# Vulnerabilities published in 2025


- [MAL-2025-37706](https://insights.sbomify.com/MAL-2025-37706/): Malicious code in umbriel-sequelize-tool-browserify (npm) (malicious package)
- [MAL-2025-37705](https://insights.sbomify.com/MAL-2025-37705/): Malicious code in umbriel-quantum-dagda-mui (npm) (malicious package)
- [MAL-2025-37704](https://insights.sbomify.com/MAL-2025-37704/): Malicious code in umbriel-pegasus-install-borealis (npm) (malicious package)
- [MAL-2025-37703](https://insights.sbomify.com/MAL-2025-37703/): Malicious code in umbriel-hermes-socketio-sqlite (npm) (malicious package)
- [MAL-2025-37702](https://insights.sbomify.com/MAL-2025-37702/): Malicious code in umbriel-ceres-elara-global (npm) (malicious package)
- [MAL-2025-37701](https://insights.sbomify.com/MAL-2025-37701/): Malicious code in umbriel-centauri-electron-builder-avior (npm) (malicious package)
- [MAL-2025-37700](https://insights.sbomify.com/MAL-2025-37700/): Malicious code in umbrella-yurt-eioq (npm) (malicious package)
- [MAL-2025-3770](https://insights.sbomify.com/MAL-2025-3770/): Malicious code in nimiq-supply-calculator (npm) (malicious package)
- [MAL-2025-377](https://insights.sbomify.com/MAL-2025-377/): Malicious code in amazon-db (npm) (malicious package)
- [MAL-2025-37699](https://insights.sbomify.com/MAL-2025-37699/): Malicious code in umbrella-yawn-fmz623-project (npm) (malicious package)
- [MAL-2025-37698](https://insights.sbomify.com/MAL-2025-37698/): Malicious code in umbrella-yam-pab2 (npm) (malicious package)
- [MAL-2025-37697](https://insights.sbomify.com/MAL-2025-37697/): Malicious code in umbrella-xerus-tzt825-project (npm) (malicious package)
- [MAL-2025-37696](https://insights.sbomify.com/MAL-2025-37696/): Malicious code in umbrella-xerox-dyr879-project (npm) (malicious package)
- [MAL-2025-37695](https://insights.sbomify.com/MAL-2025-37695/): Malicious code in umbrella-xerophyte-q944 (npm) (malicious package)
- [MAL-2025-37694](https://insights.sbomify.com/MAL-2025-37694/): Malicious code in umbrella-vulture-ezv609-project (npm) (malicious package)
- [MAL-2025-37693](https://insights.sbomify.com/MAL-2025-37693/): Malicious code in umbrella-volcano-sam037-project (npm) (malicious package)
- [MAL-2025-37692](https://insights.sbomify.com/MAL-2025-37692/): Malicious code in umbrella-turnip-eaes (npm) (malicious package)
- [MAL-2025-37691](https://insights.sbomify.com/MAL-2025-37691/): Malicious code in umbrella-turnip-4khu (npm) (malicious package)
- [MAL-2025-37690](https://insights.sbomify.com/MAL-2025-37690/): Malicious code in umbrella-tide-rze109-project (npm) (malicious package)
- [MAL-2025-3769](https://insights.sbomify.com/MAL-2025-3769/): Malicious code in next.js-localized (npm) (malicious package)
- [MAL-2025-37689](https://insights.sbomify.com/MAL-2025-37689/): Malicious code in umbrella-nutmeg-hi2e (npm) (malicious package)
- [MAL-2025-37688](https://insights.sbomify.com/MAL-2025-37688/): Malicious code in umbrella-nimbus-kes356-project (npm) (malicious package)
- [MAL-2025-37687](https://insights.sbomify.com/MAL-2025-37687/): Malicious code in umbrella-koala-oqn973-project (npm) (malicious package)
- [MAL-2025-37686](https://insights.sbomify.com/MAL-2025-37686/): Malicious code in umbrella-kapok-dl1a (npm) (malicious package)
- [MAL-2025-37685](https://insights.sbomify.com/MAL-2025-37685/): Malicious code in umbrella-igloo-9g9f (npm) (malicious package)
- [MAL-2025-37684](https://insights.sbomify.com/MAL-2025-37684/): Malicious code in umbrella-foxtrot-ul8q (npm) (malicious package)
- [MAL-2025-37683](https://insights.sbomify.com/MAL-2025-37683/): Malicious code in umbrella-evergreen-y626 (npm) (malicious package)
- [MAL-2025-37682](https://insights.sbomify.com/MAL-2025-37682/): Malicious code in umbrella-eagle-f1te (npm) (malicious package)
- [MAL-2025-37681](https://insights.sbomify.com/MAL-2025-37681/): Malicious code in umbrella-drone-ie7e (npm) (malicious package)
- [MAL-2025-37680](https://insights.sbomify.com/MAL-2025-37680/): Malicious code in umbrella-dandelion-qqh943-project (npm) (malicious package)
- [MAL-2025-3768](https://insights.sbomify.com/MAL-2025-3768/): Malicious code in mag-client (npm) (malicious package)
- [MAL-2025-37679](https://insights.sbomify.com/MAL-2025-37679/): Malicious code in umbrella-conifer-vgl2 (npm) (malicious package)
- [MAL-2025-37678](https://insights.sbomify.com/MAL-2025-37678/): Malicious code in umbrella-bridge-ni8q (npm) (malicious package)
- [MAL-2025-37677](https://insights.sbomify.com/MAL-2025-37677/): Malicious code in umbrella-beetroot-5gwn (npm) (malicious package)
- [MAL-2025-37676](https://insights.sbomify.com/MAL-2025-37676/): Malicious code in umbrella-asteroid-59en (npm) (malicious package)
- [MAL-2025-37675](https://insights.sbomify.com/MAL-2025-37675/): Malicious code in umbrella-apple-oeht (npm) (malicious package)
- [MAL-2025-37674](https://insights.sbomify.com/MAL-2025-37674/): Malicious code in umbrella-amber-bqm977-project (npm) (malicious package)
- [MAL-2025-37673](https://insights.sbomify.com/MAL-2025-37673/): Malicious code in umbra-zucchini-vytp (npm) (malicious package)
- [MAL-2025-37672](https://insights.sbomify.com/MAL-2025-37672/): Malicious code in umbra-yellow-lhe523-project (npm) (malicious package)
- [MAL-2025-37671](https://insights.sbomify.com/MAL-2025-37671/): Malicious code in umbra-xenos-altair-xenos (npm) (malicious package)
- [MAL-2025-37670](https://insights.sbomify.com/MAL-2025-37670/): Malicious code in umbra-titan-4qle (npm) (malicious package)
- [MAL-2025-3767](https://insights.sbomify.com/MAL-2025-3767/): Malicious code in lavanew (npm) (malicious package)
- [MAL-2025-37669](https://insights.sbomify.com/MAL-2025-37669/): Malicious code in umbra-tide-ehe932-project (npm) (malicious package)
- [MAL-2025-37668](https://insights.sbomify.com/MAL-2025-37668/): Malicious code in umbra-thistle-uvv683-project (npm) (malicious package)
- [MAL-2025-37667](https://insights.sbomify.com/MAL-2025-37667/): Malicious code in umbra-saturnology-build-elara (npm) (malicious package)
- [MAL-2025-37666](https://insights.sbomify.com/MAL-2025-37666/): Malicious code in umbra-pebble-xsn422-project (npm) (malicious package)
- [MAL-2025-37665](https://insights.sbomify.com/MAL-2025-37665/): Malicious code in umbra-orchid-occ022-project (npm) (malicious package)
- [MAL-2025-37664](https://insights.sbomify.com/MAL-2025-37664/): Malicious code in umbra-opal-sci552-project (npm) (malicious package)
- [MAL-2025-37663](https://insights.sbomify.com/MAL-2025-37663/): Malicious code in umbra-nocturne-pli150-project (npm) (malicious package)
- [MAL-2025-37662](https://insights.sbomify.com/MAL-2025-37662/): Malicious code in umbra-lima-vgr3 (npm) (malicious package)
- [MAL-2025-37661](https://insights.sbomify.com/MAL-2025-37661/): Malicious code in umbra-less-loader-tachyon-hermes (npm) (malicious package)
- [MAL-2025-37660](https://insights.sbomify.com/MAL-2025-37660/): Malicious code in umbra-kale-uvq988-project (npm) (malicious package)
- [MAL-2025-3766](https://insights.sbomify.com/MAL-2025-3766/): Malicious code in just-a-cute-script (npm) (malicious package)
- [MAL-2025-37659](https://insights.sbomify.com/MAL-2025-37659/): Malicious code in umbra-jasmine-jws860-project (npm) (malicious package)
- [MAL-2025-37658](https://insights.sbomify.com/MAL-2025-37658/): Malicious code in umbra-ginkgo-onz4 (npm) (malicious package)
- [MAL-2025-37657](https://insights.sbomify.com/MAL-2025-37657/): Malicious code in umbra-dotenv-areology-stratigraphy (npm) (malicious package)
- [MAL-2025-37656](https://insights.sbomify.com/MAL-2025-37656/): Malicious code in umbra-dolphin-xjp981-project (npm) (malicious package)
- [MAL-2025-37655](https://insights.sbomify.com/MAL-2025-37655/): Malicious code in umbra-cherry-f9yu (npm) (malicious package)
- [MAL-2025-37654](https://insights.sbomify.com/MAL-2025-37654/): Malicious code in umbra-caravan-whu868-project (npm) (malicious package)
- [MAL-2025-37653](https://insights.sbomify.com/MAL-2025-37653/): Malicious code in umbra-butterfly-wzq391-project (npm) (malicious package)
- [MAL-2025-37652](https://insights.sbomify.com/MAL-2025-37652/): Malicious code in umbra-ant-oxx111-project (npm) (malicious package)
- [MAL-2025-37651](https://insights.sbomify.com/MAL-2025-37651/): Malicious code in umbra-amber-nai787-project (npm) (malicious package)
- [MAL-2025-37650](https://insights.sbomify.com/MAL-2025-37650/): Malicious code in umbra-acorn-idt055-project (npm) (malicious package)
- [MAL-2025-3765](https://insights.sbomify.com/MAL-2025-3765/): Malicious code in harvest-strategy (npm) (malicious package)
- [MAL-2025-37649](https://insights.sbomify.com/MAL-2025-37649/): Malicious code in umazlizer (npm) (malicious package)
- [MAL-2025-37648](https://insights.sbomify.com/MAL-2025-37648/): Malicious code in umaskd (npm) (malicious package)
- [MAL-2025-37647](https://insights.sbomify.com/MAL-2025-37647/): Malicious code in umammoth (npm) (malicious package)
- [MAL-2025-37646](https://insights.sbomify.com/MAL-2025-37646/): Malicious code in ultraviolet_z9rdc_3z998_sapphire (npm) (malicious package)
- [MAL-2025-37645](https://insights.sbomify.com/MAL-2025-37645/): Malicious code in ultraviolet_upu6y_s5pdm_crystal (npm) (malicious package)
- [MAL-2025-37644](https://insights.sbomify.com/MAL-2025-37644/): Malicious code in ultraviolet_tiuvu_ce8co_legend (npm) (malicious package)
- [MAL-2025-37643](https://insights.sbomify.com/MAL-2025-37643/): Malicious code in ultraviolet_kpjvk_e59nj_nova (npm) (malicious package)
- [MAL-2025-37642](https://insights.sbomify.com/MAL-2025-37642/): Malicious code in ultraviolet_jmv6n_kii83_utopia (npm) (malicious package)
- [MAL-2025-37641](https://insights.sbomify.com/MAL-2025-37641/): Malicious code in ultraviolet_grl5d_zo4eb_karma (npm) (malicious package)
- [MAL-2025-37640](https://insights.sbomify.com/MAL-2025-37640/): Malicious code in ultraviolet_ehj38_cszq8_prairie (npm) (malicious package)
- [MAL-2025-3764](https://insights.sbomify.com/MAL-2025-3764/): Malicious code in ghosts3c (npm) (malicious package)
- [MAL-2025-37639](https://insights.sbomify.com/MAL-2025-37639/): Malicious code in ultraprop (npm) (malicious package)
- [MAL-2025-37638](https://insights.sbomify.com/MAL-2025-37638/): Malicious code in ultra-w58rs-aco8p-orbit-project (npm) (malicious package)
- [MAL-2025-37637](https://insights.sbomify.com/MAL-2025-37637/): Malicious code in ultra-tool-kit (npm) (malicious package)
- [MAL-2025-37636](https://insights.sbomify.com/MAL-2025-37636/): Malicious code in ultra-remark-protoplanetarydisk-genomics (npm) (malicious package)
- [MAL-2025-37635](https://insights.sbomify.com/MAL-2025-37635/): Malicious code in ultra-q08e5-bo2a4-yeti-project (npm) (malicious package)
- [MAL-2025-37634](https://insights.sbomify.com/MAL-2025-37634/): Malicious code in ultra-nanotechnology-taphonomy-foundation (npm) (malicious package)
- [MAL-2025-37633](https://insights.sbomify.com/MAL-2025-37633/): Malicious code in ultra-interstellarmedium-planckscale-vuepress (npm) (malicious package)
- [MAL-2025-37632](https://insights.sbomify.com/MAL-2025-37632/): Malicious code in ultra-eveoe-4l039-spark-project (npm) (malicious package)
- [MAL-2025-37631](https://insights.sbomify.com/MAL-2025-37631/): Malicious code in ultra-euvre-84yvv-opal-project (npm) (malicious package)
- [MAL-2025-37630](https://insights.sbomify.com/MAL-2025-37630/): Malicious code in ultra-bueej-gc5os-emerald-project (npm) (malicious package)
- [MAL-2025-3763](https://insights.sbomify.com/MAL-2025-3763/): Malicious code in frame-minter-contracts (npm) (malicious package)
- [MAL-2025-37629](https://insights.sbomify.com/MAL-2025-37629/): Malicious code in ultra-alphard-astrochemistry-rocket (npm) (malicious package)
- [MAL-2025-37628](https://insights.sbomify.com/MAL-2025-37628/): Malicious code in ultra-921wf-d7jmt-echo-project (npm) (malicious package)
- [MAL-2025-37627](https://insights.sbomify.com/MAL-2025-37627/): Malicious code in ultra-8bsn1-im7ho-zenith-project (npm) (malicious package)
- [MAL-2025-37626](https://insights.sbomify.com/MAL-2025-37626/): Malicious code in ultra-74lo0-i4i7n-moondust-project (npm) (malicious package)
- [MAL-2025-37625](https://insights.sbomify.com/MAL-2025-37625/): Malicious code in ultra-5jv5g-3lzb2-glacier-project (npm) (malicious package)
- [MAL-2025-37624](https://insights.sbomify.com/MAL-2025-37624/): Malicious code in ultra-3y2fn-ijwom-emerald-project (npm) (malicious package)
- [MAL-2025-37623](https://insights.sbomify.com/MAL-2025-37623/): Malicious code in ultimate-member-extended (npm) (malicious package)
- [MAL-2025-37622](https://insights.sbomify.com/MAL-2025-37622/): Malicious code in ulster (npm) (malicious package)
- [MAL-2025-37621](https://insights.sbomify.com/MAL-2025-37621/): Malicious code in ulocal (npm) (malicious package)
- [MAL-2025-37620](https://insights.sbomify.com/MAL-2025-37620/): Malicious code in ul_portal_components (npm) (malicious package)
- [MAL-2025-3762](https://insights.sbomify.com/MAL-2025-3762/): Malicious code in digitalexp-generic-action-executor-base-module (npm) (malicious package)
- [MAL-2025-37619](https://insights.sbomify.com/MAL-2025-37619/): Malicious code in ukuleled (npm) (malicious package)
- [MAL-2025-37618](https://insights.sbomify.com/MAL-2025-37618/): Malicious code in uktoigyvxpldwhrf (npm) (malicious package)
- [MAL-2025-37617](https://insights.sbomify.com/MAL-2025-37617/): Malicious code in ukit (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/695/