# Vulnerabilities published in 2025


- [MAL-2025-40677](https://insights.sbomify.com/MAL-2025-40677/): Malicious code in yurukawa (npm) (malicious package)
- [MAL-2025-40676](https://insights.sbomify.com/MAL-2025-40676/): Malicious code in yurt-zeppelin-tf28 (npm) (malicious package)
- [MAL-2025-40675](https://insights.sbomify.com/MAL-2025-40675/): Malicious code in yurt-zenith-hf3l (npm) (malicious package)
- [MAL-2025-40674](https://insights.sbomify.com/MAL-2025-40674/): Malicious code in yurt-xerophyte-c5ac (npm) (malicious package)
- [MAL-2025-40673](https://insights.sbomify.com/MAL-2025-40673/): Malicious code in yurt-wasabi-va7c (npm) (malicious package)
- [MAL-2025-40672](https://insights.sbomify.com/MAL-2025-40672/): Malicious code in yurt-tangerine-jhu0 (npm) (malicious package)
- [MAL-2025-40671](https://insights.sbomify.com/MAL-2025-40671/): Malicious code in yurt-pine-l7fp (npm) (malicious package)
- [MAL-2025-40670](https://insights.sbomify.com/MAL-2025-40670/): Malicious code in yurt-mushroom-8qnh (npm) (malicious package)
- [MAL-2025-4067](https://insights.sbomify.com/MAL-2025-4067/): Malicious code in chii_wallet (npm) (malicious package)
- [MAL-2025-40669](https://insights.sbomify.com/MAL-2025-40669/): Malicious code in yurt-kilo-4knh (npm) (malicious package)
- [MAL-2025-40668](https://insights.sbomify.com/MAL-2025-40668/): Malicious code in yurt-flare-hzzt (npm) (malicious package)
- [MAL-2025-40667](https://insights.sbomify.com/MAL-2025-40667/): Malicious code in yurt-alpha-vtxy (npm) (malicious package)
- [MAL-2025-40666](https://insights.sbomify.com/MAL-2025-40666/): Malicious code in yuqishi-qiuai-liaotian (npm) (malicious package)
- [MAL-2025-40665](https://insights.sbomify.com/MAL-2025-40665/): Malicious code in yupjs (npm) (malicious package)
- [MAL-2025-40664](https://insights.sbomify.com/MAL-2025-40664/): Malicious code in yup-latest (npm) (malicious package)
- [MAL-2025-40663](https://insights.sbomify.com/MAL-2025-40663/): Malicious code in yuni-moci6-breki (npm) (malicious package)
- [MAL-2025-40662](https://insights.sbomify.com/MAL-2025-40662/): Malicious code in yuni-jamblang42-sukiwir (npm) (malicious package)
- [MAL-2025-40661](https://insights.sbomify.com/MAL-2025-40661/): Malicious code in yuni-enting29-breki (npm) (malicious package)
- [MAL-2025-40660](https://insights.sbomify.com/MAL-2025-40660/): Malicious code in yumlist (npm) (malicious package)
- [MAL-2025-4066](https://insights.sbomify.com/MAL-2025-4066/): Malicious code in chains.web3 (npm) (malicious package)
- [MAL-2025-40659](https://insights.sbomify.com/MAL-2025-40659/): Malicious code in yuleibest (npm) (malicious package)
- [MAL-2025-40658](https://insights.sbomify.com/MAL-2025-40658/): Malicious code in yukiko (npm) (malicious package)
- [MAL-2025-40657](https://insights.sbomify.com/MAL-2025-40657/): Malicious code in yuizhou (npm) (malicious package)
- [MAL-2025-40656](https://insights.sbomify.com/MAL-2025-40656/): Malicious code in yuilib-css (npm) (malicious package)
- [MAL-2025-40655](https://insights.sbomify.com/MAL-2025-40655/): Malicious code in yufjaimhswlbknzx (npm) (malicious package)
- [MAL-2025-40654](https://insights.sbomify.com/MAL-2025-40654/): Malicious code in yuerec (npm) (malicious package)
- [MAL-2025-40653](https://insights.sbomify.com/MAL-2025-40653/): Malicious code in yuehui-miji (npm) (malicious package)
- [MAL-2025-40652](https://insights.sbomify.com/MAL-2025-40652/): Malicious code in yuehui-jinshu (npm) (malicious package)
- [MAL-2025-40651](https://insights.sbomify.com/MAL-2025-40651/): Malicious code in yuchengdaoren-fashu-qimen (npm) (malicious package)
- [MAL-2025-40650](https://insights.sbomify.com/MAL-2025-40650/): Malicious code in yucca-zebra-rts346-project (npm) (malicious package)
- [MAL-2025-4065](https://insights.sbomify.com/MAL-2025-4065/): Malicious code in cdn-fe (npm) (malicious package)
- [MAL-2025-40649](https://insights.sbomify.com/MAL-2025-40649/): Malicious code in yucca-yonder-gvs577-project (npm) (malicious package)
- [MAL-2025-40648](https://insights.sbomify.com/MAL-2025-40648/): Malicious code in yucca-xanadu-qfj223-project (npm) (malicious package)
- [MAL-2025-40647](https://insights.sbomify.com/MAL-2025-40647/): Malicious code in yucca-thistle-udz102-project (npm) (malicious package)
- [MAL-2025-40646](https://insights.sbomify.com/MAL-2025-40646/): Malicious code in yucca-sapphire-qci718-project (npm) (malicious package)
- [MAL-2025-40645](https://insights.sbomify.com/MAL-2025-40645/): Malicious code in yucca-pebble-lob084-project (npm) (malicious package)
- [MAL-2025-40644](https://insights.sbomify.com/MAL-2025-40644/): Malicious code in yucca-iceberg-emk089-project (npm) (malicious package)
- [MAL-2025-40643](https://insights.sbomify.com/MAL-2025-40643/): Malicious code in yucca-gorilla-dei286-project (npm) (malicious package)
- [MAL-2025-40642](https://insights.sbomify.com/MAL-2025-40642/): Malicious code in yucca-fox-xey091-project (npm) (malicious package)
- [MAL-2025-40641](https://insights.sbomify.com/MAL-2025-40641/): Malicious code in yucca-falcon-eto835-project (npm) (malicious package)
- [MAL-2025-40640](https://insights.sbomify.com/MAL-2025-40640/): Malicious code in yucca-cascade-lip026-project (npm) (malicious package)
- [MAL-2025-4064](https://insights.sbomify.com/MAL-2025-4064/): Malicious code in br2s-ui-common-utils-02 (npm) (malicious package)
- [MAL-2025-40639](https://insights.sbomify.com/MAL-2025-40639/): Malicious code in yucca-amber-bto216-project (npm) (malicious package)
- [MAL-2025-40638](https://insights.sbomify.com/MAL-2025-40638/): Malicious code in yubiauth (npm) (malicious package)
- [MAL-2025-40637](https://insights.sbomify.com/MAL-2025-40637/): Malicious code in yuanideas (npm) (malicious package)
- [MAL-2025-40636](https://insights.sbomify.com/MAL-2025-40636/): Malicious code in ytzcehqmiupxknwg (npm) (malicious package)
- [MAL-2025-40635](https://insights.sbomify.com/MAL-2025-40635/): Malicious code in yt-player-angular-v9 (npm) (malicious package)
- [MAL-2025-40634](https://insights.sbomify.com/MAL-2025-40634/): Malicious code in yskprvwjglcaizfm (npm) (malicious package)
- [MAL-2025-40633](https://insights.sbomify.com/MAL-2025-40633/): Malicious code in yscriptsg (npm) (malicious package)
- [MAL-2025-40632](https://insights.sbomify.com/MAL-2025-40632/): Malicious code in ysb-ui-libraries (npm) (malicious package)
- [MAL-2025-40631](https://insights.sbomify.com/MAL-2025-40631/): Malicious code in ysb-ui-elements (npm) (malicious package)
- [MAL-2025-40630](https://insights.sbomify.com/MAL-2025-40630/): Malicious code in ysayyzos (npm) (malicious package)
- [MAL-2025-4063](https://insights.sbomify.com/MAL-2025-4063/): Malicious code in blackfriday2 (npm) (malicious package)
- [MAL-2025-40629](https://insights.sbomify.com/MAL-2025-40629/): Malicious code in yrlozphwdjueabxi (npm) (malicious package)
- [MAL-2025-40628](https://insights.sbomify.com/MAL-2025-40628/): Malicious code in yrkebgkzfamxwhqd (npm) (malicious package)
- [MAL-2025-40627](https://insights.sbomify.com/MAL-2025-40627/): Malicious code in yqsduvkzbpcienfg (npm) (malicious package)
- [MAL-2025-40626](https://insights.sbomify.com/MAL-2025-40626/): Malicious code in yqoaih (npm) (malicious package)
- [MAL-2025-40625](https://insights.sbomify.com/MAL-2025-40625/): Malicious code in yqnjzkwvraxochbl (npm) (malicious package)
- [MAL-2025-40624](https://insights.sbomify.com/MAL-2025-40624/): Malicious code in yqlmock (npm) (malicious package)
- [MAL-2025-40623](https://insights.sbomify.com/MAL-2025-40623/): Malicious code in yptdxkfemvnuihbs (npm) (malicious package)
- [MAL-2025-40622](https://insights.sbomify.com/MAL-2025-40622/): Malicious code in ypfgtuajqirmzndb (npm) (malicious package)
- [MAL-2025-40621](https://insights.sbomify.com/MAL-2025-40621/): Malicious code in youvider (npm) (malicious package)
- [MAL-2025-40620](https://insights.sbomify.com/MAL-2025-40620/): Malicious code in yourwaifu (npm) (malicious package)
- [MAL-2025-4062](https://insights.sbomify.com/MAL-2025-4062/): Malicious code in biggy-deezer (npm) (malicious package)
- [MAL-2025-40619](https://insights.sbomify.com/MAL-2025-40619/): Malicious code in yourstory (npm) (malicious package)
- [MAL-2025-40618](https://insights.sbomify.com/MAL-2025-40618/): Malicious code in young-yoga-tjx528-project (npm) (malicious package)
- [MAL-2025-40617](https://insights.sbomify.com/MAL-2025-40617/): Malicious code in youmeng (npm) (malicious package)
- [MAL-2025-40616](https://insights.sbomify.com/MAL-2025-40616/): Malicious code in youjian-zhimi (npm) (malicious package)
- [MAL-2025-40615](https://insights.sbomify.com/MAL-2025-40615/): Malicious code in youbeegoo (npm) (malicious package)
- [MAL-2025-40614](https://insights.sbomify.com/MAL-2025-40614/): Malicious code in yotacast (npm) (malicious package)
- [MAL-2025-40613](https://insights.sbomify.com/MAL-2025-40613/): Malicious code in yosino (npm) (malicious package)
- [MAL-2025-40612](https://insights.sbomify.com/MAL-2025-40612/): Malicious code in yosemite_frd56_ppkt3_limestone (npm) (malicious package)
- [MAL-2025-40611](https://insights.sbomify.com/MAL-2025-40611/): Malicious code in yosemite_e1pr7_nx6s5_sanctuary (npm) (malicious package)
- [MAL-2025-40610](https://insights.sbomify.com/MAL-2025-40610/): Malicious code in yosemite_d9jqi_53uar_oasis (npm) (malicious package)
- [MAL-2025-4061](https://insights.sbomify.com/MAL-2025-4061/): Malicious code in axios-fingerprint (npm) (malicious package)
- [MAL-2025-40609](https://insights.sbomify.com/MAL-2025-40609/): Malicious code in yosemite_4w7j5_d7cke_infinity (npm) (malicious package)
- [MAL-2025-40608](https://insights.sbomify.com/MAL-2025-40608/): Malicious code in yongyujia-liaoyu-chuangshang (npm) (malicious package)
- [MAL-2025-40607](https://insights.sbomify.com/MAL-2025-40607/): Malicious code in yonder_szvw5_xuzh2_yacht (npm) (malicious package)
- [MAL-2025-40606](https://insights.sbomify.com/MAL-2025-40606/): Malicious code in yonder_izkpu_urrvc_quicksilver (npm) (malicious package)
- [MAL-2025-40605](https://insights.sbomify.com/MAL-2025-40605/): Malicious code in yonder_heoen_eezq2_quasar (npm) (malicious package)
- [MAL-2025-40604](https://insights.sbomify.com/MAL-2025-40604/): Malicious code in yonder_h6nzb_t3a48_zenith (npm) (malicious package)
- [MAL-2025-40603](https://insights.sbomify.com/MAL-2025-40603/): Malicious code in yonder_bw6v3_zc2n3_yarrow (npm) (malicious package)
- [MAL-2025-40602](https://insights.sbomify.com/MAL-2025-40602/): Malicious code in yonder_bemcz_zddfh_saffron (npm) (malicious package)
- [MAL-2025-40601](https://insights.sbomify.com/MAL-2025-40601/): Malicious code in yonder-zephyr-xbb066-project (npm) (malicious package)
- [MAL-2025-40600](https://insights.sbomify.com/MAL-2025-40600/): Malicious code in yonder-xp21c-59wvv-horizon-project (npm) (malicious package)
- [MAL-2025-4060](https://insights.sbomify.com/MAL-2025-4060/): Malicious code in @walmart-dataventures/my-package (npm) (malicious package)
- [MAL-2025-406](https://insights.sbomify.com/MAL-2025-406/): Malicious code in bookingcom-service (npm) (malicious package)
- [MAL-2025-40599](https://insights.sbomify.com/MAL-2025-40599/): Malicious code in yonder-vtx25-6zrj6-fable-project (npm) (malicious package)
- [MAL-2025-40598](https://insights.sbomify.com/MAL-2025-40598/): Malicious code in yonder-uranium-tez166-project (npm) (malicious package)
- [MAL-2025-40597](https://insights.sbomify.com/MAL-2025-40597/): Malicious code in yonder-tulip-mge951-project (npm) (malicious package)
- [MAL-2025-40596](https://insights.sbomify.com/MAL-2025-40596/): Malicious code in yonder-repository-sirius-whitedwarf (npm) (malicious package)
- [MAL-2025-40595](https://insights.sbomify.com/MAL-2025-40595/): Malicious code in yonder-r8wm2-inr2f-pinnacle-project (npm) (malicious package)
- [MAL-2025-40594](https://insights.sbomify.com/MAL-2025-40594/): Malicious code in yonder-p5mmd-x5dco-lucid-project (npm) (malicious package)
- [MAL-2025-40593](https://insights.sbomify.com/MAL-2025-40593/): Malicious code in yonder-opal-ilc080-project (npm) (malicious package)
- [MAL-2025-40592](https://insights.sbomify.com/MAL-2025-40592/): Malicious code in yonder-o608q-2qztm-haven-project (npm) (malicious package)
- [MAL-2025-40591](https://insights.sbomify.com/MAL-2025-40591/): Malicious code in yonder-o5g1b-i4zgx-frost-project (npm) (malicious package)
- [MAL-2025-40590](https://insights.sbomify.com/MAL-2025-40590/): Malicious code in yonder-nwifg-zpw0v-birch-project (npm) (malicious package)
- [MAL-2025-4059](https://insights.sbomify.com/MAL-2025-4059/): Malicious code in @shimosre/fingerprintjs (npm) (malicious package)
- [MAL-2025-40589](https://insights.sbomify.com/MAL-2025-40589/): Malicious code in yonder-meadow-ivp239-project (npm) (malicious package)
- [MAL-2025-40588](https://insights.sbomify.com/MAL-2025-40588/): Malicious code in yonder-lw6pd-3rlyj-zen-project (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/662/