# Vulnerabilities published in 2025


- [MAL-2025-37249](https://insights.sbomify.com/MAL-2025-37249/): Malicious code in ts-interface-loader-example (npm) (malicious package)
- [MAL-2025-37248](https://insights.sbomify.com/MAL-2025-37248/): Malicious code in trytyr (npm) (malicious package)
- [MAL-2025-37247](https://insights.sbomify.com/MAL-2025-37247/): Malicious code in tryingsomethingnewonnpm (npm) (malicious package)
- [MAL-2025-37246](https://insights.sbomify.com/MAL-2025-37246/): Malicious code in try-void-sandbox-sanitize-emulate (npm) (malicious package)
- [MAL-2025-37245](https://insights.sbomify.com/MAL-2025-37245/): Malicious code in try-test-cluster-eta-enum (npm) (malicious package)
- [MAL-2025-37244](https://insights.sbomify.com/MAL-2025-37244/): Malicious code in try-refactor-yaml-decompress-phi (npm) (malicious package)
- [MAL-2025-37243](https://insights.sbomify.com/MAL-2025-37243/): Malicious code in try-meta-error-water-cat (npm) (malicious package)
- [MAL-2025-37242](https://insights.sbomify.com/MAL-2025-37242/): Malicious code in try-catch-core-2 (npm) (malicious package)
- [MAL-2025-37241](https://insights.sbomify.com/MAL-2025-37241/): Malicious code in trustehr (npm) (malicious package)
- [MAL-2025-37240](https://insights.sbomify.com/MAL-2025-37240/): Malicious code in truncate-html-lth (npm) (malicious package)
- [MAL-2025-3724](https://insights.sbomify.com/MAL-2025-3724/): Malicious code in client-aem-content-engine (npm) (malicious package)
- [MAL-2025-37239](https://insights.sbomify.com/MAL-2025-37239/): Malicious code in trufflehogz (npm) (malicious package)
- [MAL-2025-37238](https://insights.sbomify.com/MAL-2025-37238/): Malicious code in truffledev (npm) (malicious package)
- [MAL-2025-37237](https://insights.sbomify.com/MAL-2025-37237/): Malicious code in trufflebuildlog (npm) (malicious package)
- [MAL-2025-37236](https://insights.sbomify.com/MAL-2025-37236/): Malicious code in truffle-v99 (npm) (malicious package)
- [MAL-2025-37235](https://insights.sbomify.com/MAL-2025-37235/): Malicious code in truffle-v5 (npm) (malicious package)
- [MAL-2025-37234](https://insights.sbomify.com/MAL-2025-37234/): Malicious code in truffle-plugin-blockscout-verify-jordin (npm) (malicious package)
- [MAL-2025-37233](https://insights.sbomify.com/MAL-2025-37233/): Malicious code in truelevel (npm) (malicious package)
- [MAL-2025-37232](https://insights.sbomify.com/MAL-2025-37232/): Malicious code in trucks-cli (npm) (malicious package)
- [MAL-2025-37231](https://insights.sbomify.com/MAL-2025-37231/): Malicious code in truckload (npm) (malicious package)
- [MAL-2025-37230](https://insights.sbomify.com/MAL-2025-37230/): Malicious code in troskovi (npm) (malicious package)
- [MAL-2025-3723](https://insights.sbomify.com/MAL-2025-3723/): Malicious code in atlaskit-registry (npm) (malicious package)
- [MAL-2025-37229](https://insights.sbomify.com/MAL-2025-37229/): Malicious code in troposphere-run-script-geochronology-neutrino (npm) (malicious package)
- [MAL-2025-37228](https://insights.sbomify.com/MAL-2025-37228/): Malicious code in troposphere-pegasus-centauri-supervisor (npm) (malicious package)
- [MAL-2025-37227](https://insights.sbomify.com/MAL-2025-37227/): Malicious code in troposphere-centauri-algol-technocracy (npm) (malicious package)
- [MAL-2025-37226](https://insights.sbomify.com/MAL-2025-37226/): Malicious code in tropicons (npm) (malicious package)
- [MAL-2025-37225](https://insights.sbomify.com/MAL-2025-37225/): Malicious code in tropical-example-web-app (npm) (malicious package)
- [MAL-2025-37224](https://insights.sbomify.com/MAL-2025-37224/): Malicious code in trophyjs (npm) (malicious package)
- [MAL-2025-37223](https://insights.sbomify.com/MAL-2025-37223/): Malicious code in tromolo (npm) (malicious package)
- [MAL-2025-37222](https://insights.sbomify.com/MAL-2025-37222/): Malicious code in tromke (npm) (malicious package)
- [MAL-2025-37221](https://insights.sbomify.com/MAL-2025-37221/): Malicious code in trollshell (npm) (malicious package)
- [MAL-2025-37220](https://insights.sbomify.com/MAL-2025-37220/): Malicious code in trk-logger (npm) (malicious package)
- [MAL-2025-3722](https://insights.sbomify.com/MAL-2025-3722/): Malicious code in solhint-plugin-chainlink-solidity (npm) (malicious package)
- [MAL-2025-37219](https://insights.sbomify.com/MAL-2025-37219/): Malicious code in tritree (npm) (malicious package)
- [MAL-2025-37218](https://insights.sbomify.com/MAL-2025-37218/): Malicious code in triton-rollup-plugin-cz-conventional-changelog-sqlite (npm) (malicious package)
- [MAL-2025-37217](https://insights.sbomify.com/MAL-2025-37217/): Malicious code in triton-readable-luna-farout (npm) (malicious package)
- [MAL-2025-37216](https://insights.sbomify.com/MAL-2025-37216/): Malicious code in triton-mechatronics-cosmology-epigenetics (npm) (malicious package)
- [MAL-2025-37215](https://insights.sbomify.com/MAL-2025-37215/): Malicious code in triton-grunt-webdriver-manager-impulse (npm) (malicious package)
- [MAL-2025-37214](https://insights.sbomify.com/MAL-2025-37214/): Malicious code in triton-backend-barnard-restart (npm) (malicious package)
- [MAL-2025-37213](https://insights.sbomify.com/MAL-2025-37213/): Malicious code in trisus (npm) (malicious package)
- [MAL-2025-37212](https://insights.sbomify.com/MAL-2025-37212/): Malicious code in trip-to-mars (npm) (malicious package)
- [MAL-2025-37211](https://insights.sbomify.com/MAL-2025-37211/): Malicious code in trinky (npm) (malicious package)
- [MAL-2025-37210](https://insights.sbomify.com/MAL-2025-37210/): Malicious code in tringle (npm) (malicious package)
- [MAL-2025-3721](https://insights.sbomify.com/MAL-2025-3721/): Malicious code in braze-i18n-knockout (npm) (malicious package)
- [MAL-2025-37209](https://insights.sbomify.com/MAL-2025-37209/): Malicious code in trimurti-components (npm) (malicious package)
- [MAL-2025-37208](https://insights.sbomify.com/MAL-2025-37208/): Malicious code in trimntim (npm) (malicious package)
- [MAL-2025-37207](https://insights.sbomify.com/MAL-2025-37207/): Malicious code in trimglede (npm) (malicious package)
- [MAL-2025-37206](https://insights.sbomify.com/MAL-2025-37206/): Malicious code in trill_vd8mj_nb12g_vantage (npm) (malicious package)
- [MAL-2025-37205](https://insights.sbomify.com/MAL-2025-37205/): Malicious code in trill_qjh5p_mpkhe_fountain (npm) (malicious package)
- [MAL-2025-37204](https://insights.sbomify.com/MAL-2025-37204/): Malicious code in trill_odmhp_uteo6_lily (npm) (malicious package)
- [MAL-2025-37203](https://insights.sbomify.com/MAL-2025-37203/): Malicious code in trill_lkvbo_eayf3_ocean (npm) (malicious package)
- [MAL-2025-37202](https://insights.sbomify.com/MAL-2025-37202/): Malicious code in trill-velvet-lbp076-project (npm) (malicious package)
- [MAL-2025-37201](https://insights.sbomify.com/MAL-2025-37201/): Malicious code in trilit (npm) (malicious package)
- [MAL-2025-37200](https://insights.sbomify.com/MAL-2025-37200/): Malicious code in triley (npm) (malicious package)
- [MAL-2025-3720](https://insights.sbomify.com/MAL-2025-3720/): Malicious code in fwm-poc-built-sites (npm) (malicious package)
- [MAL-2025-372](https://insights.sbomify.com/MAL-2025-372/): Malicious code in amazon-cache (npm) (malicious package)
- [MAL-2025-37199](https://insights.sbomify.com/MAL-2025-37199/): Malicious code in trijinx (npm) (malicious package)
- [MAL-2025-37198](https://insights.sbomify.com/MAL-2025-37198/): Malicious code in trigwars (npm) (malicious package)
- [MAL-2025-37197](https://insights.sbomify.com/MAL-2025-37197/): Malicious code in triggerator-backend (npm) (malicious package)
- [MAL-2025-37196](https://insights.sbomify.com/MAL-2025-37196/): Malicious code in tridef (npm) (malicious package)
- [MAL-2025-37195](https://insights.sbomify.com/MAL-2025-37195/): Malicious code in trhiolabs (npm) (malicious package)
- [MAL-2025-37194](https://insights.sbomify.com/MAL-2025-37194/): Malicious code in trezor-link-node-hid (npm) (malicious package)
- [MAL-2025-37193](https://insights.sbomify.com/MAL-2025-37193/): Malicious code in trezor-link-chrome-udp (npm) (malicious package)
- [MAL-2025-37192](https://insights.sbomify.com/MAL-2025-37192/): Malicious code in trezor-link-chrome-hid (npm) (malicious package)
- [MAL-2025-37191](https://insights.sbomify.com/MAL-2025-37191/): Malicious code in trezor-link-chrome-extension (npm) (malicious package)
- [MAL-2025-37190](https://insights.sbomify.com/MAL-2025-37190/): Malicious code in trezor-link-bridge (npm) (malicious package)
- [MAL-2025-3719](https://insights.sbomify.com/MAL-2025-3719/): Malicious code in braze-cordova-sdk (npm) (malicious package)
- [MAL-2025-37189](https://insights.sbomify.com/MAL-2025-37189/): Malicious code in trezor-flags (npm) (malicious package)
- [MAL-2025-37188](https://insights.sbomify.com/MAL-2025-37188/): Malicious code in trexxx (npm) (malicious package)
- [MAL-2025-37187](https://insights.sbomify.com/MAL-2025-37187/): Malicious code in tresgar (npm) (malicious package)
- [MAL-2025-37186](https://insights.sbomify.com/MAL-2025-37186/): Malicious code in trendrr (npm) (malicious package)
- [MAL-2025-37185](https://insights.sbomify.com/MAL-2025-37185/): Malicious code in trellotoc (npm) (malicious package)
- [MAL-2025-37184](https://insights.sbomify.com/MAL-2025-37184/): Malicious code in trello.cards (npm) (malicious package)
- [MAL-2025-37183](https://insights.sbomify.com/MAL-2025-37183/): Malicious code in trello-power-up-tutorial-part-one (npm) (malicious package)
- [MAL-2025-37182](https://insights.sbomify.com/MAL-2025-37182/): Malicious code in treehouse-icons (npm) (malicious package)
- [MAL-2025-37181](https://insights.sbomify.com/MAL-2025-37181/): Malicious code in treehouse-downloader (npm) (malicious package)
- [MAL-2025-37180](https://insights.sbomify.com/MAL-2025-37180/): Malicious code in treehands (npm) (malicious package)
- [MAL-2025-3718](https://insights.sbomify.com/MAL-2025-3718/): Malicious code in landsat-tiler (npm) (malicious package)
- [MAL-2025-37179](https://insights.sbomify.com/MAL-2025-37179/): Malicious code in treeblog (npm) (malicious package)
- [MAL-2025-37178](https://insights.sbomify.com/MAL-2025-37178/): Malicious code in tree-nu-throw-kappa-warn (npm) (malicious package)
- [MAL-2025-37177](https://insights.sbomify.com/MAL-2025-37177/): Malicious code in trebucms (npm) (malicious package)
- [MAL-2025-37176](https://insights.sbomify.com/MAL-2025-37176/): Malicious code in treasure-yarn-wea438-project (npm) (malicious package)
- [MAL-2025-37175](https://insights.sbomify.com/MAL-2025-37175/): Malicious code in trcfaucet (npm) (malicious package)
- [MAL-2025-37174](https://insights.sbomify.com/MAL-2025-37174/): Malicious code in trbplsgxwdekmhzc (npm) (malicious package)
- [MAL-2025-37173](https://insights.sbomify.com/MAL-2025-37173/): Malicious code in trbible (npm) (malicious package)
- [MAL-2025-37172](https://insights.sbomify.com/MAL-2025-37172/): Malicious code in travelman (npm) (malicious package)
- [MAL-2025-37171](https://insights.sbomify.com/MAL-2025-37171/): Malicious code in travalho (npm) (malicious package)
- [MAL-2025-37170](https://insights.sbomify.com/MAL-2025-37170/): Malicious code in trasform (npm) (malicious package)
- [MAL-2025-3717](https://insights.sbomify.com/MAL-2025-3717/): Malicious code in gql-test-client (npm) (malicious package)
- [MAL-2025-37169](https://insights.sbomify.com/MAL-2025-37169/): Malicious code in trapez (npm) (malicious package)
- [MAL-2025-37168](https://insights.sbomify.com/MAL-2025-37168/): Malicious code in transproc (npm) (malicious package)
- [MAL-2025-37167](https://insights.sbomify.com/MAL-2025-37167/): Malicious code in transport-neptune-neptune-luminescence (npm) (malicious package)
- [MAL-2025-37166](https://insights.sbomify.com/MAL-2025-37166/): Malicious code in transport-hermes-biomimicry-webdriver-manager (npm) (malicious package)
- [MAL-2025-37165](https://insights.sbomify.com/MAL-2025-37165/): Malicious code in transport-cluster-grunt-phoenix (npm) (malicious package)
- [MAL-2025-37164](https://insights.sbomify.com/MAL-2025-37164/): Malicious code in transport-antimatter-configstore-transhumanism (npm) (malicious package)
- [MAL-2025-37163](https://insights.sbomify.com/MAL-2025-37163/): Malicious code in transleet (npm) (malicious package)
- [MAL-2025-37162](https://insights.sbomify.com/MAL-2025-37162/): Malicious code in translations-kiwi (npm) (malicious package)
- [MAL-2025-37161](https://insights.sbomify.com/MAL-2025-37161/): Malicious code in translation_locale_yml_updater (npm) (malicious package)
- [MAL-2025-37160](https://insights.sbomify.com/MAL-2025-37160/): Malicious code in transhumanism-pyxis-astroinformatics-charon (npm) (malicious package)
- [MAL-2025-3716](https://insights.sbomify.com/MAL-2025-3716/): Malicious code in crypto-utility (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/700/