# Vulnerabilities published in 2025


- [MAL-2025-26876](https://insights.sbomify.com/MAL-2025-26876/): Malicious code in mulletdb (npm) (malicious package)
- [MAL-2025-26875](https://insights.sbomify.com/MAL-2025-26875/): Malicious code in mulemmc (npm) (malicious package)
- [MAL-2025-26874](https://insights.sbomify.com/MAL-2025-26874/): Malicious code in mulavee (npm) (malicious package)
- [MAL-2025-26873](https://insights.sbomify.com/MAL-2025-26873/): Malicious code in mui-yildun-javascript-mongodb (npm) (malicious package)
- [MAL-2025-26872](https://insights.sbomify.com/MAL-2025-26872/): Malicious code in mui-transform-nightmare-xo (npm) (malicious package)
- [MAL-2025-26871](https://insights.sbomify.com/MAL-2025-26871/): Malicious code in mui-sagitta-comet-oauth (npm) (malicious package)
- [MAL-2025-26870](https://insights.sbomify.com/MAL-2025-26870/): Malicious code in mui-nextjs-isostasy-loglevel (npm) (malicious package)
- [MAL-2025-2687](https://insights.sbomify.com/MAL-2025-2687/): Malicious code in mathjax-v2 (npm) (malicious package)
- [MAL-2025-26869](https://insights.sbomify.com/MAL-2025-26869/): Malicious code in mui-magellan-magellan-sirius (npm) (malicious package)
- [MAL-2025-26868](https://insights.sbomify.com/MAL-2025-26868/): Malicious code in mui-jupiter-mdx-supercluster (npm) (malicious package)
- [MAL-2025-26867](https://insights.sbomify.com/MAL-2025-26867/): Malicious code in mufyjxqdkpegstbc (npm) (malicious package)
- [MAL-2025-26866](https://insights.sbomify.com/MAL-2025-26866/): Malicious code in muffincms (npm) (malicious package)
- [MAL-2025-26865](https://insights.sbomify.com/MAL-2025-26865/): Malicious code in muebleria (npm) (malicious package)
- [MAL-2025-26864](https://insights.sbomify.com/MAL-2025-26864/): Malicious code in mudsmith (npm) (malicious package)
- [MAL-2025-26863](https://insights.sbomify.com/MAL-2025-26863/): Malicious code in muckrake (npm) (malicious package)
- [MAL-2025-26862](https://insights.sbomify.com/MAL-2025-26862/): Malicious code in muchwords (npm) (malicious package)
- [MAL-2025-26861](https://insights.sbomify.com/MAL-2025-26861/): Malicious code in muchos (npm) (malicious package)
- [MAL-2025-26860](https://insights.sbomify.com/MAL-2025-26860/): Malicious code in mubiz-ws-client (npm) (malicious package)
- [MAL-2025-2686](https://insights.sbomify.com/MAL-2025-2686/): Malicious code in malicious_model (npm) (malicious package)
- [MAL-2025-26859](https://insights.sbomify.com/MAL-2025-26859/): Malicious code in mubiz-ws-cli (npm) (malicious package)
- [MAL-2025-26858](https://insights.sbomify.com/MAL-2025-26858/): Malicious code in mtvr3 (npm) (malicious package)
- [MAL-2025-26857](https://insights.sbomify.com/MAL-2025-26857/): Malicious code in mtlogger (npm) (malicious package)
- [MAL-2025-26856](https://insights.sbomify.com/MAL-2025-26856/): Malicious code in mtkhnyjadolbewsr (npm) (malicious package)
- [MAL-2025-26855](https://insights.sbomify.com/MAL-2025-26855/): Malicious code in mtgforge (npm) (malicious package)
- [MAL-2025-26854](https://insights.sbomify.com/MAL-2025-26854/): Malicious code in mtfe_fe.core (npm) (malicious package)
- [MAL-2025-26853](https://insights.sbomify.com/MAL-2025-26853/): Malicious code in mtfe_cos_deploy (npm) (malicious package)
- [MAL-2025-26852](https://insights.sbomify.com/MAL-2025-26852/): Malicious code in mtfe_cos_config (npm) (malicious package)
- [MAL-2025-26851](https://insights.sbomify.com/MAL-2025-26851/): Malicious code in mtfe_cos-ui (npm) (malicious package)
- [MAL-2025-26850](https://insights.sbomify.com/MAL-2025-26850/): Malicious code in mtfe_cos-core (npm) (malicious package)
- [MAL-2025-2685](https://insights.sbomify.com/MAL-2025-2685/): Malicious code in magpie-monitor (npm) (malicious package)
- [MAL-2025-26849](https://insights.sbomify.com/MAL-2025-26849/): Malicious code in mteeor (npm) (malicious package)
- [MAL-2025-26848](https://insights.sbomify.com/MAL-2025-26848/): Malicious code in mtdtool (npm) (malicious package)
- [MAL-2025-26847](https://insights.sbomify.com/MAL-2025-26847/): Malicious code in mtapoja (npm) (malicious package)
- [MAL-2025-26846](https://insights.sbomify.com/MAL-2025-26846/): Malicious code in mtagger (npm) (malicious package)
- [MAL-2025-26845](https://insights.sbomify.com/MAL-2025-26845/): Malicious code in mstr-react-library (npm) (malicious package)
- [MAL-2025-26844](https://insights.sbomify.com/MAL-2025-26844/): Malicious code in msphysics (npm) (malicious package)
- [MAL-2025-26843](https://insights.sbomify.com/MAL-2025-26843/): Malicious code in msopen (npm) (malicious package)
- [MAL-2025-26842](https://insights.sbomify.com/MAL-2025-26842/): Malicious code in mshowx (npm) (malicious package)
- [MAL-2025-26841](https://insights.sbomify.com/MAL-2025-26841/): Malicious code in mshood (npm) (malicious package)
- [MAL-2025-26840](https://insights.sbomify.com/MAL-2025-26840/): Malicious code in mshogi (npm) (malicious package)
- [MAL-2025-2684](https://insights.sbomify.com/MAL-2025-2684/): Malicious code in maga-ai (npm) (malicious package)
- [MAL-2025-26839](https://insights.sbomify.com/MAL-2025-26839/): Malicious code in msg-calendar (npm) (malicious package)
- [MAL-2025-26838](https://insights.sbomify.com/MAL-2025-26838/): Malicious code in msc-target (npm) (malicious package)
- [MAL-2025-26837](https://insights.sbomify.com/MAL-2025-26837/): Malicious code in msc-site (npm) (malicious package)
- [MAL-2025-26836](https://insights.sbomify.com/MAL-2025-26836/): Malicious code in msc-cloud (npm) (malicious package)
- [MAL-2025-26835](https://insights.sbomify.com/MAL-2025-26835/): Malicious code in ms-validationservice (npm) (malicious package)
- [MAL-2025-26834](https://insights.sbomify.com/MAL-2025-26834/): Malicious code in ms-quoteservice (npm) (malicious package)
- [MAL-2025-26833](https://insights.sbomify.com/MAL-2025-26833/): Malicious code in ms-projectionservice (npm) (malicious package)
- [MAL-2025-26832](https://insights.sbomify.com/MAL-2025-26832/): Malicious code in ms-policyservice (npm) (malicious package)
- [MAL-2025-26831](https://insights.sbomify.com/MAL-2025-26831/): Malicious code in ms-faber-logicservice (npm) (malicious package)
- [MAL-2025-26830](https://insights.sbomify.com/MAL-2025-26830/): Malicious code in ms-azuretools.vscode-azureresourcegroups (npm) (malicious package)
- [MAL-2025-2683](https://insights.sbomify.com/MAL-2025-2683/): Malicious code in loglo (npm) (malicious package)
- [MAL-2025-26829](https://insights.sbomify.com/MAL-2025-26829/): Malicious code in mruby_engine (npm) (malicious package)
- [MAL-2025-26828](https://insights.sbomify.com/MAL-2025-26828/): Malicious code in mrmath (npm) (malicious package)
- [MAL-2025-26827](https://insights.sbomify.com/MAL-2025-26827/): Malicious code in mrlockers (npm) (malicious package)
- [MAL-2025-26826](https://insights.sbomify.com/MAL-2025-26826/): Malicious code in mrlistr (npm) (malicious package)
- [MAL-2025-26825](https://insights.sbomify.com/MAL-2025-26825/): Malicious code in mrhpjvkgzoywalcx (npm) (malicious package)
- [MAL-2025-26824](https://insights.sbomify.com/MAL-2025-26824/): Malicious code in mrfisher (npm) (malicious package)
- [MAL-2025-26823](https://insights.sbomify.com/MAL-2025-26823/): Malicious code in mqtt_plugin (npm) (malicious package)
- [MAL-2025-26822](https://insights.sbomify.com/MAL-2025-26822/): Malicious code in mpublic (npm) (malicious package)
- [MAL-2025-26821](https://insights.sbomify.com/MAL-2025-26821/): Malicious code in mpochowskiserv (npm) (malicious package)
- [MAL-2025-26820](https://insights.sbomify.com/MAL-2025-26820/): Malicious code in mplayer-binary-win32 (npm) (malicious package)
- [MAL-2025-2682](https://insights.sbomify.com/MAL-2025-2682/): Malicious code in kagi_browser_ext (npm) (malicious package)
- [MAL-2025-26819](https://insights.sbomify.com/MAL-2025-26819/): Malicious code in mphoto (npm) (malicious package)
- [MAL-2025-26818](https://insights.sbomify.com/MAL-2025-26818/): Malicious code in mpfysnhgltrvdaei (npm) (malicious package)
- [MAL-2025-26817](https://insights.sbomify.com/MAL-2025-26817/): Malicious code in mperham (npm) (malicious package)
- [MAL-2025-26816](https://insights.sbomify.com/MAL-2025-26816/): Malicious code in mpdncbtwfkvoajuy (npm) (malicious package)
- [MAL-2025-26815](https://insights.sbomify.com/MAL-2025-26815/): Malicious code in mpctouch (npm) (malicious package)
- [MAL-2025-26814](https://insights.sbomify.com/MAL-2025-26814/): Malicious code in mpat-frontend (npm) (malicious package)
- [MAL-2025-26813](https://insights.sbomify.com/MAL-2025-26813/): Malicious code in mp3s (npm) (malicious package)
- [MAL-2025-26812](https://insights.sbomify.com/MAL-2025-26812/): Malicious code in mp3-file-zip-d-ownload-the-liberty-of-norton-folgate-5wxzq-azpyay (npm) (malicious package)
- [MAL-2025-26811](https://insights.sbomify.com/MAL-2025-26811/): Malicious code in mp3-file-zip-d-ownload-black-one-ku2xp-tefjgp (npm) (malicious package)
- [MAL-2025-26810](https://insights.sbomify.com/MAL-2025-26810/): Malicious code in mp3-file-zip-d-ownload-82223-cage-tropical-48dqs-lilnlq (npm) (malicious package)
- [MAL-2025-2681](https://insights.sbomify.com/MAL-2025-2681/): Malicious code in justinmimbs-elm-date-extra (npm) (malicious package)
- [MAL-2025-26809](https://insights.sbomify.com/MAL-2025-26809/): Malicious code in mp3-file-zip-d-ownload-6863-lp5-h6rvm-mfjeql (npm) (malicious package)
- [MAL-2025-26808](https://insights.sbomify.com/MAL-2025-26808/): Malicious code in mp3-file-zip-d-ownload-459867-forgiveness-3nns7-tralfe (npm) (malicious package)
- [MAL-2025-26807](https://insights.sbomify.com/MAL-2025-26807/): Malicious code in mp3-file-zip-d-ownload-37823-billys-live-bait-gqddl-gymxld (npm) (malicious package)
- [MAL-2025-26806](https://insights.sbomify.com/MAL-2025-26806/): Malicious code in mp3-file-zip-d-ownload-34920-albatross-8rmsa-ghzpzl (npm) (malicious package)
- [MAL-2025-26805](https://insights.sbomify.com/MAL-2025-26805/): Malicious code in mp3-file-zip-d-ownload-314931-strawberry-mansion-blqz5-upygue (npm) (malicious package)
- [MAL-2025-26804](https://insights.sbomify.com/MAL-2025-26804/): Malicious code in mp3-file-zip-d-ownload-25737-the-dividing-island-m1xnl-ssmrpa (npm) (malicious package)
- [MAL-2025-26803](https://insights.sbomify.com/MAL-2025-26803/): Malicious code in mp3-file-zip-d-ownload-2021-390205-the-million-things-that-never-happened-o4c7i-uqspup (npm) (malicious package)
- [MAL-2025-26802](https://insights.sbomify.com/MAL-2025-26802/): Malicious code in mp3-file-zip-d-ownload-109598-were-not-talking-thl8a-vosqbj (npm) (malicious package)
- [MAL-2025-26801](https://insights.sbomify.com/MAL-2025-26801/): Malicious code in mp3-file-zip-d-ownload-10788-too-rye-ay-2wcus-xztuui (npm) (malicious package)
- [MAL-2025-26800](https://insights.sbomify.com/MAL-2025-26800/): Malicious code in mp3-do-wnload-file-to-day-take-them-on-on-your-own-hrfix-cczgww (npm) (malicious package)
- [MAL-2025-2680](https://insights.sbomify.com/MAL-2025-2680/): Malicious code in internallib_v72 (npm) (malicious package)
- [MAL-2025-268](https://insights.sbomify.com/MAL-2025-268/): Malicious code in aem-angular-editable-components (npm) (malicious package)
- [MAL-2025-26799](https://insights.sbomify.com/MAL-2025-26799/): Malicious code in mp3-do-wnload-file-to-day-movement-aw881-vcidcm (npm) (malicious package)
- [MAL-2025-26798](https://insights.sbomify.com/MAL-2025-26798/): Malicious code in mp3-do-wnload-file-to-day-i-can-hear-the-heart-beating-as-one-sdcg3-rzkefk (npm) (malicious package)
- [MAL-2025-26797](https://insights.sbomify.com/MAL-2025-26797/): Malicious code in mp3-do-wnload-file-to-day-64137-farewell-angelina-yqzpn-ejtwsd (npm) (malicious package)
- [MAL-2025-26796](https://insights.sbomify.com/MAL-2025-26796/): Malicious code in mp3-do-wnload-file-to-day-60280-lay-down-and-love-it-live-yfkc2-lppmhd (npm) (malicious package)
- [MAL-2025-26795](https://insights.sbomify.com/MAL-2025-26795/): Malicious code in mp3-do-wnload-file-to-day-56558-hooray-for-tuesday-1cdzh-nforeu (npm) (malicious package)
- [MAL-2025-26794](https://insights.sbomify.com/MAL-2025-26794/): Malicious code in mp3-do-wnload-file-to-day-30879-fight-less-win-more-xgv8l-jeyujj (npm) (malicious package)
- [MAL-2025-26793](https://insights.sbomify.com/MAL-2025-26793/): Malicious code in mp3-do-wnload-file-to-day-204935-superstar-b7g5b-dxywxb (npm) (malicious package)
- [MAL-2025-26792](https://insights.sbomify.com/MAL-2025-26792/): Malicious code in mp3-do-wnload-file-to-day-2013-9608-coming-apart-gseiz-listpz (npm) (malicious package)
- [MAL-2025-26791](https://insights.sbomify.com/MAL-2025-26791/): The package mp3-do-wnload-file-to-day-179158-if-youre-going-to-the-city-a-tribute-to-mose-allison-5ahsk-gfbljg was found to contain malicious code. (malicious package)
- [MAL-2025-26790](https://insights.sbomify.com/MAL-2025-26790/): Malicious code in mp3-do-wnload-file-to-day-143363-green-and-gray-qh3gk-eijkct (npm) (malicious package)
- [MAL-2025-2679](https://insights.sbomify.com/MAL-2025-2679/): Malicious code in internallib_v341 (npm) (malicious package)
- [MAL-2025-26789](https://insights.sbomify.com/MAL-2025-26789/): Malicious code in mp3-do-wnload-file-to-day-13796-flick-the-vs-isfeh-rasowi (npm) (malicious package)
- [MAL-2025-26788](https://insights.sbomify.com/MAL-2025-26788/): Malicious code in mp3-do-wnload-file-to-day-116611-strong-arm-of-the-law-vu3r7-gbcocp (npm) (malicious package)
- [MAL-2025-26787](https://insights.sbomify.com/MAL-2025-26787/): Malicious code in mozik-ext-bitbucket (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/815/