# Vulnerabilities published in 2025 - [MAL-2025-39147](https://insights.sbomify.com/MAL-2025-39147/): Malicious code in whirlpool-lilac-hzi541-project (npm) (malicious package) - [MAL-2025-39146](https://insights.sbomify.com/MAL-2025-39146/): Malicious code in whirlpool-kiwi-boe743-project (npm) (malicious package) - [MAL-2025-39145](https://insights.sbomify.com/MAL-2025-39145/): Malicious code in whirlpool-kite-yvk901-project (npm) (malicious package) - [MAL-2025-39144](https://insights.sbomify.com/MAL-2025-39144/): Malicious code in whirlpool-kite-gfa567-project (npm) (malicious package) - [MAL-2025-39143](https://insights.sbomify.com/MAL-2025-39143/): Malicious code in whirlpool-hill-fyz742-project (npm) (malicious package) - [MAL-2025-39142](https://insights.sbomify.com/MAL-2025-39142/): Malicious code in whirlpool-elephant-xmr620-project (npm) (malicious package) - [MAL-2025-39141](https://insights.sbomify.com/MAL-2025-39141/): Malicious code in whirlpool-eagle-zif875-project (npm) (malicious package) - [MAL-2025-39140](https://insights.sbomify.com/MAL-2025-39140/): Malicious code in whirlpool-dune-jzk072-project (npm) (malicious package) - [MAL-2025-3914](https://insights.sbomify.com/MAL-2025-3914/): Malicious code in react-mount-point-unstable (npm) (malicious package) - [MAL-2025-39139](https://insights.sbomify.com/MAL-2025-39139/): Malicious code in whirlpool-cascade-upu258-project (npm) (malicious package) - [MAL-2025-39138](https://insights.sbomify.com/MAL-2025-39138/): Malicious code in whipdf (npm) (malicious package) - [MAL-2025-39137](https://insights.sbomify.com/MAL-2025-39137/): Malicious code in whfdzeurnmylokax (npm) (malicious package) - [MAL-2025-39136](https://insights.sbomify.com/MAL-2025-39136/): Malicious code in whbmvlhtkasdglfjaiudgpytahft5nn8 (npm) (malicious package) - [MAL-2025-39135](https://insights.sbomify.com/MAL-2025-39135/): Malicious code in whatsphp (npm) (malicious package) - [MAL-2025-39134](https://insights.sbomify.com/MAL-2025-39134/): Malicious code in whatson (npm) (malicious package) - [MAL-2025-39133](https://insights.sbomify.com/MAL-2025-39133/): Malicious code in whatsapp-nodejs (npm) (malicious package) - [MAL-2025-39132](https://insights.sbomify.com/MAL-2025-39132/): Malicious code in whatnot (npm) (malicious package) - [MAL-2025-39131](https://insights.sbomify.com/MAL-2025-39131/): Malicious code in whatclick (npm) (malicious package) - [MAL-2025-39130](https://insights.sbomify.com/MAL-2025-39130/): Malicious code in whamrckyvpnbeliq (npm) (malicious package) - [MAL-2025-3913](https://insights.sbomify.com/MAL-2025-3913/): Malicious code in packer-docs (npm) (malicious package) - [MAL-2025-39129](https://insights.sbomify.com/MAL-2025-39129/): Malicious code in whale-zodiac-rig382-project (npm) (malicious package) - [MAL-2025-39128](https://insights.sbomify.com/MAL-2025-39128/): Malicious code in whale-xerox-riu551-project (npm) (malicious package) - [MAL-2025-39127](https://insights.sbomify.com/MAL-2025-39127/): Malicious code in whale-vortex-cfi793-project (npm) (malicious package) - [MAL-2025-39126](https://insights.sbomify.com/MAL-2025-39126/): Malicious code in whale-unicorn-qzc041-project (npm) (malicious package) - [MAL-2025-39125](https://insights.sbomify.com/MAL-2025-39125/): Malicious code in whale-topaz-inw054-project (npm) (malicious package) - [MAL-2025-39124](https://insights.sbomify.com/MAL-2025-39124/): Malicious code in whale-swan-pzp365-project (npm) (malicious package) - [MAL-2025-39123](https://insights.sbomify.com/MAL-2025-39123/): Malicious code in whale-reef-skt801-project (npm) (malicious package) - [MAL-2025-39122](https://insights.sbomify.com/MAL-2025-39122/): Malicious code in whale-quill-lll966-project (npm) (malicious package) - [MAL-2025-39121](https://insights.sbomify.com/MAL-2025-39121/): Malicious code in whale-quail-rye498-project (npm) (malicious package) - [MAL-2025-39120](https://insights.sbomify.com/MAL-2025-39120/): Malicious code in whale-octopus-kwx075-project (npm) (malicious package) - [MAL-2025-3912](https://insights.sbomify.com/MAL-2025-3912/): Malicious code in o7rcyti43qv (npm) (malicious package) - [MAL-2025-39119](https://insights.sbomify.com/MAL-2025-39119/): Malicious code in whale-nymph-tgk558-project (npm) (malicious package) - [MAL-2025-39118](https://insights.sbomify.com/MAL-2025-39118/): Malicious code in whale-nugget-xgr609-project (npm) (malicious package) - [MAL-2025-39117](https://insights.sbomify.com/MAL-2025-39117/): Malicious code in whale-mangrove-ywp092-project (npm) (malicious package) - [MAL-2025-39116](https://insights.sbomify.com/MAL-2025-39116/): Malicious code in whale-leopard-zgi909-project (npm) (malicious package) - [MAL-2025-39115](https://insights.sbomify.com/MAL-2025-39115/): Malicious code in whale-kiwi-otw876-project (npm) (malicious package) - [MAL-2025-39114](https://insights.sbomify.com/MAL-2025-39114/): Malicious code in whale-honeycomb-mro296-project (npm) (malicious package) - [MAL-2025-39113](https://insights.sbomify.com/MAL-2025-39113/): Malicious code in whale-hill-dnp716-project (npm) (malicious package) - [MAL-2025-39112](https://insights.sbomify.com/MAL-2025-39112/): Malicious code in whale-harbor-iwx983-project (npm) (malicious package) - [MAL-2025-39111](https://insights.sbomify.com/MAL-2025-39111/): Malicious code in whale-gorge-kez279-project (npm) (malicious package) - [MAL-2025-39110](https://insights.sbomify.com/MAL-2025-39110/): Malicious code in whale-glacier-zal870-project (npm) (malicious package) - [MAL-2025-3911](https://insights.sbomify.com/MAL-2025-3911/): Malicious code in npm-scrapper-faris (npm) (malicious package) - [MAL-2025-39109](https://insights.sbomify.com/MAL-2025-39109/): Malicious code in whale-ginger-svfn (npm) (malicious package) - [MAL-2025-39108](https://insights.sbomify.com/MAL-2025-39108/): Malicious code in whale-fir-dh9k (npm) (malicious package) - [MAL-2025-39107](https://insights.sbomify.com/MAL-2025-39107/): Malicious code in whale-falcon-uuo091-project (npm) (malicious package) - [MAL-2025-39106](https://insights.sbomify.com/MAL-2025-39106/): Malicious code in whale-cascade-aup204-project (npm) (malicious package) - [MAL-2025-39105](https://insights.sbomify.com/MAL-2025-39105/): Malicious code in whale-blossom-mjl177-project (npm) (malicious package) - [MAL-2025-39104](https://insights.sbomify.com/MAL-2025-39104/): Malicious code in whale-aspen-zla441-project (npm) (malicious package) - [MAL-2025-39103](https://insights.sbomify.com/MAL-2025-39103/): Malicious code in wgrandljiqtvkcbo (npm) (malicious package) - [MAL-2025-39102](https://insights.sbomify.com/MAL-2025-39102/): Malicious code in wg-rblb-l10n (npm) (malicious package) - [MAL-2025-39101](https://insights.sbomify.com/MAL-2025-39101/): Malicious code in wfm-constants (npm) (malicious package) - [MAL-2025-39100](https://insights.sbomify.com/MAL-2025-39100/): Malicious code in wfitjdelyqxgcpor (npm) (malicious package) - [MAL-2025-3910](https://insights.sbomify.com/MAL-2025-3910/): Malicious code in nodejs-fetch-proxy (npm) (malicious package) - [MAL-2025-391](https://insights.sbomify.com/MAL-2025-391/): Malicious code in apple-event (npm) (malicious package) - [MAL-2025-39099](https://insights.sbomify.com/MAL-2025-39099/): Malicious code in wfa_project (npm) (malicious package) - [MAL-2025-39098](https://insights.sbomify.com/MAL-2025-39098/): Malicious code in wf-shell (npm) (malicious package) - [MAL-2025-39097](https://insights.sbomify.com/MAL-2025-39097/): Malicious code in wezen-rimraf-markdown-hexo (npm) (malicious package) - [MAL-2025-39096](https://insights.sbomify.com/MAL-2025-39096/): Malicious code in wezen-mensa-proxima-polaris (npm) (malicious package) - [MAL-2025-39095](https://insights.sbomify.com/MAL-2025-39095/): Malicious code in wezen-enceladus-publish-darkenergy (npm) (malicious package) - [MAL-2025-39094](https://insights.sbomify.com/MAL-2025-39094/): Malicious code in wezen-altair-antares-xanadu (npm) (malicious package) - [MAL-2025-39093](https://insights.sbomify.com/MAL-2025-39093/): Malicious code in weywot-typeorm-andromeda-global (npm) (malicious package) - [MAL-2025-39092](https://insights.sbomify.com/MAL-2025-39092/): Malicious code in weywot-subscription-mechatronics-miranda (npm) (malicious package) - [MAL-2025-39091](https://insights.sbomify.com/MAL-2025-39091/): Malicious code in weywot-flare-pino-pretty-cache (npm) (malicious package) - [MAL-2025-39090](https://insights.sbomify.com/MAL-2025-39090/): Malicious code in weywot-antimatter-terraforming-loglevel (npm) (malicious package) - [MAL-2025-3909](https://insights.sbomify.com/MAL-2025-3909/): Malicious code in node-key (npm) (malicious package) - [MAL-2025-39089](https://insights.sbomify.com/MAL-2025-39089/): Malicious code in weswap (npm) (malicious package) - [MAL-2025-39088](https://insights.sbomify.com/MAL-2025-39088/): Malicious code in westlife (npm) (malicious package) - [MAL-2025-39087](https://insights.sbomify.com/MAL-2025-39087/): Malicious code in wespeople (npm) (malicious package) - [MAL-2025-39086](https://insights.sbomify.com/MAL-2025-39086/): Malicious code in wespeke (npm) (malicious package) - [MAL-2025-39085](https://insights.sbomify.com/MAL-2025-39085/): Malicious code in wesily (npm) (malicious package) - [MAL-2025-39084](https://insights.sbomify.com/MAL-2025-39084/): Malicious code in weqeud (npm) (malicious package) - [MAL-2025-39083](https://insights.sbomify.com/MAL-2025-39083/): Malicious code in wepoint (npm) (malicious package) - [MAL-2025-39082](https://insights.sbomify.com/MAL-2025-39082/): Malicious code in wepack-cli (npm) (malicious package) - [MAL-2025-39081](https://insights.sbomify.com/MAL-2025-39081/): Malicious code in weogeoapi (npm) (malicious package) - [MAL-2025-39080](https://insights.sbomify.com/MAL-2025-39080/): Malicious code in wenzhixin (npm) (malicious package) - [MAL-2025-3908](https://insights.sbomify.com/MAL-2025-3908/): Malicious code in node-crypto-validator (npm) (malicious package) - [MAL-2025-39079](https://insights.sbomify.com/MAL-2025-39079/): Malicious code in wendao-zhongyi (npm) (malicious package) - [MAL-2025-39078](https://insights.sbomify.com/MAL-2025-39078/): Malicious code in wemblibot (npm) (malicious package) - [MAL-2025-39077](https://insights.sbomify.com/MAL-2025-39077/): Malicious code in welt-videoplayer (npm) (malicious package) - [MAL-2025-39076](https://insights.sbomify.com/MAL-2025-39076/): Malicious code in welectron (npm) (malicious package) - [MAL-2025-39075](https://insights.sbomify.com/MAL-2025-39075/): Malicious code in wekzchqtukvxmgpa (npm) (malicious package) - [MAL-2025-39074](https://insights.sbomify.com/MAL-2025-39074/): Malicious code in weiyun (npm) (malicious package) - [MAL-2025-39073](https://insights.sbomify.com/MAL-2025-39073/): Malicious code in weixin-widget (npm) (malicious package) - [MAL-2025-39072](https://insights.sbomify.com/MAL-2025-39072/): Malicious code in weiweier (npm) (malicious package) - [MAL-2025-39071](https://insights.sbomify.com/MAL-2025-39071/): Malicious code in weiqianli-liuyao-zhanbu-jiangyi (npm) (malicious package) - [MAL-2025-39070](https://insights.sbomify.com/MAL-2025-39070/): Malicious code in weiqianli-daliuren-quanji-fulu (npm) (malicious package) - [MAL-2025-3907](https://insights.sbomify.com/MAL-2025-3907/): Malicious code in mongooses-db (npm) (malicious package) - [MAL-2025-39069](https://insights.sbomify.com/MAL-2025-39069/): Malicious code in weiqianli-daliuren-quanji (npm) (malicious package) - [MAL-2025-39068](https://insights.sbomify.com/MAL-2025-39068/): Malicious code in weioboard (npm) (malicious package) - [MAL-2025-39067](https://insights.sbomify.com/MAL-2025-39067/): Malicious code in weighted-rating-trend-calculator (npm) (malicious package) - [MAL-2025-39066](https://insights.sbomify.com/MAL-2025-39066/): Malicious code in weibfit (npm) (malicious package) - [MAL-2025-39065](https://insights.sbomify.com/MAL-2025-39065/): Malicious code in weedmaps-ui (npm) (malicious package) - [MAL-2025-39064](https://insights.sbomify.com/MAL-2025-39064/): Malicious code in wedeli (npm) (malicious package) - [MAL-2025-39063](https://insights.sbomify.com/MAL-2025-39063/): Malicious code in webwewant (npm) (malicious package) - [MAL-2025-39062](https://insights.sbomify.com/MAL-2025-39062/): Malicious code in webtypist (npm) (malicious package) - [MAL-2025-39061](https://insights.sbomify.com/MAL-2025-39061/): Malicious code in webtrader (npm) (malicious package) - [MAL-2025-39060](https://insights.sbomify.com/MAL-2025-39060/): Malicious code in webtoon-unlimited-coins-ios801 (npm) (malicious package) - [MAL-2025-3906](https://insights.sbomify.com/MAL-2025-3906/): Malicious code in mobile-test-px (npm) (malicious package) - [MAL-2025-39059](https://insights.sbomify.com/MAL-2025-39059/): Malicious code in webtoon-unlimited-coins-ios502 (npm) (malicious package) - [MAL-2025-39058](https://insights.sbomify.com/MAL-2025-39058/): Malicious code in webtoon-unlimited-coins-ios480 (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/679/