# Vulnerabilities published in 2025 - [MAL-2025-26696](https://insights.sbomify.com/MAL-2025-26696/): Malicious code in moonstone-tfdt7-bwqyw-iris-project (npm) (malicious package) - [MAL-2025-26695](https://insights.sbomify.com/MAL-2025-26695/): Malicious code in moonstone-shtxx-lravh-glow-project (npm) (malicious package) - [MAL-2025-26694](https://insights.sbomify.com/MAL-2025-26694/): Malicious code in moonstone-miirg-i8ajx-xanadu-project (npm) (malicious package) - [MAL-2025-26693](https://insights.sbomify.com/MAL-2025-26693/): Malicious code in moonstone-9j6dm-sltyx-silk-project (npm) (malicious package) - [MAL-2025-26692](https://insights.sbomify.com/MAL-2025-26692/): Malicious code in moonpay-login-demo (npm) (malicious package) - [MAL-2025-26691](https://insights.sbomify.com/MAL-2025-26691/): Malicious code in moonlight-lqpft-zkt03-boulder-project (npm) (malicious package) - [MAL-2025-26690](https://insights.sbomify.com/MAL-2025-26690/): Malicious code in moonlight-l6tkx-sgyc8-raven-project (npm) (malicious package) - [MAL-2025-2669](https://insights.sbomify.com/MAL-2025-2669/): Malicious code in erp.srm.common (npm) (malicious package) - [MAL-2025-26689](https://insights.sbomify.com/MAL-2025-26689/): Malicious code in moonlight-gtxoj-dc9bq-pinnacle-project (npm) (malicious package) - [MAL-2025-26688](https://insights.sbomify.com/MAL-2025-26688/): Malicious code in moonlight-fikh8-g2qfw-hearth-project (npm) (malicious package) - [MAL-2025-26687](https://insights.sbomify.com/MAL-2025-26687/): Malicious code in moonlight-btonl-2oce5-yonder-project (npm) (malicious package) - [MAL-2025-26686](https://insights.sbomify.com/MAL-2025-26686/): Malicious code in moonlight-739lw-9dgnr-ocean-project (npm) (malicious package) - [MAL-2025-26685](https://insights.sbomify.com/MAL-2025-26685/): Malicious code in moonlight-6brug-956ob-crescent-project (npm) (malicious package) - [MAL-2025-26684](https://insights.sbomify.com/MAL-2025-26684/): Malicious code in moondust-zinmp-2s2xr-lake-project (npm) (malicious package) - [MAL-2025-26683](https://insights.sbomify.com/MAL-2025-26683/): Malicious code in moondust-pyxu5-vbgaq-ash-project (npm) (malicious package) - [MAL-2025-26682](https://insights.sbomify.com/MAL-2025-26682/): Malicious code in moondust-jfwzi-21pbz-wave-project (npm) (malicious package) - [MAL-2025-26681](https://insights.sbomify.com/MAL-2025-26681/): Malicious code in moondust-jdtke-5irbr-fable-project (npm) (malicious package) - [MAL-2025-26680](https://insights.sbomify.com/MAL-2025-26680/): Malicious code in moondust-gslmd-tlm3l-willow-project (npm) (malicious package) - [MAL-2025-2668](https://insights.sbomify.com/MAL-2025-2668/): Malicious code in elm-lang-http (npm) (malicious package) - [MAL-2025-26679](https://insights.sbomify.com/MAL-2025-26679/): Malicious code in moondust-9kfu3-sp7oi-glacier-project (npm) (malicious package) - [MAL-2025-26678](https://insights.sbomify.com/MAL-2025-26678/): Malicious code in moondust-9fyck-z3qwn-yonder-project (npm) (malicious package) - [MAL-2025-26677](https://insights.sbomify.com/MAL-2025-26677/): Malicious code in moonblink (npm) (malicious package) - [MAL-2025-26676](https://insights.sbomify.com/MAL-2025-26676/): Malicious code in moon_wvldy_oyqyv_glade (npm) (malicious package) - [MAL-2025-26675](https://insights.sbomify.com/MAL-2025-26675/): Malicious code in moon_hmvck_mfqf1_kismet (npm) (malicious package) - [MAL-2025-26674](https://insights.sbomify.com/MAL-2025-26674/): Malicious code in moon_bingu_xirew_lily (npm) (malicious package) - [MAL-2025-26673](https://insights.sbomify.com/MAL-2025-26673/): Malicious code in moon_3nfe3_2bf74_quintessence (npm) (malicious package) - [MAL-2025-26672](https://insights.sbomify.com/MAL-2025-26672/): Malicious code in moon-yawn-vdd244-project (npm) (malicious package) - [MAL-2025-26671](https://insights.sbomify.com/MAL-2025-26671/): Malicious code in moon-xi-sudo-good-bash (npm) (malicious package) - [MAL-2025-26670](https://insights.sbomify.com/MAL-2025-26670/): Malicious code in moon-vista-bvb620-project (npm) (malicious package) - [MAL-2025-2667](https://insights.sbomify.com/MAL-2025-2667/): Malicious code in elm-lang-core (npm) (malicious package) - [MAL-2025-26669](https://insights.sbomify.com/MAL-2025-26669/): Malicious code in moon-umbrella-hsn501-project (npm) (malicious package) - [MAL-2025-26668](https://insights.sbomify.com/MAL-2025-26668/): Malicious code in moon-sapphire-rvd302-project (npm) (malicious package) - [MAL-2025-26667](https://insights.sbomify.com/MAL-2025-26667/): Malicious code in moon-opal-btr698-project (npm) (malicious package) - [MAL-2025-26666](https://insights.sbomify.com/MAL-2025-26666/): Malicious code in moon-labyrinth-hqq240-project (npm) (malicious package) - [MAL-2025-26665](https://insights.sbomify.com/MAL-2025-26665/): Malicious code in moon-jewel-qkt697-project (npm) (malicious package) - [MAL-2025-26664](https://insights.sbomify.com/MAL-2025-26664/): Malicious code in moon-fjord-fwo354-project (npm) (malicious package) - [MAL-2025-26663](https://insights.sbomify.com/MAL-2025-26663/): Malicious code in moon-emerald-gys410-project (npm) (malicious package) - [MAL-2025-26662](https://insights.sbomify.com/MAL-2025-26662/): Malicious code in moon-albatross-cno491-project (npm) (malicious package) - [MAL-2025-26661](https://insights.sbomify.com/MAL-2025-26661/): Malicious code in moogit (npm) (malicious package) - [MAL-2025-26660](https://insights.sbomify.com/MAL-2025-26660/): Malicious code in moodtrakr (npm) (malicious package) - [MAL-2025-2666](https://insights.sbomify.com/MAL-2025-2666/): Malicious code in ebtc-zap-router (npm) (malicious package) - [MAL-2025-26659](https://insights.sbomify.com/MAL-2025-26659/): Malicious code in monzo-file-cleaner (npm) (malicious package) - [MAL-2025-26658](https://insights.sbomify.com/MAL-2025-26658/): Malicious code in montager (npm) (malicious package) - [MAL-2025-26657](https://insights.sbomify.com/MAL-2025-26657/): Malicious code in montabe (npm) (malicious package) - [MAL-2025-26656](https://insights.sbomify.com/MAL-2025-26656/): Malicious code in monrei (npm) (malicious package) - [MAL-2025-26655](https://insights.sbomify.com/MAL-2025-26655/): Malicious code in monocam (npm) (malicious package) - [MAL-2025-26654](https://insights.sbomify.com/MAL-2025-26654/): Malicious code in mono-package (npm) (malicious package) - [MAL-2025-26653](https://insights.sbomify.com/MAL-2025-26653/): Malicious code in monkeyjob (npm) (malicious package) - [MAL-2025-26652](https://insights.sbomify.com/MAL-2025-26652/): Malicious code in monitor-website (npm) (malicious package) - [MAL-2025-26651](https://insights.sbomify.com/MAL-2025-26651/): Malicious code in monitor-rho-pipe-log-zeta (npm) (malicious package) - [MAL-2025-26650](https://insights.sbomify.com/MAL-2025-26650/): Malicious code in monitor-paypal (npm) (malicious package) - [MAL-2025-2665](https://insights.sbomify.com/MAL-2025-2665/): Malicious code in discourse-web3auth-theme (npm) (malicious package) - [MAL-2025-26649](https://insights.sbomify.com/MAL-2025-26649/): Malicious code in monitor-eta-decode-cold-assert (npm) (malicious package) - [MAL-2025-26648](https://insights.sbomify.com/MAL-2025-26648/): Malicious code in monigle (npm) (malicious package) - [MAL-2025-26647](https://insights.sbomify.com/MAL-2025-26647/): Malicious code in mongostat (npm) (malicious package) - [MAL-2025-26646](https://insights.sbomify.com/MAL-2025-26646/): Malicious code in mongorito-validations (npm) (malicious package) - [MAL-2025-26645](https://insights.sbomify.com/MAL-2025-26645/): Malicious code in mongorack (npm) (malicious package) - [MAL-2025-26644](https://insights.sbomify.com/MAL-2025-26644/): Malicious code in mongoose.js (npm) (malicious package) - [MAL-2025-26643](https://insights.sbomify.com/MAL-2025-26643/): Malicious code in mongoose-vega-multiverse-local (npm) (malicious package) - [MAL-2025-26642](https://insights.sbomify.com/MAL-2025-26642/): Malicious code in mongoose-tokens (npm) (malicious package) - [MAL-2025-26641](https://insights.sbomify.com/MAL-2025-26641/): Malicious code in mongoose-gacrux-public-paleoecology (npm) (malicious package) - [MAL-2025-26640](https://insights.sbomify.com/MAL-2025-26640/): Malicious code in mongoed (npm) (malicious package) - [MAL-2025-2664](https://insights.sbomify.com/MAL-2025-2664/): Malicious code in diacritic_remover (npm) (malicious package) - [MAL-2025-26639](https://insights.sbomify.com/MAL-2025-26639/): Malicious code in mongodb-stitch-core-admin-client (npm) (malicious package) - [MAL-2025-26638](https://insights.sbomify.com/MAL-2025-26638/): Malicious code in mongodb-nightmare-private-passport (npm) (malicious package) - [MAL-2025-26637](https://insights.sbomify.com/MAL-2025-26637/): Malicious code in mongodb-cressida-public-oberon (npm) (malicious package) - [MAL-2025-26636](https://insights.sbomify.com/MAL-2025-26636/): Malicious code in mongodb-commitizen-exobiology-blaze (npm) (malicious package) - [MAL-2025-26635](https://insights.sbomify.com/MAL-2025-26635/): Malicious code in mongodb-chatbot-eval (npm) (malicious package) - [MAL-2025-26634](https://insights.sbomify.com/MAL-2025-26634/): Malicious code in mongodb-async-exoplanet-helmet (npm) (malicious package) - [MAL-2025-26633](https://insights.sbomify.com/MAL-2025-26633/): Malicious code in mongodb-archaeoastronomy-joviology-phoebe (npm) (malicious package) - [MAL-2025-26632](https://insights.sbomify.com/MAL-2025-26632/): Malicious code in mongodb-accretion-altair-geodynamo (npm) (malicious package) - [MAL-2025-26631](https://insights.sbomify.com/MAL-2025-26631/): Malicious code in mongo-library (npm) (malicious package) - [MAL-2025-26630](https://insights.sbomify.com/MAL-2025-26630/): Malicious code in monedo (npm) (malicious package) - [MAL-2025-2663](https://insights.sbomify.com/MAL-2025-2663/): Malicious code in datahub-react-web (npm) (malicious package) - [MAL-2025-26629](https://insights.sbomify.com/MAL-2025-26629/): Malicious code in monaco-editor-loader (npm) (malicious package) - [MAL-2025-26628](https://insights.sbomify.com/MAL-2025-26628/): Malicious code in mompao (npm) (malicious package) - [MAL-2025-26627](https://insights.sbomify.com/MAL-2025-26627/): Malicious code in momodemo (npm) (malicious package) - [MAL-2025-26626](https://insights.sbomify.com/MAL-2025-26626/): Malicious code in mometn (npm) (malicious package) - [MAL-2025-26625](https://insights.sbomify.com/MAL-2025-26625/): Malicious code in moment-poc (npm) (malicious package) - [MAL-2025-26624](https://insights.sbomify.com/MAL-2025-26624/): Malicious code in momen (npm) (malicious package) - [MAL-2025-26623](https://insights.sbomify.com/MAL-2025-26623/): Malicious code in momdnt (npm) (malicious package) - [MAL-2025-26622](https://insights.sbomify.com/MAL-2025-26622/): Malicious code in moltin-coalesce-generic (npm) (malicious package) - [MAL-2025-26621](https://insights.sbomify.com/MAL-2025-26621/): Malicious code in moltin-coalesce (npm) (malicious package) - [MAL-2025-26620](https://insights.sbomify.com/MAL-2025-26620/): Malicious code in molscript (npm) (malicious package) - [MAL-2025-2662](https://insights.sbomify.com/MAL-2025-2662/): Malicious code in create-sensort-app (npm) (malicious package) - [MAL-2025-26619](https://insights.sbomify.com/MAL-2025-26619/): Malicious code in molpay-mobile-sdk (npm) (malicious package) - [MAL-2025-26618](https://insights.sbomify.com/MAL-2025-26618/): Malicious code in molecule_o6xjw_0rh6u_infinity (npm) (malicious package) - [MAL-2025-26617](https://insights.sbomify.com/MAL-2025-26617/): Malicious code in molecule_h2ypp_dea3s_ocean (npm) (malicious package) - [MAL-2025-26616](https://insights.sbomify.com/MAL-2025-26616/): Malicious code in mojodemo (npm) (malicious package) - [MAL-2025-26615](https://insights.sbomify.com/MAL-2025-26615/): Malicious code in mojo-ui-components (npm) (malicious package) - [MAL-2025-26614](https://insights.sbomify.com/MAL-2025-26614/): Malicious code in mojacesta (npm) (malicious package) - [MAL-2025-26613](https://insights.sbomify.com/MAL-2025-26613/): Malicious code in mogoose (npm) (malicious package) - [MAL-2025-26612](https://insights.sbomify.com/MAL-2025-26612/): Malicious code in mogodb-core (npm) (malicious package) - [MAL-2025-26611](https://insights.sbomify.com/MAL-2025-26611/): Malicious code in mogodb (npm) (malicious package) - [MAL-2025-26610](https://insights.sbomify.com/MAL-2025-26610/): Malicious code in mogobd (npm) (malicious package) - [MAL-2025-2661](https://insights.sbomify.com/MAL-2025-2661/): Malicious code in consolidate-logger (npm) (malicious package) - [MAL-2025-26609](https://insights.sbomify.com/MAL-2025-26609/): Malicious code in module-templates-shared-modules (npm) (malicious package) - [MAL-2025-26608](https://insights.sbomify.com/MAL-2025-26608/): Malicious code in module-speleology-style-loader-singularitarianism (npm) (malicious package) - [MAL-2025-26607](https://insights.sbomify.com/MAL-2025-26607/): Malicious code in module-relationship (npm) (malicious package) - [MAL-2025-26606](https://insights.sbomify.com/MAL-2025-26606/): Malicious code in module-paleobotany-module-supernova (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/817/