# Vulnerabilities published in 2025 - [MAL-2025-40587](https://insights.sbomify.com/MAL-2025-40587/): Malicious code in yonder-kelp-vbl109-project (npm) (malicious package) - [MAL-2025-40586](https://insights.sbomify.com/MAL-2025-40586/): Malicious code in yonder-jewjh-p5y10-pearl-project (npm) (malicious package) - [MAL-2025-40585](https://insights.sbomify.com/MAL-2025-40585/): Malicious code in yonder-gammarayburst-luna-fornax (npm) (malicious package) - [MAL-2025-40584](https://insights.sbomify.com/MAL-2025-40584/): Malicious code in yonder-fox-kwk428-project (npm) (malicious package) - [MAL-2025-40583](https://insights.sbomify.com/MAL-2025-40583/): Malicious code in yonder-falcon-ztq069-project (npm) (malicious package) - [MAL-2025-40582](https://insights.sbomify.com/MAL-2025-40582/): Malicious code in yonder-emerald-qck740-project (npm) (malicious package) - [MAL-2025-40581](https://insights.sbomify.com/MAL-2025-40581/): Malicious code in yonder-duuey-51lci-tempest-project (npm) (malicious package) - [MAL-2025-40580](https://insights.sbomify.com/MAL-2025-40580/): Malicious code in yonder-cascade-djg019-project (npm) (malicious package) - [MAL-2025-4058](https://insights.sbomify.com/MAL-2025-4058/): Malicious code in @ducksthegoatedone/ducks (npm) (malicious package) - [MAL-2025-40579](https://insights.sbomify.com/MAL-2025-40579/): Malicious code in yonder-bunyan-commitlint-config-angular-child-process (npm) (malicious package) - [MAL-2025-40578](https://insights.sbomify.com/MAL-2025-40578/): Malicious code in yonder-6pyvy-4w3k9-whisper-project (npm) (malicious package) - [MAL-2025-40577](https://insights.sbomify.com/MAL-2025-40577/): Malicious code in yonder-35awi-4hhep-ripple-project (npm) (malicious package) - [MAL-2025-40576](https://insights.sbomify.com/MAL-2025-40576/): Malicious code in yonder-1izer-ebgar-xenith-project (npm) (malicious package) - [MAL-2025-40575](https://insights.sbomify.com/MAL-2025-40575/): Malicious code in yomoyu (npm) (malicious package) - [MAL-2025-40574](https://insights.sbomify.com/MAL-2025-40574/): Malicious code in yolk-uplift-cln277-project (npm) (malicious package) - [MAL-2025-40573](https://insights.sbomify.com/MAL-2025-40573/): Malicious code in yolhtqsbucdmraew (npm) (malicious package) - [MAL-2025-40572](https://insights.sbomify.com/MAL-2025-40572/): Malicious code in yogcla (npm) (malicious package) - [MAL-2025-40571](https://insights.sbomify.com/MAL-2025-40571/): Malicious code in yoeman-generator (npm) (malicious package) - [MAL-2025-40570](https://insights.sbomify.com/MAL-2025-40570/): Malicious code in yoda-ux (npm) (malicious package) - [MAL-2025-4057](https://insights.sbomify.com/MAL-2025-4057/): Malicious code in @confluence-classic/confluence-frontend-server (npm) (malicious package) - [MAL-2025-40569](https://insights.sbomify.com/MAL-2025-40569/): Malicious code in yobi-models (npm) (malicious package) - [MAL-2025-40568](https://insights.sbomify.com/MAL-2025-40568/): Malicious code in ynvgpfkeaswmdtbz (npm) (malicious package) - [MAL-2025-40567](https://insights.sbomify.com/MAL-2025-40567/): Malicious code in ynt45 (npm) (malicious package) - [MAL-2025-40566](https://insights.sbomify.com/MAL-2025-40566/): Malicious code in ynodejs_mod_ysar (npm) (malicious package) - [MAL-2025-40565](https://insights.sbomify.com/MAL-2025-40565/): Malicious code in ynodejs_mod_yahoo_intl (npm) (malicious package) - [MAL-2025-40564](https://insights.sbomify.com/MAL-2025-40564/): Malicious code in ynodejs_mod_tracking (npm) (malicious package) - [MAL-2025-40563](https://insights.sbomify.com/MAL-2025-40563/): Malicious code in ynodejs_mod_monitor (npm) (malicious package) - [MAL-2025-40562](https://insights.sbomify.com/MAL-2025-40562/): Malicious code in ynodejs_mod_mobilecatalog (npm) (malicious package) - [MAL-2025-40561](https://insights.sbomify.com/MAL-2025-40561/): Malicious code in ynodejs_mod_metric (npm) (malicious package) - [MAL-2025-40560](https://insights.sbomify.com/MAL-2025-40560/): Malicious code in ynodejs_mod_gzip (npm) (malicious package) - [MAL-2025-4056](https://insights.sbomify.com/MAL-2025-4056/): Malicious code in @confluence-classic/confluence-authentication (npm) (malicious package) - [MAL-2025-40559](https://insights.sbomify.com/MAL-2025-40559/): Malicious code in ynodejs_mod_geotargeting (npm) (malicious package) - [MAL-2025-40558](https://insights.sbomify.com/MAL-2025-40558/): Malicious code in ynodejs_i13n (npm) (malicious package) - [MAL-2025-40557](https://insights.sbomify.com/MAL-2025-40557/): Malicious code in yngszbhjtrkewxmv (npm) (malicious package) - [MAL-2025-40556](https://insights.sbomify.com/MAL-2025-40556/): Malicious code in ynfuxsgimchoaezk (npm) (malicious package) - [MAL-2025-40555](https://insights.sbomify.com/MAL-2025-40555/): Malicious code in ymockup (npm) (malicious package) - [MAL-2025-40554](https://insights.sbomify.com/MAL-2025-40554/): Malicious code in ymjdapkwsveoutxk (npm) (malicious package) - [MAL-2025-40553](https://insights.sbomify.com/MAL-2025-40553/): Malicious code in ymail-editor (npm) (malicious package) - [MAL-2025-40552](https://insights.sbomify.com/MAL-2025-40552/): Malicious code in ymagik (npm) (malicious package) - [MAL-2025-40551](https://insights.sbomify.com/MAL-2025-40551/): Malicious code in ylsearch (npm) (malicious package) - [MAL-2025-40550](https://insights.sbomify.com/MAL-2025-40550/): Malicious code in ykfxaezichwpuvlk (npm) (malicious package) - [MAL-2025-4055](https://insights.sbomify.com/MAL-2025-4055/): Malicious code in web3connectjs (npm) (malicious package) - [MAL-2025-40549](https://insights.sbomify.com/MAL-2025-40549/): Malicious code in ykdecuwoqmfjbvng (npm) (malicious package) - [MAL-2025-40548](https://insights.sbomify.com/MAL-2025-40548/): Malicious code in ykcdwzojbntpqfem (npm) (malicious package) - [MAL-2025-40547](https://insights.sbomify.com/MAL-2025-40547/): Malicious code in yjafwcvetzoxrlki (npm) (malicious package) - [MAL-2025-40546](https://insights.sbomify.com/MAL-2025-40546/): Malicious code in yizheyi (npm) (malicious package) - [MAL-2025-40545](https://insights.sbomify.com/MAL-2025-40545/): Malicious code in yitian-yipian-jingjixueren-erlingyiqi (npm) (malicious package) - [MAL-2025-40544](https://insights.sbomify.com/MAL-2025-40544/): Malicious code in yitian-yipian-jingjixueren-erlingyijiuq3 (npm) (malicious package) - [MAL-2025-40543](https://insights.sbomify.com/MAL-2025-40543/): Malicious code in yitian-yipian-jingjixueren-erlingyijiuq2 (npm) (malicious package) - [MAL-2025-40542](https://insights.sbomify.com/MAL-2025-40542/): Malicious code in yishi-mofa (npm) (malicious package) - [MAL-2025-40541](https://insights.sbomify.com/MAL-2025-40541/): Malicious code in yiqiange-zuiqiang-jingyou-peifang (npm) (malicious package) - [MAL-2025-40540](https://insights.sbomify.com/MAL-2025-40540/): Malicious code in yinianbo-liaoyufa (npm) (malicious package) - [MAL-2025-4054](https://insights.sbomify.com/MAL-2025-4054/): Malicious code in web3-provider-wallet (npm) (malicious package) - [MAL-2025-40539](https://insights.sbomify.com/MAL-2025-40539/): Malicious code in yingyu-xuexi-biji-erlingyiliuq1 (npm) (malicious package) - [MAL-2025-40538](https://insights.sbomify.com/MAL-2025-40538/): Malicious code in yingyu-xuexi-biji-erlingyiliulingqi-yiling (npm) (malicious package) - [MAL-2025-40537](https://insights.sbomify.com/MAL-2025-40537/): Malicious code in yingyu-shujia-erlingyijiu (npm) (malicious package) - [MAL-2025-40536](https://insights.sbomify.com/MAL-2025-40536/): Malicious code in yingyu-shujia-erlingyiba (npm) (malicious package) - [MAL-2025-40535](https://insights.sbomify.com/MAL-2025-40535/): Malicious code in yingyu-shujia-erlingerling (npm) (malicious package) - [MAL-2025-40534](https://insights.sbomify.com/MAL-2025-40534/): Malicious code in yingyu-pro-erlingeryilingqi-erlingererlingqi (npm) (malicious package) - [MAL-2025-40533](https://insights.sbomify.com/MAL-2025-40533/): Malicious code in yingyu-pro-erlingerlingyier-erlingeryilingsi (npm) (malicious package) - [MAL-2025-40532](https://insights.sbomify.com/MAL-2025-40532/): Malicious code in yingyu-meiwen-yuedu-erlingyiwulingjiu-erlingerlinglingwu (npm) (malicious package) - [MAL-2025-40531](https://insights.sbomify.com/MAL-2025-40531/): Malicious code in yingyu-meiwen-yuedu-erlingeryilingliu-erlingererlingsan (npm) (malicious package) - [MAL-2025-40530](https://insights.sbomify.com/MAL-2025-40530/): Malicious code in yingyu-meiwen-yuedu-erlingerlinglingliu-erlingeryilingwu (npm) (malicious package) - [MAL-2025-4053](https://insights.sbomify.com/MAL-2025-4053/): Malicious code in passport-approved-token (npm) (malicious package) - [MAL-2025-40529](https://insights.sbomify.com/MAL-2025-40529/): Malicious code in yingyu-meiwen-yuedu-erlingererlingsi-erlingereryiling (npm) (malicious package) - [MAL-2025-40528](https://insights.sbomify.com/MAL-2025-40528/): Malicious code in yingyu-kouyu-xiaozhen-erlingyisanlingsan-erlingyiqilingba (npm) (malicious package) - [MAL-2025-40527](https://insights.sbomify.com/MAL-2025-40527/): Malicious code in yingyu-kouyu-erlingeryilingwu (npm) (malicious package) - [MAL-2025-40526](https://insights.sbomify.com/MAL-2025-40526/): Malicious code in yingyu-kouyu-erlingeryilingsi (npm) (malicious package) - [MAL-2025-40525](https://insights.sbomify.com/MAL-2025-40525/): Malicious code in yingyu-kouyu-erlingeryilingsan (npm) (malicious package) - [MAL-2025-40524](https://insights.sbomify.com/MAL-2025-40524/): Malicious code in yingyu-kouyu-erlingeryilingqi (npm) (malicious package) - [MAL-2025-40523](https://insights.sbomify.com/MAL-2025-40523/): Malicious code in yingyu-kouyu-erlingeryilingliu (npm) (malicious package) - [MAL-2025-40522](https://insights.sbomify.com/MAL-2025-40522/): Malicious code in yingyu-kouyu-erlingeryilingjiu (npm) (malicious package) - [MAL-2025-40521](https://insights.sbomify.com/MAL-2025-40521/): Malicious code in yingyu-kouyu-erlingeryilinger (npm) (malicious package) - [MAL-2025-40520](https://insights.sbomify.com/MAL-2025-40520/): Malicious code in yingyu-dianjin-erlingyiqilingqi-erlingyiqiyier (npm) (malicious package) - [MAL-2025-4052](https://insights.sbomify.com/MAL-2025-4052/): Malicious code in hashcrypt265 (npm) (malicious package) - [MAL-2025-40519](https://insights.sbomify.com/MAL-2025-40519/): Malicious code in yingyu-dianjin-erlingyiliuyiyi-erlingyiqilingliu (npm) (malicious package) - [MAL-2025-40518](https://insights.sbomify.com/MAL-2025-40518/): Malicious code in yingyu-dianjin-erlingyijiulingba-erlingerlinglinger (npm) (malicious package) - [MAL-2025-40517](https://insights.sbomify.com/MAL-2025-40517/): Malicious code in yingyu-dianjin-erlingyibayier-erlingyijiulingqi (npm) (malicious package) - [MAL-2025-40516](https://insights.sbomify.com/MAL-2025-40516/): Malicious code in yingyu-dianjin-erlingyibalingyi-erlingyibalingsi (npm) (malicious package) - [MAL-2025-40515](https://insights.sbomify.com/MAL-2025-40515/): Malicious code in yingyu-dianjin-erlingyibalingwu-erlingyibayiyi (npm) (malicious package) - [MAL-2025-40514](https://insights.sbomify.com/MAL-2025-40514/): Malicious code in yingyu-dianjin-erlingeryilingyi-erlingeryilingqi (npm) (malicious package) - [MAL-2025-40513](https://insights.sbomify.com/MAL-2025-40513/): Malicious code in yingwen-yudu-erlingyisi-erlingyiliu (npm) (malicious package) - [MAL-2025-40512](https://insights.sbomify.com/MAL-2025-40512/): Malicious code in yingwen-yudu-erlingyiqi-erlingyiba (npm) (malicious package) - [MAL-2025-40511](https://insights.sbomify.com/MAL-2025-40511/): Malicious code in yinflect (npm) (malicious package) - [MAL-2025-40510](https://insights.sbomify.com/MAL-2025-40510/): Malicious code in yindu-zhanxingxue-rumen (npm) (malicious package) - [MAL-2025-4051](https://insights.sbomify.com/MAL-2025-4051/): Malicious code in evm-validator (npm) (malicious package) - [MAL-2025-40509](https://insights.sbomify.com/MAL-2025-40509/): Malicious code in yildun-materialize-publish-cordelia (npm) (malicious package) - [MAL-2025-40508](https://insights.sbomify.com/MAL-2025-40508/): Malicious code in yildun-cryonics-sass-loader-palynology (npm) (malicious package) - [MAL-2025-40507](https://insights.sbomify.com/MAL-2025-40507/): Malicious code in yijiaren (npm) (malicious package) - [MAL-2025-40506](https://insights.sbomify.com/MAL-2025-40506/): Malicious code in yiersansi-genshang-dajiade-jiezou (npm) (malicious package) - [MAL-2025-40505](https://insights.sbomify.com/MAL-2025-40505/): Malicious code in yibeizi-huozai-chenggongli (npm) (malicious package) - [MAL-2025-40504](https://insights.sbomify.com/MAL-2025-40504/): Malicious code in yhuzqtlbnkfkomxw (npm) (malicious package) - [MAL-2025-40503](https://insights.sbomify.com/MAL-2025-40503/): Malicious code in ygunoil-pro-gantt (npm) (malicious package) - [MAL-2025-40502](https://insights.sbomify.com/MAL-2025-40502/): Malicious code in ygtgby (npm) (malicious package) - [MAL-2025-40501](https://insights.sbomify.com/MAL-2025-40501/): Malicious code in yglacmphnbvotkrs (npm) (malicious package) - [MAL-2025-40500](https://insights.sbomify.com/MAL-2025-40500/): Malicious code in ygjd41 (npm) (malicious package) - [MAL-2025-4050](https://insights.sbomify.com/MAL-2025-4050/): Malicious code in discord-clients (npm) (malicious package) - [MAL-2025-405](https://insights.sbomify.com/MAL-2025-405/): Malicious code in bookingcom-sdk (npm) (malicious package) - [MAL-2025-40499](https://insights.sbomify.com/MAL-2025-40499/): Malicious code in yghios (npm) (malicious package) - [MAL-2025-40498](https://insights.sbomify.com/MAL-2025-40498/): Malicious code in yfsoncivjqgeurlb (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/663/