# Vulnerabilities published in 2025


- [MAL-2025-28586](https://insights.sbomify.com/MAL-2025-28586/): Malicious code in osgist (npm) (malicious package)
- [MAL-2025-28585](https://insights.sbomify.com/MAL-2025-28585/): Malicious code in oscshp-frontend-starter-kit (npm) (malicious package)
- [MAL-2025-28584](https://insights.sbomify.com/MAL-2025-28584/): Malicious code in oscillation-metabolomics-non-blocking-release-it (npm) (malicious package)
- [MAL-2025-28583](https://insights.sbomify.com/MAL-2025-28583/): Malicious code in oscillation-exobiology-ora-pyxis (npm) (malicious package)
- [MAL-2025-28582](https://insights.sbomify.com/MAL-2025-28582/): Malicious code in oscar-zulu-charlie-qjbxg (npm) (malicious package)
- [MAL-2025-28581](https://insights.sbomify.com/MAL-2025-28581/): Malicious code in oscar-yankee-pecr (npm) (malicious package)
- [MAL-2025-28580](https://insights.sbomify.com/MAL-2025-28580/): Malicious code in oscar-yankee-jfop (npm) (malicious package)
- [MAL-2025-2858](https://insights.sbomify.com/MAL-2025-2858/): Malicious code in bitvavo-test (npm) (malicious package)
- [MAL-2025-28579](https://insights.sbomify.com/MAL-2025-28579/): Malicious code in oscar-yam-hotel-fpude (npm) (malicious package)
- [MAL-2025-28578](https://insights.sbomify.com/MAL-2025-28578/): Malicious code in oscar-yam-grape-tbsyo (npm) (malicious package)
- [MAL-2025-28577](https://insights.sbomify.com/MAL-2025-28577/): Malicious code in oscar-xu8-project (npm) (malicious package)
- [MAL-2025-28576](https://insights.sbomify.com/MAL-2025-28576/): Malicious code in oscar-xray-kilo-uutps (npm) (malicious package)
- [MAL-2025-28575](https://insights.sbomify.com/MAL-2025-28575/): Malicious code in oscar-xray-jwat (npm) (malicious package)
- [MAL-2025-28574](https://insights.sbomify.com/MAL-2025-28574/): Malicious code in oscar-xray-bupf (npm) (malicious package)
- [MAL-2025-28573](https://insights.sbomify.com/MAL-2025-28573/): Malicious code in oscar-x5u-project (npm) (malicious package)
- [MAL-2025-28572](https://insights.sbomify.com/MAL-2025-28572/): Malicious code in oscar-wf1-project (npm) (malicious package)
- [MAL-2025-28571](https://insights.sbomify.com/MAL-2025-28571/): Malicious code in oscar-wdd-project (npm) (malicious package)
- [MAL-2025-28570](https://insights.sbomify.com/MAL-2025-28570/): Malicious code in oscar-watermelon-zacv (npm) (malicious package)
- [MAL-2025-2857](https://insights.sbomify.com/MAL-2025-2857/): Malicious code in bitvavo-main (npm) (malicious package)
- [MAL-2025-28569](https://insights.sbomify.com/MAL-2025-28569/): Malicious code in oscar-wasabi-epm7 (npm) (malicious package)
- [MAL-2025-28568](https://insights.sbomify.com/MAL-2025-28568/): Malicious code in oscar-victor-ykkf (npm) (malicious package)
- [MAL-2025-28567](https://insights.sbomify.com/MAL-2025-28567/): Malicious code in oscar-victor-xray-wlngc (npm) (malicious package)
- [MAL-2025-28566](https://insights.sbomify.com/MAL-2025-28566/): Malicious code in oscar-victor-imny (npm) (malicious package)
- [MAL-2025-28565](https://insights.sbomify.com/MAL-2025-28565/): Malicious code in oscar-vbq-project (npm) (malicious package)
- [MAL-2025-28564](https://insights.sbomify.com/MAL-2025-28564/): Malicious code in oscar-vanilla-ydxh (npm) (malicious package)
- [MAL-2025-28563](https://insights.sbomify.com/MAL-2025-28563/): Malicious code in oscar-vanilla-tkpx (npm) (malicious package)
- [MAL-2025-28562](https://insights.sbomify.com/MAL-2025-28562/): Malicious code in oscar-uniform-sjlk (npm) (malicious package)
- [MAL-2025-28561](https://insights.sbomify.com/MAL-2025-28561/): Malicious code in oscar-ulv-project (npm) (malicious package)
- [MAL-2025-28560](https://insights.sbomify.com/MAL-2025-28560/): Malicious code in oscar-ugli-zrya (npm) (malicious package)
- [MAL-2025-2856](https://insights.sbomify.com/MAL-2025-2856/): Malicious code in bitvavo-internal (npm) (malicious package)
- [MAL-2025-28559](https://insights.sbomify.com/MAL-2025-28559/): Malicious code in oscar-tgw-project (npm) (malicious package)
- [MAL-2025-28558](https://insights.sbomify.com/MAL-2025-28558/): Malicious code in oscar-supernova-zwhd (npm) (malicious package)
- [MAL-2025-28557](https://insights.sbomify.com/MAL-2025-28557/): Malicious code in oscar-sierra-xiwj (npm) (malicious package)
- [MAL-2025-28556](https://insights.sbomify.com/MAL-2025-28556/): Malicious code in oscar-sierra-victor-jkmeo (npm) (malicious package)
- [MAL-2025-28555](https://insights.sbomify.com/MAL-2025-28555/): Malicious code in oscar-s1e-project (npm) (malicious package)
- [MAL-2025-28554](https://insights.sbomify.com/MAL-2025-28554/): Malicious code in oscar-raspberry-ktkv (npm) (malicious package)
- [MAL-2025-28553](https://insights.sbomify.com/MAL-2025-28553/): Malicious code in oscar-quince-ddpu (npm) (malicious package)
- [MAL-2025-28552](https://insights.sbomify.com/MAL-2025-28552/): Malicious code in oscar-quebec-papaya-dlvqg (npm) (malicious package)
- [MAL-2025-28551](https://insights.sbomify.com/MAL-2025-28551/): Malicious code in oscar-papaya-gune (npm) (malicious package)
- [MAL-2025-28550](https://insights.sbomify.com/MAL-2025-28550/): Malicious code in oscar-orange-lima-drkjr (npm) (malicious package)
- [MAL-2025-2855](https://insights.sbomify.com/MAL-2025-2855/): Malicious code in bitvavo-dev (npm) (malicious package)
- [MAL-2025-28549](https://insights.sbomify.com/MAL-2025-28549/): Malicious code in oscar-ocean-bwn0 (npm) (malicious package)
- [MAL-2025-28548](https://insights.sbomify.com/MAL-2025-28548/): Malicious code in oscar-november-rxtr (npm) (malicious package)
- [MAL-2025-28547](https://insights.sbomify.com/MAL-2025-28547/): Malicious code in oscar-november-iexh (npm) (malicious package)
- [MAL-2025-28546](https://insights.sbomify.com/MAL-2025-28546/): Malicious code in oscar-nectarine-sierra-bqkzp (npm) (malicious package)
- [MAL-2025-28545](https://insights.sbomify.com/MAL-2025-28545/): Malicious code in oscar-nectarine-juliet-aawnf (npm) (malicious package)
- [MAL-2025-28544](https://insights.sbomify.com/MAL-2025-28544/): Malicious code in oscar-n14-project (npm) (malicious package)
- [MAL-2025-28543](https://insights.sbomify.com/MAL-2025-28543/): Malicious code in oscar-lemon-watermelon-qgpvr (npm) (malicious package)
- [MAL-2025-28542](https://insights.sbomify.com/MAL-2025-28542/): Malicious code in oscar-kiwi-delta-rlfmh (npm) (malicious package)
- [MAL-2025-28541](https://insights.sbomify.com/MAL-2025-28541/): Malicious code in oscar-jungle-21if (npm) (malicious package)
- [MAL-2025-28540](https://insights.sbomify.com/MAL-2025-28540/): Malicious code in oscar-iib-project (npm) (malicious package)
- [MAL-2025-2854](https://insights.sbomify.com/MAL-2025-2854/): Malicious code in bitunix-test (npm) (malicious package)
- [MAL-2025-28539](https://insights.sbomify.com/MAL-2025-28539/): Malicious code in oscar-hotel-quince-zdgqg (npm) (malicious package)
- [MAL-2025-28538](https://insights.sbomify.com/MAL-2025-28538/): Malicious code in oscar-gxx-project (npm) (malicious package)
- [MAL-2025-28537](https://insights.sbomify.com/MAL-2025-28537/): Malicious code in oscar-grape-ctzf (npm) (malicious package)
- [MAL-2025-28536](https://insights.sbomify.com/MAL-2025-28536/): Malicious code in oscar-golf-zavu (npm) (malicious package)
- [MAL-2025-28535](https://insights.sbomify.com/MAL-2025-28535/): Malicious code in oscar-golf-victor-djxma (npm) (malicious package)
- [MAL-2025-28534](https://insights.sbomify.com/MAL-2025-28534/): Malicious code in oscar-golf-ftll (npm) (malicious package)
- [MAL-2025-28533](https://insights.sbomify.com/MAL-2025-28533/): Malicious code in oscar-foxtrot-papaya-mzahy (npm) (malicious package)
- [MAL-2025-28532](https://insights.sbomify.com/MAL-2025-28532/): Malicious code in oscar-flare-9prr (npm) (malicious package)
- [MAL-2025-28531](https://insights.sbomify.com/MAL-2025-28531/): Malicious code in oscar-fig-rfdm (npm) (malicious package)
- [MAL-2025-28530](https://insights.sbomify.com/MAL-2025-28530/): Malicious code in oscar-echo-mxzz (npm) (malicious package)
- [MAL-2025-2853](https://insights.sbomify.com/MAL-2025-2853/): Malicious code in bitunix-main (npm) (malicious package)
- [MAL-2025-28529](https://insights.sbomify.com/MAL-2025-28529/): Malicious code in oscar-echo-ddfc (npm) (malicious package)
- [MAL-2025-28528](https://insights.sbomify.com/MAL-2025-28528/): Malicious code in oscar-echo-apple-jjknn (npm) (malicious package)
- [MAL-2025-28527](https://insights.sbomify.com/MAL-2025-28527/): Malicious code in oscar-dragonfruit-cpqb (npm) (malicious package)
- [MAL-2025-28526](https://insights.sbomify.com/MAL-2025-28526/): Malicious code in oscar-delta-biwp (npm) (malicious package)
- [MAL-2025-28525](https://insights.sbomify.com/MAL-2025-28525/): Malicious code in oscar-delta-8o0r (npm) (malicious package)
- [MAL-2025-28524](https://insights.sbomify.com/MAL-2025-28524/): Malicious code in oscar-db9-project (npm) (malicious package)
- [MAL-2025-28523](https://insights.sbomify.com/MAL-2025-28523/): Malicious code in oscar-date-nwcx (npm) (malicious package)
- [MAL-2025-28522](https://insights.sbomify.com/MAL-2025-28522/): Malicious code in oscar-d3u-project (npm) (malicious package)
- [MAL-2025-28521](https://insights.sbomify.com/MAL-2025-28521/): Malicious code in oscar-ck8-project (npm) (malicious package)
- [MAL-2025-28520](https://insights.sbomify.com/MAL-2025-28520/): Malicious code in oscar-cherry-zhvk (npm) (malicious package)
- [MAL-2025-2852](https://insights.sbomify.com/MAL-2025-2852/): Malicious code in bitunix-internal (npm) (malicious package)
- [MAL-2025-28519](https://insights.sbomify.com/MAL-2025-28519/): Malicious code in oscar-charlie-mygc (npm) (malicious package)
- [MAL-2025-28518](https://insights.sbomify.com/MAL-2025-28518/): Malicious code in oscar-bur-project (npm) (malicious package)
- [MAL-2025-28517](https://insights.sbomify.com/MAL-2025-28517/): Malicious code in oscar-bravo-hfqr (npm) (malicious package)
- [MAL-2025-28516](https://insights.sbomify.com/MAL-2025-28516/): Malicious code in oscar-bravo-ekon (npm) (malicious package)
- [MAL-2025-28515](https://insights.sbomify.com/MAL-2025-28515/): Malicious code in oscar-bnq-project (npm) (malicious package)
- [MAL-2025-28514](https://insights.sbomify.com/MAL-2025-28514/): Malicious code in oscar-banana-mxth (npm) (malicious package)
- [MAL-2025-28513](https://insights.sbomify.com/MAL-2025-28513/): Malicious code in oscar-banana-dzuy (npm) (malicious package)
- [MAL-2025-28512](https://insights.sbomify.com/MAL-2025-28512/): Malicious code in oscar-alpha-tcux (npm) (malicious package)
- [MAL-2025-28511](https://insights.sbomify.com/MAL-2025-28511/): Malicious code in oscar-alpha-hwaa (npm) (malicious package)
- [MAL-2025-28510](https://insights.sbomify.com/MAL-2025-28510/): Malicious code in oscar-a7f-project (npm) (malicious package)
- [MAL-2025-2851](https://insights.sbomify.com/MAL-2025-2851/): Malicious code in bitunix-dev (npm) (malicious package)
- [MAL-2025-28509](https://insights.sbomify.com/MAL-2025-28509/): Malicious code in oscar-8zz-project (npm) (malicious package)
- [MAL-2025-28508](https://insights.sbomify.com/MAL-2025-28508/): Malicious code in oscar-7s6-project (npm) (malicious package)
- [MAL-2025-28507](https://insights.sbomify.com/MAL-2025-28507/): Malicious code in oscar-62x-project (npm) (malicious package)
- [MAL-2025-28506](https://insights.sbomify.com/MAL-2025-28506/): Malicious code in osagence (npm) (malicious package)
- [MAL-2025-28505](https://insights.sbomify.com/MAL-2025-28505/): Malicious code in os_classification (npm) (malicious package)
- [MAL-2025-28504](https://insights.sbomify.com/MAL-2025-28504/): Malicious code in orzjpdugaxwqnkfb (npm) (malicious package)
- [MAL-2025-28503](https://insights.sbomify.com/MAL-2025-28503/): Malicious code in ory-editor-renderer-hubside (npm) (malicious package)
- [MAL-2025-28502](https://insights.sbomify.com/MAL-2025-28502/): Malicious code in ory-editor-core-hubside (npm) (malicious package)
- [MAL-2025-28501](https://insights.sbomify.com/MAL-2025-28501/): Malicious code in ortstafel (npm) (malicious package)
- [MAL-2025-28500](https://insights.sbomify.com/MAL-2025-28500/): Malicious code in orthodox-feasts (npm) (malicious package)
- [MAL-2025-2850](https://insights.sbomify.com/MAL-2025-2850/): Malicious code in bitrue-test (npm) (malicious package)
- [MAL-2025-285](https://insights.sbomify.com/MAL-2025-285/): Malicious code in calypso-typescript-config (npm) (malicious package)
- [MAL-2025-28499](https://insights.sbomify.com/MAL-2025-28499/): Malicious code in ort_wgsl_template_gen (npm) (malicious package)
- [MAL-2025-28498](https://insights.sbomify.com/MAL-2025-28498/): Malicious code in ort-rn-basic-usage (npm) (malicious package)
- [MAL-2025-28497](https://insights.sbomify.com/MAL-2025-28497/): Malicious code in orqvwdjkekhultsm (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/796/