# Vulnerabilities published in 2025 - [MAL-2025-38246](https://insights.sbomify.com/MAL-2025-38246/): Malicious code in versalink (npm) (malicious package) - [MAL-2025-38245](https://insights.sbomify.com/MAL-2025-38245/): Malicious code in verkur (npm) (malicious package) - [MAL-2025-38244](https://insights.sbomify.com/MAL-2025-38244/): Malicious code in verhalen (npm) (malicious package) - [MAL-2025-38243](https://insights.sbomify.com/MAL-2025-38243/): Malicious code in verdure-qj9dq-tlap4-yew-project (npm) (malicious package) - [MAL-2025-38242](https://insights.sbomify.com/MAL-2025-38242/): Malicious code in verdure-9k7jd-0q8p4-glow-project (npm) (malicious package) - [MAL-2025-38241](https://insights.sbomify.com/MAL-2025-38241/): Malicious code in verdure-7r1jc-qm8be-quasar-project (npm) (malicious package) - [MAL-2025-38240](https://insights.sbomify.com/MAL-2025-38240/): Malicious code in verdant_ttdws_o2o0c_dusk (npm) (malicious package) - [MAL-2025-3824](https://insights.sbomify.com/MAL-2025-3824/): Malicious code in custom-social-connections (npm) (malicious package) - [MAL-2025-38239](https://insights.sbomify.com/MAL-2025-38239/): Malicious code in verdant_lvqtd_dme26_jade (npm) (malicious package) - [MAL-2025-38238](https://insights.sbomify.com/MAL-2025-38238/): Malicious code in verdant_hvxxw_73ezm_wave (npm) (malicious package) - [MAL-2025-38237](https://insights.sbomify.com/MAL-2025-38237/): Malicious code in verdant_gkg7g_8feqh_solstice (npm) (malicious package) - [MAL-2025-38236](https://insights.sbomify.com/MAL-2025-38236/): Malicious code in verdant_d56zg_4xb0e_zenith (npm) (malicious package) - [MAL-2025-38235](https://insights.sbomify.com/MAL-2025-38235/): Malicious code in verdant_7mzz8_kco79_kryptonite (npm) (malicious package) - [MAL-2025-38234](https://insights.sbomify.com/MAL-2025-38234/): Malicious code in verdant_2r0cm_0k2li_horizon (npm) (malicious package) - [MAL-2025-38233](https://insights.sbomify.com/MAL-2025-38233/): Malicious code in verdant-z0sqn-1zv03-yonder-project (npm) (malicious package) - [MAL-2025-38232](https://insights.sbomify.com/MAL-2025-38232/): Malicious code in verdant-tfque-co0c5-star-project (npm) (malicious package) - [MAL-2025-38231](https://insights.sbomify.com/MAL-2025-38231/): Malicious code in verdant-q77e8-ywuq3-quartz-project (npm) (malicious package) - [MAL-2025-38230](https://insights.sbomify.com/MAL-2025-38230/): Malicious code in verdant-pm28p-wr262-xenith-project (npm) (malicious package) - [MAL-2025-3823](https://insights.sbomify.com/MAL-2025-3823/): Malicious code in ctalking (npm) (malicious package) - [MAL-2025-38229](https://insights.sbomify.com/MAL-2025-38229/): Malicious code in verdant-daipm-n7d7b-ocean-project (npm) (malicious package) - [MAL-2025-38228](https://insights.sbomify.com/MAL-2025-38228/): Malicious code in verdant-68m3y-lodj1-ember-project (npm) (malicious package) - [MAL-2025-38227](https://insights.sbomify.com/MAL-2025-38227/): Malicious code in verdant-1mvek-80cd5-zephyr-project (npm) (malicious package) - [MAL-2025-38226](https://insights.sbomify.com/MAL-2025-38226/): Malicious code in verdancy (npm) (malicious package) - [MAL-2025-38225](https://insights.sbomify.com/MAL-2025-38225/): Malicious code in vera-tomat54-breki (npm) (malicious package) - [MAL-2025-38224](https://insights.sbomify.com/MAL-2025-38224/): Malicious code in vera-rangginang21-breki (npm) (malicious package) - [MAL-2025-38223](https://insights.sbomify.com/MAL-2025-38223/): Malicious code in vepen (npm) (malicious package) - [MAL-2025-38222](https://insights.sbomify.com/MAL-2025-38222/): Malicious code in veoo-statsd (npm) (malicious package) - [MAL-2025-38221](https://insights.sbomify.com/MAL-2025-38221/): Malicious code in venus-vulcan-graphql-webdriverio (npm) (malicious package) - [MAL-2025-38220](https://insights.sbomify.com/MAL-2025-38220/): Malicious code in venus-selenium-semantic-release-nuxtjs (npm) (malicious package) - [MAL-2025-3822](https://insights.sbomify.com/MAL-2025-3822/): Malicious code in conversation-extension-reservation (npm) (malicious package) - [MAL-2025-38219](https://insights.sbomify.com/MAL-2025-38219/): Malicious code in venus-pulsar-paleoclimatology-resonance (npm) (malicious package) - [MAL-2025-38218](https://insights.sbomify.com/MAL-2025-38218/): Malicious code in venus-postcss-loader-halley-tardigrade (npm) (malicious package) - [MAL-2025-38217](https://insights.sbomify.com/MAL-2025-38217/): Malicious code in venus-nucleosynthesis-geckodriver-cygnus (npm) (malicious package) - [MAL-2025-38216](https://insights.sbomify.com/MAL-2025-38216/): Malicious code in venus-farout-mesosphere-cryovolcano (npm) (malicious package) - [MAL-2025-38215](https://insights.sbomify.com/MAL-2025-38215/): Malicious code in venus-commitizen-grunt-iota (npm) (malicious package) - [MAL-2025-38214](https://insights.sbomify.com/MAL-2025-38214/): Malicious code in venus-blaze-geochronology-configstore (npm) (malicious package) - [MAL-2025-38213](https://insights.sbomify.com/MAL-2025-38213/): Malicious code in ventasjpa (npm) (malicious package) - [MAL-2025-38212](https://insights.sbomify.com/MAL-2025-38212/): Malicious code in venmo-emoji-list (npm) (malicious package) - [MAL-2025-38211](https://insights.sbomify.com/MAL-2025-38211/): Malicious code in venice-cli (npm) (malicious package) - [MAL-2025-38210](https://insights.sbomify.com/MAL-2025-38210/): Malicious code in venemous (npm) (malicious package) - [MAL-2025-3821](https://insights.sbomify.com/MAL-2025-3821/): Malicious code in baby-electrona (npm) (malicious package) - [MAL-2025-38209](https://insights.sbomify.com/MAL-2025-38209/): Malicious code in vendor-kendo (npm) (malicious package) - [MAL-2025-38208](https://insights.sbomify.com/MAL-2025-38208/): Malicious code in venbpwyfhiljadgs (npm) (malicious package) - [MAL-2025-38207](https://insights.sbomify.com/MAL-2025-38207/): Malicious code in venation (npm) (malicious package) - [MAL-2025-38206](https://insights.sbomify.com/MAL-2025-38206/): Malicious code in vemdcgioazkjtxhl (npm) (malicious package) - [MAL-2025-38205](https://insights.sbomify.com/MAL-2025-38205/): Malicious code in velvet-orh3j-3hw2m-moonlight-project (npm) (malicious package) - [MAL-2025-38204](https://insights.sbomify.com/MAL-2025-38204/): Malicious code in velvet-gthnu-4iwsm-gale-project (npm) (malicious package) - [MAL-2025-38203](https://insights.sbomify.com/MAL-2025-38203/): Malicious code in velvet-9wxz0-n95vj-basil-project (npm) (malicious package) - [MAL-2025-38202](https://insights.sbomify.com/MAL-2025-38202/): Malicious code in velvet-5z66d-qkbap-indigo-project (npm) (malicious package) - [MAL-2025-38201](https://insights.sbomify.com/MAL-2025-38201/): Malicious code in velvet-2ytsc-hsobi-moonstone-project (npm) (malicious package) - [MAL-2025-38200](https://insights.sbomify.com/MAL-2025-38200/): Malicious code in velocity_wc4nh_ihj0y_quasar (npm) (malicious package) - [MAL-2025-3820](https://insights.sbomify.com/MAL-2025-3820/): Malicious code in baby-electron (npm) (malicious package) - [MAL-2025-382](https://insights.sbomify.com/MAL-2025-382/): Malicious code in amazon-logger (npm) (malicious package) - [MAL-2025-38199](https://insights.sbomify.com/MAL-2025-38199/): Malicious code in velocity_qy587_sana6_ember (npm) (malicious package) - [MAL-2025-38198](https://insights.sbomify.com/MAL-2025-38198/): Malicious code in velocity_g4a60_yqmhg_realm (npm) (malicious package) - [MAL-2025-38197](https://insights.sbomify.com/MAL-2025-38197/): Malicious code in velocity_fjefb_7sb5u_harmony (npm) (malicious package) - [MAL-2025-38196](https://insights.sbomify.com/MAL-2025-38196/): Malicious code in velocity_3scv4_khrpr_xenon (npm) (malicious package) - [MAL-2025-38195](https://insights.sbomify.com/MAL-2025-38195/): Malicious code in velocity_33hbr_4j7vn_tempest (npm) (malicious package) - [MAL-2025-38194](https://insights.sbomify.com/MAL-2025-38194/): Malicious code in velocity_0cwg7_h1n7q_blossom (npm) (malicious package) - [MAL-2025-38193](https://insights.sbomify.com/MAL-2025-38193/): Malicious code in vellent (npm) (malicious package) - [MAL-2025-38192](https://insights.sbomify.com/MAL-2025-38192/): Malicious code in vell (npm) (malicious package) - [MAL-2025-38191](https://insights.sbomify.com/MAL-2025-38191/): Malicious code in vegito-sp (npm) (malicious package) - [MAL-2025-38190](https://insights.sbomify.com/MAL-2025-38190/): Malicious code in vega-iota-deneb-decoherence (npm) (malicious package) - [MAL-2025-3819](https://insights.sbomify.com/MAL-2025-3819/): Malicious code in auth0-guardian-management-client (npm) (malicious package) - [MAL-2025-38189](https://insights.sbomify.com/MAL-2025-38189/): Malicious code in vega-hermes-websockets-slides (npm) (malicious package) - [MAL-2025-38188](https://insights.sbomify.com/MAL-2025-38188/): Malicious code in vega-hercules-solarnebula-cryovolcano (npm) (malicious package) - [MAL-2025-38187](https://insights.sbomify.com/MAL-2025-38187/): Malicious code in vega-commitizen-morgan-hermes (npm) (malicious package) - [MAL-2025-38186](https://insights.sbomify.com/MAL-2025-38186/): Malicious code in veehive (npm) (malicious package) - [MAL-2025-38185](https://insights.sbomify.com/MAL-2025-38185/): Malicious code in vedionote (npm) (malicious package) - [MAL-2025-38184](https://insights.sbomify.com/MAL-2025-38184/): Malicious code in veda-crypto (npm) (malicious package) - [MAL-2025-38183](https://insights.sbomify.com/MAL-2025-38183/): Malicious code in vecboy (npm) (malicious package) - [MAL-2025-38182](https://insights.sbomify.com/MAL-2025-38182/): Malicious code in VDU-web (npm) (malicious package) - [MAL-2025-38181](https://insights.sbomify.com/MAL-2025-38181/): Malicious code in vdsayimncjkwhogr (npm) (malicious package) - [MAL-2025-38180](https://insights.sbomify.com/MAL-2025-38180/): Malicious code in vdrova (npm) (malicious package) - [MAL-2025-3818](https://insights.sbomify.com/MAL-2025-3818/): Malicious code in auth0-authz (npm) (malicious package) - [MAL-2025-38179](https://insights.sbomify.com/MAL-2025-38179/): Malicious code in vdr44 (npm) (malicious package) - [MAL-2025-38178](https://insights.sbomify.com/MAL-2025-38178/): Malicious code in vdossier (npm) (malicious package) - [MAL-2025-38177](https://insights.sbomify.com/MAL-2025-38177/): Malicious code in vdf44 (npm) (malicious package) - [MAL-2025-38176](https://insights.sbomify.com/MAL-2025-38176/): Malicious code in vdating (npm) (malicious package) - [MAL-2025-38175](https://insights.sbomify.com/MAL-2025-38175/): Malicious code in vd3434 (npm) (malicious package) - [MAL-2025-38174](https://insights.sbomify.com/MAL-2025-38174/): Malicious code in vcsfjnexkloprmyb (npm) (malicious package) - [MAL-2025-38173](https://insights.sbomify.com/MAL-2025-38173/): Malicious code in vcs33 (npm) (malicious package) - [MAL-2025-38172](https://insights.sbomify.com/MAL-2025-38172/): Malicious code in vcodigo (npm) (malicious package) - [MAL-2025-38171](https://insights.sbomify.com/MAL-2025-38171/): Malicious code in vcgr34 (npm) (malicious package) - [MAL-2025-38170](https://insights.sbomify.com/MAL-2025-38170/): Malicious code in vcgr3 (npm) (malicious package) - [MAL-2025-3817](https://insights.sbomify.com/MAL-2025-3817/): Malicious code in auction2keeper (npm) (malicious package) - [MAL-2025-38169](https://insights.sbomify.com/MAL-2025-38169/): Malicious code in vcfspirit (npm) (malicious package) - [MAL-2025-38168](https://insights.sbomify.com/MAL-2025-38168/): Malicious code in vcdapi (npm) (malicious package) - [MAL-2025-38167](https://insights.sbomify.com/MAL-2025-38167/): Malicious code in vcadmin (npm) (malicious package) - [MAL-2025-38166](https://insights.sbomify.com/MAL-2025-38166/): Malicious code in vc-revocation-list-2020-context (npm) (malicious package) - [MAL-2025-38165](https://insights.sbomify.com/MAL-2025-38165/): Malicious code in vbwfjakshuqpdtml (npm) (malicious package) - [MAL-2025-38164](https://insights.sbomify.com/MAL-2025-38164/): Malicious code in vbvfg4 (npm) (malicious package) - [MAL-2025-38163](https://insights.sbomify.com/MAL-2025-38163/): Malicious code in vbsaijkpkxyugetw (npm) (malicious package) - [MAL-2025-38162](https://insights.sbomify.com/MAL-2025-38162/): Malicious code in vbs-theme (npm) (malicious package) - [MAL-2025-38161](https://insights.sbomify.com/MAL-2025-38161/): Malicious code in vbs-ng2-shared (npm) (malicious package) - [MAL-2025-38160](https://insights.sbomify.com/MAL-2025-38160/): Malicious code in vbs-common (npm) (malicious package) - [MAL-2025-3816](https://insights.sbomify.com/MAL-2025-3816/): Malicious code in att-bit (npm) (malicious package) - [MAL-2025-38159](https://insights.sbomify.com/MAL-2025-38159/): Malicious code in vbrt3 (npm) (malicious package) - [MAL-2025-38158](https://insights.sbomify.com/MAL-2025-38158/): Malicious code in vbre3 (npm) (malicious package) - [MAL-2025-38157](https://insights.sbomify.com/MAL-2025-38157/): Malicious code in vbr23 (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/689/