# Vulnerabilities published in 2025


- [MAL-2025-40316](https://insights.sbomify.com/MAL-2025-40316/): Malicious code in yaobian-shenduan-fengshui-miben (npm) (malicious package)
- [MAL-2025-40315](https://insights.sbomify.com/MAL-2025-40315/): Malicious code in yanye-riyu-erlingyijiuyiyi-erlingerlinglingwu (npm) (malicious package)
- [MAL-2025-40314](https://insights.sbomify.com/MAL-2025-40314/): Malicious code in yanye-riyu-erlingyibayier-erlingyijiuyiling (npm) (malicious package)
- [MAL-2025-40313](https://insights.sbomify.com/MAL-2025-40313/): Malicious code in yanye-riyu-erlingeryiyier-erlingererlingsan (npm) (malicious package)
- [MAL-2025-40312](https://insights.sbomify.com/MAL-2025-40312/): Malicious code in yanye-riyu-erlingeryilingsi-erlingeryilingqi (npm) (malicious package)
- [MAL-2025-40311](https://insights.sbomify.com/MAL-2025-40311/): Malicious code in yanye-riyu-erlingeryilingba-erlingeryiyiyi (npm) (malicious package)
- [MAL-2025-40310](https://insights.sbomify.com/MAL-2025-40310/): Malicious code in yanye-riyu-erlingerlingyiyi-erlingeryilingsan (npm) (malicious package)
- [MAL-2025-4031](https://insights.sbomify.com/MAL-2025-4031/): Malicious code in untitled_flourish_template (npm) (malicious package)
- [MAL-2025-40309](https://insights.sbomify.com/MAL-2025-40309/): Malicious code in yanti-tomat97-breki (npm) (malicious package)
- [MAL-2025-40308](https://insights.sbomify.com/MAL-2025-40308/): Malicious code in yanti-saguer82-breki (npm) (malicious package)
- [MAL-2025-40307](https://insights.sbomify.com/MAL-2025-40307/): Malicious code in yanti-mendoan81-breki (npm) (malicious package)
- [MAL-2025-40306](https://insights.sbomify.com/MAL-2025-40306/): Malicious code in yanti-kue26-breki (npm) (malicious package)
- [MAL-2025-40305](https://insights.sbomify.com/MAL-2025-40305/): Malicious code in yanti-getas85-breki (npm) (malicious package)
- [MAL-2025-40304](https://insights.sbomify.com/MAL-2025-40304/): Malicious code in yanti-bika34-breki (npm) (malicious package)
- [MAL-2025-40303](https://insights.sbomify.com/MAL-2025-40303/): Malicious code in yansch (npm) (malicious package)
- [MAL-2025-40302](https://insights.sbomify.com/MAL-2025-40302/): Malicious code in yankee-zucchini-jufv (npm) (malicious package)
- [MAL-2025-40301](https://insights.sbomify.com/MAL-2025-40301/): Malicious code in yankee-zucchini-azfh (npm) (malicious package)
- [MAL-2025-40300](https://insights.sbomify.com/MAL-2025-40300/): Malicious code in yankee-zgn-project (npm) (malicious package)
- [MAL-2025-4030](https://insights.sbomify.com/MAL-2025-4030/): Malicious code in ttd-lithium (npm) (malicious package)
- [MAL-2025-403](https://insights.sbomify.com/MAL-2025-403/): Malicious code in bookingcom-parser (npm) (malicious package)
- [MAL-2025-40299](https://insights.sbomify.com/MAL-2025-40299/): Malicious code in yankee-z5m-project (npm) (malicious package)
- [MAL-2025-40298](https://insights.sbomify.com/MAL-2025-40298/): Malicious code in yankee-yam-jmmg (npm) (malicious package)
- [MAL-2025-40297](https://insights.sbomify.com/MAL-2025-40297/): Malicious code in yankee-yab-project (npm) (malicious package)
- [MAL-2025-40296](https://insights.sbomify.com/MAL-2025-40296/): Malicious code in yankee-xray-charlie-ejhsb (npm) (malicious package)
- [MAL-2025-40295](https://insights.sbomify.com/MAL-2025-40295/): Malicious code in yankee-xigua-hotel-uqaqh (npm) (malicious package)
- [MAL-2025-40294](https://insights.sbomify.com/MAL-2025-40294/): Malicious code in yankee-xigua-elderberry-sfymn (npm) (malicious package)
- [MAL-2025-40293](https://insights.sbomify.com/MAL-2025-40293/): Malicious code in yankee-xg4-project (npm) (malicious package)
- [MAL-2025-40292](https://insights.sbomify.com/MAL-2025-40292/): Malicious code in yankee-wv6-project (npm) (malicious package)
- [MAL-2025-40291](https://insights.sbomify.com/MAL-2025-40291/): Malicious code in yankee-whiskey-vanilla-wtpvp (npm) (malicious package)
- [MAL-2025-40290](https://insights.sbomify.com/MAL-2025-40290/): Malicious code in yankee-watermelon-6kym (npm) (malicious package)
- [MAL-2025-4029](https://insights.sbomify.com/MAL-2025-4029/): Malicious code in ts-runtime-compat-check (npm) (malicious package)
- [MAL-2025-40289](https://insights.sbomify.com/MAL-2025-40289/): Malicious code in yankee-wasabi-1zkj (npm) (malicious package)
- [MAL-2025-40288](https://insights.sbomify.com/MAL-2025-40288/): Malicious code in yankee-vxg-project (npm) (malicious package)
- [MAL-2025-40287](https://insights.sbomify.com/MAL-2025-40287/): Malicious code in yankee-vll-project (npm) (malicious package)
- [MAL-2025-40286](https://insights.sbomify.com/MAL-2025-40286/): Malicious code in yankee-vinegar-emjj (npm) (malicious package)
- [MAL-2025-40285](https://insights.sbomify.com/MAL-2025-40285/): Malicious code in yankee-vanilla-bple (npm) (malicious package)
- [MAL-2025-40284](https://insights.sbomify.com/MAL-2025-40284/): Malicious code in yankee-v61-project (npm) (malicious package)
- [MAL-2025-40283](https://insights.sbomify.com/MAL-2025-40283/): Malicious code in yankee-urj-project (npm) (malicious package)
- [MAL-2025-40282](https://insights.sbomify.com/MAL-2025-40282/): Malicious code in yankee-uniform-ruql (npm) (malicious package)
- [MAL-2025-40281](https://insights.sbomify.com/MAL-2025-40281/): Malicious code in yankee-uniform-njai (npm) (malicious package)
- [MAL-2025-40280](https://insights.sbomify.com/MAL-2025-40280/): Malicious code in yankee-ugli-vfmj (npm) (malicious package)
- [MAL-2025-4028](https://insights.sbomify.com/MAL-2025-4028/): Malicious code in trend-panel (npm) (malicious package)
- [MAL-2025-40279](https://insights.sbomify.com/MAL-2025-40279/): Malicious code in yankee-ugli-tangerine-jgxst (npm) (malicious package)
- [MAL-2025-40278](https://insights.sbomify.com/MAL-2025-40278/): Malicious code in yankee-ugli-kiwi-nkhzi (npm) (malicious package)
- [MAL-2025-40277](https://insights.sbomify.com/MAL-2025-40277/): Malicious code in yankee-tornado-fnea (npm) (malicious package)
- [MAL-2025-40276](https://insights.sbomify.com/MAL-2025-40276/): Malicious code in yankee-tb0-project (npm) (malicious package)
- [MAL-2025-40275](https://insights.sbomify.com/MAL-2025-40275/): Malicious code in yankee-tangerine-awgi (npm) (malicious package)
- [MAL-2025-40274](https://insights.sbomify.com/MAL-2025-40274/): Malicious code in yankee-sierra-vpta (npm) (malicious package)
- [MAL-2025-40273](https://insights.sbomify.com/MAL-2025-40273/): Malicious code in yankee-quebec-november-odtlg (npm) (malicious package)
- [MAL-2025-40272](https://insights.sbomify.com/MAL-2025-40272/): Malicious code in yankee-quebec-mike-qprnm (npm) (malicious package)
- [MAL-2025-40271](https://insights.sbomify.com/MAL-2025-40271/): Malicious code in yankee-pgx-project (npm) (malicious package)
- [MAL-2025-40270](https://insights.sbomify.com/MAL-2025-40270/): Malicious code in yankee-papaya-oscar-segzh (npm) (malicious package)
- [MAL-2025-4027](https://insights.sbomify.com/MAL-2025-4027/): Malicious code in stencil-cli (npm) (malicious package)
- [MAL-2025-40269](https://insights.sbomify.com/MAL-2025-40269/): Malicious code in yankee-papa-jceu (npm) (malicious package)
- [MAL-2025-40268](https://insights.sbomify.com/MAL-2025-40268/): Malicious code in yankee-oregano-ec3b (npm) (malicious package)
- [MAL-2025-40267](https://insights.sbomify.com/MAL-2025-40267/): Malicious code in yankee-okq-project (npm) (malicious package)
- [MAL-2025-40266](https://insights.sbomify.com/MAL-2025-40266/): Malicious code in yankee-nt2-project (npm) (malicious package)
- [MAL-2025-40265](https://insights.sbomify.com/MAL-2025-40265/): Malicious code in yankee-november-nectarine-mfokr (npm) (malicious package)
- [MAL-2025-40264](https://insights.sbomify.com/MAL-2025-40264/): Malicious code in yankee-november-fqyb (npm) (malicious package)
- [MAL-2025-40263](https://insights.sbomify.com/MAL-2025-40263/): Malicious code in yankee-nightingale-gh1e (npm) (malicious package)
- [MAL-2025-40262](https://insights.sbomify.com/MAL-2025-40262/): Malicious code in yankee-nectarine-yobx (npm) (malicious package)
- [MAL-2025-40261](https://insights.sbomify.com/MAL-2025-40261/): Malicious code in yankee-mountain-nylp (npm) (malicious package)
- [MAL-2025-40260](https://insights.sbomify.com/MAL-2025-40260/): Malicious code in yankee-mango-november-upvqr (npm) (malicious package)
- [MAL-2025-4026](https://insights.sbomify.com/MAL-2025-4026/): Malicious code in soon-night (npm) (malicious package)
- [MAL-2025-40259](https://insights.sbomify.com/MAL-2025-40259/): Malicious code in yankee-lunar-ru35 (npm) (malicious package)
- [MAL-2025-40258](https://insights.sbomify.com/MAL-2025-40258/): Malicious code in yankee-lima-nectarine-hvchb (npm) (malicious package)
- [MAL-2025-40257](https://insights.sbomify.com/MAL-2025-40257/): Malicious code in yankee-lemon-lima-jjcbj (npm) (malicious package)
- [MAL-2025-40256](https://insights.sbomify.com/MAL-2025-40256/): Malicious code in yankee-india-kiwi-hrfkd (npm) (malicious package)
- [MAL-2025-40255](https://insights.sbomify.com/MAL-2025-40255/): Malicious code in yankee-india-grape-qsuav (npm) (malicious package)
- [MAL-2025-40254](https://insights.sbomify.com/MAL-2025-40254/): Malicious code in yankee-iiu-project (npm) (malicious package)
- [MAL-2025-40253](https://insights.sbomify.com/MAL-2025-40253/): Malicious code in yankee-hotel-echo-vdqxd (npm) (malicious package)
- [MAL-2025-40252](https://insights.sbomify.com/MAL-2025-40252/): Malicious code in yankee-hotel-alpha-wrdpr (npm) (malicious package)
- [MAL-2025-40251](https://insights.sbomify.com/MAL-2025-40251/): Malicious code in yankee-h47-project (npm) (malicious package)
- [MAL-2025-40250](https://insights.sbomify.com/MAL-2025-40250/): Malicious code in yankee-grape-zulu-uiehc (npm) (malicious package)
- [MAL-2025-4025](https://insights.sbomify.com/MAL-2025-4025/): Malicious code in solana-sniper-bot (npm) (malicious package)
- [MAL-2025-40249](https://insights.sbomify.com/MAL-2025-40249/): Malicious code in yankee-fig-bjrw (npm) (malicious package)
- [MAL-2025-40248](https://insights.sbomify.com/MAL-2025-40248/): Malicious code in yankee-fap-project (npm) (malicious package)
- [MAL-2025-40247](https://insights.sbomify.com/MAL-2025-40247/): Malicious code in yankee-elephant-oyj3 (npm) (malicious package)
- [MAL-2025-40246](https://insights.sbomify.com/MAL-2025-40246/): Malicious code in yankee-elderberry-rlcy (npm) (malicious package)
- [MAL-2025-40245](https://insights.sbomify.com/MAL-2025-40245/): Malicious code in yankee-egi-project (npm) (malicious package)
- [MAL-2025-40244](https://insights.sbomify.com/MAL-2025-40244/): Malicious code in yankee-echo-tkou (npm) (malicious package)
- [MAL-2025-40243](https://insights.sbomify.com/MAL-2025-40243/): Malicious code in yankee-dragonfruit-blby (npm) (malicious package)
- [MAL-2025-40242](https://insights.sbomify.com/MAL-2025-40242/): Malicious code in yankee-delta-uniform-dmngb (npm) (malicious package)
- [MAL-2025-40241](https://insights.sbomify.com/MAL-2025-40241/): Malicious code in yankee-date-xigua-xofow (npm) (malicious package)
- [MAL-2025-40240](https://insights.sbomify.com/MAL-2025-40240/): Malicious code in yankee-date-awrl (npm) (malicious package)
- [MAL-2025-4024](https://insights.sbomify.com/MAL-2025-4024/): Malicious code in social-network-backend (npm) (malicious package)
- [MAL-2025-40239](https://insights.sbomify.com/MAL-2025-40239/): Malicious code in yankee-d77-project (npm) (malicious package)
- [MAL-2025-40238](https://insights.sbomify.com/MAL-2025-40238/): Malicious code in yankee-charlie-aaeb (npm) (malicious package)
- [MAL-2025-40237](https://insights.sbomify.com/MAL-2025-40237/): Malicious code in yankee-banana-tdbh (npm) (malicious package)
- [MAL-2025-40236](https://insights.sbomify.com/MAL-2025-40236/): Malicious code in yankee-aq1-project (npm) (malicious package)
- [MAL-2025-40235](https://insights.sbomify.com/MAL-2025-40235/): Malicious code in yankee-apple-juliet-goytg (npm) (malicious package)
- [MAL-2025-40234](https://insights.sbomify.com/MAL-2025-40234/): Malicious code in yankee-apple-drbf (npm) (malicious package)
- [MAL-2025-40233](https://insights.sbomify.com/MAL-2025-40233/): Malicious code in yankee-alpha-uniform-nujwo (npm) (malicious package)
- [MAL-2025-40232](https://insights.sbomify.com/MAL-2025-40232/): Malicious code in yankee-alpha-gxgd (npm) (malicious package)
- [MAL-2025-40231](https://insights.sbomify.com/MAL-2025-40231/): Malicious code in yankee-9mr-project (npm) (malicious package)
- [MAL-2025-40230](https://insights.sbomify.com/MAL-2025-40230/): Malicious code in yankee-8ci-project (npm) (malicious package)
- [MAL-2025-4023](https://insights.sbomify.com/MAL-2025-4023/): Malicious code in skip-tot (npm) (malicious package)
- [MAL-2025-40229](https://insights.sbomify.com/MAL-2025-40229/): Malicious code in yankee-81w-project (npm) (malicious package)
- [MAL-2025-40228](https://insights.sbomify.com/MAL-2025-40228/): Malicious code in yankee-76r-project (npm) (malicious package)
- [MAL-2025-40227](https://insights.sbomify.com/MAL-2025-40227/): Malicious code in yankee-6wo-project (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/666/