# Vulnerabilities published in 2025 - [MAL-2025-27686](https://insights.sbomify.com/MAL-2025-27686/): Malicious code in nodemon-extremophile-pulsar-polaris (npm) (malicious package) - [MAL-2025-27685](https://insights.sbomify.com/MAL-2025-27685/): Malicious code in nodemon-electron-builder-babel-vega (npm) (malicious package) - [MAL-2025-27684](https://insights.sbomify.com/MAL-2025-27684/): Malicious code in nodemedia (npm) (malicious package) - [MAL-2025-27683](https://insights.sbomify.com/MAL-2025-27683/): Malicious code in nodejs-sqlite-astrometry-axios (npm) (malicious package) - [MAL-2025-27682](https://insights.sbomify.com/MAL-2025-27682/): Malicious code in nodejs-prettier-plugin-markdown-terraforming-websockets (npm) (malicious package) - [MAL-2025-27681](https://insights.sbomify.com/MAL-2025-27681/): Malicious code in nodejs-hydra-astrochemistry-nightmare (npm) (malicious package) - [MAL-2025-27680](https://insights.sbomify.com/MAL-2025-27680/): Malicious code in nodejs-greatfilter-nova-xenobiology (npm) (malicious package) - [MAL-2025-2768](https://insights.sbomify.com/MAL-2025-2768/): Malicious code in kaddex-ui (npm) (malicious package) - [MAL-2025-27679](https://insights.sbomify.com/MAL-2025-27679/): Malicious code in nodejs-development-writable-celeste (npm) (malicious package) - [MAL-2025-27678](https://insights.sbomify.com/MAL-2025-27678/): Malicious code in nodejs-crust-eslint-config-avior (npm) (malicious package) - [MAL-2025-27677](https://insights.sbomify.com/MAL-2025-27677/): Malicious code in nodejs-chariklo-aldebaran-lynx (npm) (malicious package) - [MAL-2025-27676](https://insights.sbomify.com/MAL-2025-27676/): Malicious code in nodebb-plugin-spaffnerds (npm) (malicious package) - [MAL-2025-27675](https://insights.sbomify.com/MAL-2025-27675/): Malicious code in nodebb-plugin-sirius (npm) (malicious package) - [MAL-2025-27674](https://insights.sbomify.com/MAL-2025-27674/): Malicious code in node_view (npm) (malicious package) - [MAL-2025-27673](https://insights.sbomify.com/MAL-2025-27673/): Malicious code in node_resolve_nested_main (npm) (malicious package) - [MAL-2025-27672](https://insights.sbomify.com/MAL-2025-27672/): Malicious code in node_resolve_main_2 (npm) (malicious package) - [MAL-2025-27671](https://insights.sbomify.com/MAL-2025-27671/): Malicious code in node_resolve_main (npm) (malicious package) - [MAL-2025-27670](https://insights.sbomify.com/MAL-2025-27670/): Malicious code in node_api_auth (npm) (malicious package) - [MAL-2025-2767](https://insights.sbomify.com/MAL-2025-2767/): Malicious code in invoicetax-paypal (npm) (malicious package) - [MAL-2025-27669](https://insights.sbomify.com/MAL-2025-27669/): Malicious code in node10-earnest-db (npm) (malicious package) - [MAL-2025-27668](https://insights.sbomify.com/MAL-2025-27668/): Malicious code in node.js (npm) (malicious package) - [MAL-2025-27667](https://insights.sbomify.com/MAL-2025-27667/): Malicious code in node-zoodubbo (npm) (malicious package) - [MAL-2025-27666](https://insights.sbomify.com/MAL-2025-27666/): Malicious code in node-zenvia (npm) (malicious package) - [MAL-2025-27665](https://insights.sbomify.com/MAL-2025-27665/): Malicious code in node-youtube-dash-sidx (npm) (malicious package) - [MAL-2025-27664](https://insights.sbomify.com/MAL-2025-27664/): Malicious code in node-woff2 (npm) (malicious package) - [MAL-2025-27663](https://insights.sbomify.com/MAL-2025-27663/): Malicious code in node-venues (npm) (malicious package) - [MAL-2025-27662](https://insights.sbomify.com/MAL-2025-27662/): Malicious code in node-urlcharset (npm) (malicious package) - [MAL-2025-27661](https://insights.sbomify.com/MAL-2025-27661/): Malicious code in node-unified-login-url (npm) (malicious package) - [MAL-2025-27660](https://insights.sbomify.com/MAL-2025-27660/): Malicious code in node-toon (npm) (malicious package) - [MAL-2025-2766](https://insights.sbomify.com/MAL-2025-2766/): Malicious code in ilovingcats (npm) (malicious package) - [MAL-2025-27659](https://insights.sbomify.com/MAL-2025-27659/): Malicious code in node-teste-api (npm) (malicious package) - [MAL-2025-27658](https://insights.sbomify.com/MAL-2025-27658/): Malicious code in node-spdy (npm) (malicious package) - [MAL-2025-27657](https://insights.sbomify.com/MAL-2025-27657/): Malicious code in node-smsk (npm) (malicious package) - [MAL-2025-27656](https://insights.sbomify.com/MAL-2025-27656/): Malicious code in node-showcase (npm) (malicious package) - [MAL-2025-27655](https://insights.sbomify.com/MAL-2025-27655/): Malicious code in node-sfnt2woff-zopfli (npm) (malicious package) - [MAL-2025-27654](https://insights.sbomify.com/MAL-2025-27654/): Malicious code in node-sass-win32-x64 (npm) (malicious package) - [MAL-2025-27653](https://insights.sbomify.com/MAL-2025-27653/): Malicious code in node-sass-exoplanet-koa-browserify (npm) (malicious package) - [MAL-2025-27652](https://insights.sbomify.com/MAL-2025-27652/): Malicious code in node-sass-dependencies-solis-zenith (npm) (malicious package) - [MAL-2025-27651](https://insights.sbomify.com/MAL-2025-27651/): Malicious code in node-red-contrib-ys7 (npm) (malicious package) - [MAL-2025-27650](https://insights.sbomify.com/MAL-2025-27650/): Malicious code in node-red-contrib-xmlc14n (npm) (malicious package) - [MAL-2025-2765](https://insights.sbomify.com/MAL-2025-2765/): Malicious code in identitydocumentserv-multipart-paypal (npm) (malicious package) - [MAL-2025-27649](https://insights.sbomify.com/MAL-2025-27649/): Malicious code in node-red-contrib-wotkit (npm) (malicious package) - [MAL-2025-27648](https://insights.sbomify.com/MAL-2025-27648/): Malicious code in node-red-contrib-storfly-vtview (npm) (malicious package) - [MAL-2025-27647](https://insights.sbomify.com/MAL-2025-27647/): Malicious code in node-red-contrib-storfly-iot-vtview (npm) (malicious package) - [MAL-2025-27646](https://insights.sbomify.com/MAL-2025-27646/): Malicious code in node-red-contrib-storfly-iot-hp (npm) (malicious package) - [MAL-2025-27645](https://insights.sbomify.com/MAL-2025-27645/): Malicious code in node-red-contrib-objstore (npm) (malicious package) - [MAL-2025-27644](https://insights.sbomify.com/MAL-2025-27644/): Malicious code in node-red-contrib-modbusio (npm) (malicious package) - [MAL-2025-27643](https://insights.sbomify.com/MAL-2025-27643/): Malicious code in node-red-contrib-max31856 (npm) (malicious package) - [MAL-2025-27642](https://insights.sbomify.com/MAL-2025-27642/): Malicious code in node-red-contrib-john-temp (npm) (malicious package) - [MAL-2025-27641](https://insights.sbomify.com/MAL-2025-27641/): Malicious code in node-red-contrib-flows_splitter (npm) (malicious package) - [MAL-2025-27640](https://insights.sbomify.com/MAL-2025-27640/): Malicious code in node-red-azure-iot-hub (npm) (malicious package) - [MAL-2025-2764](https://insights.sbomify.com/MAL-2025-2764/): Malicious code in icloud-cod (npm) (malicious package) - [MAL-2025-27639](https://insights.sbomify.com/MAL-2025-27639/): Malicious code in node-postcodeanywhere-api (npm) (malicious package) - [MAL-2025-27638](https://insights.sbomify.com/MAL-2025-27638/): Malicious code in node-pipeline-ec2 (npm) (malicious package) - [MAL-2025-27637](https://insights.sbomify.com/MAL-2025-27637/): Malicious code in node-pelcod-decoder (npm) (malicious package) - [MAL-2025-27636](https://insights.sbomify.com/MAL-2025-27636/): Malicious code in node-oauth-walkthrough (npm) (malicious package) - [MAL-2025-27635](https://insights.sbomify.com/MAL-2025-27635/): Malicious code in node-novacredit (npm) (malicious package) - [MAL-2025-27634](https://insights.sbomify.com/MAL-2025-27634/): Malicious code in node-mws-sdk (npm) (malicious package) - [MAL-2025-27633](https://insights.sbomify.com/MAL-2025-27633/): Malicious code in node-migemo (npm) (malicious package) - [MAL-2025-27632](https://insights.sbomify.com/MAL-2025-27632/): Malicious code in node-memory-stream (npm) (malicious package) - [MAL-2025-27631](https://insights.sbomify.com/MAL-2025-27631/): Malicious code in node-lolibooru (npm) (malicious package) - [MAL-2025-27630](https://insights.sbomify.com/MAL-2025-27630/): Malicious code in node-log-stream (npm) (malicious package) - [MAL-2025-2763](https://insights.sbomify.com/MAL-2025-2763/): Malicious code in gg-module (npm) (malicious package) - [MAL-2025-27629](https://insights.sbomify.com/MAL-2025-27629/): Malicious code in node-laravel-session-ahss-testing (npm) (malicious package) - [MAL-2025-27628](https://insights.sbomify.com/MAL-2025-27628/): Malicious code in node-keyval-httpget (npm) (malicious package) - [MAL-2025-27627](https://insights.sbomify.com/MAL-2025-27627/): Malicious code in node-jlink (npm) (malicious package) - [MAL-2025-27626](https://insights.sbomify.com/MAL-2025-27626/): Malicious code in node-http-langdetect (npm) (malicious package) - [MAL-2025-27625](https://insights.sbomify.com/MAL-2025-27625/): Malicious code in node-heatpipe-publisher (npm) (malicious package) - [MAL-2025-27624](https://insights.sbomify.com/MAL-2025-27624/): Malicious code in node-ftp (npm) (malicious package) - [MAL-2025-27623](https://insights.sbomify.com/MAL-2025-27623/): Malicious code in node-freefare (npm) (malicious package) - [MAL-2025-27622](https://insights.sbomify.com/MAL-2025-27622/): Malicious code in node-firefox-find-wifi-devices (npm) (malicious package) - [MAL-2025-27621](https://insights.sbomify.com/MAL-2025-27621/): Malicious code in node-file-uploader (npm) (malicious package) - [MAL-2025-27620](https://insights.sbomify.com/MAL-2025-27620/): Malicious code in node-ffmpeg-win32-x64 (npm) (malicious package) - [MAL-2025-2762](https://insights.sbomify.com/MAL-2025-2762/): Malicious code in gg-key-listener (npm) (malicious package) - [MAL-2025-27619](https://insights.sbomify.com/MAL-2025-27619/): Malicious code in node-ffmpeg-win32-ia32 (npm) (malicious package) - [MAL-2025-27618](https://insights.sbomify.com/MAL-2025-27618/): Malicious code in node-fethc (npm) (malicious package) - [MAL-2025-27617](https://insights.sbomify.com/MAL-2025-27617/): Malicious code in node-fecth (npm) (malicious package) - [MAL-2025-27616](https://insights.sbomify.com/MAL-2025-27616/): Malicious code in node-fecht (npm) (malicious package) - [MAL-2025-27615](https://insights.sbomify.com/MAL-2025-27615/): Malicious code in node-earth-static-reject-xml (npm) (malicious package) - [MAL-2025-27614](https://insights.sbomify.com/MAL-2025-27614/): Malicious code in node-config-scripts-cassini-dynamo (npm) (malicious package) - [MAL-2025-27613](https://insights.sbomify.com/MAL-2025-27613/): Malicious code in node-config-rest-grus-taurus (npm) (malicious package) - [MAL-2025-27612](https://insights.sbomify.com/MAL-2025-27612/): Malicious code in node-config-express-sagitta-loopback (npm) (malicious package) - [MAL-2025-27611](https://insights.sbomify.com/MAL-2025-27611/): Malicious code in node-cip (npm) (malicious package) - [MAL-2025-27610](https://insights.sbomify.com/MAL-2025-27610/): Malicious code in node-carweb-api (npm) (malicious package) - [MAL-2025-2761](https://insights.sbomify.com/MAL-2025-2761/): Malicious code in file-auto-cleaner (npm) (malicious package) - [MAL-2025-27609](https://insights.sbomify.com/MAL-2025-27609/): Malicious code in node-cache-manager-hazelcast (npm) (malicious package) - [MAL-2025-27608](https://insights.sbomify.com/MAL-2025-27608/): Malicious code in node-buc (npm) (malicious package) - [MAL-2025-27607](https://insights.sbomify.com/MAL-2025-27607/): Malicious code in node-box-config (npm) (malicious package) - [MAL-2025-27606](https://insights.sbomify.com/MAL-2025-27606/): Malicious code in node-backup (npm) (malicious package) - [MAL-2025-27605](https://insights.sbomify.com/MAL-2025-27605/): Malicious code in node-api-test (npm) (malicious package) - [MAL-2025-27604](https://insights.sbomify.com/MAL-2025-27604/): Malicious code in node-antivir (npm) (malicious package) - [MAL-2025-27603](https://insights.sbomify.com/MAL-2025-27603/): Malicious code in node-3d-core-raub (npm) (malicious package) - [MAL-2025-27602](https://insights.sbomify.com/MAL-2025-27602/): Malicious code in nocturne-zenith-stw029-project (npm) (malicious package) - [MAL-2025-27601](https://insights.sbomify.com/MAL-2025-27601/): Malicious code in nocturne-yellow-aac531-project (npm) (malicious package) - [MAL-2025-27600](https://insights.sbomify.com/MAL-2025-27600/): Malicious code in nocturne-wisp-xmh536-project (npm) (malicious package) - [MAL-2025-2760](https://insights.sbomify.com/MAL-2025-2760/): Malicious code in f0-state-holder-duke (npm) (malicious package) - [MAL-2025-276](https://insights.sbomify.com/MAL-2025-276/): Malicious code in calypso-apps-builder (npm) (malicious package) - [MAL-2025-27599](https://insights.sbomify.com/MAL-2025-27599/): Malicious code in nocturne-umbrella-oey938-project (npm) (malicious package) - [MAL-2025-27598](https://insights.sbomify.com/MAL-2025-27598/): Malicious code in nocturne-topaz-iim637-project (npm) (malicious package) - [MAL-2025-27597](https://insights.sbomify.com/MAL-2025-27597/): Malicious code in nocturne-tide-okg822-project (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/806/