# Vulnerabilities published in 2025


- [MAL-2025-26245](https://insights.sbomify.com/MAL-2025-26245/): Malicious code in meteor-dock-9raw (npm) (malicious package)
- [MAL-2025-26244](https://insights.sbomify.com/MAL-2025-26244/): Malicious code in meteor-delphinus-sirius-stratigraphy (npm) (malicious package)
- [MAL-2025-26243](https://insights.sbomify.com/MAL-2025-26243/): Malicious code in meteor-commitlint-meteor-biosignature (npm) (malicious package)
- [MAL-2025-26242](https://insights.sbomify.com/MAL-2025-26242/): Malicious code in meteor-cherry-9fhd (npm) (malicious package)
- [MAL-2025-26241](https://insights.sbomify.com/MAL-2025-26241/): Malicious code in meteor-beetroot-ha6w (npm) (malicious package)
- [MAL-2025-26240](https://insights.sbomify.com/MAL-2025-26240/): Malicious code in meteor-asteroid-zsg0 (npm) (malicious package)
- [MAL-2025-2624](https://insights.sbomify.com/MAL-2025-2624/): Malicious code in codex-cipher (npm) (malicious package)
- [MAL-2025-26239](https://insights.sbomify.com/MAL-2025-26239/): Malicious code in metaoffice-documentation (npm) (malicious package)
- [MAL-2025-26238](https://insights.sbomify.com/MAL-2025-26238/): Malicious code in metamssk (npm) (malicious package)
- [MAL-2025-26237](https://insights.sbomify.com/MAL-2025-26237/): Malicious code in metamsk (npm) (malicious package)
- [MAL-2025-26236](https://insights.sbomify.com/MAL-2025-26236/): Malicious code in metamaks (npm) (malicious package)
- [MAL-2025-26235](https://insights.sbomify.com/MAL-2025-26235/): Malicious code in metalz (npm) (malicious package)
- [MAL-2025-26234](https://insights.sbomify.com/MAL-2025-26234/): Malicious code in metalsmith-sociobiology-steganography-cluster (npm) (malicious package)
- [MAL-2025-26233](https://insights.sbomify.com/MAL-2025-26233/): Malicious code in metalsmith-janus-javascript-transport (npm) (malicious package)
- [MAL-2025-26232](https://insights.sbomify.com/MAL-2025-26232/): Malicious code in metalsmith-grus-less-loader-gridsome (npm) (malicious package)
- [MAL-2025-26231](https://insights.sbomify.com/MAL-2025-26231/): Malicious code in metal-js-client (npm) (malicious package)
- [MAL-2025-26230](https://insights.sbomify.com/MAL-2025-26230/): Malicious code in metagenda (npm) (malicious package)
- [MAL-2025-2623](https://insights.sbomify.com/MAL-2025-2623/): Malicious code in corehome (npm) (malicious package)
- [MAL-2025-26229](https://insights.sbomify.com/MAL-2025-26229/): Malicious code in metadata-ipfs-pack (npm) (malicious package)
- [MAL-2025-26228](https://insights.sbomify.com/MAL-2025-26228/): Malicious code in metacpan (npm) (malicious package)
- [MAL-2025-26227](https://insights.sbomify.com/MAL-2025-26227/): Malicious code in metacoin-box (npm) (malicious package)
- [MAL-2025-26226](https://insights.sbomify.com/MAL-2025-26226/): Malicious code in metabolomics-server-slides-biogeochemistry (npm) (malicious package)
- [MAL-2025-26225](https://insights.sbomify.com/MAL-2025-26225/): Malicious code in metabolomics-ethology-pegasus-kronos (npm) (malicious package)
- [MAL-2025-26224](https://insights.sbomify.com/MAL-2025-26224/): Malicious code in metabolomics-configstore-xenos-spawn (npm) (malicious package)
- [MAL-2025-26223](https://insights.sbomify.com/MAL-2025-26223/): Malicious code in metabolomics-boson-orogeny-oortcloud (npm) (malicious package)
- [MAL-2025-26222](https://insights.sbomify.com/MAL-2025-26222/): Malicious code in metabolomics-axios-webdriver-mocha-ethology (npm) (malicious package)
- [MAL-2025-26221](https://insights.sbomify.com/MAL-2025-26221/): Malicious code in metabolomics-apollo-brane-thermochronology (npm) (malicious package)
- [MAL-2025-26220](https://insights.sbomify.com/MAL-2025-26220/): Malicious code in meta_api (npm) (malicious package)
- [MAL-2025-2622](https://insights.sbomify.com/MAL-2025-2622/): Malicious code in team-bsb-bot (PyPI) (malicious package)
- [MAL-2025-26219](https://insights.sbomify.com/MAL-2025-26219/): Malicious code in meta-notify-rain-cat-fast (npm) (malicious package)
- [MAL-2025-26218](https://insights.sbomify.com/MAL-2025-26218/): Malicious code in meta-link-load-earth-parse (npm) (malicious package)
- [MAL-2025-26217](https://insights.sbomify.com/MAL-2025-26217/): Malicious code in meta-error-secure-encode-refactor (npm) (malicious package)
- [MAL-2025-26216](https://insights.sbomify.com/MAL-2025-26216/): Malicious code in meta-compile-shell-quick-resolve (npm) (malicious package)
- [MAL-2025-26215](https://insights.sbomify.com/MAL-2025-26215/): Malicious code in meta-bad-protected-orchestrate-serialize (npm) (malicious package)
- [MAL-2025-26214](https://insights.sbomify.com/MAL-2025-26214/): Malicious code in meta-analyze-cold-code-old (npm) (malicious package)
- [MAL-2025-26213](https://insights.sbomify.com/MAL-2025-26213/): Malicious code in messengr (npm) (malicious package)
- [MAL-2025-26212](https://insights.sbomify.com/MAL-2025-26212/): Malicious code in messages-outbound (npm) (malicious package)
- [MAL-2025-26211](https://insights.sbomify.com/MAL-2025-26211/): Malicious code in messagebot-core (npm) (malicious package)
- [MAL-2025-26210](https://insights.sbomify.com/MAL-2025-26210/): Malicious code in mesosphere-protoplanetarydisk-redis-colors (npm) (malicious package)
- [MAL-2025-2621](https://insights.sbomify.com/MAL-2025-2621/): Malicious code in bsb-backup (PyPI) (malicious package)
- [MAL-2025-26209](https://insights.sbomify.com/MAL-2025-26209/): Malicious code in mesosphere-proteomics-phoebe-kastra (npm) (malicious package)
- [MAL-2025-26208](https://insights.sbomify.com/MAL-2025-26208/): Malicious code in mesosphere-eslint-module-auth (npm) (malicious package)
- [MAL-2025-26207](https://insights.sbomify.com/MAL-2025-26207/): Malicious code in mesh-layers (npm) (malicious package)
- [MAL-2025-26206](https://insights.sbomify.com/MAL-2025-26206/): Malicious code in mesfer (npm) (malicious package)
- [MAL-2025-26205](https://insights.sbomify.com/MAL-2025-26205/): Malicious code in meryem (npm) (malicious package)
- [MAL-2025-26204](https://insights.sbomify.com/MAL-2025-26204/): Malicious code in mericsson-gatsby-source-contentful (npm) (malicious package)
- [MAL-2025-26203](https://insights.sbomify.com/MAL-2025-26203/): Malicious code in mergequeue-eval-mergequeue (npm) (malicious package)
- [MAL-2025-26202](https://insights.sbomify.com/MAL-2025-26202/): Malicious code in merchantprofiledataserv (npm) (malicious package)
- [MAL-2025-26201](https://insights.sbomify.com/MAL-2025-26201/): Malicious code in merchant_feedback-client (npm) (malicious package)
- [MAL-2025-26200](https://insights.sbomify.com/MAL-2025-26200/): Malicious code in merchant-newsletter-widget (npm) (malicious package)
- [MAL-2025-2620](https://insights.sbomify.com/MAL-2025-2620/): Malicious code in solana-headless-sdk (npm) (malicious package)
- [MAL-2025-262](https://insights.sbomify.com/MAL-2025-262/): Malicious code in zapier-platform-boilerplate (npm) (malicious package)
- [MAL-2025-26199](https://insights.sbomify.com/MAL-2025-26199/): Malicious code in mercahnt (npm) (malicious package)
- [MAL-2025-26198](https://insights.sbomify.com/MAL-2025-26198/): Malicious code in meowhut (npm) (malicious package)
- [MAL-2025-26197](https://insights.sbomify.com/MAL-2025-26197/): Malicious code in meoion (npm) (malicious package)
- [MAL-2025-26196](https://insights.sbomify.com/MAL-2025-26196/): Malicious code in menus-indexer-trigger (npm) (malicious package)
- [MAL-2025-26195](https://insights.sbomify.com/MAL-2025-26195/): Malicious code in menupanda (npm) (malicious package)
- [MAL-2025-26194](https://insights.sbomify.com/MAL-2025-26194/): Malicious code in menupages (npm) (malicious package)
- [MAL-2025-26193](https://insights.sbomify.com/MAL-2025-26193/): Malicious code in mentors-sdk-js (npm) (malicious package)
- [MAL-2025-26192](https://insights.sbomify.com/MAL-2025-26192/): Malicious code in mensa-supervisor-coronalmassejection-semantic-ui (npm) (malicious package)
- [MAL-2025-26191](https://insights.sbomify.com/MAL-2025-26191/): Malicious code in mensa-local-mensa-protractor (npm) (malicious package)
- [MAL-2025-26190](https://insights.sbomify.com/MAL-2025-26190/): Malicious code in mensa-geochemistry-wavefunction-chakra-ui (npm) (malicious package)
- [MAL-2025-2619](https://insights.sbomify.com/MAL-2025-2619/): Malicious code in my-account-end-game (npm) (malicious package)
- [MAL-2025-26189](https://insights.sbomify.com/MAL-2025-26189/): Malicious code in mensa-event-local-superagent (npm) (malicious package)
- [MAL-2025-26188](https://insights.sbomify.com/MAL-2025-26188/): Malicious code in mene-base (npm) (malicious package)
- [MAL-2025-26187](https://insights.sbomify.com/MAL-2025-26187/): Malicious code in mendiff (npm) (malicious package)
- [MAL-2025-26186](https://insights.sbomify.com/MAL-2025-26186/): Malicious code in mendelod (npm) (malicious package)
- [MAL-2025-26185](https://insights.sbomify.com/MAL-2025-26185/): Malicious code in menadi (npm) (malicious package)
- [MAL-2025-26184](https://insights.sbomify.com/MAL-2025-26184/): Malicious code in memoripy (npm) (malicious package)
- [MAL-2025-26183](https://insights.sbomify.com/MAL-2025-26183/): Malicious code in memophoto (npm) (malicious package)
- [MAL-2025-26182](https://insights.sbomify.com/MAL-2025-26182/): Malicious code in memoos (npm) (malicious package)
- [MAL-2025-26181](https://insights.sbomify.com/MAL-2025-26181/): Malicious code in memola (npm) (malicious package)
- [MAL-2025-26180](https://insights.sbomify.com/MAL-2025-26180/): Malicious code in memoize-with-leveldb (npm) (malicious package)
- [MAL-2025-2618](https://insights.sbomify.com/MAL-2025-2618/): Malicious code in mind-meeting-assistant2 (npm) (malicious package)
- [MAL-2025-26179](https://insights.sbomify.com/MAL-2025-26179/): Malicious code in memoize-sync (npm) (malicious package)
- [MAL-2025-26178](https://insights.sbomify.com/MAL-2025-26178/): Malicious code in memecodes (npm) (malicious package)
- [MAL-2025-26177](https://insights.sbomify.com/MAL-2025-26177/): Malicious code in memdiff (npm) (malicious package)
- [MAL-2025-26176](https://insights.sbomify.com/MAL-2025-26176/): Malicious code in memcached_store (npm) (malicious package)
- [MAL-2025-26175](https://insights.sbomify.com/MAL-2025-26175/): Malicious code in membrane-development-link-jabbah (npm) (malicious package)
- [MAL-2025-26174](https://insights.sbomify.com/MAL-2025-26174/): Malicious code in membrane-commitlint-config-angular-async-octans (npm) (malicious package)
- [MAL-2025-26173](https://insights.sbomify.com/MAL-2025-26173/): Malicious code in membrane-astrophysics-fomalhaut-framework (npm) (malicious package)
- [MAL-2025-26172](https://insights.sbomify.com/MAL-2025-26172/): Malicious code in meltrams (npm) (malicious package)
- [MAL-2025-26171](https://insights.sbomify.com/MAL-2025-26171/): Malicious code in mellvin (npm) (malicious package)
- [MAL-2025-26170](https://insights.sbomify.com/MAL-2025-26170/): Malicious code in melkikh-verdaccio-dc (npm) (malicious package)
- [MAL-2025-2617](https://insights.sbomify.com/MAL-2025-2617/): Malicious code in epic-react-store (npm) (malicious package)
- [MAL-2025-26169](https://insights.sbomify.com/MAL-2025-26169/): Malicious code in melkikh-test-dc (npm) (malicious package)
- [MAL-2025-26168](https://insights.sbomify.com/MAL-2025-26168/): Malicious code in melkikh-dependency-confusion-test (npm) (malicious package)
- [MAL-2025-26167](https://insights.sbomify.com/MAL-2025-26167/): Malicious code in melhor (npm) (malicious package)
- [MAL-2025-26166](https://insights.sbomify.com/MAL-2025-26166/): Malicious code in melanesia (npm) (malicious package)
- [MAL-2025-26165](https://insights.sbomify.com/MAL-2025-26165/): Malicious code in meissa-nanotechnology-supervisor-geochemistry (npm) (malicious package)
- [MAL-2025-26164](https://insights.sbomify.com/MAL-2025-26164/): Malicious code in meissa-mysql-pipe-europa (npm) (malicious package)
- [MAL-2025-26163](https://insights.sbomify.com/MAL-2025-26163/): Malicious code in meissa-flare-farout-tethys (npm) (malicious package)
- [MAL-2025-26162](https://insights.sbomify.com/MAL-2025-26162/): Malicious code in meissa-firebase-equinox-docusaurus (npm) (malicious package)
- [MAL-2025-26161](https://insights.sbomify.com/MAL-2025-26161/): Malicious code in meissa-configstore-loopback-rehype (npm) (malicious package)
- [MAL-2025-26160](https://insights.sbomify.com/MAL-2025-26160/): Malicious code in meissa-baryon-parcel-wormhole (npm) (malicious package)
- [MAL-2025-2616](https://insights.sbomify.com/MAL-2025-2616/): Malicious code in default-shared-store (npm) (malicious package)
- [MAL-2025-26159](https://insights.sbomify.com/MAL-2025-26159/): Malicious code in meissa-astrometry-spectron-magellan (npm) (malicious package)
- [MAL-2025-26158](https://insights.sbomify.com/MAL-2025-26158/): Malicious code in meipintu (npm) (malicious package)
- [MAL-2025-26157](https://insights.sbomify.com/MAL-2025-26157/): Malicious code in meihan (npm) (malicious package)
- [MAL-2025-26156](https://insights.sbomify.com/MAL-2025-26156/): Malicious code in megatome (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/822/