# Vulnerabilities published in 2025


- [MAL-2025-33279](https://insights.sbomify.com/MAL-2025-33279/): Malicious code in simple-zero-shell-zeta-decompress (npm) (malicious package)
- [MAL-2025-33278](https://insights.sbomify.com/MAL-2025-33278/): Malicious code in simple-stub-tree-nu-authenticate (npm) (malicious package)
- [MAL-2025-33277](https://insights.sbomify.com/MAL-2025-33277/): Malicious code in simple-runtime-theta-code-sed (npm) (malicious package)
- [MAL-2025-33276](https://insights.sbomify.com/MAL-2025-33276/): Malicious code in simple-report-parse-new-object (npm) (malicious package)
- [MAL-2025-33275](https://insights.sbomify.com/MAL-2025-33275/): Malicious code in simple-month-calendar (npm) (malicious package)
- [MAL-2025-33274](https://insights.sbomify.com/MAL-2025-33274/): Malicious code in simple-js-shake-256 (npm) (malicious package)
- [MAL-2025-33273](https://insights.sbomify.com/MAL-2025-33273/): Malicious code in simple-js-shake-128 (npm) (malicious package)
- [MAL-2025-33272](https://insights.sbomify.com/MAL-2025-33272/): Malicious code in simple-js-shake (npm) (malicious package)
- [MAL-2025-33271](https://insights.sbomify.com/MAL-2025-33271/): Malicious code in simple-js-sha3-512 (npm) (malicious package)
- [MAL-2025-33270](https://insights.sbomify.com/MAL-2025-33270/): Malicious code in simple-js-sha3-384 (npm) (malicious package)
- [MAL-2025-3327](https://insights.sbomify.com/MAL-2025-3327/): Malicious code in @sporta-technology/d11-web-components.empty-state (npm) (malicious package)
- [MAL-2025-33269](https://insights.sbomify.com/MAL-2025-33269/): Malicious code in simple-js-sha3-256 (npm) (malicious package)
- [MAL-2025-33268](https://insights.sbomify.com/MAL-2025-33268/): Malicious code in simple-js-sha3-224 (npm) (malicious package)
- [MAL-2025-33267](https://insights.sbomify.com/MAL-2025-33267/): Malicious code in simple-js-sha3 (npm) (malicious package)
- [MAL-2025-33266](https://insights.sbomify.com/MAL-2025-33266/): Malicious code in simple-console-logger-20231399-hyunmin (npm) (malicious package)
- [MAL-2025-33265](https://insights.sbomify.com/MAL-2025-33265/): Malicious code in simple-await-zero-pi-async (npm) (malicious package)
- [MAL-2025-33264](https://insights.sbomify.com/MAL-2025-33264/): Malicious code in simple-api-key-validation (npm) (malicious package)
- [MAL-2025-33263](https://insights.sbomify.com/MAL-2025-33263/): Malicious code in simpic (npm) (malicious package)
- [MAL-2025-33262](https://insights.sbomify.com/MAL-2025-33262/): Malicious code in simofrus (npm) (malicious package)
- [MAL-2025-33261](https://insights.sbomify.com/MAL-2025-33261/): Malicious code in similix-win32-x64-msvc (npm) (malicious package)
- [MAL-2025-33260](https://insights.sbomify.com/MAL-2025-33260/): Malicious code in similator (npm) (malicious package)
- [MAL-2025-3326](https://insights.sbomify.com/MAL-2025-3326/): Malicious code in @sporta-technology/d11-web-components.dropdown (npm) (malicious package)
- [MAL-2025-33259](https://insights.sbomify.com/MAL-2025-33259/): Malicious code in simgenome (npm) (malicious package)
- [MAL-2025-33258](https://insights.sbomify.com/MAL-2025-33258/): Malicious code in simbers (npm) (malicious package)
- [MAL-2025-33257](https://insights.sbomify.com/MAL-2025-33257/): Malicious code in sim-packages (npm) (malicious package)
- [MAL-2025-33256](https://insights.sbomify.com/MAL-2025-33256/): Malicious code in silocom (npm) (malicious package)
- [MAL-2025-33255](https://insights.sbomify.com/MAL-2025-33255/): Malicious code in silk-wadic-70udd-amber-project (npm) (malicious package)
- [MAL-2025-33254](https://insights.sbomify.com/MAL-2025-33254/): Malicious code in silk-sdgpe-aed8o-throne-project (npm) (malicious package)
- [MAL-2025-33253](https://insights.sbomify.com/MAL-2025-33253/): Malicious code in silk-r3uxk-e3mgb-harp-project (npm) (malicious package)
- [MAL-2025-33252](https://insights.sbomify.com/MAL-2025-33252/): Malicious code in silk-gzcn7-rkz5v-dune-project (npm) (malicious package)
- [MAL-2025-33251](https://insights.sbomify.com/MAL-2025-33251/): Malicious code in silk-aeao9-dbq0a-jade-project (npm) (malicious package)
- [MAL-2025-33250](https://insights.sbomify.com/MAL-2025-33250/): Malicious code in silk-99qyb-eei8t-neptune-project (npm) (malicious package)
- [MAL-2025-3325](https://insights.sbomify.com/MAL-2025-3325/): Malicious code in @sporta-technology/d11-web-components.drawer (npm) (malicious package)
- [MAL-2025-33249](https://insights.sbomify.com/MAL-2025-33249/): Malicious code in silk-8pq5l-d0dum-plume-project (npm) (malicious package)
- [MAL-2025-33248](https://insights.sbomify.com/MAL-2025-33248/): Malicious code in silk-21cwn-ep923-tranquil-project (npm) (malicious package)
- [MAL-2025-33247](https://insights.sbomify.com/MAL-2025-33247/): Malicious code in silk-0xjlc-av1f1-meadow-project (npm) (malicious package)
- [MAL-2025-33246](https://insights.sbomify.com/MAL-2025-33246/): Malicious code in silence-lull-ley355-project (npm) (malicious package)
- [MAL-2025-33245](https://insights.sbomify.com/MAL-2025-33245/): Malicious code in sigviaa (npm) (malicious package)
- [MAL-2025-33244](https://insights.sbomify.com/MAL-2025-33244/): Malicious code in signsaver (npm) (malicious package)
- [MAL-2025-33243](https://insights.sbomify.com/MAL-2025-33243/): Malicious code in signpost-verifier (npm) (malicious package)
- [MAL-2025-33242](https://insights.sbomify.com/MAL-2025-33242/): Malicious code in signpost-signer (npm) (malicious package)
- [MAL-2025-33241](https://insights.sbomify.com/MAL-2025-33241/): Malicious code in signpost-rails (npm) (malicious package)
- [MAL-2025-33240](https://insights.sbomify.com/MAL-2025-33240/): Malicious code in signon-react-data-grid (npm) (malicious package)
- [MAL-2025-3324](https://insights.sbomify.com/MAL-2025-3324/): Malicious code in @sporta-technology/d11-web-components.divider (npm) (malicious package)
- [MAL-2025-33239](https://insights.sbomify.com/MAL-2025-33239/): Malicious code in signmix (npm) (malicious package)
- [MAL-2025-33238](https://insights.sbomify.com/MAL-2025-33238/): Malicious code in signinrpi (npm) (malicious package)
- [MAL-2025-33237](https://insights.sbomify.com/MAL-2025-33237/): Malicious code in signetedurlserver (npm) (malicious package)
- [MAL-2025-33236](https://insights.sbomify.com/MAL-2025-33236/): Malicious code in signalstr (npm) (malicious package)
- [MAL-2025-33235](https://insights.sbomify.com/MAL-2025-33235/): Malicious code in signal-slow-reject-easy-object (npm) (malicious package)
- [MAL-2025-33234](https://insights.sbomify.com/MAL-2025-33234/): Malicious code in sigma-scale-fire-dog-decode (npm) (malicious package)
- [MAL-2025-33233](https://insights.sbomify.com/MAL-2025-33233/): Malicious code in sigma-reject-mock-try-simulate (npm) (malicious package)
- [MAL-2025-33232](https://insights.sbomify.com/MAL-2025-33232/): Malicious code in sightly-parser (npm) (malicious package)
- [MAL-2025-33231](https://insights.sbomify.com/MAL-2025-33231/): Malicious code in sighten-apollo (npm) (malicious package)
- [MAL-2025-33230](https://insights.sbomify.com/MAL-2025-33230/): Malicious code in sigcot (npm) (malicious package)
- [MAL-2025-3323](https://insights.sbomify.com/MAL-2025-3323/): Malicious code in @sporta-technology/d11-web-components.dialog (npm) (malicious package)
- [MAL-2025-33229](https://insights.sbomify.com/MAL-2025-33229/): Malicious code in sigaxmind (npm) (malicious package)
- [MAL-2025-33228](https://insights.sbomify.com/MAL-2025-33228/): Malicious code in sierra-zpn-project (npm) (malicious package)
- [MAL-2025-33227](https://insights.sbomify.com/MAL-2025-33227/): Malicious code in sierra-yankee-india-noudz (npm) (malicious package)
- [MAL-2025-33226](https://insights.sbomify.com/MAL-2025-33226/): Malicious code in sierra-yam-wkhl (npm) (malicious package)
- [MAL-2025-33225](https://insights.sbomify.com/MAL-2025-33225/): Malicious code in sierra-xray-wfsg (npm) (malicious package)
- [MAL-2025-33224](https://insights.sbomify.com/MAL-2025-33224/): Malicious code in sierra-xigua-pgqb (npm) (malicious package)
- [MAL-2025-33223](https://insights.sbomify.com/MAL-2025-33223/): Malicious code in sierra-xigua-givw (npm) (malicious package)
- [MAL-2025-33222](https://insights.sbomify.com/MAL-2025-33222/): Malicious code in sierra-wn2-project (npm) (malicious package)
- [MAL-2025-33221](https://insights.sbomify.com/MAL-2025-33221/): Malicious code in sierra-whiskey-uoqf (npm) (malicious package)
- [MAL-2025-33220](https://insights.sbomify.com/MAL-2025-33220/): Malicious code in sierra-watermelon-romeo-uudla (npm) (malicious package)
- [MAL-2025-3322](https://insights.sbomify.com/MAL-2025-3322/): Malicious code in @sporta-technology/d11-web-components.design-tokens (npm) (malicious package)
- [MAL-2025-33219](https://insights.sbomify.com/MAL-2025-33219/): Malicious code in sierra-watermelon-jkyw (npm) (malicious package)
- [MAL-2025-33218](https://insights.sbomify.com/MAL-2025-33218/): Malicious code in sierra-victor-juliet-fwily (npm) (malicious package)
- [MAL-2025-33217](https://insights.sbomify.com/MAL-2025-33217/): Malicious code in sierra-vanilla-india-ygnwg (npm) (malicious package)
- [MAL-2025-33216](https://insights.sbomify.com/MAL-2025-33216/): Malicious code in sierra-umbrella-5lx8 (npm) (malicious package)
- [MAL-2025-33215](https://insights.sbomify.com/MAL-2025-33215/): Malicious code in sierra-romeo-victor-erdzo (npm) (malicious package)
- [MAL-2025-33214](https://insights.sbomify.com/MAL-2025-33214/): Malicious code in sierra-qxx-project (npm) (malicious package)
- [MAL-2025-33213](https://insights.sbomify.com/MAL-2025-33213/): Malicious code in sierra-pulsar-2nao (npm) (malicious package)
- [MAL-2025-33212](https://insights.sbomify.com/MAL-2025-33212/): Malicious code in sierra-parsnip-pcsf (npm) (malicious package)
- [MAL-2025-33211](https://insights.sbomify.com/MAL-2025-33211/): Malicious code in sierra-oscar-whiskey-jbpkp (npm) (malicious package)
- [MAL-2025-33210](https://insights.sbomify.com/MAL-2025-33210/): Malicious code in sierra-oscar-tangerine-avqer (npm) (malicious package)
- [MAL-2025-3321](https://insights.sbomify.com/MAL-2025-3321/): Malicious code in @sporta-technology/d11-web-components.date-picker.time-picker (npm) (malicious package)
- [MAL-2025-33209](https://insights.sbomify.com/MAL-2025-33209/): Malicious code in sierra-oscar-ajix (npm) (malicious package)
- [MAL-2025-33208](https://insights.sbomify.com/MAL-2025-33208/): Malicious code in sierra-mango-qjdz (npm) (malicious package)
- [MAL-2025-33207](https://insights.sbomify.com/MAL-2025-33207/): Malicious code in sierra-kiwi-xrao (npm) (malicious package)
- [MAL-2025-33206](https://insights.sbomify.com/MAL-2025-33206/): Malicious code in sierra-kiwi-cherry-jgbeb (npm) (malicious package)
- [MAL-2025-33205](https://insights.sbomify.com/MAL-2025-33205/): Malicious code in sierra-kilo-wfpf (npm) (malicious package)
- [MAL-2025-33204](https://insights.sbomify.com/MAL-2025-33204/): Malicious code in sierra-kilo-chkz (npm) (malicious package)
- [MAL-2025-33203](https://insights.sbomify.com/MAL-2025-33203/): Malicious code in sierra-k3d-project (npm) (malicious package)
- [MAL-2025-33202](https://insights.sbomify.com/MAL-2025-33202/): Malicious code in sierra-india-kiwi-hrwaz (npm) (malicious package)
- [MAL-2025-33201](https://insights.sbomify.com/MAL-2025-33201/): Malicious code in sierra-ihm-project (npm) (malicious package)
- [MAL-2025-33200](https://insights.sbomify.com/MAL-2025-33200/): Malicious code in sierra-golf-juliet-phwxo (npm) (malicious package)
- [MAL-2025-3320](https://insights.sbomify.com/MAL-2025-3320/): Malicious code in @sporta-technology/d11-web-components.date-picker.date-time-picker (npm) (malicious package)
- [MAL-2025-332](https://insights.sbomify.com/MAL-2025-332/): Malicious code in charjs (npm) (malicious package)
- [MAL-2025-33199](https://insights.sbomify.com/MAL-2025-33199/): Malicious code in sierra-fig-grape-obwlt (npm) (malicious package)
- [MAL-2025-33198](https://insights.sbomify.com/MAL-2025-33198/): Malicious code in sierra-deq-project (npm) (malicious package)
- [MAL-2025-33197](https://insights.sbomify.com/MAL-2025-33197/): Malicious code in sierra-delta-rbjm (npm) (malicious package)
- [MAL-2025-33196](https://insights.sbomify.com/MAL-2025-33196/): Malicious code in sierra-delta-bzeq (npm) (malicious package)
- [MAL-2025-33195](https://insights.sbomify.com/MAL-2025-33195/): Malicious code in sierra-date-03qv (npm) (malicious package)
- [MAL-2025-33194](https://insights.sbomify.com/MAL-2025-33194/): Malicious code in sierra-cherry-raspberry-rsfnx (npm) (malicious package)
- [MAL-2025-33193](https://insights.sbomify.com/MAL-2025-33193/): Malicious code in sierra-bva-project (npm) (malicious package)
- [MAL-2025-33192](https://insights.sbomify.com/MAL-2025-33192/): Malicious code in sierra-bravo-qtkm (npm) (malicious package)
- [MAL-2025-33191](https://insights.sbomify.com/MAL-2025-33191/): Malicious code in sierra-b1c-project (npm) (malicious package)
- [MAL-2025-33190](https://insights.sbomify.com/MAL-2025-33190/): Malicious code in sierra-9f0-project (npm) (malicious package)
- [MAL-2025-3319](https://insights.sbomify.com/MAL-2025-3319/): Malicious code in @sporta-technology/d11-web-components.date-picker.date-picker (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/744/