# Vulnerabilities published in 2025 - [MAL-2025-28135](https://insights.sbomify.com/MAL-2025-28135/): Malicious code in octopus-dandelion-une212-project (npm) (malicious package) - [MAL-2025-28134](https://insights.sbomify.com/MAL-2025-28134/): Malicious code in octopus-connector (npm) (malicious package) - [MAL-2025-28133](https://insights.sbomify.com/MAL-2025-28133/): Malicious code in octopus-app (npm) (malicious package) - [MAL-2025-28132](https://insights.sbomify.com/MAL-2025-28132/): Malicious code in octopus-acorn-qox411-project (npm) (malicious package) - [MAL-2025-28131](https://insights.sbomify.com/MAL-2025-28131/): Malicious code in octofox (npm) (malicious package) - [MAL-2025-28130](https://insights.sbomify.com/MAL-2025-28130/): Malicious code in octo-translations (npm) (malicious package) - [MAL-2025-2813](https://insights.sbomify.com/MAL-2025-2813/): Malicious code in @uniqa/contract-ms-spec-api (npm) (malicious package) - [MAL-2025-28129](https://insights.sbomify.com/MAL-2025-28129/): Malicious code in octavianreport (npm) (malicious package) - [MAL-2025-28128](https://insights.sbomify.com/MAL-2025-28128/): Malicious code in octans-taurus-rest-archaeometry (npm) (malicious package) - [MAL-2025-28127](https://insights.sbomify.com/MAL-2025-28127/): Malicious code in octans-run-script-cors-start (npm) (malicious package) - [MAL-2025-28126](https://insights.sbomify.com/MAL-2025-28126/): Malicious code in octans-dactyl-dependencies-proteomics (npm) (malicious package) - [MAL-2025-28125](https://insights.sbomify.com/MAL-2025-28125/): Malicious code in octans-chariklo-magellan-jasmine (npm) (malicious package) - [MAL-2025-28124](https://insights.sbomify.com/MAL-2025-28124/): Malicious code in ocsportal (npm) (malicious package) - [MAL-2025-28123](https://insights.sbomify.com/MAL-2025-28123/): Malicious code in ociney (npm) (malicious package) - [MAL-2025-28122](https://insights.sbomify.com/MAL-2025-28122/): Malicious code in ocha-sate17-sukiwir (npm) (malicious package) - [MAL-2025-28121](https://insights.sbomify.com/MAL-2025-28121/): Malicious code in ocha-bakso62-breki (npm) (malicious package) - [MAL-2025-28120](https://insights.sbomify.com/MAL-2025-28120/): Malicious code in ocenaudio (npm) (malicious package) - [MAL-2025-2812](https://insights.sbomify.com/MAL-2025-2812/): Malicious code in @uniqa/contract-answers-ms-api (npm) (malicious package) - [MAL-2025-28119](https://insights.sbomify.com/MAL-2025-28119/): Malicious code in oceanlife (npm) (malicious package) - [MAL-2025-28118](https://insights.sbomify.com/MAL-2025-28118/): Malicious code in ocean_u6dek_c3f0e_yacht (npm) (malicious package) - [MAL-2025-28117](https://insights.sbomify.com/MAL-2025-28117/): Malicious code in ocean_lw8ht_3xcfp_lunar (npm) (malicious package) - [MAL-2025-28116](https://insights.sbomify.com/MAL-2025-28116/): Malicious code in ocean_g0du9_rij9o_wander (npm) (malicious package) - [MAL-2025-28115](https://insights.sbomify.com/MAL-2025-28115/): Malicious code in ocean_demwp_9vyjy_canyon (npm) (malicious package) - [MAL-2025-28114](https://insights.sbomify.com/MAL-2025-28114/): Malicious code in ocean_bjouy_rvlgm_rainbow (npm) (malicious package) - [MAL-2025-28113](https://insights.sbomify.com/MAL-2025-28113/): Malicious code in ocean_9v42t_xu2yj_phoenix (npm) (malicious package) - [MAL-2025-28112](https://insights.sbomify.com/MAL-2025-28112/): Malicious code in ocean_6icou_mgxmf_tempest (npm) (malicious package) - [MAL-2025-28111](https://insights.sbomify.com/MAL-2025-28111/): Malicious code in ocean_4u0o8_qyqjb_zenith (npm) (malicious package) - [MAL-2025-28110](https://insights.sbomify.com/MAL-2025-28110/): Malicious code in ocean_4pqsi_vxafn_grove (npm) (malicious package) - [MAL-2025-2811](https://insights.sbomify.com/MAL-2025-2811/): Malicious code in @uniqa/claims-ms-api (npm) (malicious package) - [MAL-2025-28109](https://insights.sbomify.com/MAL-2025-28109/): Malicious code in ocean_42ybi_m9g8b_twilight (npm) (malicious package) - [MAL-2025-28108](https://insights.sbomify.com/MAL-2025-28108/): Malicious code in ocean_0wyzl_ngvm7_yosemite (npm) (malicious package) - [MAL-2025-28107](https://insights.sbomify.com/MAL-2025-28107/): Malicious code in ocean-whale-efh080-project (npm) (malicious package) - [MAL-2025-28106](https://insights.sbomify.com/MAL-2025-28106/): Malicious code in ocean-vz9k7-bf2ia-uplift-project (npm) (malicious package) - [MAL-2025-28105](https://insights.sbomify.com/MAL-2025-28105/): Malicious code in ocean-umbra-fgs262-project (npm) (malicious package) - [MAL-2025-28104](https://insights.sbomify.com/MAL-2025-28104/): Malicious code in ocean-saturn-qat049-project (npm) (malicious package) - [MAL-2025-28103](https://insights.sbomify.com/MAL-2025-28103/): Malicious code in ocean-reef-fvx726-project (npm) (malicious package) - [MAL-2025-28102](https://insights.sbomify.com/MAL-2025-28102/): Malicious code in ocean-quasar-rfe461-project (npm) (malicious package) - [MAL-2025-28101](https://insights.sbomify.com/MAL-2025-28101/): Malicious code in ocean-pnnt7-qtw8t-grove-project (npm) (malicious package) - [MAL-2025-28100](https://insights.sbomify.com/MAL-2025-28100/): Malicious code in ocean-opal-jor181-project (npm) (malicious package) - [MAL-2025-2810](https://insights.sbomify.com/MAL-2025-2810/): Malicious code in @instant-messengers/vk-teams-bridge (npm) (malicious package) - [MAL-2025-281](https://insights.sbomify.com/MAL-2025-281/): Malicious code in calypso-doctor (npm) (malicious package) - [MAL-2025-28099](https://insights.sbomify.com/MAL-2025-28099/): Malicious code in ocean-nectar-qxl127-project (npm) (malicious package) - [MAL-2025-28098](https://insights.sbomify.com/MAL-2025-28098/): Malicious code in ocean-nautilus-ker967-project (npm) (malicious package) - [MAL-2025-28097](https://insights.sbomify.com/MAL-2025-28097/): Malicious code in ocean-moose-kec302-project (npm) (malicious package) - [MAL-2025-28096](https://insights.sbomify.com/MAL-2025-28096/): Malicious code in ocean-mist-est430-project (npm) (malicious package) - [MAL-2025-28095](https://insights.sbomify.com/MAL-2025-28095/): Malicious code in ocean-lr9iu-tmnld-emerald-project (npm) (malicious package) - [MAL-2025-28094](https://insights.sbomify.com/MAL-2025-28094/): Malicious code in ocean-kiwi-tmf596-project (npm) (malicious package) - [MAL-2025-28093](https://insights.sbomify.com/MAL-2025-28093/): Malicious code in ocean-kiwi-tcd532-project (npm) (malicious package) - [MAL-2025-28092](https://insights.sbomify.com/MAL-2025-28092/): Malicious code in ocean-everglow-krl986-project (npm) (malicious package) - [MAL-2025-28091](https://insights.sbomify.com/MAL-2025-28091/): Malicious code in ocean-ck8j4-2hlbn-dune-project (npm) (malicious package) - [MAL-2025-28090](https://insights.sbomify.com/MAL-2025-28090/): Malicious code in ocean-bark-b1un (npm) (malicious package) - [MAL-2025-2809](https://insights.sbomify.com/MAL-2025-2809/): Malicious code in @domons/test123 (npm) (malicious package) - [MAL-2025-28089](https://insights.sbomify.com/MAL-2025-28089/): Malicious code in ocean-b8h9z-rnacg-jungle-project (npm) (malicious package) - [MAL-2025-28088](https://insights.sbomify.com/MAL-2025-28088/): Malicious code in ocean-apple-1e1r (npm) (malicious package) - [MAL-2025-28087](https://insights.sbomify.com/MAL-2025-28087/): Malicious code in ocean-a74nn-9pmbx-haven-project (npm) (malicious package) - [MAL-2025-28086](https://insights.sbomify.com/MAL-2025-28086/): Malicious code in ocean-7fbyh-tax4c-labyrinth-project (npm) (malicious package) - [MAL-2025-28085](https://insights.sbomify.com/MAL-2025-28085/): Malicious code in ocean-5mlhv-alzmw-quasar-project (npm) (malicious package) - [MAL-2025-28084](https://insights.sbomify.com/MAL-2025-28084/): Malicious code in ocean-4v7fh-fwl2f-xanadu-project (npm) (malicious package) - [MAL-2025-28083](https://insights.sbomify.com/MAL-2025-28083/): Malicious code in ocean-0x8ao-mmpa5-unity-project (npm) (malicious package) - [MAL-2025-28082](https://insights.sbomify.com/MAL-2025-28082/): Malicious code in ocean-03ziy-f4gib-kale-project (npm) (malicious package) - [MAL-2025-28081](https://insights.sbomify.com/MAL-2025-28081/): Malicious code in oce-login-enabler (npm) (malicious package) - [MAL-2025-28080](https://insights.sbomify.com/MAL-2025-28080/): Malicious code in oce-login (npm) (malicious package) - [MAL-2025-2808](https://insights.sbomify.com/MAL-2025-2808/): Malicious code in @sas-dvr/ltjs-vav (npm) (malicious package) - [MAL-2025-28079](https://insights.sbomify.com/MAL-2025-28079/): Malicious code in occupy-test6035 (npm) (malicious package) - [MAL-2025-28078](https://insights.sbomify.com/MAL-2025-28078/): Malicious code in ocbeerxml (npm) (malicious package) - [MAL-2025-28077](https://insights.sbomify.com/MAL-2025-28077/): Malicious code in ocamlmath (npm) (malicious package) - [MAL-2025-28076](https://insights.sbomify.com/MAL-2025-28076/): Malicious code in ocamlfind (npm) (malicious package) - [MAL-2025-28075](https://insights.sbomify.com/MAL-2025-28075/): Malicious code in ocamini (npm) (malicious package) - [MAL-2025-28074](https://insights.sbomify.com/MAL-2025-28074/): Malicious code in obsunc (npm) (malicious package) - [MAL-2025-28073](https://insights.sbomify.com/MAL-2025-28073/): Malicious code in obsidian_c3z8b_csv9g_daybreak (npm) (malicious package) - [MAL-2025-28072](https://insights.sbomify.com/MAL-2025-28072/): Malicious code in obsidian_bbmoa_gqnlv_saffron (npm) (malicious package) - [MAL-2025-28071](https://insights.sbomify.com/MAL-2025-28071/): Malicious code in obsidian_9sirt_rppgo_twilight (npm) (malicious package) - [MAL-2025-28070](https://insights.sbomify.com/MAL-2025-28070/): Malicious code in obsidian_2ahmf_vbejq_wind (npm) (malicious package) - [MAL-2025-2807](https://insights.sbomify.com/MAL-2025-2807/): Malicious code in @sas-dvr/nova-graph (npm) (malicious package) - [MAL-2025-28069](https://insights.sbomify.com/MAL-2025-28069/): Malicious code in obsidian-vi126-k7sjp-hearth-project (npm) (malicious package) - [MAL-2025-28068](https://insights.sbomify.com/MAL-2025-28068/): Malicious code in obsidian-rm5zg-wjktt-ocean-project (npm) (malicious package) - [MAL-2025-28067](https://insights.sbomify.com/MAL-2025-28067/): Malicious code in obsidian-jplel-d5lei-nymph-project (npm) (malicious package) - [MAL-2025-28066](https://insights.sbomify.com/MAL-2025-28066/): Malicious code in obsidian-iumeo-ks71t-night-project (npm) (malicious package) - [MAL-2025-28065](https://insights.sbomify.com/MAL-2025-28065/): Malicious code in obsidian-b763a-7h0h1-solace-project (npm) (malicious package) - [MAL-2025-28064](https://insights.sbomify.com/MAL-2025-28064/): Malicious code in obsidian-9dzi7-6um2j-xenith-project (npm) (malicious package) - [MAL-2025-28063](https://insights.sbomify.com/MAL-2025-28063/): Malicious code in obsidian-8d87p-e0waw-rose-project (npm) (malicious package) - [MAL-2025-28062](https://insights.sbomify.com/MAL-2025-28062/): Malicious code in obsidian-1k6o4-lgj2h-dawn-project (npm) (malicious package) - [MAL-2025-28061](https://insights.sbomify.com/MAL-2025-28061/): Malicious code in observu (npm) (malicious package) - [MAL-2025-28060](https://insights.sbomify.com/MAL-2025-28060/): Malicious code in observed-bits (npm) (malicious package) - [MAL-2025-2806](https://insights.sbomify.com/MAL-2025-2806/): Malicious code in @sas-dvr/nova-crossorigin-auth (npm) (malicious package) - [MAL-2025-28059](https://insights.sbomify.com/MAL-2025-28059/): Malicious code in observatory-yacht-750n (npm) (malicious package) - [MAL-2025-28058](https://insights.sbomify.com/MAL-2025-28058/): Malicious code in observatory-teak-aocm (npm) (malicious package) - [MAL-2025-28057](https://insights.sbomify.com/MAL-2025-28057/): Malicious code in observatory-jetty-e0m4 (npm) (malicious package) - [MAL-2025-28056](https://insights.sbomify.com/MAL-2025-28056/): Malicious code in observatory-jalapeno-nkmx (npm) (malicious package) - [MAL-2025-28055](https://insights.sbomify.com/MAL-2025-28055/): Malicious code in observatory-banana-ci96 (npm) (malicious package) - [MAL-2025-28054](https://insights.sbomify.com/MAL-2025-28054/): Malicious code in observatory-banana-bqbu (npm) (malicious package) - [MAL-2025-28053](https://insights.sbomify.com/MAL-2025-28053/): Malicious code in observatory-alpha-u7qb (npm) (malicious package) - [MAL-2025-28052](https://insights.sbomify.com/MAL-2025-28052/): Malicious code in observatory-airplane-ohjh (npm) (malicious package) - [MAL-2025-28051](https://insights.sbomify.com/MAL-2025-28051/): Malicious code in obscom (npm) (malicious package) - [MAL-2025-28050](https://insights.sbomify.com/MAL-2025-28050/): Malicious code in obowngita (npm) (malicious package) - [MAL-2025-2805](https://insights.sbomify.com/MAL-2025-2805/): Malicious code in @sas-dvr/ltjs-gtl (npm) (malicious package) - [MAL-2025-28049](https://insights.sbomify.com/MAL-2025-28049/): Malicious code in obligb (npm) (malicious package) - [MAL-2025-28048](https://insights.sbomify.com/MAL-2025-28048/): Malicious code in objektno (npm) (malicious package) - [MAL-2025-28047](https://insights.sbomify.com/MAL-2025-28047/): Malicious code in object-window-dtc (npm) (malicious package) - [MAL-2025-28046](https://insights.sbomify.com/MAL-2025-28046/): Malicious code in object-tools-ts (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/801/