# Vulnerabilities published in 2025 - [MAL-2025-37887](https://insights.sbomify.com/MAL-2025-37887/): Malicious code in unxsisp (npm) (malicious package) - [MAL-2025-37886](https://insights.sbomify.com/MAL-2025-37886/): Malicious code in unuk-sagitta-canopus-dotenv-safe (npm) (malicious package) - [MAL-2025-37885](https://insights.sbomify.com/MAL-2025-37885/): Malicious code in unuk-quantum-loopback-got (npm) (malicious package) - [MAL-2025-37884](https://insights.sbomify.com/MAL-2025-37884/): Malicious code in unuk-phenomic-playwright-webdriverio (npm) (malicious package) - [MAL-2025-37883](https://insights.sbomify.com/MAL-2025-37883/): Malicious code in unuk-morgan-mini-css-extract-plugin-sync (npm) (malicious package) - [MAL-2025-37882](https://insights.sbomify.com/MAL-2025-37882/): Malicious code in unuk-mesosphere-phoebe-blitz (npm) (malicious package) - [MAL-2025-37881](https://insights.sbomify.com/MAL-2025-37881/): Malicious code in unuk-draco-indus-decoherence (npm) (malicious package) - [MAL-2025-37880](https://insights.sbomify.com/MAL-2025-37880/): Malicious code in unsplash-it-download (npm) (malicious package) - [MAL-2025-3788](https://insights.sbomify.com/MAL-2025-3788/): Malicious code in f0-flow-resolver (npm) (malicious package) - [MAL-2025-37879](https://insights.sbomify.com/MAL-2025-37879/): Malicious code in unsize (npm) (malicious package) - [MAL-2025-37878](https://insights.sbomify.com/MAL-2025-37878/): Malicious code in unscoped-test1 (npm) (malicious package) - [MAL-2025-37877](https://insights.sbomify.com/MAL-2025-37877/): Malicious code in unpdeliveryserv (npm) (malicious package) - [MAL-2025-37876](https://insights.sbomify.com/MAL-2025-37876/): Malicious code in unobsfajqdcptkkm (npm) (malicious package) - [MAL-2025-37875](https://insights.sbomify.com/MAL-2025-37875/): Malicious code in unnoobme (npm) (malicious package) - [MAL-2025-37874](https://insights.sbomify.com/MAL-2025-37874/): Malicious code in unmozarva (npm) (malicious package) - [MAL-2025-37873](https://insights.sbomify.com/MAL-2025-37873/): Malicious code in unlocks (npm) (malicious package) - [MAL-2025-37872](https://insights.sbomify.com/MAL-2025-37872/): Malicious code in unlocking (npm) (malicious package) - [MAL-2025-37871](https://insights.sbomify.com/MAL-2025-37871/): Malicious code in unlimited-fortnite-vbucks-march-2023-dkzszd (npm) (malicious package) - [MAL-2025-37870](https://insights.sbomify.com/MAL-2025-37870/): Malicious code in unixoid (npm) (malicious package) - [MAL-2025-3787](https://insights.sbomify.com/MAL-2025-3787/): Malicious code in @tribal-worldwide-london/fa-loggerpoc (npm) (malicious package) - [MAL-2025-37869](https://insights.sbomify.com/MAL-2025-37869/): Malicious code in unix-visualize-stub-file-big (npm) (malicious package) - [MAL-2025-37868](https://insights.sbomify.com/MAL-2025-37868/): Malicious code in unix-promise-final-grid-old (npm) (malicious package) - [MAL-2025-37867](https://insights.sbomify.com/MAL-2025-37867/): Malicious code in univision-fe-componets-base (npm) (malicious package) - [MAL-2025-37866](https://insights.sbomify.com/MAL-2025-37866/): Malicious code in univision-fe (npm) (malicious package) - [MAL-2025-37865](https://insights.sbomify.com/MAL-2025-37865/): Malicious code in universe_xoju3_wvkse_xanadu (npm) (malicious package) - [MAL-2025-37864](https://insights.sbomify.com/MAL-2025-37864/): Malicious code in universe_x8zb5_rw75t_xenon (npm) (malicious package) - [MAL-2025-37863](https://insights.sbomify.com/MAL-2025-37863/): Malicious code in universe_vrv57_m34zo_nectar (npm) (malicious package) - [MAL-2025-37862](https://insights.sbomify.com/MAL-2025-37862/): Malicious code in universe_pvms2_b2mkj_oasis (npm) (malicious package) - [MAL-2025-37861](https://insights.sbomify.com/MAL-2025-37861/): Malicious code in universe_fpvun_7frti_wander (npm) (malicious package) - [MAL-2025-37860](https://insights.sbomify.com/MAL-2025-37860/): Malicious code in universe_9tkbd_mymx7_quiver (npm) (malicious package) - [MAL-2025-3786](https://insights.sbomify.com/MAL-2025-3786/): Malicious code in volkswagen-onehub-components-raj (npm) (malicious package) - [MAL-2025-37859](https://insights.sbomify.com/MAL-2025-37859/): Malicious code in universe_7zsfm_bqdb6_zenith (npm) (malicious package) - [MAL-2025-37858](https://insights.sbomify.com/MAL-2025-37858/): Malicious code in universe-y8fi3-lsbnj-jewel-project (npm) (malicious package) - [MAL-2025-37857](https://insights.sbomify.com/MAL-2025-37857/): Malicious code in universe-qelkb-5zh78-xanadu-project (npm) (malicious package) - [MAL-2025-37856](https://insights.sbomify.com/MAL-2025-37856/): Malicious code in universe-jq5lc-cp1s4-harp-project (npm) (malicious package) - [MAL-2025-37855](https://insights.sbomify.com/MAL-2025-37855/): Malicious code in universe-eo71k-xfw0g-yonder-project (npm) (malicious package) - [MAL-2025-37854](https://insights.sbomify.com/MAL-2025-37854/): Malicious code in universe-9iv8u-tr0uo-ember-project (npm) (malicious package) - [MAL-2025-37853](https://insights.sbomify.com/MAL-2025-37853/): Malicious code in universe-032yv-eyuue-oasis-project (npm) (malicious package) - [MAL-2025-37852](https://insights.sbomify.com/MAL-2025-37852/): Malicious code in universal-fetch-utils (npm) (malicious package) - [MAL-2025-37851](https://insights.sbomify.com/MAL-2025-37851/): Malicious code in univ-config (npm) (malicious package) - [MAL-2025-37850](https://insights.sbomify.com/MAL-2025-37850/): Malicious code in unity_tbctn_8zrdb_breeze (npm) (malicious package) - [MAL-2025-3785](https://insights.sbomify.com/MAL-2025-3785/): Malicious code in wix-pilot (npm) (malicious package) - [MAL-2025-37849](https://insights.sbomify.com/MAL-2025-37849/): Malicious code in unity_j14fk_yey6b_pinnacle (npm) (malicious package) - [MAL-2025-37848](https://insights.sbomify.com/MAL-2025-37848/): Malicious code in unity_gxx19_p3kp7_boulder (npm) (malicious package) - [MAL-2025-37847](https://insights.sbomify.com/MAL-2025-37847/): Malicious code in unity-zs5ii-y5zch-valley-project (npm) (malicious package) - [MAL-2025-37846](https://insights.sbomify.com/MAL-2025-37846/): Malicious code in unity-ywvl3-quymi-lotus-project (npm) (malicious package) - [MAL-2025-37845](https://insights.sbomify.com/MAL-2025-37845/): Malicious code in unity-x88q0-gxqx2-lake-project (npm) (malicious package) - [MAL-2025-37844](https://insights.sbomify.com/MAL-2025-37844/): Malicious code in unity-q3ts6-hznxu-flame-project (npm) (malicious package) - [MAL-2025-37843](https://insights.sbomify.com/MAL-2025-37843/): Malicious code in unity-k5gm1-30jm7-horizon-project (npm) (malicious package) - [MAL-2025-37842](https://insights.sbomify.com/MAL-2025-37842/): Malicious code in unity-jubilee-che744-project (npm) (malicious package) - [MAL-2025-37841](https://insights.sbomify.com/MAL-2025-37841/): Malicious code in unity-ijrqu-fob0s-nebula-project (npm) (malicious package) - [MAL-2025-37840](https://insights.sbomify.com/MAL-2025-37840/): Malicious code in unity-honey-exq186-project (npm) (malicious package) - [MAL-2025-3784](https://insights.sbomify.com/MAL-2025-3784/): Malicious code in webpack-cli-v4 (npm) (malicious package) - [MAL-2025-37839](https://insights.sbomify.com/MAL-2025-37839/): Malicious code in unity-hhmqh-ulz6q-valley-project (npm) (malicious package) - [MAL-2025-37838](https://insights.sbomify.com/MAL-2025-37838/): Malicious code in unity-gu82m-y4fq8-xenon-project (npm) (malicious package) - [MAL-2025-37837](https://insights.sbomify.com/MAL-2025-37837/): Malicious code in unity-g2q7t-0r7ev-jewel-project (npm) (malicious package) - [MAL-2025-37836](https://insights.sbomify.com/MAL-2025-37836/): Malicious code in unity-aln22-ix8ry-fern-project (npm) (malicious package) - [MAL-2025-37835](https://insights.sbomify.com/MAL-2025-37835/): Malicious code in unity-9l2u9-9xiv1-fjord-project (npm) (malicious package) - [MAL-2025-37834](https://insights.sbomify.com/MAL-2025-37834/): Malicious code in unity-3h24g-akbo2-violet-project (npm) (malicious package) - [MAL-2025-37833](https://insights.sbomify.com/MAL-2025-37833/): Malicious code in unity-2d-youxi-kaifa-jiaocheng (npm) (malicious package) - [MAL-2025-37832](https://insights.sbomify.com/MAL-2025-37832/): Malicious code in unity-2944b-ttqcp-ripple-project (npm) (malicious package) - [MAL-2025-37831](https://insights.sbomify.com/MAL-2025-37831/): Malicious code in unity-24x1c-umms4-bison-project (npm) (malicious package) - [MAL-2025-37830](https://insights.sbomify.com/MAL-2025-37830/): Malicious code in unity-1io3h-sbvbf-wave-project (npm) (malicious package) - [MAL-2025-3783](https://insights.sbomify.com/MAL-2025-3783/): Malicious code in webpack-cli-4 (npm) (malicious package) - [MAL-2025-37829](https://insights.sbomify.com/MAL-2025-37829/): Malicious code in unitor (npm) (malicious package) - [MAL-2025-37828](https://insights.sbomify.com/MAL-2025-37828/): Malicious code in uniteapi (npm) (malicious package) - [MAL-2025-37827](https://insights.sbomify.com/MAL-2025-37827/): Malicious code in uniswap_connect (npm) (malicious package) - [MAL-2025-37826](https://insights.sbomify.com/MAL-2025-37826/): Malicious code in uniques (npm) (malicious package) - [MAL-2025-37825](https://insights.sbomify.com/MAL-2025-37825/): Malicious code in unique-now (npm) (malicious package) - [MAL-2025-37824](https://insights.sbomify.com/MAL-2025-37824/): Malicious code in unipika (npm) (malicious package) - [MAL-2025-37823](https://insights.sbomify.com/MAL-2025-37823/): Malicious code in unipen (npm) (malicious package) - [MAL-2025-37822](https://insights.sbomify.com/MAL-2025-37822/): Malicious code in unipedia (npm) (malicious package) - [MAL-2025-37821](https://insights.sbomify.com/MAL-2025-37821/): Malicious code in uninstall-redis-wormhole-quantumfoam (npm) (malicious package) - [MAL-2025-37820](https://insights.sbomify.com/MAL-2025-37820/): Malicious code in uninstall-impulse-pino-greatfilter (npm) (malicious package) - [MAL-2025-3782](https://insights.sbomify.com/MAL-2025-3782/): Malicious code in sw-cur1 (npm) (malicious package) - [MAL-2025-37819](https://insights.sbomify.com/MAL-2025-37819/): Malicious code in uninlua (npm) (malicious package) - [MAL-2025-37818](https://insights.sbomify.com/MAL-2025-37818/): Malicious code in uniform-zucchini-azor (npm) (malicious package) - [MAL-2025-37817](https://insights.sbomify.com/MAL-2025-37817/): Malicious code in uniform-yfh-project (npm) (malicious package) - [MAL-2025-37816](https://insights.sbomify.com/MAL-2025-37816/): Malicious code in uniform-yankee-cjzu (npm) (malicious package) - [MAL-2025-37815](https://insights.sbomify.com/MAL-2025-37815/): Malicious code in uniform-xray-xrql (npm) (malicious package) - [MAL-2025-37814](https://insights.sbomify.com/MAL-2025-37814/): Malicious code in uniform-wr0-project (npm) (malicious package) - [MAL-2025-37813](https://insights.sbomify.com/MAL-2025-37813/): Malicious code in uniform-whiskey-sierra-bwjgd (npm) (malicious package) - [MAL-2025-37812](https://insights.sbomify.com/MAL-2025-37812/): Malicious code in uniform-whiskey-giaw (npm) (malicious package) - [MAL-2025-37811](https://insights.sbomify.com/MAL-2025-37811/): Malicious code in uniform-watermelon-ycxh (npm) (malicious package) - [MAL-2025-37810](https://insights.sbomify.com/MAL-2025-37810/): Malicious code in uniform-victor-katx (npm) (malicious package) - [MAL-2025-3781](https://insights.sbomify.com/MAL-2025-3781/): Malicious code in sw-cur (npm) (malicious package) - [MAL-2025-37809](https://insights.sbomify.com/MAL-2025-37809/): Malicious code in uniform-uyh-project (npm) (malicious package) - [MAL-2025-37808](https://insights.sbomify.com/MAL-2025-37808/): Malicious code in uniform-ugli-ojjn (npm) (malicious package) - [MAL-2025-37807](https://insights.sbomify.com/MAL-2025-37807/): Malicious code in uniform-tango-orange-sodsf (npm) (malicious package) - [MAL-2025-37806](https://insights.sbomify.com/MAL-2025-37806/): Malicious code in uniform-tangerine-nzyi (npm) (malicious package) - [MAL-2025-37805](https://insights.sbomify.com/MAL-2025-37805/): Malicious code in uniform-strawberry-vkkc (npm) (malicious package) - [MAL-2025-37804](https://insights.sbomify.com/MAL-2025-37804/): Malicious code in uniform-ssj-project (npm) (malicious package) - [MAL-2025-37803](https://insights.sbomify.com/MAL-2025-37803/): Malicious code in uniform-shack-gm92 (npm) (malicious package) - [MAL-2025-37802](https://insights.sbomify.com/MAL-2025-37802/): Malicious code in uniform-s5i-project (npm) (malicious package) - [MAL-2025-37801](https://insights.sbomify.com/MAL-2025-37801/): Malicious code in uniform-rmt-project (npm) (malicious package) - [MAL-2025-37800](https://insights.sbomify.com/MAL-2025-37800/): Malicious code in uniform-raspberry-kilo-dgnyy (npm) (malicious package) - [MAL-2025-3780](https://insights.sbomify.com/MAL-2025-3780/): Malicious code in mockman-js-plugin (npm) (malicious package) - [MAL-2025-378](https://insights.sbomify.com/MAL-2025-378/): Malicious code in amazon-event (npm) (malicious package) - [MAL-2025-37799](https://insights.sbomify.com/MAL-2025-37799/): Malicious code in uniform-quebec-iuua (npm) (malicious package) - [MAL-2025-37798](https://insights.sbomify.com/MAL-2025-37798/): Malicious code in uniform-qgv-project (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/693/