# Vulnerabilities published in 2025 - [MAL-2025-37616](https://insights.sbomify.com/MAL-2025-37616/): Malicious code in ukerng (npm) (malicious package) - [MAL-2025-37615](https://insights.sbomify.com/MAL-2025-37615/): Malicious code in ukcasino (npm) (malicious package) - [MAL-2025-37614](https://insights.sbomify.com/MAL-2025-37614/): Malicious code in ujet-processor-manager (npm) (malicious package) - [MAL-2025-37613](https://insights.sbomify.com/MAL-2025-37613/): Malicious code in uj8ez1 (npm) (malicious package) - [MAL-2025-37612](https://insights.sbomify.com/MAL-2025-37612/): Malicious code in uitstock (npm) (malicious package) - [MAL-2025-37611](https://insights.sbomify.com/MAL-2025-37611/): Malicious code in uitleen (npm) (malicious package) - [MAL-2025-37610](https://insights.sbomify.com/MAL-2025-37610/): Malicious code in uisomaker (npm) (malicious package) - [MAL-2025-3761](https://insights.sbomify.com/MAL-2025-3761/): Malicious code in dforce-staking-v2 (npm) (malicious package) - [MAL-2025-37609](https://insights.sbomify.com/MAL-2025-37609/): Malicious code in uintbn-validator (npm) (malicious package) - [MAL-2025-37608](https://insights.sbomify.com/MAL-2025-37608/): Malicious code in uinsport (npm) (malicious package) - [MAL-2025-37607](https://insights.sbomify.com/MAL-2025-37607/): Malicious code in uim-web-sdk (npm) (malicious package) - [MAL-2025-37606](https://insights.sbomify.com/MAL-2025-37606/): Malicious code in uiknvqelzogpkdxh (npm) (malicious package) - [MAL-2025-37605](https://insights.sbomify.com/MAL-2025-37605/): Malicious code in uikl (npm) (malicious package) - [MAL-2025-37604](https://insights.sbomify.com/MAL-2025-37604/): Malicious code in uidk-ng-1x-translation (npm) (malicious package) - [MAL-2025-37603](https://insights.sbomify.com/MAL-2025-37603/): Malicious code in ui_test_automation (npm) (malicious package) - [MAL-2025-37602](https://insights.sbomify.com/MAL-2025-37602/): Malicious code in ui_client (npm) (malicious package) - [MAL-2025-37601](https://insights.sbomify.com/MAL-2025-37601/): Malicious code in ui_assets (npm) (malicious package) - [MAL-2025-37600](https://insights.sbomify.com/MAL-2025-37600/): Malicious code in ui5-mobx-state-tree (npm) (malicious package) - [MAL-2025-3760](https://insights.sbomify.com/MAL-2025-3760/): Malicious code in dependencyconfusion6 (npm) (malicious package) - [MAL-2025-376](https://insights.sbomify.com/MAL-2025-376/): Malicious code in amazon-database (npm) (malicious package) - [MAL-2025-37599](https://insights.sbomify.com/MAL-2025-37599/): Malicious code in ui-testing (npm) (malicious package) - [MAL-2025-37598](https://insights.sbomify.com/MAL-2025-37598/): Malicious code in ui-select-infinity-master (npm) (malicious package) - [MAL-2025-37597](https://insights.sbomify.com/MAL-2025-37597/): Malicious code in ui-scrollfix (npm) (malicious package) - [MAL-2025-37596](https://insights.sbomify.com/MAL-2025-37596/): Malicious code in ui-ngx-i18 (npm) (malicious package) - [MAL-2025-37595](https://insights.sbomify.com/MAL-2025-37595/): Malicious code in ui-lightning-components (npm) (malicious package) - [MAL-2025-37594](https://insights.sbomify.com/MAL-2025-37594/): Malicious code in ui-fields (npm) (malicious package) - [MAL-2025-37593](https://insights.sbomify.com/MAL-2025-37593/): Malicious code in ui-extensions-react (npm) (malicious package) - [MAL-2025-37592](https://insights.sbomify.com/MAL-2025-37592/): Malicious code in ui-extensions-internal-test (npm) (malicious package) - [MAL-2025-37591](https://insights.sbomify.com/MAL-2025-37591/): Malicious code in ui-advert-manager (npm) (malicious package) - [MAL-2025-37590](https://insights.sbomify.com/MAL-2025-37590/): Malicious code in ui-ad-marketplace (npm) (malicious package) - [MAL-2025-3759](https://insights.sbomify.com/MAL-2025-3759/): Malicious code in defisaver-v3-contracts (npm) (malicious package) - [MAL-2025-37589](https://insights.sbomify.com/MAL-2025-37589/): Malicious code in uherbst (npm) (malicious package) - [MAL-2025-37588](https://insights.sbomify.com/MAL-2025-37588/): Malicious code in uglyfi.js (npm) (malicious package) - [MAL-2025-37587](https://insights.sbomify.com/MAL-2025-37587/): Malicious code in uglyfi-js (npm) (malicious package) - [MAL-2025-37586](https://insights.sbomify.com/MAL-2025-37586/): Malicious code in uglifying (npm) (malicious package) - [MAL-2025-37585](https://insights.sbomify.com/MAL-2025-37585/): Malicious code in uglify-validate-daemon-emulate-module (npm) (malicious package) - [MAL-2025-37584](https://insights.sbomify.com/MAL-2025-37584/): Malicious code in uglify-js-pipe-transform-lightyear (npm) (malicious package) - [MAL-2025-37583](https://insights.sbomify.com/MAL-2025-37583/): Malicious code in uglify-js-paleomagnetism-saturnology-xenobiology (npm) (malicious package) - [MAL-2025-37582](https://insights.sbomify.com/MAL-2025-37582/): Malicious code in uglify-js-lint-cosmochemistry-publish (npm) (malicious package) - [MAL-2025-37581](https://insights.sbomify.com/MAL-2025-37581/): Malicious code in uglify-js-google-rimraf-panspermia (npm) (malicious package) - [MAL-2025-37580](https://insights.sbomify.com/MAL-2025-37580/): Malicious code in uglify-debug-key-query-refactor (npm) (malicious package) - [MAL-2025-3758](https://insights.sbomify.com/MAL-2025-3758/): Malicious code in coinpayments-api (npm) (malicious package) - [MAL-2025-37579](https://insights.sbomify.com/MAL-2025-37579/): Malicious code in ugli-zulu-swzb (npm) (malicious package) - [MAL-2025-37578](https://insights.sbomify.com/MAL-2025-37578/): Malicious code in ugli-zucchini-sjmk (npm) (malicious package) - [MAL-2025-37577](https://insights.sbomify.com/MAL-2025-37577/): Malicious code in ugli-zest-7w3p (npm) (malicious package) - [MAL-2025-37576](https://insights.sbomify.com/MAL-2025-37576/): Malicious code in ugli-z8f-project (npm) (malicious package) - [MAL-2025-37575](https://insights.sbomify.com/MAL-2025-37575/): Malicious code in ugli-yankee-riay (npm) (malicious package) - [MAL-2025-37574](https://insights.sbomify.com/MAL-2025-37574/): Malicious code in ugli-yankee-banana-tarkw (npm) (malicious package) - [MAL-2025-37573](https://insights.sbomify.com/MAL-2025-37573/): Malicious code in ugli-xys-project (npm) (malicious package) - [MAL-2025-37572](https://insights.sbomify.com/MAL-2025-37572/): Malicious code in ugli-xray-golf-yhenj (npm) (malicious package) - [MAL-2025-37571](https://insights.sbomify.com/MAL-2025-37571/): Malicious code in ugli-xigua-grape-ivufx (npm) (malicious package) - [MAL-2025-37570](https://insights.sbomify.com/MAL-2025-37570/): Malicious code in ugli-xao-project (npm) (malicious package) - [MAL-2025-3757](https://insights.sbomify.com/MAL-2025-3757/): Malicious code in backstage-plugin-kubernetes-backend (npm) (malicious package) - [MAL-2025-37569](https://insights.sbomify.com/MAL-2025-37569/): Malicious code in ugli-wormhole-0hyh (npm) (malicious package) - [MAL-2025-37568](https://insights.sbomify.com/MAL-2025-37568/): Malicious code in ugli-wcg-project (npm) (malicious package) - [MAL-2025-37567](https://insights.sbomify.com/MAL-2025-37567/): Malicious code in ugli-watermelon-mkco (npm) (malicious package) - [MAL-2025-37566](https://insights.sbomify.com/MAL-2025-37566/): Malicious code in ugli-ubo-project (npm) (malicious package) - [MAL-2025-37565](https://insights.sbomify.com/MAL-2025-37565/): Malicious code in ugli-ts8-project (npm) (malicious package) - [MAL-2025-37564](https://insights.sbomify.com/MAL-2025-37564/): Malicious code in ugli-tangerine-qvwg (npm) (malicious package) - [MAL-2025-37563](https://insights.sbomify.com/MAL-2025-37563/): Malicious code in ugli-tangerine-audd (npm) (malicious package) - [MAL-2025-37562](https://insights.sbomify.com/MAL-2025-37562/): Malicious code in ugli-t1f-project (npm) (malicious package) - [MAL-2025-37561](https://insights.sbomify.com/MAL-2025-37561/): Malicious code in ugli-smy-project (npm) (malicious package) - [MAL-2025-37560](https://insights.sbomify.com/MAL-2025-37560/): Malicious code in ugli-rs4-project (npm) (malicious package) - [MAL-2025-3756](https://insights.sbomify.com/MAL-2025-3756/): Malicious code in astro-scripts (npm) (malicious package) - [MAL-2025-37559](https://insights.sbomify.com/MAL-2025-37559/): Malicious code in ugli-romeo-lisa (npm) (malicious package) - [MAL-2025-37558](https://insights.sbomify.com/MAL-2025-37558/): Malicious code in ugli-papaya-xigua-mxzjp (npm) (malicious package) - [MAL-2025-37557](https://insights.sbomify.com/MAL-2025-37557/): Malicious code in ugli-orange-kiwi-znnve (npm) (malicious package) - [MAL-2025-37556](https://insights.sbomify.com/MAL-2025-37556/): Malicious code in ugli-oev-project (npm) (malicious package) - [MAL-2025-37555](https://insights.sbomify.com/MAL-2025-37555/): Malicious code in ugli-nzj-project (npm) (malicious package) - [MAL-2025-37554](https://insights.sbomify.com/MAL-2025-37554/): Malicious code in ugli-nkf-project (npm) (malicious package) - [MAL-2025-37553](https://insights.sbomify.com/MAL-2025-37553/): Malicious code in ugli-nectarine-apple-eswfe (npm) (malicious package) - [MAL-2025-37552](https://insights.sbomify.com/MAL-2025-37552/): Malicious code in ugli-n8h-project (npm) (malicious package) - [MAL-2025-37551](https://insights.sbomify.com/MAL-2025-37551/): Malicious code in ugli-mike-kilo-yvlls (npm) (malicious package) - [MAL-2025-37550](https://insights.sbomify.com/MAL-2025-37550/): Malicious code in ugli-kilo-banana-igdav (npm) (malicious package) - [MAL-2025-3755](https://insights.sbomify.com/MAL-2025-3755/): Malicious code in abuse-ui-internal (npm) (malicious package) - [MAL-2025-37549](https://insights.sbomify.com/MAL-2025-37549/): Malicious code in ugli-juliet-echo-gtonq (npm) (malicious package) - [MAL-2025-37548](https://insights.sbomify.com/MAL-2025-37548/): Malicious code in ugli-jir-project (npm) (malicious package) - [MAL-2025-37547](https://insights.sbomify.com/MAL-2025-37547/): Malicious code in ugli-ivy-uio6 (npm) (malicious package) - [MAL-2025-37546](https://insights.sbomify.com/MAL-2025-37546/): Malicious code in ugli-ivy-gndg (npm) (malicious package) - [MAL-2025-37545](https://insights.sbomify.com/MAL-2025-37545/): Malicious code in ugli-india-mike-hmqla (npm) (malicious package) - [MAL-2025-37544](https://insights.sbomify.com/MAL-2025-37544/): Malicious code in ugli-ien-project (npm) (malicious package) - [MAL-2025-37543](https://insights.sbomify.com/MAL-2025-37543/): Malicious code in ugli-hotel-november-flssy (npm) (malicious package) - [MAL-2025-37542](https://insights.sbomify.com/MAL-2025-37542/): Malicious code in ugli-hotel-mhoh (npm) (malicious package) - [MAL-2025-37541](https://insights.sbomify.com/MAL-2025-37541/): Malicious code in ugli-foxtrot-urni (npm) (malicious package) - [MAL-2025-37540](https://insights.sbomify.com/MAL-2025-37540/): Malicious code in ugli-fig-xxhq (npm) (malicious package) - [MAL-2025-37539](https://insights.sbomify.com/MAL-2025-37539/): Malicious code in ugli-fig-xtvi (npm) (malicious package) - [MAL-2025-37538](https://insights.sbomify.com/MAL-2025-37538/): Malicious code in ugli-fig-mexa (npm) (malicious package) - [MAL-2025-37537](https://insights.sbomify.com/MAL-2025-37537/): Malicious code in ugli-elderberry-xray-llleu (npm) (malicious package) - [MAL-2025-37536](https://insights.sbomify.com/MAL-2025-37536/): Malicious code in ugli-echo-hate (npm) (malicious package) - [MAL-2025-37535](https://insights.sbomify.com/MAL-2025-37535/): Malicious code in ugli-det-project (npm) (malicious package) - [MAL-2025-37534](https://insights.sbomify.com/MAL-2025-37534/): Malicious code in ugli-delta-zzvx (npm) (malicious package) - [MAL-2025-37533](https://insights.sbomify.com/MAL-2025-37533/): Malicious code in ugli-delta-charlie-yuiof (npm) (malicious package) - [MAL-2025-37532](https://insights.sbomify.com/MAL-2025-37532/): Malicious code in ugli-d69-project (npm) (malicious package) - [MAL-2025-37531](https://insights.sbomify.com/MAL-2025-37531/): Malicious code in ugli-cuf-project (npm) (malicious package) - [MAL-2025-37530](https://insights.sbomify.com/MAL-2025-37530/): Malicious code in ugli-cjx-project (npm) (malicious package) - [MAL-2025-37529](https://insights.sbomify.com/MAL-2025-37529/): Malicious code in ugli-bt4-project (npm) (malicious package) - [MAL-2025-37528](https://insights.sbomify.com/MAL-2025-37528/): Malicious code in ugli-bsj-project (npm) (malicious package) - [MAL-2025-37527](https://insights.sbomify.com/MAL-2025-37527/): Malicious code in ugli-bgw-project (npm) (malicious package) - [MAL-2025-37526](https://insights.sbomify.com/MAL-2025-37526/): Malicious code in ugli-alpha-utru (npm) (malicious package) - [MAL-2025-37525](https://insights.sbomify.com/MAL-2025-37525/): Malicious code in ugli-886-project (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/696/