# Vulnerabilities published in 2025


- [MAL-2025-30125](https://insights.sbomify.com/MAL-2025-30125/): Malicious code in project-eh7vv-yankee (npm) (malicious package)
- [MAL-2025-30124](https://insights.sbomify.com/MAL-2025-30124/): Malicious code in project-egtvg-hotel (npm) (malicious package)
- [MAL-2025-30123](https://insights.sbomify.com/MAL-2025-30123/): Malicious code in project-ef071-zulu (npm) (malicious package)
- [MAL-2025-30122](https://insights.sbomify.com/MAL-2025-30122/): Malicious code in project-eexrr-lima (npm) (malicious package)
- [MAL-2025-30121](https://insights.sbomify.com/MAL-2025-30121/): Malicious code in project-ebyob-hotel (npm) (malicious package)
- [MAL-2025-30120](https://insights.sbomify.com/MAL-2025-30120/): Malicious code in project-e9z12-yankee (npm) (malicious package)
- [MAL-2025-3012](https://insights.sbomify.com/MAL-2025-3012/): Malicious code in twilio-rest (PyPI) (malicious package)
- [MAL-2025-30119](https://insights.sbomify.com/MAL-2025-30119/): Malicious code in project-e925t-hotel (npm) (malicious package)
- [MAL-2025-30118](https://insights.sbomify.com/MAL-2025-30118/): Malicious code in project-e8ne8-oscar (npm) (malicious package)
- [MAL-2025-30117](https://insights.sbomify.com/MAL-2025-30117/): Malicious code in project-e7k2c-sierra (npm) (malicious package)
- [MAL-2025-30116](https://insights.sbomify.com/MAL-2025-30116/): Malicious code in project-e7i0t-juliet (npm) (malicious package)
- [MAL-2025-30115](https://insights.sbomify.com/MAL-2025-30115/): Malicious code in project-e40es-yam (npm) (malicious package)
- [MAL-2025-30114](https://insights.sbomify.com/MAL-2025-30114/): Malicious code in project-e3uh2-yam (npm) (malicious package)
- [MAL-2025-30113](https://insights.sbomify.com/MAL-2025-30113/): Malicious code in project-e2ec6-ugli (npm) (malicious package)
- [MAL-2025-30112](https://insights.sbomify.com/MAL-2025-30112/): Malicious code in project-e2c4s-yam (npm) (malicious package)
- [MAL-2025-30111](https://insights.sbomify.com/MAL-2025-30111/): Malicious code in project-e176x-juliet (npm) (malicious package)
- [MAL-2025-30110](https://insights.sbomify.com/MAL-2025-30110/): Malicious code in project-e0cb4-foxtrot (npm) (malicious package)
- [MAL-2025-3011](https://insights.sbomify.com/MAL-2025-3011/): Malicious code in transaction-analyze (PyPI) (malicious package)
- [MAL-2025-30109](https://insights.sbomify.com/MAL-2025-30109/): Malicious code in project-dyamz-raspberry (npm) (malicious package)
- [MAL-2025-30108](https://insights.sbomify.com/MAL-2025-30108/): Malicious code in project-dxgwi-lemon (npm) (malicious package)
- [MAL-2025-30107](https://insights.sbomify.com/MAL-2025-30107/): Malicious code in project-dwf9k-hotel (npm) (malicious package)
- [MAL-2025-30106](https://insights.sbomify.com/MAL-2025-30106/): Malicious code in project-dv4vf-foxtrot (npm) (malicious package)
- [MAL-2025-30105](https://insights.sbomify.com/MAL-2025-30105/): Malicious code in project-dv31x-quebec (npm) (malicious package)
- [MAL-2025-30104](https://insights.sbomify.com/MAL-2025-30104/): Malicious code in project-dure7-romeo (npm) (malicious package)
- [MAL-2025-30103](https://insights.sbomify.com/MAL-2025-30103/): Malicious code in project-dskxm-mike (npm) (malicious package)
- [MAL-2025-30102](https://insights.sbomify.com/MAL-2025-30102/): Malicious code in project-drhnl-victor (npm) (malicious package)
- [MAL-2025-30101](https://insights.sbomify.com/MAL-2025-30101/): Malicious code in project-dpmzc-uniform (npm) (malicious package)
- [MAL-2025-30100](https://insights.sbomify.com/MAL-2025-30100/): Malicious code in project-dpbmt-victor (npm) (malicious package)
- [MAL-2025-3010](https://insights.sbomify.com/MAL-2025-3010/): Malicious code in transaction-analysis (PyPI) (malicious package)
- [MAL-2025-301](https://insights.sbomify.com/MAL-2025-301/): Malicious code in popup-monitor (npm) (malicious package)
- [MAL-2025-30099](https://insights.sbomify.com/MAL-2025-30099/): Malicious code in project-dotjm-lima (npm) (malicious package)
- [MAL-2025-30098](https://insights.sbomify.com/MAL-2025-30098/): Malicious code in project-dnea5-yankee (npm) (malicious package)
- [MAL-2025-30097](https://insights.sbomify.com/MAL-2025-30097/): Malicious code in project-dmx65-india (npm) (malicious package)
- [MAL-2025-30096](https://insights.sbomify.com/MAL-2025-30096/): Malicious code in project-dmpkr-alpha (npm) (malicious package)
- [MAL-2025-30095](https://insights.sbomify.com/MAL-2025-30095/): Malicious code in project-dhrec-tangerine (npm) (malicious package)
- [MAL-2025-30094](https://insights.sbomify.com/MAL-2025-30094/): Malicious code in project-dfxsm-charlie (npm) (malicious package)
- [MAL-2025-30093](https://insights.sbomify.com/MAL-2025-30093/): Malicious code in project-dcnvf-yam (npm) (malicious package)
- [MAL-2025-30092](https://insights.sbomify.com/MAL-2025-30092/): Malicious code in project-dclxa-nectarine (npm) (malicious package)
- [MAL-2025-30091](https://insights.sbomify.com/MAL-2025-30091/): Malicious code in project-dbpi8-foxtrot (npm) (malicious package)
- [MAL-2025-30090](https://insights.sbomify.com/MAL-2025-30090/): Malicious code in project-dazfz-vanilla (npm) (malicious package)
- [MAL-2025-3009](https://insights.sbomify.com/MAL-2025-3009/): Malicious code in torahbiblecodes (PyPI) (malicious package)
- [MAL-2025-30089](https://insights.sbomify.com/MAL-2025-30089/): Malicious code in project-davoc-november (npm) (malicious package)
- [MAL-2025-30088](https://insights.sbomify.com/MAL-2025-30088/): Malicious code in project-d8qv3-papa (npm) (malicious package)
- [MAL-2025-30087](https://insights.sbomify.com/MAL-2025-30087/): Malicious code in project-d8m76-india (npm) (malicious package)
- [MAL-2025-30086](https://insights.sbomify.com/MAL-2025-30086/): Malicious code in project-d7j6m-hotel (npm) (malicious package)
- [MAL-2025-30085](https://insights.sbomify.com/MAL-2025-30085/): Malicious code in project-d5l7e-india (npm) (malicious package)
- [MAL-2025-30084](https://insights.sbomify.com/MAL-2025-30084/): Malicious code in project-d56rk-zucchini (npm) (malicious package)
- [MAL-2025-30083](https://insights.sbomify.com/MAL-2025-30083/): Malicious code in project-d3tzw-bravo (npm) (malicious package)
- [MAL-2025-30082](https://insights.sbomify.com/MAL-2025-30082/): Malicious code in project-d3ejt-zulu (npm) (malicious package)
- [MAL-2025-30081](https://insights.sbomify.com/MAL-2025-30081/): Malicious code in project-d37c3-grape (npm) (malicious package)
- [MAL-2025-30080](https://insights.sbomify.com/MAL-2025-30080/): Malicious code in project-d28fd-grape (npm) (malicious package)
- [MAL-2025-3008](https://insights.sbomify.com/MAL-2025-3008/): Malicious code in tlsclient3 (PyPI) (malicious package)
- [MAL-2025-30079](https://insights.sbomify.com/MAL-2025-30079/): Malicious code in project-d1l71-date (npm) (malicious package)
- [MAL-2025-30078](https://insights.sbomify.com/MAL-2025-30078/): Malicious code in project-d17o2-mike (npm) (malicious package)
- [MAL-2025-30077](https://insights.sbomify.com/MAL-2025-30077/): Malicious code in project-cyhgq-oscar (npm) (malicious package)
- [MAL-2025-30076](https://insights.sbomify.com/MAL-2025-30076/): Malicious code in project-cyhg7-echo (npm) (malicious package)
- [MAL-2025-30075](https://insights.sbomify.com/MAL-2025-30075/): Malicious code in project-cv3mg-tango (npm) (malicious package)
- [MAL-2025-30074](https://insights.sbomify.com/MAL-2025-30074/): Malicious code in project-cu506-bravo (npm) (malicious package)
- [MAL-2025-30073](https://insights.sbomify.com/MAL-2025-30073/): Malicious code in project-csqvr-victor (npm) (malicious package)
- [MAL-2025-30072](https://insights.sbomify.com/MAL-2025-30072/): Malicious code in project-cpi7a-bravo (npm) (malicious package)
- [MAL-2025-30071](https://insights.sbomify.com/MAL-2025-30071/): Malicious code in project-cpak2-papaya (npm) (malicious package)
- [MAL-2025-30070](https://insights.sbomify.com/MAL-2025-30070/): Malicious code in project-cmw2e-quince (npm) (malicious package)
- [MAL-2025-3007](https://insights.sbomify.com/MAL-2025-3007/): Malicious code in tempeh (PyPI) (malicious package)
- [MAL-2025-30069](https://insights.sbomify.com/MAL-2025-30069/): Malicious code in project-cmoc0-lima (npm) (malicious package)
- [MAL-2025-30068](https://insights.sbomify.com/MAL-2025-30068/): Malicious code in project-cmdfc-grape (npm) (malicious package)
- [MAL-2025-30067](https://insights.sbomify.com/MAL-2025-30067/): Malicious code in project-cm1ly-bravo (npm) (malicious package)
- [MAL-2025-30066](https://insights.sbomify.com/MAL-2025-30066/): Malicious code in project-ck6sc-yam (npm) (malicious package)
- [MAL-2025-30065](https://insights.sbomify.com/MAL-2025-30065/): Malicious code in project-cjwwt-kiwi (npm) (malicious package)
- [MAL-2025-30064](https://insights.sbomify.com/MAL-2025-30064/): Malicious code in project-cjf86-papa (npm) (malicious package)
- [MAL-2025-30063](https://insights.sbomify.com/MAL-2025-30063/): Malicious code in project-ci2f4-fig (npm) (malicious package)
- [MAL-2025-30062](https://insights.sbomify.com/MAL-2025-30062/): Malicious code in project-chsfh-sierra (npm) (malicious package)
- [MAL-2025-30061](https://insights.sbomify.com/MAL-2025-30061/): Malicious code in project-ch7da-uniform (npm) (malicious package)
- [MAL-2025-30060](https://insights.sbomify.com/MAL-2025-30060/): Malicious code in project-cgz2l-oscar (npm) (malicious package)
- [MAL-2025-3006](https://insights.sbomify.com/MAL-2025-3006/): Malicious code in tcloud-python-test (PyPI) (malicious package)
- [MAL-2025-30059](https://insights.sbomify.com/MAL-2025-30059/): Malicious code in project-cgs9j-delta (npm) (malicious package)
- [MAL-2025-30058](https://insights.sbomify.com/MAL-2025-30058/): Malicious code in project-cgdpo-uniform (npm) (malicious package)
- [MAL-2025-30057](https://insights.sbomify.com/MAL-2025-30057/): Malicious code in project-cg4kc-foxtrot (npm) (malicious package)
- [MAL-2025-30056](https://insights.sbomify.com/MAL-2025-30056/): Malicious code in project-ceo51-papaya (npm) (malicious package)
- [MAL-2025-30055](https://insights.sbomify.com/MAL-2025-30055/): Malicious code in project-ce5ak-cherry (npm) (malicious package)
- [MAL-2025-30054](https://insights.sbomify.com/MAL-2025-30054/): Malicious code in project-ce4hc-tangerine (npm) (malicious package)
- [MAL-2025-30053](https://insights.sbomify.com/MAL-2025-30053/): Malicious code in project-cdkcd-yam (npm) (malicious package)
- [MAL-2025-30052](https://insights.sbomify.com/MAL-2025-30052/): Malicious code in project-cc1yq-mike (npm) (malicious package)
- [MAL-2025-30051](https://insights.sbomify.com/MAL-2025-30051/): Malicious code in project-ca5tp-elderberry (npm) (malicious package)
- [MAL-2025-30050](https://insights.sbomify.com/MAL-2025-30050/): Malicious code in project-c9eaj-papa (npm) (malicious package)
- [MAL-2025-30049](https://insights.sbomify.com/MAL-2025-30049/): Malicious code in project-c89uq-lemon (npm) (malicious package)
- [MAL-2025-30048](https://insights.sbomify.com/MAL-2025-30048/): Malicious code in project-c81n0-apple (npm) (malicious package)
- [MAL-2025-30047](https://insights.sbomify.com/MAL-2025-30047/): Malicious code in project-c6ntc-raspberry (npm) (malicious package)
- [MAL-2025-30046](https://insights.sbomify.com/MAL-2025-30046/): Malicious code in project-c6g3g-vanilla (npm) (malicious package)
- [MAL-2025-30045](https://insights.sbomify.com/MAL-2025-30045/): Malicious code in project-c6d0i-banana (npm) (malicious package)
- [MAL-2025-30044](https://insights.sbomify.com/MAL-2025-30044/): Malicious code in project-c5qtq-tango (npm) (malicious package)
- [MAL-2025-30043](https://insights.sbomify.com/MAL-2025-30043/): Malicious code in project-c3ful-lemon (npm) (malicious package)
- [MAL-2025-30042](https://insights.sbomify.com/MAL-2025-30042/): Malicious code in project-c0upq-ugli (npm) (malicious package)
- [MAL-2025-30041](https://insights.sbomify.com/MAL-2025-30041/): Malicious code in project-bzv6s-romeo (npm) (malicious package)
- [MAL-2025-30040](https://insights.sbomify.com/MAL-2025-30040/): Malicious code in project-bwwob-strawberry (npm) (malicious package)
- [MAL-2025-3004](https://insights.sbomify.com/MAL-2025-3004/): Malicious code in systoring (PyPI) (malicious package)
- [MAL-2025-30039](https://insights.sbomify.com/MAL-2025-30039/): Malicious code in project-bvczs-yankee (npm) (malicious package)
- [MAL-2025-30038](https://insights.sbomify.com/MAL-2025-30038/): Malicious code in project-buyzi-mango (npm) (malicious package)
- [MAL-2025-30037](https://insights.sbomify.com/MAL-2025-30037/): Malicious code in project-busli-delta (npm) (malicious package)
- [MAL-2025-30036](https://insights.sbomify.com/MAL-2025-30036/): Malicious code in project-bun0r-tango (npm) (malicious package)
- [MAL-2025-30035](https://insights.sbomify.com/MAL-2025-30035/): Malicious code in project-bs70f-grape (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/779/
