# Vulnerabilities published in 2025


- [MAL-2025-28676](https://insights.sbomify.com/MAL-2025-28676/): Malicious code in paleoecology-sirius-concurrently-phenomic (npm) (malicious package)
- [MAL-2025-28675](https://insights.sbomify.com/MAL-2025-28675/): Malicious code in paleoecology-saturnology-query-kinetic (npm) (malicious package)
- [MAL-2025-28674](https://insights.sbomify.com/MAL-2025-28674/): Malicious code in paleoecology-neptune-node-sass-ultra (npm) (malicious package)
- [MAL-2025-28673](https://insights.sbomify.com/MAL-2025-28673/): Malicious code in paleoecology-comet-postgres-blazar (npm) (malicious package)
- [MAL-2025-28672](https://insights.sbomify.com/MAL-2025-28672/): Malicious code in paleoecology-carpo-relay-hexo (npm) (malicious package)
- [MAL-2025-28671](https://insights.sbomify.com/MAL-2025-28671/): Malicious code in paleoclimatology-quark-jasmine-hologram (npm) (malicious package)
- [MAL-2025-28670](https://insights.sbomify.com/MAL-2025-28670/): Malicious code in paleoclimatology-pegasus-nanotechnology-archaeoastronomy (npm) (malicious package)
- [MAL-2025-2867](https://insights.sbomify.com/MAL-2025-2867/): Malicious code in cloudflare-vite-tutorial (npm) (malicious package)
- [MAL-2025-28669](https://insights.sbomify.com/MAL-2025-28669/): Malicious code in paleoclimatology-lightyear-leda-nova (npm) (malicious package)
- [MAL-2025-28668](https://insights.sbomify.com/MAL-2025-28668/): Malicious code in paleoclimatology-interstellarmedium-xml-astroinformatics (npm) (malicious package)
- [MAL-2025-28667](https://insights.sbomify.com/MAL-2025-28667/): Malicious code in paleoceanography-stop-graviton-ursa (npm) (malicious package)
- [MAL-2025-28666](https://insights.sbomify.com/MAL-2025-28666/): Malicious code in paleobotany-winston-interstellarmedium-semantic-ui (npm) (malicious package)
- [MAL-2025-28665](https://insights.sbomify.com/MAL-2025-28665/): Malicious code in paleobotany-planetology-schema-xo (npm) (malicious package)
- [MAL-2025-28664](https://insights.sbomify.com/MAL-2025-28664/): Malicious code in paleobotany-cz-conventional-changelog-jovian-quantum (npm) (malicious package)
- [MAL-2025-28663](https://insights.sbomify.com/MAL-2025-28663/): Malicious code in paleoanthropology-terraforming-cluster-mineralogy (npm) (malicious package)
- [MAL-2025-28662](https://insights.sbomify.com/MAL-2025-28662/): Malicious code in paleoanthropology-selenium-centaurus-fusion (npm) (malicious package)
- [MAL-2025-28661](https://insights.sbomify.com/MAL-2025-28661/): Malicious code in paleoanthropology-hydrogeology-zenobia-pino-pretty (npm) (malicious package)
- [MAL-2025-28660](https://insights.sbomify.com/MAL-2025-28660/): Malicious code in paleoanthropology-blueshift-exosphere-void (npm) (malicious package)
- [MAL-2025-2866](https://insights.sbomify.com/MAL-2025-2866/): Malicious code in clay-c4 (npm) (malicious package)
- [MAL-2025-28659](https://insights.sbomify.com/MAL-2025-28659/): Malicious code in paleoanthropology-astrobiology-rollup-karma (npm) (malicious package)
- [MAL-2025-28658](https://insights.sbomify.com/MAL-2025-28658/): Malicious code in palante (npm) (malicious package)
- [MAL-2025-28657](https://insights.sbomify.com/MAL-2025-28657/): Malicious code in palacio (npm) (malicious package)
- [MAL-2025-28656](https://insights.sbomify.com/MAL-2025-28656/): Malicious code in pakki-service (npm) (malicious package)
- [MAL-2025-28655](https://insights.sbomify.com/MAL-2025-28655/): Malicious code in pakjniuw (npm) (malicious package)
- [MAL-2025-28654](https://insights.sbomify.com/MAL-2025-28654/): Malicious code in paintfill (npm) (malicious package)
- [MAL-2025-28653](https://insights.sbomify.com/MAL-2025-28653/): Malicious code in painta (npm) (malicious package)
- [MAL-2025-28652](https://insights.sbomify.com/MAL-2025-28652/): Malicious code in pagini (npm) (malicious package)
- [MAL-2025-28651](https://insights.sbomify.com/MAL-2025-28651/): Malicious code in paginaa (npm) (malicious package)
- [MAL-2025-28650](https://insights.sbomify.com/MAL-2025-28650/): Malicious code in pagengo (npm) (malicious package)
- [MAL-2025-2865](https://insights.sbomify.com/MAL-2025-2865/): Malicious code in cf-middleware-set-header (npm) (malicious package)
- [MAL-2025-28649](https://insights.sbomify.com/MAL-2025-28649/): Malicious code in pagehtm (npm) (malicious package)
- [MAL-2025-28648](https://insights.sbomify.com/MAL-2025-28648/): Malicious code in packwerk (npm) (malicious package)
- [MAL-2025-28647](https://insights.sbomify.com/MAL-2025-28647/): Malicious code in packages.json (npm) (malicious package)
- [MAL-2025-28646](https://insights.sbomify.com/MAL-2025-28646/): Malicious code in packages-lock.json (npm) (malicious package)
- [MAL-2025-28645](https://insights.sbomify.com/MAL-2025-28645/): Malicious code in packagecontainer (npm) (malicious package)
- [MAL-2025-28644](https://insights.sbomify.com/MAL-2025-28644/): Malicious code in package-jsonp-json-soap (npm) (malicious package)
- [MAL-2025-28643](https://insights.sbomify.com/MAL-2025-28643/): Malicious code in package-jauseg (npm) (malicious package)
- [MAL-2025-28642](https://insights.sbomify.com/MAL-2025-28642/): Malicious code in package-dorado-css-minimizer-webpack-plugin-jovian (npm) (malicious package)
- [MAL-2025-28641](https://insights.sbomify.com/MAL-2025-28641/): Malicious code in pac-theme-base (npm) (malicious package)
- [MAL-2025-28640](https://insights.sbomify.com/MAL-2025-28640/): Malicious code in pa-scout (npm) (malicious package)
- [MAL-2025-2864](https://insights.sbomify.com/MAL-2025-2864/): Malicious code in bvox-test (npm) (malicious package)
- [MAL-2025-28639](https://insights.sbomify.com/MAL-2025-28639/): Malicious code in p8ut63 (npm) (malicious package)
- [MAL-2025-28638](https://insights.sbomify.com/MAL-2025-28638/): Malicious code in p5-bbox-aligned-word (npm) (malicious package)
- [MAL-2025-28637](https://insights.sbomify.com/MAL-2025-28637/): Malicious code in p12_front-end-with-react (npm) (malicious package)
- [MAL-2025-28636](https://insights.sbomify.com/MAL-2025-28636/): Malicious code in p0wn (npm) (malicious package)
- [MAL-2025-28635](https://insights.sbomify.com/MAL-2025-28635/): Malicious code in p-traffic (npm) (malicious package)
- [MAL-2025-28634](https://insights.sbomify.com/MAL-2025-28634/): Malicious code in ozwyhfivjkdueqxs (npm) (malicious package)
- [MAL-2025-28633](https://insights.sbomify.com/MAL-2025-28633/): Malicious code in ozonshop (npm) (malicious package)
- [MAL-2025-28632](https://insights.sbomify.com/MAL-2025-28632/): Malicious code in ozjsvkhciulqyefr (npm) (malicious package)
- [MAL-2025-28631](https://insights.sbomify.com/MAL-2025-28631/): Malicious code in ozatrace (npm) (malicious package)
- [MAL-2025-28630](https://insights.sbomify.com/MAL-2025-28630/): Malicious code in oyabindev (npm) (malicious package)
- [MAL-2025-2863](https://insights.sbomify.com/MAL-2025-2863/): Malicious code in bvox-main (npm) (malicious package)
- [MAL-2025-28629](https://insights.sbomify.com/MAL-2025-28629/): Malicious code in oxygen-workers-types (npm) (malicious package)
- [MAL-2025-28628](https://insights.sbomify.com/MAL-2025-28628/): Malicious code in oxione (npm) (malicious package)
- [MAL-2025-28627](https://insights.sbomify.com/MAL-2025-28627/): Malicious code in oxcrawler (npm) (malicious package)
- [MAL-2025-28626](https://insights.sbomify.com/MAL-2025-28626/): Malicious code in oxandcart-admin (npm) (malicious package)
- [MAL-2025-28625](https://insights.sbomify.com/MAL-2025-28625/): Malicious code in oxadverts (npm) (malicious package)
- [MAL-2025-28624](https://insights.sbomify.com/MAL-2025-28624/): Malicious code in owl-orchard-apple-sunshine (npm) (malicious package)
- [MAL-2025-28623](https://insights.sbomify.com/MAL-2025-28623/): Malicious code in owhblank (npm) (malicious package)
- [MAL-2025-28622](https://insights.sbomify.com/MAL-2025-28622/): Malicious code in owenwx (npm) (malicious package)
- [MAL-2025-28621](https://insights.sbomify.com/MAL-2025-28621/): Malicious code in ow-ng-faces (npm) (malicious package)
- [MAL-2025-28620](https://insights.sbomify.com/MAL-2025-28620/): Malicious code in ovrelord (npm) (malicious package)
- [MAL-2025-2862](https://insights.sbomify.com/MAL-2025-2862/): Malicious code in bvox-internal (npm) (malicious package)
- [MAL-2025-28619](https://insights.sbomify.com/MAL-2025-28619/): Malicious code in overnet (npm) (malicious package)
- [MAL-2025-28618](https://insights.sbomify.com/MAL-2025-28618/): Malicious code in outspline (npm) (malicious package)
- [MAL-2025-28617](https://insights.sbomify.com/MAL-2025-28617/): Malicious code in outiiil (npm) (malicious package)
- [MAL-2025-28616](https://insights.sbomify.com/MAL-2025-28616/): Malicious code in outgrader (npm) (malicious package)
- [MAL-2025-28615](https://insights.sbomify.com/MAL-2025-28615/): Malicious code in outercore-radiant-astrobiology-entanglement (npm) (malicious package)
- [MAL-2025-28614](https://insights.sbomify.com/MAL-2025-28614/): Malicious code in outercore-geoarchaeology-bellatrix-whitedwarf (npm) (malicious package)
- [MAL-2025-28613](https://insights.sbomify.com/MAL-2025-28613/): Malicious code in outer-html (npm) (malicious package)
- [MAL-2025-28612](https://insights.sbomify.com/MAL-2025-28612/): Malicious code in outage-form (npm) (malicious package)
- [MAL-2025-28611](https://insights.sbomify.com/MAL-2025-28611/): Malicious code in ourtunes (npm) (malicious package)
- [MAL-2025-28610](https://insights.sbomify.com/MAL-2025-28610/): Malicious code in ounziw (npm) (malicious package)
- [MAL-2025-2861](https://insights.sbomify.com/MAL-2025-2861/): Malicious code in bvox-dev (npm) (malicious package)
- [MAL-2025-28609](https://insights.sbomify.com/MAL-2025-28609/): Malicious code in ouklida (npm) (malicious package)
- [MAL-2025-28608](https://insights.sbomify.com/MAL-2025-28608/): Malicious code in otc-docs-language (npm) (malicious package)
- [MAL-2025-28607](https://insights.sbomify.com/MAL-2025-28607/): Malicious code in ot-eda-node (npm) (malicious package)
- [MAL-2025-28606](https://insights.sbomify.com/MAL-2025-28606/): Malicious code in ot-eda-messages (npm) (malicious package)
- [MAL-2025-28605](https://insights.sbomify.com/MAL-2025-28605/): Malicious code in osxmonad (npm) (malicious package)
- [MAL-2025-28604](https://insights.sbomify.com/MAL-2025-28604/): Malicious code in osxapps (npm) (malicious package)
- [MAL-2025-28603](https://insights.sbomify.com/MAL-2025-28603/): Malicious code in oswatch (npm) (malicious package)
- [MAL-2025-28602](https://insights.sbomify.com/MAL-2025-28602/): Malicious code in osuexport (npm) (malicious package)
- [MAL-2025-28601](https://insights.sbomify.com/MAL-2025-28601/): Malicious code in osuauv (npm) (malicious package)
- [MAL-2025-28600](https://insights.sbomify.com/MAL-2025-28600/): Malicious code in ostocy (npm) (malicious package)
- [MAL-2025-2860](https://insights.sbomify.com/MAL-2025-2860/): Malicious code in bvox (npm) (malicious package)
- [MAL-2025-286](https://insights.sbomify.com/MAL-2025-286/): Malicious code in calypso-url (npm) (malicious package)
- [MAL-2025-28599](https://insights.sbomify.com/MAL-2025-28599/): Malicious code in ostat-win32-x64-msvc (npm) (malicious package)
- [MAL-2025-28598](https://insights.sbomify.com/MAL-2025-28598/): Malicious code in osstracker (npm) (malicious package)
- [MAL-2025-28597](https://insights.sbomify.com/MAL-2025-28597/): Malicious code in osscripts (npm) (malicious package)
- [MAL-2025-28596](https://insights.sbomify.com/MAL-2025-28596/): Malicious code in osscla (npm) (malicious package)
- [MAL-2025-28595](https://insights.sbomify.com/MAL-2025-28595/): Malicious code in osscamp (npm) (malicious package)
- [MAL-2025-28594](https://insights.sbomify.com/MAL-2025-28594/): Malicious code in oss-catalog (npm) (malicious package)
- [MAL-2025-28593](https://insights.sbomify.com/MAL-2025-28593/): Malicious code in osrachem (npm) (malicious package)
- [MAL-2025-28592](https://insights.sbomify.com/MAL-2025-28592/): Malicious code in ospriet (npm) (malicious package)
- [MAL-2025-28591](https://insights.sbomify.com/MAL-2025-28591/): Malicious code in osmpoll (npm) (malicious package)
- [MAL-2025-28590](https://insights.sbomify.com/MAL-2025-28590/): Malicious code in osmo-ts (npm) (malicious package)
- [MAL-2025-2859](https://insights.sbomify.com/MAL-2025-2859/): Malicious code in bsbexample (npm) (malicious package)
- [MAL-2025-28589](https://insights.sbomify.com/MAL-2025-28589/): Malicious code in osmlib (npm) (malicious package)
- [MAL-2025-28588](https://insights.sbomify.com/MAL-2025-28588/): Malicious code in osjmrfpakyugwvqh (npm) (malicious package)
- [MAL-2025-28587](https://insights.sbomify.com/MAL-2025-28587/): Malicious code in osi-services (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/795/