# Vulnerabilities published in 2025 - [MAL-2025-26065](https://insights.sbomify.com/MAL-2025-26065/): Malicious code in mdhindsa (npm) (malicious package) - [MAL-2025-26064](https://insights.sbomify.com/MAL-2025-26064/): Malicious code in mdevcon (npm) (malicious package) - [MAL-2025-26063](https://insights.sbomify.com/MAL-2025-26063/): Malicious code in mdba (npm) (malicious package) - [MAL-2025-26062](https://insights.sbomify.com/MAL-2025-26062/): Malicious code in mdb-angular2 (npm) (malicious package) - [MAL-2025-26061](https://insights.sbomify.com/MAL-2025-26061/): Malicious code in mcwcasinoonline (npm) (malicious package) - [MAL-2025-26060](https://insights.sbomify.com/MAL-2025-26060/): Malicious code in mcwcasino2025 (npm) (malicious package) - [MAL-2025-2606](https://insights.sbomify.com/MAL-2025-2606/): Malicious code in tec-registry (npm) (malicious package) - [MAL-2025-26059](https://insights.sbomify.com/MAL-2025-26059/): Malicious code in mcucomm (npm) (malicious package) - [MAL-2025-26058](https://insights.sbomify.com/MAL-2025-26058/): Malicious code in mcrepos (npm) (malicious package) - [MAL-2025-26057](https://insights.sbomify.com/MAL-2025-26057/): Malicious code in mcpx (npm) (malicious package) - [MAL-2025-26056](https://insights.sbomify.com/MAL-2025-26056/): Malicious code in mcptest-win32-x64 (npm) (malicious package) - [MAL-2025-26055](https://insights.sbomify.com/MAL-2025-26055/): Malicious code in mcproject (npm) (malicious package) - [MAL-2025-26054](https://insights.sbomify.com/MAL-2025-26054/): Malicious code in mcp-opencage-server (npm) (malicious package) - [MAL-2025-26053](https://insights.sbomify.com/MAL-2025-26053/): Malicious code in mcp-menu (npm) (malicious package) - [MAL-2025-26052](https://insights.sbomify.com/MAL-2025-26052/): Malicious code in mcmanager (npm) (malicious package) - [MAL-2025-26051](https://insights.sbomify.com/MAL-2025-26051/): Malicious code in mchecker (npm) (malicious package) - [MAL-2025-26050](https://insights.sbomify.com/MAL-2025-26050/): Malicious code in mccserv (npm) (malicious package) - [MAL-2025-2605](https://insights.sbomify.com/MAL-2025-2605/): Malicious code in lwc-recipes (npm) (malicious package) - [MAL-2025-26049](https://insights.sbomify.com/MAL-2025-26049/): Malicious code in mccportal (npm) (malicious package) - [MAL-2025-26048](https://insights.sbomify.com/MAL-2025-26048/): Malicious code in mccoll (npm) (malicious package) - [MAL-2025-26047](https://insights.sbomify.com/MAL-2025-26047/): Malicious code in mcasino (npm) (malicious package) - [MAL-2025-26046](https://insights.sbomify.com/MAL-2025-26046/): Malicious code in mcadvert (npm) (malicious package) - [MAL-2025-26045](https://insights.sbomify.com/MAL-2025-26045/): Malicious code in mca-product-type-utils (npm) (malicious package) - [MAL-2025-26044](https://insights.sbomify.com/MAL-2025-26044/): Malicious code in mbtweet (npm) (malicious package) - [MAL-2025-26043](https://insights.sbomify.com/MAL-2025-26043/): Malicious code in mbrooker (npm) (malicious package) - [MAL-2025-26042](https://insights.sbomify.com/MAL-2025-26042/): Malicious code in mboxxx (npm) (malicious package) - [MAL-2025-26041](https://insights.sbomify.com/MAL-2025-26041/): Malicious code in mbltdev (npm) (malicious package) - [MAL-2025-26040](https://insights.sbomify.com/MAL-2025-26040/): Malicious code in mblockly-sensorium (npm) (malicious package) - [MAL-2025-2604](https://insights.sbomify.com/MAL-2025-2604/): Malicious code in tree-sitter-erlang (npm) (malicious package) - [MAL-2025-26039](https://insights.sbomify.com/MAL-2025-26039/): Malicious code in mbasic (npm) (malicious package) - [MAL-2025-26038](https://insights.sbomify.com/MAL-2025-26038/): Malicious code in mb-auth (npm) (malicious package) - [MAL-2025-26037](https://insights.sbomify.com/MAL-2025-26037/): Malicious code in mazular (npm) (malicious package) - [MAL-2025-26036](https://insights.sbomify.com/MAL-2025-26036/): Malicious code in mazerpg (npm) (malicious package) - [MAL-2025-26035](https://insights.sbomify.com/MAL-2025-26035/): Malicious code in mazayaweb (npm) (malicious package) - [MAL-2025-26034](https://insights.sbomify.com/MAL-2025-26034/): Malicious code in mayowish (npm) (malicious package) - [MAL-2025-26033](https://insights.sbomify.com/MAL-2025-26033/): Malicious code in maybemaliciouspackage (npm) (malicious package) - [MAL-2025-26032](https://insights.sbomify.com/MAL-2025-26032/): Malicious code in mayapbrt (npm) (malicious package) - [MAL-2025-26031](https://insights.sbomify.com/MAL-2025-26031/): Malicious code in mayacui (npm) (malicious package) - [MAL-2025-26030](https://insights.sbomify.com/MAL-2025-26030/): Malicious code in maya-saguer55-breki (npm) (malicious package) - [MAL-2025-2603](https://insights.sbomify.com/MAL-2025-2603/): Malicious code in architecture-viewer (npm) (malicious package) - [MAL-2025-26029](https://insights.sbomify.com/MAL-2025-26029/): Malicious code in maya-klipo96-sukiwir (npm) (malicious package) - [MAL-2025-26028](https://insights.sbomify.com/MAL-2025-26028/): Malicious code in maya-gorengan19-breki (npm) (malicious package) - [MAL-2025-26027](https://insights.sbomify.com/MAL-2025-26027/): Malicious code in maxwidth (npm) (malicious package) - [MAL-2025-26026](https://insights.sbomify.com/MAL-2025-26026/): Malicious code in maxuxo (npm) (malicious package) - [MAL-2025-26025](https://insights.sbomify.com/MAL-2025-26025/): Malicious code in maxlibs (npm) (malicious package) - [MAL-2025-26024](https://insights.sbomify.com/MAL-2025-26024/): Malicious code in MAXIMjs (npm) (malicious package) - [MAL-2025-26023](https://insights.sbomify.com/MAL-2025-26023/): Malicious code in maxgittry (npm) (malicious package) - [MAL-2025-26022](https://insights.sbomify.com/MAL-2025-26022/): Malicious code in maxclient (npm) (malicious package) - [MAL-2025-26021](https://insights.sbomify.com/MAL-2025-26021/): Malicious code in mawithmt (npm) (malicious package) - [MAL-2025-26020](https://insights.sbomify.com/MAL-2025-26020/): Malicious code in maven-deps (npm) (malicious package) - [MAL-2025-2602](https://insights.sbomify.com/MAL-2025-2602/): Malicious code in connector-bsb (PyPI) (malicious package) - [MAL-2025-26019](https://insights.sbomify.com/MAL-2025-26019/): Malicious code in maukau (npm) (malicious package) - [MAL-2025-26018](https://insights.sbomify.com/MAL-2025-26018/): Malicious code in matthaeus (npm) (malicious package) - [MAL-2025-26017](https://insights.sbomify.com/MAL-2025-26017/): Malicious code in matrixc (npm) (malicious package) - [MAL-2025-26016](https://insights.sbomify.com/MAL-2025-26016/): Malicious code in matrics (npm) (malicious package) - [MAL-2025-26015](https://insights.sbomify.com/MAL-2025-26015/): Malicious code in matplot (npm) (malicious package) - [MAL-2025-26014](https://insights.sbomify.com/MAL-2025-26014/): Malicious code in matnara (npm) (malicious package) - [MAL-2025-26013](https://insights.sbomify.com/MAL-2025-26013/): Malicious code in matinas (npm) (malicious package) - [MAL-2025-26012](https://insights.sbomify.com/MAL-2025-26012/): Malicious code in matic-snaps (npm) (malicious package) - [MAL-2025-26011](https://insights.sbomify.com/MAL-2025-26011/): Malicious code in matic-root-subgraphs (npm) (malicious package) - [MAL-2025-26010](https://insights.sbomify.com/MAL-2025-26010/): Malicious code in mathi-test-npm (npm) (malicious package) - [MAL-2025-2601](https://insights.sbomify.com/MAL-2025-2601/): Malicious code in bsb-family-pack2 (PyPI) (malicious package) - [MAL-2025-26009](https://insights.sbomify.com/MAL-2025-26009/): Malicious code in mathi-sf-npm (npm) (malicious package) - [MAL-2025-26008](https://insights.sbomify.com/MAL-2025-26008/): Malicious code in mathais (npm) (malicious package) - [MAL-2025-26007](https://insights.sbomify.com/MAL-2025-26007/): Malicious code in math_example113 (npm) (malicious package) - [MAL-2025-26006](https://insights.sbomify.com/MAL-2025-26006/): Malicious code in Math (npm) (malicious package) - [MAL-2025-26005](https://insights.sbomify.com/MAL-2025-26005/): Malicious code in materov (npm) (malicious package) - [MAL-2025-26004](https://insights.sbomify.com/MAL-2025-26004/): Malicious code in materially (npm) (malicious package) - [MAL-2025-26003](https://insights.sbomify.com/MAL-2025-26003/): Malicious code in materialjs (npm) (malicious package) - [MAL-2025-26002](https://insights.sbomify.com/MAL-2025-26002/): Malicious code in materialize-inflation-graviton-on (npm) (malicious package) - [MAL-2025-26001](https://insights.sbomify.com/MAL-2025-26001/): Malicious code in materialize-europa-forever-dependencies (npm) (malicious package) - [MAL-2025-26000](https://insights.sbomify.com/MAL-2025-26000/): Malicious code in materialize-dendrochronology-atlas-technocracy (npm) (malicious package) - [MAL-2025-2600](https://insights.sbomify.com/MAL-2025-2600/): Malicious code in bsb-family-pack (PyPI) (malicious package) - [MAL-2025-260](https://insights.sbomify.com/MAL-2025-260/): Malicious code in webpack-next (npm) (malicious package) - [MAL-2025-26](https://insights.sbomify.com/MAL-2025-26/): Malicious code in @patternfly-v5/patternfly (npm) (malicious package) - [MAL-2025-25999](https://insights.sbomify.com/MAL-2025-25999/): Malicious code in materialize-archaeoastronomy-io-test (npm) (malicious package) - [MAL-2025-25998](https://insights.sbomify.com/MAL-2025-25998/): Malicious code in material-test (npm) (malicious package) - [MAL-2025-25997](https://insights.sbomify.com/MAL-2025-25997/): Malicious code in material-blend (npm) (malicious package) - [MAL-2025-25996](https://insights.sbomify.com/MAL-2025-25996/): Malicious code in matches-dom-selector (npm) (malicious package) - [MAL-2025-25995](https://insights.sbomify.com/MAL-2025-25995/): Malicious code in match-master-new588 (npm) (malicious package) - [MAL-2025-25994](https://insights.sbomify.com/MAL-2025-25994/): Malicious code in matayoshi (npm) (malicious package) - [MAL-2025-25993](https://insights.sbomify.com/MAL-2025-25993/): Malicious code in mastime (npm) (malicious package) - [MAL-2025-25992](https://insights.sbomify.com/MAL-2025-25992/): Malicious code in masthes (npm) (malicious package) - [MAL-2025-25991](https://insights.sbomify.com/MAL-2025-25991/): Malicious code in mastert (npm) (malicious package) - [MAL-2025-25990](https://insights.sbomify.com/MAL-2025-25990/): Malicious code in mastercard_ezaccess_for_issuers_api (npm) (malicious package) - [MAL-2025-2599](https://insights.sbomify.com/MAL-2025-2599/): Malicious code in bsb-family-bot (PyPI) (malicious package) - [MAL-2025-25989](https://insights.sbomify.com/MAL-2025-25989/): Malicious code in masqurade (npm) (malicious package) - [MAL-2025-25988](https://insights.sbomify.com/MAL-2025-25988/): Malicious code in masood2000_project10_oop (npm) (malicious package) - [MAL-2025-25987](https://insights.sbomify.com/MAL-2025-25987/): Malicious code in masomorfo (npm) (malicious package) - [MAL-2025-25986](https://insights.sbomify.com/MAL-2025-25986/): Malicious code in mashupfix (npm) (malicious package) - [MAL-2025-25985](https://insights.sbomify.com/MAL-2025-25985/): Malicious code in mashshare (npm) (malicious package) - [MAL-2025-25984](https://insights.sbomify.com/MAL-2025-25984/): Malicious code in mashrs (npm) (malicious package) - [MAL-2025-25983](https://insights.sbomify.com/MAL-2025-25983/): Malicious code in mashape-analytics (npm) (malicious package) - [MAL-2025-25982](https://insights.sbomify.com/MAL-2025-25982/): Malicious code in maseratti (npm) (malicious package) - [MAL-2025-25981](https://insights.sbomify.com/MAL-2025-25981/): Malicious code in maryland (npm) (malicious package) - [MAL-2025-25980](https://insights.sbomify.com/MAL-2025-25980/): Malicious code in marxieu (npm) (malicious package) - [MAL-2025-2598](https://insights.sbomify.com/MAL-2025-2598/): Malicious code in bsb-connector (PyPI) (malicious package) - [MAL-2025-25979](https://insights.sbomify.com/MAL-2025-25979/): Malicious code in marwood (npm) (malicious package) - [MAL-2025-25978](https://insights.sbomify.com/MAL-2025-25978/): Malicious code in marvin-nodejs-sdk (npm) (malicious package) - [MAL-2025-25977](https://insights.sbomify.com/MAL-2025-25977/): Malicious code in marvi-core (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/824/