# Vulnerabilities published in 2025


- [MAL-2025-38788](https://insights.sbomify.com/MAL-2025-38788/): Malicious code in wasabi-conifer-3ys5 (npm) (malicious package)
- [MAL-2025-38787](https://insights.sbomify.com/MAL-2025-38787/): Malicious code in wasabi-alpha-xxqp (npm) (malicious package)
- [MAL-2025-38786](https://insights.sbomify.com/MAL-2025-38786/): Malicious code in warquiz (npm) (malicious package)
- [MAL-2025-38785](https://insights.sbomify.com/MAL-2025-38785/): Malicious code in warptable (npm) (malicious package)
- [MAL-2025-38784](https://insights.sbomify.com/MAL-2025-38784/): Malicious code in warplugin (npm) (malicious package)
- [MAL-2025-38783](https://insights.sbomify.com/MAL-2025-38783/): Malicious code in warpic (npm) (malicious package)
- [MAL-2025-38782](https://insights.sbomify.com/MAL-2025-38782/): Malicious code in warp-postcss-loader-jest-cosmicsilence (npm) (malicious package)
- [MAL-2025-38781](https://insights.sbomify.com/MAL-2025-38781/): Malicious code in warp-meteor-chakra-ui-levels (npm) (malicious package)
- [MAL-2025-38780](https://insights.sbomify.com/MAL-2025-38780/): Malicious code in warp-metabolomics-carpo-pulsar (npm) (malicious package)
- [MAL-2025-3878](https://insights.sbomify.com/MAL-2025-3878/): Malicious code in com.meta.xr.sdk.avatars (npm) (malicious package)
- [MAL-2025-38779](https://insights.sbomify.com/MAL-2025-38779/): Malicious code in warp-blitz-biogeochemistry-stratigraphy (npm) (malicious package)
- [MAL-2025-38778](https://insights.sbomify.com/MAL-2025-38778/): Malicious code in warn-interface-kappa-wind-sed (npm) (malicious package)
- [MAL-2025-38777](https://insights.sbomify.com/MAL-2025-38777/): Malicious code in warn-cache-signal-validate-data (npm) (malicious package)
- [MAL-2025-38776](https://insights.sbomify.com/MAL-2025-38776/): Malicious code in wargame-rcon (npm) (malicious package)
- [MAL-2025-38775](https://insights.sbomify.com/MAL-2025-38775/): Malicious code in wardah (npm) (malicious package)
- [MAL-2025-38774](https://insights.sbomify.com/MAL-2025-38774/): Malicious code in war-robots-test-server-free-play466 (npm) (malicious package)
- [MAL-2025-38773](https://insights.sbomify.com/MAL-2025-38773/): Malicious code in war-robots-cost947 (npm) (malicious package)
- [MAL-2025-38772](https://insights.sbomify.com/MAL-2025-38772/): Malicious code in war-robots-cost454 (npm) (malicious package)
- [MAL-2025-38771](https://insights.sbomify.com/MAL-2025-38771/): Malicious code in wanweigang-jingying-rike-erlingyijiulingsan-lingwu (npm) (malicious package)
- [MAL-2025-38770](https://insights.sbomify.com/MAL-2025-38770/): Malicious code in wanweigang-jingying-rike-erlingyijiulingliu-lingba (npm) (malicious package)
- [MAL-2025-3877](https://insights.sbomify.com/MAL-2025-3877/): Malicious code in codm-onlinematch (npm) (malicious package)
- [MAL-2025-38769](https://insights.sbomify.com/MAL-2025-38769/): Malicious code in wanneng-yingli-beizeng-moshi (npm) (malicious package)
- [MAL-2025-38768](https://insights.sbomify.com/MAL-2025-38768/): Malicious code in wangting (npm) (malicious package)
- [MAL-2025-38767](https://insights.sbomify.com/MAL-2025-38767/): Malicious code in wangshan (npm) (malicious package)
- [MAL-2025-38766](https://insights.sbomify.com/MAL-2025-38766/): Malicious code in wanfa-jianshi (npm) (malicious package)
- [MAL-2025-38765](https://insights.sbomify.com/MAL-2025-38765/): Malicious code in wandx-api (npm) (malicious package)
- [MAL-2025-38764](https://insights.sbomify.com/MAL-2025-38764/): Malicious code in wandrlst (npm) (malicious package)
- [MAL-2025-38763](https://insights.sbomify.com/MAL-2025-38763/): Malicious code in wandergl (npm) (malicious package)
- [MAL-2025-38762](https://insights.sbomify.com/MAL-2025-38762/): Malicious code in wander_rtgtl_as13k_quintessence (npm) (malicious package)
- [MAL-2025-38761](https://insights.sbomify.com/MAL-2025-38761/): Malicious code in wander_nc46j_faoxm_twilight (npm) (malicious package)
- [MAL-2025-38760](https://insights.sbomify.com/MAL-2025-38760/): Malicious code in wander_l457u_9ovol_lullaby (npm) (malicious package)
- [MAL-2025-3876](https://insights.sbomify.com/MAL-2025-3876/): Malicious code in codm-lucky-shop-pss (npm) (malicious package)
- [MAL-2025-38759](https://insights.sbomify.com/MAL-2025-38759/): Malicious code in wander_gvol8_2jg5b_velocity (npm) (malicious package)
- [MAL-2025-38758](https://insights.sbomify.com/MAL-2025-38758/): Malicious code in wander_fcevl_h1cx5_realm (npm) (malicious package)
- [MAL-2025-38757](https://insights.sbomify.com/MAL-2025-38757/): Malicious code in wander_facms_crk6c_drizzle (npm) (malicious package)
- [MAL-2025-38756](https://insights.sbomify.com/MAL-2025-38756/): Malicious code in wander_d7etn_6kz0o_quiver (npm) (malicious package)
- [MAL-2025-38755](https://insights.sbomify.com/MAL-2025-38755/): Malicious code in wander_cy2k9_brmst_snow (npm) (malicious package)
- [MAL-2025-38754](https://insights.sbomify.com/MAL-2025-38754/): Malicious code in wander_2t3vp_2feik_horizon (npm) (malicious package)
- [MAL-2025-38753](https://insights.sbomify.com/MAL-2025-38753/): Malicious code in wander_285du_ewsj1_zephyr (npm) (malicious package)
- [MAL-2025-38752](https://insights.sbomify.com/MAL-2025-38752/): Malicious code in wander-snfbk-yyr2n-glow-project (npm) (malicious package)
- [MAL-2025-38751](https://insights.sbomify.com/MAL-2025-38751/): Malicious code in walnut-udon-6v91 (npm) (malicious package)
- [MAL-2025-38750](https://insights.sbomify.com/MAL-2025-38750/): Malicious code in walnut-tornado-tsch (npm) (malicious package)
- [MAL-2025-3875](https://insights.sbomify.com/MAL-2025-3875/): Malicious code in bui-react-10 (npm) (malicious package)
- [MAL-2025-38749](https://insights.sbomify.com/MAL-2025-38749/): Malicious code in walnut-kayak-hpj5 (npm) (malicious package)
- [MAL-2025-38748](https://insights.sbomify.com/MAL-2025-38748/): Malicious code in walnut-jungle-hjsq (npm) (malicious package)
- [MAL-2025-38747](https://insights.sbomify.com/MAL-2025-38747/): Malicious code in walnut-drone-endr (npm) (malicious package)
- [MAL-2025-38746](https://insights.sbomify.com/MAL-2025-38746/): Malicious code in wallphp (npm) (malicious package)
- [MAL-2025-38745](https://insights.sbomify.com/MAL-2025-38745/): Malicious code in wallhawk (npm) (malicious package)
- [MAL-2025-38744](https://insights.sbomify.com/MAL-2025-38744/): Malicious code in walletsettings-paypal (npm) (malicious package)
- [MAL-2025-38743](https://insights.sbomify.com/MAL-2025-38743/): Malicious code in walletfi-paypal (npm) (malicious package)
- [MAL-2025-38742](https://insights.sbomify.com/MAL-2025-38742/): Malicious code in walletbalanceprovider (npm) (malicious package)
- [MAL-2025-38741](https://insights.sbomify.com/MAL-2025-38741/): Malicious code in walletactivitysearch-paypal (npm) (malicious package)
- [MAL-2025-38740](https://insights.sbomify.com/MAL-2025-38740/): Malicious code in walkme-ui-template (npm) (malicious package)
- [MAL-2025-3874](https://insights.sbomify.com/MAL-2025-3874/): Malicious code in beautiful-plugins (npm) (malicious package)
- [MAL-2025-38739](https://insights.sbomify.com/MAL-2025-38739/): Malicious code in waldboost (npm) (malicious package)
- [MAL-2025-38738](https://insights.sbomify.com/MAL-2025-38738/): Malicious code in walawe (npm) (malicious package)
- [MAL-2025-38737](https://insights.sbomify.com/MAL-2025-38737/): Malicious code in wajihah (npm) (malicious package)
- [MAL-2025-38736](https://insights.sbomify.com/MAL-2025-38736/): Malicious code in waiqin (npm) (malicious package)
- [MAL-2025-38735](https://insights.sbomify.com/MAL-2025-38735/): Malicious code in wafflet (npm) (malicious package)
- [MAL-2025-38734](https://insights.sbomify.com/MAL-2025-38734/): Malicious code in waffle-cone (npm) (malicious package)
- [MAL-2025-38733](https://insights.sbomify.com/MAL-2025-38733/): Malicious code in waddell (npm) (malicious package)
- [MAL-2025-38732](https://insights.sbomify.com/MAL-2025-38732/): Malicious code in waaass (npm) (malicious package)
- [MAL-2025-38731](https://insights.sbomify.com/MAL-2025-38731/): Malicious code in wa-ret-rop (npm) (malicious package)
- [MAL-2025-38730](https://insights.sbomify.com/MAL-2025-38730/): Malicious code in w56ai8 (npm) (malicious package)
- [MAL-2025-3873](https://insights.sbomify.com/MAL-2025-3873/): Malicious code in arcnagacha (npm) (malicious package)
- [MAL-2025-38729](https://insights.sbomify.com/MAL-2025-38729/): Malicious code in w2gv6j (npm) (malicious package)
- [MAL-2025-38728](https://insights.sbomify.com/MAL-2025-38728/): Malicious code in W2G2 (npm) (malicious package)
- [MAL-2025-38727](https://insights.sbomify.com/MAL-2025-38727/): Malicious code in w1kt-ngx-slimscroll (npm) (malicious package)
- [MAL-2025-38726](https://insights.sbomify.com/MAL-2025-38726/): Malicious code in w11k-select-ngx-adapter (npm) (malicious package)
- [MAL-2025-38725](https://insights.sbomify.com/MAL-2025-38725/): Malicious code in vywdojmfakbuekqc (npm) (malicious package)
- [MAL-2025-38724](https://insights.sbomify.com/MAL-2025-38724/): Malicious code in vykony (npm) (malicious package)
- [MAL-2025-38723](https://insights.sbomify.com/MAL-2025-38723/): Malicious code in vxyqhpbmkljiasgz (npm) (malicious package)
- [MAL-2025-38722](https://insights.sbomify.com/MAL-2025-38722/): Malicious code in vxehrkjqfklcostn (npm) (malicious package)
- [MAL-2025-38721](https://insights.sbomify.com/MAL-2025-38721/): Malicious code in vwrxljgadmpbkzye (npm) (malicious package)
- [MAL-2025-38720](https://insights.sbomify.com/MAL-2025-38720/): Malicious code in vwfs-mustang (npm) (malicious package)
- [MAL-2025-3872](https://insights.sbomify.com/MAL-2025-3872/): Malicious code in arcademathjs (npm) (malicious package)
- [MAL-2025-38719](https://insights.sbomify.com/MAL-2025-38719/): Malicious code in vwfs-bronson (npm) (malicious package)
- [MAL-2025-38718](https://insights.sbomify.com/MAL-2025-38718/): Malicious code in vwesdhyijgnkkmpf (npm) (malicious package)
- [MAL-2025-38717](https://insights.sbomify.com/MAL-2025-38717/): Malicious code in vvre3 (npm) (malicious package)
- [MAL-2025-38716](https://insights.sbomify.com/MAL-2025-38716/): Malicious code in vvklee (npm) (malicious package)
- [MAL-2025-38715](https://insights.sbomify.com/MAL-2025-38715/): Malicious code in vvite-plugin-react-ping (npm) (malicious package)
- [MAL-2025-38714](https://insights.sbomify.com/MAL-2025-38714/): Malicious code in vve3 (npm) (malicious package)
- [MAL-2025-38713](https://insights.sbomify.com/MAL-2025-38713/): Malicious code in vvd3s (npm) (malicious package)
- [MAL-2025-38712](https://insights.sbomify.com/MAL-2025-38712/): Malicious code in vvd33 (npm) (malicious package)
- [MAL-2025-38711](https://insights.sbomify.com/MAL-2025-38711/): Malicious code in vuskbkaiozqjngcy (npm) (malicious package)
- [MAL-2025-38710](https://insights.sbomify.com/MAL-2025-38710/): Malicious code in vulture-zebra-cea002-project (npm) (malicious package)
- [MAL-2025-3871](https://insights.sbomify.com/MAL-2025-3871/): Malicious code in app-bff-shared (npm) (malicious package)
- [MAL-2025-38709](https://insights.sbomify.com/MAL-2025-38709/): Malicious code in vulture-whale-rwz909-project (npm) (malicious package)
- [MAL-2025-38708](https://insights.sbomify.com/MAL-2025-38708/): Malicious code in vulture-waterfall-ifu407-project (npm) (malicious package)
- [MAL-2025-38707](https://insights.sbomify.com/MAL-2025-38707/): Malicious code in vulture-tundra-sty354-project (npm) (malicious package)
- [MAL-2025-38706](https://insights.sbomify.com/MAL-2025-38706/): Malicious code in vulture-thunder-nya877-project (npm) (malicious package)
- [MAL-2025-38705](https://insights.sbomify.com/MAL-2025-38705/): Malicious code in vulture-quagmire-kyh296-project (npm) (malicious package)
- [MAL-2025-38704](https://insights.sbomify.com/MAL-2025-38704/): Malicious code in vulture-opal-btd408-project (npm) (malicious package)
- [MAL-2025-38703](https://insights.sbomify.com/MAL-2025-38703/): Malicious code in vulture-octopus-bmk803-project (npm) (malicious package)
- [MAL-2025-38702](https://insights.sbomify.com/MAL-2025-38702/): Malicious code in vulture-jungle-jvs753-project (npm) (malicious package)
- [MAL-2025-38701](https://insights.sbomify.com/MAL-2025-38701/): Malicious code in vulture-jade-icp213-project (npm) (malicious package)
- [MAL-2025-38700](https://insights.sbomify.com/MAL-2025-38700/): Malicious code in vulture-iceberg-utp773-project (npm) (malicious package)
- [MAL-2025-3870](https://insights.sbomify.com/MAL-2025-3870/): Malicious code in api-doc-app (npm) (malicious package)
- [MAL-2025-387](https://insights.sbomify.com/MAL-2025-387/): Malicious code in amazon-service (npm) (malicious package)
- [MAL-2025-38699](https://insights.sbomify.com/MAL-2025-38699/): Malicious code in vulture-galaxy-onl848-project (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/683/