# Vulnerabilities published in 2025 - [MAL-2025-39688](https://insights.sbomify.com/MAL-2025-39688/): Malicious code in xenon_n0mv9_yxfwp_yew (npm) (malicious package) - [MAL-2025-39687](https://insights.sbomify.com/MAL-2025-39687/): Malicious code in xenon_as4mg_zcyr7_flare (npm) (malicious package) - [MAL-2025-39686](https://insights.sbomify.com/MAL-2025-39686/): Malicious code in xenon_9myxc_r64ds_quicksilver (npm) (malicious package) - [MAL-2025-39685](https://insights.sbomify.com/MAL-2025-39685/): Malicious code in xenon_74ygk_q5q7t_antelope (npm) (malicious package) - [MAL-2025-39684](https://insights.sbomify.com/MAL-2025-39684/): Malicious code in xenon_3fipc_xxmop_oasis (npm) (malicious package) - [MAL-2025-39683](https://insights.sbomify.com/MAL-2025-39683/): Malicious code in xenon_3dkk4_8ct2r_saffron (npm) (malicious package) - [MAL-2025-39682](https://insights.sbomify.com/MAL-2025-39682/): Malicious code in xenon_0so0j_ox8m2_crystal (npm) (malicious package) - [MAL-2025-39681](https://insights.sbomify.com/MAL-2025-39681/): Malicious code in xenon-zenith-qlf154-project (npm) (malicious package) - [MAL-2025-39680](https://insights.sbomify.com/MAL-2025-39680/): Malicious code in xenon-zenith-lkn201-project (npm) (malicious package) - [MAL-2025-3968](https://insights.sbomify.com/MAL-2025-3968/): Malicious code in madddterialxtest (npm) (malicious package) - [MAL-2025-39679](https://insights.sbomify.com/MAL-2025-39679/): Malicious code in xenon-yonder-ihk107-project (npm) (malicious package) - [MAL-2025-39678](https://insights.sbomify.com/MAL-2025-39678/): Malicious code in xenon-yaml-pm2-saturnology (npm) (malicious package) - [MAL-2025-39677](https://insights.sbomify.com/MAL-2025-39677/): Malicious code in xenon-willow-iep311-project (npm) (malicious package) - [MAL-2025-39676](https://insights.sbomify.com/MAL-2025-39676/): Malicious code in xenon-whale-guu259-project (npm) (malicious package) - [MAL-2025-39675](https://insights.sbomify.com/MAL-2025-39675/): Malicious code in xenon-volcano-9j04 (npm) (malicious package) - [MAL-2025-39674](https://insights.sbomify.com/MAL-2025-39674/): Malicious code in xenon-uranium-rlg405-project (npm) (malicious package) - [MAL-2025-39673](https://insights.sbomify.com/MAL-2025-39673/): Malicious code in xenon-ub27v-lcwx2-moondust-project (npm) (malicious package) - [MAL-2025-39672](https://insights.sbomify.com/MAL-2025-39672/): Malicious code in xenon-tornado-lvl701-project (npm) (malicious package) - [MAL-2025-39671](https://insights.sbomify.com/MAL-2025-39671/): Malicious code in xenon-thunder-ugo277-project (npm) (malicious package) - [MAL-2025-39670](https://insights.sbomify.com/MAL-2025-39670/): Malicious code in xenon-swan-uwm078-project (npm) (malicious package) - [MAL-2025-3967](https://insights.sbomify.com/MAL-2025-3967/): Malicious code in maddddddterialxtest (npm) (malicious package) - [MAL-2025-39669](https://insights.sbomify.com/MAL-2025-39669/): Malicious code in xenon-romeo-08qf (npm) (malicious package) - [MAL-2025-39668](https://insights.sbomify.com/MAL-2025-39668/): Malicious code in xenon-reef-csm442-project (npm) (malicious package) - [MAL-2025-39667](https://insights.sbomify.com/MAL-2025-39667/): Malicious code in xenon-rainbow-bzv466-project (npm) (malicious package) - [MAL-2025-39666](https://insights.sbomify.com/MAL-2025-39666/): Malicious code in xenon-qpsmv-sxibm-bison-project (npm) (malicious package) - [MAL-2025-39665](https://insights.sbomify.com/MAL-2025-39665/): Malicious code in xenon-pinnacle-fwn326-project (npm) (malicious package) - [MAL-2025-39664](https://insights.sbomify.com/MAL-2025-39664/): Malicious code in xenon-peony-leh904-project (npm) (malicious package) - [MAL-2025-39663](https://insights.sbomify.com/MAL-2025-39663/): Malicious code in xenon-orbit-v5i2 (npm) (malicious package) - [MAL-2025-39662](https://insights.sbomify.com/MAL-2025-39662/): Malicious code in xenon-ocean-ltz904-project (npm) (malicious package) - [MAL-2025-39661](https://insights.sbomify.com/MAL-2025-39661/): Malicious code in xenon-oauth-quantumfoam-geckodriver (npm) (malicious package) - [MAL-2025-39660](https://insights.sbomify.com/MAL-2025-39660/): Malicious code in xenon-nimbus-lxu167-project (npm) (malicious package) - [MAL-2025-3966](https://insights.sbomify.com/MAL-2025-3966/): Malicious code in m0m0x01d (npm) (malicious package) - [MAL-2025-39659](https://insights.sbomify.com/MAL-2025-39659/): Malicious code in xenon-nautilus-maw577-project (npm) (malicious package) - [MAL-2025-39658](https://insights.sbomify.com/MAL-2025-39658/): Malicious code in xenon-markdown-pdf-backend-playwright (npm) (malicious package) - [MAL-2025-39657](https://insights.sbomify.com/MAL-2025-39657/): Malicious code in xenon-lion-bkg8 (npm) (malicious package) - [MAL-2025-39656](https://insights.sbomify.com/MAL-2025-39656/): Malicious code in xenon-lemon-vbsw (npm) (malicious package) - [MAL-2025-39655](https://insights.sbomify.com/MAL-2025-39655/): Malicious code in xenon-l0n7z-itbi2-quartz-project (npm) (malicious package) - [MAL-2025-39654](https://insights.sbomify.com/MAL-2025-39654/): Malicious code in xenon-kiwi-ocm271-project (npm) (malicious package) - [MAL-2025-39653](https://insights.sbomify.com/MAL-2025-39653/): Malicious code in xenon-kiwi-lsa042-project (npm) (malicious package) - [MAL-2025-39652](https://insights.sbomify.com/MAL-2025-39652/): Malicious code in xenon-kite-ecj893-project (npm) (malicious package) - [MAL-2025-39651](https://insights.sbomify.com/MAL-2025-39651/): Malicious code in xenon-kelp-lza221-project (npm) (malicious package) - [MAL-2025-39650](https://insights.sbomify.com/MAL-2025-39650/): Malicious code in xenon-jest-fomalhaut-bioinformatics (npm) (malicious package) - [MAL-2025-3965](https://insights.sbomify.com/MAL-2025-3965/): Malicious code in gltfvariantmeld (npm) (malicious package) - [MAL-2025-39649](https://insights.sbomify.com/MAL-2025-39649/): Malicious code in xenon-jellyfish-ozp950-project (npm) (malicious package) - [MAL-2025-39648](https://insights.sbomify.com/MAL-2025-39648/): Malicious code in xenon-jellyfish-kuk280-project (npm) (malicious package) - [MAL-2025-39647](https://insights.sbomify.com/MAL-2025-39647/): Malicious code in xenon-igloo-ioo931-project (npm) (malicious package) - [MAL-2025-39646](https://insights.sbomify.com/MAL-2025-39646/): Malicious code in xenon-iei8f-bck9y-unity-project (npm) (malicious package) - [MAL-2025-39645](https://insights.sbomify.com/MAL-2025-39645/): Malicious code in xenon-iceberg-nlc124-project (npm) (malicious package) - [MAL-2025-39644](https://insights.sbomify.com/MAL-2025-39644/): Malicious code in xenon-frost-hio865-project (npm) (malicious package) - [MAL-2025-39643](https://insights.sbomify.com/MAL-2025-39643/): Malicious code in xenon-foxtrot-snal (npm) (malicious package) - [MAL-2025-39642](https://insights.sbomify.com/MAL-2025-39642/): Malicious code in xenon-elephant-aow174-project (npm) (malicious package) - [MAL-2025-39641](https://insights.sbomify.com/MAL-2025-39641/): Malicious code in xenon-dove-lkb015-project (npm) (malicious package) - [MAL-2025-39640](https://insights.sbomify.com/MAL-2025-39640/): Malicious code in xenon-dolphin-kaq502-project (npm) (malicious package) - [MAL-2025-3964](https://insights.sbomify.com/MAL-2025-3964/): Malicious code in fatfingers-vroooom (npm) (malicious package) - [MAL-2025-39639](https://insights.sbomify.com/MAL-2025-39639/): Malicious code in xenon-dendrochronology-cors-loglevel (npm) (malicious package) - [MAL-2025-39638](https://insights.sbomify.com/MAL-2025-39638/): Malicious code in xenon-crystal-qad185-project (npm) (malicious package) - [MAL-2025-39637](https://insights.sbomify.com/MAL-2025-39637/): Malicious code in xenon-botel-580r2-yellow-project (npm) (malicious package) - [MAL-2025-39636](https://insights.sbomify.com/MAL-2025-39636/): Malicious code in xenon-blazar-leda-mira (npm) (malicious package) - [MAL-2025-39635](https://insights.sbomify.com/MAL-2025-39635/): Malicious code in xenon-bamboo-ven102-project (npm) (malicious package) - [MAL-2025-39634](https://insights.sbomify.com/MAL-2025-39634/): Malicious code in xenon-asteroid-mej334-project (npm) (malicious package) - [MAL-2025-39633](https://insights.sbomify.com/MAL-2025-39633/): Malicious code in xenon-asteroid-bxd787-project (npm) (malicious package) - [MAL-2025-39632](https://insights.sbomify.com/MAL-2025-39632/): Malicious code in xenon-amber-jgb951-project (npm) (malicious package) - [MAL-2025-39631](https://insights.sbomify.com/MAL-2025-39631/): Malicious code in xenon-almond-mvqg (npm) (malicious package) - [MAL-2025-39630](https://insights.sbomify.com/MAL-2025-39630/): Malicious code in xenon-abiogenesis-got-quasar (npm) (malicious package) - [MAL-2025-3963](https://insights.sbomify.com/MAL-2025-3963/): Malicious code in dojo_10 (npm) (malicious package) - [MAL-2025-39629](https://insights.sbomify.com/MAL-2025-39629/): Malicious code in xenon-6kho4-eb6jz-harmony-project (npm) (malicious package) - [MAL-2025-39628](https://insights.sbomify.com/MAL-2025-39628/): Malicious code in xenon-0xyls-4a33u-glacier-project (npm) (malicious package) - [MAL-2025-39627](https://insights.sbomify.com/MAL-2025-39627/): Malicious code in xenolith_p4mer_qr3xv_lullaby (npm) (malicious package) - [MAL-2025-39626](https://insights.sbomify.com/MAL-2025-39626/): Malicious code in xenolith_6hnxc_fgbci_lullaby (npm) (malicious package) - [MAL-2025-39625](https://insights.sbomify.com/MAL-2025-39625/): Malicious code in xenofixer (npm) (malicious package) - [MAL-2025-39624](https://insights.sbomify.com/MAL-2025-39624/): Malicious code in xenobiology-darkmatter-schema-cosmicsilence (npm) (malicious package) - [MAL-2025-39623](https://insights.sbomify.com/MAL-2025-39623/): Malicious code in xeno-executor (npm) (malicious package) - [MAL-2025-39622](https://insights.sbomify.com/MAL-2025-39622/): Malicious code in xenman (npm) (malicious package) - [MAL-2025-39621](https://insights.sbomify.com/MAL-2025-39621/): Malicious code in xenith_qsfti_08zmj_bluebird (npm) (malicious package) - [MAL-2025-39620](https://insights.sbomify.com/MAL-2025-39620/): Malicious code in xenith_mkzq9_d2h4v_opal (npm) (malicious package) - [MAL-2025-3962](https://insights.sbomify.com/MAL-2025-3962/): Malicious code in dep-b (npm) (malicious package) - [MAL-2025-39619](https://insights.sbomify.com/MAL-2025-39619/): Malicious code in xenith_hapqu_k44ks_driftwood (npm) (malicious package) - [MAL-2025-39618](https://insights.sbomify.com/MAL-2025-39618/): Malicious code in xenith_fqxqy_6j1tc_zodiac (npm) (malicious package) - [MAL-2025-39617](https://insights.sbomify.com/MAL-2025-39617/): Malicious code in xenith_drs2r_3gna8_yonder (npm) (malicious package) - [MAL-2025-39616](https://insights.sbomify.com/MAL-2025-39616/): Malicious code in xenith_a2aoj_bf0r3_zenith (npm) (malicious package) - [MAL-2025-39615](https://insights.sbomify.com/MAL-2025-39615/): Malicious code in xenith-whzxn-psofd-ember-project (npm) (malicious package) - [MAL-2025-39614](https://insights.sbomify.com/MAL-2025-39614/): Malicious code in xenith-rn7of-fhejx-ember-project (npm) (malicious package) - [MAL-2025-39613](https://insights.sbomify.com/MAL-2025-39613/): Malicious code in xenith-qflv3-gmcd6-velvet-project (npm) (malicious package) - [MAL-2025-39612](https://insights.sbomify.com/MAL-2025-39612/): Malicious code in xenith-pql73-dftd8-jade-project (npm) (malicious package) - [MAL-2025-39611](https://insights.sbomify.com/MAL-2025-39611/): Malicious code in xenith-k07oa-gwxa7-yarn-project (npm) (malicious package) - [MAL-2025-39610](https://insights.sbomify.com/MAL-2025-39610/): Malicious code in xenith-6n82k-vye3a-keystone-project (npm) (malicious package) - [MAL-2025-3961](https://insights.sbomify.com/MAL-2025-3961/): Malicious code in ace-tools (npm) (malicious package) - [MAL-2025-39609](https://insights.sbomify.com/MAL-2025-39609/): Malicious code in xenith-6elzx-79g7r-yeti-project (npm) (malicious package) - [MAL-2025-39608](https://insights.sbomify.com/MAL-2025-39608/): Malicious code in xendit-user-service-client (npm) (malicious package) - [MAL-2025-39607](https://insights.sbomify.com/MAL-2025-39607/): Malicious code in xendit-forex-service (npm) (malicious package) - [MAL-2025-39606](https://insights.sbomify.com/MAL-2025-39606/): Malicious code in xendit-bni-connector (npm) (malicious package) - [MAL-2025-39605](https://insights.sbomify.com/MAL-2025-39605/): Malicious code in xejnmcbogvpslazk (npm) (malicious package) - [MAL-2025-39604](https://insights.sbomify.com/MAL-2025-39604/): Malicious code in xedecrypt (npm) (malicious package) - [MAL-2025-39603](https://insights.sbomify.com/MAL-2025-39603/): Malicious code in xecrypt (npm) (malicious package) - [MAL-2025-39602](https://insights.sbomify.com/MAL-2025-39602/): Malicious code in xebialabs (npm) (malicious package) - [MAL-2025-39601](https://insights.sbomify.com/MAL-2025-39601/): Malicious code in xdh-go (npm) (malicious package) - [MAL-2025-39600](https://insights.sbomify.com/MAL-2025-39600/): Malicious code in xd-test-gallery (npm) (malicious package) - [MAL-2025-3960](https://insights.sbomify.com/MAL-2025-3960/): Malicious code in @sage-org/fabric-ui-root-config (npm) (malicious package) - [MAL-2025-396](https://insights.sbomify.com/MAL-2025-396/): Malicious code in bookingcom-api-client (npm) (malicious package) - [MAL-2025-39599](https://insights.sbomify.com/MAL-2025-39599/): Malicious code in xbzecfylgvsopniw (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/673/