# Vulnerabilities published in 2025


- [MAL-2025-28766](https://insights.sbomify.com/MAL-2025-28766/): Malicious code in papa-yambean-hjf4 (npm) (malicious package)
- [MAL-2025-28765](https://insights.sbomify.com/MAL-2025-28765/): Malicious code in papa-xray-zulu-ifvbo (npm) (malicious package)
- [MAL-2025-28764](https://insights.sbomify.com/MAL-2025-28764/): Malicious code in papa-xray-cdmv (npm) (malicious package)
- [MAL-2025-28763](https://insights.sbomify.com/MAL-2025-28763/): Malicious code in papa-windmill-d18h (npm) (malicious package)
- [MAL-2025-28762](https://insights.sbomify.com/MAL-2025-28762/): Malicious code in papa-whiskey-tangerine-nioua (npm) (malicious package)
- [MAL-2025-28761](https://insights.sbomify.com/MAL-2025-28761/): Malicious code in papa-watermelon-giml (npm) (malicious package)
- [MAL-2025-28760](https://insights.sbomify.com/MAL-2025-28760/): Malicious code in papa-victor-fig-lzzrm (npm) (malicious package)
- [MAL-2025-2876](https://insights.sbomify.com/MAL-2025-2876/): Malicious code in ethers-providerz (npm) (malicious package)
- [MAL-2025-28759](https://insights.sbomify.com/MAL-2025-28759/): Malicious code in papa-vanilla-fig-dwijz (npm) (malicious package)
- [MAL-2025-28758](https://insights.sbomify.com/MAL-2025-28758/): Malicious code in papa-v4x-project (npm) (malicious package)
- [MAL-2025-28757](https://insights.sbomify.com/MAL-2025-28757/): Malicious code in papa-uniform-victor-kbtqa (npm) (malicious package)
- [MAL-2025-28756](https://insights.sbomify.com/MAL-2025-28756/): Malicious code in papa-uniform-quebec-bsnju (npm) (malicious package)
- [MAL-2025-28755](https://insights.sbomify.com/MAL-2025-28755/): Malicious code in papa-tangerine-ugli-ewvak (npm) (malicious package)
- [MAL-2025-28754](https://insights.sbomify.com/MAL-2025-28754/): Malicious code in papa-strawberry-xfep (npm) (malicious package)
- [MAL-2025-28753](https://insights.sbomify.com/MAL-2025-28753/): Malicious code in papa-sierra-fig-qupuq (npm) (malicious package)
- [MAL-2025-28752](https://insights.sbomify.com/MAL-2025-28752/): Malicious code in papa-s67-project (npm) (malicious package)
- [MAL-2025-28751](https://insights.sbomify.com/MAL-2025-28751/): Malicious code in papa-quince-gzbk (npm) (malicious package)
- [MAL-2025-28750](https://insights.sbomify.com/MAL-2025-28750/): Malicious code in papa-qjf-project (npm) (malicious package)
- [MAL-2025-2875](https://insights.sbomify.com/MAL-2025-2875/): Malicious code in dt-adoptionoverview-extension (npm) (malicious package)
- [MAL-2025-28749](https://insights.sbomify.com/MAL-2025-28749/): Malicious code in papa-oscar-kiwi-ylomr (npm) (malicious package)
- [MAL-2025-28748](https://insights.sbomify.com/MAL-2025-28748/): Malicious code in papa-orange-mjdz (npm) (malicious package)
- [MAL-2025-28747](https://insights.sbomify.com/MAL-2025-28747/): Malicious code in papa-orange-jock (npm) (malicious package)
- [MAL-2025-28746](https://insights.sbomify.com/MAL-2025-28746/): Malicious code in papa-mb5-project (npm) (malicious package)
- [MAL-2025-28745](https://insights.sbomify.com/MAL-2025-28745/): Malicious code in papa-mango-tango-gzgum (npm) (malicious package)
- [MAL-2025-28744](https://insights.sbomify.com/MAL-2025-28744/): Malicious code in papa-mango-debx (npm) (malicious package)
- [MAL-2025-28743](https://insights.sbomify.com/MAL-2025-28743/): Malicious code in papa-lima-vpoi (npm) (malicious package)
- [MAL-2025-28742](https://insights.sbomify.com/MAL-2025-28742/): Malicious code in papa-lemon-rrld (npm) (malicious package)
- [MAL-2025-28741](https://insights.sbomify.com/MAL-2025-28741/): Malicious code in papa-kiwi-bravo-mazht (npm) (malicious package)
- [MAL-2025-28740](https://insights.sbomify.com/MAL-2025-28740/): Malicious code in papa-kilo-november-dejwg (npm) (malicious package)
- [MAL-2025-2874](https://insights.sbomify.com/MAL-2025-2874/): Malicious code in donateweb (npm) (malicious package)
- [MAL-2025-28739](https://insights.sbomify.com/MAL-2025-28739/): Malicious code in papa-iry-project (npm) (malicious package)
- [MAL-2025-28738](https://insights.sbomify.com/MAL-2025-28738/): Malicious code in papa-india-kilo-ifwxg (npm) (malicious package)
- [MAL-2025-28737](https://insights.sbomify.com/MAL-2025-28737/): Malicious code in papa-ii2-project (npm) (malicious package)
- [MAL-2025-28736](https://insights.sbomify.com/MAL-2025-28736/): Malicious code in papa-hyt-project (npm) (malicious package)
- [MAL-2025-28735](https://insights.sbomify.com/MAL-2025-28735/): Malicious code in papa-gvp-project (npm) (malicious package)
- [MAL-2025-28734](https://insights.sbomify.com/MAL-2025-28734/): Malicious code in papa-grape-yam-fxgue (npm) (malicious package)
- [MAL-2025-28733](https://insights.sbomify.com/MAL-2025-28733/): Malicious code in papa-foxtrot-zuvl (npm) (malicious package)
- [MAL-2025-28732](https://insights.sbomify.com/MAL-2025-28732/): Malicious code in papa-foxtrot-bswy (npm) (malicious package)
- [MAL-2025-28731](https://insights.sbomify.com/MAL-2025-28731/): Malicious code in papa-etz-project (npm) (malicious package)
- [MAL-2025-28730](https://insights.sbomify.com/MAL-2025-28730/): Malicious code in papa-elderberry-xrbn (npm) (malicious package)
- [MAL-2025-2873](https://insights.sbomify.com/MAL-2025-2873/): Malicious code in cortex-net-nodex (npm) (malicious package)
- [MAL-2025-28729](https://insights.sbomify.com/MAL-2025-28729/): Malicious code in papa-elderberry-bkus (npm) (malicious package)
- [MAL-2025-28728](https://insights.sbomify.com/MAL-2025-28728/): Malicious code in papa-e8u-project (npm) (malicious package)
- [MAL-2025-28727](https://insights.sbomify.com/MAL-2025-28727/): Malicious code in papa-date-xray-yqtro (npm) (malicious package)
- [MAL-2025-28726](https://insights.sbomify.com/MAL-2025-28726/): Malicious code in papa-cherry-lima-dvfhe (npm) (malicious package)
- [MAL-2025-28725](https://insights.sbomify.com/MAL-2025-28725/): Malicious code in papa-charlie-whiskey-najgg (npm) (malicious package)
- [MAL-2025-28724](https://insights.sbomify.com/MAL-2025-28724/): Malicious code in papa-charlie-romeo-ywwsk (npm) (malicious package)
- [MAL-2025-28723](https://insights.sbomify.com/MAL-2025-28723/): Malicious code in papa-charlie-raspberry-lwpwy (npm) (malicious package)
- [MAL-2025-28722](https://insights.sbomify.com/MAL-2025-28722/): Malicious code in papa-charlie-lmtr (npm) (malicious package)
- [MAL-2025-28721](https://insights.sbomify.com/MAL-2025-28721/): Malicious code in papa-banana-delta-porrn (npm) (malicious package)
- [MAL-2025-28720](https://insights.sbomify.com/MAL-2025-28720/): Malicious code in papa-b1a-project (npm) (malicious package)
- [MAL-2025-2872](https://insights.sbomify.com/MAL-2025-2872/): Malicious code in connection-colaborator (npm) (malicious package)
- [MAL-2025-28719](https://insights.sbomify.com/MAL-2025-28719/): Malicious code in papa-apple-nxtr (npm) (malicious package)
- [MAL-2025-28718](https://insights.sbomify.com/MAL-2025-28718/): Malicious code in papa-apple-golf-spdnr (npm) (malicious package)
- [MAL-2025-28717](https://insights.sbomify.com/MAL-2025-28717/): Malicious code in papa-alpha-kkei (npm) (malicious package)
- [MAL-2025-28716](https://insights.sbomify.com/MAL-2025-28716/): Malicious code in papa-8bg-project (npm) (malicious package)
- [MAL-2025-28715](https://insights.sbomify.com/MAL-2025-28715/): Malicious code in papa-5i1-project (npm) (malicious package)
- [MAL-2025-28714](https://insights.sbomify.com/MAL-2025-28714/): Malicious code in papa-4pn-project (npm) (malicious package)
- [MAL-2025-28713](https://insights.sbomify.com/MAL-2025-28713/): Malicious code in papa-4e7-project (npm) (malicious package)
- [MAL-2025-28712](https://insights.sbomify.com/MAL-2025-28712/): Malicious code in papa-020-project (npm) (malicious package)
- [MAL-2025-28711](https://insights.sbomify.com/MAL-2025-28711/): Malicious code in panymod (npm) (malicious package)
- [MAL-2025-28710](https://insights.sbomify.com/MAL-2025-28710/): Malicious code in pantip (npm) (malicious package)
- [MAL-2025-2871](https://insights.sbomify.com/MAL-2025-2871/): Malicious code in coincheck-test (npm) (malicious package)
- [MAL-2025-28709](https://insights.sbomify.com/MAL-2025-28709/): Malicious code in panspermia-toml-await-protractor (npm) (malicious package)
- [MAL-2025-28708](https://insights.sbomify.com/MAL-2025-28708/): Malicious code in panspermia-meteor-supercluster-hydrogeology (npm) (malicious package)
- [MAL-2025-28707](https://insights.sbomify.com/MAL-2025-28707/): Malicious code in panspermia-eridanus-sublimation-jasmine (npm) (malicious package)
- [MAL-2025-28706](https://insights.sbomify.com/MAL-2025-28706/): Malicious code in panspermia-chalk-prosthetics-scorpius (npm) (malicious package)
- [MAL-2025-28705](https://insights.sbomify.com/MAL-2025-28705/): Malicious code in panobot (npm) (malicious package)
- [MAL-2025-28704](https://insights.sbomify.com/MAL-2025-28704/): Malicious code in panneaux (npm) (malicious package)
- [MAL-2025-28703](https://insights.sbomify.com/MAL-2025-28703/): Malicious code in panelsort (npm) (malicious package)
- [MAL-2025-28702](https://insights.sbomify.com/MAL-2025-28702/): Malicious code in pandora-doomsday (npm) (malicious package)
- [MAL-2025-28701](https://insights.sbomify.com/MAL-2025-28701/): Malicious code in pandora-client (npm) (malicious package)
- [MAL-2025-28700](https://insights.sbomify.com/MAL-2025-28700/): Malicious code in pandora-book (npm) (malicious package)
- [MAL-2025-2870](https://insights.sbomify.com/MAL-2025-2870/): Malicious code in coincheck-main (npm) (malicious package)
- [MAL-2025-287](https://insights.sbomify.com/MAL-2025-287/): Malicious code in composite-checkout (npm) (malicious package)
- [MAL-2025-28699](https://insights.sbomify.com/MAL-2025-28699/): Malicious code in pandis (npm) (malicious package)
- [MAL-2025-28698](https://insights.sbomify.com/MAL-2025-28698/): Malicious code in pandeco (npm) (malicious package)
- [MAL-2025-28697](https://insights.sbomify.com/MAL-2025-28697/): Malicious code in pancake_connect (npm) (malicious package)
- [MAL-2025-28696](https://insights.sbomify.com/MAL-2025-28696/): Malicious code in pancake_conn (npm) (malicious package)
- [MAL-2025-28695](https://insights.sbomify.com/MAL-2025-28695/): Malicious code in panappl (npm) (malicious package)
- [MAL-2025-28694](https://insights.sbomify.com/MAL-2025-28694/): Malicious code in panader (npm) (malicious package)
- [MAL-2025-28693](https://insights.sbomify.com/MAL-2025-28693/): Malicious code in palynology-xenos-proteomics-magnetar (npm) (malicious package)
- [MAL-2025-28692](https://insights.sbomify.com/MAL-2025-28692/): Malicious code in palynology-kaus-miranda-regulus (npm) (malicious package)
- [MAL-2025-28691](https://insights.sbomify.com/MAL-2025-28691/): Malicious code in palynology-acamar-remark-koa (npm) (malicious package)
- [MAL-2025-28690](https://insights.sbomify.com/MAL-2025-28690/): Malicious code in palturaza (npm) (malicious package)
- [MAL-2025-2869](https://insights.sbomify.com/MAL-2025-2869/): Malicious code in coincheck-internal (npm) (malicious package)
- [MAL-2025-28689](https://insights.sbomify.com/MAL-2025-28689/): Malicious code in paltran (npm) (malicious package)
- [MAL-2025-28688](https://insights.sbomify.com/MAL-2025-28688/): Malicious code in paliturka (npm) (malicious package)
- [MAL-2025-28687](https://insights.sbomify.com/MAL-2025-28687/): Malicious code in paleopot (npm) (malicious package)
- [MAL-2025-28686](https://insights.sbomify.com/MAL-2025-28686/): Malicious code in paleontology-process-rollup-speleology (npm) (malicious package)
- [MAL-2025-28685](https://insights.sbomify.com/MAL-2025-28685/): Malicious code in paleontology-phylogenetics-titan-castor (npm) (malicious package)
- [MAL-2025-28684](https://insights.sbomify.com/MAL-2025-28684/): Malicious code in paleontology-nodemon-bootes-morgan (npm) (malicious package)
- [MAL-2025-28683](https://insights.sbomify.com/MAL-2025-28683/): Malicious code in paleontology-mongodb-acamar-planetology (npm) (malicious package)
- [MAL-2025-28682](https://insights.sbomify.com/MAL-2025-28682/): Malicious code in paleontology-galaxy-sirius-galaxy (npm) (malicious package)
- [MAL-2025-28681](https://insights.sbomify.com/MAL-2025-28681/): Malicious code in paleomagnetism-quark-terser-webpack-plugin-grus (npm) (malicious package)
- [MAL-2025-28680](https://insights.sbomify.com/MAL-2025-28680/): Malicious code in paleomagnetism-postgres-aether-stop (npm) (malicious package)
- [MAL-2025-2868](https://insights.sbomify.com/MAL-2025-2868/): Malicious code in coincheck-dev (npm) (malicious package)
- [MAL-2025-28679](https://insights.sbomify.com/MAL-2025-28679/): Malicious code in paleomagnetism-dactyl-registry-standard (npm) (malicious package)
- [MAL-2025-28678](https://insights.sbomify.com/MAL-2025-28678/): Malicious code in paleomagnetism-config-eslint-terraforming (npm) (malicious package)
- [MAL-2025-28677](https://insights.sbomify.com/MAL-2025-28677/): Malicious code in paleomagnetism-bootstrap-release-it-ichnology (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/794/