# Vulnerabilities published in 2025


- [MAL-2025-27596](https://insights.sbomify.com/MAL-2025-27596/): Malicious code in nocturne-quilt-fqe949-project (npm) (malicious package)
- [MAL-2025-27595](https://insights.sbomify.com/MAL-2025-27595/): Malicious code in nocturne-opaline-xum329-project (npm) (malicious package)
- [MAL-2025-27594](https://insights.sbomify.com/MAL-2025-27594/): Malicious code in nocturne-nugget-tgy502-project (npm) (malicious package)
- [MAL-2025-27593](https://insights.sbomify.com/MAL-2025-27593/): Malicious code in nocturne-kite-oim992-project (npm) (malicious package)
- [MAL-2025-27592](https://insights.sbomify.com/MAL-2025-27592/): Malicious code in nocturne-jasmine-ssc313-project (npm) (malicious package)
- [MAL-2025-27591](https://insights.sbomify.com/MAL-2025-27591/): Malicious code in nocturne-iguana-mug695-project (npm) (malicious package)
- [MAL-2025-27590](https://insights.sbomify.com/MAL-2025-27590/): Malicious code in nocturne-gorge-gyj086-project (npm) (malicious package)
- [MAL-2025-2759](https://insights.sbomify.com/MAL-2025-2759/): Malicious code in f0-data-collection-service-mock (npm) (malicious package)
- [MAL-2025-27589](https://insights.sbomify.com/MAL-2025-27589/): Malicious code in nocturne-giraffe-gyl185-project (npm) (malicious package)
- [MAL-2025-27588](https://insights.sbomify.com/MAL-2025-27588/): Malicious code in nocturne-falcon-gsb275-project (npm) (malicious package)
- [MAL-2025-27587](https://insights.sbomify.com/MAL-2025-27587/): Malicious code in nocturne-cat-frk573-project (npm) (malicious package)
- [MAL-2025-27586](https://insights.sbomify.com/MAL-2025-27586/): Malicious code in no-one-left-behind (npm) (malicious package)
- [MAL-2025-27585](https://insights.sbomify.com/MAL-2025-27585/): Malicious code in no-deps-scripted-to-fail (npm) (malicious package)
- [MAL-2025-27584](https://insights.sbomify.com/MAL-2025-27584/): Malicious code in nnioslib (npm) (malicious package)
- [MAL-2025-27583](https://insights.sbomify.com/MAL-2025-27583/): Malicious code in nmqyma (npm) (malicious package)
- [MAL-2025-27582](https://insights.sbomify.com/MAL-2025-27582/): Malicious code in nmos-js (npm) (malicious package)
- [MAL-2025-27581](https://insights.sbomify.com/MAL-2025-27581/): Malicious code in nm-test (npm) (malicious package)
- [MAL-2025-27580](https://insights.sbomify.com/MAL-2025-27580/): Malicious code in nlvpms (npm) (malicious package)
- [MAL-2025-2758](https://insights.sbomify.com/MAL-2025-2758/): Malicious code in events-utils-lib (npm) (malicious package)
- [MAL-2025-27579](https://insights.sbomify.com/MAL-2025-27579/): Malicious code in nlpviz (npm) (malicious package)
- [MAL-2025-27578](https://insights.sbomify.com/MAL-2025-27578/): Malicious code in nlpstorm (npm) (malicious package)
- [MAL-2025-27577](https://insights.sbomify.com/MAL-2025-27577/): Malicious code in nlpgrid (npm) (malicious package)
- [MAL-2025-27576](https://insights.sbomify.com/MAL-2025-27576/): Malicious code in nlp-dingjian-meili-yingxiangxue (npm) (malicious package)
- [MAL-2025-27575](https://insights.sbomify.com/MAL-2025-27575/): Malicious code in nlkvdgcuxjokyrwa (npm) (malicious package)
- [MAL-2025-27574](https://insights.sbomify.com/MAL-2025-27574/): Malicious code in nkwjoiyuxlfacdgp (npm) (malicious package)
- [MAL-2025-27573](https://insights.sbomify.com/MAL-2025-27573/): Malicious code in nkswkaxecbfphvrz (npm) (malicious package)
- [MAL-2025-27572](https://insights.sbomify.com/MAL-2025-27572/): Malicious code in nkozqbwphcyrdufl (npm) (malicious package)
- [MAL-2025-27571](https://insights.sbomify.com/MAL-2025-27571/): Malicious code in nkjzqrwdxcofkbea (npm) (malicious package)
- [MAL-2025-27570](https://insights.sbomify.com/MAL-2025-27570/): Malicious code in nkem (npm) (malicious package)
- [MAL-2025-2757](https://insights.sbomify.com/MAL-2025-2757/): Malicious code in ecko-wallet-react (npm) (malicious package)
- [MAL-2025-27569](https://insights.sbomify.com/MAL-2025-27569/): Malicious code in njwedding (npm) (malicious package)
- [MAL-2025-27568](https://insights.sbomify.com/MAL-2025-27568/): Malicious code in njplgwrv2ify8ho5m4ya3qnbszxc31jd (npm) (malicious package)
- [MAL-2025-27567](https://insights.sbomify.com/MAL-2025-27567/): Malicious code in nixientp (npm) (malicious package)
- [MAL-2025-27566](https://insights.sbomify.com/MAL-2025-27566/): Malicious code in nittymail (npm) (malicious package)
- [MAL-2025-27565](https://insights.sbomify.com/MAL-2025-27565/): Malicious code in nitro-components (npm) (malicious package)
- [MAL-2025-27564](https://insights.sbomify.com/MAL-2025-27564/): Malicious code in nitavto (npm) (malicious package)
- [MAL-2025-27563](https://insights.sbomify.com/MAL-2025-27563/): Malicious code in nit-template-service-core-lib (npm) (malicious package)
- [MAL-2025-27562](https://insights.sbomify.com/MAL-2025-27562/): Malicious code in nit-quotation-service-core-lib (npm) (malicious package)
- [MAL-2025-27561](https://insights.sbomify.com/MAL-2025-27561/): Malicious code in nishan (npm) (malicious package)
- [MAL-2025-27560](https://insights.sbomify.com/MAL-2025-27560/): Malicious code in nir (npm) (malicious package)
- [MAL-2025-2756](https://insights.sbomify.com/MAL-2025-2756/): Malicious code in ecko-wallet (npm) (malicious package)
- [MAL-2025-27559](https://insights.sbomify.com/MAL-2025-27559/): Malicious code in niodependencytest (npm) (malicious package)
- [MAL-2025-27558](https://insights.sbomify.com/MAL-2025-27558/): Malicious code in ninjarun (npm) (malicious package)
- [MAL-2025-27557](https://insights.sbomify.com/MAL-2025-27557/): Malicious code in ninjahome (npm) (malicious package)
- [MAL-2025-27556](https://insights.sbomify.com/MAL-2025-27556/): Malicious code in nining (npm) (malicious package)
- [MAL-2025-27555](https://insights.sbomify.com/MAL-2025-27555/): Malicious code in nineyi.lib.carnap (npm) (malicious package)
- [MAL-2025-27554](https://insights.sbomify.com/MAL-2025-27554/): Malicious code in nineyi.frontend.eroica (npm) (malicious package)
- [MAL-2025-27553](https://insights.sbomify.com/MAL-2025-27553/): Malicious code in nina-soto69-kuki (npm) (malicious package)
- [MAL-2025-27552](https://insights.sbomify.com/MAL-2025-27552/): Malicious code in nina-lapis47-breki (npm) (malicious package)
- [MAL-2025-27551](https://insights.sbomify.com/MAL-2025-27551/): Malicious code in nina-lapis2-sukiwir (npm) (malicious package)
- [MAL-2025-27550](https://insights.sbomify.com/MAL-2025-27550/): Malicious code in nina-empal89-sukiwir (npm) (malicious package)
- [MAL-2025-2755](https://insights.sbomify.com/MAL-2025-2755/): Malicious code in ecko-dex-react (npm) (malicious package)
- [MAL-2025-27549](https://insights.sbomify.com/MAL-2025-27549/): Malicious code in nina-dradag97-sukiwir (npm) (malicious package)
- [MAL-2025-27548](https://insights.sbomify.com/MAL-2025-27548/): Malicious code in nimisha (npm) (malicious package)
- [MAL-2025-27547](https://insights.sbomify.com/MAL-2025-27547/): Malicious code in nimbus_wq8qj_ol4uh_cascade (npm) (malicious package)
- [MAL-2025-27546](https://insights.sbomify.com/MAL-2025-27546/): Malicious code in nimbus_r5mhk_lcbn5_ember (npm) (malicious package)
- [MAL-2025-27545](https://insights.sbomify.com/MAL-2025-27545/): Malicious code in nimbus_nio4z_bs9ca_pulse (npm) (malicious package)
- [MAL-2025-27544](https://insights.sbomify.com/MAL-2025-27544/): Malicious code in nimbus_a7mrc_s3tnd_rainbow (npm) (malicious package)
- [MAL-2025-27543](https://insights.sbomify.com/MAL-2025-27543/): Malicious code in nimbus_85kja_ub1xc_fern (npm) (malicious package)
- [MAL-2025-27542](https://insights.sbomify.com/MAL-2025-27542/): Malicious code in nimbus-yawn-neu284-project (npm) (malicious package)
- [MAL-2025-27541](https://insights.sbomify.com/MAL-2025-27541/): Malicious code in nimbus-xerus-mtc994-project (npm) (malicious package)
- [MAL-2025-27540](https://insights.sbomify.com/MAL-2025-27540/): Malicious code in nimbus-whale-lqk535-project (npm) (malicious package)
- [MAL-2025-2754](https://insights.sbomify.com/MAL-2025-2754/): Malicious code in dir-tree-generator (npm) (malicious package)
- [MAL-2025-27539](https://insights.sbomify.com/MAL-2025-27539/): Malicious code in nimbus-umbra-muj494-project (npm) (malicious package)
- [MAL-2025-27538](https://insights.sbomify.com/MAL-2025-27538/): Malicious code in nimbus-reef-xic924-project (npm) (malicious package)
- [MAL-2025-27537](https://insights.sbomify.com/MAL-2025-27537/): Malicious code in nimbus-piano-erg429-project (npm) (malicious package)
- [MAL-2025-27536](https://insights.sbomify.com/MAL-2025-27536/): Malicious code in nimbus-kiwi-wqj043-project (npm) (malicious package)
- [MAL-2025-27535](https://insights.sbomify.com/MAL-2025-27535/): Malicious code in nimbus-honey-xsp902-project (npm) (malicious package)
- [MAL-2025-27534](https://insights.sbomify.com/MAL-2025-27534/): Malicious code in nimbus-honey-hgj663-project (npm) (malicious package)
- [MAL-2025-27533](https://insights.sbomify.com/MAL-2025-27533/): Malicious code in nimbus-grove-iwn738-project (npm) (malicious package)
- [MAL-2025-27532](https://insights.sbomify.com/MAL-2025-27532/): Malicious code in nimbus-emerald-cma374-project (npm) (malicious package)
- [MAL-2025-27531](https://insights.sbomify.com/MAL-2025-27531/): Malicious code in nimbus-aspen-vok697-project (npm) (malicious package)
- [MAL-2025-27530](https://insights.sbomify.com/MAL-2025-27530/): Malicious code in nimblyci (npm) (malicious package)
- [MAL-2025-2753](https://insights.sbomify.com/MAL-2025-2753/): Malicious code in dir-auto-backup (npm) (malicious package)
- [MAL-2025-27529](https://insights.sbomify.com/MAL-2025-27529/): Malicious code in nilstripe (npm) (malicious package)
- [MAL-2025-27528](https://insights.sbomify.com/MAL-2025-27528/): Malicious code in nike-hercules (npm) (malicious package)
- [MAL-2025-27527](https://insights.sbomify.com/MAL-2025-27527/): Malicious code in nightwatch-warp-antares-sagitta (npm) (malicious package)
- [MAL-2025-27526](https://insights.sbomify.com/MAL-2025-27526/): Malicious code in nightwatch-steganography-hapi-warp (npm) (malicious package)
- [MAL-2025-27525](https://insights.sbomify.com/MAL-2025-27525/): Malicious code in nightwatch-publish-lynx-quark (npm) (malicious package)
- [MAL-2025-27524](https://insights.sbomify.com/MAL-2025-27524/): Malicious code in nightwatch-nodejs-run-script-castor (npm) (malicious package)
- [MAL-2025-27523](https://insights.sbomify.com/MAL-2025-27523/): Malicious code in nightwatch-halley-proxima-cache (npm) (malicious package)
- [MAL-2025-27522](https://insights.sbomify.com/MAL-2025-27522/): Malicious code in nightwatch-andromeda-dotenv-safe-figures (npm) (malicious package)
- [MAL-2025-27521](https://insights.sbomify.com/MAL-2025-27521/): Malicious code in NightPro-Web (npm) (malicious package)
- [MAL-2025-27520](https://insights.sbomify.com/MAL-2025-27520/): Malicious code in nightmare-titan-buffer-titan (npm) (malicious package)
- [MAL-2025-2752](https://insights.sbomify.com/MAL-2025-2752/): Malicious code in degate_protocols (npm) (malicious package)
- [MAL-2025-27519](https://insights.sbomify.com/MAL-2025-27519/): Malicious code in nightmare-markdownlint-resolvers-frontend (npm) (malicious package)
- [MAL-2025-27518](https://insights.sbomify.com/MAL-2025-27518/): Malicious code in nightmare-config-lepton-telesto (npm) (malicious package)
- [MAL-2025-27517](https://insights.sbomify.com/MAL-2025-27517/): Malicious code in nightly_builds (npm) (malicious package)
- [MAL-2025-27516](https://insights.sbomify.com/MAL-2025-27516/): Malicious code in nightingale-yambean-k21w (npm) (malicious package)
- [MAL-2025-27515](https://insights.sbomify.com/MAL-2025-27515/): Malicious code in nightingale-whiskey-ex3l (npm) (malicious package)
- [MAL-2025-27514](https://insights.sbomify.com/MAL-2025-27514/): Malicious code in nightingale-rainbow-hg5s (npm) (malicious package)
- [MAL-2025-27513](https://insights.sbomify.com/MAL-2025-27513/): Malicious code in nightingale-jalapeno-qh2f (npm) (malicious package)
- [MAL-2025-27512](https://insights.sbomify.com/MAL-2025-27512/): Malicious code in nightingale-comet-y4oa (npm) (malicious package)
- [MAL-2025-27511](https://insights.sbomify.com/MAL-2025-27511/): Malicious code in nightingale-beetroot-3867 (npm) (malicious package)
- [MAL-2025-27510](https://insights.sbomify.com/MAL-2025-27510/): Malicious code in night_qu1qa_h5z0a_drizzle (npm) (malicious package)
- [MAL-2025-2751](https://insights.sbomify.com/MAL-2025-2751/): Malicious code in degate.js (npm) (malicious package)
- [MAL-2025-27509](https://insights.sbomify.com/MAL-2025-27509/): Malicious code in night_qbwdy_bkz4k_rainbow (npm) (malicious package)
- [MAL-2025-27508](https://insights.sbomify.com/MAL-2025-27508/): Malicious code in night_nhfqp_hssjn_kryptonite (npm) (malicious package)
- [MAL-2025-27507](https://insights.sbomify.com/MAL-2025-27507/): Malicious code in night_lztkw_23llz_snow (npm) (malicious package)
- [MAL-2025-27506](https://insights.sbomify.com/MAL-2025-27506/): Malicious code in night_htpqn_babqa_xenolith (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/807/