# Vulnerabilities published in 2025


- [MAL-2025-30847](https://insights.sbomify.com/MAL-2025-30847/): Malicious code in pulse_nrf9n_dez8s_maple (npm) (malicious package)
- [MAL-2025-30846](https://insights.sbomify.com/MAL-2025-30846/): Malicious code in pulse-aura-zqg679-project (npm) (malicious package)
- [MAL-2025-30845](https://insights.sbomify.com/MAL-2025-30845/): Malicious code in pulsar-zamia-0ql5 (npm) (malicious package)
- [MAL-2025-30844](https://insights.sbomify.com/MAL-2025-30844/): Malicious code in pulsar-wezen-nightwatch-jabbah (npm) (malicious package)
- [MAL-2025-30843](https://insights.sbomify.com/MAL-2025-30843/): Malicious code in pulsar-webdriverio-express-atlas (npm) (malicious package)
- [MAL-2025-30842](https://insights.sbomify.com/MAL-2025-30842/): Malicious code in pulsar-superposition-fomalhaut-on (npm) (malicious package)
- [MAL-2025-30841](https://insights.sbomify.com/MAL-2025-30841/): Malicious code in pulsar-spectron-mantle-webdriverio (npm) (malicious package)
- [MAL-2025-30840](https://insights.sbomify.com/MAL-2025-30840/): Malicious code in pulsar-solis-pino-pretty-dysonswarm (npm) (malicious package)
- [MAL-2025-3084](https://insights.sbomify.com/MAL-2025-3084/): Malicious code in daos.fun (npm) (malicious package)
- [MAL-2025-30839](https://insights.sbomify.com/MAL-2025-30839/): Malicious code in pulsar-oscar-uv8l (npm) (malicious package)
- [MAL-2025-30838](https://insights.sbomify.com/MAL-2025-30838/): Malicious code in pulsar-november-00rh (npm) (malicious package)
- [MAL-2025-30837](https://insights.sbomify.com/MAL-2025-30837/): Malicious code in pulsar-mushroom-4e6b (npm) (malicious package)
- [MAL-2025-30836](https://insights.sbomify.com/MAL-2025-30836/): Malicious code in pulsar-kapok-nzom (npm) (malicious package)
- [MAL-2025-30835](https://insights.sbomify.com/MAL-2025-30835/): Malicious code in pulsar-foxtrot-0jay (npm) (malicious package)
- [MAL-2025-30834](https://insights.sbomify.com/MAL-2025-30834/): Malicious code in pulsar-elderberry-inbe (npm) (malicious package)
- [MAL-2025-30833](https://insights.sbomify.com/MAL-2025-30833/): Malicious code in pulsar-beetroot-jpe2 (npm) (malicious package)
- [MAL-2025-30832](https://insights.sbomify.com/MAL-2025-30832/): Malicious code in pulsanote (npm) (malicious package)
- [MAL-2025-30831](https://insights.sbomify.com/MAL-2025-30831/): Malicious code in pull-goth-lsk (npm) (malicious package)
- [MAL-2025-30830](https://insights.sbomify.com/MAL-2025-30830/): Malicious code in pug-i18n-loader (npm) (malicious package)
- [MAL-2025-3083](https://insights.sbomify.com/MAL-2025-3083/): Malicious code in servicecore-response-handler (npm) (malicious package)
- [MAL-2025-30829](https://insights.sbomify.com/MAL-2025-30829/): Malicious code in pug-ctp-filter (npm) (malicious package)
- [MAL-2025-30828](https://insights.sbomify.com/MAL-2025-30828/): Malicious code in puffcorn (npm) (malicious package)
- [MAL-2025-30827](https://insights.sbomify.com/MAL-2025-30827/): Malicious code in pucclass (npm) (malicious package)
- [MAL-2025-30826](https://insights.sbomify.com/MAL-2025-30826/): Malicious code in pubtapper (npm) (malicious package)
- [MAL-2025-30825](https://insights.sbomify.com/MAL-2025-30825/): Malicious code in pubperz (npm) (malicious package)
- [MAL-2025-30824](https://insights.sbomify.com/MAL-2025-30824/): Malicious code in publish_anu1 (npm) (malicious package)
- [MAL-2025-30823](https://insights.sbomify.com/MAL-2025-30823/): Malicious code in publish-test-min-module (npm) (malicious package)
- [MAL-2025-30822](https://insights.sbomify.com/MAL-2025-30822/): Malicious code in publish-superagent-websockets-gulp (npm) (malicious package)
- [MAL-2025-30821](https://insights.sbomify.com/MAL-2025-30821/): Malicious code in publish-process-postcss-loader-protractor (npm) (malicious package)
- [MAL-2025-30820](https://insights.sbomify.com/MAL-2025-30820/): Malicious code in publish-link-sedna-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-3082](https://insights.sbomify.com/MAL-2025-3082/): Malicious code in niji-react-utils (npm) (malicious package)
- [MAL-2025-30819](https://insights.sbomify.com/MAL-2025-30819/): Malicious code in publish-jekyll-remark-uranology (npm) (malicious package)
- [MAL-2025-30818](https://insights.sbomify.com/MAL-2025-30818/): Malicious code in publish-biotechnology-update-cosmicray (npm) (malicious package)
- [MAL-2025-30817](https://insights.sbomify.com/MAL-2025-30817/): Malicious code in publictcp (npm) (malicious package)
- [MAL-2025-30816](https://insights.sbomify.com/MAL-2025-30816/): Malicious code in public-object-validate-user-decrypt (npm) (malicious package)
- [MAL-2025-30815](https://insights.sbomify.com/MAL-2025-30815/): Malicious code in public-mock-wind-xi-interface (npm) (malicious package)
- [MAL-2025-30814](https://insights.sbomify.com/MAL-2025-30814/): Malicious code in public-csv-carpo-cygnus (npm) (malicious package)
- [MAL-2025-30813](https://insights.sbomify.com/MAL-2025-30813/): Malicious code in public-config (npm) (malicious package)
- [MAL-2025-30812](https://insights.sbomify.com/MAL-2025-30812/): Malicious code in public-antares-leda-morgan (npm) (malicious package)
- [MAL-2025-30811](https://insights.sbomify.com/MAL-2025-30811/): Malicious code in pub_anu1 (npm) (malicious package)
- [MAL-2025-30810](https://insights.sbomify.com/MAL-2025-30810/): Malicious code in pu-schedule-connect (npm) (malicious package)
- [MAL-2025-3081](https://insights.sbomify.com/MAL-2025-3081/): Malicious code in niji-react-textarea (npm) (malicious package)
- [MAL-2025-30809](https://insights.sbomify.com/MAL-2025-30809/): Malicious code in pu-commerce-connect (npm) (malicious package)
- [MAL-2025-30808](https://insights.sbomify.com/MAL-2025-30808/): Malicious code in pttrnflow (npm) (malicious package)
- [MAL-2025-30807](https://insights.sbomify.com/MAL-2025-30807/): Malicious code in ptswkrvzhlmnqojy (npm) (malicious package)
- [MAL-2025-30806](https://insights.sbomify.com/MAL-2025-30806/): Malicious code in ptswithgc (npm) (malicious package)
- [MAL-2025-30805](https://insights.sbomify.com/MAL-2025-30805/): Malicious code in ptstobvh (npm) (malicious package)
- [MAL-2025-30804](https://insights.sbomify.com/MAL-2025-30804/): Malicious code in ptsboof (npm) (malicious package)
- [MAL-2025-30803](https://insights.sbomify.com/MAL-2025-30803/): Malicious code in ptocalc (npm) (malicious package)
- [MAL-2025-30802](https://insights.sbomify.com/MAL-2025-30802/): Malicious code in ptjksqbonlhdcviz (npm) (malicious package)
- [MAL-2025-30801](https://insights.sbomify.com/MAL-2025-30801/): Malicious code in pt-serif (npm) (malicious package)
- [MAL-2025-30800](https://insights.sbomify.com/MAL-2025-30800/): Malicious code in pt-mono (npm) (malicious package)
- [MAL-2025-3080](https://insights.sbomify.com/MAL-2025-3080/): Malicious code in niji-react-switch (npm) (malicious package)
- [MAL-2025-308](https://insights.sbomify.com/MAL-2025-308/): Malicious code in sdk-coin-bcha (npm) (malicious package)
- [MAL-2025-30799](https://insights.sbomify.com/MAL-2025-30799/): Malicious code in psygen (npm) (malicious package)
- [MAL-2025-30798](https://insights.sbomify.com/MAL-2025-30798/): Malicious code in psttest (npm) (malicious package)
- [MAL-2025-30797](https://insights.sbomify.com/MAL-2025-30797/): Malicious code in pslogging (npm) (malicious package)
- [MAL-2025-30796](https://insights.sbomify.com/MAL-2025-30796/): Malicious code in pseuwow (npm) (malicious package)
- [MAL-2025-30795](https://insights.sbomify.com/MAL-2025-30795/): Malicious code in psamanta (npm) (malicious package)
- [MAL-2025-30794](https://insights.sbomify.com/MAL-2025-30794/): Malicious code in psa-generator (npm) (malicious package)
- [MAL-2025-30793](https://insights.sbomify.com/MAL-2025-30793/): Malicious code in prymeui (npm) (malicious package)
- [MAL-2025-30792](https://insights.sbomify.com/MAL-2025-30792/): Malicious code in pruksa (npm) (malicious package)
- [MAL-2025-30791](https://insights.sbomify.com/MAL-2025-30791/): Malicious code in pruebay (npm) (malicious package)
- [MAL-2025-30790](https://insights.sbomify.com/MAL-2025-30790/): Malicious code in pru-forms (npm) (malicious package)
- [MAL-2025-3079](https://insights.sbomify.com/MAL-2025-3079/): Malicious code in niji-react-select (npm) (malicious package)
- [MAL-2025-30789](https://insights.sbomify.com/MAL-2025-30789/): Malicious code in pru-colours (npm) (malicious package)
- [MAL-2025-30788](https://insights.sbomify.com/MAL-2025-30788/): Malicious code in prpo-types (npm) (malicious package)
- [MAL-2025-30787](https://insights.sbomify.com/MAL-2025-30787/): Malicious code in proxy-prototype (npm) (malicious package)
- [MAL-2025-30786](https://insights.sbomify.com/MAL-2025-30786/): Malicious code in proxy-compile-private-tau-grep (npm) (malicious package)
- [MAL-2025-30785](https://insights.sbomify.com/MAL-2025-30785/): Malicious code in proxima-eridanus-xml-jsonp (npm) (malicious package)
- [MAL-2025-30784](https://insights.sbomify.com/MAL-2025-30784/): Malicious code in proxima-commitlint-commitizen-aurora (npm) (malicious package)
- [MAL-2025-30783](https://insights.sbomify.com/MAL-2025-30783/): Malicious code in proxima-callisto-prettier-stylelint-titan (npm) (malicious package)
- [MAL-2025-30782](https://insights.sbomify.com/MAL-2025-30782/): Malicious code in proxible (npm) (malicious package)
- [MAL-2025-30781](https://insights.sbomify.com/MAL-2025-30781/): Malicious code in provis-locks (npm) (malicious package)
- [MAL-2025-30780](https://insights.sbomify.com/MAL-2025-30780/): Malicious code in provider-configurations (npm) (malicious package)
- [MAL-2025-3078](https://insights.sbomify.com/MAL-2025-3078/): Malicious code in niji-react-prettybytes (npm) (malicious package)
- [MAL-2025-30779](https://insights.sbomify.com/MAL-2025-30779/): Malicious code in protractor-html-screenshot-report (npm) (malicious package)
- [MAL-2025-30778](https://insights.sbomify.com/MAL-2025-30778/): Malicious code in protorina (npm) (malicious package)
- [MAL-2025-30777](https://insights.sbomify.com/MAL-2025-30777/): Malicious code in protorec (npm) (malicious package)
- [MAL-2025-30776](https://insights.sbomify.com/MAL-2025-30776/): Malicious code in protoplanetarydisk-rehype-vortex-koa (npm) (malicious package)
- [MAL-2025-30775](https://insights.sbomify.com/MAL-2025-30775/): Malicious code in protoplanetarydisk-quasarjet-radioastronomy-node-config (npm) (malicious package)
- [MAL-2025-30774](https://insights.sbomify.com/MAL-2025-30774/): Malicious code in protoplanetarydisk-plutology-lynx-kardashevscale (npm) (malicious package)
- [MAL-2025-30773](https://insights.sbomify.com/MAL-2025-30773/): Malicious code in protoplanetarydisk-decoherence-aquarius-parcel (npm) (malicious package)
- [MAL-2025-30772](https://insights.sbomify.com/MAL-2025-30772/): Malicious code in protoplanetarydisk-archaeometry-procyon-node-config (npm) (malicious package)
- [MAL-2025-30771](https://insights.sbomify.com/MAL-2025-30771/): Malicious code in protomon (npm) (malicious package)
- [MAL-2025-30770](https://insights.sbomify.com/MAL-2025-30770/): Malicious code in protogit (npm) (malicious package)
- [MAL-2025-3077](https://insights.sbomify.com/MAL-2025-3077/): Malicious code in niji-react-input (npm) (malicious package)
- [MAL-2025-30769](https://insights.sbomify.com/MAL-2025-30769/): Malicious code in proto-ui-shell-test (npm) (malicious package)
- [MAL-2025-30768](https://insights.sbomify.com/MAL-2025-30768/): Malicious code in proto-ui-shell (npm) (malicious package)
- [MAL-2025-30767](https://insights.sbomify.com/MAL-2025-30767/): Malicious code in proto-offering-module (npm) (malicious package)
- [MAL-2025-30766](https://insights.sbomify.com/MAL-2025-30766/): Malicious code in proteusdns (npm) (malicious package)
- [MAL-2025-30765](https://insights.sbomify.com/MAL-2025-30765/): Malicious code in proteomics-vulcan-venus-buffer (npm) (malicious package)
- [MAL-2025-30764](https://insights.sbomify.com/MAL-2025-30764/): Malicious code in proteomics-spectron-chromedriver-package (npm) (malicious package)
- [MAL-2025-30763](https://insights.sbomify.com/MAL-2025-30763/): Malicious code in proteomics-spawn-upgrade-parallax (npm) (malicious package)
- [MAL-2025-30762](https://insights.sbomify.com/MAL-2025-30762/): Malicious code in proteomics-perturbation-weywot-areology (npm) (malicious package)
- [MAL-2025-30761](https://insights.sbomify.com/MAL-2025-30761/): Malicious code in proteomics-parallax-parallax-wasat (npm) (malicious package)
- [MAL-2025-30760](https://insights.sbomify.com/MAL-2025-30760/): Malicious code in proteomics-link-promise-callisto (npm) (malicious package)
- [MAL-2025-3076](https://insights.sbomify.com/MAL-2025-3076/): Malicious code in niji-react-icon (npm) (malicious package)
- [MAL-2025-30759](https://insights.sbomify.com/MAL-2025-30759/): Malicious code in proteomics-hercules-public-gatsby (npm) (malicious package)
- [MAL-2025-30758](https://insights.sbomify.com/MAL-2025-30758/): Malicious code in protected-emulate-star-fire-load (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/771/