# Vulnerabilities published in 2025


- [MAL-2025-30577](https://insights.sbomify.com/MAL-2025-30577/): Malicious code in project-upbo9-yam (npm) (malicious package)
- [MAL-2025-30576](https://insights.sbomify.com/MAL-2025-30576/): Malicious code in project-up6a8-papaya (npm) (malicious package)
- [MAL-2025-30575](https://insights.sbomify.com/MAL-2025-30575/): Malicious code in project-uos56-kilo (npm) (malicious package)
- [MAL-2025-30574](https://insights.sbomify.com/MAL-2025-30574/): Malicious code in project-uore0-charlie (npm) (malicious package)
- [MAL-2025-30573](https://insights.sbomify.com/MAL-2025-30573/): Malicious code in project-un5i5-delta (npm) (malicious package)
- [MAL-2025-30572](https://insights.sbomify.com/MAL-2025-30572/): Malicious code in project-umckt-nectarine (npm) (malicious package)
- [MAL-2025-30571](https://insights.sbomify.com/MAL-2025-30571/): Malicious code in project-ulgt0-date (npm) (malicious package)
- [MAL-2025-30570](https://insights.sbomify.com/MAL-2025-30570/): Malicious code in project-ujv6p-honeydew (npm) (malicious package)
- [MAL-2025-3057](https://insights.sbomify.com/MAL-2025-3057/): Malicious code in @hongfangze/verify (npm) (malicious package)
- [MAL-2025-30569](https://insights.sbomify.com/MAL-2025-30569/): Malicious code in project-uje83-india (npm) (malicious package)
- [MAL-2025-30568](https://insights.sbomify.com/MAL-2025-30568/): Malicious code in project-uij7k-quebec (npm) (malicious package)
- [MAL-2025-30567](https://insights.sbomify.com/MAL-2025-30567/): Malicious code in project-uhfrh-romeo (npm) (malicious package)
- [MAL-2025-30566](https://insights.sbomify.com/MAL-2025-30566/): Malicious code in project-ugonu-nectarine (npm) (malicious package)
- [MAL-2025-30565](https://insights.sbomify.com/MAL-2025-30565/): Malicious code in project-ugmj8-kiwi (npm) (malicious package)
- [MAL-2025-30564](https://insights.sbomify.com/MAL-2025-30564/): Malicious code in project-uglsi-raspberry (npm) (malicious package)
- [MAL-2025-30563](https://insights.sbomify.com/MAL-2025-30563/): Malicious code in project-udmve-ugli (npm) (malicious package)
- [MAL-2025-30562](https://insights.sbomify.com/MAL-2025-30562/): Malicious code in project-udm49-november (npm) (malicious package)
- [MAL-2025-30561](https://insights.sbomify.com/MAL-2025-30561/): Malicious code in project-ud5vw-cherry (npm) (malicious package)
- [MAL-2025-30560](https://insights.sbomify.com/MAL-2025-30560/): Malicious code in project-ucg3c-watermelon (npm) (malicious package)
- [MAL-2025-3056](https://insights.sbomify.com/MAL-2025-3056/): Malicious code in @hongfangze/three-api (npm) (malicious package)
- [MAL-2025-30559](https://insights.sbomify.com/MAL-2025-30559/): Malicious code in project-ubexf-vanilla (npm) (malicious package)
- [MAL-2025-30558](https://insights.sbomify.com/MAL-2025-30558/): Malicious code in project-ua7k8-xigua (npm) (malicious package)
- [MAL-2025-30557](https://insights.sbomify.com/MAL-2025-30557/): Malicious code in project-u2u24-honeydew (npm) (malicious package)
- [MAL-2025-30556](https://insights.sbomify.com/MAL-2025-30556/): Malicious code in project-tzrfg-papa (npm) (malicious package)
- [MAL-2025-30555](https://insights.sbomify.com/MAL-2025-30555/): Malicious code in project-tw8hi-mike (npm) (malicious package)
- [MAL-2025-30554](https://insights.sbomify.com/MAL-2025-30554/): Malicious code in project-tw7v8-zulu (npm) (malicious package)
- [MAL-2025-30553](https://insights.sbomify.com/MAL-2025-30553/): Malicious code in project-tv02z-alpha (npm) (malicious package)
- [MAL-2025-30552](https://insights.sbomify.com/MAL-2025-30552/): Malicious code in project-tue7f-hotel (npm) (malicious package)
- [MAL-2025-30551](https://insights.sbomify.com/MAL-2025-30551/): Malicious code in project-tts9z-sierra (npm) (malicious package)
- [MAL-2025-30550](https://insights.sbomify.com/MAL-2025-30550/): Malicious code in project-tsi4z-xray (npm) (malicious package)
- [MAL-2025-3055](https://insights.sbomify.com/MAL-2025-3055/): Malicious code in @hongfangze/string (npm) (malicious package)
- [MAL-2025-30549](https://insights.sbomify.com/MAL-2025-30549/): Malicious code in project-tr5rb-charlie (npm) (malicious package)
- [MAL-2025-30548](https://insights.sbomify.com/MAL-2025-30548/): Malicious code in project-tr1q7-date (npm) (malicious package)
- [MAL-2025-30547](https://insights.sbomify.com/MAL-2025-30547/): Malicious code in project-tqyyn-kilo (npm) (malicious package)
- [MAL-2025-30546](https://insights.sbomify.com/MAL-2025-30546/): Malicious code in project-toql8-zulu (npm) (malicious package)
- [MAL-2025-30545](https://insights.sbomify.com/MAL-2025-30545/): Malicious code in project-tn7lw-tango (npm) (malicious package)
- [MAL-2025-30544](https://insights.sbomify.com/MAL-2025-30544/): Malicious code in project-tmuzr-kilo (npm) (malicious package)
- [MAL-2025-30543](https://insights.sbomify.com/MAL-2025-30543/): Malicious code in project-tld0i-quebec (npm) (malicious package)
- [MAL-2025-30542](https://insights.sbomify.com/MAL-2025-30542/): Malicious code in project-tl4ph-quebec (npm) (malicious package)
- [MAL-2025-30541](https://insights.sbomify.com/MAL-2025-30541/): Malicious code in project-tjdsy-yankee (npm) (malicious package)
- [MAL-2025-30540](https://insights.sbomify.com/MAL-2025-30540/): Malicious code in project-tislp-foxtrot (npm) (malicious package)
- [MAL-2025-3054](https://insights.sbomify.com/MAL-2025-3054/): Malicious code in @hongfangze/simple-resource-server (npm) (malicious package)
- [MAL-2025-30539](https://insights.sbomify.com/MAL-2025-30539/): Malicious code in project-ti5tl-grape (npm) (malicious package)
- [MAL-2025-30538](https://insights.sbomify.com/MAL-2025-30538/): Malicious code in project-tglcj-date (npm) (malicious package)
- [MAL-2025-30537](https://insights.sbomify.com/MAL-2025-30537/): Malicious code in project-tephm-papa (npm) (malicious package)
- [MAL-2025-30536](https://insights.sbomify.com/MAL-2025-30536/): Malicious code in project-te4tf-zucchini (npm) (malicious package)
- [MAL-2025-30535](https://insights.sbomify.com/MAL-2025-30535/): Malicious code in project-tdk3n-nectarine (npm) (malicious package)
- [MAL-2025-30534](https://insights.sbomify.com/MAL-2025-30534/): Malicious code in project-tby1o-ugli (npm) (malicious package)
- [MAL-2025-30533](https://insights.sbomify.com/MAL-2025-30533/): Malicious code in project-tbr2w-delta (npm) (malicious package)
- [MAL-2025-30532](https://insights.sbomify.com/MAL-2025-30532/): Malicious code in project-t21zo-yam (npm) (malicious package)
- [MAL-2025-30531](https://insights.sbomify.com/MAL-2025-30531/): Malicious code in project-t1tn0-fig (npm) (malicious package)
- [MAL-2025-30530](https://insights.sbomify.com/MAL-2025-30530/): Malicious code in project-szxca-lemon (npm) (malicious package)
- [MAL-2025-3053](https://insights.sbomify.com/MAL-2025-3053/): Malicious code in @hongfangze/random (npm) (malicious package)
- [MAL-2025-30529](https://insights.sbomify.com/MAL-2025-30529/): Malicious code in project-sz2xr-mango (npm) (malicious package)
- [MAL-2025-30528](https://insights.sbomify.com/MAL-2025-30528/): Malicious code in project-syrbs-raspberry (npm) (malicious package)
- [MAL-2025-30527](https://insights.sbomify.com/MAL-2025-30527/): Malicious code in project-sx2y8-quince (npm) (malicious package)
- [MAL-2025-30526](https://insights.sbomify.com/MAL-2025-30526/): Malicious code in project-svvl0-lima (npm) (malicious package)
- [MAL-2025-30525](https://insights.sbomify.com/MAL-2025-30525/): Malicious code in project-sugy1-strawberry (npm) (malicious package)
- [MAL-2025-30524](https://insights.sbomify.com/MAL-2025-30524/): Malicious code in project-srla9-watermelon (npm) (malicious package)
- [MAL-2025-30523](https://insights.sbomify.com/MAL-2025-30523/): Malicious code in project-sqqop-bravo (npm) (malicious package)
- [MAL-2025-30522](https://insights.sbomify.com/MAL-2025-30522/): Malicious code in project-sppn1-hotel (npm) (malicious package)
- [MAL-2025-30521](https://insights.sbomify.com/MAL-2025-30521/): Malicious code in project-sokph-cherry (npm) (malicious package)
- [MAL-2025-30520](https://insights.sbomify.com/MAL-2025-30520/): Malicious code in project-sn1pc-foxtrot (npm) (malicious package)
- [MAL-2025-3052](https://insights.sbomify.com/MAL-2025-3052/): Malicious code in @hongfangze/progress (npm) (malicious package)
- [MAL-2025-30519](https://insights.sbomify.com/MAL-2025-30519/): Malicious code in project-sloxj-quince (npm) (malicious package)
- [MAL-2025-30518](https://insights.sbomify.com/MAL-2025-30518/): Malicious code in project-sl9tf-grape (npm) (malicious package)
- [MAL-2025-30517](https://insights.sbomify.com/MAL-2025-30517/): Malicious code in project-sj9tt-charlie (npm) (malicious package)
- [MAL-2025-30516](https://insights.sbomify.com/MAL-2025-30516/): Malicious code in project-simvt-kiwi (npm) (malicious package)
- [MAL-2025-30515](https://insights.sbomify.com/MAL-2025-30515/): Malicious code in project-sha2a-watermelon (npm) (malicious package)
- [MAL-2025-30514](https://insights.sbomify.com/MAL-2025-30514/): Malicious code in project-sghq7-hotel (npm) (malicious package)
- [MAL-2025-30513](https://insights.sbomify.com/MAL-2025-30513/): Malicious code in project-sfqqx-golf (npm) (malicious package)
- [MAL-2025-30512](https://insights.sbomify.com/MAL-2025-30512/): Malicious code in project-sfahy-oscar (npm) (malicious package)
- [MAL-2025-30511](https://insights.sbomify.com/MAL-2025-30511/): Malicious code in project-sewdu-zucchini (npm) (malicious package)
- [MAL-2025-30510](https://insights.sbomify.com/MAL-2025-30510/): Malicious code in project-se93i-cherry (npm) (malicious package)
- [MAL-2025-3051](https://insights.sbomify.com/MAL-2025-3051/): Malicious code in @hongfangze/proc (npm) (malicious package)
- [MAL-2025-30509](https://insights.sbomify.com/MAL-2025-30509/): Malicious code in project-sde2y-cherry (npm) (malicious package)
- [MAL-2025-30508](https://insights.sbomify.com/MAL-2025-30508/): Malicious code in project-sd71d-zucchini (npm) (malicious package)
- [MAL-2025-30507](https://insights.sbomify.com/MAL-2025-30507/): Malicious code in project-sd51x-bravo (npm) (malicious package)
- [MAL-2025-30506](https://insights.sbomify.com/MAL-2025-30506/): Malicious code in project-sbxj0-tangerine (npm) (malicious package)
- [MAL-2025-30505](https://insights.sbomify.com/MAL-2025-30505/): Malicious code in project-s88ww-raspberry (npm) (malicious package)
- [MAL-2025-30504](https://insights.sbomify.com/MAL-2025-30504/): Malicious code in project-s4lhl-tangerine (npm) (malicious package)
- [MAL-2025-30503](https://insights.sbomify.com/MAL-2025-30503/): Malicious code in project-s3o3y-victor (npm) (malicious package)
- [MAL-2025-30502](https://insights.sbomify.com/MAL-2025-30502/): Malicious code in project-s2clk-quebec (npm) (malicious package)
- [MAL-2025-30501](https://insights.sbomify.com/MAL-2025-30501/): Malicious code in project-rzrsc-romeo (npm) (malicious package)
- [MAL-2025-30500](https://insights.sbomify.com/MAL-2025-30500/): Malicious code in project-rzmmd-orange (npm) (malicious package)
- [MAL-2025-3050](https://insights.sbomify.com/MAL-2025-3050/): Malicious code in @hongfangze/pack (npm) (malicious package)
- [MAL-2025-305](https://insights.sbomify.com/MAL-2025-305/): Malicious code in sdk-coin-avaxc (npm) (malicious package)
- [MAL-2025-30499](https://insights.sbomify.com/MAL-2025-30499/): Malicious code in project-ryys4-xray (npm) (malicious package)
- [MAL-2025-30498](https://insights.sbomify.com/MAL-2025-30498/): Malicious code in project-rsgfa-nectarine (npm) (malicious package)
- [MAL-2025-30497](https://insights.sbomify.com/MAL-2025-30497/): Malicious code in project-rrxd0-elderberry (npm) (malicious package)
- [MAL-2025-30496](https://insights.sbomify.com/MAL-2025-30496/): Malicious code in project-rrkb2-oscar (npm) (malicious package)
- [MAL-2025-30495](https://insights.sbomify.com/MAL-2025-30495/): Malicious code in project-rq5hu-vanilla (npm) (malicious package)
- [MAL-2025-30494](https://insights.sbomify.com/MAL-2025-30494/): Malicious code in project-rpcww-orange (npm) (malicious package)
- [MAL-2025-30493](https://insights.sbomify.com/MAL-2025-30493/): Malicious code in project-rogku-lima (npm) (malicious package)
- [MAL-2025-30492](https://insights.sbomify.com/MAL-2025-30492/): Malicious code in project-rocrr-tangerine (npm) (malicious package)
- [MAL-2025-30491](https://insights.sbomify.com/MAL-2025-30491/): Malicious code in project-ro5v3-fig (npm) (malicious package)
- [MAL-2025-30490](https://insights.sbomify.com/MAL-2025-30490/): Malicious code in project-rmmu5-tangerine (npm) (malicious package)
- [MAL-2025-3049](https://insights.sbomify.com/MAL-2025-3049/): Malicious code in @hongfangze/office (npm) (malicious package)
- [MAL-2025-30489](https://insights.sbomify.com/MAL-2025-30489/): Malicious code in project-rlqv2-victor (npm) (malicious package)
- [MAL-2025-30488](https://insights.sbomify.com/MAL-2025-30488/): Malicious code in project-rgynt-fig (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/774/