# Vulnerabilities published in 2025 - [MAL-2025-36529](https://insights.sbomify.com/MAL-2025-36529/): Malicious code in test-mlw2-twins-sprag (npm) (malicious package) - [MAL-2025-36528](https://insights.sbomify.com/MAL-2025-36528/): Malicious code in test-mlw2-tweel-tasks-chank-mavis (npm) (malicious package) - [MAL-2025-36527](https://insights.sbomify.com/MAL-2025-36527/): Malicious code in test-mlw2-tweel-faqir (npm) (malicious package) - [MAL-2025-36526](https://insights.sbomify.com/MAL-2025-36526/): Malicious code in test-mlw2-twank-droop (npm) (malicious package) - [MAL-2025-36525](https://insights.sbomify.com/MAL-2025-36525/): Malicious code in test-mlw2-twang-busks (npm) (malicious package) - [MAL-2025-36524](https://insights.sbomify.com/MAL-2025-36524/): Malicious code in test-mlw2-tuxes-range (npm) (malicious package) - [MAL-2025-36523](https://insights.sbomify.com/MAL-2025-36523/): Malicious code in test-mlw2-tutus-amens-anomy-knowe (npm) (malicious package) - [MAL-2025-36522](https://insights.sbomify.com/MAL-2025-36522/): Malicious code in test-mlw2-turms-jutes (npm) (malicious package) - [MAL-2025-36521](https://insights.sbomify.com/MAL-2025-36521/): Malicious code in test-mlw2-turbo-linch (npm) (malicious package) - [MAL-2025-36520](https://insights.sbomify.com/MAL-2025-36520/): Malicious code in test-mlw2-tupik-coaly (npm) (malicious package) - [MAL-2025-3652](https://insights.sbomify.com/MAL-2025-3652/): Malicious code in vim-refactor (npm) (malicious package) - [MAL-2025-36519](https://insights.sbomify.com/MAL-2025-36519/): Malicious code in test-mlw2-tupek-pacey (npm) (malicious package) - [MAL-2025-36518](https://insights.sbomify.com/MAL-2025-36518/): Malicious code in test-mlw2-tunic-ducky (npm) (malicious package) - [MAL-2025-36517](https://insights.sbomify.com/MAL-2025-36517/): Malicious code in test-mlw2-tunds-yites (npm) (malicious package) - [MAL-2025-36516](https://insights.sbomify.com/MAL-2025-36516/): Malicious code in test-mlw2-tummy-draft (npm) (malicious package) - [MAL-2025-36515](https://insights.sbomify.com/MAL-2025-36515/): Malicious code in test-mlw2-tumid-emmet (npm) (malicious package) - [MAL-2025-36514](https://insights.sbomify.com/MAL-2025-36514/): Malicious code in test-mlw2-tuffs-pawas (npm) (malicious package) - [MAL-2025-36513](https://insights.sbomify.com/MAL-2025-36513/): Malicious code in test-mlw2-tubes-salsa (npm) (malicious package) - [MAL-2025-36512](https://insights.sbomify.com/MAL-2025-36512/): Malicious code in test-mlw2-tubal-plouk-curds-faffs (npm) (malicious package) - [MAL-2025-36511](https://insights.sbomify.com/MAL-2025-36511/): Malicious code in test-mlw2-tubae-molto (npm) (malicious package) - [MAL-2025-36510](https://insights.sbomify.com/MAL-2025-36510/): Malicious code in test-mlw2-tubae-hulls (npm) (malicious package) - [MAL-2025-3651](https://insights.sbomify.com/MAL-2025-3651/): Malicious code in use-videos (npm) (malicious package) - [MAL-2025-36509](https://insights.sbomify.com/MAL-2025-36509/): Malicious code in test-mlw2-tuart-prime (npm) (malicious package) - [MAL-2025-36508](https://insights.sbomify.com/MAL-2025-36508/): Malicious code in test-mlw2-tsars-fluer (npm) (malicious package) - [MAL-2025-36507](https://insights.sbomify.com/MAL-2025-36507/): Malicious code in test-mlw2-truth-wised (npm) (malicious package) - [MAL-2025-36506](https://insights.sbomify.com/MAL-2025-36506/): Malicious code in test-mlw2-truss-allis (npm) (malicious package) - [MAL-2025-36505](https://insights.sbomify.com/MAL-2025-36505/): Malicious code in test-mlw2-truce-dyads-chomp-ouija (npm) (malicious package) - [MAL-2025-36504](https://insights.sbomify.com/MAL-2025-36504/): Malicious code in test-mlw2-trows-hexed (npm) (malicious package) - [MAL-2025-36503](https://insights.sbomify.com/MAL-2025-36503/): Malicious code in test-mlw2-troad-flesh-misty-cills (npm) (malicious package) - [MAL-2025-36502](https://insights.sbomify.com/MAL-2025-36502/): Malicious code in test-mlw2-trips-drats (npm) (malicious package) - [MAL-2025-36501](https://insights.sbomify.com/MAL-2025-36501/): Malicious code in test-mlw2-trior-turbo (npm) (malicious package) - [MAL-2025-36500](https://insights.sbomify.com/MAL-2025-36500/): Malicious code in test-mlw2-trior-scudi (npm) (malicious package) - [MAL-2025-3650](https://insights.sbomify.com/MAL-2025-3650/): Malicious code in typescript-plugin-some-plugin (npm) (malicious package) - [MAL-2025-365](https://insights.sbomify.com/MAL-2025-365/): Malicious code in testidneel-test-package (npm) (malicious package) - [MAL-2025-36499](https://insights.sbomify.com/MAL-2025-36499/): Malicious code in test-mlw2-trier-rynds (npm) (malicious package) - [MAL-2025-36498](https://insights.sbomify.com/MAL-2025-36498/): Malicious code in test-mlw2-trick-mogul (npm) (malicious package) - [MAL-2025-36497](https://insights.sbomify.com/MAL-2025-36497/): Malicious code in test-mlw2-trice-twilt-novas-lying (npm) (malicious package) - [MAL-2025-36496](https://insights.sbomify.com/MAL-2025-36496/): Malicious code in test-mlw2-treys-grisy (npm) (malicious package) - [MAL-2025-36495](https://insights.sbomify.com/MAL-2025-36495/): Malicious code in test-mlw2-treif-vocab (npm) (malicious package) - [MAL-2025-36494](https://insights.sbomify.com/MAL-2025-36494/): Malicious code in test-mlw2-treif-calks (npm) (malicious package) - [MAL-2025-36493](https://insights.sbomify.com/MAL-2025-36493/): Malicious code in test-mlw2-trefa-inane-rurus-dulia (npm) (malicious package) - [MAL-2025-36492](https://insights.sbomify.com/MAL-2025-36492/): Malicious code in test-mlw2-trays-frust (npm) (malicious package) - [MAL-2025-36491](https://insights.sbomify.com/MAL-2025-36491/): Malicious code in test-mlw2-trave-brogs (npm) (malicious package) - [MAL-2025-36490](https://insights.sbomify.com/MAL-2025-36490/): Malicious code in test-mlw2-trait-lisps (npm) (malicious package) - [MAL-2025-3649](https://insights.sbomify.com/MAL-2025-3649/): Malicious code in toloka-tb (npm) (malicious package) - [MAL-2025-36489](https://insights.sbomify.com/MAL-2025-36489/): Malicious code in test-mlw2-traik-ninny-beget-troat (npm) (malicious package) - [MAL-2025-36488](https://insights.sbomify.com/MAL-2025-36488/): Malicious code in test-mlw2-traik-alate (npm) (malicious package) - [MAL-2025-36487](https://insights.sbomify.com/MAL-2025-36487/): Malicious code in test-mlw2-tozes-paras (npm) (malicious package) - [MAL-2025-36486](https://insights.sbomify.com/MAL-2025-36486/): Malicious code in test-mlw2-tozed-palsy-tawie-vegan (npm) (malicious package) - [MAL-2025-36485](https://insights.sbomify.com/MAL-2025-36485/): Malicious code in test-mlw2-toxic-cubeb (npm) (malicious package) - [MAL-2025-36484](https://insights.sbomify.com/MAL-2025-36484/): Malicious code in test-mlw2-tower-narre (npm) (malicious package) - [MAL-2025-36483](https://insights.sbomify.com/MAL-2025-36483/): Malicious code in test-mlw2-towel-unlaw (npm) (malicious package) - [MAL-2025-36482](https://insights.sbomify.com/MAL-2025-36482/): Malicious code in test-mlw2-touts-unset (npm) (malicious package) - [MAL-2025-36481](https://insights.sbomify.com/MAL-2025-36481/): Malicious code in test-mlw2-totty-etnas (npm) (malicious package) - [MAL-2025-36480](https://insights.sbomify.com/MAL-2025-36480/): Malicious code in test-mlw2-totem-kakis (npm) (malicious package) - [MAL-2025-3648](https://insights.sbomify.com/MAL-2025-3648/): Malicious code in swagger2-postman2 (npm) (malicious package) - [MAL-2025-36479](https://insights.sbomify.com/MAL-2025-36479/): Malicious code in test-mlw2-toshy-vouge (npm) (malicious package) - [MAL-2025-36478](https://insights.sbomify.com/MAL-2025-36478/): Malicious code in test-mlw2-toses-chico (npm) (malicious package) - [MAL-2025-36477](https://insights.sbomify.com/MAL-2025-36477/): Malicious code in test-mlw2-torts-miasm (npm) (malicious package) - [MAL-2025-36476](https://insights.sbomify.com/MAL-2025-36476/): Malicious code in test-mlw2-topaz-twier-juked-bored (npm) (malicious package) - [MAL-2025-36475](https://insights.sbomify.com/MAL-2025-36475/): Malicious code in test-mlw2-toner-fleys-filed-areas (npm) (malicious package) - [MAL-2025-36474](https://insights.sbomify.com/MAL-2025-36474/): Malicious code in test-mlw2-toner-cliff-twerp-makes (npm) (malicious package) - [MAL-2025-36473](https://insights.sbomify.com/MAL-2025-36473/): Malicious code in test-mlw2-tondi-their-seize-nance (npm) (malicious package) - [MAL-2025-36472](https://insights.sbomify.com/MAL-2025-36472/): Malicious code in test-mlw2-tonal-knuts (npm) (malicious package) - [MAL-2025-36471](https://insights.sbomify.com/MAL-2025-36471/): Malicious code in test-mlw2-toled-festa (npm) (malicious package) - [MAL-2025-36470](https://insights.sbomify.com/MAL-2025-36470/): Malicious code in test-mlw2-tolas-loris (npm) (malicious package) - [MAL-2025-3647](https://insights.sbomify.com/MAL-2025-3647/): Malicious code in slimdx (npm) (malicious package) - [MAL-2025-36469](https://insights.sbomify.com/MAL-2025-36469/): Malicious code in test-mlw2-token-lahar (npm) (malicious package) - [MAL-2025-36468](https://insights.sbomify.com/MAL-2025-36468/): Malicious code in test-mlw2-toked-nomas-milks-karas (npm) (malicious package) - [MAL-2025-36467](https://insights.sbomify.com/MAL-2025-36467/): Malicious code in test-mlw2-toked-ernes-modal-boing (npm) (malicious package) - [MAL-2025-36466](https://insights.sbomify.com/MAL-2025-36466/): Malicious code in test-mlw2-tohos-verbs (npm) (malicious package) - [MAL-2025-36465](https://insights.sbomify.com/MAL-2025-36465/): Malicious code in test-mlw2-toged-vapid (npm) (malicious package) - [MAL-2025-36464](https://insights.sbomify.com/MAL-2025-36464/): Malicious code in test-mlw2-tizzy-pewit (npm) (malicious package) - [MAL-2025-36463](https://insights.sbomify.com/MAL-2025-36463/): Malicious code in test-mlw2-tirls-tapet (npm) (malicious package) - [MAL-2025-36462](https://insights.sbomify.com/MAL-2025-36462/): Malicious code in test-mlw2-tints-barms (npm) (malicious package) - [MAL-2025-36461](https://insights.sbomify.com/MAL-2025-36461/): Malicious code in test-mlw2-tines-utter (npm) (malicious package) - [MAL-2025-36460](https://insights.sbomify.com/MAL-2025-36460/): Malicious code in test-mlw2-tinds-barge (npm) (malicious package) - [MAL-2025-3646](https://insights.sbomify.com/MAL-2025-3646/): Malicious code in sharpgl (npm) (malicious package) - [MAL-2025-36459](https://insights.sbomify.com/MAL-2025-36459/): Malicious code in test-mlw2-tilth-goner (npm) (malicious package) - [MAL-2025-36458](https://insights.sbomify.com/MAL-2025-36458/): Malicious code in test-mlw2-tills-actin (npm) (malicious package) - [MAL-2025-36457](https://insights.sbomify.com/MAL-2025-36457/): Malicious code in test-mlw2-tiler-miaow-bully-mimes (npm) (malicious package) - [MAL-2025-36456](https://insights.sbomify.com/MAL-2025-36456/): Malicious code in test-mlw2-tikka-milor (npm) (malicious package) - [MAL-2025-36455](https://insights.sbomify.com/MAL-2025-36455/): Malicious code in test-mlw2-tight-tames (npm) (malicious package) - [MAL-2025-36454](https://insights.sbomify.com/MAL-2025-36454/): Malicious code in test-mlw2-tifts-salvo (npm) (malicious package) - [MAL-2025-36453](https://insights.sbomify.com/MAL-2025-36453/): Malicious code in test-mlw2-tiffs-prowl-votes-mazut (npm) (malicious package) - [MAL-2025-36452](https://insights.sbomify.com/MAL-2025-36452/): Malicious code in test-mlw2-tidal-focus (npm) (malicious package) - [MAL-2025-36451](https://insights.sbomify.com/MAL-2025-36451/): Malicious code in test-mlw2-tices-duppy-kopje-kapok (npm) (malicious package) - [MAL-2025-36450](https://insights.sbomify.com/MAL-2025-36450/): Malicious code in test-mlw2-tiara-began (npm) (malicious package) - [MAL-2025-3645](https://insights.sbomify.com/MAL-2025-3645/): Malicious code in shaderc (npm) (malicious package) - [MAL-2025-36449](https://insights.sbomify.com/MAL-2025-36449/): Malicious code in test-mlw2-thymy-scart-motey-solum (npm) (malicious package) - [MAL-2025-36448](https://insights.sbomify.com/MAL-2025-36448/): Malicious code in test-mlw2-thump-waves (npm) (malicious package) - [MAL-2025-36447](https://insights.sbomify.com/MAL-2025-36447/): Malicious code in test-mlw2-thump-pined (npm) (malicious package) - [MAL-2025-36446](https://insights.sbomify.com/MAL-2025-36446/): Malicious code in test-mlw2-thuds-kelpy (npm) (malicious package) - [MAL-2025-36445](https://insights.sbomify.com/MAL-2025-36445/): Malicious code in test-mlw2-throe-crees-lolls-tails (npm) (malicious package) - [MAL-2025-36444](https://insights.sbomify.com/MAL-2025-36444/): Malicious code in test-mlw2-thorn-glint (npm) (malicious package) - [MAL-2025-36443](https://insights.sbomify.com/MAL-2025-36443/): Malicious code in test-mlw2-tholi-grays (npm) (malicious package) - [MAL-2025-36442](https://insights.sbomify.com/MAL-2025-36442/): Malicious code in test-mlw2-tholi-afore-overt-dunny (npm) (malicious package) - [MAL-2025-36441](https://insights.sbomify.com/MAL-2025-36441/): Malicious code in test-mlw2-thiol-silky-snead-grice (npm) (malicious package) - [MAL-2025-36440](https://insights.sbomify.com/MAL-2025-36440/): Malicious code in test-mlw2-thins-stoop-malax-pawks (npm) (malicious package) - [MAL-2025-3644](https://insights.sbomify.com/MAL-2025-3644/): Malicious code in scheme-latin-1-transcoder (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/708/