# Vulnerabilities published in 2025


- [MAL-2025-33459](https://insights.sbomify.com/MAL-2025-33459/): Malicious code in smfdates (npm) (malicious package)
- [MAL-2025-33458](https://insights.sbomify.com/MAL-2025-33458/): Malicious code in smederevo_888 (npm) (malicious package)
- [MAL-2025-33457](https://insights.sbomify.com/MAL-2025-33457/): Malicious code in smederevo (npm) (malicious package)
- [MAL-2025-33456](https://insights.sbomify.com/MAL-2025-33456/): Malicious code in smc-bacnet-explorer (npm) (malicious package)
- [MAL-2025-33455](https://insights.sbomify.com/MAL-2025-33455/): Malicious code in smashoapi (npm) (malicious package)
- [MAL-2025-33454](https://insights.sbomify.com/MAL-2025-33454/): Malicious code in smashbug (npm) (malicious package)
- [MAL-2025-33453](https://insights.sbomify.com/MAL-2025-33453/): Malicious code in smarttags (npm) (malicious package)
- [MAL-2025-33452](https://insights.sbomify.com/MAL-2025-33452/): Malicious code in smartsign-deferred (npm) (malicious package)
- [MAL-2025-33451](https://insights.sbomify.com/MAL-2025-33451/): Malicious code in smartserve-loader (npm) (malicious package)
- [MAL-2025-33450](https://insights.sbomify.com/MAL-2025-33450/): Malicious code in smartsearchwp (npm) (malicious package)
- [MAL-2025-3345](https://insights.sbomify.com/MAL-2025-3345/): Malicious code in @sporta-technology/d11-web-components.search (npm) (malicious package)
- [MAL-2025-33449](https://insights.sbomify.com/MAL-2025-33449/): Malicious code in smartqr (npm) (malicious package)
- [MAL-2025-33448](https://insights.sbomify.com/MAL-2025-33448/): Malicious code in smartnc (npm) (malicious package)
- [MAL-2025-33447](https://insights.sbomify.com/MAL-2025-33447/): Malicious code in smarth (npm) (malicious package)
- [MAL-2025-33446](https://insights.sbomify.com/MAL-2025-33446/): Malicious code in smart_todo (npm) (malicious package)
- [MAL-2025-33445](https://insights.sbomify.com/MAL-2025-33445/): Malicious code in smallstat (npm) (malicious package)
- [MAL-2025-33444](https://insights.sbomify.com/MAL-2025-33444/): Malicious code in small-void-rain-unix-upsilon (npm) (malicious package)
- [MAL-2025-33443](https://insights.sbomify.com/MAL-2025-33443/): Malicious code in small-psi-unix-execute-report (npm) (malicious package)
- [MAL-2025-33442](https://insights.sbomify.com/MAL-2025-33442/): Malicious code in small-private-integer-array-deploy (npm) (malicious package)
- [MAL-2025-33441](https://insights.sbomify.com/MAL-2025-33441/): Malicious code in small-encrypt-orchestrate-star-grid (npm) (malicious package)
- [MAL-2025-33440](https://insights.sbomify.com/MAL-2025-33440/): Malicious code in small-debug-awk-hash-parse (npm) (malicious package)
- [MAL-2025-3344](https://insights.sbomify.com/MAL-2025-3344/): Malicious code in @sporta-technology/d11-web-components.radio-group (npm) (malicious package)
- [MAL-2025-33439](https://insights.sbomify.com/MAL-2025-33439/): Malicious code in sm-tracker (npm) (malicious package)
- [MAL-2025-33438](https://insights.sbomify.com/MAL-2025-33438/): Malicious code in sm-app (npm) (malicious package)
- [MAL-2025-33437](https://insights.sbomify.com/MAL-2025-33437/): Malicious code in slymztest (npm) (malicious package)
- [MAL-2025-33436](https://insights.sbomify.com/MAL-2025-33436/): Malicious code in slush-slush-rr (npm) (malicious package)
- [MAL-2025-33435](https://insights.sbomify.com/MAL-2025-33435/): Malicious code in slush-ng-blank (npm) (malicious package)
- [MAL-2025-33434](https://insights.sbomify.com/MAL-2025-33434/): Malicious code in slugwiki (npm) (malicious package)
- [MAL-2025-33433](https://insights.sbomify.com/MAL-2025-33433/): Malicious code in sls-wallet-orders (npm) (malicious package)
- [MAL-2025-33432](https://insights.sbomify.com/MAL-2025-33432/): Malicious code in slowpost (npm) (malicious package)
- [MAL-2025-33431](https://insights.sbomify.com/MAL-2025-33431/): Malicious code in slow-moon-air-scale-interpret (npm) (malicious package)
- [MAL-2025-33430](https://insights.sbomify.com/MAL-2025-33430/): Malicious code in slot88 (npm) (malicious package)
- [MAL-2025-3343](https://insights.sbomify.com/MAL-2025-3343/): Malicious code in @sporta-technology/d11-web-components.radio (npm) (malicious package)
- [MAL-2025-33429](https://insights.sbomify.com/MAL-2025-33429/): Malicious code in slot777 (npm) (malicious package)
- [MAL-2025-33428](https://insights.sbomify.com/MAL-2025-33428/): Malicious code in slot-online (npm) (malicious package)
- [MAL-2025-33427](https://insights.sbomify.com/MAL-2025-33427/): Malicious code in slot-gacor (npm) (malicious package)
- [MAL-2025-33426](https://insights.sbomify.com/MAL-2025-33426/): Malicious code in slm-env-unity3dball-v0 (npm) (malicious package)
- [MAL-2025-33425](https://insights.sbomify.com/MAL-2025-33425/): Malicious code in slircd (npm) (malicious package)
- [MAL-2025-33424](https://insights.sbomify.com/MAL-2025-33424/): Malicious code in slinters (npm) (malicious package)
- [MAL-2025-33423](https://insights.sbomify.com/MAL-2025-33423/): Malicious code in slingpic (npm) (malicious package)
- [MAL-2025-33422](https://insights.sbomify.com/MAL-2025-33422/): Malicious code in slidez (npm) (malicious package)
- [MAL-2025-33421](https://insights.sbomify.com/MAL-2025-33421/): Malicious code in slidev-kastra-hermes-jovian (npm) (malicious package)
- [MAL-2025-33420](https://insights.sbomify.com/MAL-2025-33420/): Malicious code in slidev-draco-publish-elara (npm) (malicious package)
- [MAL-2025-3342](https://insights.sbomify.com/MAL-2025-3342/): Malicious code in @sporta-technology/d11-web-components.progress-line (npm) (malicious package)
- [MAL-2025-33419](https://insights.sbomify.com/MAL-2025-33419/): Malicious code in slidev-astro-jekyll-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-33418](https://insights.sbomify.com/MAL-2025-33418/): Malicious code in slides-sagitta-cassini-dione (npm) (malicious package)
- [MAL-2025-33417](https://insights.sbomify.com/MAL-2025-33417/): Malicious code in slides-request-jwt-draco (npm) (malicious package)
- [MAL-2025-33416](https://insights.sbomify.com/MAL-2025-33416/): Malicious code in slides-fork-kardashevscale-janus (npm) (malicious package)
- [MAL-2025-33415](https://insights.sbomify.com/MAL-2025-33415/): Malicious code in sliderize (npm) (malicious package)
- [MAL-2025-33414](https://insights.sbomify.com/MAL-2025-33414/): Malicious code in slickgame (npm) (malicious package)
- [MAL-2025-33413](https://insights.sbomify.com/MAL-2025-33413/): Malicious code in sliceview (npm) (malicious package)
- [MAL-2025-33412](https://insights.sbomify.com/MAL-2025-33412/): Malicious code in sliceseq (npm) (malicious package)
- [MAL-2025-33411](https://insights.sbomify.com/MAL-2025-33411/): Malicious code in slectron (npm) (malicious package)
- [MAL-2025-33410](https://insights.sbomify.com/MAL-2025-33410/): Malicious code in sldrbs (npm) (malicious package)
- [MAL-2025-3341](https://insights.sbomify.com/MAL-2025-3341/): Malicious code in @sporta-technology/d11-web-components.progress-circle (npm) (malicious package)
- [MAL-2025-33409](https://insights.sbomify.com/MAL-2025-33409/): Malicious code in slbench (npm) (malicious package)
- [MAL-2025-33408](https://insights.sbomify.com/MAL-2025-33408/): Malicious code in slayhud (npm) (malicious package)
- [MAL-2025-33407](https://insights.sbomify.com/MAL-2025-33407/): Malicious code in slate-sync (npm) (malicious package)
- [MAL-2025-33406](https://insights.sbomify.com/MAL-2025-33406/): Malicious code in slate-liquid-asset-loader (npm) (malicious package)
- [MAL-2025-33405](https://insights.sbomify.com/MAL-2025-33405/): Malicious code in slate-error (npm) (malicious package)
- [MAL-2025-33404](https://insights.sbomify.com/MAL-2025-33404/): Malicious code in slate-common-excludes (npm) (malicious package)
- [MAL-2025-33403](https://insights.sbomify.com/MAL-2025-33403/): Malicious code in slate-babel (npm) (malicious package)
- [MAL-2025-33402](https://insights.sbomify.com/MAL-2025-33402/): Malicious code in slamby-api (npm) (malicious package)
- [MAL-2025-33401](https://insights.sbomify.com/MAL-2025-33401/): Malicious code in slackub (npm) (malicious package)
- [MAL-2025-33400](https://insights.sbomify.com/MAL-2025-33400/): Malicious code in sl-em7-gql (npm) (malicious package)
- [MAL-2025-3340](https://insights.sbomify.com/MAL-2025-3340/): Malicious code in @sporta-technology/d11-web-components.popout (npm) (malicious package)
- [MAL-2025-334](https://insights.sbomify.com/MAL-2025-334/): Malicious code in fix-this (npm) (malicious package)
- [MAL-2025-33399](https://insights.sbomify.com/MAL-2025-33399/): Malicious code in skyvue (npm) (malicious package)
- [MAL-2025-33398](https://insights.sbomify.com/MAL-2025-33398/): Malicious code in skyttle (npm) (malicious package)
- [MAL-2025-33397](https://insights.sbomify.com/MAL-2025-33397/): Malicious code in skyrider (npm) (malicious package)
- [MAL-2025-33396](https://insights.sbomify.com/MAL-2025-33396/): Malicious code in skyphp (npm) (malicious package)
- [MAL-2025-33395](https://insights.sbomify.com/MAL-2025-33395/): Malicious code in skyninja (npm) (malicious package)
- [MAL-2025-33394](https://insights.sbomify.com/MAL-2025-33394/): Malicious code in skynet-api-v2 (npm) (malicious package)
- [MAL-2025-33393](https://insights.sbomify.com/MAL-2025-33393/): Malicious code in skylove (npm) (malicious package)
- [MAL-2025-33392](https://insights.sbomify.com/MAL-2025-33392/): Malicious code in skylord (npm) (malicious package)
- [MAL-2025-33391](https://insights.sbomify.com/MAL-2025-33391/): Malicious code in skylon (npm) (malicious package)
- [MAL-2025-33390](https://insights.sbomify.com/MAL-2025-33390/): Malicious code in skyloftz (npm) (malicious package)
- [MAL-2025-3339](https://insights.sbomify.com/MAL-2025-3339/): Malicious code in @sporta-technology/d11-web-components.pagination (npm) (malicious package)
- [MAL-2025-33389](https://insights.sbomify.com/MAL-2025-33389/): Malicious code in skyflow-elements-update (npm) (malicious package)
- [MAL-2025-33388](https://insights.sbomify.com/MAL-2025-33388/): Malicious code in skydoc (npm) (malicious package)
- [MAL-2025-33387](https://insights.sbomify.com/MAL-2025-33387/): Malicious code in skybox-sdk (npm) (malicious package)
- [MAL-2025-33386](https://insights.sbomify.com/MAL-2025-33386/): Malicious code in skyasylum (npm) (malicious package)
- [MAL-2025-33385](https://insights.sbomify.com/MAL-2025-33385/): Malicious code in sky-tokr4-jfdg7-quill-project (npm) (malicious package)
- [MAL-2025-33384](https://insights.sbomify.com/MAL-2025-33384/): Malicious code in sky-krjyv-8ziol-tide-project (npm) (malicious package)
- [MAL-2025-33383](https://insights.sbomify.com/MAL-2025-33383/): Malicious code in sky-es669-2medd-lotus-project (npm) (malicious package)
- [MAL-2025-33382](https://insights.sbomify.com/MAL-2025-33382/): Malicious code in sky-c50dj-8j4vp-basil-project (npm) (malicious package)
- [MAL-2025-33381](https://insights.sbomify.com/MAL-2025-33381/): Malicious code in sky-c0ldu-jxvkc-quasar-project (npm) (malicious package)
- [MAL-2025-33380](https://insights.sbomify.com/MAL-2025-33380/): Malicious code in sky-5sl81-rwfmv-oracle-project (npm) (malicious package)
- [MAL-2025-3338](https://insights.sbomify.com/MAL-2025-3338/): Malicious code in @sporta-technology/d11-web-components.list-item.list-item-dropdown (npm) (malicious package)
- [MAL-2025-33379](https://insights.sbomify.com/MAL-2025-33379/): Malicious code in skusim (npm) (malicious package)
- [MAL-2025-33378](https://insights.sbomify.com/MAL-2025-33378/): Malicious code in skudive (npm) (malicious package)
- [MAL-2025-33377](https://insights.sbomify.com/MAL-2025-33377/): Malicious code in sktchfb (npm) (malicious package)
- [MAL-2025-33376](https://insights.sbomify.com/MAL-2025-33376/): Malicious code in skomakare (npm) (malicious package)
- [MAL-2025-33375](https://insights.sbomify.com/MAL-2025-33375/): Malicious code in skkwipthjqzlygvo (npm) (malicious package)
- [MAL-2025-33374](https://insights.sbomify.com/MAL-2025-33374/): Malicious code in skjapp (npm) (malicious package)
- [MAL-2025-33373](https://insights.sbomify.com/MAL-2025-33373/): Malicious code in skitest (npm) (malicious package)
- [MAL-2025-33372](https://insights.sbomify.com/MAL-2025-33372/): Malicious code in skipstone (npm) (malicious package)
- [MAL-2025-33371](https://insights.sbomify.com/MAL-2025-33371/): Malicious code in skiprj (npm) (malicious package)
- [MAL-2025-33370](https://insights.sbomify.com/MAL-2025-33370/): Malicious code in skip-package (npm) (malicious package)
- [MAL-2025-3337](https://insights.sbomify.com/MAL-2025-3337/): Malicious code in @sporta-technology/d11-web-components.list-item.list-item (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/742/