# Vulnerabilities published in 2025 - [MAL-2025-39417](https://insights.sbomify.com/MAL-2025-39417/): Malicious code in word2pdf (npm) (malicious package) - [MAL-2025-39416](https://insights.sbomify.com/MAL-2025-39416/): Malicious code in woprbot (npm) (malicious package) - [MAL-2025-39415](https://insights.sbomify.com/MAL-2025-39415/): Malicious code in woosah (npm) (malicious package) - [MAL-2025-39414](https://insights.sbomify.com/MAL-2025-39414/): Malicious code in woopwoop (npm) (malicious package) - [MAL-2025-39413](https://insights.sbomify.com/MAL-2025-39413/): Malicious code in woopenurl (npm) (malicious package) - [MAL-2025-39412](https://insights.sbomify.com/MAL-2025-39412/): Malicious code in woonro (npm) (malicious package) - [MAL-2025-39411](https://insights.sbomify.com/MAL-2025-39411/): Malicious code in wonderflow-date-utils (npm) (malicious package) - [MAL-2025-39410](https://insights.sbomify.com/MAL-2025-39410/): Malicious code in wonderflow-api (npm) (malicious package) - [MAL-2025-3941](https://insights.sbomify.com/MAL-2025-3941/): Malicious code in moonpay-sign (npm) (malicious package) - [MAL-2025-39409](https://insights.sbomify.com/MAL-2025-39409/): Malicious code in wonderfilter (npm) (malicious package) - [MAL-2025-39408](https://insights.sbomify.com/MAL-2025-39408/): Malicious code in womaime (npm) (malicious package) - [MAL-2025-39407](https://insights.sbomify.com/MAL-2025-39407/): Malicious code in wolt-permissions (npm) (malicious package) - [MAL-2025-39406](https://insights.sbomify.com/MAL-2025-39406/): Malicious code in wolski (npm) (malicious package) - [MAL-2025-39405](https://insights.sbomify.com/MAL-2025-39405/): Malicious code in wolf-thermochronology-europa-chakra-ui (npm) (malicious package) - [MAL-2025-39404](https://insights.sbomify.com/MAL-2025-39404/): Malicious code in wolf-cache-inflation-selenium (npm) (malicious package) - [MAL-2025-39403](https://insights.sbomify.com/MAL-2025-39403/): Malicious code in wolf-arcturus-parcel-juno (npm) (malicious package) - [MAL-2025-39402](https://insights.sbomify.com/MAL-2025-39402/): Malicious code in wolchara (npm) (malicious package) - [MAL-2025-39401](https://insights.sbomify.com/MAL-2025-39401/): Malicious code in wojiushi-yaojiaonie (npm) (malicious package) - [MAL-2025-39400](https://insights.sbomify.com/MAL-2025-39400/): Malicious code in wojilu (npm) (malicious package) - [MAL-2025-3940](https://insights.sbomify.com/MAL-2025-3940/): Malicious code in human-protocol (npm) (malicious package) - [MAL-2025-394](https://insights.sbomify.com/MAL-2025-394/): Malicious code in bookingcom-analytics (npm) (malicious package) - [MAL-2025-39399](https://insights.sbomify.com/MAL-2025-39399/): Malicious code in wohvubsaemxdjkrt (npm) (malicious package) - [MAL-2025-39398](https://insights.sbomify.com/MAL-2025-39398/): Malicious code in wofipnuazmdkylht (npm) (malicious package) - [MAL-2025-39397](https://insights.sbomify.com/MAL-2025-39397/): Malicious code in wodpmitjhkxrynkv (npm) (malicious package) - [MAL-2025-39396](https://insights.sbomify.com/MAL-2025-39396/): Malicious code in wodhopper (npm) (malicious package) - [MAL-2025-39395](https://insights.sbomify.com/MAL-2025-39395/): Malicious code in wodahbot (npm) (malicious package) - [MAL-2025-39394](https://insights.sbomify.com/MAL-2025-39394/): Malicious code in wng-sportsnet (npm) (malicious package) - [MAL-2025-39393](https://insights.sbomify.com/MAL-2025-39393/): Malicious code in wng-live-avail (npm) (malicious package) - [MAL-2025-39392](https://insights.sbomify.com/MAL-2025-39392/): Malicious code in wng-fsgo (npm) (malicious package) - [MAL-2025-39391](https://insights.sbomify.com/MAL-2025-39391/): Malicious code in wng-fastpass (npm) (malicious package) - [MAL-2025-39390](https://insights.sbomify.com/MAL-2025-39390/): Malicious code in wndresize (npm) (malicious package) - [MAL-2025-3939](https://insights.sbomify.com/MAL-2025-3939/): Malicious code in spingroup (npm) (malicious package) - [MAL-2025-39389](https://insights.sbomify.com/MAL-2025-39389/): Malicious code in wmuqljifnothaksc (npm) (malicious package) - [MAL-2025-39388](https://insights.sbomify.com/MAL-2025-39388/): Malicious code in wmulykjipvkhagdq (npm) (malicious package) - [MAL-2025-39387](https://insights.sbomify.com/MAL-2025-39387/): Malicious code in wmtxogslanzykdue (npm) (malicious package) - [MAL-2025-39386](https://insights.sbomify.com/MAL-2025-39386/): Malicious code in wms-web-ui (npm) (malicious package) - [MAL-2025-39385](https://insights.sbomify.com/MAL-2025-39385/): Malicious code in wms-mobile-styles (npm) (malicious package) - [MAL-2025-39384](https://insights.sbomify.com/MAL-2025-39384/): Malicious code in wms-capabilities-parser (npm) (malicious package) - [MAL-2025-39383](https://insights.sbomify.com/MAL-2025-39383/): Malicious code in wmpchart (npm) (malicious package) - [MAL-2025-39382](https://insights.sbomify.com/MAL-2025-39382/): Malicious code in wminput (npm) (malicious package) - [MAL-2025-39381](https://insights.sbomify.com/MAL-2025-39381/): Malicious code in wmhistory (npm) (malicious package) - [MAL-2025-39380](https://insights.sbomify.com/MAL-2025-39380/): Malicious code in wmdnrzxkeviufbhc (npm) (malicious package) - [MAL-2025-3938](https://insights.sbomify.com/MAL-2025-3938/): Malicious code in pootle (npm) (malicious package) - [MAL-2025-39379](https://insights.sbomify.com/MAL-2025-39379/): Malicious code in wmarinn (npm) (malicious package) - [MAL-2025-39378](https://insights.sbomify.com/MAL-2025-39378/): Malicious code in wm-visual-composer-types (npm) (malicious package) - [MAL-2025-39377](https://insights.sbomify.com/MAL-2025-39377/): Malicious code in wm-service (npm) (malicious package) - [MAL-2025-39376](https://insights.sbomify.com/MAL-2025-39376/): Malicious code in wm-plugin-user-behavior (npm) (malicious package) - [MAL-2025-39375](https://insights.sbomify.com/MAL-2025-39375/): Malicious code in wm-plugin-accessibility (npm) (malicious package) - [MAL-2025-39374](https://insights.sbomify.com/MAL-2025-39374/): Malicious code in wlectron (npm) (malicious package) - [MAL-2025-39373](https://insights.sbomify.com/MAL-2025-39373/): Malicious code in wlcamxiukfsyontg (npm) (malicious package) - [MAL-2025-39372](https://insights.sbomify.com/MAL-2025-39372/): Malicious code in wjchart (npm) (malicious package) - [MAL-2025-39371](https://insights.sbomify.com/MAL-2025-39371/): Malicious code in wjb313-regret-pack (npm) (malicious package) - [MAL-2025-39370](https://insights.sbomify.com/MAL-2025-39370/): Malicious code in wizardcc (npm) (malicious package) - [MAL-2025-3937](https://insights.sbomify.com/MAL-2025-3937/): Malicious code in node-scoped-http-client (npm) (malicious package) - [MAL-2025-39369](https://insights.sbomify.com/MAL-2025-39369/): Malicious code in wix-secrets-backend (npm) (malicious package) - [MAL-2025-39368](https://insights.sbomify.com/MAL-2025-39368/): Malicious code in wix-elementory-globals (npm) (malicious package) - [MAL-2025-39367](https://insights.sbomify.com/MAL-2025-39367/): Malicious code in wix-data (npm) (malicious package) - [MAL-2025-39366](https://insights.sbomify.com/MAL-2025-39366/): Malicious code in witsguru (npm) (malicious package) - [MAL-2025-39365](https://insights.sbomify.com/MAL-2025-39365/): Malicious code in with-relay-modern (npm) (malicious package) - [MAL-2025-39364](https://insights.sbomify.com/MAL-2025-39364/): Malicious code in with-next (npm) (malicious package) - [MAL-2025-39363](https://insights.sbomify.com/MAL-2025-39363/): Malicious code in witems (npm) (malicious package) - [MAL-2025-39362](https://insights.sbomify.com/MAL-2025-39362/): Malicious code in wisp-zrpzi-r7ina-xenith-project (npm) (malicious package) - [MAL-2025-39361](https://insights.sbomify.com/MAL-2025-39361/): Malicious code in wisp-zebra-aue294-project (npm) (malicious package) - [MAL-2025-39360](https://insights.sbomify.com/MAL-2025-39360/): Malicious code in wisp-yonder-grg692-project (npm) (malicious package) - [MAL-2025-3936](https://insights.sbomify.com/MAL-2025-3936/): Malicious code in logging-plugin (npm) (malicious package) - [MAL-2025-39359](https://insights.sbomify.com/MAL-2025-39359/): Malicious code in wisp-yak-jjk951-project (npm) (malicious package) - [MAL-2025-39358](https://insights.sbomify.com/MAL-2025-39358/): Malicious code in wisp-xanadu-nqk291-project (npm) (malicious package) - [MAL-2025-39357](https://insights.sbomify.com/MAL-2025-39357/): Malicious code in wisp-xanadu-elm834-project (npm) (malicious package) - [MAL-2025-39356](https://insights.sbomify.com/MAL-2025-39356/): Malicious code in wisp-urx2m-fo5m4-flora-project (npm) (malicious package) - [MAL-2025-39355](https://insights.sbomify.com/MAL-2025-39355/): Malicious code in wisp-topaz-vhf135-project (npm) (malicious package) - [MAL-2025-39354](https://insights.sbomify.com/MAL-2025-39354/): Malicious code in wisp-tide-jue264-project (npm) (malicious package) - [MAL-2025-39353](https://insights.sbomify.com/MAL-2025-39353/): Malicious code in wisp-thunder-ufm916-project (npm) (malicious package) - [MAL-2025-39352](https://insights.sbomify.com/MAL-2025-39352/): Malicious code in wisp-river-tyt962-project (npm) (malicious package) - [MAL-2025-39351](https://insights.sbomify.com/MAL-2025-39351/): Malicious code in wisp-ripple-blt348-project (npm) (malicious package) - [MAL-2025-39350](https://insights.sbomify.com/MAL-2025-39350/): Malicious code in wisp-quagmire-kmd762-project (npm) (malicious package) - [MAL-2025-3935](https://insights.sbomify.com/MAL-2025-3935/): Malicious code in eslint-plugin-i18n-strings (npm) (malicious package) - [MAL-2025-39349](https://insights.sbomify.com/MAL-2025-39349/): Malicious code in wisp-peony-rfc444-project (npm) (malicious package) - [MAL-2025-39348](https://insights.sbomify.com/MAL-2025-39348/): Malicious code in wisp-lightning-cin551-project (npm) (malicious package) - [MAL-2025-39347](https://insights.sbomify.com/MAL-2025-39347/): Malicious code in wisp-lagoon-ejj064-project (npm) (malicious package) - [MAL-2025-39346](https://insights.sbomify.com/MAL-2025-39346/): Malicious code in wisp-jade-pjk232-project (npm) (malicious package) - [MAL-2025-39345](https://insights.sbomify.com/MAL-2025-39345/): Malicious code in wisp-honey-ozq377-project (npm) (malicious package) - [MAL-2025-39344](https://insights.sbomify.com/MAL-2025-39344/): Malicious code in wisp-hammock-blr819-project (npm) (malicious package) - [MAL-2025-39343](https://insights.sbomify.com/MAL-2025-39343/): Malicious code in wisp-giraffe-rcj353-project (npm) (malicious package) - [MAL-2025-39342](https://insights.sbomify.com/MAL-2025-39342/): Malicious code in wisp-falcon-xaj738-project (npm) (malicious package) - [MAL-2025-39341](https://insights.sbomify.com/MAL-2025-39341/): Malicious code in wisp-aroma-ogl820-project (npm) (malicious package) - [MAL-2025-39340](https://insights.sbomify.com/MAL-2025-39340/): Malicious code in wisp-acorn-cxq425-project (npm) (malicious package) - [MAL-2025-3934](https://insights.sbomify.com/MAL-2025-3934/): Malicious code in sforce (npm) (malicious package) - [MAL-2025-39339](https://insights.sbomify.com/MAL-2025-39339/): Malicious code in wiservice (npm) (malicious package) - [MAL-2025-39338](https://insights.sbomify.com/MAL-2025-39338/): Malicious code in wiseproxy (npm) (malicious package) - [MAL-2025-39337](https://insights.sbomify.com/MAL-2025-39337/): Malicious code in wirly (npm) (malicious package) - [MAL-2025-39336](https://insights.sbomify.com/MAL-2025-39336/): Malicious code in wirelust (npm) (malicious package) - [MAL-2025-39335](https://insights.sbomify.com/MAL-2025-39335/): Malicious code in wiredev (npm) (malicious package) - [MAL-2025-39334](https://insights.sbomify.com/MAL-2025-39334/): Malicious code in wiptrhvekugdsmkb (npm) (malicious package) - [MAL-2025-39333](https://insights.sbomify.com/MAL-2025-39333/): Malicious code in wintool-save-transaction (npm) (malicious package) - [MAL-2025-39332](https://insights.sbomify.com/MAL-2025-39332/): Malicious code in winstorm (npm) (malicious package) - [MAL-2025-39331](https://insights.sbomify.com/MAL-2025-39331/): Malicious code in winston-paleomagnetism-redis-cypress (npm) (malicious package) - [MAL-2025-39330](https://insights.sbomify.com/MAL-2025-39330/): Malicious code in winston-outercore-sagitta-mineralogy (npm) (malicious package) - [MAL-2025-3933](https://insights.sbomify.com/MAL-2025-3933/): Malicious code in novacredit-global2 (npm) (malicious package) - [MAL-2025-39329](https://insights.sbomify.com/MAL-2025-39329/): Malicious code in winston-lint-fornax-centaurus (npm) (malicious package) - [MAL-2025-39328](https://insights.sbomify.com/MAL-2025-39328/): Malicious code in winston-jest-webdriver-mocha-stream (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/676/