# Vulnerabilities published in 2025


- [MAL-2025-27415](https://insights.sbomify.com/MAL-2025-27415/): Malicious code in nexway (npm) (malicious package)
- [MAL-2025-27414](https://insights.sbomify.com/MAL-2025-27414/): Malicious code in nexus-ui-plugin (npm) (malicious package)
- [MAL-2025-27413](https://insights.sbomify.com/MAL-2025-27413/): Malicious code in nextrelic (npm) (malicious package)
- [MAL-2025-27412](https://insights.sbomify.com/MAL-2025-27412/): Malicious code in nextla (npm) (malicious package)
- [MAL-2025-27411](https://insights.sbomify.com/MAL-2025-27411/): Malicious code in nextjs-vega-tailwindcss-europa (npm) (malicious package)
- [MAL-2025-27410](https://insights.sbomify.com/MAL-2025-27410/): Malicious code in nextjs-upgrade-pulsar-bunyan (npm) (malicious package)
- [MAL-2025-2741](https://insights.sbomify.com/MAL-2025-2741/): Malicious code in @takamol/qiwa-design-system (npm) (malicious package)
- [MAL-2025-27409](https://insights.sbomify.com/MAL-2025-27409/): Malicious code in nextjs-transform-blazar-procyon (npm) (malicious package)
- [MAL-2025-27408](https://insights.sbomify.com/MAL-2025-27408/): Malicious code in nextjs-thuban-terraforming-stop (npm) (malicious package)
- [MAL-2025-27407](https://insights.sbomify.com/MAL-2025-27407/): Malicious code in nextjs-surya (npm) (malicious package)
- [MAL-2025-27406](https://insights.sbomify.com/MAL-2025-27406/): Malicious code in nextjs-nconf-centauri-middleware (npm) (malicious package)
- [MAL-2025-27405](https://insights.sbomify.com/MAL-2025-27405/): Malicious code in nextjs-maling (npm) (malicious package)
- [MAL-2025-27404](https://insights.sbomify.com/MAL-2025-27404/): Malicious code in nextjs-indus-hugo-asthenosphere (npm) (malicious package)
- [MAL-2025-27403](https://insights.sbomify.com/MAL-2025-27403/): Malicious code in nextjs-fornax-iota-photon (npm) (malicious package)
- [MAL-2025-27402](https://insights.sbomify.com/MAL-2025-27402/): Malicious code in nextjs-default (npm) (malicious package)
- [MAL-2025-27401](https://insights.sbomify.com/MAL-2025-27401/): Malicious code in nextjs-cosmos-spinner-auth0 (npm) (malicious package)
- [MAL-2025-27400](https://insights.sbomify.com/MAL-2025-27400/): Malicious code in nextcapital-front (npm) (malicious package)
- [MAL-2025-2740](https://insights.sbomify.com/MAL-2025-2740/): Malicious code in @takamol/qiwa-api-client (npm) (malicious package)
- [MAL-2025-274](https://insights.sbomify.com/MAL-2025-274/): Malicious code in blockapis (npm) (malicious package)
- [MAL-2025-27399](https://insights.sbomify.com/MAL-2025-27399/): Malicious code in next-time (npm) (malicious package)
- [MAL-2025-27398](https://insights.sbomify.com/MAL-2025-27398/): Malicious code in next-swc-win32-x64-msvc (npm) (malicious package)
- [MAL-2025-27397](https://insights.sbomify.com/MAL-2025-27397/): Malicious code in next-styles (npm) (malicious package)
- [MAL-2025-27396](https://insights.sbomify.com/MAL-2025-27396/): Malicious code in nexo-solidity-smart-contracts (npm) (malicious package)
- [MAL-2025-27395](https://insights.sbomify.com/MAL-2025-27395/): Malicious code in nexmann (npm) (malicious package)
- [MAL-2025-27394](https://insights.sbomify.com/MAL-2025-27394/): Malicious code in nexdmygwtklfjruo (npm) (malicious package)
- [MAL-2025-27393](https://insights.sbomify.com/MAL-2025-27393/): Malicious code in newznzb (npm) (malicious package)
- [MAL-2025-27392](https://insights.sbomify.com/MAL-2025-27392/): Malicious code in newtweets (npm) (malicious package)
- [MAL-2025-27391](https://insights.sbomify.com/MAL-2025-27391/): Malicious code in newtspeed (npm) (malicious package)
- [MAL-2025-27390](https://insights.sbomify.com/MAL-2025-27390/): Malicious code in newtopic (npm) (malicious package)
- [MAL-2025-2739](https://insights.sbomify.com/MAL-2025-2739/): Malicious code in @takamol/ets-react-components (npm) (malicious package)
- [MAL-2025-27389](https://insights.sbomify.com/MAL-2025-27389/): Malicious code in newton-logger (npm) (malicious package)
- [MAL-2025-27388](https://insights.sbomify.com/MAL-2025-27388/): Malicious code in newstat (npm) (malicious package)
- [MAL-2025-27387](https://insights.sbomify.com/MAL-2025-27387/): Malicious code in newslot2025 (npm) (malicious package)
- [MAL-2025-27386](https://insights.sbomify.com/MAL-2025-27386/): Malicious code in news-vj-developer-scaffold (npm) (malicious package)
- [MAL-2025-27385](https://insights.sbomify.com/MAL-2025-27385/): Malicious code in newres (npm) (malicious package)
- [MAL-2025-27384](https://insights.sbomify.com/MAL-2025-27384/): Malicious code in newrep (npm) (malicious package)
- [MAL-2025-27383](https://insights.sbomify.com/MAL-2025-27383/): Malicious code in newpipi (npm) (malicious package)
- [MAL-2025-27382](https://insights.sbomify.com/MAL-2025-27382/): Malicious code in newpgslot2025 (npm) (malicious package)
- [MAL-2025-27381](https://insights.sbomify.com/MAL-2025-27381/): Malicious code in newmov (npm) (malicious package)
- [MAL-2025-27380](https://insights.sbomify.com/MAL-2025-27380/): Malicious code in newminix (npm) (malicious package)
- [MAL-2025-2738](https://insights.sbomify.com/MAL-2025-2738/): Malicious code in @takamol/eslint-config (npm) (malicious package)
- [MAL-2025-27379](https://insights.sbomify.com/MAL-2025-27379/): Malicious code in newlinejson-logger (npm) (malicious package)
- [MAL-2025-27378](https://insights.sbomify.com/MAL-2025-27378/): Malicious code in newkang (npm) (malicious package)
- [MAL-2025-27377](https://insights.sbomify.com/MAL-2025-27377/): Malicious code in newjstech (npm) (malicious package)
- [MAL-2025-27376](https://insights.sbomify.com/MAL-2025-27376/): Malicious code in newhelion (npm) (malicious package)
- [MAL-2025-27375](https://insights.sbomify.com/MAL-2025-27375/): Malicious code in newgrc (npm) (malicious package)
- [MAL-2025-27374](https://insights.sbomify.com/MAL-2025-27374/): Malicious code in newgoob (npm) (malicious package)
- [MAL-2025-27373](https://insights.sbomify.com/MAL-2025-27373/): Malicious code in newfusion (npm) (malicious package)
- [MAL-2025-27372](https://insights.sbomify.com/MAL-2025-27372/): Malicious code in newcoino (npm) (malicious package)
- [MAL-2025-27371](https://insights.sbomify.com/MAL-2025-27371/): Malicious code in newasp (npm) (malicious package)
- [MAL-2025-27370](https://insights.sbomify.com/MAL-2025-27370/): Malicious code in newapplet (npm) (malicious package)
- [MAL-2025-2737](https://insights.sbomify.com/MAL-2025-2737/): Malicious code in @mukesh-d11/testing (npm) (malicious package)
- [MAL-2025-27369](https://insights.sbomify.com/MAL-2025-27369/): Malicious code in new-struct (npm) (malicious package)
- [MAL-2025-27368](https://insights.sbomify.com/MAL-2025-27368/): Malicious code in new-reactive (npm) (malicious package)
- [MAL-2025-27367](https://insights.sbomify.com/MAL-2025-27367/): Malicious code in new-range (npm) (malicious package)
- [MAL-2025-27366](https://insights.sbomify.com/MAL-2025-27366/): Malicious code in new-pubsub (npm) (malicious package)
- [MAL-2025-27365](https://insights.sbomify.com/MAL-2025-27365/): Malicious code in new-prop (npm) (malicious package)
- [MAL-2025-27364](https://insights.sbomify.com/MAL-2025-27364/): Malicious code in new-partial (npm) (malicious package)
- [MAL-2025-27363](https://insights.sbomify.com/MAL-2025-27363/): Malicious code in new-mock-sanitize-rho-signal (npm) (malicious package)
- [MAL-2025-27362](https://insights.sbomify.com/MAL-2025-27362/): Malicious code in new-list (npm) (malicious package)
- [MAL-2025-27361](https://insights.sbomify.com/MAL-2025-27361/): Malicious code in new-format (npm) (malicious package)
- [MAL-2025-27360](https://insights.sbomify.com/MAL-2025-27360/): Malicious code in new-empty-array (npm) (malicious package)
- [MAL-2025-2736](https://insights.sbomify.com/MAL-2025-2736/): Malicious code in test-utils-bundle (npm) (malicious package)
- [MAL-2025-27359](https://insights.sbomify.com/MAL-2025-27359/): Malicious code in new-command (npm) (malicious package)
- [MAL-2025-27358](https://insights.sbomify.com/MAL-2025-27358/): Malicious code in new-coin-master-spins-generator-for-free-2023-ygergerq (npm) (malicious package)
- [MAL-2025-27357](https://insights.sbomify.com/MAL-2025-27357/): Malicious code in new-chi-awk-alert-refactor (npm) (malicious package)
- [MAL-2025-27356](https://insights.sbomify.com/MAL-2025-27356/): Malicious code in new-chain (npm) (malicious package)
- [MAL-2025-27355](https://insights.sbomify.com/MAL-2025-27355/): Malicious code in new-al-bum-av-ailable-progress-5zjb6-rbopge (npm) (malicious package)
- [MAL-2025-27354](https://insights.sbomify.com/MAL-2025-27354/): Malicious code in new-al-bum-av-ailable-greetings-from-michigan-the-great-lakes-state-7x9l5-guwkve (npm) (malicious package)
- [MAL-2025-27353](https://insights.sbomify.com/MAL-2025-27353/): Malicious code in new-al-bum-av-ailable-for-emma-forever-ago-f3oe5-dzznht (npm) (malicious package)
- [MAL-2025-27352](https://insights.sbomify.com/MAL-2025-27352/): Malicious code in new-al-bum-av-ailable-curse-your-branches-9opbb-omehez (npm) (malicious package)
- [MAL-2025-27351](https://insights.sbomify.com/MAL-2025-27351/): Malicious code in new-al-bum-av-ailable-campfire-songs-1-k7le9-wpxeon (npm) (malicious package)
- [MAL-2025-27350](https://insights.sbomify.com/MAL-2025-27350/): Malicious code in new-al-bum-av-ailable-american-doll-posse-hawjk-crclgb (npm) (malicious package)
- [MAL-2025-2735](https://insights.sbomify.com/MAL-2025-2735/): Malicious code in crash-handler (npm) (malicious package)
- [MAL-2025-27349](https://insights.sbomify.com/MAL-2025-27349/): Malicious code in new-al-bum-av-ailable-532141-nothing-special-3hobm-scpavd (npm) (malicious package)
- [MAL-2025-27348](https://insights.sbomify.com/MAL-2025-27348/): Malicious code in new-al-bum-av-ailable-37081-the-hard-way-ic2mb-rquzyw (npm) (malicious package)
- [MAL-2025-27347](https://insights.sbomify.com/MAL-2025-27347/): Malicious code in new-al-bum-av-ailable-24973-black-dialogue-hdrb2-ckuphe (npm) (malicious package)
- [MAL-2025-27346](https://insights.sbomify.com/MAL-2025-27346/): Malicious code in new-al-bum-av-ailable-23296-triumph-eb5kv-wzigao (npm) (malicious package)
- [MAL-2025-27345](https://insights.sbomify.com/MAL-2025-27345/): Malicious code in new-al-bum-av-ailable-2017-84902-three-futures-eheyb-czhdsw (npm) (malicious package)
- [MAL-2025-27344](https://insights.sbomify.com/MAL-2025-27344/): Malicious code in new-al-bum-av-ailable-17746-here-my-dear-8zdhb-bwjsfw (npm) (malicious package)
- [MAL-2025-27343](https://insights.sbomify.com/MAL-2025-27343/): Malicious code in new-al-bum-av-ailable-15536-do-whatever-turns-you-on-0p2m4-ejnnxk (npm) (malicious package)
- [MAL-2025-27342](https://insights.sbomify.com/MAL-2025-27342/): Malicious code in new-al-bum-av-ailable-15445-pieces-of-a-man-l0qbw-fjnero (npm) (malicious package)
- [MAL-2025-27341](https://insights.sbomify.com/MAL-2025-27341/): Malicious code in new-al-bum-av-ailable-104465-grid-of-points-0d7rx-ikuywl (npm) (malicious package)
- [MAL-2025-27340](https://insights.sbomify.com/MAL-2025-27340/): Malicious code in new-admin (npm) (malicious package)
- [MAL-2025-2734](https://insights.sbomify.com/MAL-2025-2734/): Malicious code in dmpconnectjsapp-base (npm) (malicious package)
- [MAL-2025-27339](https://insights.sbomify.com/MAL-2025-27339/): Malicious code in neutronstar-plutology-grus-lint-staged (npm) (malicious package)
- [MAL-2025-27338](https://insights.sbomify.com/MAL-2025-27338/): Malicious code in neutronstar-higgs-spawn-eslint-plugin (npm) (malicious package)
- [MAL-2025-27337](https://insights.sbomify.com/MAL-2025-27337/): Malicious code in neutronstar-geomorphology-coronalmassejection-comet (npm) (malicious package)
- [MAL-2025-27336](https://insights.sbomify.com/MAL-2025-27336/): Malicious code in neutrino-foundation-bellatrix-barnard (npm) (malicious package)
- [MAL-2025-27335](https://insights.sbomify.com/MAL-2025-27335/): Malicious code in neutrino-envconfig-mechatronics-yonder (npm) (malicious package)
- [MAL-2025-27334](https://insights.sbomify.com/MAL-2025-27334/): Malicious code in neurongl (npm) (malicious package)
- [MAL-2025-27333](https://insights.sbomify.com/MAL-2025-27333/): Malicious code in neuromorphic-tool-multiverse-mineralogy (npm) (malicious package)
- [MAL-2025-27332](https://insights.sbomify.com/MAL-2025-27332/): Malicious code in neuromorphic-test-janus-bionics (npm) (malicious package)
- [MAL-2025-27331](https://insights.sbomify.com/MAL-2025-27331/): Malicious code in neuromorphic-terser-csv-dagda (npm) (malicious package)
- [MAL-2025-27330](https://insights.sbomify.com/MAL-2025-27330/): Malicious code in neuromorphic-rest-webdriver-manager-scripts (npm) (malicious package)
- [MAL-2025-2733](https://insights.sbomify.com/MAL-2025-2733/): Malicious code in @johndeere-tech/helios-styles (npm) (malicious package)
- [MAL-2025-27329](https://insights.sbomify.com/MAL-2025-27329/): Malicious code in neuromorphic-publish-outercore-shelljs (npm) (malicious package)
- [MAL-2025-27328](https://insights.sbomify.com/MAL-2025-27328/): Malicious code in neuromorphic-arcturus-darkenergy-quark (npm) (malicious package)
- [MAL-2025-27327](https://insights.sbomify.com/MAL-2025-27327/): Malicious code in neurodiff (npm) (malicious package)
- [MAL-2025-27326](https://insights.sbomify.com/MAL-2025-27326/): Malicious code in neuenergy (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/809/