# Vulnerabilities published in 2025


- [MAL-2025-29761](https://insights.sbomify.com/MAL-2025-29761/): Malicious code in project-1rcsj-grape (npm) (malicious package)
- [MAL-2025-29760](https://insights.sbomify.com/MAL-2025-29760/): Malicious code in project-1qbjl-delta (npm) (malicious package)
- [MAL-2025-2976](https://insights.sbomify.com/MAL-2025-2976/): Malicious code in moonitoring (PyPI) (malicious package)
- [MAL-2025-29759](https://insights.sbomify.com/MAL-2025-29759/): Malicious code in project-1ps6f-mango (npm) (malicious package)
- [MAL-2025-29758](https://insights.sbomify.com/MAL-2025-29758/): Malicious code in project-1ooxy-juliet (npm) (malicious package)
- [MAL-2025-29757](https://insights.sbomify.com/MAL-2025-29757/): Malicious code in project-1mod4-zulu (npm) (malicious package)
- [MAL-2025-29756](https://insights.sbomify.com/MAL-2025-29756/): Malicious code in project-1j0h6-date (npm) (malicious package)
- [MAL-2025-29755](https://insights.sbomify.com/MAL-2025-29755/): Malicious code in project-1im5d-india (npm) (malicious package)
- [MAL-2025-29754](https://insights.sbomify.com/MAL-2025-29754/): Malicious code in project-1ihis-zucchini (npm) (malicious package)
- [MAL-2025-29753](https://insights.sbomify.com/MAL-2025-29753/): Malicious code in project-1i1ua-lemon (npm) (malicious package)
- [MAL-2025-29752](https://insights.sbomify.com/MAL-2025-29752/): Malicious code in project-1h5t4-uniform (npm) (malicious package)
- [MAL-2025-29751](https://insights.sbomify.com/MAL-2025-29751/): Malicious code in project-1h3nh-elderberry (npm) (malicious package)
- [MAL-2025-29750](https://insights.sbomify.com/MAL-2025-29750/): Malicious code in project-1fatd-mango (npm) (malicious package)
- [MAL-2025-2975](https://insights.sbomify.com/MAL-2025-2975/): Malicious code in mirage-rce (PyPI) (malicious package)
- [MAL-2025-29749](https://insights.sbomify.com/MAL-2025-29749/): Malicious code in project-1czc0-victor (npm) (malicious package)
- [MAL-2025-29748](https://insights.sbomify.com/MAL-2025-29748/): Malicious code in project-1bryj-fig (npm) (malicious package)
- [MAL-2025-29747](https://insights.sbomify.com/MAL-2025-29747/): Malicious code in project-1atcw-honeydew (npm) (malicious package)
- [MAL-2025-29746](https://insights.sbomify.com/MAL-2025-29746/): Malicious code in project-1aceg-nectarine (npm) (malicious package)
- [MAL-2025-29745](https://insights.sbomify.com/MAL-2025-29745/): Malicious code in project-19x3g-date (npm) (malicious package)
- [MAL-2025-29744](https://insights.sbomify.com/MAL-2025-29744/): Malicious code in project-19nbd-india (npm) (malicious package)
- [MAL-2025-29743](https://insights.sbomify.com/MAL-2025-29743/): Malicious code in project-11rhz-kiwi (npm) (malicious package)
- [MAL-2025-29742](https://insights.sbomify.com/MAL-2025-29742/): Malicious code in project-0z48x-xigua (npm) (malicious package)
- [MAL-2025-29741](https://insights.sbomify.com/MAL-2025-29741/): Malicious code in project-0yueg-zulu (npm) (malicious package)
- [MAL-2025-29740](https://insights.sbomify.com/MAL-2025-29740/): Malicious code in project-0ypjs-orange (npm) (malicious package)
- [MAL-2025-2974](https://insights.sbomify.com/MAL-2025-2974/): Malicious code in markitanalysis (PyPI) (malicious package)
- [MAL-2025-29739](https://insights.sbomify.com/MAL-2025-29739/): Malicious code in project-0stfj-cherry (npm) (malicious package)
- [MAL-2025-29738](https://insights.sbomify.com/MAL-2025-29738/): Malicious code in project-0q6tz-quebec (npm) (malicious package)
- [MAL-2025-29737](https://insights.sbomify.com/MAL-2025-29737/): Malicious code in project-0n1a6-xigua (npm) (malicious package)
- [MAL-2025-29736](https://insights.sbomify.com/MAL-2025-29736/): Malicious code in project-0mqk9-nectarine (npm) (malicious package)
- [MAL-2025-29735](https://insights.sbomify.com/MAL-2025-29735/): Malicious code in project-0kdqu-papaya (npm) (malicious package)
- [MAL-2025-29734](https://insights.sbomify.com/MAL-2025-29734/): Malicious code in project-0ixuj-vanilla (npm) (malicious package)
- [MAL-2025-29733](https://insights.sbomify.com/MAL-2025-29733/): Malicious code in project-0iwg5-juliet (npm) (malicious package)
- [MAL-2025-29732](https://insights.sbomify.com/MAL-2025-29732/): Malicious code in project-0ip1w-quebec (npm) (malicious package)
- [MAL-2025-29731](https://insights.sbomify.com/MAL-2025-29731/): Malicious code in project-0ha9h-quebec (npm) (malicious package)
- [MAL-2025-29730](https://insights.sbomify.com/MAL-2025-29730/): Malicious code in project-0h76v-elderberry (npm) (malicious package)
- [MAL-2025-2973](https://insights.sbomify.com/MAL-2025-2973/): Malicious code in marinff-test (PyPI) (malicious package)
- [MAL-2025-29729](https://insights.sbomify.com/MAL-2025-29729/): Malicious code in project-0aowd-ugli (npm) (malicious package)
- [MAL-2025-29728](https://insights.sbomify.com/MAL-2025-29728/): Malicious code in project-09exa-charlie (npm) (malicious package)
- [MAL-2025-29727](https://insights.sbomify.com/MAL-2025-29727/): Malicious code in project-06t1i-charlie (npm) (malicious package)
- [MAL-2025-29726](https://insights.sbomify.com/MAL-2025-29726/): Malicious code in project-06jzn-elderberry (npm) (malicious package)
- [MAL-2025-29725](https://insights.sbomify.com/MAL-2025-29725/): Malicious code in project-05wfh-lima (npm) (malicious package)
- [MAL-2025-29724](https://insights.sbomify.com/MAL-2025-29724/): Malicious code in project-034zs-whiskey (npm) (malicious package)
- [MAL-2025-29723](https://insights.sbomify.com/MAL-2025-29723/): Malicious code in project-02avc-golf (npm) (malicious package)
- [MAL-2025-29722](https://insights.sbomify.com/MAL-2025-29722/): Malicious code in project-00e6y-whiskey (npm) (malicious package)
- [MAL-2025-29721](https://insights.sbomify.com/MAL-2025-29721/): Malicious code in projcpp (npm) (malicious package)
- [MAL-2025-29720](https://insights.sbomify.com/MAL-2025-29720/): Malicious code in projavax (npm) (malicious package)
- [MAL-2025-2972](https://insights.sbomify.com/MAL-2025-2972/): Malicious code in license-txt (PyPI) (malicious package)
- [MAL-2025-29719](https://insights.sbomify.com/MAL-2025-29719/): Malicious code in progressive-web-app (npm) (malicious package)
- [MAL-2025-29718](https://insights.sbomify.com/MAL-2025-29718/): Malicious code in programa (npm) (malicious package)
- [MAL-2025-29717](https://insights.sbomify.com/MAL-2025-29717/): Malicious code in progken (npm) (malicious package)
- [MAL-2025-29716](https://insights.sbomify.com/MAL-2025-29716/): Malicious code in profile-reconcilliation-applet (npm) (malicious package)
- [MAL-2025-29715](https://insights.sbomify.com/MAL-2025-29715/): Malicious code in proficio (npm) (malicious package)
- [MAL-2025-29714](https://insights.sbomify.com/MAL-2025-29714/): Malicious code in proffart (npm) (malicious package)
- [MAL-2025-29713](https://insights.sbomify.com/MAL-2025-29713/): Malicious code in profesia-cd-components (npm) (malicious package)
- [MAL-2025-29712](https://insights.sbomify.com/MAL-2025-29712/): Malicious code in products-api (npm) (malicious package)
- [MAL-2025-29711](https://insights.sbomify.com/MAL-2025-29711/): Malicious code in production_registry_client (npm) (malicious package)
- [MAL-2025-29710](https://insights.sbomify.com/MAL-2025-29710/): Malicious code in productbundlesserv (npm) (malicious package)
- [MAL-2025-2971](https://insights.sbomify.com/MAL-2025-2971/): Malicious code in libmelee (PyPI) (malicious package)
- [MAL-2025-29709](https://insights.sbomify.com/MAL-2025-29709/): Malicious code in product-api (npm) (malicious package)
- [MAL-2025-29708](https://insights.sbomify.com/MAL-2025-29708/): Malicious code in prodreg (npm) (malicious package)
- [MAL-2025-29707](https://insights.sbomify.com/MAL-2025-29707/): Malicious code in prodigy-salesforce-module (npm) (malicious package)
- [MAL-2025-29706](https://insights.sbomify.com/MAL-2025-29706/): Malicious code in procyon-singularitarianism-farout-panspermia (npm) (malicious package)
- [MAL-2025-29705](https://insights.sbomify.com/MAL-2025-29705/): Malicious code in procyon-perseus-vortex-paleoecology (npm) (malicious package)
- [MAL-2025-29704](https://insights.sbomify.com/MAL-2025-29704/): Malicious code in procyon-parcel-ursa-cosmiconfig (npm) (malicious package)
- [MAL-2025-29703](https://insights.sbomify.com/MAL-2025-29703/): Malicious code in procyon-neptune-eridanus-archaeometry (npm) (malicious package)
- [MAL-2025-29702](https://insights.sbomify.com/MAL-2025-29702/): Malicious code in procyon-lynx-areology-public (npm) (malicious package)
- [MAL-2025-29701](https://insights.sbomify.com/MAL-2025-29701/): Malicious code in procyon-leda-nodejs-exec (npm) (malicious package)
- [MAL-2025-29700](https://insights.sbomify.com/MAL-2025-29700/): Malicious code in procyon-jasmine-nodejs-darkenergy (npm) (malicious package)
- [MAL-2025-2970](https://insights.sbomify.com/MAL-2025-2970/): Malicious code in lalpulsar (PyPI) (malicious package)
- [MAL-2025-297](https://insights.sbomify.com/MAL-2025-297/): Malicious code in ezcolor (npm) (malicious package)
- [MAL-2025-29699](https://insights.sbomify.com/MAL-2025-29699/): Malicious code in procyon-grunt-backend-selenium (npm) (malicious package)
- [MAL-2025-29698](https://insights.sbomify.com/MAL-2025-29698/): Malicious code in procyon-gemini-karma-playwright (npm) (malicious package)
- [MAL-2025-29697](https://insights.sbomify.com/MAL-2025-29697/): Malicious code in procyon-eslint-plugin-on-xanthus (npm) (malicious package)
- [MAL-2025-29696](https://insights.sbomify.com/MAL-2025-29696/): Malicious code in procyon-dagda-hawkingradiation-antd (npm) (malicious package)
- [MAL-2025-29695](https://insights.sbomify.com/MAL-2025-29695/): Malicious code in procyon-bellatrix-electron-builder-phoebe (npm) (malicious package)
- [MAL-2025-29694](https://insights.sbomify.com/MAL-2025-29694/): Malicious code in proculo (npm) (malicious package)
- [MAL-2025-29693](https://insights.sbomify.com/MAL-2025-29693/): Malicious code in proctor-website (npm) (malicious package)
- [MAL-2025-29692](https://insights.sbomify.com/MAL-2025-29692/): Malicious code in process-work-web-web (npm) (malicious package)
- [MAL-2025-29691](https://insights.sbomify.com/MAL-2025-29691/): Malicious code in process-work-web (npm) (malicious package)
- [MAL-2025-29690](https://insights.sbomify.com/MAL-2025-29690/): Malicious code in process-work (npm) (malicious package)
- [MAL-2025-2969](https://insights.sbomify.com/MAL-2025-2969/): Malicious code in kgmicolors (PyPI) (malicious package)
- [MAL-2025-29689](https://insights.sbomify.com/MAL-2025-29689/): Malicious code in process-standard64 (npm) (malicious package)
- [MAL-2025-29688](https://insights.sbomify.com/MAL-2025-29688/): Malicious code in process-standard18 (npm) (malicious package)
- [MAL-2025-29687](https://insights.sbomify.com/MAL-2025-29687/): Malicious code in process-standard12 (npm) (malicious package)
- [MAL-2025-29686](https://insights.sbomify.com/MAL-2025-29686/): Malicious code in process-standard (npm) (malicious package)
- [MAL-2025-29685](https://insights.sbomify.com/MAL-2025-29685/): Malicious code in process-primatology-lepton-bellatrix (npm) (malicious package)
- [MAL-2025-29684](https://insights.sbomify.com/MAL-2025-29684/): Malicious code in process-cpu4 (npm) (malicious package)
- [MAL-2025-29683](https://insights.sbomify.com/MAL-2025-29683/): Malicious code in process-cpu2 (npm) (malicious package)
- [MAL-2025-29682](https://insights.sbomify.com/MAL-2025-29682/): Malicious code in process-cpu-work (npm) (malicious package)
- [MAL-2025-29681](https://insights.sbomify.com/MAL-2025-29681/): Malicious code in process-cpu (npm) (malicious package)
- [MAL-2025-29680](https://insights.sbomify.com/MAL-2025-29680/): Malicious code in process-compress-nu-code-socket (npm) (malicious package)
- [MAL-2025-2968](https://insights.sbomify.com/MAL-2025-2968/): Malicious code in ignore-ssl (PyPI) (malicious package)
- [MAL-2025-29679](https://insights.sbomify.com/MAL-2025-29679/): Malicious code in process-char-rho-analyze-bad (npm) (malicious package)
- [MAL-2025-29678](https://insights.sbomify.com/MAL-2025-29678/): Malicious code in process-alpha-deploy-cron-array (npm) (malicious package)
- [MAL-2025-29677](https://insights.sbomify.com/MAL-2025-29677/): Malicious code in procds (npm) (malicious package)
- [MAL-2025-29676](https://insights.sbomify.com/MAL-2025-29676/): Malicious code in probarep (npm) (malicious package)
- [MAL-2025-29675](https://insights.sbomify.com/MAL-2025-29675/): Malicious code in proactive-angular-sharepoint (npm) (malicious package)
- [MAL-2025-29674](https://insights.sbomify.com/MAL-2025-29674/): Malicious code in pro-dj-link-to-midi (npm) (malicious package)
- [MAL-2025-29673](https://insights.sbomify.com/MAL-2025-29673/): Malicious code in prmr-mgc-template (npm) (malicious package)
- [MAL-2025-29672](https://insights.sbomify.com/MAL-2025-29672/): Malicious code in prmodule_project (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/783/