# Vulnerabilities published in 2025


- [MAL-2025-33729](https://insights.sbomify.com/MAL-2025-33729/): Malicious code in spectroscopy-mira-loopback-hexo (npm) (malicious package)
- [MAL-2025-33728](https://insights.sbomify.com/MAL-2025-33728/): Malicious code in spectron-webdriver-materialize-string-planckscale (npm) (malicious package)
- [MAL-2025-33727](https://insights.sbomify.com/MAL-2025-33727/): Malicious code in spectron-webdriver-install-figures-baryon (npm) (malicious package)
- [MAL-2025-33726](https://insights.sbomify.com/MAL-2025-33726/): Malicious code in spectron-webdriver-cross-env-galaxy-parallax (npm) (malicious package)
- [MAL-2025-33725](https://insights.sbomify.com/MAL-2025-33725/): Malicious code in spectron-webdriver-atlas-geochemistry-node-sass (npm) (malicious package)
- [MAL-2025-33724](https://insights.sbomify.com/MAL-2025-33724/): Malicious code in spectron-on-callback-colors (npm) (malicious package)
- [MAL-2025-33723](https://insights.sbomify.com/MAL-2025-33723/): Malicious code in spectron-inquirer-zenobia-dotenv (npm) (malicious package)
- [MAL-2025-33722](https://insights.sbomify.com/MAL-2025-33722/): Malicious code in spectron-hapi-quark-miranda (npm) (malicious package)
- [MAL-2025-33721](https://insights.sbomify.com/MAL-2025-33721/): Malicious code in spectron-gemini-dotenv-centaurus (npm) (malicious package)
- [MAL-2025-33720](https://insights.sbomify.com/MAL-2025-33720/): Malicious code in spectron-cli-duplex-unuk (npm) (malicious package)
- [MAL-2025-3372](https://insights.sbomify.com/MAL-2025-3372/): Malicious code in @sporta-technology/rn-components.appbar (npm) (malicious package)
- [MAL-2025-33719](https://insights.sbomify.com/MAL-2025-33719/): Malicious code in spectron-biomimicry-brane-betelgeuse (npm) (malicious package)
- [MAL-2025-33718](https://insights.sbomify.com/MAL-2025-33718/): Malicious code in spectron-astrobiology-iota-antares (npm) (malicious package)
- [MAL-2025-33717](https://insights.sbomify.com/MAL-2025-33717/): Malicious code in spdiscovery (npm) (malicious package)
- [MAL-2025-33716](https://insights.sbomify.com/MAL-2025-33716/): Malicious code in spbmrc (npm) (malicious package)
- [MAL-2025-33715](https://insights.sbomify.com/MAL-2025-33715/): Malicious code in spawn-vortex-development-epimetheus (npm) (malicious package)
- [MAL-2025-33714](https://insights.sbomify.com/MAL-2025-33714/): Malicious code in spawn-spinner-stop-callisto (npm) (malicious package)
- [MAL-2025-33713](https://insights.sbomify.com/MAL-2025-33713/): Malicious code in spawn-less-loader-enif-quark (npm) (malicious package)
- [MAL-2025-33712](https://insights.sbomify.com/MAL-2025-33712/): Malicious code in spawn-ganymede-arcturus-dione (npm) (malicious package)
- [MAL-2025-33711](https://insights.sbomify.com/MAL-2025-33711/): Malicious code in spavezbe (npm) (malicious package)
- [MAL-2025-33710](https://insights.sbomify.com/MAL-2025-33710/): Malicious code in spastic (npm) (malicious package)
- [MAL-2025-3371](https://insights.sbomify.com/MAL-2025-3371/): Malicious code in @sporta-technology/dream11_msd.tab-layout (npm) (malicious package)
- [MAL-2025-33709](https://insights.sbomify.com/MAL-2025-33709/): Malicious code in sparsity (npm) (malicious package)
- [MAL-2025-33708](https://insights.sbomify.com/MAL-2025-33708/): Malicious code in sparkymud (npm) (malicious package)
- [MAL-2025-33707](https://insights.sbomify.com/MAL-2025-33707/): Malicious code in sparkive (npm) (malicious package)
- [MAL-2025-33706](https://insights.sbomify.com/MAL-2025-33706/): Malicious code in sparkies (npm) (malicious package)
- [MAL-2025-33705](https://insights.sbomify.com/MAL-2025-33705/): Malicious code in spark-qsaum-zm2eq-knoll-project (npm) (malicious package)
- [MAL-2025-33704](https://insights.sbomify.com/MAL-2025-33704/): Malicious code in spark-kt0s0-rqyop-quicksilver-project (npm) (malicious package)
- [MAL-2025-33703](https://insights.sbomify.com/MAL-2025-33703/): Malicious code in spark-i9mci-p4tlg-jade-project (npm) (malicious package)
- [MAL-2025-33702](https://insights.sbomify.com/MAL-2025-33702/): Malicious code in spark-haven-uqa530-project (npm) (malicious package)
- [MAL-2025-33701](https://insights.sbomify.com/MAL-2025-33701/): Malicious code in spark-essence-igy405-project (npm) (malicious package)
- [MAL-2025-33700](https://insights.sbomify.com/MAL-2025-33700/): Malicious code in spark-b1q60-tph0d-frost-project (npm) (malicious package)
- [MAL-2025-3370](https://insights.sbomify.com/MAL-2025-3370/): Malicious code in @sporta-technology/dream11_msd.card (npm) (malicious package)
- [MAL-2025-337](https://insights.sbomify.com/MAL-2025-337/): Malicious code in legacy_vis_analyzer (npm) (malicious package)
- [MAL-2025-33699](https://insights.sbomify.com/MAL-2025-33699/): Malicious code in spark-6nas7-5mv2s-indigo-project (npm) (malicious package)
- [MAL-2025-33698](https://insights.sbomify.com/MAL-2025-33698/): Malicious code in sparctest (npm) (malicious package)
- [MAL-2025-33697](https://insights.sbomify.com/MAL-2025-33697/): Malicious code in spaceytd (npm) (malicious package)
- [MAL-2025-33696](https://insights.sbomify.com/MAL-2025-33696/): Malicious code in spacepool (npm) (malicious package)
- [MAL-2025-33695](https://insights.sbomify.com/MAL-2025-33695/): Malicious code in spacelike (npm) (malicious package)
- [MAL-2025-33694](https://insights.sbomify.com/MAL-2025-33694/): Malicious code in spacegold (npm) (malicious package)
- [MAL-2025-33693](https://insights.sbomify.com/MAL-2025-33693/): Malicious code in spacegems (npm) (malicious package)
- [MAL-2025-33692](https://insights.sbomify.com/MAL-2025-33692/): Malicious code in spa-test (npm) (malicious package)
- [MAL-2025-33691](https://insights.sbomify.com/MAL-2025-33691/): Malicious code in sp-tracking (npm) (malicious package)
- [MAL-2025-33690](https://insights.sbomify.com/MAL-2025-33690/): Malicious code in sp-tos (npm) (malicious package)
- [MAL-2025-3369](https://insights.sbomify.com/MAL-2025-3369/): Malicious code in @sporta-technology/d11-web-components.typography (npm) (malicious package)
- [MAL-2025-33689](https://insights.sbomify.com/MAL-2025-33689/): Malicious code in sp-shop-browse (npm) (malicious package)
- [MAL-2025-33688](https://insights.sbomify.com/MAL-2025-33688/): Malicious code in sowxdipvuejnlgzh (npm) (malicious package)
- [MAL-2025-33687](https://insights.sbomify.com/MAL-2025-33687/): Malicious code in sowome (npm) (malicious package)
- [MAL-2025-33686](https://insights.sbomify.com/MAL-2025-33686/): Malicious code in sovietjs (npm) (malicious package)
- [MAL-2025-33685](https://insights.sbomify.com/MAL-2025-33685/): Malicious code in souvenirs (npm) (malicious package)
- [MAL-2025-33684](https://insights.sbomify.com/MAL-2025-33684/): Malicious code in sousai (npm) (malicious package)
- [MAL-2025-33683](https://insights.sbomify.com/MAL-2025-33683/): Malicious code in sourev2 (npm) (malicious package)
- [MAL-2025-33682](https://insights.sbomify.com/MAL-2025-33682/): Malicious code in sourev1-fix (npm) (malicious package)
- [MAL-2025-33681](https://insights.sbomify.com/MAL-2025-33681/): Malicious code in sourev1 (npm) (malicious package)
- [MAL-2025-33680](https://insights.sbomify.com/MAL-2025-33680/): Malicious code in soure-fix (npm) (malicious package)
- [MAL-2025-3368](https://insights.sbomify.com/MAL-2025-3368/): Malicious code in @sporta-technology/d11-web-components.tooltip (npm) (malicious package)
- [MAL-2025-33679](https://insights.sbomify.com/MAL-2025-33679/): Malicious code in soupcycle (npm) (malicious package)
- [MAL-2025-33678](https://insights.sbomify.com/MAL-2025-33678/): Malicious code in soupcache (npm) (malicious package)
- [MAL-2025-33677](https://insights.sbomify.com/MAL-2025-33677/): Malicious code in soundrts (npm) (malicious package)
- [MAL-2025-33676](https://insights.sbomify.com/MAL-2025-33676/): Malicious code in soundoff (npm) (malicious package)
- [MAL-2025-33675](https://insights.sbomify.com/MAL-2025-33675/): Malicious code in soundmine (npm) (malicious package)
- [MAL-2025-33674](https://insights.sbomify.com/MAL-2025-33674/): Malicious code in soundee (npm) (malicious package)
- [MAL-2025-33673](https://insights.sbomify.com/MAL-2025-33673/): Malicious code in soundcloud-stream (npm) (malicious package)
- [MAL-2025-33672](https://insights.sbomify.com/MAL-2025-33672/): Malicious code in sosync (npm) (malicious package)
- [MAL-2025-33671](https://insights.sbomify.com/MAL-2025-33671/): Malicious code in sortsim (npm) (malicious package)
- [MAL-2025-33670](https://insights.sbomify.com/MAL-2025-33670/): Malicious code in sortcode (npm) (malicious package)
- [MAL-2025-3367](https://insights.sbomify.com/MAL-2025-3367/): Malicious code in @sporta-technology/d11-web-components.toggle-button (npm) (malicious package)
- [MAL-2025-33669](https://insights.sbomify.com/MAL-2025-33669/): Malicious code in sorbet-runtime-stub (npm) (malicious package)
- [MAL-2025-33668](https://insights.sbomify.com/MAL-2025-33668/): Malicious code in sorbet-rb (npm) (malicious package)
- [MAL-2025-33667](https://insights.sbomify.com/MAL-2025-33667/): Malicious code in soraneo-wallet-web (npm) (malicious package)
- [MAL-2025-33666](https://insights.sbomify.com/MAL-2025-33666/): Malicious code in sopolo (npm) (malicious package)
- [MAL-2025-33665](https://insights.sbomify.com/MAL-2025-33665/): Malicious code in sopipa (npm) (malicious package)
- [MAL-2025-33664](https://insights.sbomify.com/MAL-2025-33664/): Malicious code in sophos-localizations (npm) (malicious package)
- [MAL-2025-33663](https://insights.sbomify.com/MAL-2025-33663/): Malicious code in soomo-ui (npm) (malicious package)
- [MAL-2025-33662](https://insights.sbomify.com/MAL-2025-33662/): Malicious code in sonijohn (npm) (malicious package)
- [MAL-2025-33661](https://insights.sbomify.com/MAL-2025-33661/): Malicious code in sonicgame (npm) (malicious package)
- [MAL-2025-33660](https://insights.sbomify.com/MAL-2025-33660/): Malicious code in songwords (npm) (malicious package)
- [MAL-2025-3366](https://insights.sbomify.com/MAL-2025-3366/): Malicious code in @sporta-technology/d11-web-components.toggle (npm) (malicious package)
- [MAL-2025-33659](https://insights.sbomify.com/MAL-2025-33659/): Malicious code in song-z6fhn-g0hnk-yeti-project (npm) (malicious package)
- [MAL-2025-33658](https://insights.sbomify.com/MAL-2025-33658/): Malicious code in song-z62rq-uqmka-terra-project (npm) (malicious package)
- [MAL-2025-33657](https://insights.sbomify.com/MAL-2025-33657/): Malicious code in song-ytua9-lr9z1-nymph-project (npm) (malicious package)
- [MAL-2025-33656](https://insights.sbomify.com/MAL-2025-33656/): Malicious code in song-36t7m-akqee-dusk-project (npm) (malicious package)
- [MAL-2025-33655](https://insights.sbomify.com/MAL-2025-33655/): Malicious code in song-2dxrv-ugvt3-bramble-project (npm) (malicious package)
- [MAL-2025-33654](https://insights.sbomify.com/MAL-2025-33654/): Malicious code in sonerezh (npm) (malicious package)
- [MAL-2025-33653](https://insights.sbomify.com/MAL-2025-33653/): Malicious code in sonatype (npm) (malicious package)
- [MAL-2025-33652](https://insights.sbomify.com/MAL-2025-33652/): Malicious code in somtoday (npm) (malicious package)
- [MAL-2025-33651](https://insights.sbomify.com/MAL-2025-33651/): Malicious code in somepackagethatlupinsent (npm) (malicious package)
- [MAL-2025-33650](https://insights.sbomify.com/MAL-2025-33650/): Malicious code in some-neat-library (npm) (malicious package)
- [MAL-2025-3365](https://insights.sbomify.com/MAL-2025-3365/): Malicious code in @sporta-technology/d11-web-components.timeline (npm) (malicious package)
- [MAL-2025-33649](https://insights.sbomify.com/MAL-2025-33649/): Malicious code in solvix (npm) (malicious package)
- [MAL-2025-33648](https://insights.sbomify.com/MAL-2025-33648/): Malicious code in solstice_zhbqo_jvwoy_crown (npm) (malicious package)
- [MAL-2025-33647](https://insights.sbomify.com/MAL-2025-33647/): Malicious code in solstice_hu345_heho6_hush (npm) (malicious package)
- [MAL-2025-33646](https://insights.sbomify.com/MAL-2025-33646/): Malicious code in solstice_fow89_jhb20_fable (npm) (malicious package)
- [MAL-2025-33645](https://insights.sbomify.com/MAL-2025-33645/): Malicious code in solrtest (npm) (malicious package)
- [MAL-2025-33644](https://insights.sbomify.com/MAL-2025-33644/): Malicious code in solriser (npm) (malicious package)
- [MAL-2025-33643](https://insights.sbomify.com/MAL-2025-33643/): Malicious code in solonode (npm) (malicious package)
- [MAL-2025-33642](https://insights.sbomify.com/MAL-2025-33642/): Malicious code in solis-subduction-archaeometry-request (npm) (malicious package)
- [MAL-2025-33641](https://insights.sbomify.com/MAL-2025-33641/): Malicious code in solis-sagitta-bootstrap-altair (npm) (malicious package)
- [MAL-2025-33640](https://insights.sbomify.com/MAL-2025-33640/): Malicious code in solis-rimraf-cladistics-query (npm) (malicious package)
- [MAL-2025-3364](https://insights.sbomify.com/MAL-2025-3364/): Malicious code in @sporta-technology/d11-web-components.text-link (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/739/