# Vulnerabilities published in 2025 - [MAL-2025-40406](https://insights.sbomify.com/MAL-2025-40406/): Malicious code in yearling-jalapeno-67dy (npm) (malicious package) - [MAL-2025-40405](https://insights.sbomify.com/MAL-2025-40405/): Malicious code in yearling-ivy-ekiv (npm) (malicious package) - [MAL-2025-40404](https://insights.sbomify.com/MAL-2025-40404/): Malicious code in yearling-fig-9r5t (npm) (malicious package) - [MAL-2025-40403](https://insights.sbomify.com/MAL-2025-40403/): Malicious code in yearling-comet-z70q (npm) (malicious package) - [MAL-2025-40402](https://insights.sbomify.com/MAL-2025-40402/): Malicious code in yearling-bicycle-vpx5 (npm) (malicious package) - [MAL-2025-40401](https://insights.sbomify.com/MAL-2025-40401/): Malicious code in ydtviguxcqwprkfk (npm) (malicious package) - [MAL-2025-40400](https://insights.sbomify.com/MAL-2025-40400/): Malicious code in ycsrgmnhfiuqpwoj (npm) (malicious package) - [MAL-2025-4040](https://insights.sbomify.com/MAL-2025-4040/): Malicious code in web3author (npm) (malicious package) - [MAL-2025-404](https://insights.sbomify.com/MAL-2025-404/): Malicious code in bookingcom-payment (npm) (malicious package) - [MAL-2025-40399](https://insights.sbomify.com/MAL-2025-40399/): Malicious code in yckfpjimxeuqrszh (npm) (malicious package) - [MAL-2025-40398](https://insights.sbomify.com/MAL-2025-40398/): Malicious code in yc0qdv (npm) (malicious package) - [MAL-2025-40397](https://insights.sbomify.com/MAL-2025-40397/): Malicious code in yboxkcpflwegiamu (npm) (malicious package) - [MAL-2025-40396](https://insights.sbomify.com/MAL-2025-40396/): Malicious code in ybhi7x (npm) (malicious package) - [MAL-2025-40395](https://insights.sbomify.com/MAL-2025-40395/): Malicious code in ybfivwkszklagxum (npm) (malicious package) - [MAL-2025-40394](https://insights.sbomify.com/MAL-2025-40394/): Malicious code in ybar (npm) (malicious package) - [MAL-2025-40393](https://insights.sbomify.com/MAL-2025-40393/): Malicious code in yaysay (npm) (malicious package) - [MAL-2025-40392](https://insights.sbomify.com/MAL-2025-40392/): Malicious code in yaxis (npm) (malicious package) - [MAL-2025-40391](https://insights.sbomify.com/MAL-2025-40391/): Malicious code in yawn-xerus-een656-project (npm) (malicious package) - [MAL-2025-40390](https://insights.sbomify.com/MAL-2025-40390/): Malicious code in yawn-whale-cli836-project (npm) (malicious package) - [MAL-2025-4039](https://insights.sbomify.com/MAL-2025-4039/): Malicious code in wdpr-ra-javascript-native-bridge (npm) (malicious package) - [MAL-2025-40389](https://insights.sbomify.com/MAL-2025-40389/): Malicious code in yawn-vista-xjn856-project (npm) (malicious package) - [MAL-2025-40388](https://insights.sbomify.com/MAL-2025-40388/): Malicious code in yawn-vista-fji736-project (npm) (malicious package) - [MAL-2025-40387](https://insights.sbomify.com/MAL-2025-40387/): Malicious code in yawn-tundra-kiy029-project (npm) (malicious package) - [MAL-2025-40386](https://insights.sbomify.com/MAL-2025-40386/): Malicious code in yawn-thunder-vsg493-project (npm) (malicious package) - [MAL-2025-40385](https://insights.sbomify.com/MAL-2025-40385/): Malicious code in yawn-swan-yjs673-project (npm) (malicious package) - [MAL-2025-40384](https://insights.sbomify.com/MAL-2025-40384/): Malicious code in yawn-pinnacle-nde669-project (npm) (malicious package) - [MAL-2025-40383](https://insights.sbomify.com/MAL-2025-40383/): Malicious code in yawn-peony-fnd488-project (npm) (malicious package) - [MAL-2025-40382](https://insights.sbomify.com/MAL-2025-40382/): Malicious code in yawn-orangutan-apt622-project (npm) (malicious package) - [MAL-2025-40381](https://insights.sbomify.com/MAL-2025-40381/): Malicious code in yawn-octopus-vuz161-project (npm) (malicious package) - [MAL-2025-40380](https://insights.sbomify.com/MAL-2025-40380/): Malicious code in yawn-nature-jri757-project (npm) (malicious package) - [MAL-2025-4038](https://insights.sbomify.com/MAL-2025-4038/): Malicious code in wal-eth (npm) (malicious package) - [MAL-2025-40379](https://insights.sbomify.com/MAL-2025-40379/): Malicious code in yawn-jellyfish-zof191-project (npm) (malicious package) - [MAL-2025-40378](https://insights.sbomify.com/MAL-2025-40378/): Malicious code in yawn-falcon-cpl450-project (npm) (malicious package) - [MAL-2025-40377](https://insights.sbomify.com/MAL-2025-40377/): Malicious code in yawn-dandelion-ppb506-project (npm) (malicious package) - [MAL-2025-40376](https://insights.sbomify.com/MAL-2025-40376/): Malicious code in yawn-cloud-llq147-project (npm) (malicious package) - [MAL-2025-40375](https://insights.sbomify.com/MAL-2025-40375/): Malicious code in yawn-caravan-ybw965-project (npm) (malicious package) - [MAL-2025-40374](https://insights.sbomify.com/MAL-2025-40374/): Malicious code in yawn-bonfire-raf904-project (npm) (malicious package) - [MAL-2025-40373](https://insights.sbomify.com/MAL-2025-40373/): Malicious code in yavovo (npm) (malicious package) - [MAL-2025-40372](https://insights.sbomify.com/MAL-2025-40372/): Malicious code in yauser (npm) (malicious package) - [MAL-2025-40371](https://insights.sbomify.com/MAL-2025-40371/): Malicious code in yausbir (npm) (malicious package) - [MAL-2025-40370](https://insights.sbomify.com/MAL-2025-40370/): Malicious code in yasmkit (npm) (malicious package) - [MAL-2025-4037](https://insights.sbomify.com/MAL-2025-4037/): Malicious code in vue-dummyy (npm) (malicious package) - [MAL-2025-40369](https://insights.sbomify.com/MAL-2025-40369/): Malicious code in yaslouhmixzqpvkd (npm) (malicious package) - [MAL-2025-40368](https://insights.sbomify.com/MAL-2025-40368/): Malicious code in yaslcxmozepvthiw (npm) (malicious package) - [MAL-2025-40367](https://insights.sbomify.com/MAL-2025-40367/): Malicious code in yashovenu (npm) (malicious package) - [MAL-2025-40366](https://insights.sbomify.com/MAL-2025-40366/): Malicious code in yasexml (npm) (malicious package) - [MAL-2025-40365](https://insights.sbomify.com/MAL-2025-40365/): Malicious code in yarrow_xs4fk_qvueg_jade (npm) (malicious package) - [MAL-2025-40364](https://insights.sbomify.com/MAL-2025-40364/): Malicious code in yarrow_kz9d8_1a1uw_verdant (npm) (malicious package) - [MAL-2025-40363](https://insights.sbomify.com/MAL-2025-40363/): Malicious code in yarrow-zenith-vkd694-project (npm) (malicious package) - [MAL-2025-40362](https://insights.sbomify.com/MAL-2025-40362/): Malicious code in yarrow-z6anx-j6f03-lunar-project (npm) (malicious package) - [MAL-2025-40361](https://insights.sbomify.com/MAL-2025-40361/): Malicious code in yarrow-y3bv4-4ki82-unity-project (npm) (malicious package) - [MAL-2025-40360](https://insights.sbomify.com/MAL-2025-40360/): Malicious code in yarrow-xxu9p-9b3bx-valley-project (npm) (malicious package) - [MAL-2025-4036](https://insights.sbomify.com/MAL-2025-4036/): Malicious code in vue-dev-serverr (npm) (malicious package) - [MAL-2025-40359](https://insights.sbomify.com/MAL-2025-40359/): Malicious code in yarrow-ge4ow-r5e2a-solace-project (npm) (malicious package) - [MAL-2025-40358](https://insights.sbomify.com/MAL-2025-40358/): Malicious code in yarrow-e9r8h-iwvi4-yonder-project (npm) (malicious package) - [MAL-2025-40357](https://insights.sbomify.com/MAL-2025-40357/): Malicious code in yarrow-e0xwg-4aewz-terra-project (npm) (malicious package) - [MAL-2025-40356](https://insights.sbomify.com/MAL-2025-40356/): Malicious code in yarrow-6dfe0-jibm7-frost-project (npm) (malicious package) - [MAL-2025-40355](https://insights.sbomify.com/MAL-2025-40355/): Malicious code in yarn_z3iz0_wfi9x_iris (npm) (malicious package) - [MAL-2025-40354](https://insights.sbomify.com/MAL-2025-40354/): Malicious code in yarn_brb32_icind_echo (npm) (malicious package) - [MAL-2025-40353](https://insights.sbomify.com/MAL-2025-40353/): Malicious code in yarn_6zomo_6iwd6_moon (npm) (malicious package) - [MAL-2025-40352](https://insights.sbomify.com/MAL-2025-40352/): Malicious code in yarn_34mpj_w2gm6_fountain (npm) (malicious package) - [MAL-2025-40351](https://insights.sbomify.com/MAL-2025-40351/): Malicious code in yarn.lock (npm) (malicious package) - [MAL-2025-40350](https://insights.sbomify.com/MAL-2025-40350/): Malicious code in yarn-y2b1g-dxb20-yew-project (npm) (malicious package) - [MAL-2025-4035](https://insights.sbomify.com/MAL-2025-4035/): Malicious code in vue-bit (npm) (malicious package) - [MAL-2025-40349](https://insights.sbomify.com/MAL-2025-40349/): Malicious code in yarn-wm4ui-8zg7q-keystone-project (npm) (malicious package) - [MAL-2025-40348](https://insights.sbomify.com/MAL-2025-40348/): Malicious code in yarn-vz9hb-s0fiy-prism-project (npm) (malicious package) - [MAL-2025-40347](https://insights.sbomify.com/MAL-2025-40347/): Malicious code in yarn-lfou3-l8twh-vista-project (npm) (malicious package) - [MAL-2025-40346](https://insights.sbomify.com/MAL-2025-40346/): Malicious code in yarn-gjk0c-ahopg-orbit-project (npm) (malicious package) - [MAL-2025-40345](https://insights.sbomify.com/MAL-2025-40345/): Malicious code in yarn-frx82-ytg1p-verdure-project (npm) (malicious package) - [MAL-2025-40344](https://insights.sbomify.com/MAL-2025-40344/): Malicious code in yarn-design-system-swiper (npm) (malicious package) - [MAL-2025-40343](https://insights.sbomify.com/MAL-2025-40343/): Malicious code in yarn-design-system-react-components-ce-c (npm) (malicious package) - [MAL-2025-40342](https://insights.sbomify.com/MAL-2025-40342/): Malicious code in yarn-design-system-react-components (npm) (malicious package) - [MAL-2025-40341](https://insights.sbomify.com/MAL-2025-40341/): Malicious code in yarn-design-system-rc-slider (npm) (malicious package) - [MAL-2025-40340](https://insights.sbomify.com/MAL-2025-40340/): Malicious code in yarn-design-system-jsdoc-template (npm) (malicious package) - [MAL-2025-4034](https://insights.sbomify.com/MAL-2025-4034/): Malicious code in vtex.google-tag-manager (npm) (malicious package) - [MAL-2025-40339](https://insights.sbomify.com/MAL-2025-40339/): Malicious code in yarn-design-system-icons-ce-c (npm) (malicious package) - [MAL-2025-40338](https://insights.sbomify.com/MAL-2025-40338/): Malicious code in yarn-design-system-icons (npm) (malicious package) - [MAL-2025-40337](https://insights.sbomify.com/MAL-2025-40337/): Malicious code in yarn-design-system-ag-grid (npm) (malicious package) - [MAL-2025-40336](https://insights.sbomify.com/MAL-2025-40336/): Malicious code in yarn-design-system (npm) (malicious package) - [MAL-2025-40335](https://insights.sbomify.com/MAL-2025-40335/): Malicious code in yarn-cling (npm) (malicious package) - [MAL-2025-40334](https://insights.sbomify.com/MAL-2025-40334/): Malicious code in yarn-8op22-scrzd-lucid-project (npm) (malicious package) - [MAL-2025-40333](https://insights.sbomify.com/MAL-2025-40333/): Malicious code in yard-zenith-gvx003-project (npm) (malicious package) - [MAL-2025-40332](https://insights.sbomify.com/MAL-2025-40332/): Malicious code in yard-xerox-qpi358-project (npm) (malicious package) - [MAL-2025-40331](https://insights.sbomify.com/MAL-2025-40331/): Malicious code in yard-xenon-ble658-project (npm) (malicious package) - [MAL-2025-40330](https://insights.sbomify.com/MAL-2025-40330/): Malicious code in yard-willow-qyi157-project (npm) (malicious package) - [MAL-2025-4033](https://insights.sbomify.com/MAL-2025-4033/): Malicious code in vee-validate-latest (npm) (malicious package) - [MAL-2025-40329](https://insights.sbomify.com/MAL-2025-40329/): Malicious code in yard-topaz-vev495-project (npm) (malicious package) - [MAL-2025-40328](https://insights.sbomify.com/MAL-2025-40328/): Malicious code in yard-sapphire-maj313-project (npm) (malicious package) - [MAL-2025-40327](https://insights.sbomify.com/MAL-2025-40327/): Malicious code in yard-river-drr775-project (npm) (malicious package) - [MAL-2025-40326](https://insights.sbomify.com/MAL-2025-40326/): Malicious code in yard-quill-gya502-project (npm) (malicious package) - [MAL-2025-40325](https://insights.sbomify.com/MAL-2025-40325/): Malicious code in yard-jasmine-aud826-project (npm) (malicious package) - [MAL-2025-40324](https://insights.sbomify.com/MAL-2025-40324/): Malicious code in yard-glacier-cok205-project (npm) (malicious package) - [MAL-2025-40323](https://insights.sbomify.com/MAL-2025-40323/): Malicious code in yard-elephant-emr032-project (npm) (malicious package) - [MAL-2025-40322](https://insights.sbomify.com/MAL-2025-40322/): Malicious code in yard-bonfire-ccl955-project (npm) (malicious package) - [MAL-2025-40321](https://insights.sbomify.com/MAL-2025-40321/): Malicious code in yaqpbzwrtfckdlis (npm) (malicious package) - [MAL-2025-40320](https://insights.sbomify.com/MAL-2025-40320/): Malicious code in yappleya (npm) (malicious package) - [MAL-2025-4032](https://insights.sbomify.com/MAL-2025-4032/): Malicious code in valdatr (npm) (malicious package) - [MAL-2025-40319](https://insights.sbomify.com/MAL-2025-40319/): Malicious code in yapgdkoqjecnrhkz (npm) (malicious package) - [MAL-2025-40318](https://insights.sbomify.com/MAL-2025-40318/): Malicious code in yapaint (npm) (malicious package) - [MAL-2025-40317](https://insights.sbomify.com/MAL-2025-40317/): Malicious code in yaocao-yumofa (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/665/