# Vulnerabilities published in 2025


- [MAL-2025-30487](https://insights.sbomify.com/MAL-2025-30487/): Malicious code in project-reoyc-zulu (npm) (malicious package)
- [MAL-2025-30486](https://insights.sbomify.com/MAL-2025-30486/): Malicious code in project-rdk1f-juliet (npm) (malicious package)
- [MAL-2025-30485](https://insights.sbomify.com/MAL-2025-30485/): Malicious code in project-rcqd1-date (npm) (malicious package)
- [MAL-2025-30484](https://insights.sbomify.com/MAL-2025-30484/): Malicious code in project-rcotb-november (npm) (malicious package)
- [MAL-2025-30483](https://insights.sbomify.com/MAL-2025-30483/): Malicious code in project-rcnzq-zucchini (npm) (malicious package)
- [MAL-2025-30482](https://insights.sbomify.com/MAL-2025-30482/): Malicious code in project-ravrm-victor (npm) (malicious package)
- [MAL-2025-30481](https://insights.sbomify.com/MAL-2025-30481/): Malicious code in project-ra6yi-november (npm) (malicious package)
- [MAL-2025-30480](https://insights.sbomify.com/MAL-2025-30480/): Malicious code in project-r7cyh-papa (npm) (malicious package)
- [MAL-2025-3048](https://insights.sbomify.com/MAL-2025-3048/): Malicious code in @hongfangze/obtain (npm) (malicious package)
- [MAL-2025-30479](https://insights.sbomify.com/MAL-2025-30479/): Malicious code in project-r67nd-oscar (npm) (malicious package)
- [MAL-2025-30478](https://insights.sbomify.com/MAL-2025-30478/): Malicious code in project-r0x8y-charlie (npm) (malicious package)
- [MAL-2025-30477](https://insights.sbomify.com/MAL-2025-30477/): Malicious code in project-r0q7k-strawberry (npm) (malicious package)
- [MAL-2025-30476](https://insights.sbomify.com/MAL-2025-30476/): Malicious code in project-r0jwm-strawberry (npm) (malicious package)
- [MAL-2025-30475](https://insights.sbomify.com/MAL-2025-30475/): Malicious code in project-qxs0k-zucchini (npm) (malicious package)
- [MAL-2025-30474](https://insights.sbomify.com/MAL-2025-30474/): Malicious code in project-qwfgm-xigua (npm) (malicious package)
- [MAL-2025-30473](https://insights.sbomify.com/MAL-2025-30473/): Malicious code in project-qqezv-yankee (npm) (malicious package)
- [MAL-2025-30472](https://insights.sbomify.com/MAL-2025-30472/): Malicious code in project-qpucj-apple (npm) (malicious package)
- [MAL-2025-30471](https://insights.sbomify.com/MAL-2025-30471/): Malicious code in project-qnfrm-sierra (npm) (malicious package)
- [MAL-2025-30470](https://insights.sbomify.com/MAL-2025-30470/): Malicious code in project-qlcap-charlie (npm) (malicious package)
- [MAL-2025-3047](https://insights.sbomify.com/MAL-2025-3047/): Malicious code in @hongfangze/network (npm) (malicious package)
- [MAL-2025-30469](https://insights.sbomify.com/MAL-2025-30469/): Malicious code in project-ql7fw-mike (npm) (malicious package)
- [MAL-2025-30468](https://insights.sbomify.com/MAL-2025-30468/): Malicious code in project-ql6hm-cherry (npm) (malicious package)
- [MAL-2025-30467](https://insights.sbomify.com/MAL-2025-30467/): Malicious code in project-qkhp4-date (npm) (malicious package)
- [MAL-2025-30466](https://insights.sbomify.com/MAL-2025-30466/): Malicious code in project-qhyil-foxtrot (npm) (malicious package)
- [MAL-2025-30465](https://insights.sbomify.com/MAL-2025-30465/): Malicious code in project-qggab-date (npm) (malicious package)
- [MAL-2025-30464](https://insights.sbomify.com/MAL-2025-30464/): Malicious code in project-qfipx-date (npm) (malicious package)
- [MAL-2025-30463](https://insights.sbomify.com/MAL-2025-30463/): Malicious code in project-qcj9v-romeo (npm) (malicious package)
- [MAL-2025-30462](https://insights.sbomify.com/MAL-2025-30462/): Malicious code in project-q8a0c-victor (npm) (malicious package)
- [MAL-2025-30461](https://insights.sbomify.com/MAL-2025-30461/): Malicious code in project-q85of-tangerine (npm) (malicious package)
- [MAL-2025-30460](https://insights.sbomify.com/MAL-2025-30460/): Malicious code in project-q82xd-oscar (npm) (malicious package)
- [MAL-2025-3046](https://insights.sbomify.com/MAL-2025-3046/): Malicious code in @hongfangze/mq (npm) (malicious package)
- [MAL-2025-30459](https://insights.sbomify.com/MAL-2025-30459/): Malicious code in project-q7b2j-oscar (npm) (malicious package)
- [MAL-2025-30458](https://insights.sbomify.com/MAL-2025-30458/): Malicious code in project-q45zc-yam (npm) (malicious package)
- [MAL-2025-30457](https://insights.sbomify.com/MAL-2025-30457/): Malicious code in project-q3fyl-quebec (npm) (malicious package)
- [MAL-2025-30456](https://insights.sbomify.com/MAL-2025-30456/): Malicious code in project-pzrhc-delta (npm) (malicious package)
- [MAL-2025-30455](https://insights.sbomify.com/MAL-2025-30455/): Malicious code in project-pwput-quebec (npm) (malicious package)
- [MAL-2025-30454](https://insights.sbomify.com/MAL-2025-30454/): Malicious code in project-pvtq0-uniform (npm) (malicious package)
- [MAL-2025-30453](https://insights.sbomify.com/MAL-2025-30453/): Malicious code in project-psq3h-zucchini (npm) (malicious package)
- [MAL-2025-30452](https://insights.sbomify.com/MAL-2025-30452/): Malicious code in project-pqr6w-fig (npm) (malicious package)
- [MAL-2025-30451](https://insights.sbomify.com/MAL-2025-30451/): Malicious code in project-ponv3-tangerine (npm) (malicious package)
- [MAL-2025-30450](https://insights.sbomify.com/MAL-2025-30450/): Malicious code in project-pmix6-delta (npm) (malicious package)
- [MAL-2025-3045](https://insights.sbomify.com/MAL-2025-3045/): Malicious code in @hongfangze/http-request (npm) (malicious package)
- [MAL-2025-30449](https://insights.sbomify.com/MAL-2025-30449/): Malicious code in project-pkjtm-echo (npm) (malicious package)
- [MAL-2025-30448](https://insights.sbomify.com/MAL-2025-30448/): Malicious code in project-pi48q-raspberry (npm) (malicious package)
- [MAL-2025-30447](https://insights.sbomify.com/MAL-2025-30447/): Malicious code in project-pfa9s-golf (npm) (malicious package)
- [MAL-2025-30446](https://insights.sbomify.com/MAL-2025-30446/): Malicious code in project-ped9e-orange (npm) (malicious package)
- [MAL-2025-30445](https://insights.sbomify.com/MAL-2025-30445/): Malicious code in project-pe7k1-india (npm) (malicious package)
- [MAL-2025-30444](https://insights.sbomify.com/MAL-2025-30444/): Malicious code in project-pbukw-hotel (npm) (malicious package)
- [MAL-2025-30443](https://insights.sbomify.com/MAL-2025-30443/): Malicious code in project-pbi01-yankee (npm) (malicious package)
- [MAL-2025-30442](https://insights.sbomify.com/MAL-2025-30442/): Malicious code in project-pb5lg-strawberry (npm) (malicious package)
- [MAL-2025-30441](https://insights.sbomify.com/MAL-2025-30441/): Malicious code in project-pavpo-raspberry (npm) (malicious package)
- [MAL-2025-30440](https://insights.sbomify.com/MAL-2025-30440/): Malicious code in project-pab6f-charlie (npm) (malicious package)
- [MAL-2025-3044](https://insights.sbomify.com/MAL-2025-3044/): Malicious code in @hongfangze/guid (npm) (malicious package)
- [MAL-2025-30439](https://insights.sbomify.com/MAL-2025-30439/): Malicious code in project-p5uex-apple (npm) (malicious package)
- [MAL-2025-30438](https://insights.sbomify.com/MAL-2025-30438/): Malicious code in project-p2uvf-delta (npm) (malicious package)
- [MAL-2025-30437](https://insights.sbomify.com/MAL-2025-30437/): Malicious code in project-oywf0-india (npm) (malicious package)
- [MAL-2025-30436](https://insights.sbomify.com/MAL-2025-30436/): Malicious code in project-oy2hi-papa (npm) (malicious package)
- [MAL-2025-30435](https://insights.sbomify.com/MAL-2025-30435/): Malicious code in project-oy122-foxtrot (npm) (malicious package)
- [MAL-2025-30434](https://insights.sbomify.com/MAL-2025-30434/): Malicious code in project-ow6xw-strawberry (npm) (malicious package)
- [MAL-2025-30433](https://insights.sbomify.com/MAL-2025-30433/): Malicious code in project-ovw1j-uniform (npm) (malicious package)
- [MAL-2025-30432](https://insights.sbomify.com/MAL-2025-30432/): Malicious code in project-ovt9r-yankee (npm) (malicious package)
- [MAL-2025-30431](https://insights.sbomify.com/MAL-2025-30431/): Malicious code in project-otygh-echo (npm) (malicious package)
- [MAL-2025-30430](https://insights.sbomify.com/MAL-2025-30430/): Malicious code in project-orht8-date (npm) (malicious package)
- [MAL-2025-3043](https://insights.sbomify.com/MAL-2025-3043/): Malicious code in @hongfangze/filestream (npm) (malicious package)
- [MAL-2025-30429](https://insights.sbomify.com/MAL-2025-30429/): Malicious code in project-orbss-mango (npm) (malicious package)
- [MAL-2025-30428](https://insights.sbomify.com/MAL-2025-30428/): Malicious code in project-oqmue-papaya (npm) (malicious package)
- [MAL-2025-30427](https://insights.sbomify.com/MAL-2025-30427/): Malicious code in project-oovdk-delta (npm) (malicious package)
- [MAL-2025-30426](https://insights.sbomify.com/MAL-2025-30426/): Malicious code in project-omdqc-foxtrot (npm) (malicious package)
- [MAL-2025-30425](https://insights.sbomify.com/MAL-2025-30425/): Malicious code in project-ok17b-quince (npm) (malicious package)
- [MAL-2025-30424](https://insights.sbomify.com/MAL-2025-30424/): Malicious code in project-ojzxv-cherry (npm) (malicious package)
- [MAL-2025-30423](https://insights.sbomify.com/MAL-2025-30423/): Malicious code in project-og0x6-cherry (npm) (malicious package)
- [MAL-2025-30422](https://insights.sbomify.com/MAL-2025-30422/): Malicious code in project-ofj5n-hotel (npm) (malicious package)
- [MAL-2025-30421](https://insights.sbomify.com/MAL-2025-30421/): Malicious code in project-oe83s-golf (npm) (malicious package)
- [MAL-2025-30420](https://insights.sbomify.com/MAL-2025-30420/): Malicious code in project-ocupq-honeydew (npm) (malicious package)
- [MAL-2025-3042](https://insights.sbomify.com/MAL-2025-3042/): Malicious code in @hongfangze/email (npm) (malicious package)
- [MAL-2025-30419](https://insights.sbomify.com/MAL-2025-30419/): Malicious code in project-obrh2-alpha (npm) (malicious package)
- [MAL-2025-30418](https://insights.sbomify.com/MAL-2025-30418/): Malicious code in project-ob49g-mike (npm) (malicious package)
- [MAL-2025-30417](https://insights.sbomify.com/MAL-2025-30417/): Malicious code in project-o9m46-hotel (npm) (malicious package)
- [MAL-2025-30416](https://insights.sbomify.com/MAL-2025-30416/): Malicious code in project-o84vm-yam (npm) (malicious package)
- [MAL-2025-30415](https://insights.sbomify.com/MAL-2025-30415/): Malicious code in project-o6im6-fig (npm) (malicious package)
- [MAL-2025-30414](https://insights.sbomify.com/MAL-2025-30414/): Malicious code in project-o4tg7-watermelon (npm) (malicious package)
- [MAL-2025-30413](https://insights.sbomify.com/MAL-2025-30413/): Malicious code in project-o4hbq-apple (npm) (malicious package)
- [MAL-2025-30412](https://insights.sbomify.com/MAL-2025-30412/): Malicious code in project-o4fno-oscar (npm) (malicious package)
- [MAL-2025-30411](https://insights.sbomify.com/MAL-2025-30411/): Malicious code in project-o1s89-lemon (npm) (malicious package)
- [MAL-2025-30410](https://insights.sbomify.com/MAL-2025-30410/): Malicious code in project-nzevm-date (npm) (malicious package)
- [MAL-2025-3041](https://insights.sbomify.com/MAL-2025-3041/): Malicious code in @hongfangze/derive (npm) (malicious package)
- [MAL-2025-30409](https://insights.sbomify.com/MAL-2025-30409/): Malicious code in project-nza9r-raspberry (npm) (malicious package)
- [MAL-2025-30408](https://insights.sbomify.com/MAL-2025-30408/): Malicious code in project-ny9gt-quince (npm) (malicious package)
- [MAL-2025-30407](https://insights.sbomify.com/MAL-2025-30407/): Malicious code in project-nxsf4-quince (npm) (malicious package)
- [MAL-2025-30406](https://insights.sbomify.com/MAL-2025-30406/): Malicious code in project-nxkg9-fig (npm) (malicious package)
- [MAL-2025-30405](https://insights.sbomify.com/MAL-2025-30405/): Malicious code in project-nxi8b-yankee (npm) (malicious package)
- [MAL-2025-30404](https://insights.sbomify.com/MAL-2025-30404/): Malicious code in project-nx6ew-bravo (npm) (malicious package)
- [MAL-2025-30403](https://insights.sbomify.com/MAL-2025-30403/): Malicious code in project-nv40w-cherry (npm) (malicious package)
- [MAL-2025-30402](https://insights.sbomify.com/MAL-2025-30402/): Malicious code in project-nug91-raspberry (npm) (malicious package)
- [MAL-2025-30401](https://insights.sbomify.com/MAL-2025-30401/): Malicious code in project-nrp5u-strawberry (npm) (malicious package)
- [MAL-2025-30400](https://insights.sbomify.com/MAL-2025-30400/): Malicious code in project-nriak-yankee (npm) (malicious package)
- [MAL-2025-3040](https://insights.sbomify.com/MAL-2025-3040/): Malicious code in @hongfangze/date (npm) (malicious package)
- [MAL-2025-304](https://insights.sbomify.com/MAL-2025-304/): Malicious code in sdk-coin-algo (npm) (malicious package)
- [MAL-2025-30399](https://insights.sbomify.com/MAL-2025-30399/): Malicious code in project-nqxce-india (npm) (malicious package)
- [MAL-2025-30398](https://insights.sbomify.com/MAL-2025-30398/): Malicious code in project-nqkde-date (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/775/