# Vulnerabilities published in 2025


- [MAL-2025-26605](https://insights.sbomify.com/MAL-2025-26605/): Malicious code in module-name (npm) (malicious package)
- [MAL-2025-26604](https://insights.sbomify.com/MAL-2025-26604/): Malicious code in module-lacerta-cosmos-webdriver-mocha (npm) (malicious package)
- [MAL-2025-26603](https://insights.sbomify.com/MAL-2025-26603/): Malicious code in module-electron-builder-decoherence-transhumanism (npm) (malicious package)
- [MAL-2025-26602](https://insights.sbomify.com/MAL-2025-26602/): Malicious code in module-draft-js-mention-plugin (npm) (malicious package)
- [MAL-2025-26601](https://insights.sbomify.com/MAL-2025-26601/): Malicious code in module-daemon-sun-stub-lambda (npm) (malicious package)
- [MAL-2025-26600](https://insights.sbomify.com/MAL-2025-26600/): Malicious code in module-astro-nashira-chariklo (npm) (malicious package)
- [MAL-2025-2660](https://insights.sbomify.com/MAL-2025-2660/): Malicious code in consolidate-log (npm) (malicious package)
- [MAL-2025-266](https://insights.sbomify.com/MAL-2025-266/): Malicious code in extendmine (npm) (malicious package)
- [MAL-2025-26599](https://insights.sbomify.com/MAL-2025-26599/): Malicious code in modtools (npm) (malicious package)
- [MAL-2025-26598](https://insights.sbomify.com/MAL-2025-26598/): Malicious code in modplay (npm) (malicious package)
- [MAL-2025-26597](https://insights.sbomify.com/MAL-2025-26597/): Malicious code in modown-static (npm) (malicious package)
- [MAL-2025-26596](https://insights.sbomify.com/MAL-2025-26596/): Malicious code in modown-micro (npm) (malicious package)
- [MAL-2025-26595](https://insights.sbomify.com/MAL-2025-26595/): Malicious code in modown-locator (npm) (malicious package)
- [MAL-2025-26594](https://insights.sbomify.com/MAL-2025-26594/): Malicious code in modown-handlebars (npm) (malicious package)
- [MAL-2025-26593](https://insights.sbomify.com/MAL-2025-26593/): Malicious code in modeus-legacy (npm) (malicious package)
- [MAL-2025-26592](https://insights.sbomify.com/MAL-2025-26592/): Malicious code in modeus-core (npm) (malicious package)
- [MAL-2025-26591](https://insights.sbomify.com/MAL-2025-26591/): Malicious code in models-frontend (npm) (malicious package)
- [MAL-2025-26590](https://insights.sbomify.com/MAL-2025-26590/): Malicious code in moddel (npm) (malicious package)
- [MAL-2025-2659](https://insights.sbomify.com/MAL-2025-2659/): Malicious code in common-bridge (npm) (malicious package)
- [MAL-2025-26589](https://insights.sbomify.com/MAL-2025-26589/): Malicious code in modcraft (npm) (malicious package)
- [MAL-2025-26588](https://insights.sbomify.com/MAL-2025-26588/): Malicious code in mocktail.js (npm) (malicious package)
- [MAL-2025-26587](https://insights.sbomify.com/MAL-2025-26587/): Malicious code in mockia (npm) (malicious package)
- [MAL-2025-26586](https://insights.sbomify.com/MAL-2025-26586/): Malicious code in mockerbox (npm) (malicious package)
- [MAL-2025-26585](https://insights.sbomify.com/MAL-2025-26585/): Malicious code in mockdeb (npm) (malicious package)
- [MAL-2025-26584](https://insights.sbomify.com/MAL-2025-26584/): Malicious code in mock-uglify-short-char-catch (npm) (malicious package)
- [MAL-2025-26583](https://insights.sbomify.com/MAL-2025-26583/): Malicious code in mock-simulate-moon-sudo-export (npm) (malicious package)
- [MAL-2025-26582](https://insights.sbomify.com/MAL-2025-26582/): Malicious code in mock-cloud-encrypt-gamma-dog (npm) (malicious package)
- [MAL-2025-26581](https://insights.sbomify.com/MAL-2025-26581/): Malicious code in mochs (npm) (malicious package)
- [MAL-2025-26580](https://insights.sbomify.com/MAL-2025-26580/): Malicious code in mochq (npm) (malicious package)
- [MAL-2025-2658](https://insights.sbomify.com/MAL-2025-2658/): Malicious code in cln-logger (npm) (malicious package)
- [MAL-2025-26579](https://insights.sbomify.com/MAL-2025-26579/): Malicious code in mochikun (npm) (malicious package)
- [MAL-2025-26578](https://insights.sbomify.com/MAL-2025-26578/): Malicious code in mocha-sedna-server-convict (npm) (malicious package)
- [MAL-2025-26577](https://insights.sbomify.com/MAL-2025-26577/): Malicious code in mocha-janus-shelljs-dorado (npm) (malicious package)
- [MAL-2025-26576](https://insights.sbomify.com/MAL-2025-26576/): Malicious code in mocha-helios-postgres-registry (npm) (malicious package)
- [MAL-2025-26575](https://insights.sbomify.com/MAL-2025-26575/): Malicious code in mocha-graphql-ursa-carina (npm) (malicious package)
- [MAL-2025-26574](https://insights.sbomify.com/MAL-2025-26574/): Malicious code in mocha-filament-child-process-janus (npm) (malicious package)
- [MAL-2025-26573](https://insights.sbomify.com/MAL-2025-26573/): Malicious code in mocha-dorado-meteor-iota (npm) (malicious package)
- [MAL-2025-26572](https://insights.sbomify.com/MAL-2025-26572/): Malicious code in mocha-cache-cz-conventional-changelog-cosmicweb (npm) (malicious package)
- [MAL-2025-26571](https://insights.sbomify.com/MAL-2025-26571/): Malicious code in mobtest (npm) (malicious package)
- [MAL-2025-26570](https://insights.sbomify.com/MAL-2025-26570/): Malicious code in mobmonkey (npm) (malicious package)
- [MAL-2025-2657](https://insights.sbomify.com/MAL-2025-2657/): Malicious code in certik-swc-registry (npm) (malicious package)
- [MAL-2025-26569](https://insights.sbomify.com/MAL-2025-26569/): Malicious code in mobmap (npm) (malicious package)
- [MAL-2025-26568](https://insights.sbomify.com/MAL-2025-26568/): Malicious code in mobiuscore (npm) (malicious package)
- [MAL-2025-26567](https://insights.sbomify.com/MAL-2025-26567/): Malicious code in mobipluto (npm) (malicious package)
- [MAL-2025-26566](https://insights.sbomify.com/MAL-2025-26566/): Malicious code in mobiplas (npm) (malicious package)
- [MAL-2025-26565](https://insights.sbomify.com/MAL-2025-26565/): Malicious code in mobilyser (npm) (malicious package)
- [MAL-2025-26564](https://insights.sbomify.com/MAL-2025-26564/): Malicious code in mobilya (npm) (malicious package)
- [MAL-2025-26563](https://insights.sbomify.com/MAL-2025-26563/): Malicious code in mobilne (npm) (malicious package)
- [MAL-2025-26562](https://insights.sbomify.com/MAL-2025-26562/): Malicious code in mobilestewardship (npm) (malicious package)
- [MAL-2025-26561](https://insights.sbomify.com/MAL-2025-26561/): Malicious code in mobilephr (npm) (malicious package)
- [MAL-2025-26560](https://insights.sbomify.com/MAL-2025-26560/): Malicious code in mobilehubcore (npm) (malicious package)
- [MAL-2025-2656](https://insights.sbomify.com/MAL-2025-2656/): Malicious code in cdn-icon-fetcher-help (npm) (malicious package)
- [MAL-2025-26559](https://insights.sbomify.com/MAL-2025-26559/): Malicious code in mobilehub-core (npm) (malicious package)
- [MAL-2025-26558](https://insights.sbomify.com/MAL-2025-26558/): Malicious code in mobilefirst (npm) (malicious package)
- [MAL-2025-26557](https://insights.sbomify.com/MAL-2025-26557/): Malicious code in mobileapo (npm) (malicious package)
- [MAL-2025-26556](https://insights.sbomify.com/MAL-2025-26556/): Malicious code in mobile-user-info (npm) (malicious package)
- [MAL-2025-26555](https://insights.sbomify.com/MAL-2025-26555/): Malicious code in mobile-share (npm) (malicious package)
- [MAL-2025-26554](https://insights.sbomify.com/MAL-2025-26554/): Malicious code in mobikhoj (npm) (malicious package)
- [MAL-2025-26553](https://insights.sbomify.com/MAL-2025-26553/): Malicious code in mobdevcon (npm) (malicious package)
- [MAL-2025-26552](https://insights.sbomify.com/MAL-2025-26552/): Malicious code in mobact (npm) (malicious package)
- [MAL-2025-26551](https://insights.sbomify.com/MAL-2025-26551/): Malicious code in moat-zenith-3ssn (npm) (malicious package)
- [MAL-2025-26550](https://insights.sbomify.com/MAL-2025-26550/): Malicious code in moat-yankee-995w (npm) (malicious package)
- [MAL-2025-2655](https://insights.sbomify.com/MAL-2025-2655/): Malicious code in cdn-icon-fetcher (npm) (malicious package)
- [MAL-2025-26549](https://insights.sbomify.com/MAL-2025-26549/): Malicious code in moat-raspberry-lefw (npm) (malicious package)
- [MAL-2025-26548](https://insights.sbomify.com/MAL-2025-26548/): Malicious code in moat-pulsar-teeg (npm) (malicious package)
- [MAL-2025-26547](https://insights.sbomify.com/MAL-2025-26547/): Malicious code in moat-meteor-lhkc (npm) (malicious package)
- [MAL-2025-26546](https://insights.sbomify.com/MAL-2025-26546/): Malicious code in moat-kuiper-6kbq (npm) (malicious package)
- [MAL-2025-26545](https://insights.sbomify.com/MAL-2025-26545/): Malicious code in moat-jetty-611n (npm) (malicious package)
- [MAL-2025-26544](https://insights.sbomify.com/MAL-2025-26544/): Malicious code in moat-heliosphere-lgtl (npm) (malicious package)
- [MAL-2025-26543](https://insights.sbomify.com/MAL-2025-26543/): Malicious code in moat-date-jixd (npm) (malicious package)
- [MAL-2025-26542](https://insights.sbomify.com/MAL-2025-26542/): Malicious code in mnumerics (npm) (malicious package)
- [MAL-2025-26541](https://insights.sbomify.com/MAL-2025-26541/): Malicious code in mnt-ima-html5 (npm) (malicious package)
- [MAL-2025-26540](https://insights.sbomify.com/MAL-2025-26540/): Malicious code in mns-fe-starter-kit (npm) (malicious package)
- [MAL-2025-2654](https://insights.sbomify.com/MAL-2025-2654/): Malicious code in cdn-icon-fetch (npm) (malicious package)
- [MAL-2025-26539](https://insights.sbomify.com/MAL-2025-26539/): Malicious code in mnp-components (npm) (malicious package)
- [MAL-2025-26538](https://insights.sbomify.com/MAL-2025-26538/): Malicious code in mngvuctixkzsfhka (npm) (malicious package)
- [MAL-2025-26537](https://insights.sbomify.com/MAL-2025-26537/): Malicious code in mmurtl (npm) (malicious package)
- [MAL-2025-26536](https://insights.sbomify.com/MAL-2025-26536/): Malicious code in mmol (npm) (malicious package)
- [MAL-2025-26535](https://insights.sbomify.com/MAL-2025-26535/): Malicious code in mmoent (npm) (malicious package)
- [MAL-2025-26534](https://insights.sbomify.com/MAL-2025-26534/): Malicious code in mmjstool (npm) (malicious package)
- [MAL-2025-26533](https://insights.sbomify.com/MAL-2025-26533/): Malicious code in mmicoe (npm) (malicious package)
- [MAL-2025-26532](https://insights.sbomify.com/MAL-2025-26532/): Malicious code in mmfrr43 (npm) (malicious package)
- [MAL-2025-26531](https://insights.sbomify.com/MAL-2025-26531/): Malicious code in mmapdb (npm) (malicious package)
- [MAL-2025-26530](https://insights.sbomify.com/MAL-2025-26530/): Malicious code in mlzngrjwackvpxdk (npm) (malicious package)
- [MAL-2025-2653](https://insights.sbomify.com/MAL-2025-2653/): Malicious code in bootstrap_dev_scratch (npm) (malicious package)
- [MAL-2025-26529](https://insights.sbomify.com/MAL-2025-26529/): Malicious code in mlxb7x (npm) (malicious package)
- [MAL-2025-26528](https://insights.sbomify.com/MAL-2025-26528/): Malicious code in mlwkjedbnqoizkpx (npm) (malicious package)
- [MAL-2025-26527](https://insights.sbomify.com/MAL-2025-26527/): Malicious code in mlibre (npm) (malicious package)
- [MAL-2025-26526](https://insights.sbomify.com/MAL-2025-26526/): Malicious code in mleb-ng2 (npm) (malicious package)
- [MAL-2025-26525](https://insights.sbomify.com/MAL-2025-26525/): Malicious code in mle (npm) (malicious package)
- [MAL-2025-26524](https://insights.sbomify.com/MAL-2025-26524/): Malicious code in mldboxcgkvstaiyq (npm) (malicious package)
- [MAL-2025-26523](https://insights.sbomify.com/MAL-2025-26523/): Malicious code in mkyqhwcfvnzeksil (npm) (malicious package)
- [MAL-2025-26522](https://insights.sbomify.com/MAL-2025-26522/): Malicious code in mkfesydrknvcqupa (npm) (malicious package)
- [MAL-2025-26521](https://insights.sbomify.com/MAL-2025-26521/): Malicious code in mkdita (npm) (malicious package)
- [MAL-2025-26520](https://insights.sbomify.com/MAL-2025-26520/): Malicious code in mk23s (npm) (malicious package)
- [MAL-2025-2652](https://insights.sbomify.com/MAL-2025-2652/): Malicious code in blockzie-vm (npm) (malicious package)
- [MAL-2025-26519](https://insights.sbomify.com/MAL-2025-26519/): Malicious code in mjstart (npm) (malicious package)
- [MAL-2025-26518](https://insights.sbomify.com/MAL-2025-26518/): Malicious code in mjml-i18n (npm) (malicious package)
- [MAL-2025-26517](https://insights.sbomify.com/MAL-2025-26517/): Malicious code in mjcd (npm) (malicious package)
- [MAL-2025-26516](https://insights.sbomify.com/MAL-2025-26516/): Malicious code in mjb-playground-publishing-a-npm-module (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/818/