# Vulnerabilities published in 2025


- [MAL-2025-39958](https://insights.sbomify.com/MAL-2025-39958/): Malicious code in xray-lima-bvgi (npm) (malicious package)
- [MAL-2025-39957](https://insights.sbomify.com/MAL-2025-39957/): Malicious code in xray-lemon-tangerine-qyvlf (npm) (malicious package)
- [MAL-2025-39956](https://insights.sbomify.com/MAL-2025-39956/): Malicious code in xray-lemon-foxtrot-zknte (npm) (malicious package)
- [MAL-2025-39955](https://insights.sbomify.com/MAL-2025-39955/): Malicious code in xray-kjt-project (npm) (malicious package)
- [MAL-2025-39954](https://insights.sbomify.com/MAL-2025-39954/): Malicious code in xray-kiwi-sierra-rqvyo (npm) (malicious package)
- [MAL-2025-39953](https://insights.sbomify.com/MAL-2025-39953/): Malicious code in xray-kiwi-fab7 (npm) (malicious package)
- [MAL-2025-39952](https://insights.sbomify.com/MAL-2025-39952/): Malicious code in xray-k8o-project (npm) (malicious package)
- [MAL-2025-39951](https://insights.sbomify.com/MAL-2025-39951/): Malicious code in xray-k3s-project (npm) (malicious package)
- [MAL-2025-39950](https://insights.sbomify.com/MAL-2025-39950/): Malicious code in xray-juliet-bravo-wbtxc (npm) (malicious package)
- [MAL-2025-3995](https://insights.sbomify.com/MAL-2025-3995/): Malicious code in grunt-mrg-enb-autoconf (npm) (malicious package)
- [MAL-2025-39949](https://insights.sbomify.com/MAL-2025-39949/): Malicious code in xray-jgq-project (npm) (malicious package)
- [MAL-2025-39948](https://insights.sbomify.com/MAL-2025-39948/): Malicious code in xray-island-pvra (npm) (malicious package)
- [MAL-2025-39947](https://insights.sbomify.com/MAL-2025-39947/): Malicious code in xray-india-zulu-lphwt (npm) (malicious package)
- [MAL-2025-39946](https://insights.sbomify.com/MAL-2025-39946/): Malicious code in xray-iceberg-itxp (npm) (malicious package)
- [MAL-2025-39945](https://insights.sbomify.com/MAL-2025-39945/): Malicious code in xray-hpv-project (npm) (malicious package)
- [MAL-2025-39944](https://insights.sbomify.com/MAL-2025-39944/): Malicious code in xray-hotel-gnis (npm) (malicious package)
- [MAL-2025-39943](https://insights.sbomify.com/MAL-2025-39943/): Malicious code in xray-grape-nngk (npm) (malicious package)
- [MAL-2025-39942](https://insights.sbomify.com/MAL-2025-39942/): Malicious code in xray-golf-velw (npm) (malicious package)
- [MAL-2025-39941](https://insights.sbomify.com/MAL-2025-39941/): Malicious code in xray-golf-uniform-rukmr (npm) (malicious package)
- [MAL-2025-39940](https://insights.sbomify.com/MAL-2025-39940/): Malicious code in xray-golf-iiem (npm) (malicious package)
- [MAL-2025-3994](https://insights.sbomify.com/MAL-2025-3994/): Malicious code in grunt-autogen-bemdecl (npm) (malicious package)
- [MAL-2025-39939](https://insights.sbomify.com/MAL-2025-39939/): Malicious code in xray-ginkgo-tttz (npm) (malicious package)
- [MAL-2025-39938](https://insights.sbomify.com/MAL-2025-39938/): Malicious code in xray-foxtrot-quince-xtlnr (npm) (malicious package)
- [MAL-2025-39937](https://insights.sbomify.com/MAL-2025-39937/): Malicious code in xray-fig-vrow (npm) (malicious package)
- [MAL-2025-39936](https://insights.sbomify.com/MAL-2025-39936/): Malicious code in xray-eq1-project (npm) (malicious package)
- [MAL-2025-39935](https://insights.sbomify.com/MAL-2025-39935/): Malicious code in xray-elderberry-echo-kzvty (npm) (malicious package)
- [MAL-2025-39934](https://insights.sbomify.com/MAL-2025-39934/): Malicious code in xray-delta-vanilla-ltrdk (npm) (malicious package)
- [MAL-2025-39933](https://insights.sbomify.com/MAL-2025-39933/): Malicious code in xray-delta-dyhf (npm) (malicious package)
- [MAL-2025-39932](https://insights.sbomify.com/MAL-2025-39932/): Malicious code in xray-da3-project (npm) (malicious package)
- [MAL-2025-39931](https://insights.sbomify.com/MAL-2025-39931/): Malicious code in xray-cln-project (npm) (malicious package)
- [MAL-2025-39930](https://insights.sbomify.com/MAL-2025-39930/): Malicious code in xray-cbb-project (npm) (malicious package)
- [MAL-2025-3993](https://insights.sbomify.com/MAL-2025-3993/): Malicious code in foobarzazarazrarzarzararararara (npm) (malicious package)
- [MAL-2025-39929](https://insights.sbomify.com/MAL-2025-39929/): Malicious code in xray-bravo-o4ps (npm) (malicious package)
- [MAL-2025-39928](https://insights.sbomify.com/MAL-2025-39928/): Malicious code in xray-banana-sirr (npm) (malicious package)
- [MAL-2025-39927](https://insights.sbomify.com/MAL-2025-39927/): Malicious code in xray-banana-bmzg (npm) (malicious package)
- [MAL-2025-39926](https://insights.sbomify.com/MAL-2025-39926/): Malicious code in xray-atp-project (npm) (malicious package)
- [MAL-2025-39925](https://insights.sbomify.com/MAL-2025-39925/): Malicious code in xray-5t8-project (npm) (malicious package)
- [MAL-2025-39924](https://insights.sbomify.com/MAL-2025-39924/): Malicious code in xray-5nw-project (npm) (malicious package)
- [MAL-2025-39923](https://insights.sbomify.com/MAL-2025-39923/): Malicious code in xray-561-project (npm) (malicious package)
- [MAL-2025-39922](https://insights.sbomify.com/MAL-2025-39922/): Malicious code in xray-0wf-project (npm) (malicious package)
- [MAL-2025-39921](https://insights.sbomify.com/MAL-2025-39921/): Malicious code in xqrunner (npm) (malicious package)
- [MAL-2025-39920](https://insights.sbomify.com/MAL-2025-39920/): Malicious code in xpzobnsiyfavceug (npm) (malicious package)
- [MAL-2025-3992](https://insights.sbomify.com/MAL-2025-3992/): Malicious code in feast-polyfill (npm) (malicious package)
- [MAL-2025-39919](https://insights.sbomify.com/MAL-2025-39919/): Malicious code in xpull_exchanges_m (npm) (malicious package)
- [MAL-2025-39918](https://insights.sbomify.com/MAL-2025-39918/): Malicious code in xpugno (npm) (malicious package)
- [MAL-2025-39917](https://insights.sbomify.com/MAL-2025-39917/): Malicious code in xpointer (npm) (malicious package)
- [MAL-2025-39916](https://insights.sbomify.com/MAL-2025-39916/): Malicious code in xpider (npm) (malicious package)
- [MAL-2025-39915](https://insights.sbomify.com/MAL-2025-39915/): Malicious code in xpeccy (npm) (malicious package)
- [MAL-2025-39914](https://insights.sbomify.com/MAL-2025-39914/): Malicious code in xpc.js (npm) (malicious package)
- [MAL-2025-39913](https://insights.sbomify.com/MAL-2025-39913/): Malicious code in xoverflow (npm) (malicious package)
- [MAL-2025-39912](https://insights.sbomify.com/MAL-2025-39912/): Malicious code in xoshared (npm) (malicious package)
- [MAL-2025-39911](https://insights.sbomify.com/MAL-2025-39911/): Malicious code in xo-typescript (npm) (malicious package)
- [MAL-2025-39910](https://insights.sbomify.com/MAL-2025-39910/): Malicious code in xo-space (npm) (malicious package)
- [MAL-2025-3991](https://insights.sbomify.com/MAL-2025-3991/): Malicious code in fanotify (npm) (malicious package)
- [MAL-2025-39909](https://insights.sbomify.com/MAL-2025-39909/): Malicious code in xo-selenium-commitlint-config-angular-genomics (npm) (malicious package)
- [MAL-2025-39908](https://insights.sbomify.com/MAL-2025-39908/): Malicious code in xo-react (npm) (malicious package)
- [MAL-2025-39907](https://insights.sbomify.com/MAL-2025-39907/): Malicious code in xo-publish-semantic-ui-lacerta (npm) (malicious package)
- [MAL-2025-39906](https://insights.sbomify.com/MAL-2025-39906/): Malicious code in xo-prosthetics-cz-conventional-changelog-biosignature (npm) (malicious package)
- [MAL-2025-39905](https://insights.sbomify.com/MAL-2025-39905/): Malicious code in xo-landing-router (npm) (malicious package)
- [MAL-2025-39904](https://insights.sbomify.com/MAL-2025-39904/): Malicious code in xo-jquery-mask-plugin (npm) (malicious package)
- [MAL-2025-39903](https://insights.sbomify.com/MAL-2025-39903/): Malicious code in xo-grunt-publish-charon (npm) (malicious package)
- [MAL-2025-39902](https://insights.sbomify.com/MAL-2025-39902/): Malicious code in xo-dione-wasat-palynology (npm) (malicious package)
- [MAL-2025-39901](https://insights.sbomify.com/MAL-2025-39901/): Malicious code in xo-device-info (npm) (malicious package)
- [MAL-2025-39900](https://insights.sbomify.com/MAL-2025-39900/): Malicious code in xo-credit-components (npm) (malicious package)
- [MAL-2025-3990](https://insights.sbomify.com/MAL-2025-3990/): Malicious code in directx (npm) (malicious package)
- [MAL-2025-399](https://insights.sbomify.com/MAL-2025-399/): Malicious code in bookingcom-checkout (npm) (malicious package)
- [MAL-2025-39899](https://insights.sbomify.com/MAL-2025-39899/): Malicious code in xo-bounce (npm) (malicious package)
- [MAL-2025-39898](https://insights.sbomify.com/MAL-2025-39898/): Malicious code in xo-beaver (npm) (malicious package)
- [MAL-2025-39897](https://insights.sbomify.com/MAL-2025-39897/): Malicious code in xo-angular-shims-placeholder (npm) (malicious package)
- [MAL-2025-39896](https://insights.sbomify.com/MAL-2025-39896/): Malicious code in xo-address-components (npm) (malicious package)
- [MAL-2025-39895](https://insights.sbomify.com/MAL-2025-39895/): Malicious code in xnveukafhkjylpcr (npm) (malicious package)
- [MAL-2025-39894](https://insights.sbomify.com/MAL-2025-39894/): Malicious code in xntvplycaigrozuf (npm) (malicious package)
- [MAL-2025-39893](https://insights.sbomify.com/MAL-2025-39893/): Malicious code in xntuples (npm) (malicious package)
- [MAL-2025-39892](https://insights.sbomify.com/MAL-2025-39892/): Malicious code in xnqyrzhiopgekkfj (npm) (malicious package)
- [MAL-2025-39891](https://insights.sbomify.com/MAL-2025-39891/): Malicious code in xnoopsy (npm) (malicious package)
- [MAL-2025-39890](https://insights.sbomify.com/MAL-2025-39890/): Malicious code in xnoise (npm) (malicious package)
- [MAL-2025-3989](https://insights.sbomify.com/MAL-2025-3989/): Malicious code in dasjhs (npm) (malicious package)
- [MAL-2025-39889](https://insights.sbomify.com/MAL-2025-39889/): Malicious code in xnkpqygmsldchber (npm) (malicious package)
- [MAL-2025-39888](https://insights.sbomify.com/MAL-2025-39888/): Malicious code in xnianqtest (npm) (malicious package)
- [MAL-2025-39887](https://insights.sbomify.com/MAL-2025-39887/): Malicious code in xnatetris (npm) (malicious package)
- [MAL-2025-39886](https://insights.sbomify.com/MAL-2025-39886/): Malicious code in xn--trdktls-oxa154afao42kmb2964e (npm) (malicious package)
- [MAL-2025-39885](https://insights.sbomify.com/MAL-2025-39885/): Malicious code in xmvnsfycjiqzbakg (npm) (malicious package)
- [MAL-2025-39884](https://insights.sbomify.com/MAL-2025-39884/): Malicious code in xmpptrace (npm) (malicious package)
- [MAL-2025-39883](https://insights.sbomify.com/MAL-2025-39883/): Malicious code in xmlparst (npm) (malicious package)
- [MAL-2025-39882](https://insights.sbomify.com/MAL-2025-39882/): Malicious code in xmlers (npm) (malicious package)
- [MAL-2025-39881](https://insights.sbomify.com/MAL-2025-39881/): Malicious code in xmldsign (npm) (malicious package)
- [MAL-2025-39880](https://insights.sbomify.com/MAL-2025-39880/): Malicious code in xml-warp-magellan-mira (npm) (malicious package)
- [MAL-2025-3988](https://insights.sbomify.com/MAL-2025-3988/): Malicious code in dahsjs (npm) (malicious package)
- [MAL-2025-39879](https://insights.sbomify.com/MAL-2025-39879/): Malicious code in xml-sandbox-container-process-long (npm) (malicious package)
- [MAL-2025-39878](https://insights.sbomify.com/MAL-2025-39878/): Malicious code in xml-query-minify-error-lambda (npm) (malicious package)
- [MAL-2025-39877](https://insights.sbomify.com/MAL-2025-39877/): Malicious code in xml-meteor-local-browserify (npm) (malicious package)
- [MAL-2025-39876](https://insights.sbomify.com/MAL-2025-39876/): Malicious code in xml-juno-leda-blaze (npm) (malicious package)
- [MAL-2025-39875](https://insights.sbomify.com/MAL-2025-39875/): Malicious code in xml-asthenosphere-less-loader-graphql (npm) (malicious package)
- [MAL-2025-39874](https://insights.sbomify.com/MAL-2025-39874/): Malicious code in xml-apollo-writable-heka (npm) (malicious package)
- [MAL-2025-39873](https://insights.sbomify.com/MAL-2025-39873/): Malicious code in xlsx-to-json-lh (npm) (malicious package)
- [MAL-2025-39872](https://insights.sbomify.com/MAL-2025-39872/): Malicious code in xlpiktgzdaekbvyu (npm) (malicious package)
- [MAL-2025-39871](https://insights.sbomify.com/MAL-2025-39871/): Malicious code in xlozfsptmyuhrjac (npm) (malicious package)
- [MAL-2025-39870](https://insights.sbomify.com/MAL-2025-39870/): Malicious code in xkudzhwpygafkjtr (npm) (malicious package)
- [MAL-2025-3987](https://insights.sbomify.com/MAL-2025-3987/): Malicious code in dahsj (npm) (malicious package)
- [MAL-2025-39869](https://insights.sbomify.com/MAL-2025-39869/): Malicious code in xkpauiyzebdtnvmr (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/670/