# Vulnerabilities published in 2025


- [MAL-2025-38698](https://insights.sbomify.com/MAL-2025-38698/): Malicious code in vulture-dove-kmy948-project (npm) (malicious package)
- [MAL-2025-38697](https://insights.sbomify.com/MAL-2025-38697/): Malicious code in vulndb-service (npm) (malicious package)
- [MAL-2025-38696](https://insights.sbomify.com/MAL-2025-38696/): Malicious code in vuln (npm) (malicious package)
- [MAL-2025-38695](https://insights.sbomify.com/MAL-2025-38695/): Malicious code in vulcan-ux-core (npm) (malicious package)
- [MAL-2025-38694](https://insights.sbomify.com/MAL-2025-38694/): Malicious code in vulcan-rest-callback-jekyll (npm) (malicious package)
- [MAL-2025-38693](https://insights.sbomify.com/MAL-2025-38693/): Malicious code in vulcan-mocha-miranda-winston (npm) (malicious package)
- [MAL-2025-38692](https://insights.sbomify.com/MAL-2025-38692/): Malicious code in vulcan-jupiter-scripts-module (npm) (malicious package)
- [MAL-2025-38691](https://insights.sbomify.com/MAL-2025-38691/): Malicious code in vulcan-docusaurus-quark-mineralogy (npm) (malicious package)
- [MAL-2025-38690](https://insights.sbomify.com/MAL-2025-38690/): Malicious code in vulcan-augmentedreality-mui-taurus (npm) (malicious package)
- [MAL-2025-3869](https://insights.sbomify.com/MAL-2025-3869/): Malicious code in albatross-test2-module (npm) (malicious package)
- [MAL-2025-38689](https://insights.sbomify.com/MAL-2025-38689/): Malicious code in vuetify-superagent-eslint-config-spawn (npm) (malicious package)
- [MAL-2025-38688](https://insights.sbomify.com/MAL-2025-38688/): Malicious code in vuetify-sagitta-dactyl-framework (npm) (malicious package)
- [MAL-2025-38687](https://insights.sbomify.com/MAL-2025-38687/): Malicious code in vuetify-proteomics-biohacking-cors (npm) (malicious package)
- [MAL-2025-38686](https://insights.sbomify.com/MAL-2025-38686/): Malicious code in vuetify-jwt-pegasus-spawn (npm) (malicious package)
- [MAL-2025-38685](https://insights.sbomify.com/MAL-2025-38685/): Malicious code in vuetify-halley-aldebaran-radiant (npm) (malicious package)
- [MAL-2025-38684](https://insights.sbomify.com/MAL-2025-38684/): Malicious code in vuetify-electron-builder-pulsar-module (npm) (malicious package)
- [MAL-2025-38683](https://insights.sbomify.com/MAL-2025-38683/): Malicious code in vuetify-commitizen-prompts-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-38682](https://insights.sbomify.com/MAL-2025-38682/): Malicious code in vuetify-capella-hyperion-xenon (npm) (malicious package)
- [MAL-2025-38681](https://insights.sbomify.com/MAL-2025-38681/): Malicious code in vuepress-eris-ganymede-public (npm) (malicious package)
- [MAL-2025-38680](https://insights.sbomify.com/MAL-2025-38680/): Malicious code in vuepress-cosmicray-quantum-xenon (npm) (malicious package)
- [MAL-2025-3868](https://insights.sbomify.com/MAL-2025-3868/): Malicious code in @thekrishnakarn/healthier-app (npm) (malicious package)
- [MAL-2025-38679](https://insights.sbomify.com/MAL-2025-38679/): Malicious code in vuepress-cosmicray-cypress-puppeteer (npm) (malicious package)
- [MAL-2025-38678](https://insights.sbomify.com/MAL-2025-38678/): Malicious code in vuepress-alphard-rate-limiter-spectron-webdriver (npm) (malicious package)
- [MAL-2025-38677](https://insights.sbomify.com/MAL-2025-38677/): Malicious code in vuekkzsl40dgoz6nwl9mhitpna5blxsk (npm) (malicious package)
- [MAL-2025-38676](https://insights.sbomify.com/MAL-2025-38676/): Malicious code in vue3-image-base64 (npm) (malicious package)
- [MAL-2025-38675](https://insights.sbomify.com/MAL-2025-38675/): Malicious code in vue-weapp (npm) (malicious package)
- [MAL-2025-38674](https://insights.sbomify.com/MAL-2025-38674/): Malicious code in vue-storefront-stripe (npm) (malicious package)
- [MAL-2025-38673](https://insights.sbomify.com/MAL-2025-38673/): Malicious code in vue-stock-chart (npm) (malicious package)
- [MAL-2025-38672](https://insights.sbomify.com/MAL-2025-38672/): Malicious code in vue-rt-style-kit-aks (npm) (malicious package)
- [MAL-2025-38671](https://insights.sbomify.com/MAL-2025-38671/): Malicious code in vue-pwa (npm) (malicious package)
- [MAL-2025-38670](https://insights.sbomify.com/MAL-2025-38670/): Malicious code in vue-multiselect-grid (npm) (malicious package)
- [MAL-2025-3867](https://insights.sbomify.com/MAL-2025-3867/): Malicious code in @skip-partner/i18n (npm) (malicious package)
- [MAL-2025-38669](https://insights.sbomify.com/MAL-2025-38669/): Malicious code in vue-design-system (npm) (malicious package)
- [MAL-2025-38668](https://insights.sbomify.com/MAL-2025-38668/): Malicious code in vue-custom-directives (npm) (malicious package)
- [MAL-2025-38667](https://insights.sbomify.com/MAL-2025-38667/): Malicious code in vue-cli-nb-no (npm) (malicious package)
- [MAL-2025-38666](https://insights.sbomify.com/MAL-2025-38666/): Malicious code in vue-build-no-ssr (npm) (malicious package)
- [MAL-2025-38665](https://insights.sbomify.com/MAL-2025-38665/): Malicious code in vtigerpy (npm) (malicious package)
- [MAL-2025-38664](https://insights.sbomify.com/MAL-2025-38664/): Malicious code in vtexjson (npm) (malicious package)
- [MAL-2025-38663](https://insights.sbomify.com/MAL-2025-38663/): Malicious code in vteayizknuflwbqo (npm) (malicious package)
- [MAL-2025-38662](https://insights.sbomify.com/MAL-2025-38662/): Malicious code in vt-shaver (npm) (malicious package)
- [MAL-2025-38661](https://insights.sbomify.com/MAL-2025-38661/): Malicious code in vstyleu (npm) (malicious package)
- [MAL-2025-38660](https://insights.sbomify.com/MAL-2025-38660/): Malicious code in vsth0hbao36u7fgji617larsov7xwdvk (npm) (malicious package)
- [MAL-2025-3866](https://insights.sbomify.com/MAL-2025-3866/): Malicious code in @by-device/fingerprint (npm) (malicious package)
- [MAL-2025-38659](https://insights.sbomify.com/MAL-2025-38659/): Malicious code in vslearn (npm) (malicious package)
- [MAL-2025-38658](https://insights.sbomify.com/MAL-2025-38658/): Malicious code in vsgaleria (npm) (malicious package)
- [MAL-2025-38657](https://insights.sbomify.com/MAL-2025-38657/): Malicious code in vsfs3 (npm) (malicious package)
- [MAL-2025-38656](https://insights.sbomify.com/MAL-2025-38656/): Malicious code in vscode.markdown-it-renderer (npm) (malicious package)
- [MAL-2025-38655](https://insights.sbomify.com/MAL-2025-38655/): Malicious code in vscode-reh (npm) (malicious package)
- [MAL-2025-38654](https://insights.sbomify.com/MAL-2025-38654/): Malicious code in vscode-notebook-renderer (npm) (malicious package)
- [MAL-2025-38653](https://insights.sbomify.com/MAL-2025-38653/): Malicious code in vscode-mssql (npm) (malicious package)
- [MAL-2025-38652](https://insights.sbomify.com/MAL-2025-38652/): Malicious code in vscode-import-sort (npm) (malicious package)
- [MAL-2025-38651](https://insights.sbomify.com/MAL-2025-38651/): Malicious code in vscode-extend (npm) (malicious package)
- [MAL-2025-38650](https://insights.sbomify.com/MAL-2025-38650/): Malicious code in vscode-antlr4 (npm) (malicious package)
- [MAL-2025-3865](https://insights.sbomify.com/MAL-2025-3865/): Malicious code in mfe-react-bridge (npm) (malicious package)
- [MAL-2025-38649](https://insights.sbomify.com/MAL-2025-38649/): Malicious code in vs43 (npm) (malicious package)
- [MAL-2025-38648](https://insights.sbomify.com/MAL-2025-38648/): Malicious code in vrwykstuokzpigda (npm) (malicious package)
- [MAL-2025-38647](https://insights.sbomify.com/MAL-2025-38647/): Malicious code in vrt3fg (npm) (malicious package)
- [MAL-2025-38646](https://insights.sbomify.com/MAL-2025-38646/): Malicious code in vrp-tools (npm) (malicious package)
- [MAL-2025-38645](https://insights.sbomify.com/MAL-2025-38645/): Malicious code in vrivera (npm) (malicious package)
- [MAL-2025-38644](https://insights.sbomify.com/MAL-2025-38644/): Malicious code in vrger3 (npm) (malicious package)
- [MAL-2025-38643](https://insights.sbomify.com/MAL-2025-38643/): Malicious code in vrg34 (npm) (malicious package)
- [MAL-2025-38642](https://insights.sbomify.com/MAL-2025-38642/): Malicious code in vrfi-schedules (npm) (malicious package)
- [MAL-2025-38641](https://insights.sbomify.com/MAL-2025-38641/): Malicious code in vrfi-cal-registration (npm) (malicious package)
- [MAL-2025-38640](https://insights.sbomify.com/MAL-2025-38640/): Malicious code in vrfger3 (npm) (malicious package)
- [MAL-2025-3864](https://insights.sbomify.com/MAL-2025-3864/): Malicious code in yamoney-guidelines (npm) (malicious package)
- [MAL-2025-38639](https://insights.sbomify.com/MAL-2025-38639/): Malicious code in vrenv (npm) (malicious package)
- [MAL-2025-38638](https://insights.sbomify.com/MAL-2025-38638/): Malicious code in vreb3 (npm) (malicious package)
- [MAL-2025-38637](https://insights.sbomify.com/MAL-2025-38637/): Malicious code in vre43 (npm) (malicious package)
- [MAL-2025-38636](https://insights.sbomify.com/MAL-2025-38636/): Malicious code in vrcumeyqnjsiwgkd (npm) (malicious package)
- [MAL-2025-38635](https://insights.sbomify.com/MAL-2025-38635/): Malicious code in vranges (npm) (malicious package)
- [MAL-2025-38634](https://insights.sbomify.com/MAL-2025-38634/): Malicious code in vr-lib (npm) (malicious package)
- [MAL-2025-38633](https://insights.sbomify.com/MAL-2025-38633/): Malicious code in vquywzoakjtfnsmr (npm) (malicious package)
- [MAL-2025-38632](https://insights.sbomify.com/MAL-2025-38632/): Malicious code in vqkslritnjhyeugo (npm) (malicious package)
- [MAL-2025-38631](https://insights.sbomify.com/MAL-2025-38631/): Malicious code in vqasmdufyhwlcezb (npm) (malicious package)
- [MAL-2025-38630](https://insights.sbomify.com/MAL-2025-38630/): Malicious code in vpxkjfnugtzidesw (npm) (malicious package)
- [MAL-2025-38629](https://insights.sbomify.com/MAL-2025-38629/): Malicious code in vpvoci (npm) (malicious package)
- [MAL-2025-38628](https://insights.sbomify.com/MAL-2025-38628/): Malicious code in vprwbysfktadghne (npm) (malicious package)
- [MAL-2025-38627](https://insights.sbomify.com/MAL-2025-38627/): Malicious code in vpatdnhbukmgjqrs (npm) (malicious package)
- [MAL-2025-38626](https://insights.sbomify.com/MAL-2025-38626/): Malicious code in voyage_ysitn_il0e7_plume (npm) (malicious package)
- [MAL-2025-38625](https://insights.sbomify.com/MAL-2025-38625/): Malicious code in voyage_vx4ld_okb49_antelope (npm) (malicious package)
- [MAL-2025-38624](https://insights.sbomify.com/MAL-2025-38624/): Malicious code in voyage_n9ghc_ap6yr_twilight (npm) (malicious package)
- [MAL-2025-38623](https://insights.sbomify.com/MAL-2025-38623/): Malicious code in voyage_izoit_pm39d_wind (npm) (malicious package)
- [MAL-2025-38622](https://insights.sbomify.com/MAL-2025-38622/): Malicious code in voyage_fhquk_jedjs_unicorn (npm) (malicious package)
- [MAL-2025-38621](https://insights.sbomify.com/MAL-2025-38621/): Malicious code in voyage_c1jzt_rvz3z_giraffe (npm) (malicious package)
- [MAL-2025-38620](https://insights.sbomify.com/MAL-2025-38620/): Malicious code in voyage_1vt5y_uyn8a_harmony (npm) (malicious package)
- [MAL-2025-3862](https://insights.sbomify.com/MAL-2025-3862/): Malicious code in ideals-utils (npm) (malicious package)
- [MAL-2025-38619](https://insights.sbomify.com/MAL-2025-38619/): Malicious code in VoxFeed (npm) (malicious package)
- [MAL-2025-38618](https://insights.sbomify.com/MAL-2025-38618/): Malicious code in votesapp (npm) (malicious package)
- [MAL-2025-38617](https://insights.sbomify.com/MAL-2025-38617/): Malicious code in voteful (npm) (malicious package)
- [MAL-2025-38616](https://insights.sbomify.com/MAL-2025-38616/): Malicious code in votebacon (npm) (malicious package)
- [MAL-2025-38615](https://insights.sbomify.com/MAL-2025-38615/): Malicious code in vortex_x6cz2_jpxej_prairie (npm) (malicious package)
- [MAL-2025-38614](https://insights.sbomify.com/MAL-2025-38614/): Malicious code in vortex_upe7b_4wdov_mirage (npm) (malicious package)
- [MAL-2025-38613](https://insights.sbomify.com/MAL-2025-38613/): Malicious code in vortex_qmviz_z8i7w_alchemy (npm) (malicious package)
- [MAL-2025-38612](https://insights.sbomify.com/MAL-2025-38612/): Malicious code in vortex_o1kum_n6g77_grove (npm) (malicious package)
- [MAL-2025-38611](https://insights.sbomify.com/MAL-2025-38611/): Malicious code in vortex_nmsup_wekyn_glow (npm) (malicious package)
- [MAL-2025-38610](https://insights.sbomify.com/MAL-2025-38610/): Malicious code in vortex_2gqod_vxers_raven (npm) (malicious package)
- [MAL-2025-3861](https://insights.sbomify.com/MAL-2025-3861/): Malicious code in @okdev/boiler_plate (npm) (malicious package)
- [MAL-2025-38609](https://insights.sbomify.com/MAL-2025-38609/): Malicious code in vortex-zodiac-xbz351-project (npm) (malicious package)
- [MAL-2025-38608](https://insights.sbomify.com/MAL-2025-38608/): Malicious code in vortex-yucca-gfd622-project (npm) (malicious package)
- [MAL-2025-38607](https://insights.sbomify.com/MAL-2025-38607/): Malicious code in vortex-yt20h-djo8e-boulder-project (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/684/