# Vulnerabilities published in 2025


- [MAL-2025-39868](https://insights.sbomify.com/MAL-2025-39868/): Malicious code in xketch (npm) (malicious package)
- [MAL-2025-39867](https://insights.sbomify.com/MAL-2025-39867/): Malicious code in xjlbcenakmwstyou (npm) (malicious package)
- [MAL-2025-39866](https://insights.sbomify.com/MAL-2025-39866/): Malicious code in xizang-xinyujia (npm) (malicious package)
- [MAL-2025-39865](https://insights.sbomify.com/MAL-2025-39865/): Malicious code in xiyinli-faze (npm) (malicious package)
- [MAL-2025-39864](https://insights.sbomify.com/MAL-2025-39864/): Malicious code in xiongxt (npm) (malicious package)
- [MAL-2025-39863](https://insights.sbomify.com/MAL-2025-39863/): Malicious code in xinwu-mofashu (npm) (malicious package)
- [MAL-2025-39862](https://insights.sbomify.com/MAL-2025-39862/): Malicious code in xinshidai-xiaohai-yurenlei-yishi-datuibian (npm) (malicious package)
- [MAL-2025-39861](https://insights.sbomify.com/MAL-2025-39861/): Malicious code in xinqiao-jiehe-shenxinde-nengliang-liaofa (npm) (malicious package)
- [MAL-2025-39860](https://insights.sbomify.com/MAL-2025-39860/): Malicious code in xinmei (npm) (malicious package)
- [MAL-2025-3986](https://insights.sbomify.com/MAL-2025-3986/): Malicious code in beta1 (npm) (malicious package)
- [MAL-2025-39859](https://insights.sbomify.com/MAL-2025-39859/): Malicious code in xinmaoshan-qimen-miji (npm) (malicious package)
- [MAL-2025-39858](https://insights.sbomify.com/MAL-2025-39858/): Malicious code in xinli-zhanxingxue-quanshu (npm) (malicious package)
- [MAL-2025-39857](https://insights.sbomify.com/MAL-2025-39857/): Malicious code in xinli-caozongshu-daquanji (npm) (malicious package)
- [MAL-2025-39856](https://insights.sbomify.com/MAL-2025-39856/): Malicious code in xingzuo-xuexing-dapk (npm) (malicious package)
- [MAL-2025-39855](https://insights.sbomify.com/MAL-2025-39855/): Malicious code in xingzuo-quanshu (npm) (malicious package)
- [MAL-2025-39854](https://insights.sbomify.com/MAL-2025-39854/): Malicious code in xingzuo-lingshu (npm) (malicious package)
- [MAL-2025-39853](https://insights.sbomify.com/MAL-2025-39853/): Malicious code in xingxue-dacheng (npm) (malicious package)
- [MAL-2025-39852](https://insights.sbomify.com/MAL-2025-39852/): Malicious code in xingxing-kecheng-4to6 (npm) (malicious package)
- [MAL-2025-39851](https://insights.sbomify.com/MAL-2025-39851/): Malicious code in xingfu-xiaoyuzhou (npm) (malicious package)
- [MAL-2025-39850](https://insights.sbomify.com/MAL-2025-39850/): Malicious code in xigua-zulu-uniform-gyglu (npm) (malicious package)
- [MAL-2025-3985](https://insights.sbomify.com/MAL-2025-3985/): Malicious code in babel-loader-fs (npm) (malicious package)
- [MAL-2025-39849](https://insights.sbomify.com/MAL-2025-39849/): Malicious code in xigua-zk2-project (npm) (malicious package)
- [MAL-2025-39848](https://insights.sbomify.com/MAL-2025-39848/): Malicious code in xigua-z30-project (npm) (malicious package)
- [MAL-2025-39847](https://insights.sbomify.com/MAL-2025-39847/): Malicious code in xigua-yw7-project (npm) (malicious package)
- [MAL-2025-39846](https://insights.sbomify.com/MAL-2025-39846/): Malicious code in xigua-whiskey-yam-zcrak (npm) (malicious package)
- [MAL-2025-39845](https://insights.sbomify.com/MAL-2025-39845/): Malicious code in xigua-vye-project (npm) (malicious package)
- [MAL-2025-39844](https://insights.sbomify.com/MAL-2025-39844/): Malicious code in xigua-victor-oujc (npm) (malicious package)
- [MAL-2025-39843](https://insights.sbomify.com/MAL-2025-39843/): Malicious code in xigua-vanilla-qoxj (npm) (malicious package)
- [MAL-2025-39842](https://insights.sbomify.com/MAL-2025-39842/): Malicious code in xigua-vanilla-jpyf (npm) (malicious package)
- [MAL-2025-39841](https://insights.sbomify.com/MAL-2025-39841/): Malicious code in xigua-tango-vaim (npm) (malicious package)
- [MAL-2025-39840](https://insights.sbomify.com/MAL-2025-39840/): Malicious code in xigua-strawberry-qvgp (npm) (malicious package)
- [MAL-2025-3984](https://insights.sbomify.com/MAL-2025-3984/): Malicious code in authvictor (npm) (malicious package)
- [MAL-2025-39839](https://insights.sbomify.com/MAL-2025-39839/): Malicious code in xigua-sierra-pnok (npm) (malicious package)
- [MAL-2025-39838](https://insights.sbomify.com/MAL-2025-39838/): Malicious code in xigua-scl-project (npm) (malicious package)
- [MAL-2025-39837](https://insights.sbomify.com/MAL-2025-39837/): Malicious code in xigua-quince-uniform-dmwbs (npm) (malicious package)
- [MAL-2025-39836](https://insights.sbomify.com/MAL-2025-39836/): Malicious code in xigua-pz6-project (npm) (malicious package)
- [MAL-2025-39835](https://insights.sbomify.com/MAL-2025-39835/): Malicious code in xigua-p71-project (npm) (malicious package)
- [MAL-2025-39834](https://insights.sbomify.com/MAL-2025-39834/): Malicious code in xigua-oxq-project (npm) (malicious package)
- [MAL-2025-39833](https://insights.sbomify.com/MAL-2025-39833/): Malicious code in xigua-ot8-project (npm) (malicious package)
- [MAL-2025-39832](https://insights.sbomify.com/MAL-2025-39832/): Malicious code in xigua-oscar-foxtrot-reybb (npm) (malicious package)
- [MAL-2025-39831](https://insights.sbomify.com/MAL-2025-39831/): Malicious code in xigua-oscar-ejhk (npm) (malicious package)
- [MAL-2025-39830](https://insights.sbomify.com/MAL-2025-39830/): Malicious code in xigua-nzm-project (npm) (malicious package)
- [MAL-2025-3983](https://insights.sbomify.com/MAL-2025-3983/): Malicious code in arduino-mock (npm) (malicious package)
- [MAL-2025-39829](https://insights.sbomify.com/MAL-2025-39829/): Malicious code in xigua-november-mebr (npm) (malicious package)
- [MAL-2025-39828](https://insights.sbomify.com/MAL-2025-39828/): Malicious code in xigua-nectarine-xmfw (npm) (malicious package)
- [MAL-2025-39827](https://insights.sbomify.com/MAL-2025-39827/): Malicious code in xigua-mango-foxtrot-qqqpp (npm) (malicious package)
- [MAL-2025-39826](https://insights.sbomify.com/MAL-2025-39826/): Malicious code in xigua-m1o-project (npm) (malicious package)
- [MAL-2025-39825](https://insights.sbomify.com/MAL-2025-39825/): Malicious code in xigua-lion-2hrd (npm) (malicious package)
- [MAL-2025-39824](https://insights.sbomify.com/MAL-2025-39824/): Malicious code in xigua-lima-foyg (npm) (malicious package)
- [MAL-2025-39823](https://insights.sbomify.com/MAL-2025-39823/): Malicious code in xigua-lettuce-j0xl (npm) (malicious package)
- [MAL-2025-39822](https://insights.sbomify.com/MAL-2025-39822/): Malicious code in xigua-kilo-txfl (npm) (malicious package)
- [MAL-2025-39821](https://insights.sbomify.com/MAL-2025-39821/): Malicious code in xigua-j03-project (npm) (malicious package)
- [MAL-2025-39820](https://insights.sbomify.com/MAL-2025-39820/): Malicious code in xigua-iyg-project (npm) (malicious package)
- [MAL-2025-3982](https://insights.sbomify.com/MAL-2025-3982/): Malicious code in api-tecnisa (npm) (malicious package)
- [MAL-2025-39819](https://insights.sbomify.com/MAL-2025-39819/): Malicious code in xigua-iceberg-69im (npm) (malicious package)
- [MAL-2025-39818](https://insights.sbomify.com/MAL-2025-39818/): Malicious code in xigua-i00-project (npm) (malicious package)
- [MAL-2025-39817](https://insights.sbomify.com/MAL-2025-39817/): Malicious code in xigua-hxq-project (npm) (malicious package)
- [MAL-2025-39816](https://insights.sbomify.com/MAL-2025-39816/): Malicious code in xigua-honeydew-echo-fvguh (npm) (malicious package)
- [MAL-2025-39815](https://insights.sbomify.com/MAL-2025-39815/): Malicious code in xigua-he1-project (npm) (malicious package)
- [MAL-2025-39814](https://insights.sbomify.com/MAL-2025-39814/): Malicious code in xigua-ha4-project (npm) (malicious package)
- [MAL-2025-39813](https://insights.sbomify.com/MAL-2025-39813/): Malicious code in xigua-grape-cqbu (npm) (malicious package)
- [MAL-2025-39812](https://insights.sbomify.com/MAL-2025-39812/): Malicious code in xigua-golf-mike-pgexl (npm) (malicious package)
- [MAL-2025-39811](https://insights.sbomify.com/MAL-2025-39811/): Malicious code in xigua-golf-grape-stgll (npm) (malicious package)
- [MAL-2025-39810](https://insights.sbomify.com/MAL-2025-39810/): Malicious code in xigua-ginkgo-buv1 (npm) (malicious package)
- [MAL-2025-3981](https://insights.sbomify.com/MAL-2025-3981/): Malicious code in angular-monash (npm) (malicious package)
- [MAL-2025-39809](https://insights.sbomify.com/MAL-2025-39809/): Malicious code in xigua-f6l-project (npm) (malicious package)
- [MAL-2025-39808](https://insights.sbomify.com/MAL-2025-39808/): Malicious code in xigua-elderberry-hbhi (npm) (malicious package)
- [MAL-2025-39807](https://insights.sbomify.com/MAL-2025-39807/): Malicious code in xigua-elderberry-apple-icsjn (npm) (malicious package)
- [MAL-2025-39806](https://insights.sbomify.com/MAL-2025-39806/): Malicious code in xigua-echo-eyxc (npm) (malicious package)
- [MAL-2025-39805](https://insights.sbomify.com/MAL-2025-39805/): Malicious code in xigua-echo-bravo-gnkeq (npm) (malicious package)
- [MAL-2025-39804](https://insights.sbomify.com/MAL-2025-39804/): Malicious code in xigua-delta-xbyl (npm) (malicious package)
- [MAL-2025-39803](https://insights.sbomify.com/MAL-2025-39803/): Malicious code in xigua-delta-hotel-myycq (npm) (malicious package)
- [MAL-2025-39802](https://insights.sbomify.com/MAL-2025-39802/): Malicious code in xigua-date-qygr (npm) (malicious package)
- [MAL-2025-39801](https://insights.sbomify.com/MAL-2025-39801/): Malicious code in xigua-date-alpha-muvgj (npm) (malicious package)
- [MAL-2025-39800](https://insights.sbomify.com/MAL-2025-39800/): Malicious code in xigua-cherry-rpep (npm) (malicious package)
- [MAL-2025-3980](https://insights.sbomify.com/MAL-2025-3980/): Malicious code in affirmv2 (npm) (malicious package)
- [MAL-2025-398](https://insights.sbomify.com/MAL-2025-398/): Malicious code in bookingcom-cache (npm) (malicious package)
- [MAL-2025-39799](https://insights.sbomify.com/MAL-2025-39799/): Malicious code in xigua-charlie-tmzv (npm) (malicious package)
- [MAL-2025-39798](https://insights.sbomify.com/MAL-2025-39798/): Malicious code in xigua-bs0-project (npm) (malicious package)
- [MAL-2025-39797](https://insights.sbomify.com/MAL-2025-39797/): Malicious code in xigua-bravo-jqdc (npm) (malicious package)
- [MAL-2025-39796](https://insights.sbomify.com/MAL-2025-39796/): Malicious code in xigua-beetroot-xjsc (npm) (malicious package)
- [MAL-2025-39795](https://insights.sbomify.com/MAL-2025-39795/): Malicious code in xigua-banana-bravo-xruio (npm) (malicious package)
- [MAL-2025-39794](https://insights.sbomify.com/MAL-2025-39794/): Malicious code in xigua-banana-bravo-wbpsm (npm) (malicious package)
- [MAL-2025-39793](https://insights.sbomify.com/MAL-2025-39793/): Malicious code in xigua-apple-lmlp (npm) (malicious package)
- [MAL-2025-39792](https://insights.sbomify.com/MAL-2025-39792/): Malicious code in xigua-alpha-elderberry-oaqxb (npm) (malicious package)
- [MAL-2025-39791](https://insights.sbomify.com/MAL-2025-39791/): Malicious code in xigua-alpha-bcmj (npm) (malicious package)
- [MAL-2025-39790](https://insights.sbomify.com/MAL-2025-39790/): Malicious code in xigua-9om-project (npm) (malicious package)
- [MAL-2025-3979](https://insights.sbomify.com/MAL-2025-3979/): Malicious code in act1on3-package (npm) (malicious package)
- [MAL-2025-39789](https://insights.sbomify.com/MAL-2025-39789/): Malicious code in xigua-7zy-project (npm) (malicious package)
- [MAL-2025-39788](https://insights.sbomify.com/MAL-2025-39788/): Malicious code in xigua-75n-project (npm) (malicious package)
- [MAL-2025-39787](https://insights.sbomify.com/MAL-2025-39787/): Malicious code in xigua-2yr-project (npm) (malicious package)
- [MAL-2025-39786](https://insights.sbomify.com/MAL-2025-39786/): Malicious code in xigua-2f5-project (npm) (malicious package)
- [MAL-2025-39785](https://insights.sbomify.com/MAL-2025-39785/): Malicious code in xifsymdhklukwrpn (npm) (malicious package)
- [MAL-2025-39784](https://insights.sbomify.com/MAL-2025-39784/): Malicious code in xiaozewei (npm) (malicious package)
- [MAL-2025-39783](https://insights.sbomify.com/MAL-2025-39783/): Malicious code in xiaoxue (npm) (malicious package)
- [MAL-2025-39782](https://insights.sbomify.com/MAL-2025-39782/): Malicious code in xiaomei (npm) (malicious package)
- [MAL-2025-39781](https://insights.sbomify.com/MAL-2025-39781/): Malicious code in xiaoliuren-yucefa-quanji (npm) (malicious package)
- [MAL-2025-39780](https://insights.sbomify.com/MAL-2025-39780/): Malicious code in xianxing-daishu-ver9 (npm) (malicious package)
- [MAL-2025-3978](https://insights.sbomify.com/MAL-2025-3978/): Malicious code in @hm6816/lodash-isequal (npm) (malicious package)
- [MAL-2025-39779](https://insights.sbomify.com/MAL-2025-39779/): Malicious code in xianxing-daishu-ver8 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/671/