# Vulnerabilities published in 2025


- [MAL-2025-37159](https://insights.sbomify.com/MAL-2025-37159/): Malicious code in transhumanism-prompts-paleobotany-canopus (npm) (malicious package)
- [MAL-2025-37158](https://insights.sbomify.com/MAL-2025-37158/): Malicious code in transform-prompts-dynamo-astrometry (npm) (malicious package)
- [MAL-2025-37157](https://insights.sbomify.com/MAL-2025-37157/): Malicious code in transform-markdownlint-ethology-cypress (npm) (malicious package)
- [MAL-2025-37156](https://insights.sbomify.com/MAL-2025-37156/): Malicious code in transelot (npm) (malicious package)
- [MAL-2025-37155](https://insights.sbomify.com/MAL-2025-37155/): Malicious code in transdraw (npm) (malicious package)
- [MAL-2025-37154](https://insights.sbomify.com/MAL-2025-37154/): Malicious code in transcrypto (npm) (malicious package)
- [MAL-2025-37153](https://insights.sbomify.com/MAL-2025-37153/): Malicious code in transcogg (npm) (malicious package)
- [MAL-2025-37152](https://insights.sbomify.com/MAL-2025-37152/): Malicious code in tranquil-z8e7k-5t7m0-drift-project (npm) (malicious package)
- [MAL-2025-37151](https://insights.sbomify.com/MAL-2025-37151/): Malicious code in tranquil-wzom9-ggeak-zen-project (npm) (malicious package)
- [MAL-2025-37150](https://insights.sbomify.com/MAL-2025-37150/): Malicious code in tranquil-vgsk6-mexpa-willow-project (npm) (malicious package)
- [MAL-2025-3715](https://insights.sbomify.com/MAL-2025-3715/): Malicious code in crypto-provider (npm) (malicious package)
- [MAL-2025-37149](https://insights.sbomify.com/MAL-2025-37149/): Malicious code in tranquil-sp3vo-oe9v9-knoll-project (npm) (malicious package)
- [MAL-2025-37148](https://insights.sbomify.com/MAL-2025-37148/): Malicious code in tranquil-lmoh3-2q7j7-ice-project (npm) (malicious package)
- [MAL-2025-37147](https://insights.sbomify.com/MAL-2025-37147/): Malicious code in tranquil-im01m-sfa8k-mystic-project (npm) (malicious package)
- [MAL-2025-37146](https://insights.sbomify.com/MAL-2025-37146/): Malicious code in tranquil-icejo-vynb2-ember-project (npm) (malicious package)
- [MAL-2025-37145](https://insights.sbomify.com/MAL-2025-37145/): Malicious code in tranquil-7gvja-sihpf-gale-project (npm) (malicious package)
- [MAL-2025-37144](https://insights.sbomify.com/MAL-2025-37144/): Malicious code in tranquil-36orr-923lv-echo-project (npm) (malicious package)
- [MAL-2025-37143](https://insights.sbomify.com/MAL-2025-37143/): Malicious code in trango (npm) (malicious package)
- [MAL-2025-37142](https://insights.sbomify.com/MAL-2025-37142/): Malicious code in tramqp (npm) (malicious package)
- [MAL-2025-37141](https://insights.sbomify.com/MAL-2025-37141/): Malicious code in traktical (npm) (malicious package)
- [MAL-2025-37140](https://insights.sbomify.com/MAL-2025-37140/): Malicious code in trainui (npm) (malicious package)
- [MAL-2025-3714](https://insights.sbomify.com/MAL-2025-3714/): Malicious code in crisp-import-conversations (npm) (malicious package)
- [MAL-2025-37139](https://insights.sbomify.com/MAL-2025-37139/): Malicious code in trainapi (npm) (malicious package)
- [MAL-2025-37138](https://insights.sbomify.com/MAL-2025-37138/): Malicious code in traider (npm) (malicious package)
- [MAL-2025-37137](https://insights.sbomify.com/MAL-2025-37137/): Malicious code in trafmon (npm) (malicious package)
- [MAL-2025-37136](https://insights.sbomify.com/MAL-2025-37136/): Malicious code in traducir (npm) (malicious package)
- [MAL-2025-37135](https://insights.sbomify.com/MAL-2025-37135/): Malicious code in tradies (npm) (malicious package)
- [MAL-2025-37134](https://insights.sbomify.com/MAL-2025-37134/): Malicious code in tradicni (npm) (malicious package)
- [MAL-2025-37133](https://insights.sbomify.com/MAL-2025-37133/): Malicious code in traders-platform-library (npm) (malicious package)
- [MAL-2025-37132](https://insights.sbomify.com/MAL-2025-37132/): Malicious code in trademc (npm) (malicious package)
- [MAL-2025-37131](https://insights.sbomify.com/MAL-2025-37131/): Malicious code in tracksim (npm) (malicious package)
- [MAL-2025-37130](https://insights.sbomify.com/MAL-2025-37130/): Malicious code in traceur_test_module (npm) (malicious package)
- [MAL-2025-3713](https://insights.sbomify.com/MAL-2025-3713/): Malicious code in @dm3-org/dm3-lib-shared (npm) (malicious package)
- [MAL-2025-37129](https://insights.sbomify.com/MAL-2025-37129/): Malicious code in traceray (npm) (malicious package)
- [MAL-2025-37128](https://insights.sbomify.com/MAL-2025-37128/): Malicious code in traceid (npm) (malicious package)
- [MAL-2025-37127](https://insights.sbomify.com/MAL-2025-37127/): Malicious code in trace-log-builder (npm) (malicious package)
- [MAL-2025-37126](https://insights.sbomify.com/MAL-2025-37126/): Malicious code in tqsbeaigklrdphfn (npm) (malicious package)
- [MAL-2025-37125](https://insights.sbomify.com/MAL-2025-37125/): Malicious code in tpwjgfirhlekodkb (npm) (malicious package)
- [MAL-2025-37124](https://insights.sbomify.com/MAL-2025-37124/): Malicious code in tpsysteme (npm) (malicious package)
- [MAL-2025-37123](https://insights.sbomify.com/MAL-2025-37123/): Malicious code in tpl-browser (npm) (malicious package)
- [MAL-2025-37122](https://insights.sbomify.com/MAL-2025-37122/): Malicious code in tpkmean (npm) (malicious package)
- [MAL-2025-37121](https://insights.sbomify.com/MAL-2025-37121/): Malicious code in tpidqghklrmuoxna (npm) (malicious package)
- [MAL-2025-37120](https://insights.sbomify.com/MAL-2025-37120/): Malicious code in tpcexzlfrwiyuqmj (npm) (malicious package)
- [MAL-2025-3712](https://insights.sbomify.com/MAL-2025-3712/): Malicious code in eipsend (npm) (malicious package)
- [MAL-2025-37119](https://insights.sbomify.com/MAL-2025-37119/): Malicious code in toyparser (npm) (malicious package)
- [MAL-2025-37118](https://insights.sbomify.com/MAL-2025-37118/): Malicious code in toymwjuidplxzvkb (npm) (malicious package)
- [MAL-2025-37117](https://insights.sbomify.com/MAL-2025-37117/): Malicious code in toyint (npm) (malicious package)
- [MAL-2025-37116](https://insights.sbomify.com/MAL-2025-37116/): Malicious code in toxiproxy (npm) (malicious package)
- [MAL-2025-37115](https://insights.sbomify.com/MAL-2025-37115/): Malicious code in towelguy (npm) (malicious package)
- [MAL-2025-37114](https://insights.sbomify.com/MAL-2025-37114/): Malicious code in touziriji (npm) (malicious package)
- [MAL-2025-37113](https://insights.sbomify.com/MAL-2025-37113/): Malicious code in toutouda (npm) (malicious package)
- [MAL-2025-37112](https://insights.sbomify.com/MAL-2025-37112/): Malicious code in tourman (npm) (malicious package)
- [MAL-2025-37111](https://insights.sbomify.com/MAL-2025-37111/): Malicious code in tour-gateway (npm) (malicious package)
- [MAL-2025-37110](https://insights.sbomify.com/MAL-2025-37110/): Malicious code in touhoufm (npm) (malicious package)
- [MAL-2025-3711](https://insights.sbomify.com/MAL-2025-3711/): Malicious code in @phone_base_ui/base_call (npm) (malicious package)
- [MAL-2025-37109](https://insights.sbomify.com/MAL-2025-37109/): Malicious code in touchpro (npm) (malicious package)
- [MAL-2025-37108](https://insights.sbomify.com/MAL-2025-37108/): Malicious code in touchnuts (npm) (malicious package)
- [MAL-2025-37107](https://insights.sbomify.com/MAL-2025-37107/): Malicious code in touchmaster3000 (npm) (malicious package)
- [MAL-2025-37106](https://insights.sbomify.com/MAL-2025-37106/): Malicious code in touch-move (npm) (malicious package)
- [MAL-2025-37105](https://insights.sbomify.com/MAL-2025-37105/): Malicious code in totododo (npm) (malicious package)
- [MAL-2025-37104](https://insights.sbomify.com/MAL-2025-37104/): Malicious code in toscolino (npm) (malicious package)
- [MAL-2025-37103](https://insights.sbomify.com/MAL-2025-37103/): Malicious code in torturous (npm) (malicious package)
- [MAL-2025-37102](https://insights.sbomify.com/MAL-2025-37102/): Malicious code in torsten (npm) (malicious package)
- [MAL-2025-37101](https://insights.sbomify.com/MAL-2025-37101/): Malicious code in torrinfo (npm) (malicious package)
- [MAL-2025-37100](https://insights.sbomify.com/MAL-2025-37100/): Malicious code in torrentt (npm) (malicious package)
- [MAL-2025-3710](https://insights.sbomify.com/MAL-2025-3710/): Malicious code in design-system-cmp (npm) (malicious package)
- [MAL-2025-371](https://insights.sbomify.com/MAL-2025-371/): Malicious code in amazon-auth (npm) (malicious package)
- [MAL-2025-37099](https://insights.sbomify.com/MAL-2025-37099/): Malicious code in torrent-quaver-yxr253-project (npm) (malicious package)
- [MAL-2025-37098](https://insights.sbomify.com/MAL-2025-37098/): Malicious code in torrent-oak-sxs937-project (npm) (malicious package)
- [MAL-2025-37097](https://insights.sbomify.com/MAL-2025-37097/): Malicious code in tornform (npm) (malicious package)
- [MAL-2025-37096](https://insights.sbomify.com/MAL-2025-37096/): Malicious code in tornado-xylophone-svx809-project (npm) (malicious package)
- [MAL-2025-37095](https://insights.sbomify.com/MAL-2025-37095/): Malicious code in tornado-wormhole-qrcx (npm) (malicious package)
- [MAL-2025-37094](https://insights.sbomify.com/MAL-2025-37094/): Malicious code in tornado-uranium-zke269-project (npm) (malicious package)
- [MAL-2025-37093](https://insights.sbomify.com/MAL-2025-37093/): Malicious code in tornado-sierra-anoh (npm) (malicious package)
- [MAL-2025-37092](https://insights.sbomify.com/MAL-2025-37092/): Malicious code in tornado-quartz-olo327-project (npm) (malicious package)
- [MAL-2025-37091](https://insights.sbomify.com/MAL-2025-37091/): Malicious code in tornado-pebble-kmt728-project (npm) (malicious package)
- [MAL-2025-37090](https://insights.sbomify.com/MAL-2025-37090/): Malicious code in tornado-observatory-l8xh (npm) (malicious package)
- [MAL-2025-3709](https://insights.sbomify.com/MAL-2025-3709/): Malicious code in earthdata-search (npm) (malicious package)
- [MAL-2025-37089](https://insights.sbomify.com/MAL-2025-37089/): Malicious code in tornado-kiwi-gzs038-project (npm) (malicious package)
- [MAL-2025-37088](https://insights.sbomify.com/MAL-2025-37088/): Malicious code in tornado-island-bvh173-project (npm) (malicious package)
- [MAL-2025-37087](https://insights.sbomify.com/MAL-2025-37087/): Malicious code in tornado-gorilla-uxy824-project (npm) (malicious package)
- [MAL-2025-37086](https://insights.sbomify.com/MAL-2025-37086/): Malicious code in tornado-everest-jku189-project (npm) (malicious package)
- [MAL-2025-37085](https://insights.sbomify.com/MAL-2025-37085/): Malicious code in tornado-dragon-jyk498-project (npm) (malicious package)
- [MAL-2025-37084](https://insights.sbomify.com/MAL-2025-37084/): Malicious code in tornado-butterfly-zfw073-project (npm) (malicious package)
- [MAL-2025-37083](https://insights.sbomify.com/MAL-2025-37083/): Malicious code in tornado-asteroid-n3ot (npm) (malicious package)
- [MAL-2025-37082](https://insights.sbomify.com/MAL-2025-37082/): Malicious code in tornado-acorn-m6fv (npm) (malicious package)
- [MAL-2025-37081](https://insights.sbomify.com/MAL-2025-37081/): Malicious code in toreev (npm) (malicious package)
- [MAL-2025-37080](https://insights.sbomify.com/MAL-2025-37080/): Malicious code in toredis (npm) (malicious package)
- [MAL-2025-3708](https://insights.sbomify.com/MAL-2025-3708/): Malicious code in buidl-wallet-contracts (npm) (malicious package)
- [MAL-2025-37079](https://insights.sbomify.com/MAL-2025-37079/): Malicious code in topshou (npm) (malicious package)
- [MAL-2025-37078](https://insights.sbomify.com/MAL-2025-37078/): Malicious code in topots (npm) (malicious package)
- [MAL-2025-37077](https://insights.sbomify.com/MAL-2025-37077/): Malicious code in topito (npm) (malicious package)
- [MAL-2025-37076](https://insights.sbomify.com/MAL-2025-37076/): Malicious code in topicrush (npm) (malicious package)
- [MAL-2025-37075](https://insights.sbomify.com/MAL-2025-37075/): Malicious code in topheman (npm) (malicious package)
- [MAL-2025-37074](https://insights.sbomify.com/MAL-2025-37074/): Malicious code in topaz_sfexy_svvcc_limestone (npm) (malicious package)
- [MAL-2025-37073](https://insights.sbomify.com/MAL-2025-37073/): Malicious code in topaz_fdj67_b4fdl_isotope (npm) (malicious package)
- [MAL-2025-37072](https://insights.sbomify.com/MAL-2025-37072/): Malicious code in topaz_8r96l_wz7sd_kryptonite (npm) (malicious package)
- [MAL-2025-37071](https://insights.sbomify.com/MAL-2025-37071/): Malicious code in topaz-xerox-nje139-project (npm) (malicious package)
- [MAL-2025-37070](https://insights.sbomify.com/MAL-2025-37070/): Malicious code in topaz-vortex-usk262-project (npm) (malicious package)
- [MAL-2025-3707](https://insights.sbomify.com/MAL-2025-3707/): Malicious code in @styletime/eslint-config (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/701/