# Vulnerabilities published in 2025


- [MAL-2025-34](https://insights.sbomify.com/MAL-2025-34/): Malicious code in @shadowbyte/checkout-telemetry-agent (npm) (malicious package)
- [MAL-2025-33999](https://insights.sbomify.com/MAL-2025-33999/): Malicious code in storedock (npm) (malicious package)
- [MAL-2025-33998](https://insights.sbomify.com/MAL-2025-33998/): Malicious code in storagefire (npm) (malicious package)
- [MAL-2025-33997](https://insights.sbomify.com/MAL-2025-33997/): Malicious code in stopmotor (npm) (malicious package)
- [MAL-2025-33996](https://insights.sbomify.com/MAL-2025-33996/): Malicious code in stop-vuepress-augmentedreality-dactyl (npm) (malicious package)
- [MAL-2025-33995](https://insights.sbomify.com/MAL-2025-33995/): Malicious code in stop-neutrino-altair-astrobiology (npm) (malicious package)
- [MAL-2025-33994](https://insights.sbomify.com/MAL-2025-33994/): Malicious code in stop-galaxy-commitlint-config-angular-parallax (npm) (malicious package)
- [MAL-2025-33993](https://insights.sbomify.com/MAL-2025-33993/): Malicious code in stolid (npm) (malicious package)
- [MAL-2025-33992](https://insights.sbomify.com/MAL-2025-33992/): Malicious code in stockwatcher (npm) (malicious package)
- [MAL-2025-33991](https://insights.sbomify.com/MAL-2025-33991/): Malicious code in stocatto (npm) (malicious package)
- [MAL-2025-33990](https://insights.sbomify.com/MAL-2025-33990/): Malicious code in stimmapp (npm) (malicious package)
- [MAL-2025-3399](https://insights.sbomify.com/MAL-2025-3399/): Malicious code in freo-design-system (npm) (malicious package)
- [MAL-2025-33989](https://insights.sbomify.com/MAL-2025-33989/): Malicious code in stereocam (npm) (malicious package)
- [MAL-2025-33988](https://insights.sbomify.com/MAL-2025-33988/): Malicious code in stepped (npm) (malicious package)
- [MAL-2025-33987](https://insights.sbomify.com/MAL-2025-33987/): Malicious code in stepbatch2023-mylib (npm) (malicious package)
- [MAL-2025-33986](https://insights.sbomify.com/MAL-2025-33986/): Malicious code in steklov (npm) (malicious package)
- [MAL-2025-33985](https://insights.sbomify.com/MAL-2025-33985/): Malicious code in stegogami (npm) (malicious package)
- [MAL-2025-33984](https://insights.sbomify.com/MAL-2025-33984/): Malicious code in stegfs (npm) (malicious package)
- [MAL-2025-33983](https://insights.sbomify.com/MAL-2025-33983/): Malicious code in steganography-superflare-charon-antares (npm) (malicious package)
- [MAL-2025-33982](https://insights.sbomify.com/MAL-2025-33982/): Malicious code in steganography-dactyl-css-loader-radiometric (npm) (malicious package)
- [MAL-2025-33981](https://insights.sbomify.com/MAL-2025-33981/): Malicious code in steganography-astrophysics-pyxis-photon (npm) (malicious package)
- [MAL-2025-33980](https://insights.sbomify.com/MAL-2025-33980/): Malicious code in stedin-ssp (npm) (malicious package)
- [MAL-2025-3398](https://insights.sbomify.com/MAL-2025-3398/): Malicious code in fcw-dashboard-components (npm) (malicious package)
- [MAL-2025-33979](https://insights.sbomify.com/MAL-2025-33979/): Malicious code in stedin-notes (npm) (malicious package)
- [MAL-2025-33978](https://insights.sbomify.com/MAL-2025-33978/): Malicious code in steamuniversal-api (npm) (malicious package)
- [MAL-2025-33977](https://insights.sbomify.com/MAL-2025-33977/): Malicious code in steam-digital-card-card108 (npm) (malicious package)
- [MAL-2025-33976](https://insights.sbomify.com/MAL-2025-33976/): Malicious code in steam-balance-today850 (npm) (malicious package)
- [MAL-2025-33975](https://insights.sbomify.com/MAL-2025-33975/): Malicious code in steam-balance-today763 (npm) (malicious package)
- [MAL-2025-33974](https://insights.sbomify.com/MAL-2025-33974/): Malicious code in steam-balance-today660 (npm) (malicious package)
- [MAL-2025-33973](https://insights.sbomify.com/MAL-2025-33973/): Malicious code in steam-balance-today528 (npm) (malicious package)
- [MAL-2025-33972](https://insights.sbomify.com/MAL-2025-33972/): Malicious code in steam-balance-today050 (npm) (malicious package)
- [MAL-2025-33971](https://insights.sbomify.com/MAL-2025-33971/): Malicious code in stealjon2 (npm) (malicious package)
- [MAL-2025-33970](https://insights.sbomify.com/MAL-2025-33970/): Malicious code in stealjon (npm) (malicious package)
- [MAL-2025-3397](https://insights.sbomify.com/MAL-2025-3397/): Malicious code in eslint-config-bfx-ui (npm) (malicious package)
- [MAL-2025-33969](https://insights.sbomify.com/MAL-2025-33969/): Malicious code in steal-ur-stuff (npm) (malicious package)
- [MAL-2025-33968](https://insights.sbomify.com/MAL-2025-33968/): Malicious code in staymo (npm) (malicious package)
- [MAL-2025-33967](https://insights.sbomify.com/MAL-2025-33967/): Malicious code in stax-cli (npm) (malicious package)
- [MAL-2025-33966](https://insights.sbomify.com/MAL-2025-33966/): Malicious code in stautses (npm) (malicious package)
- [MAL-2025-33965](https://insights.sbomify.com/MAL-2025-33965/): Malicious code in statusyo (npm) (malicious package)
- [MAL-2025-33964](https://insights.sbomify.com/MAL-2025-33964/): Malicious code in statuscml (npm) (malicious package)
- [MAL-2025-33963](https://insights.sbomify.com/MAL-2025-33963/): Malicious code in statusaas (npm) (malicious package)
- [MAL-2025-33962](https://insights.sbomify.com/MAL-2025-33962/): Malicious code in statsd-instrument (npm) (malicious package)
- [MAL-2025-33961](https://insights.sbomify.com/MAL-2025-33961/): Malicious code in stats-pattern-library (npm) (malicious package)
- [MAL-2025-33960](https://insights.sbomify.com/MAL-2025-33960/): Malicious code in stats-core-js-react-components (npm) (malicious package)
- [MAL-2025-3396](https://insights.sbomify.com/MAL-2025-3396/): Malicious code in editor-inscriptions (npm) (malicious package)
- [MAL-2025-33959](https://insights.sbomify.com/MAL-2025-33959/): Malicious code in statom (npm) (malicious package)
- [MAL-2025-33958](https://insights.sbomify.com/MAL-2025-33958/): Malicious code in stationery-themes (npm) (malicious package)
- [MAL-2025-33957](https://insights.sbomify.com/MAL-2025-33957/): Malicious code in static-view-bad-easy-tree (npm) (malicious package)
- [MAL-2025-33956](https://insights.sbomify.com/MAL-2025-33956/): Malicious code in static-jmodule (npm) (malicious package)
- [MAL-2025-33955](https://insights.sbomify.com/MAL-2025-33955/): Malicious code in starwars-names-lib2 (npm) (malicious package)
- [MAL-2025-33954](https://insights.sbomify.com/MAL-2025-33954/): Malicious code in start-scorpius-toml-build (npm) (malicious package)
- [MAL-2025-33953](https://insights.sbomify.com/MAL-2025-33953/): Malicious code in start-quito-pino-kardashevscale (npm) (malicious package)
- [MAL-2025-33952](https://insights.sbomify.com/MAL-2025-33952/): Malicious code in stars-colors (npm) (malicious package)
- [MAL-2025-33951](https://insights.sbomify.com/MAL-2025-33951/): Malicious code in stars-color (npm) (malicious package)
- [MAL-2025-33950](https://insights.sbomify.com/MAL-2025-33950/): Malicious code in starmaint (npm) (malicious package)
- [MAL-2025-3395](https://insights.sbomify.com/MAL-2025-3395/): Malicious code in dowload_ebok_warrior_cats_vision_von_schatten_die_mission_de_by_erin_hunter_djec8 (npm) (malicious package)
- [MAL-2025-33949](https://insights.sbomify.com/MAL-2025-33949/): Malicious code in starkok (npm) (malicious package)
- [MAL-2025-33948](https://insights.sbomify.com/MAL-2025-33948/): Malicious code in starii (npm) (malicious package)
- [MAL-2025-33947](https://insights.sbomify.com/MAL-2025-33947/): Malicious code in stardork (npm) (malicious package)
- [MAL-2025-33946](https://insights.sbomify.com/MAL-2025-33946/): Malicious code in starcrash (npm) (malicious package)
- [MAL-2025-33945](https://insights.sbomify.com/MAL-2025-33945/): Malicious code in starchup-integrator (npm) (malicious package)
- [MAL-2025-33944](https://insights.sbomify.com/MAL-2025-33944/): Malicious code in starbucks (npm) (malicious package)
- [MAL-2025-33943](https://insights.sbomify.com/MAL-2025-33943/): Malicious code in star-xcscn-3co6s-moonlight-project (npm) (malicious package)
- [MAL-2025-33942](https://insights.sbomify.com/MAL-2025-33942/): Malicious code in star-x0bar-6z7rk-kelp-project (npm) (malicious package)
- [MAL-2025-33941](https://insights.sbomify.com/MAL-2025-33941/): Malicious code in star-volcano-sfm016-project (npm) (malicious package)
- [MAL-2025-33940](https://insights.sbomify.com/MAL-2025-33940/): Malicious code in star-violet-rum512-project (npm) (malicious package)
- [MAL-2025-3394](https://insights.sbomify.com/MAL-2025-3394/): Malicious code in dowload_ebok_verrassend_aanzoek_by_andie_brock_4mly7 (npm) (malicious package)
- [MAL-2025-33939](https://insights.sbomify.com/MAL-2025-33939/): Malicious code in star-topaz-rxz949-project (npm) (malicious package)
- [MAL-2025-33938](https://insights.sbomify.com/MAL-2025-33938/): Malicious code in star-tide-efs535-project (npm) (malicious package)
- [MAL-2025-33937](https://insights.sbomify.com/MAL-2025-33937/): Malicious code in star-thunder-ija894-project (npm) (malicious package)
- [MAL-2025-33936](https://insights.sbomify.com/MAL-2025-33936/): Malicious code in star-t8z5p-kwjzn-fern-project (npm) (malicious package)
- [MAL-2025-33935](https://insights.sbomify.com/MAL-2025-33935/): Malicious code in star-su6b7-28fkl-quasar-project (npm) (malicious package)
- [MAL-2025-33934](https://insights.sbomify.com/MAL-2025-33934/): Malicious code in star-spruce-ftf365-project (npm) (malicious package)
- [MAL-2025-33933](https://insights.sbomify.com/MAL-2025-33933/): Malicious code in star-nugget-aeu696-project (npm) (malicious package)
- [MAL-2025-33932](https://insights.sbomify.com/MAL-2025-33932/): Malicious code in star-nimbus-koc547-project (npm) (malicious package)
- [MAL-2025-33931](https://insights.sbomify.com/MAL-2025-33931/): Malicious code in star-meadow-ftp720-project (npm) (malicious package)
- [MAL-2025-33930](https://insights.sbomify.com/MAL-2025-33930/): Malicious code in star-jungle-wzr074-project (npm) (malicious package)
- [MAL-2025-3393](https://insights.sbomify.com/MAL-2025-3393/): Malicious code in dowload_ebok_tragic_design_by_jonathan_shariat_cynthia_savard_saucier_0jkyy (npm) (malicious package)
- [MAL-2025-33929](https://insights.sbomify.com/MAL-2025-33929/): Malicious code in star-falcon-jxi928-project (npm) (malicious package)
- [MAL-2025-33928](https://insights.sbomify.com/MAL-2025-33928/): Malicious code in star-execute-float-try-earth (npm) (malicious package)
- [MAL-2025-33927](https://insights.sbomify.com/MAL-2025-33927/): Malicious code in star-emerald-gwd610-project (npm) (malicious package)
- [MAL-2025-33926](https://insights.sbomify.com/MAL-2025-33926/): Malicious code in star-elephant-ikk119-project (npm) (malicious package)
- [MAL-2025-33925](https://insights.sbomify.com/MAL-2025-33925/): Malicious code in star-dove-bvm021-project (npm) (malicious package)
- [MAL-2025-33924](https://insights.sbomify.com/MAL-2025-33924/): Malicious code in star-dewdrop-zce411-project (npm) (malicious package)
- [MAL-2025-33923](https://insights.sbomify.com/MAL-2025-33923/): Malicious code in star-cold-sudo-encrypt-void (npm) (malicious package)
- [MAL-2025-33922](https://insights.sbomify.com/MAL-2025-33922/): Malicious code in star-cat-fmn497-project (npm) (malicious package)
- [MAL-2025-33921](https://insights.sbomify.com/MAL-2025-33921/): Malicious code in star-blossom-fex500-project (npm) (malicious package)
- [MAL-2025-33920](https://insights.sbomify.com/MAL-2025-33920/): Malicious code in star-awk-interface-final-psi (npm) (malicious package)
- [MAL-2025-3392](https://insights.sbomify.com/MAL-2025-3392/): Malicious code in dowload_ebok_si_la_verdad_te_incomoda_no_leas_este_libro_by_armando_r_manjarres_0qwta (npm) (malicious package)
- [MAL-2025-33919](https://insights.sbomify.com/MAL-2025-33919/): Malicious code in star-arctic-jnt261-project (npm) (malicious package)
- [MAL-2025-33918](https://insights.sbomify.com/MAL-2025-33918/): Malicious code in star-abstract-epsilon-log-pipe (npm) (malicious package)
- [MAL-2025-33917](https://insights.sbomify.com/MAL-2025-33917/): Malicious code in star-08q34-uf2ar-pinnacle-project (npm) (malicious package)
- [MAL-2025-33916](https://insights.sbomify.com/MAL-2025-33916/): Malicious code in standardwebappwebwebwebwebwebwebwebweb (npm) (malicious package)
- [MAL-2025-33915](https://insights.sbomify.com/MAL-2025-33915/): Malicious code in standardwebappwebwebwebwebwebwebweb (npm) (malicious package)
- [MAL-2025-33914](https://insights.sbomify.com/MAL-2025-33914/): Malicious code in standardwebappwebwebwebwebwebweb (npm) (malicious package)
- [MAL-2025-33913](https://insights.sbomify.com/MAL-2025-33913/): Malicious code in standardwebappwebwebwebwebweb (npm) (malicious package)
- [MAL-2025-33912](https://insights.sbomify.com/MAL-2025-33912/): Malicious code in standardwebappwebwebwebweb (npm) (malicious package)
- [MAL-2025-33911](https://insights.sbomify.com/MAL-2025-33911/): Malicious code in standardwebappwebwebweb (npm) (malicious package)
- [MAL-2025-33910](https://insights.sbomify.com/MAL-2025-33910/): Malicious code in standardwebappwebweb (npm) (malicious package)
- [MAL-2025-3391](https://insights.sbomify.com/MAL-2025-3391/): --- _-= Per source details. (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/736/