# Vulnerabilities published in 2025


- [MAL-2025-34906](https://insights.sbomify.com/MAL-2025-34906/): Malicious code in test-mlw2-aulos-hoven (npm) (malicious package)
- [MAL-2025-34905](https://insights.sbomify.com/MAL-2025-34905/): Malicious code in test-mlw2-auloi-razed-metes-jukes (npm) (malicious package)
- [MAL-2025-34904](https://insights.sbomify.com/MAL-2025-34904/): Malicious code in test-mlw2-attic-frist-mashy-vireo (npm) (malicious package)
- [MAL-2025-34903](https://insights.sbomify.com/MAL-2025-34903/): Malicious code in test-mlw2-attar-ugged (npm) (malicious package)
- [MAL-2025-34902](https://insights.sbomify.com/MAL-2025-34902/): Malicious code in test-mlw2-ataxy-frory-curds-marly (npm) (malicious package)
- [MAL-2025-34901](https://insights.sbomify.com/MAL-2025-34901/): Malicious code in test-mlw2-aspic-honey (npm) (malicious package)
- [MAL-2025-34900](https://insights.sbomify.com/MAL-2025-34900/): Malicious code in test-mlw2-asper-noisy (npm) (malicious package)
- [MAL-2025-3490](https://insights.sbomify.com/MAL-2025-3490/): Malicious code in fc-online (npm) (malicious package)
- [MAL-2025-349](https://insights.sbomify.com/MAL-2025-349/): Malicious code in chkpkit (npm) (malicious package)
- [MAL-2025-34899](https://insights.sbomify.com/MAL-2025-34899/): Malicious code in test-mlw2-asked-wefts (npm) (malicious package)
- [MAL-2025-34898](https://insights.sbomify.com/MAL-2025-34898/): Malicious code in test-mlw2-aside-sedum (npm) (malicious package)
- [MAL-2025-34897](https://insights.sbomify.com/MAL-2025-34897/): Malicious code in test-mlw2-ashet-salix-stoup-slice (npm) (malicious package)
- [MAL-2025-34896](https://insights.sbomify.com/MAL-2025-34896/): Malicious code in test-mlw2-arsis-choco (npm) (malicious package)
- [MAL-2025-34895](https://insights.sbomify.com/MAL-2025-34895/): Malicious code in test-mlw2-array-vocab (npm) (malicious package)
- [MAL-2025-34894](https://insights.sbomify.com/MAL-2025-34894/): Malicious code in test-mlw2-aroba-treks (npm) (malicious package)
- [MAL-2025-34893](https://insights.sbomify.com/MAL-2025-34893/): Malicious code in test-mlw2-aroba-muser-cafes-tints (npm) (malicious package)
- [MAL-2025-34892](https://insights.sbomify.com/MAL-2025-34892/): Malicious code in test-mlw2-armil-fleer (npm) (malicious package)
- [MAL-2025-34891](https://insights.sbomify.com/MAL-2025-34891/): Malicious code in test-mlw2-arled-blots-heron-nooky (npm) (malicious package)
- [MAL-2025-34890](https://insights.sbomify.com/MAL-2025-34890/): Malicious code in test-mlw2-argus-molal (npm) (malicious package)
- [MAL-2025-3489](https://insights.sbomify.com/MAL-2025-3489/): Malicious code in eslint-js (npm) (malicious package)
- [MAL-2025-34889](https://insights.sbomify.com/MAL-2025-34889/): Malicious code in test-mlw2-argot-unsew (npm) (malicious package)
- [MAL-2025-34888](https://insights.sbomify.com/MAL-2025-34888/): Malicious code in test-mlw2-arede-zoned (npm) (malicious package)
- [MAL-2025-34887](https://insights.sbomify.com/MAL-2025-34887/): Malicious code in test-mlw2-arede-veily (npm) (malicious package)
- [MAL-2025-34886](https://insights.sbomify.com/MAL-2025-34886/): Malicious code in test-mlw2-areca-reman (npm) (malicious package)
- [MAL-2025-34885](https://insights.sbomify.com/MAL-2025-34885/): Malicious code in test-mlw2-arcus-props (npm) (malicious package)
- [MAL-2025-34884](https://insights.sbomify.com/MAL-2025-34884/): Malicious code in test-mlw2-apace-aphid (npm) (malicious package)
- [MAL-2025-34883](https://insights.sbomify.com/MAL-2025-34883/): Malicious code in test-mlw2-anvil-agone (npm) (malicious package)
- [MAL-2025-34882](https://insights.sbomify.com/MAL-2025-34882/): Malicious code in test-mlw2-anted-surfy (npm) (malicious package)
- [MAL-2025-34881](https://insights.sbomify.com/MAL-2025-34881/): Malicious code in test-mlw2-anise-gools (npm) (malicious package)
- [MAL-2025-34880](https://insights.sbomify.com/MAL-2025-34880/): Malicious code in test-mlw2-anger-snort (npm) (malicious package)
- [MAL-2025-3488](https://insights.sbomify.com/MAL-2025-3488/): Malicious code in doges (npm) (malicious package)
- [MAL-2025-34879](https://insights.sbomify.com/MAL-2025-34879/): Malicious code in test-mlw2-anele-ocher (npm) (malicious package)
- [MAL-2025-34878](https://insights.sbomify.com/MAL-2025-34878/): Malicious code in test-mlw2-ancle-primo (npm) (malicious package)
- [MAL-2025-34877](https://insights.sbomify.com/MAL-2025-34877/): Malicious code in test-mlw2-ampul-debar (npm) (malicious package)
- [MAL-2025-34876](https://insights.sbomify.com/MAL-2025-34876/): Malicious code in test-mlw2-amour-spitz (npm) (malicious package)
- [MAL-2025-34875](https://insights.sbomify.com/MAL-2025-34875/): Malicious code in test-mlw2-amine-quasi (npm) (malicious package)
- [MAL-2025-34874](https://insights.sbomify.com/MAL-2025-34874/): Malicious code in test-mlw2-amide-dotal (npm) (malicious package)
- [MAL-2025-34873](https://insights.sbomify.com/MAL-2025-34873/): Malicious code in test-mlw2-amend-agism (npm) (malicious package)
- [MAL-2025-34872](https://insights.sbomify.com/MAL-2025-34872/): Malicious code in test-mlw2-ameba-study (npm) (malicious package)
- [MAL-2025-34871](https://insights.sbomify.com/MAL-2025-34871/): Malicious code in test-mlw2-amain-lacet (npm) (malicious package)
- [MAL-2025-34870](https://insights.sbomify.com/MAL-2025-34870/): Malicious code in test-mlw2-amain-ataxy (npm) (malicious package)
- [MAL-2025-3487](https://insights.sbomify.com/MAL-2025-3487/): Malicious code in cerberus-management-dashboard (npm) (malicious package)
- [MAL-2025-34869](https://insights.sbomify.com/MAL-2025-34869/): Malicious code in test-mlw2-alure-kneel (npm) (malicious package)
- [MAL-2025-34868](https://insights.sbomify.com/MAL-2025-34868/): Malicious code in test-mlw2-alpha-reify (npm) (malicious package)
- [MAL-2025-34867](https://insights.sbomify.com/MAL-2025-34867/): Malicious code in test-mlw2-aloof-teals (npm) (malicious package)
- [MAL-2025-34866](https://insights.sbomify.com/MAL-2025-34866/): Malicious code in test-mlw2-aloha-miner (npm) (malicious package)
- [MAL-2025-34865](https://insights.sbomify.com/MAL-2025-34865/): Malicious code in test-mlw2-aloft-spend (npm) (malicious package)
- [MAL-2025-34864](https://insights.sbomify.com/MAL-2025-34864/): Malicious code in test-mlw2-aloes-teaze (npm) (malicious package)
- [MAL-2025-34863](https://insights.sbomify.com/MAL-2025-34863/): Malicious code in test-mlw2-aloed-eards (npm) (malicious package)
- [MAL-2025-34862](https://insights.sbomify.com/MAL-2025-34862/): Malicious code in test-mlw2-almas-oaves (npm) (malicious package)
- [MAL-2025-34861](https://insights.sbomify.com/MAL-2025-34861/): Malicious code in test-mlw2-almas-hault (npm) (malicious package)
- [MAL-2025-34860](https://insights.sbomify.com/MAL-2025-34860/): Malicious code in test-mlw2-almah-niffy (npm) (malicious package)
- [MAL-2025-3486](https://insights.sbomify.com/MAL-2025-3486/): Malicious code in auth-help3r (npm) (malicious package)
- [MAL-2025-34859](https://insights.sbomify.com/MAL-2025-34859/): Malicious code in test-mlw2-almah-femur (npm) (malicious package)
- [MAL-2025-34858](https://insights.sbomify.com/MAL-2025-34858/): Malicious code in test-mlw2-allis-hejab (npm) (malicious package)
- [MAL-2025-34857](https://insights.sbomify.com/MAL-2025-34857/): Malicious code in test-mlw2-allay-scrod (npm) (malicious package)
- [MAL-2025-34856](https://insights.sbomify.com/MAL-2025-34856/): Malicious code in test-mlw2-alias-iodic (npm) (malicious package)
- [MAL-2025-34855](https://insights.sbomify.com/MAL-2025-34855/): Malicious code in test-mlw2-alary-grift-algid-brags (npm) (malicious package)
- [MAL-2025-34854](https://insights.sbomify.com/MAL-2025-34854/): Malicious code in test-mlw2-aitch-began (npm) (malicious package)
- [MAL-2025-34853](https://insights.sbomify.com/MAL-2025-34853/): Malicious code in test-mlw2-ahind-unwon (npm) (malicious package)
- [MAL-2025-34852](https://insights.sbomify.com/MAL-2025-34852/): Malicious code in test-mlw2-ahigh-sowls-pumas-glogg (npm) (malicious package)
- [MAL-2025-34851](https://insights.sbomify.com/MAL-2025-34851/): Malicious code in test-mlw2-aheap-draff-poney-quail (npm) (malicious package)
- [MAL-2025-34850](https://insights.sbomify.com/MAL-2025-34850/): Malicious code in test-mlw2-agued-wreck (npm) (malicious package)
- [MAL-2025-3485](https://insights.sbomify.com/MAL-2025-3485/): Malicious code in @zener-soft-consulting/ab-webcomponents-library (npm) (malicious package)
- [MAL-2025-34849](https://insights.sbomify.com/MAL-2025-34849/): Malicious code in test-mlw2-agora-boult (npm) (malicious package)
- [MAL-2025-34848](https://insights.sbomify.com/MAL-2025-34848/): Malicious code in test-mlw2-agony-vigil (npm) (malicious package)
- [MAL-2025-34847](https://insights.sbomify.com/MAL-2025-34847/): Malicious code in test-mlw2-agone-scaff-pyoid-zaxes (npm) (malicious package)
- [MAL-2025-34846](https://insights.sbomify.com/MAL-2025-34846/): Malicious code in test-mlw2-agley-lagan (npm) (malicious package)
- [MAL-2025-34845](https://insights.sbomify.com/MAL-2025-34845/): Malicious code in test-mlw2-agene-neist (npm) (malicious package)
- [MAL-2025-34844](https://insights.sbomify.com/MAL-2025-34844/): Malicious code in test-mlw2-agave-slurs (npm) (malicious package)
- [MAL-2025-34843](https://insights.sbomify.com/MAL-2025-34843/): Malicious code in test-mlw2-afire-suber (npm) (malicious package)
- [MAL-2025-34842](https://insights.sbomify.com/MAL-2025-34842/): Malicious code in test-mlw2-adzes-routh (npm) (malicious package)
- [MAL-2025-34841](https://insights.sbomify.com/MAL-2025-34841/): Malicious code in test-mlw2-adunc-clamp (npm) (malicious package)
- [MAL-2025-34840](https://insights.sbomify.com/MAL-2025-34840/): Malicious code in test-mlw2-adsum-gnars-boils-pills (npm) (malicious package)
- [MAL-2025-3484](https://insights.sbomify.com/MAL-2025-3484/): Malicious code in yolov8mini (PyPI) (malicious package)
- [MAL-2025-34839](https://insights.sbomify.com/MAL-2025-34839/): Malicious code in test-mlw2-addio-drupe (npm) (malicious package)
- [MAL-2025-34838](https://insights.sbomify.com/MAL-2025-34838/): Malicious code in test-mlw2-actin-snips (npm) (malicious package)
- [MAL-2025-34837](https://insights.sbomify.com/MAL-2025-34837/): Malicious code in test-mlw2-acres-gusle (npm) (malicious package)
- [MAL-2025-34836](https://insights.sbomify.com/MAL-2025-34836/): Malicious code in test-mlw2-acmes-grise (npm) (malicious package)
- [MAL-2025-34835](https://insights.sbomify.com/MAL-2025-34835/): Malicious code in test-mlw2-acini-enoki (npm) (malicious package)
- [MAL-2025-34834](https://insights.sbomify.com/MAL-2025-34834/): Malicious code in test-mlw2-aches-bowls (npm) (malicious package)
- [MAL-2025-34833](https://insights.sbomify.com/MAL-2025-34833/): Malicious code in test-mlw2-ached-piney (npm) (malicious package)
- [MAL-2025-34832](https://insights.sbomify.com/MAL-2025-34832/): Malicious code in test-mlw2-absit-kakas (npm) (malicious package)
- [MAL-2025-34831](https://insights.sbomify.com/MAL-2025-34831/): Malicious code in test-mlw2-abort-coals (npm) (malicious package)
- [MAL-2025-34830](https://insights.sbomify.com/MAL-2025-34830/): Malicious code in test-mlw2-ablet-dwams (npm) (malicious package)
- [MAL-2025-3483](https://insights.sbomify.com/MAL-2025-3483/): Malicious code in xcepthttp (PyPI) (malicious package)
- [MAL-2025-34829](https://insights.sbomify.com/MAL-2025-34829/): Malicious code in test-mlw2-abler-neive-ditzy-grows (npm) (malicious package)
- [MAL-2025-34828](https://insights.sbomify.com/MAL-2025-34828/): Malicious code in test-mlw2-abele-pines (npm) (malicious package)
- [MAL-2025-34827](https://insights.sbomify.com/MAL-2025-34827/): Malicious code in test-mlw2-abear-aglet-solan-sangs (npm) (malicious package)
- [MAL-2025-34826](https://insights.sbomify.com/MAL-2025-34826/): Malicious code in test-mlw2-abeam-nizam (npm) (malicious package)
- [MAL-2025-34825](https://insights.sbomify.com/MAL-2025-34825/): Malicious code in test-mlw2-abbes-whift (npm) (malicious package)
- [MAL-2025-34824](https://insights.sbomify.com/MAL-2025-34824/): Malicious code in test-mlw2-abash-sturt-dewed-monal (npm) (malicious package)
- [MAL-2025-34823](https://insights.sbomify.com/MAL-2025-34823/): Malicious code in test-mlw2-aback-colas-stirk-tuxes (npm) (malicious package)
- [MAL-2025-34822](https://insights.sbomify.com/MAL-2025-34822/): Malicious code in test-mlw1-whops-canto (npm) (malicious package)
- [MAL-2025-34821](https://insights.sbomify.com/MAL-2025-34821/): Malicious code in test-mlw1-welts-hazes (npm) (malicious package)
- [MAL-2025-34820](https://insights.sbomify.com/MAL-2025-34820/): Malicious code in test-mlw1-wanly-dunno-nulls-jaups (npm) (malicious package)
- [MAL-2025-3482](https://insights.sbomify.com/MAL-2025-3482/): Malicious code in web3rpcs (PyPI) (malicious package)
- [MAL-2025-34819](https://insights.sbomify.com/MAL-2025-34819/): Malicious code in test-mlw1-vests-soums-withy-geese (npm) (malicious package)
- [MAL-2025-34818](https://insights.sbomify.com/MAL-2025-34818/): Malicious code in test-mlw1-valor-stent (npm) (malicious package)
- [MAL-2025-34817](https://insights.sbomify.com/MAL-2025-34817/): Malicious code in test-mlw1-urari-saist-elegy-skids (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/726/