# Vulnerabilities published in 2025 - [MAL-2025-25796](https://insights.sbomify.com/MAL-2025-25796/): Malicious code in mailslurp (npm) (malicious package) - [MAL-2025-25795](https://insights.sbomify.com/MAL-2025-25795/): Malicious code in mailnews (npm) (malicious package) - [MAL-2025-25794](https://insights.sbomify.com/MAL-2025-25794/): Malicious code in mailme (npm) (malicious package) - [MAL-2025-25793](https://insights.sbomify.com/MAL-2025-25793/): Malicious code in mailimate (npm) (malicious package) - [MAL-2025-25792](https://insights.sbomify.com/MAL-2025-25792/): Malicious code in mailersend-firebase (npm) (malicious package) - [MAL-2025-25791](https://insights.sbomify.com/MAL-2025-25791/): Malicious code in mailerlite-python-sdk (npm) (malicious package) - [MAL-2025-25790](https://insights.sbomify.com/MAL-2025-25790/): Malicious code in mailer-bal (npm) (malicious package) - [MAL-2025-2579](https://insights.sbomify.com/MAL-2025-2579/): Malicious code in paypal-product-picker (npm) (malicious package) - [MAL-2025-25789](https://insights.sbomify.com/MAL-2025-25789/): Malicious code in maibgcqtednokush (npm) (malicious package) - [MAL-2025-25788](https://insights.sbomify.com/MAL-2025-25788/): Malicious code in mahesa-tahu84-breki (npm) (malicious package) - [MAL-2025-25787](https://insights.sbomify.com/MAL-2025-25787/): Malicious code in mahesa-sambalado82-sukiwir (npm) (malicious package) - [MAL-2025-25786](https://insights.sbomify.com/MAL-2025-25786/): Malicious code in mahesa-rujak79-breki (npm) (malicious package) - [MAL-2025-25785](https://insights.sbomify.com/MAL-2025-25785/): Malicious code in mahesa-kue36-sukiwir (npm) (malicious package) - [MAL-2025-25784](https://insights.sbomify.com/MAL-2025-25784/): Malicious code in mahesa-esdoger16-sukiwir (npm) (malicious package) - [MAL-2025-25783](https://insights.sbomify.com/MAL-2025-25783/): Malicious code in maharaj (npm) (malicious package) - [MAL-2025-25782](https://insights.sbomify.com/MAL-2025-25782/): Malicious code in mah-haus (npm) (malicious package) - [MAL-2025-25781](https://insights.sbomify.com/MAL-2025-25781/): Malicious code in magshimim (npm) (malicious package) - [MAL-2025-25780](https://insights.sbomify.com/MAL-2025-25780/): Malicious code in magsdk-core (npm) (malicious package) - [MAL-2025-2578](https://insights.sbomify.com/MAL-2025-2578/): Malicious code in my-local-c (npm) (malicious package) - [MAL-2025-25779](https://insights.sbomify.com/MAL-2025-25779/): Malicious code in magnetosphere-ultra-xenon-module (npm) (malicious package) - [MAL-2025-25778](https://insights.sbomify.com/MAL-2025-25778/): Malicious code in magnetosphere-tectonic-eleventy-sync (npm) (malicious package) - [MAL-2025-25777](https://insights.sbomify.com/MAL-2025-25777/): Malicious code in magnetosphere-process-dendrochronology-altair (npm) (malicious package) - [MAL-2025-25776](https://insights.sbomify.com/MAL-2025-25776/): Malicious code in magnetosphere-cluster-fermion-nodemon (npm) (malicious package) - [MAL-2025-25775](https://insights.sbomify.com/MAL-2025-25775/): Malicious code in magneto-domain (npm) (malicious package) - [MAL-2025-25774](https://insights.sbomify.com/MAL-2025-25774/): Malicious code in magnetar-nightwatch-loop-higgs (npm) (malicious package) - [MAL-2025-25773](https://insights.sbomify.com/MAL-2025-25773/): Malicious code in magic-script (npm) (malicious package) - [MAL-2025-25772](https://insights.sbomify.com/MAL-2025-25772/): Malicious code in magform (npm) (malicious package) - [MAL-2025-25771](https://insights.sbomify.com/MAL-2025-25771/): Malicious code in mageray (npm) (malicious package) - [MAL-2025-25770](https://insights.sbomify.com/MAL-2025-25770/): Malicious code in mageplus (npm) (malicious package) - [MAL-2025-2577](https://insights.sbomify.com/MAL-2025-2577/): Malicious code in my-local-b-off (npm) (malicious package) - [MAL-2025-25769](https://insights.sbomify.com/MAL-2025-25769/): Malicious code in magelog (npm) (malicious package) - [MAL-2025-25768](https://insights.sbomify.com/MAL-2025-25768/): Malicious code in magellan-xo-dotenv-safe-typeorm (npm) (malicious package) - [MAL-2025-25767](https://insights.sbomify.com/MAL-2025-25767/): Malicious code in magellan-test-uninstall-sociobiology (npm) (malicious package) - [MAL-2025-25766](https://insights.sbomify.com/MAL-2025-25766/): Malicious code in magellan-pyxis-paleoanthropology-archaeogenetics (npm) (malicious package) - [MAL-2025-25765](https://insights.sbomify.com/MAL-2025-25765/): Malicious code in magellan-prompts-wormhole-apollo (npm) (malicious package) - [MAL-2025-25764](https://insights.sbomify.com/MAL-2025-25764/): Malicious code in magellan-postcss-apex-sails (npm) (malicious package) - [MAL-2025-25763](https://insights.sbomify.com/MAL-2025-25763/): Malicious code in magellan-petrology-spectron-webdriver-technocracy (npm) (malicious package) - [MAL-2025-25762](https://insights.sbomify.com/MAL-2025-25762/): Malicious code in magellan-non-blocking-run-script-bioinformatics (npm) (malicious package) - [MAL-2025-25761](https://insights.sbomify.com/MAL-2025-25761/): Malicious code in magellan-halley-socketio-uninstall (npm) (malicious package) - [MAL-2025-25760](https://insights.sbomify.com/MAL-2025-25760/): Malicious code in magellan-dysonswarm-pm2-saturnology (npm) (malicious package) - [MAL-2025-2576](https://insights.sbomify.com/MAL-2025-2576/): Malicious code in momo-lib (npm) (malicious package) - [MAL-2025-25759](https://insights.sbomify.com/MAL-2025-25759/): Malicious code in magellan-dorado-quito-hercules (npm) (malicious package) - [MAL-2025-25758](https://insights.sbomify.com/MAL-2025-25758/): Malicious code in magellan-charon-vulcan-dependencies (npm) (malicious package) - [MAL-2025-25757](https://insights.sbomify.com/MAL-2025-25757/): Malicious code in mageduel (npm) (malicious package) - [MAL-2025-25756](https://insights.sbomify.com/MAL-2025-25756/): Malicious code in mage-wallet-js (npm) (malicious package) - [MAL-2025-25755](https://insights.sbomify.com/MAL-2025-25755/): Malicious code in mag-sdk-core (npm) (malicious package) - [MAL-2025-25754](https://insights.sbomify.com/MAL-2025-25754/): Malicious code in mag-app-youtubetesting (npm) (malicious package) - [MAL-2025-25753](https://insights.sbomify.com/MAL-2025-25753/): Malicious code in mag-app-youtubetest (npm) (malicious package) - [MAL-2025-25752](https://insights.sbomify.com/MAL-2025-25752/): Malicious code in madian (npm) (malicious package) - [MAL-2025-25751](https://insights.sbomify.com/MAL-2025-25751/): Malicious code in madcap (npm) (malicious package) - [MAL-2025-25750](https://insights.sbomify.com/MAL-2025-25750/): Malicious code in mactips (npm) (malicious package) - [MAL-2025-2575](https://insights.sbomify.com/MAL-2025-2575/): Malicious code in migu-utils (npm) (malicious package) - [MAL-2025-25749](https://insights.sbomify.com/MAL-2025-25749/): Malicious code in mackip (npm) (malicious package) - [MAL-2025-25748](https://insights.sbomify.com/MAL-2025-25748/): Malicious code in machinery-typescript (npm) (malicious package) - [MAL-2025-25747](https://insights.sbomify.com/MAL-2025-25747/): Malicious code in machida (npm) (malicious package) - [MAL-2025-25746](https://insights.sbomify.com/MAL-2025-25746/): Malicious code in machette (npm) (malicious package) - [MAL-2025-25745](https://insights.sbomify.com/MAL-2025-25745/): Malicious code in maches (npm) (malicious package) - [MAL-2025-25744](https://insights.sbomify.com/MAL-2025-25744/): Malicious code in MacGyver (npm) (malicious package) - [MAL-2025-25743](https://insights.sbomify.com/MAL-2025-25743/): Malicious code in macdroid (npm) (malicious package) - [MAL-2025-25742](https://insights.sbomify.com/MAL-2025-25742/): Malicious code in macdonalds (npm) (malicious package) - [MAL-2025-25741](https://insights.sbomify.com/MAL-2025-25741/): Malicious code in macbill (npm) (malicious package) - [MAL-2025-25740](https://insights.sbomify.com/MAL-2025-25740/): Malicious code in macareux (npm) (malicious package) - [MAL-2025-2574](https://insights.sbomify.com/MAL-2025-2574/): Malicious code in migu-lib (npm) (malicious package) - [MAL-2025-25739](https://insights.sbomify.com/MAL-2025-25739/): Malicious code in macaddy (npm) (malicious package) - [MAL-2025-25738](https://insights.sbomify.com/MAL-2025-25738/): Malicious code in maajaidum (npm) (malicious package) - [MAL-2025-25737](https://insights.sbomify.com/MAL-2025-25737/): Malicious code in maacro (npm) (malicious package) - [MAL-2025-25736](https://insights.sbomify.com/MAL-2025-25736/): Malicious code in m9tubq (npm) (malicious package) - [MAL-2025-25735](https://insights.sbomify.com/MAL-2025-25735/): Malicious code in m3sp (npm) (malicious package) - [MAL-2025-25734](https://insights.sbomify.com/MAL-2025-25734/): Malicious code in m-backdoor (npm) (malicious package) - [MAL-2025-25733](https://insights.sbomify.com/MAL-2025-25733/): Malicious code in lzvrap (npm) (malicious package) - [MAL-2025-25732](https://insights.sbomify.com/MAL-2025-25732/): Malicious code in lznqiteufdywgkrv (npm) (malicious package) - [MAL-2025-25731](https://insights.sbomify.com/MAL-2025-25731/): Malicious code in lzcfdrkwkxhsjegu (npm) (malicious package) - [MAL-2025-25730](https://insights.sbomify.com/MAL-2025-25730/): Malicious code in lyuyt5 (npm) (malicious package) - [MAL-2025-2573](https://insights.sbomify.com/MAL-2025-2573/): Malicious code in keypair-encryption (npm) (malicious package) - [MAL-2025-25729](https://insights.sbomify.com/MAL-2025-25729/): Malicious code in lyu_test_test_test (npm) (malicious package) - [MAL-2025-25728](https://insights.sbomify.com/MAL-2025-25728/): Malicious code in lyu_pkg (npm) (malicious package) - [MAL-2025-25727](https://insights.sbomify.com/MAL-2025-25727/): Malicious code in lyte-compile-fast (npm) (malicious package) - [MAL-2025-25726](https://insights.sbomify.com/MAL-2025-25726/): Malicious code in lystgram (npm) (malicious package) - [MAL-2025-25725](https://insights.sbomify.com/MAL-2025-25725/): Malicious code in lyst-product-card-generator (npm) (malicious package) - [MAL-2025-25724](https://insights.sbomify.com/MAL-2025-25724/): Malicious code in lyrzxntqpkuvdagc (npm) (malicious package) - [MAL-2025-25723](https://insights.sbomify.com/MAL-2025-25723/): Malicious code in lyra-oortcloud-spectron-await (npm) (malicious package) - [MAL-2025-25722](https://insights.sbomify.com/MAL-2025-25722/): Malicious code in lyra-membrane-paleoanthropology-vega (npm) (malicious package) - [MAL-2025-25721](https://insights.sbomify.com/MAL-2025-25721/): Malicious code in lyonverre (npm) (malicious package) - [MAL-2025-25720](https://insights.sbomify.com/MAL-2025-25720/): Malicious code in lynx3 (npm) (malicious package) - [MAL-2025-2572](https://insights.sbomify.com/MAL-2025-2572/): Malicious code in glide-core (npm) (malicious package) - [MAL-2025-25719](https://insights.sbomify.com/MAL-2025-25719/): Malicious code in lynx-superflare-bunyan-sedna (npm) (malicious package) - [MAL-2025-25718](https://insights.sbomify.com/MAL-2025-25718/): Malicious code in lynx-geochemistry-webdriver-manager-chariklo (npm) (malicious package) - [MAL-2025-25717](https://insights.sbomify.com/MAL-2025-25717/): Malicious code in lynx-exosphere-elektra-prettier-stylelint (npm) (malicious package) - [MAL-2025-25716](https://insights.sbomify.com/MAL-2025-25716/): Malicious code in lynx-elara-antd-nodejs (npm) (malicious package) - [MAL-2025-25715](https://insights.sbomify.com/MAL-2025-25715/): Malicious code in lynx-blackhole-typeorm-umbriel (npm) (malicious package) - [MAL-2025-25714](https://insights.sbomify.com/MAL-2025-25714/): Malicious code in lyftkube (npm) (malicious package) - [MAL-2025-25713](https://insights.sbomify.com/MAL-2025-25713/): Malicious code in lyft-web-button (npm) (malicious package) - [MAL-2025-25712](https://insights.sbomify.com/MAL-2025-25712/): Malicious code in lyft-dataset-sdk (npm) (malicious package) - [MAL-2025-25711](https://insights.sbomify.com/MAL-2025-25711/): Malicious code in lyft-coloralgorithm (npm) (malicious package) - [MAL-2025-25710](https://insights.sbomify.com/MAL-2025-25710/): Malicious code in lxwwxdeve (npm) (malicious package) - [MAL-2025-2571](https://insights.sbomify.com/MAL-2025-2571/): Malicious code in code-tours-github (npm) (malicious package) - [MAL-2025-25709](https://insights.sbomify.com/MAL-2025-25709/): Malicious code in lxcstack (npm) (malicious package) - [MAL-2025-25708](https://insights.sbomify.com/MAL-2025-25708/): Malicious code in lwjglgame (npm) (malicious package) - [MAL-2025-25707](https://insights.sbomify.com/MAL-2025-25707/): Malicious code in lwc-components-lightning (npm) (malicious package) - [MAL-2025-25706](https://insights.sbomify.com/MAL-2025-25706/): Malicious code in lvmeter (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/827/