# Vulnerabilities published in 2025


- [MAL-2025-30306](https://insights.sbomify.com/MAL-2025-30306/): Malicious code in project-kyqcc-whiskey (npm) (malicious package)
- [MAL-2025-30305](https://insights.sbomify.com/MAL-2025-30305/): Malicious code in project-kymw2-raspberry (npm) (malicious package)
- [MAL-2025-30304](https://insights.sbomify.com/MAL-2025-30304/): Malicious code in project-ky9dc-zulu (npm) (malicious package)
- [MAL-2025-30303](https://insights.sbomify.com/MAL-2025-30303/): Malicious code in project-kxq42-kilo (npm) (malicious package)
- [MAL-2025-30302](https://insights.sbomify.com/MAL-2025-30302/): Malicious code in project-kx06v-bravo (npm) (malicious package)
- [MAL-2025-30301](https://insights.sbomify.com/MAL-2025-30301/): Malicious code in project-kvglo-cherry (npm) (malicious package)
- [MAL-2025-30300](https://insights.sbomify.com/MAL-2025-30300/): Malicious code in project-ks6lo-india (npm) (malicious package)
- [MAL-2025-3030](https://insights.sbomify.com/MAL-2025-3030/): Malicious code in tap-hook (npm) (malicious package)
- [MAL-2025-303](https://insights.sbomify.com/MAL-2025-303/): Malicious code in sdk-coin-ada (npm) (malicious package)
- [MAL-2025-30299](https://insights.sbomify.com/MAL-2025-30299/): Malicious code in project-kpci2-yam (npm) (malicious package)
- [MAL-2025-30298](https://insights.sbomify.com/MAL-2025-30298/): Malicious code in project-kolxj-xigua (npm) (malicious package)
- [MAL-2025-30297](https://insights.sbomify.com/MAL-2025-30297/): Malicious code in project-kmjlo-strawberry (npm) (malicious package)
- [MAL-2025-30296](https://insights.sbomify.com/MAL-2025-30296/): Malicious code in project-kkv5u-tangerine (npm) (malicious package)
- [MAL-2025-30295](https://insights.sbomify.com/MAL-2025-30295/): Malicious code in project-kkp1g-quebec (npm) (malicious package)
- [MAL-2025-30294](https://insights.sbomify.com/MAL-2025-30294/): Malicious code in project-kjf9n-cherry (npm) (malicious package)
- [MAL-2025-30293](https://insights.sbomify.com/MAL-2025-30293/): Malicious code in project-kj8cc-yam (npm) (malicious package)
- [MAL-2025-30292](https://insights.sbomify.com/MAL-2025-30292/): Malicious code in project-kitbe-yankee (npm) (malicious package)
- [MAL-2025-30291](https://insights.sbomify.com/MAL-2025-30291/): Malicious code in project-key9g-papa (npm) (malicious package)
- [MAL-2025-30290](https://insights.sbomify.com/MAL-2025-30290/): Malicious code in project-kbmrr-xigua (npm) (malicious package)
- [MAL-2025-3029](https://insights.sbomify.com/MAL-2025-3029/): Malicious code in @piplabs/story-contracts (npm) (malicious package)
- [MAL-2025-30289](https://insights.sbomify.com/MAL-2025-30289/): Malicious code in project-k6zjd-mango (npm) (malicious package)
- [MAL-2025-30288](https://insights.sbomify.com/MAL-2025-30288/): Malicious code in project-k6eg8-foxtrot (npm) (malicious package)
- [MAL-2025-30287](https://insights.sbomify.com/MAL-2025-30287/): Malicious code in project-k6cu9-kiwi (npm) (malicious package)
- [MAL-2025-30286](https://insights.sbomify.com/MAL-2025-30286/): Malicious code in project-k4z97-whiskey (npm) (malicious package)
- [MAL-2025-30285](https://insights.sbomify.com/MAL-2025-30285/): Malicious code in project-k4xxy-hotel (npm) (malicious package)
- [MAL-2025-30284](https://insights.sbomify.com/MAL-2025-30284/): Malicious code in project-k3sd4-banana (npm) (malicious package)
- [MAL-2025-30283](https://insights.sbomify.com/MAL-2025-30283/): Malicious code in project-k3nf3-yankee (npm) (malicious package)
- [MAL-2025-30282](https://insights.sbomify.com/MAL-2025-30282/): Malicious code in project-jvo6j-papaya (npm) (malicious package)
- [MAL-2025-30281](https://insights.sbomify.com/MAL-2025-30281/): Malicious code in project-ju84u-romeo (npm) (malicious package)
- [MAL-2025-30280](https://insights.sbomify.com/MAL-2025-30280/): Malicious code in project-js0x2-bravo (npm) (malicious package)
- [MAL-2025-3028](https://insights.sbomify.com/MAL-2025-3028/): Malicious code in blobstream-contracts (npm) (malicious package)
- [MAL-2025-30279](https://insights.sbomify.com/MAL-2025-30279/): Malicious code in project-jrytt-charlie (npm) (malicious package)
- [MAL-2025-30278](https://insights.sbomify.com/MAL-2025-30278/): Malicious code in project-jlgv3-nectarine (npm) (malicious package)
- [MAL-2025-30277](https://insights.sbomify.com/MAL-2025-30277/): Malicious code in project-jl98r-kiwi (npm) (malicious package)
- [MAL-2025-30276](https://insights.sbomify.com/MAL-2025-30276/): Malicious code in project-jkyeg-raspberry (npm) (malicious package)
- [MAL-2025-30275](https://insights.sbomify.com/MAL-2025-30275/): Malicious code in project-jklq6-hotel (npm) (malicious package)
- [MAL-2025-30274](https://insights.sbomify.com/MAL-2025-30274/): Malicious code in project-jj6w9-strawberry (npm) (malicious package)
- [MAL-2025-30273](https://insights.sbomify.com/MAL-2025-30273/): Malicious code in project-jj5kn-quince (npm) (malicious package)
- [MAL-2025-30272](https://insights.sbomify.com/MAL-2025-30272/): Malicious code in project-jj1c9-lima (npm) (malicious package)
- [MAL-2025-30271](https://insights.sbomify.com/MAL-2025-30271/): Malicious code in project-jir0a-zucchini (npm) (malicious package)
- [MAL-2025-30270](https://insights.sbomify.com/MAL-2025-30270/): Malicious code in project-jhju4-ugli (npm) (malicious package)
- [MAL-2025-3027](https://insights.sbomify.com/MAL-2025-3027/): Malicious code in keypair-utils (npm) (malicious package)
- [MAL-2025-30269](https://insights.sbomify.com/MAL-2025-30269/): Malicious code in project-jh74n-fig (npm) (malicious package)
- [MAL-2025-30268](https://insights.sbomify.com/MAL-2025-30268/): Malicious code in project-jfjlm-charlie (npm) (malicious package)
- [MAL-2025-30267](https://insights.sbomify.com/MAL-2025-30267/): Malicious code in project-jeycs-lima (npm) (malicious package)
- [MAL-2025-30266](https://insights.sbomify.com/MAL-2025-30266/): Malicious code in project-je2mk-watermelon (npm) (malicious package)
- [MAL-2025-30265](https://insights.sbomify.com/MAL-2025-30265/): Malicious code in project-jcjh5-xray (npm) (malicious package)
- [MAL-2025-30264](https://insights.sbomify.com/MAL-2025-30264/): Malicious code in project-jbn4w-tango (npm) (malicious package)
- [MAL-2025-30263](https://insights.sbomify.com/MAL-2025-30263/): Malicious code in project-jb1k2-uniform (npm) (malicious package)
- [MAL-2025-30262](https://insights.sbomify.com/MAL-2025-30262/): Malicious code in project-jadza-date (npm) (malicious package)
- [MAL-2025-30261](https://insights.sbomify.com/MAL-2025-30261/): Malicious code in project-j8hno-apple (npm) (malicious package)
- [MAL-2025-30260](https://insights.sbomify.com/MAL-2025-30260/): Malicious code in project-j7asx-zucchini (npm) (malicious package)
- [MAL-2025-3026](https://insights.sbomify.com/MAL-2025-3026/): Malicious code in yass_eal_abcdef_ssdsf_dsfsf (npm) (malicious package)
- [MAL-2025-30259](https://insights.sbomify.com/MAL-2025-30259/): Malicious code in project-j5h4i-bravo (npm) (malicious package)
- [MAL-2025-30258](https://insights.sbomify.com/MAL-2025-30258/): Malicious code in project-j26aw-apple (npm) (malicious package)
- [MAL-2025-30257](https://insights.sbomify.com/MAL-2025-30257/): Malicious code in project-j1g6v-vanilla (npm) (malicious package)
- [MAL-2025-30256](https://insights.sbomify.com/MAL-2025-30256/): Malicious code in project-izew6-delta (npm) (malicious package)
- [MAL-2025-30255](https://insights.sbomify.com/MAL-2025-30255/): Malicious code in project-iz8sy-fig (npm) (malicious package)
- [MAL-2025-30254](https://insights.sbomify.com/MAL-2025-30254/): Malicious code in project-iyltu-orange (npm) (malicious package)
- [MAL-2025-30253](https://insights.sbomify.com/MAL-2025-30253/): Malicious code in project-ivtmk-zulu (npm) (malicious package)
- [MAL-2025-30252](https://insights.sbomify.com/MAL-2025-30252/): Malicious code in project-ivqmp-grape (npm) (malicious package)
- [MAL-2025-30251](https://insights.sbomify.com/MAL-2025-30251/): Malicious code in project-iv1zl-echo (npm) (malicious package)
- [MAL-2025-30250](https://insights.sbomify.com/MAL-2025-30250/): Malicious code in project-iu4m9-papa (npm) (malicious package)
- [MAL-2025-3025](https://insights.sbomify.com/MAL-2025-3025/): Malicious code in saur-viseau-state-management (npm) (malicious package)
- [MAL-2025-30249](https://insights.sbomify.com/MAL-2025-30249/): Malicious code in project-isqgr-strawberry (npm) (malicious package)
- [MAL-2025-30248](https://insights.sbomify.com/MAL-2025-30248/): Malicious code in project-ipr1r-grape (npm) (malicious package)
- [MAL-2025-30247](https://insights.sbomify.com/MAL-2025-30247/): Malicious code in project-iok5f-date (npm) (malicious package)
- [MAL-2025-30246](https://insights.sbomify.com/MAL-2025-30246/): Malicious code in project-imlkd-banana (npm) (malicious package)
- [MAL-2025-30245](https://insights.sbomify.com/MAL-2025-30245/): Malicious code in project-il5rj-kiwi (npm) (malicious package)
- [MAL-2025-30244](https://insights.sbomify.com/MAL-2025-30244/): Malicious code in project-ijmov-papaya (npm) (malicious package)
- [MAL-2025-30243](https://insights.sbomify.com/MAL-2025-30243/): Malicious code in project-iieyv-hotel (npm) (malicious package)
- [MAL-2025-30242](https://insights.sbomify.com/MAL-2025-30242/): Malicious code in project-iia8p-charlie (npm) (malicious package)
- [MAL-2025-30241](https://insights.sbomify.com/MAL-2025-30241/): Malicious code in project-ii2kp-uniform (npm) (malicious package)
- [MAL-2025-30240](https://insights.sbomify.com/MAL-2025-30240/): Malicious code in project-ihtbx-lima (npm) (malicious package)
- [MAL-2025-3024](https://insights.sbomify.com/MAL-2025-3024/): Malicious code in saur-states-management (npm) (malicious package)
- [MAL-2025-30239](https://insights.sbomify.com/MAL-2025-30239/): Malicious code in project-igmpt-charlie (npm) (malicious package)
- [MAL-2025-30238](https://insights.sbomify.com/MAL-2025-30238/): Malicious code in project-ig3z1-kiwi (npm) (malicious package)
- [MAL-2025-30237](https://insights.sbomify.com/MAL-2025-30237/): Malicious code in project-ifqg4-date (npm) (malicious package)
- [MAL-2025-30236](https://insights.sbomify.com/MAL-2025-30236/): Malicious code in project-iexpu-whiskey (npm) (malicious package)
- [MAL-2025-30235](https://insights.sbomify.com/MAL-2025-30235/): Malicious code in project-idkux-nectarine (npm) (malicious package)
- [MAL-2025-30234](https://insights.sbomify.com/MAL-2025-30234/): Malicious code in project-idjvz-kiwi (npm) (malicious package)
- [MAL-2025-30233](https://insights.sbomify.com/MAL-2025-30233/): Malicious code in project-icf0t-quince (npm) (malicious package)
- [MAL-2025-30232](https://insights.sbomify.com/MAL-2025-30232/): Malicious code in project-ic88a-bravo (npm) (malicious package)
- [MAL-2025-30231](https://insights.sbomify.com/MAL-2025-30231/): Malicious code in project-ibxg0-cherry (npm) (malicious package)
- [MAL-2025-30230](https://insights.sbomify.com/MAL-2025-30230/): Malicious code in project-ibmic-sierra (npm) (malicious package)
- [MAL-2025-3023](https://insights.sbomify.com/MAL-2025-3023/): Malicious code in saur-design-sys-web (npm) (malicious package)
- [MAL-2025-30229](https://insights.sbomify.com/MAL-2025-30229/): Malicious code in project-ibbf4-zucchini (npm) (malicious package)
- [MAL-2025-30228](https://insights.sbomify.com/MAL-2025-30228/): Malicious code in project-iarwx-golf (npm) (malicious package)
- [MAL-2025-30227](https://insights.sbomify.com/MAL-2025-30227/): Malicious code in project-iag43-oscar (npm) (malicious package)
- [MAL-2025-30226](https://insights.sbomify.com/MAL-2025-30226/): Malicious code in project-ia7gf-zucchini (npm) (malicious package)
- [MAL-2025-30225](https://insights.sbomify.com/MAL-2025-30225/): Malicious code in project-i7w1k-yam (npm) (malicious package)
- [MAL-2025-30224](https://insights.sbomify.com/MAL-2025-30224/): Malicious code in project-i4umi-tangerine (npm) (malicious package)
- [MAL-2025-30223](https://insights.sbomify.com/MAL-2025-30223/): Malicious code in project-i1rf8-kiwi (npm) (malicious package)
- [MAL-2025-30222](https://insights.sbomify.com/MAL-2025-30222/): Malicious code in project-i0jgw-grape (npm) (malicious package)
- [MAL-2025-30221](https://insights.sbomify.com/MAL-2025-30221/): Malicious code in project-i05m3-echo (npm) (malicious package)
- [MAL-2025-30220](https://insights.sbomify.com/MAL-2025-30220/): Malicious code in project-hz8ts-alpha (npm) (malicious package)
- [MAL-2025-3022](https://insights.sbomify.com/MAL-2025-3022/): Malicious code in pocketnet (npm) (malicious package)
- [MAL-2025-30219](https://insights.sbomify.com/MAL-2025-30219/): Malicious code in project-hxhg1-bravo (npm) (malicious package)
- [MAL-2025-30218](https://insights.sbomify.com/MAL-2025-30218/): Malicious code in project-hv7iu-banana (npm) (malicious package)
- [MAL-2025-30217](https://insights.sbomify.com/MAL-2025-30217/): Malicious code in project-hudxk-cherry (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/777/