# Vulnerabilities published in 2025 - [MAL-2025-27866](https://insights.sbomify.com/MAL-2025-27866/): Malicious code in nshtools (npm) (malicious package) - [MAL-2025-27865](https://insights.sbomify.com/MAL-2025-27865/): Malicious code in ns-sha3 (npm) (malicious package) - [MAL-2025-27864](https://insights.sbomify.com/MAL-2025-27864/): Malicious code in nrt3dwww (npm) (malicious package) - [MAL-2025-27863](https://insights.sbomify.com/MAL-2025-27863/): Malicious code in nrr4 (npm) (malicious package) - [MAL-2025-27862](https://insights.sbomify.com/MAL-2025-27862/): Malicious code in nrlcm (npm) (malicious package) - [MAL-2025-27861](https://insights.sbomify.com/MAL-2025-27861/): Malicious code in nrg-timekeeper (npm) (malicious package) - [MAL-2025-27860](https://insights.sbomify.com/MAL-2025-27860/): Malicious code in nr9pg3 (npm) (malicious package) - [MAL-2025-2786](https://insights.sbomify.com/MAL-2025-2786/): Malicious code in shipmenttrackingserv-paypal (npm) (malicious package) - [MAL-2025-27859](https://insights.sbomify.com/MAL-2025-27859/): Malicious code in nr31a (npm) (malicious package) - [MAL-2025-27858](https://insights.sbomify.com/MAL-2025-27858/): Malicious code in nr1-browser-analyzer (npm) (malicious package) - [MAL-2025-27857](https://insights.sbomify.com/MAL-2025-27857/): Malicious code in nquads (npm) (malicious package) - [MAL-2025-27856](https://insights.sbomify.com/MAL-2025-27856/): Malicious code in nqm-auth-server (npm) (malicious package) - [MAL-2025-27855](https://insights.sbomify.com/MAL-2025-27855/): Malicious code in npzcwkrjeqboafdg (npm) (malicious package) - [MAL-2025-27854](https://insights.sbomify.com/MAL-2025-27854/): Malicious code in npwidgets (npm) (malicious package) - [MAL-2025-27853](https://insights.sbomify.com/MAL-2025-27853/): Malicious code in npmtestnacho (npm) (malicious package) - [MAL-2025-27852](https://insights.sbomify.com/MAL-2025-27852/): Malicious code in npmpubman (npm) (malicious package) - [MAL-2025-27851](https://insights.sbomify.com/MAL-2025-27851/): Malicious code in npmb (npm) (malicious package) - [MAL-2025-27850](https://insights.sbomify.com/MAL-2025-27850/): Malicious code in npm_release_test (npm) (malicious package) - [MAL-2025-2785](https://insights.sbomify.com/MAL-2025-2785/): Malicious code in shipmentdetails-paypal (npm) (malicious package) - [MAL-2025-27849](https://insights.sbomify.com/MAL-2025-27849/): Malicious code in npm-yakutsk-neutrino-dysonswarm (npm) (malicious package) - [MAL-2025-27848](https://insights.sbomify.com/MAL-2025-27848/): Malicious code in npm-uninstall-readable-blaze (npm) (malicious package) - [MAL-2025-27847](https://insights.sbomify.com/MAL-2025-27847/): Malicious code in npm-test-install (npm) (malicious package) - [MAL-2025-27846](https://insights.sbomify.com/MAL-2025-27846/): Malicious code in npm-suite-extras (npm) (malicious package) - [MAL-2025-27845](https://insights.sbomify.com/MAL-2025-27845/): Malicious code in npm-stream-archaeometry-despina (npm) (malicious package) - [MAL-2025-27844](https://insights.sbomify.com/MAL-2025-27844/): Malicious code in npm-shasum (npm) (malicious package) - [MAL-2025-27843](https://insights.sbomify.com/MAL-2025-27843/): Malicious code in npm-security-check (npm) (malicious package) - [MAL-2025-27842](https://insights.sbomify.com/MAL-2025-27842/): Malicious code in npm-script-demo (npm) (malicious package) - [MAL-2025-27841](https://insights.sbomify.com/MAL-2025-27841/): Malicious code in npm-republish (npm) (malicious package) - [MAL-2025-27840](https://insights.sbomify.com/MAL-2025-27840/): Malicious code in npm-published-package (npm) (malicious package) - [MAL-2025-2784](https://insights.sbomify.com/MAL-2025-2784/): Malicious code in safe-package-winrar (npm) (malicious package) - [MAL-2025-27839](https://insights.sbomify.com/MAL-2025-27839/): Malicious code in npm-primatology-async-event (npm) (malicious package) - [MAL-2025-27838](https://insights.sbomify.com/MAL-2025-27838/): Malicious code in npm-paleoclimatology-changelog-pino (npm) (malicious package) - [MAL-2025-27837](https://insights.sbomify.com/MAL-2025-27837/): Malicious code in npm-message (npm) (malicious package) - [MAL-2025-27836](https://insights.sbomify.com/MAL-2025-27836/): Malicious code in npm-jy-test (npm) (malicious package) - [MAL-2025-27835](https://insights.sbomify.com/MAL-2025-27835/): Malicious code in npm-include (npm) (malicious package) - [MAL-2025-27834](https://insights.sbomify.com/MAL-2025-27834/): Malicious code in npm-import (npm) (malicious package) - [MAL-2025-27833](https://insights.sbomify.com/MAL-2025-27833/): Malicious code in npm-hello-artifactory (npm) (malicious package) - [MAL-2025-27832](https://insights.sbomify.com/MAL-2025-27832/): Malicious code in npm-for-each (npm) (malicious package) - [MAL-2025-27831](https://insights.sbomify.com/MAL-2025-27831/): Malicious code in npm-exploit (npm) (malicious package) - [MAL-2025-27830](https://insights.sbomify.com/MAL-2025-27830/): Malicious code in npm-eurostar-libs (npm) (malicious package) - [MAL-2025-2783](https://insights.sbomify.com/MAL-2025-2783/): Malicious code in riskchallengeserv-paypal (npm) (malicious package) - [MAL-2025-27829](https://insights.sbomify.com/MAL-2025-27829/): Malicious code in npm-download-counts-v2 (npm) (malicious package) - [MAL-2025-27828](https://insights.sbomify.com/MAL-2025-27828/): Malicious code in npm-chalk-wolf-aurora (npm) (malicious package) - [MAL-2025-27827](https://insights.sbomify.com/MAL-2025-27827/): Malicious code in npm-bomb (npm) (malicious package) - [MAL-2025-27826](https://insights.sbomify.com/MAL-2025-27826/): Malicious code in npm-babel-parser (npm) (malicious package) - [MAL-2025-27825](https://insights.sbomify.com/MAL-2025-27825/): Malicious code in npm-apply (npm) (malicious package) - [MAL-2025-27824](https://insights.sbomify.com/MAL-2025-27824/): Malicious code in npm-all-packages (npm) (malicious package) - [MAL-2025-27823](https://insights.sbomify.com/MAL-2025-27823/): Malicious code in nphardly (npm) (malicious package) - [MAL-2025-27822](https://insights.sbomify.com/MAL-2025-27822/): Malicious code in np_core_utils (npm) (malicious package) - [MAL-2025-27821](https://insights.sbomify.com/MAL-2025-27821/): Malicious code in nozapret (npm) (malicious package) - [MAL-2025-27820](https://insights.sbomify.com/MAL-2025-27820/): Malicious code in nowasky3 (npm) (malicious package) - [MAL-2025-2782](https://insights.sbomify.com/MAL-2025-2782/): Malicious code in resolver-options (npm) (malicious package) - [MAL-2025-27819](https://insights.sbomify.com/MAL-2025-27819/): Malicious code in nowasky2 (npm) (malicious package) - [MAL-2025-27818](https://insights.sbomify.com/MAL-2025-27818/): Malicious code in now-report (npm) (malicious package) - [MAL-2025-27817](https://insights.sbomify.com/MAL-2025-27817/): Malicious code in now-rate-limit (npm) (malicious package) - [MAL-2025-27816](https://insights.sbomify.com/MAL-2025-27816/): Malicious code in now-download (npm) (malicious package) - [MAL-2025-27815](https://insights.sbomify.com/MAL-2025-27815/): Malicious code in now-auto-alias (npm) (malicious package) - [MAL-2025-27814](https://insights.sbomify.com/MAL-2025-27814/): Malicious code in novuscoin (npm) (malicious package) - [MAL-2025-27813](https://insights.sbomify.com/MAL-2025-27813/): Malicious code in novini (npm) (malicious package) - [MAL-2025-27812](https://insights.sbomify.com/MAL-2025-27812/): Malicious code in november-zvr-project (npm) (malicious package) - [MAL-2025-27811](https://insights.sbomify.com/MAL-2025-27811/): Malicious code in november-zulu-tosm (npm) (malicious package) - [MAL-2025-27810](https://insights.sbomify.com/MAL-2025-27810/): Malicious code in november-zulu-jmis (npm) (malicious package) - [MAL-2025-2781](https://insights.sbomify.com/MAL-2025-2781/): Malicious code in react-html2pdf.js (npm) (malicious package) - [MAL-2025-27809](https://insights.sbomify.com/MAL-2025-27809/): Malicious code in november-zucchini-xray-jqrub (npm) (malicious package) - [MAL-2025-27808](https://insights.sbomify.com/MAL-2025-27808/): Malicious code in november-zucchini-aklp (npm) (malicious package) - [MAL-2025-27807](https://insights.sbomify.com/MAL-2025-27807/): Malicious code in november-zdf-project (npm) (malicious package) - [MAL-2025-27806](https://insights.sbomify.com/MAL-2025-27806/): Malicious code in november-yam-znjk (npm) (malicious package) - [MAL-2025-27805](https://insights.sbomify.com/MAL-2025-27805/): Malicious code in november-xigua-huui (npm) (malicious package) - [MAL-2025-27804](https://insights.sbomify.com/MAL-2025-27804/): Malicious code in november-whiskey-lemon-nydbb (npm) (malicious package) - [MAL-2025-27803](https://insights.sbomify.com/MAL-2025-27803/): Malicious code in november-whiskey-hdiu (npm) (malicious package) - [MAL-2025-27802](https://insights.sbomify.com/MAL-2025-27802/): Malicious code in november-whiskey-cxjp (npm) (malicious package) - [MAL-2025-27801](https://insights.sbomify.com/MAL-2025-27801/): Malicious code in november-vanilla-juliet-rwlor (npm) (malicious package) - [MAL-2025-27800](https://insights.sbomify.com/MAL-2025-27800/): Malicious code in november-romeo-nectarine-wqyaw (npm) (malicious package) - [MAL-2025-2780](https://insights.sbomify.com/MAL-2025-2780/): Malicious code in pplinkpath (npm) (malicious package) - [MAL-2025-278](https://insights.sbomify.com/MAL-2025-278/): Malicious code in calypso-build (npm) (malicious package) - [MAL-2025-27799](https://insights.sbomify.com/MAL-2025-27799/): Malicious code in november-rkf-project (npm) (malicious package) - [MAL-2025-27798](https://insights.sbomify.com/MAL-2025-27798/): Malicious code in november-papaya-victor-ywjhr (npm) (malicious package) - [MAL-2025-27797](https://insights.sbomify.com/MAL-2025-27797/): Malicious code in november-papa-fig-qfkxa (npm) (malicious package) - [MAL-2025-27796](https://insights.sbomify.com/MAL-2025-27796/): Malicious code in november-papa-ccwi (npm) (malicious package) - [MAL-2025-27795](https://insights.sbomify.com/MAL-2025-27795/): Malicious code in november-orange-ygvn (npm) (malicious package) - [MAL-2025-27794](https://insights.sbomify.com/MAL-2025-27794/): Malicious code in november-orange-qbsj (npm) (malicious package) - [MAL-2025-27793](https://insights.sbomify.com/MAL-2025-27793/): Malicious code in november-nectarine-charlie-bzxrb (npm) (malicious package) - [MAL-2025-27792](https://insights.sbomify.com/MAL-2025-27792/): Malicious code in november-n3k-project (npm) (malicious package) - [MAL-2025-27791](https://insights.sbomify.com/MAL-2025-27791/): Malicious code in november-mike-dduz (npm) (malicious package) - [MAL-2025-27790](https://insights.sbomify.com/MAL-2025-27790/): Malicious code in november-lzd-project (npm) (malicious package) - [MAL-2025-2779](https://insights.sbomify.com/MAL-2025-2779/): Malicious code in postp2ptxnserv (npm) (malicious package) - [MAL-2025-27789](https://insights.sbomify.com/MAL-2025-27789/): Malicious code in november-lemon-psdj (npm) (malicious package) - [MAL-2025-27788](https://insights.sbomify.com/MAL-2025-27788/): Malicious code in november-kiwi-qv5p (npm) (malicious package) - [MAL-2025-27787](https://insights.sbomify.com/MAL-2025-27787/): Malicious code in november-kilo-ugli-bwdhi (npm) (malicious package) - [MAL-2025-27786](https://insights.sbomify.com/MAL-2025-27786/): Malicious code in november-kilo-raoa (npm) (malicious package) - [MAL-2025-27785](https://insights.sbomify.com/MAL-2025-27785/): Malicious code in november-kilo-ltbi (npm) (malicious package) - [MAL-2025-27784](https://insights.sbomify.com/MAL-2025-27784/): Malicious code in november-juliet-xgdo (npm) (malicious package) - [MAL-2025-27783](https://insights.sbomify.com/MAL-2025-27783/): Malicious code in november-jd1-project (npm) (malicious package) - [MAL-2025-27782](https://insights.sbomify.com/MAL-2025-27782/): Malicious code in november-india-jzbg (npm) (malicious package) - [MAL-2025-27781](https://insights.sbomify.com/MAL-2025-27781/): Malicious code in november-igloo-o9bu (npm) (malicious package) - [MAL-2025-27780](https://insights.sbomify.com/MAL-2025-27780/): Malicious code in november-honeydew-mango-uosuc (npm) (malicious package) - [MAL-2025-2778](https://insights.sbomify.com/MAL-2025-2778/): Malicious code in osxlocation (npm) (malicious package) - [MAL-2025-27779](https://insights.sbomify.com/MAL-2025-27779/): Malicious code in november-honeydew-hotel-kfjbc (npm) (malicious package) - [MAL-2025-27778](https://insights.sbomify.com/MAL-2025-27778/): Malicious code in november-golf-tyoc (npm) (malicious package) - [MAL-2025-27777](https://insights.sbomify.com/MAL-2025-27777/): Malicious code in november-golf-pcla (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/804/