# Vulnerabilities published in 2025 - [MAL-2025-29855](https://insights.sbomify.com/MAL-2025-29855/): Malicious code in project-57mx2-foxtrot (npm) (malicious package) - [MAL-2025-29854](https://insights.sbomify.com/MAL-2025-29854/): Malicious code in project-56hhd-grape (npm) (malicious package) - [MAL-2025-29853](https://insights.sbomify.com/MAL-2025-29853/): Malicious code in project-54uwc-papa (npm) (malicious package) - [MAL-2025-29852](https://insights.sbomify.com/MAL-2025-29852/): Malicious code in project-522ix-juliet (npm) (malicious package) - [MAL-2025-29851](https://insights.sbomify.com/MAL-2025-29851/): Malicious code in project-50hjz-tangerine (npm) (malicious package) - [MAL-2025-29850](https://insights.sbomify.com/MAL-2025-29850/): Malicious code in project-4uxki-strawberry (npm) (malicious package) - [MAL-2025-2985](https://insights.sbomify.com/MAL-2025-2985/): Malicious code in pandaspytest (PyPI) (malicious package) - [MAL-2025-29849](https://insights.sbomify.com/MAL-2025-29849/): Malicious code in project-4ubcm-charlie (npm) (malicious package) - [MAL-2025-29848](https://insights.sbomify.com/MAL-2025-29848/): Malicious code in project-4tdxc-grape (npm) (malicious package) - [MAL-2025-29847](https://insights.sbomify.com/MAL-2025-29847/): Malicious code in project-4t50e-zucchini (npm) (malicious package) - [MAL-2025-29846](https://insights.sbomify.com/MAL-2025-29846/): Malicious code in project-4q8g0-delta (npm) (malicious package) - [MAL-2025-29845](https://insights.sbomify.com/MAL-2025-29845/): Malicious code in project-4ouw1-quince (npm) (malicious package) - [MAL-2025-29844](https://insights.sbomify.com/MAL-2025-29844/): Malicious code in project-4npek-watermelon (npm) (malicious package) - [MAL-2025-29843](https://insights.sbomify.com/MAL-2025-29843/): Malicious code in project-4na4s-foxtrot (npm) (malicious package) - [MAL-2025-29842](https://insights.sbomify.com/MAL-2025-29842/): Malicious code in project-4n3g7-orange (npm) (malicious package) - [MAL-2025-29841](https://insights.sbomify.com/MAL-2025-29841/): Malicious code in project-4m3k3-elderberry (npm) (malicious package) - [MAL-2025-29840](https://insights.sbomify.com/MAL-2025-29840/): Malicious code in project-4kc71-foxtrot (npm) (malicious package) - [MAL-2025-29839](https://insights.sbomify.com/MAL-2025-29839/): Malicious code in project-4j1xt-quebec (npm) (malicious package) - [MAL-2025-29838](https://insights.sbomify.com/MAL-2025-29838/): Malicious code in project-4iyti-yankee (npm) (malicious package) - [MAL-2025-29837](https://insights.sbomify.com/MAL-2025-29837/): Malicious code in project-4i0y0-xigua (npm) (malicious package) - [MAL-2025-29836](https://insights.sbomify.com/MAL-2025-29836/): Malicious code in project-4huww-kiwi (npm) (malicious package) - [MAL-2025-29835](https://insights.sbomify.com/MAL-2025-29835/): Malicious code in project-4h5ip-ugli (npm) (malicious package) - [MAL-2025-29834](https://insights.sbomify.com/MAL-2025-29834/): Malicious code in project-4g1gj-uniform (npm) (malicious package) - [MAL-2025-29833](https://insights.sbomify.com/MAL-2025-29833/): Malicious code in project-4excq-india (npm) (malicious package) - [MAL-2025-29832](https://insights.sbomify.com/MAL-2025-29832/): Malicious code in project-4cqey-date (npm) (malicious package) - [MAL-2025-29831](https://insights.sbomify.com/MAL-2025-29831/): Malicious code in project-4cmo9-papa (npm) (malicious package) - [MAL-2025-29830](https://insights.sbomify.com/MAL-2025-29830/): Malicious code in project-4b3cm-zucchini (npm) (malicious package) - [MAL-2025-29829](https://insights.sbomify.com/MAL-2025-29829/): Malicious code in project-49xb3-ugli (npm) (malicious package) - [MAL-2025-29828](https://insights.sbomify.com/MAL-2025-29828/): Malicious code in project-47vx0-nectarine (npm) (malicious package) - [MAL-2025-29827](https://insights.sbomify.com/MAL-2025-29827/): Malicious code in project-45a0a-kiwi (npm) (malicious package) - [MAL-2025-29826](https://insights.sbomify.com/MAL-2025-29826/): Malicious code in project-42ahw-sierra (npm) (malicious package) - [MAL-2025-29825](https://insights.sbomify.com/MAL-2025-29825/): Malicious code in project-41pqi-foxtrot (npm) (malicious package) - [MAL-2025-29824](https://insights.sbomify.com/MAL-2025-29824/): Malicious code in project-3zep0-vanilla (npm) (malicious package) - [MAL-2025-29823](https://insights.sbomify.com/MAL-2025-29823/): Malicious code in project-3y0e6-foxtrot (npm) (malicious package) - [MAL-2025-29822](https://insights.sbomify.com/MAL-2025-29822/): Malicious code in project-3xg2z-zucchini (npm) (malicious package) - [MAL-2025-29821](https://insights.sbomify.com/MAL-2025-29821/): Malicious code in project-3vee9-watermelon (npm) (malicious package) - [MAL-2025-29820](https://insights.sbomify.com/MAL-2025-29820/): Malicious code in project-3umgz-victor (npm) (malicious package) - [MAL-2025-2982](https://insights.sbomify.com/MAL-2025-2982/): Malicious code in opera2d (PyPI) (malicious package) - [MAL-2025-29819](https://insights.sbomify.com/MAL-2025-29819/): Malicious code in project-3tlw2-raspberry (npm) (malicious package) - [MAL-2025-29818](https://insights.sbomify.com/MAL-2025-29818/): Malicious code in project-3s5ei-watermelon (npm) (malicious package) - [MAL-2025-29817](https://insights.sbomify.com/MAL-2025-29817/): Malicious code in project-3roa3-oscar (npm) (malicious package) - [MAL-2025-29816](https://insights.sbomify.com/MAL-2025-29816/): Malicious code in project-3q6x4-oscar (npm) (malicious package) - [MAL-2025-29815](https://insights.sbomify.com/MAL-2025-29815/): Malicious code in project-3phhd-quince (npm) (malicious package) - [MAL-2025-29814](https://insights.sbomify.com/MAL-2025-29814/): Malicious code in project-3o5x5-romeo (npm) (malicious package) - [MAL-2025-29813](https://insights.sbomify.com/MAL-2025-29813/): Malicious code in project-3npxw-tango (npm) (malicious package) - [MAL-2025-29812](https://insights.sbomify.com/MAL-2025-29812/): Malicious code in project-3mwm9-tango (npm) (malicious package) - [MAL-2025-29811](https://insights.sbomify.com/MAL-2025-29811/): Malicious code in project-3l2as-echo (npm) (malicious package) - [MAL-2025-29810](https://insights.sbomify.com/MAL-2025-29810/): Malicious code in project-3kzl3-juliet (npm) (malicious package) - [MAL-2025-29809](https://insights.sbomify.com/MAL-2025-29809/): Malicious code in project-3ilck-lemon (npm) (malicious package) - [MAL-2025-29808](https://insights.sbomify.com/MAL-2025-29808/): Malicious code in project-3ee1o-watermelon (npm) (malicious package) - [MAL-2025-29807](https://insights.sbomify.com/MAL-2025-29807/): Malicious code in project-3agi5-bravo (npm) (malicious package) - [MAL-2025-29806](https://insights.sbomify.com/MAL-2025-29806/): Malicious code in project-39hf4-whiskey (npm) (malicious package) - [MAL-2025-29805](https://insights.sbomify.com/MAL-2025-29805/): Malicious code in project-38yw3-mike (npm) (malicious package) - [MAL-2025-29804](https://insights.sbomify.com/MAL-2025-29804/): Malicious code in project-38woq-yankee (npm) (malicious package) - [MAL-2025-29803](https://insights.sbomify.com/MAL-2025-29803/): Malicious code in project-38mku-echo (npm) (malicious package) - [MAL-2025-29802](https://insights.sbomify.com/MAL-2025-29802/): Malicious code in project-38awj-juliet (npm) (malicious package) - [MAL-2025-29801](https://insights.sbomify.com/MAL-2025-29801/): Malicious code in project-387at-bravo (npm) (malicious package) - [MAL-2025-29800](https://insights.sbomify.com/MAL-2025-29800/): Malicious code in project-37ejp-tangerine (npm) (malicious package) - [MAL-2025-2980](https://insights.sbomify.com/MAL-2025-2980/): Malicious code in omnigodz-random (PyPI) (malicious package) - [MAL-2025-298](https://insights.sbomify.com/MAL-2025-298/): Malicious code in lit-mobx (npm) (malicious package) - [MAL-2025-29799](https://insights.sbomify.com/MAL-2025-29799/): Malicious code in project-35ot3-mike (npm) (malicious package) - [MAL-2025-29798](https://insights.sbomify.com/MAL-2025-29798/): Malicious code in project-34npr-romeo (npm) (malicious package) - [MAL-2025-29797](https://insights.sbomify.com/MAL-2025-29797/): Malicious code in project-2zzbo-quince (npm) (malicious package) - [MAL-2025-29796](https://insights.sbomify.com/MAL-2025-29796/): Malicious code in project-2zfpb-quebec (npm) (malicious package) - [MAL-2025-29795](https://insights.sbomify.com/MAL-2025-29795/): Malicious code in project-2ycek-orange (npm) (malicious package) - [MAL-2025-29794](https://insights.sbomify.com/MAL-2025-29794/): Malicious code in project-2s3gs-vanilla (npm) (malicious package) - [MAL-2025-29793](https://insights.sbomify.com/MAL-2025-29793/): Malicious code in project-2rja4-echo (npm) (malicious package) - [MAL-2025-29792](https://insights.sbomify.com/MAL-2025-29792/): Malicious code in project-2rbe0-kiwi (npm) (malicious package) - [MAL-2025-29791](https://insights.sbomify.com/MAL-2025-29791/): Malicious code in project-2r3tf-strawberry (npm) (malicious package) - [MAL-2025-29790](https://insights.sbomify.com/MAL-2025-29790/): Malicious code in project-2r0bk-india (npm) (malicious package) - [MAL-2025-29789](https://insights.sbomify.com/MAL-2025-29789/): Malicious code in project-2qygm-lemon (npm) (malicious package) - [MAL-2025-29788](https://insights.sbomify.com/MAL-2025-29788/): Malicious code in project-2ol8v-vanilla (npm) (malicious package) - [MAL-2025-29787](https://insights.sbomify.com/MAL-2025-29787/): Malicious code in project-2modo-fig (npm) (malicious package) - [MAL-2025-29786](https://insights.sbomify.com/MAL-2025-29786/): Malicious code in project-2kuhw-juliet (npm) (malicious package) - [MAL-2025-29785](https://insights.sbomify.com/MAL-2025-29785/): Malicious code in project-2izp5-apple (npm) (malicious package) - [MAL-2025-29784](https://insights.sbomify.com/MAL-2025-29784/): Malicious code in project-2fpur-fig (npm) (malicious package) - [MAL-2025-29783](https://insights.sbomify.com/MAL-2025-29783/): Malicious code in project-2fifk-kiwi (npm) (malicious package) - [MAL-2025-29782](https://insights.sbomify.com/MAL-2025-29782/): Malicious code in project-2fanj-delta (npm) (malicious package) - [MAL-2025-29781](https://insights.sbomify.com/MAL-2025-29781/): Malicious code in project-2e2c3-cherry (npm) (malicious package) - [MAL-2025-29780](https://insights.sbomify.com/MAL-2025-29780/): Malicious code in project-2czi3-mango (npm) (malicious package) - [MAL-2025-2978](https://insights.sbomify.com/MAL-2025-2978/): Malicious code in multiopython (PyPI) (malicious package) - [MAL-2025-29779](https://insights.sbomify.com/MAL-2025-29779/): Malicious code in project-2aq26-bravo (npm) (malicious package) - [MAL-2025-29778](https://insights.sbomify.com/MAL-2025-29778/): Malicious code in project-2a1hg-echo (npm) (malicious package) - [MAL-2025-29777](https://insights.sbomify.com/MAL-2025-29777/): Malicious code in project-29clo-zucchini (npm) (malicious package) - [MAL-2025-29776](https://insights.sbomify.com/MAL-2025-29776/): Malicious code in project-27w8x-india (npm) (malicious package) - [MAL-2025-29775](https://insights.sbomify.com/MAL-2025-29775/): Malicious code in project-26v5h-uniform (npm) (malicious package) - [MAL-2025-29774](https://insights.sbomify.com/MAL-2025-29774/): Malicious code in project-25v7a-uniform (npm) (malicious package) - [MAL-2025-29773](https://insights.sbomify.com/MAL-2025-29773/): Malicious code in project-25pjr-mike (npm) (malicious package) - [MAL-2025-29772](https://insights.sbomify.com/MAL-2025-29772/): Malicious code in project-24kl1-romeo (npm) (malicious package) - [MAL-2025-29771](https://insights.sbomify.com/MAL-2025-29771/): Malicious code in project-22m3w-xigua (npm) (malicious package) - [MAL-2025-29770](https://insights.sbomify.com/MAL-2025-29770/): Malicious code in project-20n3m-tango (npm) (malicious package) - [MAL-2025-2977](https://insights.sbomify.com/MAL-2025-2977/): Malicious code in msgspec-python313-pre (PyPI) (malicious package) - [MAL-2025-29769](https://insights.sbomify.com/MAL-2025-29769/): Malicious code in project-1zz1k-oscar (npm) (malicious package) - [MAL-2025-29768](https://insights.sbomify.com/MAL-2025-29768/): Malicious code in project-1yxy0-vanilla (npm) (malicious package) - [MAL-2025-29767](https://insights.sbomify.com/MAL-2025-29767/): Malicious code in project-1y4pf-honeydew (npm) (malicious package) - [MAL-2025-29766](https://insights.sbomify.com/MAL-2025-29766/): Malicious code in project-1xjaf-bravo (npm) (malicious package) - [MAL-2025-29765](https://insights.sbomify.com/MAL-2025-29765/): Malicious code in project-1wjmb-lemon (npm) (malicious package) - [MAL-2025-29764](https://insights.sbomify.com/MAL-2025-29764/): Malicious code in project-1w4dp-yam (npm) (malicious package) - [MAL-2025-29763](https://insights.sbomify.com/MAL-2025-29763/): Malicious code in project-1v1ho-charlie (npm) (malicious package) - [MAL-2025-29762](https://insights.sbomify.com/MAL-2025-29762/): Malicious code in project-1rqtz-zucchini (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/782/