# Vulnerabilities published in 2025


- [MAL-2025-34449](https://insights.sbomify.com/MAL-2025-34449/): Malicious code in tangerine-quebec-ebpv (npm) (malicious package)
- [MAL-2025-34448](https://insights.sbomify.com/MAL-2025-34448/): Malicious code in tangerine-papa-hahr (npm) (malicious package)
- [MAL-2025-34447](https://insights.sbomify.com/MAL-2025-34447/): Malicious code in tangerine-orange-quebec-ibrgn (npm) (malicious package)
- [MAL-2025-34446](https://insights.sbomify.com/MAL-2025-34446/): Malicious code in tangerine-oh8-project (npm) (malicious package)
- [MAL-2025-34445](https://insights.sbomify.com/MAL-2025-34445/): Malicious code in tangerine-november-qzmu (npm) (malicious package)
- [MAL-2025-34444](https://insights.sbomify.com/MAL-2025-34444/): Malicious code in tangerine-november-mjeh (npm) (malicious package)
- [MAL-2025-34443](https://insights.sbomify.com/MAL-2025-34443/): Malicious code in tangerine-november-lemon-iuhqu (npm) (malicious package)
- [MAL-2025-34442](https://insights.sbomify.com/MAL-2025-34442/): Malicious code in tangerine-november-aofg (npm) (malicious package)
- [MAL-2025-34441](https://insights.sbomify.com/MAL-2025-34441/): Malicious code in tangerine-mt4-project (npm) (malicious package)
- [MAL-2025-34440](https://insights.sbomify.com/MAL-2025-34440/): Malicious code in tangerine-mja-project (npm) (malicious package)
- [MAL-2025-3444](https://insights.sbomify.com/MAL-2025-3444/): Malicious code in coloryi (PyPI) (malicious package)
- [MAL-2025-34439](https://insights.sbomify.com/MAL-2025-34439/): Malicious code in tangerine-mike-xray-bkfkl (npm) (malicious package)
- [MAL-2025-34438](https://insights.sbomify.com/MAL-2025-34438/): Malicious code in tangerine-mike-juliet-dpdhw (npm) (malicious package)
- [MAL-2025-34437](https://insights.sbomify.com/MAL-2025-34437/): Malicious code in tangerine-mike-ecmr (npm) (malicious package)
- [MAL-2025-34436](https://insights.sbomify.com/MAL-2025-34436/): Malicious code in tangerine-meteor-9eqc (npm) (malicious package)
- [MAL-2025-34435](https://insights.sbomify.com/MAL-2025-34435/): Malicious code in tangerine-mango-xvyy (npm) (malicious package)
- [MAL-2025-34434](https://insights.sbomify.com/MAL-2025-34434/): Malicious code in tangerine-lemon-ma27 (npm) (malicious package)
- [MAL-2025-34433](https://insights.sbomify.com/MAL-2025-34433/): Malicious code in tangerine-ko9-project (npm) (malicious package)
- [MAL-2025-34432](https://insights.sbomify.com/MAL-2025-34432/): Malicious code in tangerine-juliet-koid (npm) (malicious package)
- [MAL-2025-34431](https://insights.sbomify.com/MAL-2025-34431/): Malicious code in tangerine-jfs-project (npm) (malicious package)
- [MAL-2025-34430](https://insights.sbomify.com/MAL-2025-34430/): Malicious code in tangerine-india-vsls (npm) (malicious package)
- [MAL-2025-3443](https://insights.sbomify.com/MAL-2025-3443/): Malicious code in colorona (PyPI) (malicious package)
- [MAL-2025-34429](https://insights.sbomify.com/MAL-2025-34429/): Malicious code in tangerine-icn-project (npm) (malicious package)
- [MAL-2025-34428](https://insights.sbomify.com/MAL-2025-34428/): Malicious code in tangerine-hotel-jogz (npm) (malicious package)
- [MAL-2025-34427](https://insights.sbomify.com/MAL-2025-34427/): Malicious code in tangerine-hgy-project (npm) (malicious package)
- [MAL-2025-34426](https://insights.sbomify.com/MAL-2025-34426/): Malicious code in tangerine-gfu-project (npm) (malicious package)
- [MAL-2025-34425](https://insights.sbomify.com/MAL-2025-34425/): Malicious code in tangerine-foxtrot-fsnk (npm) (malicious package)
- [MAL-2025-34424](https://insights.sbomify.com/MAL-2025-34424/): Malicious code in tangerine-foxtrot-charlie-rffuv (npm) (malicious package)
- [MAL-2025-34423](https://insights.sbomify.com/MAL-2025-34423/): Malicious code in tangerine-echo-fsrf (npm) (malicious package)
- [MAL-2025-34422](https://insights.sbomify.com/MAL-2025-34422/): Malicious code in tangerine-date-raspberry-qbjuh (npm) (malicious package)
- [MAL-2025-34421](https://insights.sbomify.com/MAL-2025-34421/): Malicious code in tangerine-cherry-eknf (npm) (malicious package)
- [MAL-2025-34420](https://insights.sbomify.com/MAL-2025-34420/): Malicious code in tangerine-bridge-t7tn (npm) (malicious package)
- [MAL-2025-3442](https://insights.sbomify.com/MAL-2025-3442/): Malicious code in colorinsa (PyPI) (malicious package)
- [MAL-2025-34419](https://insights.sbomify.com/MAL-2025-34419/): Malicious code in tangerine-bravo-veqd (npm) (malicious package)
- [MAL-2025-34418](https://insights.sbomify.com/MAL-2025-34418/): Malicious code in tangerine-bravo-qlzh (npm) (malicious package)
- [MAL-2025-34417](https://insights.sbomify.com/MAL-2025-34417/): Malicious code in tangerine-bravo-lhhr (npm) (malicious package)
- [MAL-2025-34416](https://insights.sbomify.com/MAL-2025-34416/): Malicious code in tangerine-banana-qvcy (npm) (malicious package)
- [MAL-2025-34415](https://insights.sbomify.com/MAL-2025-34415/): Malicious code in tangerine-auu-project (npm) (malicious package)
- [MAL-2025-34414](https://insights.sbomify.com/MAL-2025-34414/): Malicious code in tangerine-at2-project (npm) (malicious package)
- [MAL-2025-34413](https://insights.sbomify.com/MAL-2025-34413/): Malicious code in tangerine-akt-project (npm) (malicious package)
- [MAL-2025-34412](https://insights.sbomify.com/MAL-2025-34412/): Malicious code in tangerine-7ns-project (npm) (malicious package)
- [MAL-2025-34411](https://insights.sbomify.com/MAL-2025-34411/): Malicious code in tangerine-7ep-project (npm) (malicious package)
- [MAL-2025-34410](https://insights.sbomify.com/MAL-2025-34410/): Malicious code in tangerine-4dj-project (npm) (malicious package)
- [MAL-2025-3441](https://insights.sbomify.com/MAL-2025-3441/): Malicious code in colorina (PyPI) (malicious package)
- [MAL-2025-34409](https://insights.sbomify.com/MAL-2025-34409/): Malicious code in tangerine-189-project (npm) (malicious package)
- [MAL-2025-34408](https://insights.sbomify.com/MAL-2025-34408/): Malicious code in tangerine-0i8-project (npm) (malicious package)
- [MAL-2025-34407](https://insights.sbomify.com/MAL-2025-34407/): Malicious code in tangerine-04r-project (npm) (malicious package)
- [MAL-2025-34406](https://insights.sbomify.com/MAL-2025-34406/): Malicious code in tameshi (npm) (malicious package)
- [MAL-2025-34405](https://insights.sbomify.com/MAL-2025-34405/): Malicious code in tally-factory (npm) (malicious package)
- [MAL-2025-34404](https://insights.sbomify.com/MAL-2025-34404/): Malicious code in talkscape (npm) (malicious package)
- [MAL-2025-34403](https://insights.sbomify.com/MAL-2025-34403/): Malicious code in talksaver (npm) (malicious package)
- [MAL-2025-34402](https://insights.sbomify.com/MAL-2025-34402/): Malicious code in talento (npm) (malicious package)
- [MAL-2025-34401](https://insights.sbomify.com/MAL-2025-34401/): Malicious code in talecraft (npm) (malicious package)
- [MAL-2025-34400](https://insights.sbomify.com/MAL-2025-34400/): Malicious code in takktile (npm) (malicious package)
- [MAL-2025-3440](https://insights.sbomify.com/MAL-2025-3440/): Malicious code in codeoptimizer (PyPI) (malicious package)
- [MAL-2025-344](https://insights.sbomify.com/MAL-2025-344/): Malicious code in passkeys-resources-website (npm) (malicious package)
- [MAL-2025-34399](https://insights.sbomify.com/MAL-2025-34399/): Malicious code in takeshequ (npm) (malicious package)
- [MAL-2025-34398](https://insights.sbomify.com/MAL-2025-34398/): Malicious code in takepart-gallery (npm) (malicious package)
- [MAL-2025-34397](https://insights.sbomify.com/MAL-2025-34397/): Malicious code in takamura (npm) (malicious package)
- [MAL-2025-34396](https://insights.sbomify.com/MAL-2025-34396/): Malicious code in tajluzekfhkocnqb (npm) (malicious package)
- [MAL-2025-34395](https://insights.sbomify.com/MAL-2025-34395/): Malicious code in tajigon (npm) (malicious package)
- [MAL-2025-34394](https://insights.sbomify.com/MAL-2025-34394/): Malicious code in taiwnet (npm) (malicious package)
- [MAL-2025-34393](https://insights.sbomify.com/MAL-2025-34393/): Malicious code in tainted_love (npm) (malicious package)
- [MAL-2025-34392](https://insights.sbomify.com/MAL-2025-34392/): Malicious code in tailwindcss-pulsar-hyperion-standard (npm) (malicious package)
- [MAL-2025-34391](https://insights.sbomify.com/MAL-2025-34391/): Malicious code in tailwindcss-process-enceladus-rehype (npm) (malicious package)
- [MAL-2025-34390](https://insights.sbomify.com/MAL-2025-34390/): Malicious code in tailwindcss-first-line (npm) (malicious package)
- [MAL-2025-3439](https://insights.sbomify.com/MAL-2025-3439/): Malicious code in ccxt-mexc-futures (PyPI) (malicious package)
- [MAL-2025-34389](https://insights.sbomify.com/MAL-2025-34389/): Malicious code in tailwindcss-charon-callisto-acamar (npm) (malicious package)
- [MAL-2025-34388](https://insights.sbomify.com/MAL-2025-34388/): Malicious code in tailwindcss-animate-plus (npm) (malicious package)
- [MAL-2025-34387](https://insights.sbomify.com/MAL-2025-34387/): Malicious code in tailwind_lodash (npm) (malicious package)
- [MAL-2025-34386](https://insights.sbomify.com/MAL-2025-34386/): Malicious code in tail-observable (npm) (malicious package)
- [MAL-2025-34385](https://insights.sbomify.com/MAL-2025-34385/): Malicious code in tahasiraj-ts-2004-oop-project-10 (npm) (malicious package)
- [MAL-2025-34384](https://insights.sbomify.com/MAL-2025-34384/): Malicious code in tahasiraj-2004-45-assignments (npm) (malicious package)
- [MAL-2025-34383](https://insights.sbomify.com/MAL-2025-34383/): Malicious code in tagstop (npm) (malicious package)
- [MAL-2025-34382](https://insights.sbomify.com/MAL-2025-34382/): Malicious code in tagsfs (npm) (malicious package)
- [MAL-2025-34381](https://insights.sbomify.com/MAL-2025-34381/): Malicious code in tagmusic (npm) (malicious package)
- [MAL-2025-34380](https://insights.sbomify.com/MAL-2025-34380/): Malicious code in tagmata (npm) (malicious package)
- [MAL-2025-3438](https://insights.sbomify.com/MAL-2025-3438/): Malicious code in blackspammerbd-vx1 (PyPI) (malicious package)
- [MAL-2025-34379](https://insights.sbomify.com/MAL-2025-34379/): Malicious code in taglibkit (npm) (malicious package)
- [MAL-2025-34378](https://insights.sbomify.com/MAL-2025-34378/): Malicious code in taggram (npm) (malicious package)
- [MAL-2025-34377](https://insights.sbomify.com/MAL-2025-34377/): Malicious code in taggr (npm) (malicious package)
- [MAL-2025-34376](https://insights.sbomify.com/MAL-2025-34376/): Malicious code in tag-middleware (npm) (malicious package)
- [MAL-2025-34375](https://insights.sbomify.com/MAL-2025-34375/): Malicious code in taffydocs (npm) (malicious package)
- [MAL-2025-34374](https://insights.sbomify.com/MAL-2025-34374/): Malicious code in taekbae (npm) (malicious package)
- [MAL-2025-34373](https://insights.sbomify.com/MAL-2025-34373/): Malicious code in tad-icons (npm) (malicious package)
- [MAL-2025-34372](https://insights.sbomify.com/MAL-2025-34372/): Malicious code in tacoland (npm) (malicious package)
- [MAL-2025-34371](https://insights.sbomify.com/MAL-2025-34371/): Malicious code in tacktech (npm) (malicious package)
- [MAL-2025-34370](https://insights.sbomify.com/MAL-2025-34370/): Malicious code in tachyon-style-loader-sadr-hapi (npm) (malicious package)
- [MAL-2025-3437](https://insights.sbomify.com/MAL-2025-3437/): Malicious code in bitcoinlibdbfix (PyPI) (malicious package)
- [MAL-2025-34369](https://insights.sbomify.com/MAL-2025-34369/): Malicious code in tabufi (npm) (malicious package)
- [MAL-2025-34368](https://insights.sbomify.com/MAL-2025-34368/): Malicious code in tabmark (npm) (malicious package)
- [MAL-2025-34367](https://insights.sbomify.com/MAL-2025-34367/): Malicious code in tablogo (npm) (malicious package)
- [MAL-2025-34366](https://insights.sbomify.com/MAL-2025-34366/): Malicious code in tablekit (npm) (malicious package)
- [MAL-2025-34365](https://insights.sbomify.com/MAL-2025-34365/): Malicious code in tableau_ruby (npm) (malicious package)
- [MAL-2025-34364](https://insights.sbomify.com/MAL-2025-34364/): Malicious code in table-query (npm) (malicious package)
- [MAL-2025-34363](https://insights.sbomify.com/MAL-2025-34363/): Malicious code in table-awk-epsilon-unix-route (npm) (malicious package)
- [MAL-2025-34362](https://insights.sbomify.com/MAL-2025-34362/): Malicious code in tablator (npm) (malicious package)
- [MAL-2025-34361](https://insights.sbomify.com/MAL-2025-34361/): Malicious code in tabisapo (npm) (malicious package)
- [MAL-2025-34360](https://insights.sbomify.com/MAL-2025-34360/): Malicious code in tabcmd (npm) (malicious package)
- [MAL-2025-3436](https://insights.sbomify.com/MAL-2025-3436/): Malicious code in bitcoinlib-dev (PyPI) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/731/