# Vulnerabilities published in 2025


- [MAL-2025-30757](https://insights.sbomify.com/MAL-2025-30757/): Malicious code in protect-api (npm) (malicious package)
- [MAL-2025-30756](https://insights.sbomify.com/MAL-2025-30756/): Malicious code in prosthetics-janus-decoherence-xanthus (npm) (malicious package)
- [MAL-2025-30755](https://insights.sbomify.com/MAL-2025-30755/): Malicious code in prosthetics-commitlint-config-angular-dotenv-safe-supervisor (npm) (malicious package)
- [MAL-2025-30754](https://insights.sbomify.com/MAL-2025-30754/): Malicious code in prosoft-ui (npm) (malicious package)
- [MAL-2025-30753](https://insights.sbomify.com/MAL-2025-30753/): Malicious code in prosoft-hapi-winston-logger (npm) (malicious package)
- [MAL-2025-30752](https://insights.sbomify.com/MAL-2025-30752/): Malicious code in prosoft-crm-widgets (npm) (malicious package)
- [MAL-2025-30751](https://insights.sbomify.com/MAL-2025-30751/): Malicious code in propyminer (npm) (malicious package)
- [MAL-2025-30750](https://insights.sbomify.com/MAL-2025-30750/): Malicious code in propertify (npm) (malicious package)
- [MAL-2025-3075](https://insights.sbomify.com/MAL-2025-3075/): Malicious code in niji-react-collapsible (npm) (malicious package)
- [MAL-2025-30749](https://insights.sbomify.com/MAL-2025-30749/): Malicious code in propardi (npm) (malicious package)
- [MAL-2025-30748](https://insights.sbomify.com/MAL-2025-30748/): Malicious code in PropagAPISpecification (npm) (malicious package)
- [MAL-2025-30747](https://insights.sbomify.com/MAL-2025-30747/): Malicious code in propag (npm) (malicious package)
- [MAL-2025-30746](https://insights.sbomify.com/MAL-2025-30746/): Malicious code in prop-ytpes (npm) (malicious package)
- [MAL-2025-30745](https://insights.sbomify.com/MAL-2025-30745/): Malicious code in prop-tyeps (npm) (malicious package)
- [MAL-2025-30744](https://insights.sbomify.com/MAL-2025-30744/): Malicious code in proovitoo (npm) (malicious package)
- [MAL-2025-30743](https://insights.sbomify.com/MAL-2025-30743/): Malicious code in prompts-lepton-auth-standard (npm) (malicious package)
- [MAL-2025-30742](https://insights.sbomify.com/MAL-2025-30742/): Malicious code in prompts-auth-oauth-markdown-pdf (npm) (malicious package)
- [MAL-2025-30741](https://insights.sbomify.com/MAL-2025-30741/): Malicious code in promoter-ninja (npm) (malicious package)
- [MAL-2025-30740](https://insights.sbomify.com/MAL-2025-30740/): Malicious code in promonews (npm) (malicious package)
- [MAL-2025-3074](https://insights.sbomify.com/MAL-2025-3074/): Malicious code in niji-react-alert (npm) (malicious package)
- [MAL-2025-30739](https://insights.sbomify.com/MAL-2025-30739/): Malicious code in promise-xo-umbriel-start (npm) (malicious package)
- [MAL-2025-30738](https://insights.sbomify.com/MAL-2025-30738/): Malicious code in promise-vega-react-bootstrap-blueshift (npm) (malicious package)
- [MAL-2025-30737](https://insights.sbomify.com/MAL-2025-30737/): Malicious code in promise-stratosphere-prettier-plugin-markdown-proxima (npm) (malicious package)
- [MAL-2025-30736](https://insights.sbomify.com/MAL-2025-30736/): Malicious code in promise-query-semantic-release-cosmochemistry (npm) (malicious package)
- [MAL-2025-30735](https://insights.sbomify.com/MAL-2025-30735/): Malicious code in promise-ora-postcss-antares (npm) (malicious package)
- [MAL-2025-30734](https://insights.sbomify.com/MAL-2025-30734/): Malicious code in promise-mongodb-connection-factory (npm) (malicious package)
- [MAL-2025-30733](https://insights.sbomify.com/MAL-2025-30733/): Malicious code in promise-mineralogy-dagda-winston (npm) (malicious package)
- [MAL-2025-30732](https://insights.sbomify.com/MAL-2025-30732/): Malicious code in promise-element-ui-relay-json (npm) (malicious package)
- [MAL-2025-30731](https://insights.sbomify.com/MAL-2025-30731/): Malicious code in promise-cron-key-sudo-analyze (npm) (malicious package)
- [MAL-2025-30730](https://insights.sbomify.com/MAL-2025-30730/): Malicious code in promin (npm) (malicious package)
- [MAL-2025-3073](https://insights.sbomify.com/MAL-2025-3073/): Malicious code in nemo-dast-plugin (npm) (malicious package)
- [MAL-2025-30729](https://insights.sbomify.com/MAL-2025-30729/): Malicious code in prometheus-stats-library (npm) (malicious package)
- [MAL-2025-30728](https://insights.sbomify.com/MAL-2025-30728/): Malicious code in promap (npm) (malicious package)
- [MAL-2025-30727](https://insights.sbomify.com/MAL-2025-30727/): Malicious code in proloquo (npm) (malicious package)
- [MAL-2025-30726](https://insights.sbomify.com/MAL-2025-30726/): Malicious code in proliphiq (npm) (malicious package)
- [MAL-2025-30725](https://insights.sbomify.com/MAL-2025-30725/): Malicious code in projetvls (npm) (malicious package)
- [MAL-2025-30724](https://insights.sbomify.com/MAL-2025-30724/): Malicious code in projetrpg (npm) (malicious package)
- [MAL-2025-30723](https://insights.sbomify.com/MAL-2025-30723/): Malicious code in projetoip (npm) (malicious package)
- [MAL-2025-30722](https://insights.sbomify.com/MAL-2025-30722/): Malicious code in projetnao (npm) (malicious package)
- [MAL-2025-30721](https://insights.sbomify.com/MAL-2025-30721/): Malicious code in projetbdr (npm) (malicious package)
- [MAL-2025-30720](https://insights.sbomify.com/MAL-2025-30720/): Malicious code in projektor (npm) (malicious package)
- [MAL-2025-3072](https://insights.sbomify.com/MAL-2025-3072/): Malicious code in mocha-appscan-reporter (npm) (malicious package)
- [MAL-2025-30719](https://insights.sbomify.com/MAL-2025-30719/): Malicious code in projectn (npm) (malicious package)
- [MAL-2025-30718](https://insights.sbomify.com/MAL-2025-30718/): Malicious code in project-zzeq7-vanilla (npm) (malicious package)
- [MAL-2025-30717](https://insights.sbomify.com/MAL-2025-30717/): Malicious code in project-zxjhb-watermelon (npm) (malicious package)
- [MAL-2025-30716](https://insights.sbomify.com/MAL-2025-30716/): Malicious code in project-zxbm3-yam (npm) (malicious package)
- [MAL-2025-30715](https://insights.sbomify.com/MAL-2025-30715/): Malicious code in project-zvw9j-banana (npm) (malicious package)
- [MAL-2025-30714](https://insights.sbomify.com/MAL-2025-30714/): Malicious code in project-zuplm-victor (npm) (malicious package)
- [MAL-2025-30713](https://insights.sbomify.com/MAL-2025-30713/): Malicious code in project-zsdvd-hotel (npm) (malicious package)
- [MAL-2025-30712](https://insights.sbomify.com/MAL-2025-30712/): Malicious code in project-zpzcn-honeydew (npm) (malicious package)
- [MAL-2025-30711](https://insights.sbomify.com/MAL-2025-30711/): Malicious code in project-zpvl7-lemon (npm) (malicious package)
- [MAL-2025-30710](https://insights.sbomify.com/MAL-2025-30710/): Malicious code in project-zphqv-victor (npm) (malicious package)
- [MAL-2025-3071](https://insights.sbomify.com/MAL-2025-3071/): Malicious code in mahesh.dojo (npm) (malicious package)
- [MAL-2025-30709](https://insights.sbomify.com/MAL-2025-30709/): Malicious code in project-zninu-raspberry (npm) (malicious package)
- [MAL-2025-30708](https://insights.sbomify.com/MAL-2025-30708/): Malicious code in project-zm3lv-xigua (npm) (malicious package)
- [MAL-2025-30707](https://insights.sbomify.com/MAL-2025-30707/): Malicious code in project-zldlj-bravo (npm) (malicious package)
- [MAL-2025-30706](https://insights.sbomify.com/MAL-2025-30706/): Malicious code in project-zldcq-quebec (npm) (malicious package)
- [MAL-2025-30705](https://insights.sbomify.com/MAL-2025-30705/): Malicious code in project-zjwne-elderberry (npm) (malicious package)
- [MAL-2025-30704](https://insights.sbomify.com/MAL-2025-30704/): Malicious code in project-zjtx8-zucchini (npm) (malicious package)
- [MAL-2025-30703](https://insights.sbomify.com/MAL-2025-30703/): Malicious code in project-zhy37-alpha (npm) (malicious package)
- [MAL-2025-30702](https://insights.sbomify.com/MAL-2025-30702/): Malicious code in project-zh9ks-fig (npm) (malicious package)
- [MAL-2025-30701](https://insights.sbomify.com/MAL-2025-30701/): Malicious code in project-zh62t-elderberry (npm) (malicious package)
- [MAL-2025-30700](https://insights.sbomify.com/MAL-2025-30700/): Malicious code in project-zgsow-watermelon (npm) (malicious package)
- [MAL-2025-3070](https://insights.sbomify.com/MAL-2025-3070/): Malicious code in lts-patterns (npm) (malicious package)
- [MAL-2025-307](https://insights.sbomify.com/MAL-2025-307/): Malicious code in sdk-coin-bch (npm) (malicious package)
- [MAL-2025-30699](https://insights.sbomify.com/MAL-2025-30699/): Malicious code in project-zg4e3-quince (npm) (malicious package)
- [MAL-2025-30698](https://insights.sbomify.com/MAL-2025-30698/): Malicious code in project-zfedv-november (npm) (malicious package)
- [MAL-2025-30697](https://insights.sbomify.com/MAL-2025-30697/): Malicious code in project-zf29q-echo (npm) (malicious package)
- [MAL-2025-30696](https://insights.sbomify.com/MAL-2025-30696/): Malicious code in project-zeszu-romeo (npm) (malicious package)
- [MAL-2025-30695](https://insights.sbomify.com/MAL-2025-30695/): Malicious code in project-zd9v5-xray (npm) (malicious package)
- [MAL-2025-30694](https://insights.sbomify.com/MAL-2025-30694/): Malicious code in project-zcvhq-papa (npm) (malicious package)
- [MAL-2025-30693](https://insights.sbomify.com/MAL-2025-30693/): Malicious code in project-zc3nl-oscar (npm) (malicious package)
- [MAL-2025-30692](https://insights.sbomify.com/MAL-2025-30692/): Malicious code in project-zbnzg-juliet (npm) (malicious package)
- [MAL-2025-30691](https://insights.sbomify.com/MAL-2025-30691/): Malicious code in project-zb5ac-foxtrot (npm) (malicious package)
- [MAL-2025-30690](https://insights.sbomify.com/MAL-2025-30690/): Malicious code in project-zb4wb-bravo (npm) (malicious package)
- [MAL-2025-3069](https://insights.sbomify.com/MAL-2025-3069/): Malicious code in keybase-live-feed (npm) (malicious package)
- [MAL-2025-30689](https://insights.sbomify.com/MAL-2025-30689/): Malicious code in project-zasb2-xigua (npm) (malicious package)
- [MAL-2025-30688](https://insights.sbomify.com/MAL-2025-30688/): Malicious code in project-z82q7-lima (npm) (malicious package)
- [MAL-2025-30687](https://insights.sbomify.com/MAL-2025-30687/): Malicious code in project-z7hme-echo (npm) (malicious package)
- [MAL-2025-30686](https://insights.sbomify.com/MAL-2025-30686/): Malicious code in project-z5nc6-nectarine (npm) (malicious package)
- [MAL-2025-30685](https://insights.sbomify.com/MAL-2025-30685/): Malicious code in project-z1evu-elderberry (npm) (malicious package)
- [MAL-2025-30684](https://insights.sbomify.com/MAL-2025-30684/): Malicious code in project-z0u1z-strawberry (npm) (malicious package)
- [MAL-2025-30683](https://insights.sbomify.com/MAL-2025-30683/): Malicious code in project-z0u14-alpha (npm) (malicious package)
- [MAL-2025-30682](https://insights.sbomify.com/MAL-2025-30682/): Malicious code in project-yywut-zulu (npm) (malicious package)
- [MAL-2025-30681](https://insights.sbomify.com/MAL-2025-30681/): Malicious code in project-yx75b-oscar (npm) (malicious package)
- [MAL-2025-30680](https://insights.sbomify.com/MAL-2025-30680/): Malicious code in project-yvpio-vanilla (npm) (malicious package)
- [MAL-2025-3068](https://insights.sbomify.com/MAL-2025-3068/): Malicious code in grunt-ci-suite (npm) (malicious package)
- [MAL-2025-30679](https://insights.sbomify.com/MAL-2025-30679/): Malicious code in project-yvaed-grape (npm) (malicious package)
- [MAL-2025-30678](https://insights.sbomify.com/MAL-2025-30678/): Malicious code in project-ytig0-alpha (npm) (malicious package)
- [MAL-2025-30677](https://insights.sbomify.com/MAL-2025-30677/): Malicious code in project-yogjg-xigua (npm) (malicious package)
- [MAL-2025-30676](https://insights.sbomify.com/MAL-2025-30676/): Malicious code in project-yo1d9-india (npm) (malicious package)
- [MAL-2025-30675](https://insights.sbomify.com/MAL-2025-30675/): Malicious code in project-ym91k-mango (npm) (malicious package)
- [MAL-2025-30674](https://insights.sbomify.com/MAL-2025-30674/): Malicious code in project-ylegh-orange (npm) (malicious package)
- [MAL-2025-30673](https://insights.sbomify.com/MAL-2025-30673/): Malicious code in project-yl4ub-delta (npm) (malicious package)
- [MAL-2025-30672](https://insights.sbomify.com/MAL-2025-30672/): Malicious code in project-yl4sx-lemon (npm) (malicious package)
- [MAL-2025-30671](https://insights.sbomify.com/MAL-2025-30671/): Malicious code in project-ykhjj-papa (npm) (malicious package)
- [MAL-2025-30670](https://insights.sbomify.com/MAL-2025-30670/): Malicious code in project-yjpys-tango (npm) (malicious package)
- [MAL-2025-3067](https://insights.sbomify.com/MAL-2025-3067/): Malicious code in gaming-fe (npm) (malicious package)
- [MAL-2025-30669](https://insights.sbomify.com/MAL-2025-30669/): Malicious code in project-yhsft-date (npm) (malicious package)
- [MAL-2025-30668](https://insights.sbomify.com/MAL-2025-30668/): Malicious code in project-yhrkg-uniform (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/772/