# Vulnerabilities published in 2025


- [MAL-2025-37339](https://insights.sbomify.com/MAL-2025-37339/): Malicious code in tuxonice (npm) (malicious package)
- [MAL-2025-37338](https://insights.sbomify.com/MAL-2025-37338/): Malicious code in tutoroo (npm) (malicious package)
- [MAL-2025-37337](https://insights.sbomify.com/MAL-2025-37337/): Malicious code in tuti-takokak59-sukiwir (npm) (malicious package)
- [MAL-2025-37336](https://insights.sbomify.com/MAL-2025-37336/): Malicious code in tuti-ongol-ongol55-breki (npm) (malicious package)
- [MAL-2025-37335](https://insights.sbomify.com/MAL-2025-37335/): Malicious code in tuti-nasicampur29-kuki (npm) (malicious package)
- [MAL-2025-37334](https://insights.sbomify.com/MAL-2025-37334/): Malicious code in tuti-miebogor65-sukiwir (npm) (malicious package)
- [MAL-2025-37333](https://insights.sbomify.com/MAL-2025-37333/): Malicious code in tuti-mangga8-breki (npm) (malicious package)
- [MAL-2025-37332](https://insights.sbomify.com/MAL-2025-37332/): Malicious code in tuthut (npm) (malicious package)
- [MAL-2025-37331](https://insights.sbomify.com/MAL-2025-37331/): Malicious code in tutest (npm) (malicious package)
- [MAL-2025-37330](https://insights.sbomify.com/MAL-2025-37330/): Malicious code in turtlerob (npm) (malicious package)
- [MAL-2025-3733](https://insights.sbomify.com/MAL-2025-3733/): Malicious code in com.unity.rendering.light-transport (npm) (malicious package)
- [MAL-2025-37329](https://insights.sbomify.com/MAL-2025-37329/): Malicious code in turtlebot (npm) (malicious package)
- [MAL-2025-37328](https://insights.sbomify.com/MAL-2025-37328/): Malicious code in turones (npm) (malicious package)
- [MAL-2025-37327](https://insights.sbomify.com/MAL-2025-37327/): Malicious code in turnip-snowflake-p9or (npm) (malicious package)
- [MAL-2025-37326](https://insights.sbomify.com/MAL-2025-37326/): Malicious code in turnip-ocean-qpux (npm) (malicious package)
- [MAL-2025-37325](https://insights.sbomify.com/MAL-2025-37325/): Malicious code in turnip-observatory-j27k (npm) (malicious package)
- [MAL-2025-37324](https://insights.sbomify.com/MAL-2025-37324/): Malicious code in turnip-lighthouse-3s9u (npm) (malicious package)
- [MAL-2025-37323](https://insights.sbomify.com/MAL-2025-37323/): Malicious code in turnip-lettuce-mm8i (npm) (malicious package)
- [MAL-2025-37322](https://insights.sbomify.com/MAL-2025-37322/): Malicious code in turnip-lemon-n2jq (npm) (malicious package)
- [MAL-2025-37321](https://insights.sbomify.com/MAL-2025-37321/): Malicious code in turnip-heliosphere-20w5 (npm) (malicious package)
- [MAL-2025-37320](https://insights.sbomify.com/MAL-2025-37320/): Malicious code in turnip-golf-6bf6 (npm) (malicious package)
- [MAL-2025-3732](https://insights.sbomify.com/MAL-2025-3732/): Malicious code in com.unity.render-pipelines.universal-config (npm) (malicious package)
- [MAL-2025-37319](https://insights.sbomify.com/MAL-2025-37319/): Malicious code in turnip-gazebo-mf7i (npm) (malicious package)
- [MAL-2025-37318](https://insights.sbomify.com/MAL-2025-37318/): Malicious code in turkish-synonyms-api (npm) (malicious package)
- [MAL-2025-37317](https://insights.sbomify.com/MAL-2025-37317/): Malicious code in turkish-alphabet (npm) (malicious package)
- [MAL-2025-37316](https://insights.sbomify.com/MAL-2025-37316/): Malicious code in turkhouse (npm) (malicious package)
- [MAL-2025-37315](https://insights.sbomify.com/MAL-2025-37315/): Malicious code in turbograft (npm) (malicious package)
- [MAL-2025-37314](https://insights.sbomify.com/MAL-2025-37314/): Malicious code in tunezer (npm) (malicious package)
- [MAL-2025-37313](https://insights.sbomify.com/MAL-2025-37313/): Malicious code in tundra_yaxop_ayqi2_fern (npm) (malicious package)
- [MAL-2025-37312](https://insights.sbomify.com/MAL-2025-37312/): Malicious code in tundra_o4ivj_a9l66_rainbow (npm) (malicious package)
- [MAL-2025-37311](https://insights.sbomify.com/MAL-2025-37311/): Malicious code in tundra_mnchd_g5766_bramble (npm) (malicious package)
- [MAL-2025-37310](https://insights.sbomify.com/MAL-2025-37310/): Malicious code in tundra_g124a_hswa5_breeze (npm) (malicious package)
- [MAL-2025-3731](https://insights.sbomify.com/MAL-2025-3731/): Malicious code in com.unity.platforms (npm) (malicious package)
- [MAL-2025-37309](https://insights.sbomify.com/MAL-2025-37309/): Malicious code in tundra_6w70g_3eekl_crystal (npm) (malicious package)
- [MAL-2025-37308](https://insights.sbomify.com/MAL-2025-37308/): Malicious code in tundra-zephyr-rmr414-project (npm) (malicious package)
- [MAL-2025-37307](https://insights.sbomify.com/MAL-2025-37307/): Malicious code in tundra-paradise-xij948-project (npm) (malicious package)
- [MAL-2025-37306](https://insights.sbomify.com/MAL-2025-37306/): Malicious code in tundra-lilypad-lpc957-project (npm) (malicious package)
- [MAL-2025-37305](https://insights.sbomify.com/MAL-2025-37305/): Malicious code in tundra-jade-bjf766-project (npm) (malicious package)
- [MAL-2025-37304](https://insights.sbomify.com/MAL-2025-37304/): Malicious code in tundra-hill-dui127-project (npm) (malicious package)
- [MAL-2025-37303](https://insights.sbomify.com/MAL-2025-37303/): Malicious code in tundra-fjord-xqd132-project (npm) (malicious package)
- [MAL-2025-37302](https://insights.sbomify.com/MAL-2025-37302/): Malicious code in tundra-brook-ots726-project (npm) (malicious package)
- [MAL-2025-37301](https://insights.sbomify.com/MAL-2025-37301/): Malicious code in tundra-aspen-fyu459-project (npm) (malicious package)
- [MAL-2025-37300](https://insights.sbomify.com/MAL-2025-37300/): Malicious code in tulip-umbra-hof493-project (npm) (malicious package)
- [MAL-2025-3730](https://insights.sbomify.com/MAL-2025-3730/): Malicious code in com.unity.perception (npm) (malicious package)
- [MAL-2025-373](https://insights.sbomify.com/MAL-2025-373/): Malicious code in amazon-checkout (npm) (malicious package)
- [MAL-2025-37299](https://insights.sbomify.com/MAL-2025-37299/): Malicious code in tulip-nugget-nyz321-project (npm) (malicious package)
- [MAL-2025-37298](https://insights.sbomify.com/MAL-2025-37298/): Malicious code in tulip-moose-oif529-project (npm) (malicious package)
- [MAL-2025-37297](https://insights.sbomify.com/MAL-2025-37297/): Malicious code in tulip-lilac-hhi568-project (npm) (malicious package)
- [MAL-2025-37296](https://insights.sbomify.com/MAL-2025-37296/): Malicious code in tulip-jasmine-gqb310-project (npm) (malicious package)
- [MAL-2025-37295](https://insights.sbomify.com/MAL-2025-37295/): Malicious code in tulip-honeycomb-vdd669-project (npm) (malicious package)
- [MAL-2025-37294](https://insights.sbomify.com/MAL-2025-37294/): Malicious code in tulip-honey-fyn898-project (npm) (malicious package)
- [MAL-2025-37293](https://insights.sbomify.com/MAL-2025-37293/): Malicious code in tulip-galaxy-yel128-project (npm) (malicious package)
- [MAL-2025-37292](https://insights.sbomify.com/MAL-2025-37292/): Malicious code in tulip-frost-zlc923-project (npm) (malicious package)
- [MAL-2025-37291](https://insights.sbomify.com/MAL-2025-37291/): Malicious code in tulip-ecosystem-qnu680-project (npm) (malicious package)
- [MAL-2025-37290](https://insights.sbomify.com/MAL-2025-37290/): Malicious code in tulip-dune-jri292-project (npm) (malicious package)
- [MAL-2025-3729](https://insights.sbomify.com/MAL-2025-3729/): Malicious code in com.unity.list-view-framework (npm) (malicious package)
- [MAL-2025-37289](https://insights.sbomify.com/MAL-2025-37289/): Malicious code in tulip-cherry-vmx378-project (npm) (malicious package)
- [MAL-2025-37288](https://insights.sbomify.com/MAL-2025-37288/): Malicious code in tulasi (npm) (malicious package)
- [MAL-2025-37287](https://insights.sbomify.com/MAL-2025-37287/): Malicious code in tujie-shuishen-yushuijingling (npm) (malicious package)
- [MAL-2025-37286](https://insights.sbomify.com/MAL-2025-37286/): Malicious code in tujie-google-v8 (npm) (malicious package)
- [MAL-2025-37285](https://insights.sbomify.com/MAL-2025-37285/): Malicious code in tuitty (npm) (malicious package)
- [MAL-2025-37284](https://insights.sbomify.com/MAL-2025-37284/): Malicious code in tuimwubna (npm) (malicious package)
- [MAL-2025-37283](https://insights.sbomify.com/MAL-2025-37283/): Malicious code in tuijian-xitong-sanshiliushi (npm) (malicious package)
- [MAL-2025-37282](https://insights.sbomify.com/MAL-2025-37282/): Malicious code in tuhoegniadksblfw (npm) (malicious package)
- [MAL-2025-37281](https://insights.sbomify.com/MAL-2025-37281/): Malicious code in tuhaoche (npm) (malicious package)
- [MAL-2025-37280](https://insights.sbomify.com/MAL-2025-37280/): Malicious code in tugtog (npm) (malicious package)
- [MAL-2025-3728](https://insights.sbomify.com/MAL-2025-3728/): Malicious code in com.unity.furioos-connection-kit (npm) (malicious package)
- [MAL-2025-37279](https://insights.sbomify.com/MAL-2025-37279/): Malicious code in tuerist (npm) (malicious package)
- [MAL-2025-37278](https://insights.sbomify.com/MAL-2025-37278/): Malicious code in tuckerr (npm) (malicious package)
- [MAL-2025-37277](https://insights.sbomify.com/MAL-2025-37277/): Malicious code in tubeume (npm) (malicious package)
- [MAL-2025-37276](https://insights.sbomify.com/MAL-2025-37276/): Malicious code in ttymidi (npm) (malicious package)
- [MAL-2025-37275](https://insights.sbomify.com/MAL-2025-37275/): Malicious code in ttycmd (npm) (malicious package)
- [MAL-2025-37274](https://insights.sbomify.com/MAL-2025-37274/): Malicious code in tttuangou (npm) (malicious package)
- [MAL-2025-37273](https://insights.sbomify.com/MAL-2025-37273/): Malicious code in ttttttest (npm) (malicious package)
- [MAL-2025-37272](https://insights.sbomify.com/MAL-2025-37272/): Malicious code in tttstats (npm) (malicious package)
- [MAL-2025-37271](https://insights.sbomify.com/MAL-2025-37271/): Malicious code in ttsstt (npm) (malicious package)
- [MAL-2025-37270](https://insights.sbomify.com/MAL-2025-37270/): Malicious code in ttlite (npm) (malicious package)
- [MAL-2025-3727](https://insights.sbomify.com/MAL-2025-3727/): Malicious code in com.unity.formats.fbx (npm) (malicious package)
- [MAL-2025-37269](https://insights.sbomify.com/MAL-2025-37269/): Malicious code in ttlbqp (npm) (malicious package)
- [MAL-2025-37268](https://insights.sbomify.com/MAL-2025-37268/): Malicious code in tt-catalogcomponent-test-env (npm) (malicious package)
- [MAL-2025-37267](https://insights.sbomify.com/MAL-2025-37267/): Malicious code in tsukuyomi (npm) (malicious package)
- [MAL-2025-37266](https://insights.sbomify.com/MAL-2025-37266/): Malicious code in tsukuba (npm) (malicious package)
- [MAL-2025-37265](https://insights.sbomify.com/MAL-2025-37265/): Malicious code in tsudoi (npm) (malicious package)
- [MAL-2025-37264](https://insights.sbomify.com/MAL-2025-37264/): Malicious code in tssplit (npm) (malicious package)
- [MAL-2025-37263](https://insights.sbomify.com/MAL-2025-37263/): Malicious code in tsphdvckrgqezibw (npm) (malicious package)
- [MAL-2025-37262](https://insights.sbomify.com/MAL-2025-37262/): Malicious code in tslyrics (npm) (malicious package)
- [MAL-2025-37261](https://insights.sbomify.com/MAL-2025-37261/): Malicious code in tslint-config-toolbox (npm) (malicious package)
- [MAL-2025-37260](https://insights.sbomify.com/MAL-2025-37260/): Malicious code in tslint-config-rtl (npm) (malicious package)
- [MAL-2025-3726](https://insights.sbomify.com/MAL-2025-3726/): Malicious code in com.unity.cluster-display (npm) (malicious package)
- [MAL-2025-37259](https://insights.sbomify.com/MAL-2025-37259/): Malicious code in tslint-config-baseline (npm) (malicious package)
- [MAL-2025-37258](https://insights.sbomify.com/MAL-2025-37258/): Malicious code in tsktsk (npm) (malicious package)
- [MAL-2025-37257](https://insights.sbomify.com/MAL-2025-37257/): Malicious code in tsclust (npm) (malicious package)
- [MAL-2025-37256](https://insights.sbomify.com/MAL-2025-37256/): Malicious code in tsbapp (npm) (malicious package)
- [MAL-2025-37255](https://insights.sbomify.com/MAL-2025-37255/): Malicious code in tsb-proteo-ui-basics (npm) (malicious package)
- [MAL-2025-37254](https://insights.sbomify.com/MAL-2025-37254/): Malicious code in ts2c-target-gbdk-n (npm) (malicious package)
- [MAL-2025-37253](https://insights.sbomify.com/MAL-2025-37253/): Malicious code in ts2c-target-arduino (npm) (malicious package)
- [MAL-2025-37252](https://insights.sbomify.com/MAL-2025-37252/): Malicious code in ts-petstore-client (npm) (malicious package)
- [MAL-2025-37251](https://insights.sbomify.com/MAL-2025-37251/): Malicious code in ts-objectschema (npm) (malicious package)
- [MAL-2025-37250](https://insights.sbomify.com/MAL-2025-37250/): Malicious code in ts-npm (npm) (malicious package)
- [MAL-2025-3725](https://insights.sbomify.com/MAL-2025-3725/): Malicious code in @nitro2/shared (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/699/