# Vulnerabilities published in 2025 - [MAL-2025-38606](https://insights.sbomify.com/MAL-2025-38606/): Malicious code in vortex-wgri6-de8uj-rose-project (npm) (malicious package) - [MAL-2025-38605](https://insights.sbomify.com/MAL-2025-38605/): Malicious code in vortex-tundra-zkb698-project (npm) (malicious package) - [MAL-2025-38604](https://insights.sbomify.com/MAL-2025-38604/): Malicious code in vortex-tbaep-t02tx-pinnacle-project (npm) (malicious package) - [MAL-2025-38603](https://insights.sbomify.com/MAL-2025-38603/): Malicious code in vortex-sw2fo-f4qeb-mystic-project (npm) (malicious package) - [MAL-2025-38602](https://insights.sbomify.com/MAL-2025-38602/): Malicious code in vortex-ripple-cnn444-project (npm) (malicious package) - [MAL-2025-38601](https://insights.sbomify.com/MAL-2025-38601/): Malicious code in vortex-lynx-rate-limiter-darkenergy (npm) (malicious package) - [MAL-2025-38600](https://insights.sbomify.com/MAL-2025-38600/): Malicious code in vortex-lightning-hag910-project (npm) (malicious package) - [MAL-2025-3860](https://insights.sbomify.com/MAL-2025-3860/): Malicious code in yandex-int (npm) (malicious package) - [MAL-2025-386](https://insights.sbomify.com/MAL-2025-386/): Malicious code in amazon-sdk (npm) (malicious package) - [MAL-2025-38599](https://insights.sbomify.com/MAL-2025-38599/): Malicious code in vortex-lava-eox877-project (npm) (malicious package) - [MAL-2025-38598](https://insights.sbomify.com/MAL-2025-38598/): Malicious code in vortex-jacket-mex338-project (npm) (malicious package) - [MAL-2025-38597](https://insights.sbomify.com/MAL-2025-38597/): Malicious code in vortex-glade-zpk825-project (npm) (malicious package) - [MAL-2025-38596](https://insights.sbomify.com/MAL-2025-38596/): Malicious code in vortex-glacier-fkg178-project (npm) (malicious package) - [MAL-2025-38595](https://insights.sbomify.com/MAL-2025-38595/): Malicious code in vortex-evergreen-nkn398-project (npm) (malicious package) - [MAL-2025-38594](https://insights.sbomify.com/MAL-2025-38594/): Malicious code in vortex-everest-nsp484-project (npm) (malicious package) - [MAL-2025-38593](https://insights.sbomify.com/MAL-2025-38593/): Malicious code in vortex-eslint-plugin-google-janus (npm) (malicious package) - [MAL-2025-38592](https://insights.sbomify.com/MAL-2025-38592/): Malicious code in vortex-emerald-oxl595-project (npm) (malicious package) - [MAL-2025-38591](https://insights.sbomify.com/MAL-2025-38591/): Malicious code in vortex-dv1uk-whdai-sky-project (npm) (malicious package) - [MAL-2025-38590](https://insights.sbomify.com/MAL-2025-38590/): Malicious code in vortex-dune-vnx922-project (npm) (malicious package) - [MAL-2025-3859](https://insights.sbomify.com/MAL-2025-3859/): Malicious code in valida-bepass (npm) (malicious package) - [MAL-2025-38589](https://insights.sbomify.com/MAL-2025-38589/): Malicious code in vortex-dragon-qps375-project (npm) (malicious package) - [MAL-2025-38588](https://insights.sbomify.com/MAL-2025-38588/): Malicious code in vortex-cascade-gdo869-project (npm) (malicious package) - [MAL-2025-38587](https://insights.sbomify.com/MAL-2025-38587/): Malicious code in vortex-archaeogenetics-juno-middleware (npm) (malicious package) - [MAL-2025-38586](https://insights.sbomify.com/MAL-2025-38586/): Malicious code in vortex-ant-psw485-project (npm) (malicious package) - [MAL-2025-38585](https://insights.sbomify.com/MAL-2025-38585/): Malicious code in vortex-acorn-zal868-project (npm) (malicious package) - [MAL-2025-38584](https://insights.sbomify.com/MAL-2025-38584/): Malicious code in vortex-acorn-rfj014-project (npm) (malicious package) - [MAL-2025-38583](https://insights.sbomify.com/MAL-2025-38583/): Malicious code in vorfreude (npm) (malicious package) - [MAL-2025-38582](https://insights.sbomify.com/MAL-2025-38582/): Malicious code in volvo-autopilot. (npm) (malicious package) - [MAL-2025-38581](https://insights.sbomify.com/MAL-2025-38581/): Malicious code in voltron-applications (npm) (malicious package) - [MAL-2025-38580](https://insights.sbomify.com/MAL-2025-38580/): Malicious code in voltlog (npm) (malicious package) - [MAL-2025-3858](https://insights.sbomify.com/MAL-2025-3858/): Malicious code in unipig (npm) (malicious package) - [MAL-2025-38579](https://insights.sbomify.com/MAL-2025-38579/): Malicious code in voltamp (npm) (malicious package) - [MAL-2025-38578](https://insights.sbomify.com/MAL-2025-38578/): Malicious code in volcanology-fornax-winston-local (npm) (malicious package) - [MAL-2025-38577](https://insights.sbomify.com/MAL-2025-38577/): Malicious code in volcano-yacht-591k (npm) (malicious package) - [MAL-2025-38576](https://insights.sbomify.com/MAL-2025-38576/): Malicious code in volcano-xerox-kdw602-project (npm) (malicious package) - [MAL-2025-38575](https://insights.sbomify.com/MAL-2025-38575/): Malicious code in volcano-whale-skm038-project (npm) (malicious package) - [MAL-2025-38574](https://insights.sbomify.com/MAL-2025-38574/): Malicious code in volcano-waterfall-bzf886-project (npm) (malicious package) - [MAL-2025-38573](https://insights.sbomify.com/MAL-2025-38573/): Malicious code in volcano-uranium-tcp162-project (npm) (malicious package) - [MAL-2025-38572](https://insights.sbomify.com/MAL-2025-38572/): Malicious code in volcano-umbra-z84v (npm) (malicious package) - [MAL-2025-38571](https://insights.sbomify.com/MAL-2025-38571/): Malicious code in volcano-tundra-pkn173-project (npm) (malicious package) - [MAL-2025-38570](https://insights.sbomify.com/MAL-2025-38570/): Malicious code in volcano-reef-icq293-project (npm) (malicious package) - [MAL-2025-3857](https://insights.sbomify.com/MAL-2025-3857/): Malicious code in testqwee57985 (npm) (malicious package) - [MAL-2025-38569](https://insights.sbomify.com/MAL-2025-38569/): Malicious code in volcano-quasar-feqa (npm) (malicious package) - [MAL-2025-38568](https://insights.sbomify.com/MAL-2025-38568/): Malicious code in volcano-nebula-lsp8 (npm) (malicious package) - [MAL-2025-38567](https://insights.sbomify.com/MAL-2025-38567/): Malicious code in volcano-mountain-ljf786-project (npm) (malicious package) - [MAL-2025-38566](https://insights.sbomify.com/MAL-2025-38566/): Malicious code in volcano-maple-vsk3 (npm) (malicious package) - [MAL-2025-38565](https://insights.sbomify.com/MAL-2025-38565/): Malicious code in volcano-lava-rjw951-project (npm) (malicious package) - [MAL-2025-38564](https://insights.sbomify.com/MAL-2025-38564/): Malicious code in volcano-kite-kwh318-project (npm) (malicious package) - [MAL-2025-38563](https://insights.sbomify.com/MAL-2025-38563/): Malicious code in volcano-gorilla-frn664-project (npm) (malicious package) - [MAL-2025-38562](https://insights.sbomify.com/MAL-2025-38562/): Malicious code in volcano-foxtrot-i31l (npm) (malicious package) - [MAL-2025-38561](https://insights.sbomify.com/MAL-2025-38561/): Malicious code in volcano-fjord-inl525-project (npm) (malicious package) - [MAL-2025-38560](https://insights.sbomify.com/MAL-2025-38560/): Malicious code in volcano-fennel-s2pq (npm) (malicious package) - [MAL-2025-3856](https://insights.sbomify.com/MAL-2025-3856/): Malicious code in spl-tokens (npm) (malicious package) - [MAL-2025-38559](https://insights.sbomify.com/MAL-2025-38559/): Malicious code in volcano-falcon-olm559-project (npm) (malicious package) - [MAL-2025-38558](https://insights.sbomify.com/MAL-2025-38558/): Malicious code in volcano-butterfly-clt405-project (npm) (malicious package) - [MAL-2025-38557](https://insights.sbomify.com/MAL-2025-38557/): Malicious code in volcano-boulder-dor911-project (npm) (malicious package) - [MAL-2025-38556](https://insights.sbomify.com/MAL-2025-38556/): Malicious code in void-slides-farout-pavo (npm) (malicious package) - [MAL-2025-38555](https://insights.sbomify.com/MAL-2025-38555/): Malicious code in void-rho-load-double-benchmark (npm) (malicious package) - [MAL-2025-38554](https://insights.sbomify.com/MAL-2025-38554/): Malicious code in void-psi-omicron-signal-abstract (npm) (malicious package) - [MAL-2025-38553](https://insights.sbomify.com/MAL-2025-38553/): Malicious code in void-perseus-rocket-zenobia (npm) (malicious package) - [MAL-2025-38552](https://insights.sbomify.com/MAL-2025-38552/): Malicious code in void-omicron-nu-index-await (npm) (malicious package) - [MAL-2025-38551](https://insights.sbomify.com/MAL-2025-38551/): Malicious code in void-kardashevscale-europa-promise (npm) (malicious package) - [MAL-2025-38550](https://insights.sbomify.com/MAL-2025-38550/): Malicious code in void-ivy-nxzu (npm) (malicious package) - [MAL-2025-3855](https://insights.sbomify.com/MAL-2025-3855/): Malicious code in solanaspl-tokens (npm) (malicious package) - [MAL-2025-38549](https://insights.sbomify.com/MAL-2025-38549/): Malicious code in voiceweb (npm) (malicious package) - [MAL-2025-38548](https://insights.sbomify.com/MAL-2025-38548/): Malicious code in voicepanel-sdk (npm) (malicious package) - [MAL-2025-38547](https://insights.sbomify.com/MAL-2025-38547/): Malicious code in voicemeeter (npm) (malicious package) - [MAL-2025-38546](https://insights.sbomify.com/MAL-2025-38546/): Malicious code in voice-quickstart-server-node (npm) (malicious package) - [MAL-2025-38545](https://insights.sbomify.com/MAL-2025-38545/): Malicious code in vogue-digital-edition (npm) (malicious package) - [MAL-2025-38544](https://insights.sbomify.com/MAL-2025-38544/): Malicious code in vodbox (npm) (malicious package) - [MAL-2025-38543](https://insights.sbomify.com/MAL-2025-38543/): Malicious code in vocobo (npm) (malicious package) - [MAL-2025-38542](https://insights.sbomify.com/MAL-2025-38542/): Malicious code in vocifero (npm) (malicious package) - [MAL-2025-38541](https://insights.sbomify.com/MAL-2025-38541/): Malicious code in vocablist (npm) (malicious package) - [MAL-2025-38540](https://insights.sbomify.com/MAL-2025-38540/): Malicious code in vocab-practice-js (npm) (malicious package) - [MAL-2025-3854](https://insights.sbomify.com/MAL-2025-3854/): Malicious code in shaon-media-downloader (npm) (malicious package) - [MAL-2025-38539](https://insights.sbomify.com/MAL-2025-38539/): Malicious code in vocab-practice (npm) (malicious package) - [MAL-2025-38538](https://insights.sbomify.com/MAL-2025-38538/): Malicious code in vobrowse (npm) (malicious package) - [MAL-2025-38537](https://insights.sbomify.com/MAL-2025-38537/): Malicious code in vobin (npm) (malicious package) - [MAL-2025-38536](https://insights.sbomify.com/MAL-2025-38536/): Malicious code in voacap (npm) (malicious package) - [MAL-2025-38535](https://insights.sbomify.com/MAL-2025-38535/): Malicious code in vnte2 (npm) (malicious package) - [MAL-2025-38534](https://insights.sbomify.com/MAL-2025-38534/): Malicious code in vnhkbdjystfwaoqg (npm) (malicious package) - [MAL-2025-38533](https://insights.sbomify.com/MAL-2025-38533/): Malicious code in vndorm (npm) (malicious package) - [MAL-2025-38532](https://insights.sbomify.com/MAL-2025-38532/): Malicious code in vma-robot (npm) (malicious package) - [MAL-2025-38531](https://insights.sbomify.com/MAL-2025-38531/): Malicious code in vma-gojs (npm) (malicious package) - [MAL-2025-38530](https://insights.sbomify.com/MAL-2025-38530/): Malicious code in vlocate (npm) (malicious package) - [MAL-2025-3853](https://insights.sbomify.com/MAL-2025-3853/): Malicious code in rushstack (npm) (malicious package) - [MAL-2025-38529](https://insights.sbomify.com/MAL-2025-38529/): Malicious code in vlasov (npm) (malicious package) - [MAL-2025-38528](https://insights.sbomify.com/MAL-2025-38528/): Malicious code in vl-ui-template (npm) (malicious package) - [MAL-2025-38527](https://insights.sbomify.com/MAL-2025-38527/): Malicious code in vl-ui-grid (npm) (malicious package) - [MAL-2025-38526](https://insights.sbomify.com/MAL-2025-38526/): Malicious code in vl-ui-footer (npm) (malicious package) - [MAL-2025-38525](https://insights.sbomify.com/MAL-2025-38525/): Malicious code in vksuite (npm) (malicious package) - [MAL-2025-38524](https://insights.sbomify.com/MAL-2025-38524/): Malicious code in vkfilter (npm) (malicious package) - [MAL-2025-38523](https://insights.sbomify.com/MAL-2025-38523/): Malicious code in vk-teams-bridge (npm) (malicious package) - [MAL-2025-38522](https://insights.sbomify.com/MAL-2025-38522/): Malicious code in vk-hr-tek (npm) (malicious package) - [MAL-2025-38521](https://insights.sbomify.com/MAL-2025-38521/): Malicious code in vjzual (npm) (malicious package) - [MAL-2025-38520](https://insights.sbomify.com/MAL-2025-38520/): Malicious code in vizthis (npm) (malicious package) - [MAL-2025-3852](https://insights.sbomify.com/MAL-2025-3852/): Malicious code in react-native-plugin-ms-adal (npm) (malicious package) - [MAL-2025-38519](https://insights.sbomify.com/MAL-2025-38519/): Malicious code in vizi-dashboard (npm) (malicious package) - [MAL-2025-38518](https://insights.sbomify.com/MAL-2025-38518/): Malicious code in viy (npm) (malicious package) - [MAL-2025-38517](https://insights.sbomify.com/MAL-2025-38517/): Malicious code in vixinet (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/685/