# Vulnerabilities published in 2025 - [MAL-2025-40136](https://insights.sbomify.com/MAL-2025-40136/): Malicious code in yam-4st-project (npm) (malicious package) - [MAL-2025-40135](https://insights.sbomify.com/MAL-2025-40135/): Malicious code in yam-457-project (npm) (malicious package) - [MAL-2025-40134](https://insights.sbomify.com/MAL-2025-40134/): Malicious code in yam-2dr-project (npm) (malicious package) - [MAL-2025-40133](https://insights.sbomify.com/MAL-2025-40133/): Malicious code in yam-07i-project (npm) (malicious package) - [MAL-2025-40132](https://insights.sbomify.com/MAL-2025-40132/): Malicious code in yakutsk-xanthus-robotics-css-loader (npm) (malicious package) - [MAL-2025-40131](https://insights.sbomify.com/MAL-2025-40131/): Malicious code in yakutsk-robotics-pyxis-areology (npm) (malicious package) - [MAL-2025-40130](https://insights.sbomify.com/MAL-2025-40130/): Malicious code in yakutsk-pyxis-polaris-koa (npm) (malicious package) - [MAL-2025-4013](https://insights.sbomify.com/MAL-2025-4013/): Malicious code in os-info-checker-es6 (npm) (malicious package) - [MAL-2025-40129](https://insights.sbomify.com/MAL-2025-40129/): Malicious code in yakutsk-protractor-vuetify-less-loader (npm) (malicious package) - [MAL-2025-40128](https://insights.sbomify.com/MAL-2025-40128/): Malicious code in yakutsk-nightwatch-chai-child-process (npm) (malicious package) - [MAL-2025-40127](https://insights.sbomify.com/MAL-2025-40127/): Malicious code in yakutsk-express-pm2-cressida (npm) (malicious package) - [MAL-2025-40126](https://insights.sbomify.com/MAL-2025-40126/): Malicious code in yak-waterfall-qpn898-project (npm) (malicious package) - [MAL-2025-40125](https://insights.sbomify.com/MAL-2025-40125/): Malicious code in yak-undertow-pzf309-project (npm) (malicious package) - [MAL-2025-40124](https://insights.sbomify.com/MAL-2025-40124/): Malicious code in yak-topaz-plv957-project (npm) (malicious package) - [MAL-2025-40123](https://insights.sbomify.com/MAL-2025-40123/): Malicious code in yak-river-iga711-project (npm) (malicious package) - [MAL-2025-40122](https://insights.sbomify.com/MAL-2025-40122/): Malicious code in yak-quasar-puh795-project (npm) (malicious package) - [MAL-2025-40121](https://insights.sbomify.com/MAL-2025-40121/): Malicious code in yak-penguin-hkj763-project (npm) (malicious package) - [MAL-2025-40120](https://insights.sbomify.com/MAL-2025-40120/): Malicious code in yak-orchid-uat682-project (npm) (malicious package) - [MAL-2025-4012](https://insights.sbomify.com/MAL-2025-4012/): Malicious code in node-validator-ts (npm) (malicious package) - [MAL-2025-40119](https://insights.sbomify.com/MAL-2025-40119/): Malicious code in yak-opaline-wmr818-project (npm) (malicious package) - [MAL-2025-40118](https://insights.sbomify.com/MAL-2025-40118/): Malicious code in yak-octopus-ylh814-project (npm) (malicious package) - [MAL-2025-40117](https://insights.sbomify.com/MAL-2025-40117/): Malicious code in yak-jade-ucm281-project (npm) (malicious package) - [MAL-2025-40116](https://insights.sbomify.com/MAL-2025-40116/): Malicious code in yak-falcon-uoh580-project (npm) (malicious package) - [MAL-2025-40115](https://insights.sbomify.com/MAL-2025-40115/): Malicious code in yak-cascade-yzf735-project (npm) (malicious package) - [MAL-2025-40114](https://insights.sbomify.com/MAL-2025-40114/): Malicious code in yak-cascade-ccp574-project (npm) (malicious package) - [MAL-2025-40113](https://insights.sbomify.com/MAL-2025-40113/): Malicious code in yak-bamboo-bcs618-project (npm) (malicious package) - [MAL-2025-40112](https://insights.sbomify.com/MAL-2025-40112/): Malicious code in yak-amber-nea697-project (npm) (malicious package) - [MAL-2025-40111](https://insights.sbomify.com/MAL-2025-40111/): Malicious code in yadi-bin (npm) (malicious package) - [MAL-2025-40110](https://insights.sbomify.com/MAL-2025-40110/): Malicious code in yacyoa (npm) (malicious package) - [MAL-2025-4011](https://insights.sbomify.com/MAL-2025-4011/): Malicious code in nestjs-translator (npm) (malicious package) - [MAL-2025-40109](https://insights.sbomify.com/MAL-2025-40109/): Malicious code in yacomas (npm) (malicious package) - [MAL-2025-40108](https://insights.sbomify.com/MAL-2025-40108/): Malicious code in yacht_je43r_aqbm2_trill (npm) (malicious package) - [MAL-2025-40107](https://insights.sbomify.com/MAL-2025-40107/): Malicious code in yacht_fh57r_gi1jc_quartz (npm) (malicious package) - [MAL-2025-40106](https://insights.sbomify.com/MAL-2025-40106/): Malicious code in yacht_ayjnp_1apa4_vantage (npm) (malicious package) - [MAL-2025-40105](https://insights.sbomify.com/MAL-2025-40105/): Malicious code in yacht_88ptl_7slhg_boulder (npm) (malicious package) - [MAL-2025-40104](https://insights.sbomify.com/MAL-2025-40104/): Malicious code in yacht_7be9t_awqs8_illusion (npm) (malicious package) - [MAL-2025-40103](https://insights.sbomify.com/MAL-2025-40103/): Malicious code in yacht_0stu5_ugmpn_citadel (npm) (malicious package) - [MAL-2025-40102](https://insights.sbomify.com/MAL-2025-40102/): Malicious code in yacht-yambean-a65t (npm) (malicious package) - [MAL-2025-40101](https://insights.sbomify.com/MAL-2025-40101/): Malicious code in yacht-whale-bjd812-project (npm) (malicious package) - [MAL-2025-40100](https://insights.sbomify.com/MAL-2025-40100/): Malicious code in yacht-tango-v3mw (npm) (malicious package) - [MAL-2025-4010](https://insights.sbomify.com/MAL-2025-4010/): Malicious code in mp-cross (npm) (malicious package) - [MAL-2025-401](https://insights.sbomify.com/MAL-2025-401/): Malicious code in bookingcom-model (npm) (malicious package) - [MAL-2025-40099](https://insights.sbomify.com/MAL-2025-40099/): Malicious code in yacht-saturn-uft758-project (npm) (malicious package) - [MAL-2025-40098](https://insights.sbomify.com/MAL-2025-40098/): Malicious code in yacht-river-wbk607-project (npm) (malicious package) - [MAL-2025-40097](https://insights.sbomify.com/MAL-2025-40097/): Malicious code in yacht-nocturne-wca859-project (npm) (malicious package) - [MAL-2025-40096](https://insights.sbomify.com/MAL-2025-40096/): Malicious code in yacht-moose-gkg530-project (npm) (malicious package) - [MAL-2025-40095](https://insights.sbomify.com/MAL-2025-40095/): Malicious code in yacht-lightning-jov411-project (npm) (malicious package) - [MAL-2025-40094](https://insights.sbomify.com/MAL-2025-40094/): Malicious code in yacht-kite-mwh160-project (npm) (malicious package) - [MAL-2025-40093](https://insights.sbomify.com/MAL-2025-40093/): Malicious code in yacht-horizon-quk755-project (npm) (malicious package) - [MAL-2025-40092](https://insights.sbomify.com/MAL-2025-40092/): Malicious code in yacht-hedgehog-jcp134-project (npm) (malicious package) - [MAL-2025-40091](https://insights.sbomify.com/MAL-2025-40091/): Malicious code in yacht-fox-xno742-project (npm) (malicious package) - [MAL-2025-40090](https://insights.sbomify.com/MAL-2025-40090/): Malicious code in yacht-eagle-lql819-project (npm) (malicious package) - [MAL-2025-4009](https://insights.sbomify.com/MAL-2025-4009/): Malicious code in logdna-agent (npm) (malicious package) - [MAL-2025-40089](https://insights.sbomify.com/MAL-2025-40089/): Malicious code in yacht-charlie-rlce (npm) (malicious package) - [MAL-2025-40088](https://insights.sbomify.com/MAL-2025-40088/): Malicious code in yabunker (npm) (malicious package) - [MAL-2025-40087](https://insights.sbomify.com/MAL-2025-40087/): Malicious code in yabs-react-components (npm) (malicious package) - [MAL-2025-40086](https://insights.sbomify.com/MAL-2025-40086/): Malicious code in y-team-header (npm) (malicious package) - [MAL-2025-40085](https://insights.sbomify.com/MAL-2025-40085/): Malicious code in xysajgdnepotuvbf (npm) (malicious package) - [MAL-2025-40084](https://insights.sbomify.com/MAL-2025-40084/): Malicious code in xynwpdofakiethuk (npm) (malicious package) - [MAL-2025-40083](https://insights.sbomify.com/MAL-2025-40083/): Malicious code in xylophone_zswsq_9j6sb_glow (npm) (malicious package) - [MAL-2025-40082](https://insights.sbomify.com/MAL-2025-40082/): Malicious code in xylophone_z93v4_gkhef_yellow (npm) (malicious package) - [MAL-2025-40081](https://insights.sbomify.com/MAL-2025-40081/): Malicious code in xylophone_puqbp_0nukm_bloom (npm) (malicious package) - [MAL-2025-40080](https://insights.sbomify.com/MAL-2025-40080/): Malicious code in xylophone_ik4ia_4fhjo_xenolith (npm) (malicious package) - [MAL-2025-4008](https://insights.sbomify.com/MAL-2025-4008/): Malicious code in kendo-ui (npm) (malicious package) - [MAL-2025-40079](https://insights.sbomify.com/MAL-2025-40079/): Malicious code in xylophone_iels5_zuvq4_valley (npm) (malicious package) - [MAL-2025-40078](https://insights.sbomify.com/MAL-2025-40078/): Malicious code in xylophone_bmi4n_80ln0_paradise (npm) (malicious package) - [MAL-2025-40077](https://insights.sbomify.com/MAL-2025-40077/): Malicious code in xylophone_5mosz_hfldw_xenon (npm) (malicious package) - [MAL-2025-40076](https://insights.sbomify.com/MAL-2025-40076/): Malicious code in xylophone_4t1l4_q1cxh_wave (npm) (malicious package) - [MAL-2025-40075](https://insights.sbomify.com/MAL-2025-40075/): Malicious code in xylophone_2xu3j_4ossw_crown (npm) (malicious package) - [MAL-2025-40074](https://insights.sbomify.com/MAL-2025-40074/): Malicious code in xylophone_2l8nq_rnh9j_yellow (npm) (malicious package) - [MAL-2025-40073](https://insights.sbomify.com/MAL-2025-40073/): Malicious code in xylophone-zeppelin-nlwv (npm) (malicious package) - [MAL-2025-40072](https://insights.sbomify.com/MAL-2025-40072/): Malicious code in xylophone-zenith-hza694-project (npm) (malicious package) - [MAL-2025-40071](https://insights.sbomify.com/MAL-2025-40071/): Malicious code in xylophone-zebra-pih895-project (npm) (malicious package) - [MAL-2025-40070](https://insights.sbomify.com/MAL-2025-40070/): Malicious code in xylophone-zebra-kbj679-project (npm) (malicious package) - [MAL-2025-4007](https://insights.sbomify.com/MAL-2025-4007/): Malicious code in js-lib-const (npm) (malicious package) - [MAL-2025-40069](https://insights.sbomify.com/MAL-2025-40069/): Malicious code in xylophone-yearling-6mjz (npm) (malicious package) - [MAL-2025-40068](https://insights.sbomify.com/MAL-2025-40068/): Malicious code in xylophone-yak-mrb699-project (npm) (malicious package) - [MAL-2025-40067](https://insights.sbomify.com/MAL-2025-40067/): Malicious code in xylophone-xenon-znn416-project (npm) (malicious package) - [MAL-2025-40066](https://insights.sbomify.com/MAL-2025-40066/): Malicious code in xylophone-xenon-fbc889-project (npm) (malicious package) - [MAL-2025-40065](https://insights.sbomify.com/MAL-2025-40065/): Malicious code in xylophone-whiskey-h2rj (npm) (malicious package) - [MAL-2025-40064](https://insights.sbomify.com/MAL-2025-40064/): Malicious code in xylophone-volcano-qmw136-project (npm) (malicious package) - [MAL-2025-40063](https://insights.sbomify.com/MAL-2025-40063/): Malicious code in xylophone-violet-pnx044-project (npm) (malicious package) - [MAL-2025-40062](https://insights.sbomify.com/MAL-2025-40062/): Malicious code in xylophone-umbra-oxb850-project (npm) (malicious package) - [MAL-2025-40061](https://insights.sbomify.com/MAL-2025-40061/): Malicious code in xylophone-thunder-uby004-project (npm) (malicious package) - [MAL-2025-40060](https://insights.sbomify.com/MAL-2025-40060/): Malicious code in xylophone-supernova-rjl2 (npm) (malicious package) - [MAL-2025-4006](https://insights.sbomify.com/MAL-2025-4006/): Malicious code in internallib_v473 (npm) (malicious package) - [MAL-2025-40059](https://insights.sbomify.com/MAL-2025-40059/): Malicious code in xylophone-sibjm-0ooln-xenon-project (npm) (malicious package) - [MAL-2025-40058](https://insights.sbomify.com/MAL-2025-40058/): Malicious code in xylophone-savanna-cmx842-project (npm) (malicious package) - [MAL-2025-40057](https://insights.sbomify.com/MAL-2025-40057/): Malicious code in xylophone-reef-hnr436-project (npm) (malicious package) - [MAL-2025-40056](https://insights.sbomify.com/MAL-2025-40056/): Malicious code in xylophone-quill-ujq183-project (npm) (malicious package) - [MAL-2025-40055](https://insights.sbomify.com/MAL-2025-40055/): Malicious code in xylophone-q097e-z7kw6-keystone-project (npm) (malicious package) - [MAL-2025-40054](https://insights.sbomify.com/MAL-2025-40054/): Malicious code in xylophone-opal-thp753-project (npm) (malicious package) - [MAL-2025-40053](https://insights.sbomify.com/MAL-2025-40053/): Malicious code in xylophone-oak-cvn770-project (npm) (malicious package) - [MAL-2025-40052](https://insights.sbomify.com/MAL-2025-40052/): Malicious code in xylophone-myth-wbx282-project (npm) (malicious package) - [MAL-2025-40051](https://insights.sbomify.com/MAL-2025-40051/): Malicious code in xylophone-lagoon-zed258-project (npm) (malicious package) - [MAL-2025-40050](https://insights.sbomify.com/MAL-2025-40050/): Malicious code in xylophone-lagoon-uel926-project (npm) (malicious package) - [MAL-2025-4005](https://insights.sbomify.com/MAL-2025-4005/): Malicious code in ing-lib-investments (npm) (malicious package) - [MAL-2025-40049](https://insights.sbomify.com/MAL-2025-40049/): Malicious code in xylophone-kiwi-gip963-project (npm) (malicious package) - [MAL-2025-40048](https://insights.sbomify.com/MAL-2025-40048/): Malicious code in xylophone-jade-rtp572-project (npm) (malicious package) - [MAL-2025-40047](https://insights.sbomify.com/MAL-2025-40047/): Malicious code in xylophone-jade-gpn443-project (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/668/