# Vulnerabilities published in 2025


- [MAL-2025-29396](https://insights.sbomify.com/MAL-2025-29396/): Malicious code in playwright-slidev-fusion-kastra (npm) (malicious package)
- [MAL-2025-29395](https://insights.sbomify.com/MAL-2025-29395/): Malicious code in playwright-prettier-archaeoastronomy-thuban (npm) (malicious package)
- [MAL-2025-29394](https://insights.sbomify.com/MAL-2025-29394/): Malicious code in playwright-mutation-mysql-solis (npm) (malicious package)
- [MAL-2025-29393](https://insights.sbomify.com/MAL-2025-29393/): Malicious code in playwright-mocha-chai-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-29392](https://insights.sbomify.com/MAL-2025-29392/): Malicious code in playwright-husky-redis-selenology (npm) (malicious package)
- [MAL-2025-29391](https://insights.sbomify.com/MAL-2025-29391/): Malicious code in playwright-fornax-avior-achernar (npm) (malicious package)
- [MAL-2025-29390](https://insights.sbomify.com/MAL-2025-29390/): Malicious code in playsms (npm) (malicious package)
- [MAL-2025-2939](https://insights.sbomify.com/MAL-2025-2939/): Malicious code in asynctestpython (PyPI) (malicious package)
- [MAL-2025-29389](https://insights.sbomify.com/MAL-2025-29389/): Malicious code in playsite (npm) (malicious package)
- [MAL-2025-29388](https://insights.sbomify.com/MAL-2025-29388/): Malicious code in playready (npm) (malicious package)
- [MAL-2025-29387](https://insights.sbomify.com/MAL-2025-29387/): Malicious code in playinga (npm) (malicious package)
- [MAL-2025-29386](https://insights.sbomify.com/MAL-2025-29386/): Malicious code in playground-wizard (npm) (malicious package)
- [MAL-2025-29385](https://insights.sbomify.com/MAL-2025-29385/): Malicious code in playfair-display (npm) (malicious package)
- [MAL-2025-29384](https://insights.sbomify.com/MAL-2025-29384/): Malicious code in playerctl (npm) (malicious package)
- [MAL-2025-29383](https://insights.sbomify.com/MAL-2025-29383/): Malicious code in player2.1tv.com (npm) (malicious package)
- [MAL-2025-29382](https://insights.sbomify.com/MAL-2025-29382/): Malicious code in playapi.engines (npm) (malicious package)
- [MAL-2025-29381](https://insights.sbomify.com/MAL-2025-29381/): Malicious code in play-url (npm) (malicious package)
- [MAL-2025-29380](https://insights.sbomify.com/MAL-2025-29380/): Malicious code in platti (npm) (malicious package)
- [MAL-2025-2938](https://insights.sbomify.com/MAL-2025-2938/): Malicious code in asyncconfigreader (PyPI) (malicious package)
- [MAL-2025-29379](https://insights.sbomify.com/MAL-2025-29379/): Malicious code in platformized-filter-builder (npm) (malicious package)
- [MAL-2025-29378](https://insights.sbomify.com/MAL-2025-29378/): Malicious code in platformid (npm) (malicious package)
- [MAL-2025-29377](https://insights.sbomify.com/MAL-2025-29377/): Malicious code in platform-browser (npm) (malicious package)
- [MAL-2025-29376](https://insights.sbomify.com/MAL-2025-29376/): Malicious code in platform-boomerang-components (npm) (malicious package)
- [MAL-2025-29375](https://insights.sbomify.com/MAL-2025-29375/): Malicious code in plastik (npm) (malicious package)
- [MAL-2025-29374](https://insights.sbomify.com/MAL-2025-29374/): Malicious code in plantid (npm) (malicious package)
- [MAL-2025-29373](https://insights.sbomify.com/MAL-2025-29373/): Malicious code in planos (npm) (malicious package)
- [MAL-2025-29372](https://insights.sbomify.com/MAL-2025-29372/): Malicious code in planning-file-updater (npm) (malicious package)
- [MAL-2025-29371](https://insights.sbomify.com/MAL-2025-29371/): Malicious code in planmill-auth (npm) (malicious package)
- [MAL-2025-29370](https://insights.sbomify.com/MAL-2025-29370/): Malicious code in planetz (npm) (malicious package)
- [MAL-2025-2937](https://insights.sbomify.com/MAL-2025-2937/): Malicious code in asyncaiosignal (PyPI) (malicious package)
- [MAL-2025-29369](https://insights.sbomify.com/MAL-2025-29369/): Malicious code in planett-simple-ad-block (npm) (malicious package)
- [MAL-2025-29368](https://insights.sbomify.com/MAL-2025-29368/): Malicious code in planett-go-back-to-top-text (npm) (malicious package)
- [MAL-2025-29367](https://insights.sbomify.com/MAL-2025-29367/): Malicious code in planetology-warp-airbnb-norma (npm) (malicious package)
- [MAL-2025-29366](https://insights.sbomify.com/MAL-2025-29366/): Malicious code in planetology-server-optimize-css-assets-webpack-plugin-venus (npm) (malicious package)
- [MAL-2025-29365](https://insights.sbomify.com/MAL-2025-29365/): Malicious code in planetology-relay-antd-halley (npm) (malicious package)
- [MAL-2025-29364](https://insights.sbomify.com/MAL-2025-29364/): Malicious code in planetology-mutation-boson-warp (npm) (malicious package)
- [MAL-2025-29363](https://insights.sbomify.com/MAL-2025-29363/): Malicious code in planetology-indus-webdriver-mocha-astro (npm) (malicious package)
- [MAL-2025-29362](https://insights.sbomify.com/MAL-2025-29362/): Malicious code in planetology-element-ui-pulsar-rigel (npm) (malicious package)
- [MAL-2025-29361](https://insights.sbomify.com/MAL-2025-29361/): Malicious code in planckscale-xenon-arcturus-flare (npm) (malicious package)
- [MAL-2025-29360](https://insights.sbomify.com/MAL-2025-29360/): Malicious code in planckscale-mira-configstore-cli (npm) (malicious package)
- [MAL-2025-2936](https://insights.sbomify.com/MAL-2025-2936/): Malicious code in amzn-awsglue (PyPI) (malicious package)
- [MAL-2025-29359](https://insights.sbomify.com/MAL-2025-29359/): Malicious code in planckscale-bellatrix-neuromorphic-astrometry (npm) (malicious package)
- [MAL-2025-29358](https://insights.sbomify.com/MAL-2025-29358/): Malicious code in planckscale-astrochemistry-paleoceanography-dorado (npm) (malicious package)
- [MAL-2025-29357](https://insights.sbomify.com/MAL-2025-29357/): Malicious code in planckscale-antares-despina-void (npm) (malicious package)
- [MAL-2025-29356](https://insights.sbomify.com/MAL-2025-29356/): Malicious code in placeholderx (npm) (malicious package)
- [MAL-2025-29355](https://insights.sbomify.com/MAL-2025-29355/): Malicious code in placeholder1 (npm) (malicious package)
- [MAL-2025-29354](https://insights.sbomify.com/MAL-2025-29354/): Malicious code in placeHolder.js (npm) (malicious package)
- [MAL-2025-29353](https://insights.sbomify.com/MAL-2025-29353/): Malicious code in pkkenvlobqryhism (npm) (malicious package)
- [MAL-2025-29352](https://insights.sbomify.com/MAL-2025-29352/): Malicious code in pkg-sutex (npm) (malicious package)
- [MAL-2025-29351](https://insights.sbomify.com/MAL-2025-29351/): Malicious code in pkg-dependents-cli (npm) (malicious package)
- [MAL-2025-29350](https://insights.sbomify.com/MAL-2025-29350/): Malicious code in pjwstk (npm) (malicious package)
- [MAL-2025-2935](https://insights.sbomify.com/MAL-2025-2935/): Malicious code in amzn-aws-glue-ml-libs-python (PyPI) (malicious package)
- [MAL-2025-29349](https://insights.sbomify.com/MAL-2025-29349/): Malicious code in pjcore (npm) (malicious package)
- [MAL-2025-29348](https://insights.sbomify.com/MAL-2025-29348/): Malicious code in pizzanet (npm) (malicious package)
- [MAL-2025-29347](https://insights.sbomify.com/MAL-2025-29347/): Malicious code in pizza-pasta (npm) (malicious package)
- [MAL-2025-29346](https://insights.sbomify.com/MAL-2025-29346/): Malicious code in pizza-party (npm) (malicious package)
- [MAL-2025-29345](https://insights.sbomify.com/MAL-2025-29345/): Malicious code in piy (npm) (malicious package)
- [MAL-2025-29344](https://insights.sbomify.com/MAL-2025-29344/): Malicious code in pixzen (npm) (malicious package)
- [MAL-2025-29343](https://insights.sbomify.com/MAL-2025-29343/): Malicious code in pixxel (npm) (malicious package)
- [MAL-2025-29342](https://insights.sbomify.com/MAL-2025-29342/): Malicious code in pixvanastudio (npm) (malicious package)
- [MAL-2025-29341](https://insights.sbomify.com/MAL-2025-29341/): Malicious code in pixograms (npm) (malicious package)
- [MAL-2025-29340](https://insights.sbomify.com/MAL-2025-29340/): Malicious code in pixelrpg (npm) (malicious package)
- [MAL-2025-2934](https://insights.sbomify.com/MAL-2025-2934/): Malicious code in alibabacloud-gateway-fc-util-py2 (PyPI) (malicious package)
- [MAL-2025-29339](https://insights.sbomify.com/MAL-2025-29339/): Malicious code in pixelpipe (npm) (malicious package)
- [MAL-2025-29338](https://insights.sbomify.com/MAL-2025-29338/): Malicious code in pixellang (npm) (malicious package)
- [MAL-2025-29337](https://insights.sbomify.com/MAL-2025-29337/): Malicious code in pixelfy (npm) (malicious package)
- [MAL-2025-29336](https://insights.sbomify.com/MAL-2025-29336/): Malicious code in pixelchat (npm) (malicious package)
- [MAL-2025-29335](https://insights.sbomify.com/MAL-2025-29335/): Malicious code in piweekly (npm) (malicious package)
- [MAL-2025-29334](https://insights.sbomify.com/MAL-2025-29334/): Malicious code in pivotout (npm) (malicious package)
- [MAL-2025-29333](https://insights.sbomify.com/MAL-2025-29333/): Malicious code in pitoff (npm) (malicious package)
- [MAL-2025-29332](https://insights.sbomify.com/MAL-2025-29332/): Malicious code in pitercomp (npm) (malicious package)
- [MAL-2025-29331](https://insights.sbomify.com/MAL-2025-29331/): Malicious code in pitchruby (npm) (malicious package)
- [MAL-2025-29330](https://insights.sbomify.com/MAL-2025-29330/): Malicious code in pisubrov (npm) (malicious package)
- [MAL-2025-2933](https://insights.sbomify.com/MAL-2025-2933/): Malicious code in akangatu (PyPI) (malicious package)
- [MAL-2025-29329](https://insights.sbomify.com/MAL-2025-29329/): Malicious code in pisting-yawa (npm) (malicious package)
- [MAL-2025-29328](https://insights.sbomify.com/MAL-2025-29328/): Malicious code in pisti (npm) (malicious package)
- [MAL-2025-29327](https://insights.sbomify.com/MAL-2025-29327/): Malicious code in pisomky (npm) (malicious package)
- [MAL-2025-29326](https://insights.sbomify.com/MAL-2025-29326/): Malicious code in piscinec (npm) (malicious package)
- [MAL-2025-29325](https://insights.sbomify.com/MAL-2025-29325/): Malicious code in pirtition (npm) (malicious package)
- [MAL-2025-29324](https://insights.sbomify.com/MAL-2025-29324/): Malicious code in pircar (npm) (malicious package)
- [MAL-2025-29323](https://insights.sbomify.com/MAL-2025-29323/): Malicious code in pirahna (npm) (malicious package)
- [MAL-2025-29322](https://insights.sbomify.com/MAL-2025-29322/): Malicious code in piptesta (npm) (malicious package)
- [MAL-2025-29321](https://insights.sbomify.com/MAL-2025-29321/): Malicious code in pipelined (npm) (malicious package)
- [MAL-2025-29320](https://insights.sbomify.com/MAL-2025-29320/): Malicious code in pipedit (npm) (malicious package)
- [MAL-2025-2932](https://insights.sbomify.com/MAL-2025-2932/): Malicious code in aiphttp (PyPI) (malicious package)
- [MAL-2025-29319](https://insights.sbomify.com/MAL-2025-29319/): Malicious code in pipe-html-webpack-plugin-quasar-yildun (npm) (malicious package)
- [MAL-2025-29318](https://insights.sbomify.com/MAL-2025-29318/): Malicious code in pipe-hash-minify-thread-char (npm) (malicious package)
- [MAL-2025-29317](https://insights.sbomify.com/MAL-2025-29317/): Malicious code in pipe-gammarayburst-slides-sirius (npm) (malicious package)
- [MAL-2025-29316](https://insights.sbomify.com/MAL-2025-29316/): Malicious code in pipe-float-mu-spy-table (npm) (malicious package)
- [MAL-2025-29315](https://insights.sbomify.com/MAL-2025-29315/): Malicious code in pipe-dendrochronology-auth-proxima (npm) (malicious package)
- [MAL-2025-29314](https://insights.sbomify.com/MAL-2025-29314/): Malicious code in pipe-css-loader-unuk-ursa (npm) (malicious package)
- [MAL-2025-29313](https://insights.sbomify.com/MAL-2025-29313/): Malicious code in pipe-cors-public-figures (npm) (malicious package)
- [MAL-2025-29312](https://insights.sbomify.com/MAL-2025-29312/): Malicious code in pinvoice (npm) (malicious package)
- [MAL-2025-29311](https://insights.sbomify.com/MAL-2025-29311/): Malicious code in pinterest-gestalt (npm) (malicious package)
- [MAL-2025-29310](https://insights.sbomify.com/MAL-2025-29310/): Malicious code in pinterest-api-demo (npm) (malicious package)
- [MAL-2025-2931](https://insights.sbomify.com/MAL-2025-2931/): Malicious code in aiosignalasync (PyPI) (malicious package)
- [MAL-2025-29309](https://insights.sbomify.com/MAL-2025-29309/): Malicious code in pino-xenon-duplex-chalk (npm) (malicious package)
- [MAL-2025-29308](https://insights.sbomify.com/MAL-2025-29308/): Malicious code in pino-selenium-thermosphere-lepton (npm) (malicious package)
- [MAL-2025-29307](https://insights.sbomify.com/MAL-2025-29307/): Malicious code in pino-qloud (npm) (malicious package)
- [MAL-2025-29306](https://insights.sbomify.com/MAL-2025-29306/): Malicious code in pino-protoplanetarydisk-cosmogenic-stop (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/787/