# Vulnerabilities published in 2025 - [MAL-2025-38426](https://insights.sbomify.com/MAL-2025-38426/): Malicious code in violet-kayak-1bsu (npm) (malicious package) - [MAL-2025-38425](https://insights.sbomify.com/MAL-2025-38425/): Malicious code in violet-jasmine-xuh722-project (npm) (malicious package) - [MAL-2025-38424](https://insights.sbomify.com/MAL-2025-38424/): Malicious code in violet-infinity-qzv171-project (npm) (malicious package) - [MAL-2025-38423](https://insights.sbomify.com/MAL-2025-38423/): Malicious code in violet-icicle-pca252-project (npm) (malicious package) - [MAL-2025-38422](https://insights.sbomify.com/MAL-2025-38422/): Malicious code in violet-iceberg-tpji (npm) (malicious package) - [MAL-2025-38421](https://insights.sbomify.com/MAL-2025-38421/): Malicious code in violet-helicopter-adfc (npm) (malicious package) - [MAL-2025-38420](https://insights.sbomify.com/MAL-2025-38420/): Malicious code in violet-gorilla-wdn829-project (npm) (malicious package) - [MAL-2025-3842](https://insights.sbomify.com/MAL-2025-3842/): Malicious code in nayan-apis-server (npm) (malicious package) - [MAL-2025-38419](https://insights.sbomify.com/MAL-2025-38419/): Malicious code in violet-glade-cta938-project (npm) (malicious package) - [MAL-2025-38418](https://insights.sbomify.com/MAL-2025-38418/): Malicious code in violet-falcon-wai090-project (npm) (malicious package) - [MAL-2025-38417](https://insights.sbomify.com/MAL-2025-38417/): Malicious code in violet-evergreen-qmo134-project (npm) (malicious package) - [MAL-2025-38416](https://insights.sbomify.com/MAL-2025-38416/): Malicious code in violet-eagle-kjmy (npm) (malicious package) - [MAL-2025-38415](https://insights.sbomify.com/MAL-2025-38415/): Malicious code in violet-coral-dkz995-project (npm) (malicious package) - [MAL-2025-38414](https://insights.sbomify.com/MAL-2025-38414/): Malicious code in violet-7fhaw-ulfdv-quill-project (npm) (malicious package) - [MAL-2025-38413](https://insights.sbomify.com/MAL-2025-38413/): Malicious code in violet-5d0ml-vubdo-blossom-project (npm) (malicious package) - [MAL-2025-38412](https://insights.sbomify.com/MAL-2025-38412/): Malicious code in violet-1tl08-t7k27-serenity-project (npm) (malicious package) - [MAL-2025-38411](https://insights.sbomify.com/MAL-2025-38411/): Malicious code in violba (npm) (malicious package) - [MAL-2025-38410](https://insights.sbomify.com/MAL-2025-38410/): Malicious code in vinyl-content-tostring (npm) (malicious package) - [MAL-2025-3841](https://insights.sbomify.com/MAL-2025-3841/): Malicious code in my-worker-with-router (npm) (malicious package) - [MAL-2025-38409](https://insights.sbomify.com/MAL-2025-38409/): Malicious code in vinita (npm) (malicious package) - [MAL-2025-38408](https://insights.sbomify.com/MAL-2025-38408/): Malicious code in vinelist (npm) (malicious package) - [MAL-2025-38407](https://insights.sbomify.com/MAL-2025-38407/): Malicious code in vinegar-walnut-ly0w (npm) (malicious package) - [MAL-2025-38406](https://insights.sbomify.com/MAL-2025-38406/): Malicious code in vinegar-quebec-nl32 (npm) (malicious package) - [MAL-2025-38405](https://insights.sbomify.com/MAL-2025-38405/): Malicious code in vinegar-papa-xfu6 (npm) (malicious package) - [MAL-2025-38404](https://insights.sbomify.com/MAL-2025-38404/): Malicious code in vinegar-oscar-tk2r (npm) (malicious package) - [MAL-2025-38403](https://insights.sbomify.com/MAL-2025-38403/): Malicious code in vinegar-oscar-mrc4 (npm) (malicious package) - [MAL-2025-38402](https://insights.sbomify.com/MAL-2025-38402/): Malicious code in vinegar-horseradish-rx23 (npm) (malicious package) - [MAL-2025-38401](https://insights.sbomify.com/MAL-2025-38401/): Malicious code in vine-wisp-lex160-project (npm) (malicious package) - [MAL-2025-38400](https://insights.sbomify.com/MAL-2025-38400/): Malicious code in vine-umbra-kav147-project (npm) (malicious package) - [MAL-2025-3840](https://insights.sbomify.com/MAL-2025-3840/): Malicious code in mozilla-protocol (npm) (malicious package) - [MAL-2025-384](https://insights.sbomify.com/MAL-2025-384/): Malicious code in amazon-oauth (npm) (malicious package) - [MAL-2025-38399](https://insights.sbomify.com/MAL-2025-38399/): Malicious code in vine-tornado-mvx425-project (npm) (malicious package) - [MAL-2025-38398](https://insights.sbomify.com/MAL-2025-38398/): Malicious code in vine-savanna-mej488-project (npm) (malicious package) - [MAL-2025-38397](https://insights.sbomify.com/MAL-2025-38397/): Malicious code in vine-savanna-aco214-project (npm) (malicious package) - [MAL-2025-38396](https://insights.sbomify.com/MAL-2025-38396/): Malicious code in vine-river-him878-project (npm) (malicious package) - [MAL-2025-38395](https://insights.sbomify.com/MAL-2025-38395/): Malicious code in vine-reef-yos603-project (npm) (malicious package) - [MAL-2025-38394](https://insights.sbomify.com/MAL-2025-38394/): Malicious code in vine-rainbow-cml992-project (npm) (malicious package) - [MAL-2025-38393](https://insights.sbomify.com/MAL-2025-38393/): Malicious code in vine-nectar-uxy225-project (npm) (malicious package) - [MAL-2025-38392](https://insights.sbomify.com/MAL-2025-38392/): Malicious code in vine-lightning-jbr406-project (npm) (malicious package) - [MAL-2025-38391](https://insights.sbomify.com/MAL-2025-38391/): Malicious code in vine-horizon-xiz912-project (npm) (malicious package) - [MAL-2025-38390](https://insights.sbomify.com/MAL-2025-38390/): Malicious code in vine-ant-fyf959-project (npm) (malicious package) - [MAL-2025-3839](https://insights.sbomify.com/MAL-2025-3839/): Malicious code in momenter (npm) (malicious package) - [MAL-2025-38389](https://insights.sbomify.com/MAL-2025-38389/): Malicious code in vina-serimuka85-breki (npm) (malicious package) - [MAL-2025-38388](https://insights.sbomify.com/MAL-2025-38388/): Malicious code in vina-semur72-breki (npm) (malicious package) - [MAL-2025-38387](https://insights.sbomify.com/MAL-2025-38387/): Malicious code in vina-ronde86-sukiwir (npm) (malicious package) - [MAL-2025-38386](https://insights.sbomify.com/MAL-2025-38386/): Malicious code in vina-lutis55-kuki (npm) (malicious package) - [MAL-2025-38385](https://insights.sbomify.com/MAL-2025-38385/): Malicious code in vina-gandul32-breki (npm) (malicious package) - [MAL-2025-38384](https://insights.sbomify.com/MAL-2025-38384/): Malicious code in vina-enting24-sukiwir (npm) (malicious package) - [MAL-2025-38383](https://insights.sbomify.com/MAL-2025-38383/): Malicious code in vimxcode (npm) (malicious package) - [MAL-2025-38382](https://insights.sbomify.com/MAL-2025-38382/): Malicious code in vimrunner (npm) (malicious package) - [MAL-2025-38381](https://insights.sbomify.com/MAL-2025-38381/): Malicious code in vimplugs (npm) (malicious package) - [MAL-2025-38380](https://insights.sbomify.com/MAL-2025-38380/): Malicious code in vimmpc (npm) (malicious package) - [MAL-2025-3838](https://insights.sbomify.com/MAL-2025-3838/): Malicious code in mocha-js (npm) (malicious package) - [MAL-2025-38379](https://insights.sbomify.com/MAL-2025-38379/): Malicious code in vimitest (npm) (malicious package) - [MAL-2025-38378](https://insights.sbomify.com/MAL-2025-38378/): Malicious code in vimfocus (npm) (malicious package) - [MAL-2025-38377](https://insights.sbomify.com/MAL-2025-38377/): Malicious code in vimagneto (npm) (malicious package) - [MAL-2025-38376](https://insights.sbomify.com/MAL-2025-38376/): Malicious code in villas (npm) (malicious package) - [MAL-2025-38375](https://insights.sbomify.com/MAL-2025-38375/): Malicious code in vijayaraj (npm) (malicious package) - [MAL-2025-38374](https://insights.sbomify.com/MAL-2025-38374/): Malicious code in view-user-code-proxy-emulate (npm) (malicious package) - [MAL-2025-38373](https://insights.sbomify.com/MAL-2025-38373/): Malicious code in view-epsilon-kernel-boolean-long (npm) (malicious package) - [MAL-2025-38372](https://insights.sbomify.com/MAL-2025-38372/): Malicious code in view-authorize-alpha-fire-pi (npm) (malicious package) - [MAL-2025-38371](https://insights.sbomify.com/MAL-2025-38371/): Malicious code in vietngumn (npm) (malicious package) - [MAL-2025-38370](https://insights.sbomify.com/MAL-2025-38370/): Malicious code in vieroprij (npm) (malicious package) - [MAL-2025-3837](https://insights.sbomify.com/MAL-2025-3837/): Malicious code in mmsdk-apml-schema (npm) (malicious package) - [MAL-2025-38369](https://insights.sbomify.com/MAL-2025-38369/): Malicious code in viemgan (npm) (malicious package) - [MAL-2025-38368](https://insights.sbomify.com/MAL-2025-38368/): Malicious code in vielfrass (npm) (malicious package) - [MAL-2025-38367](https://insights.sbomify.com/MAL-2025-38367/): Malicious code in vidwall (npm) (malicious package) - [MAL-2025-38366](https://insights.sbomify.com/MAL-2025-38366/): Malicious code in vidtrack (npm) (malicious package) - [MAL-2025-38365](https://insights.sbomify.com/MAL-2025-38365/): Malicious code in videoteka (npm) (malicious package) - [MAL-2025-38364](https://insights.sbomify.com/MAL-2025-38364/): Malicious code in videojs-ffxnz-overlay (npm) (malicious package) - [MAL-2025-38363](https://insights.sbomify.com/MAL-2025-38363/): Malicious code in videoholic (npm) (malicious package) - [MAL-2025-38362](https://insights.sbomify.com/MAL-2025-38362/): Malicious code in video-dimensions (npm) (malicious package) - [MAL-2025-38361](https://insights.sbomify.com/MAL-2025-38361/): Malicious code in viddler-player (npm) (malicious package) - [MAL-2025-38360](https://insights.sbomify.com/MAL-2025-38360/): Malicious code in vidclub (npm) (malicious package) - [MAL-2025-3836](https://insights.sbomify.com/MAL-2025-3836/): Malicious code in lululemon (npm) (malicious package) - [MAL-2025-38359](https://insights.sbomify.com/MAL-2025-38359/): Malicious code in vidazoo-player-client (npm) (malicious package) - [MAL-2025-38358](https://insights.sbomify.com/MAL-2025-38358/): Malicious code in vidads (npm) (malicious package) - [MAL-2025-38357](https://insights.sbomify.com/MAL-2025-38357/): Malicious code in vida-semur43-sukiwir (npm) (malicious package) - [MAL-2025-38356](https://insights.sbomify.com/MAL-2025-38356/): Malicious code in vida-sambel88-breki (npm) (malicious package) - [MAL-2025-38355](https://insights.sbomify.com/MAL-2025-38355/): Malicious code in vida-otak-otak38-sukiwir (npm) (malicious package) - [MAL-2025-38354](https://insights.sbomify.com/MAL-2025-38354/): Malicious code in vida-nasiuduk39-breki (npm) (malicious package) - [MAL-2025-38353](https://insights.sbomify.com/MAL-2025-38353/): Malicious code in vida-nasiuduk27-breki (npm) (malicious package) - [MAL-2025-38352](https://insights.sbomify.com/MAL-2025-38352/): Malicious code in vida-mie76-breki (npm) (malicious package) - [MAL-2025-38351](https://insights.sbomify.com/MAL-2025-38351/): Malicious code in vida-mie11-sukiwir (npm) (malicious package) - [MAL-2025-38350](https://insights.sbomify.com/MAL-2025-38350/): Malicious code in vida-menjes68-sukiwir (npm) (malicious package) - [MAL-2025-3835](https://insights.sbomify.com/MAL-2025-3835/): Malicious code in lodashing (npm) (malicious package) - [MAL-2025-38349](https://insights.sbomify.com/MAL-2025-38349/): Malicious code in vida-martabak84-kuki (npm) (malicious package) - [MAL-2025-38348](https://insights.sbomify.com/MAL-2025-38348/): Malicious code in vida-lapis54-breki (npm) (malicious package) - [MAL-2025-38347](https://insights.sbomify.com/MAL-2025-38347/): Malicious code in vida-kacang89-sukiwir (npm) (malicious package) - [MAL-2025-38346](https://insights.sbomify.com/MAL-2025-38346/): Malicious code in victoriousss (npm) (malicious package) - [MAL-2025-38345](https://insights.sbomify.com/MAL-2025-38345/): Malicious code in victor-yankee-mnsm (npm) (malicious package) - [MAL-2025-38344](https://insights.sbomify.com/MAL-2025-38344/): Malicious code in victor-xxt-project (npm) (malicious package) - [MAL-2025-38343](https://insights.sbomify.com/MAL-2025-38343/): Malicious code in victor-xog-project (npm) (malicious package) - [MAL-2025-38342](https://insights.sbomify.com/MAL-2025-38342/): Malicious code in victor-wmj-project (npm) (malicious package) - [MAL-2025-38341](https://insights.sbomify.com/MAL-2025-38341/): Malicious code in victor-vanilla-mozn (npm) (malicious package) - [MAL-2025-38340](https://insights.sbomify.com/MAL-2025-38340/): Malicious code in victor-ugli-tango-pycvm (npm) (malicious package) - [MAL-2025-3834](https://insights.sbomify.com/MAL-2025-3834/): Malicious code in imran-photo360-apis (npm) (malicious package) - [MAL-2025-38339](https://insights.sbomify.com/MAL-2025-38339/): Malicious code in victor-ugli-nectarine-niyoq (npm) (malicious package) - [MAL-2025-38338](https://insights.sbomify.com/MAL-2025-38338/): Malicious code in victor-ugli-jete (npm) (malicious package) - [MAL-2025-38337](https://insights.sbomify.com/MAL-2025-38337/): Malicious code in victor-tornado-kexq (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/687/