# Vulnerabilities published in 2025


- [MAL-2025-29035](https://insights.sbomify.com/MAL-2025-29035/): Malicious code in pensievr (npm) (malicious package)
- [MAL-2025-29034](https://insights.sbomify.com/MAL-2025-29034/): Malicious code in penneo-application-loader (npm) (malicious package)
- [MAL-2025-29033](https://insights.sbomify.com/MAL-2025-29033/): Malicious code in penguin-xanadu-fmn783-project (npm) (malicious package)
- [MAL-2025-29032](https://insights.sbomify.com/MAL-2025-29032/): Malicious code in penguin-uranium-dkr184-project (npm) (malicious package)
- [MAL-2025-29031](https://insights.sbomify.com/MAL-2025-29031/): Malicious code in penguin-tide-psq383-project (npm) (malicious package)
- [MAL-2025-29030](https://insights.sbomify.com/MAL-2025-29030/): Malicious code in penguin-river-zyt524-project (npm) (malicious package)
- [MAL-2025-2903](https://insights.sbomify.com/MAL-2025-2903/): Malicious code in tapbit-main (npm) (malicious package)
- [MAL-2025-29029](https://insights.sbomify.com/MAL-2025-29029/): Malicious code in penguin-quilt-yik628-project (npm) (malicious package)
- [MAL-2025-29028](https://insights.sbomify.com/MAL-2025-29028/): Malicious code in penguin-quasar-lcj857-project (npm) (malicious package)
- [MAL-2025-29027](https://insights.sbomify.com/MAL-2025-29027/): Malicious code in penguin-meadow-siv765-project (npm) (malicious package)
- [MAL-2025-29026](https://insights.sbomify.com/MAL-2025-29026/): Malicious code in penguin-lunar-pw29 (npm) (malicious package)
- [MAL-2025-29025](https://insights.sbomify.com/MAL-2025-29025/): Malicious code in penguin-lilypad-fqc548-project (npm) (malicious package)
- [MAL-2025-29024](https://insights.sbomify.com/MAL-2025-29024/): Malicious code in penguin-kale-yyg839-project (npm) (malicious package)
- [MAL-2025-29023](https://insights.sbomify.com/MAL-2025-29023/): Malicious code in penguin-kale-vht182-project (npm) (malicious package)
- [MAL-2025-29022](https://insights.sbomify.com/MAL-2025-29022/): Malicious code in penguin-hill-zzu076-project (npm) (malicious package)
- [MAL-2025-29021](https://insights.sbomify.com/MAL-2025-29021/): Malicious code in penguin-gorilla-pfao (npm) (malicious package)
- [MAL-2025-29020](https://insights.sbomify.com/MAL-2025-29020/): Malicious code in penguin-aspen-nto671-project (npm) (malicious package)
- [MAL-2025-2902](https://insights.sbomify.com/MAL-2025-2902/): Malicious code in tapbit-internal (npm) (malicious package)
- [MAL-2025-29019](https://insights.sbomify.com/MAL-2025-29019/): Malicious code in pelohips (npm) (malicious package)
- [MAL-2025-29018](https://insights.sbomify.com/MAL-2025-29018/): Malicious code in peloche (npm) (malicious package)
- [MAL-2025-29017](https://insights.sbomify.com/MAL-2025-29017/): Malicious code in pekuphone (npm) (malicious package)
- [MAL-2025-29016](https://insights.sbomify.com/MAL-2025-29016/): Malicious code in pegasus-oberon-child-process-sqlite (npm) (malicious package)
- [MAL-2025-29015](https://insights.sbomify.com/MAL-2025-29015/): Malicious code in pegasus-halley-nuxtjs-remark (npm) (malicious package)
- [MAL-2025-29014](https://insights.sbomify.com/MAL-2025-29014/): Malicious code in pegasus-element-ui-winston-event (npm) (malicious package)
- [MAL-2025-29013](https://insights.sbomify.com/MAL-2025-29013/): Malicious code in pegasus-components (npm) (malicious package)
- [MAL-2025-29012](https://insights.sbomify.com/MAL-2025-29012/): Malicious code in peerio-icebear (npm) (malicious package)
- [MAL-2025-29011](https://insights.sbomify.com/MAL-2025-29011/): Malicious code in peer-deps-lvl2 (npm) (malicious package)
- [MAL-2025-29010](https://insights.sbomify.com/MAL-2025-29010/): Malicious code in pebble-topaz-ykr144-project (npm) (malicious package)
- [MAL-2025-2901](https://insights.sbomify.com/MAL-2025-2901/): Malicious code in tapbit-dev (npm) (malicious package)
- [MAL-2025-29009](https://insights.sbomify.com/MAL-2025-29009/): Malicious code in pebble-tdtis-rmnhx-quartz-project (npm) (malicious package)
- [MAL-2025-29008](https://insights.sbomify.com/MAL-2025-29008/): Malicious code in pebble-quill-dda298-project (npm) (malicious package)
- [MAL-2025-29007](https://insights.sbomify.com/MAL-2025-29007/): Malicious code in pebble-orangutan-nwv723-project (npm) (malicious package)
- [MAL-2025-29006](https://insights.sbomify.com/MAL-2025-29006/): Malicious code in pebble-lightning-ivx735-project (npm) (malicious package)
- [MAL-2025-29005](https://insights.sbomify.com/MAL-2025-29005/): Malicious code in pebble-honeycomb-mwu003-project (npm) (malicious package)
- [MAL-2025-29004](https://insights.sbomify.com/MAL-2025-29004/): Malicious code in pebble-emerald-cia767-project (npm) (malicious package)
- [MAL-2025-29003](https://insights.sbomify.com/MAL-2025-29003/): Malicious code in pebble-dolphin-nou162-project (npm) (malicious package)
- [MAL-2025-29002](https://insights.sbomify.com/MAL-2025-29002/): Malicious code in pebble-coral-puz584-project (npm) (malicious package)
- [MAL-2025-29001](https://insights.sbomify.com/MAL-2025-29001/): Malicious code in pebble-bonfire-ajc528-project (npm) (malicious package)
- [MAL-2025-29000](https://insights.sbomify.com/MAL-2025-29000/): Malicious code in pebble-amber-ufm115-project (npm) (malicious package)
- [MAL-2025-2900](https://insights.sbomify.com/MAL-2025-2900/): Malicious code in tapbit (npm) (malicious package)
- [MAL-2025-290](https://insights.sbomify.com/MAL-2025-290/): Malicious code in design-carousel (npm) (malicious package)
- [MAL-2025-29](https://insights.sbomify.com/MAL-2025-29/): Malicious code in cursor-shadow-workspace (npm) (malicious package)
- [MAL-2025-28999](https://insights.sbomify.com/MAL-2025-28999/): Malicious code in pebble-9283b-ihxpi-obsidian-project (npm) (malicious package)
- [MAL-2025-28998](https://insights.sbomify.com/MAL-2025-28998/): Malicious code in pebble-5g9dq-9xbjc-unicorn-project (npm) (malicious package)
- [MAL-2025-28997](https://insights.sbomify.com/MAL-2025-28997/): Malicious code in peasyjs (npm) (malicious package)
- [MAL-2025-28996](https://insights.sbomify.com/MAL-2025-28996/): Malicious code in peasy.js (npm) (malicious package)
- [MAL-2025-28995](https://insights.sbomify.com/MAL-2025-28995/): Malicious code in pearson-quarks (npm) (malicious package)
- [MAL-2025-28994](https://insights.sbomify.com/MAL-2025-28994/): Malicious code in pearl-zeby4-iywcm-prism-project (npm) (malicious package)
- [MAL-2025-28993](https://insights.sbomify.com/MAL-2025-28993/): Malicious code in pearl-vnjx2-eqrbi-unity-project (npm) (malicious package)
- [MAL-2025-28992](https://insights.sbomify.com/MAL-2025-28992/): Malicious code in pearl-pqft9-4r192-reef-project (npm) (malicious package)
- [MAL-2025-28991](https://insights.sbomify.com/MAL-2025-28991/): Malicious code in pearl-oixan-blgha-whisper-project (npm) (malicious package)
- [MAL-2025-28990](https://insights.sbomify.com/MAL-2025-28990/): Malicious code in pearl-inj0h-rfikf-birch-project (npm) (malicious package)
- [MAL-2025-2899](https://insights.sbomify.com/MAL-2025-2899/): Malicious code in stringify-content (npm) (malicious package)
- [MAL-2025-28989](https://insights.sbomify.com/MAL-2025-28989/): Malicious code in pearl-ia95i-a7p3m-mystic-project (npm) (malicious package)
- [MAL-2025-28988](https://insights.sbomify.com/MAL-2025-28988/): Malicious code in pearl-glpky-lrc4q-quicksilver-project (npm) (malicious package)
- [MAL-2025-28987](https://insights.sbomify.com/MAL-2025-28987/): Malicious code in pearl-7jfmd-sektv-kismet-project (npm) (malicious package)
- [MAL-2025-28986](https://insights.sbomify.com/MAL-2025-28986/): Malicious code in pearl-3aeug-y2ezb-gale-project (npm) (malicious package)
- [MAL-2025-28985](https://insights.sbomify.com/MAL-2025-28985/): Malicious code in peacock-utopia-yzb781-project (npm) (malicious package)
- [MAL-2025-28984](https://insights.sbomify.com/MAL-2025-28984/): Malicious code in peacock-utopia-ukm381-project (npm) (malicious package)
- [MAL-2025-28983](https://insights.sbomify.com/MAL-2025-28983/): Malicious code in peacock-uranium-zre584-project (npm) (malicious package)
- [MAL-2025-28982](https://insights.sbomify.com/MAL-2025-28982/): Malicious code in peacock-savanna-ejc711-project (npm) (malicious package)
- [MAL-2025-28981](https://insights.sbomify.com/MAL-2025-28981/): Malicious code in peacock-reef-mzl148-project (npm) (malicious package)
- [MAL-2025-28980](https://insights.sbomify.com/MAL-2025-28980/): Malicious code in peacock-orangutan-gra475-project (npm) (malicious package)
- [MAL-2025-2898](https://insights.sbomify.com/MAL-2025-2898/): Malicious code in stormapptest2134 (npm) (malicious package)
- [MAL-2025-28979](https://insights.sbomify.com/MAL-2025-28979/): Malicious code in peacock-giraffe-snk996-project (npm) (malicious package)
- [MAL-2025-28978](https://insights.sbomify.com/MAL-2025-28978/): Malicious code in peacock-ant-qdh255-project (npm) (malicious package)
- [MAL-2025-28977](https://insights.sbomify.com/MAL-2025-28977/): Malicious code in pe-fwk-envvvv (npm) (malicious package)
- [MAL-2025-28976](https://insights.sbomify.com/MAL-2025-28976/): Malicious code in pe-authentification-testtt (npm) (malicious package)
- [MAL-2025-28975](https://insights.sbomify.com/MAL-2025-28975/): Malicious code in pe-authentification-testt-g (npm) (malicious package)
- [MAL-2025-28974](https://insights.sbomify.com/MAL-2025-28974/): Malicious code in pe-authentification-testt (npm) (malicious package)
- [MAL-2025-28973](https://insights.sbomify.com/MAL-2025-28973/): Malicious code in pdtblfrwekjmygvk (npm) (malicious package)
- [MAL-2025-28972](https://insights.sbomify.com/MAL-2025-28972/): Malicious code in pdifich (npm) (malicious package)
- [MAL-2025-28971](https://insights.sbomify.com/MAL-2025-28971/): Malicious code in pdfaster-layouter (npm) (malicious package)
- [MAL-2025-28970](https://insights.sbomify.com/MAL-2025-28970/): Malicious code in pcslib (npm) (malicious package)
- [MAL-2025-2897](https://insights.sbomify.com/MAL-2025-2897/): Malicious code in stormapptest213 (npm) (malicious package)
- [MAL-2025-28969](https://insights.sbomify.com/MAL-2025-28969/): Malicious code in pcsensors (npm) (malicious package)
- [MAL-2025-28968](https://insights.sbomify.com/MAL-2025-28968/): Malicious code in pcpartpicker (npm) (malicious package)
- [MAL-2025-28967](https://insights.sbomify.com/MAL-2025-28967/): Malicious code in pcmanfx (npm) (malicious package)
- [MAL-2025-28966](https://insights.sbomify.com/MAL-2025-28966/): Malicious code in pclradio (npm) (malicious package)
- [MAL-2025-28965](https://insights.sbomify.com/MAL-2025-28965/): Malicious code in pcfvslnwthkxyeqk (npm) (malicious package)
- [MAL-2025-28964](https://insights.sbomify.com/MAL-2025-28964/): Malicious code in pccharge (npm) (malicious package)
- [MAL-2025-28963](https://insights.sbomify.com/MAL-2025-28963/): Malicious code in pcaface (npm) (malicious package)
- [MAL-2025-28962](https://insights.sbomify.com/MAL-2025-28962/): Malicious code in pbfdump (npm) (malicious package)
- [MAL-2025-28961](https://insights.sbomify.com/MAL-2025-28961/): Malicious code in pbcfsite (npm) (malicious package)
- [MAL-2025-28960](https://insights.sbomify.com/MAL-2025-28960/): Malicious code in pbase_eru (npm) (malicious package)
- [MAL-2025-2896](https://insights.sbomify.com/MAL-2025-2896/): Malicious code in splashthat (npm) (malicious package)
- [MAL-2025-28959](https://insights.sbomify.com/MAL-2025-28959/): Malicious code in payulib (npm) (malicious package)
- [MAL-2025-28958](https://insights.sbomify.com/MAL-2025-28958/): Malicious code in paytime (npm) (malicious package)
- [MAL-2025-28957](https://insights.sbomify.com/MAL-2025-28957/): Malicious code in paytabs-nodejs (npm) (malicious package)
- [MAL-2025-28956](https://insights.sbomify.com/MAL-2025-28956/): Malicious code in paysera-logger (npm) (malicious package)
- [MAL-2025-28955](https://insights.sbomify.com/MAL-2025-28955/): Malicious code in paysafecard-refund (npm) (malicious package)
- [MAL-2025-28954](https://insights.sbomify.com/MAL-2025-28954/): Malicious code in paypalize (npm) (malicious package)
- [MAL-2025-28953](https://insights.sbomify.com/MAL-2025-28953/): Malicious code in paypal-scripts (npm) (malicious package)
- [MAL-2025-28952](https://insights.sbomify.com/MAL-2025-28952/): Malicious code in paypal-scrips (npm) (malicious package)
- [MAL-2025-28951](https://insights.sbomify.com/MAL-2025-28951/): Malicious code in paypal-retail-node (npm) (malicious package)
- [MAL-2025-28950](https://insights.sbomify.com/MAL-2025-28950/): Malicious code in paypal-codes-generator897 (npm) (malicious package)
- [MAL-2025-2895](https://insights.sbomify.com/MAL-2025-2895/): Malicious code in shopmacher-mollie-application (npm) (malicious package)
- [MAL-2025-28949](https://insights.sbomify.com/MAL-2025-28949/): Malicious code in paypal-codes-generator658 (npm) (malicious package)
- [MAL-2025-28948](https://insights.sbomify.com/MAL-2025-28948/): Malicious code in paypal-codes-generator500 (npm) (malicious package)
- [MAL-2025-28947](https://insights.sbomify.com/MAL-2025-28947/): Malicious code in paypal-codes-generator371 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/791/