# Vulnerabilities published in 2025 - [MAL-2025-37797](https://insights.sbomify.com/MAL-2025-37797/): Malicious code in uniform-papa-grape-pkmiq (npm) (malicious package) - [MAL-2025-37796](https://insights.sbomify.com/MAL-2025-37796/): Malicious code in uniform-o87-project (npm) (malicious package) - [MAL-2025-37795](https://insights.sbomify.com/MAL-2025-37795/): Malicious code in uniform-november-bravo-uxdix (npm) (malicious package) - [MAL-2025-37794](https://insights.sbomify.com/MAL-2025-37794/): Malicious code in uniform-mike-hpvp (npm) (malicious package) - [MAL-2025-37793](https://insights.sbomify.com/MAL-2025-37793/): Malicious code in uniform-lunar-1zo3 (npm) (malicious package) - [MAL-2025-37792](https://insights.sbomify.com/MAL-2025-37792/): Malicious code in uniform-lima-mango-ovmhh (npm) (malicious package) - [MAL-2025-37791](https://insights.sbomify.com/MAL-2025-37791/): Malicious code in uniform-lemon-date-jioqc (npm) (malicious package) - [MAL-2025-37790](https://insights.sbomify.com/MAL-2025-37790/): Malicious code in uniform-kiwi-tnjc (npm) (malicious package) - [MAL-2025-3779](https://insights.sbomify.com/MAL-2025-3779/): Malicious code in defi-wallet (npm) (malicious package) - [MAL-2025-37789](https://insights.sbomify.com/MAL-2025-37789/): Malicious code in uniform-imk-project (npm) (malicious package) - [MAL-2025-37788](https://insights.sbomify.com/MAL-2025-37788/): Malicious code in uniform-iceberg-scqf (npm) (malicious package) - [MAL-2025-37787](https://insights.sbomify.com/MAL-2025-37787/): Malicious code in uniform-gzv-project (npm) (malicious package) - [MAL-2025-37786](https://insights.sbomify.com/MAL-2025-37786/): Malicious code in uniform-gub-project (npm) (malicious package) - [MAL-2025-37785](https://insights.sbomify.com/MAL-2025-37785/): Malicious code in uniform-grape-botd (npm) (malicious package) - [MAL-2025-37784](https://insights.sbomify.com/MAL-2025-37784/): Malicious code in uniform-elephant-paz4 (npm) (malicious package) - [MAL-2025-37783](https://insights.sbomify.com/MAL-2025-37783/): Malicious code in uniform-echo-mooj (npm) (malicious package) - [MAL-2025-37782](https://insights.sbomify.com/MAL-2025-37782/): Malicious code in uniform-dwarf-ckiz (npm) (malicious package) - [MAL-2025-37781](https://insights.sbomify.com/MAL-2025-37781/): Malicious code in uniform-dvc-project (npm) (malicious package) - [MAL-2025-37780](https://insights.sbomify.com/MAL-2025-37780/): Malicious code in uniform-delta-sqvm (npm) (malicious package) - [MAL-2025-3778](https://insights.sbomify.com/MAL-2025-3778/): Malicious code in firefox-devtools (npm) (malicious package) - [MAL-2025-37779](https://insights.sbomify.com/MAL-2025-37779/): Malicious code in uniform-date-hotel-websn (npm) (malicious package) - [MAL-2025-37778](https://insights.sbomify.com/MAL-2025-37778/): Malicious code in uniform-cqz-project (npm) (malicious package) - [MAL-2025-37777](https://insights.sbomify.com/MAL-2025-37777/): Malicious code in uniform-cherry-ukvf (npm) (malicious package) - [MAL-2025-37776](https://insights.sbomify.com/MAL-2025-37776/): Malicious code in uniform-charlie-delta-xryel (npm) (malicious package) - [MAL-2025-37775](https://insights.sbomify.com/MAL-2025-37775/): Malicious code in uniform-bravo-july (npm) (malicious package) - [MAL-2025-37774](https://insights.sbomify.com/MAL-2025-37774/): Malicious code in uniform-alpha-aqdn (npm) (malicious package) - [MAL-2025-37773](https://insights.sbomify.com/MAL-2025-37773/): Malicious code in uniform-alb-project (npm) (malicious package) - [MAL-2025-37772](https://insights.sbomify.com/MAL-2025-37772/): Malicious code in uniform-9oj-project (npm) (malicious package) - [MAL-2025-37771](https://insights.sbomify.com/MAL-2025-37771/): Malicious code in uniform-5uv-project (npm) (malicious package) - [MAL-2025-37770](https://insights.sbomify.com/MAL-2025-37770/): Malicious code in uniform-4uz-project (npm) (malicious package) - [MAL-2025-3777](https://insights.sbomify.com/MAL-2025-3777/): Malicious code in zksync-root (npm) (malicious package) - [MAL-2025-37769](https://insights.sbomify.com/MAL-2025-37769/): Malicious code in unifiedverfserv (npm) (malicious package) - [MAL-2025-37768](https://insights.sbomify.com/MAL-2025-37768/): Malicious code in unified-shell-bootstrapper (npm) (malicious package) - [MAL-2025-37767](https://insights.sbomify.com/MAL-2025-37767/): Malicious code in unicorn_wcjfm_qtclh_echo (npm) (malicious package) - [MAL-2025-37766](https://insights.sbomify.com/MAL-2025-37766/): Malicious code in unicorn_t8yw4_0srk2_vista (npm) (malicious package) - [MAL-2025-37765](https://insights.sbomify.com/MAL-2025-37765/): Malicious code in unicorn_adventure (npm) (malicious package) - [MAL-2025-37764](https://insights.sbomify.com/MAL-2025-37764/): Malicious code in unicorn-zenith-jmw648-project (npm) (malicious package) - [MAL-2025-37763](https://insights.sbomify.com/MAL-2025-37763/): Malicious code in unicorn-yard-wgs627-project (npm) (malicious package) - [MAL-2025-37762](https://insights.sbomify.com/MAL-2025-37762/): Malicious code in unicorn-vkmpt-b5mk4-frost-project (npm) (malicious package) - [MAL-2025-37761](https://insights.sbomify.com/MAL-2025-37761/): Malicious code in unicorn-violet-xdm536-project (npm) (malicious package) - [MAL-2025-37760](https://insights.sbomify.com/MAL-2025-37760/): Malicious code in unicorn-v3sgp-gsyhr-radiance-project (npm) (malicious package) - [MAL-2025-3776](https://insights.sbomify.com/MAL-2025-3776/): Malicious code in wwemix-contract (npm) (malicious package) - [MAL-2025-37759](https://insights.sbomify.com/MAL-2025-37759/): Malicious code in unicorn-shopify (npm) (malicious package) - [MAL-2025-37758](https://insights.sbomify.com/MAL-2025-37758/): Malicious code in unicorn-reef-loj057-project (npm) (malicious package) - [MAL-2025-37757](https://insights.sbomify.com/MAL-2025-37757/): Malicious code in unicorn-penguin-lmi414-project (npm) (malicious package) - [MAL-2025-37756](https://insights.sbomify.com/MAL-2025-37756/): Malicious code in unicorn-pebble-ayr018-project (npm) (malicious package) - [MAL-2025-37755](https://insights.sbomify.com/MAL-2025-37755/): Malicious code in unicorn-paradise-nfu113-project (npm) (malicious package) - [MAL-2025-37754](https://insights.sbomify.com/MAL-2025-37754/): Malicious code in unicorn-mangrove-vnw978-project (npm) (malicious package) - [MAL-2025-37753](https://insights.sbomify.com/MAL-2025-37753/): Malicious code in unicorn-fjjjr-evjto-harmony-project (npm) (malicious package) - [MAL-2025-37752](https://insights.sbomify.com/MAL-2025-37752/): Malicious code in unicorn-falcon-lwt424-project (npm) (malicious package) - [MAL-2025-37751](https://insights.sbomify.com/MAL-2025-37751/): Malicious code in unicorn-emerald-pfz705-project (npm) (malicious package) - [MAL-2025-37750](https://insights.sbomify.com/MAL-2025-37750/): Malicious code in unicorn-cloud-vvv674-project (npm) (malicious package) - [MAL-2025-3775](https://insights.sbomify.com/MAL-2025-3775/): Malicious code in voting-client-js (npm) (malicious package) - [MAL-2025-37749](https://insights.sbomify.com/MAL-2025-37749/): Malicious code in unicorn-boulder-quw837-project (npm) (malicious package) - [MAL-2025-37748](https://insights.sbomify.com/MAL-2025-37748/): Malicious code in unicorn-bisda-9270v-zen-project (npm) (malicious package) - [MAL-2025-37747](https://insights.sbomify.com/MAL-2025-37747/): Malicious code in unicorn-5o0wt-dbtzy-terra-project (npm) (malicious package) - [MAL-2025-37746](https://insights.sbomify.com/MAL-2025-37746/): Malicious code in unicorn-5exuw-uq4h2-serenity-project (npm) (malicious package) - [MAL-2025-37745](https://insights.sbomify.com/MAL-2025-37745/): Malicious code in unicorefx (npm) (malicious package) - [MAL-2025-37744](https://insights.sbomify.com/MAL-2025-37744/): Malicious code in unicloak (npm) (malicious package) - [MAL-2025-37743](https://insights.sbomify.com/MAL-2025-37743/): Malicious code in uniceq (npm) (malicious package) - [MAL-2025-37742](https://insights.sbomify.com/MAL-2025-37742/): Malicious code in unicache (npm) (malicious package) - [MAL-2025-37741](https://insights.sbomify.com/MAL-2025-37741/): Malicious code in uni-help (npm) (malicious package) - [MAL-2025-37740](https://insights.sbomify.com/MAL-2025-37740/): Malicious code in unfancy (npm) (malicious package) - [MAL-2025-3774](https://insights.sbomify.com/MAL-2025-3774/): Malicious code in vojislav-web3-utils (npm) (malicious package) - [MAL-2025-37739](https://insights.sbomify.com/MAL-2025-37739/): Malicious code in undream-analytics (npm) (malicious package) - [MAL-2025-37738](https://insights.sbomify.com/MAL-2025-37738/): Malicious code in undesrcore (npm) (malicious package) - [MAL-2025-37737](https://insights.sbomify.com/MAL-2025-37737/): Malicious code in underworld_tbrgd_e1bcj_rainbow (npm) (malicious package) - [MAL-2025-37736](https://insights.sbomify.com/MAL-2025-37736/): Malicious code in underworld_oul9b_c3gjb_obsidian (npm) (malicious package) - [MAL-2025-37735](https://insights.sbomify.com/MAL-2025-37735/): Malicious code in underworld_kcc65_yujx4_yacht (npm) (malicious package) - [MAL-2025-37734](https://insights.sbomify.com/MAL-2025-37734/): Malicious code in underworld_i9kj5_74zgc_ultraviolet (npm) (malicious package) - [MAL-2025-37733](https://insights.sbomify.com/MAL-2025-37733/): Malicious code in underworld_chsls_81ly2_ember (npm) (malicious package) - [MAL-2025-37732](https://insights.sbomify.com/MAL-2025-37732/): Malicious code in underworld_6n0gq_tkm5m_iris (npm) (malicious package) - [MAL-2025-37731](https://insights.sbomify.com/MAL-2025-37731/): Malicious code in underworld_5fnj1_fldh0_lullaby (npm) (malicious package) - [MAL-2025-37730](https://insights.sbomify.com/MAL-2025-37730/): Malicious code in undertow_ma5vr_hp1fp_iris (npm) (malicious package) - [MAL-2025-3773](https://insights.sbomify.com/MAL-2025-3773/): Malicious code in util-buffers (npm) (malicious package) - [MAL-2025-37729](https://insights.sbomify.com/MAL-2025-37729/): Malicious code in undertow_fpe5b_glub1_verdant (npm) (malicious package) - [MAL-2025-37728](https://insights.sbomify.com/MAL-2025-37728/): Malicious code in undertow-violet-eyd299-project (npm) (malicious package) - [MAL-2025-37727](https://insights.sbomify.com/MAL-2025-37727/): Malicious code in undertow-umbrella-scu465-project (npm) (malicious package) - [MAL-2025-37726](https://insights.sbomify.com/MAL-2025-37726/): Malicious code in undertow-tornado-hee230-project (npm) (malicious package) - [MAL-2025-37725](https://insights.sbomify.com/MAL-2025-37725/): Malicious code in undertow-mangrove-sye608-project (npm) (malicious package) - [MAL-2025-37724](https://insights.sbomify.com/MAL-2025-37724/): Malicious code in undertow-honeycomb-peb878-project (npm) (malicious package) - [MAL-2025-37723](https://insights.sbomify.com/MAL-2025-37723/): Malicious code in undertow-falcon-dbg379-project (npm) (malicious package) - [MAL-2025-37722](https://insights.sbomify.com/MAL-2025-37722/): Malicious code in undertow-amber-tpr741-project (npm) (malicious package) - [MAL-2025-37721](https://insights.sbomify.com/MAL-2025-37721/): Malicious code in understory-editor (npm) (malicious package) - [MAL-2025-37720](https://insights.sbomify.com/MAL-2025-37720/): Malicious code in underscroe (npm) (malicious package) - [MAL-2025-3772](https://insights.sbomify.com/MAL-2025-3772/): Malicious code in snake_case_name (npm) (malicious package) - [MAL-2025-37719](https://insights.sbomify.com/MAL-2025-37719/): Malicious code in underpass-yearling-hgvn (npm) (malicious package) - [MAL-2025-37718](https://insights.sbomify.com/MAL-2025-37718/): Malicious code in underpass-tangerine-p4lt (npm) (malicious package) - [MAL-2025-37717](https://insights.sbomify.com/MAL-2025-37717/): Malicious code in underpass-supernova-76yr (npm) (malicious package) - [MAL-2025-37716](https://insights.sbomify.com/MAL-2025-37716/): Malicious code in undead-browser (npm) (malicious package) - [MAL-2025-37715](https://insights.sbomify.com/MAL-2025-37715/): Malicious code in uncongini (npm) (malicious package) - [MAL-2025-37714](https://insights.sbomify.com/MAL-2025-37714/): Malicious code in unclear (npm) (malicious package) - [MAL-2025-37713](https://insights.sbomify.com/MAL-2025-37713/): Malicious code in unarist (npm) (malicious package) - [MAL-2025-37712](https://insights.sbomify.com/MAL-2025-37712/): Malicious code in unaghvkswmcrefzq (npm) (malicious package) - [MAL-2025-37711](https://insights.sbomify.com/MAL-2025-37711/): Malicious code in umledit (npm) (malicious package) - [MAL-2025-37710](https://insights.sbomify.com/MAL-2025-37710/): Malicious code in umlang (npm) (malicious package) - [MAL-2025-3771](https://insights.sbomify.com/MAL-2025-3771/): Malicious code in rei-breakpoint-detector (npm) (malicious package) - [MAL-2025-37709](https://insights.sbomify.com/MAL-2025-37709/): Malicious code in umi-keraktelor62-breki (npm) (malicious package) - [MAL-2025-37708](https://insights.sbomify.com/MAL-2025-37708/): Malicious code in umeshrepo (npm) (malicious package) - [MAL-2025-37707](https://insights.sbomify.com/MAL-2025-37707/): Malicious code in umbriel-triton-prettier-plugin-markdown-xml (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/694/