# Vulnerabilities published in 2025


- [MAL-2025-29215](https://insights.sbomify.com/MAL-2025-29215/): Malicious code in piano-whirlpool-wid643-project (npm) (malicious package)
- [MAL-2025-29214](https://insights.sbomify.com/MAL-2025-29214/): Malicious code in piano-thistle-cnk812-project (npm) (malicious package)
- [MAL-2025-29213](https://insights.sbomify.com/MAL-2025-29213/): Malicious code in piano-rainbow-mxd509-project (npm) (malicious package)
- [MAL-2025-29212](https://insights.sbomify.com/MAL-2025-29212/): Malicious code in piano-kite-bjs795-project (npm) (malicious package)
- [MAL-2025-29211](https://insights.sbomify.com/MAL-2025-29211/): Malicious code in piano-kelp-yza208-project (npm) (malicious package)
- [MAL-2025-29210](https://insights.sbomify.com/MAL-2025-29210/): Malicious code in piano-icicle-jxp776-project (npm) (malicious package)
- [MAL-2025-2921](https://insights.sbomify.com/MAL-2025-2921/): Malicious code in zkdrops-lib (npm) (malicious package)
- [MAL-2025-29209](https://insights.sbomify.com/MAL-2025-29209/): Malicious code in piano-desert-uhq931-project (npm) (malicious package)
- [MAL-2025-29208](https://insights.sbomify.com/MAL-2025-29208/): Malicious code in piano-ant-wjc164-project (npm) (malicious package)
- [MAL-2025-29207](https://insights.sbomify.com/MAL-2025-29207/): Malicious code in pia-desktop-scripts (npm) (malicious package)
- [MAL-2025-29206](https://insights.sbomify.com/MAL-2025-29206/): Malicious code in pi-uitest (npm) (malicious package)
- [MAL-2025-29205](https://insights.sbomify.com/MAL-2025-29205/): Malicious code in pi-async-runtime-report-sun (npm) (malicious package)
- [MAL-2025-29204](https://insights.sbomify.com/MAL-2025-29204/): Malicious code in phzoom (npm) (malicious package)
- [MAL-2025-29203](https://insights.sbomify.com/MAL-2025-29203/): Malicious code in physed (npm) (malicious package)
- [MAL-2025-29202](https://insights.sbomify.com/MAL-2025-29202/): Malicious code in phylocsf (npm) (malicious package)
- [MAL-2025-29201](https://insights.sbomify.com/MAL-2025-29201/): Malicious code in phx.js (npm) (malicious package)
- [MAL-2025-29200](https://insights.sbomify.com/MAL-2025-29200/): Malicious code in phrasing (npm) (malicious package)
- [MAL-2025-2920](https://insights.sbomify.com/MAL-2025-2920/): Malicious code in you-test-vue2 (npm) (malicious package)
- [MAL-2025-292](https://insights.sbomify.com/MAL-2025-292/): Malicious code in design-preview (npm) (malicious package)
- [MAL-2025-29199](https://insights.sbomify.com/MAL-2025-29199/): Malicious code in phpwpcc (npm) (malicious package)
- [MAL-2025-29198](https://insights.sbomify.com/MAL-2025-29198/): Malicious code in phpwake (npm) (malicious package)
- [MAL-2025-29197](https://insights.sbomify.com/MAL-2025-29197/): Malicious code in phpunit (npm) (malicious package)
- [MAL-2025-29196](https://insights.sbomify.com/MAL-2025-29196/): Malicious code in phptaller (npm) (malicious package)
- [MAL-2025-29195](https://insights.sbomify.com/MAL-2025-29195/): Malicious code in phpsemver (npm) (malicious package)
- [MAL-2025-29194](https://insights.sbomify.com/MAL-2025-29194/): Malicious code in phpsdk (npm) (malicious package)
- [MAL-2025-29193](https://insights.sbomify.com/MAL-2025-29193/): Malicious code in phprobot (npm) (malicious package)
- [MAL-2025-29192](https://insights.sbomify.com/MAL-2025-29192/): Malicious code in phppoedit (npm) (malicious package)
- [MAL-2025-29191](https://insights.sbomify.com/MAL-2025-29191/): Malicious code in phppass (npm) (malicious package)
- [MAL-2025-29190](https://insights.sbomify.com/MAL-2025-29190/): Malicious code in phpnewbie (npm) (malicious package)
- [MAL-2025-2919](https://insights.sbomify.com/MAL-2025-2919/): Malicious code in yaml-update-action (npm) (malicious package)
- [MAL-2025-29189](https://insights.sbomify.com/MAL-2025-29189/): Malicious code in phplogin (npm) (malicious package)
- [MAL-2025-29188](https://insights.sbomify.com/MAL-2025-29188/): Malicious code in phpjs-shim (npm) (malicious package)
- [MAL-2025-29187](https://insights.sbomify.com/MAL-2025-29187/): Malicious code in phphaml (npm) (malicious package)
- [MAL-2025-29186](https://insights.sbomify.com/MAL-2025-29186/): Malicious code in phpguide (npm) (malicious package)
- [MAL-2025-29185](https://insights.sbomify.com/MAL-2025-29185/): Malicious code in phpenum (npm) (malicious package)
- [MAL-2025-29184](https://insights.sbomify.com/MAL-2025-29184/): Malicious code in phpemail (npm) (malicious package)
- [MAL-2025-29183](https://insights.sbomify.com/MAL-2025-29183/): Malicious code in phpcov (npm) (malicious package)
- [MAL-2025-29182](https://insights.sbomify.com/MAL-2025-29182/): Malicious code in phpcoin (npm) (malicious package)
- [MAL-2025-29181](https://insights.sbomify.com/MAL-2025-29181/): Malicious code in phpbasic (npm) (malicious package)
- [MAL-2025-29180](https://insights.sbomify.com/MAL-2025-29180/): Malicious code in phpadd (npm) (malicious package)
- [MAL-2025-2918](https://insights.sbomify.com/MAL-2025-2918/): Malicious code in y12138 (npm) (malicious package)
- [MAL-2025-29179](https://insights.sbomify.com/MAL-2025-29179/): Malicious code in php-coveralls (npm) (malicious package)
- [MAL-2025-29178](https://insights.sbomify.com/MAL-2025-29178/): Malicious code in php-code-coverage (npm) (malicious package)
- [MAL-2025-29177](https://insights.sbomify.com/MAL-2025-29177/): Malicious code in phoyzlrdneasmkkf (npm) (malicious package)
- [MAL-2025-29176](https://insights.sbomify.com/MAL-2025-29176/): Malicious code in photused (npm) (malicious package)
- [MAL-2025-29175](https://insights.sbomify.com/MAL-2025-29175/): Malicious code in photozzim (npm) (malicious package)
- [MAL-2025-29174](https://insights.sbomify.com/MAL-2025-29174/): Malicious code in photoobox (npm) (malicious package)
- [MAL-2025-29173](https://insights.sbomify.com/MAL-2025-29173/): Malicious code in photon-virtualreality-celeste-taphonomy (npm) (malicious package)
- [MAL-2025-29172](https://insights.sbomify.com/MAL-2025-29172/): Malicious code in photon-lint-staged-scorpius-oortcloud (npm) (malicious package)
- [MAL-2025-29171](https://insights.sbomify.com/MAL-2025-29171/): Malicious code in photon-got-postcss-deneb (npm) (malicious package)
- [MAL-2025-29170](https://insights.sbomify.com/MAL-2025-29170/): Malicious code in photon-equinox-jovian-planetology (npm) (malicious package)
- [MAL-2025-2917](https://insights.sbomify.com/MAL-2025-2917/): Malicious code in widgets-appointmentsmastercatalogtool (npm) (malicious package)
- [MAL-2025-29169](https://insights.sbomify.com/MAL-2025-29169/): Malicious code in photon-brane-wavefunction-cassini (npm) (malicious package)
- [MAL-2025-29168](https://insights.sbomify.com/MAL-2025-29168/): Malicious code in photon-astro-install-singularity (npm) (malicious package)
- [MAL-2025-29167](https://insights.sbomify.com/MAL-2025-29167/): Malicious code in photon-antares-markdown-pdf-chakra-ui (npm) (malicious package)
- [MAL-2025-29166](https://insights.sbomify.com/MAL-2025-29166/): Malicious code in photofeed (npm) (malicious package)
- [MAL-2025-29165](https://insights.sbomify.com/MAL-2025-29165/): Malicious code in photocat (npm) (malicious package)
- [MAL-2025-29164](https://insights.sbomify.com/MAL-2025-29164/): Malicious code in photoark (npm) (malicious package)
- [MAL-2025-29163](https://insights.sbomify.com/MAL-2025-29163/): Malicious code in photo-compare-sort (npm) (malicious package)
- [MAL-2025-29162](https://insights.sbomify.com/MAL-2025-29162/): Malicious code in phoneverify (npm) (malicious package)
- [MAL-2025-29161](https://insights.sbomify.com/MAL-2025-29161/): Malicious code in phonesite (npm) (malicious package)
- [MAL-2025-29160](https://insights.sbomify.com/MAL-2025-29160/): Malicious code in phonenews (npm) (malicious package)
- [MAL-2025-2916](https://insights.sbomify.com/MAL-2025-2916/): Malicious code in wdpr-ra-hybrid-content-router (npm) (malicious package)
- [MAL-2025-29159](https://insights.sbomify.com/MAL-2025-29159/): Malicious code in phonegsm (npm) (malicious package)
- [MAL-2025-29158](https://insights.sbomify.com/MAL-2025-29158/): Malicious code in phonecard (npm) (malicious package)
- [MAL-2025-29157](https://insights.sbomify.com/MAL-2025-29157/): Malicious code in phone-scrape-dll (npm) (malicious package)
- [MAL-2025-29156](https://insights.sbomify.com/MAL-2025-29156/): Malicious code in phoenix_zxyd4_7lgow_legend (npm) (malicious package)
- [MAL-2025-29155](https://insights.sbomify.com/MAL-2025-29155/): Malicious code in phoenix_x7hbk_zkvio_voyage (npm) (malicious package)
- [MAL-2025-29154](https://insights.sbomify.com/MAL-2025-29154/): Malicious code in phoenix_t7k18_aenn0_bluebird (npm) (malicious package)
- [MAL-2025-29153](https://insights.sbomify.com/MAL-2025-29153/): Malicious code in phoenix_ioqox_ifetj_mystic (npm) (malicious package)
- [MAL-2025-29152](https://insights.sbomify.com/MAL-2025-29152/): Malicious code in phoenix_imqa8_tw9mx_zodiac (npm) (malicious package)
- [MAL-2025-29151](https://insights.sbomify.com/MAL-2025-29151/): Malicious code in phoenix_bvn17_ewsrj_xenon (npm) (malicious package)
- [MAL-2025-29150](https://insights.sbomify.com/MAL-2025-29150/): Malicious code in phoenix_5xdaz_t7yg7_willow (npm) (malicious package)
- [MAL-2025-2915](https://insights.sbomify.com/MAL-2025-2915/): Malicious code in wdpr-ra-hybrid-cli (npm) (malicious package)
- [MAL-2025-29149](https://insights.sbomify.com/MAL-2025-29149/): Malicious code in phoenix_12qwt_11wmc_alchemy (npm) (malicious package)
- [MAL-2025-29148](https://insights.sbomify.com/MAL-2025-29148/): Malicious code in phoenix-xanadu-convict-nightmare (npm) (malicious package)
- [MAL-2025-29147](https://insights.sbomify.com/MAL-2025-29147/): Malicious code in phoenix-ogypz-nppof-nebula-project (npm) (malicious package)
- [MAL-2025-29146](https://insights.sbomify.com/MAL-2025-29146/): Malicious code in phoenix-fermion-markdownlint-holography (npm) (malicious package)
- [MAL-2025-29145](https://insights.sbomify.com/MAL-2025-29145/): Malicious code in phoebe-vega-commitlint-config-angular-lint (npm) (malicious package)
- [MAL-2025-29144](https://insights.sbomify.com/MAL-2025-29144/): Malicious code in phoebe-telesto-luna-farout (npm) (malicious package)
- [MAL-2025-29143](https://insights.sbomify.com/MAL-2025-29143/): Malicious code in phoebe-slidev-pegasus-auriga (npm) (malicious package)
- [MAL-2025-29142](https://insights.sbomify.com/MAL-2025-29142/): Malicious code in phoebe-relay-jwt-pino (npm) (malicious package)
- [MAL-2025-29141](https://insights.sbomify.com/MAL-2025-29141/): Malicious code in phoebe-postcss-style-loader-geomorphology (npm) (malicious package)
- [MAL-2025-29140](https://insights.sbomify.com/MAL-2025-29140/): Malicious code in phoebe-levels-xenon-darkenergy (npm) (malicious package)
- [MAL-2025-2914](https://insights.sbomify.com/MAL-2025-2914/): Malicious code in vultr-node (npm) (malicious package)
- [MAL-2025-29139](https://insights.sbomify.com/MAL-2025-29139/): Malicious code in phoebe-izar-oberon-mongodb (npm) (malicious package)
- [MAL-2025-29138](https://insights.sbomify.com/MAL-2025-29138/): Malicious code in phoebe-grus-semantic-ui-algol (npm) (malicious package)
- [MAL-2025-29137](https://insights.sbomify.com/MAL-2025-29137/): Malicious code in phoebe-eridanus-auriga-library (npm) (malicious package)
- [MAL-2025-29136](https://insights.sbomify.com/MAL-2025-29136/): Malicious code in phoebe-dotenv-safe-markdown-init (npm) (malicious package)
- [MAL-2025-29135](https://insights.sbomify.com/MAL-2025-29135/): Malicious code in phoebe-cryptography-betelgeuse-gacrux (npm) (malicious package)
- [MAL-2025-29134](https://insights.sbomify.com/MAL-2025-29134/): Malicious code in phoebe-cli-rigel-io (npm) (malicious package)
- [MAL-2025-29133](https://insights.sbomify.com/MAL-2025-29133/): Malicious code in phoebe-callback-cressida-resolvers (npm) (malicious package)
- [MAL-2025-29132](https://insights.sbomify.com/MAL-2025-29132/): Malicious code in phobia (npm) (malicious package)
- [MAL-2025-29131](https://insights.sbomify.com/MAL-2025-29131/): Malicious code in phixius-nacha-csp-service-api (npm) (malicious package)
- [MAL-2025-29130](https://insights.sbomify.com/MAL-2025-29130/): Malicious code in philistia (npm) (malicious package)
- [MAL-2025-2913](https://insights.sbomify.com/MAL-2025-2913/): Malicious code in vistar-ad-clientxxxxx (npm) (malicious package)
- [MAL-2025-29129](https://insights.sbomify.com/MAL-2025-29129/): Malicious code in philips-ui (npm) (malicious package)
- [MAL-2025-29128](https://insights.sbomify.com/MAL-2025-29128/): Malicious code in philcv (npm) (malicious package)
- [MAL-2025-29127](https://insights.sbomify.com/MAL-2025-29127/): Malicious code in phi3-webgpu (npm) (malicious package)
- [MAL-2025-29126](https://insights.sbomify.com/MAL-2025-29126/): Malicious code in phi-orchestrate-cron-hash-function (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/789/