# Vulnerabilities published in 2025


- [MAL-2025-35446](https://insights.sbomify.com/MAL-2025-35446/): Malicious code in test-mlw2-grapy-allis (npm) (malicious package)
- [MAL-2025-35445](https://insights.sbomify.com/MAL-2025-35445/): Malicious code in test-mlw2-grape-freer (npm) (malicious package)
- [MAL-2025-35444](https://insights.sbomify.com/MAL-2025-35444/): Malicious code in test-mlw2-grans-botty-harps-sarge (npm) (malicious package)
- [MAL-2025-35443](https://insights.sbomify.com/MAL-2025-35443/): Malicious code in test-mlw2-grade-wades-punto-fails (npm) (malicious package)
- [MAL-2025-35442](https://insights.sbomify.com/MAL-2025-35442/): Malicious code in test-mlw2-gowan-hydra (npm) (malicious package)
- [MAL-2025-35441](https://insights.sbomify.com/MAL-2025-35441/): Malicious code in test-mlw2-gourd-frets (npm) (malicious package)
- [MAL-2025-35440](https://insights.sbomify.com/MAL-2025-35440/): Malicious code in test-mlw2-gools-wiped (npm) (malicious package)
- [MAL-2025-3544](https://insights.sbomify.com/MAL-2025-3544/): Malicious code in ngsma-commons (npm) (malicious package)
- [MAL-2025-35439](https://insights.sbomify.com/MAL-2025-35439/): Malicious code in test-mlw2-goody-umbra-cased-tears (npm) (malicious package)
- [MAL-2025-35438](https://insights.sbomify.com/MAL-2025-35438/): Malicious code in test-mlw2-gonys-morra (npm) (malicious package)
- [MAL-2025-35437](https://insights.sbomify.com/MAL-2025-35437/): Malicious code in test-mlw2-gonia-liven (npm) (malicious package)
- [MAL-2025-35436](https://insights.sbomify.com/MAL-2025-35436/): Malicious code in test-mlw2-gonia-garbo-choco-auras (npm) (malicious package)
- [MAL-2025-35435](https://insights.sbomify.com/MAL-2025-35435/): Malicious code in test-mlw2-gombo-grabs-gawsy-basan (npm) (malicious package)
- [MAL-2025-35434](https://insights.sbomify.com/MAL-2025-35434/): Malicious code in test-mlw2-golly-tondi-ditch-blocs (npm) (malicious package)
- [MAL-2025-35433](https://insights.sbomify.com/MAL-2025-35433/): Malicious code in test-mlw2-gofer-runds-rahed-palsy (npm) (malicious package)
- [MAL-2025-35432](https://insights.sbomify.com/MAL-2025-35432/): Malicious code in test-mlw2-goaty-mayst (npm) (malicious package)
- [MAL-2025-35431](https://insights.sbomify.com/MAL-2025-35431/): Malicious code in test-mlw2-goals-imago (npm) (malicious package)
- [MAL-2025-35430](https://insights.sbomify.com/MAL-2025-35430/): Malicious code in test-mlw2-gnome-tided (npm) (malicious package)
- [MAL-2025-3543](https://insights.sbomify.com/MAL-2025-3543/): Malicious code in slf4j-api-js (npm) (malicious package)
- [MAL-2025-35429](https://insights.sbomify.com/MAL-2025-35429/): Malicious code in test-mlw2-gnats-stear-benne-arars (npm) (malicious package)
- [MAL-2025-35428](https://insights.sbomify.com/MAL-2025-35428/): Malicious code in test-mlw2-gnarr-mondo (npm) (malicious package)
- [MAL-2025-35427](https://insights.sbomify.com/MAL-2025-35427/): Malicious code in test-mlw2-glugs-tubes-perts-flype (npm) (malicious package)
- [MAL-2025-35426](https://insights.sbomify.com/MAL-2025-35426/): Malicious code in test-mlw2-glows-madly-clote-mills (npm) (malicious package)
- [MAL-2025-35425](https://insights.sbomify.com/MAL-2025-35425/): Malicious code in test-mlw2-glove-volae (npm) (malicious package)
- [MAL-2025-35424](https://insights.sbomify.com/MAL-2025-35424/): Malicious code in test-mlw2-glitz-dorky (npm) (malicious package)
- [MAL-2025-35423](https://insights.sbomify.com/MAL-2025-35423/): Malicious code in test-mlw2-glisk-roman-honed-schmo (npm) (malicious package)
- [MAL-2025-35422](https://insights.sbomify.com/MAL-2025-35422/): Malicious code in test-mlw2-glims-genoa (npm) (malicious package)
- [MAL-2025-35421](https://insights.sbomify.com/MAL-2025-35421/): Malicious code in test-mlw2-glens-sutor-ruble-owlet (npm) (malicious package)
- [MAL-2025-35420](https://insights.sbomify.com/MAL-2025-35420/): Malicious code in test-mlw2-gleed-stoic-volar-crepe (npm) (malicious package)
- [MAL-2025-3542](https://insights.sbomify.com/MAL-2025-3542/): Malicious code in concurrent-hashmap (npm) (malicious package)
- [MAL-2025-35419](https://insights.sbomify.com/MAL-2025-35419/): Malicious code in test-mlw2-gleam-gnarr (npm) (malicious package)
- [MAL-2025-35418](https://insights.sbomify.com/MAL-2025-35418/): Malicious code in test-mlw2-glaur-steed (npm) (malicious package)
- [MAL-2025-35417](https://insights.sbomify.com/MAL-2025-35417/): Malicious code in test-mlw2-glans-eaves (npm) (malicious package)
- [MAL-2025-35416](https://insights.sbomify.com/MAL-2025-35416/): Malicious code in test-mlw2-glade-spans (npm) (malicious package)
- [MAL-2025-35415](https://insights.sbomify.com/MAL-2025-35415/): Malicious code in test-mlw2-gists-boyar-track-blood (npm) (malicious package)
- [MAL-2025-35414](https://insights.sbomify.com/MAL-2025-35414/): Malicious code in test-mlw2-gismo-polio-redly-amble (npm) (malicious package)
- [MAL-2025-35413](https://insights.sbomify.com/MAL-2025-35413/): Malicious code in test-mlw2-giros-owche (npm) (malicious package)
- [MAL-2025-35412](https://insights.sbomify.com/MAL-2025-35412/): Malicious code in test-mlw2-girls-lewis (npm) (malicious package)
- [MAL-2025-35411](https://insights.sbomify.com/MAL-2025-35411/): Malicious code in test-mlw2-gippy-deals (npm) (malicious package)
- [MAL-2025-35410](https://insights.sbomify.com/MAL-2025-35410/): Malicious code in test-mlw2-gilpy-silly (npm) (malicious package)
- [MAL-2025-3541](https://insights.sbomify.com/MAL-2025-3541/): Malicious code in express-cookie-parser (npm) (malicious package)
- [MAL-2025-35409](https://insights.sbomify.com/MAL-2025-35409/): Malicious code in test-mlw2-giber-feted (npm) (malicious package)
- [MAL-2025-35408](https://insights.sbomify.com/MAL-2025-35408/): Malicious code in test-mlw2-ghaut-tazze (npm) (malicious package)
- [MAL-2025-35407](https://insights.sbomify.com/MAL-2025-35407/): Malicious code in test-mlw2-gests-cital (npm) (malicious package)
- [MAL-2025-35406](https://insights.sbomify.com/MAL-2025-35406/): Malicious code in test-mlw2-genus-moire (npm) (malicious package)
- [MAL-2025-35405](https://insights.sbomify.com/MAL-2025-35405/): Malicious code in test-mlw2-genii-muzzy (npm) (malicious package)
- [MAL-2025-35404](https://insights.sbomify.com/MAL-2025-35404/): Malicious code in test-mlw2-genet-odism (npm) (malicious package)
- [MAL-2025-35403](https://insights.sbomify.com/MAL-2025-35403/): Malicious code in test-mlw2-gemot-piney (npm) (malicious package)
- [MAL-2025-35402](https://insights.sbomify.com/MAL-2025-35402/): Malicious code in test-mlw2-gemmy-otter (npm) (malicious package)
- [MAL-2025-35401](https://insights.sbomify.com/MAL-2025-35401/): Malicious code in test-mlw2-gelts-horns-fists-slipt (npm) (malicious package)
- [MAL-2025-35400](https://insights.sbomify.com/MAL-2025-35400/): Malicious code in test-mlw2-geare-yelks (npm) (malicious package)
- [MAL-2025-3540](https://insights.sbomify.com/MAL-2025-3540/): Malicious code in webview-common (npm) (malicious package)
- [MAL-2025-354](https://insights.sbomify.com/MAL-2025-354/): Malicious code in airbnb-admin (npm) (malicious package)
- [MAL-2025-35399](https://insights.sbomify.com/MAL-2025-35399/): Malicious code in test-mlw2-geare-vivid (npm) (malicious package)
- [MAL-2025-35398](https://insights.sbomify.com/MAL-2025-35398/): Malicious code in test-mlw2-gazon-notal (npm) (malicious package)
- [MAL-2025-35397](https://insights.sbomify.com/MAL-2025-35397/): Malicious code in test-mlw2-gazon-imbed-loons-whaur (npm) (malicious package)
- [MAL-2025-35396](https://insights.sbomify.com/MAL-2025-35396/): Malicious code in test-mlw2-gazon-grees (npm) (malicious package)
- [MAL-2025-35395](https://insights.sbomify.com/MAL-2025-35395/): Malicious code in test-mlw2-gaums-yules-vexes-cools (npm) (malicious package)
- [MAL-2025-35394](https://insights.sbomify.com/MAL-2025-35394/): Malicious code in test-mlw2-gaums-phage (npm) (malicious package)
- [MAL-2025-35393](https://insights.sbomify.com/MAL-2025-35393/): Malicious code in test-mlw2-gauds-scald (npm) (malicious package)
- [MAL-2025-35392](https://insights.sbomify.com/MAL-2025-35392/): Malicious code in test-mlw2-gappy-slows (npm) (malicious package)
- [MAL-2025-35391](https://insights.sbomify.com/MAL-2025-35391/): Malicious code in test-mlw2-gaped-caeca (npm) (malicious package)
- [MAL-2025-35390](https://insights.sbomify.com/MAL-2025-35390/): Malicious code in test-mlw2-ganja-doubt (npm) (malicious package)
- [MAL-2025-3539](https://insights.sbomify.com/MAL-2025-3539/): Malicious code in nsemea-sample-parenttransaction-lib-poc (npm) (malicious package)
- [MAL-2025-35389](https://insights.sbomify.com/MAL-2025-35389/): Malicious code in test-mlw2-gamey-cacao (npm) (malicious package)
- [MAL-2025-35388](https://insights.sbomify.com/MAL-2025-35388/): Malicious code in test-mlw2-gambs-unmew-pekan-heils (npm) (malicious package)
- [MAL-2025-35387](https://insights.sbomify.com/MAL-2025-35387/): Malicious code in test-mlw2-gamay-curry (npm) (malicious package)
- [MAL-2025-35386](https://insights.sbomify.com/MAL-2025-35386/): Malicious code in test-mlw2-gales-palls (npm) (malicious package)
- [MAL-2025-35385](https://insights.sbomify.com/MAL-2025-35385/): Malicious code in test-mlw2-gales-narre (npm) (malicious package)
- [MAL-2025-35384](https://insights.sbomify.com/MAL-2025-35384/): Malicious code in test-mlw2-gadis-satis (npm) (malicious package)
- [MAL-2025-35383](https://insights.sbomify.com/MAL-2025-35383/): Malicious code in test-mlw2-gabby-cache-train-goons (npm) (malicious package)
- [MAL-2025-35382](https://insights.sbomify.com/MAL-2025-35382/): Malicious code in test-mlw2-frisk-campy (npm) (malicious package)
- [MAL-2025-35381](https://insights.sbomify.com/MAL-2025-35381/): Malicious code in test-mlw2-fries-grume (npm) (malicious package)
- [MAL-2025-35380](https://insights.sbomify.com/MAL-2025-35380/): Malicious code in test-mlw2-frets-plait (npm) (malicious package)
- [MAL-2025-3538](https://insights.sbomify.com/MAL-2025-3538/): Malicious code in nsemea-sample-childtransaction-lib-poc (npm) (malicious package)
- [MAL-2025-35379](https://insights.sbomify.com/MAL-2025-35379/): Malicious code in test-mlw2-fresh-myops (npm) (malicious package)
- [MAL-2025-35378](https://insights.sbomify.com/MAL-2025-35378/): Malicious code in test-mlw2-fremd-storm (npm) (malicious package)
- [MAL-2025-35377](https://insights.sbomify.com/MAL-2025-35377/): Malicious code in test-mlw2-freet-spial (npm) (malicious package)
- [MAL-2025-35376](https://insights.sbomify.com/MAL-2025-35376/): Malicious code in test-mlw2-freer-burds (npm) (malicious package)
- [MAL-2025-35375](https://insights.sbomify.com/MAL-2025-35375/): Malicious code in test-mlw2-fraps-spams (npm) (malicious package)
- [MAL-2025-35374](https://insights.sbomify.com/MAL-2025-35374/): Malicious code in test-mlw2-fraps-risen (npm) (malicious package)
- [MAL-2025-35373](https://insights.sbomify.com/MAL-2025-35373/): Malicious code in test-mlw2-frank-zakat (npm) (malicious package)
- [MAL-2025-35372](https://insights.sbomify.com/MAL-2025-35372/): Malicious code in test-mlw2-frail-pater-sordo-negus (npm) (malicious package)
- [MAL-2025-35371](https://insights.sbomify.com/MAL-2025-35371/): Malicious code in test-mlw2-frags-tummy-snell-gluon (npm) (malicious package)
- [MAL-2025-35370](https://insights.sbomify.com/MAL-2025-35370/): Malicious code in test-mlw2-fowls-aroma (npm) (malicious package)
- [MAL-2025-3537](https://insights.sbomify.com/MAL-2025-3537/): Malicious code in nsemea-salestransaction-lib-poc (npm) (malicious package)
- [MAL-2025-35369](https://insights.sbomify.com/MAL-2025-35369/): Malicious code in test-mlw2-fount-cares (npm) (malicious package)
- [MAL-2025-35368](https://insights.sbomify.com/MAL-2025-35368/): Malicious code in test-mlw2-fount-await (npm) (malicious package)
- [MAL-2025-35367](https://insights.sbomify.com/MAL-2025-35367/): Malicious code in test-mlw2-fouls-bassy-ovate-cheap (npm) (malicious package)
- [MAL-2025-35366](https://insights.sbomify.com/MAL-2025-35366/): Malicious code in test-mlw2-forms-primp (npm) (malicious package)
- [MAL-2025-35365](https://insights.sbomify.com/MAL-2025-35365/): Malicious code in test-mlw2-forge-burse (npm) (malicious package)
- [MAL-2025-35364](https://insights.sbomify.com/MAL-2025-35364/): Malicious code in test-mlw2-fordo-plead-biffs-hosed (npm) (malicious package)
- [MAL-2025-35363](https://insights.sbomify.com/MAL-2025-35363/): Malicious code in test-mlw2-foots-sclim-porty-frown (npm) (malicious package)
- [MAL-2025-35362](https://insights.sbomify.com/MAL-2025-35362/): Malicious code in test-mlw2-fools-owlet (npm) (malicious package)
- [MAL-2025-35361](https://insights.sbomify.com/MAL-2025-35361/): Malicious code in test-mlw2-fonda-eggar (npm) (malicious package)
- [MAL-2025-35360](https://insights.sbomify.com/MAL-2025-35360/): Malicious code in test-mlw2-fogle-limas-troat-albee (npm) (malicious package)
- [MAL-2025-3536](https://insights.sbomify.com/MAL-2025-3536/): Malicious code in nsemea-salesorder-lib-poc (npm) (malicious package)
- [MAL-2025-35359](https://insights.sbomify.com/MAL-2025-35359/): Malicious code in test-mlw2-fluty-scrim (npm) (malicious package)
- [MAL-2025-35358](https://insights.sbomify.com/MAL-2025-35358/): Malicious code in test-mlw2-fluid-upper (npm) (malicious package)
- [MAL-2025-35357](https://insights.sbomify.com/MAL-2025-35357/): Malicious code in test-mlw2-fluey-fates (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/720/
