# Vulnerabilities published in 2025 - [MAL-2025-35536](https://insights.sbomify.com/MAL-2025-35536/): Malicious code in test-mlw2-hosen-pumps (npm) (malicious package) - [MAL-2025-35535](https://insights.sbomify.com/MAL-2025-35535/): Malicious code in test-mlw2-horst-zincs (npm) (malicious package) - [MAL-2025-35534](https://insights.sbomify.com/MAL-2025-35534/): Malicious code in test-mlw2-hoots-twank (npm) (malicious package) - [MAL-2025-35533](https://insights.sbomify.com/MAL-2025-35533/): Malicious code in test-mlw2-honed-kiers (npm) (malicious package) - [MAL-2025-35532](https://insights.sbomify.com/MAL-2025-35532/): Malicious code in test-mlw2-homme-gaffe (npm) (malicious package) - [MAL-2025-35531](https://insights.sbomify.com/MAL-2025-35531/): Malicious code in test-mlw2-homey-blimy (npm) (malicious package) - [MAL-2025-35530](https://insights.sbomify.com/MAL-2025-35530/): Malicious code in test-mlw2-holts-weald (npm) (malicious package) - [MAL-2025-3553](https://insights.sbomify.com/MAL-2025-3553/): Malicious code in internal-payroll-lib-v3 (npm) (malicious package) - [MAL-2025-35529](https://insights.sbomify.com/MAL-2025-35529/): Malicious code in test-mlw2-holts-troad (npm) (malicious package) - [MAL-2025-35528](https://insights.sbomify.com/MAL-2025-35528/): Malicious code in test-mlw2-hollo-jigot (npm) (malicious package) - [MAL-2025-35527](https://insights.sbomify.com/MAL-2025-35527/): Malicious code in test-mlw2-holla-odeon (npm) (malicious package) - [MAL-2025-35526](https://insights.sbomify.com/MAL-2025-35526/): Malicious code in test-mlw2-holed-group-plash-gases (npm) (malicious package) - [MAL-2025-35525](https://insights.sbomify.com/MAL-2025-35525/): Malicious code in test-mlw2-hokum-wines-kalpa-peats (npm) (malicious package) - [MAL-2025-35524](https://insights.sbomify.com/MAL-2025-35524/): Malicious code in test-mlw2-hokum-chops (npm) (malicious package) - [MAL-2025-35523](https://insights.sbomify.com/MAL-2025-35523/): Malicious code in test-mlw2-hogan-ctene-whaur-zests (npm) (malicious package) - [MAL-2025-35522](https://insights.sbomify.com/MAL-2025-35522/): Malicious code in test-mlw2-hobos-sords (npm) (malicious package) - [MAL-2025-35521](https://insights.sbomify.com/MAL-2025-35521/): Malicious code in test-mlw2-hobos-mumps-water-calpa (npm) (malicious package) - [MAL-2025-35520](https://insights.sbomify.com/MAL-2025-35520/): Malicious code in test-mlw2-hobos-cilia (npm) (malicious package) - [MAL-2025-3552](https://insights.sbomify.com/MAL-2025-3552/): Malicious code in internal-payroll-lib-v2 (npm) (malicious package) - [MAL-2025-35519](https://insights.sbomify.com/MAL-2025-35519/): Malicious code in test-mlw2-hippy-minim (npm) (malicious package) - [MAL-2025-35518](https://insights.sbomify.com/MAL-2025-35518/): Malicious code in test-mlw2-hippo-syrup (npm) (malicious package) - [MAL-2025-35517](https://insights.sbomify.com/MAL-2025-35517/): Malicious code in test-mlw2-hings-racks (npm) (malicious package) - [MAL-2025-35516](https://insights.sbomify.com/MAL-2025-35516/): Malicious code in test-mlw2-hiker-inion-glues-stale (npm) (malicious package) - [MAL-2025-35515](https://insights.sbomify.com/MAL-2025-35515/): Malicious code in test-mlw2-hided-works (npm) (malicious package) - [MAL-2025-35514](https://insights.sbomify.com/MAL-2025-35514/): Malicious code in test-mlw2-hests-grame (npm) (malicious package) - [MAL-2025-35513](https://insights.sbomify.com/MAL-2025-35513/): Malicious code in test-mlw2-heron-sleet (npm) (malicious package) - [MAL-2025-35512](https://insights.sbomify.com/MAL-2025-35512/): Malicious code in test-mlw2-herms-hubby (npm) (malicious package) - [MAL-2025-35511](https://insights.sbomify.com/MAL-2025-35511/): Malicious code in test-mlw2-herma-gelly (npm) (malicious package) - [MAL-2025-35510](https://insights.sbomify.com/MAL-2025-35510/): Malicious code in test-mlw2-herls-tofts (npm) (malicious package) - [MAL-2025-3551](https://insights.sbomify.com/MAL-2025-3551/): Malicious code in express-validator-plugin (npm) (malicious package) - [MAL-2025-35509](https://insights.sbomify.com/MAL-2025-35509/): Malicious code in test-mlw2-herls-lazar (npm) (malicious package) - [MAL-2025-35508](https://insights.sbomify.com/MAL-2025-35508/): Malicious code in test-mlw2-herbs-fated (npm) (malicious package) - [MAL-2025-35507](https://insights.sbomify.com/MAL-2025-35507/): Malicious code in test-mlw2-heles-south-unket-drays (npm) (malicious package) - [MAL-2025-35506](https://insights.sbomify.com/MAL-2025-35506/): Malicious code in test-mlw2-heles-molts (npm) (malicious package) - [MAL-2025-35505](https://insights.sbomify.com/MAL-2025-35505/): Malicious code in test-mlw2-heist-briny (npm) (malicious package) - [MAL-2025-35504](https://insights.sbomify.com/MAL-2025-35504/): Malicious code in test-mlw2-heirs-pareo-pappy-sneed (npm) (malicious package) - [MAL-2025-35503](https://insights.sbomify.com/MAL-2025-35503/): Malicious code in test-mlw2-heids-geoid (npm) (malicious package) - [MAL-2025-35502](https://insights.sbomify.com/MAL-2025-35502/): Malicious code in test-mlw2-hedgy-paged (npm) (malicious package) - [MAL-2025-35501](https://insights.sbomify.com/MAL-2025-35501/): Malicious code in test-mlw2-heavy-dopes (npm) (malicious package) - [MAL-2025-35500](https://insights.sbomify.com/MAL-2025-35500/): Malicious code in test-mlw2-heapy-hogen (npm) (malicious package) - [MAL-2025-3550](https://insights.sbomify.com/MAL-2025-3550/): Malicious code in easyship-components (npm) (malicious package) - [MAL-2025-355](https://insights.sbomify.com/MAL-2025-355/): Malicious code in airbnb-analytics (npm) (malicious package) - [MAL-2025-35499](https://insights.sbomify.com/MAL-2025-35499/): Malicious code in test-mlw2-heals-prior (npm) (malicious package) - [MAL-2025-35498](https://insights.sbomify.com/MAL-2025-35498/): Malicious code in test-mlw2-hazan-forth (npm) (malicious package) - [MAL-2025-35497](https://insights.sbomify.com/MAL-2025-35497/): Malicious code in test-mlw2-hault-grese (npm) (malicious package) - [MAL-2025-35496](https://insights.sbomify.com/MAL-2025-35496/): Malicious code in test-mlw2-haulm-mercy-focus-named (npm) (malicious package) - [MAL-2025-35495](https://insights.sbomify.com/MAL-2025-35495/): Malicious code in test-mlw2-hasty-gooly (npm) (malicious package) - [MAL-2025-35494](https://insights.sbomify.com/MAL-2025-35494/): Malicious code in test-mlw2-harry-crith (npm) (malicious package) - [MAL-2025-35493](https://insights.sbomify.com/MAL-2025-35493/): Malicious code in test-mlw2-harms-aging (npm) (malicious package) - [MAL-2025-35492](https://insights.sbomify.com/MAL-2025-35492/): Malicious code in test-mlw2-hardy-forts (npm) (malicious package) - [MAL-2025-35491](https://insights.sbomify.com/MAL-2025-35491/): Malicious code in test-mlw2-hards-owlet (npm) (malicious package) - [MAL-2025-35490](https://insights.sbomify.com/MAL-2025-35490/): Malicious code in test-mlw2-happy-zebra (npm) (malicious package) - [MAL-2025-3549](https://insights.sbomify.com/MAL-2025-3549/): Malicious code in deals1flash (npm) (malicious package) - [MAL-2025-35489](https://insights.sbomify.com/MAL-2025-35489/): Malicious code in test-mlw2-haoma-swads (npm) (malicious package) - [MAL-2025-35488](https://insights.sbomify.com/MAL-2025-35488/): Malicious code in test-mlw2-haoma-jokey (npm) (malicious package) - [MAL-2025-35487](https://insights.sbomify.com/MAL-2025-35487/): Malicious code in test-mlw2-hands-dearn (npm) (malicious package) - [MAL-2025-35486](https://insights.sbomify.com/MAL-2025-35486/): Malicious code in test-mlw2-hanap-avows (npm) (malicious package) - [MAL-2025-35485](https://insights.sbomify.com/MAL-2025-35485/): Malicious code in test-mlw2-hamza-curer (npm) (malicious package) - [MAL-2025-35484](https://insights.sbomify.com/MAL-2025-35484/): Malicious code in test-mlw2-hammy-coaly-kilns-coifs (npm) (malicious package) - [MAL-2025-35483](https://insights.sbomify.com/MAL-2025-35483/): Malicious code in test-mlw2-halve-tramp (npm) (malicious package) - [MAL-2025-35482](https://insights.sbomify.com/MAL-2025-35482/): Malicious code in test-mlw2-halva-prana (npm) (malicious package) - [MAL-2025-35481](https://insights.sbomify.com/MAL-2025-35481/): Malicious code in test-mlw2-halon-radii-tawed-effed (npm) (malicious package) - [MAL-2025-35480](https://insights.sbomify.com/MAL-2025-35480/): Malicious code in test-mlw2-hallo-truce (npm) (malicious package) - [MAL-2025-3548](https://insights.sbomify.com/MAL-2025-3548/): Malicious code in cxo-storyboard (npm) (malicious package) - [MAL-2025-35479](https://insights.sbomify.com/MAL-2025-35479/): Malicious code in test-mlw2-hakas-vouch (npm) (malicious package) - [MAL-2025-35478](https://insights.sbomify.com/MAL-2025-35478/): Malicious code in test-mlw2-hairy-yugas (npm) (malicious package) - [MAL-2025-35477](https://insights.sbomify.com/MAL-2025-35477/): Malicious code in test-mlw2-hairs-swill (npm) (malicious package) - [MAL-2025-35476](https://insights.sbomify.com/MAL-2025-35476/): Malicious code in test-mlw2-haars-apish-gutta-apace (npm) (malicious package) - [MAL-2025-35475](https://insights.sbomify.com/MAL-2025-35475/): Malicious code in test-mlw2-gyros-maids (npm) (malicious package) - [MAL-2025-35474](https://insights.sbomify.com/MAL-2025-35474/): Malicious code in test-mlw2-gyron-terts-mayed-truth (npm) (malicious package) - [MAL-2025-35473](https://insights.sbomify.com/MAL-2025-35473/): Malicious code in test-mlw2-gyron-minor (npm) (malicious package) - [MAL-2025-35472](https://insights.sbomify.com/MAL-2025-35472/): Malicious code in test-mlw2-gyals-noxal (npm) (malicious package) - [MAL-2025-35471](https://insights.sbomify.com/MAL-2025-35471/): Malicious code in test-mlw2-gusts-acted (npm) (malicious package) - [MAL-2025-35470](https://insights.sbomify.com/MAL-2025-35470/): Malicious code in test-mlw2-gusto-lorel (npm) (malicious package) - [MAL-2025-3547](https://insights.sbomify.com/MAL-2025-3547/): Malicious code in carcandofilex (npm) (malicious package) - [MAL-2025-35469](https://insights.sbomify.com/MAL-2025-35469/): Malicious code in test-mlw2-gusto-fools-kecks-mille (npm) (malicious package) - [MAL-2025-35468](https://insights.sbomify.com/MAL-2025-35468/): Malicious code in test-mlw2-gushy-helot (npm) (malicious package) - [MAL-2025-35467](https://insights.sbomify.com/MAL-2025-35467/): Malicious code in test-mlw2-guppy-roofy-hated-aedes (npm) (malicious package) - [MAL-2025-35466](https://insights.sbomify.com/MAL-2025-35466/): Malicious code in test-mlw2-gunks-draps-haffs-terry (npm) (malicious package) - [MAL-2025-35465](https://insights.sbomify.com/MAL-2025-35465/): Malicious code in test-mlw2-gumbo-testy (npm) (malicious package) - [MAL-2025-35464](https://insights.sbomify.com/MAL-2025-35464/): Malicious code in test-mlw2-gumbo-fives-ashes-moult (npm) (malicious package) - [MAL-2025-35463](https://insights.sbomify.com/MAL-2025-35463/): Malicious code in test-mlw2-gulfy-monas (npm) (malicious package) - [MAL-2025-35462](https://insights.sbomify.com/MAL-2025-35462/): Malicious code in test-mlw2-gulfs-wamus-hejab-stour (npm) (malicious package) - [MAL-2025-35461](https://insights.sbomify.com/MAL-2025-35461/): Malicious code in test-mlw2-gulas-yahoo (npm) (malicious package) - [MAL-2025-35460](https://insights.sbomify.com/MAL-2025-35460/): Malicious code in test-mlw2-guise-skoal (npm) (malicious package) - [MAL-2025-3546](https://insights.sbomify.com/MAL-2025-3546/): Malicious code in blur-plugins (npm) (malicious package) - [MAL-2025-35459](https://insights.sbomify.com/MAL-2025-35459/): Malicious code in test-mlw2-gucky-retes-ureal-sadly (npm) (malicious package) - [MAL-2025-35458](https://insights.sbomify.com/MAL-2025-35458/): Malicious code in test-mlw2-guaco-whoso (npm) (malicious package) - [MAL-2025-35457](https://insights.sbomify.com/MAL-2025-35457/): Malicious code in test-mlw2-gruff-toise (npm) (malicious package) - [MAL-2025-35456](https://insights.sbomify.com/MAL-2025-35456/): Malicious code in test-mlw2-grued-kaput (npm) (malicious package) - [MAL-2025-35455](https://insights.sbomify.com/MAL-2025-35455/): Malicious code in test-mlw2-grubs-gates (npm) (malicious package) - [MAL-2025-35454](https://insights.sbomify.com/MAL-2025-35454/): Malicious code in test-mlw2-grove-hones-lutes-acold (npm) (malicious package) - [MAL-2025-35453](https://insights.sbomify.com/MAL-2025-35453/): Malicious code in test-mlw2-gripe-purin (npm) (malicious package) - [MAL-2025-35452](https://insights.sbomify.com/MAL-2025-35452/): Malicious code in test-mlw2-grift-swing (npm) (malicious package) - [MAL-2025-35451](https://insights.sbomify.com/MAL-2025-35451/): Malicious code in test-mlw2-grief-vulns (npm) (malicious package) - [MAL-2025-35450](https://insights.sbomify.com/MAL-2025-35450/): Malicious code in test-mlw2-greet-ducal (npm) (malicious package) - [MAL-2025-3545](https://insights.sbomify.com/MAL-2025-3545/): Malicious code in basstiontrestbeesk (npm) (malicious package) - [MAL-2025-35449](https://insights.sbomify.com/MAL-2025-35449/): Malicious code in test-mlw2-greed-polks (npm) (malicious package) - [MAL-2025-35448](https://insights.sbomify.com/MAL-2025-35448/): Malicious code in test-mlw2-gravy-renay (npm) (malicious package) - [MAL-2025-35447](https://insights.sbomify.com/MAL-2025-35447/): Malicious code in test-mlw2-grave-holla (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/719/