# Vulnerabilities published in 2025


- [MAL-2025-25705](https://insights.sbomify.com/MAL-2025-25705/): Malicious code in lvguanjia (npm) (malicious package)
- [MAL-2025-25704](https://insights.sbomify.com/MAL-2025-25704/): Malicious code in lvaoepwuxithkkrc (npm) (malicious package)
- [MAL-2025-25703](https://insights.sbomify.com/MAL-2025-25703/): Malicious code in luzyvida (npm) (malicious package)
- [MAL-2025-25702](https://insights.sbomify.com/MAL-2025-25702/): Malicious code in lutfi-rangi27-sukiwir (npm) (malicious package)
- [MAL-2025-25701](https://insights.sbomify.com/MAL-2025-25701/): Malicious code in lutfi-peyek32-breki (npm) (malicious package)
- [MAL-2025-25700](https://insights.sbomify.com/MAL-2025-25700/): Malicious code in lutachu (npm) (malicious package)
- [MAL-2025-2570](https://insights.sbomify.com/MAL-2025-2570/): Malicious code in cmft-utils (npm) (malicious package)
- [MAL-2025-257](https://insights.sbomify.com/MAL-2025-257/): Malicious code in vue-loader-vue3 (npm) (malicious package)
- [MAL-2025-25699](https://insights.sbomify.com/MAL-2025-25699/): Malicious code in luster-ext-env (npm) (malicious package)
- [MAL-2025-25698](https://insights.sbomify.com/MAL-2025-25698/): Malicious code in luster-ctrl (npm) (malicious package)
- [MAL-2025-25697](https://insights.sbomify.com/MAL-2025-25697/): Malicious code in lurk-the-chats (npm) (malicious package)
- [MAL-2025-25696](https://insights.sbomify.com/MAL-2025-25696/): Malicious code in lupinistestingsomethingnewonnpmagain3 (npm) (malicious package)
- [MAL-2025-25695](https://insights.sbomify.com/MAL-2025-25695/): Malicious code in lupinistestingsomethingnewonnpmagain (npm) (malicious package)
- [MAL-2025-25694](https://insights.sbomify.com/MAL-2025-25694/): Malicious code in lupinistestinganotherpackage (npm) (malicious package)
- [MAL-2025-25693](https://insights.sbomify.com/MAL-2025-25693/): Malicious code in luotsi (npm) (malicious package)
- [MAL-2025-25692](https://insights.sbomify.com/MAL-2025-25692/): Malicious code in luntbuild (npm) (malicious package)
- [MAL-2025-25691](https://insights.sbomify.com/MAL-2025-25691/): Malicious code in lunoine7 (npm) (malicious package)
- [MAL-2025-25690](https://insights.sbomify.com/MAL-2025-25690/): Malicious code in lunchat (npm) (malicious package)
- [MAL-2025-2569](https://insights.sbomify.com/MAL-2025-2569/): Malicious code in cargo_metadata (npm) (malicious package)
- [MAL-2025-25689](https://insights.sbomify.com/MAL-2025-25689/): Malicious code in lunarized (npm) (malicious package)
- [MAL-2025-25688](https://insights.sbomify.com/MAL-2025-25688/): Malicious code in lunarcrush.com (npm) (malicious package)
- [MAL-2025-25687](https://insights.sbomify.com/MAL-2025-25687/): Malicious code in lunar_pjibk_mssbn_karma (npm) (malicious package)
- [MAL-2025-25686](https://insights.sbomify.com/MAL-2025-25686/): Malicious code in lunar_gqxqw_j18kd_dawn (npm) (malicious package)
- [MAL-2025-25685](https://insights.sbomify.com/MAL-2025-25685/): Malicious code in lunar-zenith-xl9x (npm) (malicious package)
- [MAL-2025-25684](https://insights.sbomify.com/MAL-2025-25684/): Malicious code in lunar-zamia-b0qf (npm) (malicious package)
- [MAL-2025-25683](https://insights.sbomify.com/MAL-2025-25683/): Malicious code in lunar-ysdya-qpxo9-terra-project (npm) (malicious package)
- [MAL-2025-25682](https://insights.sbomify.com/MAL-2025-25682/): Malicious code in lunar-yam-3j90 (npm) (malicious package)
- [MAL-2025-25681](https://insights.sbomify.com/MAL-2025-25681/): Malicious code in lunar-yacht-qzrj (npm) (malicious package)
- [MAL-2025-25680](https://insights.sbomify.com/MAL-2025-25680/): Malicious code in lunar-void-142h (npm) (malicious package)
- [MAL-2025-2568](https://insights.sbomify.com/MAL-2025-2568/): Malicious code in cargo-cyclonedx (npm) (malicious package)
- [MAL-2025-25679](https://insights.sbomify.com/MAL-2025-25679/): Malicious code in lunar-rh3rt-60yk8-zen-project (npm) (malicious package)
- [MAL-2025-25678](https://insights.sbomify.com/MAL-2025-25678/): Malicious code in lunar-raspberry-7soq (npm) (malicious package)
- [MAL-2025-25677](https://insights.sbomify.com/MAL-2025-25677/): Malicious code in lunar-mountain-xlxk (npm) (malicious package)
- [MAL-2025-25676](https://insights.sbomify.com/MAL-2025-25676/): Malicious code in lunar-india-4k0o (npm) (malicious package)
- [MAL-2025-25675](https://insights.sbomify.com/MAL-2025-25675/): Malicious code in lunar-gs6x8-5u52d-keystone-project (npm) (malicious package)
- [MAL-2025-25674](https://insights.sbomify.com/MAL-2025-25674/): Malicious code in lunar-fig-zs2k (npm) (malicious package)
- [MAL-2025-25673](https://insights.sbomify.com/MAL-2025-25673/): Malicious code in lunar-czft2-k4qqe-juniper-project (npm) (malicious package)
- [MAL-2025-25672](https://insights.sbomify.com/MAL-2025-25672/): Malicious code in lunar-cherry-9kak (npm) (malicious package)
- [MAL-2025-25671](https://insights.sbomify.com/MAL-2025-25671/): Malicious code in lunar-ce51f-xnk9a-yonder-project (npm) (malicious package)
- [MAL-2025-25670](https://insights.sbomify.com/MAL-2025-25670/): Malicious code in lunar-bw5wq-wquq3-thunder-project (npm) (malicious package)
- [MAL-2025-2567](https://insights.sbomify.com/MAL-2025-2567/): Malicious code in azqr (npm) (malicious package)
- [MAL-2025-25669](https://insights.sbomify.com/MAL-2025-25669/): Malicious code in lunar-b55dp-hxcr6-yellow-project (npm) (malicious package)
- [MAL-2025-25668](https://insights.sbomify.com/MAL-2025-25668/): Malicious code in luna-sublimation-gacrux-sqlite (npm) (malicious package)
- [MAL-2025-25667](https://insights.sbomify.com/MAL-2025-25667/): Malicious code in luna-sagitta-scripts-magellan (npm) (malicious package)
- [MAL-2025-25666](https://insights.sbomify.com/MAL-2025-25666/): Malicious code in luna-package-local-pavo (npm) (malicious package)
- [MAL-2025-25665](https://insights.sbomify.com/MAL-2025-25665/): Malicious code in luna-mock (npm) (malicious package)
- [MAL-2025-25664](https://insights.sbomify.com/MAL-2025-25664/): Malicious code in luna-got-auth0-yildun (npm) (malicious package)
- [MAL-2025-25663](https://insights.sbomify.com/MAL-2025-25663/): Malicious code in luna-blaze-development-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-25662](https://insights.sbomify.com/MAL-2025-25662/): Malicious code in luminsign-test (npm) (malicious package)
- [MAL-2025-25661](https://insights.sbomify.com/MAL-2025-25661/): Malicious code in luminsign (npm) (malicious package)
- [MAL-2025-25660](https://insights.sbomify.com/MAL-2025-25660/): Malicious code in luminescence-ultra-transhumanism-sync (npm) (malicious package)
- [MAL-2025-2566](https://insights.sbomify.com/MAL-2025-2566/): Malicious code in airbnb-i18n (npm) (malicious package)
- [MAL-2025-25659](https://insights.sbomify.com/MAL-2025-25659/): Malicious code in luminescence-rollup-augmentedreality-geoarchaeology (npm) (malicious package)
- [MAL-2025-25658](https://insights.sbomify.com/MAL-2025-25658/): Malicious code in luminescence-hexo-firebase-kuiperbelt (npm) (malicious package)
- [MAL-2025-25657](https://insights.sbomify.com/MAL-2025-25657/): Malicious code in luminescence-accretion-thuban-public (npm) (malicious package)
- [MAL-2025-25656](https://insights.sbomify.com/MAL-2025-25656/): Malicious code in lumialda (npm) (malicious package)
- [MAL-2025-25655](https://insights.sbomify.com/MAL-2025-25655/): Malicious code in lullaby_w4o1g_vcka4_jewel (npm) (malicious package)
- [MAL-2025-25654](https://insights.sbomify.com/MAL-2025-25654/): Malicious code in lullaby_t1h2y_1ni4e_zenith (npm) (malicious package)
- [MAL-2025-25653](https://insights.sbomify.com/MAL-2025-25653/): Malicious code in lullaby_9h66u_bkrmb_noir (npm) (malicious package)
- [MAL-2025-25652](https://insights.sbomify.com/MAL-2025-25652/): Malicious code in lullaby_4edz4_qrv4x_hush (npm) (malicious package)
- [MAL-2025-25651](https://insights.sbomify.com/MAL-2025-25651/): Malicious code in lullaby_0pmex_mw1ot_ripple (npm) (malicious package)
- [MAL-2025-25650](https://insights.sbomify.com/MAL-2025-25650/): Malicious code in lukemftp (npm) (malicious package)
- [MAL-2025-2565](https://insights.sbomify.com/MAL-2025-2565/): Malicious code in airbnb-dev (npm) (malicious package)
- [MAL-2025-25649](https://insights.sbomify.com/MAL-2025-25649/): Malicious code in lukcydraw (npm) (malicious package)
- [MAL-2025-25648](https://insights.sbomify.com/MAL-2025-25648/): Malicious code in luhnar (npm) (malicious package)
- [MAL-2025-25647](https://insights.sbomify.com/MAL-2025-25647/): Malicious code in lufsmeter (npm) (malicious package)
- [MAL-2025-25646](https://insights.sbomify.com/MAL-2025-25646/): Malicious code in ludogram (npm) (malicious package)
- [MAL-2025-25645](https://insights.sbomify.com/MAL-2025-25645/): Malicious code in luckcheck (npm) (malicious package)
- [MAL-2025-25644](https://insights.sbomify.com/MAL-2025-25644/): Malicious code in lucid-xe98q-a6ugy-pebble-project (npm) (malicious package)
- [MAL-2025-25643](https://insights.sbomify.com/MAL-2025-25643/): Malicious code in lucid-qe1cb-2zrgs-opal-project (npm) (malicious package)
- [MAL-2025-25642](https://insights.sbomify.com/MAL-2025-25642/): Malicious code in lucid-nbtr3-ux4vf-moondust-project (npm) (malicious package)
- [MAL-2025-25641](https://insights.sbomify.com/MAL-2025-25641/): Malicious code in lucid-h55nb-ww1k0-iceberg-project (npm) (malicious package)
- [MAL-2025-25640](https://insights.sbomify.com/MAL-2025-25640/): Malicious code in lucid-f7gm8-la403-mosaic-project (npm) (malicious package)
- [MAL-2025-2564](https://insights.sbomify.com/MAL-2025-2564/): Malicious code in my-signature (npm) (malicious package)
- [MAL-2025-25639](https://insights.sbomify.com/MAL-2025-25639/): Malicious code in lucid-awlr6-lle14-raven-project (npm) (malicious package)
- [MAL-2025-25638](https://insights.sbomify.com/MAL-2025-25638/): Malicious code in lubase (npm) (malicious package)
- [MAL-2025-25637](https://insights.sbomify.com/MAL-2025-25637/): Malicious code in luasel (npm) (malicious package)
- [MAL-2025-25636](https://insights.sbomify.com/MAL-2025-25636/): Malicious code in luafix (npm) (malicious package)
- [MAL-2025-25635](https://insights.sbomify.com/MAL-2025-25635/): Malicious code in luafiveq (npm) (malicious package)
- [MAL-2025-25634](https://insights.sbomify.com/MAL-2025-25634/): Malicious code in ltebbs (npm) (malicious package)
- [MAL-2025-25633](https://insights.sbomify.com/MAL-2025-25633/): Malicious code in lsysprog (npm) (malicious package)
- [MAL-2025-25632](https://insights.sbomify.com/MAL-2025-25632/): Malicious code in lsongbook (npm) (malicious package)
- [MAL-2025-25631](https://insights.sbomify.com/MAL-2025-25631/): Malicious code in lsgate (npm) (malicious package)
- [MAL-2025-25630](https://insights.sbomify.com/MAL-2025-25630/): Malicious code in lscwpekmndxvqytu (npm) (malicious package)
- [MAL-2025-2563](https://insights.sbomify.com/MAL-2025-2563/): Malicious code in byted-midas-render-plugin (npm) (malicious package)
- [MAL-2025-25629](https://insights.sbomify.com/MAL-2025-25629/): Malicious code in lsapomfyvbjhigqd (npm) (malicious package)
- [MAL-2025-25628](https://insights.sbomify.com/MAL-2025-25628/): Malicious code in lrmcgbzywisdqvap (npm) (malicious package)
- [MAL-2025-25627](https://insights.sbomify.com/MAL-2025-25627/): Malicious code in lrbqswtexcjikdhz (npm) (malicious package)
- [MAL-2025-25626](https://insights.sbomify.com/MAL-2025-25626/): Malicious code in lr.sidebar (npm) (malicious package)
- [MAL-2025-25625](https://insights.sbomify.com/MAL-2025-25625/): Malicious code in lqoxneptdbwkiysz (npm) (malicious package)
- [MAL-2025-25624](https://insights.sbomify.com/MAL-2025-25624/): Malicious code in lqaodmfgevutkcks (npm) (malicious package)
- [MAL-2025-25623](https://insights.sbomify.com/MAL-2025-25623/): Malicious code in lpiiexam (npm) (malicious package)
- [MAL-2025-25622](https://insights.sbomify.com/MAL-2025-25622/): Malicious code in lpcjkzfyrtbovsne (npm) (malicious package)
- [MAL-2025-25621](https://insights.sbomify.com/MAL-2025-25621/): Malicious code in lp-unistat-logger (npm) (malicious package)
- [MAL-2025-25620](https://insights.sbomify.com/MAL-2025-25620/): Malicious code in lp-middlewares (npm) (malicious package)
- [MAL-2025-2562](https://insights.sbomify.com/MAL-2025-2562/): Malicious code in com.unity.performance.profile-analyzer (npm) (malicious package)
- [MAL-2025-25619](https://insights.sbomify.com/MAL-2025-25619/): Malicious code in lp-babel (npm) (malicious package)
- [MAL-2025-25618](https://insights.sbomify.com/MAL-2025-25618/): Malicious code in lowkick (npm) (malicious package)
- [MAL-2025-25617](https://insights.sbomify.com/MAL-2025-25617/): Malicious code in lowbrow (npm) (malicious package)
- [MAL-2025-25616](https://insights.sbomify.com/MAL-2025-25616/): Malicious code in loveshack (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/828/