# Vulnerabilities published in 2025 - [MAL-2025-29578](https://insights.sbomify.com/MAL-2025-29578/): Malicious code in pr_projectone (npm) (malicious package) - [MAL-2025-29577](https://insights.sbomify.com/MAL-2025-29577/): Malicious code in pr-lint-action (npm) (malicious package) - [MAL-2025-29576](https://insights.sbomify.com/MAL-2025-29576/): Malicious code in pptwitter (npm) (malicious package) - [MAL-2025-29575](https://insights.sbomify.com/MAL-2025-29575/): Malicious code in pptvtest (npm) (malicious package) - [MAL-2025-29574](https://insights.sbomify.com/MAL-2025-29574/): Malicious code in ppsapp (npm) (malicious package) - [MAL-2025-29573](https://insights.sbomify.com/MAL-2025-29573/): Malicious code in ppms-ui-components (npm) (malicious package) - [MAL-2025-29572](https://insights.sbomify.com/MAL-2025-29572/): Malicious code in pplogger (npm) (malicious package) - [MAL-2025-29571](https://insights.sbomify.com/MAL-2025-29571/): Malicious code in ppdustjs-filters-secure (npm) (malicious package) - [MAL-2025-29570](https://insights.sbomify.com/MAL-2025-29570/): Malicious code in ppcryptutils (npm) (malicious package) - [MAL-2025-2957](https://insights.sbomify.com/MAL-2025-2957/): Malicious code in enquiry-exam (PyPI) (malicious package) - [MAL-2025-29569](https://insights.sbomify.com/MAL-2025-29569/): Malicious code in ppboards (npm) (malicious package) - [MAL-2025-29568](https://insights.sbomify.com/MAL-2025-29568/): Malicious code in ppaas (npm) (malicious package) - [MAL-2025-29567](https://insights.sbomify.com/MAL-2025-29567/): Malicious code in pp-tokens (npm) (malicious package) - [MAL-2025-29566](https://insights.sbomify.com/MAL-2025-29566/): Malicious code in pp-scripts (npm) (malicious package) - [MAL-2025-29565](https://insights.sbomify.com/MAL-2025-29565/): Malicious code in pp-react-l10n (npm) (malicious package) - [MAL-2025-29564](https://insights.sbomify.com/MAL-2025-29564/): Malicious code in pp-react (npm) (malicious package) - [MAL-2025-29563](https://insights.sbomify.com/MAL-2025-29563/): Malicious code in poxel-server (npm) (malicious package) - [MAL-2025-29562](https://insights.sbomify.com/MAL-2025-29562/): Malicious code in poxel (npm) (malicious package) - [MAL-2025-29561](https://insights.sbomify.com/MAL-2025-29561/): Malicious code in powwow-logger (npm) (malicious package) - [MAL-2025-29560](https://insights.sbomify.com/MAL-2025-29560/): Malicious code in powser (npm) (malicious package) - [MAL-2025-2956](https://insights.sbomify.com/MAL-2025-2956/): Malicious code in django-storage (PyPI) (malicious package) - [MAL-2025-29559](https://insights.sbomify.com/MAL-2025-29559/): Malicious code in powervu-mfc (npm) (malicious package) - [MAL-2025-29558](https://insights.sbomify.com/MAL-2025-29558/): Malicious code in powervu (npm) (malicious package) - [MAL-2025-29557](https://insights.sbomify.com/MAL-2025-29557/): Malicious code in powershop (npm) (malicious package) - [MAL-2025-29556](https://insights.sbomify.com/MAL-2025-29556/): Malicious code in powerquery-parser (npm) (malicious package) - [MAL-2025-29555](https://insights.sbomify.com/MAL-2025-29555/): Malicious code in powerext (npm) (malicious package) - [MAL-2025-29554](https://insights.sbomify.com/MAL-2025-29554/): Malicious code in powerbi-visuals-test2 (npm) (malicious package) - [MAL-2025-29553](https://insights.sbomify.com/MAL-2025-29553/): Malicious code in powerbi-client-beta (npm) (malicious package) - [MAL-2025-29552](https://insights.sbomify.com/MAL-2025-29552/): Malicious code in postreach (npm) (malicious package) - [MAL-2025-29551](https://insights.sbomify.com/MAL-2025-29551/): Malicious code in postrace (npm) (malicious package) - [MAL-2025-29550](https://insights.sbomify.com/MAL-2025-29550/): Malicious code in postmarko (npm) (malicious package) - [MAL-2025-29549](https://insights.sbomify.com/MAL-2025-29549/): Malicious code in postgres-rocket-install-postcss (npm) (malicious package) - [MAL-2025-29548](https://insights.sbomify.com/MAL-2025-29548/): Malicious code in postgres-child-process-package-arcturus (npm) (malicious package) - [MAL-2025-29547](https://insights.sbomify.com/MAL-2025-29547/): Malicious code in postgres-astroinformatics-janus-mocha (npm) (malicious package) - [MAL-2025-29546](https://insights.sbomify.com/MAL-2025-29546/): Malicious code in postcss-url-inline-base64 (npm) (malicious package) - [MAL-2025-29545](https://insights.sbomify.com/MAL-2025-29545/): Malicious code in postcss-passport-phenomic-axios (npm) (malicious package) - [MAL-2025-29544](https://insights.sbomify.com/MAL-2025-29544/): Malicious code in postcss-minify2 (npm) (malicious package) - [MAL-2025-29543](https://insights.sbomify.com/MAL-2025-29543/): Malicious code in postcss-minify-browser (npm) (malicious package) - [MAL-2025-29542](https://insights.sbomify.com/MAL-2025-29542/): Malicious code in postcss-loader-remark-archaeoastronomy-nconf (npm) (malicious package) - [MAL-2025-29541](https://insights.sbomify.com/MAL-2025-29541/): Malicious code in postcss-loader-graphql-tachyon-cors (npm) (malicious package) - [MAL-2025-29540](https://insights.sbomify.com/MAL-2025-29540/): Malicious code in postcss-loader-express-init-test (npm) (malicious package) - [MAL-2025-2954](https://insights.sbomify.com/MAL-2025-2954/): Malicious code in datasetsgraphviz (PyPI) (malicious package) - [MAL-2025-29539](https://insights.sbomify.com/MAL-2025-29539/): Malicious code in postcss-loader-dotenv-safe-mini-css-extract-plugin-supervisor (npm) (malicious package) - [MAL-2025-29538](https://insights.sbomify.com/MAL-2025-29538/): Malicious code in postcss-iota-perseus-mira (npm) (malicious package) - [MAL-2025-29537](https://insights.sbomify.com/MAL-2025-29537/): Malicious code in postcss-gemini-sedna-markdownlint (npm) (malicious package) - [MAL-2025-29536](https://insights.sbomify.com/MAL-2025-29536/): Malicious code in postcss-darkenergy-hermes-resolvers (npm) (malicious package) - [MAL-2025-29535](https://insights.sbomify.com/MAL-2025-29535/): Malicious code in postcss-css-prefixer (npm) (malicious package) - [MAL-2025-29534](https://insights.sbomify.com/MAL-2025-29534/): Malicious code in postcss-cordelia-mutation-cz-conventional-changelog (npm) (malicious package) - [MAL-2025-29533](https://insights.sbomify.com/MAL-2025-29533/): Malicious code in postcss-blaze-hermes-wolf (npm) (malicious package) - [MAL-2025-29532](https://insights.sbomify.com/MAL-2025-29532/): Malicious code in post-purchase-ui-react (npm) (malicious package) - [MAL-2025-29531](https://insights.sbomify.com/MAL-2025-29531/): Malicious code in post-data (npm) (malicious package) - [MAL-2025-29530](https://insights.sbomify.com/MAL-2025-29530/): Malicious code in posionfor2 (npm) (malicious package) - [MAL-2025-2953](https://insights.sbomify.com/MAL-2025-2953/): Malicious code in daft-dashboard (PyPI) (malicious package) - [MAL-2025-29529](https://insights.sbomify.com/MAL-2025-29529/): Malicious code in portsdemo (npm) (malicious package) - [MAL-2025-29528](https://insights.sbomify.com/MAL-2025-29528/): Malicious code in portionfatty12 (npm) (malicious package) - [MAL-2025-29527](https://insights.sbomify.com/MAL-2025-29527/): Malicious code in portflora (npm) (malicious package) - [MAL-2025-29526](https://insights.sbomify.com/MAL-2025-29526/): Malicious code in portapoll (npm) (malicious package) - [MAL-2025-29525](https://insights.sbomify.com/MAL-2025-29525/): Malicious code in portaless (npm) (malicious package) - [MAL-2025-29524](https://insights.sbomify.com/MAL-2025-29524/): Malicious code in portalcgp (npm) (malicious package) - [MAL-2025-29523](https://insights.sbomify.com/MAL-2025-29523/): Malicious code in portal-shared-library (npm) (malicious package) - [MAL-2025-29522](https://insights.sbomify.com/MAL-2025-29522/): Malicious code in portableonboarding (npm) (malicious package) - [MAL-2025-29521](https://insights.sbomify.com/MAL-2025-29521/): Malicious code in porp-types (npm) (malicious package) - [MAL-2025-29520](https://insights.sbomify.com/MAL-2025-29520/): Malicious code in porifera (npm) (malicious package) - [MAL-2025-2952](https://insights.sbomify.com/MAL-2025-2952/): Malicious code in ctf-aio-tool (PyPI) (malicious package) - [MAL-2025-29519](https://insights.sbomify.com/MAL-2025-29519/): Malicious code in popuptest (npm) (malicious package) - [MAL-2025-29518](https://insights.sbomify.com/MAL-2025-29518/): Malicious code in popular (npm) (malicious package) - [MAL-2025-29517](https://insights.sbomify.com/MAL-2025-29517/): Malicious code in popperscoolers.com (npm) (malicious package) - [MAL-2025-29516](https://insights.sbomify.com/MAL-2025-29516/): Malicious code in popolni (npm) (malicious package) - [MAL-2025-29515](https://insights.sbomify.com/MAL-2025-29515/): Malicious code in popguessr (npm) (malicious package) - [MAL-2025-29514](https://insights.sbomify.com/MAL-2025-29514/): Malicious code in popayanjs (npm) (malicious package) - [MAL-2025-29513](https://insights.sbomify.com/MAL-2025-29513/): Malicious code in popart (npm) (malicious package) - [MAL-2025-29512](https://insights.sbomify.com/MAL-2025-29512/): Malicious code in pootis (npm) (malicious package) - [MAL-2025-29511](https://insights.sbomify.com/MAL-2025-29511/): Malicious code in poolpartyjs (npm) (malicious package) - [MAL-2025-29510](https://insights.sbomify.com/MAL-2025-29510/): Malicious code in pool-working2 (npm) (malicious package) - [MAL-2025-2951](https://insights.sbomify.com/MAL-2025-2951/): Malicious code in cryptographymethods (PyPI) (malicious package) - [MAL-2025-29509](https://insights.sbomify.com/MAL-2025-29509/): Malicious code in pool-working (npm) (malicious package) - [MAL-2025-29508](https://insights.sbomify.com/MAL-2025-29508/): Malicious code in pool-web4 (npm) (malicious package) - [MAL-2025-29507](https://insights.sbomify.com/MAL-2025-29507/): Malicious code in pool-web2 (npm) (malicious package) - [MAL-2025-29506](https://insights.sbomify.com/MAL-2025-29506/): Malicious code in pool-web (npm) (malicious package) - [MAL-2025-29505](https://insights.sbomify.com/MAL-2025-29505/): Malicious code in pool-standard (npm) (malicious package) - [MAL-2025-29504](https://insights.sbomify.com/MAL-2025-29504/): Malicious code in poodinis (npm) (malicious package) - [MAL-2025-29503](https://insights.sbomify.com/MAL-2025-29503/): Malicious code in ponnuki (npm) (malicious package) - [MAL-2025-29502](https://insights.sbomify.com/MAL-2025-29502/): Malicious code in ponete (npm) (malicious package) - [MAL-2025-29501](https://insights.sbomify.com/MAL-2025-29501/): Malicious code in ponceur (npm) (malicious package) - [MAL-2025-29500](https://insights.sbomify.com/MAL-2025-29500/): Malicious code in pommel (npm) (malicious package) - [MAL-2025-2950](https://insights.sbomify.com/MAL-2025-2950/): Malicious code in credential-python-sdk (PyPI) (malicious package) - [MAL-2025-295](https://insights.sbomify.com/MAL-2025-295/): Malicious code in eslint-config-atlassian-fecq (npm) (malicious package) - [MAL-2025-29499](https://insights.sbomify.com/MAL-2025-29499/): Malicious code in pomidor (npm) (malicious package) - [MAL-2025-29498](https://insights.sbomify.com/MAL-2025-29498/): Malicious code in pombawah (npm) (malicious package) - [MAL-2025-29497](https://insights.sbomify.com/MAL-2025-29497/): Malicious code in polymer-redux-store (npm) (malicious package) - [MAL-2025-29496](https://insights.sbomify.com/MAL-2025-29496/): Malicious code in polymarket-subgraph-common (npm) (malicious package) - [MAL-2025-29495](https://insights.sbomify.com/MAL-2025-29495/): Malicious code in polyfill-browser (npm) (malicious package) - [MAL-2025-29494](https://insights.sbomify.com/MAL-2025-29494/): Malicious code in polyclip (npm) (malicious package) - [MAL-2025-29493](https://insights.sbomify.com/MAL-2025-29493/): Malicious code in poltergeist-ha-rgb-dmx (npm) (malicious package) - [MAL-2025-29492](https://insights.sbomify.com/MAL-2025-29492/): Malicious code in poltergeist-ha-relay-pack (npm) (malicious package) - [MAL-2025-29491](https://insights.sbomify.com/MAL-2025-29491/): Malicious code in poltergeist-ha-pc-power (npm) (malicious package) - [MAL-2025-29490](https://insights.sbomify.com/MAL-2025-29490/): Malicious code in poltergeist-ha-hdmi-matrix (npm) (malicious package) - [MAL-2025-2949](https://insights.sbomify.com/MAL-2025-2949/): Malicious code in colorizetext (PyPI) (malicious package) - [MAL-2025-29489](https://insights.sbomify.com/MAL-2025-29489/): Malicious code in poltergeist-ha-dimmer-dmx (npm) (malicious package) - [MAL-2025-29488](https://insights.sbomify.com/MAL-2025-29488/): Malicious code in poltergeist-ha-artnet-node (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/785/