# Vulnerabilities published in 2025


- [MAL-2025-39507](https://insights.sbomify.com/MAL-2025-39507/): Malicious code in wuai-pojie-tuoke-pojiequ-erlinglingjiulingjiu-yier (npm) (malicious package)
- [MAL-2025-39506](https://insights.sbomify.com/MAL-2025-39506/): Malicious code in wuai-pojie-tuoke-pojiequ-erlinglingbalingyi-lingsi (npm) (malicious package)
- [MAL-2025-39505](https://insights.sbomify.com/MAL-2025-39505/): Malicious code in wuai-pojie-tuoke-pojiequ-erlinglingbalingwu-lingba (npm) (malicious package)
- [MAL-2025-39504](https://insights.sbomify.com/MAL-2025-39504/): Malicious code in wuai-pojie-tuoke-pojiequ-erlinglingbalingjiu-yier (npm) (malicious package)
- [MAL-2025-39503](https://insights.sbomify.com/MAL-2025-39503/): Malicious code in wtrsec (npm) (malicious package)
- [MAL-2025-39502](https://insights.sbomify.com/MAL-2025-39502/): Malicious code in wtfwsf (npm) (malicious package)
- [MAL-2025-39501](https://insights.sbomify.com/MAL-2025-39501/): Malicious code in wtfiwp (npm) (malicious package)
- [MAL-2025-39500](https://insights.sbomify.com/MAL-2025-39500/): Malicious code in wtails (npm) (malicious package)
- [MAL-2025-3950](https://insights.sbomify.com/MAL-2025-3950/): Malicious code in example-marko-webpack (npm) (malicious package)
- [MAL-2025-395](https://insights.sbomify.com/MAL-2025-395/): Malicious code in bookingcom-api (npm) (malicious package)
- [MAL-2025-39499](https://insights.sbomify.com/MAL-2025-39499/): Malicious code in wsfutil (npm) (malicious package)
- [MAL-2025-39498](https://insights.sbomify.com/MAL-2025-39498/): Malicious code in wsbd.js (npm) (malicious package)
- [MAL-2025-39497](https://insights.sbomify.com/MAL-2025-39497/): Malicious code in ws-ui-tool (npm) (malicious package)
- [MAL-2025-39496](https://insights.sbomify.com/MAL-2025-39496/): Malicious code in writable-wavefunction-ceres-nebula (npm) (malicious package)
- [MAL-2025-39495](https://insights.sbomify.com/MAL-2025-39495/): Malicious code in writable-planckscale-local-redshift (npm) (malicious package)
- [MAL-2025-39494](https://insights.sbomify.com/MAL-2025-39494/): Malicious code in writable-gemini-pavo-jabbah (npm) (malicious package)
- [MAL-2025-39493](https://insights.sbomify.com/MAL-2025-39493/): Malicious code in writable-express-loopback-bioinformatics (npm) (malicious package)
- [MAL-2025-39492](https://insights.sbomify.com/MAL-2025-39492/): Malicious code in writable-asthenosphere-bellatrix-request (npm) (malicious package)
- [MAL-2025-39491](https://insights.sbomify.com/MAL-2025-39491/): Malicious code in writable-apollo-command-cryptography (npm) (malicious package)
- [MAL-2025-39490](https://insights.sbomify.com/MAL-2025-39490/): Malicious code in wretchdl (npm) (malicious package)
- [MAL-2025-3949](https://insights.sbomify.com/MAL-2025-3949/): Malicious code in evo-web (npm) (malicious package)
- [MAL-2025-39489](https://insights.sbomify.com/MAL-2025-39489/): Malicious code in wqertyu (npm) (malicious package)
- [MAL-2025-39488](https://insights.sbomify.com/MAL-2025-39488/): Malicious code in wptricks (npm) (malicious package)
- [MAL-2025-39487](https://insights.sbomify.com/MAL-2025-39487/): Malicious code in wpstitial (npm) (malicious package)
- [MAL-2025-39486](https://insights.sbomify.com/MAL-2025-39486/): Malicious code in wpsnake (npm) (malicious package)
- [MAL-2025-39485](https://insights.sbomify.com/MAL-2025-39485/): Malicious code in wpixlr (npm) (malicious package)
- [MAL-2025-39484](https://insights.sbomify.com/MAL-2025-39484/): Malicious code in wpgenerus (npm) (malicious package)
- [MAL-2025-39483](https://insights.sbomify.com/MAL-2025-39483/): Malicious code in wpfstuff (npm) (malicious package)
- [MAL-2025-39482](https://insights.sbomify.com/MAL-2025-39482/): Malicious code in wpdict (npm) (malicious package)
- [MAL-2025-39481](https://insights.sbomify.com/MAL-2025-39481/): Malicious code in wpcontaxe (npm) (malicious package)
- [MAL-2025-39480](https://insights.sbomify.com/MAL-2025-39480/): Malicious code in wpbutton (npm) (malicious package)
- [MAL-2025-3948](https://insights.sbomify.com/MAL-2025-3948/): Malicious code in developer-bridge (npm) (malicious package)
- [MAL-2025-39479](https://insights.sbomify.com/MAL-2025-39479/): Malicious code in wpapptest (npm) (malicious package)
- [MAL-2025-39478](https://insights.sbomify.com/MAL-2025-39478/): Malicious code in wozhimai-shangzhanggu (npm) (malicious package)
- [MAL-2025-39477](https://insights.sbomify.com/MAL-2025-39477/): Malicious code in woxzdsfgaqutybnh (npm) (malicious package)
- [MAL-2025-39476](https://insights.sbomify.com/MAL-2025-39476/): Malicious code in wowselect (npm) (malicious package)
- [MAL-2025-39475](https://insights.sbomify.com/MAL-2025-39475/): Malicious code in wowo-dev-cdbs (npm) (malicious package)
- [MAL-2025-39474](https://insights.sbomify.com/MAL-2025-39474/): Malicious code in wowo (npm) (malicious package)
- [MAL-2025-39473](https://insights.sbomify.com/MAL-2025-39473/): Malicious code in wowhelp (npm) (malicious package)
- [MAL-2025-39472](https://insights.sbomify.com/MAL-2025-39472/): Malicious code in wowacp (npm) (malicious package)
- [MAL-2025-39471](https://insights.sbomify.com/MAL-2025-39471/): Malicious code in wouldupay (npm) (malicious package)
- [MAL-2025-39470](https://insights.sbomify.com/MAL-2025-39470/): Malicious code in wotpapp (npm) (malicious package)
- [MAL-2025-3947](https://insights.sbomify.com/MAL-2025-3947/): Malicious code in cp-area-nao-correntista-fgts-ui (npm) (malicious package)
- [MAL-2025-39469](https://insights.sbomify.com/MAL-2025-39469/): Malicious code in wotevr (npm) (malicious package)
- [MAL-2025-39468](https://insights.sbomify.com/MAL-2025-39468/): Malicious code in wotaku (npm) (malicious package)
- [MAL-2025-39467](https://insights.sbomify.com/MAL-2025-39467/): Malicious code in wortru (npm) (malicious package)
- [MAL-2025-39466](https://insights.sbomify.com/MAL-2025-39466/): Malicious code in wormhole-superflare-quasar-antares (npm) (malicious package)
- [MAL-2025-39465](https://insights.sbomify.com/MAL-2025-39465/): Malicious code in wormhole-steganography-prettier-eclipse (npm) (malicious package)
- [MAL-2025-39464](https://insights.sbomify.com/MAL-2025-39464/): Malicious code in wormhole-galaxy-parcel-ultra (npm) (malicious package)
- [MAL-2025-39463](https://insights.sbomify.com/MAL-2025-39463/): Malicious code in wormhole-date-9u0f (npm) (malicious package)
- [MAL-2025-39462](https://insights.sbomify.com/MAL-2025-39462/): Malicious code in worldnews (npm) (malicious package)
- [MAL-2025-39461](https://insights.sbomify.com/MAL-2025-39461/): Malicious code in worldli (npm) (malicious package)
- [MAL-2025-39460](https://insights.sbomify.com/MAL-2025-39460/): Malicious code in worldcoin-developer-portal (npm) (malicious package)
- [MAL-2025-3946](https://insights.sbomify.com/MAL-2025-3946/): Malicious code in compensation-calculator (npm) (malicious package)
- [MAL-2025-39459](https://insights.sbomify.com/MAL-2025-39459/): Malicious code in world-counter (npm) (malicious package)
- [MAL-2025-39458](https://insights.sbomify.com/MAL-2025-39458/): Malicious code in workspaces-shadow-example (npm) (malicious package)
- [MAL-2025-39457](https://insights.sbomify.com/MAL-2025-39457/): Malicious code in worksif (npm) (malicious package)
- [MAL-2025-39456](https://insights.sbomify.com/MAL-2025-39456/): Malicious code in working-new-coin-master-spins-generator-2023-for-free-dskldz (npm) (malicious package)
- [MAL-2025-39455](https://insights.sbomify.com/MAL-2025-39455/): Malicious code in working-fortnite-vbucks-generator-free-jdefg (npm) (malicious package)
- [MAL-2025-39454](https://insights.sbomify.com/MAL-2025-39454/): Malicious code in working-asphalt-9-legends-credits-generator (npm) (malicious package)
- [MAL-2025-39453](https://insights.sbomify.com/MAL-2025-39453/): Malicious code in working-ark-survival-primal-pass-generator (npm) (malicious package)
- [MAL-2025-39452](https://insights.sbomify.com/MAL-2025-39452/): Malicious code in worker-common (npm) (malicious package)
- [MAL-2025-39451](https://insights.sbomify.com/MAL-2025-39451/): Malicious code in workcode (npm) (malicious package)
- [MAL-2025-39450](https://insights.sbomify.com/MAL-2025-39450/): Malicious code in work-cpu-process880 (npm) (malicious package)
- [MAL-2025-3945](https://insights.sbomify.com/MAL-2025-3945/): Malicious code in cdpro-redux-utils (npm) (malicious package)
- [MAL-2025-39449](https://insights.sbomify.com/MAL-2025-39449/): Malicious code in work-cpu-process88 (npm) (malicious package)
- [MAL-2025-39448](https://insights.sbomify.com/MAL-2025-39448/): Malicious code in work-cpu-process840 (npm) (malicious package)
- [MAL-2025-39447](https://insights.sbomify.com/MAL-2025-39447/): Malicious code in work-cpu-process8 (npm) (malicious package)
- [MAL-2025-39446](https://insights.sbomify.com/MAL-2025-39446/): Malicious code in work-cpu-process64 (npm) (malicious package)
- [MAL-2025-39445](https://insights.sbomify.com/MAL-2025-39445/): Malicious code in work-cpu-process620 (npm) (malicious package)
- [MAL-2025-39444](https://insights.sbomify.com/MAL-2025-39444/): Malicious code in work-cpu-process520 (npm) (malicious package)
- [MAL-2025-39443](https://insights.sbomify.com/MAL-2025-39443/): Malicious code in work-cpu-process480 (npm) (malicious package)
- [MAL-2025-39442](https://insights.sbomify.com/MAL-2025-39442/): Malicious code in work-cpu-process4 (npm) (malicious package)
- [MAL-2025-39441](https://insights.sbomify.com/MAL-2025-39441/): Malicious code in work-cpu-process360 (npm) (malicious package)
- [MAL-2025-39440](https://insights.sbomify.com/MAL-2025-39440/): Malicious code in work-cpu-process320 (npm) (malicious package)
- [MAL-2025-3944](https://insights.sbomify.com/MAL-2025-3944/): Malicious code in yxt-factor (npm) (malicious package)
- [MAL-2025-39439](https://insights.sbomify.com/MAL-2025-39439/): Malicious code in work-cpu-process240 (npm) (malicious package)
- [MAL-2025-39438](https://insights.sbomify.com/MAL-2025-39438/): Malicious code in work-cpu-process2 (npm) (malicious package)
- [MAL-2025-39437](https://insights.sbomify.com/MAL-2025-39437/): Malicious code in work-cpu-process180 (npm) (malicious package)
- [MAL-2025-39436](https://insights.sbomify.com/MAL-2025-39436/): Malicious code in work-cpu-process14 (npm) (malicious package)
- [MAL-2025-39435](https://insights.sbomify.com/MAL-2025-39435/): Malicious code in work-cpu-process120 (npm) (malicious package)
- [MAL-2025-39434](https://insights.sbomify.com/MAL-2025-39434/): Malicious code in work-cpu-process12 (npm) (malicious package)
- [MAL-2025-39433](https://insights.sbomify.com/MAL-2025-39433/): Malicious code in work-cpu-process-web-web-web-web-web (npm) (malicious package)
- [MAL-2025-39432](https://insights.sbomify.com/MAL-2025-39432/): Malicious code in work-cpu-process-web-web-web-web (npm) (malicious package)
- [MAL-2025-39431](https://insights.sbomify.com/MAL-2025-39431/): Malicious code in work-cpu-process-web-web-web (npm) (malicious package)
- [MAL-2025-39430](https://insights.sbomify.com/MAL-2025-39430/): Malicious code in work-cpu-process-web-web (npm) (malicious package)
- [MAL-2025-3943](https://insights.sbomify.com/MAL-2025-3943/): Malicious code in supera (npm) (malicious package)
- [MAL-2025-39429](https://insights.sbomify.com/MAL-2025-39429/): Malicious code in work-cpu-process-web (npm) (malicious package)
- [MAL-2025-39428](https://insights.sbomify.com/MAL-2025-39428/): Malicious code in work-cpu-process (npm) (malicious package)
- [MAL-2025-39427](https://insights.sbomify.com/MAL-2025-39427/): Malicious code in work-cpu-app (npm) (malicious package)
- [MAL-2025-39426](https://insights.sbomify.com/MAL-2025-39426/): Malicious code in work-cpu (npm) (malicious package)
- [MAL-2025-39425](https://insights.sbomify.com/MAL-2025-39425/): Malicious code in worjwot (npm) (malicious package)
- [MAL-2025-39424](https://insights.sbomify.com/MAL-2025-39424/): Malicious code in wordmist (npm) (malicious package)
- [MAL-2025-39423](https://insights.sbomify.com/MAL-2025-39423/): Malicious code in wordll (npm) (malicious package)
- [MAL-2025-39422](https://insights.sbomify.com/MAL-2025-39422/): Malicious code in wordflash (npm) (malicious package)
- [MAL-2025-39421](https://insights.sbomify.com/MAL-2025-39421/): Malicious code in wordfill (npm) (malicious package)
- [MAL-2025-39420](https://insights.sbomify.com/MAL-2025-39420/): Malicious code in worddaily (npm) (malicious package)
- [MAL-2025-3942](https://insights.sbomify.com/MAL-2025-3942/): Malicious code in @isimplelab/ng2-charts (npm) (malicious package)
- [MAL-2025-39419](https://insights.sbomify.com/MAL-2025-39419/): Malicious code in wordbone (npm) (malicious package)
- [MAL-2025-39418](https://insights.sbomify.com/MAL-2025-39418/): Malicious code in wordatron (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/675/