# Vulnerabilities published in 2025 - [MAL-2025-39237](https://insights.sbomify.com/MAL-2025-39237/): Malicious code in whisper-tzdh4-m9tux-bison-project (npm) (malicious package) - [MAL-2025-39236](https://insights.sbomify.com/MAL-2025-39236/): Malicious code in whisper-t7zfb-ww7wk-zephyr-project (npm) (malicious package) - [MAL-2025-39235](https://insights.sbomify.com/MAL-2025-39235/): Malicious code in whisper-s1wur-e794s-echo-project (npm) (malicious package) - [MAL-2025-39234](https://insights.sbomify.com/MAL-2025-39234/): Malicious code in whisper-oiv8t-mdom4-ember-project (npm) (malicious package) - [MAL-2025-39233](https://insights.sbomify.com/MAL-2025-39233/): Malicious code in whisper-mo1hj-yndrb-kelp-project (npm) (malicious package) - [MAL-2025-39232](https://insights.sbomify.com/MAL-2025-39232/): Malicious code in whisper-m9pjo-p0hxg-paradise-project (npm) (malicious package) - [MAL-2025-39231](https://insights.sbomify.com/MAL-2025-39231/): Malicious code in whisper-ljrnm-yo0np-reef-project (npm) (malicious package) - [MAL-2025-39230](https://insights.sbomify.com/MAL-2025-39230/): Malicious code in whisper-3blww-juu29-mirage-project (npm) (malicious package) - [MAL-2025-3923](https://insights.sbomify.com/MAL-2025-3923/): Malicious code in ui-cluster-driver-sks (npm) (malicious package) - [MAL-2025-39229](https://insights.sbomify.com/MAL-2025-39229/): Malicious code in whisper-14mvi-6yw8r-serenity-project (npm) (malicious package) - [MAL-2025-39228](https://insights.sbomify.com/MAL-2025-39228/): Malicious code in whiskey-zulu-kilo-nwxgc (npm) (malicious package) - [MAL-2025-39227](https://insights.sbomify.com/MAL-2025-39227/): Malicious code in whiskey-zulu-dwrb (npm) (malicious package) - [MAL-2025-39226](https://insights.sbomify.com/MAL-2025-39226/): Malicious code in whiskey-ztt-project (npm) (malicious package) - [MAL-2025-39225](https://insights.sbomify.com/MAL-2025-39225/): Malicious code in whiskey-z3k-project (npm) (malicious package) - [MAL-2025-39224](https://insights.sbomify.com/MAL-2025-39224/): Malicious code in whiskey-yu4-project (npm) (malicious package) - [MAL-2025-39223](https://insights.sbomify.com/MAL-2025-39223/): Malicious code in whiskey-yankee-napt (npm) (malicious package) - [MAL-2025-39222](https://insights.sbomify.com/MAL-2025-39222/): Malicious code in whiskey-xray-oscar-gowur (npm) (malicious package) - [MAL-2025-39221](https://insights.sbomify.com/MAL-2025-39221/): Malicious code in whiskey-wbj-project (npm) (malicious package) - [MAL-2025-39220](https://insights.sbomify.com/MAL-2025-39220/): Malicious code in whiskey-vinegar-znyf (npm) (malicious package) - [MAL-2025-3922](https://insights.sbomify.com/MAL-2025-3922/): Malicious code in twitter-api-v1 (npm) (malicious package) - [MAL-2025-39219](https://insights.sbomify.com/MAL-2025-39219/): Malicious code in whiskey-victor-india-ctytv (npm) (malicious package) - [MAL-2025-39218](https://insights.sbomify.com/MAL-2025-39218/): Malicious code in whiskey-uniform-xqxn (npm) (malicious package) - [MAL-2025-39217](https://insights.sbomify.com/MAL-2025-39217/): Malicious code in whiskey-ugli-jgmi (npm) (malicious package) - [MAL-2025-39216](https://insights.sbomify.com/MAL-2025-39216/): Malicious code in whiskey-ugli-fig-fqadh (npm) (malicious package) - [MAL-2025-39215](https://insights.sbomify.com/MAL-2025-39215/): Malicious code in whiskey-tango-bravo-htbax (npm) (malicious package) - [MAL-2025-39214](https://insights.sbomify.com/MAL-2025-39214/): Malicious code in whiskey-tangerine-fig-ugiup (npm) (malicious package) - [MAL-2025-39213](https://insights.sbomify.com/MAL-2025-39213/): Malicious code in whiskey-strawberry-migd (npm) (malicious package) - [MAL-2025-39212](https://insights.sbomify.com/MAL-2025-39212/): Malicious code in whiskey-shack-dcb9 (npm) (malicious package) - [MAL-2025-39211](https://insights.sbomify.com/MAL-2025-39211/): Malicious code in whiskey-rrr-project (npm) (malicious package) - [MAL-2025-39210](https://insights.sbomify.com/MAL-2025-39210/): Malicious code in whiskey-romeo-swqr (npm) (malicious package) - [MAL-2025-3921](https://insights.sbomify.com/MAL-2025-3921/): Malicious code in ts-db-indicator (npm) (malicious package) - [MAL-2025-39209](https://insights.sbomify.com/MAL-2025-39209/): Malicious code in whiskey-raspberry-fwkd (npm) (malicious package) - [MAL-2025-39208](https://insights.sbomify.com/MAL-2025-39208/): Malicious code in whiskey-quince-vanilla-ydtke (npm) (malicious package) - [MAL-2025-39207](https://insights.sbomify.com/MAL-2025-39207/): Malicious code in whiskey-quebec-tangerine-wmsax (npm) (malicious package) - [MAL-2025-39206](https://insights.sbomify.com/MAL-2025-39206/): Malicious code in whiskey-quebec-qltt (npm) (malicious package) - [MAL-2025-39205](https://insights.sbomify.com/MAL-2025-39205/): Malicious code in whiskey-quebec-mrxd (npm) (malicious package) - [MAL-2025-39204](https://insights.sbomify.com/MAL-2025-39204/): Malicious code in whiskey-papa-xray-mfibb (npm) (malicious package) - [MAL-2025-39203](https://insights.sbomify.com/MAL-2025-39203/): Malicious code in whiskey-papa-mike-pcjpe (npm) (malicious package) - [MAL-2025-39202](https://insights.sbomify.com/MAL-2025-39202/): Malicious code in whiskey-meteor-5g23 (npm) (malicious package) - [MAL-2025-39201](https://insights.sbomify.com/MAL-2025-39201/): Malicious code in whiskey-mango-srrx (npm) (malicious package) - [MAL-2025-39200](https://insights.sbomify.com/MAL-2025-39200/): Malicious code in whiskey-lima-uenc (npm) (malicious package) - [MAL-2025-3920](https://insights.sbomify.com/MAL-2025-3920/): Malicious code in statewars (npm) (malicious package) - [MAL-2025-392](https://insights.sbomify.com/MAL-2025-392/): Malicious code in apple-gateway (npm) (malicious package) - [MAL-2025-39199](https://insights.sbomify.com/MAL-2025-39199/): Malicious code in whiskey-lemon-gnui (npm) (malicious package) - [MAL-2025-39198](https://insights.sbomify.com/MAL-2025-39198/): Malicious code in whiskey-kuiper-8iqe (npm) (malicious package) - [MAL-2025-39197](https://insights.sbomify.com/MAL-2025-39197/): Malicious code in whiskey-kiwi-wxbf (npm) (malicious package) - [MAL-2025-39196](https://insights.sbomify.com/MAL-2025-39196/): Malicious code in whiskey-india-kfes (npm) (malicious package) - [MAL-2025-39195](https://insights.sbomify.com/MAL-2025-39195/): Malicious code in whiskey-hotel-noxw (npm) (malicious package) - [MAL-2025-39194](https://insights.sbomify.com/MAL-2025-39194/): Malicious code in whiskey-hotel-flnz (npm) (malicious package) - [MAL-2025-39193](https://insights.sbomify.com/MAL-2025-39193/): Malicious code in whiskey-hotel-cwud (npm) (malicious package) - [MAL-2025-39192](https://insights.sbomify.com/MAL-2025-39192/): Malicious code in whiskey-honeydew-cbvd (npm) (malicious package) - [MAL-2025-39191](https://insights.sbomify.com/MAL-2025-39191/): Malicious code in whiskey-grape-csjh (npm) (malicious package) - [MAL-2025-39190](https://insights.sbomify.com/MAL-2025-39190/): Malicious code in whiskey-gji-project (npm) (malicious package) - [MAL-2025-3919](https://insights.sbomify.com/MAL-2025-3919/): Malicious code in solara-upgrade (npm) (malicious package) - [MAL-2025-39189](https://insights.sbomify.com/MAL-2025-39189/): Malicious code in whiskey-foxtrot-oskl (npm) (malicious package) - [MAL-2025-39188](https://insights.sbomify.com/MAL-2025-39188/): Malicious code in whiskey-fk1-project (npm) (malicious package) - [MAL-2025-39187](https://insights.sbomify.com/MAL-2025-39187/): Malicious code in whiskey-elderberry-rief (npm) (malicious package) - [MAL-2025-39186](https://insights.sbomify.com/MAL-2025-39186/): Malicious code in whiskey-echo-rwpa (npm) (malicious package) - [MAL-2025-39185](https://insights.sbomify.com/MAL-2025-39185/): Malicious code in whiskey-echo-nectarine-rfyte (npm) (malicious package) - [MAL-2025-39184](https://insights.sbomify.com/MAL-2025-39184/): Malicious code in whiskey-echo-auoa (npm) (malicious package) - [MAL-2025-39183](https://insights.sbomify.com/MAL-2025-39183/): Malicious code in whiskey-e38-project (npm) (malicious package) - [MAL-2025-39182](https://insights.sbomify.com/MAL-2025-39182/): Malicious code in whiskey-delta-sierra-sqcdu (npm) (malicious package) - [MAL-2025-39181](https://insights.sbomify.com/MAL-2025-39181/): Malicious code in whiskey-date-nqcc (npm) (malicious package) - [MAL-2025-39180](https://insights.sbomify.com/MAL-2025-39180/): Malicious code in whiskey-cherry-india-mdlfo (npm) (malicious package) - [MAL-2025-3918](https://insights.sbomify.com/MAL-2025-3918/): Malicious code in solana-web3 (npm) (malicious package) - [MAL-2025-39179](https://insights.sbomify.com/MAL-2025-39179/): Malicious code in whiskey-bravo-riqw (npm) (malicious package) - [MAL-2025-39178](https://insights.sbomify.com/MAL-2025-39178/): Malicious code in whiskey-banana-ppiy (npm) (malicious package) - [MAL-2025-39177](https://insights.sbomify.com/MAL-2025-39177/): Malicious code in whiskey-banana-ofpc (npm) (malicious package) - [MAL-2025-39176](https://insights.sbomify.com/MAL-2025-39176/): Malicious code in whiskey-banana-echo-loicw (npm) (malicious package) - [MAL-2025-39175](https://insights.sbomify.com/MAL-2025-39175/): Malicious code in whiskey-az2-project (npm) (malicious package) - [MAL-2025-39174](https://insights.sbomify.com/MAL-2025-39174/): Malicious code in whiskey-apple-mike-ihspg (npm) (malicious package) - [MAL-2025-39173](https://insights.sbomify.com/MAL-2025-39173/): Malicious code in whiskey-9q7-project (npm) (malicious package) - [MAL-2025-39172](https://insights.sbomify.com/MAL-2025-39172/): Malicious code in whiskey-8co-project (npm) (malicious package) - [MAL-2025-39171](https://insights.sbomify.com/MAL-2025-39171/): Malicious code in whiskey-828-project (npm) (malicious package) - [MAL-2025-39170](https://insights.sbomify.com/MAL-2025-39170/): Malicious code in whiskey-7vn-project (npm) (malicious package) - [MAL-2025-3917](https://insights.sbomify.com/MAL-2025-3917/): Malicious code in solana-crypto-validator (npm) (malicious package) - [MAL-2025-39169](https://insights.sbomify.com/MAL-2025-39169/): Malicious code in whiskey-7dw-project (npm) (malicious package) - [MAL-2025-39168](https://insights.sbomify.com/MAL-2025-39168/): Malicious code in whiskey-6hz-project (npm) (malicious package) - [MAL-2025-39167](https://insights.sbomify.com/MAL-2025-39167/): Malicious code in whiskey-5jj-project (npm) (malicious package) - [MAL-2025-39166](https://insights.sbomify.com/MAL-2025-39166/): Malicious code in whiskey-4mc-project (npm) (malicious package) - [MAL-2025-39165](https://insights.sbomify.com/MAL-2025-39165/): Malicious code in whiskey-4e7-project (npm) (malicious package) - [MAL-2025-39164](https://insights.sbomify.com/MAL-2025-39164/): Malicious code in whiskey-2h4-project (npm) (malicious package) - [MAL-2025-39163](https://insights.sbomify.com/MAL-2025-39163/): Malicious code in whiskey-2ap-project (npm) (malicious package) - [MAL-2025-39162](https://insights.sbomify.com/MAL-2025-39162/): Malicious code in whiskey-164-project (npm) (malicious package) - [MAL-2025-39161](https://insights.sbomify.com/MAL-2025-39161/): Malicious code in whirlwind_pba87_jfrqn_glow (npm) (malicious package) - [MAL-2025-39160](https://insights.sbomify.com/MAL-2025-39160/): Malicious code in whirlwind_iszwq_295v5_lily (npm) (malicious package) - [MAL-2025-3916](https://insights.sbomify.com/MAL-2025-3916/): Malicious code in seagroup-assets-management-system (npm) (malicious package) - [MAL-2025-39159](https://insights.sbomify.com/MAL-2025-39159/): Malicious code in whirlwind_b367k_y23zg_bramble (npm) (malicious package) - [MAL-2025-39158](https://insights.sbomify.com/MAL-2025-39158/): Malicious code in whirlwind_3mtia_4dosy_quintessence (npm) (malicious package) - [MAL-2025-39157](https://insights.sbomify.com/MAL-2025-39157/): Malicious code in whirlpool_opq28_z0uli_heather (npm) (malicious package) - [MAL-2025-39156](https://insights.sbomify.com/MAL-2025-39156/): Malicious code in whirlpool_bkv4d_1suqb_yosemite (npm) (malicious package) - [MAL-2025-39155](https://insights.sbomify.com/MAL-2025-39155/): Malicious code in whirlpool_5uyux_aagbo_kestrel (npm) (malicious package) - [MAL-2025-39154](https://insights.sbomify.com/MAL-2025-39154/): Malicious code in whirlpool_2dv2u_52bpd_nectar (npm) (malicious package) - [MAL-2025-39153](https://insights.sbomify.com/MAL-2025-39153/): Malicious code in whirlpool-zenith-pjh894-project (npm) (malicious package) - [MAL-2025-39152](https://insights.sbomify.com/MAL-2025-39152/): Malicious code in whirlpool-yucca-fyi102-project (npm) (malicious package) - [MAL-2025-39151](https://insights.sbomify.com/MAL-2025-39151/): Malicious code in whirlpool-yawn-tcl905-project (npm) (malicious package) - [MAL-2025-39150](https://insights.sbomify.com/MAL-2025-39150/): Malicious code in whirlpool-reef-pgo769-project (npm) (malicious package) - [MAL-2025-3915](https://insights.sbomify.com/MAL-2025-3915/): Malicious code in rollup-plugin-remove-import (npm) (malicious package) - [MAL-2025-39149](https://insights.sbomify.com/MAL-2025-39149/): Malicious code in whirlpool-quilt-kqb461-project (npm) (malicious package) - [MAL-2025-39148](https://insights.sbomify.com/MAL-2025-39148/): Malicious code in whirlpool-nebula-wii811-project (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/678/