# Vulnerabilities published in 2025 - [MAL-2025-30667](https://insights.sbomify.com/MAL-2025-30667/): Malicious code in project-yfsjo-lima (npm) (malicious package) - [MAL-2025-30666](https://insights.sbomify.com/MAL-2025-30666/): Malicious code in project-yd4fe-watermelon (npm) (malicious package) - [MAL-2025-30665](https://insights.sbomify.com/MAL-2025-30665/): Malicious code in project-yc1or-oscar (npm) (malicious package) - [MAL-2025-30664](https://insights.sbomify.com/MAL-2025-30664/): Malicious code in project-ya3v0-quebec (npm) (malicious package) - [MAL-2025-30663](https://insights.sbomify.com/MAL-2025-30663/): Malicious code in project-y9kmg-bravo (npm) (malicious package) - [MAL-2025-30662](https://insights.sbomify.com/MAL-2025-30662/): Malicious code in project-y7xny-zucchini (npm) (malicious package) - [MAL-2025-30661](https://insights.sbomify.com/MAL-2025-30661/): Malicious code in project-y72kr-uniform (npm) (malicious package) - [MAL-2025-30660](https://insights.sbomify.com/MAL-2025-30660/): Malicious code in project-y60ov-romeo (npm) (malicious package) - [MAL-2025-3066](https://insights.sbomify.com/MAL-2025-3066/): Malicious code in ehackify-workshop (npm) (malicious package) - [MAL-2025-30659](https://insights.sbomify.com/MAL-2025-30659/): Malicious code in project-y57qz-uniform (npm) (malicious package) - [MAL-2025-30658](https://insights.sbomify.com/MAL-2025-30658/): Malicious code in project-y1x34-whiskey (npm) (malicious package) - [MAL-2025-30657](https://insights.sbomify.com/MAL-2025-30657/): Malicious code in project-y07vl-xigua (npm) (malicious package) - [MAL-2025-30656](https://insights.sbomify.com/MAL-2025-30656/): Malicious code in project-xzjzf-zucchini (npm) (malicious package) - [MAL-2025-30655](https://insights.sbomify.com/MAL-2025-30655/): Malicious code in project-xyn05-uniform (npm) (malicious package) - [MAL-2025-30654](https://insights.sbomify.com/MAL-2025-30654/): Malicious code in project-xwmvm-sierra (npm) (malicious package) - [MAL-2025-30653](https://insights.sbomify.com/MAL-2025-30653/): Malicious code in project-xv4g0-date (npm) (malicious package) - [MAL-2025-30652](https://insights.sbomify.com/MAL-2025-30652/): Malicious code in project-xv1va-xigua (npm) (malicious package) - [MAL-2025-30651](https://insights.sbomify.com/MAL-2025-30651/): Malicious code in project-xul04-xray (npm) (malicious package) - [MAL-2025-30650](https://insights.sbomify.com/MAL-2025-30650/): Malicious code in project-xtq9j-date (npm) (malicious package) - [MAL-2025-3065](https://insights.sbomify.com/MAL-2025-3065/): Malicious code in ehackify-example-test (npm) (malicious package) - [MAL-2025-30649](https://insights.sbomify.com/MAL-2025-30649/): Malicious code in project-xrn0v-watermelon (npm) (malicious package) - [MAL-2025-30648](https://insights.sbomify.com/MAL-2025-30648/): Malicious code in project-xrgb2-honeydew (npm) (malicious package) - [MAL-2025-30647](https://insights.sbomify.com/MAL-2025-30647/): Malicious code in project-xp78l-delta (npm) (malicious package) - [MAL-2025-30646](https://insights.sbomify.com/MAL-2025-30646/): Malicious code in project-xovn9-kilo (npm) (malicious package) - [MAL-2025-30645](https://insights.sbomify.com/MAL-2025-30645/): Malicious code in project-xnb3q-bravo (npm) (malicious package) - [MAL-2025-30644](https://insights.sbomify.com/MAL-2025-30644/): Malicious code in project-xlm6o-juliet (npm) (malicious package) - [MAL-2025-30643](https://insights.sbomify.com/MAL-2025-30643/): Malicious code in project-xhjrn-delta (npm) (malicious package) - [MAL-2025-30642](https://insights.sbomify.com/MAL-2025-30642/): Malicious code in project-xg6k4-victor (npm) (malicious package) - [MAL-2025-30641](https://insights.sbomify.com/MAL-2025-30641/): Malicious code in project-xc972-date (npm) (malicious package) - [MAL-2025-30640](https://insights.sbomify.com/MAL-2025-30640/): Malicious code in project-xc0fz-november (npm) (malicious package) - [MAL-2025-3064](https://insights.sbomify.com/MAL-2025-3064/): Malicious code in checkoutsellerplatserv (npm) (malicious package) - [MAL-2025-30639](https://insights.sbomify.com/MAL-2025-30639/): Malicious code in project-x9ly7-strawberry (npm) (malicious package) - [MAL-2025-30638](https://insights.sbomify.com/MAL-2025-30638/): Malicious code in project-x975a-lemon (npm) (malicious package) - [MAL-2025-30637](https://insights.sbomify.com/MAL-2025-30637/): Malicious code in project-x8aze-zucchini (npm) (malicious package) - [MAL-2025-30636](https://insights.sbomify.com/MAL-2025-30636/): Malicious code in project-x6zki-watermelon (npm) (malicious package) - [MAL-2025-30635](https://insights.sbomify.com/MAL-2025-30635/): Malicious code in project-x6han-bravo (npm) (malicious package) - [MAL-2025-30634](https://insights.sbomify.com/MAL-2025-30634/): Malicious code in project-x5sd9-honeydew (npm) (malicious package) - [MAL-2025-30633](https://insights.sbomify.com/MAL-2025-30633/): Malicious code in project-x4gb5-papaya (npm) (malicious package) - [MAL-2025-30632](https://insights.sbomify.com/MAL-2025-30632/): Malicious code in project-x3ijy-kiwi (npm) (malicious package) - [MAL-2025-30631](https://insights.sbomify.com/MAL-2025-30631/): Malicious code in project-wvfcj-lemon (npm) (malicious package) - [MAL-2025-30630](https://insights.sbomify.com/MAL-2025-30630/): Malicious code in project-wtl7p-raspberry (npm) (malicious package) - [MAL-2025-3063](https://insights.sbomify.com/MAL-2025-3063/): Malicious code in at-authorize-paypal (npm) (malicious package) - [MAL-2025-30629](https://insights.sbomify.com/MAL-2025-30629/): Malicious code in project-wt4nz-victor (npm) (malicious package) - [MAL-2025-30628](https://insights.sbomify.com/MAL-2025-30628/): Malicious code in project-wqkpg-whiskey (npm) (malicious package) - [MAL-2025-30627](https://insights.sbomify.com/MAL-2025-30627/): Malicious code in project-wplsv-grape (npm) (malicious package) - [MAL-2025-30626](https://insights.sbomify.com/MAL-2025-30626/): Malicious code in project-wmnj5-bravo (npm) (malicious package) - [MAL-2025-30625](https://insights.sbomify.com/MAL-2025-30625/): Malicious code in project-wklyi-mike (npm) (malicious package) - [MAL-2025-30624](https://insights.sbomify.com/MAL-2025-30624/): Malicious code in project-wgyes-orange (npm) (malicious package) - [MAL-2025-30623](https://insights.sbomify.com/MAL-2025-30623/): Malicious code in project-wg2g1-apple (npm) (malicious package) - [MAL-2025-30622](https://insights.sbomify.com/MAL-2025-30622/): Malicious code in project-wfdg5-bravo (npm) (malicious package) - [MAL-2025-30621](https://insights.sbomify.com/MAL-2025-30621/): Malicious code in project-wf2vb-cherry (npm) (malicious package) - [MAL-2025-30620](https://insights.sbomify.com/MAL-2025-30620/): Malicious code in project-wezxd-lemon (npm) (malicious package) - [MAL-2025-3062](https://insights.sbomify.com/MAL-2025-3062/): Malicious code in airbnb-dls-web (npm) (malicious package) - [MAL-2025-30619](https://insights.sbomify.com/MAL-2025-30619/): Malicious code in project-wbiyv-quince (npm) (malicious package) - [MAL-2025-30618](https://insights.sbomify.com/MAL-2025-30618/): Malicious code in project-wb0v8-quebec (npm) (malicious package) - [MAL-2025-30617](https://insights.sbomify.com/MAL-2025-30617/): Malicious code in project-wavuw-fig (npm) (malicious package) - [MAL-2025-30616](https://insights.sbomify.com/MAL-2025-30616/): Malicious code in project-w9mw0-raspberry (npm) (malicious package) - [MAL-2025-30615](https://insights.sbomify.com/MAL-2025-30615/): Malicious code in project-w7xpq-fig (npm) (malicious package) - [MAL-2025-30614](https://insights.sbomify.com/MAL-2025-30614/): Malicious code in project-w5m02-date (npm) (malicious package) - [MAL-2025-30613](https://insights.sbomify.com/MAL-2025-30613/): Malicious code in project-w5hfn-india (npm) (malicious package) - [MAL-2025-30612](https://insights.sbomify.com/MAL-2025-30612/): Malicious code in project-w4ht1-zulu (npm) (malicious package) - [MAL-2025-30611](https://insights.sbomify.com/MAL-2025-30611/): Malicious code in project-vy34o-quince (npm) (malicious package) - [MAL-2025-30610](https://insights.sbomify.com/MAL-2025-30610/): Malicious code in project-vxqyt-november (npm) (malicious package) - [MAL-2025-3061](https://insights.sbomify.com/MAL-2025-3061/): Malicious code in accountlifecycleserv (npm) (malicious package) - [MAL-2025-30609](https://insights.sbomify.com/MAL-2025-30609/): Malicious code in project-vxhnc-mike (npm) (malicious package) - [MAL-2025-30608](https://insights.sbomify.com/MAL-2025-30608/): Malicious code in project-vwa1w-elderberry (npm) (malicious package) - [MAL-2025-30607](https://insights.sbomify.com/MAL-2025-30607/): Malicious code in project-vw16g-honeydew (npm) (malicious package) - [MAL-2025-30606](https://insights.sbomify.com/MAL-2025-30606/): Malicious code in project-vrf9f-victor (npm) (malicious package) - [MAL-2025-30605](https://insights.sbomify.com/MAL-2025-30605/): Malicious code in project-vr9rn-echo (npm) (malicious package) - [MAL-2025-30604](https://insights.sbomify.com/MAL-2025-30604/): Malicious code in project-vnine-alpha (npm) (malicious package) - [MAL-2025-30603](https://insights.sbomify.com/MAL-2025-30603/): Malicious code in project-vl38y-papaya (npm) (malicious package) - [MAL-2025-30602](https://insights.sbomify.com/MAL-2025-30602/): Malicious code in project-vjtfn-papaya (npm) (malicious package) - [MAL-2025-30601](https://insights.sbomify.com/MAL-2025-30601/): Malicious code in project-vj1jl-romeo (npm) (malicious package) - [MAL-2025-30600](https://insights.sbomify.com/MAL-2025-30600/): Malicious code in project-vi910-alpha (npm) (malicious package) - [MAL-2025-3060](https://insights.sbomify.com/MAL-2025-3060/): Malicious code in @nationalgeographicsociety/ngsui-header-auth-provider-next (npm) (malicious package) - [MAL-2025-306](https://insights.sbomify.com/MAL-2025-306/): Malicious code in sdk-coin-avaxp (npm) (malicious package) - [MAL-2025-30599](https://insights.sbomify.com/MAL-2025-30599/): Malicious code in project-vg9e9-kiwi (npm) (malicious package) - [MAL-2025-30598](https://insights.sbomify.com/MAL-2025-30598/): Malicious code in project-vet57-kilo (npm) (malicious package) - [MAL-2025-30597](https://insights.sbomify.com/MAL-2025-30597/): Malicious code in project-velmx-sierra (npm) (malicious package) - [MAL-2025-30596](https://insights.sbomify.com/MAL-2025-30596/): Malicious code in project-vegwf-india (npm) (malicious package) - [MAL-2025-30595](https://insights.sbomify.com/MAL-2025-30595/): Malicious code in project-vbpd4-date (npm) (malicious package) - [MAL-2025-30594](https://insights.sbomify.com/MAL-2025-30594/): Malicious code in project-valgp-romeo (npm) (malicious package) - [MAL-2025-30593](https://insights.sbomify.com/MAL-2025-30593/): Malicious code in project-v9k8z-strawberry (npm) (malicious package) - [MAL-2025-30592](https://insights.sbomify.com/MAL-2025-30592/): Malicious code in project-v8dtj-ugli (npm) (malicious package) - [MAL-2025-30591](https://insights.sbomify.com/MAL-2025-30591/): Malicious code in project-v7pg6-romeo (npm) (malicious package) - [MAL-2025-30590](https://insights.sbomify.com/MAL-2025-30590/): Malicious code in project-v6ddf-hotel (npm) (malicious package) - [MAL-2025-3059](https://insights.sbomify.com/MAL-2025-3059/): Malicious code in @nationalgeographicsociety/ngsui-core-react (npm) (malicious package) - [MAL-2025-30589](https://insights.sbomify.com/MAL-2025-30589/): Malicious code in project-v2s9q-tango (npm) (malicious package) - [MAL-2025-30588](https://insights.sbomify.com/MAL-2025-30588/): Malicious code in project-v2lli-tangerine (npm) (malicious package) - [MAL-2025-30587](https://insights.sbomify.com/MAL-2025-30587/): Malicious code in project-uzpbs-charlie (npm) (malicious package) - [MAL-2025-30586](https://insights.sbomify.com/MAL-2025-30586/): Malicious code in project-uyfa8-date (npm) (malicious package) - [MAL-2025-30585](https://insights.sbomify.com/MAL-2025-30585/): Malicious code in project-uy5av-honeydew (npm) (malicious package) - [MAL-2025-30584](https://insights.sbomify.com/MAL-2025-30584/): Malicious code in project-uwly5-whiskey (npm) (malicious package) - [MAL-2025-30583](https://insights.sbomify.com/MAL-2025-30583/): Malicious code in project-uv9lm-whiskey (npm) (malicious package) - [MAL-2025-30582](https://insights.sbomify.com/MAL-2025-30582/): Malicious code in project-ut3ep-mango (npm) (malicious package) - [MAL-2025-30581](https://insights.sbomify.com/MAL-2025-30581/): Malicious code in project-uro46-kilo (npm) (malicious package) - [MAL-2025-30580](https://insights.sbomify.com/MAL-2025-30580/): Malicious code in project-uqyuc-honeydew (npm) (malicious package) - [MAL-2025-3058](https://insights.sbomify.com/MAL-2025-3058/): Malicious code in @nationalgeographicsociety/ngsui-addons-react (npm) (malicious package) - [MAL-2025-30579](https://insights.sbomify.com/MAL-2025-30579/): Malicious code in project-uq72a-elderberry (npm) (malicious package) - [MAL-2025-30578](https://insights.sbomify.com/MAL-2025-30578/): Malicious code in project-uq2nl-alpha (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/773/