# Vulnerabilities published in 2025


- [MAL-2025-27235](https://insights.sbomify.com/MAL-2025-27235/): Malicious code in nectarine-mike-golf-fsydh (npm) (malicious package)
- [MAL-2025-27234](https://insights.sbomify.com/MAL-2025-27234/): Malicious code in nectarine-mfy-project (npm) (malicious package)
- [MAL-2025-27233](https://insights.sbomify.com/MAL-2025-27233/): Malicious code in nectarine-mango-golf-oylfu (npm) (malicious package)
- [MAL-2025-27232](https://insights.sbomify.com/MAL-2025-27232/): Malicious code in nectarine-lor-project (npm) (malicious package)
- [MAL-2025-27231](https://insights.sbomify.com/MAL-2025-27231/): Malicious code in nectarine-lima-kxru (npm) (malicious package)
- [MAL-2025-27230](https://insights.sbomify.com/MAL-2025-27230/): Malicious code in nectarine-lemon-m4mw (npm) (malicious package)
- [MAL-2025-2723](https://insights.sbomify.com/MAL-2025-2723/): Malicious code in xablaublaubleu (npm) (malicious package)
- [MAL-2025-27229](https://insights.sbomify.com/MAL-2025-27229/): Malicious code in nectarine-lemon-iizh (npm) (malicious package)
- [MAL-2025-27228](https://insights.sbomify.com/MAL-2025-27228/): Malicious code in nectarine-kpu-project (npm) (malicious package)
- [MAL-2025-27227](https://insights.sbomify.com/MAL-2025-27227/): Malicious code in nectarine-juliet-prgk (npm) (malicious package)
- [MAL-2025-27226](https://insights.sbomify.com/MAL-2025-27226/): Malicious code in nectarine-horseradish-obpb (npm) (malicious package)
- [MAL-2025-27225](https://insights.sbomify.com/MAL-2025-27225/): Malicious code in nectarine-gzu-project (npm) (malicious package)
- [MAL-2025-27224](https://insights.sbomify.com/MAL-2025-27224/): Malicious code in nectarine-grape-gtfx (npm) (malicious package)
- [MAL-2025-27223](https://insights.sbomify.com/MAL-2025-27223/): Malicious code in nectarine-foxtrot-kbjd (npm) (malicious package)
- [MAL-2025-27222](https://insights.sbomify.com/MAL-2025-27222/): Malicious code in nectarine-foxtrot-hpmm (npm) (malicious package)
- [MAL-2025-27221](https://insights.sbomify.com/MAL-2025-27221/): Malicious code in nectarine-eyf-project (npm) (malicious package)
- [MAL-2025-27220](https://insights.sbomify.com/MAL-2025-27220/): Malicious code in nectarine-echo-lrvi (npm) (malicious package)
- [MAL-2025-2722](https://insights.sbomify.com/MAL-2025-2722/): Malicious code in wzdui (npm) (malicious package)
- [MAL-2025-27219](https://insights.sbomify.com/MAL-2025-27219/): Malicious code in nectarine-dba-project (npm) (malicious package)
- [MAL-2025-27218](https://insights.sbomify.com/MAL-2025-27218/): Malicious code in nectarine-d7h-project (npm) (malicious package)
- [MAL-2025-27217](https://insights.sbomify.com/MAL-2025-27217/): Malicious code in nectarine-cherry-fffq (npm) (malicious package)
- [MAL-2025-27216](https://insights.sbomify.com/MAL-2025-27216/): Malicious code in nectarine-bravo-onmy (npm) (malicious package)
- [MAL-2025-27215](https://insights.sbomify.com/MAL-2025-27215/): Malicious code in nectarine-alpha-vdlr (npm) (malicious package)
- [MAL-2025-27214](https://insights.sbomify.com/MAL-2025-27214/): Malicious code in nectarine-alpha-jzgv (npm) (malicious package)
- [MAL-2025-27213](https://insights.sbomify.com/MAL-2025-27213/): Malicious code in nectarine-acorn-pvmi (npm) (malicious package)
- [MAL-2025-27212](https://insights.sbomify.com/MAL-2025-27212/): Malicious code in nectarine-a3e-project (npm) (malicious package)
- [MAL-2025-27211](https://insights.sbomify.com/MAL-2025-27211/): Malicious code in nectarine-8dv-project (npm) (malicious package)
- [MAL-2025-27210](https://insights.sbomify.com/MAL-2025-27210/): Malicious code in nectarine-642-project (npm) (malicious package)
- [MAL-2025-2721](https://insights.sbomify.com/MAL-2025-2721/): Malicious code in wp-log (npm) (malicious package)
- [MAL-2025-27209](https://insights.sbomify.com/MAL-2025-27209/): Malicious code in nectarine-29j-project (npm) (malicious package)
- [MAL-2025-27208](https://insights.sbomify.com/MAL-2025-27208/): Malicious code in nectarine-225-project (npm) (malicious package)
- [MAL-2025-27207](https://insights.sbomify.com/MAL-2025-27207/): Malicious code in nectarine-0g8-project (npm) (malicious package)
- [MAL-2025-27206](https://insights.sbomify.com/MAL-2025-27206/): Malicious code in nectar_6adtn_0oolz_vista (npm) (malicious package)
- [MAL-2025-27205](https://insights.sbomify.com/MAL-2025-27205/): Malicious code in nectar_0rt3c_4xmby_quicksilver (npm) (malicious package)
- [MAL-2025-27204](https://insights.sbomify.com/MAL-2025-27204/): Malicious code in nectar-uranium-dil042-project (npm) (malicious package)
- [MAL-2025-27203](https://insights.sbomify.com/MAL-2025-27203/): Malicious code in nectar-uplift-lgk654-project (npm) (malicious package)
- [MAL-2025-27202](https://insights.sbomify.com/MAL-2025-27202/): Malicious code in nectar-topaz-wvj421-project (npm) (malicious package)
- [MAL-2025-27201](https://insights.sbomify.com/MAL-2025-27201/): Malicious code in nectar-orangutan-qka472-project (npm) (malicious package)
- [MAL-2025-27200](https://insights.sbomify.com/MAL-2025-27200/): Malicious code in nectar-luster-gvt889-project (npm) (malicious package)
- [MAL-2025-2720](https://insights.sbomify.com/MAL-2025-2720/): Malicious code in wave-charts-sdk (npm) (malicious package)
- [MAL-2025-272](https://insights.sbomify.com/MAL-2025-272/): Malicious code in autocomplete-theme-classic (npm) (malicious package)
- [MAL-2025-27199](https://insights.sbomify.com/MAL-2025-27199/): Malicious code in nectar-glisten-nom856-project (npm) (malicious package)
- [MAL-2025-27198](https://insights.sbomify.com/MAL-2025-27198/): Malicious code in nectar-desert-yka347-project (npm) (malicious package)
- [MAL-2025-27197](https://insights.sbomify.com/MAL-2025-27197/): Malicious code in nectar-caravan-kim477-project (npm) (malicious package)
- [MAL-2025-27196](https://insights.sbomify.com/MAL-2025-27196/): Malicious code in nectar-albatross-rgc368-project (npm) (malicious package)
- [MAL-2025-27195](https://insights.sbomify.com/MAL-2025-27195/): Malicious code in nectar-4fmc5-0l8ls-juniper-project (npm) (malicious package)
- [MAL-2025-27194](https://insights.sbomify.com/MAL-2025-27194/): Malicious code in nebula_wz50a_xx2v3_unity (npm) (malicious package)
- [MAL-2025-27193](https://insights.sbomify.com/MAL-2025-27193/): Malicious code in nebula_wcwer_izdqj_dream (npm) (malicious package)
- [MAL-2025-27192](https://insights.sbomify.com/MAL-2025-27192/): Malicious code in nebula-y7ihw-7dy2z-juniper-project (npm) (malicious package)
- [MAL-2025-27191](https://insights.sbomify.com/MAL-2025-27191/): Malicious code in nebula-xylophone-nom511-project (npm) (malicious package)
- [MAL-2025-27190](https://insights.sbomify.com/MAL-2025-27190/): Malicious code in nebula-xerox-hdp011-project (npm) (malicious package)
- [MAL-2025-2719](https://insights.sbomify.com/MAL-2025-2719/): Malicious code in vuln-checker-poc (npm) (malicious package)
- [MAL-2025-27189](https://insights.sbomify.com/MAL-2025-27189/): Malicious code in nebula-xanadu-bno580-project (npm) (malicious package)
- [MAL-2025-27188](https://insights.sbomify.com/MAL-2025-27188/): Malicious code in nebula-whirlpool-zsi471-project (npm) (malicious package)
- [MAL-2025-27187](https://insights.sbomify.com/MAL-2025-27187/): Malicious code in nebula-warp-testcafe-impulse (npm) (malicious package)
- [MAL-2025-27186](https://insights.sbomify.com/MAL-2025-27186/): Malicious code in nebula-vortex-fgm018-project (npm) (malicious package)
- [MAL-2025-27185](https://insights.sbomify.com/MAL-2025-27185/): Malicious code in nebula-volcano-x7og (npm) (malicious package)
- [MAL-2025-27184](https://insights.sbomify.com/MAL-2025-27184/): Malicious code in nebula-violet-bek167-project (npm) (malicious package)
- [MAL-2025-27183](https://insights.sbomify.com/MAL-2025-27183/): Malicious code in nebula-vgxww-ij4k4-ice-project (npm) (malicious package)
- [MAL-2025-27182](https://insights.sbomify.com/MAL-2025-27182/): Malicious code in nebula-udon-qy9u (npm) (malicious package)
- [MAL-2025-27181](https://insights.sbomify.com/MAL-2025-27181/): Malicious code in nebula-tornado-hczb (npm) (malicious package)
- [MAL-2025-27180](https://insights.sbomify.com/MAL-2025-27180/): Malicious code in nebula-titan-3g9w (npm) (malicious package)
- [MAL-2025-2718](https://insights.sbomify.com/MAL-2025-2718/): Malicious code in vue-official-web (npm) (malicious package)
- [MAL-2025-27179](https://insights.sbomify.com/MAL-2025-27179/): Malicious code in nebula-radish-eol3 (npm) (malicious package)
- [MAL-2025-27178](https://insights.sbomify.com/MAL-2025-27178/): Malicious code in nebula-quilt-pgp840-project (npm) (malicious package)
- [MAL-2025-27177](https://insights.sbomify.com/MAL-2025-27177/): Malicious code in nebula-prairie-zcs243-project (npm) (malicious package)
- [MAL-2025-27176](https://insights.sbomify.com/MAL-2025-27176/): Malicious code in nebula-papaya-ym35 (npm) (malicious package)
- [MAL-2025-27175](https://insights.sbomify.com/MAL-2025-27175/): Malicious code in nebula-nutmeg-8vb0 (npm) (malicious package)
- [MAL-2025-27174](https://insights.sbomify.com/MAL-2025-27174/): Malicious code in nebula-november-ine8 (npm) (malicious package)
- [MAL-2025-27173](https://insights.sbomify.com/MAL-2025-27173/): Malicious code in nebula-mushroom-wtc0 (npm) (malicious package)
- [MAL-2025-27172](https://insights.sbomify.com/MAL-2025-27172/): Malicious code in nebula-memkv (npm) (malicious package)
- [MAL-2025-27171](https://insights.sbomify.com/MAL-2025-27171/): Malicious code in nebula-lyra-quark-frontend (npm) (malicious package)
- [MAL-2025-27170](https://insights.sbomify.com/MAL-2025-27170/): Malicious code in nebula-local (npm) (malicious package)
- [MAL-2025-2717](https://insights.sbomify.com/MAL-2025-2717/): Malicious code in vistar-ad-clienttestadv4 (npm) (malicious package)
- [MAL-2025-27169](https://insights.sbomify.com/MAL-2025-27169/): Malicious code in nebula-less-pegasus-cybernetics (npm) (malicious package)
- [MAL-2025-27168](https://insights.sbomify.com/MAL-2025-27168/): Malicious code in nebula-kiwi-yri081-project (npm) (malicious package)
- [MAL-2025-27167](https://insights.sbomify.com/MAL-2025-27167/): Malicious code in nebula-juniper-pkk8 (npm) (malicious package)
- [MAL-2025-27166](https://insights.sbomify.com/MAL-2025-27166/): Malicious code in nebula-js (npm) (malicious package)
- [MAL-2025-27165](https://insights.sbomify.com/MAL-2025-27165/): Malicious code in nebula-forever-subduction-playwright (npm) (malicious package)
- [MAL-2025-27164](https://insights.sbomify.com/MAL-2025-27164/): Malicious code in nebula-firebase-queue (npm) (malicious package)
- [MAL-2025-27163](https://insights.sbomify.com/MAL-2025-27163/): Malicious code in nebula-dune-ywj856-project (npm) (malicious package)
- [MAL-2025-27162](https://insights.sbomify.com/MAL-2025-27162/): Malicious code in nebula-date-kbj0 (npm) (malicious package)
- [MAL-2025-27161](https://insights.sbomify.com/MAL-2025-27161/): Malicious code in nebula-coral-dgp055-project (npm) (malicious package)
- [MAL-2025-27160](https://insights.sbomify.com/MAL-2025-27160/): Malicious code in nebula-cliff-exr201-project (npm) (malicious package)
- [MAL-2025-2716](https://insights.sbomify.com/MAL-2025-2716/): Malicious code in vistar-ad-clienttestadv3 (npm) (malicious package)
- [MAL-2025-27159](https://insights.sbomify.com/MAL-2025-27159/): Malicious code in nebula-chai-luna-primatology (npm) (malicious package)
- [MAL-2025-27158](https://insights.sbomify.com/MAL-2025-27158/): Malicious code in nebula-caravan-lvp365-project (npm) (malicious package)
- [MAL-2025-27157](https://insights.sbomify.com/MAL-2025-27157/): Malicious code in nebula-autobahn (npm) (malicious package)
- [MAL-2025-27156](https://insights.sbomify.com/MAL-2025-27156/): Malicious code in nebula-ant-hcg665-project (npm) (malicious package)
- [MAL-2025-27155](https://insights.sbomify.com/MAL-2025-27155/): Malicious code in nebula-acsit-9kca5-nymph-project (npm) (malicious package)
- [MAL-2025-27154](https://insights.sbomify.com/MAL-2025-27154/): Malicious code in nebula-81vj3-n6v4x-yarrow-project (npm) (malicious package)
- [MAL-2025-27153](https://insights.sbomify.com/MAL-2025-27153/): Malicious code in nebula-7agn9-zp9t3-whisper-project (npm) (malicious package)
- [MAL-2025-27152](https://insights.sbomify.com/MAL-2025-27152/): Malicious code in neap-core (npm) (malicious package)
- [MAL-2025-27151](https://insights.sbomify.com/MAL-2025-27151/): Malicious code in ndxgfqjivkcwymut (npm) (malicious package)
- [MAL-2025-27150](https://insights.sbomify.com/MAL-2025-27150/): Malicious code in ndatabase (npm) (malicious package)
- [MAL-2025-2715](https://insights.sbomify.com/MAL-2025-2715/): Malicious code in vistar-ad-clienttestadv2 (npm) (malicious package)
- [MAL-2025-27149](https://insights.sbomify.com/MAL-2025-27149/): Malicious code in ndarry (npm) (malicious package)
- [MAL-2025-27148](https://insights.sbomify.com/MAL-2025-27148/): Malicious code in ncvvb3 (npm) (malicious package)
- [MAL-2025-27147](https://insights.sbomify.com/MAL-2025-27147/): Malicious code in ncustom (npm) (malicious package)
- [MAL-2025-27146](https://insights.sbomify.com/MAL-2025-27146/): Malicious code in ncpapp (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/811/