# Vulnerabilities published in 2025


- [MAL-2025-39327](https://insights.sbomify.com/MAL-2025-39327/): Malicious code in winston-exoplanetology-auth0-geomorphology (npm) (malicious package)
- [MAL-2025-39326](https://insights.sbomify.com/MAL-2025-39326/): Malicious code in winradio (npm) (malicious package)
- [MAL-2025-39325](https://insights.sbomify.com/MAL-2025-39325/): Malicious code in winlibre (npm) (malicious package)
- [MAL-2025-39324](https://insights.sbomify.com/MAL-2025-39324/): Malicious code in winjstodo (npm) (malicious package)
- [MAL-2025-39323](https://insights.sbomify.com/MAL-2025-39323/): Malicious code in windscribe (npm) (malicious package)
- [MAL-2025-39322](https://insights.sbomify.com/MAL-2025-39322/): Malicious code in windowpane (npm) (malicious package)
- [MAL-2025-39321](https://insights.sbomify.com/MAL-2025-39321/): Malicious code in windmill-yacht-ovlz (npm) (malicious package)
- [MAL-2025-39320](https://insights.sbomify.com/MAL-2025-39320/): Malicious code in windmill-violet-emp2 (npm) (malicious package)
- [MAL-2025-3932](https://insights.sbomify.com/MAL-2025-3932/): Malicious code in reload-nucleus-views-on-compile (npm) (malicious package)
- [MAL-2025-39319](https://insights.sbomify.com/MAL-2025-39319/): Malicious code in windmill-ginkgo-ti06 (npm) (malicious package)
- [MAL-2025-39318](https://insights.sbomify.com/MAL-2025-39318/): Malicious code in windmill-elderberry-gcsv (npm) (malicious package)
- [MAL-2025-39317](https://insights.sbomify.com/MAL-2025-39317/): Malicious code in windmill-blackhole-ztfa (npm) (malicious package)
- [MAL-2025-39316](https://insights.sbomify.com/MAL-2025-39316/): Malicious code in winddk (npm) (malicious package)
- [MAL-2025-39315](https://insights.sbomify.com/MAL-2025-39315/): Malicious code in wind_z3llt_p5due_fern (npm) (malicious package)
- [MAL-2025-39314](https://insights.sbomify.com/MAL-2025-39314/): Malicious code in wind_s2avr_b3c83_crystal (npm) (malicious package)
- [MAL-2025-39313](https://insights.sbomify.com/MAL-2025-39313/): Malicious code in wind_kwwjo_rfi1r_mirage (npm) (malicious package)
- [MAL-2025-39312](https://insights.sbomify.com/MAL-2025-39312/): Malicious code in wind_82zix_bj7ak_geyser (npm) (malicious package)
- [MAL-2025-39311](https://insights.sbomify.com/MAL-2025-39311/): Malicious code in wind_7fw8s_3sxac_fireworks (npm) (malicious package)
- [MAL-2025-39310](https://insights.sbomify.com/MAL-2025-39310/): Malicious code in wind-wwl57-m7ykj-radiance-project (npm) (malicious package)
- [MAL-2025-3931](https://insights.sbomify.com/MAL-2025-3931/): Malicious code in novacredit-global (npm) (malicious package)
- [MAL-2025-39309](https://insights.sbomify.com/MAL-2025-39309/): Malicious code in wind-pt6bo-c61f3-island-project (npm) (malicious package)
- [MAL-2025-39308](https://insights.sbomify.com/MAL-2025-39308/): Malicious code in wind-pipe-double-parse-static (npm) (malicious package)
- [MAL-2025-39307](https://insights.sbomify.com/MAL-2025-39307/): Malicious code in wind-interface-error-sed-char (npm) (malicious package)
- [MAL-2025-39306](https://insights.sbomify.com/MAL-2025-39306/): Malicious code in wind-f2rdl-t0bh0-zenith-project (npm) (malicious package)
- [MAL-2025-39305](https://insights.sbomify.com/MAL-2025-39305/): Malicious code in wind-cyjph-tl4vs-glow-project (npm) (malicious package)
- [MAL-2025-39304](https://insights.sbomify.com/MAL-2025-39304/): Malicious code in wind-954ci-zda99-crystal-project (npm) (malicious package)
- [MAL-2025-39303](https://insights.sbomify.com/MAL-2025-39303/): Malicious code in wind-3wg9k-180ej-vista-project (npm) (malicious package)
- [MAL-2025-39302](https://insights.sbomify.com/MAL-2025-39302/): Malicious code in winbox88mys2025 (npm) (malicious package)
- [MAL-2025-39301](https://insights.sbomify.com/MAL-2025-39301/): Malicious code in winbox88mys (npm) (malicious package)
- [MAL-2025-39300](https://insights.sbomify.com/MAL-2025-39300/): Malicious code in winbox88info2025 (npm) (malicious package)
- [MAL-2025-3930](https://insights.sbomify.com/MAL-2025-3930/): Malicious code in blahblahblah-definitely-not-a-real-package-name (npm) (malicious package)
- [MAL-2025-393](https://insights.sbomify.com/MAL-2025-393/): Malicious code in apple-internal (npm) (malicious package)
- [MAL-2025-39299](https://insights.sbomify.com/MAL-2025-39299/): Malicious code in winbox88info (npm) (malicious package)
- [MAL-2025-39298](https://insights.sbomify.com/MAL-2025-39298/): Malicious code in winbox2025new (npm) (malicious package)
- [MAL-2025-39297](https://insights.sbomify.com/MAL-2025-39297/): Malicious code in winbox-mikrotik (npm) (malicious package)
- [MAL-2025-39296](https://insights.sbomify.com/MAL-2025-39296/): Malicious code in win-server (npm) (malicious package)
- [MAL-2025-39295](https://insights.sbomify.com/MAL-2025-39295/): Malicious code in wilsonvex (npm) (malicious package)
- [MAL-2025-39294](https://insights.sbomify.com/MAL-2025-39294/): Malicious code in willow_tu6zw_8c8c3_night (npm) (malicious package)
- [MAL-2025-39293](https://insights.sbomify.com/MAL-2025-39293/): Malicious code in willow_bgxsq_nqq8i_iris (npm) (malicious package)
- [MAL-2025-39292](https://insights.sbomify.com/MAL-2025-39292/): Malicious code in willow_b3rim_m6bdx_crown (npm) (malicious package)
- [MAL-2025-39291](https://insights.sbomify.com/MAL-2025-39291/): Malicious code in willow_7nzcr_0acws_raven (npm) (malicious package)
- [MAL-2025-39290](https://insights.sbomify.com/MAL-2025-39290/): Malicious code in willow_4l4oe_pw0yi_zephyr (npm) (malicious package)
- [MAL-2025-3929](https://insights.sbomify.com/MAL-2025-3929/): Malicious code in apilogicserver (PyPI) (malicious package)
- [MAL-2025-39289](https://insights.sbomify.com/MAL-2025-39289/): Malicious code in willow_21l6d_dhp4y_underworld (npm) (malicious package)
- [MAL-2025-39288](https://insights.sbomify.com/MAL-2025-39288/): Malicious code in willow-zebra-pcm246-project (npm) (malicious package)
- [MAL-2025-39287](https://insights.sbomify.com/MAL-2025-39287/): Malicious code in willow-vunrr-qmrkn-jungle-project (npm) (malicious package)
- [MAL-2025-39286](https://insights.sbomify.com/MAL-2025-39286/): Malicious code in willow-sbytk-piks1-serenity-project (npm) (malicious package)
- [MAL-2025-39285](https://insights.sbomify.com/MAL-2025-39285/): Malicious code in willow-nymph-ftq217-project (npm) (malicious package)
- [MAL-2025-39284](https://insights.sbomify.com/MAL-2025-39284/): Malicious code in willow-kale-nrm364-project (npm) (malicious package)
- [MAL-2025-39283](https://insights.sbomify.com/MAL-2025-39283/): Malicious code in willow-emerald-uwl575-project (npm) (malicious package)
- [MAL-2025-39282](https://insights.sbomify.com/MAL-2025-39282/): Malicious code in willow-emerald-mde778-project (npm) (malicious package)
- [MAL-2025-39281](https://insights.sbomify.com/MAL-2025-39281/): Malicious code in willow-desert-mce001-project (npm) (malicious package)
- [MAL-2025-39280](https://insights.sbomify.com/MAL-2025-39280/): Malicious code in willow-coral-vyo116-project (npm) (malicious package)
- [MAL-2025-3928](https://insights.sbomify.com/MAL-2025-3928/): Malicious code in xero_ruby_oauth2_app (npm) (malicious package)
- [MAL-2025-39279](https://insights.sbomify.com/MAL-2025-39279/): Malicious code in willow-cliff-uhs425-project (npm) (malicious package)
- [MAL-2025-39278](https://insights.sbomify.com/MAL-2025-39278/): Malicious code in willow-amber-bak924-project (npm) (malicious package)
- [MAL-2025-39277](https://insights.sbomify.com/MAL-2025-39277/): Malicious code in willow-36eqv-uhzv7-lunar-project (npm) (malicious package)
- [MAL-2025-39276](https://insights.sbomify.com/MAL-2025-39276/): Malicious code in willow-1zazp-j5q5s-pearl-project (npm) (malicious package)
- [MAL-2025-39275](https://insights.sbomify.com/MAL-2025-39275/): Malicious code in willow-1w7vd-dwlwi-opal-project (npm) (malicious package)
- [MAL-2025-39274](https://insights.sbomify.com/MAL-2025-39274/): Malicious code in willitrun (npm) (malicious package)
- [MAL-2025-39273](https://insights.sbomify.com/MAL-2025-39273/): Malicious code in wildsex (npm) (malicious package)
- [MAL-2025-39272](https://insights.sbomify.com/MAL-2025-39272/): Malicious code in wikt-ng2-completer (npm) (malicious package)
- [MAL-2025-39271](https://insights.sbomify.com/MAL-2025-39271/): Malicious code in wikiutils (npm) (malicious package)
- [MAL-2025-39270](https://insights.sbomify.com/MAL-2025-39270/): Malicious code in wikispy (npm) (malicious package)
- [MAL-2025-3927](https://insights.sbomify.com/MAL-2025-3927/): Malicious code in world-id-discord (npm) (malicious package)
- [MAL-2025-39269](https://insights.sbomify.com/MAL-2025-39269/): Malicious code in wikiplus (npm) (malicious package)
- [MAL-2025-39268](https://insights.sbomify.com/MAL-2025-39268/): Malicious code in wigraph (npm) (malicious package)
- [MAL-2025-39267](https://insights.sbomify.com/MAL-2025-39267/): Malicious code in wifiht (npm) (malicious package)
- [MAL-2025-39266](https://insights.sbomify.com/MAL-2025-39266/): Malicious code in wifigazer (npm) (malicious package)
- [MAL-2025-39265](https://insights.sbomify.com/MAL-2025-39265/): Malicious code in wifesex (npm) (malicious package)
- [MAL-2025-39264](https://insights.sbomify.com/MAL-2025-39264/): Malicious code in wicked-external-roblox (npm) (malicious package)
- [MAL-2025-39263](https://insights.sbomify.com/MAL-2025-39263/): Malicious code in wicked-external-fivem (npm) (malicious package)
- [MAL-2025-39262](https://insights.sbomify.com/MAL-2025-39262/): Malicious code in wicked-executor (npm) (malicious package)
- [MAL-2025-39261](https://insights.sbomify.com/MAL-2025-39261/): Malicious code in wibowo-rangi99-breki (npm) (malicious package)
- [MAL-2025-39260](https://insights.sbomify.com/MAL-2025-39260/): Malicious code in wibowo-pisang22-kuki (npm) (malicious package)
- [MAL-2025-3926](https://insights.sbomify.com/MAL-2025-3926/): Malicious code in wagmi-ethers-connectors (npm) (malicious package)
- [MAL-2025-39259](https://insights.sbomify.com/MAL-2025-39259/): Malicious code in wibowo-lapis17-breki (npm) (malicious package)
- [MAL-2025-39258](https://insights.sbomify.com/MAL-2025-39258/): Malicious code in wibowo-kue58-sukiwir (npm) (malicious package)
- [MAL-2025-39257](https://insights.sbomify.com/MAL-2025-39257/): Malicious code in wibowo-kue5-kuki (npm) (malicious package)
- [MAL-2025-39256](https://insights.sbomify.com/MAL-2025-39256/): Malicious code in wibowo-kemplang78-sukiwir (npm) (malicious package)
- [MAL-2025-39255](https://insights.sbomify.com/MAL-2025-39255/): Malicious code in whtpmg (npm) (malicious package)
- [MAL-2025-39254](https://insights.sbomify.com/MAL-2025-39254/): Malicious code in wholelot-storage-db (npm) (malicious package)
- [MAL-2025-39253](https://insights.sbomify.com/MAL-2025-39253/): Malicious code in wholelot-common-ui (npm) (malicious package)
- [MAL-2025-39252](https://insights.sbomify.com/MAL-2025-39252/): Malicious code in wholelot-business-common (npm) (malicious package)
- [MAL-2025-39251](https://insights.sbomify.com/MAL-2025-39251/): Malicious code in whoisthat (npm) (malicious package)
- [MAL-2025-39250](https://insights.sbomify.com/MAL-2025-39250/): Malicious code in whitney_production (npm) (malicious package)
- [MAL-2025-3925](https://insights.sbomify.com/MAL-2025-3925/): Malicious code in vue-gop-authenticate (npm) (malicious package)
- [MAL-2025-39249](https://insights.sbomify.com/MAL-2025-39249/): Malicious code in whiteproject (npm) (malicious package)
- [MAL-2025-39248](https://insights.sbomify.com/MAL-2025-39248/): Malicious code in whitelabelstarter (npm) (malicious package)
- [MAL-2025-39247](https://insights.sbomify.com/MAL-2025-39247/): Malicious code in whitedwarf-writable-mongodb-ophiuchus (npm) (malicious package)
- [MAL-2025-39246](https://insights.sbomify.com/MAL-2025-39246/): Malicious code in whitedwarf-kaus-auth0-membrane (npm) (malicious package)
- [MAL-2025-39245](https://insights.sbomify.com/MAL-2025-39245/): Malicious code in whitedwarf-commitizen-semantic-ui-heka (npm) (malicious package)
- [MAL-2025-39244](https://insights.sbomify.com/MAL-2025-39244/): Malicious code in whisper_r3v8x_kdu16_bloom (npm) (malicious package)
- [MAL-2025-39243](https://insights.sbomify.com/MAL-2025-39243/): Malicious code in whisper_m57j4_hztxg_vantage (npm) (malicious package)
- [MAL-2025-39242](https://insights.sbomify.com/MAL-2025-39242/): Malicious code in whisper_9kmlz_alm4j_raven (npm) (malicious package)
- [MAL-2025-39241](https://insights.sbomify.com/MAL-2025-39241/): Malicious code in whisper_1smx2_3yz0r_fern (npm) (malicious package)
- [MAL-2025-39240](https://insights.sbomify.com/MAL-2025-39240/): Malicious code in whisper-ycffo-bmsx3-grove-project (npm) (malicious package)
- [MAL-2025-3924](https://insights.sbomify.com/MAL-2025-3924/): Malicious code in vsock-sdk2 (npm) (malicious package)
- [MAL-2025-39239](https://insights.sbomify.com/MAL-2025-39239/): Malicious code in whisper-voyage-ojz108-project (npm) (malicious package)
- [MAL-2025-39238](https://insights.sbomify.com/MAL-2025-39238/): Malicious code in whisper-u5gak-7630i-bison-project (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/677/