# Vulnerabilities published in 2025


- [MAL-2025-28856](https://insights.sbomify.com/MAL-2025-28856/): Malicious code in paradise_uhw53_2zc9s_ember (npm) (malicious package)
- [MAL-2025-28855](https://insights.sbomify.com/MAL-2025-28855/): Malicious code in paradise_u6azd_7wnym_opal (npm) (malicious package)
- [MAL-2025-28854](https://insights.sbomify.com/MAL-2025-28854/): Malicious code in paradise_tfvf4_gyre0_night (npm) (malicious package)
- [MAL-2025-28853](https://insights.sbomify.com/MAL-2025-28853/): Malicious code in paradise_qj6tg_lsp04_obelisk (npm) (malicious package)
- [MAL-2025-28852](https://insights.sbomify.com/MAL-2025-28852/): Malicious code in paradise_mzgf7_v1nia_yarrow (npm) (malicious package)
- [MAL-2025-28851](https://insights.sbomify.com/MAL-2025-28851/): Malicious code in paradise_gi12m_9d0ij_ember (npm) (malicious package)
- [MAL-2025-28850](https://insights.sbomify.com/MAL-2025-28850/): Malicious code in paradise_2tjhb_nfhlo_illusion (npm) (malicious package)
- [MAL-2025-2885](https://insights.sbomify.com/MAL-2025-2885/): Malicious code in loggercompanyab57ty (npm) (malicious package)
- [MAL-2025-28849](https://insights.sbomify.com/MAL-2025-28849/): Malicious code in paradise-yak-inv992-project (npm) (malicious package)
- [MAL-2025-28848](https://insights.sbomify.com/MAL-2025-28848/): Malicious code in paradise-xerox-lht296-project (npm) (malicious package)
- [MAL-2025-28847](https://insights.sbomify.com/MAL-2025-28847/): Malicious code in paradise-waterfall-hpf054-project (npm) (malicious package)
- [MAL-2025-28846](https://insights.sbomify.com/MAL-2025-28846/): Malicious code in paradise-uranium-vgs908-project (npm) (malicious package)
- [MAL-2025-28845](https://insights.sbomify.com/MAL-2025-28845/): Malicious code in paradise-thunder-zdk827-project (npm) (malicious package)
- [MAL-2025-28844](https://insights.sbomify.com/MAL-2025-28844/): Malicious code in paradise-pbf6d-1i1g7-pearl-project (npm) (malicious package)
- [MAL-2025-28843](https://insights.sbomify.com/MAL-2025-28843/): Malicious code in paradise-ogok5-rh2h7-yarn-project (npm) (malicious package)
- [MAL-2025-28842](https://insights.sbomify.com/MAL-2025-28842/): Malicious code in paradise-mvmaj-g3olb-xenon-project (npm) (malicious package)
- [MAL-2025-28841](https://insights.sbomify.com/MAL-2025-28841/): Malicious code in paradise-ljzwv-eut86-verdure-project (npm) (malicious package)
- [MAL-2025-28840](https://insights.sbomify.com/MAL-2025-28840/): Malicious code in paradise-jasmine-zac596-project (npm) (malicious package)
- [MAL-2025-2884](https://insights.sbomify.com/MAL-2025-2884/): Malicious code in hibt-test (npm) (malicious package)
- [MAL-2025-28839](https://insights.sbomify.com/MAL-2025-28839/): Malicious code in paradise-igloo-dvo717-project (npm) (malicious package)
- [MAL-2025-28838](https://insights.sbomify.com/MAL-2025-28838/): Malicious code in paradise-i8ffj-11tpd-jungle-project (npm) (malicious package)
- [MAL-2025-28837](https://insights.sbomify.com/MAL-2025-28837/): Malicious code in paradise-hill-rot093-project (npm) (malicious package)
- [MAL-2025-28836](https://insights.sbomify.com/MAL-2025-28836/): Malicious code in paradise-glacier-gej400-project (npm) (malicious package)
- [MAL-2025-28835](https://insights.sbomify.com/MAL-2025-28835/): Malicious code in paradise-frost-qap735-project (npm) (malicious package)
- [MAL-2025-28834](https://insights.sbomify.com/MAL-2025-28834/): Malicious code in paradise-eagle-orm361-project (npm) (malicious package)
- [MAL-2025-28833](https://insights.sbomify.com/MAL-2025-28833/): Malicious code in paradise-c9t6j-ofm11-vortex-project (npm) (malicious package)
- [MAL-2025-28832](https://insights.sbomify.com/MAL-2025-28832/): Malicious code in paradise-butterfly-cjm016-project (npm) (malicious package)
- [MAL-2025-28831](https://insights.sbomify.com/MAL-2025-28831/): Malicious code in paradise-aspen-qrz729-project (npm) (malicious package)
- [MAL-2025-28830](https://insights.sbomify.com/MAL-2025-28830/): Malicious code in paradise-adbkf-if8u9-uplift-project (npm) (malicious package)
- [MAL-2025-2883](https://insights.sbomify.com/MAL-2025-2883/): Malicious code in hibt-main (npm) (malicious package)
- [MAL-2025-28829](https://insights.sbomify.com/MAL-2025-28829/): Malicious code in paradise-4lwyi-pxvtm-jasmine-project (npm) (malicious package)
- [MAL-2025-28828](https://insights.sbomify.com/MAL-2025-28828/): Malicious code in paradb (npm) (malicious package)
- [MAL-2025-28827](https://insights.sbomify.com/MAL-2025-28827/): Malicious code in paperlife (npm) (malicious package)
- [MAL-2025-28826](https://insights.sbomify.com/MAL-2025-28826/): Malicious code in paperclub (npm) (malicious package)
- [MAL-2025-28825](https://insights.sbomify.com/MAL-2025-28825/): Malicious code in papaya-zulu-lemon-igcug (npm) (malicious package)
- [MAL-2025-28824](https://insights.sbomify.com/MAL-2025-28824/): Malicious code in papaya-zucchini-ibmd (npm) (malicious package)
- [MAL-2025-28823](https://insights.sbomify.com/MAL-2025-28823/): Malicious code in papaya-yurt-6d2y (npm) (malicious package)
- [MAL-2025-28822](https://insights.sbomify.com/MAL-2025-28822/): Malicious code in papaya-yam-honeydew-kqqgq (npm) (malicious package)
- [MAL-2025-28821](https://insights.sbomify.com/MAL-2025-28821/): Malicious code in papaya-xray-yam-jjwuk (npm) (malicious package)
- [MAL-2025-28820](https://insights.sbomify.com/MAL-2025-28820/): Malicious code in papaya-xigua-gjep (npm) (malicious package)
- [MAL-2025-2882](https://insights.sbomify.com/MAL-2025-2882/): Malicious code in hibt-internal (npm) (malicious package)
- [MAL-2025-28819](https://insights.sbomify.com/MAL-2025-28819/): Malicious code in papaya-xigua-bgul (npm) (malicious package)
- [MAL-2025-28818](https://insights.sbomify.com/MAL-2025-28818/): Malicious code in papaya-whiskey-quince-fyplb (npm) (malicious package)
- [MAL-2025-28817](https://insights.sbomify.com/MAL-2025-28817/): Malicious code in papaya-vanilla-veof (npm) (malicious package)
- [MAL-2025-28816](https://insights.sbomify.com/MAL-2025-28816/): Malicious code in papaya-ugli-whiskey-uyeqg (npm) (malicious package)
- [MAL-2025-28815](https://insights.sbomify.com/MAL-2025-28815/): Malicious code in papaya-ugli-tvty (npm) (malicious package)
- [MAL-2025-28814](https://insights.sbomify.com/MAL-2025-28814/): Malicious code in papaya-t9k-project (npm) (malicious package)
- [MAL-2025-28813](https://insights.sbomify.com/MAL-2025-28813/): Malicious code in papaya-strawberry-nzps (npm) (malicious package)
- [MAL-2025-28812](https://insights.sbomify.com/MAL-2025-28812/): Malicious code in papaya-sierra-xigua-ayylk (npm) (malicious package)
- [MAL-2025-28811](https://insights.sbomify.com/MAL-2025-28811/): Malicious code in papaya-rxt-project (npm) (malicious package)
- [MAL-2025-28810](https://insights.sbomify.com/MAL-2025-28810/): Malicious code in papaya-romeo-lemon-azzen (npm) (malicious package)
- [MAL-2025-2881](https://insights.sbomify.com/MAL-2025-2881/): Malicious code in hibt-dev (npm) (malicious package)
- [MAL-2025-28809](https://insights.sbomify.com/MAL-2025-28809/): Malicious code in papaya-rja-project (npm) (malicious package)
- [MAL-2025-28808](https://insights.sbomify.com/MAL-2025-28808/): Malicious code in papaya-quebec-lima-zwmzb (npm) (malicious package)
- [MAL-2025-28807](https://insights.sbomify.com/MAL-2025-28807/): Malicious code in papaya-q6n-project (npm) (malicious package)
- [MAL-2025-28806](https://insights.sbomify.com/MAL-2025-28806/): Malicious code in papaya-papa-omue (npm) (malicious package)
- [MAL-2025-28805](https://insights.sbomify.com/MAL-2025-28805/): Malicious code in papaya-papa-banana-kafqj (npm) (malicious package)
- [MAL-2025-28804](https://insights.sbomify.com/MAL-2025-28804/): Malicious code in papaya-orange-uniform-yankm (npm) (malicious package)
- [MAL-2025-28803](https://insights.sbomify.com/MAL-2025-28803/): Malicious code in papaya-orange-charlie-omuva (npm) (malicious package)
- [MAL-2025-28802](https://insights.sbomify.com/MAL-2025-28802/): Malicious code in papaya-november-uvvp (npm) (malicious package)
- [MAL-2025-28801](https://insights.sbomify.com/MAL-2025-28801/): Malicious code in papaya-n9u-project (npm) (malicious package)
- [MAL-2025-28800](https://insights.sbomify.com/MAL-2025-28800/): Malicious code in papaya-mike-ugli-cmvei (npm) (malicious package)
- [MAL-2025-2880](https://insights.sbomify.com/MAL-2025-2880/): Malicious code in grpc-js-repository (npm) (malicious package)
- [MAL-2025-288](https://insights.sbomify.com/MAL-2025-288/): Malicious code in create-calypso-config (npm) (malicious package)
- [MAL-2025-28799](https://insights.sbomify.com/MAL-2025-28799/): Malicious code in papaya-m7y-project (npm) (malicious package)
- [MAL-2025-28798](https://insights.sbomify.com/MAL-2025-28798/): Malicious code in papaya-lq6-project (npm) (malicious package)
- [MAL-2025-28797](https://insights.sbomify.com/MAL-2025-28797/): Malicious code in papaya-lima-cvun (npm) (malicious package)
- [MAL-2025-28796](https://insights.sbomify.com/MAL-2025-28796/): Malicious code in papaya-lima-ajqe (npm) (malicious package)
- [MAL-2025-28795](https://insights.sbomify.com/MAL-2025-28795/): Malicious code in papaya-lemon-apple-xiqsf (npm) (malicious package)
- [MAL-2025-28794](https://insights.sbomify.com/MAL-2025-28794/): Malicious code in papaya-india-vvrz (npm) (malicious package)
- [MAL-2025-28793](https://insights.sbomify.com/MAL-2025-28793/): Malicious code in papaya-i83-project (npm) (malicious package)
- [MAL-2025-28792](https://insights.sbomify.com/MAL-2025-28792/): Malicious code in papaya-hotel-bgjb (npm) (malicious package)
- [MAL-2025-28791](https://insights.sbomify.com/MAL-2025-28791/): Malicious code in papaya-hnb-project (npm) (malicious package)
- [MAL-2025-28790](https://insights.sbomify.com/MAL-2025-28790/): Malicious code in papaya-harbor-1jo5 (npm) (malicious package)
- [MAL-2025-2879](https://insights.sbomify.com/MAL-2025-2879/): Malicious code in fullstory-lib (npm) (malicious package)
- [MAL-2025-28789](https://insights.sbomify.com/MAL-2025-28789/): Malicious code in papaya-h5y-project (npm) (malicious package)
- [MAL-2025-28788](https://insights.sbomify.com/MAL-2025-28788/): Malicious code in papaya-golf-o396 (npm) (malicious package)
- [MAL-2025-28787](https://insights.sbomify.com/MAL-2025-28787/): Malicious code in papaya-golf-bravo-ckprt (npm) (malicious package)
- [MAL-2025-28786](https://insights.sbomify.com/MAL-2025-28786/): Malicious code in papaya-fig-yam-hoeaf (npm) (malicious package)
- [MAL-2025-28785](https://insights.sbomify.com/MAL-2025-28785/): Malicious code in papaya-f59-project (npm) (malicious package)
- [MAL-2025-28784](https://insights.sbomify.com/MAL-2025-28784/): Malicious code in papaya-f09-project (npm) (malicious package)
- [MAL-2025-28783](https://insights.sbomify.com/MAL-2025-28783/): Malicious code in papaya-elderberry-oscar-miaze (npm) (malicious package)
- [MAL-2025-28782](https://insights.sbomify.com/MAL-2025-28782/): Malicious code in papaya-echo-yankee-uvttz (npm) (malicious package)
- [MAL-2025-28781](https://insights.sbomify.com/MAL-2025-28781/): Malicious code in papaya-date-nste (npm) (malicious package)
- [MAL-2025-28780](https://insights.sbomify.com/MAL-2025-28780/): Malicious code in papaya-bravo-kyxw (npm) (malicious package)
- [MAL-2025-2878](https://insights.sbomify.com/MAL-2025-2878/): Malicious code in fredman-file (npm) (malicious package)
- [MAL-2025-28779](https://insights.sbomify.com/MAL-2025-28779/): Malicious code in papaya-banana-xigua-tulto (npm) (malicious package)
- [MAL-2025-28778](https://insights.sbomify.com/MAL-2025-28778/): Malicious code in papaya-a5m-project (npm) (malicious package)
- [MAL-2025-28777](https://insights.sbomify.com/MAL-2025-28777/): Malicious code in papaya-9dz-project (npm) (malicious package)
- [MAL-2025-28776](https://insights.sbomify.com/MAL-2025-28776/): Malicious code in papaya-8te-project (npm) (malicious package)
- [MAL-2025-28775](https://insights.sbomify.com/MAL-2025-28775/): Malicious code in papaya-7tc-project (npm) (malicious package)
- [MAL-2025-28774](https://insights.sbomify.com/MAL-2025-28774/): Malicious code in papaya-6pt-project (npm) (malicious package)
- [MAL-2025-28773](https://insights.sbomify.com/MAL-2025-28773/): Malicious code in papaya-640-project (npm) (malicious package)
- [MAL-2025-28772](https://insights.sbomify.com/MAL-2025-28772/): Malicious code in papaya-49j-project (npm) (malicious package)
- [MAL-2025-28771](https://insights.sbomify.com/MAL-2025-28771/): Malicious code in papaya-3vr-project (npm) (malicious package)
- [MAL-2025-28770](https://insights.sbomify.com/MAL-2025-28770/): Malicious code in papaya-2eu-project (npm) (malicious package)
- [MAL-2025-2877](https://insights.sbomify.com/MAL-2025-2877/): Malicious code in focc-commons-lib-backend-commons-node (npm) (malicious package)
- [MAL-2025-28769](https://insights.sbomify.com/MAL-2025-28769/): Malicious code in papaya-29m-project (npm) (malicious package)
- [MAL-2025-28768](https://insights.sbomify.com/MAL-2025-28768/): Malicious code in papaulo (npm) (malicious package)
- [MAL-2025-28767](https://insights.sbomify.com/MAL-2025-28767/): Malicious code in papa-znv-project (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/793/