# Vulnerabilities published in 2025 - [MAL-2025-28225](https://insights.sbomify.com/MAL-2025-28225/): Malicious code in omnivideo (npm) (malicious package) - [MAL-2025-28224](https://insights.sbomify.com/MAL-2025-28224/): Malicious code in omnirom (npm) (malicious package) - [MAL-2025-28223](https://insights.sbomify.com/MAL-2025-28223/): Malicious code in omnihotel (npm) (malicious package) - [MAL-2025-28222](https://insights.sbomify.com/MAL-2025-28222/): Malicious code in omniauth-shopify-oauth2 (npm) (malicious package) - [MAL-2025-28221](https://insights.sbomify.com/MAL-2025-28221/): Malicious code in omnia-foundation (npm) (malicious package) - [MAL-2025-28220](https://insights.sbomify.com/MAL-2025-28220/): Malicious code in omni-law-menu-section (npm) (malicious package) - [MAL-2025-2822](https://insights.sbomify.com/MAL-2025-2822/): Malicious code in @uniqa/sales-ms-api (npm) (malicious package) - [MAL-2025-28219](https://insights.sbomify.com/MAL-2025-28219/): Malicious code in omicron-load-import-stub-thread (npm) (malicious package) - [MAL-2025-28218](https://insights.sbomify.com/MAL-2025-28218/): Malicious code in omicron-deploy-index-bad-sun (npm) (malicious package) - [MAL-2025-28217](https://insights.sbomify.com/MAL-2025-28217/): Malicious code in omgaqiujfkwblpxd (npm) (malicious package) - [MAL-2025-28216](https://insights.sbomify.com/MAL-2025-28216/): Malicious code in omekadd (npm) (malicious package) - [MAL-2025-28215](https://insights.sbomify.com/MAL-2025-28215/): Malicious code in omegawd (npm) (malicious package) - [MAL-2025-28214](https://insights.sbomify.com/MAL-2025-28214/): Malicious code in omegacen (npm) (malicious package) - [MAL-2025-28213](https://insights.sbomify.com/MAL-2025-28213/): Malicious code in omega-xml-assert-notify-iota (npm) (malicious package) - [MAL-2025-28212](https://insights.sbomify.com/MAL-2025-28212/): Malicious code in omega-pipe-stub-encode-easy (npm) (malicious package) - [MAL-2025-28211](https://insights.sbomify.com/MAL-2025-28211/): Malicious code in omega-old-catch-report-sanitize (npm) (malicious package) - [MAL-2025-28210](https://insights.sbomify.com/MAL-2025-28210/): Malicious code in omega-cms-lf-ng-md-file-input (npm) (malicious package) - [MAL-2025-2821](https://insights.sbomify.com/MAL-2025-2821/): Malicious code in @uniqa/reef (npm) (malicious package) - [MAL-2025-28209](https://insights.sbomify.com/MAL-2025-28209/): Malicious code in omails (npm) (malicious package) - [MAL-2025-28208](https://insights.sbomify.com/MAL-2025-28208/): Malicious code in olzbvmrdkqyxagef (npm) (malicious package) - [MAL-2025-28207](https://insights.sbomify.com/MAL-2025-28207/): Malicious code in oludog (npm) (malicious package) - [MAL-2025-28206](https://insights.sbomify.com/MAL-2025-28206/): Malicious code in oles-mixins (npm) (malicious package) - [MAL-2025-28205](https://insights.sbomify.com/MAL-2025-28205/): Malicious code in oldash (npm) (malicious package) - [MAL-2025-28204](https://insights.sbomify.com/MAL-2025-28204/): Malicious code in old-throw-chi-boolean-slow (npm) (malicious package) - [MAL-2025-28203](https://insights.sbomify.com/MAL-2025-28203/): Malicious code in old-secure-table-await-index (npm) (malicious package) - [MAL-2025-28202](https://insights.sbomify.com/MAL-2025-28202/): Malicious code in olapi (npm) (malicious package) - [MAL-2025-28201](https://insights.sbomify.com/MAL-2025-28201/): Malicious code in olamovani (npm) (malicious package) - [MAL-2025-28200](https://insights.sbomify.com/MAL-2025-28200/): Malicious code in olakedms (npm) (malicious package) - [MAL-2025-2820](https://insights.sbomify.com/MAL-2025-2820/): Malicious code in @uniqa/partner-masterdata-integration-ms-api (npm) (malicious package) - [MAL-2025-282](https://insights.sbomify.com/MAL-2025-282/): Malicious code in calypso-e2e (npm) (malicious package) - [MAL-2025-28199](https://insights.sbomify.com/MAL-2025-28199/): Malicious code in ol3-popup (npm) (malicious package) - [MAL-2025-28198](https://insights.sbomify.com/MAL-2025-28198/): Malicious code in oktakit (npm) (malicious package) - [MAL-2025-28197](https://insights.sbomify.com/MAL-2025-28197/): Malicious code in oktafian-tempe15-breki (npm) (malicious package) - [MAL-2025-28196](https://insights.sbomify.com/MAL-2025-28196/): Malicious code in oktafian-takokak25-sukiwir (npm) (malicious package) - [MAL-2025-28195](https://insights.sbomify.com/MAL-2025-28195/): Malicious code in oktafian-ongol-ongol68-kuki (npm) (malicious package) - [MAL-2025-28194](https://insights.sbomify.com/MAL-2025-28194/): Malicious code in oktafian-martabak28-breki (npm) (malicious package) - [MAL-2025-28193](https://insights.sbomify.com/MAL-2025-28193/): Malicious code in oktafian-lumpur56-breki (npm) (malicious package) - [MAL-2025-28192](https://insights.sbomify.com/MAL-2025-28192/): Malicious code in oktafian-liwet86-breki (npm) (malicious package) - [MAL-2025-28191](https://insights.sbomify.com/MAL-2025-28191/): Malicious code in oktafian-kolak85-kuki (npm) (malicious package) - [MAL-2025-28190](https://insights.sbomify.com/MAL-2025-28190/): Malicious code in oktafian-klipo10-sukiwir (npm) (malicious package) - [MAL-2025-2819](https://insights.sbomify.com/MAL-2025-2819/): Malicious code in @uniqa/health-claim-ms-api (npm) (malicious package) - [MAL-2025-28189](https://insights.sbomify.com/MAL-2025-28189/): Malicious code in oktafian-bika11-sukiwir (npm) (malicious package) - [MAL-2025-28188](https://insights.sbomify.com/MAL-2025-28188/): Malicious code in okta-serimuka74-breki (npm) (malicious package) - [MAL-2025-28187](https://insights.sbomify.com/MAL-2025-28187/): Malicious code in okta-sdk-golang-openapi (npm) (malicious package) - [MAL-2025-28186](https://insights.sbomify.com/MAL-2025-28186/): Malicious code in okta-kue51-breki (npm) (malicious package) - [MAL-2025-28185](https://insights.sbomify.com/MAL-2025-28185/): Malicious code in okta-i18n-bundles (npm) (malicious package) - [MAL-2025-28184](https://insights.sbomify.com/MAL-2025-28184/): Malicious code in okta-hosted-login (npm) (malicious package) - [MAL-2025-28183](https://insights.sbomify.com/MAL-2025-28183/): Malicious code in okta-gandul53-breki (npm) (malicious package) - [MAL-2025-28182](https://insights.sbomify.com/MAL-2025-28182/): Malicious code in okta-gado-gado45-breki (npm) (malicious package) - [MAL-2025-28181](https://insights.sbomify.com/MAL-2025-28181/): Malicious code in okmcyrplhnvewxfu (npm) (malicious package) - [MAL-2025-28180](https://insights.sbomify.com/MAL-2025-28180/): Malicious code in okipeqhzwdvtnkjx (npm) (malicious package) - [MAL-2025-2818](https://insights.sbomify.com/MAL-2025-2818/): Malicious code in @uniqa/document-ms-api (npm) (malicious package) - [MAL-2025-28179](https://insights.sbomify.com/MAL-2025-28179/): Malicious code in okimmo-api (npm) (malicious package) - [MAL-2025-28178](https://insights.sbomify.com/MAL-2025-28178/): Malicious code in okcollege-web-api (npm) (malicious package) - [MAL-2025-28177](https://insights.sbomify.com/MAL-2025-28177/): Malicious code in oj-lint (npm) (malicious package) - [MAL-2025-28176](https://insights.sbomify.com/MAL-2025-28176/): Malicious code in oishii (npm) (malicious package) - [MAL-2025-28175](https://insights.sbomify.com/MAL-2025-28175/): Malicious code in oijsoijs (npm) (malicious package) - [MAL-2025-28174](https://insights.sbomify.com/MAL-2025-28174/): Malicious code in ohzombies (npm) (malicious package) - [MAL-2025-28173](https://insights.sbomify.com/MAL-2025-28173/): Malicious code in ohzbxrstnigemckp (npm) (malicious package) - [MAL-2025-28172](https://insights.sbomify.com/MAL-2025-28172/): Malicious code in ohomework (npm) (malicious package) - [MAL-2025-28171](https://insights.sbomify.com/MAL-2025-28171/): Malicious code in ohmkit (npm) (malicious package) - [MAL-2025-28170](https://insights.sbomify.com/MAL-2025-28170/): Malicious code in oh-no (npm) (malicious package) - [MAL-2025-2817](https://insights.sbomify.com/MAL-2025-2817/): Malicious code in @uniqa/digital-inventory-ms-spec-api (npm) (malicious package) - [MAL-2025-28169](https://insights.sbomify.com/MAL-2025-28169/): Malicious code in ogxuwszqlpbfjymn (npm) (malicious package) - [MAL-2025-28168](https://insights.sbomify.com/MAL-2025-28168/): Malicious code in ogreprj (npm) (malicious package) - [MAL-2025-28167](https://insights.sbomify.com/MAL-2025-28167/): Malicious code in ogreport (npm) (malicious package) - [MAL-2025-28166](https://insights.sbomify.com/MAL-2025-28166/): Malicious code in ogrelite (npm) (malicious package) - [MAL-2025-28165](https://insights.sbomify.com/MAL-2025-28165/): Malicious code in ogi-sate8-breki (npm) (malicious package) - [MAL-2025-28164](https://insights.sbomify.com/MAL-2025-28164/): Malicious code in ogi-rujak61-sukiwir (npm) (malicious package) - [MAL-2025-28163](https://insights.sbomify.com/MAL-2025-28163/): Malicious code in ogi-miemee12-breki (npm) (malicious package) - [MAL-2025-28162](https://insights.sbomify.com/MAL-2025-28162/): Malicious code in ogi-mendoan55-breki (npm) (malicious package) - [MAL-2025-28161](https://insights.sbomify.com/MAL-2025-28161/): Malicious code in ogi-dradag52-kuki (npm) (malicious package) - [MAL-2025-28160](https://insights.sbomify.com/MAL-2025-28160/): Malicious code in oggvosh (npm) (malicious package) - [MAL-2025-2816](https://insights.sbomify.com/MAL-2025-2816/): Malicious code in @uniqa/device-mgmt-ms-api (npm) (malicious package) - [MAL-2025-28159](https://insights.sbomify.com/MAL-2025-28159/): Malicious code in og-cafe (npm) (malicious package) - [MAL-2025-28158](https://insights.sbomify.com/MAL-2025-28158/): Malicious code in ofxtablet (npm) (malicious package) - [MAL-2025-28157](https://insights.sbomify.com/MAL-2025-28157/): Malicious code in ofxsqlite (npm) (malicious package) - [MAL-2025-28156](https://insights.sbomify.com/MAL-2025-28156/): Malicious code in ofxopenvj (npm) (malicious package) - [MAL-2025-28155](https://insights.sbomify.com/MAL-2025-28155/): Malicious code in ofxdmx (npm) (malicious package) - [MAL-2025-28154](https://insights.sbomify.com/MAL-2025-28154/): Malicious code in offsite_payments (npm) (malicious package) - [MAL-2025-28153](https://insights.sbomify.com/MAL-2025-28153/): Malicious code in office-ui-fabric-react-repo (npm) (malicious package) - [MAL-2025-28152](https://insights.sbomify.com/MAL-2025-28152/): Malicious code in oewebdoc (npm) (malicious package) - [MAL-2025-28151](https://insights.sbomify.com/MAL-2025-28151/): Malicious code in odin-hydrogeology-dagda-middleware (npm) (malicious package) - [MAL-2025-28150](https://insights.sbomify.com/MAL-2025-28150/): Malicious code in odin-ganymede-upgrade-semantic-release (npm) (malicious package) - [MAL-2025-2815](https://insights.sbomify.com/MAL-2025-2815/): Malicious code in @uniqa/customer-masterdata-ms (npm) (malicious package) - [MAL-2025-28149](https://insights.sbomify.com/MAL-2025-28149/): Malicious code in odin-biosignature-passport-dendrochronology (npm) (malicious package) - [MAL-2025-28148](https://insights.sbomify.com/MAL-2025-28148/): Malicious code in odguest (npm) (malicious package) - [MAL-2025-28147](https://insights.sbomify.com/MAL-2025-28147/): Malicious code in oddornot (npm) (malicious package) - [MAL-2025-28146](https://insights.sbomify.com/MAL-2025-28146/): Malicious code in oddjob (npm) (malicious package) - [MAL-2025-28145](https://insights.sbomify.com/MAL-2025-28145/): Malicious code in odash (npm) (malicious package) - [MAL-2025-28144](https://insights.sbomify.com/MAL-2025-28144/): Malicious code in oculusfpv (npm) (malicious package) - [MAL-2025-28143](https://insights.sbomify.com/MAL-2025-28143/): Malicious code in oculista (npm) (malicious package) - [MAL-2025-28142](https://insights.sbomify.com/MAL-2025-28142/): Malicious code in octopus-whirlpool-ejn271-project (npm) (malicious package) - [MAL-2025-28141](https://insights.sbomify.com/MAL-2025-28141/): Malicious code in octopus-sequoia-elc401-project (npm) (malicious package) - [MAL-2025-28140](https://insights.sbomify.com/MAL-2025-28140/): Malicious code in octopus-quasar-lcx959-project (npm) (malicious package) - [MAL-2025-2814](https://insights.sbomify.com/MAL-2025-2814/): Malicious code in @uniqa/customer-loyalty-ms-api (npm) (malicious package) - [MAL-2025-28139](https://insights.sbomify.com/MAL-2025-28139/): Malicious code in octopus-quasar-gqu322-project (npm) (malicious package) - [MAL-2025-28138](https://insights.sbomify.com/MAL-2025-28138/): Malicious code in octopus-hollow-bvz446-project (npm) (malicious package) - [MAL-2025-28137](https://insights.sbomify.com/MAL-2025-28137/): Malicious code in octopus-gorge-hes657-project (npm) (malicious package) - [MAL-2025-28136](https://insights.sbomify.com/MAL-2025-28136/): Malicious code in octopus-everest-prx975-project (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/800/