# Vulnerabilities published in 2025


- [MAL-2025-29487](https://insights.sbomify.com/MAL-2025-29487/): Malicious code in poltergeist-ha (npm) (malicious package)
- [MAL-2025-29486](https://insights.sbomify.com/MAL-2025-29486/): Malicious code in polsimple (npm) (malicious package)
- [MAL-2025-29485](https://insights.sbomify.com/MAL-2025-29485/): Malicious code in pollapp (npm) (malicious package)
- [MAL-2025-29484](https://insights.sbomify.com/MAL-2025-29484/): Malicious code in polkaswap-exchange-web (npm) (malicious package)
- [MAL-2025-29483](https://insights.sbomify.com/MAL-2025-29483/): Malicious code in polisher (npm) (malicious package)
- [MAL-2025-29482](https://insights.sbomify.com/MAL-2025-29482/): Malicious code in polilogger (npm) (malicious package)
- [MAL-2025-29481](https://insights.sbomify.com/MAL-2025-29481/): Malicious code in policykit (npm) (malicious package)
- [MAL-2025-29480](https://insights.sbomify.com/MAL-2025-29480/): Malicious code in polaris_tokens_plus (npm) (malicious package)
- [MAL-2025-2948](https://insights.sbomify.com/MAL-2025-2948/): Malicious code in coingenerator (PyPI) (malicious package)
- [MAL-2025-29479](https://insights.sbomify.com/MAL-2025-29479/): Malicious code in polaris_icons (npm) (malicious package)
- [MAL-2025-29478](https://insights.sbomify.com/MAL-2025-29478/): Malicious code in polaris-viz-native (npm) (malicious package)
- [MAL-2025-29477](https://insights.sbomify.com/MAL-2025-29477/): Malicious code in polaris-viz-core (npm) (malicious package)
- [MAL-2025-29476](https://insights.sbomify.com/MAL-2025-29476/): Malicious code in polaris-uranology-luna-leda (npm) (malicious package)
- [MAL-2025-29475](https://insights.sbomify.com/MAL-2025-29475/): Malicious code in polaris-solarnebula-europa-mineralogy (npm) (malicious package)
- [MAL-2025-29474](https://insights.sbomify.com/MAL-2025-29474/): Malicious code in polaris-private-writable-europa (npm) (malicious package)
- [MAL-2025-29473](https://insights.sbomify.com/MAL-2025-29473/): Malicious code in polaris-pino-pretty-void-apollo (npm) (malicious package)
- [MAL-2025-29472](https://insights.sbomify.com/MAL-2025-29472/): Malicious code in polaris-native-antares-hugo (npm) (malicious package)
- [MAL-2025-29471](https://insights.sbomify.com/MAL-2025-29471/): Malicious code in polaris-migrator (npm) (malicious package)
- [MAL-2025-29470](https://insights.sbomify.com/MAL-2025-29470/): Malicious code in polaris-cli (npm) (malicious package)
- [MAL-2025-2947](https://insights.sbomify.com/MAL-2025-2947/): Malicious code in coinanalyze (PyPI) (malicious package)
- [MAL-2025-29469](https://insights.sbomify.com/MAL-2025-29469/): Malicious code in polaris-chromedriver-mdx-pegasus (npm) (malicious package)
- [MAL-2025-29468](https://insights.sbomify.com/MAL-2025-29468/): Malicious code in polaris-charts (npm) (malicious package)
- [MAL-2025-29467](https://insights.sbomify.com/MAL-2025-29467/): Malicious code in polaris-bellatrix-octans-celeste (npm) (malicious package)
- [MAL-2025-29466](https://insights.sbomify.com/MAL-2025-29466/): Malicious code in polaris-apollo-quantum-neuromorphic (npm) (malicious package)
- [MAL-2025-29465](https://insights.sbomify.com/MAL-2025-29465/): Malicious code in pokeutils (npm) (malicious package)
- [MAL-2025-29464](https://insights.sbomify.com/MAL-2025-29464/): Malicious code in pokeronline (npm) (malicious package)
- [MAL-2025-29463](https://insights.sbomify.com/MAL-2025-29463/): Malicious code in pokemon-module (npm) (malicious package)
- [MAL-2025-29462](https://insights.sbomify.com/MAL-2025-29462/): Malicious code in pokazania (npm) (malicious package)
- [MAL-2025-29461](https://insights.sbomify.com/MAL-2025-29461/): Malicious code in poitiers (npm) (malicious package)
- [MAL-2025-29460](https://insights.sbomify.com/MAL-2025-29460/): Malicious code in pogolib (npm) (malicious package)
- [MAL-2025-2946](https://insights.sbomify.com/MAL-2025-2946/): Malicious code in coinanalysis (PyPI) (malicious package)
- [MAL-2025-29459](https://insights.sbomify.com/MAL-2025-29459/): Malicious code in pogobot (npm) (malicious package)
- [MAL-2025-29458](https://insights.sbomify.com/MAL-2025-29458/): Malicious code in pogo-build (npm) (malicious package)
- [MAL-2025-29457](https://insights.sbomify.com/MAL-2025-29457/): Malicious code in poenar-template (npm) (malicious package)
- [MAL-2025-29456](https://insights.sbomify.com/MAL-2025-29456/): Malicious code in poemator (npm) (malicious package)
- [MAL-2025-29455](https://insights.sbomify.com/MAL-2025-29455/): Malicious code in poehali (npm) (malicious package)
- [MAL-2025-29454](https://insights.sbomify.com/MAL-2025-29454/): Malicious code in poduspack (npm) (malicious package)
- [MAL-2025-29453](https://insights.sbomify.com/MAL-2025-29453/): Malicious code in podlet-morelikethis (npm) (malicious package)
- [MAL-2025-29452](https://insights.sbomify.com/MAL-2025-29452/): Malicious code in podfmdog (npm) (malicious package)
- [MAL-2025-29451](https://insights.sbomify.com/MAL-2025-29451/): Malicious code in podela (npm) (malicious package)
- [MAL-2025-29450](https://insights.sbomify.com/MAL-2025-29450/): Malicious code in pocketpy (npm) (malicious package)
- [MAL-2025-2945](https://insights.sbomify.com/MAL-2025-2945/): Malicious code in chbencode (PyPI) (malicious package)
- [MAL-2025-29449](https://insights.sbomify.com/MAL-2025-29449/): Malicious code in pnpm-utils (npm) (malicious package)
- [MAL-2025-29448](https://insights.sbomify.com/MAL-2025-29448/): Malicious code in pnbwuemwubna (npm) (malicious package)
- [MAL-2025-29447](https://insights.sbomify.com/MAL-2025-29447/): Malicious code in pmobile (npm) (malicious package)
- [MAL-2025-29446](https://insights.sbomify.com/MAL-2025-29446/): Malicious code in pml-edi-parser (npm) (malicious package)
- [MAL-2025-29445](https://insights.sbomify.com/MAL-2025-29445/): Malicious code in pmircuser (npm) (malicious package)
- [MAL-2025-29444](https://insights.sbomify.com/MAL-2025-29444/): Malicious code in pmg (npm) (malicious package)
- [MAL-2025-29443](https://insights.sbomify.com/MAL-2025-29443/): Malicious code in pmdapp (npm) (malicious package)
- [MAL-2025-29442](https://insights.sbomify.com/MAL-2025-29442/): Malicious code in pmagviz (npm) (malicious package)
- [MAL-2025-29441](https://insights.sbomify.com/MAL-2025-29441/): Malicious code in pm2-harmony-client (npm) (malicious package)
- [MAL-2025-29440](https://insights.sbomify.com/MAL-2025-29440/): Malicious code in pm10-kickstart.css (npm) (malicious package)
- [MAL-2025-2944](https://insights.sbomify.com/MAL-2025-2944/): Malicious code in cdms2 (PyPI) (malicious package)
- [MAL-2025-29439](https://insights.sbomify.com/MAL-2025-29439/): Malicious code in plymouth (npm) (malicious package)
- [MAL-2025-29438](https://insights.sbomify.com/MAL-2025-29438/): Malicious code in plutov-slack-client (npm) (malicious package)
- [MAL-2025-29437](https://insights.sbomify.com/MAL-2025-29437/): Malicious code in plutology-singularitarianism-testcafe-ophiuchus (npm) (malicious package)
- [MAL-2025-29436](https://insights.sbomify.com/MAL-2025-29436/): Malicious code in plutology-quantum-computing-link-foundation (npm) (malicious package)
- [MAL-2025-29435](https://insights.sbomify.com/MAL-2025-29435/): Malicious code in plutology-paleoanthropology-elektra-polaris (npm) (malicious package)
- [MAL-2025-29434](https://insights.sbomify.com/MAL-2025-29434/): Malicious code in plus_platform_client (npm) (malicious package)
- [MAL-2025-29433](https://insights.sbomify.com/MAL-2025-29433/): Malicious code in plurkii (npm) (malicious package)
- [MAL-2025-29432](https://insights.sbomify.com/MAL-2025-29432/): Malicious code in plurka (npm) (malicious package)
- [MAL-2025-29431](https://insights.sbomify.com/MAL-2025-29431/): Malicious code in plume_v9wvs_dl0en_harmony (npm) (malicious package)
- [MAL-2025-29430](https://insights.sbomify.com/MAL-2025-29430/): Malicious code in plume_u205n_fpk9e_firefly (npm) (malicious package)
- [MAL-2025-29429](https://insights.sbomify.com/MAL-2025-29429/): Malicious code in plume_o86ab_tk7go_pinnacle (npm) (malicious package)
- [MAL-2025-29428](https://insights.sbomify.com/MAL-2025-29428/): Malicious code in plume_l95ti_3tjug_serenade (npm) (malicious package)
- [MAL-2025-29427](https://insights.sbomify.com/MAL-2025-29427/): Malicious code in plume_de4ts_xottu_keystone (npm) (malicious package)
- [MAL-2025-29426](https://insights.sbomify.com/MAL-2025-29426/): Malicious code in plume_bb3vt_6syx9_yosemite (npm) (malicious package)
- [MAL-2025-29425](https://insights.sbomify.com/MAL-2025-29425/): Malicious code in plume_86htk_5gvx1_kaleidoscope (npm) (malicious package)
- [MAL-2025-29424](https://insights.sbomify.com/MAL-2025-29424/): Malicious code in plume_6z6ku_qtkjk_crown (npm) (malicious package)
- [MAL-2025-29423](https://insights.sbomify.com/MAL-2025-29423/): Malicious code in plume_5yjcu_gph4j_honey (npm) (malicious package)
- [MAL-2025-29422](https://insights.sbomify.com/MAL-2025-29422/): Malicious code in plume-xni8d-loizg-frost-project (npm) (malicious package)
- [MAL-2025-29421](https://insights.sbomify.com/MAL-2025-29421/): Malicious code in plume-xgda6-fx7v6-zephyr-project (npm) (malicious package)
- [MAL-2025-29420](https://insights.sbomify.com/MAL-2025-29420/): Malicious code in plume-gtzdx-r83fl-nectar-project (npm) (malicious package)
- [MAL-2025-2942](https://insights.sbomify.com/MAL-2025-2942/): Malicious code in awsglueml (PyPI) (malicious package)
- [MAL-2025-29419](https://insights.sbomify.com/MAL-2025-29419/): Malicious code in plume-bqoeq-2mk5q-quartz-project (npm) (malicious package)
- [MAL-2025-29418](https://insights.sbomify.com/MAL-2025-29418/): Malicious code in plume-6vhn6-tz57c-thunder-project (npm) (malicious package)
- [MAL-2025-29417](https://insights.sbomify.com/MAL-2025-29417/): Malicious code in plume-3zt7p-enicb-jade-project (npm) (malicious package)
- [MAL-2025-29416](https://insights.sbomify.com/MAL-2025-29416/): Malicious code in plugin-sass (npm) (malicious package)
- [MAL-2025-29415](https://insights.sbomify.com/MAL-2025-29415/): Malicious code in plugin-polaris (npm) (malicious package)
- [MAL-2025-29414](https://insights.sbomify.com/MAL-2025-29414/): Malicious code in plugin-ngrok (npm) (malicious package)
- [MAL-2025-29413](https://insights.sbomify.com/MAL-2025-29413/): Malicious code in plugin-migrate (npm) (malicious package)
- [MAL-2025-29412](https://insights.sbomify.com/MAL-2025-29412/): Malicious code in plugin-image-generation (npm) (malicious package)
- [MAL-2025-29411](https://insights.sbomify.com/MAL-2025-29411/): Malicious code in plugin-graphql (npm) (malicious package)
- [MAL-2025-29410](https://insights.sbomify.com/MAL-2025-29410/): Malicious code in plugin-did-you-mean (npm) (malicious package)
- [MAL-2025-2941](https://insights.sbomify.com/MAL-2025-2941/): Malicious code in awsgluedq (PyPI) (malicious package)
- [MAL-2025-29409](https://insights.sbomify.com/MAL-2025-29409/): Malicious code in plugin-cloudflare (npm) (malicious package)
- [MAL-2025-29408](https://insights.sbomify.com/MAL-2025-29408/): Malicious code in plottable-moment (npm) (malicious package)
- [MAL-2025-29407](https://insights.sbomify.com/MAL-2025-29407/): Malicious code in plopgraph (npm) (malicious package)
- [MAL-2025-29406](https://insights.sbomify.com/MAL-2025-29406/): Malicious code in plne2 (npm) (malicious package)
- [MAL-2025-29405](https://insights.sbomify.com/MAL-2025-29405/): Malicious code in plistutil (npm) (malicious package)
- [MAL-2025-29404](https://insights.sbomify.com/MAL-2025-29404/): Malicious code in pli2 (npm) (malicious package)
- [MAL-2025-29403](https://insights.sbomify.com/MAL-2025-29403/): Malicious code in pleyus (npm) (malicious package)
- [MAL-2025-29402](https://insights.sbomify.com/MAL-2025-29402/): Malicious code in plex-slack-music-notifications (npm) (malicious package)
- [MAL-2025-29401](https://insights.sbomify.com/MAL-2025-29401/): Malicious code in plesae (npm) (malicious package)
- [MAL-2025-29400](https://insights.sbomify.com/MAL-2025-29400/): Malicious code in plejsbook (npm) (malicious package)
- [MAL-2025-2940](https://insights.sbomify.com/MAL-2025-2940/): Malicious code in aws-glue (PyPI) (malicious package)
- [MAL-2025-294](https://insights.sbomify.com/MAL-2025-294/): Malicious code in dops-components (npm) (malicious package)
- [MAL-2025-29399](https://insights.sbomify.com/MAL-2025-29399/): Malicious code in pleiad (npm) (malicious package)
- [MAL-2025-29398](https://insights.sbomify.com/MAL-2025-29398/): Malicious code in playyit (npm) (malicious package)
- [MAL-2025-29397](https://insights.sbomify.com/MAL-2025-29397/): Malicious code in playxing (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/786/