# Vulnerabilities published in 2025


- [MAL-2025-36439](https://insights.sbomify.com/MAL-2025-36439/): Malicious code in test-mlw2-thews-lakes (npm) (malicious package)
- [MAL-2025-36438](https://insights.sbomify.com/MAL-2025-36438/): Malicious code in test-mlw2-thees-width (npm) (malicious package)
- [MAL-2025-36437](https://insights.sbomify.com/MAL-2025-36437/): Malicious code in test-mlw2-thees-hamza (npm) (malicious package)
- [MAL-2025-36436](https://insights.sbomify.com/MAL-2025-36436/): Malicious code in test-mlw2-theed-seats-nerds-targe (npm) (malicious package)
- [MAL-2025-36435](https://insights.sbomify.com/MAL-2025-36435/): Malicious code in test-mlw2-thars-cubit-rucks-kells (npm) (malicious package)
- [MAL-2025-36434](https://insights.sbomify.com/MAL-2025-36434/): Malicious code in test-mlw2-thane-fytte (npm) (malicious package)
- [MAL-2025-36433](https://insights.sbomify.com/MAL-2025-36433/): Malicious code in test-mlw2-testa-yealm (npm) (malicious package)
- [MAL-2025-36432](https://insights.sbomify.com/MAL-2025-36432/): Malicious code in test-mlw2-testa-emule (npm) (malicious package)
- [MAL-2025-36431](https://insights.sbomify.com/MAL-2025-36431/): Malicious code in test-mlw2-tepid-extol (npm) (malicious package)
- [MAL-2025-36430](https://insights.sbomify.com/MAL-2025-36430/): Malicious code in test-mlw2-tenue-irate (npm) (malicious package)
- [MAL-2025-3643](https://insights.sbomify.com/MAL-2025-3643/): Malicious code in sails-mssql-adapter (npm) (malicious package)
- [MAL-2025-36429](https://insights.sbomify.com/MAL-2025-36429/): Malicious code in test-mlw2-tenty-loure-mingy-rifer (npm) (malicious package)
- [MAL-2025-36428](https://insights.sbomify.com/MAL-2025-36428/): Malicious code in test-mlw2-tenth-pared-lordy-duple (npm) (malicious package)
- [MAL-2025-36427](https://insights.sbomify.com/MAL-2025-36427/): Malicious code in test-mlw2-tense-lousy-omlah-humpy (npm) (malicious package)
- [MAL-2025-36426](https://insights.sbomify.com/MAL-2025-36426/): Malicious code in test-mlw2-tenno-penks (npm) (malicious package)
- [MAL-2025-36425](https://insights.sbomify.com/MAL-2025-36425/): Malicious code in test-mlw2-tempi-duads (npm) (malicious package)
- [MAL-2025-36424](https://insights.sbomify.com/MAL-2025-36424/): Malicious code in test-mlw2-telos-stulm-table-paras (npm) (malicious package)
- [MAL-2025-36423](https://insights.sbomify.com/MAL-2025-36423/): Malicious code in test-mlw2-telic-oldie (npm) (malicious package)
- [MAL-2025-36422](https://insights.sbomify.com/MAL-2025-36422/): Malicious code in test-mlw2-telex-kents (npm) (malicious package)
- [MAL-2025-36421](https://insights.sbomify.com/MAL-2025-36421/): Malicious code in test-mlw2-teils-stied-bines-wader (npm) (malicious package)
- [MAL-2025-36420](https://insights.sbomify.com/MAL-2025-36420/): Malicious code in test-mlw2-teens-satyr-rigor-esker (npm) (malicious package)
- [MAL-2025-3642](https://insights.sbomify.com/MAL-2025-3642/): Malicious code in reactotron-mobx (npm) (malicious package)
- [MAL-2025-36419](https://insights.sbomify.com/MAL-2025-36419/): Malicious code in test-mlw2-teems-usnea (npm) (malicious package)
- [MAL-2025-36418](https://insights.sbomify.com/MAL-2025-36418/): Malicious code in test-mlw2-teems-maize (npm) (malicious package)
- [MAL-2025-36417](https://insights.sbomify.com/MAL-2025-36417/): Malicious code in test-mlw2-teels-psoas (npm) (malicious package)
- [MAL-2025-36416](https://insights.sbomify.com/MAL-2025-36416/): Malicious code in test-mlw2-teels-nongs (npm) (malicious package)
- [MAL-2025-36415](https://insights.sbomify.com/MAL-2025-36415/): Malicious code in test-mlw2-teary-cozes (npm) (malicious package)
- [MAL-2025-36414](https://insights.sbomify.com/MAL-2025-36414/): Malicious code in test-mlw2-teade-thete (npm) (malicious package)
- [MAL-2025-36413](https://insights.sbomify.com/MAL-2025-36413/): Malicious code in test-mlw2-tayra-dyers (npm) (malicious package)
- [MAL-2025-36412](https://insights.sbomify.com/MAL-2025-36412/): Malicious code in test-mlw2-taxor-peony-cornu-whorl (npm) (malicious package)
- [MAL-2025-36411](https://insights.sbomify.com/MAL-2025-36411/): Malicious code in test-mlw2-taxed-relic (npm) (malicious package)
- [MAL-2025-36410](https://insights.sbomify.com/MAL-2025-36410/): Malicious code in test-mlw2-tatus-bebop (npm) (malicious package)
- [MAL-2025-3641](https://insights.sbomify.com/MAL-2025-3641/): Malicious code in psalm (npm) (malicious package)
- [MAL-2025-36409](https://insights.sbomify.com/MAL-2025-36409/): Malicious code in test-mlw2-tarty-urson (npm) (malicious package)
- [MAL-2025-36408](https://insights.sbomify.com/MAL-2025-36408/): Malicious code in test-mlw2-tarre-lichi-muton-traps (npm) (malicious package)
- [MAL-2025-36407](https://insights.sbomify.com/MAL-2025-36407/): Malicious code in test-mlw2-tarps-dowed (npm) (malicious package)
- [MAL-2025-36406](https://insights.sbomify.com/MAL-2025-36406/): Malicious code in test-mlw2-tardy-spues (npm) (malicious package)
- [MAL-2025-36405](https://insights.sbomify.com/MAL-2025-36405/): Malicious code in test-mlw2-tardy-scree-chota-scalp (npm) (malicious package)
- [MAL-2025-36404](https://insights.sbomify.com/MAL-2025-36404/): Malicious code in test-mlw2-tangi-nerve (npm) (malicious package)
- [MAL-2025-36403](https://insights.sbomify.com/MAL-2025-36403/): Malicious code in test-mlw2-tammy-prigs (npm) (malicious package)
- [MAL-2025-36402](https://insights.sbomify.com/MAL-2025-36402/): Malicious code in test-mlw2-tammy-bunch (npm) (malicious package)
- [MAL-2025-36401](https://insights.sbomify.com/MAL-2025-36401/): Malicious code in test-mlw2-talma-trots (npm) (malicious package)
- [MAL-2025-36400](https://insights.sbomify.com/MAL-2025-36400/): Malicious code in test-mlw2-taker-crash (npm) (malicious package)
- [MAL-2025-3640](https://insights.sbomify.com/MAL-2025-3640/): Malicious code in platformio (npm) (malicious package)
- [MAL-2025-364](https://insights.sbomify.com/MAL-2025-364/): Malicious code in solc-0.6.8 (npm) (malicious package)
- [MAL-2025-36399](https://insights.sbomify.com/MAL-2025-36399/): Malicious code in test-mlw2-tails-grece (npm) (malicious package)
- [MAL-2025-36398](https://insights.sbomify.com/MAL-2025-36398/): Malicious code in test-mlw2-tahas-disks (npm) (malicious package)
- [MAL-2025-36397](https://insights.sbomify.com/MAL-2025-36397/): Malicious code in test-mlw2-tagma-saves (npm) (malicious package)
- [MAL-2025-36396](https://insights.sbomify.com/MAL-2025-36396/): Malicious code in test-mlw2-tacet-loony-spill-ulcer (npm) (malicious package)
- [MAL-2025-36395](https://insights.sbomify.com/MAL-2025-36395/): Malicious code in test-mlw2-taces-ogive (npm) (malicious package)
- [MAL-2025-36394](https://insights.sbomify.com/MAL-2025-36394/): Malicious code in test-mlw2-tabor-wrath (npm) (malicious package)
- [MAL-2025-36393](https://insights.sbomify.com/MAL-2025-36393/): Malicious code in test-mlw2-synds-nomad-brise-boded (npm) (malicious package)
- [MAL-2025-36392](https://insights.sbomify.com/MAL-2025-36392/): Malicious code in test-mlw2-synch-whole (npm) (malicious package)
- [MAL-2025-36391](https://insights.sbomify.com/MAL-2025-36391/): Malicious code in test-mlw2-sykes-kitty (npm) (malicious package)
- [MAL-2025-36390](https://insights.sbomify.com/MAL-2025-36390/): Malicious code in test-mlw2-swots-casco (npm) (malicious package)
- [MAL-2025-3639](https://insights.sbomify.com/MAL-2025-3639/): Malicious code in opentk (npm) (malicious package)
- [MAL-2025-36389](https://insights.sbomify.com/MAL-2025-36389/): Malicious code in test-mlw2-swoon-balsa-bells-odium (npm) (malicious package)
- [MAL-2025-36388](https://insights.sbomify.com/MAL-2025-36388/): Malicious code in test-mlw2-swizz-apace (npm) (malicious package)
- [MAL-2025-36387](https://insights.sbomify.com/MAL-2025-36387/): Malicious code in test-mlw2-swive-haunt (npm) (malicious package)
- [MAL-2025-36386](https://insights.sbomify.com/MAL-2025-36386/): Malicious code in test-mlw2-swish-saree (npm) (malicious package)
- [MAL-2025-36385](https://insights.sbomify.com/MAL-2025-36385/): Malicious code in test-mlw2-swink-manly-celeb-dippy (npm) (malicious package)
- [MAL-2025-36384](https://insights.sbomify.com/MAL-2025-36384/): Malicious code in test-mlw2-swing-feods-ogmic-kales (npm) (malicious package)
- [MAL-2025-36383](https://insights.sbomify.com/MAL-2025-36383/): Malicious code in test-mlw2-swath-sects (npm) (malicious package)
- [MAL-2025-36382](https://insights.sbomify.com/MAL-2025-36382/): Malicious code in test-mlw2-sward-float (npm) (malicious package)
- [MAL-2025-36381](https://insights.sbomify.com/MAL-2025-36381/): Malicious code in test-mlw2-swans-uteri (npm) (malicious package)
- [MAL-2025-36380](https://insights.sbomify.com/MAL-2025-36380/): Malicious code in test-mlw2-swans-jowar (npm) (malicious package)
- [MAL-2025-3638](https://insights.sbomify.com/MAL-2025-3638/): Malicious code in node-jwt-simple (npm) (malicious package)
- [MAL-2025-36379](https://insights.sbomify.com/MAL-2025-36379/): Malicious code in test-mlw2-swank-valve (npm) (malicious package)
- [MAL-2025-36378](https://insights.sbomify.com/MAL-2025-36378/): Malicious code in test-mlw2-swain-skirt (npm) (malicious package)
- [MAL-2025-36377](https://insights.sbomify.com/MAL-2025-36377/): Malicious code in test-mlw2-surgy-press (npm) (malicious package)
- [MAL-2025-36376](https://insights.sbomify.com/MAL-2025-36376/): Malicious code in test-mlw2-surge-tiles (npm) (malicious package)
- [MAL-2025-36375](https://insights.sbomify.com/MAL-2025-36375/): Malicious code in test-mlw2-surfs-jerid (npm) (malicious package)
- [MAL-2025-36374](https://insights.sbomify.com/MAL-2025-36374/): Malicious code in test-mlw2-surer-trees (npm) (malicious package)
- [MAL-2025-36373](https://insights.sbomify.com/MAL-2025-36373/): Malicious code in test-mlw2-sumps-pogos-caird-rumps (npm) (malicious package)
- [MAL-2025-36372](https://insights.sbomify.com/MAL-2025-36372/): Malicious code in test-mlw2-sulks-proms (npm) (malicious package)
- [MAL-2025-36371](https://insights.sbomify.com/MAL-2025-36371/): Malicious code in test-mlw2-sudsy-swads-aisle-setts (npm) (malicious package)
- [MAL-2025-36370](https://insights.sbomify.com/MAL-2025-36370/): Malicious code in test-mlw2-sudor-kendo (npm) (malicious package)
- [MAL-2025-3637](https://insights.sbomify.com/MAL-2025-3637/): Malicious code in mock-arduino (npm) (malicious package)
- [MAL-2025-36369](https://insights.sbomify.com/MAL-2025-36369/): Malicious code in test-mlw2-sudor-bwana-peace-mungo (npm) (malicious package)
- [MAL-2025-36368](https://insights.sbomify.com/MAL-2025-36368/): Malicious code in test-mlw2-sudds-sains-kitty-jubas (npm) (malicious package)
- [MAL-2025-36367](https://insights.sbomify.com/MAL-2025-36367/): Malicious code in test-mlw2-stylo-azoic (npm) (malicious package)
- [MAL-2025-36366](https://insights.sbomify.com/MAL-2025-36366/): Malicious code in test-mlw2-styli-flaps (npm) (malicious package)
- [MAL-2025-36365](https://insights.sbomify.com/MAL-2025-36365/): Malicious code in test-mlw2-style-moyle (npm) (malicious package)
- [MAL-2025-36364](https://insights.sbomify.com/MAL-2025-36364/): Malicious code in test-mlw2-stupa-sware-rivel-cirri (npm) (malicious package)
- [MAL-2025-36363](https://insights.sbomify.com/MAL-2025-36363/): Malicious code in test-mlw2-stupa-crans (npm) (malicious package)
- [MAL-2025-36362](https://insights.sbomify.com/MAL-2025-36362/): Malicious code in test-mlw2-strew-halva (npm) (malicious package)
- [MAL-2025-36361](https://insights.sbomify.com/MAL-2025-36361/): Malicious code in test-mlw2-stoop-honed (npm) (malicious package)
- [MAL-2025-36360](https://insights.sbomify.com/MAL-2025-36360/): Malicious code in test-mlw2-stone-divan (npm) (malicious package)
- [MAL-2025-3636](https://insights.sbomify.com/MAL-2025-3636/): Malicious code in meteor-roles (npm) (malicious package)
- [MAL-2025-36359](https://insights.sbomify.com/MAL-2025-36359/): Malicious code in test-mlw2-stola-topos (npm) (malicious package)
- [MAL-2025-36358](https://insights.sbomify.com/MAL-2025-36358/): Malicious code in test-mlw2-stoke-looks (npm) (malicious package)
- [MAL-2025-36357](https://insights.sbomify.com/MAL-2025-36357/): Malicious code in test-mlw2-stock-whits-stalk-jambe (npm) (malicious package)
- [MAL-2025-36356](https://insights.sbomify.com/MAL-2025-36356/): Malicious code in test-mlw2-stoai-waxes (npm) (malicious package)
- [MAL-2025-36355](https://insights.sbomify.com/MAL-2025-36355/): Malicious code in test-mlw2-stoae-oubit-brace-actin (npm) (malicious package)
- [MAL-2025-36354](https://insights.sbomify.com/MAL-2025-36354/): Malicious code in test-mlw2-stive-cling (npm) (malicious package)
- [MAL-2025-36353](https://insights.sbomify.com/MAL-2025-36353/): Malicious code in test-mlw2-stipe-kames-zippo-sorda (npm) (malicious package)
- [MAL-2025-36352](https://insights.sbomify.com/MAL-2025-36352/): Malicious code in test-mlw2-stick-ganch (npm) (malicious package)
- [MAL-2025-36351](https://insights.sbomify.com/MAL-2025-36351/): Malicious code in test-mlw2-stets-stall (npm) (malicious package)
- [MAL-2025-36350](https://insights.sbomify.com/MAL-2025-36350/): Malicious code in test-mlw2-stept-ponts (npm) (malicious package)
- [MAL-2025-3635](https://insights.sbomify.com/MAL-2025-3635/): Malicious code in make-plural-rules (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/709/