# Vulnerabilities published in 2025


- [MAL-2025-3689](https://insights.sbomify.com/MAL-2025-3689/): Malicious code in internal-lib-t1 (npm) (malicious package)
- [MAL-2025-36889](https://insights.sbomify.com/MAL-2025-36889/): Malicious code in ticktricktrack-stm (npm) (malicious package)
- [MAL-2025-36888](https://insights.sbomify.com/MAL-2025-36888/): Malicious code in tibuild (npm) (malicious package)
- [MAL-2025-36887](https://insights.sbomify.com/MAL-2025-36887/): Malicious code in tiara-wajit66-breki (npm) (malicious package)
- [MAL-2025-36886](https://insights.sbomify.com/MAL-2025-36886/): Malicious code in tiara-serimuka26-breki (npm) (malicious package)
- [MAL-2025-36885](https://insights.sbomify.com/MAL-2025-36885/): Malicious code in tiara-sambel42-kuki (npm) (malicious package)
- [MAL-2025-36884](https://insights.sbomify.com/MAL-2025-36884/): Malicious code in tiara-nasipecel51-sukiwir (npm) (malicious package)
- [MAL-2025-36883](https://insights.sbomify.com/MAL-2025-36883/): Malicious code in tiara-nasi62-breki (npm) (malicious package)
- [MAL-2025-36882](https://insights.sbomify.com/MAL-2025-36882/): Malicious code in tiara-menjes91-kuki (npm) (malicious package)
- [MAL-2025-36881](https://insights.sbomify.com/MAL-2025-36881/): Malicious code in tiara-kupat70-breki (npm) (malicious package)
- [MAL-2025-36880](https://insights.sbomify.com/MAL-2025-36880/): Malicious code in tiara-kue67-kuki (npm) (malicious package)
- [MAL-2025-3688](https://insights.sbomify.com/MAL-2025-3688/): Malicious code in identityaccesspointsrv (npm) (malicious package)
- [MAL-2025-36879](https://insights.sbomify.com/MAL-2025-36879/): Malicious code in tiara-buburayam88-sukiwir (npm) (malicious package)
- [MAL-2025-36878](https://insights.sbomify.com/MAL-2025-36878/): Malicious code in tiar (npm) (malicious package)
- [MAL-2025-36877](https://insights.sbomify.com/MAL-2025-36877/): Malicious code in tianyuan (npm) (malicious package)
- [MAL-2025-36876](https://insights.sbomify.com/MAL-2025-36876/): Malicious code in tia_cli (npm) (malicious package)
- [MAL-2025-36875](https://insights.sbomify.com/MAL-2025-36875/): Malicious code in tia-tests (npm) (malicious package)
- [MAL-2025-36874](https://insights.sbomify.com/MAL-2025-36874/): Malicious code in thunder_zzkrv_7mehz_verdant (npm) (malicious package)
- [MAL-2025-36873](https://insights.sbomify.com/MAL-2025-36873/): Malicious code in thunder_zr4lw_995ma_yellow (npm) (malicious package)
- [MAL-2025-36872](https://insights.sbomify.com/MAL-2025-36872/): Malicious code in thunder_umpmd_qz0gi_undertow (npm) (malicious package)
- [MAL-2025-36871](https://insights.sbomify.com/MAL-2025-36871/): Malicious code in thunder_safzo_90v7x_universe (npm) (malicious package)
- [MAL-2025-36870](https://insights.sbomify.com/MAL-2025-36870/): Malicious code in thunder_r6v3p_ifj1r_coral (npm) (malicious package)
- [MAL-2025-3687](https://insights.sbomify.com/MAL-2025-3687/): Malicious code in graphalgo (npm) (malicious package)
- [MAL-2025-36869](https://insights.sbomify.com/MAL-2025-36869/): Malicious code in thunder_c7511_mubga_prairie (npm) (malicious package)
- [MAL-2025-36868](https://insights.sbomify.com/MAL-2025-36868/): Malicious code in thunder-yonder-qpj361-project (npm) (malicious package)
- [MAL-2025-36867](https://insights.sbomify.com/MAL-2025-36867/): Malicious code in thunder-xylophone-spo981-project (npm) (malicious package)
- [MAL-2025-36866](https://insights.sbomify.com/MAL-2025-36866/): Malicious code in thunder-quasar-pfx038-project (npm) (malicious package)
- [MAL-2025-36865](https://insights.sbomify.com/MAL-2025-36865/): Malicious code in thunder-quail-ijh630-project (npm) (malicious package)
- [MAL-2025-36864](https://insights.sbomify.com/MAL-2025-36864/): Malicious code in thunder-nocturne-dtq065-project (npm) (malicious package)
- [MAL-2025-36863](https://insights.sbomify.com/MAL-2025-36863/): Malicious code in thunder-nectar-znj802-project (npm) (malicious package)
- [MAL-2025-36862](https://insights.sbomify.com/MAL-2025-36862/): Malicious code in thunder-nectar-eoj415-project (npm) (malicious package)
- [MAL-2025-36861](https://insights.sbomify.com/MAL-2025-36861/): Malicious code in thunder-kqc8w-0cwf8-coral-project (npm) (malicious package)
- [MAL-2025-36860](https://insights.sbomify.com/MAL-2025-36860/): Malicious code in thunder-koala-kis046-project (npm) (malicious package)
- [MAL-2025-3686](https://insights.sbomify.com/MAL-2025-3686/): Malicious code in glance-design (npm) (malicious package)
- [MAL-2025-36859](https://insights.sbomify.com/MAL-2025-36859/): Malicious code in thunder-kiwi-fci332-project (npm) (malicious package)
- [MAL-2025-36858](https://insights.sbomify.com/MAL-2025-36858/): Malicious code in thunder-kelp-hvt022-project (npm) (malicious package)
- [MAL-2025-36857](https://insights.sbomify.com/MAL-2025-36857/): Malicious code in thunder-jewel-yoq026-project (npm) (malicious package)
- [MAL-2025-36856](https://insights.sbomify.com/MAL-2025-36856/): Malicious code in thunder-iris-jur448-project (npm) (malicious package)
- [MAL-2025-36855](https://insights.sbomify.com/MAL-2025-36855/): Malicious code in thunder-honeycomb-gkr919-project (npm) (malicious package)
- [MAL-2025-36854](https://insights.sbomify.com/MAL-2025-36854/): Malicious code in thunder-grove-lgp975-project (npm) (malicious package)
- [MAL-2025-36853](https://insights.sbomify.com/MAL-2025-36853/): Malicious code in thunder-g9dfy-ny5bf-rose-project (npm) (malicious package)
- [MAL-2025-36852](https://insights.sbomify.com/MAL-2025-36852/): Malicious code in thunder-evergreen-ceb956-project (npm) (malicious package)
- [MAL-2025-36851](https://insights.sbomify.com/MAL-2025-36851/): Malicious code in thunder-desert-gxv089-project (npm) (malicious package)
- [MAL-2025-36850](https://insights.sbomify.com/MAL-2025-36850/): Malicious code in thunder-b131w-hp6vs-ocean-project (npm) (malicious package)
- [MAL-2025-3685](https://insights.sbomify.com/MAL-2025-3685/): Malicious code in framer-motion-ext (npm) (malicious package)
- [MAL-2025-36849](https://insights.sbomify.com/MAL-2025-36849/): Malicious code in thuban-yonder-process-singularity (npm) (malicious package)
- [MAL-2025-36848](https://insights.sbomify.com/MAL-2025-36848/): Malicious code in thuban-spectron-passport-hapi (npm) (malicious package)
- [MAL-2025-36847](https://insights.sbomify.com/MAL-2025-36847/): Malicious code in thuban-dactyl-nebula-graphql (npm) (malicious package)
- [MAL-2025-36846](https://insights.sbomify.com/MAL-2025-36846/): Malicious code in throne-fygmp-z9csb-celestial-project (npm) (malicious package)
- [MAL-2025-36845](https://insights.sbomify.com/MAL-2025-36845/): Malicious code in throne-a2176-gbuoq-xanadu-project (npm) (malicious package)
- [MAL-2025-36844](https://insights.sbomify.com/MAL-2025-36844/): Malicious code in thrive-amber-mkm632-project (npm) (malicious package)
- [MAL-2025-36843](https://insights.sbomify.com/MAL-2025-36843/): Malicious code in threw2 (npm) (malicious package)
- [MAL-2025-36842](https://insights.sbomify.com/MAL-2025-36842/): Malicious code in threeviz (npm) (malicious package)
- [MAL-2025-36841](https://insights.sbomify.com/MAL-2025-36841/): Malicious code in threequel (npm) (malicious package)
- [MAL-2025-36840](https://insights.sbomify.com/MAL-2025-36840/): Malicious code in threema-desktop (npm) (malicious package)
- [MAL-2025-3684](https://insights.sbomify.com/MAL-2025-3684/): Malicious code in flueneceenergy (npm) (malicious package)
- [MAL-2025-36839](https://insights.sbomify.com/MAL-2025-36839/): Malicious code in three-editor-release (npm) (malicious package)
- [MAL-2025-36838](https://insights.sbomify.com/MAL-2025-36838/): Malicious code in threaddump-analyzer (npm) (malicious package)
- [MAL-2025-36837](https://insights.sbomify.com/MAL-2025-36837/): Malicious code in thread-reject-runtime-quick-rain (npm) (malicious package)
- [MAL-2025-36836](https://insights.sbomify.com/MAL-2025-36836/): Malicious code in thread-await-function-runtime-balance (npm) (malicious package)
- [MAL-2025-36835](https://insights.sbomify.com/MAL-2025-36835/): Malicious code in thrbjomyugsvekiw (npm) (malicious package)
- [MAL-2025-36834](https://insights.sbomify.com/MAL-2025-36834/): Malicious code in thovcmrzelgwsxyi (npm) (malicious package)
- [MAL-2025-36833](https://insights.sbomify.com/MAL-2025-36833/): Malicious code in thoughtful_migrations (npm) (malicious package)
- [MAL-2025-36832](https://insights.sbomify.com/MAL-2025-36832/): Malicious code in thorodata (npm) (malicious package)
- [MAL-2025-36831](https://insights.sbomify.com/MAL-2025-36831/): Malicious code in thistle-zodiac-gfu867-project (npm) (malicious package)
- [MAL-2025-36830](https://insights.sbomify.com/MAL-2025-36830/): Malicious code in thistle-zebra-afs567-project (npm) (malicious package)
- [MAL-2025-3683](https://insights.sbomify.com/MAL-2025-3683/): Malicious code in fluenceenergy (npm) (malicious package)
- [MAL-2025-36829](https://insights.sbomify.com/MAL-2025-36829/): Malicious code in thistle-yonder-zej884-project (npm) (malicious package)
- [MAL-2025-36828](https://insights.sbomify.com/MAL-2025-36828/): Malicious code in thistle-topaz-hjc311-project (npm) (malicious package)
- [MAL-2025-36827](https://insights.sbomify.com/MAL-2025-36827/): Malicious code in thistle-peony-jqv821-project (npm) (malicious package)
- [MAL-2025-36826](https://insights.sbomify.com/MAL-2025-36826/): Malicious code in thistle-labyrinth-enw098-project (npm) (malicious package)
- [MAL-2025-36825](https://insights.sbomify.com/MAL-2025-36825/): Malicious code in thistle-koala-zhb885-project (npm) (malicious package)
- [MAL-2025-36824](https://insights.sbomify.com/MAL-2025-36824/): Malicious code in thistle-infinity-eah976-project (npm) (malicious package)
- [MAL-2025-36823](https://insights.sbomify.com/MAL-2025-36823/): Malicious code in thistle-frost-pgq996-project (npm) (malicious package)
- [MAL-2025-36822](https://insights.sbomify.com/MAL-2025-36822/): Malicious code in thistle-dewdrop-myw796-project (npm) (malicious package)
- [MAL-2025-36821](https://insights.sbomify.com/MAL-2025-36821/): Malicious code in thisisclearlysomekindoftestright2 (npm) (malicious package)
- [MAL-2025-36820](https://insights.sbomify.com/MAL-2025-36820/): Malicious code in thisisclearlysomekindoftestright (npm) (malicious package)
- [MAL-2025-3682](https://insights.sbomify.com/MAL-2025-3682/): Malicious code in feather-provider-filter (npm) (malicious package)
- [MAL-2025-36819](https://insights.sbomify.com/MAL-2025-36819/): Malicious code in this-trade-value (npm) (malicious package)
- [MAL-2025-36818](https://insights.sbomify.com/MAL-2025-36818/): Malicious code in thirdone (npm) (malicious package)
- [MAL-2025-36817](https://insights.sbomify.com/MAL-2025-36817/): Malicious code in thirdgame (npm) (malicious package)
- [MAL-2025-36816](https://insights.sbomify.com/MAL-2025-36816/): Malicious code in thinktank-common (npm) (malicious package)
- [MAL-2025-36815](https://insights.sbomify.com/MAL-2025-36815/): Malicious code in thinkapp (npm) (malicious package)
- [MAL-2025-36814](https://insights.sbomify.com/MAL-2025-36814/): Malicious code in thingum-industries-sensors-2 (npm) (malicious package)
- [MAL-2025-36813](https://insights.sbomify.com/MAL-2025-36813/): Malicious code in thingsboard-advanced-attribute-widget (npm) (malicious package)
- [MAL-2025-36812](https://insights.sbomify.com/MAL-2025-36812/): Malicious code in thinatra (npm) (malicious package)
- [MAL-2025-36811](https://insights.sbomify.com/MAL-2025-36811/): Malicious code in thiefapi (npm) (malicious package)
- [MAL-2025-36810](https://insights.sbomify.com/MAL-2025-36810/): Malicious code in thibault (npm) (malicious package)
- [MAL-2025-3681](https://insights.sbomify.com/MAL-2025-3681/): Malicious code in express-cronjs (npm) (malicious package)
- [MAL-2025-36809](https://insights.sbomify.com/MAL-2025-36809/): Malicious code in theubald (npm) (malicious package)
- [MAL-2025-36808](https://insights.sbomify.com/MAL-2025-36808/): Malicious code in thetowns (npm) (malicious package)
- [MAL-2025-36807](https://insights.sbomify.com/MAL-2025-36807/): Malicious code in thetaedu (npm) (malicious package)
- [MAL-2025-36806](https://insights.sbomify.com/MAL-2025-36806/): Malicious code in theta-tv-charts (npm) (malicious package)
- [MAL-2025-36805](https://insights.sbomify.com/MAL-2025-36805/): Malicious code in theta-nu-query-earth-export (npm) (malicious package)
- [MAL-2025-36804](https://insights.sbomify.com/MAL-2025-36804/): Malicious code in theta-iota-simple-java-monitor (npm) (malicious package)
- [MAL-2025-36803](https://insights.sbomify.com/MAL-2025-36803/): Malicious code in theta-encode-daemon-rho-rain (npm) (malicious package)
- [MAL-2025-36802](https://insights.sbomify.com/MAL-2025-36802/): Malicious code in theslinux (npm) (malicious package)
- [MAL-2025-36801](https://insights.sbomify.com/MAL-2025-36801/): Malicious code in thescene-ts-client-library (npm) (malicious package)
- [MAL-2025-36800](https://insights.sbomify.com/MAL-2025-36800/): Malicious code in thescene-ng2-lib (npm) (malicious package)
- [MAL-2025-3680](https://insights.sbomify.com/MAL-2025-3680/): Malicious code in create-krnl-app (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/704/