# Vulnerabilities published in 2025


- [MAL-2025-28946](https://insights.sbomify.com/MAL-2025-28946/): Malicious code in paypal-codes-generator071 (npm) (malicious package)
- [MAL-2025-28945](https://insights.sbomify.com/MAL-2025-28945/): Malicious code in payments-quickstart (npm) (malicious package)
- [MAL-2025-28944](https://insights.sbomify.com/MAL-2025-28944/): Malicious code in payment_service_client (npm) (malicious package)
- [MAL-2025-28943](https://insights.sbomify.com/MAL-2025-28943/): Malicious code in payment-methods-component (npm) (malicious package)
- [MAL-2025-28942](https://insights.sbomify.com/MAL-2025-28942/): Malicious code in paymaya-payment-js-sdk (npm) (malicious package)
- [MAL-2025-28941](https://insights.sbomify.com/MAL-2025-28941/): Malicious code in paycryptor (npm) (malicious package)
- [MAL-2025-28940](https://insights.sbomify.com/MAL-2025-28940/): Malicious code in paychex_app_company_legacy_dtos (npm) (malicious package)
- [MAL-2025-2894](https://insights.sbomify.com/MAL-2025-2894/): Malicious code in secureshield3 (npm) (malicious package)
- [MAL-2025-28939](https://insights.sbomify.com/MAL-2025-28939/): Malicious code in paychex-tracking (npm) (malicious package)
- [MAL-2025-28938](https://insights.sbomify.com/MAL-2025-28938/): Malicious code in paychex-grunt-configs (npm) (malicious package)
- [MAL-2025-28937](https://insights.sbomify.com/MAL-2025-28937/): Malicious code in paychex-framework-forms (npm) (malicious package)
- [MAL-2025-28936](https://insights.sbomify.com/MAL-2025-28936/): Malicious code in paychex-framework-core-ui (npm) (malicious package)
- [MAL-2025-28935](https://insights.sbomify.com/MAL-2025-28935/): Malicious code in paychex-framework-approvals (npm) (malicious package)
- [MAL-2025-28934](https://insights.sbomify.com/MAL-2025-28934/): Malicious code in paychex-framework (npm) (malicious package)
- [MAL-2025-28933](https://insights.sbomify.com/MAL-2025-28933/): Malicious code in paychex-common-npm (npm) (malicious package)
- [MAL-2025-28932](https://insights.sbomify.com/MAL-2025-28932/): Malicious code in paychex-app-common-html (npm) (malicious package)
- [MAL-2025-28931](https://insights.sbomify.com/MAL-2025-28931/): Malicious code in paybill-ui (npm) (malicious package)
- [MAL-2025-28930](https://insights.sbomify.com/MAL-2025-28930/): Malicious code in pay-flexible-kit (npm) (malicious package)
- [MAL-2025-2893](https://insights.sbomify.com/MAL-2025-2893/): Malicious code in secureshield2 (npm) (malicious package)
- [MAL-2025-28929](https://insights.sbomify.com/MAL-2025-28929/): Malicious code in pavo-sqlite-process-pyxis (npm) (malicious package)
- [MAL-2025-28928](https://insights.sbomify.com/MAL-2025-28928/): Malicious code in pavo-npm-carina-antd (npm) (malicious package)
- [MAL-2025-28927](https://insights.sbomify.com/MAL-2025-28927/): Malicious code in pavo-init-sass-loader-nodejs (npm) (malicious package)
- [MAL-2025-28926](https://insights.sbomify.com/MAL-2025-28926/): Malicious code in pavo-cybernetics-subduction-capella (npm) (malicious package)
- [MAL-2025-28925](https://insights.sbomify.com/MAL-2025-28925/): Malicious code in pavo-algol-lynx-enceladus (npm) (malicious package)
- [MAL-2025-28924](https://insights.sbomify.com/MAL-2025-28924/): Malicious code in paviev (npm) (malicious package)
- [MAL-2025-28923](https://insights.sbomify.com/MAL-2025-28923/): Malicious code in pause-function (npm) (malicious package)
- [MAL-2025-28922](https://insights.sbomify.com/MAL-2025-28922/): Malicious code in paulville (npm) (malicious package)
- [MAL-2025-28921](https://insights.sbomify.com/MAL-2025-28921/): Malicious code in pattrec (npm) (malicious package)
- [MAL-2025-28920](https://insights.sbomify.com/MAL-2025-28920/): Malicious code in patternReplacer (npm) (malicious package)
- [MAL-2025-2892](https://insights.sbomify.com/MAL-2025-2892/): Malicious code in qs-appbar-menus (npm) (malicious package)
- [MAL-2025-28919](https://insights.sbomify.com/MAL-2025-28919/): Malicious code in patterngo (npm) (malicious package)
- [MAL-2025-28918](https://insights.sbomify.com/MAL-2025-28918/): Malicious code in pattern-watcher (npm) (malicious package)
- [MAL-2025-28917](https://insights.sbomify.com/MAL-2025-28917/): Malicious code in pattern-recognizer (npm) (malicious package)
- [MAL-2025-28916](https://insights.sbomify.com/MAL-2025-28916/): Malicious code in patria-tempe48-kuki (npm) (malicious package)
- [MAL-2025-28915](https://insights.sbomify.com/MAL-2025-28915/): Malicious code in patria-saguer9-breki (npm) (malicious package)
- [MAL-2025-28914](https://insights.sbomify.com/MAL-2025-28914/): Malicious code in patria-rangi21-sukiwir (npm) (malicious package)
- [MAL-2025-28913](https://insights.sbomify.com/MAL-2025-28913/): Malicious code in patria-nasicampur6-breki (npm) (malicious package)
- [MAL-2025-28912](https://insights.sbomify.com/MAL-2025-28912/): Malicious code in patria-menjes75-breki (npm) (malicious package)
- [MAL-2025-28911](https://insights.sbomify.com/MAL-2025-28911/): Malicious code in patria-lontong26-sukiwir (npm) (malicious package)
- [MAL-2025-28910](https://insights.sbomify.com/MAL-2025-28910/): Malicious code in patria-lengko41-breki (npm) (malicious package)
- [MAL-2025-2891](https://insights.sbomify.com/MAL-2025-2891/): Malicious code in post-comment (npm) (malicious package)
- [MAL-2025-28909](https://insights.sbomify.com/MAL-2025-28909/): Malicious code in patria-ketan39-sukiwir (npm) (malicious package)
- [MAL-2025-28908](https://insights.sbomify.com/MAL-2025-28908/): Malicious code in patria-empal18-kuki (npm) (malicious package)
- [MAL-2025-28907](https://insights.sbomify.com/MAL-2025-28907/): Malicious code in patois (npm) (malicious package)
- [MAL-2025-28906](https://insights.sbomify.com/MAL-2025-28906/): Malicious code in patfinder (npm) (malicious package)
- [MAL-2025-28905](https://insights.sbomify.com/MAL-2025-28905/): Malicious code in patavi (npm) (malicious package)
- [MAL-2025-28904](https://insights.sbomify.com/MAL-2025-28904/): Malicious code in pastad (npm) (malicious package)
- [MAL-2025-28903](https://insights.sbomify.com/MAL-2025-28903/): Malicious code in passport-sequelize (npm) (malicious package)
- [MAL-2025-28902](https://insights.sbomify.com/MAL-2025-28902/): Malicious code in passport-pino-pretty-prettier-stylelint-planetology (npm) (malicious package)
- [MAL-2025-28901](https://insights.sbomify.com/MAL-2025-28901/): Malicious code in passport-ibm-openidconnect (npm) (malicious package)
- [MAL-2025-28900](https://insights.sbomify.com/MAL-2025-28900/): Malicious code in passport-hmac-aws4 (npm) (malicious package)
- [MAL-2025-2890](https://insights.sbomify.com/MAL-2025-2890/): Malicious code in paypal-url-generator (npm) (malicious package)
- [MAL-2025-289](https://insights.sbomify.com/MAL-2025-289/): Malicious code in custom-colors-loader (npm) (malicious package)
- [MAL-2025-28899](https://insights.sbomify.com/MAL-2025-28899/): Malicious code in passport-draco-mesosphere-eslint (npm) (malicious package)
- [MAL-2025-28898](https://insights.sbomify.com/MAL-2025-28898/): Malicious code in passport-capsulecrm (npm) (malicious package)
- [MAL-2025-28897](https://insights.sbomify.com/MAL-2025-28897/): Malicious code in passmark-worker (npm) (malicious package)
- [MAL-2025-28896](https://insights.sbomify.com/MAL-2025-28896/): Malicious code in passaj (npm) (malicious package)
- [MAL-2025-28895](https://insights.sbomify.com/MAL-2025-28895/): Malicious code in pass-culture-pro (npm) (malicious package)
- [MAL-2025-28894](https://insights.sbomify.com/MAL-2025-28894/): Malicious code in pasquack (npm) (malicious package)
- [MAL-2025-28893](https://insights.sbomify.com/MAL-2025-28893/): Malicious code in pasnow (npm) (malicious package)
- [MAL-2025-28892](https://insights.sbomify.com/MAL-2025-28892/): Malicious code in pasinf (npm) (malicious package)
- [MAL-2025-28891](https://insights.sbomify.com/MAL-2025-28891/): Malicious code in partyprofileserv (npm) (malicious package)
- [MAL-2025-28890](https://insights.sbomify.com/MAL-2025-28890/): Malicious code in particlize (npm) (malicious package)
- [MAL-2025-2889](https://insights.sbomify.com/MAL-2025-2889/): Malicious code in paymentselection_web (npm) (malicious package)
- [MAL-2025-28889](https://insights.sbomify.com/MAL-2025-28889/): Malicious code in parssh (npm) (malicious package)
- [MAL-2025-28888](https://insights.sbomify.com/MAL-2025-28888/): Malicious code in parsoca (npm) (malicious package)
- [MAL-2025-28887](https://insights.sbomify.com/MAL-2025-28887/): Malicious code in parsnip-turnip-b7hk (npm) (malicious package)
- [MAL-2025-28886](https://insights.sbomify.com/MAL-2025-28886/): Malicious code in parsnip-hazel-s2jx (npm) (malicious package)
- [MAL-2025-28885](https://insights.sbomify.com/MAL-2025-28885/): Malicious code in parsedb (npm) (malicious package)
- [MAL-2025-28884](https://insights.sbomify.com/MAL-2025-28884/): Malicious code in parsec-exoplanet-kronos-hydra (npm) (malicious package)
- [MAL-2025-28883](https://insights.sbomify.com/MAL-2025-28883/): Malicious code in parseapns (npm) (malicious package)
- [MAL-2025-28882](https://insights.sbomify.com/MAL-2025-28882/): Malicious code in parse-unix-minify-balance-route (npm) (malicious package)
- [MAL-2025-28881](https://insights.sbomify.com/MAL-2025-28881/): Malicious code in parse-tree-array-function-decode (npm) (malicious package)
- [MAL-2025-28880](https://insights.sbomify.com/MAL-2025-28880/): Malicious code in parse-server-mailgunner (npm) (malicious package)
- [MAL-2025-2888](https://insights.sbomify.com/MAL-2025-2888/): Malicious code in passrdigitalportal (npm) (malicious package)
- [MAL-2025-28879](https://insights.sbomify.com/MAL-2025-28879/): Malicious code in parse-server-hotfix (npm) (malicious package)
- [MAL-2025-28878](https://insights.sbomify.com/MAL-2025-28878/): Malicious code in parse-safari-reading-list (npm) (malicious package)
- [MAL-2025-28877](https://insights.sbomify.com/MAL-2025-28877/): Malicious code in parse-react-next (npm) (malicious package)
- [MAL-2025-28876](https://insights.sbomify.com/MAL-2025-28876/): Malicious code in parse-async-theta-user-thread (npm) (malicious package)
- [MAL-2025-28875](https://insights.sbomify.com/MAL-2025-28875/): Malicious code in parmake (npm) (malicious package)
- [MAL-2025-28874](https://insights.sbomify.com/MAL-2025-28874/): Malicious code in parkthat (npm) (malicious package)
- [MAL-2025-28873](https://insights.sbomify.com/MAL-2025-28873/): Malicious code in parkly (npm) (malicious package)
- [MAL-2025-28872](https://insights.sbomify.com/MAL-2025-28872/): Malicious code in paredit (npm) (malicious package)
- [MAL-2025-28871](https://insights.sbomify.com/MAL-2025-28871/): Malicious code in parcel-stratosphere-epigenetics-achernar (npm) (malicious package)
- [MAL-2025-28870](https://insights.sbomify.com/MAL-2025-28870/): Malicious code in parcel-solarnebula-deneb-test (npm) (malicious package)
- [MAL-2025-2887](https://insights.sbomify.com/MAL-2025-2887/): Malicious code in lunasec-go-monorepo (npm) (malicious package)
- [MAL-2025-28869](https://insights.sbomify.com/MAL-2025-28869/): Malicious code in parcel-request-semantic-ui-webpack (npm) (malicious package)
- [MAL-2025-28868](https://insights.sbomify.com/MAL-2025-28868/): Malicious code in parcel-higgs-axios-charon (npm) (malicious package)
- [MAL-2025-28867](https://insights.sbomify.com/MAL-2025-28867/): Malicious code in param_sanitizer (npm) (malicious package)
- [MAL-2025-28866](https://insights.sbomify.com/MAL-2025-28866/): Malicious code in parallelly (npm) (malicious package)
- [MAL-2025-28865](https://insights.sbomify.com/MAL-2025-28865/): Malicious code in parallelc (npm) (malicious package)
- [MAL-2025-28864](https://insights.sbomify.com/MAL-2025-28864/): Malicious code in parallaxx (npm) (malicious package)
- [MAL-2025-28863](https://insights.sbomify.com/MAL-2025-28863/): Malicious code in parallax-writable-prettier-stylelint-hawkingradiation (npm) (malicious package)
- [MAL-2025-28862](https://insights.sbomify.com/MAL-2025-28862/): Malicious code in parallax-inquirer-mineralogy-triton (npm) (malicious package)
- [MAL-2025-28861](https://insights.sbomify.com/MAL-2025-28861/): Malicious code in parallax-hadron-mysql-galaxy (npm) (malicious package)
- [MAL-2025-28860](https://insights.sbomify.com/MAL-2025-28860/): Malicious code in parallax-browserify-event-inflation (npm) (malicious package)
- [MAL-2025-2886](https://insights.sbomify.com/MAL-2025-2886/): Malicious code in luckydoge3 (npm) (malicious package)
- [MAL-2025-28859](https://insights.sbomify.com/MAL-2025-28859/): Malicious code in paradise_zoa8c_q3ls4_dream (npm) (malicious package)
- [MAL-2025-28858](https://insights.sbomify.com/MAL-2025-28858/): Malicious code in paradise_ygvqn_nt521_iris (npm) (malicious package)
- [MAL-2025-28857](https://insights.sbomify.com/MAL-2025-28857/): Malicious code in paradise_w0wcx_mdc33_night (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/792/