# Vulnerabilities published in 2025


- [MAL-2025-40497](https://insights.sbomify.com/MAL-2025-40497/): Malicious code in yfm-transform (npm) (malicious package)
- [MAL-2025-40496](https://insights.sbomify.com/MAL-2025-40496/): Malicious code in yext (npm) (malicious package)
- [MAL-2025-40495](https://insights.sbomify.com/MAL-2025-40495/): Malicious code in yew_ym5uv_k18kk_solstice (npm) (malicious package)
- [MAL-2025-40494](https://insights.sbomify.com/MAL-2025-40494/): Malicious code in yew_xmrdr_7vsu0_glow (npm) (malicious package)
- [MAL-2025-40493](https://insights.sbomify.com/MAL-2025-40493/): Malicious code in yew_cqxq9_1m4lc_snow (npm) (malicious package)
- [MAL-2025-40492](https://insights.sbomify.com/MAL-2025-40492/): Malicious code in yew_a4ijv_syt0j_kale (npm) (malicious package)
- [MAL-2025-40491](https://insights.sbomify.com/MAL-2025-40491/): Malicious code in yew-parsnip-vzie (npm) (malicious package)
- [MAL-2025-40490](https://insights.sbomify.com/MAL-2025-40490/): Malicious code in yew-parsnip-5uj2 (npm) (malicious package)
- [MAL-2025-4049](https://insights.sbomify.com/MAL-2025-4049/): Malicious code in firewall-node (npm) (malicious package)
- [MAL-2025-40489](https://insights.sbomify.com/MAL-2025-40489/): Malicious code in yew-ntl07-6kz99-emerald-project (npm) (malicious package)
- [MAL-2025-40488](https://insights.sbomify.com/MAL-2025-40488/): Malicious code in yew-n31yx-vve74-grove-project (npm) (malicious package)
- [MAL-2025-40487](https://insights.sbomify.com/MAL-2025-40487/): Malicious code in yew-mbd6w-d8jgw-ocean-project (npm) (malicious package)
- [MAL-2025-40486](https://insights.sbomify.com/MAL-2025-40486/): Malicious code in yew-lion-prhl (npm) (malicious package)
- [MAL-2025-40485](https://insights.sbomify.com/MAL-2025-40485/): Malicious code in yew-jungle-w8ke (npm) (malicious package)
- [MAL-2025-40484](https://insights.sbomify.com/MAL-2025-40484/): Malicious code in yew-2l9po-84oxx-ripple-project (npm) (malicious package)
- [MAL-2025-40483](https://insights.sbomify.com/MAL-2025-40483/): Malicious code in yeti-yonder-ssy506-project (npm) (malicious package)
- [MAL-2025-40482](https://insights.sbomify.com/MAL-2025-40482/): Malicious code in yeti-yellow-dah398-project (npm) (malicious package)
- [MAL-2025-40481](https://insights.sbomify.com/MAL-2025-40481/): Malicious code in yeti-yawn-tuu230-project (npm) (malicious package)
- [MAL-2025-40480](https://insights.sbomify.com/MAL-2025-40480/): Malicious code in yeti-xj9id-t33hg-juniper-project (npm) (malicious package)
- [MAL-2025-4048](https://insights.sbomify.com/MAL-2025-4048/): Malicious code in coreapi-export-template (npm) (malicious package)
- [MAL-2025-40479](https://insights.sbomify.com/MAL-2025-40479/): Malicious code in yeti-xerox-afe759-project (npm) (malicious package)
- [MAL-2025-40478](https://insights.sbomify.com/MAL-2025-40478/): Malicious code in yeti-wisp-oyb043-project (npm) (malicious package)
- [MAL-2025-40477](https://insights.sbomify.com/MAL-2025-40477/): Malicious code in yeti-wave-wtx381-project (npm) (malicious package)
- [MAL-2025-40476](https://insights.sbomify.com/MAL-2025-40476/): Malicious code in yeti-tide-whe735-project (npm) (malicious package)
- [MAL-2025-40475](https://insights.sbomify.com/MAL-2025-40475/): Malicious code in yeti-reef-sku061-project (npm) (malicious package)
- [MAL-2025-40474](https://insights.sbomify.com/MAL-2025-40474/): Malicious code in yeti-orchid-izc173-project (npm) (malicious package)
- [MAL-2025-40473](https://insights.sbomify.com/MAL-2025-40473/): Malicious code in yeti-opal-fxf548-project (npm) (malicious package)
- [MAL-2025-40472](https://insights.sbomify.com/MAL-2025-40472/): Malicious code in yeti-nectar-cny089-project (npm) (malicious package)
- [MAL-2025-40471](https://insights.sbomify.com/MAL-2025-40471/): Malicious code in yeti-mountain-jzv065-project (npm) (malicious package)
- [MAL-2025-40470](https://insights.sbomify.com/MAL-2025-40470/): Malicious code in yeti-moon-lyf042-project (npm) (malicious package)
- [MAL-2025-4047](https://insights.sbomify.com/MAL-2025-4047/): Malicious code in wallet1-options (npm) (malicious package)
- [MAL-2025-40469](https://insights.sbomify.com/MAL-2025-40469/): Malicious code in yeti-i22dp-5h44y-ripple-project (npm) (malicious package)
- [MAL-2025-40468](https://insights.sbomify.com/MAL-2025-40468/): Malicious code in yeti-hammock-zdd498-project (npm) (malicious package)
- [MAL-2025-40467](https://insights.sbomify.com/MAL-2025-40467/): Malicious code in yeti-h4tdi-iaf6v-uplift-project (npm) (malicious package)
- [MAL-2025-40466](https://insights.sbomify.com/MAL-2025-40466/): Malicious code in yeti-galaxy-adw756-project (npm) (malicious package)
- [MAL-2025-40465](https://insights.sbomify.com/MAL-2025-40465/): Malicious code in yeti-fjord-ess486-project (npm) (malicious package)
- [MAL-2025-40464](https://insights.sbomify.com/MAL-2025-40464/): Malicious code in yeti-delta-cfj239-project (npm) (malicious package)
- [MAL-2025-40463](https://insights.sbomify.com/MAL-2025-40463/): Malicious code in yeti-br9u4-hfery-ivy-project (npm) (malicious package)
- [MAL-2025-40462](https://insights.sbomify.com/MAL-2025-40462/): Malicious code in yeti-amber-ugd443-project (npm) (malicious package)
- [MAL-2025-40461](https://insights.sbomify.com/MAL-2025-40461/): Malicious code in yet-another-bmp280 (npm) (malicious package)
- [MAL-2025-40460](https://insights.sbomify.com/MAL-2025-40460/): Malicious code in yestattoo (npm) (malicious package)
- [MAL-2025-4046](https://insights.sbomify.com/MAL-2025-4046/): Malicious code in trusted-firmware-a (npm) (malicious package)
- [MAL-2025-40459](https://insights.sbomify.com/MAL-2025-40459/): Malicious code in yeshas (npm) (malicious package)
- [MAL-2025-40458](https://insights.sbomify.com/MAL-2025-40458/): Malicious code in yepiaoran-daliuren-jiangyi-zhong (npm) (malicious package)
- [MAL-2025-40457](https://insights.sbomify.com/MAL-2025-40457/): Malicious code in yeoman-genrator (npm) (malicious package)
- [MAL-2025-40456](https://insights.sbomify.com/MAL-2025-40456/): Malicious code in yelpxonjon (npm) (malicious package)
- [MAL-2025-40455](https://insights.sbomify.com/MAL-2025-40455/): Malicious code in yelpxon (npm) (malicious package)
- [MAL-2025-40454](https://insights.sbomify.com/MAL-2025-40454/): Malicious code in yelpplay (npm) (malicious package)
- [MAL-2025-40453](https://insights.sbomify.com/MAL-2025-40453/): Malicious code in yelpjon (npm) (malicious package)
- [MAL-2025-40452](https://insights.sbomify.com/MAL-2025-40452/): Malicious code in yelphelp (npm) (malicious package)
- [MAL-2025-40451](https://insights.sbomify.com/MAL-2025-40451/): Malicious code in yelpbek (npm) (malicious package)
- [MAL-2025-40450](https://insights.sbomify.com/MAL-2025-40450/): Malicious code in yelp_sitrep (npm) (malicious package)
- [MAL-2025-4045](https://insights.sbomify.com/MAL-2025-4045/): Malicious code in service-catalog-copilot (npm) (malicious package)
- [MAL-2025-40449](https://insights.sbomify.com/MAL-2025-40449/): Malicious code in yelp_search_suggest (npm) (malicious package)
- [MAL-2025-40448](https://insights.sbomify.com/MAL-2025-40448/): Malicious code in yelp_google_analytics (npm) (malicious package)
- [MAL-2025-40447](https://insights.sbomify.com/MAL-2025-40447/): Malicious code in yelp-style-utils (npm) (malicious package)
- [MAL-2025-40446](https://insights.sbomify.com/MAL-2025-40446/): Malicious code in yelp-schema-design (npm) (malicious package)
- [MAL-2025-40445](https://insights.sbomify.com/MAL-2025-40445/): Malicious code in yelp-react-component-typography (npm) (malicious package)
- [MAL-2025-40444](https://insights.sbomify.com/MAL-2025-40444/): Malicious code in yelp-react-component-tooltip (npm) (malicious package)
- [MAL-2025-40443](https://insights.sbomify.com/MAL-2025-40443/): Malicious code in yelp-react-component-button (npm) (malicious package)
- [MAL-2025-40442](https://insights.sbomify.com/MAL-2025-40442/): Malicious code in yelp-js-infra (npm) (malicious package)
- [MAL-2025-40441](https://insights.sbomify.com/MAL-2025-40441/): Malicious code in yelp-bunsen-logger-js (npm) (malicious package)
- [MAL-2025-40440](https://insights.sbomify.com/MAL-2025-40440/): Malicious code in yelp-biz-perf-utils (npm) (malicious package)
- [MAL-2025-4044](https://insights.sbomify.com/MAL-2025-4044/): Malicious code in ort-web-template (npm) (malicious package)
- [MAL-2025-40439](https://insights.sbomify.com/MAL-2025-40439/): Malicious code in yellow_wj9am_rgchu_bluebird (npm) (malicious package)
- [MAL-2025-40438](https://insights.sbomify.com/MAL-2025-40438/): Malicious code in yellow_rfc28_az4zl_island (npm) (malicious package)
- [MAL-2025-40437](https://insights.sbomify.com/MAL-2025-40437/): Malicious code in yellow_k0y8j_xyhaq_jungle (npm) (malicious package)
- [MAL-2025-40436](https://insights.sbomify.com/MAL-2025-40436/): Malicious code in yellow_forwh_e8xsn_velocity (npm) (malicious package)
- [MAL-2025-40435](https://insights.sbomify.com/MAL-2025-40435/): Malicious code in yellow_bcysk_dzghg_joy (npm) (malicious package)
- [MAL-2025-40434](https://insights.sbomify.com/MAL-2025-40434/): Malicious code in yellow_4xeq2_u4gch_dawn (npm) (malicious package)
- [MAL-2025-40433](https://insights.sbomify.com/MAL-2025-40433/): Malicious code in yellow-zxw8v-jbb9z-verdure-project (npm) (malicious package)
- [MAL-2025-40432](https://insights.sbomify.com/MAL-2025-40432/): Malicious code in yellow-zebra-kwk334-project (npm) (malicious package)
- [MAL-2025-40431](https://insights.sbomify.com/MAL-2025-40431/): Malicious code in yellow-xylophone-vjd223-project (npm) (malicious package)
- [MAL-2025-40430](https://insights.sbomify.com/MAL-2025-40430/): Malicious code in yellow-xdiph-b7oav-zephyr-project (npm) (malicious package)
- [MAL-2025-4043](https://insights.sbomify.com/MAL-2025-4043/): Malicious code in fireblocks-netlink-v2-api-validator (npm) (malicious package)
- [MAL-2025-40429](https://insights.sbomify.com/MAL-2025-40429/): Malicious code in yellow-violet-hgt811-project (npm) (malicious package)
- [MAL-2025-40428](https://insights.sbomify.com/MAL-2025-40428/): Malicious code in yellow-spruce-zyn931-project (npm) (malicious package)
- [MAL-2025-40427](https://insights.sbomify.com/MAL-2025-40427/): Malicious code in yellow-opal-gxh785-project (npm) (malicious package)
- [MAL-2025-40426](https://insights.sbomify.com/MAL-2025-40426/): Malicious code in yellow-opal-eiv573-project (npm) (malicious package)
- [MAL-2025-40425](https://insights.sbomify.com/MAL-2025-40425/): Malicious code in yellow-leopard-rve815-project (npm) (malicious package)
- [MAL-2025-40424](https://insights.sbomify.com/MAL-2025-40424/): Malicious code in yellow-lagoon-wnb610-project (npm) (malicious package)
- [MAL-2025-40423](https://insights.sbomify.com/MAL-2025-40423/): Malicious code in yellow-jade-jtb741-project (npm) (malicious package)
- [MAL-2025-40422](https://insights.sbomify.com/MAL-2025-40422/): Malicious code in yellow-glade-sgx097-project (npm) (malicious package)
- [MAL-2025-40421](https://insights.sbomify.com/MAL-2025-40421/): Malicious code in yellow-glacier-zej889-project (npm) (malicious package)
- [MAL-2025-40420](https://insights.sbomify.com/MAL-2025-40420/): Malicious code in yellow-forest-dcl954-project (npm) (malicious package)
- [MAL-2025-4042](https://insights.sbomify.com/MAL-2025-4042/): Malicious code in conventional-changelog-tf-a (npm) (malicious package)
- [MAL-2025-40419](https://insights.sbomify.com/MAL-2025-40419/): Malicious code in yellow-fjord-fki281-project (npm) (malicious package)
- [MAL-2025-40418](https://insights.sbomify.com/MAL-2025-40418/): Malicious code in yellow-dragon-ekq819-project (npm) (malicious package)
- [MAL-2025-40417](https://insights.sbomify.com/MAL-2025-40417/): Malicious code in yellow-dove-bfc815-project (npm) (malicious package)
- [MAL-2025-40416](https://insights.sbomify.com/MAL-2025-40416/): Malicious code in yellow-4gc0j-stham-wander-project (npm) (malicious package)
- [MAL-2025-40415](https://insights.sbomify.com/MAL-2025-40415/): Malicious code in yellocafe (npm) (malicious package)
- [MAL-2025-40414](https://insights.sbomify.com/MAL-2025-40414/): Malicious code in yellio (npm) (malicious package)
- [MAL-2025-40413](https://insights.sbomify.com/MAL-2025-40413/): Malicious code in yeli-xinlixue (npm) (malicious package)
- [MAL-2025-40412](https://insights.sbomify.com/MAL-2025-40412/): Malicious code in yecuahjqzkxliwgb (npm) (malicious package)
- [MAL-2025-40411](https://insights.sbomify.com/MAL-2025-40411/): Malicious code in yearning-verdant-jbs005-project (npm) (malicious package)
- [MAL-2025-40410](https://insights.sbomify.com/MAL-2025-40410/): Malicious code in yearning-uplift-vgv274-project (npm) (malicious package)
- [MAL-2025-4041](https://insights.sbomify.com/MAL-2025-4041/): Malicious code in @abb-ux/commonux-web-components (npm) (malicious package)
- [MAL-2025-40409](https://insights.sbomify.com/MAL-2025-40409/): Malicious code in yearn-illume-hpg276-project (npm) (malicious package)
- [MAL-2025-40408](https://insights.sbomify.com/MAL-2025-40408/): Malicious code in yearling-violet-aq0c (npm) (malicious package)
- [MAL-2025-40407](https://insights.sbomify.com/MAL-2025-40407/): Malicious code in yearling-spinach-0lfw (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/664/