# Vulnerabilities published in 2025


- [MAL-2025-34541](https://insights.sbomify.com/MAL-2025-34541/): Malicious code in tanker-kit (npm) (malicious package)
- [MAL-2025-34540](https://insights.sbomify.com/MAL-2025-34540/): Malicious code in tanker-fetch (npm) (malicious package)
- [MAL-2025-3454](https://insights.sbomify.com/MAL-2025-3454/): Malicious code in piedefender (PyPI) (malicious package)
- [MAL-2025-34539](https://insights.sbomify.com/MAL-2025-34539/): Malicious code in tanjiro-simsimi-teach (npm) (malicious package)
- [MAL-2025-34538](https://insights.sbomify.com/MAL-2025-34538/): Malicious code in tanjiro-ping-bot (npm) (malicious package)
- [MAL-2025-34537](https://insights.sbomify.com/MAL-2025-34537/): Malicious code in tanium-snip (npm) (malicious package)
- [MAL-2025-34536](https://insights.sbomify.com/MAL-2025-34536/): Malicious code in tanium-builder (npm) (malicious package)
- [MAL-2025-34535](https://insights.sbomify.com/MAL-2025-34535/): Malicious code in tania-telur100-breki (npm) (malicious package)
- [MAL-2025-34534](https://insights.sbomify.com/MAL-2025-34534/): Malicious code in tania-tahutek74-sukiwir (npm) (malicious package)
- [MAL-2025-34533](https://insights.sbomify.com/MAL-2025-34533/): Malicious code in tania-ruwet16-kuki (npm) (malicious package)
- [MAL-2025-34532](https://insights.sbomify.com/MAL-2025-34532/): Malicious code in tania-rangi84-breki (npm) (malicious package)
- [MAL-2025-34531](https://insights.sbomify.com/MAL-2025-34531/): Malicious code in tania-bakso97-sukiwir (npm) (malicious package)
- [MAL-2025-34530](https://insights.sbomify.com/MAL-2025-34530/): Malicious code in tango-ylo-project (npm) (malicious package)
- [MAL-2025-34529](https://insights.sbomify.com/MAL-2025-34529/): Malicious code in tango-yankee-alpha-vhkfd (npm) (malicious package)
- [MAL-2025-34528](https://insights.sbomify.com/MAL-2025-34528/): Malicious code in tango-xzy-project (npm) (malicious package)
- [MAL-2025-34527](https://insights.sbomify.com/MAL-2025-34527/): Malicious code in tango-xigua-mwnx (npm) (malicious package)
- [MAL-2025-34526](https://insights.sbomify.com/MAL-2025-34526/): Malicious code in tango-xigua-banana-wzvue (npm) (malicious package)
- [MAL-2025-34525](https://insights.sbomify.com/MAL-2025-34525/): Malicious code in tango-victor-zuob (npm) (malicious package)
- [MAL-2025-34524](https://insights.sbomify.com/MAL-2025-34524/): Malicious code in tango-vanilla-november-ydtrz (npm) (malicious package)
- [MAL-2025-34523](https://insights.sbomify.com/MAL-2025-34523/): Malicious code in tango-vanilla-jjio (npm) (malicious package)
- [MAL-2025-34522](https://insights.sbomify.com/MAL-2025-34522/): Malicious code in tango-uniform-ztrg (npm) (malicious package)
- [MAL-2025-34521](https://insights.sbomify.com/MAL-2025-34521/): Malicious code in tango-uniform-vanilla-oksjz (npm) (malicious package)
- [MAL-2025-34520](https://insights.sbomify.com/MAL-2025-34520/): Malicious code in tango-ugli-foxtrot-eblpx (npm) (malicious package)
- [MAL-2025-34519](https://insights.sbomify.com/MAL-2025-34519/): Malicious code in tango-uat-project (npm) (malicious package)
- [MAL-2025-34518](https://insights.sbomify.com/MAL-2025-34518/): Malicious code in tango-tangerine-frcn (npm) (malicious package)
- [MAL-2025-34517](https://insights.sbomify.com/MAL-2025-34517/): Malicious code in tango-sby-project (npm) (malicious package)
- [MAL-2025-34516](https://insights.sbomify.com/MAL-2025-34516/): Malicious code in tango-romeo-nwgr (npm) (malicious package)
- [MAL-2025-34515](https://insights.sbomify.com/MAL-2025-34515/): Malicious code in tango-romeo-lzmd (npm) (malicious package)
- [MAL-2025-34514](https://insights.sbomify.com/MAL-2025-34514/): Malicious code in tango-raspberry-qrab (npm) (malicious package)
- [MAL-2025-34513](https://insights.sbomify.com/MAL-2025-34513/): Malicious code in tango-quince-victor-bctde (npm) (malicious package)
- [MAL-2025-34512](https://insights.sbomify.com/MAL-2025-34512/): Malicious code in tango-quince-nyks (npm) (malicious package)
- [MAL-2025-34511](https://insights.sbomify.com/MAL-2025-34511/): Malicious code in tango-quebec-sdwx (npm) (malicious package)
- [MAL-2025-34510](https://insights.sbomify.com/MAL-2025-34510/): Malicious code in tango-quebec-orange-hkhug (npm) (malicious package)
- [MAL-2025-34509](https://insights.sbomify.com/MAL-2025-34509/): Malicious code in tango-q0f-project (npm) (malicious package)
- [MAL-2025-34508](https://insights.sbomify.com/MAL-2025-34508/): Malicious code in tango-pwf-project (npm) (malicious package)
- [MAL-2025-34507](https://insights.sbomify.com/MAL-2025-34507/): Malicious code in tango-pine-9wif (npm) (malicious package)
- [MAL-2025-34506](https://insights.sbomify.com/MAL-2025-34506/): Malicious code in tango-penguin-7tci (npm) (malicious package)
- [MAL-2025-34505](https://insights.sbomify.com/MAL-2025-34505/): Malicious code in tango-papaya-ugli-catcx (npm) (malicious package)
- [MAL-2025-34504](https://insights.sbomify.com/MAL-2025-34504/): Malicious code in tango-papa-ejgg (npm) (malicious package)
- [MAL-2025-34503](https://insights.sbomify.com/MAL-2025-34503/): Malicious code in tango-oscar-mike-xfvxh (npm) (malicious package)
- [MAL-2025-34502](https://insights.sbomify.com/MAL-2025-34502/): Malicious code in tango-oscar-inmf (npm) (malicious package)
- [MAL-2025-34501](https://insights.sbomify.com/MAL-2025-34501/): Malicious code in tango-orange-whiskey-qmruh (npm) (malicious package)
- [MAL-2025-34500](https://insights.sbomify.com/MAL-2025-34500/): Malicious code in tango-nectarine-znnp (npm) (malicious package)
- [MAL-2025-3450](https://insights.sbomify.com/MAL-2025-3450/): Malicious code in logax (PyPI) (malicious package)
- [MAL-2025-345](https://insights.sbomify.com/MAL-2025-345/): Malicious code in qa-octuple (npm) (malicious package)
- [MAL-2025-34499](https://insights.sbomify.com/MAL-2025-34499/): Malicious code in tango-nectarine-papa-ghttt (npm) (malicious package)
- [MAL-2025-34498](https://insights.sbomify.com/MAL-2025-34498/): Malicious code in tango-nectarine-egrn (npm) (malicious package)
- [MAL-2025-34497](https://insights.sbomify.com/MAL-2025-34497/): Malicious code in tango-mike-xafz (npm) (malicious package)
- [MAL-2025-34496](https://insights.sbomify.com/MAL-2025-34496/): Malicious code in tango-maple-rv2b (npm) (malicious package)
- [MAL-2025-34495](https://insights.sbomify.com/MAL-2025-34495/): Malicious code in tango-krh-project (npm) (malicious package)
- [MAL-2025-34494](https://insights.sbomify.com/MAL-2025-34494/): Malicious code in tango-kqh-project (npm) (malicious package)
- [MAL-2025-34493](https://insights.sbomify.com/MAL-2025-34493/): Malicious code in tango-kilo-orange-itjhe (npm) (malicious package)
- [MAL-2025-34492](https://insights.sbomify.com/MAL-2025-34492/): Malicious code in tango-juliet-4h1g (npm) (malicious package)
- [MAL-2025-34491](https://insights.sbomify.com/MAL-2025-34491/): Malicious code in tango-jht-project (npm) (malicious package)
- [MAL-2025-34490](https://insights.sbomify.com/MAL-2025-34490/): Malicious code in tango-ir3-project (npm) (malicious package)
- [MAL-2025-3449](https://insights.sbomify.com/MAL-2025-3449/): Malicious code in leveup (PyPI) (malicious package)
- [MAL-2025-34489](https://insights.sbomify.com/MAL-2025-34489/): Malicious code in tango-india-watermelon-akemy (npm) (malicious package)
- [MAL-2025-34488](https://insights.sbomify.com/MAL-2025-34488/): Malicious code in tango-gyf-project (npm) (malicious package)
- [MAL-2025-34487](https://insights.sbomify.com/MAL-2025-34487/): Malicious code in tango-grape-ytpc (npm) (malicious package)
- [MAL-2025-34486](https://insights.sbomify.com/MAL-2025-34486/): Malicious code in tango-grape-banana-zodll (npm) (malicious package)
- [MAL-2025-34485](https://insights.sbomify.com/MAL-2025-34485/): Malicious code in tango-flare-1huo (npm) (malicious package)
- [MAL-2025-34484](https://insights.sbomify.com/MAL-2025-34484/): Malicious code in tango-fig-tangerine-dygmb (npm) (malicious package)
- [MAL-2025-34483](https://insights.sbomify.com/MAL-2025-34483/): Malicious code in tango-elderberry-cherry-seoxo (npm) (malicious package)
- [MAL-2025-34482](https://insights.sbomify.com/MAL-2025-34482/): Malicious code in tango-dhw-project (npm) (malicious package)
- [MAL-2025-34481](https://insights.sbomify.com/MAL-2025-34481/): Malicious code in tango-delta-kxpi (npm) (malicious package)
- [MAL-2025-34480](https://insights.sbomify.com/MAL-2025-34480/): Malicious code in tango-ddv-project (npm) (malicious package)
- [MAL-2025-3448](https://insights.sbomify.com/MAL-2025-3448/): Malicious code in httpx-client (PyPI) (malicious package)
- [MAL-2025-34479](https://insights.sbomify.com/MAL-2025-34479/): Malicious code in tango-date-charlie-alxkv (npm) (malicious package)
- [MAL-2025-34478](https://insights.sbomify.com/MAL-2025-34478/): Malicious code in tango-cherry-xigua-libbl (npm) (malicious package)
- [MAL-2025-34477](https://insights.sbomify.com/MAL-2025-34477/): Malicious code in tango-azi-project (npm) (malicious package)
- [MAL-2025-34476](https://insights.sbomify.com/MAL-2025-34476/): Malicious code in tango-apple-rcre (npm) (malicious package)
- [MAL-2025-34475](https://insights.sbomify.com/MAL-2025-34475/): Malicious code in tango-apple-fobg (npm) (malicious package)
- [MAL-2025-34474](https://insights.sbomify.com/MAL-2025-34474/): Malicious code in tango-alpha-yhai (npm) (malicious package)
- [MAL-2025-34473](https://insights.sbomify.com/MAL-2025-34473/): Malicious code in tango-3zq-project (npm) (malicious package)
- [MAL-2025-34472](https://insights.sbomify.com/MAL-2025-34472/): Malicious code in tango-2qe-project (npm) (malicious package)
- [MAL-2025-34471](https://insights.sbomify.com/MAL-2025-34471/): Malicious code in tango-13j-project (npm) (malicious package)
- [MAL-2025-34470](https://insights.sbomify.com/MAL-2025-34470/): Malicious code in tanglc (npm) (malicious package)
- [MAL-2025-3447](https://insights.sbomify.com/MAL-2025-3447/): Malicious code in f2d5cfdc642c3d5 (PyPI) (malicious package)
- [MAL-2025-34469](https://insights.sbomify.com/MAL-2025-34469/): Malicious code in tangerine-zulu-pyzp (npm) (malicious package)
- [MAL-2025-34468](https://insights.sbomify.com/MAL-2025-34468/): Malicious code in tangerine-znp-project (npm) (malicious package)
- [MAL-2025-34467](https://insights.sbomify.com/MAL-2025-34467/): Malicious code in tangerine-zf1-project (npm) (malicious package)
- [MAL-2025-34466](https://insights.sbomify.com/MAL-2025-34466/): Malicious code in tangerine-ze4-project (npm) (malicious package)
- [MAL-2025-34465](https://insights.sbomify.com/MAL-2025-34465/): Malicious code in tangerine-yam-fluz (npm) (malicious package)
- [MAL-2025-34464](https://insights.sbomify.com/MAL-2025-34464/): Malicious code in tangerine-xray-juliet-iswjn (npm) (malicious package)
- [MAL-2025-34463](https://insights.sbomify.com/MAL-2025-34463/): Malicious code in tangerine-xigua-kbbe (npm) (malicious package)
- [MAL-2025-34462](https://insights.sbomify.com/MAL-2025-34462/): Malicious code in tangerine-xigua-djdm (npm) (malicious package)
- [MAL-2025-34461](https://insights.sbomify.com/MAL-2025-34461/): Malicious code in tangerine-xigua-alki (npm) (malicious package)
- [MAL-2025-34460](https://insights.sbomify.com/MAL-2025-34460/): Malicious code in tangerine-whiskey-yam-slywd (npm) (malicious package)
- [MAL-2025-3446](https://insights.sbomify.com/MAL-2025-3446/): Malicious code in f2d5cfdc642c3d4 (PyPI) (malicious package)
- [MAL-2025-34459](https://insights.sbomify.com/MAL-2025-34459/): Malicious code in tangerine-whiskey-india-nmhij (npm) (malicious package)
- [MAL-2025-34458](https://insights.sbomify.com/MAL-2025-34458/): Malicious code in tangerine-vanilla-ugli-rpjrw (npm) (malicious package)
- [MAL-2025-34457](https://insights.sbomify.com/MAL-2025-34457/): Malicious code in tangerine-uu6-project (npm) (malicious package)
- [MAL-2025-34456](https://insights.sbomify.com/MAL-2025-34456/): Malicious code in tangerine-ugli-sierra-kagvn (npm) (malicious package)
- [MAL-2025-34455](https://insights.sbomify.com/MAL-2025-34455/): Malicious code in tangerine-ugli-qzor (npm) (malicious package)
- [MAL-2025-34454](https://insights.sbomify.com/MAL-2025-34454/): Malicious code in tangerine-ugli-date-ttnar (npm) (malicious package)
- [MAL-2025-34453](https://insights.sbomify.com/MAL-2025-34453/): Malicious code in tangerine-tvs-project (npm) (malicious package)
- [MAL-2025-34452](https://insights.sbomify.com/MAL-2025-34452/): Malicious code in tangerine-rgc-project (npm) (malicious package)
- [MAL-2025-34451](https://insights.sbomify.com/MAL-2025-34451/): Malicious code in tangerine-qwz-project (npm) (malicious package)
- [MAL-2025-34450](https://insights.sbomify.com/MAL-2025-34450/): Malicious code in tangerine-quince-yokw (npm) (malicious package)
- [MAL-2025-3445](https://insights.sbomify.com/MAL-2025-3445/): Malicious code in evm-validator (PyPI) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/730/