# Vulnerabilities published in 2025


- [MAL-2025-39778](https://insights.sbomify.com/MAL-2025-39778/): Malicious code in xianxing-daishu-ver7 (npm) (malicious package)
- [MAL-2025-39777](https://insights.sbomify.com/MAL-2025-39777/): Malicious code in xianxing-daishu-jiqi-yingyong-ver5 (npm) (malicious package)
- [MAL-2025-39776](https://insights.sbomify.com/MAL-2025-39776/): Malicious code in xianxing-daishu-jiqi-yingyong-ver4 (npm) (malicious package)
- [MAL-2025-39775](https://insights.sbomify.com/MAL-2025-39775/): Malicious code in xianxing-daishu-jiqi-yingyong-ver3 (npm) (malicious package)
- [MAL-2025-39774](https://insights.sbomify.com/MAL-2025-39774/): Malicious code in xianxing-daishu-gaoji-jiaocheng (npm) (malicious package)
- [MAL-2025-39773](https://insights.sbomify.com/MAL-2025-39773/): Malicious code in xiantu-touzishu (npm) (malicious package)
- [MAL-2025-39772](https://insights.sbomify.com/MAL-2025-39772/): Malicious code in xiangweb (npm) (malicious package)
- [MAL-2025-39771](https://insights.sbomify.com/MAL-2025-39771/): Malicious code in xiangtu (npm) (malicious package)
- [MAL-2025-39770](https://insights.sbomify.com/MAL-2025-39770/): Malicious code in xianglp (npm) (malicious package)
- [MAL-2025-3977](https://insights.sbomify.com/MAL-2025-3977/): Malicious code in @farabyabdulla54/wwframework (npm) (malicious package)
- [MAL-2025-39769](https://insights.sbomify.com/MAL-2025-39769/): Malicious code in xi-xml-user-process-fire (npm) (malicious package)
- [MAL-2025-39768](https://insights.sbomify.com/MAL-2025-39768/): Malicious code in xi-web-data-water-quick (npm) (malicious package)
- [MAL-2025-39767](https://insights.sbomify.com/MAL-2025-39767/): Malicious code in xi-shell-zeta-assert-encode (npm) (malicious package)
- [MAL-2025-39766](https://insights.sbomify.com/MAL-2025-39766/): Malicious code in xi-secure-lambda-uglify-authorize (npm) (malicious package)
- [MAL-2025-39765](https://insights.sbomify.com/MAL-2025-39765/): Malicious code in xi-psi-fire-meta-rain (npm) (malicious package)
- [MAL-2025-39764](https://insights.sbomify.com/MAL-2025-39764/): Malicious code in xi-epsilon-star-minify-eta (npm) (malicious package)
- [MAL-2025-39763](https://insights.sbomify.com/MAL-2025-39763/): Malicious code in xfwukclsotjbzvyn (npm) (malicious package)
- [MAL-2025-39762](https://insights.sbomify.com/MAL-2025-39762/): Malicious code in xflow (npm) (malicious package)
- [MAL-2025-39761](https://insights.sbomify.com/MAL-2025-39761/): Malicious code in xflamp (npm) (malicious package)
- [MAL-2025-39760](https://insights.sbomify.com/MAL-2025-39760/): Malicious code in xfjsqtmklgzoaphd (npm) (malicious package)
- [MAL-2025-3976](https://insights.sbomify.com/MAL-2025-3976/): Malicious code in @cashcowprotocol/keccak-crypto (npm) (malicious package)
- [MAL-2025-39759](https://insights.sbomify.com/MAL-2025-39759/): Malicious code in xesto (npm) (malicious package)
- [MAL-2025-39758](https://insights.sbomify.com/MAL-2025-39758/): Malicious code in xerxes-quito-despina-node-sass (npm) (malicious package)
- [MAL-2025-39757](https://insights.sbomify.com/MAL-2025-39757/): Malicious code in xerxes-prettier-plugin-markdown-airbnb-resolvers (npm) (malicious package)
- [MAL-2025-39756](https://insights.sbomify.com/MAL-2025-39756/): Malicious code in xerxes-perturbation-rollup-quasar (npm) (malicious package)
- [MAL-2025-39755](https://insights.sbomify.com/MAL-2025-39755/): Malicious code in xerxes-mutation-dysonswarm-supernova (npm) (malicious package)
- [MAL-2025-39754](https://insights.sbomify.com/MAL-2025-39754/): Malicious code in xerxes-augmentedreality-membrane-chalk (npm) (malicious package)
- [MAL-2025-39753](https://insights.sbomify.com/MAL-2025-39753/): Malicious code in xerxes-apollo-antares-proxima (npm) (malicious package)
- [MAL-2025-39752](https://insights.sbomify.com/MAL-2025-39752/): Malicious code in xerus-yard-vsl833-project (npm) (malicious package)
- [MAL-2025-39751](https://insights.sbomify.com/MAL-2025-39751/): Malicious code in xerus-vulture-drs202-project (npm) (malicious package)
- [MAL-2025-39750](https://insights.sbomify.com/MAL-2025-39750/): Malicious code in xerus-vortex-nkw514-project (npm) (malicious package)
- [MAL-2025-3975](https://insights.sbomify.com/MAL-2025-3975/): Malicious code in zas-design-system (npm) (malicious package)
- [MAL-2025-39749](https://insights.sbomify.com/MAL-2025-39749/): Malicious code in xerus-vista-zcw130-project (npm) (malicious package)
- [MAL-2025-39748](https://insights.sbomify.com/MAL-2025-39748/): Malicious code in xerus-utopia-lxa949-project (npm) (malicious package)
- [MAL-2025-39747](https://insights.sbomify.com/MAL-2025-39747/): Malicious code in xerus-umbra-ofj068-project (npm) (malicious package)
- [MAL-2025-39746](https://insights.sbomify.com/MAL-2025-39746/): Malicious code in xerus-reef-aou351-project (npm) (malicious package)
- [MAL-2025-39745](https://insights.sbomify.com/MAL-2025-39745/): Malicious code in xerus-quilt-yih538-project (npm) (malicious package)
- [MAL-2025-39744](https://insights.sbomify.com/MAL-2025-39744/): Malicious code in xerus-quasar-plk104-project (npm) (malicious package)
- [MAL-2025-39743](https://insights.sbomify.com/MAL-2025-39743/): Malicious code in xerus-jellyfish-eep827-project (npm) (malicious package)
- [MAL-2025-39742](https://insights.sbomify.com/MAL-2025-39742/): Malicious code in xerus-glacier-wyk873-project (npm) (malicious package)
- [MAL-2025-39741](https://insights.sbomify.com/MAL-2025-39741/): Malicious code in xerus-coral-egp050-project (npm) (malicious package)
- [MAL-2025-39740](https://insights.sbomify.com/MAL-2025-39740/): Malicious code in xerus-cherry-ujt576-project (npm) (malicious package)
- [MAL-2025-3974](https://insights.sbomify.com/MAL-2025-3974/): Malicious code in wegenenverkeer (npm) (malicious package)
- [MAL-2025-39739](https://insights.sbomify.com/MAL-2025-39739/): Malicious code in xerus-butterfly-mon413-project (npm) (malicious package)
- [MAL-2025-39738](https://insights.sbomify.com/MAL-2025-39738/): Malicious code in xerox-xerus-zkf275-project (npm) (malicious package)
- [MAL-2025-39737](https://insights.sbomify.com/MAL-2025-39737/): Malicious code in xerox-xanadu-oww310-project (npm) (malicious package)
- [MAL-2025-39736](https://insights.sbomify.com/MAL-2025-39736/): Malicious code in xerox-vine-sux970-project (npm) (malicious package)
- [MAL-2025-39735](https://insights.sbomify.com/MAL-2025-39735/): Malicious code in xerox-uranium-lkj894-project (npm) (malicious package)
- [MAL-2025-39734](https://insights.sbomify.com/MAL-2025-39734/): Malicious code in xerox-unicorn-bck800-project (npm) (malicious package)
- [MAL-2025-39733](https://insights.sbomify.com/MAL-2025-39733/): Malicious code in xerox-sunset-edu206-project (npm) (malicious package)
- [MAL-2025-39732](https://insights.sbomify.com/MAL-2025-39732/): Malicious code in xerox-quilt-awc321-project (npm) (malicious package)
- [MAL-2025-39731](https://insights.sbomify.com/MAL-2025-39731/): Malicious code in xerox-quill-rbe140-project (npm) (malicious package)
- [MAL-2025-39730](https://insights.sbomify.com/MAL-2025-39730/): Malicious code in xerox-quasar-gcv244-project (npm) (malicious package)
- [MAL-2025-3973](https://insights.sbomify.com/MAL-2025-3973/): Malicious code in webcahep (npm) (malicious package)
- [MAL-2025-39729](https://insights.sbomify.com/MAL-2025-39729/): Malicious code in xerox-piano-ygz057-project (npm) (malicious package)
- [MAL-2025-39728](https://insights.sbomify.com/MAL-2025-39728/): Malicious code in xerox-opal-top498-project (npm) (malicious package)
- [MAL-2025-39727](https://insights.sbomify.com/MAL-2025-39727/): Malicious code in xerox-octopus-blz884-project (npm) (malicious package)
- [MAL-2025-39726](https://insights.sbomify.com/MAL-2025-39726/): Malicious code in xerox-nectar-voc513-project (npm) (malicious package)
- [MAL-2025-39725](https://insights.sbomify.com/MAL-2025-39725/): Malicious code in xerox-lilypad-lmq686-project (npm) (malicious package)
- [MAL-2025-39724](https://insights.sbomify.com/MAL-2025-39724/): Malicious code in xerox-koala-brx784-project (npm) (malicious package)
- [MAL-2025-39723](https://insights.sbomify.com/MAL-2025-39723/): Malicious code in xerox-jellyfish-pak874-project (npm) (malicious package)
- [MAL-2025-39722](https://insights.sbomify.com/MAL-2025-39722/): Malicious code in xerox-iguana-zak568-project (npm) (malicious package)
- [MAL-2025-39721](https://insights.sbomify.com/MAL-2025-39721/): Malicious code in xerox-icicle-cxg934-project (npm) (malicious package)
- [MAL-2025-39720](https://insights.sbomify.com/MAL-2025-39720/): Malicious code in xerox-honeycomb-cxp071-project (npm) (malicious package)
- [MAL-2025-3972](https://insights.sbomify.com/MAL-2025-3972/): Malicious code in symphony-binary-confusion-matrix (npm) (malicious package)
- [MAL-2025-39719](https://insights.sbomify.com/MAL-2025-39719/): Malicious code in xerox-fern-vbb741-project (npm) (malicious package)
- [MAL-2025-39718](https://insights.sbomify.com/MAL-2025-39718/): Malicious code in xerox-fern-pom876-project (npm) (malicious package)
- [MAL-2025-39717](https://insights.sbomify.com/MAL-2025-39717/): Malicious code in xerox-elephant-kmq300-project (npm) (malicious package)
- [MAL-2025-39716](https://insights.sbomify.com/MAL-2025-39716/): Malicious code in xerox-ecosystem-dwm284-project (npm) (malicious package)
- [MAL-2025-39715](https://insights.sbomify.com/MAL-2025-39715/): Malicious code in xerox-dove-ytj902-project (npm) (malicious package)
- [MAL-2025-39714](https://insights.sbomify.com/MAL-2025-39714/): Malicious code in xerox-cloud-pgj645-project (npm) (malicious package)
- [MAL-2025-39713](https://insights.sbomify.com/MAL-2025-39713/): Malicious code in xerox-cliff-sfk317-project (npm) (malicious package)
- [MAL-2025-39712](https://insights.sbomify.com/MAL-2025-39712/): Malicious code in xerox-brook-byc200-project (npm) (malicious package)
- [MAL-2025-39711](https://insights.sbomify.com/MAL-2025-39711/): Malicious code in xerox-bonfire-nas550-project (npm) (malicious package)
- [MAL-2025-39710](https://insights.sbomify.com/MAL-2025-39710/): Malicious code in xerox-aroma-tjf016-project (npm) (malicious package)
- [MAL-2025-3971](https://insights.sbomify.com/MAL-2025-3971/): Malicious code in sophs-test-package-test5 (npm) (malicious package)
- [MAL-2025-39709](https://insights.sbomify.com/MAL-2025-39709/): Malicious code in xerophyte-wormhole-bjdh (npm) (malicious package)
- [MAL-2025-39708](https://insights.sbomify.com/MAL-2025-39708/): Malicious code in xerophyte-void-ike6 (npm) (malicious package)
- [MAL-2025-39707](https://insights.sbomify.com/MAL-2025-39707/): Malicious code in xerophyte-uniform-53fl (npm) (malicious package)
- [MAL-2025-39706](https://insights.sbomify.com/MAL-2025-39706/): Malicious code in xerophyte-teak-h341 (npm) (malicious package)
- [MAL-2025-39705](https://insights.sbomify.com/MAL-2025-39705/): Malicious code in xerophyte-oak-7g3i (npm) (malicious package)
- [MAL-2025-39704](https://insights.sbomify.com/MAL-2025-39704/): Malicious code in xerophyte-meteor-gd0n (npm) (malicious package)
- [MAL-2025-39703](https://insights.sbomify.com/MAL-2025-39703/): Malicious code in xerophyte-kilo-n13i (npm) (malicious package)
- [MAL-2025-39702](https://insights.sbomify.com/MAL-2025-39702/): Malicious code in xerophyte-india-72ow (npm) (malicious package)
- [MAL-2025-39701](https://insights.sbomify.com/MAL-2025-39701/): Malicious code in xerophyte-foxtrot-ngsu (npm) (malicious package)
- [MAL-2025-39700](https://insights.sbomify.com/MAL-2025-39700/): Malicious code in xepress (npm) (malicious package)
- [MAL-2025-3970](https://insights.sbomify.com/MAL-2025-3970/): Malicious code in poc_drakenkun (npm) (malicious package)
- [MAL-2025-397](https://insights.sbomify.com/MAL-2025-397/): Malicious code in bookingcom-auth (npm) (malicious package)
- [MAL-2025-39699](https://insights.sbomify.com/MAL-2025-39699/): Malicious code in xenos-solis-markdownlint-izar (npm) (malicious package)
- [MAL-2025-39698](https://insights.sbomify.com/MAL-2025-39698/): Malicious code in xenos-prompts-kaus-child-process (npm) (malicious package)
- [MAL-2025-39697](https://insights.sbomify.com/MAL-2025-39697/): Malicious code in xenos-leda-hugo-forever (npm) (malicious package)
- [MAL-2025-39696](https://insights.sbomify.com/MAL-2025-39696/): Malicious code in xenos-cosmicsilence-ichnology-firebase (npm) (malicious package)
- [MAL-2025-39695](https://insights.sbomify.com/MAL-2025-39695/): Malicious code in xenos-blaze-mui-jsonp (npm) (malicious package)
- [MAL-2025-39694](https://insights.sbomify.com/MAL-2025-39694/): Malicious code in xenos-accretion-eleventy-exoplanetology (npm) (malicious package)
- [MAL-2025-39693](https://insights.sbomify.com/MAL-2025-39693/): Malicious code in xenon_wj7ni_ec5ea_solstice (npm) (malicious package)
- [MAL-2025-39692](https://insights.sbomify.com/MAL-2025-39692/): Malicious code in xenon_rwvev_yuwah_xylophone (npm) (malicious package)
- [MAL-2025-39691](https://insights.sbomify.com/MAL-2025-39691/): Malicious code in xenon_rk7xb_pnice_lunar (npm) (malicious package)
- [MAL-2025-39690](https://insights.sbomify.com/MAL-2025-39690/): Malicious code in xenon_pcto2_h3lqi_voyage (npm) (malicious package)
- [MAL-2025-3969](https://insights.sbomify.com/MAL-2025-3969/): Malicious code in placeholdr (npm) (malicious package)
- [MAL-2025-39689](https://insights.sbomify.com/MAL-2025-39689/): Malicious code in xenon_owxm2_jzlah_kestrel (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/672/