# Vulnerabilities published in 2025 - [MAL-2025-25886](https://insights.sbomify.com/MAL-2025-25886/): Malicious code in mangrove-jewel-hdz629-project (npm) (malicious package) - [MAL-2025-25885](https://insights.sbomify.com/MAL-2025-25885/): Malicious code in mangrove-galaxy-kpd556-project (npm) (malicious package) - [MAL-2025-25884](https://insights.sbomify.com/MAL-2025-25884/): Malicious code in mangrove-dandelion-orb520-project (npm) (malicious package) - [MAL-2025-25883](https://insights.sbomify.com/MAL-2025-25883/): Malicious code in mangrove-crystal-oeh601-project (npm) (malicious package) - [MAL-2025-25882](https://insights.sbomify.com/MAL-2025-25882/): Malicious code in mangrove-cat-irm285-project (npm) (malicious package) - [MAL-2025-25881](https://insights.sbomify.com/MAL-2025-25881/): Malicious code in mangrove-blossom-sru662-project (npm) (malicious package) - [MAL-2025-25880](https://insights.sbomify.com/MAL-2025-25880/): Malicious code in mango-zulu-delta-xfryn (npm) (malicious package) - [MAL-2025-2588](https://insights.sbomify.com/MAL-2025-2588/): Malicious code in blackspammerbd-bsb (PyPI) (malicious package) - [MAL-2025-25879](https://insights.sbomify.com/MAL-2025-25879/): Malicious code in mango-zucchini-zbzj (npm) (malicious package) - [MAL-2025-25878](https://insights.sbomify.com/MAL-2025-25878/): Malicious code in mango-yfs-project (npm) (malicious package) - [MAL-2025-25877](https://insights.sbomify.com/MAL-2025-25877/): Malicious code in mango-yew-j76i (npm) (malicious package) - [MAL-2025-25876](https://insights.sbomify.com/MAL-2025-25876/): Malicious code in mango-yeb-project (npm) (malicious package) - [MAL-2025-25875](https://insights.sbomify.com/MAL-2025-25875/): Malicious code in mango-xkj-project (npm) (malicious package) - [MAL-2025-25874](https://insights.sbomify.com/MAL-2025-25874/): Malicious code in mango-wmu-project (npm) (malicious package) - [MAL-2025-25873](https://insights.sbomify.com/MAL-2025-25873/): Malicious code in mango-wasabi-qhd3 (npm) (malicious package) - [MAL-2025-25872](https://insights.sbomify.com/MAL-2025-25872/): Malicious code in mango-victor-xylb (npm) (malicious package) - [MAL-2025-25871](https://insights.sbomify.com/MAL-2025-25871/): Malicious code in mango-victor-lfyq (npm) (malicious package) - [MAL-2025-25870](https://insights.sbomify.com/MAL-2025-25870/): Malicious code in mango-vanilla-strawberry-vrojw (npm) (malicious package) - [MAL-2025-2587](https://insights.sbomify.com/MAL-2025-2587/): Malicious code in blackspammerbd-bot (PyPI) (malicious package) - [MAL-2025-25869](https://insights.sbomify.com/MAL-2025-25869/): Malicious code in mango-uniform-elgx (npm) (malicious package) - [MAL-2025-25868](https://insights.sbomify.com/MAL-2025-25868/): Malicious code in mango-uaz-project (npm) (malicious package) - [MAL-2025-25867](https://insights.sbomify.com/MAL-2025-25867/): Malicious code in mango-tangerine-golf-wazkc (npm) (malicious package) - [MAL-2025-25866](https://insights.sbomify.com/MAL-2025-25866/): Malicious code in mango-t29-project (npm) (malicious package) - [MAL-2025-25865](https://insights.sbomify.com/MAL-2025-25865/): Malicious code in mango-sierra-ehjd (npm) (malicious package) - [MAL-2025-25864](https://insights.sbomify.com/MAL-2025-25864/): Malicious code in mango-rqx-project (npm) (malicious package) - [MAL-2025-25863](https://insights.sbomify.com/MAL-2025-25863/): Malicious code in mango-romeo-qtpk (npm) (malicious package) - [MAL-2025-25862](https://insights.sbomify.com/MAL-2025-25862/): Malicious code in mango-raspberry-honeydew-fbhhz (npm) (malicious package) - [MAL-2025-25861](https://insights.sbomify.com/MAL-2025-25861/): Malicious code in mango-quince-qarn (npm) (malicious package) - [MAL-2025-25860](https://insights.sbomify.com/MAL-2025-25860/): Malicious code in mango-o78-project (npm) (malicious package) - [MAL-2025-2586](https://insights.sbomify.com/MAL-2025-2586/): Malicious code in blackspammerbd (PyPI) (malicious package) - [MAL-2025-25859](https://insights.sbomify.com/MAL-2025-25859/): Malicious code in mango-november-ohgb (npm) (malicious package) - [MAL-2025-25858](https://insights.sbomify.com/MAL-2025-25858/): Malicious code in mango-november-honeydew-bddyq (npm) (malicious package) - [MAL-2025-25857](https://insights.sbomify.com/MAL-2025-25857/): Malicious code in mango-november-bequ (npm) (malicious package) - [MAL-2025-25856](https://insights.sbomify.com/MAL-2025-25856/): Malicious code in mango-node (npm) (malicious package) - [MAL-2025-25855](https://insights.sbomify.com/MAL-2025-25855/): Malicious code in mango-mxn-project (npm) (malicious package) - [MAL-2025-25854](https://insights.sbomify.com/MAL-2025-25854/): Malicious code in mango-mike-kilo-zldbh (npm) (malicious package) - [MAL-2025-25853](https://insights.sbomify.com/MAL-2025-25853/): Malicious code in mango-mcs-project (npm) (malicious package) - [MAL-2025-25852](https://insights.sbomify.com/MAL-2025-25852/): Malicious code in mango-lion-30gs (npm) (malicious package) - [MAL-2025-25851](https://insights.sbomify.com/MAL-2025-25851/): Malicious code in mango-lima-wzan (npm) (malicious package) - [MAL-2025-25850](https://insights.sbomify.com/MAL-2025-25850/): Malicious code in mango-lemon-sfxg (npm) (malicious package) - [MAL-2025-2585](https://insights.sbomify.com/MAL-2025-2585/): Malicious code in vulnerable-dependency (npm) (malicious package) - [MAL-2025-25849](https://insights.sbomify.com/MAL-2025-25849/): Malicious code in mango-lemon-lima-iuixk (npm) (malicious package) - [MAL-2025-25848](https://insights.sbomify.com/MAL-2025-25848/): Malicious code in mango-kilo-zmit (npm) (malicious package) - [MAL-2025-25847](https://insights.sbomify.com/MAL-2025-25847/): Malicious code in mango-juliet-utzw (npm) (malicious package) - [MAL-2025-25846](https://insights.sbomify.com/MAL-2025-25846/): Malicious code in mango-juliet-banana-eilha (npm) (malicious package) - [MAL-2025-25845](https://insights.sbomify.com/MAL-2025-25845/): Malicious code in mango-jbe-project (npm) (malicious package) - [MAL-2025-25844](https://insights.sbomify.com/MAL-2025-25844/): Malicious code in mango-golf-nxiz (npm) (malicious package) - [MAL-2025-25843](https://insights.sbomify.com/MAL-2025-25843/): Malicious code in mango-golf-mwpi (npm) (malicious package) - [MAL-2025-25842](https://insights.sbomify.com/MAL-2025-25842/): Malicious code in mango-golf-lemon-aezga (npm) (malicious package) - [MAL-2025-25841](https://insights.sbomify.com/MAL-2025-25841/): Malicious code in mango-gkb-project (npm) (malicious package) - [MAL-2025-25840](https://insights.sbomify.com/MAL-2025-25840/): Malicious code in mango-fp2-project (npm) (malicious package) - [MAL-2025-2584](https://insights.sbomify.com/MAL-2025-2584/): Malicious code in vscode-typescript-next (npm) (malicious package) - [MAL-2025-25839](https://insights.sbomify.com/MAL-2025-25839/): Malicious code in mango-foxtrot-watermelon-sqhng (npm) (malicious package) - [MAL-2025-25838](https://insights.sbomify.com/MAL-2025-25838/): Malicious code in mango-foxtrot-watermelon-sajvt (npm) (malicious package) - [MAL-2025-25837](https://insights.sbomify.com/MAL-2025-25837/): Malicious code in mango-elderberry-wsvy (npm) (malicious package) - [MAL-2025-25836](https://insights.sbomify.com/MAL-2025-25836/): Malicious code in mango-elderberry-tangerine-gczlq (npm) (malicious package) - [MAL-2025-25835](https://insights.sbomify.com/MAL-2025-25835/): Malicious code in mango-elderberry-omje (npm) (malicious package) - [MAL-2025-25834](https://insights.sbomify.com/MAL-2025-25834/): Malicious code in mango-echo-yjlz (npm) (malicious package) - [MAL-2025-25833](https://insights.sbomify.com/MAL-2025-25833/): Malicious code in mango-e8w-project (npm) (malicious package) - [MAL-2025-25832](https://insights.sbomify.com/MAL-2025-25832/): Malicious code in mango-delta-yxrr (npm) (malicious package) - [MAL-2025-25831](https://insights.sbomify.com/MAL-2025-25831/): Malicious code in mango-date-hjjb (npm) (malicious package) - [MAL-2025-25830](https://insights.sbomify.com/MAL-2025-25830/): Malicious code in mango-bdt-project (npm) (malicious package) - [MAL-2025-2583](https://insights.sbomify.com/MAL-2025-2583/): Malicious code in typespec-java (npm) (malicious package) - [MAL-2025-25829](https://insights.sbomify.com/MAL-2025-25829/): Malicious code in mango-banana-ogmg (npm) (malicious package) - [MAL-2025-25828](https://insights.sbomify.com/MAL-2025-25828/): Malicious code in mango-9yi-project (npm) (malicious package) - [MAL-2025-25827](https://insights.sbomify.com/MAL-2025-25827/): Malicious code in mango-8wo-project (npm) (malicious package) - [MAL-2025-25826](https://insights.sbomify.com/MAL-2025-25826/): Malicious code in mango-84e-project (npm) (malicious package) - [MAL-2025-25825](https://insights.sbomify.com/MAL-2025-25825/): Malicious code in mango-5j4-project (npm) (malicious package) - [MAL-2025-25824](https://insights.sbomify.com/MAL-2025-25824/): Malicious code in mango-3h5-project (npm) (malicious package) - [MAL-2025-25823](https://insights.sbomify.com/MAL-2025-25823/): Malicious code in mango-30x-project (npm) (malicious package) - [MAL-2025-25822](https://insights.sbomify.com/MAL-2025-25822/): Malicious code in mango-1k2-project (npm) (malicious package) - [MAL-2025-25821](https://insights.sbomify.com/MAL-2025-25821/): Malicious code in manducare (npm) (malicious package) - [MAL-2025-25820](https://insights.sbomify.com/MAL-2025-25820/): Malicious code in manases (npm) (malicious package) - [MAL-2025-2582](https://insights.sbomify.com/MAL-2025-2582/): Malicious code in thiserror (npm) (malicious package) - [MAL-2025-25819](https://insights.sbomify.com/MAL-2025-25819/): Malicious code in manage-sky-id-container (npm) (malicious package) - [MAL-2025-25818](https://insights.sbomify.com/MAL-2025-25818/): Malicious code in manage-components (npm) (malicious package) - [MAL-2025-25817](https://insights.sbomify.com/MAL-2025-25817/): Malicious code in maman-sego68-breki (npm) (malicious package) - [MAL-2025-25816](https://insights.sbomify.com/MAL-2025-25816/): Malicious code in maman-mieayam86-sukiwir (npm) (malicious package) - [MAL-2025-25815](https://insights.sbomify.com/MAL-2025-25815/): Malicious code in maman-mieaceh78-kuki (npm) (malicious package) - [MAL-2025-25814](https://insights.sbomify.com/MAL-2025-25814/): Malicious code in maman-asinan90-breki (npm) (malicious package) - [MAL-2025-25813](https://insights.sbomify.com/MAL-2025-25813/): Malicious code in mamababy (npm) (malicious package) - [MAL-2025-25812](https://insights.sbomify.com/MAL-2025-25812/): Malicious code in maltest (npm) (malicious package) - [MAL-2025-25811](https://insights.sbomify.com/MAL-2025-25811/): Malicious code in malleusmalleusparmenidovparmenidov (npm) (malicious package) - [MAL-2025-25810](https://insights.sbomify.com/MAL-2025-25810/): Malicious code in mall-api (npm) (malicious package) - [MAL-2025-2581](https://insights.sbomify.com/MAL-2025-2581/): Malicious code in tfjs-backend-wasm (npm) (malicious package) - [MAL-2025-25809](https://insights.sbomify.com/MAL-2025-25809/): Malicious code in malingnagir.near (npm) (malicious package) - [MAL-2025-25808](https://insights.sbomify.com/MAL-2025-25808/): Malicious code in malikgame (npm) (malicious package) - [MAL-2025-25807](https://insights.sbomify.com/MAL-2025-25807/): Malicious code in malicious-npm-package (npm) (malicious package) - [MAL-2025-25806](https://insights.sbomify.com/MAL-2025-25806/): Malicious code in malicious-do-not-install (npm) (malicious package) - [MAL-2025-25805](https://insights.sbomify.com/MAL-2025-25805/): Malicious code in maleficent (npm) (malicious package) - [MAL-2025-25804](https://insights.sbomify.com/MAL-2025-25804/): Malicious code in makula (npm) (malicious package) - [MAL-2025-25803](https://insights.sbomify.com/MAL-2025-25803/): Malicious code in makuai (npm) (malicious package) - [MAL-2025-25802](https://insights.sbomify.com/MAL-2025-25802/): Malicious code in makrbox (npm) (malicious package) - [MAL-2025-25801](https://insights.sbomify.com/MAL-2025-25801/): Malicious code in makkai (npm) (malicious package) - [MAL-2025-25800](https://insights.sbomify.com/MAL-2025-25800/): Malicious code in makestoryvid (npm) (malicious package) - [MAL-2025-2580](https://insights.sbomify.com/MAL-2025-2580/): Malicious code in template-schema-validation-tools (npm) (malicious package) - [MAL-2025-258](https://insights.sbomify.com/MAL-2025-258/): Malicious code in vuepress-reading-time-extended (npm) (malicious package) - [MAL-2025-25799](https://insights.sbomify.com/MAL-2025-25799/): Malicious code in makedds (npm) (malicious package) - [MAL-2025-25798](https://insights.sbomify.com/MAL-2025-25798/): Malicious code in mairports (npm) (malicious package) - [MAL-2025-25797](https://insights.sbomify.com/MAL-2025-25797/): Malicious code in maintenance_tasks (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/826/