# Vulnerabilities published in 2025


- [MAL-2025-30397](https://insights.sbomify.com/MAL-2025-30397/): Malicious code in project-nqf04-juliet (npm) (malicious package)
- [MAL-2025-30396](https://insights.sbomify.com/MAL-2025-30396/): Malicious code in project-npxzz-echo (npm) (malicious package)
- [MAL-2025-30395](https://insights.sbomify.com/MAL-2025-30395/): Malicious code in project-npd6r-golf (npm) (malicious package)
- [MAL-2025-30394](https://insights.sbomify.com/MAL-2025-30394/): Malicious code in project-nmy6l-apple (npm) (malicious package)
- [MAL-2025-30393](https://insights.sbomify.com/MAL-2025-30393/): Malicious code in project-nlzao-papaya (npm) (malicious package)
- [MAL-2025-30392](https://insights.sbomify.com/MAL-2025-30392/): Malicious code in project-njuic-mike (npm) (malicious package)
- [MAL-2025-30391](https://insights.sbomify.com/MAL-2025-30391/): Malicious code in project-nj17h-vanilla (npm) (malicious package)
- [MAL-2025-30390](https://insights.sbomify.com/MAL-2025-30390/): Malicious code in project-nh43a-charlie (npm) (malicious package)
- [MAL-2025-3039](https://insights.sbomify.com/MAL-2025-3039/): Malicious code in @hongfangze/database (npm) (malicious package)
- [MAL-2025-30389](https://insights.sbomify.com/MAL-2025-30389/): Malicious code in project-ngzuz-sierra (npm) (malicious package)
- [MAL-2025-30388](https://insights.sbomify.com/MAL-2025-30388/): Malicious code in project-ng6-lib-app (npm) (malicious package)
- [MAL-2025-30387](https://insights.sbomify.com/MAL-2025-30387/): Malicious code in project-nfcqb-zulu (npm) (malicious package)
- [MAL-2025-30386](https://insights.sbomify.com/MAL-2025-30386/): Malicious code in project-nal2f-bravo (npm) (malicious package)
- [MAL-2025-30385](https://insights.sbomify.com/MAL-2025-30385/): Malicious code in project-n9ijt-sierra (npm) (malicious package)
- [MAL-2025-30384](https://insights.sbomify.com/MAL-2025-30384/): Malicious code in project-n8wrd-charlie (npm) (malicious package)
- [MAL-2025-30383](https://insights.sbomify.com/MAL-2025-30383/): Malicious code in project-n7ckz-ugli (npm) (malicious package)
- [MAL-2025-30382](https://insights.sbomify.com/MAL-2025-30382/): Malicious code in project-n6ruc-whiskey (npm) (malicious package)
- [MAL-2025-30381](https://insights.sbomify.com/MAL-2025-30381/): Malicious code in project-n43n1-uniform (npm) (malicious package)
- [MAL-2025-30380](https://insights.sbomify.com/MAL-2025-30380/): Malicious code in project-n3yy6-papaya (npm) (malicious package)
- [MAL-2025-3038](https://insights.sbomify.com/MAL-2025-3038/): Malicious code in @hongfangze/cryptography (npm) (malicious package)
- [MAL-2025-30379](https://insights.sbomify.com/MAL-2025-30379/): Malicious code in project-n3qvc-victor (npm) (malicious package)
- [MAL-2025-30378](https://insights.sbomify.com/MAL-2025-30378/): Malicious code in project-n1ihq-grape (npm) (malicious package)
- [MAL-2025-30377](https://insights.sbomify.com/MAL-2025-30377/): Malicious code in project-n0rer-orange (npm) (malicious package)
- [MAL-2025-30376](https://insights.sbomify.com/MAL-2025-30376/): Malicious code in project-mzwht-echo (npm) (malicious package)
- [MAL-2025-30375](https://insights.sbomify.com/MAL-2025-30375/): Malicious code in project-mzp8i-watermelon (npm) (malicious package)
- [MAL-2025-30374](https://insights.sbomify.com/MAL-2025-30374/): Malicious code in project-mzkac-lemon (npm) (malicious package)
- [MAL-2025-30373](https://insights.sbomify.com/MAL-2025-30373/): Malicious code in project-mwxlu-ugli (npm) (malicious package)
- [MAL-2025-30372](https://insights.sbomify.com/MAL-2025-30372/): Malicious code in project-mwq3d-ugli (npm) (malicious package)
- [MAL-2025-30371](https://insights.sbomify.com/MAL-2025-30371/): Malicious code in project-mwi5v-mike (npm) (malicious package)
- [MAL-2025-30370](https://insights.sbomify.com/MAL-2025-30370/): Malicious code in project-mrwbh-oscar (npm) (malicious package)
- [MAL-2025-3037](https://insights.sbomify.com/MAL-2025-3037/): Malicious code in @hongfangze/convert (npm) (malicious package)
- [MAL-2025-30369](https://insights.sbomify.com/MAL-2025-30369/): Malicious code in project-mrnbi-tangerine (npm) (malicious package)
- [MAL-2025-30368](https://insights.sbomify.com/MAL-2025-30368/): Malicious code in project-mqjbp-vanilla (npm) (malicious package)
- [MAL-2025-30367](https://insights.sbomify.com/MAL-2025-30367/): Malicious code in project-mqex1-zucchini (npm) (malicious package)
- [MAL-2025-30366](https://insights.sbomify.com/MAL-2025-30366/): Malicious code in project-mppvv-fig (npm) (malicious package)
- [MAL-2025-30365](https://insights.sbomify.com/MAL-2025-30365/): Malicious code in project-mpk53-uniform (npm) (malicious package)
- [MAL-2025-30364](https://insights.sbomify.com/MAL-2025-30364/): Malicious code in project-mlmek-elderberry (npm) (malicious package)
- [MAL-2025-30363](https://insights.sbomify.com/MAL-2025-30363/): Malicious code in project-mkw09-yankee (npm) (malicious package)
- [MAL-2025-30362](https://insights.sbomify.com/MAL-2025-30362/): Malicious code in project-mknxk-raspberry (npm) (malicious package)
- [MAL-2025-30361](https://insights.sbomify.com/MAL-2025-30361/): Malicious code in project-mj6hl-xray (npm) (malicious package)
- [MAL-2025-30360](https://insights.sbomify.com/MAL-2025-30360/): Malicious code in project-mj3va-ugli (npm) (malicious package)
- [MAL-2025-3036](https://insights.sbomify.com/MAL-2025-3036/): Malicious code in @hongfangze/concurrent (npm) (malicious package)
- [MAL-2025-30359](https://insights.sbomify.com/MAL-2025-30359/): Malicious code in project-mi5g1-foxtrot (npm) (malicious package)
- [MAL-2025-30358](https://insights.sbomify.com/MAL-2025-30358/): Malicious code in project-mhcmo-elderberry (npm) (malicious package)
- [MAL-2025-30357](https://insights.sbomify.com/MAL-2025-30357/): Malicious code in project-mghrk-banana (npm) (malicious package)
- [MAL-2025-30356](https://insights.sbomify.com/MAL-2025-30356/): Malicious code in project-mdcz5-lemon (npm) (malicious package)
- [MAL-2025-30355](https://insights.sbomify.com/MAL-2025-30355/): Malicious code in project-mcrfe-hotel (npm) (malicious package)
- [MAL-2025-30354](https://insights.sbomify.com/MAL-2025-30354/): Malicious code in project-mc9ts-delta (npm) (malicious package)
- [MAL-2025-30353](https://insights.sbomify.com/MAL-2025-30353/): Malicious code in project-ma85i-xigua (npm) (malicious package)
- [MAL-2025-30352](https://insights.sbomify.com/MAL-2025-30352/): Malicious code in project-m9hzb-quince (npm) (malicious package)
- [MAL-2025-30351](https://insights.sbomify.com/MAL-2025-30351/): Malicious code in project-m9d4y-yam (npm) (malicious package)
- [MAL-2025-30350](https://insights.sbomify.com/MAL-2025-30350/): Malicious code in project-m7ghl-whiskey (npm) (malicious package)
- [MAL-2025-3035](https://insights.sbomify.com/MAL-2025-3035/): Malicious code in @hongfangze/computer (npm) (malicious package)
- [MAL-2025-30349](https://insights.sbomify.com/MAL-2025-30349/): Malicious code in project-m6xti-banana (npm) (malicious package)
- [MAL-2025-30348](https://insights.sbomify.com/MAL-2025-30348/): Malicious code in project-m6g91-whiskey (npm) (malicious package)
- [MAL-2025-30347](https://insights.sbomify.com/MAL-2025-30347/): Malicious code in project-m48m1-november (npm) (malicious package)
- [MAL-2025-30346](https://insights.sbomify.com/MAL-2025-30346/): Malicious code in project-m2p8s-whiskey (npm) (malicious package)
- [MAL-2025-30345](https://insights.sbomify.com/MAL-2025-30345/): Malicious code in project-lzeib-vanilla (npm) (malicious package)
- [MAL-2025-30344](https://insights.sbomify.com/MAL-2025-30344/): Malicious code in project-lyxy7-bravo (npm) (malicious package)
- [MAL-2025-30343](https://insights.sbomify.com/MAL-2025-30343/): Malicious code in project-lyqta-banana (npm) (malicious package)
- [MAL-2025-30342](https://insights.sbomify.com/MAL-2025-30342/): Malicious code in project-lyhno-watermelon (npm) (malicious package)
- [MAL-2025-30341](https://insights.sbomify.com/MAL-2025-30341/): Malicious code in project-ly5lj-tangerine (npm) (malicious package)
- [MAL-2025-30340](https://insights.sbomify.com/MAL-2025-30340/): Malicious code in project-lwpg7-date (npm) (malicious package)
- [MAL-2025-3034](https://insights.sbomify.com/MAL-2025-3034/): Malicious code in @hongfangze/calc (npm) (malicious package)
- [MAL-2025-30339](https://insights.sbomify.com/MAL-2025-30339/): Malicious code in project-ltlq9-india (npm) (malicious package)
- [MAL-2025-30338](https://insights.sbomify.com/MAL-2025-30338/): Malicious code in project-lson5-sierra (npm) (malicious package)
- [MAL-2025-30337](https://insights.sbomify.com/MAL-2025-30337/): Malicious code in project-lrysr-lemon (npm) (malicious package)
- [MAL-2025-30336](https://insights.sbomify.com/MAL-2025-30336/): Malicious code in project-lptbx-romeo (npm) (malicious package)
- [MAL-2025-30335](https://insights.sbomify.com/MAL-2025-30335/): Malicious code in project-lo4m8-apple (npm) (malicious package)
- [MAL-2025-30334](https://insights.sbomify.com/MAL-2025-30334/): Malicious code in project-lmmnt-lima (npm) (malicious package)
- [MAL-2025-30333](https://insights.sbomify.com/MAL-2025-30333/): Malicious code in project-lmke9-orange (npm) (malicious package)
- [MAL-2025-30332](https://insights.sbomify.com/MAL-2025-30332/): Malicious code in project-llnuw-zulu (npm) (malicious package)
- [MAL-2025-30331](https://insights.sbomify.com/MAL-2025-30331/): Malicious code in project-lkb13-watermelon (npm) (malicious package)
- [MAL-2025-30330](https://insights.sbomify.com/MAL-2025-30330/): Malicious code in project-ljsxi-romeo (npm) (malicious package)
- [MAL-2025-3033](https://insights.sbomify.com/MAL-2025-3033/): Malicious code in @hongfangze/array (npm) (malicious package)
- [MAL-2025-30329](https://insights.sbomify.com/MAL-2025-30329/): Malicious code in project-li3hl-lima (npm) (malicious package)
- [MAL-2025-30328](https://insights.sbomify.com/MAL-2025-30328/): Malicious code in project-lhady-xigua (npm) (malicious package)
- [MAL-2025-30327](https://insights.sbomify.com/MAL-2025-30327/): Malicious code in project-lgupa-golf (npm) (malicious package)
- [MAL-2025-30326](https://insights.sbomify.com/MAL-2025-30326/): Malicious code in project-lgmbj-mango (npm) (malicious package)
- [MAL-2025-30325](https://insights.sbomify.com/MAL-2025-30325/): Malicious code in project-lgmab-romeo (npm) (malicious package)
- [MAL-2025-30324](https://insights.sbomify.com/MAL-2025-30324/): Malicious code in project-lgltd-banana (npm) (malicious package)
- [MAL-2025-30323](https://insights.sbomify.com/MAL-2025-30323/): Malicious code in project-lgf57-uniform (npm) (malicious package)
- [MAL-2025-30322](https://insights.sbomify.com/MAL-2025-30322/): Malicious code in project-lfdaf-watermelon (npm) (malicious package)
- [MAL-2025-30321](https://insights.sbomify.com/MAL-2025-30321/): Malicious code in project-lersb-hotel (npm) (malicious package)
- [MAL-2025-30320](https://insights.sbomify.com/MAL-2025-30320/): Malicious code in project-ld290-tango (npm) (malicious package)
- [MAL-2025-3032](https://insights.sbomify.com/MAL-2025-3032/): Malicious code in @atulrv1day/unusedpackage (npm) (malicious package)
- [MAL-2025-30319](https://insights.sbomify.com/MAL-2025-30319/): Malicious code in project-lc8dt-lima (npm) (malicious package)
- [MAL-2025-30318](https://insights.sbomify.com/MAL-2025-30318/): Malicious code in project-lbihm-vanilla (npm) (malicious package)
- [MAL-2025-30317](https://insights.sbomify.com/MAL-2025-30317/): Malicious code in project-lbhpb-ugli (npm) (malicious package)
- [MAL-2025-30316](https://insights.sbomify.com/MAL-2025-30316/): Malicious code in project-lbd4a-mike (npm) (malicious package)
- [MAL-2025-30315](https://insights.sbomify.com/MAL-2025-30315/): Malicious code in project-la4jj-whiskey (npm) (malicious package)
- [MAL-2025-30314](https://insights.sbomify.com/MAL-2025-30314/): Malicious code in project-l9fo7-yam (npm) (malicious package)
- [MAL-2025-30313](https://insights.sbomify.com/MAL-2025-30313/): Malicious code in project-l82ki-xray (npm) (malicious package)
- [MAL-2025-30312](https://insights.sbomify.com/MAL-2025-30312/): Malicious code in project-l6uof-tangerine (npm) (malicious package)
- [MAL-2025-30311](https://insights.sbomify.com/MAL-2025-30311/): Malicious code in project-l4wh2-vanilla (npm) (malicious package)
- [MAL-2025-30310](https://insights.sbomify.com/MAL-2025-30310/): Malicious code in project-l3f5v-grape (npm) (malicious package)
- [MAL-2025-3031](https://insights.sbomify.com/MAL-2025-3031/): Malicious code in one-venafi-local-store-manager (npm) (malicious package)
- [MAL-2025-30309](https://insights.sbomify.com/MAL-2025-30309/): Malicious code in project-l1y1b-foxtrot (npm) (malicious package)
- [MAL-2025-30308](https://insights.sbomify.com/MAL-2025-30308/): Malicious code in project-l0obv-oscar (npm) (malicious package)
- [MAL-2025-30307](https://insights.sbomify.com/MAL-2025-30307/): Malicious code in project-kzhlj-foxtrot (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/776/