# Vulnerabilities published in 2025


- [MAL-2025-26155](https://insights.sbomify.com/MAL-2025-26155/): Malicious code in megaplex (npm) (malicious package)
- [MAL-2025-26154](https://insights.sbomify.com/MAL-2025-26154/): Malicious code in megabrain (npm) (malicious package)
- [MAL-2025-26153](https://insights.sbomify.com/MAL-2025-26153/): Malicious code in meetalkjs (npm) (malicious package)
- [MAL-2025-26152](https://insights.sbomify.com/MAL-2025-26152/): Malicious code in meepmpb (npm) (malicious package)
- [MAL-2025-26151](https://insights.sbomify.com/MAL-2025-26151/): Malicious code in meeneeme (npm) (malicious package)
- [MAL-2025-26150](https://insights.sbomify.com/MAL-2025-26150/): Malicious code in mee6-api (npm) (malicious package)
- [MAL-2025-2615](https://insights.sbomify.com/MAL-2025-2615/): Malicious code in creativehub (npm) (malicious package)
- [MAL-2025-26149](https://insights.sbomify.com/MAL-2025-26149/): Malicious code in medium-post (npm) (malicious package)
- [MAL-2025-26148](https://insights.sbomify.com/MAL-2025-26148/): Malicious code in medium-author (npm) (malicious package)
- [MAL-2025-26147](https://insights.sbomify.com/MAL-2025-26147/): Malicious code in mediknit (npm) (malicious package)
- [MAL-2025-26146](https://insights.sbomify.com/MAL-2025-26146/): Malicious code in medicare-raml (npm) (malicious package)
- [MAL-2025-26145](https://insights.sbomify.com/MAL-2025-26145/): Malicious code in mediaspy (npm) (malicious package)
- [MAL-2025-26144](https://insights.sbomify.com/MAL-2025-26144/): Malicious code in medial (npm) (malicious package)
- [MAL-2025-26143](https://insights.sbomify.com/MAL-2025-26143/): Malicious code in mediaelch (npm) (malicious package)
- [MAL-2025-26142](https://insights.sbomify.com/MAL-2025-26142/): Malicious code in media-table (npm) (malicious package)
- [MAL-2025-26141](https://insights.sbomify.com/MAL-2025-26141/): Malicious code in media-service (npm) (malicious package)
- [MAL-2025-26140](https://insights.sbomify.com/MAL-2025-26140/): Malicious code in media-evip-cordova (npm) (malicious package)
- [MAL-2025-2614](https://insights.sbomify.com/MAL-2025-2614/): Malicious code in brixcrypto (npm) (malicious package)
- [MAL-2025-26139](https://insights.sbomify.com/MAL-2025-26139/): Malicious code in medeo-iris (npm) (malicious package)
- [MAL-2025-26138](https://insights.sbomify.com/MAL-2025-26138/): Malicious code in medcon (npm) (malicious package)
- [MAL-2025-26137](https://insights.sbomify.com/MAL-2025-26137/): Malicious code in medallia-hipchat-notifier (npm) (malicious package)
- [MAL-2025-26136](https://insights.sbomify.com/MAL-2025-26136/): Malicious code in medallia-commons-web-node (npm) (malicious package)
- [MAL-2025-26135](https://insights.sbomify.com/MAL-2025-26135/): Malicious code in mecurial (npm) (malicious package)
- [MAL-2025-26134](https://insights.sbomify.com/MAL-2025-26134/): Malicious code in mechzone (npm) (malicious package)
- [MAL-2025-26133](https://insights.sbomify.com/MAL-2025-26133/): Malicious code in mechatronics-vega-schema-castor (npm) (malicious package)
- [MAL-2025-26132](https://insights.sbomify.com/MAL-2025-26132/): Malicious code in mechatronics-ophiuchus-loopback-auth0 (npm) (malicious package)
- [MAL-2025-26131](https://insights.sbomify.com/MAL-2025-26131/): Malicious code in mechatronics-leda-indus-biotechnology (npm) (malicious package)
- [MAL-2025-26130](https://insights.sbomify.com/MAL-2025-26130/): Malicious code in mechatronics-graphql-lepton-cryptography (npm) (malicious package)
- [MAL-2025-2613](https://insights.sbomify.com/MAL-2025-2613/): Malicious code in @wxplugin-types/wxf51d01cf670e28d3 (npm) (malicious package)
- [MAL-2025-26129](https://insights.sbomify.com/MAL-2025-26129/): Malicious code in mechatronics-figures-yildun-cosmicweb (npm) (malicious package)
- [MAL-2025-26128](https://insights.sbomify.com/MAL-2025-26128/): Malicious code in mecbwyzkatnlhoji (npm) (malicious package)
- [MAL-2025-26127](https://insights.sbomify.com/MAL-2025-26127/): Malicious code in mebuddie (npm) (malicious package)
- [MAL-2025-26126](https://insights.sbomify.com/MAL-2025-26126/): Malicious code in meaven (npm) (malicious package)
- [MAL-2025-26125](https://insights.sbomify.com/MAL-2025-26125/): Malicious code in measured-rails (npm) (malicious package)
- [MAL-2025-26124](https://insights.sbomify.com/MAL-2025-26124/): Malicious code in mearmnet (npm) (malicious package)
- [MAL-2025-26123](https://insights.sbomify.com/MAL-2025-26123/): Malicious code in mean_setup (npm) (malicious package)
- [MAL-2025-26122](https://insights.sbomify.com/MAL-2025-26122/): Malicious code in mean_npm (npm) (malicious package)
- [MAL-2025-26121](https://insights.sbomify.com/MAL-2025-26121/): Malicious code in mean-sso (npm) (malicious package)
- [MAL-2025-26120](https://insights.sbomify.com/MAL-2025-26120/): Malicious code in mealingua (npm) (malicious package)
- [MAL-2025-2612](https://insights.sbomify.com/MAL-2025-2612/): Malicious code in @mctursh/ui-builder (npm) (malicious package)
- [MAL-2025-26119](https://insights.sbomify.com/MAL-2025-26119/): Malicious code in meadow_zq3gv_gnid7_zodiac (npm) (malicious package)
- [MAL-2025-26118](https://insights.sbomify.com/MAL-2025-26118/): Malicious code in meadow_nd8bq_yvmd3_sanctuary (npm) (malicious package)
- [MAL-2025-26117](https://insights.sbomify.com/MAL-2025-26117/): Malicious code in meadow_n7um9_a6yxq_echo (npm) (malicious package)
- [MAL-2025-26116](https://insights.sbomify.com/MAL-2025-26116/): Malicious code in meadow_ixfr3_nshxf_valley (npm) (malicious package)
- [MAL-2025-26115](https://insights.sbomify.com/MAL-2025-26115/): Malicious code in meadow_hdl3d_63snx_wander (npm) (malicious package)
- [MAL-2025-26114](https://insights.sbomify.com/MAL-2025-26114/): Malicious code in meadow_dqlg7_klxrg_night (npm) (malicious package)
- [MAL-2025-26113](https://insights.sbomify.com/MAL-2025-26113/): Malicious code in meadow_ay5no_sk5zx_firefly (npm) (malicious package)
- [MAL-2025-26112](https://insights.sbomify.com/MAL-2025-26112/): Malicious code in meadow_3pso6_nbw3f_solstice (npm) (malicious package)
- [MAL-2025-26111](https://insights.sbomify.com/MAL-2025-26111/): Malicious code in meadow_2k3bb_1rgq6_xenon (npm) (malicious package)
- [MAL-2025-26110](https://insights.sbomify.com/MAL-2025-26110/): Malicious code in meadow-zebra-fjw238-project (npm) (malicious package)
- [MAL-2025-2611](https://insights.sbomify.com/MAL-2025-2611/): Malicious code in @agateh/solana-headless-core (npm) (malicious package)
- [MAL-2025-26109](https://insights.sbomify.com/MAL-2025-26109/): Malicious code in meadow-xanadu-pzr790-project (npm) (malicious package)
- [MAL-2025-26108](https://insights.sbomify.com/MAL-2025-26108/): Malicious code in meadow-whirlpool-yfm106-project (npm) (malicious package)
- [MAL-2025-26107](https://insights.sbomify.com/MAL-2025-26107/): Malicious code in meadow-waterfall-afh739-project (npm) (malicious package)
- [MAL-2025-26106](https://insights.sbomify.com/MAL-2025-26106/): Malicious code in meadow-vulture-mod304-project (npm) (malicious package)
- [MAL-2025-26105](https://insights.sbomify.com/MAL-2025-26105/): Malicious code in meadow-volcano-snc198-project (npm) (malicious package)
- [MAL-2025-26104](https://insights.sbomify.com/MAL-2025-26104/): Malicious code in meadow-vine-qak902-project (npm) (malicious package)
- [MAL-2025-26103](https://insights.sbomify.com/MAL-2025-26103/): Malicious code in meadow-tundra-nbb869-project (npm) (malicious package)
- [MAL-2025-26102](https://insights.sbomify.com/MAL-2025-26102/): Malicious code in meadow-tulip-sjd715-project (npm) (malicious package)
- [MAL-2025-26101](https://insights.sbomify.com/MAL-2025-26101/): Malicious code in meadow-thistle-tfd987-project (npm) (malicious package)
- [MAL-2025-26100](https://insights.sbomify.com/MAL-2025-26100/): Malicious code in meadow-star-jit666-project (npm) (malicious package)
- [MAL-2025-2610](https://insights.sbomify.com/MAL-2025-2610/): Malicious code in @agateh/solana-headless-adapter-base (npm) (malicious package)
- [MAL-2025-261](https://insights.sbomify.com/MAL-2025-261/): Malicious code in woocommerce-gateway-plisio (npm) (malicious package)
- [MAL-2025-26099](https://insights.sbomify.com/MAL-2025-26099/): Malicious code in meadow-savanna-zvs182-project (npm) (malicious package)
- [MAL-2025-26098](https://insights.sbomify.com/MAL-2025-26098/): Malicious code in meadow-savanna-fuj821-project (npm) (malicious package)
- [MAL-2025-26097](https://insights.sbomify.com/MAL-2025-26097/): Malicious code in meadow-reef-kta838-project (npm) (malicious package)
- [MAL-2025-26096](https://insights.sbomify.com/MAL-2025-26096/): Malicious code in meadow-reef-krr789-project (npm) (malicious package)
- [MAL-2025-26095](https://insights.sbomify.com/MAL-2025-26095/): Malicious code in meadow-q3qsb-ie1yv-jungle-project (npm) (malicious package)
- [MAL-2025-26094](https://insights.sbomify.com/MAL-2025-26094/): Malicious code in meadow-pkubg-0wd2k-orbit-project (npm) (malicious package)
- [MAL-2025-26093](https://insights.sbomify.com/MAL-2025-26093/): Malicious code in meadow-opal-nkr614-project (npm) (malicious package)
- [MAL-2025-26092](https://insights.sbomify.com/MAL-2025-26092/): Malicious code in meadow-mist-tmh662-project (npm) (malicious package)
- [MAL-2025-26091](https://insights.sbomify.com/MAL-2025-26091/): Malicious code in meadow-kms4q-5grfa-glow-project (npm) (malicious package)
- [MAL-2025-26090](https://insights.sbomify.com/MAL-2025-26090/): Malicious code in meadow-jewel-pwx855-project (npm) (malicious package)
- [MAL-2025-2609](https://insights.sbomify.com/MAL-2025-2609/): Malicious code in eclipse-tractusx-github-io (npm) (malicious package)
- [MAL-2025-26089](https://insights.sbomify.com/MAL-2025-26089/): Malicious code in meadow-jasmine-voy757-project (npm) (malicious package)
- [MAL-2025-26088](https://insights.sbomify.com/MAL-2025-26088/): Malicious code in meadow-jade-itv082-project (npm) (malicious package)
- [MAL-2025-26087](https://insights.sbomify.com/MAL-2025-26087/): Malicious code in meadow-gu9v1-qvqdt-pinnacle-project (npm) (malicious package)
- [MAL-2025-26086](https://insights.sbomify.com/MAL-2025-26086/): Malicious code in meadow-glacier-xfw618-project (npm) (malicious package)
- [MAL-2025-26085](https://insights.sbomify.com/MAL-2025-26085/): Malicious code in meadow-flourish-ipr857-project (npm) (malicious package)
- [MAL-2025-26084](https://insights.sbomify.com/MAL-2025-26084/): Malicious code in meadow-fhdnd-h5cwg-ultra-project (npm) (malicious package)
- [MAL-2025-26083](https://insights.sbomify.com/MAL-2025-26083/): Malicious code in meadow-fern-yhn799-project (npm) (malicious package)
- [MAL-2025-26082](https://insights.sbomify.com/MAL-2025-26082/): Malicious code in meadow-elephant-anm936-project (npm) (malicious package)
- [MAL-2025-26081](https://insights.sbomify.com/MAL-2025-26081/): Malicious code in meadow-atdta-u7toq-zenith-project (npm) (malicious package)
- [MAL-2025-26080](https://insights.sbomify.com/MAL-2025-26080/): Malicious code in meadow-742al-8bjo6-ultra-project (npm) (malicious package)
- [MAL-2025-2608](https://insights.sbomify.com/MAL-2025-2608/): Malicious code in ccfk (npm) (malicious package)
- [MAL-2025-26079](https://insights.sbomify.com/MAL-2025-26079/): Malicious code in meadow-6fvu8-ypn8o-flame-project (npm) (malicious package)
- [MAL-2025-26078](https://insights.sbomify.com/MAL-2025-26078/): Malicious code in meadow-5vvbh-1bjos-essence-project (npm) (malicious package)
- [MAL-2025-26077](https://insights.sbomify.com/MAL-2025-26077/): Malicious code in meadow-4kknh-dnx05-unity-project (npm) (malicious package)
- [MAL-2025-26076](https://insights.sbomify.com/MAL-2025-26076/): Malicious code in meadow-37xo2-a20lw-dew-project (npm) (malicious package)
- [MAL-2025-26075](https://insights.sbomify.com/MAL-2025-26075/): Malicious code in mdx-oauth-google-quark (npm) (malicious package)
- [MAL-2025-26074](https://insights.sbomify.com/MAL-2025-26074/): Malicious code in mdx-geckodriver-cypress-levels (npm) (malicious package)
- [MAL-2025-26073](https://insights.sbomify.com/MAL-2025-26073/): Malicious code in mdx-async-markdown-pdf-kardashevscale (npm) (malicious package)
- [MAL-2025-26072](https://insights.sbomify.com/MAL-2025-26072/): Malicious code in mdueoc (npm) (malicious package)
- [MAL-2025-26071](https://insights.sbomify.com/MAL-2025-26071/): Malicious code in mdscripts (npm) (malicious package)
- [MAL-2025-26070](https://insights.sbomify.com/MAL-2025-26070/): Malicious code in mdrepo (npm) (malicious package)
- [MAL-2025-2607](https://insights.sbomify.com/MAL-2025-2607/): Malicious code in gh-find-current-pr (npm) (malicious package)
- [MAL-2025-26069](https://insights.sbomify.com/MAL-2025-26069/): Malicious code in mdrclienter (npm) (malicious package)
- [MAL-2025-26068](https://insights.sbomify.com/MAL-2025-26068/): Malicious code in mdrclient (npm) (malicious package)
- [MAL-2025-26067](https://insights.sbomify.com/MAL-2025-26067/): Malicious code in mdqrapp (npm) (malicious package)
- [MAL-2025-26066](https://insights.sbomify.com/MAL-2025-26066/): Malicious code in mdiallo (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/823/