# Vulnerabilities published in 2025 - [MAL-2025-28315](https://insights.sbomify.com/MAL-2025-28315/): Malicious code in open-banking-reference-application-australia-region (npm) (malicious package) - [MAL-2025-28314](https://insights.sbomify.com/MAL-2025-28314/): Malicious code in opdehy (npm) (malicious package) - [MAL-2025-28313](https://insights.sbomify.com/MAL-2025-28313/): Malicious code in opaline_tj1n7_81njq_kismet (npm) (malicious package) - [MAL-2025-28312](https://insights.sbomify.com/MAL-2025-28312/): Malicious code in opaline_khqj7_ygopi_thunder (npm) (malicious package) - [MAL-2025-28311](https://insights.sbomify.com/MAL-2025-28311/): Malicious code in opaline_jjrni_3ms2f_oasis (npm) (malicious package) - [MAL-2025-28310](https://insights.sbomify.com/MAL-2025-28310/): Malicious code in opaline_ekxmq_6cylq_jade (npm) (malicious package) - [MAL-2025-2831](https://insights.sbomify.com/MAL-2025-2831/): Malicious code in @uniqa-extern/capacitor-plugin-unblu (npm) (malicious package) - [MAL-2025-28309](https://insights.sbomify.com/MAL-2025-28309/): Malicious code in opaline_9w5xb_rurox_unicorn (npm) (malicious package) - [MAL-2025-28308](https://insights.sbomify.com/MAL-2025-28308/): Malicious code in opaline_7srun_0hkl5_fireworks (npm) (malicious package) - [MAL-2025-28307](https://insights.sbomify.com/MAL-2025-28307/): Malicious code in opaline_5o2zf_a0xgd_rose (npm) (malicious package) - [MAL-2025-28306](https://insights.sbomify.com/MAL-2025-28306/): Malicious code in opaline_4ydh1_yvo8d_sapphire (npm) (malicious package) - [MAL-2025-28305](https://insights.sbomify.com/MAL-2025-28305/): Malicious code in opaline_38ufm_uygg7_fern (npm) (malicious package) - [MAL-2025-28304](https://insights.sbomify.com/MAL-2025-28304/): Malicious code in opaline-yucca-czi124-project (npm) (malicious package) - [MAL-2025-28303](https://insights.sbomify.com/MAL-2025-28303/): Malicious code in opaline-sequoia-gli522-project (npm) (malicious package) - [MAL-2025-28302](https://insights.sbomify.com/MAL-2025-28302/): Malicious code in opaline-reef-ypr300-project (npm) (malicious package) - [MAL-2025-28301](https://insights.sbomify.com/MAL-2025-28301/): Malicious code in opaline-piano-bsz312-project (npm) (malicious package) - [MAL-2025-28300](https://insights.sbomify.com/MAL-2025-28300/): Malicious code in opaline-penguin-yhw554-project (npm) (malicious package) - [MAL-2025-2830](https://insights.sbomify.com/MAL-2025-2830/): Malicious code in @uniqa-extern/capacitor-plugin-kofax (npm) (malicious package) - [MAL-2025-283](https://insights.sbomify.com/MAL-2025-283/): Malicious code in calypso-eslint-overrides (npm) (malicious package) - [MAL-2025-28299](https://insights.sbomify.com/MAL-2025-28299/): Malicious code in opaline-lilypad-zal031-project (npm) (malicious package) - [MAL-2025-28298](https://insights.sbomify.com/MAL-2025-28298/): Malicious code in opaline-lava-kwk805-project (npm) (malicious package) - [MAL-2025-28297](https://insights.sbomify.com/MAL-2025-28297/): Malicious code in opaline-kelp-lfi030-project (npm) (malicious package) - [MAL-2025-28296](https://insights.sbomify.com/MAL-2025-28296/): Malicious code in opaline-jade-iqq760-project (npm) (malicious package) - [MAL-2025-28295](https://insights.sbomify.com/MAL-2025-28295/): Malicious code in opaline-jacket-dju609-project (npm) (malicious package) - [MAL-2025-28294](https://insights.sbomify.com/MAL-2025-28294/): Malicious code in opaline-glade-ion936-project (npm) (malicious package) - [MAL-2025-28293](https://insights.sbomify.com/MAL-2025-28293/): Malicious code in opaline-dandelion-lwr682-project (npm) (malicious package) - [MAL-2025-28292](https://insights.sbomify.com/MAL-2025-28292/): Malicious code in opaline-bamboo-hnl352-project (npm) (malicious package) - [MAL-2025-28291](https://insights.sbomify.com/MAL-2025-28291/): Malicious code in opal_ondsd_sgxv3_yacht (npm) (malicious package) - [MAL-2025-28290](https://insights.sbomify.com/MAL-2025-28290/): Malicious code in opal_djogr_fjebt_yarn (npm) (malicious package) - [MAL-2025-2829](https://insights.sbomify.com/MAL-2025-2829/): Malicious code in @uniqa/user-preferences-ms-spec-api (npm) (malicious package) - [MAL-2025-28289](https://insights.sbomify.com/MAL-2025-28289/): Malicious code in opal_0fp5p_cl5gl_rainbow (npm) (malicious package) - [MAL-2025-28288](https://insights.sbomify.com/MAL-2025-28288/): Malicious code in opal-zfc0b-7r13f-orbit-project (npm) (malicious package) - [MAL-2025-28287](https://insights.sbomify.com/MAL-2025-28287/): Malicious code in opal-yawn-lnt114-project (npm) (malicious package) - [MAL-2025-28286](https://insights.sbomify.com/MAL-2025-28286/): Malicious code in opal-xgmdi-tscbi-oracle-project (npm) (malicious package) - [MAL-2025-28285](https://insights.sbomify.com/MAL-2025-28285/): Malicious code in opal-wisp-jow411-project (npm) (malicious package) - [MAL-2025-28284](https://insights.sbomify.com/MAL-2025-28284/): Malicious code in opal-v1sj5-2y74b-grove-project (npm) (malicious package) - [MAL-2025-28283](https://insights.sbomify.com/MAL-2025-28283/): Malicious code in opal-saturn-gkh835-project (npm) (malicious package) - [MAL-2025-28282](https://insights.sbomify.com/MAL-2025-28282/): Malicious code in opal-sapphire-eqw389-project (npm) (malicious package) - [MAL-2025-28281](https://insights.sbomify.com/MAL-2025-28281/): Malicious code in opal-reef-cwo534-project (npm) (malicious package) - [MAL-2025-28280](https://insights.sbomify.com/MAL-2025-28280/): Malicious code in opal-quasar-xno277-project (npm) (malicious package) - [MAL-2025-2828](https://insights.sbomify.com/MAL-2025-2828/): Malicious code in @uniqa/user-account-spec-api (npm) (malicious package) - [MAL-2025-28279](https://insights.sbomify.com/MAL-2025-28279/): Malicious code in opal-quagmire-cdw011-project (npm) (malicious package) - [MAL-2025-28278](https://insights.sbomify.com/MAL-2025-28278/): Malicious code in opal-qdbth-smu7z-spark-project (npm) (malicious package) - [MAL-2025-28277](https://insights.sbomify.com/MAL-2025-28277/): Malicious code in opal-poplh-iqhkh-quill-project (npm) (malicious package) - [MAL-2025-28276](https://insights.sbomify.com/MAL-2025-28276/): Malicious code in opal-oak-mcc159-project (npm) (malicious package) - [MAL-2025-28275](https://insights.sbomify.com/MAL-2025-28275/): Malicious code in opal-mya48-4h6c2-lucid-project (npm) (malicious package) - [MAL-2025-28274](https://insights.sbomify.com/MAL-2025-28274/): Malicious code in opal-moon-dis924-project (npm) (malicious package) - [MAL-2025-28273](https://insights.sbomify.com/MAL-2025-28273/): Malicious code in opal-meadow-vpc477-project (npm) (malicious package) - [MAL-2025-28272](https://insights.sbomify.com/MAL-2025-28272/): Malicious code in opal-meadow-ptt956-project (npm) (malicious package) - [MAL-2025-28271](https://insights.sbomify.com/MAL-2025-28271/): Malicious code in opal-meadow-ffl410-project (npm) (malicious package) - [MAL-2025-28270](https://insights.sbomify.com/MAL-2025-28270/): Malicious code in opal-jasmine-phw233-project (npm) (malicious package) - [MAL-2025-2827](https://insights.sbomify.com/MAL-2025-2827/): Malicious code in @uniqa/ubimet-ms (npm) (malicious package) - [MAL-2025-28269](https://insights.sbomify.com/MAL-2025-28269/): Malicious code in opal-jasmine-cxl037-project (npm) (malicious package) - [MAL-2025-28268](https://insights.sbomify.com/MAL-2025-28268/): Malicious code in opal-icicle-cvv709-project (npm) (malicious package) - [MAL-2025-28267](https://insights.sbomify.com/MAL-2025-28267/): Malicious code in opal-hedgehog-paf134-project (npm) (malicious package) - [MAL-2025-28266](https://insights.sbomify.com/MAL-2025-28266/): Malicious code in opal-hedgehog-bbk109-project (npm) (malicious package) - [MAL-2025-28265](https://insights.sbomify.com/MAL-2025-28265/): Malicious code in opal-fern-ary593-project (npm) (malicious package) - [MAL-2025-28264](https://insights.sbomify.com/MAL-2025-28264/): Malicious code in opal-dolphin-ttc955-project (npm) (malicious package) - [MAL-2025-28263](https://insights.sbomify.com/MAL-2025-28263/): Malicious code in opal-cxkhw-gw930-lunar-project (npm) (malicious package) - [MAL-2025-28262](https://insights.sbomify.com/MAL-2025-28262/): Malicious code in opal-caravan-vxy155-project (npm) (malicious package) - [MAL-2025-28261](https://insights.sbomify.com/MAL-2025-28261/): Malicious code in opal-avlnc-9apet-lunar-project (npm) (malicious package) - [MAL-2025-28260](https://insights.sbomify.com/MAL-2025-28260/): Malicious code in op-template-engine (npm) (malicious package) - [MAL-2025-2826](https://insights.sbomify.com/MAL-2025-2826/): Malicious code in @uniqa/self-service-ms-api-v2 (npm) (malicious package) - [MAL-2025-28259](https://insights.sbomify.com/MAL-2025-28259/): Malicious code in op-payment-widget-v3 (npm) (malicious package) - [MAL-2025-28258](https://insights.sbomify.com/MAL-2025-28258/): Malicious code in op-payment-live-validation (npm) (malicious package) - [MAL-2025-28257](https://insights.sbomify.com/MAL-2025-28257/): Malicious code in op-payment-account (npm) (malicious package) - [MAL-2025-28256](https://insights.sbomify.com/MAL-2025-28256/): Malicious code in op-identify-card (npm) (malicious package) - [MAL-2025-28255](https://insights.sbomify.com/MAL-2025-28255/): Malicious code in ootrainer (npm) (malicious package) - [MAL-2025-28254](https://insights.sbomify.com/MAL-2025-28254/): Malicious code in oortcloud-blackhole-galaxy-blackhole (npm) (malicious package) - [MAL-2025-28253](https://insights.sbomify.com/MAL-2025-28253/): Malicious code in oortcloud-biohacking-oauth-cladistics (npm) (malicious package) - [MAL-2025-28252](https://insights.sbomify.com/MAL-2025-28252/): Malicious code in onzu-story (npm) (malicious package) - [MAL-2025-28251](https://insights.sbomify.com/MAL-2025-28251/): Malicious code in onwu2 (npm) (malicious package) - [MAL-2025-28250](https://insights.sbomify.com/MAL-2025-28250/): Malicious code in ontrails (npm) (malicious package) - [MAL-2025-2825](https://insights.sbomify.com/MAL-2025-2825/): Malicious code in @uniqa/self-service-ms-api-v1 (npm) (malicious package) - [MAL-2025-28249](https://insights.sbomify.com/MAL-2025-28249/): Malicious code in ont-ts (npm) (malicious package) - [MAL-2025-28248](https://insights.sbomify.com/MAL-2025-28248/): Malicious code in onmymind (npm) (malicious package) - [MAL-2025-28247](https://insights.sbomify.com/MAL-2025-28247/): Malicious code in only-test-not-install (npm) (malicious package) - [MAL-2025-28246](https://insights.sbomify.com/MAL-2025-28246/): Malicious code in onixpod (npm) (malicious package) - [MAL-2025-28245](https://insights.sbomify.com/MAL-2025-28245/): Malicious code in onifixer (npm) (malicious package) - [MAL-2025-28244](https://insights.sbomify.com/MAL-2025-28244/): Malicious code in onhktuwcbazvgfkr (npm) (malicious package) - [MAL-2025-28243](https://insights.sbomify.com/MAL-2025-28243/): Malicious code in onfile (npm) (malicious package) - [MAL-2025-28242](https://insights.sbomify.com/MAL-2025-28242/): Malicious code in onestroke (npm) (malicious package) - [MAL-2025-28241](https://insights.sbomify.com/MAL-2025-28241/): Malicious code in oneshot-application-api (npm) (malicious package) - [MAL-2025-28240](https://insights.sbomify.com/MAL-2025-28240/): Malicious code in oneshike (npm) (malicious package) - [MAL-2025-2824](https://insights.sbomify.com/MAL-2025-2824/): Malicious code in @uniqa/self-registration-spec-api (npm) (malicious package) - [MAL-2025-28239](https://insights.sbomify.com/MAL-2025-28239/): Malicious code in ones-ai-web (npm) (malicious package) - [MAL-2025-28238](https://insights.sbomify.com/MAL-2025-28238/): Malicious code in onepush-browser-notifications (npm) (malicious package) - [MAL-2025-28237](https://insights.sbomify.com/MAL-2025-28237/): Malicious code in onedrive-verification (npm) (malicious package) - [MAL-2025-28236](https://insights.sbomify.com/MAL-2025-28236/): Malicious code in onedemo (npm) (malicious package) - [MAL-2025-28235](https://insights.sbomify.com/MAL-2025-28235/): Malicious code in onedata (npm) (malicious package) - [MAL-2025-28234](https://insights.sbomify.com/MAL-2025-28234/): Malicious code in one-to-one-sample (npm) (malicious package) - [MAL-2025-28233](https://insights.sbomify.com/MAL-2025-28233/): Malicious code in ondemand-title_page (npm) (malicious package) - [MAL-2025-28232](https://insights.sbomify.com/MAL-2025-28232/): Malicious code in ondemand-settings (npm) (malicious package) - [MAL-2025-28231](https://insights.sbomify.com/MAL-2025-28231/): Malicious code in ondabike (npm) (malicious package) - [MAL-2025-28230](https://insights.sbomify.com/MAL-2025-28230/): Malicious code in on-middleware-pulsar-jabbah (npm) (malicious package) - [MAL-2025-2823](https://insights.sbomify.com/MAL-2025-2823/): Malicious code in @uniqa/security-code-ms-api (npm) (malicious package) - [MAL-2025-28229](https://insights.sbomify.com/MAL-2025-28229/): Malicious code in on-meteor-quasarjet-boson (npm) (malicious package) - [MAL-2025-28228](https://insights.sbomify.com/MAL-2025-28228/): Malicious code in on-key-press (npm) (malicious package) - [MAL-2025-28227](https://insights.sbomify.com/MAL-2025-28227/): Malicious code in on-impulse-gulp-abiogenesis (npm) (malicious package) - [MAL-2025-28226](https://insights.sbomify.com/MAL-2025-28226/): Malicious code in on-duplex-perseus-quasar (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/799/