# Vulnerabilities published in 2025


- [MAL-2025-32919](https://insights.sbomify.com/MAL-2025-32919/): Malicious code in selenipy (npm) (malicious package)
- [MAL-2025-32918](https://insights.sbomify.com/MAL-2025-32918/): Malicious code in selektion (npm) (malicious package)
- [MAL-2025-32917](https://insights.sbomify.com/MAL-2025-32917/): Malicious code in selbstvorstellung (npm) (malicious package)
- [MAL-2025-32916](https://insights.sbomify.com/MAL-2025-32916/): Malicious code in selbans (npm) (malicious package)
- [MAL-2025-32915](https://insights.sbomify.com/MAL-2025-32915/): Malicious code in seismology-unuk-google-eleventy (npm) (malicious package)
- [MAL-2025-32914](https://insights.sbomify.com/MAL-2025-32914/): Malicious code in seif (npm) (malicious package)
- [MAL-2025-32913](https://insights.sbomify.com/MAL-2025-32913/): Malicious code in segpub (npm) (malicious package)
- [MAL-2025-32912](https://insights.sbomify.com/MAL-2025-32912/): Malicious code in segmentread-paypal (npm) (malicious package)
- [MAL-2025-32911](https://insights.sbomify.com/MAL-2025-32911/): Malicious code in segmentlifecycle-paypal (npm) (malicious package)
- [MAL-2025-32910](https://insights.sbomify.com/MAL-2025-32910/): Malicious code in segment-platform-functional-test (npm) (malicious package)
- [MAL-2025-3291](https://insights.sbomify.com/MAL-2025-3291/): Malicious code in quaoqpdizoqsqdqsd (npm) (malicious package)
- [MAL-2025-32909](https://insights.sbomify.com/MAL-2025-32909/): Malicious code in seeren (npm) (malicious package)
- [MAL-2025-32908](https://insights.sbomify.com/MAL-2025-32908/): Malicious code in seer-js (npm) (malicious package)
- [MAL-2025-32907](https://insights.sbomify.com/MAL-2025-32907/): Malicious code in seemver (npm) (malicious package)
- [MAL-2025-32906](https://insights.sbomify.com/MAL-2025-32906/): Malicious code in seedling-viz-angular-wp2 (npm) (malicious package)
- [MAL-2025-32905](https://insights.sbomify.com/MAL-2025-32905/): Malicious code in sedona-angular-widget-launcher (npm) (malicious package)
- [MAL-2025-32904](https://insights.sbomify.com/MAL-2025-32904/): Malicious code in sedona-angular-gulp-tasks (npm) (malicious package)
- [MAL-2025-32903](https://insights.sbomify.com/MAL-2025-32903/): Malicious code in sedna-redshift-farout-umbriel (npm) (malicious package)
- [MAL-2025-32902](https://insights.sbomify.com/MAL-2025-32902/): Malicious code in sedna-proteomics-yaml-mantle (npm) (malicious package)
- [MAL-2025-32901](https://insights.sbomify.com/MAL-2025-32901/): Malicious code in sedna-helios-apex-antares (npm) (malicious package)
- [MAL-2025-32900](https://insights.sbomify.com/MAL-2025-32900/): Malicious code in sedna-dactyl-polaris-loglevel (npm) (malicious package)
- [MAL-2025-3290](https://insights.sbomify.com/MAL-2025-3290/): Malicious code in nsdhqhlqqka (npm) (malicious package)
- [MAL-2025-329](https://insights.sbomify.com/MAL-2025-329/): Malicious code in ai-plugin-template (npm) (malicious package)
- [MAL-2025-32899](https://insights.sbomify.com/MAL-2025-32899/): Malicious code in sedna-child-process-jasmine-impulse (npm) (malicious package)
- [MAL-2025-32898](https://insights.sbomify.com/MAL-2025-32898/): Malicious code in sedna-capella-paleoceanography-global (npm) (malicious package)
- [MAL-2025-32897](https://insights.sbomify.com/MAL-2025-32897/): Malicious code in sedinta (npm) (malicious package)
- [MAL-2025-32896](https://insights.sbomify.com/MAL-2025-32896/): Malicious code in sedimentology-xo-puppeteer-warp (npm) (malicious package)
- [MAL-2025-32895](https://insights.sbomify.com/MAL-2025-32895/): Malicious code in sedimentology-webdriver-manager-spectroscopy-writable (npm) (malicious package)
- [MAL-2025-32894](https://insights.sbomify.com/MAL-2025-32894/): Malicious code in sedimentology-mdx-rigel-planetology (npm) (malicious package)
- [MAL-2025-32893](https://insights.sbomify.com/MAL-2025-32893/): Malicious code in sedimentology-fork-gravitationalwave-eclipse (npm) (malicious package)
- [MAL-2025-32892](https://insights.sbomify.com/MAL-2025-32892/): Malicious code in sedimentology-ariel-mutation-geodynamo (npm) (malicious package)
- [MAL-2025-32891](https://insights.sbomify.com/MAL-2025-32891/): Malicious code in sedangky (npm) (malicious package)
- [MAL-2025-32890](https://insights.sbomify.com/MAL-2025-32890/): Malicious code in sed-simple-sandbox-reject-zero (npm) (malicious package)
- [MAL-2025-3289](https://insights.sbomify.com/MAL-2025-3289/): Malicious code in log-process (npm) (malicious package)
- [MAL-2025-32889](https://insights.sbomify.com/MAL-2025-32889/): Malicious code in sed-new-protected-signal-small (npm) (malicious package)
- [MAL-2025-32888](https://insights.sbomify.com/MAL-2025-32888/): Malicious code in sed-good-finally-tree-xi (npm) (malicious package)
- [MAL-2025-32887](https://insights.sbomify.com/MAL-2025-32887/): Malicious code in sed-deploy-shell-cat-grid (npm) (malicious package)
- [MAL-2025-32886](https://insights.sbomify.com/MAL-2025-32886/): Malicious code in securitydb (npm) (malicious package)
- [MAL-2025-32885](https://insights.sbomify.com/MAL-2025-32885/): Malicious code in securitycontext-paypal (npm) (malicious package)
- [MAL-2025-32884](https://insights.sbomify.com/MAL-2025-32884/): Malicious code in security_reports (npm) (malicious package)
- [MAL-2025-32883](https://insights.sbomify.com/MAL-2025-32883/): Malicious code in security.txt (npm) (malicious package)
- [MAL-2025-32882](https://insights.sbomify.com/MAL-2025-32882/): Malicious code in securicrypt-api (npm) (malicious package)
- [MAL-2025-32881](https://insights.sbomify.com/MAL-2025-32881/): Malicious code in securiace (npm) (malicious package)
- [MAL-2025-32880](https://insights.sbomify.com/MAL-2025-32880/): Malicious code in secure_identity_login_module (npm) (malicious package)
- [MAL-2025-3288](https://insights.sbomify.com/MAL-2025-3288/): Malicious code in list.fuzzysearch.js (npm) (malicious package)
- [MAL-2025-32879](https://insights.sbomify.com/MAL-2025-32879/): Malicious code in secure-sandbox-validate-public-reject (npm) (malicious package)
- [MAL-2025-32878](https://insights.sbomify.com/MAL-2025-32878/): Malicious code in secure-docs-app (npm) (malicious package)
- [MAL-2025-32877](https://insights.sbomify.com/MAL-2025-32877/): Malicious code in secure-daemon-bash-code-array (npm) (malicious package)
- [MAL-2025-32876](https://insights.sbomify.com/MAL-2025-32876/): Malicious code in secret_utility (npm) (malicious package)
- [MAL-2025-32875](https://insights.sbomify.com/MAL-2025-32875/): Malicious code in secden (npm) (malicious package)
- [MAL-2025-32874](https://insights.sbomify.com/MAL-2025-32874/): Malicious code in secbook-1to9 (npm) (malicious package)
- [MAL-2025-32873](https://insights.sbomify.com/MAL-2025-32873/): Malicious code in sec-learning (npm) (malicious package)
- [MAL-2025-32872](https://insights.sbomify.com/MAL-2025-32872/): Malicious code in sebrae (npm) (malicious package)
- [MAL-2025-32871](https://insights.sbomify.com/MAL-2025-32871/): Malicious code in seawall (npm) (malicious package)
- [MAL-2025-32870](https://insights.sbomify.com/MAL-2025-32870/): Malicious code in seaview (npm) (malicious package)
- [MAL-2025-3287](https://insights.sbomify.com/MAL-2025-3287/): Malicious code in gombot-crypto-jetpack (npm) (malicious package)
- [MAL-2025-32869](https://insights.sbomify.com/MAL-2025-32869/): Malicious code in searchend (npm) (malicious package)
- [MAL-2025-32868](https://insights.sbomify.com/MAL-2025-32868/): Malicious code in search_test_framework (npm) (malicious package)
- [MAL-2025-32867](https://insights.sbomify.com/MAL-2025-32867/): Malicious code in search-npm-blocking-manager (npm) (malicious package)
- [MAL-2025-32866](https://insights.sbomify.com/MAL-2025-32866/): Malicious code in search-fe (npm) (malicious package)
- [MAL-2025-32865](https://insights.sbomify.com/MAL-2025-32865/): Malicious code in sealord (npm) (malicious package)
- [MAL-2025-32864](https://insights.sbomify.com/MAL-2025-32864/): Malicious code in seajax (npm) (malicious package)
- [MAL-2025-32863](https://insights.sbomify.com/MAL-2025-32863/): Malicious code in seaborn-doc-zh (npm) (malicious package)
- [MAL-2025-32862](https://insights.sbomify.com/MAL-2025-32862/): Malicious code in se42 (npm) (malicious package)
- [MAL-2025-32861](https://insights.sbomify.com/MAL-2025-32861/): Malicious code in sdsdadasdsaxs (npm) (malicious package)
- [MAL-2025-32860](https://insights.sbomify.com/MAL-2025-32860/): Malicious code in sdpuicopy (npm) (malicious package)
- [MAL-2025-3286](https://insights.sbomify.com/MAL-2025-3286/): Malicious code in ds-sudqusdqhsdhqsdzoqi (npm) (malicious package)
- [MAL-2025-32859](https://insights.sbomify.com/MAL-2025-32859/): Malicious code in sdm630-modbus-tcp (npm) (malicious package)
- [MAL-2025-32858](https://insights.sbomify.com/MAL-2025-32858/): Malicious code in sdk-workshop (npm) (malicious package)
- [MAL-2025-32857](https://insights.sbomify.com/MAL-2025-32857/): Malicious code in sdjournal (npm) (malicious package)
- [MAL-2025-32856](https://insights.sbomify.com/MAL-2025-32856/): Malicious code in sdhajgdw (npm) (malicious package)
- [MAL-2025-32855](https://insights.sbomify.com/MAL-2025-32855/): Malicious code in sdhajgdaj (npm) (malicious package)
- [MAL-2025-32854](https://insights.sbomify.com/MAL-2025-32854/): Malicious code in sdfsfewetw1 (npm) (malicious package)
- [MAL-2025-32853](https://insights.sbomify.com/MAL-2025-32853/): Malicious code in sdfjghlkfjdshlkjdhsfg (npm) (malicious package)
- [MAL-2025-32852](https://insights.sbomify.com/MAL-2025-32852/): Malicious code in sderhmxgjyzakqbk (npm) (malicious package)
- [MAL-2025-32851](https://insights.sbomify.com/MAL-2025-32851/): Malicious code in sdc-dynamic-tile (npm) (malicious package)
- [MAL-2025-32850](https://insights.sbomify.com/MAL-2025-32850/): Malicious code in sdadwjhxz (npm) (malicious package)
- [MAL-2025-3285](https://insights.sbomify.com/MAL-2025-3285/): Malicious code in discord.js-selfbot-13 (npm) (malicious package)
- [MAL-2025-32849](https://insights.sbomify.com/MAL-2025-32849/): Malicious code in scwtest (npm) (malicious package)
- [MAL-2025-32848](https://insights.sbomify.com/MAL-2025-32848/): Malicious code in scv-external-telephony-sfdx-app (npm) (malicious package)
- [MAL-2025-32847](https://insights.sbomify.com/MAL-2025-32847/): Malicious code in scutshots (npm) (malicious package)
- [MAL-2025-32846](https://insights.sbomify.com/MAL-2025-32846/): Malicious code in scuntestpk (npm) (malicious package)
- [MAL-2025-32845](https://insights.sbomify.com/MAL-2025-32845/): Malicious code in scully (npm) (malicious package)
- [MAL-2025-32844](https://insights.sbomify.com/MAL-2025-32844/): Malicious code in scrupload (npm) (malicious package)
- [MAL-2025-32843](https://insights.sbomify.com/MAL-2025-32843/): Malicious code in scrumwise (npm) (malicious package)
- [MAL-2025-32842](https://insights.sbomify.com/MAL-2025-32842/): Malicious code in scrumple-windows-64 (npm) (malicious package)
- [MAL-2025-32841](https://insights.sbomify.com/MAL-2025-32841/): Malicious code in scrumple-linux-64 (npm) (malicious package)
- [MAL-2025-32840](https://insights.sbomify.com/MAL-2025-32840/): Malicious code in scrollviewer (npm) (malicious package)
- [MAL-2025-3284](https://insights.sbomify.com/MAL-2025-3284/): Malicious code in com.adjust.test (npm) (malicious package)
- [MAL-2025-32839](https://insights.sbomify.com/MAL-2025-32839/): Malicious code in scrm.js (npm) (malicious package)
- [MAL-2025-32838](https://insights.sbomify.com/MAL-2025-32838/): Malicious code in scriptsx (npm) (malicious package)
- [MAL-2025-32837](https://insights.sbomify.com/MAL-2025-32837/): Malicious code in scriptssh (npm) (malicious package)
- [MAL-2025-32836](https://insights.sbomify.com/MAL-2025-32836/): Malicious code in scripts-quantum-postcss-loader-umbriel (npm) (malicious package)
- [MAL-2025-32835](https://insights.sbomify.com/MAL-2025-32835/): Malicious code in scripts-checkout-apis-temp (npm) (malicious package)
- [MAL-2025-32834](https://insights.sbomify.com/MAL-2025-32834/): Malicious code in scripts-astrobiology-testcafe-cluster (npm) (malicious package)
- [MAL-2025-32833](https://insights.sbomify.com/MAL-2025-32833/): Malicious code in scriptftb (npm) (malicious package)
- [MAL-2025-32832](https://insights.sbomify.com/MAL-2025-32832/): Malicious code in scribnrjs (npm) (malicious package)
- [MAL-2025-32831](https://insights.sbomify.com/MAL-2025-32831/): Malicious code in scribd-petunia (npm) (malicious package)
- [MAL-2025-32830](https://insights.sbomify.com/MAL-2025-32830/): Malicious code in screwdriver-plugin-users (npm) (malicious package)
- [MAL-2025-3283](https://insights.sbomify.com/MAL-2025-3283/): Malicious code in cantina-senior-frontend-interview-prompt (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/748/
