# Vulnerabilities published in 2025


- [MAL-2025-37069](https://insights.sbomify.com/MAL-2025-37069/): Malicious code in topaz-vista-kth544-project (npm) (malicious package)
- [MAL-2025-37068](https://insights.sbomify.com/MAL-2025-37068/): Malicious code in topaz-ripple-gfr006-project (npm) (malicious package)
- [MAL-2025-37067](https://insights.sbomify.com/MAL-2025-37067/): Malicious code in topaz-quartz-cvt252-project (npm) (malicious package)
- [MAL-2025-37066](https://insights.sbomify.com/MAL-2025-37066/): Malicious code in topaz-orangutan-qfd150-project (npm) (malicious package)
- [MAL-2025-37065](https://insights.sbomify.com/MAL-2025-37065/): Malicious code in topaz-nugget-qjc168-project (npm) (malicious package)
- [MAL-2025-37064](https://insights.sbomify.com/MAL-2025-37064/): Malicious code in topaz-nebula-ksb955-project (npm) (malicious package)
- [MAL-2025-37063](https://insights.sbomify.com/MAL-2025-37063/): Malicious code in topaz-leopard-kdb618-project (npm) (malicious package)
- [MAL-2025-37062](https://insights.sbomify.com/MAL-2025-37062/): Malicious code in topaz-hill-yeo717-project (npm) (malicious package)
- [MAL-2025-37061](https://insights.sbomify.com/MAL-2025-37061/): Malicious code in topaz-hill-jsi445-project (npm) (malicious package)
- [MAL-2025-37060](https://insights.sbomify.com/MAL-2025-37060/): Malicious code in topaz-hedgehog-pew978-project (npm) (malicious package)
- [MAL-2025-3706](https://insights.sbomify.com/MAL-2025-3706/): Malicious code in @igain/react-app (npm) (malicious package)
- [MAL-2025-37059](https://insights.sbomify.com/MAL-2025-37059/): Malicious code in topaz-glade-gfb040-project (npm) (malicious package)
- [MAL-2025-37058](https://insights.sbomify.com/MAL-2025-37058/): Malicious code in topaz-giraffe-hcd412-project (npm) (malicious package)
- [MAL-2025-37057](https://insights.sbomify.com/MAL-2025-37057/): Malicious code in topaz-elephant-qhp101-project (npm) (malicious package)
- [MAL-2025-37056](https://insights.sbomify.com/MAL-2025-37056/): Malicious code in topaz-delta-rew535-project (npm) (malicious package)
- [MAL-2025-37055](https://insights.sbomify.com/MAL-2025-37055/): Malicious code in topaz-cloud-owz473-project (npm) (malicious package)
- [MAL-2025-37054](https://insights.sbomify.com/MAL-2025-37054/): Malicious code in topaz-aspen-kcg868-project (npm) (malicious package)
- [MAL-2025-37053](https://insights.sbomify.com/MAL-2025-37053/): Malicious code in topaz-acorn-sbr789-project (npm) (malicious package)
- [MAL-2025-37052](https://insights.sbomify.com/MAL-2025-37052/): Malicious code in top4smm (npm) (malicious package)
- [MAL-2025-37051](https://insights.sbomify.com/MAL-2025-37051/): Malicious code in Toolshed-Client (npm) (malicious package)
- [MAL-2025-37050](https://insights.sbomify.com/MAL-2025-37050/): Malicious code in tools-bridge (npm) (malicious package)
- [MAL-2025-3705](https://insights.sbomify.com/MAL-2025-3705/): Malicious code in @mstrlibrary/rc-slider (npm) (malicious package)
- [MAL-2025-37049](https://insights.sbomify.com/MAL-2025-37049/): Malicious code in toolkdvv (npm) (malicious package)
- [MAL-2025-37048](https://insights.sbomify.com/MAL-2025-37048/): Malicious code in toolheads (npm) (malicious package)
- [MAL-2025-37047](https://insights.sbomify.com/MAL-2025-37047/): Malicious code in toolcards (npm) (malicious package)
- [MAL-2025-37046](https://insights.sbomify.com/MAL-2025-37046/): Malicious code in toolbox-pharma (npm) (malicious package)
- [MAL-2025-37045](https://insights.sbomify.com/MAL-2025-37045/): Malicious code in toolapps (npm) (malicious package)
- [MAL-2025-37044](https://insights.sbomify.com/MAL-2025-37044/): Malicious code in tool-lepton-telesto-webpack (npm) (malicious package)
- [MAL-2025-37043](https://insights.sbomify.com/MAL-2025-37043/): Malicious code in tool-koa-technocracy-ariel (npm) (malicious package)
- [MAL-2025-37042](https://insights.sbomify.com/MAL-2025-37042/): Malicious code in tool-dorado-framework-vuetify (npm) (malicious package)
- [MAL-2025-37041](https://insights.sbomify.com/MAL-2025-37041/): Malicious code in tool-command-version-chariklo (npm) (malicious package)
- [MAL-2025-37040](https://insights.sbomify.com/MAL-2025-37040/): Malicious code in tool-chalk-quasarjet-spectroscopy (npm) (malicious package)
- [MAL-2025-3704](https://insights.sbomify.com/MAL-2025-3704/): Malicious code in opensource.ripple.com (npm) (malicious package)
- [MAL-2025-37039](https://insights.sbomify.com/MAL-2025-37039/): Malicious code in tool-arcturus-luna-proxima (npm) (malicious package)
- [MAL-2025-37038](https://insights.sbomify.com/MAL-2025-37038/): Malicious code in tool-aquarius-terser-webpack-plugin-jekyll (npm) (malicious package)
- [MAL-2025-37037](https://insights.sbomify.com/MAL-2025-37037/): Malicious code in tonypia (npm) (malicious package)
- [MAL-2025-37036](https://insights.sbomify.com/MAL-2025-37036/): Malicious code in tongxue (npm) (malicious package)
- [MAL-2025-37035](https://insights.sbomify.com/MAL-2025-37035/): Malicious code in tonegen (npm) (malicious package)
- [MAL-2025-37034](https://insights.sbomify.com/MAL-2025-37034/): Malicious code in tomomatch (npm) (malicious package)
- [MAL-2025-37033](https://insights.sbomify.com/MAL-2025-37033/): Malicious code in tommyc (npm) (malicious package)
- [MAL-2025-37032](https://insights.sbomify.com/MAL-2025-37032/): Malicious code in toml-private-cosmos-entanglement (npm) (malicious package)
- [MAL-2025-37031](https://insights.sbomify.com/MAL-2025-37031/): Malicious code in toml-karma-nodejs-rocket (npm) (malicious package)
- [MAL-2025-37030](https://insights.sbomify.com/MAL-2025-37030/): Malicious code in tomi-tempe82-sukiwir (npm) (malicious package)
- [MAL-2025-3703](https://insights.sbomify.com/MAL-2025-3703/): Malicious code in @ltcp/ui (npm) (malicious package)
- [MAL-2025-37029](https://insights.sbomify.com/MAL-2025-37029/): Malicious code in tomi-sego46-breki (npm) (malicious package)
- [MAL-2025-37028](https://insights.sbomify.com/MAL-2025-37028/): Malicious code in tomi-sambel98-sukiwir (npm) (malicious package)
- [MAL-2025-37027](https://insights.sbomify.com/MAL-2025-37027/): Malicious code in tomi-mangga53-breki (npm) (malicious package)
- [MAL-2025-37026](https://insights.sbomify.com/MAL-2025-37026/): Malicious code in tomi-lutis4-breki (npm) (malicious package)
- [MAL-2025-37025](https://insights.sbomify.com/MAL-2025-37025/): Malicious code in tomi-kupat91-kuki (npm) (malicious package)
- [MAL-2025-37024](https://insights.sbomify.com/MAL-2025-37024/): Malicious code in tomi-kue3-kuki (npm) (malicious package)
- [MAL-2025-37023](https://insights.sbomify.com/MAL-2025-37023/): Malicious code in tomasulos (npm) (malicious package)
- [MAL-2025-37022](https://insights.sbomify.com/MAL-2025-37022/): Malicious code in toluna-frontend-infrastructure (npm) (malicious package)
- [MAL-2025-37021](https://insights.sbomify.com/MAL-2025-37021/): Malicious code in toluna-frontend-components (npm) (malicious package)
- [MAL-2025-37020](https://insights.sbomify.com/MAL-2025-37020/): Malicious code in toloka-templates-server (npm) (malicious package)
- [MAL-2025-3702](https://insights.sbomify.com/MAL-2025-3702/): Malicious code in @cewe-phoenix-themes/default-theme (npm) (malicious package)
- [MAL-2025-37019](https://insights.sbomify.com/MAL-2025-37019/): Malicious code in toloka-templates-kit (npm) (malicious package)
- [MAL-2025-37018](https://insights.sbomify.com/MAL-2025-37018/): Malicious code in tolmarsync (npm) (malicious package)
- [MAL-2025-37017](https://insights.sbomify.com/MAL-2025-37017/): Malicious code in toledo-chess (npm) (malicious package)
- [MAL-2025-37016](https://insights.sbomify.com/MAL-2025-37016/): Malicious code in tokenservice-paypal (npm) (malicious package)
- [MAL-2025-37015](https://insights.sbomify.com/MAL-2025-37015/): Malicious code in token-utils (npm) (malicious package)
- [MAL-2025-37014](https://insights.sbomify.com/MAL-2025-37014/): Malicious code in token-send (npm) (malicious package)
- [MAL-2025-37013](https://insights.sbomify.com/MAL-2025-37013/): Malicious code in token-converter (npm) (malicious package)
- [MAL-2025-37012](https://insights.sbomify.com/MAL-2025-37012/): Malicious code in toictest (npm) (malicious package)
- [MAL-2025-37011](https://insights.sbomify.com/MAL-2025-37011/): Malicious code in togglepin (npm) (malicious package)
- [MAL-2025-37010](https://insights.sbomify.com/MAL-2025-37010/): Malicious code in toggle-nose (npm) (malicious package)
- [MAL-2025-3701](https://insights.sbomify.com/MAL-2025-3701/): Malicious code in @walmart-dataventures/integrated-components (npm) (malicious package)
- [MAL-2025-37009](https://insights.sbomify.com/MAL-2025-37009/): Malicious code in toessay (npm) (malicious package)
- [MAL-2025-37008](https://insights.sbomify.com/MAL-2025-37008/): Malicious code in todo-bitpanda-client (npm) (malicious package)
- [MAL-2025-37007](https://insights.sbomify.com/MAL-2025-37007/): Malicious code in todlib (npm) (malicious package)
- [MAL-2025-37006](https://insights.sbomify.com/MAL-2025-37006/): Malicious code in tobyweb (npm) (malicious package)
- [MAL-2025-37005](https://insights.sbomify.com/MAL-2025-37005/): Malicious code in toba-batak-dictionary (npm) (malicious package)
- [MAL-2025-37004](https://insights.sbomify.com/MAL-2025-37004/): Malicious code in toastbox (npm) (malicious package)
- [MAL-2025-37003](https://insights.sbomify.com/MAL-2025-37003/): Malicious code in to32 (npm) (malicious package)
- [MAL-2025-37002](https://insights.sbomify.com/MAL-2025-37002/): Malicious code in to-slug (npm) (malicious package)
- [MAL-2025-37001](https://insights.sbomify.com/MAL-2025-37001/): Malicious code in to-class-name (npm) (malicious package)
- [MAL-2025-37000](https://insights.sbomify.com/MAL-2025-37000/): Malicious code in tnmbwkhxlaucgefk (npm) (malicious package)
- [MAL-2025-3700](https://insights.sbomify.com/MAL-2025-3700/): Malicious code in airmason-employee (npm) (malicious package)
- [MAL-2025-370](https://insights.sbomify.com/MAL-2025-370/): Malicious code in amazon-api-client (npm) (malicious package)
- [MAL-2025-37](https://insights.sbomify.com/MAL-2025-37/): Malicious code in shopify-ecommerce-shopping-cart (npm) (malicious package)
- [MAL-2025-36999](https://insights.sbomify.com/MAL-2025-36999/): Malicious code in tnkscruikhmbjgfl (npm) (malicious package)
- [MAL-2025-36998](https://insights.sbomify.com/MAL-2025-36998/): Malicious code in tmw-shell-angular2 (npm) (malicious package)
- [MAL-2025-36997](https://insights.sbomify.com/MAL-2025-36997/): Malicious code in tmsxkrpdqicygjwf (npm) (malicious package)
- [MAL-2025-36996](https://insights.sbomify.com/MAL-2025-36996/): Malicious code in tmswitch (npm) (malicious package)
- [MAL-2025-36995](https://insights.sbomify.com/MAL-2025-36995/): Malicious code in tmp-tmp3 (npm) (malicious package)
- [MAL-2025-36994](https://insights.sbomify.com/MAL-2025-36994/): Malicious code in tmnetwork (npm) (malicious package)
- [MAL-2025-36993](https://insights.sbomify.com/MAL-2025-36993/): Malicious code in tmennywww (npm) (malicious package)
- [MAL-2025-36992](https://insights.sbomify.com/MAL-2025-36992/): Malicious code in tmcvid (npm) (malicious package)
- [MAL-2025-36991](https://insights.sbomify.com/MAL-2025-36991/): Malicious code in tma-serve-mobiledeviceunlock (npm) (malicious package)
- [MAL-2025-36990](https://insights.sbomify.com/MAL-2025-36990/): Malicious code in tma-framework (npm) (malicious package)
- [MAL-2025-3699](https://insights.sbomify.com/MAL-2025-3699/): Malicious code in toast-sliders (npm) (malicious package)
- [MAL-2025-36989](https://insights.sbomify.com/MAL-2025-36989/): Malicious code in tlt658 (npm) (malicious package)
- [MAL-2025-36988](https://insights.sbomify.com/MAL-2025-36988/): Malicious code in tlkwebrtc (npm) (malicious package)
- [MAL-2025-36987](https://insights.sbomify.com/MAL-2025-36987/): Malicious code in tleilaxus (npm) (malicious package)
- [MAL-2025-36986](https://insights.sbomify.com/MAL-2025-36986/): Malicious code in tleilaxu (npm) (malicious package)
- [MAL-2025-36985](https://insights.sbomify.com/MAL-2025-36985/): Malicious code in tl-creat (npm) (malicious package)
- [MAL-2025-36984](https://insights.sbomify.com/MAL-2025-36984/): Malicious code in tkbnp4 (npm) (malicious package)
- [MAL-2025-36983](https://insights.sbomify.com/MAL-2025-36983/): Malicious code in tk-engine (npm) (malicious package)
- [MAL-2025-36982](https://insights.sbomify.com/MAL-2025-36982/): Malicious code in tjdft-tabela-dinamica (npm) (malicious package)
- [MAL-2025-36981](https://insights.sbomify.com/MAL-2025-36981/): Malicious code in tjaman (npm) (malicious package)
- [MAL-2025-36980](https://insights.sbomify.com/MAL-2025-36980/): Malicious code in titorob (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/702/