# Vulnerabilities published in 2025


- [MAL-2025-33819](https://insights.sbomify.com/MAL-2025-33819/): Malicious code in spruce-icicle-dod907-project (npm) (malicious package)
- [MAL-2025-33818](https://insights.sbomify.com/MAL-2025-33818/): Malicious code in spruce-hollow-ahw924-project (npm) (malicious package)
- [MAL-2025-33817](https://insights.sbomify.com/MAL-2025-33817/): Malicious code in spruce-hill-gxm423-project (npm) (malicious package)
- [MAL-2025-33816](https://insights.sbomify.com/MAL-2025-33816/): Malicious code in spruce-glacier-hrx832-project (npm) (malicious package)
- [MAL-2025-33815](https://insights.sbomify.com/MAL-2025-33815/): Malicious code in spruce-fennel-n8s7 (npm) (malicious package)
- [MAL-2025-33814](https://insights.sbomify.com/MAL-2025-33814/): Malicious code in spruce-falcon-ylk807-project (npm) (malicious package)
- [MAL-2025-33813](https://insights.sbomify.com/MAL-2025-33813/): Malicious code in spruce-dolphin-rhf664-project (npm) (malicious package)
- [MAL-2025-33812](https://insights.sbomify.com/MAL-2025-33812/): Malicious code in spruce-blackhole-g983 (npm) (malicious package)
- [MAL-2025-33811](https://insights.sbomify.com/MAL-2025-33811/): Malicious code in spruce-bamboo-hoe982-project (npm) (malicious package)
- [MAL-2025-33810](https://insights.sbomify.com/MAL-2025-33810/): Malicious code in sprrepo (npm) (malicious package)
- [MAL-2025-3381](https://insights.sbomify.com/MAL-2025-3381/): Malicious code in bespoke-es (npm) (malicious package)
- [MAL-2025-33809](https://insights.sbomify.com/MAL-2025-33809/): Malicious code in sprout-wcm-service (npm) (malicious package)
- [MAL-2025-33808](https://insights.sbomify.com/MAL-2025-33808/): Malicious code in spritopia (npm) (malicious package)
- [MAL-2025-33807](https://insights.sbomify.com/MAL-2025-33807/): Malicious code in sprinx-crm-ui-activity (npm) (malicious package)
- [MAL-2025-33806](https://insights.sbomify.com/MAL-2025-33806/): Malicious code in springxj (npm) (malicious package)
- [MAL-2025-33805](https://insights.sbomify.com/MAL-2025-33805/): Malicious code in springpad (npm) (malicious package)
- [MAL-2025-33804](https://insights.sbomify.com/MAL-2025-33804/): Malicious code in spreebee (npm) (malicious package)
- [MAL-2025-33803](https://insights.sbomify.com/MAL-2025-33803/): Malicious code in sprace (npm) (malicious package)
- [MAL-2025-33802](https://insights.sbomify.com/MAL-2025-33802/): Malicious code in spotshot (npm) (malicious package)
- [MAL-2025-33801](https://insights.sbomify.com/MAL-2025-33801/): Malicious code in spotping (npm) (malicious package)
- [MAL-2025-33800](https://insights.sbomify.com/MAL-2025-33800/): Malicious code in spotish (npm) (malicious package)
- [MAL-2025-3380](https://insights.sbomify.com/MAL-2025-3380/): Malicious code in besec (npm) (malicious package)
- [MAL-2025-338](https://insights.sbomify.com/MAL-2025-338/): Malicious code in libcrypt (npm) (malicious package)
- [MAL-2025-33799](https://insights.sbomify.com/MAL-2025-33799/): Malicious code in spotify-talos (npm) (malicious package)
- [MAL-2025-33798](https://insights.sbomify.com/MAL-2025-33798/): Malicious code in spotify-heroic-datasource (npm) (malicious package)
- [MAL-2025-33797](https://insights.sbomify.com/MAL-2025-33797/): Malicious code in spotify-apollo-oss-site (npm) (malicious package)
- [MAL-2025-33796](https://insights.sbomify.com/MAL-2025-33796/): Malicious code in spotibye (npm) (malicious package)
- [MAL-2025-33795](https://insights.sbomify.com/MAL-2025-33795/): Malicious code in spotbook (npm) (malicious package)
- [MAL-2025-33794](https://insights.sbomify.com/MAL-2025-33794/): Malicious code in sportstream-widgets (npm) (malicious package)
- [MAL-2025-33793](https://insights.sbomify.com/MAL-2025-33793/): Malicious code in sportscup (npm) (malicious package)
- [MAL-2025-33792](https://insights.sbomify.com/MAL-2025-33792/): Malicious code in sporest (npm) (malicious package)
- [MAL-2025-33791](https://insights.sbomify.com/MAL-2025-33791/): Malicious code in spoonx (npm) (malicious package)
- [MAL-2025-33790](https://insights.sbomify.com/MAL-2025-33790/): Malicious code in spoom (npm) (malicious package)
- [MAL-2025-3379](https://insights.sbomify.com/MAL-2025-3379/): Malicious code in audio_helper_utils (npm) (malicious package)
- [MAL-2025-33789](https://insights.sbomify.com/MAL-2025-33789/): Malicious code in spookyjs (npm) (malicious package)
- [MAL-2025-33788](https://insights.sbomify.com/MAL-2025-33788/): Malicious code in spojcodes (npm) (malicious package)
- [MAL-2025-33787](https://insights.sbomify.com/MAL-2025-33787/): Malicious code in spodelime (npm) (malicious package)
- [MAL-2025-33786](https://insights.sbomify.com/MAL-2025-33786/): Malicious code in spocktest (npm) (malicious package)
- [MAL-2025-33785](https://insights.sbomify.com/MAL-2025-33785/): Malicious code in splunk_formatter (npm) (malicious package)
- [MAL-2025-33784](https://insights.sbomify.com/MAL-2025-33784/): Malicious code in splocator (npm) (malicious package)
- [MAL-2025-33783](https://insights.sbomify.com/MAL-2025-33783/): Malicious code in splncs (npm) (malicious package)
- [MAL-2025-33782](https://insights.sbomify.com/MAL-2025-33782/): Malicious code in splitop (npm) (malicious package)
- [MAL-2025-33781](https://insights.sbomify.com/MAL-2025-33781/): Malicious code in splitit (npm) (malicious package)
- [MAL-2025-33780](https://insights.sbomify.com/MAL-2025-33780/): Malicious code in splitio (npm) (malicious package)
- [MAL-2025-3378](https://insights.sbomify.com/MAL-2025-3378/): Malicious code in anton-uploader (npm) (malicious package)
- [MAL-2025-33779](https://insights.sbomify.com/MAL-2025-33779/): Malicious code in splitable (npm) (malicious package)
- [MAL-2025-33778](https://insights.sbomify.com/MAL-2025-33778/): Malicious code in split-file-events (npm) (malicious package)
- [MAL-2025-33777](https://insights.sbomify.com/MAL-2025-33777/): Malicious code in spitshine (npm) (malicious package)
- [MAL-2025-33776](https://insights.sbomify.com/MAL-2025-33776/): Malicious code in spitbomb (npm) (malicious package)
- [MAL-2025-33775](https://insights.sbomify.com/MAL-2025-33775/): Malicious code in spirittimers (npm) (malicious package)
- [MAL-2025-33774](https://insights.sbomify.com/MAL-2025-33774/): Malicious code in spirittests (npm) (malicious package)
- [MAL-2025-33773](https://insights.sbomify.com/MAL-2025-33773/): Malicious code in spirittemplate (npm) (malicious package)
- [MAL-2025-33772](https://insights.sbomify.com/MAL-2025-33772/): Malicious code in spiritssl (npm) (malicious package)
- [MAL-2025-33771](https://insights.sbomify.com/MAL-2025-33771/): Malicious code in spiritrscandir (npm) (malicious package)
- [MAL-2025-33770](https://insights.sbomify.com/MAL-2025-33770/): Malicious code in spiritroutes (npm) (malicious package)
- [MAL-2025-3377](https://insights.sbomify.com/MAL-2025-3377/): Malicious code in angular2-tesla-common-1 (npm) (malicious package)
- [MAL-2025-33769](https://insights.sbomify.com/MAL-2025-33769/): Malicious code in spiritproxy (npm) (malicious package)
- [MAL-2025-33768](https://insights.sbomify.com/MAL-2025-33768/): Malicious code in spiritnode (npm) (malicious package)
- [MAL-2025-33767](https://insights.sbomify.com/MAL-2025-33767/): Malicious code in spiritmailer (npm) (malicious package)
- [MAL-2025-33766](https://insights.sbomify.com/MAL-2025-33766/): Malicious code in spiritjsdoc (npm) (malicious package)
- [MAL-2025-33765](https://insights.sbomify.com/MAL-2025-33765/): Malicious code in spiritfiles (npm) (malicious package)
- [MAL-2025-33764](https://insights.sbomify.com/MAL-2025-33764/): Malicious code in spiritdependencies (npm) (malicious package)
- [MAL-2025-33763](https://insights.sbomify.com/MAL-2025-33763/): Malicious code in spiritcore (npm) (malicious package)
- [MAL-2025-33762](https://insights.sbomify.com/MAL-2025-33762/): Malicious code in spiritconsole (npm) (malicious package)
- [MAL-2025-33761](https://insights.sbomify.com/MAL-2025-33761/): Malicious code in spiritconfigs (npm) (malicious package)
- [MAL-2025-33760](https://insights.sbomify.com/MAL-2025-33760/): Malicious code in spiritbots (npm) (malicious package)
- [MAL-2025-3376](https://insights.sbomify.com/MAL-2025-3376/): Malicious code in amazon-chime-sdk-js-exp (npm) (malicious package)
- [MAL-2025-33759](https://insights.sbomify.com/MAL-2025-33759/): Malicious code in spiral-connectservice (npm) (malicious package)
- [MAL-2025-33758](https://insights.sbomify.com/MAL-2025-33758/): Malicious code in spiral-betservices (npm) (malicious package)
- [MAL-2025-33757](https://insights.sbomify.com/MAL-2025-33757/): Malicious code in spipad (npm) (malicious package)
- [MAL-2025-33756](https://insights.sbomify.com/MAL-2025-33756/): Malicious code in spinsv (npm) (malicious package)
- [MAL-2025-33755](https://insights.sbomify.com/MAL-2025-33755/): Malicious code in spinoff (npm) (malicious package)
- [MAL-2025-33754](https://insights.sbomify.com/MAL-2025-33754/): Malicious code in spinner-neptunology-selenology-cosmology (npm) (malicious package)
- [MAL-2025-33753](https://insights.sbomify.com/MAL-2025-33753/): Malicious code in spinmaker (npm) (malicious package)
- [MAL-2025-33752](https://insights.sbomify.com/MAL-2025-33752/): Malicious code in spinit (npm) (malicious package)
- [MAL-2025-33751](https://insights.sbomify.com/MAL-2025-33751/): Malicious code in spinattic (npm) (malicious package)
- [MAL-2025-33750](https://insights.sbomify.com/MAL-2025-33750/): Malicious code in spinach-pulsar-mttw (npm) (malicious package)
- [MAL-2025-3375](https://insights.sbomify.com/MAL-2025-3375/): Malicious code in afterlogic-aurora-platform (npm) (malicious package)
- [MAL-2025-33749](https://insights.sbomify.com/MAL-2025-33749/): Malicious code in spinach-ocean-dxkt (npm) (malicious package)
- [MAL-2025-33748](https://insights.sbomify.com/MAL-2025-33748/): Malicious code in spinach-mike-mw0v (npm) (malicious package)
- [MAL-2025-33747](https://insights.sbomify.com/MAL-2025-33747/): Malicious code in spinach-kuiper-3ojs (npm) (malicious package)
- [MAL-2025-33746](https://insights.sbomify.com/MAL-2025-33746/): Malicious code in spin-web (npm) (malicious package)
- [MAL-2025-33745](https://insights.sbomify.com/MAL-2025-33745/): Malicious code in spicher (npm) (malicious package)
- [MAL-2025-33744](https://insights.sbomify.com/MAL-2025-33744/): Malicious code in spicedham (npm) (malicious package)
- [MAL-2025-33743](https://insights.sbomify.com/MAL-2025-33743/): Malicious code in spica-remark-prompts-phoenix (npm) (malicious package)
- [MAL-2025-33742](https://insights.sbomify.com/MAL-2025-33742/): Malicious code in spica-heka-fetch-quasar (npm) (malicious package)
- [MAL-2025-33741](https://insights.sbomify.com/MAL-2025-33741/): Malicious code in spica-figures-tool-kardashevscale (npm) (malicious package)
- [MAL-2025-33740](https://insights.sbomify.com/MAL-2025-33740/): Malicious code in spica-commitlint-tailwindcss-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-3374](https://insights.sbomify.com/MAL-2025-3374/): Malicious code in @sporta-technology/sample-npm-package (npm) (malicious package)
- [MAL-2025-33739](https://insights.sbomify.com/MAL-2025-33739/): Malicious code in sphnix (npm) (malicious package)
- [MAL-2025-33738](https://insights.sbomify.com/MAL-2025-33738/): Malicious code in spell-check-test (npm) (malicious package)
- [MAL-2025-33737](https://insights.sbomify.com/MAL-2025-33737/): Malicious code in speleology-puppeteer-optimize-css-assets-webpack-plugin-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-33736](https://insights.sbomify.com/MAL-2025-33736/): Malicious code in speleology-nightwatch-centauri-sirius (npm) (malicious package)
- [MAL-2025-33735](https://insights.sbomify.com/MAL-2025-33735/): Malicious code in speleology-higgs-fomalhaut-iota (npm) (malicious package)
- [MAL-2025-33734](https://insights.sbomify.com/MAL-2025-33734/): Malicious code in speleology-cosmicsilence-javascript-sirius (npm) (malicious package)
- [MAL-2025-33733](https://insights.sbomify.com/MAL-2025-33733/): Malicious code in speleology-apollo-library-thuban (npm) (malicious package)
- [MAL-2025-33732](https://insights.sbomify.com/MAL-2025-33732/): Malicious code in spegularo (npm) (malicious package)
- [MAL-2025-33731](https://insights.sbomify.com/MAL-2025-33731/): Malicious code in speelhuis (npm) (malicious package)
- [MAL-2025-33730](https://insights.sbomify.com/MAL-2025-33730/): Malicious code in spectroscopy-spinner-version-request (npm) (malicious package)
- [MAL-2025-3373](https://insights.sbomify.com/MAL-2025-3373/): Malicious code in @sporta-technology/rn-components.text-input (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/738/