# Vulnerabilities published in 2025


- [MAL-2025-28045](https://insights.sbomify.com/MAL-2025-28045/): Malicious code in object-table-hash-private-enum (npm) (malicious package)
- [MAL-2025-28044](https://insights.sbomify.com/MAL-2025-28044/): Malicious code in object-storage-service (npm) (malicious package)
- [MAL-2025-28043](https://insights.sbomify.com/MAL-2025-28043/): Malicious code in object-easy-route-proxy-bundle (npm) (malicious package)
- [MAL-2025-28042](https://insights.sbomify.com/MAL-2025-28042/): Malicious code in object-cache-dog-test-byte (npm) (malicious package)
- [MAL-2025-28041](https://insights.sbomify.com/MAL-2025-28041/): Malicious code in obitty (npm) (malicious package)
- [MAL-2025-28040](https://insights.sbomify.com/MAL-2025-28040/): Malicious code in obility (npm) (malicious package)
- [MAL-2025-2804](https://insights.sbomify.com/MAL-2025-2804/): Malicious code in @sas-dvr/ltjs-bird (npm) (malicious package)
- [MAL-2025-28039](https://insights.sbomify.com/MAL-2025-28039/): Malicious code in obfuscalp (npm) (malicious package)
- [MAL-2025-28038](https://insights.sbomify.com/MAL-2025-28038/): Malicious code in obflex (npm) (malicious package)
- [MAL-2025-28037](https://insights.sbomify.com/MAL-2025-28037/): Malicious code in oberon-shelljs-build-development (npm) (malicious package)
- [MAL-2025-28036](https://insights.sbomify.com/MAL-2025-28036/): Malicious code in oberon-sedna-steganography-pegasus (npm) (malicious package)
- [MAL-2025-28035](https://insights.sbomify.com/MAL-2025-28035/): Malicious code in oberon-nightwatch-cassini-sass-loader (npm) (malicious package)
- [MAL-2025-28034](https://insights.sbomify.com/MAL-2025-28034/): Malicious code in oberon-neptune-quark-nestjs (npm) (malicious package)
- [MAL-2025-28033](https://insights.sbomify.com/MAL-2025-28033/): Malicious code in oberon-css-loader-neptunology-auth0 (npm) (malicious package)
- [MAL-2025-28032](https://insights.sbomify.com/MAL-2025-28032/): Malicious code in oberon-blaze-apollo-pegasus (npm) (malicious package)
- [MAL-2025-28031](https://insights.sbomify.com/MAL-2025-28031/): Malicious code in obelisk_q0e5v_2z4of_kaleidoscope (npm) (malicious package)
- [MAL-2025-28030](https://insights.sbomify.com/MAL-2025-28030/): Malicious code in obelisk_pjsy1_mbfb8_maple (npm) (malicious package)
- [MAL-2025-2803](https://insights.sbomify.com/MAL-2025-2803/): Malicious code in ria-learninghub (npm) (malicious package)
- [MAL-2025-28029](https://insights.sbomify.com/MAL-2025-28029/): Malicious code in obelisk_pf8uw_iquis_jasmine (npm) (malicious package)
- [MAL-2025-28028](https://insights.sbomify.com/MAL-2025-28028/): Malicious code in obelisk_mp54q_rsjbk_lullaby (npm) (malicious package)
- [MAL-2025-28027](https://insights.sbomify.com/MAL-2025-28027/): Malicious code in obelisk_kneej_x2xas_limestone (npm) (malicious package)
- [MAL-2025-28026](https://insights.sbomify.com/MAL-2025-28026/): Malicious code in obelisk_fyf9i_c66wj_kestrel (npm) (malicious package)
- [MAL-2025-28025](https://insights.sbomify.com/MAL-2025-28025/): Malicious code in obatkuat (npm) (malicious package)
- [MAL-2025-28024](https://insights.sbomify.com/MAL-2025-28024/): Malicious code in oaxaca (npm) (malicious package)
- [MAL-2025-28023](https://insights.sbomify.com/MAL-2025-28023/): Malicious code in oauthdojo (npm) (malicious package)
- [MAL-2025-28022](https://insights.sbomify.com/MAL-2025-28022/): Malicious code in oauthapi (npm) (malicious package)
- [MAL-2025-28021](https://insights.sbomify.com/MAL-2025-28021/): Malicious code in oauth-web-flow (npm) (malicious package)
- [MAL-2025-28020](https://insights.sbomify.com/MAL-2025-28020/): Malicious code in oauth-walkthrough (npm) (malicious package)
- [MAL-2025-2802](https://insights.sbomify.com/MAL-2025-2802/): Malicious code in web-commerce-hook (npm) (malicious package)
- [MAL-2025-28019](https://insights.sbomify.com/MAL-2025-28019/): Malicious code in oauth-procyon-sequelize-dendrochronology (npm) (malicious package)
- [MAL-2025-28018](https://insights.sbomify.com/MAL-2025-28018/): Malicious code in oauth-hermes-release-it-nebula (npm) (malicious package)
- [MAL-2025-28017](https://insights.sbomify.com/MAL-2025-28017/): Malicious code in oasis_sfsqj_bfjkv_dew (npm) (malicious package)
- [MAL-2025-28016](https://insights.sbomify.com/MAL-2025-28016/): Malicious code in oasis_piccv_o3xm3_infinity (npm) (malicious package)
- [MAL-2025-28015](https://insights.sbomify.com/MAL-2025-28015/): Malicious code in oasis_fva33_5yxyh_zenith (npm) (malicious package)
- [MAL-2025-28014](https://insights.sbomify.com/MAL-2025-28014/): Malicious code in oasis_cggzq_bnrzd_quasar (npm) (malicious package)
- [MAL-2025-28013](https://insights.sbomify.com/MAL-2025-28013/): Malicious code in oasis_b1xr1_m8fg6_voyage (npm) (malicious package)
- [MAL-2025-28012](https://insights.sbomify.com/MAL-2025-28012/): Malicious code in oasis-xvbad-abn2r-quill-project (npm) (malicious package)
- [MAL-2025-28011](https://insights.sbomify.com/MAL-2025-28011/): Malicious code in oasis-x9ybz-n1yes-unity-project (npm) (malicious package)
- [MAL-2025-28010](https://insights.sbomify.com/MAL-2025-28010/): Malicious code in oasis-wallet (npm) (malicious package)
- [MAL-2025-2801](https://insights.sbomify.com/MAL-2025-2801/): Malicious code in nextmvc3primary (npm) (malicious package)
- [MAL-2025-28009](https://insights.sbomify.com/MAL-2025-28009/): Malicious code in oasis-q3an5-xfmxa-nymph-project (npm) (malicious package)
- [MAL-2025-28008](https://insights.sbomify.com/MAL-2025-28008/): Malicious code in oasis-kj0dc-r42bz-glow-project (npm) (malicious package)
- [MAL-2025-28007](https://insights.sbomify.com/MAL-2025-28007/): Malicious code in oasis-ivory-tpq806-project (npm) (malicious package)
- [MAL-2025-28006](https://insights.sbomify.com/MAL-2025-28006/): Malicious code in oasis-auo12-4wf7d-cascade-project (npm) (malicious package)
- [MAL-2025-28005](https://insights.sbomify.com/MAL-2025-28005/): Malicious code in oasis-59qsj-xdrzi-jade-project (npm) (malicious package)
- [MAL-2025-28004](https://insights.sbomify.com/MAL-2025-28004/): Malicious code in oaooya (npm) (malicious package)
- [MAL-2025-28003](https://insights.sbomify.com/MAL-2025-28003/): Malicious code in oaonline (npm) (malicious package)
- [MAL-2025-28002](https://insights.sbomify.com/MAL-2025-28002/): Malicious code in oaobbwo (npm) (malicious package)
- [MAL-2025-28001](https://insights.sbomify.com/MAL-2025-28001/): Malicious code in oak-zephyr-equ628-project (npm) (malicious package)
- [MAL-2025-28000](https://insights.sbomify.com/MAL-2025-28000/): Malicious code in oak-zenith-cdt982-project (npm) (malicious package)
- [MAL-2025-2800](https://insights.sbomify.com/MAL-2025-2800/): Malicious code in eqbank (npm) (malicious package)
- [MAL-2025-280](https://insights.sbomify.com/MAL-2025-280/): Malicious code in calypso-config (npm) (malicious package)
- [MAL-2025-28](https://insights.sbomify.com/MAL-2025-28/): Malicious code in cursor-retrieval (npm) (malicious package)
- [MAL-2025-27999](https://insights.sbomify.com/MAL-2025-27999/): Malicious code in oak-redwood-8b5z (npm) (malicious package)
- [MAL-2025-27998](https://insights.sbomify.com/MAL-2025-27998/): Malicious code in oak-quinoa-13os (npm) (malicious package)
- [MAL-2025-27997](https://insights.sbomify.com/MAL-2025-27997/): Malicious code in oak-ocean-blo864-project (npm) (malicious package)
- [MAL-2025-27996](https://insights.sbomify.com/MAL-2025-27996/): Malicious code in oak-nebula-vu2v (npm) (malicious package)
- [MAL-2025-27995](https://insights.sbomify.com/MAL-2025-27995/): Malicious code in oak-moose-xbl178-project (npm) (malicious package)
- [MAL-2025-27994](https://insights.sbomify.com/MAL-2025-27994/): Malicious code in oak-moon-glz133-project (npm) (malicious package)
- [MAL-2025-27993](https://insights.sbomify.com/MAL-2025-27993/): Malicious code in oak-lettuce-hhga (npm) (malicious package)
- [MAL-2025-27992](https://insights.sbomify.com/MAL-2025-27992/): Malicious code in oak-kaleidoscope-psk469-project (npm) (malicious package)
- [MAL-2025-27991](https://insights.sbomify.com/MAL-2025-27991/): Malicious code in oak-jellyfish-zfj602-project (npm) (malicious package)
- [MAL-2025-27990](https://insights.sbomify.com/MAL-2025-27990/): Malicious code in oak-jasmine-clb091-project (npm) (malicious package)
- [MAL-2025-2799](https://insights.sbomify.com/MAL-2025-2799/): Malicious code in sony-liv-smarttv (npm) (malicious package)
- [MAL-2025-27989](https://insights.sbomify.com/MAL-2025-27989/): Malicious code in oak-hollow-qdw478-project (npm) (malicious package)
- [MAL-2025-27988](https://insights.sbomify.com/MAL-2025-27988/): Malicious code in oak-golf-fo3p (npm) (malicious package)
- [MAL-2025-27987](https://insights.sbomify.com/MAL-2025-27987/): Malicious code in oak-ecosystem-dsr819-project (npm) (malicious package)
- [MAL-2025-27986](https://insights.sbomify.com/MAL-2025-27986/): Malicious code in oak-dewdrop-rmz810-project (npm) (malicious package)
- [MAL-2025-27985](https://insights.sbomify.com/MAL-2025-27985/): Malicious code in oak-desert-ecm868-project (npm) (malicious package)
- [MAL-2025-27984](https://insights.sbomify.com/MAL-2025-27984/): Malicious code in oak-buffalo-ksf833-project (npm) (malicious package)
- [MAL-2025-27983](https://insights.sbomify.com/MAL-2025-27983/): Malicious code in oah922 (npm) (malicious package)
- [MAL-2025-27982](https://insights.sbomify.com/MAL-2025-27982/): Malicious code in oaevsmpdgjlzuhqi (npm) (malicious package)
- [MAL-2025-27981](https://insights.sbomify.com/MAL-2025-27981/): Malicious code in o1rjq6 (npm) (malicious package)
- [MAL-2025-27980](https://insights.sbomify.com/MAL-2025-27980/): Malicious code in nzxmltv (npm) (malicious package)
- [MAL-2025-2798](https://insights.sbomify.com/MAL-2025-2798/): Malicious code in regiepult (npm) (malicious package)
- [MAL-2025-27979](https://insights.sbomify.com/MAL-2025-27979/): Malicious code in nzbmonkey (npm) (malicious package)
- [MAL-2025-27978](https://insights.sbomify.com/MAL-2025-27978/): Malicious code in nyut3 (npm) (malicious package)
- [MAL-2025-27977](https://insights.sbomify.com/MAL-2025-27977/): Malicious code in nyty5 (npm) (malicious package)
- [MAL-2025-27976](https://insights.sbomify.com/MAL-2025-27976/): Malicious code in nymph_vdqs9_rr1i6_moon (npm) (malicious package)
- [MAL-2025-27975](https://insights.sbomify.com/MAL-2025-27975/): Malicious code in nymph_rvuro_4pryq_elephant (npm) (malicious package)
- [MAL-2025-27974](https://insights.sbomify.com/MAL-2025-27974/): Malicious code in nymph_ogt4a_4mk5d_honey (npm) (malicious package)
- [MAL-2025-27973](https://insights.sbomify.com/MAL-2025-27973/): Malicious code in nymph_1nrzj_w0n3w_harmony (npm) (malicious package)
- [MAL-2025-27972](https://insights.sbomify.com/MAL-2025-27972/): Malicious code in nymph-ztbcg-01csm-quill-project (npm) (malicious package)
- [MAL-2025-27971](https://insights.sbomify.com/MAL-2025-27971/): Malicious code in nymph-zjhzl-rphrb-xenith-project (npm) (malicious package)
- [MAL-2025-27970](https://insights.sbomify.com/MAL-2025-27970/): Malicious code in nymph-whale-shr154-project (npm) (malicious package)
- [MAL-2025-2797](https://insights.sbomify.com/MAL-2025-2797/): Malicious code in careform (npm) (malicious package)
- [MAL-2025-27969](https://insights.sbomify.com/MAL-2025-27969/): Malicious code in nymph-ufb79-mf22m-moondust-project (npm) (malicious package)
- [MAL-2025-27968](https://insights.sbomify.com/MAL-2025-27968/): Malicious code in nymph-u4uw1-cno3y-zephyr-project (npm) (malicious package)
- [MAL-2025-27967](https://insights.sbomify.com/MAL-2025-27967/): Malicious code in nymph-tundra-mxo940-project (npm) (malicious package)
- [MAL-2025-27966](https://insights.sbomify.com/MAL-2025-27966/): Malicious code in nymph-swan-chd215-project (npm) (malicious package)
- [MAL-2025-27965](https://insights.sbomify.com/MAL-2025-27965/): Malicious code in nymph-siqnx-8ixrn-spark-project (npm) (malicious package)
- [MAL-2025-27964](https://insights.sbomify.com/MAL-2025-27964/): Malicious code in nymph-sapphire-krb776-project (npm) (malicious package)
- [MAL-2025-27963](https://insights.sbomify.com/MAL-2025-27963/): Malicious code in nymph-rhvgk-m6aza-amethyst-project (npm) (malicious package)
- [MAL-2025-27962](https://insights.sbomify.com/MAL-2025-27962/): Malicious code in nymph-orchid-klh406-project (npm) (malicious package)
- [MAL-2025-27961](https://insights.sbomify.com/MAL-2025-27961/): Malicious code in nymph-nra64-thqa3-xenith-project (npm) (malicious package)
- [MAL-2025-27960](https://insights.sbomify.com/MAL-2025-27960/): Malicious code in nymph-nectar-pel131-project (npm) (malicious package)
- [MAL-2025-2796](https://insights.sbomify.com/MAL-2025-2796/): Malicious code in rippling-marketing-site (npm) (malicious package)
- [MAL-2025-27959](https://insights.sbomify.com/MAL-2025-27959/): Malicious code in nymph-nc2te-42d9y-haven-project (npm) (malicious package)
- [MAL-2025-27958](https://insights.sbomify.com/MAL-2025-27958/): Malicious code in nymph-mk39f-ja9mg-twilight-project (npm) (malicious package)
- [MAL-2025-27957](https://insights.sbomify.com/MAL-2025-27957/): Malicious code in nymph-k7fg2-u9cx8-gale-project (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/802/