# Vulnerabilities published in 2025


- [MAL-2025-36349](https://insights.sbomify.com/MAL-2025-36349/): Malicious code in test-mlw2-steps-cronk-bauds-pocky (npm) (malicious package)
- [MAL-2025-36348](https://insights.sbomify.com/MAL-2025-36348/): Malicious code in test-mlw2-stell-avise (npm) (malicious package)
- [MAL-2025-36347](https://insights.sbomify.com/MAL-2025-36347/): Malicious code in test-mlw2-stela-seams (npm) (malicious package)
- [MAL-2025-36346](https://insights.sbomify.com/MAL-2025-36346/): Malicious code in test-mlw2-stein-rutty-whirr-juice (npm) (malicious package)
- [MAL-2025-36345](https://insights.sbomify.com/MAL-2025-36345/): Malicious code in test-mlw2-steen-trigs (npm) (malicious package)
- [MAL-2025-36344](https://insights.sbomify.com/MAL-2025-36344/): Malicious code in test-mlw2-steen-maxis (npm) (malicious package)
- [MAL-2025-36343](https://insights.sbomify.com/MAL-2025-36343/): Malicious code in test-mlw2-stays-merit (npm) (malicious package)
- [MAL-2025-36342](https://insights.sbomify.com/MAL-2025-36342/): Malicious code in test-mlw2-stays-eards-pened-rebbe (npm) (malicious package)
- [MAL-2025-36341](https://insights.sbomify.com/MAL-2025-36341/): Malicious code in test-mlw2-staws-thens (npm) (malicious package)
- [MAL-2025-36340](https://insights.sbomify.com/MAL-2025-36340/): Malicious code in test-mlw2-stave-kotos (npm) (malicious package)
- [MAL-2025-3634](https://insights.sbomify.com/MAL-2025-3634/): Malicious code in lucide-node (npm) (malicious package)
- [MAL-2025-36339](https://insights.sbomify.com/MAL-2025-36339/): Malicious code in test-mlw2-stave-groin (npm) (malicious package)
- [MAL-2025-36338](https://insights.sbomify.com/MAL-2025-36338/): Malicious code in test-mlw2-start-croon-junky-iglus (npm) (malicious package)
- [MAL-2025-36337](https://insights.sbomify.com/MAL-2025-36337/): Malicious code in test-mlw2-stars-words (npm) (malicious package)
- [MAL-2025-36336](https://insights.sbomify.com/MAL-2025-36336/): Malicious code in test-mlw2-stall-perns (npm) (malicious package)
- [MAL-2025-36335](https://insights.sbomify.com/MAL-2025-36335/): Malicious code in test-mlw2-stalk-dauby (npm) (malicious package)
- [MAL-2025-36334](https://insights.sbomify.com/MAL-2025-36334/): Malicious code in test-mlw2-stale-jubes (npm) (malicious package)
- [MAL-2025-36333](https://insights.sbomify.com/MAL-2025-36333/): Malicious code in test-mlw2-stair-crude (npm) (malicious package)
- [MAL-2025-36332](https://insights.sbomify.com/MAL-2025-36332/): Malicious code in test-mlw2-staig-dials (npm) (malicious package)
- [MAL-2025-36331](https://insights.sbomify.com/MAL-2025-36331/): Malicious code in test-mlw2-stage-papas (npm) (malicious package)
- [MAL-2025-36330](https://insights.sbomify.com/MAL-2025-36330/): Malicious code in test-mlw2-stack-algin (npm) (malicious package)
- [MAL-2025-3633](https://insights.sbomify.com/MAL-2025-3633/): Malicious code in kidding (npm) (malicious package)
- [MAL-2025-36329](https://insights.sbomify.com/MAL-2025-36329/): Malicious code in test-mlw2-squat-lease (npm) (malicious package)
- [MAL-2025-36328](https://insights.sbomify.com/MAL-2025-36328/): Malicious code in test-mlw2-squad-rafts (npm) (malicious package)
- [MAL-2025-36327](https://insights.sbomify.com/MAL-2025-36327/): Malicious code in test-mlw2-squab-cough (npm) (malicious package)
- [MAL-2025-36326](https://insights.sbomify.com/MAL-2025-36326/): Malicious code in test-mlw2-spurs-lores (npm) (malicious package)
- [MAL-2025-36325](https://insights.sbomify.com/MAL-2025-36325/): Malicious code in test-mlw2-sprug-crush (npm) (malicious package)
- [MAL-2025-36324](https://insights.sbomify.com/MAL-2025-36324/): Malicious code in test-mlw2-sprue-batty (npm) (malicious package)
- [MAL-2025-36323](https://insights.sbomify.com/MAL-2025-36323/): Malicious code in test-mlw2-sprod-sowse-elute-clued (npm) (malicious package)
- [MAL-2025-36322](https://insights.sbomify.com/MAL-2025-36322/): Malicious code in test-mlw2-sprig-wails (npm) (malicious package)
- [MAL-2025-36321](https://insights.sbomify.com/MAL-2025-36321/): Malicious code in test-mlw2-sprew-chief-rybat-graph (npm) (malicious package)
- [MAL-2025-36320](https://insights.sbomify.com/MAL-2025-36320/): Malicious code in test-mlw2-spray-sized (npm) (malicious package)
- [MAL-2025-3632](https://insights.sbomify.com/MAL-2025-3632/): Malicious code in josson (npm) (malicious package)
- [MAL-2025-36319](https://insights.sbomify.com/MAL-2025-36319/): Malicious code in test-mlw2-spray-merks (npm) (malicious package)
- [MAL-2025-36318](https://insights.sbomify.com/MAL-2025-36318/): Malicious code in test-mlw2-sprad-stipa (npm) (malicious package)
- [MAL-2025-36317](https://insights.sbomify.com/MAL-2025-36317/): Malicious code in test-mlw2-spout-lungs (npm) (malicious package)
- [MAL-2025-36316](https://insights.sbomify.com/MAL-2025-36316/): Malicious code in test-mlw2-spout-doucs (npm) (malicious package)
- [MAL-2025-36315](https://insights.sbomify.com/MAL-2025-36315/): Malicious code in test-mlw2-sposh-spiry (npm) (malicious package)
- [MAL-2025-36314](https://insights.sbomify.com/MAL-2025-36314/): Malicious code in test-mlw2-spore-which-reach-crepe (npm) (malicious package)
- [MAL-2025-36313](https://insights.sbomify.com/MAL-2025-36313/): Malicious code in test-mlw2-spoon-kibes-seize-aargh (npm) (malicious package)
- [MAL-2025-36312](https://insights.sbomify.com/MAL-2025-36312/): Malicious code in test-mlw2-spoom-chefs (npm) (malicious package)
- [MAL-2025-36311](https://insights.sbomify.com/MAL-2025-36311/): Malicious code in test-mlw2-spoke-riled-vells-liths (npm) (malicious package)
- [MAL-2025-36310](https://insights.sbomify.com/MAL-2025-36310/): Malicious code in test-mlw2-spite-yrapt (npm) (malicious package)
- [MAL-2025-3631](https://insights.sbomify.com/MAL-2025-3631/): Malicious code in jna (npm) (malicious package)
- [MAL-2025-36309](https://insights.sbomify.com/MAL-2025-36309/): Malicious code in test-mlw2-spiry-yarrs (npm) (malicious package)
- [MAL-2025-36308](https://insights.sbomify.com/MAL-2025-36308/): Malicious code in test-mlw2-spine-aecia (npm) (malicious package)
- [MAL-2025-36307](https://insights.sbomify.com/MAL-2025-36307/): Malicious code in test-mlw2-spied-stuff-geoid-brick (npm) (malicious package)
- [MAL-2025-36306](https://insights.sbomify.com/MAL-2025-36306/): Malicious code in test-mlw2-spied-eyots (npm) (malicious package)
- [MAL-2025-36305](https://insights.sbomify.com/MAL-2025-36305/): Malicious code in test-mlw2-sperm-meats (npm) (malicious package)
- [MAL-2025-36304](https://insights.sbomify.com/MAL-2025-36304/): Malicious code in test-mlw2-spend-daman-mouth-haets (npm) (malicious package)
- [MAL-2025-36303](https://insights.sbomify.com/MAL-2025-36303/): Malicious code in test-mlw2-speld-argus (npm) (malicious package)
- [MAL-2025-36302](https://insights.sbomify.com/MAL-2025-36302/): Malicious code in test-mlw2-speel-loped (npm) (malicious package)
- [MAL-2025-36301](https://insights.sbomify.com/MAL-2025-36301/): Malicious code in test-mlw2-speak-araks (npm) (malicious package)
- [MAL-2025-36300](https://insights.sbomify.com/MAL-2025-36300/): Malicious code in test-mlw2-spawl-cloth (npm) (malicious package)
- [MAL-2025-3630](https://insights.sbomify.com/MAL-2025-3630/): Malicious code in jetty-quic (npm) (malicious package)
- [MAL-2025-363](https://insights.sbomify.com/MAL-2025-363/): Malicious code in self-bots-dc (npm) (malicious package)
- [MAL-2025-36299](https://insights.sbomify.com/MAL-2025-36299/): Malicious code in test-mlw2-spate-sense (npm) (malicious package)
- [MAL-2025-36298](https://insights.sbomify.com/MAL-2025-36298/): Malicious code in test-mlw2-spart-dater (npm) (malicious package)
- [MAL-2025-36297](https://insights.sbomify.com/MAL-2025-36297/): Malicious code in test-mlw2-spang-slobs-dobby-slabs (npm) (malicious package)
- [MAL-2025-36296](https://insights.sbomify.com/MAL-2025-36296/): Malicious code in test-mlw2-spall-pareo (npm) (malicious package)
- [MAL-2025-36295](https://insights.sbomify.com/MAL-2025-36295/): Malicious code in test-mlw2-spado-whoop-mahoe-alkyl (npm) (malicious package)
- [MAL-2025-36294](https://insights.sbomify.com/MAL-2025-36294/): Malicious code in test-mlw2-spado-hance (npm) (malicious package)
- [MAL-2025-36293](https://insights.sbomify.com/MAL-2025-36293/): Malicious code in test-mlw2-sords-germs (npm) (malicious package)
- [MAL-2025-36292](https://insights.sbomify.com/MAL-2025-36292/): Malicious code in test-mlw2-sopor-drunk (npm) (malicious package)
- [MAL-2025-36291](https://insights.sbomify.com/MAL-2025-36291/): Malicious code in test-mlw2-sopor-amber-undue-yeans (npm) (malicious package)
- [MAL-2025-36290](https://insights.sbomify.com/MAL-2025-36290/): Malicious code in test-mlw2-sophs-piety (npm) (malicious package)
- [MAL-2025-3629](https://insights.sbomify.com/MAL-2025-3629/): Malicious code in jest-coverage-merge (npm) (malicious package)
- [MAL-2025-36289](https://insights.sbomify.com/MAL-2025-36289/): Malicious code in test-mlw2-sooty-gapes-frore-kombu (npm) (malicious package)
- [MAL-2025-36288](https://insights.sbomify.com/MAL-2025-36288/): Malicious code in test-mlw2-sooty-batik (npm) (malicious package)
- [MAL-2025-36287](https://insights.sbomify.com/MAL-2025-36287/): Malicious code in test-mlw2-sooth-gaids (npm) (malicious package)
- [MAL-2025-36286](https://insights.sbomify.com/MAL-2025-36286/): Malicious code in test-mlw2-sooks-kuris (npm) (malicious package)
- [MAL-2025-36285](https://insights.sbomify.com/MAL-2025-36285/): Malicious code in test-mlw2-sonic-taboo (npm) (malicious package)
- [MAL-2025-36284](https://insights.sbomify.com/MAL-2025-36284/): Malicious code in test-mlw2-sonce-swage (npm) (malicious package)
- [MAL-2025-36283](https://insights.sbomify.com/MAL-2025-36283/): Malicious code in test-mlw2-solve-chive (npm) (malicious package)
- [MAL-2025-36282](https://insights.sbomify.com/MAL-2025-36282/): Malicious code in test-mlw2-solus-grout-feods-menus (npm) (malicious package)
- [MAL-2025-36281](https://insights.sbomify.com/MAL-2025-36281/): Malicious code in test-mlw2-soler-tonks (npm) (malicious package)
- [MAL-2025-36280](https://insights.sbomify.com/MAL-2025-36280/): Malicious code in test-mlw2-soled-kayle (npm) (malicious package)
- [MAL-2025-3628](https://insights.sbomify.com/MAL-2025-3628/): Malicious code in jade-browserify (npm) (malicious package)
- [MAL-2025-36279](https://insights.sbomify.com/MAL-2025-36279/): Malicious code in test-mlw2-soily-sodas (npm) (malicious package)
- [MAL-2025-36278](https://insights.sbomify.com/MAL-2025-36278/): Malicious code in test-mlw2-socks-acock (npm) (malicious package)
- [MAL-2025-36277](https://insights.sbomify.com/MAL-2025-36277/): Malicious code in test-mlw2-soars-weave (npm) (malicious package)
- [MAL-2025-36276](https://insights.sbomify.com/MAL-2025-36276/): Malicious code in test-mlw2-soaks-benis (npm) (malicious package)
- [MAL-2025-36275](https://insights.sbomify.com/MAL-2025-36275/): Malicious code in test-mlw2-snugs-marls (npm) (malicious package)
- [MAL-2025-36274](https://insights.sbomify.com/MAL-2025-36274/): Malicious code in test-mlw2-snoop-dives (npm) (malicious package)
- [MAL-2025-36273](https://insights.sbomify.com/MAL-2025-36273/): Malicious code in test-mlw2-snool-aking (npm) (malicious package)
- [MAL-2025-36272](https://insights.sbomify.com/MAL-2025-36272/): Malicious code in test-mlw2-snits-block (npm) (malicious package)
- [MAL-2025-36271](https://insights.sbomify.com/MAL-2025-36271/): Malicious code in test-mlw2-snipe-winds (npm) (malicious package)
- [MAL-2025-36270](https://insights.sbomify.com/MAL-2025-36270/): Malicious code in test-mlw2-sniff-scaup (npm) (malicious package)
- [MAL-2025-3627](https://insights.sbomify.com/MAL-2025-3627/): Malicious code in istanbul-reporter-lcov (npm) (malicious package)
- [MAL-2025-36269](https://insights.sbomify.com/MAL-2025-36269/): Malicious code in test-mlw2-snash-desex (npm) (malicious package)
- [MAL-2025-36268](https://insights.sbomify.com/MAL-2025-36268/): Malicious code in test-mlw2-snary-decor-nandu-heils (npm) (malicious package)
- [MAL-2025-36267](https://insights.sbomify.com/MAL-2025-36267/): Malicious code in test-mlw2-snary-clung (npm) (malicious package)
- [MAL-2025-36266](https://insights.sbomify.com/MAL-2025-36266/): Malicious code in test-mlw2-snare-basil (npm) (malicious package)
- [MAL-2025-36265](https://insights.sbomify.com/MAL-2025-36265/): Malicious code in test-mlw2-snags-fomes-brief-polks (npm) (malicious package)
- [MAL-2025-36264](https://insights.sbomify.com/MAL-2025-36264/): Malicious code in test-mlw2-slush-gulls (npm) (malicious package)
- [MAL-2025-36263](https://insights.sbomify.com/MAL-2025-36263/): Malicious code in test-mlw2-slunk-draws (npm) (malicious package)
- [MAL-2025-36262](https://insights.sbomify.com/MAL-2025-36262/): Malicious code in test-mlw2-slums-snoke (npm) (malicious package)
- [MAL-2025-36261](https://insights.sbomify.com/MAL-2025-36261/): Malicious code in test-mlw2-slump-spirt (npm) (malicious package)
- [MAL-2025-36260](https://insights.sbomify.com/MAL-2025-36260/): Malicious code in test-mlw2-slued-fents (npm) (malicious package)
- [MAL-2025-3626](https://insights.sbomify.com/MAL-2025-3626/): Malicious code in internallib_v921 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/710/