# Vulnerabilities published in 2025


- [MAL-2025-26335](https://insights.sbomify.com/MAL-2025-26335/): Malicious code in mike-ko0-project (npm) (malicious package)
- [MAL-2025-26334](https://insights.sbomify.com/MAL-2025-26334/): Malicious code in mike-kiwi-romeo-owume (npm) (malicious package)
- [MAL-2025-26333](https://insights.sbomify.com/MAL-2025-26333/): Malicious code in mike-juliet-uniform-xwrzr (npm) (malicious package)
- [MAL-2025-26332](https://insights.sbomify.com/MAL-2025-26332/): Malicious code in mike-honeydew-sqbt (npm) (malicious package)
- [MAL-2025-26331](https://insights.sbomify.com/MAL-2025-26331/): Malicious code in mike-hgq-project (npm) (malicious package)
- [MAL-2025-26330](https://insights.sbomify.com/MAL-2025-26330/): Malicious code in mike-golf-mlvp (npm) (malicious package)
- [MAL-2025-2633](https://insights.sbomify.com/MAL-2025-2633/): Malicious code in @sensort/core (npm) (malicious package)
- [MAL-2025-26329](https://insights.sbomify.com/MAL-2025-26329/): Malicious code in mike-foxtrot-delta-nmfwc (npm) (malicious package)
- [MAL-2025-26328](https://insights.sbomify.com/MAL-2025-26328/): Malicious code in mike-fig-ivpk (npm) (malicious package)
- [MAL-2025-26327](https://insights.sbomify.com/MAL-2025-26327/): Malicious code in mike-equinox-b53f (npm) (malicious package)
- [MAL-2025-26326](https://insights.sbomify.com/MAL-2025-26326/): Malicious code in mike-e6a-project (npm) (malicious package)
- [MAL-2025-26325](https://insights.sbomify.com/MAL-2025-26325/): Malicious code in mike-date-bvon (npm) (malicious package)
- [MAL-2025-26324](https://insights.sbomify.com/MAL-2025-26324/): Malicious code in mike-anchor-st4t (npm) (malicious package)
- [MAL-2025-26323](https://insights.sbomify.com/MAL-2025-26323/): Malicious code in mike-aa8-project (npm) (malicious package)
- [MAL-2025-26322](https://insights.sbomify.com/MAL-2025-26322/): Malicious code in mike-a35-project (npm) (malicious package)
- [MAL-2025-26321](https://insights.sbomify.com/MAL-2025-26321/): Malicious code in mike-95e-project (npm) (malicious package)
- [MAL-2025-26320](https://insights.sbomify.com/MAL-2025-26320/): Malicious code in mike-7d9-project (npm) (malicious package)
- [MAL-2025-2632](https://insights.sbomify.com/MAL-2025-2632/): Malicious code in @sensort/common (npm) (malicious package)
- [MAL-2025-26319](https://insights.sbomify.com/MAL-2025-26319/): Malicious code in mike-5ng-project (npm) (malicious package)
- [MAL-2025-26318](https://insights.sbomify.com/MAL-2025-26318/): Malicious code in mikaku (npm) (malicious package)
- [MAL-2025-26317](https://insights.sbomify.com/MAL-2025-26317/): Malicious code in miiror (npm) (malicious package)
- [MAL-2025-26316](https://insights.sbomify.com/MAL-2025-26316/): Malicious code in mii-cli (npm) (malicious package)
- [MAL-2025-26315](https://insights.sbomify.com/MAL-2025-26315/): Malicious code in mihiro (npm) (malicious package)
- [MAL-2025-26314](https://insights.sbomify.com/MAL-2025-26314/): Malicious code in migration-progress-announce (npm) (malicious package)
- [MAL-2025-26313](https://insights.sbomify.com/MAL-2025-26313/): Malicious code in midworld (npm) (malicious package)
- [MAL-2025-26312](https://insights.sbomify.com/MAL-2025-26312/): Malicious code in midway-xtpl (npm) (malicious package)
- [MAL-2025-26311](https://insights.sbomify.com/MAL-2025-26311/): Malicious code in midway-logger (npm) (malicious package)
- [MAL-2025-26310](https://insights.sbomify.com/MAL-2025-26310/): Malicious code in midway-dataproxy (npm) (malicious package)
- [MAL-2025-2631](https://insights.sbomify.com/MAL-2025-2631/): Malicious code in @ptc-ibm/greetings (npm) (malicious package)
- [MAL-2025-26309](https://insights.sbomify.com/MAL-2025-26309/): Malicious code in midway-cache (npm) (malicious package)
- [MAL-2025-26308](https://insights.sbomify.com/MAL-2025-26308/): Malicious code in midnights (npm) (malicious package)
- [MAL-2025-26307](https://insights.sbomify.com/MAL-2025-26307/): Malicious code in miditocv (npm) (malicious package)
- [MAL-2025-26306](https://insights.sbomify.com/MAL-2025-26306/): Malicious code in midibin-api (npm) (malicious package)
- [MAL-2025-26305](https://insights.sbomify.com/MAL-2025-26305/): Malicious code in midi-sdk (npm) (malicious package)
- [MAL-2025-26304](https://insights.sbomify.com/MAL-2025-26304/): Malicious code in midi-instrument (npm) (malicious package)
- [MAL-2025-26303](https://insights.sbomify.com/MAL-2025-26303/): Malicious code in midepa (npm) (malicious package)
- [MAL-2025-26302](https://insights.sbomify.com/MAL-2025-26302/): Malicious code in middleware-nestjs-postcss-leda (npm) (malicious package)
- [MAL-2025-26301](https://insights.sbomify.com/MAL-2025-26301/): Malicious code in middleware-lacerta-cladistics-thermosphere (npm) (malicious package)
- [MAL-2025-26300](https://insights.sbomify.com/MAL-2025-26300/): Malicious code in micromachines (npm) (malicious package)
- [MAL-2025-2630](https://insights.sbomify.com/MAL-2025-2630/): Malicious code in @ofjaaah/jose2 (npm) (malicious package)
- [MAL-2025-263](https://insights.sbomify.com/MAL-2025-263/): Malicious code in zd-css-bedrock (npm) (malicious package)
- [MAL-2025-26299](https://insights.sbomify.com/MAL-2025-26299/): Malicious code in microlan (npm) (malicious package)
- [MAL-2025-26298](https://insights.sbomify.com/MAL-2025-26298/): Malicious code in microejb (npm) (malicious package)
- [MAL-2025-26297](https://insights.sbomify.com/MAL-2025-26297/): Malicious code in microcode (npm) (malicious package)
- [MAL-2025-26296](https://insights.sbomify.com/MAL-2025-26296/): Malicious code in microbase (npm) (malicious package)
- [MAL-2025-26295](https://insights.sbomify.com/MAL-2025-26295/): Malicious code in micro-tools (npm) (malicious package)
- [MAL-2025-26294](https://insights.sbomify.com/MAL-2025-26294/): Malicious code in micro-container (npm) (malicious package)
- [MAL-2025-26293](https://insights.sbomify.com/MAL-2025-26293/): Malicious code in micketest (npm) (malicious package)
- [MAL-2025-26292](https://insights.sbomify.com/MAL-2025-26292/): Malicious code in mickeleee (npm) (malicious package)
- [MAL-2025-26291](https://insights.sbomify.com/MAL-2025-26291/): Malicious code in micepiece (npm) (malicious package)
- [MAL-2025-26290](https://insights.sbomify.com/MAL-2025-26290/): Malicious code in micelius (npm) (malicious package)
- [MAL-2025-2629](https://insights.sbomify.com/MAL-2025-2629/): Malicious code in @mint-lib/routing-context (npm) (malicious package)
- [MAL-2025-26289](https://insights.sbomify.com/MAL-2025-26289/): Malicious code in mi-angular-vmp-auth-service (npm) (malicious package)
- [MAL-2025-26288](https://insights.sbomify.com/MAL-2025-26288/): Malicious code in mi-angular-videomanager-pro-apikit (npm) (malicious package)
- [MAL-2025-26287](https://insights.sbomify.com/MAL-2025-26287/): Malicious code in mhxsdcn (npm) (malicious package)
- [MAL-2025-26286](https://insights.sbomify.com/MAL-2025-26286/): Malicious code in mhsvlc (npm) (malicious package)
- [MAL-2025-26285](https://insights.sbomify.com/MAL-2025-26285/): Malicious code in mhnr3k (npm) (malicious package)
- [MAL-2025-26284](https://insights.sbomify.com/MAL-2025-26284/): Malicious code in mhilzjbcryfwktve (npm) (malicious package)
- [MAL-2025-26283](https://insights.sbomify.com/MAL-2025-26283/): Malicious code in mhfqbvlzdxjnsrye (npm) (malicious package)
- [MAL-2025-26282](https://insights.sbomify.com/MAL-2025-26282/): Malicious code in mharizfbkldoeycv (npm) (malicious package)
- [MAL-2025-26281](https://insights.sbomify.com/MAL-2025-26281/): Malicious code in mhandisi (npm) (malicious package)
- [MAL-2025-26280](https://insights.sbomify.com/MAL-2025-26280/): Malicious code in mgyt4s (npm) (malicious package)
- [MAL-2025-2628](https://insights.sbomify.com/MAL-2025-2628/): Malicious code in @mint-lib/query-client (npm) (malicious package)
- [MAL-2025-26279](https://insights.sbomify.com/MAL-2025-26279/): Malicious code in mgenie (npm) (malicious package)
- [MAL-2025-26278](https://insights.sbomify.com/MAL-2025-26278/): Malicious code in mgauss (npm) (malicious package)
- [MAL-2025-26277](https://insights.sbomify.com/MAL-2025-26277/): Malicious code in mg-graph (npm) (malicious package)
- [MAL-2025-26276](https://insights.sbomify.com/MAL-2025-26276/): Malicious code in mftrace (npm) (malicious package)
- [MAL-2025-26275](https://insights.sbomify.com/MAL-2025-26275/): Malicious code in mfrt3 (npm) (malicious package)
- [MAL-2025-26274](https://insights.sbomify.com/MAL-2025-26274/): Malicious code in mfp-cli (npm) (malicious package)
- [MAL-2025-26273](https://insights.sbomify.com/MAL-2025-26273/): Malicious code in mforecast (npm) (malicious package)
- [MAL-2025-26272](https://insights.sbomify.com/MAL-2025-26272/): Malicious code in mfodxcvzhegntkjr (npm) (malicious package)
- [MAL-2025-26271](https://insights.sbomify.com/MAL-2025-26271/): Malicious code in mflect (npm) (malicious package)
- [MAL-2025-26270](https://insights.sbomify.com/MAL-2025-26270/): Malicious code in meynardp (npm) (malicious package)
- [MAL-2025-2627](https://insights.sbomify.com/MAL-2025-2627/): Malicious code in @mint-lib/notifications (npm) (malicious package)
- [MAL-2025-26269](https://insights.sbomify.com/MAL-2025-26269/): Malicious code in mewnpcs (npm) (malicious package)
- [MAL-2025-26268](https://insights.sbomify.com/MAL-2025-26268/): Malicious code in meuteste (npm) (malicious package)
- [MAL-2025-26267](https://insights.sbomify.com/MAL-2025-26267/): Malicious code in meurepo (npm) (malicious package)
- [MAL-2025-26266](https://insights.sbomify.com/MAL-2025-26266/): Malicious code in metronavi (npm) (malicious package)
- [MAL-2025-26265](https://insights.sbomify.com/MAL-2025-26265/): Malicious code in metroc (npm) (malicious package)
- [MAL-2025-26264](https://insights.sbomify.com/MAL-2025-26264/): Malicious code in metroapps (npm) (malicious package)
- [MAL-2025-26263](https://insights.sbomify.com/MAL-2025-26263/): Malicious code in metoer (npm) (malicious package)
- [MAL-2025-26262](https://insights.sbomify.com/MAL-2025-26262/): Malicious code in metodi (npm) (malicious package)
- [MAL-2025-26261](https://insights.sbomify.com/MAL-2025-26261/): Malicious code in methodify (npm) (malicious package)
- [MAL-2025-26260](https://insights.sbomify.com/MAL-2025-26260/): Malicious code in meterup (npm) (malicious package)
- [MAL-2025-2626](https://insights.sbomify.com/MAL-2025-2626/): Malicious code in @ibm-ptc/greetings (npm) (malicious package)
- [MAL-2025-26259](https://insights.sbomify.com/MAL-2025-26259/): Malicious code in metero (npm) (malicious package)
- [MAL-2025-26258](https://insights.sbomify.com/MAL-2025-26258/): Malicious code in meteorr (npm) (malicious package)
- [MAL-2025-26257](https://insights.sbomify.com/MAL-2025-26257/): Malicious code in meteor-yonder-soap-hermes (npm) (malicious package)
- [MAL-2025-26256](https://insights.sbomify.com/MAL-2025-26256/): Malicious code in meteor-weywot-transhumanism-luna (npm) (malicious package)
- [MAL-2025-26255](https://insights.sbomify.com/MAL-2025-26255/): Malicious code in meteor-ursa-element-ui-supercluster (npm) (malicious package)
- [MAL-2025-26254](https://insights.sbomify.com/MAL-2025-26254/): Malicious code in meteor-titan-kgdw (npm) (malicious package)
- [MAL-2025-26253](https://insights.sbomify.com/MAL-2025-26253/): Malicious code in meteor-pyxis-semantic-ui-lint (npm) (malicious package)
- [MAL-2025-26252](https://insights.sbomify.com/MAL-2025-26252/): Malicious code in meteor-nova-cosmochemistry-void (npm) (malicious package)
- [MAL-2025-26251](https://insights.sbomify.com/MAL-2025-26251/): Malicious code in meteor-kiwi-6l1d (npm) (malicious package)
- [MAL-2025-26250](https://insights.sbomify.com/MAL-2025-26250/): Malicious code in meteor-kinetic-procyon-vega (npm) (malicious package)
- [MAL-2025-2625](https://insights.sbomify.com/MAL-2025-2625/): Malicious code in zqdllqdz15975321 (npm) (malicious package)
- [MAL-2025-26249](https://insights.sbomify.com/MAL-2025-26249/): Malicious code in meteor-iceberg-skjw (npm) (malicious package)
- [MAL-2025-26248](https://insights.sbomify.com/MAL-2025-26248/): Malicious code in meteor-iceberg-96hh (npm) (malicious package)
- [MAL-2025-26247](https://insights.sbomify.com/MAL-2025-26247/): Malicious code in meteor-horseradish-y0mv (npm) (malicious package)
- [MAL-2025-26246](https://insights.sbomify.com/MAL-2025-26246/): Malicious code in meteor-fomalhaut-izar-sass-loader (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/821/