# Vulnerabilities published in 2025


- [MAL-2025-36259](https://insights.sbomify.com/MAL-2025-36259/): Malicious code in test-mlw2-slopy-wills-plims-kings (npm) (malicious package)
- [MAL-2025-36258](https://insights.sbomify.com/MAL-2025-36258/): Malicious code in test-mlw2-slope-wagon (npm) (malicious package)
- [MAL-2025-36257](https://insights.sbomify.com/MAL-2025-36257/): Malicious code in test-mlw2-slope-haiks-cloys-durst (npm) (malicious package)
- [MAL-2025-36256](https://insights.sbomify.com/MAL-2025-36256/): Malicious code in test-mlw2-sloid-caved (npm) (malicious package)
- [MAL-2025-36255](https://insights.sbomify.com/MAL-2025-36255/): Malicious code in test-mlw2-slits-spurn (npm) (malicious package)
- [MAL-2025-36254](https://insights.sbomify.com/MAL-2025-36254/): Malicious code in test-mlw2-slink-snout (npm) (malicious package)
- [MAL-2025-36253](https://insights.sbomify.com/MAL-2025-36253/): Malicious code in test-mlw2-slimy-hazed (npm) (malicious package)
- [MAL-2025-36252](https://insights.sbomify.com/MAL-2025-36252/): Malicious code in test-mlw2-slice-pales (npm) (malicious package)
- [MAL-2025-36251](https://insights.sbomify.com/MAL-2025-36251/): Malicious code in test-mlw2-sleys-evoes (npm) (malicious package)
- [MAL-2025-36250](https://insights.sbomify.com/MAL-2025-36250/): Malicious code in test-mlw2-sleet-pands (npm) (malicious package)
- [MAL-2025-3625](https://insights.sbomify.com/MAL-2025-3625/): Malicious code in internallib_v803 (npm) (malicious package)
- [MAL-2025-36249](https://insights.sbomify.com/MAL-2025-36249/): Malicious code in test-mlw2-slash-rayle (npm) (malicious package)
- [MAL-2025-36248](https://insights.sbomify.com/MAL-2025-36248/): Malicious code in test-mlw2-slake-venue-heard-panne (npm) (malicious package)
- [MAL-2025-36247](https://insights.sbomify.com/MAL-2025-36247/): Malicious code in test-mlw2-slaes-dwelt (npm) (malicious package)
- [MAL-2025-36246](https://insights.sbomify.com/MAL-2025-36246/): Malicious code in test-mlw2-slack-rifts (npm) (malicious package)
- [MAL-2025-36245](https://insights.sbomify.com/MAL-2025-36245/): Malicious code in test-mlw2-skyey-agues-tices-foams (npm) (malicious package)
- [MAL-2025-36244](https://insights.sbomify.com/MAL-2025-36244/): Malicious code in test-mlw2-skyer-colic (npm) (malicious package)
- [MAL-2025-36243](https://insights.sbomify.com/MAL-2025-36243/): Malicious code in test-mlw2-skull-hated (npm) (malicious package)
- [MAL-2025-36242](https://insights.sbomify.com/MAL-2025-36242/): Malicious code in test-mlw2-skulk-bints (npm) (malicious package)
- [MAL-2025-36241](https://insights.sbomify.com/MAL-2025-36241/): Malicious code in test-mlw2-skirl-murly (npm) (malicious package)
- [MAL-2025-36240](https://insights.sbomify.com/MAL-2025-36240/): Malicious code in test-mlw2-skirl-fazed-tummy-piked (npm) (malicious package)
- [MAL-2025-3624](https://insights.sbomify.com/MAL-2025-3624/): Malicious code in internal-company-api (npm) (malicious package)
- [MAL-2025-36239](https://insights.sbomify.com/MAL-2025-36239/): Malicious code in test-mlw2-skips-gamed (npm) (malicious package)
- [MAL-2025-36238](https://insights.sbomify.com/MAL-2025-36238/): Malicious code in test-mlw2-skips-ethic (npm) (malicious package)
- [MAL-2025-36237](https://insights.sbomify.com/MAL-2025-36237/): Malicious code in test-mlw2-skimp-limas (npm) (malicious package)
- [MAL-2025-36236](https://insights.sbomify.com/MAL-2025-36236/): Malicious code in test-mlw2-skimp-covin-biont-piezo (npm) (malicious package)
- [MAL-2025-36235](https://insights.sbomify.com/MAL-2025-36235/): Malicious code in test-mlw2-skean-still (npm) (malicious package)
- [MAL-2025-36234](https://insights.sbomify.com/MAL-2025-36234/): Malicious code in test-mlw2-skean-lends (npm) (malicious package)
- [MAL-2025-36233](https://insights.sbomify.com/MAL-2025-36233/): Malicious code in test-mlw2-skald-bilge (npm) (malicious package)
- [MAL-2025-36232](https://insights.sbomify.com/MAL-2025-36232/): Malicious code in test-mlw2-sizes-redip (npm) (malicious package)
- [MAL-2025-36231](https://insights.sbomify.com/MAL-2025-36231/): Malicious code in test-mlw2-sized-raile-bitsy-silva (npm) (malicious package)
- [MAL-2025-36230](https://insights.sbomify.com/MAL-2025-36230/): Malicious code in test-mlw2-sizar-idled (npm) (malicious package)
- [MAL-2025-3623](https://insights.sbomify.com/MAL-2025-3623/): Malicious code in hungarian-algorithm (npm) (malicious package)
- [MAL-2025-36229](https://insights.sbomify.com/MAL-2025-36229/): Malicious code in test-mlw2-sizar-elvan (npm) (malicious package)
- [MAL-2025-36228](https://insights.sbomify.com/MAL-2025-36228/): Malicious code in test-mlw2-sixer-byres (npm) (malicious package)
- [MAL-2025-36227](https://insights.sbomify.com/MAL-2025-36227/): Malicious code in test-mlw2-situs-pekoe (npm) (malicious package)
- [MAL-2025-36226](https://insights.sbomify.com/MAL-2025-36226/): Malicious code in test-mlw2-siroc-saick (npm) (malicious package)
- [MAL-2025-36225](https://insights.sbomify.com/MAL-2025-36225/): Malicious code in test-mlw2-sinky-clime (npm) (malicious package)
- [MAL-2025-36224](https://insights.sbomify.com/MAL-2025-36224/): Malicious code in test-mlw2-sinks-flogs (npm) (malicious package)
- [MAL-2025-36223](https://insights.sbomify.com/MAL-2025-36223/): Malicious code in test-mlw2-singe-vegas (npm) (malicious package)
- [MAL-2025-36222](https://insights.sbomify.com/MAL-2025-36222/): Malicious code in test-mlw2-since-scopa (npm) (malicious package)
- [MAL-2025-36221](https://insights.sbomify.com/MAL-2025-36221/): Malicious code in test-mlw2-since-creek (npm) (malicious package)
- [MAL-2025-36220](https://insights.sbomify.com/MAL-2025-36220/): Malicious code in test-mlw2-silky-audio-rimes-vomit (npm) (malicious package)
- [MAL-2025-3622](https://insights.sbomify.com/MAL-2025-3622/): Malicious code in haml-jst-loader (npm) (malicious package)
- [MAL-2025-36219](https://insights.sbomify.com/MAL-2025-36219/): Malicious code in test-mlw2-silex-whoso-makos-woads (npm) (malicious package)
- [MAL-2025-36218](https://insights.sbomify.com/MAL-2025-36218/): Malicious code in test-mlw2-sigil-naval (npm) (malicious package)
- [MAL-2025-36217](https://insights.sbomify.com/MAL-2025-36217/): Malicious code in test-mlw2-sight-tanks-loach-spits (npm) (malicious package)
- [MAL-2025-36216](https://insights.sbomify.com/MAL-2025-36216/): Malicious code in test-mlw2-sight-ricks (npm) (malicious package)
- [MAL-2025-36215](https://insights.sbomify.com/MAL-2025-36215/): Malicious code in test-mlw2-sicks-chant (npm) (malicious package)
- [MAL-2025-36214](https://insights.sbomify.com/MAL-2025-36214/): Malicious code in test-mlw2-sewin-durst (npm) (malicious package)
- [MAL-2025-36213](https://insights.sbomify.com/MAL-2025-36213/): Malicious code in test-mlw2-setts-spoot (npm) (malicious package)
- [MAL-2025-36212](https://insights.sbomify.com/MAL-2025-36212/): Malicious code in test-mlw2-serve-notum (npm) (malicious package)
- [MAL-2025-36211](https://insights.sbomify.com/MAL-2025-36211/): Malicious code in test-mlw2-serrs-spoor-skeos-chili (npm) (malicious package)
- [MAL-2025-36210](https://insights.sbomify.com/MAL-2025-36210/): Malicious code in test-mlw2-serks-swans-abbas-kazoo (npm) (malicious package)
- [MAL-2025-3621](https://insights.sbomify.com/MAL-2025-3621/): Malicious code in flush-plugins (npm) (malicious package)
- [MAL-2025-36209](https://insights.sbomify.com/MAL-2025-36209/): Malicious code in test-mlw2-serks-stirs-xenia-howls (npm) (malicious package)
- [MAL-2025-36208](https://insights.sbomify.com/MAL-2025-36208/): Malicious code in test-mlw2-serks-aurum (npm) (malicious package)
- [MAL-2025-36207](https://insights.sbomify.com/MAL-2025-36207/): Malicious code in test-mlw2-seric-cacti-video-axoid (npm) (malicious package)
- [MAL-2025-36206](https://insights.sbomify.com/MAL-2025-36206/): Malicious code in test-mlw2-serge-ferns (npm) (malicious package)
- [MAL-2025-36205](https://insights.sbomify.com/MAL-2025-36205/): Malicious code in test-mlw2-sella-mouth (npm) (malicious package)
- [MAL-2025-36204](https://insights.sbomify.com/MAL-2025-36204/): Malicious code in test-mlw2-seity-cnida (npm) (malicious package)
- [MAL-2025-36203](https://insights.sbomify.com/MAL-2025-36203/): Malicious code in test-mlw2-seils-whift (npm) (malicious package)
- [MAL-2025-36202](https://insights.sbomify.com/MAL-2025-36202/): Malicious code in test-mlw2-seers-gland (npm) (malicious package)
- [MAL-2025-36201](https://insights.sbomify.com/MAL-2025-36201/): Malicious code in test-mlw2-sedgy-stair-hillo-notum (npm) (malicious package)
- [MAL-2025-36200](https://insights.sbomify.com/MAL-2025-36200/): Malicious code in test-mlw2-secco-matzo (npm) (malicious package)
- [MAL-2025-3620](https://insights.sbomify.com/MAL-2025-3620/): Malicious code in flashcanvas (npm) (malicious package)
- [MAL-2025-362](https://insights.sbomify.com/MAL-2025-362/): Malicious code in node-server-sdk (npm) (malicious package)
- [MAL-2025-36199](https://insights.sbomify.com/MAL-2025-36199/): Malicious code in test-mlw2-scyes-stull (npm) (malicious package)
- [MAL-2025-36198](https://insights.sbomify.com/MAL-2025-36198/): Malicious code in test-mlw2-scuts-dorts (npm) (malicious package)
- [MAL-2025-36197](https://insights.sbomify.com/MAL-2025-36197/): Malicious code in test-mlw2-scurs-scuzz (npm) (malicious package)
- [MAL-2025-36196](https://insights.sbomify.com/MAL-2025-36196/): Malicious code in test-mlw2-scrod-barre (npm) (malicious package)
- [MAL-2025-36195](https://insights.sbomify.com/MAL-2025-36195/): Malicious code in test-mlw2-scrip-erode-gazel-ochre (npm) (malicious package)
- [MAL-2025-36194](https://insights.sbomify.com/MAL-2025-36194/): Malicious code in test-mlw2-scrip-duras (npm) (malicious package)
- [MAL-2025-36193](https://insights.sbomify.com/MAL-2025-36193/): Malicious code in test-mlw2-scraw-semis (npm) (malicious package)
- [MAL-2025-36192](https://insights.sbomify.com/MAL-2025-36192/): Malicious code in test-mlw2-scout-mungo-spoot-acorn (npm) (malicious package)
- [MAL-2025-36191](https://insights.sbomify.com/MAL-2025-36191/): Malicious code in test-mlw2-scoup-churr (npm) (malicious package)
- [MAL-2025-36190](https://insights.sbomify.com/MAL-2025-36190/): Malicious code in test-mlw2-scorn-slabs-hazel-aglow (npm) (malicious package)
- [MAL-2025-3619](https://insights.sbomify.com/MAL-2025-3619/): Malicious code in dayjs-plugin-duration (npm) (malicious package)
- [MAL-2025-36189](https://insights.sbomify.com/MAL-2025-36189/): Malicious code in test-mlw2-scone-tikka (npm) (malicious package)
- [MAL-2025-36188](https://insights.sbomify.com/MAL-2025-36188/): Malicious code in test-mlw2-scone-swaly (npm) (malicious package)
- [MAL-2025-36187](https://insights.sbomify.com/MAL-2025-36187/): Malicious code in test-mlw2-schmo-snabs (npm) (malicious package)
- [MAL-2025-36186](https://insights.sbomify.com/MAL-2025-36186/): Malicious code in test-mlw2-scaws-skirl-braes-enorm (npm) (malicious package)
- [MAL-2025-36185](https://insights.sbomify.com/MAL-2025-36185/): Malicious code in test-mlw2-scars-tamal (npm) (malicious package)
- [MAL-2025-36184](https://insights.sbomify.com/MAL-2025-36184/): Malicious code in test-mlw2-scars-creel (npm) (malicious package)
- [MAL-2025-36183](https://insights.sbomify.com/MAL-2025-36183/): Malicious code in test-mlw2-scarp-roped (npm) (malicious package)
- [MAL-2025-36182](https://insights.sbomify.com/MAL-2025-36182/): Malicious code in test-mlw2-scans-louse (npm) (malicious package)
- [MAL-2025-36181](https://insights.sbomify.com/MAL-2025-36181/): Malicious code in test-mlw2-scale-runds (npm) (malicious package)
- [MAL-2025-36180](https://insights.sbomify.com/MAL-2025-36180/): Malicious code in test-mlw2-scail-poori (npm) (malicious package)
- [MAL-2025-3618](https://insights.sbomify.com/MAL-2025-3618/): Malicious code in cordova-plugin-permissions (npm) (malicious package)
- [MAL-2025-36179](https://insights.sbomify.com/MAL-2025-36179/): Malicious code in test-mlw2-scads-palmy (npm) (malicious package)
- [MAL-2025-36178](https://insights.sbomify.com/MAL-2025-36178/): Malicious code in test-mlw2-sayst-sides-chivs-sider (npm) (malicious package)
- [MAL-2025-36177](https://insights.sbomify.com/MAL-2025-36177/): Malicious code in test-mlw2-sayer-begat-abuzz-musts (npm) (malicious package)
- [MAL-2025-36176](https://insights.sbomify.com/MAL-2025-36176/): Malicious code in test-mlw2-savvy-bleep (npm) (malicious package)
- [MAL-2025-36175](https://insights.sbomify.com/MAL-2025-36175/): Malicious code in test-mlw2-savor-chore (npm) (malicious package)
- [MAL-2025-36174](https://insights.sbomify.com/MAL-2025-36174/): Malicious code in test-mlw2-saves-suety-widdy-lezzy (npm) (malicious package)
- [MAL-2025-36173](https://insights.sbomify.com/MAL-2025-36173/): Malicious code in test-mlw2-sault-buret (npm) (malicious package)
- [MAL-2025-36172](https://insights.sbomify.com/MAL-2025-36172/): Malicious code in test-mlw2-sates-hushy (npm) (malicious package)
- [MAL-2025-36171](https://insights.sbomify.com/MAL-2025-36171/): Malicious code in test-mlw2-sated-blore (npm) (malicious package)
- [MAL-2025-36170](https://insights.sbomify.com/MAL-2025-36170/): Malicious code in test-mlw2-sasse-gripe (npm) (malicious package)
- [MAL-2025-3617](https://insights.sbomify.com/MAL-2025-3617/): Malicious code in compiletest_rs (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/711/
