# Vulnerabilities published in 2025 - [MAL-2025-27956](https://insights.sbomify.com/MAL-2025-27956/): Malicious code in nymph-jtr0n-9b3iz-grove-project (npm) (malicious package) - [MAL-2025-27955](https://insights.sbomify.com/MAL-2025-27955/): Malicious code in nymph-jade-zkx059-project (npm) (malicious package) - [MAL-2025-27954](https://insights.sbomify.com/MAL-2025-27954/): Malicious code in nymph-j9yhw-pnwb0-alchemy-project (npm) (malicious package) - [MAL-2025-27953](https://insights.sbomify.com/MAL-2025-27953/): Malicious code in nymph-iris-ahg267-project (npm) (malicious package) - [MAL-2025-27952](https://insights.sbomify.com/MAL-2025-27952/): Malicious code in nymph-im87j-ftof6-tide-project (npm) (malicious package) - [MAL-2025-27951](https://insights.sbomify.com/MAL-2025-27951/): Malicious code in nymph-gdc73-j3rxf-iris-project (npm) (malicious package) - [MAL-2025-27950](https://insights.sbomify.com/MAL-2025-27950/): Malicious code in nymph-falcon-uzh370-project (npm) (malicious package) - [MAL-2025-2795](https://insights.sbomify.com/MAL-2025-2795/): Malicious code in @nationalgeographicsociety/ngsui-header (npm) (malicious package) - [MAL-2025-27949](https://insights.sbomify.com/MAL-2025-27949/): Malicious code in nymph-everest-yhi522-project (npm) (malicious package) - [MAL-2025-27948](https://insights.sbomify.com/MAL-2025-27948/): Malicious code in nymph-dc6hc-0n1ya-aspen-project (npm) (malicious package) - [MAL-2025-27947](https://insights.sbomify.com/MAL-2025-27947/): Malicious code in nymph-arctic-yyc372-project (npm) (malicious package) - [MAL-2025-27946](https://insights.sbomify.com/MAL-2025-27946/): Malicious code in nymph-5pe0y-0nb96-jade-project (npm) (malicious package) - [MAL-2025-27945](https://insights.sbomify.com/MAL-2025-27945/): Malicious code in nyclisp (npm) (malicious package) - [MAL-2025-27944](https://insights.sbomify.com/MAL-2025-27944/): Malicious code in nycgame (npm) (malicious package) - [MAL-2025-27943](https://insights.sbomify.com/MAL-2025-27943/): Malicious code in nybbor (npm) (malicious package) - [MAL-2025-27942](https://insights.sbomify.com/MAL-2025-27942/): Malicious code in nxtmario (npm) (malicious package) - [MAL-2025-27941](https://insights.sbomify.com/MAL-2025-27941/): Malicious code in nwko (npm) (malicious package) - [MAL-2025-27940](https://insights.sbomify.com/MAL-2025-27940/): Malicious code in nwb08g (npm) (malicious package) - [MAL-2025-2794](https://insights.sbomify.com/MAL-2025-2794/): Malicious code in @nationalgeographicsociety/ngsui-footer (npm) (malicious package) - [MAL-2025-27939](https://insights.sbomify.com/MAL-2025-27939/): Malicious code in nvzxluhkoibqayew (npm) (malicious package) - [MAL-2025-27938](https://insights.sbomify.com/MAL-2025-27938/): Malicious code in nvlore-hsc (npm) (malicious package) - [MAL-2025-27937](https://insights.sbomify.com/MAL-2025-27937/): Malicious code in nv-localstore (npm) (malicious package) - [MAL-2025-27936](https://insights.sbomify.com/MAL-2025-27936/): Malicious code in nuzbreoyflkcmtjh (npm) (malicious package) - [MAL-2025-27935](https://insights.sbomify.com/MAL-2025-27935/): Malicious code in nuxtjs-nanotechnology-heka-eclipse (npm) (malicious package) - [MAL-2025-27934](https://insights.sbomify.com/MAL-2025-27934/): Malicious code in nuxtjs-galaxy-backend-genomics (npm) (malicious package) - [MAL-2025-27933](https://insights.sbomify.com/MAL-2025-27933/): Malicious code in nuxtjs-event-zenobia-quasar (npm) (malicious package) - [MAL-2025-27932](https://insights.sbomify.com/MAL-2025-27932/): Malicious code in nuxtjs-bellatrix-slides-bellatrix (npm) (malicious package) - [MAL-2025-27931](https://insights.sbomify.com/MAL-2025-27931/): Malicious code in nuvoton (npm) (malicious package) - [MAL-2025-27930](https://insights.sbomify.com/MAL-2025-27930/): Malicious code in nutritionexperts-core (npm) (malicious package) - [MAL-2025-2793](https://insights.sbomify.com/MAL-2025-2793/): Malicious code in castorama.pl (npm) (malicious package) - [MAL-2025-27929](https://insights.sbomify.com/MAL-2025-27929/): Malicious code in nutripad-offliine-test (npm) (malicious package) - [MAL-2025-27928](https://insights.sbomify.com/MAL-2025-27928/): Malicious code in nutriana (npm) (malicious package) - [MAL-2025-27927](https://insights.sbomify.com/MAL-2025-27927/): Malicious code in nutracer (npm) (malicious package) - [MAL-2025-27926](https://insights.sbomify.com/MAL-2025-27926/): Malicious code in nutmeg-xray-46cp (npm) (malicious package) - [MAL-2025-27925](https://insights.sbomify.com/MAL-2025-27925/): Malicious code in nutmeg-shack-yyt7 (npm) (malicious package) - [MAL-2025-27924](https://insights.sbomify.com/MAL-2025-27924/): Malicious code in nutmeg-quercus-4o70 (npm) (malicious package) - [MAL-2025-27923](https://insights.sbomify.com/MAL-2025-27923/): Malicious code in nutmeg-quarry-hmww (npm) (malicious package) - [MAL-2025-27922](https://insights.sbomify.com/MAL-2025-27922/): Malicious code in nutmeg-papaya-9dwz (npm) (malicious package) - [MAL-2025-27921](https://insights.sbomify.com/MAL-2025-27921/): Malicious code in nutmeg-observatory-6jte (npm) (malicious package) - [MAL-2025-27920](https://insights.sbomify.com/MAL-2025-27920/): Malicious code in nutmeg-larch-07xs (npm) (malicious package) - [MAL-2025-2792](https://insights.sbomify.com/MAL-2025-2792/): Malicious code in bugbounty208-test-package (npm) (malicious package) - [MAL-2025-27919](https://insights.sbomify.com/MAL-2025-27919/): Malicious code in nutmeg-golf-gphn (npm) (malicious package) - [MAL-2025-27918](https://insights.sbomify.com/MAL-2025-27918/): Malicious code in nusacm (npm) (malicious package) - [MAL-2025-27917](https://insights.sbomify.com/MAL-2025-27917/): Malicious code in nurul-tahutek87-breki (npm) (malicious package) - [MAL-2025-27916](https://insights.sbomify.com/MAL-2025-27916/): Malicious code in nurul-sate47-kuki (npm) (malicious package) - [MAL-2025-27915](https://insights.sbomify.com/MAL-2025-27915/): Malicious code in nurul-pisang28-breki (npm) (malicious package) - [MAL-2025-27914](https://insights.sbomify.com/MAL-2025-27914/): Malicious code in nurul-lumpur94-sukiwir (npm) (malicious package) - [MAL-2025-27913](https://insights.sbomify.com/MAL-2025-27913/): Malicious code in nurul-lapis14-breki (npm) (malicious package) - [MAL-2025-27912](https://insights.sbomify.com/MAL-2025-27912/): Malicious code in nurul-kue85-sukiwir (npm) (malicious package) - [MAL-2025-27911](https://insights.sbomify.com/MAL-2025-27911/): Malicious code in nurul-kolak62-breki (npm) (malicious package) - [MAL-2025-27910](https://insights.sbomify.com/MAL-2025-27910/): Malicious code in nurul-klanting49-kuki (npm) (malicious package) - [MAL-2025-2791](https://insights.sbomify.com/MAL-2025-2791/): Malicious code in transactions-generator (npm) (malicious package) - [MAL-2025-27909](https://insights.sbomify.com/MAL-2025-27909/): Malicious code in nurul-keripik88-kuki (npm) (malicious package) - [MAL-2025-27908](https://insights.sbomify.com/MAL-2025-27908/): Malicious code in nurul-getuk9-sukiwir (npm) (malicious package) - [MAL-2025-27907](https://insights.sbomify.com/MAL-2025-27907/): Malicious code in nurul-gaplek81-breki (npm) (malicious package) - [MAL-2025-27906](https://insights.sbomify.com/MAL-2025-27906/): Malicious code in nuommy (npm) (malicious package) - [MAL-2025-27905](https://insights.sbomify.com/MAL-2025-27905/): Malicious code in nuomibundle (npm) (malicious package) - [MAL-2025-27904](https://insights.sbomify.com/MAL-2025-27904/): Malicious code in nuntius-api-client (npm) (malicious package) - [MAL-2025-27903](https://insights.sbomify.com/MAL-2025-27903/): Malicious code in nummets (npm) (malicious package) - [MAL-2025-27902](https://insights.sbomify.com/MAL-2025-27902/): Malicious code in nugget-zephyr-rwx261-project (npm) (malicious package) - [MAL-2025-27901](https://insights.sbomify.com/MAL-2025-27901/): Malicious code in nugget-whale-ofv016-project (npm) (malicious package) - [MAL-2025-27900](https://insights.sbomify.com/MAL-2025-27900/): Malicious code in nugget-waterfall-mze621-project (npm) (malicious package) - [MAL-2025-2790](https://insights.sbomify.com/MAL-2025-2790/): Malicious code in toc-generator-markdown (npm) (malicious package) - [MAL-2025-279](https://insights.sbomify.com/MAL-2025-279/): Malicious code in calypso-color-schemes (npm) (malicious package) - [MAL-2025-27899](https://insights.sbomify.com/MAL-2025-27899/): Malicious code in nugget-violet-vyb678-project (npm) (malicious package) - [MAL-2025-27898](https://insights.sbomify.com/MAL-2025-27898/): Malicious code in nugget-tulip-efm321-project (npm) (malicious package) - [MAL-2025-27897](https://insights.sbomify.com/MAL-2025-27897/): Malicious code in nugget-river-ofq691-project (npm) (malicious package) - [MAL-2025-27896](https://insights.sbomify.com/MAL-2025-27896/): Malicious code in nugget-peacock-ald805-project (npm) (malicious package) - [MAL-2025-27895](https://insights.sbomify.com/MAL-2025-27895/): Malicious code in nugget-ocean-qoz163-project (npm) (malicious package) - [MAL-2025-27894](https://insights.sbomify.com/MAL-2025-27894/): Malicious code in nugget-nymph-zfk553-project (npm) (malicious package) - [MAL-2025-27893](https://insights.sbomify.com/MAL-2025-27893/): Malicious code in nugget-nymph-cty082-project (npm) (malicious package) - [MAL-2025-27892](https://insights.sbomify.com/MAL-2025-27892/): Malicious code in nugget-nectar-ayv886-project (npm) (malicious package) - [MAL-2025-27891](https://insights.sbomify.com/MAL-2025-27891/): Malicious code in nugget-lagoon-awn014-project (npm) (malicious package) - [MAL-2025-27890](https://insights.sbomify.com/MAL-2025-27890/): Malicious code in nugget-jasmine-tta368-project (npm) (malicious package) - [MAL-2025-2789](https://insights.sbomify.com/MAL-2025-2789/): Malicious code in timezone-tool (npm) (malicious package) - [MAL-2025-27889](https://insights.sbomify.com/MAL-2025-27889/): Malicious code in nugget-forest-wkz193-project (npm) (malicious package) - [MAL-2025-27888](https://insights.sbomify.com/MAL-2025-27888/): Malicious code in nugget-cloud-xpq065-project (npm) (malicious package) - [MAL-2025-27887](https://insights.sbomify.com/MAL-2025-27887/): Malicious code in nugget-cascade-mms367-project (npm) (malicious package) - [MAL-2025-27886](https://insights.sbomify.com/MAL-2025-27886/): Malicious code in nugget-aroma-zyb372-project (npm) (malicious package) - [MAL-2025-27885](https://insights.sbomify.com/MAL-2025-27885/): Malicious code in nufound (npm) (malicious package) - [MAL-2025-27884](https://insights.sbomify.com/MAL-2025-27884/): Malicious code in nudge_client (npm) (malicious package) - [MAL-2025-27883](https://insights.sbomify.com/MAL-2025-27883/): Malicious code in NudeJS (npm) (malicious package) - [MAL-2025-27882](https://insights.sbomify.com/MAL-2025-27882/): Malicious code in nudeenmu (npm) (malicious package) - [MAL-2025-27881](https://insights.sbomify.com/MAL-2025-27881/): Malicious code in nucleotide-biomeme (npm) (malicious package) - [MAL-2025-27880](https://insights.sbomify.com/MAL-2025-27880/): Malicious code in nucleosynthesis-halley-optimize-css-assets-webpack-plugin-nebula (npm) (malicious package) - [MAL-2025-2788](https://insights.sbomify.com/MAL-2025-2788/): Malicious code in teleport-ui (npm) (malicious package) - [MAL-2025-27879](https://insights.sbomify.com/MAL-2025-27879/): Malicious code in nucleosynthesis-antares-zephyr-tardigrade (npm) (malicious package) - [MAL-2025-27878](https://insights.sbomify.com/MAL-2025-27878/): Malicious code in nu-tree-test-resolve-phi (npm) (malicious package) - [MAL-2025-27877](https://insights.sbomify.com/MAL-2025-27877/): Malicious code in nu-refactor-load-boolean-log (npm) (malicious package) - [MAL-2025-27876](https://insights.sbomify.com/MAL-2025-27876/): Malicious code in nu-deploy-sigma-mu-grid (npm) (malicious package) - [MAL-2025-27875](https://insights.sbomify.com/MAL-2025-27875/): Malicious code in nty4 (npm) (malicious package) - [MAL-2025-27874](https://insights.sbomify.com/MAL-2025-27874/): Malicious code in ntuvote (npm) (malicious package) - [MAL-2025-27873](https://insights.sbomify.com/MAL-2025-27873/): Malicious code in ntt4 (npm) (malicious package) - [MAL-2025-27872](https://insights.sbomify.com/MAL-2025-27872/): Malicious code in ntr4 (npm) (malicious package) - [MAL-2025-27871](https://insights.sbomify.com/MAL-2025-27871/): Malicious code in ntde2 (npm) (malicious package) - [MAL-2025-27870](https://insights.sbomify.com/MAL-2025-27870/): Malicious code in nsuweave (npm) (malicious package) - [MAL-2025-2787](https://insights.sbomify.com/MAL-2025-2787/): Malicious code in smart-file-renamer (npm) (malicious package) - [MAL-2025-27869](https://insights.sbomify.com/MAL-2025-27869/): Malicious code in nstuinfo (npm) (malicious package) - [MAL-2025-27868](https://insights.sbomify.com/MAL-2025-27868/): Malicious code in nsoric (npm) (malicious package) - [MAL-2025-27867](https://insights.sbomify.com/MAL-2025-27867/): Malicious code in nsjqkgemzuwixlcf (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/803/