# Vulnerabilities published in 2025


- [MAL-2025-37977](https://insights.sbomify.com/MAL-2025-37977/): Malicious code in utavee (npm) (malicious package)
- [MAL-2025-37976](https://insights.sbomify.com/MAL-2025-37976/): Malicious code in uswds-gulp (npm) (malicious package)
- [MAL-2025-37975](https://insights.sbomify.com/MAL-2025-37975/): Malicious code in ustack (npm) (malicious package)
- [MAL-2025-37974](https://insights.sbomify.com/MAL-2025-37974/): Malicious code in uspxyz (npm) (malicious package)
- [MAL-2025-37973](https://insights.sbomify.com/MAL-2025-37973/): Malicious code in uspersona (npm) (malicious package)
- [MAL-2025-37972](https://insights.sbomify.com/MAL-2025-37972/): Malicious code in usersv (npm) (malicious package)
- [MAL-2025-37971](https://insights.sbomify.com/MAL-2025-37971/): Malicious code in userread-paypal (npm) (malicious package)
- [MAL-2025-37970](https://insights.sbomify.com/MAL-2025-37970/): Malicious code in userplatformserv (npm) (malicious package)
- [MAL-2025-3797](https://insights.sbomify.com/MAL-2025-3797/): Malicious code in node-event-listener (npm) (malicious package)
- [MAL-2025-37969](https://insights.sbomify.com/MAL-2025-37969/): Malicious code in userlifecycle-paypal (npm) (malicious package)
- [MAL-2025-37968](https://insights.sbomify.com/MAL-2025-37968/): Malicious code in userbook (npm) (malicious package)
- [MAL-2025-37967](https://insights.sbomify.com/MAL-2025-37967/): Malicious code in useraccesscontrol-paypal (npm) (malicious package)
- [MAL-2025-37966](https://insights.sbomify.com/MAL-2025-37966/): Malicious code in user-mgmt (npm) (malicious package)
- [MAL-2025-37965](https://insights.sbomify.com/MAL-2025-37965/): Malicious code in user-authorization (npm) (malicious package)
- [MAL-2025-37964](https://insights.sbomify.com/MAL-2025-37964/): Malicious code in used-first-in-postinstall-script-dotslashed (npm) (malicious package)
- [MAL-2025-37963](https://insights.sbomify.com/MAL-2025-37963/): Malicious code in usecase3 (npm) (malicious package)
- [MAL-2025-37962](https://insights.sbomify.com/MAL-2025-37962/): Malicious code in use-strict-mode (npm) (malicious package)
- [MAL-2025-37961](https://insights.sbomify.com/MAL-2025-37961/): Malicious code in usbcan (npm) (malicious package)
- [MAL-2025-37960](https://insights.sbomify.com/MAL-2025-37960/): Malicious code in usage-tracker-public (npm) (malicious package)
- [MAL-2025-3796](https://insights.sbomify.com/MAL-2025-3796/): Malicious code in next-logging-patcher (npm) (malicious package)
- [MAL-2025-37959](https://insights.sbomify.com/MAL-2025-37959/): Malicious code in urx24g (npm) (malicious package)
- [MAL-2025-37958](https://insights.sbomify.com/MAL-2025-37958/): Malicious code in urt3 (npm) (malicious package)
- [MAL-2025-37957](https://insights.sbomify.com/MAL-2025-37957/): Malicious code in ursa-update-spectron-webdriver-helmet (npm) (malicious package)
- [MAL-2025-37956](https://insights.sbomify.com/MAL-2025-37956/): Malicious code in ursa-run-script-hermes-bulma (npm) (malicious package)
- [MAL-2025-37955](https://insights.sbomify.com/MAL-2025-37955/): Malicious code in ursa-robotics-whitedwarf-envconfig (npm) (malicious package)
- [MAL-2025-37954](https://insights.sbomify.com/MAL-2025-37954/): Malicious code in ursa-perseus-loopback-aldebaran (npm) (malicious package)
- [MAL-2025-37953](https://insights.sbomify.com/MAL-2025-37953/): Malicious code in ursa-jsonp-lyra-dotenv-safe (npm) (malicious package)
- [MAL-2025-37952](https://insights.sbomify.com/MAL-2025-37952/): Malicious code in ursa-global-passport-markdown-pdf (npm) (malicious package)
- [MAL-2025-37951](https://insights.sbomify.com/MAL-2025-37951/): Malicious code in ursa-betelgeuse-commitizen-xanadu (npm) (malicious package)
- [MAL-2025-37950](https://insights.sbomify.com/MAL-2025-37950/): Malicious code in urlpatterngenerator (npm) (malicious package)
- [MAL-2025-3795](https://insights.sbomify.com/MAL-2025-3795/): Malicious code in next-auths (npm) (malicious package)
- [MAL-2025-37949](https://insights.sbomify.com/MAL-2025-37949/): Malicious code in urlparserjs (npm) (malicious package)
- [MAL-2025-37948](https://insights.sbomify.com/MAL-2025-37948/): Malicious code in urlmod (npm) (malicious package)
- [MAL-2025-37947](https://insights.sbomify.com/MAL-2025-37947/): Malicious code in url.resolve (npm) (malicious package)
- [MAL-2025-37946](https://insights.sbomify.com/MAL-2025-37946/): Malicious code in url-bar-notification-button (npm) (malicious package)
- [MAL-2025-37945](https://insights.sbomify.com/MAL-2025-37945/): Malicious code in urkwebyvaiktxqdc (npm) (malicious package)
- [MAL-2025-37944](https://insights.sbomify.com/MAL-2025-37944/): Malicious code in urelease (npm) (malicious package)
- [MAL-2025-37943](https://insights.sbomify.com/MAL-2025-37943/): Malicious code in uranology-eleventy-vortex-async (npm) (malicious package)
- [MAL-2025-37942](https://insights.sbomify.com/MAL-2025-37942/): Malicious code in uranium-vortex-ooj444-project (npm) (malicious package)
- [MAL-2025-37941](https://insights.sbomify.com/MAL-2025-37941/): Malicious code in uranium-quasar-xnw897-project (npm) (malicious package)
- [MAL-2025-37940](https://insights.sbomify.com/MAL-2025-37940/): Malicious code in uranium-quasar-kuq899-project (npm) (malicious package)
- [MAL-2025-3794](https://insights.sbomify.com/MAL-2025-3794/): Malicious code in next-auth-core (npm) (malicious package)
- [MAL-2025-37939](https://insights.sbomify.com/MAL-2025-37939/): Malicious code in uranium-peacock-zvu363-project (npm) (malicious package)
- [MAL-2025-37938](https://insights.sbomify.com/MAL-2025-37938/): Malicious code in uranium-orchid-jdk830-project (npm) (malicious package)
- [MAL-2025-37937](https://insights.sbomify.com/MAL-2025-37937/): Malicious code in uranium-meadow-zlw642-project (npm) (malicious package)
- [MAL-2025-37936](https://insights.sbomify.com/MAL-2025-37936/): Malicious code in uranium-lava-yqw291-project (npm) (malicious package)
- [MAL-2025-37935](https://insights.sbomify.com/MAL-2025-37935/): Malicious code in uranium-labyrinth-ipd496-project (npm) (malicious package)
- [MAL-2025-37934](https://insights.sbomify.com/MAL-2025-37934/): Malicious code in uranium-iguana-yvo876-project (npm) (malicious package)
- [MAL-2025-37933](https://insights.sbomify.com/MAL-2025-37933/): Malicious code in uranium-honey-gdq469-project (npm) (malicious package)
- [MAL-2025-37932](https://insights.sbomify.com/MAL-2025-37932/): Malicious code in uranium-dune-uxp824-project (npm) (malicious package)
- [MAL-2025-37931](https://insights.sbomify.com/MAL-2025-37931/): Malicious code in uranium-desert-lnl212-project (npm) (malicious package)
- [MAL-2025-37930](https://insights.sbomify.com/MAL-2025-37930/): Malicious code in uranium-crystal-qro686-project (npm) (malicious package)
- [MAL-2025-3793](https://insights.sbomify.com/MAL-2025-3793/): Malicious code in mongoose-mongodb (npm) (malicious package)
- [MAL-2025-37929](https://insights.sbomify.com/MAL-2025-37929/): Malicious code in uranium-buffalo-lrm365-project (npm) (malicious package)
- [MAL-2025-37928](https://insights.sbomify.com/MAL-2025-37928/): Malicious code in uranium-boulder-gyo516-project (npm) (malicious package)
- [MAL-2025-37927](https://insights.sbomify.com/MAL-2025-37927/): Malicious code in upvjtqewhdkrgkal (npm) (malicious package)
- [MAL-2025-37926](https://insights.sbomify.com/MAL-2025-37926/): Malicious code in uptheante (npm) (malicious package)
- [MAL-2025-37925](https://insights.sbomify.com/MAL-2025-37925/): Malicious code in upsilon-module-info-daemon-process (npm) (malicious package)
- [MAL-2025-37924](https://insights.sbomify.com/MAL-2025-37924/): Malicious code in upsilon-decode-gamma-slow-report (npm) (malicious package)
- [MAL-2025-37923](https://insights.sbomify.com/MAL-2025-37923/): Malicious code in upload_package (npm) (malicious package)
- [MAL-2025-37922](https://insights.sbomify.com/MAL-2025-37922/): Malicious code in upload-to-release (npm) (malicious package)
- [MAL-2025-37921](https://insights.sbomify.com/MAL-2025-37921/): Malicious code in upload-file-to-firebase (npm) (malicious package)
- [MAL-2025-37920](https://insights.sbomify.com/MAL-2025-37920/): Malicious code in uplift-zk0ez-62vgh-xenith-project (npm) (malicious package)
- [MAL-2025-3792](https://insights.sbomify.com/MAL-2025-3792/): Malicious code in middy-js (npm) (malicious package)
- [MAL-2025-37919](https://insights.sbomify.com/MAL-2025-37919/): Malicious code in uplift-h5yn2-4sfmq-orbit-project (npm) (malicious package)
- [MAL-2025-37918](https://insights.sbomify.com/MAL-2025-37918/): Malicious code in uplift-gz0px-3j26r-horizon-project (npm) (malicious package)
- [MAL-2025-37917](https://insights.sbomify.com/MAL-2025-37917/): Malicious code in uplift-buir7-pig4r-hearth-project (npm) (malicious package)
- [MAL-2025-37916](https://insights.sbomify.com/MAL-2025-37916/): Malicious code in uplift-aura-rjp533-project (npm) (malicious package)
- [MAL-2025-37915](https://insights.sbomify.com/MAL-2025-37915/): Malicious code in uplift-78f1z-u3vu9-yew-project (npm) (malicious package)
- [MAL-2025-37914](https://insights.sbomify.com/MAL-2025-37914/): Malicious code in uplift-20d6t-y47zq-grove-project (npm) (malicious package)
- [MAL-2025-37913](https://insights.sbomify.com/MAL-2025-37913/): Malicious code in uphykwxtsmiqfzga (npm) (malicious package)
- [MAL-2025-37912](https://insights.sbomify.com/MAL-2025-37912/): Malicious code in upgrow (npm) (malicious package)
- [MAL-2025-37911](https://insights.sbomify.com/MAL-2025-37911/): Malicious code in upgrade-proxima-epimetheus-draco (npm) (malicious package)
- [MAL-2025-37910](https://insights.sbomify.com/MAL-2025-37910/): Malicious code in upgrade-inflation-electron-builder-outercore (npm) (malicious package)
- [MAL-2025-3791](https://insights.sbomify.com/MAL-2025-3791/): Malicious code in keypair-encrypt (npm) (malicious package)
- [MAL-2025-37909](https://insights.sbomify.com/MAL-2025-37909/): Malicious code in upgrade-global-hydrogeology-dotenv-safe (npm) (malicious package)
- [MAL-2025-37908](https://insights.sbomify.com/MAL-2025-37908/): Malicious code in updatewp (npm) (malicious package)
- [MAL-2025-37907](https://insights.sbomify.com/MAL-2025-37907/): Malicious code in updated-tricks-v-bucks-generator-free_2023-bbi7zrezw (npm) (malicious package)
- [MAL-2025-37906](https://insights.sbomify.com/MAL-2025-37906/): Malicious code in updated-tricks-v-bucks-generator-free_2023-08ivy7m1f (npm) (malicious package)
- [MAL-2025-37905](https://insights.sbomify.com/MAL-2025-37905/): Malicious code in updated-tricks-robux-generator-free_2023-ss1nujjg-pba (npm) (malicious package)
- [MAL-2025-37904](https://insights.sbomify.com/MAL-2025-37904/): Malicious code in updated-tricks-robux-generator-free_2023-ss1nujjg-ftr (npm) (malicious package)
- [MAL-2025-37903](https://insights.sbomify.com/MAL-2025-37903/): Malicious code in updated-tricks-roblox-robux-generator-2023-get-verify_wrhzdu (npm) (malicious package)
- [MAL-2025-37902](https://insights.sbomify.com/MAL-2025-37902/): Malicious code in updated-coin-master-free-spins-daily-2023-dkzkd (npm) (malicious package)
- [MAL-2025-37901](https://insights.sbomify.com/MAL-2025-37901/): Malicious code in updated-asphalt-9-legends-tokens-generator (npm) (malicious package)
- [MAL-2025-37900](https://insights.sbomify.com/MAL-2025-37900/): Malicious code in updated-ark-survival-ancient-amber-generator (npm) (malicious package)
- [MAL-2025-3790](https://insights.sbomify.com/MAL-2025-3790/): Malicious code in consolidate-logging (npm) (malicious package)
- [MAL-2025-379](https://insights.sbomify.com/MAL-2025-379/): Malicious code in amazon-gateway (npm) (malicious package)
- [MAL-2025-37899](https://insights.sbomify.com/MAL-2025-37899/): Malicious code in update-venus-ignite-bioinformatics (npm) (malicious package)
- [MAL-2025-37898](https://insights.sbomify.com/MAL-2025-37898/): Malicious code in update-terser-webpack-plugin-stratigraphy-release-it (npm) (malicious package)
- [MAL-2025-37897](https://insights.sbomify.com/MAL-2025-37897/): Malicious code in update-phoenix-lithosphere-coronalmassejection (npm) (malicious package)
- [MAL-2025-37896](https://insights.sbomify.com/MAL-2025-37896/): Malicious code in update-native-lepton-init (npm) (malicious package)
- [MAL-2025-37895](https://insights.sbomify.com/MAL-2025-37895/): Malicious code in update-hexo-epigenetics-geomorphology (npm) (malicious package)
- [MAL-2025-37894](https://insights.sbomify.com/MAL-2025-37894/): Malicious code in up-tsu (npm) (malicious package)
- [MAL-2025-37893](https://insights.sbomify.com/MAL-2025-37893/): Malicious code in uowbio (npm) (malicious package)
- [MAL-2025-37892](https://insights.sbomify.com/MAL-2025-37892/): Malicious code in uonrails (npm) (malicious package)
- [MAL-2025-37891](https://insights.sbomify.com/MAL-2025-37891/): Malicious code in uolpainelcloud-painelcloud-host-uol-com-br (npm) (malicious package)
- [MAL-2025-37890](https://insights.sbomify.com/MAL-2025-37890/): Malicious code in uokfntjwxlbpavgq (npm) (malicious package)
- [MAL-2025-3789](https://insights.sbomify.com/MAL-2025-3789/): Malicious code in aiide-cur (npm) (malicious package)
- [MAL-2025-37889](https://insights.sbomify.com/MAL-2025-37889/): Malicious code in uoiglkfebvhtwpxm (npm) (malicious package)
- [MAL-2025-37888](https://insights.sbomify.com/MAL-2025-37888/): Malicious code in uohmqkewgpikdrts (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/692/