# Vulnerabilities published in 2025


- [MAL-2025-33008](https://insights.sbomify.com/MAL-2025-33008/): Malicious code in serverless-router (npm) (malicious package)
- [MAL-2025-33007](https://insights.sbomify.com/MAL-2025-33007/): Malicious code in serverless-plugin-rds-trigger (npm) (malicious package)
- [MAL-2025-33006](https://insights.sbomify.com/MAL-2025-33006/): Malicious code in server-superposition-grus-asthenosphere (npm) (malicious package)
- [MAL-2025-33005](https://insights.sbomify.com/MAL-2025-33005/): Malicious code in server-push-webpack-plugin (npm) (malicious package)
- [MAL-2025-33004](https://insights.sbomify.com/MAL-2025-33004/): Malicious code in server-mini-css-extract-plugin-orogeny-spawn (npm) (malicious package)
- [MAL-2025-33003](https://insights.sbomify.com/MAL-2025-33003/): Malicious code in server-kastra-paleoceanography-fornax (npm) (malicious package)
- [MAL-2025-33002](https://insights.sbomify.com/MAL-2025-33002/): Malicious code in server-for-testing (npm) (malicious package)
- [MAL-2025-33001](https://insights.sbomify.com/MAL-2025-33001/): Malicious code in server-cybernetics-spinner-init (npm) (malicious package)
- [MAL-2025-33000](https://insights.sbomify.com/MAL-2025-33000/): Malicious code in serswef3 (npm) (malicious package)
- [MAL-2025-3300](https://insights.sbomify.com/MAL-2025-3300/): Malicious code in @flutterfire/source-versions (npm) (malicious package)
- [MAL-2025-330](https://insights.sbomify.com/MAL-2025-330/): Malicious code in angular-blockchain-wallet (npm) (malicious package)
- [MAL-2025-33](https://insights.sbomify.com/MAL-2025-33/): Malicious code in pre-commit-tasks (npm) (malicious package)
- [MAL-2025-32999](https://insights.sbomify.com/MAL-2025-32999/): Malicious code in serraview.common.styles (npm) (malicious package)
- [MAL-2025-32998](https://insights.sbomify.com/MAL-2025-32998/): Malicious code in serqet (npm) (malicious package)
- [MAL-2025-32997](https://insights.sbomify.com/MAL-2025-32997/): Malicious code in serilize (npm) (malicious package)
- [MAL-2025-32996](https://insights.sbomify.com/MAL-2025-32996/): Malicious code in serien (npm) (malicious package)
- [MAL-2025-32995](https://insights.sbomify.com/MAL-2025-32995/): Malicious code in serialport-galileo-test (npm) (malicious package)
- [MAL-2025-32994](https://insights.sbomify.com/MAL-2025-32994/): Malicious code in serializes (npm) (malicious package)
- [MAL-2025-32993](https://insights.sbomify.com/MAL-2025-32993/): Malicious code in serialize-sudo-delta-sandbox-decode (npm) (malicious package)
- [MAL-2025-32992](https://insights.sbomify.com/MAL-2025-32992/): Malicious code in serialize-stub-secure-protected-psi (npm) (malicious package)
- [MAL-2025-32991](https://insights.sbomify.com/MAL-2025-32991/): Malicious code in serialize-module-wind-cache-execute (npm) (malicious package)
- [MAL-2025-32990](https://insights.sbomify.com/MAL-2025-32990/): Malicious code in seriales (npm) (malicious package)
- [MAL-2025-3299](https://insights.sbomify.com/MAL-2025-3299/): Malicious code in @flutterfire/source-api-reference (npm) (malicious package)
- [MAL-2025-32989](https://insights.sbomify.com/MAL-2025-32989/): Malicious code in serenity-mxxul-weor6-knoll-project (npm) (malicious package)
- [MAL-2025-32988](https://insights.sbomify.com/MAL-2025-32988/): Malicious code in serenity-faz39-hvnww-ivy-project (npm) (malicious package)
- [MAL-2025-32987](https://insights.sbomify.com/MAL-2025-32987/): Malicious code in serenade_vtn2m_wk3n2_cascade (npm) (malicious package)
- [MAL-2025-32986](https://insights.sbomify.com/MAL-2025-32986/): Malicious code in serenade_sixkt_9y3u2_mirage (npm) (malicious package)
- [MAL-2025-32985](https://insights.sbomify.com/MAL-2025-32985/): Malicious code in serenade_oez8j_9u6af_nimbus (npm) (malicious package)
- [MAL-2025-32984](https://insights.sbomify.com/MAL-2025-32984/): Malicious code in serenade_maykq_jaho3_glacier (npm) (malicious package)
- [MAL-2025-32983](https://insights.sbomify.com/MAL-2025-32983/): Malicious code in serenade_hdv31_vj5fk_nymph (npm) (malicious package)
- [MAL-2025-32982](https://insights.sbomify.com/MAL-2025-32982/): Malicious code in serenade_aq47m_s5gyz_lake (npm) (malicious package)
- [MAL-2025-32981](https://insights.sbomify.com/MAL-2025-32981/): Malicious code in serenade_amb74_8ludv_ember (npm) (malicious package)
- [MAL-2025-32980](https://insights.sbomify.com/MAL-2025-32980/): Malicious code in serenade_7umzp_dfa16_quasar (npm) (malicious package)
- [MAL-2025-3298](https://insights.sbomify.com/MAL-2025-3298/): Malicious code in 0xpolygonhermez (npm) (malicious package)
- [MAL-2025-32979](https://insights.sbomify.com/MAL-2025-32979/): Malicious code in serenade_5ti9p_yiirq_molecule (npm) (malicious package)
- [MAL-2025-32978](https://insights.sbomify.com/MAL-2025-32978/): Malicious code in serenade_42srj_fdzrz_nimbus (npm) (malicious package)
- [MAL-2025-32977](https://insights.sbomify.com/MAL-2025-32977/): Malicious code in serenade_114yf_kmug5_vantage (npm) (malicious package)
- [MAL-2025-32976](https://insights.sbomify.com/MAL-2025-32976/): Malicious code in serenade-yonder-eop915-project (npm) (malicious package)
- [MAL-2025-32975](https://insights.sbomify.com/MAL-2025-32975/): Malicious code in seraque (npm) (malicious package)
- [MAL-2025-32974](https://insights.sbomify.com/MAL-2025-32974/): Malicious code in ser3q (npm) (malicious package)
- [MAL-2025-32973](https://insights.sbomify.com/MAL-2025-32973/): Malicious code in sequoia-zenith-utz354-project (npm) (malicious package)
- [MAL-2025-32972](https://insights.sbomify.com/MAL-2025-32972/): Malicious code in sequoia-zebra-nef375-project (npm) (malicious package)
- [MAL-2025-32971](https://insights.sbomify.com/MAL-2025-32971/): Malicious code in sequoia-zebra-mkq721-project (npm) (malicious package)
- [MAL-2025-32970](https://insights.sbomify.com/MAL-2025-32970/): Malicious code in sequoia-yard-pnq138-project (npm) (malicious package)
- [MAL-2025-3297](https://insights.sbomify.com/MAL-2025-3297/): Malicious code in keypair-encryptor (npm) (malicious package)
- [MAL-2025-32969](https://insights.sbomify.com/MAL-2025-32969/): Malicious code in sequoia-waterfall-mch666-project (npm) (malicious package)
- [MAL-2025-32968](https://insights.sbomify.com/MAL-2025-32968/): Malicious code in sequoia-thistle-xon839-project (npm) (malicious package)
- [MAL-2025-32967](https://insights.sbomify.com/MAL-2025-32967/): Malicious code in sequoia-pinnacle-ykf708-project (npm) (malicious package)
- [MAL-2025-32966](https://insights.sbomify.com/MAL-2025-32966/): Malicious code in sequoia-nautilus-qud295-project (npm) (malicious package)
- [MAL-2025-32965](https://insights.sbomify.com/MAL-2025-32965/): Malicious code in sequoia-kiwi-mqz132-project (npm) (malicious package)
- [MAL-2025-32964](https://insights.sbomify.com/MAL-2025-32964/): Malicious code in sequoia-jade-ywa622-project (npm) (malicious package)
- [MAL-2025-32963](https://insights.sbomify.com/MAL-2025-32963/): Malicious code in sequoia-icicle-wvr438-project (npm) (malicious package)
- [MAL-2025-32962](https://insights.sbomify.com/MAL-2025-32962/): Malicious code in sequoia-glacier-vvq207-project (npm) (malicious package)
- [MAL-2025-32961](https://insights.sbomify.com/MAL-2025-32961/): Malicious code in sequoia-fern-rmb064-project (npm) (malicious package)
- [MAL-2025-32960](https://insights.sbomify.com/MAL-2025-32960/): Malicious code in sequer (npm) (malicious package)
- [MAL-2025-3296](https://insights.sbomify.com/MAL-2025-3296/): Malicious code in @template-builder/iframe-api (npm) (malicious package)
- [MAL-2025-32959](https://insights.sbomify.com/MAL-2025-32959/): Malicious code in sequelize-schema-file-generator (npm) (malicious package)
- [MAL-2025-32958](https://insights.sbomify.com/MAL-2025-32958/): Malicious code in sequelize-models-version-history (npm) (malicious package)
- [MAL-2025-32957](https://insights.sbomify.com/MAL-2025-32957/): Malicious code in sepbaue1 (npm) (malicious package)
- [MAL-2025-32956](https://insights.sbomify.com/MAL-2025-32956/): Malicious code in seotools (npm) (malicious package)
- [MAL-2025-32955](https://insights.sbomify.com/MAL-2025-32955/): Malicious code in seonatmunsetmaouseomauntsmeoatnumeontkmnteumntemoiaoisntmoeunitmoeantum (npm) (malicious package)
- [MAL-2025-32954](https://insights.sbomify.com/MAL-2025-32954/): Malicious code in sentry-sdk-browser-extension (npm) (malicious package)
- [MAL-2025-32953](https://insights.sbomify.com/MAL-2025-32953/): Malicious code in sentimnet (npm) (malicious package)
- [MAL-2025-32952](https://insights.sbomify.com/MAL-2025-32952/): Malicious code in sensugaz (npm) (malicious package)
- [MAL-2025-32951](https://insights.sbomify.com/MAL-2025-32951/): Malicious code in sensoplex (npm) (malicious package)
- [MAL-2025-32950](https://insights.sbomify.com/MAL-2025-32950/): Malicious code in senku-tea (npm) (malicious package)
- [MAL-2025-3295](https://insights.sbomify.com/MAL-2025-3295/): Malicious code in bvr-api (RubyGems) (malicious package)
- [MAL-2025-32949](https://insights.sbomify.com/MAL-2025-32949/): Malicious code in senginx (npm) (malicious package)
- [MAL-2025-32948](https://insights.sbomify.com/MAL-2025-32948/): Malicious code in senecacli (npm) (malicious package)
- [MAL-2025-32947](https://insights.sbomify.com/MAL-2025-32947/): Malicious code in sendgst (npm) (malicious package)
- [MAL-2025-32946](https://insights.sbomify.com/MAL-2025-32946/): Malicious code in send-alimail (npm) (malicious package)
- [MAL-2025-32945](https://insights.sbomify.com/MAL-2025-32945/): Malicious code in senchads (npm) (malicious package)
- [MAL-2025-32944](https://insights.sbomify.com/MAL-2025-32944/): Malicious code in semtypes (npm) (malicious package)
- [MAL-2025-32943](https://insights.sbomify.com/MAL-2025-32943/): Malicious code in semlinker (npm) (malicious package)
- [MAL-2025-32942](https://insights.sbomify.com/MAL-2025-32942/): Malicious code in semio-lever-model (npm) (malicious package)
- [MAL-2025-32941](https://insights.sbomify.com/MAL-2025-32941/): Malicious code in seminarc (npm) (malicious package)
- [MAL-2025-32940](https://insights.sbomify.com/MAL-2025-32940/): Malicious code in semideus (npm) (malicious package)
- [MAL-2025-3294](https://insights.sbomify.com/MAL-2025-3294/): Malicious code in windpapi-prebuild (npm) (malicious package)
- [MAL-2025-32939](https://insights.sbomify.com/MAL-2025-32939/): Malicious code in semian (npm) (malicious package)
- [MAL-2025-32938](https://insights.sbomify.com/MAL-2025-32938/): Malicious code in semdroid (npm) (malicious package)
- [MAL-2025-32937](https://insights.sbomify.com/MAL-2025-32937/): Malicious code in semathrottle (npm) (malicious package)
- [MAL-2025-32936](https://insights.sbomify.com/MAL-2025-32936/): Malicious code in semantic-ui-restart-solarnebula-borealis (npm) (malicious package)
- [MAL-2025-32935](https://insights.sbomify.com/MAL-2025-32935/): Malicious code in semantic-ui-radiometric-tectonophysics-ethology (npm) (malicious package)
- [MAL-2025-32934](https://insights.sbomify.com/MAL-2025-32934/): Malicious code in semantic-ui-pm2-upgrade-hugo (npm) (malicious package)
- [MAL-2025-32933](https://insights.sbomify.com/MAL-2025-32933/): Malicious code in semantic-ui-perturbation-oortcloud-draco (npm) (malicious package)
- [MAL-2025-32932](https://insights.sbomify.com/MAL-2025-32932/): Malicious code in semantic-ui-nestjs-ionosphere-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-32931](https://insights.sbomify.com/MAL-2025-32931/): Malicious code in semantic-ui-mongodb-proxima-lynx (npm) (malicious package)
- [MAL-2025-32930](https://insights.sbomify.com/MAL-2025-32930/): Malicious code in semantic-release-futurology-development-canopus (npm) (malicious package)
- [MAL-2025-3293](https://insights.sbomify.com/MAL-2025-3293/): Malicious code in watch-test-unit (npm) (malicious package)
- [MAL-2025-32929](https://insights.sbomify.com/MAL-2025-32929/): Malicious code in semantic-release-atlas-google-kaus (npm) (malicious package)
- [MAL-2025-32928](https://insights.sbomify.com/MAL-2025-32928/): Malicious code in semanaibm (npm) (malicious package)
- [MAL-2025-32927](https://insights.sbomify.com/MAL-2025-32927/): Malicious code in sema-ui-components (npm) (malicious package)
- [MAL-2025-32926](https://insights.sbomify.com/MAL-2025-32926/): Malicious code in selper (npm) (malicious package)
- [MAL-2025-32925](https://insights.sbomify.com/MAL-2025-32925/): Malicious code in sellerhub-fe-featureflags (npm) (malicious package)
- [MAL-2025-32924](https://insights.sbomify.com/MAL-2025-32924/): Malicious code in selfpinger (npm) (malicious package)
- [MAL-2025-32923](https://insights.sbomify.com/MAL-2025-32923/): Malicious code in SelfieJS (npm) (malicious package)
- [MAL-2025-32922](https://insights.sbomify.com/MAL-2025-32922/): Malicious code in selfiehd (npm) (malicious package)
- [MAL-2025-32921](https://insights.sbomify.com/MAL-2025-32921/): Malicious code in self-require-trap (npm) (malicious package)
- [MAL-2025-32920](https://insights.sbomify.com/MAL-2025-32920/): Malicious code in selenium-exobiology-archaeogenetics-backend (npm) (malicious package)
- [MAL-2025-3292](https://insights.sbomify.com/MAL-2025-3292/): Malicious code in vertex-lba (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/747/