# Vulnerabilities published in 2025


- [MAL-2025-33189](https://insights.sbomify.com/MAL-2025-33189/): Malicious code in sierra-9el-project (npm) (malicious package)
- [MAL-2025-33188](https://insights.sbomify.com/MAL-2025-33188/): Malicious code in sierra-7bo-project (npm) (malicious package)
- [MAL-2025-33187](https://insights.sbomify.com/MAL-2025-33187/): Malicious code in sierra-58r-project (npm) (malicious package)
- [MAL-2025-33186](https://insights.sbomify.com/MAL-2025-33186/): Malicious code in sierra-505-project (npm) (malicious package)
- [MAL-2025-33185](https://insights.sbomify.com/MAL-2025-33185/): Malicious code in sierra-3ll-project (npm) (malicious package)
- [MAL-2025-33184](https://insights.sbomify.com/MAL-2025-33184/): Malicious code in sierra-23c-project (npm) (malicious package)
- [MAL-2025-33183](https://insights.sbomify.com/MAL-2025-33183/): Malicious code in sidannar (npm) (malicious package)
- [MAL-2025-33182](https://insights.sbomify.com/MAL-2025-33182/): Malicious code in sicoca (npm) (malicious package)
- [MAL-2025-33181](https://insights.sbomify.com/MAL-2025-33181/): Malicious code in shyp-components (npm) (malicious package)
- [MAL-2025-33180](https://insights.sbomify.com/MAL-2025-33180/): Malicious code in shwoten (npm) (malicious package)
- [MAL-2025-3318](https://insights.sbomify.com/MAL-2025-3318/): Malicious code in @sporta-technology/d11-web-components.datatable (npm) (malicious package)
- [MAL-2025-33179](https://insights.sbomify.com/MAL-2025-33179/): Malicious code in shusnow (npm) (malicious package)
- [MAL-2025-33178](https://insights.sbomify.com/MAL-2025-33178/): Malicious code in shupito (npm) (malicious package)
- [MAL-2025-33177](https://insights.sbomify.com/MAL-2025-33177/): Malicious code in shujuku-xutong-quanshu (npm) (malicious package)
- [MAL-2025-33176](https://insights.sbomify.com/MAL-2025-33176/): Malicious code in shujuku-xitong-shujuku-yushuju-cangku-daolun (npm) (malicious package)
- [MAL-2025-33175](https://insights.sbomify.com/MAL-2025-33175/): Malicious code in shujuku-xitong-shixian (npm) (malicious package)
- [MAL-2025-33174](https://insights.sbomify.com/MAL-2025-33174/): Malicious code in shujuku-xitong-sheji-shixian-yuguanli-jichupian (npm) (malicious package)
- [MAL-2025-33173](https://insights.sbomify.com/MAL-2025-33173/): Malicious code in shujuku-xitong-jichu-jiaocheng (npm) (malicious package)
- [MAL-2025-33172](https://insights.sbomify.com/MAL-2025-33172/): Malicious code in shujuku-xitong-gainian (npm) (malicious package)
- [MAL-2025-33171](https://insights.sbomify.com/MAL-2025-33171/): Malicious code in shujuku-xitong-daolun (npm) (malicious package)
- [MAL-2025-33170](https://insights.sbomify.com/MAL-2025-33170/): Malicious code in shueoiwsi (npm) (malicious package)
- [MAL-2025-3317](https://insights.sbomify.com/MAL-2025-3317/): Malicious code in @sporta-technology/d11-web-components.controller (npm) (malicious package)
- [MAL-2025-33169](https://insights.sbomify.com/MAL-2025-33169/): Malicious code in shstuff (npm) (malicious package)
- [MAL-2025-33168](https://insights.sbomify.com/MAL-2025-33168/): Malicious code in shruthihm (npm) (malicious package)
- [MAL-2025-33167](https://insights.sbomify.com/MAL-2025-33167/): Malicious code in shrugging-logging (npm) (malicious package)
- [MAL-2025-33166](https://insights.sbomify.com/MAL-2025-33166/): Malicious code in showview (npm) (malicious package)
- [MAL-2025-33165](https://insights.sbomify.com/MAL-2025-33165/): Malicious code in showsync (npm) (malicious package)
- [MAL-2025-33164](https://insights.sbomify.com/MAL-2025-33164/): Malicious code in showhaus (npm) (malicious package)
- [MAL-2025-33163](https://insights.sbomify.com/MAL-2025-33163/): Malicious code in show-version (npm) (malicious package)
- [MAL-2025-33162](https://insights.sbomify.com/MAL-2025-33162/): Malicious code in show-help (npm) (malicious package)
- [MAL-2025-33161](https://insights.sbomify.com/MAL-2025-33161/): Malicious code in shoveldev (npm) (malicious package)
- [MAL-2025-33160](https://insights.sbomify.com/MAL-2025-33160/): Malicious code in shortpub (npm) (malicious package)
- [MAL-2025-3316](https://insights.sbomify.com/MAL-2025-3316/): Malicious code in @sporta-technology/d11-web-components.console (npm) (malicious package)
- [MAL-2025-33159](https://insights.sbomify.com/MAL-2025-33159/): Malicious code in shortefy (npm) (malicious package)
- [MAL-2025-33158](https://insights.sbomify.com/MAL-2025-33158/): Malicious code in short-root-error-encrypt-boolean (npm) (malicious package)
- [MAL-2025-33157](https://insights.sbomify.com/MAL-2025-33157/): Malicious code in short-decrypt-mock-awk-function (npm) (malicious package)
- [MAL-2025-33156](https://insights.sbomify.com/MAL-2025-33156/): Malicious code in shopriver (npm) (malicious package)
- [MAL-2025-33155](https://insights.sbomify.com/MAL-2025-33155/): Malicious code in shopit (npm) (malicious package)
- [MAL-2025-33154](https://insights.sbomify.com/MAL-2025-33154/): Malicious code in shopify_transporter (npm) (malicious package)
- [MAL-2025-33153](https://insights.sbomify.com/MAL-2025-33153/): Malicious code in shopify_theme (npm) (malicious package)
- [MAL-2025-33152](https://insights.sbomify.com/MAL-2025-33152/): Malicious code in shopify_security_base (npm) (malicious package)
- [MAL-2025-33151](https://insights.sbomify.com/MAL-2025-33151/): Malicious code in shopify_panama (npm) (malicious package)
- [MAL-2025-33150](https://insights.sbomify.com/MAL-2025-33150/): Malicious code in shopify_minitest_reporters (npm) (malicious package)
- [MAL-2025-3315](https://insights.sbomify.com/MAL-2025-3315/): Malicious code in @sporta-technology/d11-web-components.composition-wrapper (npm) (malicious package)
- [MAL-2025-33149](https://insights.sbomify.com/MAL-2025-33149/): Malicious code in shopify_metrics (npm) (malicious package)
- [MAL-2025-33148](https://insights.sbomify.com/MAL-2025-33148/): Malicious code in shopify_lhm (npm) (malicious package)
- [MAL-2025-33147](https://insights.sbomify.com/MAL-2025-33147/): Malicious code in shopify_function (npm) (malicious package)
- [MAL-2025-33146](https://insights.sbomify.com/MAL-2025-33146/): Malicious code in shopify_fthrottle (npm) (malicious package)
- [MAL-2025-33145](https://insights.sbomify.com/MAL-2025-33145/): Malicious code in shopify_flow_app (npm) (malicious package)
- [MAL-2025-33144](https://insights.sbomify.com/MAL-2025-33144/): Malicious code in shopify_app_platform (npm) (malicious package)
- [MAL-2025-33143](https://insights.sbomify.com/MAL-2025-33143/): Malicious code in shopify_api_console (npm) (malicious package)
- [MAL-2025-33142](https://insights.sbomify.com/MAL-2025-33142/): Malicious code in shopify-translation_platform (npm) (malicious package)
- [MAL-2025-33141](https://insights.sbomify.com/MAL-2025-33141/): Malicious code in shopify-tracing (npm) (malicious package)
- [MAL-2025-33140](https://insights.sbomify.com/MAL-2025-33140/): Malicious code in shopify-throttle (npm) (malicious package)
- [MAL-2025-3314](https://insights.sbomify.com/MAL-2025-3314/): Malicious code in @sporta-technology/d11-web-components.chip (npm) (malicious package)
- [MAL-2025-33139](https://insights.sbomify.com/MAL-2025-33139/): Malicious code in shopify-testing-cops (npm) (malicious package)
- [MAL-2025-33138](https://insights.sbomify.com/MAL-2025-33138/): Malicious code in shopify-secrets (npm) (malicious package)
- [MAL-2025-33137](https://insights.sbomify.com/MAL-2025-33137/): Malicious code in shopify-rails (npm) (malicious package)
- [MAL-2025-33136](https://insights.sbomify.com/MAL-2025-33136/): Malicious code in shopify-proctor (npm) (malicious package)
- [MAL-2025-33135](https://insights.sbomify.com/MAL-2025-33135/): Malicious code in shopify-ping (npm) (malicious package)
- [MAL-2025-33134](https://insights.sbomify.com/MAL-2025-33134/): Malicious code in shopify-payments-terms (npm) (malicious package)
- [MAL-2025-33133](https://insights.sbomify.com/MAL-2025-33133/): Malicious code in shopify-payments-configuration (npm) (malicious package)
- [MAL-2025-33132](https://insights.sbomify.com/MAL-2025-33132/): Malicious code in shopify-opensrs (npm) (malicious package)
- [MAL-2025-33131](https://insights.sbomify.com/MAL-2025-33131/): Malicious code in shopify-money (npm) (malicious package)
- [MAL-2025-33130](https://insights.sbomify.com/MAL-2025-33130/): Malicious code in shopify-lita-slack (npm) (malicious package)
- [MAL-2025-3313](https://insights.sbomify.com/MAL-2025-3313/): Malicious code in @sporta-technology/d11-web-components.checkbox (npm) (malicious package)
- [MAL-2025-33129](https://insights.sbomify.com/MAL-2025-33129/): Malicious code in shopify-junos-ez-stdlib (npm) (malicious package)
- [MAL-2025-33128](https://insights.sbomify.com/MAL-2025-33128/): Malicious code in shopify-i18n (npm) (malicious package)
- [MAL-2025-33127](https://insights.sbomify.com/MAL-2025-33127/): Malicious code in shopify-graphql-cops (npm) (malicious package)
- [MAL-2025-33126](https://insights.sbomify.com/MAL-2025-33126/): Malicious code in shopify-graphiql-rails (npm) (malicious package)
- [MAL-2025-33125](https://insights.sbomify.com/MAL-2025-33125/): Malicious code in shopify-function-trampoline (npm) (malicious package)
- [MAL-2025-33124](https://insights.sbomify.com/MAL-2025-33124/): Malicious code in shopify-dev (npm) (malicious package)
- [MAL-2025-33123](https://insights.sbomify.com/MAL-2025-33123/): Malicious code in shopify-cops (npm) (malicious package)
- [MAL-2025-33122](https://insights.sbomify.com/MAL-2025-33122/): Malicious code in shopify-assets (npm) (malicious package)
- [MAL-2025-33121](https://insights.sbomify.com/MAL-2025-33121/): Malicious code in shopify-app-session-storage-sqlite (npm) (malicious package)
- [MAL-2025-33120](https://insights.sbomify.com/MAL-2025-33120/): Malicious code in shopify-app-session-storage-redis (npm) (malicious package)
- [MAL-2025-3312](https://insights.sbomify.com/MAL-2025-3312/): Malicious code in @sporta-technology/d11-web-components.carousel (npm) (malicious package)
- [MAL-2025-33119](https://insights.sbomify.com/MAL-2025-33119/): Malicious code in shopify-app-session-storage-postgresql (npm) (malicious package)
- [MAL-2025-33118](https://insights.sbomify.com/MAL-2025-33118/): Malicious code in shopify-app-session-storage-mysql (npm) (malicious package)
- [MAL-2025-33117](https://insights.sbomify.com/MAL-2025-33117/): Malicious code in shopify-app-session-storage-mongodb (npm) (malicious package)
- [MAL-2025-33116](https://insights.sbomify.com/MAL-2025-33116/): Malicious code in shopify-app-session-storage-memory (npm) (malicious package)
- [MAL-2025-33115](https://insights.sbomify.com/MAL-2025-33115/): Malicious code in shopify-app-session-storage-kv (npm) (malicious package)
- [MAL-2025-33114](https://insights.sbomify.com/MAL-2025-33114/): Malicious code in shopify-app-session-storage (npm) (malicious package)
- [MAL-2025-33113](https://insights.sbomify.com/MAL-2025-33113/): Malicious code in shopify-app-express (npm) (malicious package)
- [MAL-2025-33112](https://insights.sbomify.com/MAL-2025-33112/): Malicious code in shopify-adt (npm) (malicious package)
- [MAL-2025-33111](https://insights.sbomify.com/MAL-2025-33111/): Malicious code in shopaws (npm) (malicious package)
- [MAL-2025-33110](https://insights.sbomify.com/MAL-2025-33110/): Malicious code in shop-minis-platform-sdk (npm) (malicious package)
- [MAL-2025-3311](https://insights.sbomify.com/MAL-2025-3311/): Malicious code in @sporta-technology/d11-web-components.button (npm) (malicious package)
- [MAL-2025-33109](https://insights.sbomify.com/MAL-2025-33109/): Malicious code in shop-minis-cli (npm) (malicious package)
- [MAL-2025-33108](https://insights.sbomify.com/MAL-2025-33108/): Malicious code in shoestory (npm) (malicious package)
- [MAL-2025-33107](https://insights.sbomify.com/MAL-2025-33107/): Malicious code in shoesapps (npm) (malicious package)
- [MAL-2025-33106](https://insights.sbomify.com/MAL-2025-33106/): Malicious code in shjknobazeipqrlx (npm) (malicious package)
- [MAL-2025-33105](https://insights.sbomify.com/MAL-2025-33105/): Malicious code in shiyun (npm) (malicious package)
- [MAL-2025-33104](https://insights.sbomify.com/MAL-2025-33104/): Malicious code in shiyong-meteor-goujian-danye-web-yingyong (npm) (malicious package)
- [MAL-2025-33103](https://insights.sbomify.com/MAL-2025-33103/): Malicious code in shitei (npm) (malicious package)
- [MAL-2025-33102](https://insights.sbomify.com/MAL-2025-33102/): Malicious code in shipping_base (npm) (malicious package)
- [MAL-2025-33101](https://insights.sbomify.com/MAL-2025-33101/): Malicious code in shipit-engine (npm) (malicious package)
- [MAL-2025-33100](https://insights.sbomify.com/MAL-2025-33100/): Malicious code in shio-togel (npm) (malicious package)
- [MAL-2025-3310](https://insights.sbomify.com/MAL-2025-3310/): Malicious code in @sporta-technology/d11-web-components.breadcrumbs (npm) (malicious package)
- [MAL-2025-331](https://insights.sbomify.com/MAL-2025-331/): Malicious code in another-depconf-poc (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/745/