# Vulnerabilities published in 2025


- [MAL-2025-29305](https://insights.sbomify.com/MAL-2025-29305/): Malicious code in pino-pretty-webdriver-manager-apollo-init (npm) (malicious package)
- [MAL-2025-29304](https://insights.sbomify.com/MAL-2025-29304/): Malicious code in pino-pretty-io-astrophysics-archaeoastronomy (npm) (malicious package)
- [MAL-2025-29303](https://insights.sbomify.com/MAL-2025-29303/): Malicious code in pino-pretty-flare-zephyr-sirius (npm) (malicious package)
- [MAL-2025-29302](https://insights.sbomify.com/MAL-2025-29302/): Malicious code in pino-pretty-deneb-dotenv-parse-variables-hugo (npm) (malicious package)
- [MAL-2025-29301](https://insights.sbomify.com/MAL-2025-29301/): Malicious code in pino-babel-venus-sirius (npm) (malicious package)
- [MAL-2025-29300](https://insights.sbomify.com/MAL-2025-29300/): Malicious code in pinnacle_pjgey_cac9o_citadel (npm) (malicious package)
- [MAL-2025-2930](https://insights.sbomify.com/MAL-2025-2930/): Malicious code in agents-kit (PyPI) (malicious package)
- [MAL-2025-293](https://insights.sbomify.com/MAL-2025-293/): Malicious code in domain-picker (npm) (malicious package)
- [MAL-2025-29299](https://insights.sbomify.com/MAL-2025-29299/): Malicious code in pinnacle_jxb3c_n8pay_serenade (npm) (malicious package)
- [MAL-2025-29298](https://insights.sbomify.com/MAL-2025-29298/): Malicious code in pinnacle_7dxeo_eg5my_citadel (npm) (malicious package)
- [MAL-2025-29297](https://insights.sbomify.com/MAL-2025-29297/): Malicious code in pinnacle-ze6db-unv25-grove-project (npm) (malicious package)
- [MAL-2025-29296](https://insights.sbomify.com/MAL-2025-29296/): Malicious code in pinnacle-y6gdz-balf5-iris-project (npm) (malicious package)
- [MAL-2025-29295](https://insights.sbomify.com/MAL-2025-29295/): Malicious code in pinnacle-xylophone-osp074-project (npm) (malicious package)
- [MAL-2025-29294](https://insights.sbomify.com/MAL-2025-29294/): Malicious code in pinnacle-xerox-oij027-project (npm) (malicious package)
- [MAL-2025-29293](https://insights.sbomify.com/MAL-2025-29293/): Malicious code in pinnacle-v52t2-iqp3t-drift-project (npm) (malicious package)
- [MAL-2025-29292](https://insights.sbomify.com/MAL-2025-29292/): Malicious code in pinnacle-tuysy-cws9u-haven-project (npm) (malicious package)
- [MAL-2025-29291](https://insights.sbomify.com/MAL-2025-29291/): Malicious code in pinnacle-tqrm4-5bxiz-blossom-project (npm) (malicious package)
- [MAL-2025-29290](https://insights.sbomify.com/MAL-2025-29290/): Malicious code in pinnacle-quasar-cxx625-project (npm) (malicious package)
- [MAL-2025-2929](https://insights.sbomify.com/MAL-2025-2929/): Malicious code in acloud-client (PyPI) (malicious package)
- [MAL-2025-29289](https://insights.sbomify.com/MAL-2025-29289/): Malicious code in pinnacle-nofcz-0yox8-throne-project (npm) (malicious package)
- [MAL-2025-29288](https://insights.sbomify.com/MAL-2025-29288/): Malicious code in pinnacle-meadow-xrt191-project (npm) (malicious package)
- [MAL-2025-29287](https://insights.sbomify.com/MAL-2025-29287/): Malicious code in pinnacle-meadow-wzo736-project (npm) (malicious package)
- [MAL-2025-29286](https://insights.sbomify.com/MAL-2025-29286/): Malicious code in pinnacle-lagoon-aoa451-project (npm) (malicious package)
- [MAL-2025-29285](https://insights.sbomify.com/MAL-2025-29285/): Malicious code in pinnacle-jtl8u-8v9og-zephyr-project (npm) (malicious package)
- [MAL-2025-29284](https://insights.sbomify.com/MAL-2025-29284/): Malicious code in pinnacle-j05vu-7j6rk-violet-project (npm) (malicious package)
- [MAL-2025-29283](https://insights.sbomify.com/MAL-2025-29283/): Malicious code in pinnacle-icicle-fzw007-project (npm) (malicious package)
- [MAL-2025-29282](https://insights.sbomify.com/MAL-2025-29282/): Malicious code in pinnacle-hammock-zde206-project (npm) (malicious package)
- [MAL-2025-29281](https://insights.sbomify.com/MAL-2025-29281/): Malicious code in pinnacle-fjord-vaj138-project (npm) (malicious package)
- [MAL-2025-29280](https://insights.sbomify.com/MAL-2025-29280/): Malicious code in pinnacle-evergreen-oat567-project (npm) (malicious package)
- [MAL-2025-2928](https://insights.sbomify.com/MAL-2025-2928/): Malicious code in acapy-agent-didx (PyPI) (malicious package)
- [MAL-2025-29279](https://insights.sbomify.com/MAL-2025-29279/): Malicious code in pinnacle-dolphin-jif666-project (npm) (malicious package)
- [MAL-2025-29278](https://insights.sbomify.com/MAL-2025-29278/): Malicious code in pinnacle-ch8wa-7ar1k-jade-project (npm) (malicious package)
- [MAL-2025-29277](https://insights.sbomify.com/MAL-2025-29277/): Malicious code in pinnacle-butterfly-pwo640-project (npm) (malicious package)
- [MAL-2025-29276](https://insights.sbomify.com/MAL-2025-29276/): Malicious code in pinnacle-butterfly-axa978-project (npm) (malicious package)
- [MAL-2025-29275](https://insights.sbomify.com/MAL-2025-29275/): Malicious code in pinnacle-buffalo-ejn985-project (npm) (malicious package)
- [MAL-2025-29274](https://insights.sbomify.com/MAL-2025-29274/): Malicious code in pinnacle-brook-njr948-project (npm) (malicious package)
- [MAL-2025-29273](https://insights.sbomify.com/MAL-2025-29273/): Malicious code in pinnacle-94qa3-raxfc-boulder-project (npm) (malicious package)
- [MAL-2025-29272](https://insights.sbomify.com/MAL-2025-29272/): Malicious code in pinnacle-5vbl9-mvd83-zenith-project (npm) (malicious package)
- [MAL-2025-29271](https://insights.sbomify.com/MAL-2025-29271/): Malicious code in pinnacle-4t6yh-ib5yd-frost-project (npm) (malicious package)
- [MAL-2025-29270](https://insights.sbomify.com/MAL-2025-29270/): Malicious code in pinmame (npm) (malicious package)
- [MAL-2025-2927](https://insights.sbomify.com/MAL-2025-2927/): Malicious code in 7-0 (PyPI) (malicious package)
- [MAL-2025-29269](https://insights.sbomify.com/MAL-2025-29269/): Malicious code in pingslack (npm) (malicious package)
- [MAL-2025-29268](https://insights.sbomify.com/MAL-2025-29268/): Malicious code in pingpixel (npm) (malicious package)
- [MAL-2025-29267](https://insights.sbomify.com/MAL-2025-29267/): Malicious code in pingled (npm) (malicious package)
- [MAL-2025-29266](https://insights.sbomify.com/MAL-2025-29266/): Malicious code in pingker (npm) (malicious package)
- [MAL-2025-29265](https://insights.sbomify.com/MAL-2025-29265/): Malicious code in pingboard (npm) (malicious package)
- [MAL-2025-29264](https://insights.sbomify.com/MAL-2025-29264/): Malicious code in pingbin (npm) (malicious package)
- [MAL-2025-29263](https://insights.sbomify.com/MAL-2025-29263/): Malicious code in ping-reductions (npm) (malicious package)
- [MAL-2025-29262](https://insights.sbomify.com/MAL-2025-29262/): Malicious code in ping-api-ruby (npm) (malicious package)
- [MAL-2025-29261](https://insights.sbomify.com/MAL-2025-29261/): Malicious code in pinelopi (npm) (malicious package)
- [MAL-2025-29260](https://insights.sbomify.com/MAL-2025-29260/): Malicious code in pine_llv8i_w9u3s_sapphire (npm) (malicious package)
- [MAL-2025-2926](https://insights.sbomify.com/MAL-2025-2926/): Malicious code in 3-0 (PyPI) (malicious package)
- [MAL-2025-29259](https://insights.sbomify.com/MAL-2025-29259/): Malicious code in pine_ivizu_uj01g_plume (npm) (malicious package)
- [MAL-2025-29258](https://insights.sbomify.com/MAL-2025-29258/): Malicious code in pine-zenith-zglc (npm) (malicious package)
- [MAL-2025-29257](https://insights.sbomify.com/MAL-2025-29257/): Malicious code in pine-yearling-dx4s (npm) (malicious package)
- [MAL-2025-29256](https://insights.sbomify.com/MAL-2025-29256/): Malicious code in pine-wormhole-v6m0 (npm) (malicious package)
- [MAL-2025-29255](https://insights.sbomify.com/MAL-2025-29255/): Malicious code in pine-quarry-w81j (npm) (malicious package)
- [MAL-2025-29254](https://insights.sbomify.com/MAL-2025-29254/): Malicious code in pine-nutmeg-gy0t (npm) (malicious package)
- [MAL-2025-29253](https://insights.sbomify.com/MAL-2025-29253/): Malicious code in pindare (npm) (malicious package)
- [MAL-2025-29252](https://insights.sbomify.com/MAL-2025-29252/): Malicious code in pimule (npm) (malicious package)
- [MAL-2025-29251](https://insights.sbomify.com/MAL-2025-29251/): Malicious code in pika (npm) (malicious package)
- [MAL-2025-29250](https://insights.sbomify.com/MAL-2025-29250/): Malicious code in pijecta (npm) (malicious package)
- [MAL-2025-2925](https://insights.sbomify.com/MAL-2025-2925/): Malicious code in 0-8 (PyPI) (malicious package)
- [MAL-2025-29249](https://insights.sbomify.com/MAL-2025-29249/): Malicious code in pii-detector (npm) (malicious package)
- [MAL-2025-29248](https://insights.sbomify.com/MAL-2025-29248/): Malicious code in pigyacc (npm) (malicious package)
- [MAL-2025-29247](https://insights.sbomify.com/MAL-2025-29247/): Malicious code in pigreko (npm) (malicious package)
- [MAL-2025-29246](https://insights.sbomify.com/MAL-2025-29246/): Malicious code in pietros (npm) (malicious package)
- [MAL-2025-29245](https://insights.sbomify.com/MAL-2025-29245/): Malicious code in pier-yam-dr1v (npm) (malicious package)
- [MAL-2025-29244](https://insights.sbomify.com/MAL-2025-29244/): Malicious code in pier-void-qlti (npm) (malicious package)
- [MAL-2025-29243](https://insights.sbomify.com/MAL-2025-29243/): Malicious code in pier-umbrella-cexq (npm) (malicious package)
- [MAL-2025-29242](https://insights.sbomify.com/MAL-2025-29242/): Malicious code in pier-penguin-92vz (npm) (malicious package)
- [MAL-2025-29241](https://insights.sbomify.com/MAL-2025-29241/): Malicious code in pier-mushroom-4z39 (npm) (malicious package)
- [MAL-2025-29240](https://insights.sbomify.com/MAL-2025-29240/): Malicious code in pier-kapok-4zwg (npm) (malicious package)
- [MAL-2025-2924](https://insights.sbomify.com/MAL-2025-2924/): Malicious code in sharpdefender (NuGet) (malicious package)
- [MAL-2025-29239](https://insights.sbomify.com/MAL-2025-29239/): Malicious code in pier-igloo-b0vd (npm) (malicious package)
- [MAL-2025-29238](https://insights.sbomify.com/MAL-2025-29238/): Malicious code in pier-ginger-i3aa (npm) (malicious package)
- [MAL-2025-29237](https://insights.sbomify.com/MAL-2025-29237/): Malicious code in pier-banana-w5yk (npm) (malicious package)
- [MAL-2025-29236](https://insights.sbomify.com/MAL-2025-29236/): Malicious code in piemenu (npm) (malicious package)
- [MAL-2025-29235](https://insights.sbomify.com/MAL-2025-29235/): Malicious code in pidtuning (npm) (malicious package)
- [MAL-2025-29234](https://insights.sbomify.com/MAL-2025-29234/): Malicious code in pideya (npm) (malicious package)
- [MAL-2025-29233](https://insights.sbomify.com/MAL-2025-29233/): Malicious code in pictio (npm) (malicious package)
- [MAL-2025-29232](https://insights.sbomify.com/MAL-2025-29232/): Malicious code in picpass (npm) (malicious package)
- [MAL-2025-29231](https://insights.sbomify.com/MAL-2025-29231/): Malicious code in piclog (npm) (malicious package)
- [MAL-2025-29230](https://insights.sbomify.com/MAL-2025-29230/): Malicious code in piclip (npm) (malicious package)
- [MAL-2025-2923](https://insights.sbomify.com/MAL-2025-2923/): Malicious code in seedefender (NuGet) (malicious package)
- [MAL-2025-29229](https://insights.sbomify.com/MAL-2025-29229/): Malicious code in pickosite (npm) (malicious package)
- [MAL-2025-29228](https://insights.sbomify.com/MAL-2025-29228/): Malicious code in pickmeo-test1 (npm) (malicious package)
- [MAL-2025-29227](https://insights.sbomify.com/MAL-2025-29227/): Malicious code in pickmeo-test-module (npm) (malicious package)
- [MAL-2025-29226](https://insights.sbomify.com/MAL-2025-29226/): Malicious code in pick-value (npm) (malicious package)
- [MAL-2025-29225](https://insights.sbomify.com/MAL-2025-29225/): Malicious code in pick-some-values (npm) (malicious package)
- [MAL-2025-29224](https://insights.sbomify.com/MAL-2025-29224/): Malicious code in pick-some-keys (npm) (malicious package)
- [MAL-2025-29223](https://insights.sbomify.com/MAL-2025-29223/): Malicious code in pick-redvelvet-member (npm) (malicious package)
- [MAL-2025-29222](https://insights.sbomify.com/MAL-2025-29222/): Malicious code in picform (npm) (malicious package)
- [MAL-2025-29221](https://insights.sbomify.com/MAL-2025-29221/): Malicious code in picfix (npm) (malicious package)
- [MAL-2025-29220](https://insights.sbomify.com/MAL-2025-29220/): Malicious code in picchat (npm) (malicious package)
- [MAL-2025-2922](https://insights.sbomify.com/MAL-2025-2922/): Malicious code in markdown-to-html (NuGet) (malicious package)
- [MAL-2025-29219](https://insights.sbomify.com/MAL-2025-29219/): Malicious code in picamleed (npm) (malicious package)
- [MAL-2025-29218](https://insights.sbomify.com/MAL-2025-29218/): Malicious code in piasma (npm) (malicious package)
- [MAL-2025-29217](https://insights.sbomify.com/MAL-2025-29217/): Malicious code in piano-zenith-jbl409-project (npm) (malicious package)
- [MAL-2025-29216](https://insights.sbomify.com/MAL-2025-29216/): Malicious code in piano-yellow-lqa838-project (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/788/