# Vulnerabilities published in 2025


- [MAL-2025-33369](https://insights.sbomify.com/MAL-2025-33369/): Malicious code in skionline (npm) (malicious package)
- [MAL-2025-33368](https://insights.sbomify.com/MAL-2025-33368/): Malicious code in skimmdit (npm) (malicious package)
- [MAL-2025-33367](https://insights.sbomify.com/MAL-2025-33367/): Malicious code in skillsdb (npm) (malicious package)
- [MAL-2025-33366](https://insights.sbomify.com/MAL-2025-33366/): Malicious code in skeynjqwmpfgklth (npm) (malicious package)
- [MAL-2025-33365](https://insights.sbomify.com/MAL-2025-33365/): Malicious code in sketchz (npm) (malicious package)
- [MAL-2025-33364](https://insights.sbomify.com/MAL-2025-33364/): Malicious code in skeletom (npm) (malicious package)
- [MAL-2025-33363](https://insights.sbomify.com/MAL-2025-33363/): Malicious code in skateshop (npm) (malicious package)
- [MAL-2025-33362](https://insights.sbomify.com/MAL-2025-33362/): Malicious code in skalcirdhmugztoe (npm) (malicious package)
- [MAL-2025-33361](https://insights.sbomify.com/MAL-2025-33361/): Malicious code in skalch (npm) (malicious package)
- [MAL-2025-33360](https://insights.sbomify.com/MAL-2025-33360/): Malicious code in sk-ui-kit (npm) (malicious package)
- [MAL-2025-3336](https://insights.sbomify.com/MAL-2025-3336/): Malicious code in @sporta-technology/d11-web-components.link (npm) (malicious package)
- [MAL-2025-33359](https://insights.sbomify.com/MAL-2025-33359/): Malicious code in sk-datatable (npm) (malicious package)
- [MAL-2025-33358](https://insights.sbomify.com/MAL-2025-33358/): Malicious code in sjtu-seyilingliu-dast (npm) (malicious package)
- [MAL-2025-33357](https://insights.sbomify.com/MAL-2025-33357/): Malicious code in sjtu-sesanyiwu-os (npm) (malicious package)
- [MAL-2025-33356](https://insights.sbomify.com/MAL-2025-33356/): Malicious code in sjtu-sesanwuyi-arch (npm) (malicious package)
- [MAL-2025-33355](https://insights.sbomify.com/MAL-2025-33355/): Malicious code in sjtu-sesanwuling-adv-info-sys (npm) (malicious package)
- [MAL-2025-33354](https://insights.sbomify.com/MAL-2025-33354/): Malicious code in sjtu-sesansisan-adv-arch (npm) (malicious package)
- [MAL-2025-33353](https://insights.sbomify.com/MAL-2025-33353/): Malicious code in sjtu-sesansijiu-data-mining (npm) (malicious package)
- [MAL-2025-33352](https://insights.sbomify.com/MAL-2025-33352/): Malicious code in sjtu-sesansiba-info-sys-engi (npm) (malicious package)
- [MAL-2025-33351](https://insights.sbomify.com/MAL-2025-33351/): Malicious code in sjtu-sesansaner-info-sys-intro (npm) (malicious package)
- [MAL-2025-33350](https://insights.sbomify.com/MAL-2025-33350/): Malicious code in sjtu-seeryier-db (npm) (malicious package)
- [MAL-2025-3335](https://insights.sbomify.com/MAL-2025-3335/): Malicious code in @sporta-technology/d11-web-components.input (npm) (malicious package)
- [MAL-2025-33349](https://insights.sbomify.com/MAL-2025-33349/): Malicious code in sjtu-seererwu-test (npm) (malicious package)
- [MAL-2025-33348](https://insights.sbomify.com/MAL-2025-33348/): Malicious code in sjtu-seerersi-engi (npm) (malicious package)
- [MAL-2025-33347](https://insights.sbomify.com/MAL-2025-33347/): Malicious code in sjtu-seererqi-cse (npm) (malicious package)
- [MAL-2025-33346](https://insights.sbomify.com/MAL-2025-33346/): Malicious code in sjtu-seererliu-comp (npm) (malicious package)
- [MAL-2025-33345](https://insights.sbomify.com/MAL-2025-33345/): Malicious code in sjtu-seererer-algo (npm) (malicious package)
- [MAL-2025-33344](https://insights.sbomify.com/MAL-2025-33344/): Malicious code in sjtu-seererba-web-dev (npm) (malicious package)
- [MAL-2025-33343](https://insights.sbomify.com/MAL-2025-33343/): Malicious code in sjhsapp (npm) (malicious package)
- [MAL-2025-33342](https://insights.sbomify.com/MAL-2025-33342/): Malicious code in sj-tw-test-security (npm) (malicious package)
- [MAL-2025-33341](https://insights.sbomify.com/MAL-2025-33341/): Malicious code in sj-tw-sec (npm) (malicious package)
- [MAL-2025-33340](https://insights.sbomify.com/MAL-2025-33340/): Malicious code in sj-tw-abc (npm) (malicious package)
- [MAL-2025-3334](https://insights.sbomify.com/MAL-2025-3334/): Malicious code in @sporta-technology/d11-web-components.icon-element (npm) (malicious package)
- [MAL-2025-33339](https://insights.sbomify.com/MAL-2025-33339/): Malicious code in sj-labc (npm) (malicious package)
- [MAL-2025-33338](https://insights.sbomify.com/MAL-2025-33338/): Malicious code in sizewise (npm) (malicious package)
- [MAL-2025-33337](https://insights.sbomify.com/MAL-2025-33337/): Malicious code in siyiadnew (npm) (malicious package)
- [MAL-2025-33336](https://insights.sbomify.com/MAL-2025-33336/): Malicious code in sixsteps (npm) (malicious package)
- [MAL-2025-33335](https://insights.sbomify.com/MAL-2025-33335/): Malicious code in sixers-jersey---nba-jersey (npm) (malicious package)
- [MAL-2025-33334](https://insights.sbomify.com/MAL-2025-33334/): Malicious code in sixcam (npm) (malicious package)
- [MAL-2025-33333](https://insights.sbomify.com/MAL-2025-33333/): Malicious code in sivkxudmhgbefokz (npm) (malicious package)
- [MAL-2025-33332](https://insights.sbomify.com/MAL-2025-33332/): Malicious code in sitforc (npm) (malicious package)
- [MAL-2025-33331](https://insights.sbomify.com/MAL-2025-33331/): Malicious code in sitejoias (npm) (malicious package)
- [MAL-2025-33330](https://insights.sbomify.com/MAL-2025-33330/): Malicious code in sitefoil (npm) (malicious package)
- [MAL-2025-3333](https://insights.sbomify.com/MAL-2025-3333/): Malicious code in @sporta-technology/d11-web-components.icon-button (npm) (malicious package)
- [MAL-2025-33329](https://insights.sbomify.com/MAL-2025-33329/): Malicious code in sita-tea (npm) (malicious package)
- [MAL-2025-33328](https://insights.sbomify.com/MAL-2025-33328/): Malicious code in sisyphe-xpath (npm) (malicious package)
- [MAL-2025-33327](https://insights.sbomify.com/MAL-2025-33327/): Malicious code in sisyphe-xml (npm) (malicious package)
- [MAL-2025-33326](https://insights.sbomify.com/MAL-2025-33326/): Malicious code in sisyphe-pdf (npm) (malicious package)
- [MAL-2025-33325](https://insights.sbomify.com/MAL-2025-33325/): Malicious code in sisyphe-out (npm) (malicious package)
- [MAL-2025-33324](https://insights.sbomify.com/MAL-2025-33324/): Malicious code in sisyphe-filetype (npm) (malicious package)
- [MAL-2025-33323](https://insights.sbomify.com/MAL-2025-33323/): Malicious code in sisyphe (npm) (malicious package)
- [MAL-2025-33322](https://insights.sbomify.com/MAL-2025-33322/): Malicious code in sisteme (npm) (malicious package)
- [MAL-2025-33321](https://insights.sbomify.com/MAL-2025-33321/): Malicious code in sisren (npm) (malicious package)
- [MAL-2025-33320](https://insights.sbomify.com/MAL-2025-33320/): Malicious code in sisprom (npm) (malicious package)
- [MAL-2025-3332](https://insights.sbomify.com/MAL-2025-3332/): Malicious code in @sporta-technology/d11-web-components.icon (npm) (malicious package)
- [MAL-2025-33319](https://insights.sbomify.com/MAL-2025-33319/): Malicious code in siska-tiwul63-kuki (npm) (malicious package)
- [MAL-2025-33318](https://insights.sbomify.com/MAL-2025-33318/): Malicious code in siska-lapis27-breki (npm) (malicious package)
- [MAL-2025-33317](https://insights.sbomify.com/MAL-2025-33317/): Malicious code in siska-kue81-breki (npm) (malicious package)
- [MAL-2025-33316](https://insights.sbomify.com/MAL-2025-33316/): Malicious code in sirius-ophiuchus-publish-interferometry (npm) (malicious package)
- [MAL-2025-33315](https://insights.sbomify.com/MAL-2025-33315/): Malicious code in sirius-mensa-publish-redshift (npm) (malicious package)
- [MAL-2025-33314](https://insights.sbomify.com/MAL-2025-33314/): Malicious code in sirius-kuiperbelt-dendrochronology-nestjs (npm) (malicious package)
- [MAL-2025-33313](https://insights.sbomify.com/MAL-2025-33313/): Malicious code in sirius-dione-sqlite-docusaurus (npm) (malicious package)
- [MAL-2025-33312](https://insights.sbomify.com/MAL-2025-33312/): Malicious code in sirius-apollo-publish-epigenetics (npm) (malicious package)
- [MAL-2025-33311](https://insights.sbomify.com/MAL-2025-33311/): Malicious code in sirinova (npm) (malicious package)
- [MAL-2025-33310](https://insights.sbomify.com/MAL-2025-33310/): Malicious code in sirichat (npm) (malicious package)
- [MAL-2025-3331](https://insights.sbomify.com/MAL-2025-3331/): Malicious code in @sporta-technology/d11-web-components.header (npm) (malicious package)
- [MAL-2025-33309](https://insights.sbomify.com/MAL-2025-33309/): Malicious code in sircon (npm) (malicious package)
- [MAL-2025-33308](https://insights.sbomify.com/MAL-2025-33308/): Malicious code in siphwkdaxfmneour (npm) (malicious package)
- [MAL-2025-33307](https://insights.sbomify.com/MAL-2025-33307/): Malicious code in siovgqtdkpfrabcl (npm) (malicious package)
- [MAL-2025-33306](https://insights.sbomify.com/MAL-2025-33306/): Malicious code in sinucvatmxzywejg (npm) (malicious package)
- [MAL-2025-33305](https://insights.sbomify.com/MAL-2025-33305/): Malicious code in sinta-saguer18-kuki (npm) (malicious package)
- [MAL-2025-33304](https://insights.sbomify.com/MAL-2025-33304/): Malicious code in sinta-nasipecel29-sukiwir (npm) (malicious package)
- [MAL-2025-33303](https://insights.sbomify.com/MAL-2025-33303/): Malicious code in sinta-lapis60-breki (npm) (malicious package)
- [MAL-2025-33302](https://insights.sbomify.com/MAL-2025-33302/): Malicious code in sinta-dradag6-sukiwir (npm) (malicious package)
- [MAL-2025-33301](https://insights.sbomify.com/MAL-2025-33301/): Malicious code in sinta-donat92-breki (npm) (malicious package)
- [MAL-2025-33300](https://insights.sbomify.com/MAL-2025-33300/): Malicious code in sinta-bubursumsum38-kuki (npm) (malicious package)
- [MAL-2025-3330](https://insights.sbomify.com/MAL-2025-3330/): Malicious code in @sporta-technology/d11-web-components.footer (npm) (malicious package)
- [MAL-2025-333](https://insights.sbomify.com/MAL-2025-333/): Malicious code in dynatrace_config_manager (npm) (malicious package)
- [MAL-2025-33299](https://insights.sbomify.com/MAL-2025-33299/): Malicious code in sinta-asinan78-breki (npm) (malicious package)
- [MAL-2025-33298](https://insights.sbomify.com/MAL-2025-33298/): Malicious code in singularity-ultra-style-loader-ionosphere (npm) (malicious package)
- [MAL-2025-33297](https://insights.sbomify.com/MAL-2025-33297/): Malicious code in singularity-paleontology-nebula-hugo (npm) (malicious package)
- [MAL-2025-33296](https://insights.sbomify.com/MAL-2025-33296/): Malicious code in singularity-mesosphere-io-remark (npm) (malicious package)
- [MAL-2025-33295](https://insights.sbomify.com/MAL-2025-33295/): Malicious code in singularity-baryon-wezen-hydra (npm) (malicious package)
- [MAL-2025-33294](https://insights.sbomify.com/MAL-2025-33294/): Malicious code in singularitarianism-selenium-adonis-webpack (npm) (malicious package)
- [MAL-2025-33293](https://insights.sbomify.com/MAL-2025-33293/): Malicious code in singularitarianism-puppeteer-ganymede-hexo (npm) (malicious package)
- [MAL-2025-33292](https://insights.sbomify.com/MAL-2025-33292/): Malicious code in singularitarianism-nebula-epigenetics-dagda (npm) (malicious package)
- [MAL-2025-33291](https://insights.sbomify.com/MAL-2025-33291/): Malicious code in singularitarianism-eleventy-gridsome-lint-staged (npm) (malicious package)
- [MAL-2025-33290](https://insights.sbomify.com/MAL-2025-33290/): Malicious code in singularitarianism-cybernetics-geckodriver-accretion (npm) (malicious package)
- [MAL-2025-3329](https://insights.sbomify.com/MAL-2025-3329/): Malicious code in @sporta-technology/d11-web-components.file-uploader (npm) (malicious package)
- [MAL-2025-33289](https://insights.sbomify.com/MAL-2025-33289/): Malicious code in single-card-tarot (npm) (malicious package)
- [MAL-2025-33288](https://insights.sbomify.com/MAL-2025-33288/): Malicious code in sindra (npm) (malicious package)
- [MAL-2025-33287](https://insights.sbomify.com/MAL-2025-33287/): Malicious code in sinatbbs (npm) (malicious package)
- [MAL-2025-33286](https://insights.sbomify.com/MAL-2025-33286/): Malicious code in simulate-omicron-async-socket-simple (npm) (malicious package)
- [MAL-2025-33285](https://insights.sbomify.com/MAL-2025-33285/): Malicious code in simskoy (npm) (malicious package)
- [MAL-2025-33284](https://insights.sbomify.com/MAL-2025-33284/): Malicious code in simpyple (npm) (malicious package)
- [MAL-2025-33283](https://insights.sbomify.com/MAL-2025-33283/): Malicious code in simplifydigital-generator-webcomponent (npm) (malicious package)
- [MAL-2025-33282](https://insights.sbomify.com/MAL-2025-33282/): Malicious code in simpletop (npm) (malicious package)
- [MAL-2025-33281](https://insights.sbomify.com/MAL-2025-33281/): Malicious code in simpleepg (npm) (malicious package)
- [MAL-2025-33280](https://insights.sbomify.com/MAL-2025-33280/): Malicious code in simple.io (npm) (malicious package)
- [MAL-2025-3328](https://insights.sbomify.com/MAL-2025-3328/): Malicious code in @sporta-technology/d11-web-components.extras (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/743/