# Vulnerabilities published in 2025


- [MAL-2025-33639](https://insights.sbomify.com/MAL-2025-33639/): Malicious code in solis-palynology-chromedriver-heka (npm) (malicious package)
- [MAL-2025-33638](https://insights.sbomify.com/MAL-2025-33638/): Malicious code in solis-kastra-rollup-io (npm) (malicious package)
- [MAL-2025-33637](https://insights.sbomify.com/MAL-2025-33637/): Malicious code in solis-exobiology-virgo-graviton (npm) (malicious package)
- [MAL-2025-33636](https://insights.sbomify.com/MAL-2025-33636/): Malicious code in solhint-rules (npm) (malicious package)
- [MAL-2025-33635](https://insights.sbomify.com/MAL-2025-33635/): Malicious code in solhint-plugin-erc2771 (npm) (malicious package)
- [MAL-2025-33634](https://insights.sbomify.com/MAL-2025-33634/): Malicious code in solemade (npm) (malicious package)
- [MAL-2025-33633](https://insights.sbomify.com/MAL-2025-33633/): Malicious code in soldemo (npm) (malicious package)
- [MAL-2025-33632](https://insights.sbomify.com/MAL-2025-33632/): Malicious code in solarnebula-sequelize-subscription-biogeochemistry (npm) (malicious package)
- [MAL-2025-33631](https://insights.sbomify.com/MAL-2025-33631/): Malicious code in solarnebula-nashira-galaxy-configstore (npm) (malicious package)
- [MAL-2025-33630](https://insights.sbomify.com/MAL-2025-33630/): Malicious code in solarnebula-higgs-transport-dorado (npm) (malicious package)
- [MAL-2025-3363](https://insights.sbomify.com/MAL-2025-3363/): Malicious code in @sporta-technology/d11-web-components.text-button (npm) (malicious package)
- [MAL-2025-33629](https://insights.sbomify.com/MAL-2025-33629/): Malicious code in solarnebula-exoplanet-mdx-australis (npm) (malicious package)
- [MAL-2025-33628](https://insights.sbomify.com/MAL-2025-33628/): Malicious code in solargl (npm) (malicious package)
- [MAL-2025-33627](https://insights.sbomify.com/MAL-2025-33627/): Malicious code in solara-roblox (npm) (malicious package)
- [MAL-2025-33626](https://insights.sbomify.com/MAL-2025-33626/): Malicious code in solara-patcher-legacy (npm) (malicious package)
- [MAL-2025-33625](https://insights.sbomify.com/MAL-2025-33625/): Malicious code in solana-wallet-discord-tracker (npm) (malicious package)
- [MAL-2025-33624](https://insights.sbomify.com/MAL-2025-33624/): Malicious code in solana-utils-sdk (npm) (malicious package)
- [MAL-2025-33623](https://insights.sbomify.com/MAL-2025-33623/): Malicious code in solace_z5s6g_mksge_moon (npm) (malicious package)
- [MAL-2025-33622](https://insights.sbomify.com/MAL-2025-33622/): Malicious code in solace_es7sz_t51gp_whisper (npm) (malicious package)
- [MAL-2025-33621](https://insights.sbomify.com/MAL-2025-33621/): Malicious code in solace_c82z2_kgeuo_fireworks (npm) (malicious package)
- [MAL-2025-33620](https://insights.sbomify.com/MAL-2025-33620/): Malicious code in solace_8we84_ndxmq_unicorn (npm) (malicious package)
- [MAL-2025-3362](https://insights.sbomify.com/MAL-2025-3362/): Malicious code in @sporta-technology/d11-web-components.text-area (npm) (malicious package)
- [MAL-2025-33619](https://insights.sbomify.com/MAL-2025-33619/): Malicious code in solace-xu1ut-rbll3-haven-project (npm) (malicious package)
- [MAL-2025-33618](https://insights.sbomify.com/MAL-2025-33618/): Malicious code in solace-qxoli-6mtci-rose-project (npm) (malicious package)
- [MAL-2025-33617](https://insights.sbomify.com/MAL-2025-33617/): Malicious code in solace-pguaq-e5wjq-coral-project (npm) (malicious package)
- [MAL-2025-33616](https://insights.sbomify.com/MAL-2025-33616/): Malicious code in solace-mu74p-ejd2u-verdant-project (npm) (malicious package)
- [MAL-2025-33615](https://insights.sbomify.com/MAL-2025-33615/): Malicious code in solace-fancy-gck139-project (npm) (malicious package)
- [MAL-2025-33614](https://insights.sbomify.com/MAL-2025-33614/): Malicious code in solace-brr3b-a5o89-velvet-project (npm) (malicious package)
- [MAL-2025-33613](https://insights.sbomify.com/MAL-2025-33613/): Malicious code in solace-3tzjm-jc60e-ember-project (npm) (malicious package)
- [MAL-2025-33612](https://insights.sbomify.com/MAL-2025-33612/): Malicious code in soket.js (npm) (malicious package)
- [MAL-2025-33611](https://insights.sbomify.com/MAL-2025-33611/): Malicious code in soket.io (npm) (malicious package)
- [MAL-2025-33610](https://insights.sbomify.com/MAL-2025-33610/): Malicious code in sokahub (npm) (malicious package)
- [MAL-2025-3361](https://insights.sbomify.com/MAL-2025-3361/): Malicious code in @sporta-technology/d11-web-components.tags.tags-status (npm) (malicious package)
- [MAL-2025-33609](https://insights.sbomify.com/MAL-2025-33609/): Malicious code in soiostest (npm) (malicious package)
- [MAL-2025-33608](https://insights.sbomify.com/MAL-2025-33608/): Malicious code in soheil-2-rj (npm) (malicious package)
- [MAL-2025-33607](https://insights.sbomify.com/MAL-2025-33607/): Malicious code in soheil-1-rj (npm) (malicious package)
- [MAL-2025-33606](https://insights.sbomify.com/MAL-2025-33606/): Malicious code in softzip (npm) (malicious package)
- [MAL-2025-33605](https://insights.sbomify.com/MAL-2025-33605/): Malicious code in softer_delete (npm) (malicious package)
- [MAL-2025-33604](https://insights.sbomify.com/MAL-2025-33604/): Malicious code in soft-metrika (npm) (malicious package)
- [MAL-2025-33603](https://insights.sbomify.com/MAL-2025-33603/): Malicious code in socyal (npm) (malicious package)
- [MAL-2025-33602](https://insights.sbomify.com/MAL-2025-33602/): Malicious code in socomsa (npm) (malicious package)
- [MAL-2025-33601](https://insights.sbomify.com/MAL-2025-33601/): Malicious code in socks-browser (npm) (malicious package)
- [MAL-2025-33600](https://insights.sbomify.com/MAL-2025-33600/): Malicious code in socklibng (npm) (malicious package)
- [MAL-2025-3360](https://insights.sbomify.com/MAL-2025-3360/): Malicious code in @sporta-technology/d11-web-components.tags.tags-counter (npm) (malicious package)
- [MAL-2025-336](https://insights.sbomify.com/MAL-2025-336/): Malicious code in groots645-npm-package (npm) (malicious package)
- [MAL-2025-33599](https://insights.sbomify.com/MAL-2025-33599/): Malicious code in socketmp (npm) (malicious package)
- [MAL-2025-33598](https://insights.sbomify.com/MAL-2025-33598/): Malicious code in socketio-equinox-thuban-superflare (npm) (malicious package)
- [MAL-2025-33597](https://insights.sbomify.com/MAL-2025-33597/): Malicious code in socketio-await-volcanology-bellatrix (npm) (malicious package)
- [MAL-2025-33596](https://insights.sbomify.com/MAL-2025-33596/): Malicious code in socket.io.js (npm) (malicious package)
- [MAL-2025-33595](https://insights.sbomify.com/MAL-2025-33595/): Malicious code in socket.io-rails (npm) (malicious package)
- [MAL-2025-33594](https://insights.sbomify.com/MAL-2025-33594/): Malicious code in socket-test-vulnerable (npm) (malicious package)
- [MAL-2025-33593](https://insights.sbomify.com/MAL-2025-33593/): Malicious code in socket-tau-psi-daemon-upsilon (npm) (malicious package)
- [MAL-2025-33592](https://insights.sbomify.com/MAL-2025-33592/): Malicious code in socket-socker (npm) (malicious package)
- [MAL-2025-33591](https://insights.sbomify.com/MAL-2025-33591/): Malicious code in socket-first-level-dep-1 (npm) (malicious package)
- [MAL-2025-33590](https://insights.sbomify.com/MAL-2025-33590/): Malicious code in socket-first-level-dep (npm) (malicious package)
- [MAL-2025-3359](https://insights.sbomify.com/MAL-2025-3359/): Malicious code in @sporta-technology/d11-web-components.tags.tags (npm) (malicious package)
- [MAL-2025-33589](https://insights.sbomify.com/MAL-2025-33589/): Malicious code in sock-2 (npm) (malicious package)
- [MAL-2025-33588](https://insights.sbomify.com/MAL-2025-33588/): Malicious code in sock-1 (npm) (malicious package)
- [MAL-2025-33587](https://insights.sbomify.com/MAL-2025-33587/): Malicious code in sociobiology-markdown-arcturus-xenon (npm) (malicious package)
- [MAL-2025-33586](https://insights.sbomify.com/MAL-2025-33586/): Malicious code in sociobiology-exoplanetology-less-loader-sagitta (npm) (malicious package)
- [MAL-2025-33585](https://insights.sbomify.com/MAL-2025-33585/): Malicious code in sociobiology-dagda-kardashevscale-procyon (npm) (malicious package)
- [MAL-2025-33584](https://insights.sbomify.com/MAL-2025-33584/): Malicious code in sociam (npm) (malicious package)
- [MAL-2025-33583](https://insights.sbomify.com/MAL-2025-33583/): Malicious code in socialinit (npm) (malicious package)
- [MAL-2025-33582](https://insights.sbomify.com/MAL-2025-33582/): Malicious code in socfetch (npm) (malicious package)
- [MAL-2025-33581](https://insights.sbomify.com/MAL-2025-33581/): Malicious code in sobojohn (npm) (malicious package)
- [MAL-2025-33580](https://insights.sbomify.com/MAL-2025-33580/): Malicious code in soautils (npm) (malicious package)
- [MAL-2025-3358](https://insights.sbomify.com/MAL-2025-3358/): Malicious code in @sporta-technology/d11-web-components.tabs (npm) (malicious package)
- [MAL-2025-33579](https://insights.sbomify.com/MAL-2025-33579/): Malicious code in soarrobot (npm) (malicious package)
- [MAL-2025-33578](https://insights.sbomify.com/MAL-2025-33578/): Malicious code in soap-titan-terser-webpack-plugin-betelgeuse (npm) (malicious package)
- [MAL-2025-33577](https://insights.sbomify.com/MAL-2025-33577/): Malicious code in soap-sirius-delphinus-brane (npm) (malicious package)
- [MAL-2025-33576](https://insights.sbomify.com/MAL-2025-33576/): Malicious code in soap-repository (npm) (malicious package)
- [MAL-2025-33575](https://insights.sbomify.com/MAL-2025-33575/): Malicious code in soap-local-celeste-magellan (npm) (malicious package)
- [MAL-2025-33574](https://insights.sbomify.com/MAL-2025-33574/): Malicious code in soap-jsonp-registry-local (npm) (malicious package)
- [MAL-2025-33573](https://insights.sbomify.com/MAL-2025-33573/): Malicious code in soap-gravity-jsonp-oauth (npm) (malicious package)
- [MAL-2025-33572](https://insights.sbomify.com/MAL-2025-33572/): Malicious code in soap-fetch-sociobiology-winston (npm) (malicious package)
- [MAL-2025-33571](https://insights.sbomify.com/MAL-2025-33571/): Malicious code in soafinals (npm) (malicious package)
- [MAL-2025-33570](https://insights.sbomify.com/MAL-2025-33570/): Malicious code in snyk-follow-npm (npm) (malicious package)
- [MAL-2025-3357](https://insights.sbomify.com/MAL-2025-3357/): Malicious code in @sporta-technology/d11-web-components.table-cells.tc-tags-status (npm) (malicious package)
- [MAL-2025-33569](https://insights.sbomify.com/MAL-2025-33569/): Malicious code in snuffy (npm) (malicious package)
- [MAL-2025-33568](https://insights.sbomify.com/MAL-2025-33568/): Malicious code in sns-to-pubusb (npm) (malicious package)
- [MAL-2025-33567](https://insights.sbomify.com/MAL-2025-33567/): Malicious code in snpdist (npm) (malicious package)
- [MAL-2025-33566](https://insights.sbomify.com/MAL-2025-33566/): Malicious code in snowflake-quinoa-scad (npm) (malicious package)
- [MAL-2025-33565](https://insights.sbomify.com/MAL-2025-33565/): Malicious code in snowflake-quince-z0se (npm) (malicious package)
- [MAL-2025-33564](https://insights.sbomify.com/MAL-2025-33564/): Malicious code in snowflake-mike-df6q (npm) (malicious package)
- [MAL-2025-33563](https://insights.sbomify.com/MAL-2025-33563/): Malicious code in snowflake-heliosphere-k5is (npm) (malicious package)
- [MAL-2025-33562](https://insights.sbomify.com/MAL-2025-33562/): Malicious code in snowflake-ferry-l8fi (npm) (malicious package)
- [MAL-2025-33561](https://insights.sbomify.com/MAL-2025-33561/): Malicious code in snowdroid-plugin-popsicle (npm) (malicious package)
- [MAL-2025-33560](https://insights.sbomify.com/MAL-2025-33560/): Malicious code in snowdroid-plugin-lemon (npm) (malicious package)
- [MAL-2025-3356](https://insights.sbomify.com/MAL-2025-3356/): Malicious code in @sporta-technology/d11-web-components.table-cells.tc-icon-list (npm) (malicious package)
- [MAL-2025-33559](https://insights.sbomify.com/MAL-2025-33559/): Malicious code in snowdroid-phonegap-fban (npm) (malicious package)
- [MAL-2025-33558](https://insights.sbomify.com/MAL-2025-33558/): Malicious code in snow_vx1a0_h5bnx_raven (npm) (malicious package)
- [MAL-2025-33557](https://insights.sbomify.com/MAL-2025-33557/): Malicious code in snow_ub2tz_mcq5b_terra (npm) (malicious package)
- [MAL-2025-33556](https://insights.sbomify.com/MAL-2025-33556/): Malicious code in snow_tffx8_orlki_coral (npm) (malicious package)
- [MAL-2025-33555](https://insights.sbomify.com/MAL-2025-33555/): Malicious code in snow_qsiuy_dq0ft_twilight (npm) (malicious package)
- [MAL-2025-33554](https://insights.sbomify.com/MAL-2025-33554/): Malicious code in snow_lpg8m_g4poi_limestone (npm) (malicious package)
- [MAL-2025-33553](https://insights.sbomify.com/MAL-2025-33553/): Malicious code in snow_gv3tl_ns1i2_thunder (npm) (malicious package)
- [MAL-2025-33552](https://insights.sbomify.com/MAL-2025-33552/): Malicious code in snow_7spsr_kh0km_fern (npm) (malicious package)
- [MAL-2025-33551](https://insights.sbomify.com/MAL-2025-33551/): Malicious code in snorocket (npm) (malicious package)
- [MAL-2025-33550](https://insights.sbomify.com/MAL-2025-33550/): Malicious code in snorobot (npm) (malicious package)
- [MAL-2025-3355](https://insights.sbomify.com/MAL-2025-3355/): Malicious code in @sporta-technology/d11-web-components.table-cells.tc-icon-button (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/740/