# Vulnerabilities published in 2025 - [MAL-2025-37524](https://insights.sbomify.com/MAL-2025-37524/): Malicious code in ugli-7hv-project (npm) (malicious package) - [MAL-2025-37523](https://insights.sbomify.com/MAL-2025-37523/): Malicious code in ugli-3x5-project (npm) (malicious package) - [MAL-2025-37522](https://insights.sbomify.com/MAL-2025-37522/): Malicious code in ugli-2n2-project (npm) (malicious package) - [MAL-2025-37521](https://insights.sbomify.com/MAL-2025-37521/): Malicious code in ugli-11m-project (npm) (malicious package) - [MAL-2025-37520](https://insights.sbomify.com/MAL-2025-37520/): Malicious code in ugli-0d8-project (npm) (malicious package) - [MAL-2025-37519](https://insights.sbomify.com/MAL-2025-37519/): Malicious code in ugconnect (npm) (malicious package) - [MAL-2025-37518](https://insights.sbomify.com/MAL-2025-37518/): Malicious code in ugather (npm) (malicious package) - [MAL-2025-37517](https://insights.sbomify.com/MAL-2025-37517/): Malicious code in ugaicpc (npm) (malicious package) - [MAL-2025-37516](https://insights.sbomify.com/MAL-2025-37516/): Malicious code in ug-no-deps (npm) (malicious package) - [MAL-2025-37515](https://insights.sbomify.com/MAL-2025-37515/): Malicious code in ug-deep-alt (npm) (malicious package) - [MAL-2025-37514](https://insights.sbomify.com/MAL-2025-37514/): Malicious code in ug-deep (npm) (malicious package) - [MAL-2025-37513](https://insights.sbomify.com/MAL-2025-37513/): Malicious code in ufocms (npm) (malicious package) - [MAL-2025-37512](https://insights.sbomify.com/MAL-2025-37512/): Malicious code in ufniqelroxpkzgba (npm) (malicious package) - [MAL-2025-37511](https://insights.sbomify.com/MAL-2025-37511/): Malicious code in uexwheel (npm) (malicious package) - [MAL-2025-37510](https://insights.sbomify.com/MAL-2025-37510/): Malicious code in uetyxlivgokhdpwz (npm) (malicious package) - [MAL-2025-37509](https://insights.sbomify.com/MAL-2025-37509/): Malicious code in uetjikmzbodrwshg (npm) (malicious package) - [MAL-2025-37508](https://insights.sbomify.com/MAL-2025-37508/): Malicious code in uerkcwogmtpnkjxd (npm) (malicious package) - [MAL-2025-37507](https://insights.sbomify.com/MAL-2025-37507/): Malicious code in uejtlwfgpsacqbahvnepagfam1iw10sl (npm) (malicious package) - [MAL-2025-37506](https://insights.sbomify.com/MAL-2025-37506/): Malicious code in uebungen (npm) (malicious package) - [MAL-2025-37505](https://insights.sbomify.com/MAL-2025-37505/): Malicious code in ue4-lantu-keshihua-jiaoben-rumen-shouce (npm) (malicious package) - [MAL-2025-37504](https://insights.sbomify.com/MAL-2025-37504/): Malicious code in ue-youxi-kaifa-xiangmu (npm) (malicious package) - [MAL-2025-37503](https://insights.sbomify.com/MAL-2025-37503/): Malicious code in udzura (npm) (malicious package) - [MAL-2025-37502](https://insights.sbomify.com/MAL-2025-37502/): Malicious code in udptap (npm) (malicious package) - [MAL-2025-37501](https://insights.sbomify.com/MAL-2025-37501/): Malicious code in udplogger (npm) (malicious package) - [MAL-2025-37500](https://insights.sbomify.com/MAL-2025-37500/): Malicious code in udon-orange-wgjs (npm) (malicious package) - [MAL-2025-375](https://insights.sbomify.com/MAL-2025-375/): Malicious code in amazon-connect (npm) (malicious package) - [MAL-2025-37499](https://insights.sbomify.com/MAL-2025-37499/): Malicious code in udon-oak-y7wk (npm) (malicious package) - [MAL-2025-37498](https://insights.sbomify.com/MAL-2025-37498/): Malicious code in udon-airplane-a3m0 (npm) (malicious package) - [MAL-2025-37497](https://insights.sbomify.com/MAL-2025-37497/): Malicious code in udnqoevipgblwhky (npm) (malicious package) - [MAL-2025-37496](https://insights.sbomify.com/MAL-2025-37496/): Malicious code in udin-telurtahu61-sukiwir (npm) (malicious package) - [MAL-2025-37495](https://insights.sbomify.com/MAL-2025-37495/): Malicious code in udin-rangi40-breki (npm) (malicious package) - [MAL-2025-37494](https://insights.sbomify.com/MAL-2025-37494/): Malicious code in udin-ketan100-breki (npm) (malicious package) - [MAL-2025-37493](https://insights.sbomify.com/MAL-2025-37493/): Malicious code in udin-keraktelor34-sukiwir (npm) (malicious package) - [MAL-2025-37492](https://insights.sbomify.com/MAL-2025-37492/): Malicious code in udemytestframework (npm) (malicious package) - [MAL-2025-37491](https://insights.sbomify.com/MAL-2025-37491/): Malicious code in udemyblog (npm) (malicious package) - [MAL-2025-37490](https://insights.sbomify.com/MAL-2025-37490/): Malicious code in udacxvniespwfkqz (npm) (malicious package) - [MAL-2025-3749](https://insights.sbomify.com/MAL-2025-3749/): Malicious code in @myop/n (npm) (malicious package) - [MAL-2025-37489](https://insights.sbomify.com/MAL-2025-37489/): Malicious code in ud-extension (npm) (malicious package) - [MAL-2025-37488](https://insights.sbomify.com/MAL-2025-37488/): Malicious code in ucwitlorgjqabzvn (npm) (malicious package) - [MAL-2025-37487](https://insights.sbomify.com/MAL-2025-37487/): Malicious code in ucoreos (npm) (malicious package) - [MAL-2025-37486](https://insights.sbomify.com/MAL-2025-37486/): Malicious code in uclasrc (npm) (malicious package) - [MAL-2025-37485](https://insights.sbomify.com/MAL-2025-37485/): Malicious code in uclagl (npm) (malicious package) - [MAL-2025-37484](https://insights.sbomify.com/MAL-2025-37484/): Malicious code in ucifsplus (npm) (malicious package) - [MAL-2025-37483](https://insights.sbomify.com/MAL-2025-37483/): Malicious code in ucfgskwipkamjexq (npm) (malicious package) - [MAL-2025-37482](https://insights.sbomify.com/MAL-2025-37482/): Malicious code in ucasort (npm) (malicious package) - [MAL-2025-37481](https://insights.sbomify.com/MAL-2025-37481/): Malicious code in ubukey (npm) (malicious package) - [MAL-2025-37480](https://insights.sbomify.com/MAL-2025-37480/): Malicious code in ubtwonrkjxzmqlei (npm) (malicious package) - [MAL-2025-37479](https://insights.sbomify.com/MAL-2025-37479/): Malicious code in ubinote (npm) (malicious package) - [MAL-2025-37478](https://insights.sbomify.com/MAL-2025-37478/): Malicious code in uberpov (npm) (malicious package) - [MAL-2025-37477](https://insights.sbomify.com/MAL-2025-37477/): Malicious code in uberdots (npm) (malicious package) - [MAL-2025-37476](https://insights.sbomify.com/MAL-2025-37476/): Malicious code in uber-purify (npm) (malicious package) - [MAL-2025-37475](https://insights.sbomify.com/MAL-2025-37475/): Malicious code in ub-banksy (npm) (malicious package) - [MAL-2025-37474](https://insights.sbomify.com/MAL-2025-37474/): Malicious code in uasuml (npm) (malicious package) - [MAL-2025-37473](https://insights.sbomify.com/MAL-2025-37473/): Malicious code in uamqmo (npm) (malicious package) - [MAL-2025-37472](https://insights.sbomify.com/MAL-2025-37472/): Malicious code in ua-grid (npm) (malicious package) - [MAL-2025-37471](https://insights.sbomify.com/MAL-2025-37471/): Malicious code in tzpemvkuflnygdso (npm) (malicious package) - [MAL-2025-37470](https://insights.sbomify.com/MAL-2025-37470/): Malicious code in tzf-darwin-x64 (npm) (malicious package) - [MAL-2025-37469](https://insights.sbomify.com/MAL-2025-37469/): Malicious code in tzeos-sdk (npm) (malicious package) - [MAL-2025-37468](https://insights.sbomify.com/MAL-2025-37468/): Malicious code in tzdata-finance (npm) (malicious package) - [MAL-2025-37467](https://insights.sbomify.com/MAL-2025-37467/): Malicious code in tyuxftg (npm) (malicious package) - [MAL-2025-37466](https://insights.sbomify.com/MAL-2025-37466/): Malicious code in tysctqkgk8yysaoligfkgf4axct7atho (npm) (malicious package) - [MAL-2025-37465](https://insights.sbomify.com/MAL-2025-37465/): Malicious code in typopro-web-TypoPRO-Yellowtail (npm) (malicious package) - [MAL-2025-37464](https://insights.sbomify.com/MAL-2025-37464/): Malicious code in typopro-web-TypoPRO-WeblySleek (npm) (malicious package) - [MAL-2025-37463](https://insights.sbomify.com/MAL-2025-37463/): Malicious code in typopro-web-TypoPRO-VeteranTypewriter (npm) (malicious package) - [MAL-2025-37462](https://insights.sbomify.com/MAL-2025-37462/): Malicious code in typopro-web-TypoPRO-Vegur (npm) (malicious package) - [MAL-2025-37461](https://insights.sbomify.com/MAL-2025-37461/): Malicious code in typopro-web-TypoPRO-Unifraktur (npm) (malicious package) - [MAL-2025-37460](https://insights.sbomify.com/MAL-2025-37460/): Malicious code in typopro-web-TypoPRO-TopSecret (npm) (malicious package) - [MAL-2025-37459](https://insights.sbomify.com/MAL-2025-37459/): Malicious code in typopro-web-TypoPRO-Slabo (npm) (malicious package) - [MAL-2025-37458](https://insights.sbomify.com/MAL-2025-37458/): Malicious code in typopro-web-TypoPRO-Signika (npm) (malicious package) - [MAL-2025-37457](https://insights.sbomify.com/MAL-2025-37457/): Malicious code in typopro-web-TypoPRO-Satisfy (npm) (malicious package) - [MAL-2025-37456](https://insights.sbomify.com/MAL-2025-37456/): Malicious code in typopro-web-TypoPRO-SansitaOne (npm) (malicious package) - [MAL-2025-37455](https://insights.sbomify.com/MAL-2025-37455/): Malicious code in typopro-web-TypoPRO-Rosario (npm) (malicious package) - [MAL-2025-37454](https://insights.sbomify.com/MAL-2025-37454/): Malicious code in typopro-web-TypoPRO-PTMono (npm) (malicious package) - [MAL-2025-37453](https://insights.sbomify.com/MAL-2025-37453/): Malicious code in typopro-web-TypoPRO-Pompiere (npm) (malicious package) - [MAL-2025-37452](https://insights.sbomify.com/MAL-2025-37452/): Malicious code in typopro-web-TypoPRO-Poetsen (npm) (malicious package) - [MAL-2025-37451](https://insights.sbomify.com/MAL-2025-37451/): Malicious code in typopro-web-TypoPRO-PatuaOne (npm) (malicious package) - [MAL-2025-37450](https://insights.sbomify.com/MAL-2025-37450/): Malicious code in typopro-web-TypoPRO-Pacifico (npm) (malicious package) - [MAL-2025-3745](https://insights.sbomify.com/MAL-2025-3745/): Malicious code in odin-backoffice-starter-kit (npm) (malicious package) - [MAL-2025-37449](https://insights.sbomify.com/MAL-2025-37449/): Malicious code in typopro-web-TypoPRO-Oxygen (npm) (malicious package) - [MAL-2025-37448](https://insights.sbomify.com/MAL-2025-37448/): Malicious code in typopro-web-TypoPRO-Nickainley (npm) (malicious package) - [MAL-2025-37447](https://insights.sbomify.com/MAL-2025-37447/): Malicious code in typopro-web-TypoPRO-Montserrat (npm) (malicious package) - [MAL-2025-37446](https://insights.sbomify.com/MAL-2025-37446/): Malicious code in typopro-web-TypoPRO-Milonga (npm) (malicious package) - [MAL-2025-37445](https://insights.sbomify.com/MAL-2025-37445/): Malicious code in typopro-web-TypoPRO-LibreBaskerville (npm) (malicious package) - [MAL-2025-37444](https://insights.sbomify.com/MAL-2025-37444/): Malicious code in typopro-web-TypoPRO-Lekton (npm) (malicious package) - [MAL-2025-37443](https://insights.sbomify.com/MAL-2025-37443/): Malicious code in typopro-web-TypoPRO-LeagueGothic (npm) (malicious package) - [MAL-2025-37442](https://insights.sbomify.com/MAL-2025-37442/): Malicious code in typopro-web-TypoPRO-Kreon (npm) (malicious package) - [MAL-2025-37441](https://insights.sbomify.com/MAL-2025-37441/): Malicious code in typopro-web-TypoPRO-KingthingsPetrock (npm) (malicious package) - [MAL-2025-37440](https://insights.sbomify.com/MAL-2025-37440/): Malicious code in typopro-web-TypoPRO-Kalam (npm) (malicious package) - [MAL-2025-3744](https://insights.sbomify.com/MAL-2025-3744/): Malicious code in program-admin (PyPI) (malicious package) - [MAL-2025-37439](https://insights.sbomify.com/MAL-2025-37439/): Malicious code in typopro-web-TypoPRO-Junction (npm) (malicious package) - [MAL-2025-37438](https://insights.sbomify.com/MAL-2025-37438/): Malicious code in typopro-web-TypoPRO-IndieFlower (npm) (malicious package) - [MAL-2025-37437](https://insights.sbomify.com/MAL-2025-37437/): Malicious code in typopro-web-TypoPRO-Inconsolata (npm) (malicious package) - [MAL-2025-37436](https://insights.sbomify.com/MAL-2025-37436/): Malicious code in typopro-web-TypoPRO-HHSamuel (npm) (malicious package) - [MAL-2025-37435](https://insights.sbomify.com/MAL-2025-37435/): Malicious code in typopro-web-TypoPRO-Handlee (npm) (malicious package) - [MAL-2025-37434](https://insights.sbomify.com/MAL-2025-37434/): Malicious code in typopro-web-TypoPRO-GreatVibes (npm) (malicious package) - [MAL-2025-37433](https://insights.sbomify.com/MAL-2025-37433/): Malicious code in typopro-web-TypoPRO-GrandHotel (npm) (malicious package) - [MAL-2025-37432](https://insights.sbomify.com/MAL-2025-37432/): Malicious code in typopro-web-TypoPRO-GiveYouGlory (npm) (malicious package) - [MAL-2025-37431](https://insights.sbomify.com/MAL-2025-37431/): Malicious code in typopro-web-TypoPRO-Gidole (npm) (malicious package) - [MAL-2025-37430](https://insights.sbomify.com/MAL-2025-37430/): Malicious code in typopro-web-TypoPRO-Delius (npm) (malicious package) - [MAL-2025-3743](https://insights.sbomify.com/MAL-2025-3743/): Malicious code in iconnect (PyPI) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/697/