# Vulnerabilities published in 2025


- [MAL-2025-39057](https://insights.sbomify.com/MAL-2025-39057/): Malicious code in webtoon-coins-cost795 (npm) (malicious package)
- [MAL-2025-39056](https://insights.sbomify.com/MAL-2025-39056/): Malicious code in webtoon-coins-cost465 (npm) (malicious package)
- [MAL-2025-39055](https://insights.sbomify.com/MAL-2025-39055/): Malicious code in webtoon-coin-codes606 (npm) (malicious package)
- [MAL-2025-39054](https://insights.sbomify.com/MAL-2025-39054/): Malicious code in webtoon-coin-codes427 (npm) (malicious package)
- [MAL-2025-39053](https://insights.sbomify.com/MAL-2025-39053/): Malicious code in webteam-lc-template (npm) (malicious package)
- [MAL-2025-39052](https://insights.sbomify.com/MAL-2025-39052/): Malicious code in webtask-sequence-editor (npm) (malicious package)
- [MAL-2025-39051](https://insights.sbomify.com/MAL-2025-39051/): Malicious code in websounds (npm) (malicious package)
- [MAL-2025-39050](https://insights.sbomify.com/MAL-2025-39050/): Malicious code in websockets-pm2-standard-carpo (npm) (malicious package)
- [MAL-2025-3905](https://insights.sbomify.com/MAL-2025-3905/): Malicious code in meta-ai-client (npm) (malicious package)
- [MAL-2025-39049](https://insights.sbomify.com/MAL-2025-39049/): Malicious code in website-bundle (npm) (malicious package)
- [MAL-2025-39048](https://insights.sbomify.com/MAL-2025-39048/): Malicious code in webside (npm) (malicious package)
- [MAL-2025-39047](https://insights.sbomify.com/MAL-2025-39047/): Malicious code in websgs (npm) (malicious package)
- [MAL-2025-39046](https://insights.sbomify.com/MAL-2025-39046/): Malicious code in webserver-internal-v2 (npm) (malicious package)
- [MAL-2025-39045](https://insights.sbomify.com/MAL-2025-39045/): Malicious code in webscaler (npm) (malicious package)
- [MAL-2025-39044](https://insights.sbomify.com/MAL-2025-39044/): Malicious code in webruntime-branding-shared (npm) (malicious package)
- [MAL-2025-39043](https://insights.sbomify.com/MAL-2025-39043/): Malicious code in webrtcmau (npm) (malicious package)
- [MAL-2025-39042](https://insights.sbomify.com/MAL-2025-39042/): Malicious code in webreplay (npm) (malicious package)
- [MAL-2025-39041](https://insights.sbomify.com/MAL-2025-39041/): Malicious code in webpyhero (npm) (malicious package)
- [MAL-2025-39040](https://insights.sbomify.com/MAL-2025-39040/): Malicious code in webptt (npm) (malicious package)
- [MAL-2025-3904](https://insights.sbomify.com/MAL-2025-3904/): Malicious code in lrc20-js-sdk (npm) (malicious package)
- [MAL-2025-39039](https://insights.sbomify.com/MAL-2025-39039/): Malicious code in webpinger0 (npm) (malicious package)
- [MAL-2025-39038](https://insights.sbomify.com/MAL-2025-39038/): Malicious code in webpay-webserviceAPI (npm) (malicious package)
- [MAL-2025-39037](https://insights.sbomify.com/MAL-2025-39037/): Malicious code in webpaste (npm) (malicious package)
- [MAL-2025-39036](https://insights.sbomify.com/MAL-2025-39036/): Malicious code in webpack-xenon-registry-biohacking (npm) (malicious package)
- [MAL-2025-39035](https://insights.sbomify.com/MAL-2025-39035/): Malicious code in webpack-test (npm) (malicious package)
- [MAL-2025-39034](https://insights.sbomify.com/MAL-2025-39034/): Malicious code in webpack-sever-render-middleware (npm) (malicious package)
- [MAL-2025-39033](https://insights.sbomify.com/MAL-2025-39033/): Malicious code in webpack-rimraf-plugin (npm) (malicious package)
- [MAL-2025-39032](https://insights.sbomify.com/MAL-2025-39032/): Malicious code in webpack-public-path-plugin (npm) (malicious package)
- [MAL-2025-39031](https://insights.sbomify.com/MAL-2025-39031/): Malicious code in webpack-protractor-mongodb-frontend (npm) (malicious package)
- [MAL-2025-39030](https://insights.sbomify.com/MAL-2025-39030/): Malicious code in webpack-project-boilerplate (npm) (malicious package)
- [MAL-2025-3903](https://insights.sbomify.com/MAL-2025-3903/): Malicious code in lmk (npm) (malicious package)
- [MAL-2025-39029](https://insights.sbomify.com/MAL-2025-39029/): Malicious code in webpack-phoebe-warp-jwt (npm) (malicious package)
- [MAL-2025-39028](https://insights.sbomify.com/MAL-2025-39028/): Malicious code in webpack-optimize-css-assets-webpack-plugin-xenon-enif (npm) (malicious package)
- [MAL-2025-39027](https://insights.sbomify.com/MAL-2025-39027/): Malicious code in webpack-lithosphere-playwright-altair (npm) (malicious package)
- [MAL-2025-39026](https://insights.sbomify.com/MAL-2025-39026/): Malicious code in webpack-levels (npm) (malicious package)
- [MAL-2025-39025](https://insights.sbomify.com/MAL-2025-39025/): Malicious code in webpack-lepton-xenos-subscription (npm) (malicious package)
- [MAL-2025-39024](https://insights.sbomify.com/MAL-2025-39024/): Malicious code in webpack-karma-electron-builder-neuromorphic (npm) (malicious package)
- [MAL-2025-39023](https://insights.sbomify.com/MAL-2025-39023/): Malicious code in webpack-jupiter-nova-graphql (npm) (malicious package)
- [MAL-2025-39022](https://insights.sbomify.com/MAL-2025-39022/): Malicious code in webpack-engine (npm) (malicious package)
- [MAL-2025-39021](https://insights.sbomify.com/MAL-2025-39021/): Malicious code in webpack-core-utils (npm) (malicious package)
- [MAL-2025-39020](https://insights.sbomify.com/MAL-2025-39020/): Malicious code in webpack-bootstrap-halley-ophiuchus (npm) (malicious package)
- [MAL-2025-3902](https://insights.sbomify.com/MAL-2025-3902/): Malicious code in linemtxworkloadui (npm) (malicious package)
- [MAL-2025-39019](https://insights.sbomify.com/MAL-2025-39019/): Malicious code in webpac (npm) (malicious package)
- [MAL-2025-39018](https://insights.sbomify.com/MAL-2025-39018/): Malicious code in webp1nger (npm) (malicious package)
- [MAL-2025-39017](https://insights.sbomify.com/MAL-2025-39017/): Malicious code in webops (npm) (malicious package)
- [MAL-2025-39016](https://insights.sbomify.com/MAL-2025-39016/): Malicious code in webobj (npm) (malicious package)
- [MAL-2025-39015](https://insights.sbomify.com/MAL-2025-39015/): Malicious code in webnotes (npm) (malicious package)
- [MAL-2025-39014](https://insights.sbomify.com/MAL-2025-39014/): Malicious code in weblish (npm) (malicious package)
- [MAL-2025-39013](https://insights.sbomify.com/MAL-2025-39013/): Malicious code in webjet (npm) (malicious package)
- [MAL-2025-39012](https://insights.sbomify.com/MAL-2025-39012/): Malicious code in webinario (npm) (malicious package)
- [MAL-2025-39011](https://insights.sbomify.com/MAL-2025-39011/): Malicious code in webhooks-etl (npm) (malicious package)
- [MAL-2025-39010](https://insights.sbomify.com/MAL-2025-39010/): Malicious code in webhook_client (npm) (malicious package)
- [MAL-2025-3901](https://insights.sbomify.com/MAL-2025-3901/): Malicious code in let-me-know (npm) (malicious package)
- [MAL-2025-39009](https://insights.sbomify.com/MAL-2025-39009/): Malicious code in webhealer (npm) (malicious package)
- [MAL-2025-39008](https://insights.sbomify.com/MAL-2025-39008/): Malicious code in webgldemo (npm) (malicious package)
- [MAL-2025-39007](https://insights.sbomify.com/MAL-2025-39007/): Malicious code in webgestor (npm) (malicious package)
- [MAL-2025-39006](https://insights.sbomify.com/MAL-2025-39006/): Malicious code in webformz (npm) (malicious package)
- [MAL-2025-39005](https://insights.sbomify.com/MAL-2025-39005/): Malicious code in webfeat (npm) (malicious package)
- [MAL-2025-39004](https://insights.sbomify.com/MAL-2025-39004/): Malicious code in webdrp (npm) (malicious package)
- [MAL-2025-39003](https://insights.sbomify.com/MAL-2025-39003/): Malicious code in webdriverio-perturbation-lint-primatology (npm) (malicious package)
- [MAL-2025-39002](https://insights.sbomify.com/MAL-2025-39002/): Malicious code in webdriverio-oortcloud-rigel-andromeda (npm) (malicious package)
- [MAL-2025-39001](https://insights.sbomify.com/MAL-2025-39001/): Malicious code in webdriverio-nucleosynthesis-fork-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-39000](https://insights.sbomify.com/MAL-2025-39000/): Malicious code in webdriverio-babel-nova-procyon (npm) (malicious package)
- [MAL-2025-3900](https://insights.sbomify.com/MAL-2025-3900/): Malicious code in lcs-ui-test (npm) (malicious package)
- [MAL-2025-390](https://insights.sbomify.com/MAL-2025-390/): Malicious code in apple-database (npm) (malicious package)
- [MAL-2025-39](https://insights.sbomify.com/MAL-2025-39/): Malicious code in dexscreener (npm) (malicious package)
- [MAL-2025-38999](https://insights.sbomify.com/MAL-2025-38999/): Malicious code in webdriverio-antimatter-pegasus-atlas (npm) (malicious package)
- [MAL-2025-38998](https://insights.sbomify.com/MAL-2025-38998/): Malicious code in webdriver-semantic-locators (npm) (malicious package)
- [MAL-2025-38997](https://insights.sbomify.com/MAL-2025-38997/): Malicious code in webdriver-mocha-paleoceanography-quito-cluster (npm) (malicious package)
- [MAL-2025-38996](https://insights.sbomify.com/MAL-2025-38996/): Malicious code in webdriver-mocha-eslint-library-version (npm) (malicious package)
- [MAL-2025-38995](https://insights.sbomify.com/MAL-2025-38995/): Malicious code in webdriver-manager-plutology-query-element-ui (npm) (malicious package)
- [MAL-2025-38994](https://insights.sbomify.com/MAL-2025-38994/): Malicious code in webdriver-manager-plutology-nextjs-dynamo (npm) (malicious package)
- [MAL-2025-38993](https://insights.sbomify.com/MAL-2025-38993/): Malicious code in webdriver-manager-meissa-xenos-augmentedreality (npm) (malicious package)
- [MAL-2025-38992](https://insights.sbomify.com/MAL-2025-38992/): Malicious code in webdriver-manager-janus-cosmos-redshift (npm) (malicious package)
- [MAL-2025-38991](https://insights.sbomify.com/MAL-2025-38991/): Malicious code in webdriver-manager-darkmatter-inflation-cosmicray (npm) (malicious package)
- [MAL-2025-38990](https://insights.sbomify.com/MAL-2025-38990/): Malicious code in webcolumn (npm) (malicious package)
- [MAL-2025-3899](https://insights.sbomify.com/MAL-2025-3899/): Malicious code in jb-sol-lib (npm) (malicious package)
- [MAL-2025-38989](https://insights.sbomify.com/MAL-2025-38989/): Malicious code in webchatcomponents (npm) (malicious package)
- [MAL-2025-38988](https://insights.sbomify.com/MAL-2025-38988/): Malicious code in webboggle (npm) (malicious package)
- [MAL-2025-38987](https://insights.sbomify.com/MAL-2025-38987/): Malicious code in webbeep (npm) (malicious package)
- [MAL-2025-38986](https://insights.sbomify.com/MAL-2025-38986/): Malicious code in webauthn-browser-signature (npm) (malicious package)
- [MAL-2025-38985](https://insights.sbomify.com/MAL-2025-38985/): Malicious code in webappweb (npm) (malicious package)
- [MAL-2025-38984](https://insights.sbomify.com/MAL-2025-38984/): Malicious code in webappsw (npm) (malicious package)
- [MAL-2025-38983](https://insights.sbomify.com/MAL-2025-38983/): Malicious code in web3-telegram-mini-app (npm) (malicious package)
- [MAL-2025-38982](https://insights.sbomify.com/MAL-2025-38982/): Malicious code in web-zero-export-sandbox-view (npm) (malicious package)
- [MAL-2025-38981](https://insights.sbomify.com/MAL-2025-38981/): Malicious code in web-worker-swc-plugin (npm) (malicious package)
- [MAL-2025-38980](https://insights.sbomify.com/MAL-2025-38980/): Malicious code in web-terminal-utils (npm) (malicious package)
- [MAL-2025-3898](https://insights.sbomify.com/MAL-2025-3898/): Malicious code in internallib_v625 (npm) (malicious package)
- [MAL-2025-38979](https://insights.sbomify.com/MAL-2025-38979/): Malicious code in web-terminal-theme (npm) (malicious package)
- [MAL-2025-38978](https://insights.sbomify.com/MAL-2025-38978/): Malicious code in web-terminal-terminals-manager (npm) (malicious package)
- [MAL-2025-38977](https://insights.sbomify.com/MAL-2025-38977/): Malicious code in web-terminal-core-helper (npm) (malicious package)
- [MAL-2025-38976](https://insights.sbomify.com/MAL-2025-38976/): Malicious code in web-terminal-core (npm) (malicious package)
- [MAL-2025-38975](https://insights.sbomify.com/MAL-2025-38975/): Malicious code in web-supportal (npm) (malicious package)
- [MAL-2025-38974](https://insights.sbomify.com/MAL-2025-38974/): Malicious code in web-scripts-application (npm) (malicious package)
- [MAL-2025-38973](https://insights.sbomify.com/MAL-2025-38973/): Malicious code in web-pixels-extension (npm) (malicious package)
- [MAL-2025-38972](https://insights.sbomify.com/MAL-2025-38972/): Malicious code in web-i18 (npm) (malicious package)
- [MAL-2025-38971](https://insights.sbomify.com/MAL-2025-38971/): Malicious code in web-final-balance-fork-emulate (npm) (malicious package)
- [MAL-2025-38970](https://insights.sbomify.com/MAL-2025-38970/): Malicious code in web-driver-wrapper (npm) (malicious package)
- [MAL-2025-3897](https://insights.sbomify.com/MAL-2025-3897/): Malicious code in internallib_v370 (npm) (malicious package)
- [MAL-2025-38969](https://insights.sbomify.com/MAL-2025-38969/): Malicious code in web-booking-2 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/680/