# Vulnerabilities published in 2025


- [MAL-2025-36619](https://insights.sbomify.com/MAL-2025-36619/): Malicious code in test-mlw2-welds-vinos (npm) (malicious package)
- [MAL-2025-36618](https://insights.sbomify.com/MAL-2025-36618/): Malicious code in test-mlw2-weeds-facia (npm) (malicious package)
- [MAL-2025-36617](https://insights.sbomify.com/MAL-2025-36617/): Malicious code in test-mlw2-wecht-soaps-twank-wafer (npm) (malicious package)
- [MAL-2025-36616](https://insights.sbomify.com/MAL-2025-36616/): Malicious code in test-mlw2-weary-clubs (npm) (malicious package)
- [MAL-2025-36615](https://insights.sbomify.com/MAL-2025-36615/): Malicious code in test-mlw2-weals-ficus (npm) (malicious package)
- [MAL-2025-36614](https://insights.sbomify.com/MAL-2025-36614/): Malicious code in test-mlw2-weald-crawl (npm) (malicious package)
- [MAL-2025-36613](https://insights.sbomify.com/MAL-2025-36613/): Malicious code in test-mlw2-waxes-gibel (npm) (malicious package)
- [MAL-2025-36612](https://insights.sbomify.com/MAL-2025-36612/): Malicious code in test-mlw2-waxer-urnal (npm) (malicious package)
- [MAL-2025-36611](https://insights.sbomify.com/MAL-2025-36611/): Malicious code in test-mlw2-wavey-weeks (npm) (malicious package)
- [MAL-2025-36610](https://insights.sbomify.com/MAL-2025-36610/): Malicious code in test-mlw2-wavey-lassu (npm) (malicious package)
- [MAL-2025-3661](https://insights.sbomify.com/MAL-2025-3661/): Malicious code in @ebay-business-components/marko-rum (npm) (malicious package)
- [MAL-2025-36609](https://insights.sbomify.com/MAL-2025-36609/): Malicious code in test-mlw2-wavey-freet (npm) (malicious package)
- [MAL-2025-36608](https://insights.sbomify.com/MAL-2025-36608/): Malicious code in test-mlw2-waulk-easts (npm) (malicious package)
- [MAL-2025-36607](https://insights.sbomify.com/MAL-2025-36607/): Malicious code in test-mlw2-wanze-burnt (npm) (malicious package)
- [MAL-2025-36606](https://insights.sbomify.com/MAL-2025-36606/): Malicious code in test-mlw2-wanly-dunno-nulls-jaups (npm) (malicious package)
- [MAL-2025-36605](https://insights.sbomify.com/MAL-2025-36605/): Malicious code in test-mlw2-wanle-biker (npm) (malicious package)
- [MAL-2025-36604](https://insights.sbomify.com/MAL-2025-36604/): Malicious code in test-mlw2-wanes-dowps (npm) (malicious package)
- [MAL-2025-36603](https://insights.sbomify.com/MAL-2025-36603/): Malicious code in test-mlw2-wamus-totem-campy-finer (npm) (malicious package)
- [MAL-2025-36602](https://insights.sbomify.com/MAL-2025-36602/): Malicious code in test-mlw2-wames-geums (npm) (malicious package)
- [MAL-2025-36601](https://insights.sbomify.com/MAL-2025-36601/): Malicious code in test-mlw2-walks-kanji (npm) (malicious package)
- [MAL-2025-36600](https://insights.sbomify.com/MAL-2025-36600/): Malicious code in test-mlw2-waled-boffo (npm) (malicious package)
- [MAL-2025-3660](https://insights.sbomify.com/MAL-2025-3660/): Malicious code in pie-docs (npm) (malicious package)
- [MAL-2025-366](https://insights.sbomify.com/MAL-2025-366/): Malicious code in testyyz (npm) (malicious package)
- [MAL-2025-36599](https://insights.sbomify.com/MAL-2025-36599/): Malicious code in test-mlw2-waker-kranz (npm) (malicious package)
- [MAL-2025-36598](https://insights.sbomify.com/MAL-2025-36598/): Malicious code in test-mlw2-waits-homes (npm) (malicious package)
- [MAL-2025-36597](https://insights.sbomify.com/MAL-2025-36597/): Malicious code in test-mlw2-wains-lucre (npm) (malicious package)
- [MAL-2025-36596](https://insights.sbomify.com/MAL-2025-36596/): Malicious code in test-mlw2-wafer-bergs (npm) (malicious package)
- [MAL-2025-36595](https://insights.sbomify.com/MAL-2025-36595/): Malicious code in test-mlw2-vower-coomy (npm) (malicious package)
- [MAL-2025-36594](https://insights.sbomify.com/MAL-2025-36594/): Malicious code in test-mlw2-vowel-sacra (npm) (malicious package)
- [MAL-2025-36593](https://insights.sbomify.com/MAL-2025-36593/): Malicious code in test-mlw2-vomit-herds-quoit-cloak (npm) (malicious package)
- [MAL-2025-36592](https://insights.sbomify.com/MAL-2025-36592/): Malicious code in test-mlw2-volet-gloat (npm) (malicious package)
- [MAL-2025-36591](https://insights.sbomify.com/MAL-2025-36591/): Malicious code in test-mlw2-voids-coven (npm) (malicious package)
- [MAL-2025-36590](https://insights.sbomify.com/MAL-2025-36590/): Malicious code in test-mlw2-vodka-taper (npm) (malicious package)
- [MAL-2025-3659](https://insights.sbomify.com/MAL-2025-3659/): Malicious code in your-published-package (npm) (malicious package)
- [MAL-2025-36589](https://insights.sbomify.com/MAL-2025-36589/): Malicious code in test-mlw2-voars-putid-teugh-bobac (npm) (malicious package)
- [MAL-2025-36588](https://insights.sbomify.com/MAL-2025-36588/): Malicious code in test-mlw2-vixen-fader (npm) (malicious package)
- [MAL-2025-36587](https://insights.sbomify.com/MAL-2025-36587/): Malicious code in test-mlw2-vivid-ashes-creek-fores (npm) (malicious package)
- [MAL-2025-36586](https://insights.sbomify.com/MAL-2025-36586/): Malicious code in test-mlw2-viver-glady (npm) (malicious package)
- [MAL-2025-36585](https://insights.sbomify.com/MAL-2025-36585/): Malicious code in test-mlw2-visto-twill (npm) (malicious package)
- [MAL-2025-36584](https://insights.sbomify.com/MAL-2025-36584/): Malicious code in test-mlw2-visne-hoove (npm) (malicious package)
- [MAL-2025-36583](https://insights.sbomify.com/MAL-2025-36583/): Malicious code in test-mlw2-visie-hault-skids-skyer (npm) (malicious package)
- [MAL-2025-36582](https://insights.sbomify.com/MAL-2025-36582/): Malicious code in test-mlw2-vises-fresh (npm) (malicious package)
- [MAL-2025-36581](https://insights.sbomify.com/MAL-2025-36581/): Malicious code in test-mlw2-vises-canty-prore-femur (npm) (malicious package)
- [MAL-2025-36580](https://insights.sbomify.com/MAL-2025-36580/): Malicious code in test-mlw2-virtu-lupin (npm) (malicious package)
- [MAL-2025-3658](https://insights.sbomify.com/MAL-2025-3658/): Malicious code in windows-api-codec-pack (npm) (malicious package)
- [MAL-2025-36579](https://insights.sbomify.com/MAL-2025-36579/): Malicious code in test-mlw2-virtu-dwelt (npm) (malicious package)
- [MAL-2025-36578](https://insights.sbomify.com/MAL-2025-36578/): Malicious code in test-mlw2-vires-apish (npm) (malicious package)
- [MAL-2025-36577](https://insights.sbomify.com/MAL-2025-36577/): Malicious code in test-mlw2-viper-hoppy (npm) (malicious package)
- [MAL-2025-36576](https://insights.sbomify.com/MAL-2025-36576/): Malicious code in test-mlw2-vigor-drows-flics-bigot (npm) (malicious package)
- [MAL-2025-36575](https://insights.sbomify.com/MAL-2025-36575/): Malicious code in test-mlw2-viewy-poaka (npm) (malicious package)
- [MAL-2025-36574](https://insights.sbomify.com/MAL-2025-36574/): Malicious code in test-mlw2-viewy-incur (npm) (malicious package)
- [MAL-2025-36573](https://insights.sbomify.com/MAL-2025-36573/): Malicious code in test-mlw2-video-molal (npm) (malicious package)
- [MAL-2025-36572](https://insights.sbomify.com/MAL-2025-36572/): Malicious code in test-mlw2-vicar-leeks (npm) (malicious package)
- [MAL-2025-36571](https://insights.sbomify.com/MAL-2025-36571/): Malicious code in test-mlw2-vests-soums-withy-geese (npm) (malicious package)
- [MAL-2025-36570](https://insights.sbomify.com/MAL-2025-36570/): Malicious code in test-mlw2-vespa-awful (npm) (malicious package)
- [MAL-2025-3657](https://insights.sbomify.com/MAL-2025-3657/): Malicious code in wdio-healenium-service (npm) (malicious package)
- [MAL-2025-36569](https://insights.sbomify.com/MAL-2025-36569/): Malicious code in test-mlw2-verve-spelt (npm) (malicious package)
- [MAL-2025-36568](https://insights.sbomify.com/MAL-2025-36568/): Malicious code in test-mlw2-verse-cnida (npm) (malicious package)
- [MAL-2025-36567](https://insights.sbomify.com/MAL-2025-36567/): Malicious code in test-mlw2-verry-maids (npm) (malicious package)
- [MAL-2025-36566](https://insights.sbomify.com/MAL-2025-36566/): Malicious code in test-mlw2-verbs-upled (npm) (malicious package)
- [MAL-2025-36565](https://insights.sbomify.com/MAL-2025-36565/): Malicious code in test-mlw2-vents-antic (npm) (malicious package)
- [MAL-2025-36564](https://insights.sbomify.com/MAL-2025-36564/): Malicious code in test-mlw2-venal-doits (npm) (malicious package)
- [MAL-2025-36563](https://insights.sbomify.com/MAL-2025-36563/): Malicious code in test-mlw2-veins-tutee-lorel-beers (npm) (malicious package)
- [MAL-2025-36562](https://insights.sbomify.com/MAL-2025-36562/): Malicious code in test-mlw2-veily-yowls (npm) (malicious package)
- [MAL-2025-36561](https://insights.sbomify.com/MAL-2025-36561/): Malicious code in test-mlw2-veeps-talma-frees-kazoo (npm) (malicious package)
- [MAL-2025-36560](https://insights.sbomify.com/MAL-2025-36560/): Malicious code in test-mlw2-vases-gambs-clone-hoven (npm) (malicious package)
- [MAL-2025-3656](https://insights.sbomify.com/MAL-2025-3656/): Malicious code in vue-ssr-devtools (npm) (malicious package)
- [MAL-2025-36559](https://insights.sbomify.com/MAL-2025-36559/): Malicious code in test-mlw2-vardy-hoppy (npm) (malicious package)
- [MAL-2025-36558](https://insights.sbomify.com/MAL-2025-36558/): Malicious code in test-mlw2-valor-stent (npm) (malicious package)
- [MAL-2025-36557](https://insights.sbomify.com/MAL-2025-36557/): Malicious code in test-mlw2-uveal-vardy (npm) (malicious package)
- [MAL-2025-36556](https://insights.sbomify.com/MAL-2025-36556/): Malicious code in test-mlw2-uveal-scopa-pagri-skies (npm) (malicious package)
- [MAL-2025-36555](https://insights.sbomify.com/MAL-2025-36555/): Malicious code in test-mlw2-usurp-named-bohea-sudds (npm) (malicious package)
- [MAL-2025-36554](https://insights.sbomify.com/MAL-2025-36554/): Malicious code in test-mlw2-usnea-kylix (npm) (malicious package)
- [MAL-2025-36553](https://insights.sbomify.com/MAL-2025-36553/): Malicious code in test-mlw2-urnal-peens-dorrs-ephas (npm) (malicious package)
- [MAL-2025-36552](https://insights.sbomify.com/MAL-2025-36552/): Malicious code in test-mlw2-urine-aunes-lieve-therm (npm) (malicious package)
- [MAL-2025-36551](https://insights.sbomify.com/MAL-2025-36551/): Malicious code in test-mlw2-urial-nonet (npm) (malicious package)
- [MAL-2025-36550](https://insights.sbomify.com/MAL-2025-36550/): Malicious code in test-mlw2-urges-mynah-orles-undug (npm) (malicious package)
- [MAL-2025-3655](https://insights.sbomify.com/MAL-2025-3655/): Malicious code in vue-highcharts-official (npm) (malicious package)
- [MAL-2025-36549](https://insights.sbomify.com/MAL-2025-36549/): Malicious code in test-mlw2-urent-puked (npm) (malicious package)
- [MAL-2025-36548](https://insights.sbomify.com/MAL-2025-36548/): Malicious code in test-mlw2-urari-saist-elegy-skids (npm) (malicious package)
- [MAL-2025-36547](https://insights.sbomify.com/MAL-2025-36547/): Malicious code in test-mlw2-unsex-salet (npm) (malicious package)
- [MAL-2025-36546](https://insights.sbomify.com/MAL-2025-36546/): Malicious code in test-mlw2-unrip-heids-wrung-styed (npm) (malicious package)
- [MAL-2025-36545](https://insights.sbomify.com/MAL-2025-36545/): Malicious code in test-mlw2-unpin-rinse (npm) (malicious package)
- [MAL-2025-36544](https://insights.sbomify.com/MAL-2025-36544/): Malicious code in test-mlw2-unify-lades (npm) (malicious package)
- [MAL-2025-36543](https://insights.sbomify.com/MAL-2025-36543/): Malicious code in test-mlw2-unify-brose (npm) (malicious package)
- [MAL-2025-36542](https://insights.sbomify.com/MAL-2025-36542/): Malicious code in test-mlw2-ungag-whews (npm) (malicious package)
- [MAL-2025-36541](https://insights.sbomify.com/MAL-2025-36541/): Malicious code in test-mlw2-undee-gnarl (npm) (malicious package)
- [MAL-2025-36540](https://insights.sbomify.com/MAL-2025-36540/): Malicious code in test-mlw2-unbed-caned (npm) (malicious package)
- [MAL-2025-3654](https://insights.sbomify.com/MAL-2025-3654/): Malicious code in vite-plugin-remove (npm) (malicious package)
- [MAL-2025-36539](https://insights.sbomify.com/MAL-2025-36539/): Malicious code in test-mlw2-unary-tubed (npm) (malicious package)
- [MAL-2025-36538](https://insights.sbomify.com/MAL-2025-36538/): Malicious code in test-mlw2-unapt-filly (npm) (malicious package)
- [MAL-2025-36537](https://insights.sbomify.com/MAL-2025-36537/): Malicious code in test-mlw2-umiak-fluid (npm) (malicious package)
- [MAL-2025-36536](https://insights.sbomify.com/MAL-2025-36536/): Malicious code in test-mlw2-umbra-kaids (npm) (malicious package)
- [MAL-2025-36535](https://insights.sbomify.com/MAL-2025-36535/): Malicious code in test-mlw2-umbos-loner (npm) (malicious package)
- [MAL-2025-36534](https://insights.sbomify.com/MAL-2025-36534/): Malicious code in test-mlw2-ulema-nappa (npm) (malicious package)
- [MAL-2025-36533](https://insights.sbomify.com/MAL-2025-36533/): Malicious code in test-mlw2-udals-gloat-villi-gleby (npm) (malicious package)
- [MAL-2025-36532](https://insights.sbomify.com/MAL-2025-36532/): Malicious code in test-mlw2-tyros-flint-plank-hiant (npm) (malicious package)
- [MAL-2025-36531](https://insights.sbomify.com/MAL-2025-36531/): Malicious code in test-mlw2-twite-chins (npm) (malicious package)
- [MAL-2025-36530](https://insights.sbomify.com/MAL-2025-36530/): Malicious code in test-mlw2-twiny-ogmic (npm) (malicious package)
- [MAL-2025-3653](https://insights.sbomify.com/MAL-2025-3653/): Malicious code in vite-plugin-node-modules-polyfills (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/707/