# Vulnerabilities published in 2025


- [MAL-2025-35988](https://insights.sbomify.com/MAL-2025-35988/): Malicious code in test-mlw2-pippy-baddy (npm) (malicious package)
- [MAL-2025-35987](https://insights.sbomify.com/MAL-2025-35987/): Malicious code in test-mlw2-pippy-almeh (npm) (malicious package)
- [MAL-2025-35986](https://insights.sbomify.com/MAL-2025-35986/): Malicious code in test-mlw2-piper-teals-satem-nabks (npm) (malicious package)
- [MAL-2025-35985](https://insights.sbomify.com/MAL-2025-35985/): Malicious code in test-mlw2-piper-scald (npm) (malicious package)
- [MAL-2025-35984](https://insights.sbomify.com/MAL-2025-35984/): Malicious code in test-mlw2-piper-domed-homey-muddy (npm) (malicious package)
- [MAL-2025-35983](https://insights.sbomify.com/MAL-2025-35983/): Malicious code in test-mlw2-piped-missy (npm) (malicious package)
- [MAL-2025-35982](https://insights.sbomify.com/MAL-2025-35982/): Malicious code in test-mlw2-pipas-pizza (npm) (malicious package)
- [MAL-2025-35981](https://insights.sbomify.com/MAL-2025-35981/): Malicious code in test-mlw2-pints-khoja (npm) (malicious package)
- [MAL-2025-35980](https://insights.sbomify.com/MAL-2025-35980/): Malicious code in test-mlw2-pinto-grese (npm) (malicious package)
- [MAL-2025-3598](https://insights.sbomify.com/MAL-2025-3598/): Malicious code in font-impact (npm) (malicious package)
- [MAL-2025-35979](https://insights.sbomify.com/MAL-2025-35979/): Malicious code in test-mlw2-pinta-cuter (npm) (malicious package)
- [MAL-2025-35978](https://insights.sbomify.com/MAL-2025-35978/): Malicious code in test-mlw2-pinny-theta (npm) (malicious package)
- [MAL-2025-35977](https://insights.sbomify.com/MAL-2025-35977/): Malicious code in test-mlw2-pinna-bongo (npm) (malicious package)
- [MAL-2025-35976](https://insights.sbomify.com/MAL-2025-35976/): Malicious code in test-mlw2-pings-abets (npm) (malicious package)
- [MAL-2025-35975](https://insights.sbomify.com/MAL-2025-35975/): Malicious code in test-mlw2-pined-scrim (npm) (malicious package)
- [MAL-2025-35974](https://insights.sbomify.com/MAL-2025-35974/): Malicious code in test-mlw2-pinch-tacos-potto-cheek (npm) (malicious package)
- [MAL-2025-35973](https://insights.sbomify.com/MAL-2025-35973/): Malicious code in test-mlw2-piled-lummy (npm) (malicious package)
- [MAL-2025-35972](https://insights.sbomify.com/MAL-2025-35972/): Malicious code in test-mlw2-pilch-pekan (npm) (malicious package)
- [MAL-2025-35971](https://insights.sbomify.com/MAL-2025-35971/): Malicious code in test-mlw2-picra-signs (npm) (malicious package)
- [MAL-2025-35970](https://insights.sbomify.com/MAL-2025-35970/): Malicious code in test-mlw2-picks-touts (npm) (malicious package)
- [MAL-2025-3597](https://insights.sbomify.com/MAL-2025-3597/): Malicious code in msl-example-client (npm) (malicious package)
- [MAL-2025-35969](https://insights.sbomify.com/MAL-2025-35969/): Malicious code in test-mlw2-picas-pygal (npm) (malicious package)
- [MAL-2025-35968](https://insights.sbomify.com/MAL-2025-35968/): Malicious code in test-mlw2-phony-grama-erses-luted (npm) (malicious package)
- [MAL-2025-35967](https://insights.sbomify.com/MAL-2025-35967/): Malicious code in test-mlw2-pewit-women (npm) (malicious package)
- [MAL-2025-35966](https://insights.sbomify.com/MAL-2025-35966/): Malicious code in test-mlw2-petit-raffs (npm) (malicious package)
- [MAL-2025-35965](https://insights.sbomify.com/MAL-2025-35965/): Malicious code in test-mlw2-pests-sushi (npm) (malicious package)
- [MAL-2025-35964](https://insights.sbomify.com/MAL-2025-35964/): Malicious code in test-mlw2-pests-plage (npm) (malicious package)
- [MAL-2025-35963](https://insights.sbomify.com/MAL-2025-35963/): Malicious code in test-mlw2-pervs-dhaks (npm) (malicious package)
- [MAL-2025-35962](https://insights.sbomify.com/MAL-2025-35962/): Malicious code in test-mlw2-perns-walks (npm) (malicious package)
- [MAL-2025-35961](https://insights.sbomify.com/MAL-2025-35961/): Malicious code in test-mlw2-perdu-tofts (npm) (malicious package)
- [MAL-2025-35960](https://insights.sbomify.com/MAL-2025-35960/): Malicious code in test-mlw2-pents-plasm (npm) (malicious package)
- [MAL-2025-3596](https://insights.sbomify.com/MAL-2025-3596/): Malicious code in @ringcx/agent-mfe-sdk (npm) (malicious package)
- [MAL-2025-35959](https://insights.sbomify.com/MAL-2025-35959/): Malicious code in test-mlw2-pents-arras (npm) (malicious package)
- [MAL-2025-35958](https://insights.sbomify.com/MAL-2025-35958/): Malicious code in test-mlw2-penes-gonzo (npm) (malicious package)
- [MAL-2025-35957](https://insights.sbomify.com/MAL-2025-35957/): Malicious code in test-mlw2-pened-haith (npm) (malicious package)
- [MAL-2025-35956](https://insights.sbomify.com/MAL-2025-35956/): Malicious code in test-mlw2-pence-sepad-vamps-fract (npm) (malicious package)
- [MAL-2025-35955](https://insights.sbomify.com/MAL-2025-35955/): Malicious code in test-mlw2-peise-wombs (npm) (malicious package)
- [MAL-2025-35954](https://insights.sbomify.com/MAL-2025-35954/): Malicious code in test-mlw2-peghs-waxen (npm) (malicious package)
- [MAL-2025-35953](https://insights.sbomify.com/MAL-2025-35953/): Malicious code in test-mlw2-pedro-basic (npm) (malicious package)
- [MAL-2025-35952](https://insights.sbomify.com/MAL-2025-35952/): Malicious code in test-mlw2-peaks-gnash-duply-talky (npm) (malicious package)
- [MAL-2025-35951](https://insights.sbomify.com/MAL-2025-35951/): Malicious code in test-mlw2-payee-favus (npm) (malicious package)
- [MAL-2025-35950](https://insights.sbomify.com/MAL-2025-35950/): Malicious code in test-mlw2-paver-balky-berry-nappe (npm) (malicious package)
- [MAL-2025-3595](https://insights.sbomify.com/MAL-2025-3595/): Malicious code in ui-platform-elements (npm) (malicious package)
- [MAL-2025-35949](https://insights.sbomify.com/MAL-2025-35949/): Malicious code in test-mlw2-pauas-burks-anted-grody (npm) (malicious package)
- [MAL-2025-35948](https://insights.sbomify.com/MAL-2025-35948/): Malicious code in test-mlw2-patin-tabla (npm) (malicious package)
- [MAL-2025-35947](https://insights.sbomify.com/MAL-2025-35947/): Malicious code in test-mlw2-parts-vivid (npm) (malicious package)
- [MAL-2025-35946](https://insights.sbomify.com/MAL-2025-35946/): Malicious code in test-mlw2-parky-whoas-nieve-magma (npm) (malicious package)
- [MAL-2025-35945](https://insights.sbomify.com/MAL-2025-35945/): Malicious code in test-mlw2-pares-vaned (npm) (malicious package)
- [MAL-2025-35944](https://insights.sbomify.com/MAL-2025-35944/): Malicious code in test-mlw2-papes-dorts (npm) (malicious package)
- [MAL-2025-35943](https://insights.sbomify.com/MAL-2025-35943/): Malicious code in test-mlw2-paned-noyes (npm) (malicious package)
- [MAL-2025-35942](https://insights.sbomify.com/MAL-2025-35942/): Malicious code in test-mlw2-panda-these (npm) (malicious package)
- [MAL-2025-35941](https://insights.sbomify.com/MAL-2025-35941/): Malicious code in test-mlw2-pales-puffs (npm) (malicious package)
- [MAL-2025-35940](https://insights.sbomify.com/MAL-2025-35940/): Malicious code in test-mlw2-pales-fetus (npm) (malicious package)
- [MAL-2025-3594](https://insights.sbomify.com/MAL-2025-3594/): Malicious code in ui-platform-base-components-v2 (npm) (malicious package)
- [MAL-2025-35939](https://insights.sbomify.com/MAL-2025-35939/): Malicious code in test-mlw2-paiks-tubas-crony-bosom (npm) (malicious package)
- [MAL-2025-35938](https://insights.sbomify.com/MAL-2025-35938/): Malicious code in test-mlw2-paeon-batts-flics-recce (npm) (malicious package)
- [MAL-2025-35937](https://insights.sbomify.com/MAL-2025-35937/): Malicious code in test-mlw2-pacos-ponts (npm) (malicious package)
- [MAL-2025-35936](https://insights.sbomify.com/MAL-2025-35936/): Malicious code in test-mlw2-pacha-razes-garbs-baled (npm) (malicious package)
- [MAL-2025-35935](https://insights.sbomify.com/MAL-2025-35935/): Malicious code in test-mlw2-pacha-liney (npm) (malicious package)
- [MAL-2025-35934](https://insights.sbomify.com/MAL-2025-35934/): Malicious code in test-mlw2-paces-grees (npm) (malicious package)
- [MAL-2025-35933](https://insights.sbomify.com/MAL-2025-35933/): Malicious code in test-mlw2-ozone-bisks (npm) (malicious package)
- [MAL-2025-35932](https://insights.sbomify.com/MAL-2025-35932/): Malicious code in test-mlw2-owsen-elite (npm) (malicious package)
- [MAL-2025-35931](https://insights.sbomify.com/MAL-2025-35931/): Malicious code in test-mlw2-owing-studs-magma-lezzy (npm) (malicious package)
- [MAL-2025-35930](https://insights.sbomify.com/MAL-2025-35930/): Malicious code in test-mlw2-ovine-rifts (npm) (malicious package)
- [MAL-2025-3593](https://insights.sbomify.com/MAL-2025-3593/): Malicious code in client-utility-module (npm) (malicious package)
- [MAL-2025-35929](https://insights.sbomify.com/MAL-2025-35929/): Malicious code in test-mlw2-ovine-mobby-grant-sadhe (npm) (malicious package)
- [MAL-2025-35928](https://insights.sbomify.com/MAL-2025-35928/): Malicious code in test-mlw2-overs-copse (npm) (malicious package)
- [MAL-2025-35927](https://insights.sbomify.com/MAL-2025-35927/): Malicious code in test-mlw2-ovate-gemel-liber-joyed (npm) (malicious package)
- [MAL-2025-35926](https://insights.sbomify.com/MAL-2025-35926/): Malicious code in test-mlw2-ouzos-namer (npm) (malicious package)
- [MAL-2025-35925](https://insights.sbomify.com/MAL-2025-35925/): Malicious code in test-mlw2-ouzel-gipsy-umbra-wulls (npm) (malicious package)
- [MAL-2025-35924](https://insights.sbomify.com/MAL-2025-35924/): Malicious code in test-mlw2-outby-antar (npm) (malicious package)
- [MAL-2025-35923](https://insights.sbomify.com/MAL-2025-35923/): Malicious code in test-mlw2-oubit-lyart (npm) (malicious package)
- [MAL-2025-35922](https://insights.sbomify.com/MAL-2025-35922/): Malicious code in test-mlw2-oubit-lased (npm) (malicious package)
- [MAL-2025-35921](https://insights.sbomify.com/MAL-2025-35921/): Malicious code in test-mlw2-orbed-azoth-turps-rhody (npm) (malicious package)
- [MAL-2025-35920](https://insights.sbomify.com/MAL-2025-35920/): Malicious code in test-mlw2-orang-ryper (npm) (malicious package)
- [MAL-2025-3592](https://insights.sbomify.com/MAL-2025-3592/): Malicious code in wasitestforeducation (npm) (malicious package)
- [MAL-2025-35919](https://insights.sbomify.com/MAL-2025-35919/): Malicious code in test-mlw2-opium-idyls (npm) (malicious package)
- [MAL-2025-35918](https://insights.sbomify.com/MAL-2025-35918/): Malicious code in test-mlw2-opium-aking (npm) (malicious package)
- [MAL-2025-35917](https://insights.sbomify.com/MAL-2025-35917/): Malicious code in test-mlw2-ooses-scalp (npm) (malicious package)
- [MAL-2025-35916](https://insights.sbomify.com/MAL-2025-35916/): Malicious code in test-mlw2-onned-pyets-lavas-chivs (npm) (malicious package)
- [MAL-2025-35915](https://insights.sbomify.com/MAL-2025-35915/): Malicious code in test-mlw2-omlah-hanap (npm) (malicious package)
- [MAL-2025-35914](https://insights.sbomify.com/MAL-2025-35914/): Malicious code in test-mlw2-ollav-adage-cetes-hinny (npm) (malicious package)
- [MAL-2025-35913](https://insights.sbomify.com/MAL-2025-35913/): Malicious code in test-mlw2-olein-cabin (npm) (malicious package)
- [MAL-2025-35912](https://insights.sbomify.com/MAL-2025-35912/): Malicious code in test-mlw2-oinks-tapes-gongs-swoun (npm) (malicious package)
- [MAL-2025-35911](https://insights.sbomify.com/MAL-2025-35911/): Malicious code in test-mlw2-oinks-spasm (npm) (malicious package)
- [MAL-2025-35910](https://insights.sbomify.com/MAL-2025-35910/): Malicious code in test-mlw2-oinks-saick (npm) (malicious package)
- [MAL-2025-3591](https://insights.sbomify.com/MAL-2025-3591/): Malicious code in vite-plugin-tools (npm) (malicious package)
- [MAL-2025-35909](https://insights.sbomify.com/MAL-2025-35909/): Malicious code in test-mlw2-oiled-tilth (npm) (malicious package)
- [MAL-2025-35908](https://insights.sbomify.com/MAL-2025-35908/): Malicious code in test-mlw2-oidia-liang (npm) (malicious package)
- [MAL-2025-35907](https://insights.sbomify.com/MAL-2025-35907/): Malicious code in test-mlw2-ogres-pelts (npm) (malicious package)
- [MAL-2025-35906](https://insights.sbomify.com/MAL-2025-35906/): Malicious code in test-mlw2-ogled-taiga (npm) (malicious package)
- [MAL-2025-35905](https://insights.sbomify.com/MAL-2025-35905/): Malicious code in test-mlw2-ogled-mashy (npm) (malicious package)
- [MAL-2025-35904](https://insights.sbomify.com/MAL-2025-35904/): Malicious code in test-mlw2-offer-tusks-kibes-dusky (npm) (malicious package)
- [MAL-2025-35903](https://insights.sbomify.com/MAL-2025-35903/): Malicious code in test-mlw2-offed-iodic-longe-oasts (npm) (malicious package)
- [MAL-2025-35902](https://insights.sbomify.com/MAL-2025-35902/): Malicious code in test-mlw2-odist-aread (npm) (malicious package)
- [MAL-2025-35901](https://insights.sbomify.com/MAL-2025-35901/): Malicious code in test-mlw2-odism-toque (npm) (malicious package)
- [MAL-2025-35900](https://insights.sbomify.com/MAL-2025-35900/): Malicious code in test-mlw2-odism-mossy-lamps-azide (npm) (malicious package)
- [MAL-2025-3590](https://insights.sbomify.com/MAL-2025-3590/): Malicious code in vanjavajs (npm) (malicious package)
- [MAL-2025-359](https://insights.sbomify.com/MAL-2025-359/): Malicious code in collapsible-group (npm) (malicious package)
- [MAL-2025-35899](https://insights.sbomify.com/MAL-2025-35899/): Malicious code in test-mlw2-odeon-snarl (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/714/