# Vulnerabilities published in 2025 - [MAL-2025-27776](https://insights.sbomify.com/MAL-2025-27776/): Malicious code in november-ginkgo-f7r5 (npm) (malicious package) - [MAL-2025-27775](https://insights.sbomify.com/MAL-2025-27775/): Malicious code in november-fig-vysq (npm) (malicious package) - [MAL-2025-27774](https://insights.sbomify.com/MAL-2025-27774/): Malicious code in november-f85-project (npm) (malicious package) - [MAL-2025-27773](https://insights.sbomify.com/MAL-2025-27773/): Malicious code in november-elderberry-kiwi-plhfr (npm) (malicious package) - [MAL-2025-27772](https://insights.sbomify.com/MAL-2025-27772/): Malicious code in november-echo-n5c6 (npm) (malicious package) - [MAL-2025-27771](https://insights.sbomify.com/MAL-2025-27771/): Malicious code in november-date-usea (npm) (malicious package) - [MAL-2025-27770](https://insights.sbomify.com/MAL-2025-27770/): Malicious code in november-date-papaya-udxfx (npm) (malicious package) - [MAL-2025-2777](https://insights.sbomify.com/MAL-2025-2777/): Malicious code in oasis-os-theming (npm) (malicious package) - [MAL-2025-27769](https://insights.sbomify.com/MAL-2025-27769/): Malicious code in november-cpt-project (npm) (malicious package) - [MAL-2025-27768](https://insights.sbomify.com/MAL-2025-27768/): Malicious code in november-charlie-whiw (npm) (malicious package) - [MAL-2025-27767](https://insights.sbomify.com/MAL-2025-27767/): Malicious code in november-bravo-ofof (npm) (malicious package) - [MAL-2025-27766](https://insights.sbomify.com/MAL-2025-27766/): Malicious code in november-bo8-project (npm) (malicious package) - [MAL-2025-27765](https://insights.sbomify.com/MAL-2025-27765/): Malicious code in november-banana-delta-uwfmc (npm) (malicious package) - [MAL-2025-27764](https://insights.sbomify.com/MAL-2025-27764/): Malicious code in november-auy-project (npm) (malicious package) - [MAL-2025-27763](https://insights.sbomify.com/MAL-2025-27763/): Malicious code in novatp (npm) (malicious package) - [MAL-2025-27762](https://insights.sbomify.com/MAL-2025-27762/): Malicious code in novacredit (npm) (malicious package) - [MAL-2025-27761](https://insights.sbomify.com/MAL-2025-27761/): Malicious code in nova_irh2t_0a6nu_infinity (npm) (malicious package) - [MAL-2025-27760](https://insights.sbomify.com/MAL-2025-27760/): Malicious code in nova_hh317_f8vtz_thunder (npm) (malicious package) - [MAL-2025-2776](https://insights.sbomify.com/MAL-2025-2776/): Malicious code in mc5-adidas (npm) (malicious package) - [MAL-2025-27759](https://insights.sbomify.com/MAL-2025-27759/): Malicious code in nova_ham37_lgzru_tundra (npm) (malicious package) - [MAL-2025-27758](https://insights.sbomify.com/MAL-2025-27758/): Malicious code in nova-zooarchaeology-cryovolcano-ariel (npm) (malicious package) - [MAL-2025-27757](https://insights.sbomify.com/MAL-2025-27757/): Malicious code in nova-xerxes-typeorm-browserify (npm) (malicious package) - [MAL-2025-27756](https://insights.sbomify.com/MAL-2025-27756/): Malicious code in nova-uoho4-jtz6m-yarn-project (npm) (malicious package) - [MAL-2025-27755](https://insights.sbomify.com/MAL-2025-27755/): Malicious code in nova-sqlite-jovian-development (npm) (malicious package) - [MAL-2025-27754](https://insights.sbomify.com/MAL-2025-27754/): Malicious code in nova-react-bootstrap-supervisor-abiogenesis (npm) (malicious package) - [MAL-2025-27753](https://insights.sbomify.com/MAL-2025-27753/): Malicious code in nova-private-quasarjet-hyperion (npm) (malicious package) - [MAL-2025-27752](https://insights.sbomify.com/MAL-2025-27752/): Malicious code in nova-phoebe-biomimicry-fornax (npm) (malicious package) - [MAL-2025-27751](https://insights.sbomify.com/MAL-2025-27751/): Malicious code in nova-p06d7-tnr1t-glen-project (npm) (malicious package) - [MAL-2025-27750](https://insights.sbomify.com/MAL-2025-27750/): Malicious code in nova-interstellarmedium-perturbation-palynology (npm) (malicious package) - [MAL-2025-2775](https://insights.sbomify.com/MAL-2025-2775/): Malicious code in mathiconjsnz (npm) (malicious package) - [MAL-2025-27749](https://insights.sbomify.com/MAL-2025-27749/): Malicious code in nova-evtdo-km8su-pebble-project (npm) (malicious package) - [MAL-2025-27748](https://insights.sbomify.com/MAL-2025-27748/): Malicious code in nova-carina-prettier-plugin-markdown-triton (npm) (malicious package) - [MAL-2025-27747](https://insights.sbomify.com/MAL-2025-27747/): Malicious code in nova-asteroid-xanadu-transhumanism (npm) (malicious package) - [MAL-2025-27746](https://insights.sbomify.com/MAL-2025-27746/): Malicious code in nova-altair-phenomic-gemini (npm) (malicious package) - [MAL-2025-27745](https://insights.sbomify.com/MAL-2025-27745/): Malicious code in nova-7jcu0-dknw0-nymph-project (npm) (malicious package) - [MAL-2025-27744](https://insights.sbomify.com/MAL-2025-27744/): Malicious code in nova-4vq18-qsa33-flame-project (npm) (malicious package) - [MAL-2025-27743](https://insights.sbomify.com/MAL-2025-27743/): Malicious code in nouku-search (npm) (malicious package) - [MAL-2025-27742](https://insights.sbomify.com/MAL-2025-27742/): Malicious code in notype (npm) (malicious package) - [MAL-2025-27741](https://insights.sbomify.com/MAL-2025-27741/): Malicious code in nottrek (npm) (malicious package) - [MAL-2025-27740](https://insights.sbomify.com/MAL-2025-27740/): Malicious code in notiserv (npm) (malicious package) - [MAL-2025-2774](https://insights.sbomify.com/MAL-2025-2774/): Malicious code in mafid-prod-fe (npm) (malicious package) - [MAL-2025-27739](https://insights.sbomify.com/MAL-2025-27739/): Malicious code in notion-sdk-project (npm) (malicious package) - [MAL-2025-27738](https://insights.sbomify.com/MAL-2025-27738/): Malicious code in notify-index-secure-process-cron (npm) (malicious package) - [MAL-2025-27737](https://insights.sbomify.com/MAL-2025-27737/): Malicious code in notificationservice-frontend (npm) (malicious package) - [MAL-2025-27736](https://insights.sbomify.com/MAL-2025-27736/): Malicious code in notification-queuer (npm) (malicious package) - [MAL-2025-27735](https://insights.sbomify.com/MAL-2025-27735/): Malicious code in nothing-js (npm) (malicious package) - [MAL-2025-27734](https://insights.sbomify.com/MAL-2025-27734/): Malicious code in notehub (npm) (malicious package) - [MAL-2025-27733](https://insights.sbomify.com/MAL-2025-27733/): Malicious code in notebolt (npm) (malicious package) - [MAL-2025-27732](https://insights.sbomify.com/MAL-2025-27732/): Malicious code in notchcpu (npm) (malicious package) - [MAL-2025-27731](https://insights.sbomify.com/MAL-2025-27731/): Malicious code in notatop (npm) (malicious package) - [MAL-2025-27730](https://insights.sbomify.com/MAL-2025-27730/): Malicious code in nostego (npm) (malicious package) - [MAL-2025-2773](https://insights.sbomify.com/MAL-2025-2773/): Malicious code in macos-relese (npm) (malicious package) - [MAL-2025-27729](https://insights.sbomify.com/MAL-2025-27729/): Malicious code in nosqleast (npm) (malicious package) - [MAL-2025-27728](https://insights.sbomify.com/MAL-2025-27728/): Malicious code in northstar-sprite (npm) (malicious package) - [MAL-2025-27727](https://insights.sbomify.com/MAL-2025-27727/): Malicious code in northpole (npm) (malicious package) - [MAL-2025-27726](https://insights.sbomify.com/MAL-2025-27726/): Malicious code in norrin-statserver-reader (npm) (malicious package) - [MAL-2025-27725](https://insights.sbomify.com/MAL-2025-27725/): Malicious code in norrin-logger (npm) (malicious package) - [MAL-2025-27724](https://insights.sbomify.com/MAL-2025-27724/): Malicious code in norma-pegasus-start-sublimation (npm) (malicious package) - [MAL-2025-27723](https://insights.sbomify.com/MAL-2025-27723/): Malicious code in norma-octans-neptune-child-process (npm) (malicious package) - [MAL-2025-27722](https://insights.sbomify.com/MAL-2025-27722/): Malicious code in norma-csv-impulse-gatsby (npm) (malicious package) - [MAL-2025-27721](https://insights.sbomify.com/MAL-2025-27721/): Malicious code in nooble (npm) (malicious package) - [MAL-2025-27720](https://insights.sbomify.com/MAL-2025-27720/): Malicious code in nonzero (npm) (malicious package) - [MAL-2025-2772](https://insights.sbomify.com/MAL-2025-2772/): Malicious code in macappstore (npm) (malicious package) - [MAL-2025-27719](https://insights.sbomify.com/MAL-2025-27719/): Malicious code in nonsenso (npm) (malicious package) - [MAL-2025-27718](https://insights.sbomify.com/MAL-2025-27718/): Malicious code in nongqhui (npm) (malicious package) - [MAL-2025-27717](https://insights.sbomify.com/MAL-2025-27717/): Malicious code in non-blocking-wolf-umbra-gacrux (npm) (malicious package) - [MAL-2025-27716](https://insights.sbomify.com/MAL-2025-27716/): Malicious code in non-blocking-eventhoriz-jabbah-jabbah (npm) (malicious package) - [MAL-2025-27715](https://insights.sbomify.com/MAL-2025-27715/): Malicious code in non-blocking-antimatter-repository-fermion (npm) (malicious package) - [MAL-2025-27714](https://insights.sbomify.com/MAL-2025-27714/): Malicious code in nomoruk (npm) (malicious package) - [MAL-2025-27713](https://insights.sbomify.com/MAL-2025-27713/): Malicious code in nomokomo (npm) (malicious package) - [MAL-2025-27712](https://insights.sbomify.com/MAL-2025-27712/): Malicious code in nomadmap (npm) (malicious package) - [MAL-2025-27711](https://insights.sbomify.com/MAL-2025-27711/): Malicious code in nomabi (npm) (malicious package) - [MAL-2025-27710](https://insights.sbomify.com/MAL-2025-27710/): Malicious code in nolabel (npm) (malicious package) - [MAL-2025-2771](https://insights.sbomify.com/MAL-2025-2771/): Malicious code in loka12 (npm) (malicious package) - [MAL-2025-27709](https://insights.sbomify.com/MAL-2025-27709/): Malicious code in noir_wy1pj_4hzbb_night (npm) (malicious package) - [MAL-2025-27708](https://insights.sbomify.com/MAL-2025-27708/): Malicious code in noir_uyo7x_n0boo_aspen (npm) (malicious package) - [MAL-2025-27707](https://insights.sbomify.com/MAL-2025-27707/): Malicious code in noir_sykqf_3hlj8_paradise (npm) (malicious package) - [MAL-2025-27706](https://insights.sbomify.com/MAL-2025-27706/): Malicious code in noir_ni7jn_i2t1s_kryptonite (npm) (malicious package) - [MAL-2025-27705](https://insights.sbomify.com/MAL-2025-27705/): Malicious code in noir_jdsv3_w1qm5_universe (npm) (malicious package) - [MAL-2025-27704](https://insights.sbomify.com/MAL-2025-27704/): Malicious code in noir_fgyjp_arejz_dusk (npm) (malicious package) - [MAL-2025-27703](https://insights.sbomify.com/MAL-2025-27703/): Malicious code in noir_7fmof_08vec_whisper (npm) (malicious package) - [MAL-2025-27702](https://insights.sbomify.com/MAL-2025-27702/): Malicious code in noidea (npm) (malicious package) - [MAL-2025-27701](https://insights.sbomify.com/MAL-2025-27701/): Malicious code in nogaptile (npm) (malicious package) - [MAL-2025-27700](https://insights.sbomify.com/MAL-2025-27700/): Malicious code in nodus-quickstart (npm) (malicious package) - [MAL-2025-2770](https://insights.sbomify.com/MAL-2025-2770/): Malicious code in login-paypal (npm) (malicious package) - [MAL-2025-277](https://insights.sbomify.com/MAL-2025-277/): Malicious code in calypso-babel-config (npm) (malicious package) - [MAL-2025-27699](https://insights.sbomify.com/MAL-2025-27699/): Malicious code in nodules-user (npm) (malicious package) - [MAL-2025-27698](https://insights.sbomify.com/MAL-2025-27698/): Malicious code in nodules-cache (npm) (malicious package) - [MAL-2025-27697](https://insights.sbomify.com/MAL-2025-27697/): Malicious code in nodizecms (npm) (malicious package) - [MAL-2025-27696](https://insights.sbomify.com/MAL-2025-27696/): Malicious code in nodexda (npm) (malicious package) - [MAL-2025-27695](https://insights.sbomify.com/MAL-2025-27695/): Malicious code in nodeunit-shim (npm) (malicious package) - [MAL-2025-27694](https://insights.sbomify.com/MAL-2025-27694/): Malicious code in nodetest199 (npm) (malicious package) - [MAL-2025-27693](https://insights.sbomify.com/MAL-2025-27693/): Malicious code in nodetest1010 (npm) (malicious package) - [MAL-2025-27692](https://insights.sbomify.com/MAL-2025-27692/): Malicious code in nodesimi (npm) (malicious package) - [MAL-2025-27691](https://insights.sbomify.com/MAL-2025-27691/): Malicious code in nodes.js (npm) (malicious package) - [MAL-2025-27690](https://insights.sbomify.com/MAL-2025-27690/): Malicious code in nodemon-terser-promise-mui (npm) (malicious package) - [MAL-2025-2769](https://insights.sbomify.com/MAL-2025-2769/): Malicious code in keradsdsdsdsddsdaaqw (npm) (malicious package) - [MAL-2025-27689](https://insights.sbomify.com/MAL-2025-27689/): Malicious code in nodemon-orogeny-shelljs-extremophile (npm) (malicious package) - [MAL-2025-27688](https://insights.sbomify.com/MAL-2025-27688/): Malicious code in nodemon-iota-uninstall-octans (npm) (malicious package) - [MAL-2025-27687](https://insights.sbomify.com/MAL-2025-27687/): Malicious code in nodemon-interstellarmedium-jovian-jekyll (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/805/