# Vulnerabilities published in 2025


- [MAL-2025-32738](https://insights.sbomify.com/MAL-2025-32738/): Malicious code in savanna-violet-fxq826-project (npm) (malicious package)
- [MAL-2025-32737](https://insights.sbomify.com/MAL-2025-32737/): Malicious code in savanna-sapphire-sdb304-project (npm) (malicious package)
- [MAL-2025-32736](https://insights.sbomify.com/MAL-2025-32736/): Malicious code in savanna-sapphire-opz821-project (npm) (malicious package)
- [MAL-2025-32735](https://insights.sbomify.com/MAL-2025-32735/): Malicious code in savanna-penguin-snn123-project (npm) (malicious package)
- [MAL-2025-32734](https://insights.sbomify.com/MAL-2025-32734/): Malicious code in savanna-octopus-kuy436-project (npm) (malicious package)
- [MAL-2025-32733](https://insights.sbomify.com/MAL-2025-32733/): Malicious code in savanna-oak-ebc859-project (npm) (malicious package)
- [MAL-2025-32732](https://insights.sbomify.com/MAL-2025-32732/): Malicious code in savanna-kite-yhm593-project (npm) (malicious package)
- [MAL-2025-32731](https://insights.sbomify.com/MAL-2025-32731/): Malicious code in savanna-jasmine-crb619-project (npm) (malicious package)
- [MAL-2025-32730](https://insights.sbomify.com/MAL-2025-32730/): Malicious code in savanna-island-qsa074-project (npm) (malicious package)
- [MAL-2025-3273](https://insights.sbomify.com/MAL-2025-3273/): Malicious code in rainbow-sdk (npm) (malicious package)
- [MAL-2025-32729](https://insights.sbomify.com/MAL-2025-32729/): Malicious code in savanna-giraffe-ary922-project (npm) (malicious package)
- [MAL-2025-32728](https://insights.sbomify.com/MAL-2025-32728/): Malicious code in savanna-fern-qev606-project (npm) (malicious package)
- [MAL-2025-32727](https://insights.sbomify.com/MAL-2025-32727/): Malicious code in savanna-emerald-rjc386-project (npm) (malicious package)
- [MAL-2025-32726](https://insights.sbomify.com/MAL-2025-32726/): Malicious code in savanna-eagle-cne079-project (npm) (malicious package)
- [MAL-2025-32725](https://insights.sbomify.com/MAL-2025-32725/): Malicious code in savanna-butterfly-wle288-project (npm) (malicious package)
- [MAL-2025-32724](https://insights.sbomify.com/MAL-2025-32724/): Malicious code in sautoppc (npm) (malicious package)
- [MAL-2025-32723](https://insights.sbomify.com/MAL-2025-32723/): Malicious code in saurav-kumar-697b95258 (npm) (malicious package)
- [MAL-2025-32722](https://insights.sbomify.com/MAL-2025-32722/): Malicious code in saturnology-supercluster-nanotechnology-paleobotany (npm) (malicious package)
- [MAL-2025-32721](https://insights.sbomify.com/MAL-2025-32721/): Malicious code in saturnology-mysql-spectron-webdriver-uranology (npm) (malicious package)
- [MAL-2025-32720](https://insights.sbomify.com/MAL-2025-32720/): Malicious code in saturnology-meissa-apollo-altair (npm) (malicious package)
- [MAL-2025-3272](https://insights.sbomify.com/MAL-2025-3272/): Malicious code in parkers-key (npm) (malicious package)
- [MAL-2025-32719](https://insights.sbomify.com/MAL-2025-32719/): Malicious code in saturnology-galaxy-astrophysics-polaris (npm) (malicious package)
- [MAL-2025-32718](https://insights.sbomify.com/MAL-2025-32718/): Malicious code in saturn-reef-ssw755-project (npm) (malicious package)
- [MAL-2025-32717](https://insights.sbomify.com/MAL-2025-32717/): Malicious code in saturn-quasar-uss495-project (npm) (malicious package)
- [MAL-2025-32716](https://insights.sbomify.com/MAL-2025-32716/): Malicious code in saturn-nectar-glb413-project (npm) (malicious package)
- [MAL-2025-32715](https://insights.sbomify.com/MAL-2025-32715/): Malicious code in saturn-mountain-wbl683-project (npm) (malicious package)
- [MAL-2025-32714](https://insights.sbomify.com/MAL-2025-32714/): Malicious code in saturn-mist-ijj748-project (npm) (malicious package)
- [MAL-2025-32713](https://insights.sbomify.com/MAL-2025-32713/): Malicious code in saturn-leopard-riz700-project (npm) (malicious package)
- [MAL-2025-32712](https://insights.sbomify.com/MAL-2025-32712/): Malicious code in saturn-kale-pux439-project (npm) (malicious package)
- [MAL-2025-32711](https://insights.sbomify.com/MAL-2025-32711/): Malicious code in saturn-infinity-eic765-project (npm) (malicious package)
- [MAL-2025-32710](https://insights.sbomify.com/MAL-2025-32710/): Malicious code in saturn-fox-uil254-project (npm) (malicious package)
- [MAL-2025-3271](https://insights.sbomify.com/MAL-2025-3271/): Malicious code in node-json-converter (npm) (malicious package)
- [MAL-2025-32709](https://insights.sbomify.com/MAL-2025-32709/): Malicious code in saturn-aspen-rbj819-project (npm) (malicious package)
- [MAL-2025-32708](https://insights.sbomify.com/MAL-2025-32708/): Malicious code in satstat (npm) (malicious package)
- [MAL-2025-32707](https://insights.sbomify.com/MAL-2025-32707/): Malicious code in satriage (npm) (malicious package)
- [MAL-2025-32706](https://insights.sbomify.com/MAL-2025-32706/): Malicious code in sassmagic (npm) (malicious package)
- [MAL-2025-32705](https://insights.sbomify.com/MAL-2025-32705/): Malicious code in sasseo (npm) (malicious package)
- [MAL-2025-32704](https://insights.sbomify.com/MAL-2025-32704/): Malicious code in sass-loader-redgiant-acamar-eslint-plugin (npm) (malicious package)
- [MAL-2025-32703](https://insights.sbomify.com/MAL-2025-32703/): Malicious code in sass-loader-nebula-eleventy-figures (npm) (malicious package)
- [MAL-2025-32702](https://insights.sbomify.com/MAL-2025-32702/): Malicious code in sass-loader-jupiter-coronalmassejection-filament (npm) (malicious package)
- [MAL-2025-32701](https://insights.sbomify.com/MAL-2025-32701/): Malicious code in sass-loader-eventhoriz-darkenergy-mongodb (npm) (malicious package)
- [MAL-2025-32700](https://insights.sbomify.com/MAL-2025-32700/): Malicious code in saslauthd (npm) (malicious package)
- [MAL-2025-3270](https://insights.sbomify.com/MAL-2025-3270/): Malicious code in fine-packages (npm) (malicious package)
- [MAL-2025-327](https://insights.sbomify.com/MAL-2025-327/): Malicious code in 1password-sdk-exapmles (npm) (malicious package)
- [MAL-2025-32699](https://insights.sbomify.com/MAL-2025-32699/): Malicious code in sasafras (npm) (malicious package)
- [MAL-2025-32698](https://insights.sbomify.com/MAL-2025-32698/): Malicious code in sarrdril712 (npm) (malicious package)
- [MAL-2025-32697](https://insights.sbomify.com/MAL-2025-32697/): Malicious code in sarodi (npm) (malicious package)
- [MAL-2025-32696](https://insights.sbomify.com/MAL-2025-32696/): Malicious code in sari-lapis55-sukiwir (npm) (malicious package)
- [MAL-2025-32695](https://insights.sbomify.com/MAL-2025-32695/): Malicious code in sari-kue66-sukiwir (npm) (malicious package)
- [MAL-2025-32694](https://insights.sbomify.com/MAL-2025-32694/): Malicious code in sari-keraktelor71-breki (npm) (malicious package)
- [MAL-2025-32693](https://insights.sbomify.com/MAL-2025-32693/): Malicious code in sari-brongkos12-breki (npm) (malicious package)
- [MAL-2025-32692](https://insights.sbomify.com/MAL-2025-32692/): Malicious code in sapphire_qrbgu_ldfaq_labyrinth (npm) (malicious package)
- [MAL-2025-32691](https://insights.sbomify.com/MAL-2025-32691/): Malicious code in sapphire_bumr2_09stb_topaz (npm) (malicious package)
- [MAL-2025-32690](https://insights.sbomify.com/MAL-2025-32690/): Malicious code in sapphire_4y2ip_58ue8_paradise (npm) (malicious package)
- [MAL-2025-3269](https://insights.sbomify.com/MAL-2025-3269/): Malicious code in vault-action (npm) (malicious package)
- [MAL-2025-32689](https://insights.sbomify.com/MAL-2025-32689/): Malicious code in sapphire-vista-quv245-project (npm) (malicious package)
- [MAL-2025-32688](https://insights.sbomify.com/MAL-2025-32688/): Malicious code in sapphire-ripple-yhd286-project (npm) (malicious package)
- [MAL-2025-32687](https://insights.sbomify.com/MAL-2025-32687/): Malicious code in sapphire-meadow-hsm302-project (npm) (malicious package)
- [MAL-2025-32686](https://insights.sbomify.com/MAL-2025-32686/): Malicious code in sapphire-jade-mmr221-project (npm) (malicious package)
- [MAL-2025-32685](https://insights.sbomify.com/MAL-2025-32685/): Malicious code in sapphire-falcon-ono751-project (npm) (malicious package)
- [MAL-2025-32684](https://insights.sbomify.com/MAL-2025-32684/): Malicious code in sapphire-emerald-fky380-project (npm) (malicious package)
- [MAL-2025-32683](https://insights.sbomify.com/MAL-2025-32683/): Malicious code in sapphire-ant-ues229-project (npm) (malicious package)
- [MAL-2025-32682](https://insights.sbomify.com/MAL-2025-32682/): Malicious code in sapienlab (npm) (malicious package)
- [MAL-2025-32681](https://insights.sbomify.com/MAL-2025-32681/): Malicious code in sapience (npm) (malicious package)
- [MAL-2025-32680](https://insights.sbomify.com/MAL-2025-32680/): Malicious code in sap-node-rfc-utils (npm) (malicious package)
- [MAL-2025-3268](https://insights.sbomify.com/MAL-2025-3268/): Malicious code in arubaiothubdemoapp (npm) (malicious package)
- [MAL-2025-32679](https://insights.sbomify.com/MAL-2025-32679/): Malicious code in sao-mylib (npm) (malicious package)
- [MAL-2025-32678](https://insights.sbomify.com/MAL-2025-32678/): Malicious code in santoro (npm) (malicious package)
- [MAL-2025-32677](https://insights.sbomify.com/MAL-2025-32677/): Malicious code in santillan (npm) (malicious package)
- [MAL-2025-32676](https://insights.sbomify.com/MAL-2025-32676/): Malicious code in sanityweb (npm) (malicious package)
- [MAL-2025-32675](https://insights.sbomify.com/MAL-2025-32675/): Malicious code in sanitize-runtime-test-dog-user (npm) (malicious package)
- [MAL-2025-32674](https://insights.sbomify.com/MAL-2025-32674/): Malicious code in sanitize-object-pipe-class-grid (npm) (malicious package)
- [MAL-2025-32673](https://insights.sbomify.com/MAL-2025-32673/): Malicious code in sanitize-interpret-zero-emulate-container (npm) (malicious package)
- [MAL-2025-32672](https://insights.sbomify.com/MAL-2025-32672/): Malicious code in sanitize-encode-interpret-sigma-water (npm) (malicious package)
- [MAL-2025-32671](https://insights.sbomify.com/MAL-2025-32671/): Malicious code in sanitize-easy-sigma-user-execute (npm) (malicious package)
- [MAL-2025-32670](https://insights.sbomify.com/MAL-2025-32670/): Malicious code in sanecss (npm) (malicious package)
- [MAL-2025-3267](https://insights.sbomify.com/MAL-2025-3267/): Malicious code in zkevm-rom (npm) (malicious package)
- [MAL-2025-32669](https://insights.sbomify.com/MAL-2025-32669/): Malicious code in sandzuro (npm) (malicious package)
- [MAL-2025-32668](https://insights.sbomify.com/MAL-2025-32668/): Malicious code in sandcage (npm) (malicious package)
- [MAL-2025-32667](https://insights.sbomify.com/MAL-2025-32667/): Malicious code in sandbox-thread-easy-char-chi (npm) (malicious package)
- [MAL-2025-32666](https://insights.sbomify.com/MAL-2025-32666/): Malicious code in sandbox-report-cat-orchestrate-orchestrate (npm) (malicious package)
- [MAL-2025-32665](https://insights.sbomify.com/MAL-2025-32665/): Malicious code in sandbox-encode-string-view-good (npm) (malicious package)
- [MAL-2025-32664](https://insights.sbomify.com/MAL-2025-32664/): Malicious code in sanctuary_kcns8_kw2vs_zephyr (npm) (malicious package)
- [MAL-2025-32663](https://insights.sbomify.com/MAL-2025-32663/): Malicious code in sanctuary_imvvv_em5b2_arcade (npm) (malicious package)
- [MAL-2025-32662](https://insights.sbomify.com/MAL-2025-32662/): Malicious code in sanctuary_gt3sa_tifk2_iris (npm) (malicious package)
- [MAL-2025-32661](https://insights.sbomify.com/MAL-2025-32661/): Malicious code in sanctuary_105wz_vuqhg_maple (npm) (malicious package)
- [MAL-2025-32660](https://insights.sbomify.com/MAL-2025-32660/): Malicious code in sancoapp (npm) (malicious package)
- [MAL-2025-3266](https://insights.sbomify.com/MAL-2025-3266/): Malicious code in zkevm-commonjs (npm) (malicious package)
- [MAL-2025-32659](https://insights.sbomify.com/MAL-2025-32659/): Malicious code in sanaviron (npm) (malicious package)
- [MAL-2025-32658](https://insights.sbomify.com/MAL-2025-32658/): Malicious code in sanaris (npm) (malicious package)
- [MAL-2025-32657](https://insights.sbomify.com/MAL-2025-32657/): Malicious code in samsungsimulator (npm) (malicious package)
- [MAL-2025-32656](https://insights.sbomify.com/MAL-2025-32656/): Malicious code in samsung (npm) (malicious package)
- [MAL-2025-32655](https://insights.sbomify.com/MAL-2025-32655/): Malicious code in sampless (npm) (malicious package)
- [MAL-2025-32654](https://insights.sbomify.com/MAL-2025-32654/): Malicious code in samplehub (npm) (malicious package)
- [MAL-2025-32653](https://insights.sbomify.com/MAL-2025-32653/): Malicious code in samokup (npm) (malicious package)
- [MAL-2025-32652](https://insights.sbomify.com/MAL-2025-32652/): Malicious code in samlsso (npm) (malicious package)
- [MAL-2025-32651](https://insights.sbomify.com/MAL-2025-32651/): Malicious code in samcodes (npm) (malicious package)
- [MAL-2025-32650](https://insights.sbomify.com/MAL-2025-32650/): Malicious code in samassi (npm) (malicious package)
- [MAL-2025-3265](https://insights.sbomify.com/MAL-2025-3265/): Malicious code in transactions-generation (npm) (malicious package)
- [MAL-2025-32649](https://insights.sbomify.com/MAL-2025-32649/): Malicious code in salvestus (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/750/