# Vulnerabilities published in 2025


- [MAL-2025-25976](https://insights.sbomify.com/MAL-2025-25976/): Malicious code in marvelmap (npm) (malicious package)
- [MAL-2025-25975](https://insights.sbomify.com/MAL-2025-25975/): Malicious code in marufrana (npm) (malicious package)
- [MAL-2025-25974](https://insights.sbomify.com/MAL-2025-25974/): Malicious code in marudor-hazelcast-client (npm) (malicious package)
- [MAL-2025-25973](https://insights.sbomify.com/MAL-2025-25973/): Malicious code in martillo (npm) (malicious package)
- [MAL-2025-25972](https://insights.sbomify.com/MAL-2025-25972/): Malicious code in martaio (npm) (malicious package)
- [MAL-2025-25971](https://insights.sbomify.com/MAL-2025-25971/): Malicious code in marstons (npm) (malicious package)
- [MAL-2025-25970](https://insights.sbomify.com/MAL-2025-25970/): Malicious code in marquez (npm) (malicious package)
- [MAL-2025-2597](https://insights.sbomify.com/MAL-2025-2597/): Malicious code in blackspammerbd1 (PyPI) (malicious package)
- [MAL-2025-25969](https://insights.sbomify.com/MAL-2025-25969/): Malicious code in marooon (npm) (malicious package)
- [MAL-2025-25968](https://insights.sbomify.com/MAL-2025-25968/): Malicious code in marmik1a (npm) (malicious package)
- [MAL-2025-25967](https://insights.sbomify.com/MAL-2025-25967/): Malicious code in marmik (npm) (malicious package)
- [MAL-2025-25966](https://insights.sbomify.com/MAL-2025-25966/): Malicious code in marley-plugin-router (npm) (malicious package)
- [MAL-2025-25965](https://insights.sbomify.com/MAL-2025-25965/): Malicious code in marley-plugin-express (npm) (malicious package)
- [MAL-2025-25964](https://insights.sbomify.com/MAL-2025-25964/): Malicious code in marley-plugin-core (npm) (malicious package)
- [MAL-2025-25963](https://insights.sbomify.com/MAL-2025-25963/): Malicious code in marley-plugin (npm) (malicious package)
- [MAL-2025-25962](https://insights.sbomify.com/MAL-2025-25962/): Malicious code in marley-logger (npm) (malicious package)
- [MAL-2025-25961](https://insights.sbomify.com/MAL-2025-25961/): Malicious code in marley-cli (npm) (malicious package)
- [MAL-2025-25960](https://insights.sbomify.com/MAL-2025-25960/): Malicious code in marley (npm) (malicious package)
- [MAL-2025-2596](https://insights.sbomify.com/MAL-2025-2596/): Malicious code in blackspammerbd-v1 (PyPI) (malicious package)
- [MAL-2025-25959](https://insights.sbomify.com/MAL-2025-25959/): Malicious code in markus-oberlehner-net (npm) (malicious package)
- [MAL-2025-25958](https://insights.sbomify.com/MAL-2025-25958/): Malicious code in markup-web-editor (npm) (malicious package)
- [MAL-2025-25957](https://insights.sbomify.com/MAL-2025-25957/): Malicious code in markpond (npm) (malicious package)
- [MAL-2025-25956](https://insights.sbomify.com/MAL-2025-25956/): Malicious code in markplewis-eyeglass-module (npm) (malicious package)
- [MAL-2025-25955](https://insights.sbomify.com/MAL-2025-25955/): Malicious code in marklogic-af-test-20220718 (npm) (malicious package)
- [MAL-2025-25954](https://insights.sbomify.com/MAL-2025-25954/): Malicious code in markjosh (npm) (malicious package)
- [MAL-2025-25953](https://insights.sbomify.com/MAL-2025-25953/): Malicious code in marketing_extension_schemas (npm) (malicious package)
- [MAL-2025-25952](https://insights.sbomify.com/MAL-2025-25952/): Malicious code in marketing_assets_theme (npm) (malicious package)
- [MAL-2025-25951](https://insights.sbomify.com/MAL-2025-25951/): Malicious code in marketing_assets_essentials (npm) (malicious package)
- [MAL-2025-25950](https://insights.sbomify.com/MAL-2025-25950/): Malicious code in marketing_assets (npm) (malicious package)
- [MAL-2025-2595](https://insights.sbomify.com/MAL-2025-2595/): Malicious code in blackspammerbd-tools (PyPI) (malicious package)
- [MAL-2025-25949](https://insights.sbomify.com/MAL-2025-25949/): Malicious code in markdownlint-spectroscopy-wasat-start (npm) (malicious package)
- [MAL-2025-25948](https://insights.sbomify.com/MAL-2025-25948/): Malicious code in markdownlint-castor-betelgeuse-miranda (npm) (malicious package)
- [MAL-2025-25947](https://insights.sbomify.com/MAL-2025-25947/): Malicious code in markdown-subscription-achernar-glaciology (npm) (malicious package)
- [MAL-2025-25946](https://insights.sbomify.com/MAL-2025-25946/): Malicious code in markdown-pdf-sedna-markdown-pdf-module (npm) (malicious package)
- [MAL-2025-25945](https://insights.sbomify.com/MAL-2025-25945/): Malicious code in markdown-pdf-package-seismology-prettier (npm) (malicious package)
- [MAL-2025-25944](https://insights.sbomify.com/MAL-2025-25944/): Malicious code in markdown-pdf-ganymede-archaeometry-warp (npm) (malicious package)
- [MAL-2025-25943](https://insights.sbomify.com/MAL-2025-25943/): Malicious code in markdown-pdf-fermiparadox-eigenstate-quark (npm) (malicious package)
- [MAL-2025-25942](https://insights.sbomify.com/MAL-2025-25942/): Malicious code in markdown-pdf-enceladus-registry-orbit (npm) (malicious package)
- [MAL-2025-25941](https://insights.sbomify.com/MAL-2025-25941/): Malicious code in markdown-meissa-optimize-css-assets-webpack-plugin-odin (npm) (malicious package)
- [MAL-2025-25940](https://insights.sbomify.com/MAL-2025-25940/): Malicious code in markdown-magnetar-neptune-ichnology (npm) (malicious package)
- [MAL-2025-2594](https://insights.sbomify.com/MAL-2025-2594/): Malicious code in blackspammerbd-tooll (PyPI) (malicious package)
- [MAL-2025-25939](https://insights.sbomify.com/MAL-2025-25939/): Malicious code in markdown-izar-blazar-halley (npm) (malicious package)
- [MAL-2025-25938](https://insights.sbomify.com/MAL-2025-25938/): Malicious code in markdown-it-embed (npm) (malicious package)
- [MAL-2025-25937](https://insights.sbomify.com/MAL-2025-25937/): Malicious code in markdown-ethology-javascript-despina (npm) (malicious package)
- [MAL-2025-25936](https://insights.sbomify.com/MAL-2025-25936/): Malicious code in mariya (npm) (malicious package)
- [MAL-2025-25935](https://insights.sbomify.com/MAL-2025-25935/): Malicious code in marin.petrov1988-frame-print (npm) (malicious package)
- [MAL-2025-25934](https://insights.sbomify.com/MAL-2025-25934/): Malicious code in maribor (npm) (malicious package)
- [MAL-2025-25933](https://insights.sbomify.com/MAL-2025-25933/): Malicious code in margele (npm) (malicious package)
- [MAL-2025-25932](https://insights.sbomify.com/MAL-2025-25932/): Malicious code in maranate (npm) (malicious package)
- [MAL-2025-25931](https://insights.sbomify.com/MAL-2025-25931/): Malicious code in maquinita (npm) (malicious package)
- [MAL-2025-25930](https://insights.sbomify.com/MAL-2025-25930/): Malicious code in maptry (npm) (malicious package)
- [MAL-2025-2593](https://insights.sbomify.com/MAL-2025-2593/): Malicious code in blackspammerbd-tool (PyPI) (malicious package)
- [MAL-2025-25929](https://insights.sbomify.com/MAL-2025-25929/): Malicious code in mapsnap (npm) (malicious package)
- [MAL-2025-25928](https://insights.sbomify.com/MAL-2025-25928/): Malicious code in mapptus (npm) (malicious package)
- [MAL-2025-25927](https://insights.sbomify.com/MAL-2025-25927/): Malicious code in maplink-geocoder (npm) (malicious package)
- [MAL-2025-25926](https://insights.sbomify.com/MAL-2025-25926/): Malicious code in maple_zf3vh_qhayi_ivy (npm) (malicious package)
- [MAL-2025-25925](https://insights.sbomify.com/MAL-2025-25925/): Malicious code in maple_tj2ef_oh6ln_illusion (npm) (malicious package)
- [MAL-2025-25924](https://insights.sbomify.com/MAL-2025-25924/): Malicious code in maple_nm44l_w6j8t_keystone (npm) (malicious package)
- [MAL-2025-25923](https://insights.sbomify.com/MAL-2025-25923/): Malicious code in maple_lh1uo_v3mem_utopia (npm) (malicious package)
- [MAL-2025-25922](https://insights.sbomify.com/MAL-2025-25922/): Malicious code in maple_auxg6_g3cje_xanadu (npm) (malicious package)
- [MAL-2025-25921](https://insights.sbomify.com/MAL-2025-25921/): Malicious code in maple_6v6bm_cw6n0_twilight (npm) (malicious package)
- [MAL-2025-25920](https://insights.sbomify.com/MAL-2025-25920/): Malicious code in maple-tango-f2gk (npm) (malicious package)
- [MAL-2025-2592](https://insights.sbomify.com/MAL-2025-2592/): Malicious code in blackspammerbd-tg (PyPI) (malicious package)
- [MAL-2025-25919](https://insights.sbomify.com/MAL-2025-25919/): Malicious code in maple-redwood-580h (npm) (malicious package)
- [MAL-2025-25918](https://insights.sbomify.com/MAL-2025-25918/): Malicious code in maple-parsnip-k62h (npm) (malicious package)
- [MAL-2025-25917](https://insights.sbomify.com/MAL-2025-25917/): Malicious code in maple-oak-8iuj (npm) (malicious package)
- [MAL-2025-25916](https://insights.sbomify.com/MAL-2025-25916/): Malicious code in maple-nutmeg-92ww (npm) (malicious package)
- [MAL-2025-25915](https://insights.sbomify.com/MAL-2025-25915/): Malicious code in maple-larch-s5ws (npm) (malicious package)
- [MAL-2025-25914](https://insights.sbomify.com/MAL-2025-25914/): Malicious code in maple-juniper-8is5 (npm) (malicious package)
- [MAL-2025-25913](https://insights.sbomify.com/MAL-2025-25913/): Malicious code in mapinfo (npm) (malicious package)
- [MAL-2025-25912](https://insights.sbomify.com/MAL-2025-25912/): Malicious code in mapbox-studio (npm) (malicious package)
- [MAL-2025-25911](https://insights.sbomify.com/MAL-2025-25911/): Malicious code in mapbox-streets-source (npm) (malicious package)
- [MAL-2025-25910](https://insights.sbomify.com/MAL-2025-25910/): Malicious code in map-project (npm) (malicious package)
- [MAL-2025-2591](https://insights.sbomify.com/MAL-2025-2591/): Malicious code in blackspammerbd-remot1 (PyPI) (malicious package)
- [MAL-2025-25909](https://insights.sbomify.com/MAL-2025-25909/): Malicious code in map-mdb (npm) (malicious package)
- [MAL-2025-25908](https://insights.sbomify.com/MAL-2025-25908/): Malicious code in map-driver-eta (npm) (malicious package)
- [MAL-2025-25907](https://insights.sbomify.com/MAL-2025-25907/): Malicious code in map-core (npm) (malicious package)
- [MAL-2025-25906](https://insights.sbomify.com/MAL-2025-25906/): Malicious code in manyvis (npm) (malicious package)
- [MAL-2025-25905](https://insights.sbomify.com/MAL-2025-25905/): Malicious code in manucon (npm) (malicious package)
- [MAL-2025-25904](https://insights.sbomify.com/MAL-2025-25904/): Malicious code in mantle-reveal-md-hugo-solarnebula (npm) (malicious package)
- [MAL-2025-25903](https://insights.sbomify.com/MAL-2025-25903/): Malicious code in mantle-paleoceanography-mira-auth0 (npm) (malicious package)
- [MAL-2025-25902](https://insights.sbomify.com/MAL-2025-25902/): Malicious code in mantle-hydrogeology-pavo-nanotechnology (npm) (malicious package)
- [MAL-2025-25901](https://insights.sbomify.com/MAL-2025-25901/): Malicious code in mantle-async-nebula-postgres (npm) (malicious package)
- [MAL-2025-25900](https://insights.sbomify.com/MAL-2025-25900/): Malicious code in mantheon (npm) (malicious package)
- [MAL-2025-2590](https://insights.sbomify.com/MAL-2025-2590/): Malicious code in blackspammerbd-remot (PyPI) (malicious package)
- [MAL-2025-259](https://insights.sbomify.com/MAL-2025-259/): Malicious code in wc-skroutz-analytics (npm) (malicious package)
- [MAL-2025-25899](https://insights.sbomify.com/MAL-2025-25899/): Malicious code in mansourez (npm) (malicious package)
- [MAL-2025-25898](https://insights.sbomify.com/MAL-2025-25898/): Malicious code in manojmath (npm) (malicious package)
- [MAL-2025-25897](https://insights.sbomify.com/MAL-2025-25897/): Malicious code in manojdemo (npm) (malicious package)
- [MAL-2025-25896](https://insights.sbomify.com/MAL-2025-25896/): Malicious code in manitza (npm) (malicious package)
- [MAL-2025-25895](https://insights.sbomify.com/MAL-2025-25895/): Malicious code in manifold-website (npm) (malicious package)
- [MAL-2025-25894](https://insights.sbomify.com/MAL-2025-25894/): Malicious code in mangujs (npm) (malicious package)
- [MAL-2025-25893](https://insights.sbomify.com/MAL-2025-25893/): Malicious code in mangrove-xylophone-ijv279-project (npm) (malicious package)
- [MAL-2025-25892](https://insights.sbomify.com/MAL-2025-25892/): Malicious code in mangrove-wisp-xpi276-project (npm) (malicious package)
- [MAL-2025-25891](https://insights.sbomify.com/MAL-2025-25891/): Malicious code in mangrove-river-cyp827-project (npm) (malicious package)
- [MAL-2025-25890](https://insights.sbomify.com/MAL-2025-25890/): Malicious code in mangrove-quartz-pxt686-project (npm) (malicious package)
- [MAL-2025-2589](https://insights.sbomify.com/MAL-2025-2589/): Malicious code in blackspammerbd-one (PyPI) (malicious package)
- [MAL-2025-25889](https://insights.sbomify.com/MAL-2025-25889/): Malicious code in mangrove-quagmire-wei991-project (npm) (malicious package)
- [MAL-2025-25888](https://insights.sbomify.com/MAL-2025-25888/): Malicious code in mangrove-moon-peo861-project (npm) (malicious package)
- [MAL-2025-25887](https://insights.sbomify.com/MAL-2025-25887/): Malicious code in mangrove-kaleidoscope-gpo569-project (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/825/