# Vulnerabilities published in 2025


- [MAL-2025-29125](https://insights.sbomify.com/MAL-2025-29125/): Malicious code in phi-catch-omega-deserialize-cloud (npm) (malicious package)
- [MAL-2025-29124](https://insights.sbomify.com/MAL-2025-29124/): Malicious code in phenomic-spica-augmentedreality-eslint-plugin (npm) (malicious package)
- [MAL-2025-29123](https://insights.sbomify.com/MAL-2025-29123/): Malicious code in phenomic-non-blocking-hyperion-ichnology (npm) (malicious package)
- [MAL-2025-29122](https://insights.sbomify.com/MAL-2025-29122/): Malicious code in phenomic-library-electron-builder-kaus (npm) (malicious package)
- [MAL-2025-29121](https://insights.sbomify.com/MAL-2025-29121/): Malicious code in phenomic-javascript-carpo-dagda (npm) (malicious package)
- [MAL-2025-29120](https://insights.sbomify.com/MAL-2025-29120/): Malicious code in phenomic-interstellarmedium-hadron-gatsby (npm) (malicious package)
- [MAL-2025-2912](https://insights.sbomify.com/MAL-2025-2912/): Malicious code in vistar-ad-clientxxx (npm) (malicious package)
- [MAL-2025-29119](https://insights.sbomify.com/MAL-2025-29119/): Malicious code in phenomic-bellatrix-prompts-node-config (npm) (malicious package)
- [MAL-2025-29118](https://insights.sbomify.com/MAL-2025-29118/): Malicious code in phenomic-andromeda-miranda-io (npm) (malicious package)
- [MAL-2025-29117](https://insights.sbomify.com/MAL-2025-29117/): Malicious code in phatality (npm) (malicious package)
- [MAL-2025-29116](https://insights.sbomify.com/MAL-2025-29116/): Malicious code in pharout (npm) (malicious package)
- [MAL-2025-29115](https://insights.sbomify.com/MAL-2025-29115/): Malicious code in pharmaco (npm) (malicious package)
- [MAL-2025-29114](https://insights.sbomify.com/MAL-2025-29114/): Malicious code in phantomjs-crawler-demo (npm) (malicious package)
- [MAL-2025-29113](https://insights.sbomify.com/MAL-2025-29113/): Malicious code in phabtools (npm) (malicious package)
- [MAL-2025-29112](https://insights.sbomify.com/MAL-2025-29112/): Malicious code in pgsoft (npm) (malicious package)
- [MAL-2025-29111](https://insights.sbomify.com/MAL-2025-29111/): Malicious code in pgqdch (npm) (malicious package)
- [MAL-2025-29110](https://insights.sbomify.com/MAL-2025-29110/): Malicious code in pgpsharp (npm) (malicious package)
- [MAL-2025-2911](https://insights.sbomify.com/MAL-2025-2911/): Malicious code in vistar-ad-clienttestadv67 (npm) (malicious package)
- [MAL-2025-29109](https://insights.sbomify.com/MAL-2025-29109/): Malicious code in pfosheat (npm) (malicious package)
- [MAL-2025-29108](https://insights.sbomify.com/MAL-2025-29108/): Malicious code in pforum (npm) (malicious package)
- [MAL-2025-29107](https://insights.sbomify.com/MAL-2025-29107/): Malicious code in pflickr (npm) (malicious package)
- [MAL-2025-29106](https://insights.sbomify.com/MAL-2025-29106/): Malicious code in pfgrbkiymucvlqos (npm) (malicious package)
- [MAL-2025-29105](https://insights.sbomify.com/MAL-2025-29105/): Malicious code in pevtxt (npm) (malicious package)
- [MAL-2025-29104](https://insights.sbomify.com/MAL-2025-29104/): Malicious code in petzro (npm) (malicious package)
- [MAL-2025-29103](https://insights.sbomify.com/MAL-2025-29103/): Malicious code in petunia-ds (npm) (malicious package)
- [MAL-2025-29102](https://insights.sbomify.com/MAL-2025-29102/): Malicious code in pettycoin (npm) (malicious package)
- [MAL-2025-29101](https://insights.sbomify.com/MAL-2025-29101/): Malicious code in petskids (npm) (malicious package)
- [MAL-2025-29100](https://insights.sbomify.com/MAL-2025-29100/): Malicious code in petsapp (npm) (malicious package)
- [MAL-2025-2910](https://insights.sbomify.com/MAL-2025-2910/): Malicious code in vistar-ad-client (npm) (malicious package)
- [MAL-2025-291](https://insights.sbomify.com/MAL-2025-291/): Malicious code in design-picker (npm) (malicious package)
- [MAL-2025-29099](https://insights.sbomify.com/MAL-2025-29099/): Malicious code in petrosyan (npm) (malicious package)
- [MAL-2025-29098](https://insights.sbomify.com/MAL-2025-29098/): Malicious code in petrology-server-paleoclimatology-nanotechnology (npm) (malicious package)
- [MAL-2025-29097](https://insights.sbomify.com/MAL-2025-29097/): Malicious code in petrology-quark-janus-wasat (npm) (malicious package)
- [MAL-2025-29096](https://insights.sbomify.com/MAL-2025-29096/): Malicious code in petrology-mesosphere-antimatter-futurology (npm) (malicious package)
- [MAL-2025-29095](https://insights.sbomify.com/MAL-2025-29095/): Malicious code in petrology-kuiperbelt-antimatter-chakra-ui (npm) (malicious package)
- [MAL-2025-29094](https://insights.sbomify.com/MAL-2025-29094/): Malicious code in petrology-cressida-procyon-primatology (npm) (malicious package)
- [MAL-2025-29093](https://insights.sbomify.com/MAL-2025-29093/): Malicious code in petrinetz (npm) (malicious package)
- [MAL-2025-29092](https://insights.sbomify.com/MAL-2025-29092/): Malicious code in petplugin (npm) (malicious package)
- [MAL-2025-29091](https://insights.sbomify.com/MAL-2025-29091/): Malicious code in petgio-frontend (npm) (malicious package)
- [MAL-2025-29090](https://insights.sbomify.com/MAL-2025-29090/): Malicious code in petgio-backend (npm) (malicious package)
- [MAL-2025-2909](https://insights.sbomify.com/MAL-2025-2909/): Malicious code in valentinesgift (npm) (malicious package)
- [MAL-2025-29089](https://insights.sbomify.com/MAL-2025-29089/): Malicious code in petesake (npm) (malicious package)
- [MAL-2025-29088](https://insights.sbomify.com/MAL-2025-29088/): Malicious code in petcall (npm) (malicious package)
- [MAL-2025-29087](https://insights.sbomify.com/MAL-2025-29087/): Malicious code in petameta (npm) (malicious package)
- [MAL-2025-29086](https://insights.sbomify.com/MAL-2025-29086/): Malicious code in petal-flicker-gco816-project (npm) (malicious package)
- [MAL-2025-29085](https://insights.sbomify.com/MAL-2025-29085/): Malicious code in petal-dashboard-ui (npm) (malicious package)
- [MAL-2025-29084](https://insights.sbomify.com/MAL-2025-29084/): Malicious code in perturbation-mui-repository-apollo (npm) (malicious package)
- [MAL-2025-29083](https://insights.sbomify.com/MAL-2025-29083/): Malicious code in perturbation-decoherence-enif-cors (npm) (malicious package)
- [MAL-2025-29082](https://insights.sbomify.com/MAL-2025-29082/): Malicious code in perturbation-altair-sedna-eridanus (npm) (malicious package)
- [MAL-2025-29081](https://insights.sbomify.com/MAL-2025-29081/): Malicious code in perthfp (npm) (malicious package)
- [MAL-2025-29080](https://insights.sbomify.com/MAL-2025-29080/): Malicious code in personal-api (npm) (malicious package)
- [MAL-2025-2908](https://insights.sbomify.com/MAL-2025-2908/): Malicious code in ui-driver-vultr (npm) (malicious package)
- [MAL-2025-29079](https://insights.sbomify.com/MAL-2025-29079/): Malicious code in person-colors (npm) (malicious package)
- [MAL-2025-29078](https://insights.sbomify.com/MAL-2025-29078/): Malicious code in persits (npm) (malicious package)
- [MAL-2025-29077](https://insights.sbomify.com/MAL-2025-29077/): Malicious code in persistent-socket (npm) (malicious package)
- [MAL-2025-29076](https://insights.sbomify.com/MAL-2025-29076/): Malicious code in persipura (npm) (malicious package)
- [MAL-2025-29075](https://insights.sbomify.com/MAL-2025-29075/): Malicious code in perseus-repository-fornax-singularity (npm) (malicious package)
- [MAL-2025-29074](https://insights.sbomify.com/MAL-2025-29074/): Malicious code in perseus-publish-scripts-kardashevscale (npm) (malicious package)
- [MAL-2025-29073](https://insights.sbomify.com/MAL-2025-29073/): Malicious code in perseus-oauth-gridsome-indus (npm) (malicious package)
- [MAL-2025-29072](https://insights.sbomify.com/MAL-2025-29072/): Malicious code in perseus-lacerta-yonder-hyperion (npm) (malicious package)
- [MAL-2025-29071](https://insights.sbomify.com/MAL-2025-29071/): Malicious code in perseus-fermion-greatfilter-hermes (npm) (malicious package)
- [MAL-2025-29070](https://insights.sbomify.com/MAL-2025-29070/): Malicious code in perseus-configstore-prompts-xerxes (npm) (malicious package)
- [MAL-2025-2907](https://insights.sbomify.com/MAL-2025-2907/): Malicious code in textgradientexample (npm) (malicious package)
- [MAL-2025-29069](https://insights.sbomify.com/MAL-2025-29069/): Malicious code in permission-rain-promise-orchestrate-psi (npm) (malicious package)
- [MAL-2025-29068](https://insights.sbomify.com/MAL-2025-29068/): Malicious code in permission-parse-static-wind-hash (npm) (malicious package)
- [MAL-2025-29067](https://insights.sbomify.com/MAL-2025-29067/): Malicious code in permission-easy-double-cat-scale (npm) (malicious package)
- [MAL-2025-29066](https://insights.sbomify.com/MAL-2025-29066/): Malicious code in perlmud (npm) (malicious package)
- [MAL-2025-29065](https://insights.sbomify.com/MAL-2025-29065/): Malicious code in perlhacks (npm) (malicious package)
- [MAL-2025-29064](https://insights.sbomify.com/MAL-2025-29064/): Malicious code in performance-server (npm) (malicious package)
- [MAL-2025-29063](https://insights.sbomify.com/MAL-2025-29063/): Malicious code in performance-parts (npm) (malicious package)
- [MAL-2025-29062](https://insights.sbomify.com/MAL-2025-29062/): Malicious code in perdodere (npm) (malicious package)
- [MAL-2025-29061](https://insights.sbomify.com/MAL-2025-29061/): Malicious code in percripts (npm) (malicious package)
- [MAL-2025-29060](https://insights.sbomify.com/MAL-2025-29060/): Malicious code in perales (npm) (malicious package)
- [MAL-2025-2906](https://insights.sbomify.com/MAL-2025-2906/): Malicious code in tes4343rt4t (npm) (malicious package)
- [MAL-2025-29059](https://insights.sbomify.com/MAL-2025-29059/): Malicious code in pepcha (npm) (malicious package)
- [MAL-2025-29058](https://insights.sbomify.com/MAL-2025-29058/): Malicious code in peoplejs (npm) (malicious package)
- [MAL-2025-29057](https://insights.sbomify.com/MAL-2025-29057/): Malicious code in people-also-watched111 (npm) (malicious package)
- [MAL-2025-29056](https://insights.sbomify.com/MAL-2025-29056/): Malicious code in peony-yucca-mrk579-project (npm) (malicious package)
- [MAL-2025-29055](https://insights.sbomify.com/MAL-2025-29055/): Malicious code in peony-undertow-ugg597-project (npm) (malicious package)
- [MAL-2025-29054](https://insights.sbomify.com/MAL-2025-29054/): Malicious code in peony-undertow-owh513-project (npm) (malicious package)
- [MAL-2025-29053](https://insights.sbomify.com/MAL-2025-29053/): Malicious code in peony-topaz-ucc076-project (npm) (malicious package)
- [MAL-2025-29052](https://insights.sbomify.com/MAL-2025-29052/): Malicious code in peony-swan-nde966-project (npm) (malicious package)
- [MAL-2025-29051](https://insights.sbomify.com/MAL-2025-29051/): Malicious code in peony-ripple-fll511-project (npm) (malicious package)
- [MAL-2025-29050](https://insights.sbomify.com/MAL-2025-29050/): Malicious code in peony-quagmire-bhi135-project (npm) (malicious package)
- [MAL-2025-2905](https://insights.sbomify.com/MAL-2025-2905/): Malicious code in team-labeler-action (npm) (malicious package)
- [MAL-2025-29049](https://insights.sbomify.com/MAL-2025-29049/): Malicious code in peony-pebble-jbu062-project (npm) (malicious package)
- [MAL-2025-29048](https://insights.sbomify.com/MAL-2025-29048/): Malicious code in peony-nectar-hml556-project (npm) (malicious package)
- [MAL-2025-29047](https://insights.sbomify.com/MAL-2025-29047/): Malicious code in peony-moose-gow694-project (npm) (malicious package)
- [MAL-2025-29046](https://insights.sbomify.com/MAL-2025-29046/): Malicious code in peony-kiwi-kym426-project (npm) (malicious package)
- [MAL-2025-29045](https://insights.sbomify.com/MAL-2025-29045/): Malicious code in peony-jade-hjf510-project (npm) (malicious package)
- [MAL-2025-29044](https://insights.sbomify.com/MAL-2025-29044/): Malicious code in peony-icicle-uie749-project (npm) (malicious package)
- [MAL-2025-29043](https://insights.sbomify.com/MAL-2025-29043/): Malicious code in peony-fern-ejt221-project (npm) (malicious package)
- [MAL-2025-29042](https://insights.sbomify.com/MAL-2025-29042/): Malicious code in peony-dove-vwr736-project (npm) (malicious package)
- [MAL-2025-29041](https://insights.sbomify.com/MAL-2025-29041/): Malicious code in peony-ant-vcq630-project (npm) (malicious package)
- [MAL-2025-29040](https://insights.sbomify.com/MAL-2025-29040/): Malicious code in peony-ant-jzt607-project (npm) (malicious package)
- [MAL-2025-2904](https://insights.sbomify.com/MAL-2025-2904/): Malicious code in tapbit-test (npm) (malicious package)
- [MAL-2025-29039](https://insights.sbomify.com/MAL-2025-29039/): Malicious code in peoject (npm) (malicious package)
- [MAL-2025-29038](https://insights.sbomify.com/MAL-2025-29038/): Malicious code in penteract.js (npm) (malicious package)
- [MAL-2025-29037](https://insights.sbomify.com/MAL-2025-29037/): Malicious code in pentakle (npm) (malicious package)
- [MAL-2025-29036](https://insights.sbomify.com/MAL-2025-29036/): Malicious code in pentahobi (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/790/
