# Vulnerabilities published in 2025 - [MAL-2025-41397](https://insights.sbomify.com/MAL-2025-41397/): Malicious code in mydctest1 (npm) (malicious package) - [MAL-2025-41396](https://insights.sbomify.com/MAL-2025-41396/): Malicious code in mydctest (npm) (malicious package) - [MAL-2025-41395](https://insights.sbomify.com/MAL-2025-41395/): Malicious code in mv-basico (npm) (malicious package) - [MAL-2025-41394](https://insights.sbomify.com/MAL-2025-41394/): Malicious code in msal-node2 (npm) (malicious package) - [MAL-2025-41393](https://insights.sbomify.com/MAL-2025-41393/): Malicious code in msal-node1 (npm) (malicious package) - [MAL-2025-41392](https://insights.sbomify.com/MAL-2025-41392/): Malicious code in markdown-agent (npm) (malicious package) - [MAL-2025-41391](https://insights.sbomify.com/MAL-2025-41391/): Malicious code in kibiutils (npm) (malicious package) - [MAL-2025-41390](https://insights.sbomify.com/MAL-2025-41390/): Malicious code in kaltura-player-js (npm) (malicious package) - [MAL-2025-4139](https://insights.sbomify.com/MAL-2025-4139/): Malicious code in wallet-chii (npm) (malicious package) - [MAL-2025-41389](https://insights.sbomify.com/MAL-2025-41389/): Malicious code in greeting-agent (npm) (malicious package) - [MAL-2025-41388](https://insights.sbomify.com/MAL-2025-41388/): Malicious code in grab-service-worker (npm) (malicious package) - [MAL-2025-41387](https://insights.sbomify.com/MAL-2025-41387/): Malicious code in global-copilot-menu (npm) (malicious package) - [MAL-2025-41386](https://insights.sbomify.com/MAL-2025-41386/): Malicious code in github-socket-worker (npm) (malicious package) - [MAL-2025-41385](https://insights.sbomify.com/MAL-2025-41385/): Malicious code in gbb-kubernetes-hackfest-webui-dashboard (npm) (malicious package) - [MAL-2025-41384](https://insights.sbomify.com/MAL-2025-41384/): Malicious code in fb_systemd (npm) (malicious package) - [MAL-2025-41383](https://insights.sbomify.com/MAL-2025-41383/): Malicious code in f0-service-oas (npm) (malicious package) - [MAL-2025-41382](https://insights.sbomify.com/MAL-2025-41382/): Malicious code in example-fastify-api (npm) (malicious package) - [MAL-2025-41381](https://insights.sbomify.com/MAL-2025-41381/): Malicious code in default-agent-provider (npm) (malicious package) - [MAL-2025-41380](https://insights.sbomify.com/MAL-2025-41380/): Malicious code in decoupled-local-node-rig (npm) (malicious package) - [MAL-2025-4138](https://insights.sbomify.com/MAL-2025-4138/): Malicious code in victim-project (npm) (malicious package) - [MAL-2025-41379](https://insights.sbomify.com/MAL-2025-41379/): Malicious code in dc-poc-test (npm) (malicious package) - [MAL-2025-41378](https://insights.sbomify.com/MAL-2025-41378/): Malicious code in cwl_shared (npm) (malicious package) - [MAL-2025-41377](https://insights.sbomify.com/MAL-2025-41377/): Malicious code in conversation-memory (npm) (malicious package) - [MAL-2025-41376](https://insights.sbomify.com/MAL-2025-41376/): Malicious code in code-processor (npm) (malicious package) - [MAL-2025-41375](https://insights.sbomify.com/MAL-2025-41375/): Malicious code in cld-ai-chatbot-web (npm) (malicious package) - [MAL-2025-41374](https://insights.sbomify.com/MAL-2025-41374/): Malicious code in canvas-ios (npm) (malicious package) - [MAL-2025-41373](https://insights.sbomify.com/MAL-2025-41373/): Malicious code in browser-typeagent (npm) (malicious package) - [MAL-2025-41372](https://insights.sbomify.com/MAL-2025-41372/): Malicious code in bps-react-design-system (npm) (malicious package) - [MAL-2025-41371](https://insights.sbomify.com/MAL-2025-41371/): Malicious code in bc-compare (npm) (malicious package) - [MAL-2025-41370](https://insights.sbomify.com/MAL-2025-41370/): Malicious code in appinsightsnew (npm) (malicious package) - [MAL-2025-4137](https://insights.sbomify.com/MAL-2025-4137/): Malicious code in ultimatepower (npm) (malicious package) - [MAL-2025-41369](https://insights.sbomify.com/MAL-2025-41369/): Malicious code in api-react129 (npm) (malicious package) - [MAL-2025-41368](https://insights.sbomify.com/MAL-2025-41368/): Malicious code in api-react128 (npm) (malicious package) - [MAL-2025-41367](https://insights.sbomify.com/MAL-2025-41367/): Malicious code in api-react127 (npm) (malicious package) - [MAL-2025-41366](https://insights.sbomify.com/MAL-2025-41366/): Malicious code in api-react124 (npm) (malicious package) - [MAL-2025-41365](https://insights.sbomify.com/MAL-2025-41365/): Malicious code in api-react123 (npm) (malicious package) - [MAL-2025-41364](https://insights.sbomify.com/MAL-2025-41364/): Malicious code in api-extractor-lib5-test (npm) (malicious package) - [MAL-2025-41363](https://insights.sbomify.com/MAL-2025-41363/): Malicious code in airbnb-react-server (npm) (malicious package) - [MAL-2025-41362](https://insights.sbomify.com/MAL-2025-41362/): Malicious code in agent-cache (npm) (malicious package) - [MAL-2025-41361](https://insights.sbomify.com/MAL-2025-41361/): Malicious code in ad-react-wrapper (npm) (malicious package) - [MAL-2025-41360](https://insights.sbomify.com/MAL-2025-41360/): Malicious code in action-schema-compiler (npm) (malicious package) - [MAL-2025-4136](https://insights.sbomify.com/MAL-2025-4136/): Malicious code in typescri (npm) (malicious package) - [MAL-2025-41359](https://insights.sbomify.com/MAL-2025-41359/): Malicious code in @wp-feature-api/client-features (npm) (malicious package) - [MAL-2025-41358](https://insights.sbomify.com/MAL-2025-41358/): Malicious code in @stackgl/gl-conformance (npm) (malicious package) - [MAL-2025-41357](https://insights.sbomify.com/MAL-2025-41357/): Malicious code in @navify-platform/http (npm) (malicious package) - [MAL-2025-41356](https://insights.sbomify.com/MAL-2025-41356/): Malicious code in @navify-platform/event (npm) (malicious package) - [MAL-2025-41355](https://insights.sbomify.com/MAL-2025-41355/): Malicious code in @navify-platform/env (npm) (malicious package) - [MAL-2025-41354](https://insights.sbomify.com/MAL-2025-41354/): Malicious code in @navify-platform/auth (npm) (malicious package) - [MAL-2025-41353](https://insights.sbomify.com/MAL-2025-41353/): Malicious code in @mz-codes/consts (npm) (malicious package) - [MAL-2025-41352](https://insights.sbomify.com/MAL-2025-41352/): Malicious code in @mz-codes/const (npm) (malicious package) - [MAL-2025-41351](https://insights.sbomify.com/MAL-2025-41351/): Malicious code in @hpx-core-experiences/react-my-account-payments (npm) (malicious package) - [MAL-2025-41350](https://insights.sbomify.com/MAL-2025-41350/): Malicious code in @hpx-core-experiences/react-my-account-home (npm) (malicious package) - [MAL-2025-4135](https://insights.sbomify.com/MAL-2025-4135/): Malicious code in system-v11 (npm) (malicious package) - [MAL-2025-41349](https://insights.sbomify.com/MAL-2025-41349/): Malicious code in @hpx-core-experiences/react-my-account (npm) (malicious package) - [MAL-2025-41348](https://insights.sbomify.com/MAL-2025-41348/): Malicious code in byresfsdfdsdf (npm) (malicious package) - [MAL-2025-41347](https://insights.sbomify.com/MAL-2025-41347/): Malicious code in credit-app-ui (npm) (malicious package) - [MAL-2025-41346](https://insights.sbomify.com/MAL-2025-41346/): Malicious code in @spdf/astrotheme (npm) (malicious package) - [MAL-2025-41345](https://insights.sbomify.com/MAL-2025-41345/): Malicious code in prettier-v2 (npm) (malicious package) - [MAL-2025-41344](https://insights.sbomify.com/MAL-2025-41344/): Malicious code in xpoc-ts-lib (npm) (malicious package) - [MAL-2025-41343](https://insights.sbomify.com/MAL-2025-41343/): Malicious code in typespec-http-dispatcher (npm) (malicious package) - [MAL-2025-41342](https://insights.sbomify.com/MAL-2025-41342/): Malicious code in typescript-6.0 (npm) (malicious package) - [MAL-2025-41341](https://insights.sbomify.com/MAL-2025-41341/): Malicious code in typescript-5.9 (npm) (malicious package) - [MAL-2025-41340](https://insights.sbomify.com/MAL-2025-41340/): Malicious code in typescript-5.8 (npm) (malicious package) - [MAL-2025-4134](https://insights.sbomify.com/MAL-2025-4134/): Malicious code in string-multiutils (npm) (malicious package) - [MAL-2025-41339](https://insights.sbomify.com/MAL-2025-41339/): Malicious code in typescript-5.7 (npm) (malicious package) - [MAL-2025-41338](https://insights.sbomify.com/MAL-2025-41338/): Malicious code in typescript-5.6 (npm) (malicious package) - [MAL-2025-41337](https://insights.sbomify.com/MAL-2025-41337/): Malicious code in typescript-5.5 (npm) (malicious package) - [MAL-2025-41336](https://insights.sbomify.com/MAL-2025-41336/): Malicious code in typescript-5.4 (npm) (malicious package) - [MAL-2025-41335](https://insights.sbomify.com/MAL-2025-41335/): Malicious code in typescript-5.3 (npm) (malicious package) - [MAL-2025-41334](https://insights.sbomify.com/MAL-2025-41334/): Malicious code in typescript-5.2 (npm) (malicious package) - [MAL-2025-41333](https://insights.sbomify.com/MAL-2025-41333/): Malicious code in this-should-be-ignored (npm) (malicious package) - [MAL-2025-41332](https://insights.sbomify.com/MAL-2025-41332/): Malicious code in theme-rushstack-suite-nav (npm) (malicious package) - [MAL-2025-41331](https://insights.sbomify.com/MAL-2025-41331/): Malicious code in temp-nextjs (npm) (malicious package) - [MAL-2025-41330](https://insights.sbomify.com/MAL-2025-41330/): Malicious code in suppressions (npm) (malicious package) - [MAL-2025-4133](https://insights.sbomify.com/MAL-2025-4133/): Malicious code in spite (npm) (malicious package) - [MAL-2025-41329](https://insights.sbomify.com/MAL-2025-41329/): Malicious code in schema-author (npm) (malicious package) - [MAL-2025-41328](https://insights.sbomify.com/MAL-2025-41328/): Malicious code in rushstack.io (npm) (malicious package) - [MAL-2025-41327](https://insights.sbomify.com/MAL-2025-41327/): Malicious code in rushjs.io (npm) (malicious package) - [MAL-2025-41326](https://insights.sbomify.com/MAL-2025-41326/): Malicious code in rush-d (npm) (malicious package) - [MAL-2025-41325](https://insights.sbomify.com/MAL-2025-41325/): Malicious code in rush-cyclic-dep-2 (npm) (malicious package) - [MAL-2025-41324](https://insights.sbomify.com/MAL-2025-41324/): Malicious code in rush-cyclic-dep-1 (npm) (malicious package) - [MAL-2025-41323](https://insights.sbomify.com/MAL-2025-41323/): Malicious code in rush-c (npm) (malicious package) - [MAL-2025-41322](https://insights.sbomify.com/MAL-2025-41322/): Malicious code in rush-b (npm) (malicious package) - [MAL-2025-41321](https://insights.sbomify.com/MAL-2025-41321/): Malicious code in run-scenarios-helpers (npm) (malicious package) - [MAL-2025-41320](https://insights.sbomify.com/MAL-2025-41320/): Malicious code in remark-cross-site-link-plugin (npm) (malicious package) - [MAL-2025-4132](https://insights.sbomify.com/MAL-2025-4132/): Malicious code in solsniperbyagave (npm) (malicious package) - [MAL-2025-41319](https://insights.sbomify.com/MAL-2025-41319/): Malicious code in remark-canonical-link-plugin (npm) (malicious package) - [MAL-2025-41318](https://insights.sbomify.com/MAL-2025-41318/): Malicious code in rehype-headerless-table-plugin (npm) (malicious package) - [MAL-2025-41317](https://insights.sbomify.com/MAL-2025-41317/): Malicious code in photo-agent (npm) (malicious package) - [MAL-2025-41316](https://insights.sbomify.com/MAL-2025-41316/): Malicious code in package-extractor-test-03 (npm) (malicious package) - [MAL-2025-41315](https://insights.sbomify.com/MAL-2025-41315/): Malicious code in package-extractor-test-02 (npm) (malicious package) - [MAL-2025-41314](https://insights.sbomify.com/MAL-2025-41314/): Malicious code in other-pkg-b (npm) (malicious package) - [MAL-2025-41313](https://insights.sbomify.com/MAL-2025-41313/): Malicious code in oracle-agent (npm) (malicious package) - [MAL-2025-41312](https://insights.sbomify.com/MAL-2025-41312/): Malicious code in msalv2 (npm) (malicious package) - [MAL-2025-41311](https://insights.sbomify.com/MAL-2025-41311/): Malicious code in msalv3 (npm) (malicious package) - [MAL-2025-41310](https://insights.sbomify.com/MAL-2025-41310/): Malicious code in msalv1 (npm) (malicious package) - [MAL-2025-4131](https://insights.sbomify.com/MAL-2025-4131/): Malicious code in slowingdown4u (npm) (malicious package) - [MAL-2025-41309](https://insights.sbomify.com/MAL-2025-41309/): Malicious code in montage-agent (npm) (malicious package) - [MAL-2025-41308](https://insights.sbomify.com/MAL-2025-41308/): Malicious code in microbit-robot (npm) (malicious package) - [MAL-2025-41307](https://insights.sbomify.com/MAL-2025-41307/): Malicious code in memory-providers (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/654/