# Vulnerabilities published in 2025


- [MAL-2025-34816](https://insights.sbomify.com/MAL-2025-34816/): Malicious code in test-mlw1-twite-chins (npm) (malicious package)
- [MAL-2025-34815](https://insights.sbomify.com/MAL-2025-34815/): Malicious code in test-mlw1-twang-busks (npm) (malicious package)
- [MAL-2025-34814](https://insights.sbomify.com/MAL-2025-34814/): Malicious code in test-mlw1-toxic-cubeb (npm) (malicious package)
- [MAL-2025-34813](https://insights.sbomify.com/MAL-2025-34813/): Malicious code in test-mlw1-tondi-their-seize-nance (npm) (malicious package)
- [MAL-2025-34812](https://insights.sbomify.com/MAL-2025-34812/): Malicious code in test-mlw1-thars-cubit-rucks-kells (npm) (malicious package)
- [MAL-2025-34811](https://insights.sbomify.com/MAL-2025-34811/): Malicious code in test-mlw1-telos-stulm-table-paras (npm) (malicious package)
- [MAL-2025-34810](https://insights.sbomify.com/MAL-2025-34810/): Malicious code in test-mlw1-teens-satyr-rigor-esker (npm) (malicious package)
- [MAL-2025-3481](https://insights.sbomify.com/MAL-2025-3481/): Malicious code in web3rpc (PyPI) (malicious package)
- [MAL-2025-34809](https://insights.sbomify.com/MAL-2025-34809/): Malicious code in test-mlw1-stupa-sware-rivel-cirri (npm) (malicious package)
- [MAL-2025-34808](https://insights.sbomify.com/MAL-2025-34808/): Malicious code in test-mlw1-state-tides-miffy-buroo (npm) (malicious package)
- [MAL-2025-34807](https://insights.sbomify.com/MAL-2025-34807/): Malicious code in test-mlw1-spine-aecia (npm) (malicious package)
- [MAL-2025-34806](https://insights.sbomify.com/MAL-2025-34806/): Malicious code in test-mlw1-spang-slobs-dobby-slabs (npm) (malicious package)
- [MAL-2025-34805](https://insights.sbomify.com/MAL-2025-34805/): Malicious code in test-mlw1-sooty-gapes-frore-kombu (npm) (malicious package)
- [MAL-2025-34804](https://insights.sbomify.com/MAL-2025-34804/): Malicious code in test-mlw1-scaws-skirl-braes-enorm (npm) (malicious package)
- [MAL-2025-34803](https://insights.sbomify.com/MAL-2025-34803/): Malicious code in test-mlw1-royst-opals-drift-chico (npm) (malicious package)
- [MAL-2025-34802](https://insights.sbomify.com/MAL-2025-34802/): Malicious code in test-mlw1-roric-awave (npm) (malicious package)
- [MAL-2025-34801](https://insights.sbomify.com/MAL-2025-34801/): Malicious code in test-mlw1-profs-boots-chocs-swops (npm) (malicious package)
- [MAL-2025-34800](https://insights.sbomify.com/MAL-2025-34800/): Malicious code in test-mlw1-ovine-mobby-grant-sadhe (npm) (malicious package)
- [MAL-2025-3480](https://insights.sbomify.com/MAL-2025-3480/): Malicious code in web3connectpy (PyPI) (malicious package)
- [MAL-2025-348](https://insights.sbomify.com/MAL-2025-348/): Malicious code in dell.github.io (npm) (malicious package)
- [MAL-2025-34799](https://insights.sbomify.com/MAL-2025-34799/): Malicious code in test-mlw1-ngwee-greys (npm) (malicious package)
- [MAL-2025-34798](https://insights.sbomify.com/MAL-2025-34798/): Malicious code in test-mlw1-natal-nouns (npm) (malicious package)
- [MAL-2025-34797](https://insights.sbomify.com/MAL-2025-34797/): Malicious code in test-mlw1-morns-bairn (npm) (malicious package)
- [MAL-2025-34796](https://insights.sbomify.com/MAL-2025-34796/): Malicious code in test-mlw1-lisle-jougs (npm) (malicious package)
- [MAL-2025-34795](https://insights.sbomify.com/MAL-2025-34795/): Malicious code in test-mlw1-jebel-teind-acrid-bosom (npm) (malicious package)
- [MAL-2025-34794](https://insights.sbomify.com/MAL-2025-34794/): Malicious code in test-mlw1-hands-dearn (npm) (malicious package)
- [MAL-2025-34793](https://insights.sbomify.com/MAL-2025-34793/): Malicious code in test-mlw1-hammy-coaly-kilns-coifs (npm) (malicious package)
- [MAL-2025-34792](https://insights.sbomify.com/MAL-2025-34792/): Malicious code in test-mlw1-hakas-vouch (npm) (malicious package)
- [MAL-2025-34791](https://insights.sbomify.com/MAL-2025-34791/): Malicious code in test-mlw1-gusto-fools-kecks-mille (npm) (malicious package)
- [MAL-2025-34790](https://insights.sbomify.com/MAL-2025-34790/): Malicious code in test-mlw1-gulfy-monas (npm) (malicious package)
- [MAL-2025-3479](https://insights.sbomify.com/MAL-2025-3479/): Malicious code in web3-validator (PyPI) (malicious package)
- [MAL-2025-34789](https://insights.sbomify.com/MAL-2025-34789/): Malicious code in test-mlw1-guaco-whoso (npm) (malicious package)
- [MAL-2025-34788](https://insights.sbomify.com/MAL-2025-34788/): Malicious code in test-mlw1-gools-wiped (npm) (malicious package)
- [MAL-2025-34787](https://insights.sbomify.com/MAL-2025-34787/): Malicious code in test-mlw1-gaums-phage (npm) (malicious package)
- [MAL-2025-34786](https://insights.sbomify.com/MAL-2025-34786/): Malicious code in test-mlw1-frail-pater-sordo-negus (npm) (malicious package)
- [MAL-2025-34785](https://insights.sbomify.com/MAL-2025-34785/): Malicious code in test-mlw1-first-leady (npm) (malicious package)
- [MAL-2025-34784](https://insights.sbomify.com/MAL-2025-34784/): Malicious code in test-mlw1-fence-nooky (npm) (malicious package)
- [MAL-2025-34783](https://insights.sbomify.com/MAL-2025-34783/): Malicious code in test-mlw1-feare-chile-whizz-torcs (npm) (malicious package)
- [MAL-2025-34782](https://insights.sbomify.com/MAL-2025-34782/): Malicious code in test-mlw1-equip-wreak (npm) (malicious package)
- [MAL-2025-34781](https://insights.sbomify.com/MAL-2025-34781/): Malicious code in test-mlw1-epoch-nines (npm) (malicious package)
- [MAL-2025-34780](https://insights.sbomify.com/MAL-2025-34780/): Malicious code in test-mlw1-emote-debit-loner-teary (npm) (malicious package)
- [MAL-2025-3478](https://insights.sbomify.com/MAL-2025-3478/): Malicious code in tronperm (PyPI) (malicious package)
- [MAL-2025-34779](https://insights.sbomify.com/MAL-2025-34779/): Malicious code in test-mlw1-dwalm-gulls (npm) (malicious package)
- [MAL-2025-34778](https://insights.sbomify.com/MAL-2025-34778/): Malicious code in test-mlw1-could-latex-solen-teddy (npm) (malicious package)
- [MAL-2025-34777](https://insights.sbomify.com/MAL-2025-34777/): Malicious code in test-mlw1-cotts-pyres-sigma-quids (npm) (malicious package)
- [MAL-2025-34776](https://insights.sbomify.com/MAL-2025-34776/): Malicious code in test-mlw1-cocco-garda-rakes-qadis (npm) (malicious package)
- [MAL-2025-34775](https://insights.sbomify.com/MAL-2025-34775/): Malicious code in test-mlw1-cadre-dense-dauts-belts (npm) (malicious package)
- [MAL-2025-34774](https://insights.sbomify.com/MAL-2025-34774/): Malicious code in test-mlw1-cadis-idant (npm) (malicious package)
- [MAL-2025-34773](https://insights.sbomify.com/MAL-2025-34773/): Malicious code in test-mlw1-beths-whoso-wulls-noted (npm) (malicious package)
- [MAL-2025-34772](https://insights.sbomify.com/MAL-2025-34772/): Malicious code in test-mlw1-azyme-woody-infra-baulk (npm) (malicious package)
- [MAL-2025-34771](https://insights.sbomify.com/MAL-2025-34771/): Malicious code in test-hello-module (npm) (malicious package)
- [MAL-2025-34770](https://insights.sbomify.com/MAL-2025-34770/): Malicious code in test-greatfilter-meteor-pulsar (npm) (malicious package)
- [MAL-2025-3477](https://insights.sbomify.com/MAL-2025-3477/): Malicious code in tronlinkperm (PyPI) (malicious package)
- [MAL-2025-34769](https://insights.sbomify.com/MAL-2025-34769/): Malicious code in test-deprecate-1 (npm) (malicious package)
- [MAL-2025-34768](https://insights.sbomify.com/MAL-2025-34768/): Malicious code in test-crust-kardashevscale-panspermia (npm) (malicious package)
- [MAL-2025-34767](https://insights.sbomify.com/MAL-2025-34767/): Malicious code in test-ccsv (npm) (malicious package)
- [MAL-2025-34766](https://insights.sbomify.com/MAL-2025-34766/): Malicious code in test-aws-xray-sdk-express (npm) (malicious package)
- [MAL-2025-34765](https://insights.sbomify.com/MAL-2025-34765/): Malicious code in test-auth-tr (npm) (malicious package)
- [MAL-2025-34764](https://insights.sbomify.com/MAL-2025-34764/): Malicious code in test-attr (npm) (malicious package)
- [MAL-2025-34763](https://insights.sbomify.com/MAL-2025-34763/): Malicious code in test-10 (npm) (malicious package)
- [MAL-2025-34762](https://insights.sbomify.com/MAL-2025-34762/): Malicious code in teslaos (npm) (malicious package)
- [MAL-2025-34761](https://insights.sbomify.com/MAL-2025-34761/): Malicious code in terser-webpack-plugin-rollup-npm-yildun (npm) (malicious package)
- [MAL-2025-34760](https://insights.sbomify.com/MAL-2025-34760/): Malicious code in terser-webpack-plugin-nebula-fetch-umbriel (npm) (malicious package)
- [MAL-2025-3476](https://insights.sbomify.com/MAL-2025-3476/): Malicious code in tronclipy (PyPI) (malicious package)
- [MAL-2025-34759](https://insights.sbomify.com/MAL-2025-34759/): Malicious code in terser-webpack-plugin-mutation-markdownlint-inflation (npm) (malicious package)
- [MAL-2025-34758](https://insights.sbomify.com/MAL-2025-34758/): Malicious code in terser-webpack-plugin-elara-framework-seismology (npm) (malicious package)
- [MAL-2025-34757](https://insights.sbomify.com/MAL-2025-34757/): Malicious code in terser-webpack-plugin-brane-prettier-style-loader (npm) (malicious package)
- [MAL-2025-34756](https://insights.sbomify.com/MAL-2025-34756/): Malicious code in terser-terraforming-cryonics-radiometric (npm) (malicious package)
- [MAL-2025-34755](https://insights.sbomify.com/MAL-2025-34755/): Malicious code in terser-publish-quasar-hydra (npm) (malicious package)
- [MAL-2025-34754](https://insights.sbomify.com/MAL-2025-34754/): Malicious code in terser-module-csv-promise (npm) (malicious package)
- [MAL-2025-34753](https://insights.sbomify.com/MAL-2025-34753/): Malicious code in terser-hugo-cordelia-mechatronics (npm) (malicious package)
- [MAL-2025-34752](https://insights.sbomify.com/MAL-2025-34752/): Malicious code in terser-fork-cors-eridanus (npm) (malicious package)
- [MAL-2025-34751](https://insights.sbomify.com/MAL-2025-34751/): Malicious code in terser-envconfig-saturnology-algol (npm) (malicious package)
- [MAL-2025-34750](https://insights.sbomify.com/MAL-2025-34750/): Malicious code in terser-aldebaran-run-script-websockets (npm) (malicious package)
- [MAL-2025-3475](https://insights.sbomify.com/MAL-2025-3475/): Malicious code in timekeeper-verifier (PyPI) (malicious package)
- [MAL-2025-34749](https://insights.sbomify.com/MAL-2025-34749/): Malicious code in terrewubna (npm) (malicious package)
- [MAL-2025-34748](https://insights.sbomify.com/MAL-2025-34748/): Malicious code in terraview (npm) (malicious package)
- [MAL-2025-34747](https://insights.sbomify.com/MAL-2025-34747/): Malicious code in terralink (npm) (malicious package)
- [MAL-2025-34746](https://insights.sbomify.com/MAL-2025-34746/): Malicious code in terraforming-winston-meteor-augmentedreality (npm) (malicious package)
- [MAL-2025-34745](https://insights.sbomify.com/MAL-2025-34745/): Malicious code in terraforming-install-proxima-meteor (npm) (malicious package)
- [MAL-2025-34744](https://insights.sbomify.com/MAL-2025-34744/): Malicious code in terraforming-epimetheus-loopback-uninstall (npm) (malicious package)
- [MAL-2025-34743](https://insights.sbomify.com/MAL-2025-34743/): Malicious code in terra_yekb0_17brh_equinox (npm) (malicious package)
- [MAL-2025-34742](https://insights.sbomify.com/MAL-2025-34742/): Malicious code in terra_iy51k_4mwgk_universe (npm) (malicious package)
- [MAL-2025-34741](https://insights.sbomify.com/MAL-2025-34741/): Malicious code in terra_g8xdb_95knj_crystal (npm) (malicious package)
- [MAL-2025-34740](https://insights.sbomify.com/MAL-2025-34740/): Malicious code in terra_eqdr9_ncn56_valley (npm) (malicious package)
- [MAL-2025-3474](https://insights.sbomify.com/MAL-2025-3474/): Malicious code in timekeeper-verif1er (PyPI) (malicious package)
- [MAL-2025-34739](https://insights.sbomify.com/MAL-2025-34739/): Malicious code in terra_ctepi_h6f9d_cascade (npm) (malicious package)
- [MAL-2025-34738](https://insights.sbomify.com/MAL-2025-34738/): Malicious code in terra_7clx0_s0c6y_serenade (npm) (malicious package)
- [MAL-2025-34737](https://insights.sbomify.com/MAL-2025-34737/): Malicious code in terra_48civ_oddf5_glacier (npm) (malicious package)
- [MAL-2025-34736](https://insights.sbomify.com/MAL-2025-34736/): Malicious code in terra-qlbws-qy148-zenith-project (npm) (malicious package)
- [MAL-2025-34735](https://insights.sbomify.com/MAL-2025-34735/): Malicious code in terra-okrf9-w4rcf-quiver-project (npm) (malicious package)
- [MAL-2025-34734](https://insights.sbomify.com/MAL-2025-34734/): Malicious code in terra-mcc2c-epcvi-raven-project (npm) (malicious package)
- [MAL-2025-34733](https://insights.sbomify.com/MAL-2025-34733/): Malicious code in terra-deu5m-kkc89-solace-project (npm) (malicious package)
- [MAL-2025-34732](https://insights.sbomify.com/MAL-2025-34732/): Malicious code in terra-2x4zu-4smbs-indigo-project (npm) (malicious package)
- [MAL-2025-34731](https://insights.sbomify.com/MAL-2025-34731/): Malicious code in terra-26htp-8uf1g-lichen-project (npm) (malicious package)
- [MAL-2025-34730](https://insights.sbomify.com/MAL-2025-34730/): Malicious code in terra-1wn2p-5kw79-ocean-project (npm) (malicious package)
- [MAL-2025-3473](https://insights.sbomify.com/MAL-2025-3473/): Malicious code in textgradient (PyPI) (malicious package)
- [MAL-2025-34729](https://insights.sbomify.com/MAL-2025-34729/): Malicious code in tern_from_ts (npm) (malicious package)
- [MAL-2025-34728](https://insights.sbomify.com/MAL-2025-34728/): Malicious code in tern-cafe (npm) (malicious package)
- [MAL-2025-34727](https://insights.sbomify.com/MAL-2025-34727/): Malicious code in tern-caf (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/727/
