# Vulnerabilities published in 2025 - [MAL-2025-38516](https://insights.sbomify.com/MAL-2025-38516/): Malicious code in vivid-shimmer-dqh065-project (npm) (malicious package) - [MAL-2025-38515](https://insights.sbomify.com/MAL-2025-38515/): Malicious code in vitestjs (npm) (malicious package) - [MAL-2025-38514](https://insights.sbomify.com/MAL-2025-38514/): Malicious code in vite-styled-kit (npm) (malicious package) - [MAL-2025-38513](https://insights.sbomify.com/MAL-2025-38513/): Malicious code in vite-singleparse (npm) (malicious package) - [MAL-2025-38512](https://insights.sbomify.com/MAL-2025-38512/): Malicious code in vite-plugin-react-ping (npm) (malicious package) - [MAL-2025-38511](https://insights.sbomify.com/MAL-2025-38511/): Malicious code in vite-plugin-image-loader (npm) (malicious package) - [MAL-2025-38510](https://insights.sbomify.com/MAL-2025-38510/): Malicious code in vite-parse (npm) (malicious package) - [MAL-2025-3851](https://insights.sbomify.com/MAL-2025-3851/): Malicious code in pcln-popver (npm) (malicious package) - [MAL-2025-38509](https://insights.sbomify.com/MAL-2025-38509/): Malicious code in vite-default (npm) (malicious package) - [MAL-2025-38508](https://insights.sbomify.com/MAL-2025-38508/): Malicious code in vite-css-icon (npm) (malicious package) - [MAL-2025-38507](https://insights.sbomify.com/MAL-2025-38507/): Malicious code in visualize-warn-finally-bash-final (npm) (malicious package) - [MAL-2025-38506](https://insights.sbomify.com/MAL-2025-38506/): Malicious code in visualize-compile-thread-web-info (npm) (malicious package) - [MAL-2025-38505](https://insights.sbomify.com/MAL-2025-38505/): Malicious code in vistrails (npm) (malicious package) - [MAL-2025-38504](https://insights.sbomify.com/MAL-2025-38504/): Malicious code in visto-web-core (npm) (malicious package) - [MAL-2025-38503](https://insights.sbomify.com/MAL-2025-38503/): Malicious code in vista_x3zzy_kmhvk_honey (npm) (malicious package) - [MAL-2025-38502](https://insights.sbomify.com/MAL-2025-38502/): Malicious code in vista_v5jbm_amq3m_fireworks (npm) (malicious package) - [MAL-2025-38501](https://insights.sbomify.com/MAL-2025-38501/): Malicious code in vista_rsb0k_k28v4_nectar (npm) (malicious package) - [MAL-2025-38500](https://insights.sbomify.com/MAL-2025-38500/): Malicious code in vista_g5thn_h5o4f_zephyr (npm) (malicious package) - [MAL-2025-3850](https://insights.sbomify.com/MAL-2025-3850/): Malicious code in passport-thecity (npm) (malicious package) - [MAL-2025-385](https://insights.sbomify.com/MAL-2025-385/): Malicious code in amazon-payment (npm) (malicious package) - [MAL-2025-38499](https://insights.sbomify.com/MAL-2025-38499/): Malicious code in vista_elomg_c43p4_kryptonite (npm) (malicious package) - [MAL-2025-38498](https://insights.sbomify.com/MAL-2025-38498/): Malicious code in vista_5d1y1_gcdpr_opal (npm) (malicious package) - [MAL-2025-38497](https://insights.sbomify.com/MAL-2025-38497/): Malicious code in vista_54gq0_uy3oj_jasmine (npm) (malicious package) - [MAL-2025-38496](https://insights.sbomify.com/MAL-2025-38496/): Malicious code in vista_0xk1t_tj3ju_yew (npm) (malicious package) - [MAL-2025-38495](https://insights.sbomify.com/MAL-2025-38495/): Malicious code in vista-zebra-pzr214-project (npm) (malicious package) - [MAL-2025-38494](https://insights.sbomify.com/MAL-2025-38494/): Malicious code in vista-valley-kls414-project (npm) (malicious package) - [MAL-2025-38493](https://insights.sbomify.com/MAL-2025-38493/): Malicious code in vista-thistle-cjn295-project (npm) (malicious package) - [MAL-2025-38492](https://insights.sbomify.com/MAL-2025-38492/): Malicious code in vista-rnkzn-a4lyc-quartz-project (npm) (malicious package) - [MAL-2025-38491](https://insights.sbomify.com/MAL-2025-38491/): Malicious code in vista-ripple-fcc476-project (npm) (malicious package) - [MAL-2025-38490](https://insights.sbomify.com/MAL-2025-38490/): Malicious code in vista-quasar-guu167-project (npm) (malicious package) - [MAL-2025-3849](https://insights.sbomify.com/MAL-2025-3849/): Malicious code in opensource-marketplace (npm) (malicious package) - [MAL-2025-38489](https://insights.sbomify.com/MAL-2025-38489/): Malicious code in vista-qrf9s-6ykky-yellow-project (npm) (malicious package) - [MAL-2025-38488](https://insights.sbomify.com/MAL-2025-38488/): Malicious code in vista-pvyte-je2v2-alchemy-project (npm) (malicious package) - [MAL-2025-38487](https://insights.sbomify.com/MAL-2025-38487/): Malicious code in vista-ocean-qkx446-project (npm) (malicious package) - [MAL-2025-38486](https://insights.sbomify.com/MAL-2025-38486/): Malicious code in vista-oak-kvj235-project (npm) (malicious package) - [MAL-2025-38485](https://insights.sbomify.com/MAL-2025-38485/): Malicious code in vista-nocturne-ver278-project (npm) (malicious package) - [MAL-2025-38484](https://insights.sbomify.com/MAL-2025-38484/): Malicious code in vista-nectar-nrv586-project (npm) (malicious package) - [MAL-2025-38483](https://insights.sbomify.com/MAL-2025-38483/): Malicious code in vista-kw3mh-gm735-star-project (npm) (malicious package) - [MAL-2025-38482](https://insights.sbomify.com/MAL-2025-38482/): Malicious code in vista-kite-kcw397-project (npm) (malicious package) - [MAL-2025-38481](https://insights.sbomify.com/MAL-2025-38481/): Malicious code in vista-kelp-oue246-project (npm) (malicious package) - [MAL-2025-38480](https://insights.sbomify.com/MAL-2025-38480/): Malicious code in vista-kelp-fcm243-project (npm) (malicious package) - [MAL-2025-3848](https://insights.sbomify.com/MAL-2025-3848/): Malicious code in openidconnect.net (npm) (malicious package) - [MAL-2025-38479](https://insights.sbomify.com/MAL-2025-38479/): Malicious code in vista-jellyfish-iqr703-project (npm) (malicious package) - [MAL-2025-38478](https://insights.sbomify.com/MAL-2025-38478/): Malicious code in vista-galaxy-arg292-project (npm) (malicious package) - [MAL-2025-38477](https://insights.sbomify.com/MAL-2025-38477/): Malicious code in vista-falcon-jsr611-project (npm) (malicious package) - [MAL-2025-38476](https://insights.sbomify.com/MAL-2025-38476/): Malicious code in vista-falcon-crn276-project (npm) (malicious package) - [MAL-2025-38475](https://insights.sbomify.com/MAL-2025-38475/): Malicious code in vista-f1m2p-zkz6k-fable-project (npm) (malicious package) - [MAL-2025-38474](https://insights.sbomify.com/MAL-2025-38474/): Malicious code in vista-everest-yvt509-project (npm) (malicious package) - [MAL-2025-38473](https://insights.sbomify.com/MAL-2025-38473/): Malicious code in vista-everest-wat379-project (npm) (malicious package) - [MAL-2025-38472](https://insights.sbomify.com/MAL-2025-38472/): Malicious code in vista-epqim-dkbip-echo-project (npm) (malicious package) - [MAL-2025-38471](https://insights.sbomify.com/MAL-2025-38471/): Malicious code in vista-dandelion-qzd076-project (npm) (malicious package) - [MAL-2025-38470](https://insights.sbomify.com/MAL-2025-38470/): Malicious code in vista-cloud-lcp858-project (npm) (malicious package) - [MAL-2025-3847](https://insights.sbomify.com/MAL-2025-3847/): Malicious code in old-react-chat (npm) (malicious package) - [MAL-2025-38469](https://insights.sbomify.com/MAL-2025-38469/): Malicious code in vista-buffalo-juy305-project (npm) (malicious package) - [MAL-2025-38468](https://insights.sbomify.com/MAL-2025-38468/): Malicious code in vista-6r6vs-v7mdt-solace-project (npm) (malicious package) - [MAL-2025-38467](https://insights.sbomify.com/MAL-2025-38467/): Malicious code in vista-4ihgr-hw2yp-whisper-project (npm) (malicious package) - [MAL-2025-38466](https://insights.sbomify.com/MAL-2025-38466/): Malicious code in vista-4gera-l3bm1-essence-project (npm) (malicious package) - [MAL-2025-38465](https://insights.sbomify.com/MAL-2025-38465/): Malicious code in vista-43y5l-nyy4s-serenity-project (npm) (malicious package) - [MAL-2025-38464](https://insights.sbomify.com/MAL-2025-38464/): Malicious code in visningsdefinisjoner-og-tekster (npm) (malicious package) - [MAL-2025-38463](https://insights.sbomify.com/MAL-2025-38463/): Malicious code in visitmgt (npm) (malicious package) - [MAL-2025-38462](https://insights.sbomify.com/MAL-2025-38462/): Malicious code in visiondb (npm) (malicious package) - [MAL-2025-38461](https://insights.sbomify.com/MAL-2025-38461/): Malicious code in visarch (npm) (malicious package) - [MAL-2025-38460](https://insights.sbomify.com/MAL-2025-38460/): Malicious code in visa (npm) (malicious package) - [MAL-2025-3846](https://insights.sbomify.com/MAL-2025-3846/): Malicious code in o1js-wrapper (npm) (malicious package) - [MAL-2025-38459](https://insights.sbomify.com/MAL-2025-38459/): Malicious code in vis-common-lib (npm) (malicious package) - [MAL-2025-38458](https://insights.sbomify.com/MAL-2025-38458/): Malicious code in virus.exe (npm) (malicious package) - [MAL-2025-38457](https://insights.sbomify.com/MAL-2025-38457/): Malicious code in virtualreality-forever-parsec-eridanus (npm) (malicious package) - [MAL-2025-38456](https://insights.sbomify.com/MAL-2025-38456/): Malicious code in virtualize-long-deserialize-permission-user (npm) (malicious package) - [MAL-2025-38455](https://insights.sbomify.com/MAL-2025-38455/): Malicious code in virtualize-encode-fire-sudo-finally (npm) (malicious package) - [MAL-2025-38454](https://insights.sbomify.com/MAL-2025-38454/): Malicious code in virtualize-balance-lambda-pipe-validate (npm) (malicious package) - [MAL-2025-38453](https://insights.sbomify.com/MAL-2025-38453/): Malicious code in virtual-glue (npm) (malicious package) - [MAL-2025-38452](https://insights.sbomify.com/MAL-2025-38452/): Malicious code in virtsnmp (npm) (malicious package) - [MAL-2025-38451](https://insights.sbomify.com/MAL-2025-38451/): Malicious code in virgo-jwt-style-loader-titan (npm) (malicious package) - [MAL-2025-38450](https://insights.sbomify.com/MAL-2025-38450/): Malicious code in virgo-got-sass-loader-spica (npm) (malicious package) - [MAL-2025-3845](https://insights.sbomify.com/MAL-2025-3845/): Malicious code in neondatabase (npm) (malicious package) - [MAL-2025-38449](https://insights.sbomify.com/MAL-2025-38449/): Malicious code in virgo-exoplanet-phoebe-coronalmassejection (npm) (malicious package) - [MAL-2025-38448](https://insights.sbomify.com/MAL-2025-38448/): Malicious code in virgo-callisto-phylogenetics-janus (npm) (malicious package) - [MAL-2025-38447](https://insights.sbomify.com/MAL-2025-38447/): Malicious code in virgo-astro-express-markdown-pdf (npm) (malicious package) - [MAL-2025-38446](https://insights.sbomify.com/MAL-2025-38446/): Malicious code in violin-script-sdk (npm) (malicious package) - [MAL-2025-38445](https://insights.sbomify.com/MAL-2025-38445/): Malicious code in violin-common (npm) (malicious package) - [MAL-2025-38444](https://insights.sbomify.com/MAL-2025-38444/): Malicious code in violet-zeppelin-eow428-project (npm) (malicious package) - [MAL-2025-38443](https://insights.sbomify.com/MAL-2025-38443/): Malicious code in violet-zebra-hom518-project (npm) (malicious package) - [MAL-2025-38442](https://insights.sbomify.com/MAL-2025-38442/): Malicious code in violet-yucca-sic500-project (npm) (malicious package) - [MAL-2025-38441](https://insights.sbomify.com/MAL-2025-38441/): Malicious code in violet-yucca-lrr553-project (npm) (malicious package) - [MAL-2025-38440](https://insights.sbomify.com/MAL-2025-38440/): Malicious code in violet-yellow-kog634-project (npm) (malicious package) - [MAL-2025-3844](https://insights.sbomify.com/MAL-2025-3844/): Malicious code in nayan-videos-downloader (npm) (malicious package) - [MAL-2025-38439](https://insights.sbomify.com/MAL-2025-38439/): Malicious code in violet-yearling-p4xx (npm) (malicious package) - [MAL-2025-38438](https://insights.sbomify.com/MAL-2025-38438/): Malicious code in violet-xylophone-nvs743-project (npm) (malicious package) - [MAL-2025-38437](https://insights.sbomify.com/MAL-2025-38437/): Malicious code in violet-xylophone-fno271-project (npm) (malicious package) - [MAL-2025-38436](https://insights.sbomify.com/MAL-2025-38436/): Malicious code in violet-xerus-oru353-project (npm) (malicious package) - [MAL-2025-38435](https://insights.sbomify.com/MAL-2025-38435/): Malicious code in violet-xenon-rek483-project (npm) (malicious package) - [MAL-2025-38434](https://insights.sbomify.com/MAL-2025-38434/): Malicious code in violet-umbrella-mbh930-project (npm) (malicious package) - [MAL-2025-38433](https://insights.sbomify.com/MAL-2025-38433/): Malicious code in violet-tundra-adq515-project (npm) (malicious package) - [MAL-2025-38432](https://insights.sbomify.com/MAL-2025-38432/): Malicious code in violet-sapphire-umq991-project (npm) (malicious package) - [MAL-2025-38431](https://insights.sbomify.com/MAL-2025-38431/): Malicious code in violet-ripple-gxt894-project (npm) (malicious package) - [MAL-2025-38430](https://insights.sbomify.com/MAL-2025-38430/): Malicious code in violet-r6v0j-jw2g3-phoenix-project (npm) (malicious package) - [MAL-2025-3843](https://insights.sbomify.com/MAL-2025-3843/): Malicious code in nayan-imgur-upload-apis (npm) (malicious package) - [MAL-2025-38429](https://insights.sbomify.com/MAL-2025-38429/): Malicious code in violet-quince-qgzw (npm) (malicious package) - [MAL-2025-38428](https://insights.sbomify.com/MAL-2025-38428/): Malicious code in violet-o0ch6-eicsu-kismet-project (npm) (malicious package) - [MAL-2025-38427](https://insights.sbomify.com/MAL-2025-38427/): Malicious code in violet-ndozq-hy24z-iris-project (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/686/