# Vulnerabilities published in 2025


- [MAL-2025-38066](https://insights.sbomify.com/MAL-2025-38066/): Malicious code in valley-piano-xhz990-project (npm) (malicious package)
- [MAL-2025-38065](https://insights.sbomify.com/MAL-2025-38065/): Malicious code in valley-peacock-hfj472-project (npm) (malicious package)
- [MAL-2025-38064](https://insights.sbomify.com/MAL-2025-38064/): Malicious code in valley-octopus-cip450-project (npm) (malicious package)
- [MAL-2025-38063](https://insights.sbomify.com/MAL-2025-38063/): Malicious code in valley-nocturne-dsy318-project (npm) (malicious package)
- [MAL-2025-38062](https://insights.sbomify.com/MAL-2025-38062/): Malicious code in valley-meadow-lle458-project (npm) (malicious package)
- [MAL-2025-38061](https://insights.sbomify.com/MAL-2025-38061/): Malicious code in valley-kiwi-vhl510-project (npm) (malicious package)
- [MAL-2025-38060](https://insights.sbomify.com/MAL-2025-38060/): Malicious code in valley-kite-bun380-project (npm) (malicious package)
- [MAL-2025-3806](https://insights.sbomify.com/MAL-2025-3806/): Malicious code in @hotmart-org-ca/cosmos (npm) (malicious package)
- [MAL-2025-38059](https://insights.sbomify.com/MAL-2025-38059/): Malicious code in valley-kelp-yni601-project (npm) (malicious package)
- [MAL-2025-38058](https://insights.sbomify.com/MAL-2025-38058/): Malicious code in valley-harbor-xfp990-project (npm) (malicious package)
- [MAL-2025-38057](https://insights.sbomify.com/MAL-2025-38057/): Malicious code in valley-glacier-gtd322-project (npm) (malicious package)
- [MAL-2025-38056](https://insights.sbomify.com/MAL-2025-38056/): Malicious code in valley-forest-qyj349-project (npm) (malicious package)
- [MAL-2025-38055](https://insights.sbomify.com/MAL-2025-38055/): Malicious code in valley-everglow-kpd208-project (npm) (malicious package)
- [MAL-2025-38054](https://insights.sbomify.com/MAL-2025-38054/): Malicious code in valley-cfhde-53j77-wave-project (npm) (malicious package)
- [MAL-2025-38053](https://insights.sbomify.com/MAL-2025-38053/): Malicious code in valley-butterfly-prm958-project (npm) (malicious package)
- [MAL-2025-38052](https://insights.sbomify.com/MAL-2025-38052/): Malicious code in valley-82wst-mimv6-xenith-project (npm) (malicious package)
- [MAL-2025-38051](https://insights.sbomify.com/MAL-2025-38051/): Malicious code in validate-function-parse-execute-interface (npm) (malicious package)
- [MAL-2025-38050](https://insights.sbomify.com/MAL-2025-38050/): Malicious code in validate-air-cron-zero-moon (npm) (malicious package)
- [MAL-2025-3805](https://insights.sbomify.com/MAL-2025-3805/): Malicious code in @equis/core (npm) (malicious package)
- [MAL-2025-38049](https://insights.sbomify.com/MAL-2025-38049/): Malicious code in validate-address (npm) (malicious package)
- [MAL-2025-38048](https://insights.sbomify.com/MAL-2025-38048/): Malicious code in valhimpufbcknryx (npm) (malicious package)
- [MAL-2025-38047](https://insights.sbomify.com/MAL-2025-38047/): Malicious code in valforce (npm) (malicious package)
- [MAL-2025-38046](https://insights.sbomify.com/MAL-2025-38046/): Malicious code in valahorn (npm) (malicious package)
- [MAL-2025-38045](https://insights.sbomify.com/MAL-2025-38045/): Malicious code in vaildator (npm) (malicious package)
- [MAL-2025-38044](https://insights.sbomify.com/MAL-2025-38044/): Malicious code in v4we3 (npm) (malicious package)
- [MAL-2025-38043](https://insights.sbomify.com/MAL-2025-38043/): Malicious code in v4b24 (npm) (malicious package)
- [MAL-2025-38042](https://insights.sbomify.com/MAL-2025-38042/): Malicious code in v4a3 (npm) (malicious package)
- [MAL-2025-38041](https://insights.sbomify.com/MAL-2025-38041/): Malicious code in v01form-theme-antd (npm) (malicious package)
- [MAL-2025-38040](https://insights.sbomify.com/MAL-2025-38040/): Malicious code in uzqpmrbhwvkxaicn (npm) (malicious package)
- [MAL-2025-3804](https://insights.sbomify.com/MAL-2025-3804/): Malicious code in pog-ui-landings-library (npm) (malicious package)
- [MAL-2025-38039](https://insights.sbomify.com/MAL-2025-38039/): Malicious code in uzenhcliokptswry (npm) (malicious package)
- [MAL-2025-38038](https://insights.sbomify.com/MAL-2025-38038/): Malicious code in uzdevumi (npm) (malicious package)
- [MAL-2025-38037](https://insights.sbomify.com/MAL-2025-38037/): Malicious code in uytisb (npm) (malicious package)
- [MAL-2025-38036](https://insights.sbomify.com/MAL-2025-38036/): Malicious code in uyqqad (npm) (malicious package)
- [MAL-2025-38035](https://insights.sbomify.com/MAL-2025-38035/): Malicious code in uyogfphjxwrqlmns (npm) (malicious package)
- [MAL-2025-38034](https://insights.sbomify.com/MAL-2025-38034/): Malicious code in uynkahlogqxbstfr (npm) (malicious package)
- [MAL-2025-38033](https://insights.sbomify.com/MAL-2025-38033/): Malicious code in uxutils (npm) (malicious package)
- [MAL-2025-38032](https://insights.sbomify.com/MAL-2025-38032/): Malicious code in uxline (npm) (malicious package)
- [MAL-2025-38031](https://insights.sbomify.com/MAL-2025-38031/): Malicious code in uxjlyfgoarkmpkhd (npm) (malicious package)
- [MAL-2025-38030](https://insights.sbomify.com/MAL-2025-38030/): Malicious code in uxindex.cms.service (npm) (malicious package)
- [MAL-2025-3803](https://insights.sbomify.com/MAL-2025-3803/): Malicious code in @tribal-worldwide-london/fa-api-service (npm) (malicious package)
- [MAL-2025-38029](https://insights.sbomify.com/MAL-2025-38029/): Malicious code in uxcamreactexample-typescript (npm) (malicious package)
- [MAL-2025-38028](https://insights.sbomify.com/MAL-2025-38028/): Malicious code in uxc-ng2-services (npm) (malicious package)
- [MAL-2025-38027](https://insights.sbomify.com/MAL-2025-38027/): Malicious code in uxc-ng2-csom (npm) (malicious package)
- [MAL-2025-38026](https://insights.sbomify.com/MAL-2025-38026/): Malicious code in ux1-ui-kit (npm) (malicious package)
- [MAL-2025-38025](https://insights.sbomify.com/MAL-2025-38025/): Malicious code in ux1-framework (npm) (malicious package)
- [MAL-2025-38024](https://insights.sbomify.com/MAL-2025-38024/): Malicious code in ux-styleguide (npm) (malicious package)
- [MAL-2025-38023](https://insights.sbomify.com/MAL-2025-38023/): Malicious code in ux-core-styles (npm) (malicious package)
- [MAL-2025-38022](https://insights.sbomify.com/MAL-2025-38022/): Malicious code in ux-aspects (npm) (malicious package)
- [MAL-2025-38021](https://insights.sbomify.com/MAL-2025-38021/): Malicious code in ux-angular-styleguide (npm) (malicious package)
- [MAL-2025-38020](https://insights.sbomify.com/MAL-2025-38020/): Malicious code in uwwfrdhkiklr3atusrdwbc6rokvcg9gp (npm) (malicious package)
- [MAL-2025-3802](https://insights.sbomify.com/MAL-2025-3802/): Malicious code in this-is-test-module (npm) (malicious package)
- [MAL-2025-38019](https://insights.sbomify.com/MAL-2025-38019/): Malicious code in uwslis (npm) (malicious package)
- [MAL-2025-38018](https://insights.sbomify.com/MAL-2025-38018/): Malicious code in uws-trashme-after-121-merge (npm) (malicious package)
- [MAL-2025-38017](https://insights.sbomify.com/MAL-2025-38017/): Malicious code in uwhpsc (npm) (malicious package)
- [MAL-2025-38016](https://insights.sbomify.com/MAL-2025-38016/): Malicious code in uwebsocket.js (npm) (malicious package)
- [MAL-2025-38015](https://insights.sbomify.com/MAL-2025-38015/): Malicious code in uw-service-customer-services (npm) (malicious package)
- [MAL-2025-38014](https://insights.sbomify.com/MAL-2025-38014/): Malicious code in uvershare (npm) (malicious package)
- [MAL-2025-38013](https://insights.sbomify.com/MAL-2025-38013/): Malicious code in uudaao (npm) (malicious package)
- [MAL-2025-38012](https://insights.sbomify.com/MAL-2025-38012/): Malicious code in uubwemwubna (npm) (malicious package)
- [MAL-2025-38011](https://insights.sbomify.com/MAL-2025-38011/): Malicious code in utopia_vdu25_hbbct_molecule (npm) (malicious package)
- [MAL-2025-38010](https://insights.sbomify.com/MAL-2025-38010/): Malicious code in utopia_g2xyt_xs6kx_ocean (npm) (malicious package)
- [MAL-2025-3801](https://insights.sbomify.com/MAL-2025-3801/): Malicious code in vite-tsconfig-log (npm) (malicious package)
- [MAL-2025-38009](https://insights.sbomify.com/MAL-2025-38009/): Malicious code in utopia_ajrt6_1ydi1_evoke (npm) (malicious package)
- [MAL-2025-38008](https://insights.sbomify.com/MAL-2025-38008/): Malicious code in utopia_511bp_txam9_glacier (npm) (malicious package)
- [MAL-2025-38007](https://insights.sbomify.com/MAL-2025-38007/): Malicious code in utopia-zeppelin-rrh334-project (npm) (malicious package)
- [MAL-2025-38006](https://insights.sbomify.com/MAL-2025-38006/): Malicious code in utopia-yeti-nsy568-project (npm) (malicious package)
- [MAL-2025-38005](https://insights.sbomify.com/MAL-2025-38005/): Malicious code in utopia-xsfk1-dzo1c-quicksilver-project (npm) (malicious package)
- [MAL-2025-38004](https://insights.sbomify.com/MAL-2025-38004/): Malicious code in utopia-vine-ifh536-project (npm) (malicious package)
- [MAL-2025-38003](https://insights.sbomify.com/MAL-2025-38003/): Malicious code in utopia-quill-ceq017-project (npm) (malicious package)
- [MAL-2025-38002](https://insights.sbomify.com/MAL-2025-38002/): Malicious code in utopia-pinnacle-saj489-project (npm) (malicious package)
- [MAL-2025-38001](https://insights.sbomify.com/MAL-2025-38001/): Malicious code in utopia-orangutan-nxd776-project (npm) (malicious package)
- [MAL-2025-38000](https://insights.sbomify.com/MAL-2025-38000/): Malicious code in utopia-mountain-jxk425-project (npm) (malicious package)
- [MAL-2025-3800](https://insights.sbomify.com/MAL-2025-3800/): Malicious code in vite-logging-patcher (npm) (malicious package)
- [MAL-2025-380](https://insights.sbomify.com/MAL-2025-380/): Malicious code in amazon-internal (npm) (malicious package)
- [MAL-2025-38](https://insights.sbomify.com/MAL-2025-38/): Malicious code in alchemy-web3-webpack-example (npm) (malicious package)
- [MAL-2025-37999](https://insights.sbomify.com/MAL-2025-37999/): Malicious code in utopia-mist-ppd028-project (npm) (malicious package)
- [MAL-2025-37998](https://insights.sbomify.com/MAL-2025-37998/): Malicious code in utopia-icicle-cuq715-project (npm) (malicious package)
- [MAL-2025-37997](https://insights.sbomify.com/MAL-2025-37997/): Malicious code in utopia-fyau4-yfe3v-glacier-project (npm) (malicious package)
- [MAL-2025-37996](https://insights.sbomify.com/MAL-2025-37996/): Malicious code in utopia-forest-lgs840-project (npm) (malicious package)
- [MAL-2025-37995](https://insights.sbomify.com/MAL-2025-37995/): Malicious code in utopia-fbdkw-raxw7-zephyr-project (npm) (malicious package)
- [MAL-2025-37994](https://insights.sbomify.com/MAL-2025-37994/): Malicious code in utopia-ecosystem-csh952-project (npm) (malicious package)
- [MAL-2025-37993](https://insights.sbomify.com/MAL-2025-37993/): Malicious code in utopia-delta-uig594-project (npm) (malicious package)
- [MAL-2025-37992](https://insights.sbomify.com/MAL-2025-37992/): Malicious code in utopia-aspen-sew316-project (npm) (malicious package)
- [MAL-2025-37991](https://insights.sbomify.com/MAL-2025-37991/): Malicious code in utomo-tahutek88-breki (npm) (malicious package)
- [MAL-2025-37990](https://insights.sbomify.com/MAL-2025-37990/): Malicious code in utomo-sasag26-sukiwir (npm) (malicious package)
- [MAL-2025-3799](https://insights.sbomify.com/MAL-2025-3799/): Malicious code in test-vite-favicons-inject (npm) (malicious package)
- [MAL-2025-37989](https://insights.sbomify.com/MAL-2025-37989/): Malicious code in utomo-otak-otak68-sukiwir (npm) (malicious package)
- [MAL-2025-37988](https://insights.sbomify.com/MAL-2025-37988/): Malicious code in utomo-mangga41-sukiwir (npm) (malicious package)
- [MAL-2025-37987](https://insights.sbomify.com/MAL-2025-37987/): Malicious code in utomo-liwet89-breki (npm) (malicious package)
- [MAL-2025-37986](https://insights.sbomify.com/MAL-2025-37986/): Malicious code in utomo-klentik25-sukiwir (npm) (malicious package)
- [MAL-2025-37985](https://insights.sbomify.com/MAL-2025-37985/): Malicious code in utomo-keripik86-breki (npm) (malicious package)
- [MAL-2025-37984](https://insights.sbomify.com/MAL-2025-37984/): Malicious code in utomo-keripik5-sukiwir (npm) (malicious package)
- [MAL-2025-37983](https://insights.sbomify.com/MAL-2025-37983/): Malicious code in utinypass (npm) (malicious package)
- [MAL-2025-37982](https://insights.sbomify.com/MAL-2025-37982/): Malicious code in utils-joongo (npm) (malicious package)
- [MAL-2025-37981](https://insights.sbomify.com/MAL-2025-37981/): Malicious code in utilioep (npm) (malicious package)
- [MAL-2025-37980](https://insights.sbomify.com/MAL-2025-37980/): Malicious code in utfconv (npm) (malicious package)
- [MAL-2025-3798](https://insights.sbomify.com/MAL-2025-3798/): Malicious code in node-method-indicator (npm) (malicious package)
- [MAL-2025-37979](https://insights.sbomify.com/MAL-2025-37979/): Malicious code in utdeftvs (npm) (malicious package)
- [MAL-2025-37978](https://insights.sbomify.com/MAL-2025-37978/): Malicious code in utbchance (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/691/