# Vulnerabilities published in 2025


- [MAL-2025-38336](https://insights.sbomify.com/MAL-2025-38336/): Malicious code in victor-tangerine-woxr (npm) (malicious package)
- [MAL-2025-38335](https://insights.sbomify.com/MAL-2025-38335/): Malicious code in victor-tangerine-strawberry-rdjul (npm) (malicious package)
- [MAL-2025-38334](https://insights.sbomify.com/MAL-2025-38334/): Malicious code in victor-tangerine-rbyn (npm) (malicious package)
- [MAL-2025-38333](https://insights.sbomify.com/MAL-2025-38333/): Malicious code in victor-tangerine-azgs (npm) (malicious package)
- [MAL-2025-38332](https://insights.sbomify.com/MAL-2025-38332/): Malicious code in victor-skd-project (npm) (malicious package)
- [MAL-2025-38331](https://insights.sbomify.com/MAL-2025-38331/): Malicious code in victor-sierra-hueg (npm) (malicious package)
- [MAL-2025-38330](https://insights.sbomify.com/MAL-2025-38330/): Malicious code in victor-sierra-etrf (npm) (malicious package)
- [MAL-2025-3833](https://insights.sbomify.com/MAL-2025-3833/): Malicious code in imran-photo-api (npm) (malicious package)
- [MAL-2025-38329](https://insights.sbomify.com/MAL-2025-38329/): Malicious code in victor-quebec-yam-dpgiv (npm) (malicious package)
- [MAL-2025-38328](https://insights.sbomify.com/MAL-2025-38328/): Malicious code in victor-quebec-uniform-pdpkx (npm) (malicious package)
- [MAL-2025-38327](https://insights.sbomify.com/MAL-2025-38327/): Malicious code in victor-quebec-echo-lagwx (npm) (malicious package)
- [MAL-2025-38326](https://insights.sbomify.com/MAL-2025-38326/): Malicious code in victor-q2c-project (npm) (malicious package)
- [MAL-2025-38325](https://insights.sbomify.com/MAL-2025-38325/): Malicious code in victor-pulsar-dp6v (npm) (malicious package)
- [MAL-2025-38324](https://insights.sbomify.com/MAL-2025-38324/): Malicious code in victor-papa-mike-eflph (npm) (malicious package)
- [MAL-2025-38323](https://insights.sbomify.com/MAL-2025-38323/): Malicious code in victor-o17-project (npm) (malicious package)
- [MAL-2025-38322](https://insights.sbomify.com/MAL-2025-38322/): Malicious code in victor-nnt-project (npm) (malicious package)
- [MAL-2025-38321](https://insights.sbomify.com/MAL-2025-38321/): Malicious code in victor-nlx-project (npm) (malicious package)
- [MAL-2025-38320](https://insights.sbomify.com/MAL-2025-38320/): Malicious code in victor-nectarine-vumx (npm) (malicious package)
- [MAL-2025-3832](https://insights.sbomify.com/MAL-2025-3832/): Malicious code in imran-alldl (npm) (malicious package)
- [MAL-2025-38319](https://insights.sbomify.com/MAL-2025-38319/): Malicious code in victor-mango-xemn (npm) (malicious package)
- [MAL-2025-38318](https://insights.sbomify.com/MAL-2025-38318/): Malicious code in victor-lemon-golf-scjwk (npm) (malicious package)
- [MAL-2025-38317](https://insights.sbomify.com/MAL-2025-38317/): Malicious code in victor-kiwi-delta-wqevr (npm) (malicious package)
- [MAL-2025-38316](https://insights.sbomify.com/MAL-2025-38316/): Malicious code in victor-khw-project (npm) (malicious package)
- [MAL-2025-38315](https://insights.sbomify.com/MAL-2025-38315/): Malicious code in victor-juliet-ywcr (npm) (malicious package)
- [MAL-2025-38314](https://insights.sbomify.com/MAL-2025-38314/): Malicious code in victor-juliet-wzte (npm) (malicious package)
- [MAL-2025-38313](https://insights.sbomify.com/MAL-2025-38313/): Malicious code in victor-hotel-ncmc (npm) (malicious package)
- [MAL-2025-38312](https://insights.sbomify.com/MAL-2025-38312/): Malicious code in victor-gorilla-fg7x (npm) (malicious package)
- [MAL-2025-38311](https://insights.sbomify.com/MAL-2025-38311/): Malicious code in victor-g1k-project (npm) (malicious package)
- [MAL-2025-38310](https://insights.sbomify.com/MAL-2025-38310/): Malicious code in victor-foxtrot-luwb (npm) (malicious package)
- [MAL-2025-3831](https://insights.sbomify.com/MAL-2025-3831/): Malicious code in helvetia-base-patterns (npm) (malicious package)
- [MAL-2025-38309](https://insights.sbomify.com/MAL-2025-38309/): Malicious code in victor-elderberry-9sod (npm) (malicious package)
- [MAL-2025-38308](https://insights.sbomify.com/MAL-2025-38308/): Malicious code in victor-eim-project (npm) (malicious package)
- [MAL-2025-38307](https://insights.sbomify.com/MAL-2025-38307/): Malicious code in victor-dgw-project (npm) (malicious package)
- [MAL-2025-38306](https://insights.sbomify.com/MAL-2025-38306/): Malicious code in victor-delta-kilo-lxsvv (npm) (malicious package)
- [MAL-2025-38305](https://insights.sbomify.com/MAL-2025-38305/): Malicious code in victor-bravo-xbtf (npm) (malicious package)
- [MAL-2025-38304](https://insights.sbomify.com/MAL-2025-38304/): Malicious code in victor-bravo-vanilla-tdyaf (npm) (malicious package)
- [MAL-2025-38303](https://insights.sbomify.com/MAL-2025-38303/): Malicious code in victor-banana-vqsr (npm) (malicious package)
- [MAL-2025-38302](https://insights.sbomify.com/MAL-2025-38302/): Malicious code in victor-9vf-project (npm) (malicious package)
- [MAL-2025-38301](https://insights.sbomify.com/MAL-2025-38301/): Malicious code in victor-7yt-project (npm) (malicious package)
- [MAL-2025-38300](https://insights.sbomify.com/MAL-2025-38300/): Malicious code in victor-6yv-project (npm) (malicious package)
- [MAL-2025-3830](https://insights.sbomify.com/MAL-2025-3830/): Malicious code in guardian-advanced-example (npm) (malicious package)
- [MAL-2025-383](https://insights.sbomify.com/MAL-2025-383/): Malicious code in amazon-model (npm) (malicious package)
- [MAL-2025-38299](https://insights.sbomify.com/MAL-2025-38299/): Malicious code in victor-6r4-project (npm) (malicious package)
- [MAL-2025-38298](https://insights.sbomify.com/MAL-2025-38298/): Malicious code in victor-6mk-project (npm) (malicious package)
- [MAL-2025-38297](https://insights.sbomify.com/MAL-2025-38297/): Malicious code in victor-6mj-project (npm) (malicious package)
- [MAL-2025-38296](https://insights.sbomify.com/MAL-2025-38296/): Malicious code in victor-2c3-project (npm) (malicious package)
- [MAL-2025-38295](https://insights.sbomify.com/MAL-2025-38295/): Malicious code in vicidial (npm) (malicious package)
- [MAL-2025-38294](https://insights.sbomify.com/MAL-2025-38294/): Malicious code in viaplay-vask2-core (npm) (malicious package)
- [MAL-2025-38293](https://insights.sbomify.com/MAL-2025-38293/): Malicious code in viaduct-ziggurat-z3f1 (npm) (malicious package)
- [MAL-2025-38292](https://insights.sbomify.com/MAL-2025-38292/): Malicious code in viaduct-quebec-p85e (npm) (malicious package)
- [MAL-2025-38291](https://insights.sbomify.com/MAL-2025-38291/): Malicious code in viaduct-kayak-t196 (npm) (malicious package)
- [MAL-2025-38290](https://insights.sbomify.com/MAL-2025-38290/): Malicious code in viacom-date-picker-component (npm) (malicious package)
- [MAL-2025-3829](https://insights.sbomify.com/MAL-2025-3829/): Malicious code in fca-shaon-project (npm) (malicious package)
- [MAL-2025-38289](https://insights.sbomify.com/MAL-2025-38289/): Malicious code in via-date-range (npm) (malicious package)
- [MAL-2025-38288](https://insights.sbomify.com/MAL-2025-38288/): Malicious code in via-date-picker-test-5 (npm) (malicious package)
- [MAL-2025-38287](https://insights.sbomify.com/MAL-2025-38287/): Malicious code in via-date-picker-test (npm) (malicious package)
- [MAL-2025-38286](https://insights.sbomify.com/MAL-2025-38286/): Malicious code in via-date-picker-rollup (npm) (malicious package)
- [MAL-2025-38285](https://insights.sbomify.com/MAL-2025-38285/): Malicious code in via-date-picker (npm) (malicious package)
- [MAL-2025-38284](https://insights.sbomify.com/MAL-2025-38284/): Malicious code in via-component-bundler (npm) (malicious package)
- [MAL-2025-38283](https://insights.sbomify.com/MAL-2025-38283/): Malicious code in vgy4 (npm) (malicious package)
- [MAL-2025-38282](https://insights.sbomify.com/MAL-2025-38282/): Malicious code in vgfg4e (npm) (malicious package)
- [MAL-2025-38281](https://insights.sbomify.com/MAL-2025-38281/): Malicious code in vgbqlptjaecnfdmz (npm) (malicious package)
- [MAL-2025-38280](https://insights.sbomify.com/MAL-2025-38280/): Malicious code in vgamewgdx (npm) (malicious package)
- [MAL-2025-3828](https://insights.sbomify.com/MAL-2025-3828/): Malicious code in fastifiyer (npm) (malicious package)
- [MAL-2025-38279](https://insights.sbomify.com/MAL-2025-38279/): Malicious code in vftinzjqosxuadyr (npm) (malicious package)
- [MAL-2025-38278](https://insights.sbomify.com/MAL-2025-38278/): Malicious code in vft34 (npm) (malicious package)
- [MAL-2025-38277](https://insights.sbomify.com/MAL-2025-38277/): Malicious code in vfpcongit (npm) (malicious package)
- [MAL-2025-38276](https://insights.sbomify.com/MAL-2025-38276/): Malicious code in vflfeed (npm) (malicious package)
- [MAL-2025-38275](https://insights.sbomify.com/MAL-2025-38275/): Malicious code in vfh4 (npm) (malicious package)
- [MAL-2025-38274](https://insights.sbomify.com/MAL-2025-38274/): Malicious code in vfgre2 (npm) (malicious package)
- [MAL-2025-38273](https://insights.sbomify.com/MAL-2025-38273/): Malicious code in vfgr34 (npm) (malicious package)
- [MAL-2025-38272](https://insights.sbomify.com/MAL-2025-38272/): Malicious code in vfgjxobtaydwlzkp (npm) (malicious package)
- [MAL-2025-38271](https://insights.sbomify.com/MAL-2025-38271/): Malicious code in vfg3a (npm) (malicious package)
- [MAL-2025-38270](https://insights.sbomify.com/MAL-2025-38270/): Malicious code in vffrr4 (npm) (malicious package)
- [MAL-2025-3827](https://insights.sbomify.com/MAL-2025-3827/): Malicious code in ethers-xdc (npm) (malicious package)
- [MAL-2025-38269](https://insights.sbomify.com/MAL-2025-38269/): Malicious code in vff4 (npm) (malicious package)
- [MAL-2025-38268](https://insights.sbomify.com/MAL-2025-38268/): Malicious code in vfer4 (npm) (malicious package)
- [MAL-2025-38267](https://insights.sbomify.com/MAL-2025-38267/): Malicious code in vfdgr43 (npm) (malicious package)
- [MAL-2025-38266](https://insights.sbomify.com/MAL-2025-38266/): Malicious code in vezgtayswcknhlru (npm) (malicious package)
- [MAL-2025-38265](https://insights.sbomify.com/MAL-2025-38265/): Malicious code in vetiver (npm) (malicious package)
- [MAL-2025-38264](https://insights.sbomify.com/MAL-2025-38264/): Malicious code in vet2s (npm) (malicious package)
- [MAL-2025-38263](https://insights.sbomify.com/MAL-2025-38263/): Malicious code in very-nay (npm) (malicious package)
- [MAL-2025-38262](https://insights.sbomify.com/MAL-2025-38262/): Malicious code in vertical-db-driver (npm) (malicious package)
- [MAL-2025-38261](https://insights.sbomify.com/MAL-2025-38261/): Malicious code in vertamedia-clickhouse-datasource (npm) (malicious package)
- [MAL-2025-38260](https://insights.sbomify.com/MAL-2025-38260/): Malicious code in versioningservice (npm) (malicious package)
- [MAL-2025-3826](https://insights.sbomify.com/MAL-2025-3826/): Malicious code in defipulse-adapters (npm) (malicious package)
- [MAL-2025-38259](https://insights.sbomify.com/MAL-2025-38259/): Malicious code in version-perseus-cladistics-ethology (npm) (malicious package)
- [MAL-2025-38258](https://insights.sbomify.com/MAL-2025-38258/): Malicious code in version-pegasus-indus-antares (npm) (malicious package)
- [MAL-2025-38257](https://insights.sbomify.com/MAL-2025-38257/): Malicious code in version-enceladus-rocket-astrometry (npm) (malicious package)
- [MAL-2025-38256](https://insights.sbomify.com/MAL-2025-38256/): Malicious code in version-elara-gravitationalwave-non-blocking (npm) (malicious package)
- [MAL-2025-38255](https://insights.sbomify.com/MAL-2025-38255/): Malicious code in versalink-tsl2561-device (npm) (malicious package)
- [MAL-2025-38254](https://insights.sbomify.com/MAL-2025-38254/): Malicious code in versalink-si1145-device (npm) (malicious package)
- [MAL-2025-38253](https://insights.sbomify.com/MAL-2025-38253/): Malicious code in versalink-rmy85000-device (npm) (malicious package)
- [MAL-2025-38252](https://insights.sbomify.com/MAL-2025-38252/): Malicious code in versalink-rain-device (npm) (malicious package)
- [MAL-2025-38251](https://insights.sbomify.com/MAL-2025-38251/): Malicious code in versalink-mock-device (npm) (malicious package)
- [MAL-2025-38250](https://insights.sbomify.com/MAL-2025-38250/): Malicious code in versalink-htu21d-device (npm) (malicious package)
- [MAL-2025-3825](https://insights.sbomify.com/MAL-2025-3825/): Malicious code in debug-mocha (npm) (malicious package)
- [MAL-2025-38249](https://insights.sbomify.com/MAL-2025-38249/): Malicious code in versalink-device (npm) (malicious package)
- [MAL-2025-38248](https://insights.sbomify.com/MAL-2025-38248/): Malicious code in versalink-cozir5-device (npm) (malicious package)
- [MAL-2025-38247](https://insights.sbomify.com/MAL-2025-38247/): Malicious code in versalink-bmp183-device (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/688/