# Vulnerabilities published in 2025


- [MAL-2025-39598](https://insights.sbomify.com/MAL-2025-39598/): Malicious code in xbox-card-balance-today (npm) (malicious package)
- [MAL-2025-39597](https://insights.sbomify.com/MAL-2025-39597/): Malicious code in xbjifzkaknptyluq (npm) (malicious package)
- [MAL-2025-39596](https://insights.sbomify.com/MAL-2025-39596/): Malicious code in xbbzaini (npm) (malicious package)
- [MAL-2025-39595](https://insights.sbomify.com/MAL-2025-39595/): Malicious code in xaviera (npm) (malicious package)
- [MAL-2025-39594](https://insights.sbomify.com/MAL-2025-39594/): Malicious code in xaver-tapai61-breki (npm) (malicious package)
- [MAL-2025-39593](https://insights.sbomify.com/MAL-2025-39593/): Malicious code in xaver-oblok58-sukiwir (npm) (malicious package)
- [MAL-2025-39592](https://insights.sbomify.com/MAL-2025-39592/): Malicious code in xaver-lodeh96-breki (npm) (malicious package)
- [MAL-2025-39591](https://insights.sbomify.com/MAL-2025-39591/): Malicious code in xaver-keripik57-breki (npm) (malicious package)
- [MAL-2025-39590](https://insights.sbomify.com/MAL-2025-39590/): Malicious code in xaver-kentang20-sukiwir (npm) (malicious package)
- [MAL-2025-3959](https://insights.sbomify.com/MAL-2025-3959/): Malicious code in @flcore/login (npm) (malicious package)
- [MAL-2025-39589](https://insights.sbomify.com/MAL-2025-39589/): Malicious code in xaver-kemplang6-sukiwir (npm) (malicious package)
- [MAL-2025-39588](https://insights.sbomify.com/MAL-2025-39588/): Malicious code in xaver-gado-gado75-kuki (npm) (malicious package)
- [MAL-2025-39587](https://insights.sbomify.com/MAL-2025-39587/): Malicious code in xaver-empal6-breki (npm) (malicious package)
- [MAL-2025-39586](https://insights.sbomify.com/MAL-2025-39586/): Malicious code in xatclasse (npm) (malicious package)
- [MAL-2025-39585](https://insights.sbomify.com/MAL-2025-39585/): Malicious code in xanthus-writable-janus-middleware (npm) (malicious package)
- [MAL-2025-39584](https://insights.sbomify.com/MAL-2025-39584/): Malicious code in xanthus-start-fornax-deneb (npm) (malicious package)
- [MAL-2025-39583](https://insights.sbomify.com/MAL-2025-39583/): Malicious code in xanthus-quark-wormhole-neutronstar (npm) (malicious package)
- [MAL-2025-39582](https://insights.sbomify.com/MAL-2025-39582/): Malicious code in xanthus-grunt-foundation-hyperion (npm) (malicious package)
- [MAL-2025-39581](https://insights.sbomify.com/MAL-2025-39581/): Malicious code in xanthus-gridsome-altair-dione (npm) (malicious package)
- [MAL-2025-39580](https://insights.sbomify.com/MAL-2025-39580/): Malicious code in xanthus-geochemistry-protoplanetarydisk-biogeochemistry (npm) (malicious package)
- [MAL-2025-3958](https://insights.sbomify.com/MAL-2025-3958/): Malicious code in @chat-components/common (npm) (malicious package)
- [MAL-2025-39579](https://insights.sbomify.com/MAL-2025-39579/): Malicious code in xanadu_uvedd_k26ii_ivy (npm) (malicious package)
- [MAL-2025-39578](https://insights.sbomify.com/MAL-2025-39578/): Malicious code in xanadu_to252_4xozm_thunder (npm) (malicious package)
- [MAL-2025-39577](https://insights.sbomify.com/MAL-2025-39577/): Malicious code in xanadu_5nlsw_nw7d3_joy (npm) (malicious package)
- [MAL-2025-39576](https://insights.sbomify.com/MAL-2025-39576/): Malicious code in xanadu-violet-yhy540-project (npm) (malicious package)
- [MAL-2025-39575](https://insights.sbomify.com/MAL-2025-39575/): Malicious code in xanadu-u3y6w-4vk6v-xenith-project (npm) (malicious package)
- [MAL-2025-39574](https://insights.sbomify.com/MAL-2025-39574/): Malicious code in xanadu-test-xanadu-tectonophysics (npm) (malicious package)
- [MAL-2025-39573](https://insights.sbomify.com/MAL-2025-39573/): Malicious code in xanadu-tectonophysics-oscillation-dione (npm) (malicious package)
- [MAL-2025-39572](https://insights.sbomify.com/MAL-2025-39572/): Malicious code in xanadu-sqlite-palynology-release-it (npm) (malicious package)
- [MAL-2025-39571](https://insights.sbomify.com/MAL-2025-39571/): Malicious code in xanadu-pino-dactyl-proxima (npm) (malicious package)
- [MAL-2025-39570](https://insights.sbomify.com/MAL-2025-39570/): Malicious code in xanadu-pcp5m-79dms-velvet-project (npm) (malicious package)
- [MAL-2025-3957](https://insights.sbomify.com/MAL-2025-3957/): Malicious code in vscode-oja (npm) (malicious package)
- [MAL-2025-39569](https://insights.sbomify.com/MAL-2025-39569/): Malicious code in xanadu-mxnlw-royfy-dawn-project (npm) (malicious package)
- [MAL-2025-39568](https://insights.sbomify.com/MAL-2025-39568/): Malicious code in xanadu-meadow-axm362-project (npm) (malicious package)
- [MAL-2025-39567](https://insights.sbomify.com/MAL-2025-39567/): Malicious code in xanadu-leopard-xdt272-project (npm) (malicious package)
- [MAL-2025-39566](https://insights.sbomify.com/MAL-2025-39566/): Malicious code in xanadu-k8mj8-aokcz-dew-project (npm) (malicious package)
- [MAL-2025-39565](https://insights.sbomify.com/MAL-2025-39565/): Malicious code in xanadu-joas9-vwnlw-grove-project (npm) (malicious package)
- [MAL-2025-39564](https://insights.sbomify.com/MAL-2025-39564/): Malicious code in xanadu-jellyfish-iof249-project (npm) (malicious package)
- [MAL-2025-39563](https://insights.sbomify.com/MAL-2025-39563/): Malicious code in xanadu-h1tc8-zt1r1-horizon-project (npm) (malicious package)
- [MAL-2025-39562](https://insights.sbomify.com/MAL-2025-39562/): Malicious code in xanadu-giraffe-tkn378-project (npm) (malicious package)
- [MAL-2025-39561](https://insights.sbomify.com/MAL-2025-39561/): Malicious code in xanadu-ge3zs-5cuaw-boulder-project (npm) (malicious package)
- [MAL-2025-39560](https://insights.sbomify.com/MAL-2025-39560/): Malicious code in xanadu-forest-bow374-project (npm) (malicious package)
- [MAL-2025-3956](https://insights.sbomify.com/MAL-2025-3956/): Malicious code in qlkube-docs (npm) (malicious package)
- [MAL-2025-39559](https://insights.sbomify.com/MAL-2025-39559/): Malicious code in xanadu-fm3ov-hl4xy-tide-project (npm) (malicious package)
- [MAL-2025-39558](https://insights.sbomify.com/MAL-2025-39558/): Malicious code in xanadu-exbv5-kobdd-dune-project (npm) (malicious package)
- [MAL-2025-39557](https://insights.sbomify.com/MAL-2025-39557/): Malicious code in xanadu-ecoiq-waflb-zenith-project (npm) (malicious package)
- [MAL-2025-39556](https://insights.sbomify.com/MAL-2025-39556/): Malicious code in xanadu-decoherence-epigenetics-xanadu (npm) (malicious package)
- [MAL-2025-39555](https://insights.sbomify.com/MAL-2025-39555/): Malicious code in xanadu-ddnos-mxtiz-throne-project (npm) (malicious package)
- [MAL-2025-39554](https://insights.sbomify.com/MAL-2025-39554/): Malicious code in xanadu-carpo-abiogenesis-sagitta (npm) (malicious package)
- [MAL-2025-39553](https://insights.sbomify.com/MAL-2025-39553/): Malicious code in xanadu-buelj-3mowg-lucid-project (npm) (malicious package)
- [MAL-2025-39552](https://insights.sbomify.com/MAL-2025-39552/): Malicious code in xanadu-boulder-xbv268-project (npm) (malicious package)
- [MAL-2025-39551](https://insights.sbomify.com/MAL-2025-39551/): Malicious code in xanadu-bnklw-e5wnw-ripple-project (npm) (malicious package)
- [MAL-2025-39550](https://insights.sbomify.com/MAL-2025-39550/): Malicious code in xanadu-2ljj4-2tk5x-horizon-project (npm) (malicious package)
- [MAL-2025-3955](https://insights.sbomify.com/MAL-2025-3955/): Malicious code in muto-kaiju-npm-native (npm) (malicious package)
- [MAL-2025-39549](https://insights.sbomify.com/MAL-2025-39549/): Malicious code in xanadu-1xieh-4pdiv-throne-project (npm) (malicious package)
- [MAL-2025-39548](https://insights.sbomify.com/MAL-2025-39548/): Malicious code in xamarinio (npm) (malicious package)
- [MAL-2025-39547](https://insights.sbomify.com/MAL-2025-39547/): Malicious code in x_exchanges (npm) (malicious package)
- [MAL-2025-39546](https://insights.sbomify.com/MAL-2025-39546/): Malicious code in x0iliom7ielzziorieyqsnrnkihknzr5 (npm) (malicious package)
- [MAL-2025-39545](https://insights.sbomify.com/MAL-2025-39545/): Malicious code in wzxknblfkahtupem (npm) (malicious package)
- [MAL-2025-39544](https://insights.sbomify.com/MAL-2025-39544/): Malicious code in wzmbcvrkpjktsixe (npm) (malicious package)
- [MAL-2025-39543](https://insights.sbomify.com/MAL-2025-39543/): Malicious code in wzltools (npm) (malicious package)
- [MAL-2025-39542](https://insights.sbomify.com/MAL-2025-39542/): Malicious code in wzlsfhxyaqgrnptc (npm) (malicious package)
- [MAL-2025-39541](https://insights.sbomify.com/MAL-2025-39541/): Malicious code in wynston (npm) (malicious package)
- [MAL-2025-39540](https://insights.sbomify.com/MAL-2025-39540/): Malicious code in wynk_data_module (npm) (malicious package)
- [MAL-2025-3954](https://insights.sbomify.com/MAL-2025-3954/): Malicious code in morrrisjs (npm) (malicious package)
- [MAL-2025-39539](https://insights.sbomify.com/MAL-2025-39539/): Malicious code in wymcount (npm) (malicious package)
- [MAL-2025-39538](https://insights.sbomify.com/MAL-2025-39538/): Malicious code in wxutsyiprcbkadzo (npm) (malicious package)
- [MAL-2025-39537](https://insights.sbomify.com/MAL-2025-39537/): Malicious code in wxrenamer (npm) (malicious package)
- [MAL-2025-39536](https://insights.sbomify.com/MAL-2025-39536/): Malicious code in wxeloqua (npm) (malicious package)
- [MAL-2025-39535](https://insights.sbomify.com/MAL-2025-39535/): Malicious code in wwwtools (npm) (malicious package)
- [MAL-2025-39534](https://insights.sbomify.com/MAL-2025-39534/): Malicious code in wwwdroid (npm) (malicious package)
- [MAL-2025-39533](https://insights.sbomify.com/MAL-2025-39533/): Malicious code in www-latam-commons (npm) (malicious package)
- [MAL-2025-39532](https://insights.sbomify.com/MAL-2025-39532/): Malicious code in wwesdwww (npm) (malicious package)
- [MAL-2025-39531](https://insights.sbomify.com/MAL-2025-39531/): Malicious code in wwe-nftcollection738 (npm) (malicious package)
- [MAL-2025-39530](https://insights.sbomify.com/MAL-2025-39530/): Malicious code in wwe-nftcollection732 (npm) (malicious package)
- [MAL-2025-3953](https://insights.sbomify.com/MAL-2025-3953/): Malicious code in inter-frontend-lib-util (npm) (malicious package)
- [MAL-2025-39529](https://insights.sbomify.com/MAL-2025-39529/): Malicious code in wwe-nftcollection666 (npm) (malicious package)
- [MAL-2025-39528](https://insights.sbomify.com/MAL-2025-39528/): Malicious code in wwe-nftcollection606 (npm) (malicious package)
- [MAL-2025-39527](https://insights.sbomify.com/MAL-2025-39527/): Malicious code in wwe-nftcollection364 (npm) (malicious package)
- [MAL-2025-39526](https://insights.sbomify.com/MAL-2025-39526/): Malicious code in ww-whisper (npm) (malicious package)
- [MAL-2025-39525](https://insights.sbomify.com/MAL-2025-39525/): Malicious code in ww-angular-toolbelt (npm) (malicious package)
- [MAL-2025-39524](https://insights.sbomify.com/MAL-2025-39524/): Malicious code in wvmarket (npm) (malicious package)
- [MAL-2025-39523](https://insights.sbomify.com/MAL-2025-39523/): Malicious code in wvdialer (npm) (malicious package)
- [MAL-2025-39522](https://insights.sbomify.com/MAL-2025-39522/): Malicious code in wux-ui (npm) (malicious package)
- [MAL-2025-39521](https://insights.sbomify.com/MAL-2025-39521/): Malicious code in wuthering (npm) (malicious package)
- [MAL-2025-39520](https://insights.sbomify.com/MAL-2025-39520/): Malicious code in wurfl-paypal (npm) (malicious package)
- [MAL-2025-3952](https://insights.sbomify.com/MAL-2025-3952/): Malicious code in inter-frontend-hooks (npm) (malicious package)
- [MAL-2025-39519](https://insights.sbomify.com/MAL-2025-39519/): Malicious code in wupnajvxqstkizlf (npm) (malicious package)
- [MAL-2025-39518](https://insights.sbomify.com/MAL-2025-39518/): Malicious code in wumdering (npm) (malicious package)
- [MAL-2025-39517](https://insights.sbomify.com/MAL-2025-39517/): Malicious code in wulver (npm) (malicious package)
- [MAL-2025-39516](https://insights.sbomify.com/MAL-2025-39516/): Malicious code in wukonga (npm) (malicious package)
- [MAL-2025-39515](https://insights.sbomify.com/MAL-2025-39515/): Malicious code in wubofan-renzhi-fangfalun-erlingyibayiling-yier (npm) (malicious package)
- [MAL-2025-39514](https://insights.sbomify.com/MAL-2025-39514/): Malicious code in wubofan-renzhi-fangfalun-erlingyibalingsi-lingliu (npm) (malicious package)
- [MAL-2025-39513](https://insights.sbomify.com/MAL-2025-39513/): Malicious code in wubofan-renzhi-fangfalun-erlingyibalingqi-lingjiu (npm) (malicious package)
- [MAL-2025-39512](https://insights.sbomify.com/MAL-2025-39512/): Malicious code in wuai-pojie-tuoke-pojiequ-erlingyiliulingwu-lingjiu (npm) (malicious package)
- [MAL-2025-39511](https://insights.sbomify.com/MAL-2025-39511/): Malicious code in wuai-pojie-tuoke-pojiequ-erlingyiliulingjiu-yier (npm) (malicious package)
- [MAL-2025-39510](https://insights.sbomify.com/MAL-2025-39510/): Malicious code in wuai-pojie-tuoke-pojiequ-erlingyijiulingyi-lingsi (npm) (malicious package)
- [MAL-2025-3951](https://insights.sbomify.com/MAL-2025-3951/): Malicious code in examples-formic (npm) (malicious package)
- [MAL-2025-39509](https://insights.sbomify.com/MAL-2025-39509/): Malicious code in wuai-pojie-tuoke-pojiequ-erlinglingjiulingyi-lingsi (npm) (malicious package)
- [MAL-2025-39508](https://insights.sbomify.com/MAL-2025-39508/): Malicious code in wuai-pojie-tuoke-pojiequ-erlinglingjiulingwu-lingba (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/674/