# Vulnerabilities published in 2025


- [MAL-2025-368](https://insights.sbomify.com/MAL-2025-368/): Malicious code in amazon-admin (npm) (malicious package)
- [MAL-2025-36799](https://insights.sbomify.com/MAL-2025-36799/): Malicious code in thescene-api-library (npm) (malicious package)
- [MAL-2025-36798](https://insights.sbomify.com/MAL-2025-36798/): Malicious code in therryn (npm) (malicious package)
- [MAL-2025-36797](https://insights.sbomify.com/MAL-2025-36797/): Malicious code in thermosphere-mysql-prosthetics-chariklo (npm) (malicious package)
- [MAL-2025-36796](https://insights.sbomify.com/MAL-2025-36796/): Malicious code in thermochronology-halley-adonis-dione (npm) (malicious package)
- [MAL-2025-36795](https://insights.sbomify.com/MAL-2025-36795/): Malicious code in thermochronology-framework-jovian-ursa (npm) (malicious package)
- [MAL-2025-36794](https://insights.sbomify.com/MAL-2025-36794/): Malicious code in thermochronology-borealis-blitz-areology (npm) (malicious package)
- [MAL-2025-36793](https://insights.sbomify.com/MAL-2025-36793/): Malicious code in thermochronology-bootes-markdownlint-delphinus (npm) (malicious package)
- [MAL-2025-36792](https://insights.sbomify.com/MAL-2025-36792/): Malicious code in theramore (npm) (malicious package)
- [MAL-2025-36791](https://insights.sbomify.com/MAL-2025-36791/): Malicious code in thepygame (npm) (malicious package)
- [MAL-2025-36790](https://insights.sbomify.com/MAL-2025-36790/): Malicious code in thepond-whitelist-bot (npm) (malicious package)
- [MAL-2025-3679](https://insights.sbomify.com/MAL-2025-3679/): Malicious code in bitpay-push-notification-client (npm) (malicious package)
- [MAL-2025-36789](https://insights.sbomify.com/MAL-2025-36789/): Malicious code in thepig (npm) (malicious package)
- [MAL-2025-36788](https://insights.sbomify.com/MAL-2025-36788/): Malicious code in theme-variants (npm) (malicious package)
- [MAL-2025-36787](https://insights.sbomify.com/MAL-2025-36787/): Malicious code in theme-check (npm) (malicious package)
- [MAL-2025-36786](https://insights.sbomify.com/MAL-2025-36786/): Malicious code in thelmafrye (npm) (malicious package)
- [MAL-2025-36785](https://insights.sbomify.com/MAL-2025-36785/): Malicious code in thekindy (npm) (malicious package)
- [MAL-2025-36784](https://insights.sbomify.com/MAL-2025-36784/): Malicious code in thejake (npm) (malicious package)
- [MAL-2025-36783](https://insights.sbomify.com/MAL-2025-36783/): Malicious code in theia-for-cloud-shell (npm) (malicious package)
- [MAL-2025-36782](https://insights.sbomify.com/MAL-2025-36782/): Malicious code in thedome (npm) (malicious package)
- [MAL-2025-36781](https://insights.sbomify.com/MAL-2025-36781/): Malicious code in thecup (npm) (malicious package)
- [MAL-2025-36780](https://insights.sbomify.com/MAL-2025-36780/): Malicious code in thecarcentre-carsalessuite (npm) (malicious package)
- [MAL-2025-3678](https://insights.sbomify.com/MAL-2025-3678/): Malicious code in ascpc-npm-example (npm) (malicious package)
- [MAL-2025-36779](https://insights.sbomify.com/MAL-2025-36779/): Malicious code in thebobcat (npm) (malicious package)
- [MAL-2025-36778](https://insights.sbomify.com/MAL-2025-36778/): Malicious code in theblog (npm) (malicious package)
- [MAL-2025-36777](https://insights.sbomify.com/MAL-2025-36777/): Malicious code in theadoc (npm) (malicious package)
- [MAL-2025-36776](https://insights.sbomify.com/MAL-2025-36776/): Malicious code in the-pod (npm) (malicious package)
- [MAL-2025-36775](https://insights.sbomify.com/MAL-2025-36775/): Malicious code in the-brink-auth (npm) (malicious package)
- [MAL-2025-36774](https://insights.sbomify.com/MAL-2025-36774/): Malicious code in the-api-cache (npm) (malicious package)
- [MAL-2025-36773](https://insights.sbomify.com/MAL-2025-36773/): Malicious code in thavwuieyxbjdrmc (npm) (malicious package)
- [MAL-2025-36772](https://insights.sbomify.com/MAL-2025-36772/): Malicious code in tharsis (npm) (malicious package)
- [MAL-2025-36771](https://insights.sbomify.com/MAL-2025-36771/): Malicious code in thaishop (npm) (malicious package)
- [MAL-2025-36770](https://insights.sbomify.com/MAL-2025-36770/): Malicious code in tgp-pay (npm) (malicious package)
- [MAL-2025-3677](https://insights.sbomify.com/MAL-2025-3677/): Malicious code in @starkgate/web (npm) (malicious package)
- [MAL-2025-36769](https://insights.sbomify.com/MAL-2025-36769/): Malicious code in tgam-pattern-library (npm) (malicious package)
- [MAL-2025-36768](https://insights.sbomify.com/MAL-2025-36768/): Malicious code in tfclean (npm) (malicious package)
- [MAL-2025-36767](https://insights.sbomify.com/MAL-2025-36767/): Malicious code in tf_client (npm) (malicious package)
- [MAL-2025-36766](https://insights.sbomify.com/MAL-2025-36766/): Malicious code in tezo-sdk (npm) (malicious package)
- [MAL-2025-36765](https://insights.sbomify.com/MAL-2025-36765/): Malicious code in textworld (npm) (malicious package)
- [MAL-2025-36764](https://insights.sbomify.com/MAL-2025-36764/): Malicious code in textuuid (npm) (malicious package)
- [MAL-2025-36763](https://insights.sbomify.com/MAL-2025-36763/): Malicious code in textflash (npm) (malicious package)
- [MAL-2025-36762](https://insights.sbomify.com/MAL-2025-36762/): Malicious code in textbooks (npm) (malicious package)
- [MAL-2025-36761](https://insights.sbomify.com/MAL-2025-36761/): Malicious code in text-helper (npm) (malicious package)
- [MAL-2025-36760](https://insights.sbomify.com/MAL-2025-36760/): Malicious code in texorator (npm) (malicious package)
- [MAL-2025-3676](https://insights.sbomify.com/MAL-2025-3676/): Malicious code in @oracle-cx-commerce/commerce-utils (npm) (malicious package)
- [MAL-2025-36759](https://insights.sbomify.com/MAL-2025-36759/): Malicious code in texmex (npm) (malicious package)
- [MAL-2025-36758](https://insights.sbomify.com/MAL-2025-36758/): Malicious code in texecl (npm) (malicious package)
- [MAL-2025-36757](https://insights.sbomify.com/MAL-2025-36757/): Malicious code in texcore (npm) (malicious package)
- [MAL-2025-36756](https://insights.sbomify.com/MAL-2025-36756/): Malicious code in tetric (npm) (malicious package)
- [MAL-2025-36755](https://insights.sbomify.com/MAL-2025-36755/): Malicious code in tethys-xerxes-exec-geochemistry (npm) (malicious package)
- [MAL-2025-36754](https://insights.sbomify.com/MAL-2025-36754/): Malicious code in tethys-singularitarianism-resolvers-quantum (npm) (malicious package)
- [MAL-2025-36753](https://insights.sbomify.com/MAL-2025-36753/): Malicious code in tethys-pyxis-betelgeuse-fornax (npm) (malicious package)
- [MAL-2025-36752](https://insights.sbomify.com/MAL-2025-36752/): Malicious code in tethys-hugo-dorado-readable (npm) (malicious package)
- [MAL-2025-36751](https://insights.sbomify.com/MAL-2025-36751/): Malicious code in testzerocool2 (npm) (malicious package)
- [MAL-2025-36750](https://insights.sbomify.com/MAL-2025-36750/): Malicious code in testzerocool (npm) (malicious package)
- [MAL-2025-3675](https://insights.sbomify.com/MAL-2025-3675/): Malicious code in @klarna-travel-platform/travel-booking-shared-types (npm) (malicious package)
- [MAL-2025-36749](https://insights.sbomify.com/MAL-2025-36749/): Malicious code in testwaseempoi (npm) (malicious package)
- [MAL-2025-36748](https://insights.sbomify.com/MAL-2025-36748/): Malicious code in testuse (npm) (malicious package)
- [MAL-2025-36747](https://insights.sbomify.com/MAL-2025-36747/): Malicious code in testukas (npm) (malicious package)
- [MAL-2025-36746](https://insights.sbomify.com/MAL-2025-36746/): Malicious code in testtest-mbox (npm) (malicious package)
- [MAL-2025-36745](https://insights.sbomify.com/MAL-2025-36745/): Malicious code in testtest--testq (npm) (malicious package)
- [MAL-2025-36744](https://insights.sbomify.com/MAL-2025-36744/): Malicious code in testsys (npm) (malicious package)
- [MAL-2025-36743](https://insights.sbomify.com/MAL-2025-36743/): Malicious code in testsubdashboard (npm) (malicious package)
- [MAL-2025-36742](https://insights.sbomify.com/MAL-2025-36742/): Malicious code in testsssss (npm) (malicious package)
- [MAL-2025-36741](https://insights.sbomify.com/MAL-2025-36741/): Malicious code in testror (npm) (malicious package)
- [MAL-2025-36740](https://insights.sbomify.com/MAL-2025-36740/): Malicious code in testppe (npm) (malicious package)
- [MAL-2025-3674](https://insights.sbomify.com/MAL-2025-3674/): Malicious code in @joshcyber123/frontend-logger (npm) (malicious package)
- [MAL-2025-36739](https://insights.sbomify.com/MAL-2025-36739/): Malicious code in testphp (npm) (malicious package)
- [MAL-2025-36738](https://insights.sbomify.com/MAL-2025-36738/): Malicious code in testmv (npm) (malicious package)
- [MAL-2025-36737](https://insights.sbomify.com/MAL-2025-36737/): Malicious code in testmbox1 (npm) (malicious package)
- [MAL-2025-36736](https://insights.sbomify.com/MAL-2025-36736/): Malicious code in testlight (npm) (malicious package)
- [MAL-2025-36735](https://insights.sbomify.com/MAL-2025-36735/): Malicious code in testli (npm) (malicious package)
- [MAL-2025-36734](https://insights.sbomify.com/MAL-2025-36734/): Malicious code in testkeystore (npm) (malicious package)
- [MAL-2025-36733](https://insights.sbomify.com/MAL-2025-36733/): Malicious code in testjm (npm) (malicious package)
- [MAL-2025-36732](https://insights.sbomify.com/MAL-2025-36732/): Malicious code in testjb (npm) (malicious package)
- [MAL-2025-36731](https://insights.sbomify.com/MAL-2025-36731/): Malicious code in testisi (npm) (malicious package)
- [MAL-2025-36730](https://insights.sbomify.com/MAL-2025-36730/): Malicious code in testipaketti_keke.js (npm) (malicious package)
- [MAL-2025-3673](https://insights.sbomify.com/MAL-2025-3673/): Malicious code in @johndeere-tech/helios-ng-components (npm) (malicious package)
- [MAL-2025-36729](https://insights.sbomify.com/MAL-2025-36729/): Malicious code in testinglupinnew (npm) (malicious package)
- [MAL-2025-36728](https://insights.sbomify.com/MAL-2025-36728/): Malicious code in testing054dfas (npm) (malicious package)
- [MAL-2025-36727](https://insights.sbomify.com/MAL-2025-36727/): Malicious code in testing-ondewo-rda (npm) (malicious package)
- [MAL-2025-36726](https://insights.sbomify.com/MAL-2025-36726/): Malicious code in testing-octa (npm) (malicious package)
- [MAL-2025-36725](https://insights.sbomify.com/MAL-2025-36725/): Malicious code in testikeke123 (npm) (malicious package)
- [MAL-2025-36724](https://insights.sbomify.com/MAL-2025-36724/): Malicious code in testetela (npm) (malicious package)
- [MAL-2025-36723](https://insights.sbomify.com/MAL-2025-36723/): Malicious code in tester_naber (npm) (malicious package)
- [MAL-2025-36722](https://insights.sbomify.com/MAL-2025-36722/): Malicious code in testeqi (npm) (malicious package)
- [MAL-2025-36721](https://insights.sbomify.com/MAL-2025-36721/): Malicious code in testedt (npm) (malicious package)
- [MAL-2025-36720](https://insights.sbomify.com/MAL-2025-36720/): Malicious code in testdtb (npm) (malicious package)
- [MAL-2025-3672](https://insights.sbomify.com/MAL-2025-3672/): Malicious code in @johndeere-tech/eslint-plugin-timbercloud-custom-rules (npm) (malicious package)
- [MAL-2025-36719](https://insights.sbomify.com/MAL-2025-36719/): Malicious code in testdsa (npm) (malicious package)
- [MAL-2025-36718](https://insights.sbomify.com/MAL-2025-36718/): Malicious code in testdjhfyr76t47hfudhh (npm) (malicious package)
- [MAL-2025-36717](https://insights.sbomify.com/MAL-2025-36717/): Malicious code in testcda (npm) (malicious package)
- [MAL-2025-36716](https://insights.sbomify.com/MAL-2025-36716/): Malicious code in testcafe-fomalhaut-geomorphology-kronos (npm) (malicious package)
- [MAL-2025-36715](https://insights.sbomify.com/MAL-2025-36715/): Malicious code in testcafe-decoherence-cosmochemistry-selenology (npm) (malicious package)
- [MAL-2025-36714](https://insights.sbomify.com/MAL-2025-36714/): Malicious code in testcafe-bellatrix-axios-uglify-js (npm) (malicious package)
- [MAL-2025-36713](https://insights.sbomify.com/MAL-2025-36713/): Malicious code in testad (npm) (malicious package)
- [MAL-2025-36712](https://insights.sbomify.com/MAL-2025-36712/): Malicious code in testabdul (npm) (malicious package)
- [MAL-2025-36711](https://insights.sbomify.com/MAL-2025-36711/): Malicious code in test_security_ph (npm) (malicious package)
- [MAL-2025-36710](https://insights.sbomify.com/MAL-2025-36710/): Malicious code in test_project_1_saro_da (npm) (malicious package)
- [MAL-2025-3671](https://insights.sbomify.com/MAL-2025-3671/): Malicious code in r2-ui (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/705/