# Vulnerabilities published in 2025


- [MAL-2025-30937](https://insights.sbomify.com/MAL-2025-30937/): Malicious code in pylogin (npm) (malicious package)
- [MAL-2025-30936](https://insights.sbomify.com/MAL-2025-30936/): Malicious code in pykcca (npm) (malicious package)
- [MAL-2025-30935](https://insights.sbomify.com/MAL-2025-30935/): Malicious code in pyjiong (npm) (malicious package)
- [MAL-2025-30934](https://insights.sbomify.com/MAL-2025-30934/): Malicious code in pyinksvg (npm) (malicious package)
- [MAL-2025-30933](https://insights.sbomify.com/MAL-2025-30933/): Malicious code in pyhttplog (npm) (malicious package)
- [MAL-2025-30932](https://insights.sbomify.com/MAL-2025-30932/): Malicious code in pyhole (npm) (malicious package)
- [MAL-2025-30931](https://insights.sbomify.com/MAL-2025-30931/): Malicious code in pygreco (npm) (malicious package)
- [MAL-2025-30930](https://insights.sbomify.com/MAL-2025-30930/): Malicious code in pygpio (npm) (malicious package)
- [MAL-2025-3093](https://insights.sbomify.com/MAL-2025-3093/): Malicious code in cdk-construct-library-v2 (npm) (malicious package)
- [MAL-2025-30929](https://insights.sbomify.com/MAL-2025-30929/): Malicious code in pygenome (npm) (malicious package)
- [MAL-2025-30928](https://insights.sbomify.com/MAL-2025-30928/): Malicious code in pygdal (npm) (malicious package)
- [MAL-2025-30927](https://insights.sbomify.com/MAL-2025-30927/): Malicious code in pyfastq (npm) (malicious package)
- [MAL-2025-30926](https://insights.sbomify.com/MAL-2025-30926/): Malicious code in pyehuda (npm) (malicious package)
- [MAL-2025-30925](https://insights.sbomify.com/MAL-2025-30925/): Malicious code in pydtree (npm) (malicious package)
- [MAL-2025-30924](https://insights.sbomify.com/MAL-2025-30924/): Malicious code in pydrraw (npm) (malicious package)
- [MAL-2025-30923](https://insights.sbomify.com/MAL-2025-30923/): Malicious code in pydrills (npm) (malicious package)
- [MAL-2025-30922](https://insights.sbomify.com/MAL-2025-30922/): Malicious code in pydedupfs (npm) (malicious package)
- [MAL-2025-30921](https://insights.sbomify.com/MAL-2025-30921/): Malicious code in pyctree (npm) (malicious package)
- [MAL-2025-30920](https://insights.sbomify.com/MAL-2025-30920/): Malicious code in pycsalgos (npm) (malicious package)
- [MAL-2025-3092](https://insights.sbomify.com/MAL-2025-3092/): Malicious code in at-validation-paypal (npm) (malicious package)
- [MAL-2025-30919](https://insights.sbomify.com/MAL-2025-30919/): Malicious code in pycplex (npm) (malicious package)
- [MAL-2025-30918](https://insights.sbomify.com/MAL-2025-30918/): Malicious code in pyconnmgr (npm) (malicious package)
- [MAL-2025-30917](https://insights.sbomify.com/MAL-2025-30917/): Malicious code in pyckup (npm) (malicious package)
- [MAL-2025-30916](https://insights.sbomify.com/MAL-2025-30916/): Malicious code in pycaxias (npm) (malicious package)
- [MAL-2025-30915](https://insights.sbomify.com/MAL-2025-30915/): Malicious code in pyblique (npm) (malicious package)
- [MAL-2025-30914](https://insights.sbomify.com/MAL-2025-30914/): Malicious code in pybento (npm) (malicious package)
- [MAL-2025-30913](https://insights.sbomify.com/MAL-2025-30913/): Malicious code in pyamember (npm) (malicious package)
- [MAL-2025-30912](https://insights.sbomify.com/MAL-2025-30912/): Malicious code in pxvksuberljomazw (npm) (malicious package)
- [MAL-2025-30911](https://insights.sbomify.com/MAL-2025-30911/): Malicious code in pxsnafzrdwigcoek (npm) (malicious package)
- [MAL-2025-30910](https://insights.sbomify.com/MAL-2025-30910/): Malicious code in pxqdseamwocglrkz (npm) (malicious package)
- [MAL-2025-3091](https://insights.sbomify.com/MAL-2025-3091/): Malicious code in aiprofilestyle (npm) (malicious package)
- [MAL-2025-30909](https://insights.sbomify.com/MAL-2025-30909/): Malicious code in pxinetd (npm) (malicious package)
- [MAL-2025-30908](https://insights.sbomify.com/MAL-2025-30908/): Malicious code in px-colors-design (npm) (malicious package)
- [MAL-2025-30907](https://insights.sbomify.com/MAL-2025-30907/): Malicious code in pwnschool (npm) (malicious package)
- [MAL-2025-30906](https://insights.sbomify.com/MAL-2025-30906/): Malicious code in pwnplug (npm) (malicious package)
- [MAL-2025-30905](https://insights.sbomify.com/MAL-2025-30905/): Malicious code in pwblogg (npm) (malicious package)
- [MAL-2025-30904](https://insights.sbomify.com/MAL-2025-30904/): Malicious code in pwavskeblunqyfth (npm) (malicious package)
- [MAL-2025-30903](https://insights.sbomify.com/MAL-2025-30903/): Malicious code in pvue.js (npm) (malicious package)
- [MAL-2025-30902](https://insights.sbomify.com/MAL-2025-30902/): Malicious code in pvue (npm) (malicious package)
- [MAL-2025-30901](https://insights.sbomify.com/MAL-2025-30901/): Malicious code in pvscience (npm) (malicious package)
- [MAL-2025-30900](https://insights.sbomify.com/MAL-2025-30900/): Malicious code in pvmrjygibflzoxtn (npm) (malicious package)
- [MAL-2025-3090](https://insights.sbomify.com/MAL-2025-3090/): Malicious code in adult-content-detection-aws (npm) (malicious package)
- [MAL-2025-309](https://insights.sbomify.com/MAL-2025-309/): Malicious code in sdk-coin-bsc (npm) (malicious package)
- [MAL-2025-30899](https://insights.sbomify.com/MAL-2025-30899/): Malicious code in pvm (npm) (malicious package)
- [MAL-2025-30898](https://insights.sbomify.com/MAL-2025-30898/): Malicious code in pvision (npm) (malicious package)
- [MAL-2025-30897](https://insights.sbomify.com/MAL-2025-30897/): Malicious code in pvilla (npm) (malicious package)
- [MAL-2025-30896](https://insights.sbomify.com/MAL-2025-30896/): Malicious code in puttiuw (npm) (malicious package)
- [MAL-2025-30895](https://insights.sbomify.com/MAL-2025-30895/): Malicious code in putri-wajit29-breki (npm) (malicious package)
- [MAL-2025-30894](https://insights.sbomify.com/MAL-2025-30894/): Malicious code in putri-tiwul78-breki (npm) (malicious package)
- [MAL-2025-30893](https://insights.sbomify.com/MAL-2025-30893/): Malicious code in putri-takokak40-breki (npm) (malicious package)
- [MAL-2025-30892](https://insights.sbomify.com/MAL-2025-30892/): Malicious code in putri-takokak26-breki (npm) (malicious package)
- [MAL-2025-30891](https://insights.sbomify.com/MAL-2025-30891/): Malicious code in putri-serimuka100-kuki (npm) (malicious package)
- [MAL-2025-30890](https://insights.sbomify.com/MAL-2025-30890/): Malicious code in putri-semur86-kuki (npm) (malicious package)
- [MAL-2025-3089](https://insights.sbomify.com/MAL-2025-3089/): Malicious code in accessible-textbook-demo (npm) (malicious package)
- [MAL-2025-30889](https://insights.sbomify.com/MAL-2025-30889/): Malicious code in putri-sego35-breki (npm) (malicious package)
- [MAL-2025-30888](https://insights.sbomify.com/MAL-2025-30888/): Malicious code in putri-rangginang49-sukiwir (npm) (malicious package)
- [MAL-2025-30887](https://insights.sbomify.com/MAL-2025-30887/): Malicious code in putri-ragi80-breki (npm) (malicious package)
- [MAL-2025-30886](https://insights.sbomify.com/MAL-2025-30886/): Malicious code in putri-moci2-breki (npm) (malicious package)
- [MAL-2025-30885](https://insights.sbomify.com/MAL-2025-30885/): Malicious code in putri-mieaceh25-sukiwir (npm) (malicious package)
- [MAL-2025-30884](https://insights.sbomify.com/MAL-2025-30884/): Malicious code in putri-martabak20-breki (npm) (malicious package)
- [MAL-2025-30883](https://insights.sbomify.com/MAL-2025-30883/): Malicious code in putri-liwet31-sukiwir (npm) (malicious package)
- [MAL-2025-30882](https://insights.sbomify.com/MAL-2025-30882/): Malicious code in putri-lengko97-breki (npm) (malicious package)
- [MAL-2025-30881](https://insights.sbomify.com/MAL-2025-30881/): Malicious code in putri-enting96-breki (npm) (malicious package)
- [MAL-2025-30880](https://insights.sbomify.com/MAL-2025-30880/): Malicious code in putri-empal25-breki (npm) (malicious package)
- [MAL-2025-3088](https://insights.sbomify.com/MAL-2025-3088/): Malicious code in @pump.fun/core (npm) (malicious package)
- [MAL-2025-30879](https://insights.sbomify.com/MAL-2025-30879/): Malicious code in putri-bakso28-breki (npm) (malicious package)
- [MAL-2025-30878](https://insights.sbomify.com/MAL-2025-30878/): Malicious code in putra-tomat25-breki (npm) (malicious package)
- [MAL-2025-30877](https://insights.sbomify.com/MAL-2025-30877/): Malicious code in putra-tapai28-sukiwir (npm) (malicious package)
- [MAL-2025-30876](https://insights.sbomify.com/MAL-2025-30876/): Malicious code in putra-sate8-sukiwir (npm) (malicious package)
- [MAL-2025-30875](https://insights.sbomify.com/MAL-2025-30875/): Malicious code in putra-ruwet45-breki (npm) (malicious package)
- [MAL-2025-30874](https://insights.sbomify.com/MAL-2025-30874/): Malicious code in putra-miemee86-sukiwir (npm) (malicious package)
- [MAL-2025-30873](https://insights.sbomify.com/MAL-2025-30873/): Malicious code in putra-miebogor100-sukiwir (npm) (malicious package)
- [MAL-2025-30872](https://insights.sbomify.com/MAL-2025-30872/): Malicious code in putra-kemplang69-breki (npm) (malicious package)
- [MAL-2025-30871](https://insights.sbomify.com/MAL-2025-30871/): Malicious code in putra-gepuk16-breki (npm) (malicious package)
- [MAL-2025-30870](https://insights.sbomify.com/MAL-2025-30870/): Malicious code in pustache (npm) (malicious package)
- [MAL-2025-3087](https://insights.sbomify.com/MAL-2025-3087/): Malicious code in @bmw-fedev/auth (npm) (malicious package)
- [MAL-2025-30869](https://insights.sbomify.com/MAL-2025-30869/): Malicious code in pusqna (npm) (malicious package)
- [MAL-2025-30868](https://insights.sbomify.com/MAL-2025-30868/): Malicious code in pushko (npm) (malicious package)
- [MAL-2025-30867](https://insights.sbomify.com/MAL-2025-30867/): Malicious code in pushkey (npm) (malicious package)
- [MAL-2025-30866](https://insights.sbomify.com/MAL-2025-30866/): Malicious code in pushek-frontend (npm) (malicious package)
- [MAL-2025-30865](https://insights.sbomify.com/MAL-2025-30865/): Malicious code in pushapage (npm) (malicious package)
- [MAL-2025-30864](https://insights.sbomify.com/MAL-2025-30864/): Malicious code in pushadmin (npm) (malicious package)
- [MAL-2025-30863](https://insights.sbomify.com/MAL-2025-30863/): Malicious code in puresugar (npm) (malicious package)
- [MAL-2025-30862](https://insights.sbomify.com/MAL-2025-30862/): Malicious code in purejs-onepage-scroll (npm) (malicious package)
- [MAL-2025-30861](https://insights.sbomify.com/MAL-2025-30861/): Malicious code in purebmi (npm) (malicious package)
- [MAL-2025-30860](https://insights.sbomify.com/MAL-2025-30860/): Malicious code in puppeteer-superflare-eridanus-sagitta (npm) (malicious package)
- [MAL-2025-3086](https://insights.sbomify.com/MAL-2025-3086/): Malicious code in r5-zknet-wallet (npm) (malicious package)
- [MAL-2025-30859](https://insights.sbomify.com/MAL-2025-30859/): Malicious code in puppeteer-quantumfoam-fork-figures (npm) (malicious package)
- [MAL-2025-30858](https://insights.sbomify.com/MAL-2025-30858/): Malicious code in puppeteer-prettier-writable-tethys (npm) (malicious package)
- [MAL-2025-30857](https://insights.sbomify.com/MAL-2025-30857/): Malicious code in puppeteer-hyperion-jabbah-kastra (npm) (malicious package)
- [MAL-2025-30856](https://insights.sbomify.com/MAL-2025-30856/): Malicious code in puppeteer-exobiology-mira-higgs (npm) (malicious package)
- [MAL-2025-30855](https://insights.sbomify.com/MAL-2025-30855/): Malicious code in puppeteer-entanglement-geochronology-ursa (npm) (malicious package)
- [MAL-2025-30854](https://insights.sbomify.com/MAL-2025-30854/): Malicious code in puppeteer-dactyl-backend-zenith (npm) (malicious package)
- [MAL-2025-30853](https://insights.sbomify.com/MAL-2025-30853/): Malicious code in puppeteer-cluster-axios-standard (npm) (malicious package)
- [MAL-2025-30852](https://insights.sbomify.com/MAL-2025-30852/): Malicious code in puncuation (npm) (malicious package)
- [MAL-2025-30851](https://insights.sbomify.com/MAL-2025-30851/): Malicious code in pulse_wztzk_z9ypy_twilight (npm) (malicious package)
- [MAL-2025-30850](https://insights.sbomify.com/MAL-2025-30850/): Malicious code in pulse_v4geh_z4wnk_whirlwind (npm) (malicious package)
- [MAL-2025-3085](https://insights.sbomify.com/MAL-2025-3085/): Malicious code in @harvest-finance/harvest-strategy-polygon (npm) (malicious package)
- [MAL-2025-30849](https://insights.sbomify.com/MAL-2025-30849/): Malicious code in pulse_qmwv4_3fhj4_banyan (npm) (malicious package)
- [MAL-2025-30848](https://insights.sbomify.com/MAL-2025-30848/): Malicious code in pulse_otsds_slv9v_vantage (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/770/