# Vulnerabilities published in 2025 - [MAL-2025-3698](https://insights.sbomify.com/MAL-2025-3698/): Malicious code in substrate-faucet (npm) (malicious package) - [MAL-2025-36979](https://insights.sbomify.com/MAL-2025-36979/): Malicious code in titletip (npm) (malicious package) - [MAL-2025-36978](https://insights.sbomify.com/MAL-2025-36978/): Malicious code in titletag (npm) (malicious package) - [MAL-2025-36977](https://insights.sbomify.com/MAL-2025-36977/): Malicious code in title-from-url (npm) (malicious package) - [MAL-2025-36976](https://insights.sbomify.com/MAL-2025-36976/): Malicious code in titanpaas (npm) (malicious package) - [MAL-2025-36975](https://insights.sbomify.com/MAL-2025-36975/): Malicious code in titancna (npm) (malicious package) - [MAL-2025-36974](https://insights.sbomify.com/MAL-2025-36974/): Malicious code in titan-ugli-2zhw (npm) (malicious package) - [MAL-2025-36973](https://insights.sbomify.com/MAL-2025-36973/): Malicious code in titan-testcafe-registry-mongodb (npm) (malicious package) - [MAL-2025-36972](https://insights.sbomify.com/MAL-2025-36972/): Malicious code in titan-steganography-redis-publish (npm) (malicious package) - [MAL-2025-36971](https://insights.sbomify.com/MAL-2025-36971/): Malicious code in titan-singularitarianism-terser-venus (npm) (malicious package) - [MAL-2025-36970](https://insights.sbomify.com/MAL-2025-36970/): Malicious code in titan-react-components (npm) (malicious package) - [MAL-2025-3697](https://insights.sbomify.com/MAL-2025-3697/): Malicious code in poc-sim (npm) (malicious package) - [MAL-2025-36969](https://insights.sbomify.com/MAL-2025-36969/): Malicious code in titan-quince-idp5 (npm) (malicious package) - [MAL-2025-36968](https://insights.sbomify.com/MAL-2025-36968/): Malicious code in titan-quasar-8jq8 (npm) (malicious package) - [MAL-2025-36967](https://insights.sbomify.com/MAL-2025-36967/): Malicious code in titan-pino-pretty-bellatrix-cassini (npm) (malicious package) - [MAL-2025-36966](https://insights.sbomify.com/MAL-2025-36966/): Malicious code in titan-jetty-osi5 (npm) (malicious package) - [MAL-2025-36965](https://insights.sbomify.com/MAL-2025-36965/): Malicious code in titan-fig-rooi (npm) (malicious package) - [MAL-2025-36964](https://insights.sbomify.com/MAL-2025-36964/): Malicious code in titan-concurrently-adonis-leda (npm) (malicious package) - [MAL-2025-36963](https://insights.sbomify.com/MAL-2025-36963/): Malicious code in tiptoc (npm) (malicious package) - [MAL-2025-36962](https://insights.sbomify.com/MAL-2025-36962/): Malicious code in tiprash (npm) (malicious package) - [MAL-2025-36961](https://insights.sbomify.com/MAL-2025-36961/): Malicious code in tipico-live-chat (npm) (malicious package) - [MAL-2025-36960](https://insights.sbomify.com/MAL-2025-36960/): Malicious code in tipcalcjs (npm) (malicious package) - [MAL-2025-3696](https://insights.sbomify.com/MAL-2025-3696/): Malicious code in poc-npm-hooks (npm) (malicious package) - [MAL-2025-36959](https://insights.sbomify.com/MAL-2025-36959/): Malicious code in tipbook (npm) (malicious package) - [MAL-2025-36958](https://insights.sbomify.com/MAL-2025-36958/): Malicious code in tinyurl-class-module (npm) (malicious package) - [MAL-2025-36957](https://insights.sbomify.com/MAL-2025-36957/): Malicious code in tinyspot (npm) (malicious package) - [MAL-2025-36956](https://insights.sbomify.com/MAL-2025-36956/): Malicious code in tinyplus2 (npm) (malicious package) - [MAL-2025-36955](https://insights.sbomify.com/MAL-2025-36955/): Malicious code in tinydial (npm) (malicious package) - [MAL-2025-36954](https://insights.sbomify.com/MAL-2025-36954/): Malicious code in tinycnc (npm) (malicious package) - [MAL-2025-36953](https://insights.sbomify.com/MAL-2025-36953/): Malicious code in tiny-png (npm) (malicious package) - [MAL-2025-36952](https://insights.sbomify.com/MAL-2025-36952/): Malicious code in tiny-jpg (npm) (malicious package) - [MAL-2025-36951](https://insights.sbomify.com/MAL-2025-36951/): Malicious code in tinnfo (npm) (malicious package) - [MAL-2025-36950](https://insights.sbomify.com/MAL-2025-36950/): Malicious code in tinkers (npm) (malicious package) - [MAL-2025-3695](https://insights.sbomify.com/MAL-2025-3695/): Malicious code in poc-malicious-sim (npm) (malicious package) - [MAL-2025-36949](https://insights.sbomify.com/MAL-2025-36949/): Malicious code in tindev (npm) (malicious package) - [MAL-2025-36948](https://insights.sbomify.com/MAL-2025-36948/): Malicious code in timsapp (npm) (malicious package) - [MAL-2025-36947](https://insights.sbomify.com/MAL-2025-36947/): Malicious code in timmapps (npm) (malicious package) - [MAL-2025-36946](https://insights.sbomify.com/MAL-2025-36946/): Malicious code in timetick (npm) (malicious package) - [MAL-2025-36945](https://insights.sbomify.com/MAL-2025-36945/): Malicious code in timerfun (npm) (malicious package) - [MAL-2025-36944](https://insights.sbomify.com/MAL-2025-36944/): Malicious code in timenesia (npm) (malicious package) - [MAL-2025-36943](https://insights.sbomify.com/MAL-2025-36943/): Malicious code in timegrab (npm) (malicious package) - [MAL-2025-36942](https://insights.sbomify.com/MAL-2025-36942/): Malicious code in timedate (npm) (malicious package) - [MAL-2025-36941](https://insights.sbomify.com/MAL-2025-36941/): Malicious code in timebug (npm) (malicious package) - [MAL-2025-36940](https://insights.sbomify.com/MAL-2025-36940/): Malicious code in timeball (npm) (malicious package) - [MAL-2025-3694](https://insights.sbomify.com/MAL-2025-3694/): Malicious code in pixel-percent (npm) (malicious package) - [MAL-2025-36939](https://insights.sbomify.com/MAL-2025-36939/): Malicious code in timber-ui (npm) (malicious package) - [MAL-2025-36938](https://insights.sbomify.com/MAL-2025-36938/): Malicious code in timber-js (npm) (malicious package) - [MAL-2025-36937](https://insights.sbomify.com/MAL-2025-36937/): Malicious code in timber-fn (npm) (malicious package) - [MAL-2025-36936](https://insights.sbomify.com/MAL-2025-36936/): Malicious code in timber-console (npm) (malicious package) - [MAL-2025-36935](https://insights.sbomify.com/MAL-2025-36935/): Malicious code in tiltco (npm) (malicious package) - [MAL-2025-36934](https://insights.sbomify.com/MAL-2025-36934/): Malicious code in tilizer (npm) (malicious package) - [MAL-2025-36933](https://insights.sbomify.com/MAL-2025-36933/): Malicious code in tiktokdl-api (npm) (malicious package) - [MAL-2025-36932](https://insights.sbomify.com/MAL-2025-36932/): Malicious code in tikitank (npm) (malicious package) - [MAL-2025-36931](https://insights.sbomify.com/MAL-2025-36931/): Malicious code in tiketu (npm) (malicious package) - [MAL-2025-36930](https://insights.sbomify.com/MAL-2025-36930/): Malicious code in tightwad (npm) (malicious package) - [MAL-2025-3693](https://insights.sbomify.com/MAL-2025-3693/): Malicious code in outline-shadowsocksconfig (npm) (malicious package) - [MAL-2025-36929](https://insights.sbomify.com/MAL-2025-36929/): Malicious code in tiger-xerox-zyd844-project (npm) (malicious package) - [MAL-2025-36928](https://insights.sbomify.com/MAL-2025-36928/): Malicious code in tiger-whale-wqe323-project (npm) (malicious package) - [MAL-2025-36927](https://insights.sbomify.com/MAL-2025-36927/): Malicious code in tiger-reef-nor282-project (npm) (malicious package) - [MAL-2025-36926](https://insights.sbomify.com/MAL-2025-36926/): Malicious code in tiger-quill-com417-project (npm) (malicious package) - [MAL-2025-36925](https://insights.sbomify.com/MAL-2025-36925/): Malicious code in tiger-quartz-fbg929-project (npm) (malicious package) - [MAL-2025-36924](https://insights.sbomify.com/MAL-2025-36924/): Malicious code in tiger-nugget-eit827-project (npm) (malicious package) - [MAL-2025-36923](https://insights.sbomify.com/MAL-2025-36923/): Malicious code in tiger-lava-znd582-project (npm) (malicious package) - [MAL-2025-36922](https://insights.sbomify.com/MAL-2025-36922/): Malicious code in tiger-glacier-wkp339-project (npm) (malicious package) - [MAL-2025-36921](https://insights.sbomify.com/MAL-2025-36921/): Malicious code in tiger-dewdrop-efr734-project (npm) (malicious package) - [MAL-2025-36920](https://insights.sbomify.com/MAL-2025-36920/): Malicious code in tiger-daytrend (npm) (malicious package) - [MAL-2025-3692](https://insights.sbomify.com/MAL-2025-3692/): Malicious code in orvyn (npm) (malicious package) - [MAL-2025-36919](https://insights.sbomify.com/MAL-2025-36919/): Malicious code in tiger-amber-ayt304-project (npm) (malicious package) - [MAL-2025-36918](https://insights.sbomify.com/MAL-2025-36918/): Malicious code in tifeedly (npm) (malicious package) - [MAL-2025-36917](https://insights.sbomify.com/MAL-2025-36917/): Malicious code in tieude (npm) (malicious package) - [MAL-2025-36916](https://insights.sbomify.com/MAL-2025-36916/): Malicious code in tiendapvp (npm) (malicious package) - [MAL-2025-36915](https://insights.sbomify.com/MAL-2025-36915/): Malicious code in tide-zephyr-jtg469-project (npm) (malicious package) - [MAL-2025-36914](https://insights.sbomify.com/MAL-2025-36914/): Malicious code in tide-zenith-azh339-project (npm) (malicious package) - [MAL-2025-36913](https://insights.sbomify.com/MAL-2025-36913/): Malicious code in tide-xerox-tyl414-project (npm) (malicious package) - [MAL-2025-36912](https://insights.sbomify.com/MAL-2025-36912/): Malicious code in tide-xenon-ngd617-project (npm) (malicious package) - [MAL-2025-36911](https://insights.sbomify.com/MAL-2025-36911/): Malicious code in tide-xac1b-b9n1c-glow-project (npm) (malicious package) - [MAL-2025-36910](https://insights.sbomify.com/MAL-2025-36910/): Malicious code in tide-wbbio-36nk6-raven-project (npm) (malicious package) - [MAL-2025-3691](https://insights.sbomify.com/MAL-2025-3691/): Malicious code in log-task (npm) (malicious package) - [MAL-2025-36909](https://insights.sbomify.com/MAL-2025-36909/): Malicious code in tide-uranium-uep495-project (npm) (malicious package) - [MAL-2025-36908](https://insights.sbomify.com/MAL-2025-36908/): Malicious code in tide-uadxu-kt7o9-zenith-project (npm) (malicious package) - [MAL-2025-36907](https://insights.sbomify.com/MAL-2025-36907/): Malicious code in tide-sw3hm-lyf4r-pinnacle-project (npm) (malicious package) - [MAL-2025-36906](https://insights.sbomify.com/MAL-2025-36906/): Malicious code in tide-saturn-fzi583-project (npm) (malicious package) - [MAL-2025-36905](https://insights.sbomify.com/MAL-2025-36905/): Malicious code in tide-quill-odq747-project (npm) (malicious package) - [MAL-2025-36904](https://insights.sbomify.com/MAL-2025-36904/): Malicious code in tide-pi177-xsnti-kismet-project (npm) (malicious package) - [MAL-2025-36903](https://insights.sbomify.com/MAL-2025-36903/): Malicious code in tide-peacock-oqf232-project (npm) (malicious package) - [MAL-2025-36902](https://insights.sbomify.com/MAL-2025-36902/): Malicious code in tide-paradise-xzv241-project (npm) (malicious package) - [MAL-2025-36901](https://insights.sbomify.com/MAL-2025-36901/): Malicious code in tide-o00nn-9k15i-raven-project (npm) (malicious package) - [MAL-2025-36900](https://insights.sbomify.com/MAL-2025-36900/): Malicious code in tide-hammock-drr124-project (npm) (malicious package) - [MAL-2025-3690](https://insights.sbomify.com/MAL-2025-3690/): Malicious code in krnl-cli (npm) (malicious package) - [MAL-2025-369](https://insights.sbomify.com/MAL-2025-369/): Malicious code in amazon-analytics (npm) (malicious package) - [MAL-2025-36899](https://insights.sbomify.com/MAL-2025-36899/): Malicious code in tide-gorilla-dyv651-project (npm) (malicious package) - [MAL-2025-36898](https://insights.sbomify.com/MAL-2025-36898/): Malicious code in tide-f9oq1-ougwh-harmony-project (npm) (malicious package) - [MAL-2025-36897](https://insights.sbomify.com/MAL-2025-36897/): Malicious code in tide-everglow-qbc477-project (npm) (malicious package) - [MAL-2025-36896](https://insights.sbomify.com/MAL-2025-36896/): Malicious code in tide-everest-qsj060-project (npm) (malicious package) - [MAL-2025-36895](https://insights.sbomify.com/MAL-2025-36895/): Malicious code in tide-dove-ycs026-project (npm) (malicious package) - [MAL-2025-36894](https://insights.sbomify.com/MAL-2025-36894/): Malicious code in tide-cliff-vwi431-project (npm) (malicious package) - [MAL-2025-36893](https://insights.sbomify.com/MAL-2025-36893/): Malicious code in tide-9utan-vmksc-jasmine-project (npm) (malicious package) - [MAL-2025-36892](https://insights.sbomify.com/MAL-2025-36892/): Malicious code in tidb-dashboard-ui (npm) (malicious package) - [MAL-2025-36891](https://insights.sbomify.com/MAL-2025-36891/): Malicious code in tidalhifi.js (npm) (malicious package) - [MAL-2025-36890](https://insights.sbomify.com/MAL-2025-36890/): Malicious code in tictactor (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/703/