# Vulnerabilities published in 2025


- [MAL-2025-35086](https://insights.sbomify.com/MAL-2025-35086/): Malicious code in test-mlw2-cleck-gault-nidal-basic (npm) (malicious package)
- [MAL-2025-35085](https://insights.sbomify.com/MAL-2025-35085/): Malicious code in test-mlw2-cleat-using (npm) (malicious package)
- [MAL-2025-35084](https://insights.sbomify.com/MAL-2025-35084/): Malicious code in test-mlw2-clast-lawny (npm) (malicious package)
- [MAL-2025-35083](https://insights.sbomify.com/MAL-2025-35083/): Malicious code in test-mlw2-clasp-maile (npm) (malicious package)
- [MAL-2025-35082](https://insights.sbomify.com/MAL-2025-35082/): Malicious code in test-mlw2-clary-syncs (npm) (malicious package)
- [MAL-2025-35081](https://insights.sbomify.com/MAL-2025-35081/): Malicious code in test-mlw2-citer-ingan-alods-drams (npm) (malicious package)
- [MAL-2025-35080](https://insights.sbomify.com/MAL-2025-35080/): Malicious code in test-mlw2-churl-toxin (npm) (malicious package)
- [MAL-2025-3508](https://insights.sbomify.com/MAL-2025-3508/): Malicious code in discord-vc-manager (npm) (malicious package)
- [MAL-2025-35079](https://insights.sbomify.com/MAL-2025-35079/): Malicious code in test-mlw2-churl-areca (npm) (malicious package)
- [MAL-2025-35078](https://insights.sbomify.com/MAL-2025-35078/): Malicious code in test-mlw2-chums-hazed-forms-irked (npm) (malicious package)
- [MAL-2025-35077](https://insights.sbomify.com/MAL-2025-35077/): Malicious code in test-mlw2-chubs-sames (npm) (malicious package)
- [MAL-2025-35076](https://insights.sbomify.com/MAL-2025-35076/): Malicious code in test-mlw2-chows-yucas (npm) (malicious package)
- [MAL-2025-35075](https://insights.sbomify.com/MAL-2025-35075/): Malicious code in test-mlw2-chose-arums (npm) (malicious package)
- [MAL-2025-35074](https://insights.sbomify.com/MAL-2025-35074/): Malicious code in test-mlw2-choof-porky (npm) (malicious package)
- [MAL-2025-35073](https://insights.sbomify.com/MAL-2025-35073/): Malicious code in test-mlw2-choke-vocab (npm) (malicious package)
- [MAL-2025-35072](https://insights.sbomify.com/MAL-2025-35072/): Malicious code in test-mlw2-choke-harts (npm) (malicious package)
- [MAL-2025-35071](https://insights.sbomify.com/MAL-2025-35071/): Malicious code in test-mlw2-chock-oiled (npm) (malicious package)
- [MAL-2025-35070](https://insights.sbomify.com/MAL-2025-35070/): Malicious code in test-mlw2-chits-ragga-undam-trema (npm) (malicious package)
- [MAL-2025-3507](https://insights.sbomify.com/MAL-2025-3507/): Malicious code in amazonui (npm) (malicious package)
- [MAL-2025-35069](https://insights.sbomify.com/MAL-2025-35069/): Malicious code in test-mlw2-chine-agile (npm) (malicious package)
- [MAL-2025-35068](https://insights.sbomify.com/MAL-2025-35068/): Malicious code in test-mlw2-chimp-bawdy (npm) (malicious package)
- [MAL-2025-35067](https://insights.sbomify.com/MAL-2025-35067/): Malicious code in test-mlw2-chill-sibyl (npm) (malicious package)
- [MAL-2025-35066](https://insights.sbomify.com/MAL-2025-35066/): Malicious code in test-mlw2-chill-obang (npm) (malicious package)
- [MAL-2025-35065](https://insights.sbomify.com/MAL-2025-35065/): Malicious code in test-mlw2-chiel-limit (npm) (malicious package)
- [MAL-2025-35064](https://insights.sbomify.com/MAL-2025-35064/): Malicious code in test-mlw2-chico-stony (npm) (malicious package)
- [MAL-2025-35063](https://insights.sbomify.com/MAL-2025-35063/): Malicious code in test-mlw2-chica-derry (npm) (malicious package)
- [MAL-2025-35062](https://insights.sbomify.com/MAL-2025-35062/): Malicious code in test-mlw2-chats-loofa (npm) (malicious package)
- [MAL-2025-35061](https://insights.sbomify.com/MAL-2025-35061/): Malicious code in test-mlw2-chasm-penks (npm) (malicious package)
- [MAL-2025-35060](https://insights.sbomify.com/MAL-2025-35060/): Malicious code in test-mlw2-chasm-atopy-sidas-quake (npm) (malicious package)
- [MAL-2025-3506](https://insights.sbomify.com/MAL-2025-3506/): Malicious code in vonage-status-panel (npm) (malicious package)
- [MAL-2025-35059](https://insights.sbomify.com/MAL-2025-35059/): Malicious code in test-mlw2-charr-repos (npm) (malicious package)
- [MAL-2025-35058](https://insights.sbomify.com/MAL-2025-35058/): Malicious code in test-mlw2-chaps-ripes (npm) (malicious package)
- [MAL-2025-35057](https://insights.sbomify.com/MAL-2025-35057/): Malicious code in test-mlw2-chank-odsos-skiff-clang (npm) (malicious package)
- [MAL-2025-35056](https://insights.sbomify.com/MAL-2025-35056/): Malicious code in test-mlw2-chais-metol (npm) (malicious package)
- [MAL-2025-35055](https://insights.sbomify.com/MAL-2025-35055/): Malicious code in test-mlw2-chace-cains (npm) (malicious package)
- [MAL-2025-35054](https://insights.sbomify.com/MAL-2025-35054/): Malicious code in test-mlw2-ceria-lints (npm) (malicious package)
- [MAL-2025-35053](https://insights.sbomify.com/MAL-2025-35053/): Malicious code in test-mlw2-ceres-borax-biped-lanky (npm) (malicious package)
- [MAL-2025-35052](https://insights.sbomify.com/MAL-2025-35052/): Malicious code in test-mlw2-ceorl-mokes (npm) (malicious package)
- [MAL-2025-35051](https://insights.sbomify.com/MAL-2025-35051/): Malicious code in test-mlw2-cents-sapor-frowy-scogs (npm) (malicious package)
- [MAL-2025-35050](https://insights.sbomify.com/MAL-2025-35050/): Malicious code in test-mlw2-cents-pilaf (npm) (malicious package)
- [MAL-2025-3505](https://insights.sbomify.com/MAL-2025-3505/): Malicious code in uignite (npm) (malicious package)
- [MAL-2025-35049](https://insights.sbomify.com/MAL-2025-35049/): Malicious code in test-mlw2-cento-grade-cages-topaz (npm) (malicious package)
- [MAL-2025-35048](https://insights.sbomify.com/MAL-2025-35048/): Malicious code in test-mlw2-cella-desex (npm) (malicious package)
- [MAL-2025-35047](https://insights.sbomify.com/MAL-2025-35047/): Malicious code in test-mlw2-ceded-cooed-stewy-waker (npm) (malicious package)
- [MAL-2025-35046](https://insights.sbomify.com/MAL-2025-35046/): Malicious code in test-mlw2-cawed-blent (npm) (malicious package)
- [MAL-2025-35045](https://insights.sbomify.com/MAL-2025-35045/): Malicious code in test-mlw2-cawed-actin (npm) (malicious package)
- [MAL-2025-35044](https://insights.sbomify.com/MAL-2025-35044/): Malicious code in test-mlw2-caves-ruana-cissy-elope (npm) (malicious package)
- [MAL-2025-35043](https://insights.sbomify.com/MAL-2025-35043/): Malicious code in test-mlw2-caste-nagas-gills-baric (npm) (malicious package)
- [MAL-2025-35042](https://insights.sbomify.com/MAL-2025-35042/): Malicious code in test-mlw2-carpi-charr (npm) (malicious package)
- [MAL-2025-35041](https://insights.sbomify.com/MAL-2025-35041/): Malicious code in test-mlw2-carom-doles (npm) (malicious package)
- [MAL-2025-35040](https://insights.sbomify.com/MAL-2025-35040/): Malicious code in test-mlw2-carol-hemal (npm) (malicious package)
- [MAL-2025-3504](https://insights.sbomify.com/MAL-2025-3504/): Malicious code in turbo-bike-inspector (npm) (malicious package)
- [MAL-2025-35039](https://insights.sbomify.com/MAL-2025-35039/): Malicious code in test-mlw2-carls-oasts (npm) (malicious package)
- [MAL-2025-35038](https://insights.sbomify.com/MAL-2025-35038/): Malicious code in test-mlw2-carat-bines (npm) (malicious package)
- [MAL-2025-35037](https://insights.sbomify.com/MAL-2025-35037/): Malicious code in test-mlw2-capon-feyer-sieve-siroc (npm) (malicious package)
- [MAL-2025-35036](https://insights.sbomify.com/MAL-2025-35036/): Malicious code in test-mlw2-capes-treks (npm) (malicious package)
- [MAL-2025-35035](https://insights.sbomify.com/MAL-2025-35035/): Malicious code in test-mlw2-canny-tifts (npm) (malicious package)
- [MAL-2025-35034](https://insights.sbomify.com/MAL-2025-35034/): Malicious code in test-mlw2-canna-ebony-punka-slove (npm) (malicious package)
- [MAL-2025-35033](https://insights.sbomify.com/MAL-2025-35033/): Malicious code in test-mlw2-camps-halva-slily-pyats (npm) (malicious package)
- [MAL-2025-35032](https://insights.sbomify.com/MAL-2025-35032/): Malicious code in test-mlw2-camas-built (npm) (malicious package)
- [MAL-2025-35031](https://insights.sbomify.com/MAL-2025-35031/): Malicious code in test-mlw2-calmy-geals (npm) (malicious package)
- [MAL-2025-35030](https://insights.sbomify.com/MAL-2025-35030/): Malicious code in test-mlw2-calls-hosts (npm) (malicious package)
- [MAL-2025-3503](https://insights.sbomify.com/MAL-2025-3503/): Malicious code in testdoges (npm) (malicious package)
- [MAL-2025-35029](https://insights.sbomify.com/MAL-2025-35029/): Malicious code in test-mlw2-cajun-reeds (npm) (malicious package)
- [MAL-2025-35028](https://insights.sbomify.com/MAL-2025-35028/): Malicious code in test-mlw2-cagey-bawds (npm) (malicious package)
- [MAL-2025-35027](https://insights.sbomify.com/MAL-2025-35027/): Malicious code in test-mlw2-cages-doabs (npm) (malicious package)
- [MAL-2025-35026](https://insights.sbomify.com/MAL-2025-35026/): Malicious code in test-mlw2-cadre-whelp (npm) (malicious package)
- [MAL-2025-35025](https://insights.sbomify.com/MAL-2025-35025/): Malicious code in test-mlw2-cadre-dense-dauts-belts (npm) (malicious package)
- [MAL-2025-35024](https://insights.sbomify.com/MAL-2025-35024/): Malicious code in test-mlw2-cadis-idant (npm) (malicious package)
- [MAL-2025-35023](https://insights.sbomify.com/MAL-2025-35023/): Malicious code in test-mlw2-cadis-folky (npm) (malicious package)
- [MAL-2025-35022](https://insights.sbomify.com/MAL-2025-35022/): Malicious code in test-mlw2-cadie-fight (npm) (malicious package)
- [MAL-2025-35021](https://insights.sbomify.com/MAL-2025-35021/): Malicious code in test-mlw2-caddy-erose (npm) (malicious package)
- [MAL-2025-35020](https://insights.sbomify.com/MAL-2025-35020/): Malicious code in test-mlw2-bykes-overt (npm) (malicious package)
- [MAL-2025-3502](https://insights.sbomify.com/MAL-2025-3502/): Malicious code in node-hashing (npm) (malicious package)
- [MAL-2025-35019](https://insights.sbomify.com/MAL-2025-35019/): Malicious code in test-mlw2-buxom-koppa-molto-dense (npm) (malicious package)
- [MAL-2025-35018](https://insights.sbomify.com/MAL-2025-35018/): Malicious code in test-mlw2-butyl-pekoe (npm) (malicious package)
- [MAL-2025-35017](https://insights.sbomify.com/MAL-2025-35017/): Malicious code in test-mlw2-burps-crypt (npm) (malicious package)
- [MAL-2025-35016](https://insights.sbomify.com/MAL-2025-35016/): Malicious code in test-mlw2-burke-penna (npm) (malicious package)
- [MAL-2025-35015](https://insights.sbomify.com/MAL-2025-35015/): Malicious code in test-mlw2-bunko-beths-incog-limma (npm) (malicious package)
- [MAL-2025-35014](https://insights.sbomify.com/MAL-2025-35014/): Malicious code in test-mlw2-bunia-foxed (npm) (malicious package)
- [MAL-2025-35013](https://insights.sbomify.com/MAL-2025-35013/): Malicious code in test-mlw2-bundu-roods (npm) (malicious package)
- [MAL-2025-35012](https://insights.sbomify.com/MAL-2025-35012/): Malicious code in test-mlw2-bulbs-safer-quirt-kelpy (npm) (malicious package)
- [MAL-2025-35011](https://insights.sbomify.com/MAL-2025-35011/): Malicious code in test-mlw2-buggy-undug-tires-knots (npm) (malicious package)
- [MAL-2025-35010](https://insights.sbomify.com/MAL-2025-35010/): Malicious code in test-mlw2-bubal-orant (npm) (malicious package)
- [MAL-2025-3501](https://insights.sbomify.com/MAL-2025-3501/): Malicious code in needlecast_mvd_ads_site_client (npm) (malicious package)
- [MAL-2025-35009](https://insights.sbomify.com/MAL-2025-35009/): Malicious code in test-mlw2-brust-cauls (npm) (malicious package)
- [MAL-2025-35008](https://insights.sbomify.com/MAL-2025-35008/): Malicious code in test-mlw2-brume-festa-fluer-menes (npm) (malicious package)
- [MAL-2025-35007](https://insights.sbomify.com/MAL-2025-35007/): Malicious code in test-mlw2-broad-reest (npm) (malicious package)
- [MAL-2025-35006](https://insights.sbomify.com/MAL-2025-35006/): Malicious code in test-mlw2-braky-hoyed (npm) (malicious package)
- [MAL-2025-35005](https://insights.sbomify.com/MAL-2025-35005/): Malicious code in test-mlw2-brail-nancy (npm) (malicious package)
- [MAL-2025-35004](https://insights.sbomify.com/MAL-2025-35004/): Malicious code in test-mlw2-brail-cavie-cangs-kivas (npm) (malicious package)
- [MAL-2025-35003](https://insights.sbomify.com/MAL-2025-35003/): Malicious code in test-mlw2-boyau-cyclo (npm) (malicious package)
- [MAL-2025-35002](https://insights.sbomify.com/MAL-2025-35002/): Malicious code in test-mlw2-boyau-berob-oppos-zowie (npm) (malicious package)
- [MAL-2025-35001](https://insights.sbomify.com/MAL-2025-35001/): Malicious code in test-mlw2-bowed-rooks-enfix-spile (npm) (malicious package)
- [MAL-2025-35000](https://insights.sbomify.com/MAL-2025-35000/): Malicious code in test-mlw2-bouts-erbia (npm) (malicious package)
- [MAL-2025-3500](https://insights.sbomify.com/MAL-2025-3500/): Malicious code in needlecast_b9s_jewel_fyc_fe_client (npm) (malicious package)
- [MAL-2025-350](https://insights.sbomify.com/MAL-2025-350/): Malicious code in @chkpkit/box (npm) (malicious package)
- [MAL-2025-35](https://insights.sbomify.com/MAL-2025-35/): Malicious code in digitalexp-lowcode-runner-app (npm) (malicious package)
- [MAL-2025-34999](https://insights.sbomify.com/MAL-2025-34999/): Malicious code in test-mlw2-bousy-stabs (npm) (malicious package)
- [MAL-2025-34998](https://insights.sbomify.com/MAL-2025-34998/): Malicious code in test-mlw2-bound-harks (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/724/
