# Vulnerabilities published in 2025


- [MAL-2025-41668](https://insights.sbomify.com/MAL-2025-41668/): Malicious code in dziplib (PyPI) (malicious package)
- [MAL-2025-41667](https://insights.sbomify.com/MAL-2025-41667/): Malicious code in dsodelib (PyPI) (malicious package)
- [MAL-2025-41666](https://insights.sbomify.com/MAL-2025-41666/): Malicious code in dsidelib (PyPI) (malicious package)
- [MAL-2025-41665](https://insights.sbomify.com/MAL-2025-41665/): Malicious code in doughnuts (PyPI) (malicious package)
- [MAL-2025-41664](https://insights.sbomify.com/MAL-2025-41664/): Malicious code in donotinstallthisistest5 (PyPI) (malicious package)
- [MAL-2025-41663](https://insights.sbomify.com/MAL-2025-41663/): Malicious code in dns-lexiconrequests-mock (PyPI) (malicious package)
- [MAL-2025-41662](https://insights.sbomify.com/MAL-2025-41662/): Malicious code in discordsync (PyPI) (malicious package)
- [MAL-2025-41661](https://insights.sbomify.com/MAL-2025-41661/): Malicious code in discord-selfbot-v1422 (PyPI) (malicious package)
- [MAL-2025-41660](https://insights.sbomify.com/MAL-2025-41660/): Malicious code in discord-application (PyPI) (malicious package)
- [MAL-2025-4166](https://insights.sbomify.com/MAL-2025-4166/): Malicious code in browser-tests (npm) (malicious package)
- [MAL-2025-41659](https://insights.sbomify.com/MAL-2025-41659/): Malicious code in deepmountains-rce (PyPI) (malicious package)
- [MAL-2025-41658](https://insights.sbomify.com/MAL-2025-41658/): Malicious code in decoratoroperations (PyPI) (malicious package)
- [MAL-2025-41657](https://insights.sbomify.com/MAL-2025-41657/): Malicious code in dccs-bot (PyPI) (malicious package)
- [MAL-2025-41656](https://insights.sbomify.com/MAL-2025-41656/): Malicious code in ctf-q21-empire-tmp-test125 (PyPI) (malicious package)
- [MAL-2025-41655](https://insights.sbomify.com/MAL-2025-41655/): Malicious code in ctf-q21-empire-tmp-test124 (PyPI) (malicious package)
- [MAL-2025-41654](https://insights.sbomify.com/MAL-2025-41654/): Malicious code in ctf-q21-empire-tmp-test123 (PyPI) (malicious package)
- [MAL-2025-41653](https://insights.sbomify.com/MAL-2025-41653/): Malicious code in ctf-q21-empire-tmp-t0pw1ns (PyPI) (malicious package)
- [MAL-2025-41652](https://insights.sbomify.com/MAL-2025-41652/): Malicious code in ctf-q21-empire-tmp-t0pw1ng (PyPI) (malicious package)
- [MAL-2025-41651](https://insights.sbomify.com/MAL-2025-41651/): Malicious code in ctf-q21-empire-tmp-bw31337 (PyPI) (malicious package)
- [MAL-2025-41650](https://insights.sbomify.com/MAL-2025-41650/): Malicious code in ctf-q21-empire-tmp-bw134349 (PyPI) (malicious package)
- [MAL-2025-4165](https://insights.sbomify.com/MAL-2025-4165/): Malicious code in bitcoinjs-lib-v5 (npm) (malicious package)
- [MAL-2025-41649](https://insights.sbomify.com/MAL-2025-41649/): Malicious code in ctf-q21-empire-tmp-bw134348 (PyPI) (malicious package)
- [MAL-2025-41648](https://insights.sbomify.com/MAL-2025-41648/): Malicious code in ctf-q21-empire-tmp-bw134347 (PyPI) (malicious package)
- [MAL-2025-41647](https://insights.sbomify.com/MAL-2025-41647/): Malicious code in ctf-q21-empire-tmp-bw134345 (PyPI) (malicious package)
- [MAL-2025-41646](https://insights.sbomify.com/MAL-2025-41646/): Malicious code in ctf-q21-empire-tmp-bw126916 (PyPI) (malicious package)
- [MAL-2025-41645](https://insights.sbomify.com/MAL-2025-41645/): Malicious code in ctf-q21-empire-tmp-bw126616 (PyPI) (malicious package)
- [MAL-2025-41644](https://insights.sbomify.com/MAL-2025-41644/): Malicious code in ctf-q21-empire-tmp-bw121116 (PyPI) (malicious package)
- [MAL-2025-41643](https://insights.sbomify.com/MAL-2025-41643/): Malicious code in ctf-bakayaro (PyPI) (malicious package)
- [MAL-2025-41642](https://insights.sbomify.com/MAL-2025-41642/): Malicious code in crowdnav (PyPI) (malicious package)
- [MAL-2025-41641](https://insights.sbomify.com/MAL-2025-41641/): Malicious code in continuoustimemarkovmodel (PyPI) (malicious package)
- [MAL-2025-41640](https://insights.sbomify.com/MAL-2025-41640/): Malicious code in config4py (PyPI) (malicious package)
- [MAL-2025-4164](https://insights.sbomify.com/MAL-2025-4164/): Malicious code in bc-swipe-fade (npm) (malicious package)
- [MAL-2025-41639](https://insights.sbomify.com/MAL-2025-41639/): Malicious code in conda-package-handling111 (PyPI) (malicious package)
- [MAL-2025-41638](https://insights.sbomify.com/MAL-2025-41638/): Malicious code in change-user-agent (PyPI) (malicious package)
- [MAL-2025-41637](https://insights.sbomify.com/MAL-2025-41637/): Malicious code in certufi (PyPI) (malicious package)
- [MAL-2025-41636](https://insights.sbomify.com/MAL-2025-41636/): Malicious code in certifo (PyPI) (malicious package)
- [MAL-2025-41635](https://insights.sbomify.com/MAL-2025-41635/): Malicious code in certifiy (PyPI) (malicious package)
- [MAL-2025-41634](https://insights.sbomify.com/MAL-2025-41634/): Malicious code in certifiq (PyPI) (malicious package)
- [MAL-2025-41633](https://insights.sbomify.com/MAL-2025-41633/): Malicious code in certifij (PyPI) (malicious package)
- [MAL-2025-41632](https://insights.sbomify.com/MAL-2025-41632/): Malicious code in certifii (PyPI) (malicious package)
- [MAL-2025-41631](https://insights.sbomify.com/MAL-2025-41631/): Malicious code in certifia (PyPI) (malicious package)
- [MAL-2025-41630](https://insights.sbomify.com/MAL-2025-41630/): Malicious code in certiffi (PyPI) (malicious package)
- [MAL-2025-4163](https://insights.sbomify.com/MAL-2025-4163/): Malicious code in atg-store-addons (npm) (malicious package)
- [MAL-2025-41629](https://insights.sbomify.com/MAL-2025-41629/): Malicious code in ceritfi (PyPI) (malicious package)
- [MAL-2025-41628](https://insights.sbomify.com/MAL-2025-41628/): Malicious code in celery-routr (PyPI) (malicious package)
- [MAL-2025-41627](https://insights.sbomify.com/MAL-2025-41627/): Malicious code in bp2hookutil (PyPI) (malicious package)
- [MAL-2025-41626](https://insights.sbomify.com/MAL-2025-41626/): Malicious code in botclient (PyPI) (malicious package)
- [MAL-2025-41625](https://insights.sbomify.com/MAL-2025-41625/): Malicious code in blabutt (PyPI) (malicious package)
- [MAL-2025-41624](https://insights.sbomify.com/MAL-2025-41624/): Malicious code in beautifulsoup4-new (PyPI) (malicious package)
- [MAL-2025-41623](https://insights.sbomify.com/MAL-2025-41623/): Malicious code in beautifulsoup-new (PyPI) (malicious package)
- [MAL-2025-41622](https://insights.sbomify.com/MAL-2025-41622/): Malicious code in azure-iothub-service-client (PyPI) (malicious package)
- [MAL-2025-41621](https://insights.sbomify.com/MAL-2025-41621/): Malicious code in aws-enumerate (PyPI) (malicious package)
- [MAL-2025-41620](https://insights.sbomify.com/MAL-2025-41620/): Malicious code in apple-tv-new (PyPI) (malicious package)
- [MAL-2025-4162](https://insights.sbomify.com/MAL-2025-4162/): Malicious code in atg-breakpoints (npm) (malicious package)
- [MAL-2025-41619](https://insights.sbomify.com/MAL-2025-41619/): Malicious code in airtime-media-monitor (PyPI) (malicious package)
- [MAL-2025-41618](https://insights.sbomify.com/MAL-2025-41618/): Malicious code in aiohttp-proxies-forked (PyPI) (malicious package)
- [MAL-2025-41617](https://insights.sbomify.com/MAL-2025-41617/): Malicious code in aiohttp-proxies-fork (PyPI) (malicious package)
- [MAL-2025-41616](https://insights.sbomify.com/MAL-2025-41616/): Malicious code in aiohttp-proxies-connector (PyPI) (malicious package)
- [MAL-2025-41615](https://insights.sbomify.com/MAL-2025-41615/): Malicious code in abilityrequests (PyPI) (malicious package)
- [MAL-2025-41614](https://insights.sbomify.com/MAL-2025-41614/): Malicious code in zdachboostv2 (npm) (malicious package)
- [MAL-2025-41613](https://insights.sbomify.com/MAL-2025-41613/): Malicious code in vite-binding-js (npm) (malicious package)
- [MAL-2025-41612](https://insights.sbomify.com/MAL-2025-41612/): Malicious code in verizon-media-open-source-project-portal (npm) (malicious package)
- [MAL-2025-41611](https://insights.sbomify.com/MAL-2025-41611/): Malicious code in testpointx0-testing-test (npm) (malicious package)
- [MAL-2025-41610](https://insights.sbomify.com/MAL-2025-41610/): Malicious code in terminalstyle (npm) (malicious package)
- [MAL-2025-4161](https://insights.sbomify.com/MAL-2025-4161/): Malicious code in asdfghjklzxcvbnmmnbvcx (npm) (malicious package)
- [MAL-2025-41609](https://insights.sbomify.com/MAL-2025-41609/): Malicious code in sugamogarxxx (npm) (malicious package)
- [MAL-2025-41608](https://insights.sbomify.com/MAL-2025-41608/): Malicious code in sqrt-bn-enhanced (npm) (malicious package)
- [MAL-2025-41607](https://insights.sbomify.com/MAL-2025-41607/): Malicious code in sqrt-bn (npm) (malicious package)
- [MAL-2025-41606](https://insights.sbomify.com/MAL-2025-41606/): Malicious code in solana-pump-sdk-test (npm) (malicious package)
- [MAL-2025-41605](https://insights.sbomify.com/MAL-2025-41605/): Malicious code in solana-bot-sdk (npm) (malicious package)
- [MAL-2025-41604](https://insights.sbomify.com/MAL-2025-41604/): Malicious code in sha256-validator-pro (npm) (malicious package)
- [MAL-2025-41603](https://insights.sbomify.com/MAL-2025-41603/): Malicious code in sha256-validation-package (npm) (malicious package)
- [MAL-2025-41602](https://insights.sbomify.com/MAL-2025-41602/): Malicious code in satt (npm) (malicious package)
- [MAL-2025-41601](https://insights.sbomify.com/MAL-2025-41601/): Malicious code in retool-security-install-qa (npm) (malicious package)
- [MAL-2025-41600](https://insights.sbomify.com/MAL-2025-41600/): Malicious code in renovates (npm) (malicious package)
- [MAL-2025-4160](https://insights.sbomify.com/MAL-2025-4160/): Malicious code in @workleap-tracking/logrocket (npm) (malicious package)
- [MAL-2025-416](https://insights.sbomify.com/MAL-2025-416/): Malicious code in coinbase-cache (npm) (malicious package)
- [MAL-2025-41599](https://insights.sbomify.com/MAL-2025-41599/): Malicious code in redux-saga-sentinel (npm) (malicious package)
- [MAL-2025-41598](https://insights.sbomify.com/MAL-2025-41598/): Malicious code in redux-saga-help (npm) (malicious package)
- [MAL-2025-41597](https://insights.sbomify.com/MAL-2025-41597/): Malicious code in quick-start_onnxruntime-web-bundler (npm) (malicious package)
- [MAL-2025-41596](https://insights.sbomify.com/MAL-2025-41596/): Malicious code in poc24343fc (npm) (malicious package)
- [MAL-2025-41595](https://insights.sbomify.com/MAL-2025-41595/): Malicious code in pix2pix (npm) (malicious package)
- [MAL-2025-41594](https://insights.sbomify.com/MAL-2025-41594/): Malicious code in pino-final (npm) (malicious package)
- [MAL-2025-41593](https://insights.sbomify.com/MAL-2025-41593/): Malicious code in pino-fianl (npm) (malicious package)
- [MAL-2025-41592](https://insights.sbomify.com/MAL-2025-41592/): Malicious code in phone-feature-sdk2 (npm) (malicious package)
- [MAL-2025-41591](https://insights.sbomify.com/MAL-2025-41591/): Malicious code in phone-feature-sdk (npm) (malicious package)
- [MAL-2025-41590](https://insights.sbomify.com/MAL-2025-41590/): Malicious code in ort-whisper (npm) (malicious package)
- [MAL-2025-4159](https://insights.sbomify.com/MAL-2025-4159/): Malicious code in @webhighlights/shared-components (npm) (malicious package)
- [MAL-2025-41589](https://insights.sbomify.com/MAL-2025-41589/): Malicious code in ort-type-test-module-resolution (npm) (malicious package)
- [MAL-2025-41588](https://insights.sbomify.com/MAL-2025-41588/): Malicious code in openzeppelin-contracts-5.0.2 (npm) (malicious package)
- [MAL-2025-41587](https://insights.sbomify.com/MAL-2025-41587/): Malicious code in onnxruntime-reactnative-example (npm) (malicious package)
- [MAL-2025-41586](https://insights.sbomify.com/MAL-2025-41586/): Malicious code in oneauth-win64 (npm) (malicious package)
- [MAL-2025-41585](https://insights.sbomify.com/MAL-2025-41585/): Malicious code in oneauth-mac (npm) (malicious package)
- [MAL-2025-41584](https://insights.sbomify.com/MAL-2025-41584/): Malicious code in network-console-shared (npm) (malicious package)
- [MAL-2025-41583](https://insights.sbomify.com/MAL-2025-41583/): Malicious code in main-util-validation (npm) (malicious package)
- [MAL-2025-41582](https://insights.sbomify.com/MAL-2025-41582/): Malicious code in logger-extjs (npm) (malicious package)
- [MAL-2025-41581](https://insights.sbomify.com/MAL-2025-41581/): Malicious code in localchat (npm) (malicious package)
- [MAL-2025-41580](https://insights.sbomify.com/MAL-2025-41580/): Malicious code in lienkible (npm) (malicious package)
- [MAL-2025-4158](https://insights.sbomify.com/MAL-2025-4158/): Malicious code in @rf-ui-platform/react-ui-components (npm) (malicious package)
- [MAL-2025-41579](https://insights.sbomify.com/MAL-2025-41579/): Malicious code in kikimbappe (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/651/