# Vulnerabilities published in 2025 - [MAL-2025-34089](https://insights.sbomify.com/MAL-2025-34089/): Malicious code in strict-null-check-migration-tools (npm) (malicious package) - [MAL-2025-34088](https://insights.sbomify.com/MAL-2025-34088/): Malicious code in striation (npm) (malicious package) - [MAL-2025-34087](https://insights.sbomify.com/MAL-2025-34087/): Malicious code in streamrec (npm) (malicious package) - [MAL-2025-34086](https://insights.sbomify.com/MAL-2025-34086/): Malicious code in streammebot (npm) (malicious package) - [MAL-2025-34085](https://insights.sbomify.com/MAL-2025-34085/): Malicious code in streaming-grid (npm) (malicious package) - [MAL-2025-34084](https://insights.sbomify.com/MAL-2025-34084/): Malicious code in streambox-client (npm) (malicious package) - [MAL-2025-34083](https://insights.sbomify.com/MAL-2025-34083/): Malicious code in stream-weywot-postcss-loader-version (npm) (malicious package) - [MAL-2025-34082](https://insights.sbomify.com/MAL-2025-34082/): Malicious code in stream-uglify-js-aldebaran-framework (npm) (malicious package) - [MAL-2025-34081](https://insights.sbomify.com/MAL-2025-34081/): Malicious code in stream-polaris-andromeda-cz-conventional-changelog (npm) (malicious package) - [MAL-2025-34080](https://insights.sbomify.com/MAL-2025-34080/): Malicious code in stream-manager (npm) (malicious package) - [MAL-2025-3408](https://insights.sbomify.com/MAL-2025-3408/): Malicious code in npm-test-lowerx3 (npm) (malicious package) - [MAL-2025-34079](https://insights.sbomify.com/MAL-2025-34079/): Malicious code in stream-format (npm) (malicious package) - [MAL-2025-34078](https://insights.sbomify.com/MAL-2025-34078/): Malicious code in stream-fermiparadox-scripts-update (npm) (malicious package) - [MAL-2025-34077](https://insights.sbomify.com/MAL-2025-34077/): Malicious code in strax-utils (npm) (malicious package) - [MAL-2025-34076](https://insights.sbomify.com/MAL-2025-34076/): Malicious code in strawberry-z3p-project (npm) (malicious package) - [MAL-2025-34075](https://insights.sbomify.com/MAL-2025-34075/): Malicious code in strawberry-xigua-ugli-bdkfn (npm) (malicious package) - [MAL-2025-34074](https://insights.sbomify.com/MAL-2025-34074/): Malicious code in strawberry-watermelon-ctlf (npm) (malicious package) - [MAL-2025-34073](https://insights.sbomify.com/MAL-2025-34073/): Malicious code in strawberry-vy9-project (npm) (malicious package) - [MAL-2025-34072](https://insights.sbomify.com/MAL-2025-34072/): Malicious code in strawberry-vq8-project (npm) (malicious package) - [MAL-2025-34071](https://insights.sbomify.com/MAL-2025-34071/): Malicious code in strawberry-victor-lemon-lsemj (npm) (malicious package) - [MAL-2025-34070](https://insights.sbomify.com/MAL-2025-34070/): Malicious code in strawberry-viaduct-rk25 (npm) (malicious package) - [MAL-2025-3407](https://insights.sbomify.com/MAL-2025-3407/): Malicious code in my-rei-browser-shim (npm) (malicious package) - [MAL-2025-34069](https://insights.sbomify.com/MAL-2025-34069/): Malicious code in strawberry-vanilla-nvel (npm) (malicious package) - [MAL-2025-34068](https://insights.sbomify.com/MAL-2025-34068/): Malicious code in strawberry-uxf-project (npm) (malicious package) - [MAL-2025-34067](https://insights.sbomify.com/MAL-2025-34067/): Malicious code in strawberry-uniform-victor-qpbso (npm) (malicious package) - [MAL-2025-34066](https://insights.sbomify.com/MAL-2025-34066/): Malicious code in strawberry-tango-lemon-nkjcp (npm) (malicious package) - [MAL-2025-34065](https://insights.sbomify.com/MAL-2025-34065/): Malicious code in strawberry-tangerine-tyjf (npm) (malicious package) - [MAL-2025-34064](https://insights.sbomify.com/MAL-2025-34064/): Malicious code in strawberry-tangerine-ndxa (npm) (malicious package) - [MAL-2025-34063](https://insights.sbomify.com/MAL-2025-34063/): Malicious code in strawberry-sierra-zqil (npm) (malicious package) - [MAL-2025-34062](https://insights.sbomify.com/MAL-2025-34062/): Malicious code in strawberry-sierra-apple-hxcbq (npm) (malicious package) - [MAL-2025-34061](https://insights.sbomify.com/MAL-2025-34061/): Malicious code in strawberry-romeo-lkgx (npm) (malicious package) - [MAL-2025-34060](https://insights.sbomify.com/MAL-2025-34060/): Malicious code in strawberry-reef-wnbr (npm) (malicious package) - [MAL-2025-3406](https://insights.sbomify.com/MAL-2025-3406/): Malicious code in members.cdbaby.com (npm) (malicious package) - [MAL-2025-34059](https://insights.sbomify.com/MAL-2025-34059/): Malicious code in strawberry-raspberry-zucchini-ioebj (npm) (malicious package) - [MAL-2025-34058](https://insights.sbomify.com/MAL-2025-34058/): Malicious code in strawberry-quebec-zvzl (npm) (malicious package) - [MAL-2025-34057](https://insights.sbomify.com/MAL-2025-34057/): Malicious code in strawberry-qqh-project (npm) (malicious package) - [MAL-2025-34056](https://insights.sbomify.com/MAL-2025-34056/): Malicious code in strawberry-q4s-project (npm) (malicious package) - [MAL-2025-34055](https://insights.sbomify.com/MAL-2025-34055/): Malicious code in strawberry-pxr-project (npm) (malicious package) - [MAL-2025-34054](https://insights.sbomify.com/MAL-2025-34054/): Malicious code in strawberry-oub-project (npm) (malicious package) - [MAL-2025-34053](https://insights.sbomify.com/MAL-2025-34053/): Malicious code in strawberry-oscar-xnsv (npm) (malicious package) - [MAL-2025-34052](https://insights.sbomify.com/MAL-2025-34052/): Malicious code in strawberry-orange-omxd (npm) (malicious package) - [MAL-2025-34051](https://insights.sbomify.com/MAL-2025-34051/): Malicious code in strawberry-orange-lrrr (npm) (malicious package) - [MAL-2025-34050](https://insights.sbomify.com/MAL-2025-34050/): Malicious code in strawberry-november-honeydew-nfjew (npm) (malicious package) - [MAL-2025-3405](https://insights.sbomify.com/MAL-2025-3405/): Malicious code in malwaretestingg (npm) (malicious package) - [MAL-2025-34049](https://insights.sbomify.com/MAL-2025-34049/): Malicious code in strawberry-nectarine-quebec-jgsps (npm) (malicious package) - [MAL-2025-34048](https://insights.sbomify.com/MAL-2025-34048/): Malicious code in strawberry-nectarine-hotel-obfrc (npm) (malicious package) - [MAL-2025-34047](https://insights.sbomify.com/MAL-2025-34047/): Malicious code in strawberry-mbm-project (npm) (malicious package) - [MAL-2025-34046](https://insights.sbomify.com/MAL-2025-34046/): Malicious code in strawberry-mango-edqf (npm) (malicious package) - [MAL-2025-34045](https://insights.sbomify.com/MAL-2025-34045/): Malicious code in strawberry-mango-bmtw (npm) (malicious package) - [MAL-2025-34044](https://insights.sbomify.com/MAL-2025-34044/): Malicious code in strawberry-lima-fdnx (npm) (malicious package) - [MAL-2025-34043](https://insights.sbomify.com/MAL-2025-34043/): Malicious code in strawberry-kiwi-hvgp (npm) (malicious package) - [MAL-2025-34042](https://insights.sbomify.com/MAL-2025-34042/): Malicious code in strawberry-kiwi-fig-bsywv (npm) (malicious package) - [MAL-2025-34041](https://insights.sbomify.com/MAL-2025-34041/): Malicious code in strawberry-kiwi-dpyq (npm) (malicious package) - [MAL-2025-34040](https://insights.sbomify.com/MAL-2025-34040/): Malicious code in strawberry-juliet-victor-oectm (npm) (malicious package) - [MAL-2025-3404](https://insights.sbomify.com/MAL-2025-3404/): Malicious code in liquity2 (npm) (malicious package) - [MAL-2025-34039](https://insights.sbomify.com/MAL-2025-34039/): Malicious code in strawberry-inferno-z1s3 (npm) (malicious package) - [MAL-2025-34038](https://insights.sbomify.com/MAL-2025-34038/): Malicious code in strawberry-india-banana-toqmw (npm) (malicious package) - [MAL-2025-34037](https://insights.sbomify.com/MAL-2025-34037/): Malicious code in strawberry-i70-project (npm) (malicious package) - [MAL-2025-34036](https://insights.sbomify.com/MAL-2025-34036/): Malicious code in strawberry-hotel-diud (npm) (malicious package) - [MAL-2025-34035](https://insights.sbomify.com/MAL-2025-34035/): Malicious code in strawberry-helicopter-ff17 (npm) (malicious package) - [MAL-2025-34034](https://insights.sbomify.com/MAL-2025-34034/): Malicious code in strawberry-gjs-project (npm) (malicious package) - [MAL-2025-34033](https://insights.sbomify.com/MAL-2025-34033/): Malicious code in strawberry-foxtrot-yqfv (npm) (malicious package) - [MAL-2025-34032](https://insights.sbomify.com/MAL-2025-34032/): Malicious code in strawberry-fig-alpha-vemud (npm) (malicious package) - [MAL-2025-34031](https://insights.sbomify.com/MAL-2025-34031/): Malicious code in strawberry-elderberry-aiuv (npm) (malicious package) - [MAL-2025-34030](https://insights.sbomify.com/MAL-2025-34030/): Malicious code in strawberry-e5y-project (npm) (malicious package) - [MAL-2025-3403](https://insights.sbomify.com/MAL-2025-3403/): Malicious code in jobaline (npm) (malicious package) - [MAL-2025-34029](https://insights.sbomify.com/MAL-2025-34029/): Malicious code in strawberry-cxh-project (npm) (malicious package) - [MAL-2025-34028](https://insights.sbomify.com/MAL-2025-34028/): Malicious code in strawberry-cvc-project (npm) (malicious package) - [MAL-2025-34027](https://insights.sbomify.com/MAL-2025-34027/): Malicious code in strawberry-charlie-yjxr (npm) (malicious package) - [MAL-2025-34026](https://insights.sbomify.com/MAL-2025-34026/): Malicious code in strawberry-charlie-nbai (npm) (malicious package) - [MAL-2025-34025](https://insights.sbomify.com/MAL-2025-34025/): Malicious code in strawberry-bravo-honeydew-lvncg (npm) (malicious package) - [MAL-2025-34024](https://insights.sbomify.com/MAL-2025-34024/): Malicious code in strawberry-apple-mnnx (npm) (malicious package) - [MAL-2025-34023](https://insights.sbomify.com/MAL-2025-34023/): Malicious code in strawberry-apple-hptg (npm) (malicious package) - [MAL-2025-34022](https://insights.sbomify.com/MAL-2025-34022/): Malicious code in strawberry-almond-hqkl (npm) (malicious package) - [MAL-2025-34021](https://insights.sbomify.com/MAL-2025-34021/): Malicious code in strawberry-91w-project (npm) (malicious package) - [MAL-2025-34020](https://insights.sbomify.com/MAL-2025-34020/): Malicious code in strawberry-7b9-project (npm) (malicious package) - [MAL-2025-3402](https://insights.sbomify.com/MAL-2025-3402/): Malicious code in jios (npm) (malicious package) - [MAL-2025-34019](https://insights.sbomify.com/MAL-2025-34019/): Malicious code in strawberry-74v-project (npm) (malicious package) - [MAL-2025-34018](https://insights.sbomify.com/MAL-2025-34018/): Malicious code in strawberry-37a-project (npm) (malicious package) - [MAL-2025-34017](https://insights.sbomify.com/MAL-2025-34017/): Malicious code in strawberry-29r-project (npm) (malicious package) - [MAL-2025-34016](https://insights.sbomify.com/MAL-2025-34016/): Malicious code in strawberry-1n7-project (npm) (malicious package) - [MAL-2025-34015](https://insights.sbomify.com/MAL-2025-34015/): Malicious code in stratosphere-nodejs-gatsby-cosmogenic (npm) (malicious package) - [MAL-2025-34014](https://insights.sbomify.com/MAL-2025-34014/): Malicious code in stratosphere-meteor-testcafe-pulsar (npm) (malicious package) - [MAL-2025-34013](https://insights.sbomify.com/MAL-2025-34013/): Malicious code in stratosphere-membrane-geochemistry-ethology (npm) (malicious package) - [MAL-2025-34012](https://insights.sbomify.com/MAL-2025-34012/): Malicious code in stratigraphy-changelog-prettier-stylelint-sqlite (npm) (malicious package) - [MAL-2025-34011](https://insights.sbomify.com/MAL-2025-34011/): Malicious code in strapi-upload-aws-s3 (npm) (malicious package) - [MAL-2025-34010](https://insights.sbomify.com/MAL-2025-34010/): Malicious code in storybook-addon-data-roulette (npm) (malicious package) - [MAL-2025-3401](https://insights.sbomify.com/MAL-2025-3401/): Malicious code in https-agen-chii (npm) (malicious package) - [MAL-2025-34009](https://insights.sbomify.com/MAL-2025-34009/): Malicious code in stormxing (npm) (malicious package) - [MAL-2025-34008](https://insights.sbomify.com/MAL-2025-34008/): Malicious code in stormusa (npm) (malicious package) - [MAL-2025-34007](https://insights.sbomify.com/MAL-2025-34007/): Malicious code in stormondemand (npm) (malicious package) - [MAL-2025-34006](https://insights.sbomify.com/MAL-2025-34006/): Malicious code in stormblog (npm) (malicious package) - [MAL-2025-34005](https://insights.sbomify.com/MAL-2025-34005/): Malicious code in storj-playwright-ui (npm) (malicious package) - [MAL-2025-34004](https://insights.sbomify.com/MAL-2025-34004/): Malicious code in storiapp (npm) (malicious package) - [MAL-2025-34003](https://insights.sbomify.com/MAL-2025-34003/): Malicious code in storeidcloud (npm) (malicious package) - [MAL-2025-34002](https://insights.sbomify.com/MAL-2025-34002/): Malicious code in storeid (npm) (malicious package) - [MAL-2025-34001](https://insights.sbomify.com/MAL-2025-34001/): Malicious code in storefront-kit-react (npm) (malicious package) - [MAL-2025-34000](https://insights.sbomify.com/MAL-2025-34000/): Malicious code in storedvalueserv-paypal (npm) (malicious package) - [MAL-2025-3400](https://insights.sbomify.com/MAL-2025-3400/): Malicious code in gemini-proxy-panel (npm) (malicious package) - [MAL-2025-340](https://insights.sbomify.com/MAL-2025-340/): Malicious code in libcrypt-test (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/735/