# Vulnerabilities published in 2025


- [MAL-2025-34359](https://insights.sbomify.com/MAL-2025-34359/): Malicious code in taalame (npm) (malicious package)
- [MAL-2025-34358](https://insights.sbomify.com/MAL-2025-34358/): Malicious code in taachain (npm) (malicious package)
- [MAL-2025-34357](https://insights.sbomify.com/MAL-2025-34357/): Malicious code in t7rkow (npm) (malicious package)
- [MAL-2025-34356](https://insights.sbomify.com/MAL-2025-34356/): Malicious code in t5.admin (npm) (malicious package)
- [MAL-2025-34355](https://insights.sbomify.com/MAL-2025-34355/): Malicious code in t2c-web-admin (npm) (malicious package)
- [MAL-2025-34354](https://insights.sbomify.com/MAL-2025-34354/): Malicious code in syw-uikit (npm) (malicious package)
- [MAL-2025-34353](https://insights.sbomify.com/MAL-2025-34353/): Malicious code in sytheve (npm) (malicious package)
- [MAL-2025-34352](https://insights.sbomify.com/MAL-2025-34352/): Malicious code in systick (npm) (malicious package)
- [MAL-2025-34351](https://insights.sbomify.com/MAL-2025-34351/): Malicious code in systemd-watchdog-notify (npm) (malicious package)
- [MAL-2025-34350](https://insights.sbomify.com/MAL-2025-34350/): Malicious code in system-modeling (npm) (malicious package)
- [MAL-2025-3435](https://insights.sbomify.com/MAL-2025-3435/): Malicious code in bbllaacckkwwoollff6ad8f762 (PyPI) (malicious package)
- [MAL-2025-34349](https://insights.sbomify.com/MAL-2025-34349/): Malicious code in sysr (npm) (malicious package)
- [MAL-2025-34348](https://insights.sbomify.com/MAL-2025-34348/): Malicious code in sysmap (npm) (malicious package)
- [MAL-2025-34347](https://insights.sbomify.com/MAL-2025-34347/): Malicious code in syscpar (npm) (malicious package)
- [MAL-2025-34346](https://insights.sbomify.com/MAL-2025-34346/): Malicious code in syscod (npm) (malicious package)
- [MAL-2025-34345](https://insights.sbomify.com/MAL-2025-34345/): Malicious code in syokinet (npm) (malicious package)
- [MAL-2025-34344](https://insights.sbomify.com/MAL-2025-34344/): Malicious code in synthetic-vegito-database (npm) (malicious package)
- [MAL-2025-34343](https://insights.sbomify.com/MAL-2025-34343/): Malicious code in synthetic-rqzax-database (npm) (malicious package)
- [MAL-2025-34342](https://insights.sbomify.com/MAL-2025-34342/): Malicious code in synthetic-horizon-database (npm) (malicious package)
- [MAL-2025-34341](https://insights.sbomify.com/MAL-2025-34341/): Malicious code in synthetic-deku (npm) (malicious package)
- [MAL-2025-34340](https://insights.sbomify.com/MAL-2025-34340/): Malicious code in syngenio_licensecheck (npm) (malicious package)
- [MAL-2025-3434](https://insights.sbomify.com/MAL-2025-3434/): Malicious code in bbllaacckkwwoollff6ad8f753 (PyPI) (malicious package)
- [MAL-2025-34339](https://insights.sbomify.com/MAL-2025-34339/): Malicious code in synerj (npm) (malicious package)
- [MAL-2025-34338](https://insights.sbomify.com/MAL-2025-34338/): Malicious code in syncsub (npm) (malicious package)
- [MAL-2025-34337](https://insights.sbomify.com/MAL-2025-34337/): Malicious code in syncinfo (npm) (malicious package)
- [MAL-2025-34336](https://insights.sbomify.com/MAL-2025-34336/): Malicious code in synced-plus-agent (npm) (malicious package)
- [MAL-2025-34335](https://insights.sbomify.com/MAL-2025-34335/): Malicious code in synccft (npm) (malicious package)
- [MAL-2025-34334](https://insights.sbomify.com/MAL-2025-34334/): Malicious code in sync-yaml-command-ganymede (npm) (malicious package)
- [MAL-2025-34333](https://insights.sbomify.com/MAL-2025-34333/): Malicious code in sync-superagent-forever-singularitarianism (npm) (malicious package)
- [MAL-2025-34332](https://insights.sbomify.com/MAL-2025-34332/): Malicious code in sync-subscription-foundation-procyon (npm) (malicious package)
- [MAL-2025-34331](https://insights.sbomify.com/MAL-2025-34331/): Malicious code in sync-sampled-reviews-with-raw-reviews (npm) (malicious package)
- [MAL-2025-34330](https://insights.sbomify.com/MAL-2025-34330/): Malicious code in sync-color (npm) (malicious package)
- [MAL-2025-3433](https://insights.sbomify.com/MAL-2025-3433/): Malicious code in bbllaacckkwwoollff6ad8f752 (PyPI) (malicious package)
- [MAL-2025-34329](https://insights.sbomify.com/MAL-2025-34329/): Malicious code in sync-chalk-cygnus-arcturus (npm) (malicious package)
- [MAL-2025-34328](https://insights.sbomify.com/MAL-2025-34328/): Malicious code in sync-astrochemistry-lithosphere-cordelia (npm) (malicious package)
- [MAL-2025-34327](https://insights.sbomify.com/MAL-2025-34327/): Malicious code in synbad (npm) (malicious package)
- [MAL-2025-34326](https://insights.sbomify.com/MAL-2025-34326/): Malicious code in symnrt (npm) (malicious package)
- [MAL-2025-34325](https://insights.sbomify.com/MAL-2025-34325/): Malicious code in symfonyc (npm) (malicious package)
- [MAL-2025-34324](https://insights.sbomify.com/MAL-2025-34324/): Malicious code in symbol-fstring (npm) (malicious package)
- [MAL-2025-34323](https://insights.sbomify.com/MAL-2025-34323/): Malicious code in symbcs (npm) (malicious package)
- [MAL-2025-34322](https://insights.sbomify.com/MAL-2025-34322/): Malicious code in sym-responsive (npm) (malicious package)
- [MAL-2025-34321](https://insights.sbomify.com/MAL-2025-34321/): Malicious code in syllabi (npm) (malicious package)
- [MAL-2025-34320](https://insights.sbomify.com/MAL-2025-34320/): Malicious code in sylabs (npm) (malicious package)
- [MAL-2025-3432](https://insights.sbomify.com/MAL-2025-3432/): Malicious code in bbllaacckkwwoollff6ad8f751 (PyPI) (malicious package)
- [MAL-2025-34319](https://insights.sbomify.com/MAL-2025-34319/): Malicious code in sygerea (npm) (malicious package)
- [MAL-2025-34318](https://insights.sbomify.com/MAL-2025-34318/): Malicious code in sydcms (npm) (malicious package)
- [MAL-2025-34317](https://insights.sbomify.com/MAL-2025-34317/): Malicious code in sycamore-platform-components (npm) (malicious package)
- [MAL-2025-34316](https://insights.sbomify.com/MAL-2025-34316/): Malicious code in sycamore-platform (npm) (malicious package)
- [MAL-2025-34315](https://insights.sbomify.com/MAL-2025-34315/): Malicious code in sycamore-integration-postcodeanywhere (npm) (malicious package)
- [MAL-2025-34314](https://insights.sbomify.com/MAL-2025-34314/): Malicious code in sycamore-integration-mandrill (npm) (malicious package)
- [MAL-2025-34313](https://insights.sbomify.com/MAL-2025-34313/): Malicious code in sycamore-integration-kashflow (npm) (malicious package)
- [MAL-2025-34312](https://insights.sbomify.com/MAL-2025-34312/): Malicious code in sycamore-integration-freeagent (npm) (malicious package)
- [MAL-2025-34311](https://insights.sbomify.com/MAL-2025-34311/): Malicious code in sycamore-integration-evolution (npm) (malicious package)
- [MAL-2025-34310](https://insights.sbomify.com/MAL-2025-34310/): Malicious code in sycamore-integration-carweb (npm) (malicious package)
- [MAL-2025-3431](https://insights.sbomify.com/MAL-2025-3431/): Malicious code in bbllaacckkwwoollff-6ad8f762-1a91-45d7-a9c5-356bd858356a (PyPI) (malicious package)
- [MAL-2025-34309](https://insights.sbomify.com/MAL-2025-34309/): Malicious code in sycamore-integration-bravolink (npm) (malicious package)
- [MAL-2025-34308](https://insights.sbomify.com/MAL-2025-34308/): Malicious code in sycamore-integration-basecamp (npm) (malicious package)
- [MAL-2025-34307](https://insights.sbomify.com/MAL-2025-34307/): Malicious code in sycamore-integration-algolia (npm) (malicious package)
- [MAL-2025-34306](https://insights.sbomify.com/MAL-2025-34306/): Malicious code in sycamore-erp (npm) (malicious package)
- [MAL-2025-34305](https://insights.sbomify.com/MAL-2025-34305/): Malicious code in sycamore-crm (npm) (malicious package)
- [MAL-2025-34304](https://insights.sbomify.com/MAL-2025-34304/): Malicious code in syarobot (npm) (malicious package)
- [MAL-2025-34303](https://insights.sbomify.com/MAL-2025-34303/): Malicious code in sxbznqp (npm) (malicious package)
- [MAL-2025-34302](https://insights.sbomify.com/MAL-2025-34302/): Malicious code in swxzmflbqpcythgv (npm) (malicious package)
- [MAL-2025-34301](https://insights.sbomify.com/MAL-2025-34301/): Malicious code in swrepo (npm) (malicious package)
- [MAL-2025-34300](https://insights.sbomify.com/MAL-2025-34300/): Malicious code in sworkit-workouts (npm) (malicious package)
- [MAL-2025-3430](https://insights.sbomify.com/MAL-2025-3430/): Malicious code in bbllaacckkwwoollff (PyPI) (malicious package)
- [MAL-2025-343](https://insights.sbomify.com/MAL-2025-343/): Malicious code in packs-starter (npm) (malicious package)
- [MAL-2025-34299](https://insights.sbomify.com/MAL-2025-34299/): Malicious code in swokhgqmebtcpjir (npm) (malicious package)
- [MAL-2025-34298](https://insights.sbomify.com/MAL-2025-34298/): Malicious code in switcharoo-plugin-metrics (npm) (malicious package)
- [MAL-2025-34297](https://insights.sbomify.com/MAL-2025-34297/): Malicious code in switcharoo-plugin-ads (npm) (malicious package)
- [MAL-2025-34296](https://insights.sbomify.com/MAL-2025-34296/): Malicious code in switcharoo (npm) (malicious package)
- [MAL-2025-34295](https://insights.sbomify.com/MAL-2025-34295/): Malicious code in swiss-army-knife (npm) (malicious package)
- [MAL-2025-34294](https://insights.sbomify.com/MAL-2025-34294/): Malicious code in swishper (npm) (malicious package)
- [MAL-2025-34293](https://insights.sbomify.com/MAL-2025-34293/): Malicious code in swipable (npm) (malicious package)
- [MAL-2025-34292](https://insights.sbomify.com/MAL-2025-34292/): Malicious code in swinhoii (npm) (malicious package)
- [MAL-2025-34291](https://insights.sbomify.com/MAL-2025-34291/): Malicious code in swiftpdf (npm) (malicious package)
- [MAL-2025-34290](https://insights.sbomify.com/MAL-2025-34290/): Malicious code in swiftbits (npm) (malicious package)
- [MAL-2025-3429](https://insights.sbomify.com/MAL-2025-3429/): Malicious code in asynchttpx (PyPI) (malicious package)
- [MAL-2025-34289](https://insights.sbomify.com/MAL-2025-34289/): Malicious code in swift-search (npm) (malicious package)
- [MAL-2025-34288](https://insights.sbomify.com/MAL-2025-34288/): Malicious code in swift-playground-builder (npm) (malicious package)
- [MAL-2025-34287](https://insights.sbomify.com/MAL-2025-34287/): Malicious code in swicks (npm) (malicious package)
- [MAL-2025-34286](https://insights.sbomify.com/MAL-2025-34286/): Malicious code in swfpoc (npm) (malicious package)
- [MAL-2025-34285](https://insights.sbomify.com/MAL-2025-34285/): Malicious code in swexikcykpgrtqud (npm) (malicious package)
- [MAL-2025-34284](https://insights.sbomify.com/MAL-2025-34284/): Malicious code in swembl (npm) (malicious package)
- [MAL-2025-34283](https://insights.sbomify.com/MAL-2025-34283/): Malicious code in swarmcube (npm) (malicious package)
- [MAL-2025-34282](https://insights.sbomify.com/MAL-2025-34282/): Malicious code in swaptrack (npm) (malicious package)
- [MAL-2025-34281](https://insights.sbomify.com/MAL-2025-34281/): Malicious code in swap_middleware (npm) (malicious package)
- [MAL-2025-34280](https://insights.sbomify.com/MAL-2025-34280/): Malicious code in swan-yucca-iir777-project (npm) (malicious package)
- [MAL-2025-3428](https://insights.sbomify.com/MAL-2025-3428/): Malicious code in zocslib (npm) (malicious package)
- [MAL-2025-34279](https://insights.sbomify.com/MAL-2025-34279/): Malicious code in swan-xenon-qnv320-project (npm) (malicious package)
- [MAL-2025-34278](https://insights.sbomify.com/MAL-2025-34278/): Malicious code in swan-vulture-djn616-project (npm) (malicious package)
- [MAL-2025-34277](https://insights.sbomify.com/MAL-2025-34277/): Malicious code in swan-violet-uzt995-project (npm) (malicious package)
- [MAL-2025-34276](https://insights.sbomify.com/MAL-2025-34276/): Malicious code in swan-savanna-kir735-project (npm) (malicious package)
- [MAL-2025-34275](https://insights.sbomify.com/MAL-2025-34275/): Malicious code in swan-rainbow-pfb803-project (npm) (malicious package)
- [MAL-2025-34274](https://insights.sbomify.com/MAL-2025-34274/): Malicious code in swan-quilt-zjk050-project (npm) (malicious package)
- [MAL-2025-34273](https://insights.sbomify.com/MAL-2025-34273/): Malicious code in swan-quartz-wbj886-project (npm) (malicious package)
- [MAL-2025-34272](https://insights.sbomify.com/MAL-2025-34272/): Malicious code in swan-piano-mtk716-project (npm) (malicious package)
- [MAL-2025-34271](https://insights.sbomify.com/MAL-2025-34271/): Malicious code in swan-nugget-ypo135-project (npm) (malicious package)
- [MAL-2025-34270](https://insights.sbomify.com/MAL-2025-34270/): Malicious code in swan-moon-xmh465-project (npm) (malicious package)
- [MAL-2025-3427](https://insights.sbomify.com/MAL-2025-3427/): Malicious code in wertawana (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/732/