# Vulnerabilities published in 2025 - [MAL-2025-26425](https://insights.sbomify.com/MAL-2025-26425/): Malicious code in mini-css-extract-plugin-materialize-technocracy-venus (npm) (malicious package) - [MAL-2025-26424](https://insights.sbomify.com/MAL-2025-26424/): Malicious code in mini-css-extract-plugin-jabbah-sagitta-graphql (npm) (malicious package) - [MAL-2025-26423](https://insights.sbomify.com/MAL-2025-26423/): Malicious code in mini-css-extract-plugin-jabbah-dotenv-safe-asthenosphere (npm) (malicious package) - [MAL-2025-26422](https://insights.sbomify.com/MAL-2025-26422/): Malicious code in mini-css-extract-plugin-carpo-backend-nightmare (npm) (malicious package) - [MAL-2025-26421](https://insights.sbomify.com/MAL-2025-26421/): Malicious code in mini-css-extract-plugin-buffer-bellatrix-selenium (npm) (malicious package) - [MAL-2025-26420](https://insights.sbomify.com/MAL-2025-26420/): Malicious code in minhcuder-angry (npm) (malicious package) - [MAL-2025-2642](https://insights.sbomify.com/MAL-2025-2642/): Malicious code in adhxsc (npm) (malicious package) - [MAL-2025-26419](https://insights.sbomify.com/MAL-2025-26419/): Malicious code in minglu (npm) (malicious package) - [MAL-2025-26418](https://insights.sbomify.com/MAL-2025-26418/): Malicious code in minglefs (npm) (malicious package) - [MAL-2025-26417](https://insights.sbomify.com/MAL-2025-26417/): Malicious code in mineralogy-spectroscopy-grunt-webdriver-mocha (npm) (malicious package) - [MAL-2025-26416](https://insights.sbomify.com/MAL-2025-26416/): Malicious code in mineralogy-passport-xo-comet (npm) (malicious package) - [MAL-2025-26415](https://insights.sbomify.com/MAL-2025-26415/): Malicious code in mineralogy-meteor-mensa-meissa (npm) (malicious package) - [MAL-2025-26414](https://insights.sbomify.com/MAL-2025-26414/): Malicious code in mineralogy-kaus-standard-areology (npm) (malicious package) - [MAL-2025-26413](https://insights.sbomify.com/MAL-2025-26413/): Malicious code in mineralogy-hapi-buffer-gulp (npm) (malicious package) - [MAL-2025-26412](https://insights.sbomify.com/MAL-2025-26412/): Malicious code in mineralogy-grus-gemini-sedna (npm) (malicious package) - [MAL-2025-26411](https://insights.sbomify.com/MAL-2025-26411/): Malicious code in minepeon (npm) (malicious package) - [MAL-2025-26410](https://insights.sbomify.com/MAL-2025-26410/): Malicious code in minemouse (npm) (malicious package) - [MAL-2025-2641](https://insights.sbomify.com/MAL-2025-2641/): Malicious code in adhgsc (npm) (malicious package) - [MAL-2025-26409](https://insights.sbomify.com/MAL-2025-26409/): Malicious code in minederp (npm) (malicious package) - [MAL-2025-26408](https://insights.sbomify.com/MAL-2025-26408/): Malicious code in minecraft-coins386 (npm) (malicious package) - [MAL-2025-26407](https://insights.sbomify.com/MAL-2025-26407/): Malicious code in minecraft-codes767 (npm) (malicious package) - [MAL-2025-26406](https://insights.sbomify.com/MAL-2025-26406/): Malicious code in minecraft-codes658 (npm) (malicious package) - [MAL-2025-26405](https://insights.sbomify.com/MAL-2025-26405/): Malicious code in minecraft-codes408 (npm) (malicious package) - [MAL-2025-26404](https://insights.sbomify.com/MAL-2025-26404/): Malicious code in minecraft-codes364 (npm) (malicious package) - [MAL-2025-26403](https://insights.sbomify.com/MAL-2025-26403/): Malicious code in minecraft-codes130 (npm) (malicious package) - [MAL-2025-26402](https://insights.sbomify.com/MAL-2025-26402/): Malicious code in minecoins-free866 (npm) (malicious package) - [MAL-2025-26401](https://insights.sbomify.com/MAL-2025-26401/): Malicious code in minecoins-free708 (npm) (malicious package) - [MAL-2025-26400](https://insights.sbomify.com/MAL-2025-26400/): Malicious code in minecoins-free608 (npm) (malicious package) - [MAL-2025-2640](https://insights.sbomify.com/MAL-2025-2640/): Malicious code in adfg-project (npm) (malicious package) - [MAL-2025-264](https://insights.sbomify.com/MAL-2025-264/): Malicious code in zk-settlement-client (npm) (malicious package) - [MAL-2025-26399](https://insights.sbomify.com/MAL-2025-26399/): Malicious code in minecoins-free574 (npm) (malicious package) - [MAL-2025-26398](https://insights.sbomify.com/MAL-2025-26398/): Malicious code in minecoins-free504 (npm) (malicious package) - [MAL-2025-26397](https://insights.sbomify.com/MAL-2025-26397/): Malicious code in minecoins-free491 (npm) (malicious package) - [MAL-2025-26396](https://insights.sbomify.com/MAL-2025-26396/): Malicious code in minecoins-free436 (npm) (malicious package) - [MAL-2025-26395](https://insights.sbomify.com/MAL-2025-26395/): Malicious code in minecoins-free347 (npm) (malicious package) - [MAL-2025-26394](https://insights.sbomify.com/MAL-2025-26394/): Malicious code in minecoins-free332 (npm) (malicious package) - [MAL-2025-26393](https://insights.sbomify.com/MAL-2025-26393/): Malicious code in minecoins-free280 (npm) (malicious package) - [MAL-2025-26392](https://insights.sbomify.com/MAL-2025-26392/): Malicious code in minecoins-free267 (npm) (malicious package) - [MAL-2025-26391](https://insights.sbomify.com/MAL-2025-26391/): Malicious code in minecoins-free163 (npm) (malicious package) - [MAL-2025-26390](https://insights.sbomify.com/MAL-2025-26390/): Malicious code in minecoins-free117 (npm) (malicious package) - [MAL-2025-2639](https://insights.sbomify.com/MAL-2025-2639/): Malicious code in @sf-intl-map/pc (npm) (malicious package) - [MAL-2025-26389](https://insights.sbomify.com/MAL-2025-26389/): Malicious code in minecoins-free (npm) (malicious package) - [MAL-2025-26388](https://insights.sbomify.com/MAL-2025-26388/): Malicious code in minecoins-for-free (npm) (malicious package) - [MAL-2025-26387](https://insights.sbomify.com/MAL-2025-26387/): Malicious code in mine-monero (npm) (malicious package) - [MAL-2025-26386](https://insights.sbomify.com/MAL-2025-26386/): Malicious code in mindwar (npm) (malicious package) - [MAL-2025-26385](https://insights.sbomify.com/MAL-2025-26385/): Malicious code in mindspin (npm) (malicious package) - [MAL-2025-26384](https://insights.sbomify.com/MAL-2025-26384/): Malicious code in mindplus (npm) (malicious package) - [MAL-2025-26383](https://insights.sbomify.com/MAL-2025-26383/): Malicious code in mindload (npm) (malicious package) - [MAL-2025-26382](https://insights.sbomify.com/MAL-2025-26382/): Malicious code in mindfuse (npm) (malicious package) - [MAL-2025-26381](https://insights.sbomify.com/MAL-2025-26381/): Malicious code in mindfield (npm) (malicious package) - [MAL-2025-26380](https://insights.sbomify.com/MAL-2025-26380/): Malicious code in mindfang (npm) (malicious package) - [MAL-2025-2638](https://insights.sbomify.com/MAL-2025-2638/): Malicious code in @sensort/session (npm) (malicious package) - [MAL-2025-26379](https://insights.sbomify.com/MAL-2025-26379/): Malicious code in mind-sdk-web (npm) (malicious package) - [MAL-2025-26378](https://insights.sbomify.com/MAL-2025-26378/): Malicious code in mimokia (npm) (malicious package) - [MAL-2025-26377](https://insights.sbomify.com/MAL-2025-26377/): Malicious code in mimeapack (npm) (malicious package) - [MAL-2025-26376](https://insights.sbomify.com/MAL-2025-26376/): Malicious code in mime-of (npm) (malicious package) - [MAL-2025-26375](https://insights.sbomify.com/MAL-2025-26375/): Malicious code in miltretas (npm) (malicious package) - [MAL-2025-26374](https://insights.sbomify.com/MAL-2025-26374/): Malicious code in milkilo (npm) (malicious package) - [MAL-2025-26373](https://insights.sbomify.com/MAL-2025-26373/): Malicious code in mikenchin (npm) (malicious package) - [MAL-2025-26372](https://insights.sbomify.com/MAL-2025-26372/): Malicious code in mike-zulu-qvkd (npm) (malicious package) - [MAL-2025-26371](https://insights.sbomify.com/MAL-2025-26371/): Malicious code in mike-zpg-project (npm) (malicious package) - [MAL-2025-26370](https://insights.sbomify.com/MAL-2025-26370/): Malicious code in mike-yje-project (npm) (malicious package) - [MAL-2025-2637](https://insights.sbomify.com/MAL-2025-2637/): Malicious code in @sensort/router (npm) (malicious package) - [MAL-2025-26369](https://insights.sbomify.com/MAL-2025-26369/): Malicious code in mike-xray-kanv (npm) (malicious package) - [MAL-2025-26368](https://insights.sbomify.com/MAL-2025-26368/): Malicious code in mike-whiskey-jddk (npm) (malicious package) - [MAL-2025-26367](https://insights.sbomify.com/MAL-2025-26367/): Malicious code in mike-watermelon-zhrx (npm) (malicious package) - [MAL-2025-26366](https://insights.sbomify.com/MAL-2025-26366/): Malicious code in mike-w8h-project (npm) (malicious package) - [MAL-2025-26365](https://insights.sbomify.com/MAL-2025-26365/): Malicious code in mike-volcano-atvw (npm) (malicious package) - [MAL-2025-26364](https://insights.sbomify.com/MAL-2025-26364/): Malicious code in mike-vk3-project (npm) (malicious package) - [MAL-2025-26363](https://insights.sbomify.com/MAL-2025-26363/): Malicious code in mike-victor-okar (npm) (malicious package) - [MAL-2025-26362](https://insights.sbomify.com/MAL-2025-26362/): Malicious code in mike-va3-project (npm) (malicious package) - [MAL-2025-26361](https://insights.sbomify.com/MAL-2025-26361/): Malicious code in mike-uniform-xxoy (npm) (malicious package) - [MAL-2025-26360](https://insights.sbomify.com/MAL-2025-26360/): Malicious code in mike-uniform-m8js (npm) (malicious package) - [MAL-2025-2636](https://insights.sbomify.com/MAL-2025-2636/): Malicious code in @sensort/mongoose-migrations (npm) (malicious package) - [MAL-2025-26359](https://insights.sbomify.com/MAL-2025-26359/): Malicious code in mike-ugli-vugs (npm) (malicious package) - [MAL-2025-26358](https://insights.sbomify.com/MAL-2025-26358/): Malicious code in mike-ugli-rhfr (npm) (malicious package) - [MAL-2025-26357](https://insights.sbomify.com/MAL-2025-26357/): Malicious code in mike-ugli-qmdp (npm) (malicious package) - [MAL-2025-26356](https://insights.sbomify.com/MAL-2025-26356/): Malicious code in mike-ugli-ltwa (npm) (malicious package) - [MAL-2025-26355](https://insights.sbomify.com/MAL-2025-26355/): Malicious code in mike-tango-7x3a (npm) (malicious package) - [MAL-2025-26354](https://insights.sbomify.com/MAL-2025-26354/): Malicious code in mike-tangerine-toic (npm) (malicious package) - [MAL-2025-26353](https://insights.sbomify.com/MAL-2025-26353/): Malicious code in mike-romeo-zwhd (npm) (malicious package) - [MAL-2025-26352](https://insights.sbomify.com/MAL-2025-26352/): Malicious code in mike-romeo-ipmm (npm) (malicious package) - [MAL-2025-26351](https://insights.sbomify.com/MAL-2025-26351/): Malicious code in mike-raspberry-xfux (npm) (malicious package) - [MAL-2025-26350](https://insights.sbomify.com/MAL-2025-26350/): Malicious code in mike-rainbow-ueqd (npm) (malicious package) - [MAL-2025-2635](https://insights.sbomify.com/MAL-2025-2635/): Malicious code in @sensort/mongoose (npm) (malicious package) - [MAL-2025-26349](https://insights.sbomify.com/MAL-2025-26349/): Malicious code in mike-quince-echo-uxgyg (npm) (malicious package) - [MAL-2025-26348](https://insights.sbomify.com/MAL-2025-26348/): Malicious code in mike-qhs-project (npm) (malicious package) - [MAL-2025-26347](https://insights.sbomify.com/MAL-2025-26347/): Malicious code in mike-parsnip-npkj (npm) (malicious package) - [MAL-2025-26346](https://insights.sbomify.com/MAL-2025-26346/): Malicious code in mike-oscar-juliet-fklye (npm) (malicious package) - [MAL-2025-26345](https://insights.sbomify.com/MAL-2025-26345/): Malicious code in mike-oscar-avlx (npm) (malicious package) - [MAL-2025-26344](https://insights.sbomify.com/MAL-2025-26344/): Malicious code in mike-nutmeg-nyxz (npm) (malicious package) - [MAL-2025-26343](https://insights.sbomify.com/MAL-2025-26343/): Malicious code in mike-november-date-djgbq (npm) (malicious package) - [MAL-2025-26342](https://insights.sbomify.com/MAL-2025-26342/): Malicious code in mike-nex-project (npm) (malicious package) - [MAL-2025-26341](https://insights.sbomify.com/MAL-2025-26341/): Malicious code in mike-mvg-project (npm) (malicious package) - [MAL-2025-26340](https://insights.sbomify.com/MAL-2025-26340/): Malicious code in mike-lio-project (npm) (malicious package) - [MAL-2025-2634](https://insights.sbomify.com/MAL-2025-2634/): Malicious code in @sensort/cron (npm) (malicious package) - [MAL-2025-26339](https://insights.sbomify.com/MAL-2025-26339/): Malicious code in mike-lima-fvqp (npm) (malicious package) - [MAL-2025-26338](https://insights.sbomify.com/MAL-2025-26338/): Malicious code in mike-ley-project (npm) (malicious package) - [MAL-2025-26337](https://insights.sbomify.com/MAL-2025-26337/): Malicious code in mike-l69-project (npm) (malicious package) - [MAL-2025-26336](https://insights.sbomify.com/MAL-2025-26336/): Malicious code in mike-kv3-project (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/820/