# Vulnerabilities published in 2025


- [MAL-2025-38968](https://insights.sbomify.com/MAL-2025-38968/): Malicious code in web-bizops (npm) (malicious package)
- [MAL-2025-38967](https://insights.sbomify.com/MAL-2025-38967/): Malicious code in web-auth-client (npm) (malicious package)
- [MAL-2025-38966](https://insights.sbomify.com/MAL-2025-38966/): Malicious code in web-assets (npm) (malicious package)
- [MAL-2025-38965](https://insights.sbomify.com/MAL-2025-38965/): Malicious code in web-api-mongodb-connection-factory (npm) (malicious package)
- [MAL-2025-38964](https://insights.sbomify.com/MAL-2025-38964/): Malicious code in web-api-error (npm) (malicious package)
- [MAL-2025-38963](https://insights.sbomify.com/MAL-2025-38963/): Malicious code in web-admin (npm) (malicious package)
- [MAL-2025-38962](https://insights.sbomify.com/MAL-2025-38962/): Malicious code in web-accelerator (npm) (malicious package)
- [MAL-2025-38961](https://insights.sbomify.com/MAL-2025-38961/): Malicious code in weathy (npm) (malicious package)
- [MAL-2025-38960](https://insights.sbomify.com/MAL-2025-38960/): Malicious code in weatherz (npm) (malicious package)
- [MAL-2025-3896](https://insights.sbomify.com/MAL-2025-3896/): Malicious code in interaction-tracing-metrics (npm) (malicious package)
- [MAL-2025-38959](https://insights.sbomify.com/MAL-2025-38959/): Malicious code in weather-cli-05-09-2023 (npm) (malicious package)
- [MAL-2025-38958](https://insights.sbomify.com/MAL-2025-38958/): Malicious code in weathem (npm) (malicious package)
- [MAL-2025-38957](https://insights.sbomify.com/MAL-2025-38957/): Malicious code in wearables (npm) (malicious package)
- [MAL-2025-38956](https://insights.sbomify.com/MAL-2025-38956/): Malicious code in weapp-vue (npm) (malicious package)
- [MAL-2025-38955](https://insights.sbomify.com/MAL-2025-38955/): Malicious code in weapp-react (npm) (malicious package)
- [MAL-2025-38954](https://insights.sbomify.com/MAL-2025-38954/): Malicious code in wdvmutciksljfyrp (npm) (malicious package)
- [MAL-2025-38953](https://insights.sbomify.com/MAL-2025-38953/): Malicious code in wduvjzgmkftesbln (npm) (malicious package)
- [MAL-2025-38952](https://insights.sbomify.com/MAL-2025-38952/): Malicious code in wdio-junit-reporter-file (npm) (malicious package)
- [MAL-2025-38951](https://insights.sbomify.com/MAL-2025-38951/): Malicious code in wdhag2727 (npm) (malicious package)
- [MAL-2025-38950](https://insights.sbomify.com/MAL-2025-38950/): Malicious code in wdhag12sa (npm) (malicious package)
- [MAL-2025-3895](https://insights.sbomify.com/MAL-2025-3895/): Malicious code in interaction-tracing (npm) (malicious package)
- [MAL-2025-38949](https://insights.sbomify.com/MAL-2025-38949/): Malicious code in wdhag11 (npm) (malicious package)
- [MAL-2025-38948](https://insights.sbomify.com/MAL-2025-38948/): Malicious code in wdhag10 (npm) (malicious package)
- [MAL-2025-38947](https://insights.sbomify.com/MAL-2025-38947/): Malicious code in wdc-automation-framework (npm) (malicious package)
- [MAL-2025-38946](https://insights.sbomify.com/MAL-2025-38946/): Malicious code in wcklhqrkxfesdojy (npm) (malicious package)
- [MAL-2025-38945](https://insights.sbomify.com/MAL-2025-38945/): Malicious code in wcaxmsuydtqfjbng (npm) (malicious package)
- [MAL-2025-38944](https://insights.sbomify.com/MAL-2025-38944/): Malicious code in wboiesvkzkyjgxqd (npm) (malicious package)
- [MAL-2025-38943](https://insights.sbomify.com/MAL-2025-38943/): Malicious code in wbngclazsekkjmpr (npm) (malicious package)
- [MAL-2025-38942](https://insights.sbomify.com/MAL-2025-38942/): Malicious code in wb888new (npm) (malicious package)
- [MAL-2025-38941](https://insights.sbomify.com/MAL-2025-38941/): Malicious code in wb888 (npm) (malicious package)
- [MAL-2025-38940](https://insights.sbomify.com/MAL-2025-38940/): Malicious code in waxman (npm) (malicious package)
- [MAL-2025-3894](https://insights.sbomify.com/MAL-2025-3894/): Malicious code in ingestion-frontend (npm) (malicious package)
- [MAL-2025-38939](https://insights.sbomify.com/MAL-2025-38939/): Malicious code in wawan-sego63-kuki (npm) (malicious package)
- [MAL-2025-38938](https://insights.sbomify.com/MAL-2025-38938/): Malicious code in wawan-sambel39-breki (npm) (malicious package)
- [MAL-2025-38937](https://insights.sbomify.com/MAL-2025-38937/): Malicious code in wawan-ruwet53-breki (npm) (malicious package)
- [MAL-2025-38936](https://insights.sbomify.com/MAL-2025-38936/): Malicious code in wawan-ragi98-breki (npm) (malicious package)
- [MAL-2025-38935](https://insights.sbomify.com/MAL-2025-38935/): Malicious code in wawan-otak-otak81-sukiwir (npm) (malicious package)
- [MAL-2025-38934](https://insights.sbomify.com/MAL-2025-38934/): Malicious code in wawan-oblok85-breki (npm) (malicious package)
- [MAL-2025-38933](https://insights.sbomify.com/MAL-2025-38933/): Malicious code in wawan-lapis86-sukiwir (npm) (malicious package)
- [MAL-2025-38932](https://insights.sbomify.com/MAL-2025-38932/): Malicious code in wawan-lapis2-breki (npm) (malicious package)
- [MAL-2025-38931](https://insights.sbomify.com/MAL-2025-38931/): Malicious code in wawan-kue2-breki (npm) (malicious package)
- [MAL-2025-38930](https://insights.sbomify.com/MAL-2025-38930/): Malicious code in wawan-jengkol39-breki (npm) (malicious package)
- [MAL-2025-3893](https://insights.sbomify.com/MAL-2025-3893/): Malicious code in how-sezzle-works (npm) (malicious package)
- [MAL-2025-38929](https://insights.sbomify.com/MAL-2025-38929/): Malicious code in wawan-gembus11-breki (npm) (malicious package)
- [MAL-2025-38928](https://insights.sbomify.com/MAL-2025-38928/): Malicious code in wawan-bika60-breki (npm) (malicious package)
- [MAL-2025-38927](https://insights.sbomify.com/MAL-2025-38927/): Malicious code in wavy-logger (npm) (malicious package)
- [MAL-2025-38926](https://insights.sbomify.com/MAL-2025-38926/): Malicious code in wavy-dlp (npm) (malicious package)
- [MAL-2025-38925](https://insights.sbomify.com/MAL-2025-38925/): Malicious code in wavefunction-schema-draco-global (npm) (malicious package)
- [MAL-2025-38924](https://insights.sbomify.com/MAL-2025-38924/): Malicious code in wavefunction-rocket-mutation-json (npm) (malicious package)
- [MAL-2025-38923](https://insights.sbomify.com/MAL-2025-38923/): Malicious code in wavefunction-antd-dorado-mira (npm) (malicious package)
- [MAL-2025-38922](https://insights.sbomify.com/MAL-2025-38922/): Malicious code in wave_tyu8x_x2a31_solstice (npm) (malicious package)
- [MAL-2025-38921](https://insights.sbomify.com/MAL-2025-38921/): Malicious code in wave_o59gf_pi3i5_paradise (npm) (malicious package)
- [MAL-2025-38920](https://insights.sbomify.com/MAL-2025-38920/): Malicious code in wave_gv70z_xtn54_rainbow (npm) (malicious package)
- [MAL-2025-3892](https://insights.sbomify.com/MAL-2025-3892/): Malicious code in hardhat-configure (npm) (malicious package)
- [MAL-2025-38919](https://insights.sbomify.com/MAL-2025-38919/): Malicious code in wave_70v4j_6mkok_cascade (npm) (malicious package)
- [MAL-2025-38918](https://insights.sbomify.com/MAL-2025-38918/): Malicious code in wave_0z6qd_6vibr_reef (npm) (malicious package)
- [MAL-2025-38917](https://insights.sbomify.com/MAL-2025-38917/): Malicious code in wave-willow-dlr076-project (npm) (malicious package)
- [MAL-2025-38916](https://insights.sbomify.com/MAL-2025-38916/): Malicious code in wave-w3b5h-zr3yf-harmony-project (npm) (malicious package)
- [MAL-2025-38915](https://insights.sbomify.com/MAL-2025-38915/): Malicious code in wave-uranium-byk689-project (npm) (malicious package)
- [MAL-2025-38914](https://insights.sbomify.com/MAL-2025-38914/): Malicious code in wave-tornado-dsj415-project (npm) (malicious package)
- [MAL-2025-38913](https://insights.sbomify.com/MAL-2025-38913/): Malicious code in wave-star-zkn130-project (npm) (malicious package)
- [MAL-2025-38912](https://insights.sbomify.com/MAL-2025-38912/): Malicious code in wave-prairie-kdx541-project (npm) (malicious package)
- [MAL-2025-38911](https://insights.sbomify.com/MAL-2025-38911/): Malicious code in wave-prairie-hjh040-project (npm) (malicious package)
- [MAL-2025-38910](https://insights.sbomify.com/MAL-2025-38910/): Malicious code in wave-orangutan-xax006-project (npm) (malicious package)
- [MAL-2025-3891](https://insights.sbomify.com/MAL-2025-3891/): Malicious code in grew-plugins (npm) (malicious package)
- [MAL-2025-38909](https://insights.sbomify.com/MAL-2025-38909/): Malicious code in wave-opal-jal356-project (npm) (malicious package)
- [MAL-2025-38908](https://insights.sbomify.com/MAL-2025-38908/): Malicious code in wave-op515-gfojq-willow-project (npm) (malicious package)
- [MAL-2025-38907](https://insights.sbomify.com/MAL-2025-38907/): Malicious code in wave-moose-drr853-project (npm) (malicious package)
- [MAL-2025-38906](https://insights.sbomify.com/MAL-2025-38906/): Malicious code in wave-koala-fzc264-project (npm) (malicious package)
- [MAL-2025-38905](https://insights.sbomify.com/MAL-2025-38905/): Malicious code in wave-kaleidoscope-dcc117-project (npm) (malicious package)
- [MAL-2025-38904](https://insights.sbomify.com/MAL-2025-38904/): Malicious code in wave-k5s1h-twv5o-throne-project (npm) (malicious package)
- [MAL-2025-38903](https://insights.sbomify.com/MAL-2025-38903/): Malicious code in wave-jungle-dra062-project (npm) (malicious package)
- [MAL-2025-38902](https://insights.sbomify.com/MAL-2025-38902/): Malicious code in wave-hedgehog-ruv258-project (npm) (malicious package)
- [MAL-2025-38901](https://insights.sbomify.com/MAL-2025-38901/): Malicious code in wave-harbor-zsm497-project (npm) (malicious package)
- [MAL-2025-38900](https://insights.sbomify.com/MAL-2025-38900/): Malicious code in wave-dolphin-uul508-project (npm) (malicious package)
- [MAL-2025-3890](https://insights.sbomify.com/MAL-2025-3890/): Malicious code in flow-plugins (npm) (malicious package)
- [MAL-2025-389](https://insights.sbomify.com/MAL-2025-389/): Malicious code in apple-checkout (npm) (malicious package)
- [MAL-2025-38899](https://insights.sbomify.com/MAL-2025-38899/): Malicious code in wave-cherry-hxt428-project (npm) (malicious package)
- [MAL-2025-38898](https://insights.sbomify.com/MAL-2025-38898/): Malicious code in wave-caravan-sis173-project (npm) (malicious package)
- [MAL-2025-38897](https://insights.sbomify.com/MAL-2025-38897/): Malicious code in wave-butterfly-afj528-project (npm) (malicious package)
- [MAL-2025-38896](https://insights.sbomify.com/MAL-2025-38896/): Malicious code in wave-5gjf7-ho674-indigo-project (npm) (malicious package)
- [MAL-2025-38895](https://insights.sbomify.com/MAL-2025-38895/): Malicious code in wati-semur59-kuki (npm) (malicious package)
- [MAL-2025-38894](https://insights.sbomify.com/MAL-2025-38894/): Malicious code in wati-sambalado60-sukiwir (npm) (malicious package)
- [MAL-2025-38893](https://insights.sbomify.com/MAL-2025-38893/): Malicious code in wati-lepet43-breki (npm) (malicious package)
- [MAL-2025-38892](https://insights.sbomify.com/MAL-2025-38892/): Malicious code in wati-kemplang55-sukiwir (npm) (malicious package)
- [MAL-2025-38891](https://insights.sbomify.com/MAL-2025-38891/): Malicious code in wati-empal44-breki (npm) (malicious package)
- [MAL-2025-38890](https://insights.sbomify.com/MAL-2025-38890/): Malicious code in wati-botok93-sukiwir (npm) (malicious package)
- [MAL-2025-3889](https://insights.sbomify.com/MAL-2025-3889/): Malicious code in flipper-plugin-preferences (npm) (malicious package)
- [MAL-2025-38889](https://insights.sbomify.com/MAL-2025-38889/): Malicious code in waterplus (npm) (malicious package)
- [MAL-2025-38888](https://insights.sbomify.com/MAL-2025-38888/): Malicious code in watermelon-zucchini-eilj (npm) (malicious package)
- [MAL-2025-38887](https://insights.sbomify.com/MAL-2025-38887/): Malicious code in watermelon-zenith-3fd5 (npm) (malicious package)
- [MAL-2025-38886](https://insights.sbomify.com/MAL-2025-38886/): Malicious code in watermelon-ymh-project (npm) (malicious package)
- [MAL-2025-38885](https://insights.sbomify.com/MAL-2025-38885/): Malicious code in watermelon-yam-uniform-aepvd (npm) (malicious package)
- [MAL-2025-38884](https://insights.sbomify.com/MAL-2025-38884/): Malicious code in watermelon-yam-kiwi-xiunr (npm) (malicious package)
- [MAL-2025-38883](https://insights.sbomify.com/MAL-2025-38883/): Malicious code in watermelon-xigua-zulu-kaflb (npm) (malicious package)
- [MAL-2025-38882](https://insights.sbomify.com/MAL-2025-38882/): Malicious code in watermelon-w7m-project (npm) (malicious package)
- [MAL-2025-38881](https://insights.sbomify.com/MAL-2025-38881/): Malicious code in watermelon-victor-nectarine-jkhak (npm) (malicious package)
- [MAL-2025-38880](https://insights.sbomify.com/MAL-2025-38880/): Malicious code in watermelon-vdg-project (npm) (malicious package)
- [MAL-2025-3888](https://insights.sbomify.com/MAL-2025-3888/): Malicious code in flexible-loggers (npm) (malicious package)
- [MAL-2025-38879](https://insights.sbomify.com/MAL-2025-38879/): Malicious code in watermelon-vanilla-zulu-fpnib (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/681/