# Vulnerabilities published in 2025


- [MAL-2025-38156](https://insights.sbomify.com/MAL-2025-38156/): Malicious code in vbozeu (npm) (malicious package)
- [MAL-2025-38155](https://insights.sbomify.com/MAL-2025-38155/): Malicious code in vbfr34 (npm) (malicious package)
- [MAL-2025-38154](https://insights.sbomify.com/MAL-2025-38154/): Malicious code in vbasnips (npm) (malicious package)
- [MAL-2025-38153](https://insights.sbomify.com/MAL-2025-38153/): Malicious code in vaultd (npm) (malicious package)
- [MAL-2025-38152](https://insights.sbomify.com/MAL-2025-38152/): Malicious code in vatit-fury (npm) (malicious package)
- [MAL-2025-38151](https://insights.sbomify.com/MAL-2025-38151/): Malicious code in vatit-components (npm) (malicious package)
- [MAL-2025-38150](https://insights.sbomify.com/MAL-2025-38150/): Malicious code in vathorst (npm) (malicious package)
- [MAL-2025-3815](https://insights.sbomify.com/MAL-2025-3815/): Malicious code in airtable-blocks-internal (npm) (malicious package)
- [MAL-2025-38149](https://insights.sbomify.com/MAL-2025-38149/): Malicious code in vasuku (npm) (malicious package)
- [MAL-2025-38148](https://insights.sbomify.com/MAL-2025-38148/): Malicious code in vastl (npm) (malicious package)
- [MAL-2025-38147](https://insights.sbomify.com/MAL-2025-38147/): Malicious code in varshini (npm) (malicious package)
- [MAL-2025-38146](https://insights.sbomify.com/MAL-2025-38146/): Malicious code in varnisher (npm) (malicious package)
- [MAL-2025-38145](https://insights.sbomify.com/MAL-2025-38145/): Malicious code in variable-name (npm) (malicious package)
- [MAL-2025-38144](https://insights.sbomify.com/MAL-2025-38144/): Malicious code in vargen (npm) (malicious package)
- [MAL-2025-38143](https://insights.sbomify.com/MAL-2025-38143/): Malicious code in vaporizza (npm) (malicious package)
- [MAL-2025-38142](https://insights.sbomify.com/MAL-2025-38142/): Malicious code in vaporeon (npm) (malicious package)
- [MAL-2025-38141](https://insights.sbomify.com/MAL-2025-38141/): Malicious code in vapo-ui-components (npm) (malicious package)
- [MAL-2025-38140](https://insights.sbomify.com/MAL-2025-38140/): Malicious code in vanyad (npm) (malicious package)
- [MAL-2025-3814](https://insights.sbomify.com/MAL-2025-3814/): Malicious code in ai_challenge (npm) (malicious package)
- [MAL-2025-38139](https://insights.sbomify.com/MAL-2025-38139/): Malicious code in vantage_jpish_o1epe_driftwood (npm) (malicious package)
- [MAL-2025-38138](https://insights.sbomify.com/MAL-2025-38138/): Malicious code in vantage_7dexc_u5t8f_quasar (npm) (malicious package)
- [MAL-2025-38137](https://insights.sbomify.com/MAL-2025-38137/): Malicious code in vantage_799op_lshpf_aroma (npm) (malicious package)
- [MAL-2025-38136](https://insights.sbomify.com/MAL-2025-38136/): Malicious code in vantage_16yzs_mxna7_ember (npm) (malicious package)
- [MAL-2025-38135](https://insights.sbomify.com/MAL-2025-38135/): Malicious code in vanilla-zucchini-yvdm (npm) (malicious package)
- [MAL-2025-38134](https://insights.sbomify.com/MAL-2025-38134/): Malicious code in vanilla-zucchini-charlie-efxne (npm) (malicious package)
- [MAL-2025-38133](https://insights.sbomify.com/MAL-2025-38133/): Malicious code in vanilla-yam-oscar-uasmp (npm) (malicious package)
- [MAL-2025-38132](https://insights.sbomify.com/MAL-2025-38132/): Malicious code in vanilla-xray-jvhp (npm) (malicious package)
- [MAL-2025-38131](https://insights.sbomify.com/MAL-2025-38131/): Malicious code in vanilla-xray-0kbw (npm) (malicious package)
- [MAL-2025-38130](https://insights.sbomify.com/MAL-2025-38130/): Malicious code in vanilla-xbx-project (npm) (malicious package)
- [MAL-2025-3813](https://insights.sbomify.com/MAL-2025-3813/): Malicious code in abir-dl (npm) (malicious package)
- [MAL-2025-38129](https://insights.sbomify.com/MAL-2025-38129/): Malicious code in vanilla-whiskey-raspberry-tpafk (npm) (malicious package)
- [MAL-2025-38128](https://insights.sbomify.com/MAL-2025-38128/): Malicious code in vanilla-watermelon-oscar-gdwdp (npm) (malicious package)
- [MAL-2025-38127](https://insights.sbomify.com/MAL-2025-38127/): Malicious code in vanilla-w37-project (npm) (malicious package)
- [MAL-2025-38126](https://insights.sbomify.com/MAL-2025-38126/): Malicious code in vanilla-urr-project (npm) (malicious package)
- [MAL-2025-38125](https://insights.sbomify.com/MAL-2025-38125/): Malicious code in vanilla-ugli-zrku (npm) (malicious package)
- [MAL-2025-38124](https://insights.sbomify.com/MAL-2025-38124/): Malicious code in vanilla-ufm-project (npm) (malicious package)
- [MAL-2025-38123](https://insights.sbomify.com/MAL-2025-38123/): Malicious code in vanilla-u80-project (npm) (malicious package)
- [MAL-2025-38122](https://insights.sbomify.com/MAL-2025-38122/): Malicious code in vanilla-tangerine-honeydew-xdtfa (npm) (malicious package)
- [MAL-2025-38121](https://insights.sbomify.com/MAL-2025-38121/): Malicious code in vanilla-romeo-india-ggayr (npm) (malicious package)
- [MAL-2025-38120](https://insights.sbomify.com/MAL-2025-38120/): Malicious code in vanilla-rn7-project (npm) (malicious package)
- [MAL-2025-3812](https://insights.sbomify.com/MAL-2025-3812/): Malicious code in aads-blog (npm) (malicious package)
- [MAL-2025-38119](https://insights.sbomify.com/MAL-2025-38119/): Malicious code in vanilla-redshift-wi3n (npm) (malicious package)
- [MAL-2025-38118](https://insights.sbomify.com/MAL-2025-38118/): Malicious code in vanilla-raspberry-uiom (npm) (malicious package)
- [MAL-2025-38117](https://insights.sbomify.com/MAL-2025-38117/): Malicious code in vanilla-quebec-twak (npm) (malicious package)
- [MAL-2025-38116](https://insights.sbomify.com/MAL-2025-38116/): Malicious code in vanilla-q7y-project (npm) (malicious package)
- [MAL-2025-38115](https://insights.sbomify.com/MAL-2025-38115/): Malicious code in vanilla-papa-xray-bzhrl (npm) (malicious package)
- [MAL-2025-38114](https://insights.sbomify.com/MAL-2025-38114/): Malicious code in vanilla-papa-cgan (npm) (malicious package)
- [MAL-2025-38113](https://insights.sbomify.com/MAL-2025-38113/): Malicious code in vanilla-orange-romeo-pwxmh (npm) (malicious package)
- [MAL-2025-38112](https://insights.sbomify.com/MAL-2025-38112/): Malicious code in vanilla-orange-pkno (npm) (malicious package)
- [MAL-2025-38111](https://insights.sbomify.com/MAL-2025-38111/): Malicious code in vanilla-oe4-project (npm) (malicious package)
- [MAL-2025-38110](https://insights.sbomify.com/MAL-2025-38110/): Malicious code in vanilla-nectarine-dtxh (npm) (malicious package)
- [MAL-2025-3811](https://insights.sbomify.com/MAL-2025-3811/): Malicious code in a0e50092.fcs.pw (npm) (malicious package)
- [MAL-2025-38109](https://insights.sbomify.com/MAL-2025-38109/): Malicious code in vanilla-mike-zulu-rsktj (npm) (malicious package)
- [MAL-2025-38108](https://insights.sbomify.com/MAL-2025-38108/): Malicious code in vanilla-mike-dzvu (npm) (malicious package)
- [MAL-2025-38107](https://insights.sbomify.com/MAL-2025-38107/): Malicious code in vanilla-larch-5sb7 (npm) (malicious package)
- [MAL-2025-38106](https://insights.sbomify.com/MAL-2025-38106/): Malicious code in vanilla-kiwi-rtwj (npm) (malicious package)
- [MAL-2025-38105](https://insights.sbomify.com/MAL-2025-38105/): Malicious code in vanilla-is2-project (npm) (malicious package)
- [MAL-2025-38104](https://insights.sbomify.com/MAL-2025-38104/): Malicious code in vanilla-ibu-project (npm) (malicious package)
- [MAL-2025-38103](https://insights.sbomify.com/MAL-2025-38103/): Malicious code in vanilla-hotel-fig-wmopu (npm) (malicious package)
- [MAL-2025-38102](https://insights.sbomify.com/MAL-2025-38102/): Malicious code in vanilla-honeydew-lima-fmujl (npm) (malicious package)
- [MAL-2025-38101](https://insights.sbomify.com/MAL-2025-38101/): Malicious code in vanilla-grape-pfoy (npm) (malicious package)
- [MAL-2025-38100](https://insights.sbomify.com/MAL-2025-38100/): Malicious code in vanilla-g7j-project (npm) (malicious package)
- [MAL-2025-3810](https://insights.sbomify.com/MAL-2025-3810/): Malicious code in @support-editor/mts-editor-dist (npm) (malicious package)
- [MAL-2025-381](https://insights.sbomify.com/MAL-2025-381/): Malicious code in amazon-jira (npm) (malicious package)
- [MAL-2025-38099](https://insights.sbomify.com/MAL-2025-38099/): Malicious code in vanilla-ft9-project (npm) (malicious package)
- [MAL-2025-38098](https://insights.sbomify.com/MAL-2025-38098/): Malicious code in vanilla-foxtrot-lima-gufaf (npm) (malicious package)
- [MAL-2025-38097](https://insights.sbomify.com/MAL-2025-38097/): Malicious code in vanilla-elderberry-oflk (npm) (malicious package)
- [MAL-2025-38096](https://insights.sbomify.com/MAL-2025-38096/): Malicious code in vanilla-elderberry-81g0 (npm) (malicious package)
- [MAL-2025-38095](https://insights.sbomify.com/MAL-2025-38095/): Malicious code in vanilla-echo-udap (npm) (malicious package)
- [MAL-2025-38094](https://insights.sbomify.com/MAL-2025-38094/): Malicious code in vanilla-e28-project (npm) (malicious package)
- [MAL-2025-38093](https://insights.sbomify.com/MAL-2025-38093/): Malicious code in vanilla-date-grape-vnfcn (npm) (malicious package)
- [MAL-2025-38092](https://insights.sbomify.com/MAL-2025-38092/): Malicious code in vanilla-cherry-yvjg (npm) (malicious package)
- [MAL-2025-38091](https://insights.sbomify.com/MAL-2025-38091/): Malicious code in vanilla-charlie-kilo-petpm (npm) (malicious package)
- [MAL-2025-38090](https://insights.sbomify.com/MAL-2025-38090/): Malicious code in vanilla-car-8fdk (npm) (malicious package)
- [MAL-2025-3809](https://insights.sbomify.com/MAL-2025-3809/): Malicious code in @support-editor/a0e50092.fcs.pw (npm) (malicious package)
- [MAL-2025-38089](https://insights.sbomify.com/MAL-2025-38089/): Malicious code in vanilla-banana-zucchini-xmact (npm) (malicious package)
- [MAL-2025-38088](https://insights.sbomify.com/MAL-2025-38088/): Malicious code in vanilla-apple-supf (npm) (malicious package)
- [MAL-2025-38087](https://insights.sbomify.com/MAL-2025-38087/): Malicious code in vanilla-7xn-project (npm) (malicious package)
- [MAL-2025-38086](https://insights.sbomify.com/MAL-2025-38086/): Malicious code in vanilla-7op-project (npm) (malicious package)
- [MAL-2025-38085](https://insights.sbomify.com/MAL-2025-38085/): Malicious code in vanilla-5gq-project (npm) (malicious package)
- [MAL-2025-38084](https://insights.sbomify.com/MAL-2025-38084/): Malicious code in vanilla-3rl-project (npm) (malicious package)
- [MAL-2025-38083](https://insights.sbomify.com/MAL-2025-38083/): Malicious code in vanilla-2wh-project (npm) (malicious package)
- [MAL-2025-38082](https://insights.sbomify.com/MAL-2025-38082/): Malicious code in vanilla-0zr-project (npm) (malicious package)
- [MAL-2025-38081](https://insights.sbomify.com/MAL-2025-38081/): Malicious code in vanilla-071-project (npm) (malicious package)
- [MAL-2025-38080](https://insights.sbomify.com/MAL-2025-38080/): Malicious code in vanabell (npm) (malicious package)
- [MAL-2025-3808](https://insights.sbomify.com/MAL-2025-3808/): Malicious code in @nx-frontend/bonx-microfrontends (npm) (malicious package)
- [MAL-2025-38079](https://insights.sbomify.com/MAL-2025-38079/): Malicious code in vamsiproj (npm) (malicious package)
- [MAL-2025-38078](https://insights.sbomify.com/MAL-2025-38078/): Malicious code in vampuleerl (npm) (malicious package)
- [MAL-2025-38077](https://insights.sbomify.com/MAL-2025-38077/): Malicious code in valvo-custom-bs (npm) (malicious package)
- [MAL-2025-38076](https://insights.sbomify.com/MAL-2025-38076/): Malicious code in valutec (npm) (malicious package)
- [MAL-2025-38075](https://insights.sbomify.com/MAL-2025-38075/): Malicious code in valueappz-cli (npm) (malicious package)
- [MAL-2025-38074](https://insights.sbomify.com/MAL-2025-38074/): Malicious code in valley_jxrnh_t4bel_tundra (npm) (malicious package)
- [MAL-2025-38073](https://insights.sbomify.com/MAL-2025-38073/): Malicious code in valley-zodiac-ume337-project (npm) (malicious package)
- [MAL-2025-38072](https://insights.sbomify.com/MAL-2025-38072/): Malicious code in valley-zodiac-uhj374-project (npm) (malicious package)
- [MAL-2025-38071](https://insights.sbomify.com/MAL-2025-38071/): Malicious code in valley-whirlpool-rcb252-project (npm) (malicious package)
- [MAL-2025-38070](https://insights.sbomify.com/MAL-2025-38070/): Malicious code in valley-vista-zgh439-project (npm) (malicious package)
- [MAL-2025-3807](https://insights.sbomify.com/MAL-2025-3807/): Malicious code in @hotmart-org-ca/cosmos-tokens (npm) (malicious package)
- [MAL-2025-38069](https://insights.sbomify.com/MAL-2025-38069/): Malicious code in valley-sapphire-lcu979-project (npm) (malicious package)
- [MAL-2025-38068](https://insights.sbomify.com/MAL-2025-38068/): Malicious code in valley-rose-emz716-project (npm) (malicious package)
- [MAL-2025-38067](https://insights.sbomify.com/MAL-2025-38067/): Malicious code in valley-rainbow-xma013-project (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/690/