# Vulnerabilities published in 2025


- [MAL-2025-26966](https://insights.sbomify.com/MAL-2025-26966/): Malicious code in myedit (npm) (malicious package)
- [MAL-2025-26965](https://insights.sbomify.com/MAL-2025-26965/): Malicious code in mydumper (npm) (malicious package)
- [MAL-2025-26964](https://insights.sbomify.com/MAL-2025-26964/): Malicious code in mydouban (npm) (malicious package)
- [MAL-2025-26963](https://insights.sbomify.com/MAL-2025-26963/): Malicious code in mydebut (npm) (malicious package)
- [MAL-2025-26962](https://insights.sbomify.com/MAL-2025-26962/): Malicious code in mycommits (npm) (malicious package)
- [MAL-2025-26961](https://insights.sbomify.com/MAL-2025-26961/): Malicious code in mycodesvn (npm) (malicious package)
- [MAL-2025-26960](https://insights.sbomify.com/MAL-2025-26960/): Malicious code in mychatter (npm) (malicious package)
- [MAL-2025-2696](https://insights.sbomify.com/MAL-2025-2696/): Malicious code in ofjaaah-dependency-confusion (npm) (malicious package)
- [MAL-2025-26959](https://insights.sbomify.com/MAL-2025-26959/): Malicious code in mychatapp (npm) (malicious package)
- [MAL-2025-26958](https://insights.sbomify.com/MAL-2025-26958/): Malicious code in mybpps (npm) (malicious package)
- [MAL-2025-26957](https://insights.sbomify.com/MAL-2025-26957/): Malicious code in mybema (npm) (malicious package)
- [MAL-2025-26956](https://insights.sbomify.com/MAL-2025-26956/): Malicious code in mybeacons (npm) (malicious package)
- [MAL-2025-26955](https://insights.sbomify.com/MAL-2025-26955/): Malicious code in myazure (npm) (malicious package)
- [MAL-2025-26954](https://insights.sbomify.com/MAL-2025-26954/): Malicious code in myavrasm (npm) (malicious package)
- [MAL-2025-26953](https://insights.sbomify.com/MAL-2025-26953/): Malicious code in my_helper_js (npm) (malicious package)
- [MAL-2025-26952](https://insights.sbomify.com/MAL-2025-26952/): Malicious code in my-very-own-package (npm) (malicious package)
- [MAL-2025-26951](https://insights.sbomify.com/MAL-2025-26951/): Malicious code in my-treats-app (npm) (malicious package)
- [MAL-2025-26950](https://insights.sbomify.com/MAL-2025-26950/): Malicious code in my-testing-project (npm) (malicious package)
- [MAL-2025-2695](https://insights.sbomify.com/MAL-2025-2695/): Malicious code in nw.gui (npm) (malicious package)
- [MAL-2025-26949](https://insights.sbomify.com/MAL-2025-26949/): Malicious code in my-test-avvo (npm) (malicious package)
- [MAL-2025-26948](https://insights.sbomify.com/MAL-2025-26948/): Malicious code in my-npm-ognjetina (npm) (malicious package)
- [MAL-2025-26947](https://insights.sbomify.com/MAL-2025-26947/): Malicious code in my-npm-fareez1234 (npm) (malicious package)
- [MAL-2025-26946](https://insights.sbomify.com/MAL-2025-26946/): Malicious code in my-first-addon (npm) (malicious package)
- [MAL-2025-26945](https://insights.sbomify.com/MAL-2025-26945/): Malicious code in my-cli-app (npm) (malicious package)
- [MAL-2025-26944](https://insights.sbomify.com/MAL-2025-26944/): Malicious code in mxxh9v (npm) (malicious package)
- [MAL-2025-26943](https://insights.sbomify.com/MAL-2025-26943/): Malicious code in mxseklcjpvkhoigt (npm) (malicious package)
- [MAL-2025-26942](https://insights.sbomify.com/MAL-2025-26942/): Malicious code in mxkeanutcqjyvspl (npm) (malicious package)
- [MAL-2025-26941](https://insights.sbomify.com/MAL-2025-26941/): Malicious code in mxitpug (npm) (malicious package)
- [MAL-2025-26940](https://insights.sbomify.com/MAL-2025-26940/): Malicious code in mx-client-clients (npm) (malicious package)
- [MAL-2025-2694](https://insights.sbomify.com/MAL-2025-2694/): Malicious code in nodejs-website (npm) (malicious package)
- [MAL-2025-26939](https://insights.sbomify.com/MAL-2025-26939/): Malicious code in MWS_Automation (npm) (malicious package)
- [MAL-2025-26938](https://insights.sbomify.com/MAL-2025-26938/): Malicious code in mwkphrnliduxtfeg (npm) (malicious package)
- [MAL-2025-26937](https://insights.sbomify.com/MAL-2025-26937/): Malicious code in mwater-expressions-ui (npm) (malicious package)
- [MAL-2025-26936](https://insights.sbomify.com/MAL-2025-26936/): Malicious code in mw4qnb (npm) (malicious package)
- [MAL-2025-26935](https://insights.sbomify.com/MAL-2025-26935/): Malicious code in mw-influencers (npm) (malicious package)
- [MAL-2025-26934](https://insights.sbomify.com/MAL-2025-26934/): Malicious code in mw-eslint-rules (npm) (malicious package)
- [MAL-2025-26933](https://insights.sbomify.com/MAL-2025-26933/): Malicious code in mvvmrx (npm) (malicious package)
- [MAL-2025-26932](https://insights.sbomify.com/MAL-2025-26932/): Malicious code in mvvmkit (npm) (malicious package)
- [MAL-2025-26931](https://insights.sbomify.com/MAL-2025-26931/): Malicious code in mvulekokjsyznarb (npm) (malicious package)
- [MAL-2025-26930](https://insights.sbomify.com/MAL-2025-26930/): Malicious code in mvplayer (npm) (malicious package)
- [MAL-2025-2693](https://insights.sbomify.com/MAL-2025-2693/): Malicious code in node-clog (npm) (malicious package)
- [MAL-2025-26929](https://insights.sbomify.com/MAL-2025-26929/): Malicious code in mvpipe (npm) (malicious package)
- [MAL-2025-26928](https://insights.sbomify.com/MAL-2025-26928/): Malicious code in mvcrest (npm) (malicious package)
- [MAL-2025-26927](https://insights.sbomify.com/MAL-2025-26927/): Malicious code in mvcauth (npm) (malicious package)
- [MAL-2025-26926](https://insights.sbomify.com/MAL-2025-26926/): Malicious code in mvc-seneca (npm) (malicious package)
- [MAL-2025-26925](https://insights.sbomify.com/MAL-2025-26925/): Malicious code in mvalcu (npm) (malicious package)
- [MAL-2025-26924](https://insights.sbomify.com/MAL-2025-26924/): Malicious code in mvaayoo (npm) (malicious package)
- [MAL-2025-26923](https://insights.sbomify.com/MAL-2025-26923/): Malicious code in mv-evip (npm) (malicious package)
- [MAL-2025-26922](https://insights.sbomify.com/MAL-2025-26922/): Malicious code in muzikant (npm) (malicious package)
- [MAL-2025-26921](https://insights.sbomify.com/MAL-2025-26921/): Malicious code in muzicbaux (npm) (malicious package)
- [MAL-2025-26920](https://insights.sbomify.com/MAL-2025-26920/): Malicious code in muzagram (npm) (malicious package)
- [MAL-2025-2692](https://insights.sbomify.com/MAL-2025-2692/): Malicious code in newtheme (npm) (malicious package)
- [MAL-2025-26919](https://insights.sbomify.com/MAL-2025-26919/): Malicious code in muusio (npm) (malicious package)
- [MAL-2025-26918](https://insights.sbomify.com/MAL-2025-26918/): Malicious code in muu5 (npm) (malicious package)
- [MAL-2025-26917](https://insights.sbomify.com/MAL-2025-26917/): Malicious code in mutiapp-hybrid-bridge (npm) (malicious package)
- [MAL-2025-26916](https://insights.sbomify.com/MAL-2025-26916/): Malicious code in mutation-xml-hologram-andromeda (npm) (malicious package)
- [MAL-2025-26915](https://insights.sbomify.com/MAL-2025-26915/): Malicious code in mutation-uninstall-node-config-version (npm) (malicious package)
- [MAL-2025-26914](https://insights.sbomify.com/MAL-2025-26914/): Malicious code in mutation-terser-webpack-plugin-metabolomics-mensa (npm) (malicious package)
- [MAL-2025-26913](https://insights.sbomify.com/MAL-2025-26913/): Malicious code in mutation-child-process-repository-xerxes (npm) (malicious package)
- [MAL-2025-26912](https://insights.sbomify.com/MAL-2025-26912/): Malicious code in musiqtalk (npm) (malicious package)
- [MAL-2025-26911](https://insights.sbomify.com/MAL-2025-26911/): Malicious code in musicyao (npm) (malicious package)
- [MAL-2025-26910](https://insights.sbomify.com/MAL-2025-26910/): Malicious code in musictop (npm) (malicious package)
- [MAL-2025-2691](https://insights.sbomify.com/MAL-2025-2691/): Malicious code in mm-react-gpt (npm) (malicious package)
- [MAL-2025-26909](https://insights.sbomify.com/MAL-2025-26909/): Malicious code in musicmvc (npm) (malicious package)
- [MAL-2025-26908](https://insights.sbomify.com/MAL-2025-26908/): Malicious code in musicdown (npm) (malicious package)
- [MAL-2025-26907](https://insights.sbomify.com/MAL-2025-26907/): Malicious code in musiarc (npm) (malicious package)
- [MAL-2025-26906](https://insights.sbomify.com/MAL-2025-26906/): Malicious code in mushroom-umbrella-q3ni (npm) (malicious package)
- [MAL-2025-26905](https://insights.sbomify.com/MAL-2025-26905/): Malicious code in mushroom-redshift-6ro0 (npm) (malicious package)
- [MAL-2025-26904](https://insights.sbomify.com/MAL-2025-26904/): Malicious code in mushroom-radish-fv02 (npm) (malicious package)
- [MAL-2025-26903](https://insights.sbomify.com/MAL-2025-26903/): Malicious code in mushroom-nebula-yu47 (npm) (malicious package)
- [MAL-2025-26902](https://insights.sbomify.com/MAL-2025-26902/): Malicious code in mushroom-bridge-v60l (npm) (malicious package)
- [MAL-2025-26901](https://insights.sbomify.com/MAL-2025-26901/): Malicious code in mushroom-apple-fxws (npm) (malicious package)
- [MAL-2025-26900](https://insights.sbomify.com/MAL-2025-26900/): Malicious code in muse-flourish-lud418-project (npm) (malicious package)
- [MAL-2025-2690](https://insights.sbomify.com/MAL-2025-2690/): Malicious code in miro-terms-banner-s3-uploader (npm) (malicious package)
- [MAL-2025-269](https://insights.sbomify.com/MAL-2025-269/): Malicious code in aem-react-editable-components (npm) (malicious package)
- [MAL-2025-26899](https://insights.sbomify.com/MAL-2025-26899/): Malicious code in musdev (npm) (malicious package)
- [MAL-2025-26898](https://insights.sbomify.com/MAL-2025-26898/): Malicious code in murderbox (npm) (malicious package)
- [MAL-2025-26897](https://insights.sbomify.com/MAL-2025-26897/): Malicious code in munchini (npm) (malicious package)
- [MAL-2025-26896](https://insights.sbomify.com/MAL-2025-26896/): Malicious code in mulyono-tongseng91-sukiwir (npm) (malicious package)
- [MAL-2025-26895](https://insights.sbomify.com/MAL-2025-26895/): Malicious code in mulyono-telurtahu23-kuki (npm) (malicious package)
- [MAL-2025-26894](https://insights.sbomify.com/MAL-2025-26894/): Malicious code in mulyono-sambel46-breki (npm) (malicious package)
- [MAL-2025-26893](https://insights.sbomify.com/MAL-2025-26893/): Malicious code in mulyono-rangginang7-breki (npm) (malicious package)
- [MAL-2025-26892](https://insights.sbomify.com/MAL-2025-26892/): Malicious code in mulyono-pecel33-kuki (npm) (malicious package)
- [MAL-2025-26891](https://insights.sbomify.com/MAL-2025-26891/): Malicious code in mulyono-oncom71-breki (npm) (malicious package)
- [MAL-2025-26890](https://insights.sbomify.com/MAL-2025-26890/): Malicious code in mulyono-buburayam15-breki (npm) (malicious package)
- [MAL-2025-2689](https://insights.sbomify.com/MAL-2025-2689/): Malicious code in mindbody-payments (npm) (malicious package)
- [MAL-2025-26889](https://insights.sbomify.com/MAL-2025-26889/): Malicious code in multiverse-xo-hadron-neptune (npm) (malicious package)
- [MAL-2025-26888](https://insights.sbomify.com/MAL-2025-26888/): Malicious code in multiverse-backend-paleobotany-cygnus (npm) (malicious package)
- [MAL-2025-26887](https://insights.sbomify.com/MAL-2025-26887/): Malicious code in multisite (npm) (malicious package)
- [MAL-2025-26886](https://insights.sbomify.com/MAL-2025-26886/): Malicious code in multisender-smart-contract (npm) (malicious package)
- [MAL-2025-26885](https://insights.sbomify.com/MAL-2025-26885/): Malicious code in multirow_counter (npm) (malicious package)
- [MAL-2025-26884](https://insights.sbomify.com/MAL-2025-26884/): Malicious code in multidm (npm) (malicious package)
- [MAL-2025-26883](https://insights.sbomify.com/MAL-2025-26883/): Malicious code in multicontent-style-lib (npm) (malicious package)
- [MAL-2025-26882](https://insights.sbomify.com/MAL-2025-26882/): Malicious code in multicolumn-menu (npm) (malicious package)
- [MAL-2025-26881](https://insights.sbomify.com/MAL-2025-26881/): Malicious code in multibit (npm) (malicious package)
- [MAL-2025-26880](https://insights.sbomify.com/MAL-2025-26880/): Malicious code in multiary (npm) (malicious package)
- [MAL-2025-2688](https://insights.sbomify.com/MAL-2025-2688/): Malicious code in mathjax-v3 (npm) (malicious package)
- [MAL-2025-26879](https://insights.sbomify.com/MAL-2025-26879/): Malicious code in multi-monitor-updater (npm) (malicious package)
- [MAL-2025-26878](https://insights.sbomify.com/MAL-2025-26878/): Malicious code in multi-fnft (npm) (malicious package)
- [MAL-2025-26877](https://insights.sbomify.com/MAL-2025-26877/): Malicious code in multer-sharp-minio-storage (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/814/