# Vulnerabilities published in 2025 - [MAL-2025-26786](https://insights.sbomify.com/MAL-2025-26786/): Malicious code in mozijk (npm) (malicious package) - [MAL-2025-26785](https://insights.sbomify.com/MAL-2025-26785/): Malicious code in mozevents (npm) (malicious package) - [MAL-2025-26784](https://insights.sbomify.com/MAL-2025-26784/): Malicious code in mozer-avator (npm) (malicious package) - [MAL-2025-26783](https://insights.sbomify.com/MAL-2025-26783/): Malicious code in mozer-avatar (npm) (malicious package) - [MAL-2025-26782](https://insights.sbomify.com/MAL-2025-26782/): Malicious code in mozdef (npm) (malicious package) - [MAL-2025-26781](https://insights.sbomify.com/MAL-2025-26781/): Malicious code in mozaik-ext-jiraagile (npm) (malicious package) - [MAL-2025-26780](https://insights.sbomify.com/MAL-2025-26780/): Malicious code in mozaik-ext-jira-agile (npm) (malicious package) - [MAL-2025-2678](https://insights.sbomify.com/MAL-2025-2678/): Malicious code in intercomexpo (npm) (malicious package) - [MAL-2025-26779](https://insights.sbomify.com/MAL-2025-26779/): Malicious code in mozaik-ext-git (npm) (malicious package) - [MAL-2025-26778](https://insights.sbomify.com/MAL-2025-26778/): Malicious code in moxilua (npm) (malicious package) - [MAL-2025-26777](https://insights.sbomify.com/MAL-2025-26777/): Malicious code in mowopo (npm) (malicious package) - [MAL-2025-26776](https://insights.sbomify.com/MAL-2025-26776/): Malicious code in MovieJS (npm) (malicious package) - [MAL-2025-26775](https://insights.sbomify.com/MAL-2025-26775/): Malicious code in movesio (npm) (malicious package) - [MAL-2025-26774](https://insights.sbomify.com/MAL-2025-26774/): Malicious code in movercado (npm) (malicious package) - [MAL-2025-26773](https://insights.sbomify.com/MAL-2025-26773/): Malicious code in movemenow (npm) (malicious package) - [MAL-2025-26772](https://insights.sbomify.com/MAL-2025-26772/): Malicious code in movecrowd (npm) (malicious package) - [MAL-2025-26771](https://insights.sbomify.com/MAL-2025-26771/): Malicious code in movecoin (npm) (malicious package) - [MAL-2025-26770](https://insights.sbomify.com/MAL-2025-26770/): Malicious code in moveblock (npm) (malicious package) - [MAL-2025-2677](https://insights.sbomify.com/MAL-2025-2677/): Malicious code in hahahahahahahahahahah (npm) (malicious package) - [MAL-2025-26769](https://insights.sbomify.com/MAL-2025-26769/): Malicious code in move-snmpjs (npm) (malicious package) - [MAL-2025-26768](https://insights.sbomify.com/MAL-2025-26768/): Malicious code in mouvies (npm) (malicious package) - [MAL-2025-26767](https://insights.sbomify.com/MAL-2025-26767/): Malicious code in mouselook (npm) (malicious package) - [MAL-2025-26766](https://insights.sbomify.com/MAL-2025-26766/): Malicious code in mouseline (npm) (malicious package) - [MAL-2025-26765](https://insights.sbomify.com/MAL-2025-26765/): Malicious code in mousegrab (npm) (malicious package) - [MAL-2025-26764](https://insights.sbomify.com/MAL-2025-26764/): Malicious code in mountedtp (npm) (malicious package) - [MAL-2025-26763](https://insights.sbomify.com/MAL-2025-26763/): Malicious code in mountain-xylophone-qbf692-project (npm) (malicious package) - [MAL-2025-26762](https://insights.sbomify.com/MAL-2025-26762/): Malicious code in mountain-violet-4u73 (npm) (malicious package) - [MAL-2025-26761](https://insights.sbomify.com/MAL-2025-26761/): Malicious code in mountain-saturn-gye866-project (npm) (malicious package) - [MAL-2025-26760](https://insights.sbomify.com/MAL-2025-26760/): Malicious code in mountain-redwood-xo7z (npm) (malicious package) - [MAL-2025-2676](https://insights.sbomify.com/MAL-2025-2676/): Malicious code in gui_v2 (npm) (malicious package) - [MAL-2025-26759](https://insights.sbomify.com/MAL-2025-26759/): Malicious code in mountain-leopard-bay322-project (npm) (malicious package) - [MAL-2025-26758](https://insights.sbomify.com/MAL-2025-26758/): Malicious code in mountain-jasmine-nyc158-project (npm) (malicious package) - [MAL-2025-26757](https://insights.sbomify.com/MAL-2025-26757/): Malicious code in mountain-hill-spi227-project (npm) (malicious package) - [MAL-2025-26756](https://insights.sbomify.com/MAL-2025-26756/): Malicious code in mountain-giraffe-jkw611-project (npm) (malicious package) - [MAL-2025-26755](https://insights.sbomify.com/MAL-2025-26755/): Malicious code in mountain-everest-omc858-project (npm) (malicious package) - [MAL-2025-26754](https://insights.sbomify.com/MAL-2025-26754/): Malicious code in mountain-elderberry-gf52 (npm) (malicious package) - [MAL-2025-26753](https://insights.sbomify.com/MAL-2025-26753/): Malicious code in mountain-dwarf-y22j (npm) (malicious package) - [MAL-2025-26752](https://insights.sbomify.com/MAL-2025-26752/): Malicious code in mountain-dragon-jaj096-project (npm) (malicious package) - [MAL-2025-26751](https://insights.sbomify.com/MAL-2025-26751/): Malicious code in mountain-dewdrop-dug756-project (npm) (malicious package) - [MAL-2025-26750](https://insights.sbomify.com/MAL-2025-26750/): Malicious code in mountain-dandelion-ngi871-project (npm) (malicious package) - [MAL-2025-2675](https://insights.sbomify.com/MAL-2025-2675/): Malicious code in gson-server (npm) (malicious package) - [MAL-2025-26749](https://insights.sbomify.com/MAL-2025-26749/): Malicious code in mountain-castle-5zt8 (npm) (malicious package) - [MAL-2025-26748](https://insights.sbomify.com/MAL-2025-26748/): Malicious code in mountain-brook-xdx048-project (npm) (malicious package) - [MAL-2025-26747](https://insights.sbomify.com/MAL-2025-26747/): Malicious code in motostore (npm) (malicious package) - [MAL-2025-26746](https://insights.sbomify.com/MAL-2025-26746/): Malicious code in motoron (npm) (malicious package) - [MAL-2025-26745](https://insights.sbomify.com/MAL-2025-26745/): Malicious code in motorola (npm) (malicious package) - [MAL-2025-26744](https://insights.sbomify.com/MAL-2025-26744/): Malicious code in motorki (npm) (malicious package) - [MAL-2025-26743](https://insights.sbomify.com/MAL-2025-26743/): Malicious code in motobuddy (npm) (malicious package) - [MAL-2025-26742](https://insights.sbomify.com/MAL-2025-26742/): Malicious code in motivatr (npm) (malicious package) - [MAL-2025-26741](https://insights.sbomify.com/MAL-2025-26741/): Malicious code in motipoc (npm) (malicious package) - [MAL-2025-26740](https://insights.sbomify.com/MAL-2025-26740/): Malicious code in motifp (npm) (malicious package) - [MAL-2025-2674](https://insights.sbomify.com/MAL-2025-2674/): Malicious code in generate_genesis_values (npm) (malicious package) - [MAL-2025-26739](https://insights.sbomify.com/MAL-2025-26739/): Malicious code in moti-poc-package (npm) (malicious package) - [MAL-2025-26738](https://insights.sbomify.com/MAL-2025-26738/): Malicious code in mothur (npm) (malicious package) - [MAL-2025-26737](https://insights.sbomify.com/MAL-2025-26737/): Malicious code in most-common-words (npm) (malicious package) - [MAL-2025-26736](https://insights.sbomify.com/MAL-2025-26736/): Malicious code in most-common-turkish-words (npm) (malicious package) - [MAL-2025-26735](https://insights.sbomify.com/MAL-2025-26735/): Malicious code in moscal (npm) (malicious package) - [MAL-2025-26734](https://insights.sbomify.com/MAL-2025-26734/): Malicious code in mosaic-yack6-zndf7-emerald-project (npm) (malicious package) - [MAL-2025-26733](https://insights.sbomify.com/MAL-2025-26733/): Malicious code in mosaic-p9q98-cyzx3-yellow-project (npm) (malicious package) - [MAL-2025-26732](https://insights.sbomify.com/MAL-2025-26732/): Malicious code in mosaic-n52ls-wsd82-wind-project (npm) (malicious package) - [MAL-2025-26731](https://insights.sbomify.com/MAL-2025-26731/): Malicious code in mosaic-cqpjd-i3l2j-glacier-project (npm) (malicious package) - [MAL-2025-26730](https://insights.sbomify.com/MAL-2025-26730/): Malicious code in mosaic-clp1r-qie42-quartz-project (npm) (malicious package) - [MAL-2025-2673](https://insights.sbomify.com/MAL-2025-2673/): Malicious code in gaimes-fun (npm) (malicious package) - [MAL-2025-26729](https://insights.sbomify.com/MAL-2025-26729/): Malicious code in mosaic-bmnfg-bdig4-mystic-project (npm) (malicious package) - [MAL-2025-26728](https://insights.sbomify.com/MAL-2025-26728/): Malicious code in mosaic-8h4pm-gevtf-dynamo-project (npm) (malicious package) - [MAL-2025-26727](https://insights.sbomify.com/MAL-2025-26727/): Malicious code in mosaic-50vvu-ydc8g-ultra-project (npm) (malicious package) - [MAL-2025-26726](https://insights.sbomify.com/MAL-2025-26726/): Malicious code in mosaic-26iep-gf13i-willow-project (npm) (malicious package) - [MAL-2025-26725](https://insights.sbomify.com/MAL-2025-26725/): Malicious code in mortgage.npm (npm) (malicious package) - [MAL-2025-26724](https://insights.sbomify.com/MAL-2025-26724/): Malicious code in morski (npm) (malicious package) - [MAL-2025-26723](https://insights.sbomify.com/MAL-2025-26723/): Malicious code in morphify (npm) (malicious package) - [MAL-2025-26722](https://insights.sbomify.com/MAL-2025-26722/): Malicious code in moronbot (npm) (malicious package) - [MAL-2025-26721](https://insights.sbomify.com/MAL-2025-26721/): Malicious code in morgan-yaml-enif-antares (npm) (malicious package) - [MAL-2025-26720](https://insights.sbomify.com/MAL-2025-26720/): Malicious code in morgan-leda-dorado-test (npm) (malicious package) - [MAL-2025-2672](https://insights.sbomify.com/MAL-2025-2672/): Malicious code in formio-plugin-offline (npm) (malicious package) - [MAL-2025-26719](https://insights.sbomify.com/MAL-2025-26719/): Malicious code in morgan-kronos-cybernetics-avior (npm) (malicious package) - [MAL-2025-26718](https://insights.sbomify.com/MAL-2025-26718/): Malicious code in morgan-dotenv-parse-variables-mysql-geodynamo (npm) (malicious package) - [MAL-2025-26717](https://insights.sbomify.com/MAL-2025-26717/): Malicious code in morgan-bionics-buffer-neutronstar (npm) (malicious package) - [MAL-2025-26716](https://insights.sbomify.com/MAL-2025-26716/): Malicious code in morfeus (npm) (malicious package) - [MAL-2025-26715](https://insights.sbomify.com/MAL-2025-26715/): Malicious code in morda-backend (npm) (malicious package) - [MAL-2025-26714](https://insights.sbomify.com/MAL-2025-26714/): Malicious code in morcms (npm) (malicious package) - [MAL-2025-26713](https://insights.sbomify.com/MAL-2025-26713/): Malicious code in moovvee (npm) (malicious package) - [MAL-2025-26712](https://insights.sbomify.com/MAL-2025-26712/): Malicious code in mooshak (npm) (malicious package) - [MAL-2025-26711](https://insights.sbomify.com/MAL-2025-26711/): Malicious code in moose-zephyr-znp279-project (npm) (malicious package) - [MAL-2025-26710](https://insights.sbomify.com/MAL-2025-26710/): Malicious code in moose-zebra-qlx008-project (npm) (malicious package) - [MAL-2025-2671](https://insights.sbomify.com/MAL-2025-2671/): Malicious code in font-basic (npm) (malicious package) - [MAL-2025-26709](https://insights.sbomify.com/MAL-2025-26709/): Malicious code in moose-zebra-apb543-project (npm) (malicious package) - [MAL-2025-26708](https://insights.sbomify.com/MAL-2025-26708/): Malicious code in moose-whale-bez537-project (npm) (malicious package) - [MAL-2025-26707](https://insights.sbomify.com/MAL-2025-26707/): Malicious code in moose-umbrella-bax056-project (npm) (malicious package) - [MAL-2025-26706](https://insights.sbomify.com/MAL-2025-26706/): Malicious code in moose-tundra-jag234-project (npm) (malicious package) - [MAL-2025-26705](https://insights.sbomify.com/MAL-2025-26705/): Malicious code in moose-savanna-cpd807-project (npm) (malicious package) - [MAL-2025-26704](https://insights.sbomify.com/MAL-2025-26704/): Malicious code in moose-reef-kwk615-project (npm) (malicious package) - [MAL-2025-26703](https://insights.sbomify.com/MAL-2025-26703/): Malicious code in moose-lagoon-qmc124-project (npm) (malicious package) - [MAL-2025-26702](https://insights.sbomify.com/MAL-2025-26702/): Malicious code in moose-kite-psi637-project (npm) (malicious package) - [MAL-2025-26701](https://insights.sbomify.com/MAL-2025-26701/): Malicious code in moose-hammock-thd626-project (npm) (malicious package) - [MAL-2025-26700](https://insights.sbomify.com/MAL-2025-26700/): Malicious code in moose-glade-bwx610-project (npm) (malicious package) - [MAL-2025-2670](https://insights.sbomify.com/MAL-2025-2670/): Malicious code in eslint-plugin-lexical (npm) (malicious package) - [MAL-2025-267](https://insights.sbomify.com/MAL-2025-267/): Malicious code in tr46mine (npm) (malicious package) - [MAL-2025-26699](https://insights.sbomify.com/MAL-2025-26699/): Malicious code in moose-falcon-ftn629-project (npm) (malicious package) - [MAL-2025-26698](https://insights.sbomify.com/MAL-2025-26698/): Malicious code in moonworld (npm) (malicious package) - [MAL-2025-26697](https://insights.sbomify.com/MAL-2025-26697/): Malicious code in moontee (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/816/