# Vulnerabilities published in 2025 - [MAL-2025-30216](https://insights.sbomify.com/MAL-2025-30216/): Malicious code in project-htz4v-oscar (npm) (malicious package) - [MAL-2025-30215](https://insights.sbomify.com/MAL-2025-30215/): Malicious code in project-hs0d0-romeo (npm) (malicious package) - [MAL-2025-30214](https://insights.sbomify.com/MAL-2025-30214/): Malicious code in project-hpw12-alpha (npm) (malicious package) - [MAL-2025-30213](https://insights.sbomify.com/MAL-2025-30213/): Malicious code in project-hnbqm-india (npm) (malicious package) - [MAL-2025-30212](https://insights.sbomify.com/MAL-2025-30212/): Malicious code in project-hn1w4-whiskey (npm) (malicious package) - [MAL-2025-30211](https://insights.sbomify.com/MAL-2025-30211/): Malicious code in project-hkivd-tangerine (npm) (malicious package) - [MAL-2025-30210](https://insights.sbomify.com/MAL-2025-30210/): Malicious code in project-hhm21-india (npm) (malicious package) - [MAL-2025-3021](https://insights.sbomify.com/MAL-2025-3021/): Malicious code in evenote-thrift (RubyGems) (malicious package) - [MAL-2025-30209](https://insights.sbomify.com/MAL-2025-30209/): Malicious code in project-hha9q-vanilla (npm) (malicious package) - [MAL-2025-30208](https://insights.sbomify.com/MAL-2025-30208/): Malicious code in project-hfndy-mango (npm) (malicious package) - [MAL-2025-30207](https://insights.sbomify.com/MAL-2025-30207/): Malicious code in project-he75k-zucchini (npm) (malicious package) - [MAL-2025-30206](https://insights.sbomify.com/MAL-2025-30206/): Malicious code in project-h9fpl-apple (npm) (malicious package) - [MAL-2025-30205](https://insights.sbomify.com/MAL-2025-30205/): Malicious code in project-h91gh-charlie (npm) (malicious package) - [MAL-2025-30204](https://insights.sbomify.com/MAL-2025-30204/): Malicious code in project-h8fel-orange (npm) (malicious package) - [MAL-2025-30203](https://insights.sbomify.com/MAL-2025-30203/): Malicious code in project-h67mo-zucchini (npm) (malicious package) - [MAL-2025-30202](https://insights.sbomify.com/MAL-2025-30202/): Malicious code in project-h53y1-raspberry (npm) (malicious package) - [MAL-2025-30201](https://insights.sbomify.com/MAL-2025-30201/): Malicious code in project-h52kf-uniform (npm) (malicious package) - [MAL-2025-30200](https://insights.sbomify.com/MAL-2025-30200/): Malicious code in project-h4xcb-mango (npm) (malicious package) - [MAL-2025-3020](https://insights.sbomify.com/MAL-2025-3020/): Malicious code in ytest-cov (PyPI) (malicious package) - [MAL-2025-302](https://insights.sbomify.com/MAL-2025-302/): Malicious code in request-external-access (npm) (malicious package) - [MAL-2025-30199](https://insights.sbomify.com/MAL-2025-30199/): Malicious code in project-h0pkz-zucchini (npm) (malicious package) - [MAL-2025-30198](https://insights.sbomify.com/MAL-2025-30198/): Malicious code in project-h037a-apple (npm) (malicious package) - [MAL-2025-30197](https://insights.sbomify.com/MAL-2025-30197/): Malicious code in project-gzfac-hotel (npm) (malicious package) - [MAL-2025-30196](https://insights.sbomify.com/MAL-2025-30196/): Malicious code in project-gx8m3-nectarine (npm) (malicious package) - [MAL-2025-30195](https://insights.sbomify.com/MAL-2025-30195/): Malicious code in project-gvpu1-delta (npm) (malicious package) - [MAL-2025-30194](https://insights.sbomify.com/MAL-2025-30194/): Malicious code in project-gvp65-date (npm) (malicious package) - [MAL-2025-30193](https://insights.sbomify.com/MAL-2025-30193/): Malicious code in project-gu173-juliet (npm) (malicious package) - [MAL-2025-30192](https://insights.sbomify.com/MAL-2025-30192/): Malicious code in project-graq3-cherry (npm) (malicious package) - [MAL-2025-30191](https://insights.sbomify.com/MAL-2025-30191/): Malicious code in project-gox80-sierra (npm) (malicious package) - [MAL-2025-30190](https://insights.sbomify.com/MAL-2025-30190/): Malicious code in project-gom3d-zulu (npm) (malicious package) - [MAL-2025-3019](https://insights.sbomify.com/MAL-2025-3019/): Malicious code in wiki-requests (PyPI) (malicious package) - [MAL-2025-30189](https://insights.sbomify.com/MAL-2025-30189/): Malicious code in project-gnj74-papaya (npm) (malicious package) - [MAL-2025-30188](https://insights.sbomify.com/MAL-2025-30188/): Malicious code in project-gn30t-uniform (npm) (malicious package) - [MAL-2025-30187](https://insights.sbomify.com/MAL-2025-30187/): Malicious code in project-gn04x-victor (npm) (malicious package) - [MAL-2025-30186](https://insights.sbomify.com/MAL-2025-30186/): Malicious code in project-glbh2-honeydew (npm) (malicious package) - [MAL-2025-30185](https://insights.sbomify.com/MAL-2025-30185/): Malicious code in project-gjy3v-honeydew (npm) (malicious package) - [MAL-2025-30184](https://insights.sbomify.com/MAL-2025-30184/): Malicious code in project-gjrm5-charlie (npm) (malicious package) - [MAL-2025-30183](https://insights.sbomify.com/MAL-2025-30183/): Malicious code in project-gi6b4-raspberry (npm) (malicious package) - [MAL-2025-30182](https://insights.sbomify.com/MAL-2025-30182/): Malicious code in project-gi38z-alpha (npm) (malicious package) - [MAL-2025-30181](https://insights.sbomify.com/MAL-2025-30181/): Malicious code in project-ga43u-kiwi (npm) (malicious package) - [MAL-2025-30180](https://insights.sbomify.com/MAL-2025-30180/): Malicious code in project-g9s8n-whiskey (npm) (malicious package) - [MAL-2025-30179](https://insights.sbomify.com/MAL-2025-30179/): Malicious code in project-g91qz-sierra (npm) (malicious package) - [MAL-2025-30178](https://insights.sbomify.com/MAL-2025-30178/): Malicious code in project-g8ns0-date (npm) (malicious package) - [MAL-2025-30177](https://insights.sbomify.com/MAL-2025-30177/): Malicious code in project-g8hgq-zucchini (npm) (malicious package) - [MAL-2025-30176](https://insights.sbomify.com/MAL-2025-30176/): Malicious code in project-g55re-fig (npm) (malicious package) - [MAL-2025-30175](https://insights.sbomify.com/MAL-2025-30175/): Malicious code in project-g2rwi-vanilla (npm) (malicious package) - [MAL-2025-30174](https://insights.sbomify.com/MAL-2025-30174/): Malicious code in project-fz3uh-watermelon (npm) (malicious package) - [MAL-2025-30173](https://insights.sbomify.com/MAL-2025-30173/): Malicious code in project-fz1if-fig (npm) (malicious package) - [MAL-2025-30172](https://insights.sbomify.com/MAL-2025-30172/): Malicious code in project-fyvpa-golf (npm) (malicious package) - [MAL-2025-30171](https://insights.sbomify.com/MAL-2025-30171/): Malicious code in project-fyezf-yam (npm) (malicious package) - [MAL-2025-30170](https://insights.sbomify.com/MAL-2025-30170/): Malicious code in project-fxnni-zulu (npm) (malicious package) - [MAL-2025-3017](https://insights.sbomify.com/MAL-2025-3017/): Malicious code in web3socket (PyPI) (malicious package) - [MAL-2025-30169](https://insights.sbomify.com/MAL-2025-30169/): Malicious code in project-fwlhu-echo (npm) (malicious package) - [MAL-2025-30168](https://insights.sbomify.com/MAL-2025-30168/): Malicious code in project-fw6wb-alpha (npm) (malicious package) - [MAL-2025-30167](https://insights.sbomify.com/MAL-2025-30167/): Malicious code in project-fvi48-fig (npm) (malicious package) - [MAL-2025-30166](https://insights.sbomify.com/MAL-2025-30166/): Malicious code in project-fu5kt-lima (npm) (malicious package) - [MAL-2025-30165](https://insights.sbomify.com/MAL-2025-30165/): Malicious code in project-ftx3f-kiwi (npm) (malicious package) - [MAL-2025-30164](https://insights.sbomify.com/MAL-2025-30164/): Malicious code in project-ftimt-golf (npm) (malicious package) - [MAL-2025-30163](https://insights.sbomify.com/MAL-2025-30163/): Malicious code in project-fsuyq-strawberry (npm) (malicious package) - [MAL-2025-30162](https://insights.sbomify.com/MAL-2025-30162/): Malicious code in project-frjcn-elderberry (npm) (malicious package) - [MAL-2025-30161](https://insights.sbomify.com/MAL-2025-30161/): Malicious code in project-fqd3c-oscar (npm) (malicious package) - [MAL-2025-30160](https://insights.sbomify.com/MAL-2025-30160/): Malicious code in project-fpitf-uniform (npm) (malicious package) - [MAL-2025-3016](https://insights.sbomify.com/MAL-2025-3016/): Malicious code in web3node (PyPI) (malicious package) - [MAL-2025-30159](https://insights.sbomify.com/MAL-2025-30159/): Malicious code in project-fn9kr-hotel (npm) (malicious package) - [MAL-2025-30158](https://insights.sbomify.com/MAL-2025-30158/): Malicious code in project-fn8px-apple (npm) (malicious package) - [MAL-2025-30157](https://insights.sbomify.com/MAL-2025-30157/): Malicious code in project-fjw8d-apple (npm) (malicious package) - [MAL-2025-30156](https://insights.sbomify.com/MAL-2025-30156/): Malicious code in project-fjted-india (npm) (malicious package) - [MAL-2025-30155](https://insights.sbomify.com/MAL-2025-30155/): Malicious code in project-fjp76-lima (npm) (malicious package) - [MAL-2025-30154](https://insights.sbomify.com/MAL-2025-30154/): Malicious code in project-ficll-hotel (npm) (malicious package) - [MAL-2025-30153](https://insights.sbomify.com/MAL-2025-30153/): Malicious code in project-ffz32-date (npm) (malicious package) - [MAL-2025-30152](https://insights.sbomify.com/MAL-2025-30152/): Malicious code in project-ff648-uniform (npm) (malicious package) - [MAL-2025-30151](https://insights.sbomify.com/MAL-2025-30151/): Malicious code in project-fez6w-orange (npm) (malicious package) - [MAL-2025-30150](https://insights.sbomify.com/MAL-2025-30150/): Malicious code in project-feg6l-fig (npm) (malicious package) - [MAL-2025-3015](https://insights.sbomify.com/MAL-2025-3015/): Malicious code in watchitoring (PyPI) (malicious package) - [MAL-2025-30149](https://insights.sbomify.com/MAL-2025-30149/): Malicious code in project-fe9l1-bravo (npm) (malicious package) - [MAL-2025-30148](https://insights.sbomify.com/MAL-2025-30148/): Malicious code in project-fe4o7-strawberry (npm) (malicious package) - [MAL-2025-30147](https://insights.sbomify.com/MAL-2025-30147/): Malicious code in project-fbywc-mango (npm) (malicious package) - [MAL-2025-30146](https://insights.sbomify.com/MAL-2025-30146/): Malicious code in project-fazib-november (npm) (malicious package) - [MAL-2025-30145](https://insights.sbomify.com/MAL-2025-30145/): Malicious code in project-fajvd-vanilla (npm) (malicious package) - [MAL-2025-30144](https://insights.sbomify.com/MAL-2025-30144/): Malicious code in project-f7o5u-hotel (npm) (malicious package) - [MAL-2025-30143](https://insights.sbomify.com/MAL-2025-30143/): Malicious code in project-f66cg-quebec (npm) (malicious package) - [MAL-2025-30142](https://insights.sbomify.com/MAL-2025-30142/): Malicious code in project-f4zta-hotel (npm) (malicious package) - [MAL-2025-30141](https://insights.sbomify.com/MAL-2025-30141/): Malicious code in project-f49sn-yam (npm) (malicious package) - [MAL-2025-30140](https://insights.sbomify.com/MAL-2025-30140/): Malicious code in project-f47gg-bravo (npm) (malicious package) - [MAL-2025-3014](https://insights.sbomify.com/MAL-2025-3014/): Malicious code in w3socket (PyPI) (malicious package) - [MAL-2025-30139](https://insights.sbomify.com/MAL-2025-30139/): Malicious code in project-f44kj-india (npm) (malicious package) - [MAL-2025-30138](https://insights.sbomify.com/MAL-2025-30138/): Malicious code in project-f3h2l-lima (npm) (malicious package) - [MAL-2025-30137](https://insights.sbomify.com/MAL-2025-30137/): Malicious code in project-f2wtw-delta (npm) (malicious package) - [MAL-2025-30136](https://insights.sbomify.com/MAL-2025-30136/): Malicious code in project-esd7w-watermelon (npm) (malicious package) - [MAL-2025-30135](https://insights.sbomify.com/MAL-2025-30135/): Malicious code in project-ermrw-raspberry (npm) (malicious package) - [MAL-2025-30134](https://insights.sbomify.com/MAL-2025-30134/): Malicious code in project-eqz84-whiskey (npm) (malicious package) - [MAL-2025-30133](https://insights.sbomify.com/MAL-2025-30133/): Malicious code in project-eqw62-whiskey (npm) (malicious package) - [MAL-2025-30132](https://insights.sbomify.com/MAL-2025-30132/): Malicious code in project-eqvx1-victor (npm) (malicious package) - [MAL-2025-30131](https://insights.sbomify.com/MAL-2025-30131/): Malicious code in project-eo6e1-raspberry (npm) (malicious package) - [MAL-2025-30130](https://insights.sbomify.com/MAL-2025-30130/): Malicious code in project-emmpp-orange (npm) (malicious package) - [MAL-2025-3013](https://insights.sbomify.com/MAL-2025-3013/): Malicious code in utilmy (PyPI) (malicious package) - [MAL-2025-30129](https://insights.sbomify.com/MAL-2025-30129/): Malicious code in project-eldwl-zulu (npm) (malicious package) - [MAL-2025-30128](https://insights.sbomify.com/MAL-2025-30128/): Malicious code in project-ek2cu-yam (npm) (malicious package) - [MAL-2025-30127](https://insights.sbomify.com/MAL-2025-30127/): Malicious code in project-ej1ts-nectarine (npm) (malicious package) - [MAL-2025-30126](https://insights.sbomify.com/MAL-2025-30126/): Malicious code in project-eidsx-banana (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/778/