# Vulnerabilities published in 2025 - [MAL-2025-37429](https://insights.sbomify.com/MAL-2025-37429/): Malicious code in typopro-web-TypoPRO-DancingScript (npm) (malicious package) - [MAL-2025-37428](https://insights.sbomify.com/MAL-2025-37428/): Malicious code in typopro-web-TypoPRO-Damion (npm) (malicious package) - [MAL-2025-37427](https://insights.sbomify.com/MAL-2025-37427/): Malicious code in typopro-web-TypoPRO-Cuprum (npm) (malicious package) - [MAL-2025-37426](https://insights.sbomify.com/MAL-2025-37426/): Malicious code in typopro-web-TypoPRO-CraftyGirls (npm) (malicious package) - [MAL-2025-37425](https://insights.sbomify.com/MAL-2025-37425/): Malicious code in typopro-web-TypoPRO-Coustard (npm) (malicious package) - [MAL-2025-37424](https://insights.sbomify.com/MAL-2025-37424/): Malicious code in typopro-web-TypoPRO-Cousine (npm) (malicious package) - [MAL-2025-37423](https://insights.sbomify.com/MAL-2025-37423/): Malicious code in typopro-web-TypoPRO-ComingSoon (npm) (malicious package) - [MAL-2025-37422](https://insights.sbomify.com/MAL-2025-37422/): Malicious code in typopro-web-TypoPRO-Chawp (npm) (malicious package) - [MAL-2025-37421](https://insights.sbomify.com/MAL-2025-37421/): Malicious code in typopro-web-TypoPRO-Bitter (npm) (malicious package) - [MAL-2025-37420](https://insights.sbomify.com/MAL-2025-37420/): Malicious code in typopro-web-TypoPRO-BebasNeue (npm) (malicious package) - [MAL-2025-3742](https://insights.sbomify.com/MAL-2025-3742/): Malicious code in document-inference (PyPI) (malicious package) - [MAL-2025-37419](https://insights.sbomify.com/MAL-2025-37419/): Malicious code in typopro-web-TypoPRO-Astloch (npm) (malicious package) - [MAL-2025-37418](https://insights.sbomify.com/MAL-2025-37418/): Malicious code in typopro-web-TypoPRO-Asap (npm) (malicious package) - [MAL-2025-37417](https://insights.sbomify.com/MAL-2025-37417/): Malicious code in typopro-web-TypoPRO-AnonymousPro (npm) (malicious package) - [MAL-2025-37416](https://insights.sbomify.com/MAL-2025-37416/): Malicious code in typopro-web-TypoPRO-AmaticSC (npm) (malicious package) - [MAL-2025-37415](https://insights.sbomify.com/MAL-2025-37415/): Malicious code in typollab (npm) (malicious package) - [MAL-2025-37414](https://insights.sbomify.com/MAL-2025-37414/): Malicious code in typohero (npm) (malicious package) - [MAL-2025-37413](https://insights.sbomify.com/MAL-2025-37413/): Malicious code in typlesmod (npm) (malicious package) - [MAL-2025-37412](https://insights.sbomify.com/MAL-2025-37412/): Malicious code in typetoken (npm) (malicious package) - [MAL-2025-37411](https://insights.sbomify.com/MAL-2025-37411/): Malicious code in typescript2-angular-kaifa (npm) (malicious package) - [MAL-2025-37410](https://insights.sbomify.com/MAL-2025-37410/): Malicious code in typescript-airbnb-prettier-svelte (npm) (malicious package) - [MAL-2025-3741](https://insights.sbomify.com/MAL-2025-3741/): Malicious code in dial-xl (PyPI) (malicious package) - [MAL-2025-37409](https://insights.sbomify.com/MAL-2025-37409/): Malicious code in typescript-airbnb-prettier (npm) (malicious package) - [MAL-2025-37408](https://insights.sbomify.com/MAL-2025-37408/): Malicious code in types-ebay (npm) (malicious package) - [MAL-2025-37407](https://insights.sbomify.com/MAL-2025-37407/): Malicious code in typeorm-subscription-biohacking-phenomic (npm) (malicious package) - [MAL-2025-37406](https://insights.sbomify.com/MAL-2025-37406/): Malicious code in typeorm-outercore-xml-axios (npm) (malicious package) - [MAL-2025-37405](https://insights.sbomify.com/MAL-2025-37405/): Malicious code in typeorm-neptunology-await-biohacking (npm) (malicious package) - [MAL-2025-37404](https://insights.sbomify.com/MAL-2025-37404/): Malicious code in typeorm-ichnology-nightmare-repository (npm) (malicious package) - [MAL-2025-37403](https://insights.sbomify.com/MAL-2025-37403/): Malicious code in typeface-m-plus-1p (npm) (malicious package) - [MAL-2025-37402](https://insights.sbomify.com/MAL-2025-37402/): Malicious code in typed_parameters (npm) (malicious package) - [MAL-2025-37401](https://insights.sbomify.com/MAL-2025-37401/): Malicious code in typecript (npm) (malicious package) - [MAL-2025-37400](https://insights.sbomify.com/MAL-2025-37400/): Malicious code in typecreep (npm) (malicious package) - [MAL-2025-3740](https://insights.sbomify.com/MAL-2025-3740/): Malicious code in badgerdoc-storage (PyPI) (malicious package) - [MAL-2025-374](https://insights.sbomify.com/MAL-2025-374/): Malicious code in amazon-cloud (npm) (malicious package) - [MAL-2025-37399](https://insights.sbomify.com/MAL-2025-37399/): Malicious code in tyker (npm) (malicious package) - [MAL-2025-37398](https://insights.sbomify.com/MAL-2025-37398/): Malicious code in tyhauekbxfvcwsmo (npm) (malicious package) - [MAL-2025-37397](https://insights.sbomify.com/MAL-2025-37397/): Malicious code in tygjtest (npm) (malicious package) - [MAL-2025-37396](https://insights.sbomify.com/MAL-2025-37396/): Malicious code in txtdb (npm) (malicious package) - [MAL-2025-37395](https://insights.sbomify.com/MAL-2025-37395/): Malicious code in txrxhx (npm) (malicious package) - [MAL-2025-37394](https://insights.sbomify.com/MAL-2025-37394/): Malicious code in txraft (npm) (malicious package) - [MAL-2025-37393](https://insights.sbomify.com/MAL-2025-37393/): Malicious code in txqajubhszprkemw (npm) (malicious package) - [MAL-2025-37392](https://insights.sbomify.com/MAL-2025-37392/): Malicious code in txpong (npm) (malicious package) - [MAL-2025-37391](https://insights.sbomify.com/MAL-2025-37391/): Malicious code in txihwjbuzncsderq (npm) (malicious package) - [MAL-2025-37390](https://insights.sbomify.com/MAL-2025-37390/): Malicious code in txcobiuzdjmnelhq (npm) (malicious package) - [MAL-2025-3739](https://insights.sbomify.com/MAL-2025-3739/): Malicious code in gear-idea-indexer-db (npm) (malicious package) - [MAL-2025-37389](https://insights.sbomify.com/MAL-2025-37389/): Malicious code in twu-registered-users-data-service (npm) (malicious package) - [MAL-2025-37388](https://insights.sbomify.com/MAL-2025-37388/): Malicious code in twtimage (npm) (malicious package) - [MAL-2025-37387](https://insights.sbomify.com/MAL-2025-37387/): Malicious code in twofloats (npm) (malicious package) - [MAL-2025-37386](https://insights.sbomify.com/MAL-2025-37386/): Malicious code in twocam (npm) (malicious package) - [MAL-2025-37385](https://insights.sbomify.com/MAL-2025-37385/): Malicious code in twitrans (npm) (malicious package) - [MAL-2025-37384](https://insights.sbomify.com/MAL-2025-37384/): Malicious code in twitch-styles (npm) (malicious package) - [MAL-2025-37383](https://insights.sbomify.com/MAL-2025-37383/): Malicious code in twitch-smartling-sdk (npm) (malicious package) - [MAL-2025-37382](https://insights.sbomify.com/MAL-2025-37382/): Malicious code in twitch-i18n-utils (npm) (malicious package) - [MAL-2025-37381](https://insights.sbomify.com/MAL-2025-37381/): Malicious code in twitch-grunt-smartling-sdk (npm) (malicious package) - [MAL-2025-37380](https://insights.sbomify.com/MAL-2025-37380/): Malicious code in twinkle-cascade-sqe614-project (npm) (malicious package) - [MAL-2025-3738](https://insights.sbomify.com/MAL-2025-3738/): Malicious code in gear-idea-common (npm) (malicious package) - [MAL-2025-37379](https://insights.sbomify.com/MAL-2025-37379/): Malicious code in twinkle-abide-fit011-project (npm) (malicious package) - [MAL-2025-37378](https://insights.sbomify.com/MAL-2025-37378/): Malicious code in twine-to-yoto (npm) (malicious package) - [MAL-2025-37377](https://insights.sbomify.com/MAL-2025-37377/): Malicious code in twine-rails (npm) (malicious package) - [MAL-2025-37376](https://insights.sbomify.com/MAL-2025-37376/): Malicious code in twinbox (npm) (malicious package) - [MAL-2025-37375](https://insights.sbomify.com/MAL-2025-37375/): Malicious code in twilio-npm (npm) (malicious package) - [MAL-2025-37374](https://insights.sbomify.com/MAL-2025-37374/): Malicious code in twilio-gladia-ws (npm) (malicious package) - [MAL-2025-37373](https://insights.sbomify.com/MAL-2025-37373/): Malicious code in twilio-datasync (npm) (malicious package) - [MAL-2025-37372](https://insights.sbomify.com/MAL-2025-37372/): Malicious code in twilight_w5aga_yy0z5_utopia (npm) (malicious package) - [MAL-2025-37371](https://insights.sbomify.com/MAL-2025-37371/): Malicious code in twilight_pn38n_vmpz5_xenon (npm) (malicious package) - [MAL-2025-37370](https://insights.sbomify.com/MAL-2025-37370/): Malicious code in twilight_nqkgu_poe0p_xenith (npm) (malicious package) - [MAL-2025-3737](https://insights.sbomify.com/MAL-2025-3737/): Malicious code in com.unity.visualeffectgraph (npm) (malicious package) - [MAL-2025-37369](https://insights.sbomify.com/MAL-2025-37369/): Malicious code in twilight-snk5d-1ggxe-jade-project (npm) (malicious package) - [MAL-2025-37368](https://insights.sbomify.com/MAL-2025-37368/): Malicious code in twilight-rpgqd-r44on-uplift-project (npm) (malicious package) - [MAL-2025-37367](https://insights.sbomify.com/MAL-2025-37367/): Malicious code in twilight-m2h92-ztsue-jade-project (npm) (malicious package) - [MAL-2025-37366](https://insights.sbomify.com/MAL-2025-37366/): Malicious code in twilight-k0vo5-y37h3-opal-project (npm) (malicious package) - [MAL-2025-37365](https://insights.sbomify.com/MAL-2025-37365/): Malicious code in twilight-e1mee-t4co7-dynamo-project (npm) (malicious package) - [MAL-2025-37364](https://insights.sbomify.com/MAL-2025-37364/): Malicious code in twilight-c4gu4-h7dpa-wind-project (npm) (malicious package) - [MAL-2025-37363](https://insights.sbomify.com/MAL-2025-37363/): Malicious code in twilight-6eghw-8wjn9-nymph-project (npm) (malicious package) - [MAL-2025-37362](https://insights.sbomify.com/MAL-2025-37362/): Malicious code in twilight-3rm0i-313hf-whisper-project (npm) (malicious package) - [MAL-2025-37361](https://insights.sbomify.com/MAL-2025-37361/): Malicious code in twiborg (npm) (malicious package) - [MAL-2025-37360](https://insights.sbomify.com/MAL-2025-37360/): Malicious code in twhandybiscoqkml (npm) (malicious package) - [MAL-2025-3736](https://insights.sbomify.com/MAL-2025-3736/): Malicious code in com.unity.scripting.python (npm) (malicious package) - [MAL-2025-37359](https://insights.sbomify.com/MAL-2025-37359/): Malicious code in twghkylpuxzioefn (npm) (malicious package) - [MAL-2025-37358](https://insights.sbomify.com/MAL-2025-37358/): Malicious code in twentyoverten-ui-library (npm) (malicious package) - [MAL-2025-37357](https://insights.sbomify.com/MAL-2025-37357/): Malicious code in twember (npm) (malicious package) - [MAL-2025-37356](https://insights.sbomify.com/MAL-2025-37356/): Malicious code in tweetfeed (npm) (malicious package) - [MAL-2025-37355](https://insights.sbomify.com/MAL-2025-37355/): Malicious code in tweaky (npm) (malicious package) - [MAL-2025-37354](https://insights.sbomify.com/MAL-2025-37354/): Malicious code in tweakers.net-html-parser (npm) (malicious package) - [MAL-2025-37353](https://insights.sbomify.com/MAL-2025-37353/): Malicious code in twdfkjbuhsqyvomx (npm) (malicious package) - [MAL-2025-37352](https://insights.sbomify.com/MAL-2025-37352/): Malicious code in twdakumfbrvesgyp (npm) (malicious package) - [MAL-2025-37351](https://insights.sbomify.com/MAL-2025-37351/): Malicious code in twawayday (npm) (malicious package) - [MAL-2025-37350](https://insights.sbomify.com/MAL-2025-37350/): Malicious code in twat (npm) (malicious package) - [MAL-2025-3735](https://insights.sbomify.com/MAL-2025-3735/): Malicious code in com.unity.rpc (npm) (malicious package) - [MAL-2025-37349](https://insights.sbomify.com/MAL-2025-37349/): Malicious code in tw-chat-search (npm) (malicious package) - [MAL-2025-37348](https://insights.sbomify.com/MAL-2025-37348/): Malicious code in tvtccal (npm) (malicious package) - [MAL-2025-37347](https://insights.sbomify.com/MAL-2025-37347/): Malicious code in tvsysteem (npm) (malicious package) - [MAL-2025-37346](https://insights.sbomify.com/MAL-2025-37346/): Malicious code in tvshowapp (npm) (malicious package) - [MAL-2025-37345](https://insights.sbomify.com/MAL-2025-37345/): Malicious code in tvsample (npm) (malicious package) - [MAL-2025-37344](https://insights.sbomify.com/MAL-2025-37344/): Malicious code in tvquiz (npm) (malicious package) - [MAL-2025-37343](https://insights.sbomify.com/MAL-2025-37343/): Malicious code in tvirtual (npm) (malicious package) - [MAL-2025-37342](https://insights.sbomify.com/MAL-2025-37342/): Malicious code in tvaupdoyemkifckw (npm) (malicious package) - [MAL-2025-37341](https://insights.sbomify.com/MAL-2025-37341/): Malicious code in tv-ny-munich (npm) (malicious package) - [MAL-2025-37340](https://insights.sbomify.com/MAL-2025-37340/): Malicious code in tuxviewer (npm) (malicious package) - [MAL-2025-3734](https://insights.sbomify.com/MAL-2025-3734/): Malicious code in com.unity.robotics.warehouse.base (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/698/