insights.sbomify.com/MAL-2025-41725/): Malicious code in python-kudu (PyPI) (malicious package) - [MAL-2025-41724](https://insights.sbomify.com/MAL-2025-41724/): Malicious code in python-eicar (PyPI) (malicious package) - [MAL-2025-41723](https://insights.sbomify.com/MAL-2025-41723/): Malicious code in python-dependency-confusion-attacks (PyPI) (malicious package) - [MAL-2025-41722](https://insights.sbomify.com/MAL-2025-41722/): Malicious code in pyswyfter (PyPI) (malicious package) - [MAL-2025-41721](https://insights.sbomify.com/MAL-2025-41721/): Malicious code in pyscapes (PyPI) (malicious package) - [MAL-2025-41720](https://insights.sbomify.com/MAL-2025-41720/): Malicious code in py4self (PyPI) (malicious package) - [MAL-2025-4172](https://insights.sbomify.com/MAL-2025-4172/): Malicious code in digital-retail-falabella-unified-login (npm) (malicious package) - [MAL-2025-41719](https://insights.sbomify.com/MAL-2025-41719/): Malicious code in prometheus-api-metrics (PyPI) (malicious package) - [MAL-2025-41718](https://insights.sbomify.com/MAL-2025-41718/): Malicious code in pkproxy (PyPI) (malicious package) - [MAL-2025-41717](https://insights.sbomify.com/MAL-2025-41717/): Malicious code in permsupping (PyPI) (malicious package) - [MAL-2025-41716](https://insights.sbomify.com/MAL-2025-41716/): Malicious code in peloton-clients (PyPI) (malicious package) - [MAL-2025-41715](https://insights.sbomify.com/MAL-2025-41715/): Malicious code in peloton-client123 (PyPI) (malicious package) - [MAL-2025-41714](https://insights.sbomify.com/MAL-2025-41714/): Malicious code in peew (PyPI) (malicious package) - [MAL-2025-41713](https://insights.sbomify.com/MAL-2025-41713/): Malicious code in numbervalidator (PyPI) (malicious package) - [MAL-2025-41712](https://insights.sbomify.com/MAL-2025-41712/): Malicious code in nofexhack (PyPI) (malicious package) - [MAL-2025-41711](https://insights.sbomify.com/MAL-2025-41711/): Malicious code in nofex-hack (PyPI) (malicious package) - [MAL-2025-41710](https://insights.sbomify.com/MAL-2025-41710/): Malicious code in nexlang (PyPI) (malicious package) - [MAL-2025-4171](https://insights.sbomify.com/MAL-2025-4171/): Malicious code in cryptotax (npm) (malicious package) - [MAL-2025-41709](https://insights.sbomify.com/MAL-2025-41709/): Malicious code in newdontinstallthistest (PyPI) (malicious package) - [MAL-2025-41708](https://insights.sbomify.com/MAL-2025-41708/): Malicious code in new-sql (PyPI) (malicious package) - [MAL-2025-41707](https://insights.sbomify.com/MAL-2025-41707/): Malicious code in new-requests-module (PyPI) (malicious package) - [MAL-2025-41706](https://insights.sbomify.com/MAL-2025-41706/): Malicious code in new-requests-2021 (PyPI) (malicious package) - [MAL-2025-41705](https://insights.sbomify.com/MAL-2025-41705/): Malicious code in ncurses (PyPI) (malicious package) - [MAL-2025-41704](https://insights.sbomify.com/MAL-2025-41704/): Malicious code in namedpkg (PyPI) (malicious package) - [MAL-2025-41703](https://insights.sbomify.com/MAL-2025-41703/): Malicious code in mozilla (PyPI) (malicious package) - [MAL-2025-41702](https://insights.sbomify.com/MAL-2025-41702/): Malicious code in more-colors (PyPI) (malicious package) - [MAL-2025-41701](https://insights.sbomify.com/MAL-2025-41701/): Malicious code in maxload (PyPI) (malicious package) - [MAL-2025-41700](https://insights.sbomify.com/MAL-2025-41700/): Malicious code in malicious-pip-package-for-demo (PyPI) (malicious package) - [MAL-2025-4170](https://insights.sbomify.com/MAL-2025-4170/): Malicious code in cryptopay-button (npm) (malicious package) - [MAL-2025-417](https://insights.sbomify.com/MAL-2025-417/): Malicious code in coinbase-checkout (npm) (malicious package) - [MAL-2025-41699](https://insights.sbomify.com/MAL-2025-41699/): Malicious code in m5tlprovetomegz (PyPI) (malicious package) - [MAL-2025-41698](https://insights.sbomify.com/MAL-2025-41698/): Malicious code in lyft-avidl (PyPI) (malicious package) - [MAL-2025-41697](https://insights.sbomify.com/MAL-2025-41697/): Malicious code in loy (PyPI) (malicious package) - [MAL-2025-41696](https://insights.sbomify.com/MAL-2025-41696/): Malicious code in logging-python (PyPI) (malicious package) - [MAL-2025-41695](https://insights.sbomify.com/MAL-2025-41695/): Malicious code in lightfm-ext (PyPI) (malicious package) - [MAL-2025-41694](https://insights.sbomify.com/MAL-2025-41694/): Malicious code in kfaction (PyPI) (malicious package) - [MAL-2025-41693](https://insights.sbomify.com/MAL-2025-41693/): Malicious code in jinja22 (PyPI) (malicious package) - [MAL-2025-41692](https://insights.sbomify.com/MAL-2025-41692/): Malicious code in ironic-secureboot-driver (PyPI) (malicious package) - [MAL-2025-41691](https://insights.sbomify.com/MAL-2025-41691/): Malicious code in iou3d (PyPI) (malicious package) - [MAL-2025-4169](https://insights.sbomify.com/MAL-2025-4169/): Malicious code in cosmos-multisig-ui (npm) (malicious package) - [MAL-2025-41689](https://insights.sbomify.com/MAL-2025-41689/): Malicious code in ilovemadpussy9 (PyPI) (malicious package) - [MAL-2025-41688](https://insights.sbomify.com/MAL-2025-41688/): Malicious code in iamenumerate (PyPI) (malicious package) - [MAL-2025-41687](https://insights.sbomify.com/MAL-2025-41687/): Malicious code in iamenumer (PyPI) (malicious package) - [MAL-2025-41686](https://insights.sbomify.com/MAL-2025-41686/): Malicious code in httpsyncer (PyPI) (malicious package) - [MAL-2025-41685](https://insights.sbomify.com/MAL-2025-41685/): Malicious code in http-interact (PyPI) (malicious package) - [MAL-2025-41684](https://insights.sbomify.com/MAL-2025-41684/): Malicious code in hironobunigo (PyPI) (malicious package) - [MAL-2025-41683](https://insights.sbomify.com/MAL-2025-41683/): Malicious code in hera-mapmaking-visibilitysimulation (PyPI) (malicious package) - [MAL-2025-41682](https://insights.sbomify.com/MAL-2025-41682/): Malicious code in hellowpkg (PyPI) (malicious package) - [MAL-2025-41681](https://insights.sbomify.com/MAL-2025-41681/): Malicious code in greater-than (PyPI) (malicious package) - [MAL-2025-41680](https://insights.sbomify.com/MAL-2025-41680/): Malicious code in gearbest-parser (PyPI) (malicious package) - [MAL-2025-4168](https://insights.sbomify.com/MAL-2025-4168/): Malicious code in cloud-pipeline-run (npm) (malicious package) - [MAL-2025-41679](https://insights.sbomify.com/MAL-2025-41679/): Malicious code in gauravtest123 (PyPI) (malicious package) - [MAL-2025-41678](https://insights.sbomify.com/MAL-2025-41678/): Malicious code in fquant (PyPI) (malicious package) - [MAL-2025-41677](https://insights.sbomify.com/MAL-2025-41677/): Malicious code in flyadmin (PyPI) (malicious package) - [MAL-2025-41676](https://insights.sbomify.com/MAL-2025-41676/): Malicious code in floogle (PyPI) (malicious package) - [MAL-2025-41675](https://insights.sbomify.com/MAL-2025-41675/): Malicious code in flask-tdg-cyber (PyPI) (malicious package) - [MAL-2025-41674](https://insights.sbomify.com/MAL-2025-41674/): Malicious code in fiinquantx (PyPI) (malicious package) - [MAL-2025-41673](https://insights.sbomify.com/MAL-2025-41673/): Malicious code in fiinquant-test (PyPI) (malicious package) - [MAL-2025-41672](https://insights.sbomify.com/MAL-2025-41672/): Malicious code in fiinquant (PyPI) (malicious package) - [MAL-2025-41671](https://insights.sbomify.com/MAL-2025-41671/): Malicious code in fet (PyPI) (malicious package) - [MAL-2025-41670](https://insights.sbomify.com/MAL-2025-41670/): Malicious code in easy-https (PyPI) (malicious package) - [MAL-2025-4167](https://insights.sbomify.com/MAL-2025-4167/): Malicious code in calling-extensions-sdk-demo-minimal-js (npm) (malicious package) - [MAL-2025-41669](https://insights.sbomify.com/MAL-2025-41669/): Malicious code in e89-security (PyPI) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/650/