# Vulnerabilities published in 2025


- [MAL-2025-25615](https://insights.sbomify.com/MAL-2025-25615/): Malicious code in lovepy (npm) (malicious package)
- [MAL-2025-25614](https://insights.sbomify.com/MAL-2025-25614/): Malicious code in lovepets (npm) (malicious package)
- [MAL-2025-25613](https://insights.sbomify.com/MAL-2025-25613/): Malicious code in lovebeat (npm) (malicious package)
- [MAL-2025-25612](https://insights.sbomify.com/MAL-2025-25612/): Malicious code in lounge-theme-amoled (npm) (malicious package)
- [MAL-2025-25611](https://insights.sbomify.com/MAL-2025-25611/): Malicious code in loudong-ruqin-jingcui (npm) (malicious package)
- [MAL-2025-25610](https://insights.sbomify.com/MAL-2025-25610/): Malicious code in lotus-p7q1d-c29z2-iceberg-project (npm) (malicious package)
- [MAL-2025-2561](https://insights.sbomify.com/MAL-2025-2561/): Malicious code in chatbot-dashboard (npm) (malicious package)
- [MAL-2025-25609](https://insights.sbomify.com/MAL-2025-25609/): Malicious code in lotus-krwlr-qvulp-kismet-project (npm) (malicious package)
- [MAL-2025-25608](https://insights.sbomify.com/MAL-2025-25608/): Malicious code in lotus-8fjua-8by7e-celestial-project (npm) (malicious package)
- [MAL-2025-25607](https://insights.sbomify.com/MAL-2025-25607/): Malicious code in lotus-6c7bt-96orv-mirage-project (npm) (malicious package)
- [MAL-2025-25606](https://insights.sbomify.com/MAL-2025-25606/): Malicious code in lotus-689e5-hsbn3-utopia-project (npm) (malicious package)
- [MAL-2025-25605](https://insights.sbomify.com/MAL-2025-25605/): Malicious code in lotus-5sbc5-tvb8k-obsidian-project (npm) (malicious package)
- [MAL-2025-25604](https://insights.sbomify.com/MAL-2025-25604/): Malicious code in lostbut (npm) (malicious package)
- [MAL-2025-25603](https://insights.sbomify.com/MAL-2025-25603/): Malicious code in lorraine (npm) (malicious package)
- [MAL-2025-25602](https://insights.sbomify.com/MAL-2025-25602/): Malicious code in lorien (npm) (malicious package)
- [MAL-2025-25601](https://insights.sbomify.com/MAL-2025-25601/): Malicious code in loquitor (npm) (malicious package)
- [MAL-2025-25600](https://insights.sbomify.com/MAL-2025-25600/): Malicious code in lootsie-sdk-ui-es5-inferno (npm) (malicious package)
- [MAL-2025-2560](https://insights.sbomify.com/MAL-2025-2560/): Malicious code in n11-web-client (npm) (malicious package)
- [MAL-2025-256](https://insights.sbomify.com/MAL-2025-256/): Malicious code in vscode-tcf-debug (npm) (malicious package)
- [MAL-2025-25599](https://insights.sbomify.com/MAL-2025-25599/): Malicious code in lootsie-sdk-core-es5 (npm) (malicious package)
- [MAL-2025-25598](https://insights.sbomify.com/MAL-2025-25598/): Malicious code in lootsie-sdk-app-es5-inferno (npm) (malicious package)
- [MAL-2025-25597](https://insights.sbomify.com/MAL-2025-25597/): Malicious code in loopback4-example-recommender (npm) (malicious package)
- [MAL-2025-25596](https://insights.sbomify.com/MAL-2025-25596/): Malicious code in loopback-playwright-global-nashira (npm) (malicious package)
- [MAL-2025-25595](https://insights.sbomify.com/MAL-2025-25595/): Malicious code in loopback-gammarayburst-boson-auth0 (npm) (malicious package)
- [MAL-2025-25594](https://insights.sbomify.com/MAL-2025-25594/): Malicious code in loopback-css-loader-sagitta-terraforming (npm) (malicious package)
- [MAL-2025-25593](https://insights.sbomify.com/MAL-2025-25593/): Malicious code in loopback-connector-soap-elemetal (npm) (malicious package)
- [MAL-2025-25592](https://insights.sbomify.com/MAL-2025-25592/): Malicious code in loop-wolf-vortex-yonder (npm) (malicious package)
- [MAL-2025-25591](https://insights.sbomify.com/MAL-2025-25591/): Malicious code in loop-sass-loader-coronalmassejection-higgs (npm) (malicious package)
- [MAL-2025-25590](https://insights.sbomify.com/MAL-2025-25590/): Malicious code in loop-ophiuchus-parcel-yonder (npm) (malicious package)
- [MAL-2025-2559](https://insights.sbomify.com/MAL-2025-2559/): Malicious code in n11-chatbot (npm) (malicious package)
- [MAL-2025-25589](https://insights.sbomify.com/MAL-2025-25589/): Malicious code in loop-higgs-eclipse-dendrochronology (npm) (malicious package)
- [MAL-2025-25588](https://insights.sbomify.com/MAL-2025-25588/): Malicious code in loop-greatfilter-extremophile-sagitta (npm) (malicious package)
- [MAL-2025-25587](https://insights.sbomify.com/MAL-2025-25587/): Malicious code in loop-concurrently-carina-elektra (npm) (malicious package)
- [MAL-2025-25586](https://insights.sbomify.com/MAL-2025-25586/): Malicious code in loop-apollo-canopus-inquirer (npm) (malicious package)
- [MAL-2025-25585](https://insights.sbomify.com/MAL-2025-25585/): Malicious code in loomsdk (npm) (malicious package)
- [MAL-2025-25584](https://insights.sbomify.com/MAL-2025-25584/): Malicious code in loom-plugin-webpack (npm) (malicious package)
- [MAL-2025-25583](https://insights.sbomify.com/MAL-2025-25583/): Malicious code in loom-plugin-typescript (npm) (malicious package)
- [MAL-2025-25582](https://insights.sbomify.com/MAL-2025-25582/): Malicious code in loom-plugin-stylelint (npm) (malicious package)
- [MAL-2025-25581](https://insights.sbomify.com/MAL-2025-25581/): Malicious code in loom-plugin-rollup (npm) (malicious package)
- [MAL-2025-25580](https://insights.sbomify.com/MAL-2025-25580/): Malicious code in loom-plugin-prettier (npm) (malicious package)
- [MAL-2025-2558](https://insights.sbomify.com/MAL-2025-2558/): Malicious code in sign-tx (npm) (malicious package)
- [MAL-2025-25579](https://insights.sbomify.com/MAL-2025-25579/): Malicious code in loom-plugin-postcss (npm) (malicious package)
- [MAL-2025-25578](https://insights.sbomify.com/MAL-2025-25578/): Malicious code in loom-plugin-package-build (npm) (malicious package)
- [MAL-2025-25577](https://insights.sbomify.com/MAL-2025-25577/): Malicious code in loom-plugin-jest (npm) (malicious package)
- [MAL-2025-25576](https://insights.sbomify.com/MAL-2025-25576/): Malicious code in loom-plugin-eslint (npm) (malicious package)
- [MAL-2025-25575](https://insights.sbomify.com/MAL-2025-25575/): Malicious code in loom-plugin-build-library-extended (npm) (malicious package)
- [MAL-2025-25574](https://insights.sbomify.com/MAL-2025-25574/): Malicious code in loom-plugin-build-library (npm) (malicious package)
- [MAL-2025-25573](https://insights.sbomify.com/MAL-2025-25573/): Malicious code in loom-plugin-babel (npm) (malicious package)
- [MAL-2025-25572](https://insights.sbomify.com/MAL-2025-25572/): Malicious code in loom-cli (npm) (malicious package)
- [MAL-2025-25571](https://insights.sbomify.com/MAL-2025-25571/): Malicious code in long-scale-static-report-float (npm) (malicious package)
- [MAL-2025-25570](https://insights.sbomify.com/MAL-2025-25570/): Malicious code in long-report-info-emulate-small (npm) (malicious package)
- [MAL-2025-2557](https://insights.sbomify.com/MAL-2025-2557/): Malicious code in shanye-ethereumjs-utill (npm) (malicious package)
- [MAL-2025-25569](https://insights.sbomify.com/MAL-2025-25569/): Malicious code in long-boolean-thread-notify-fast (npm) (malicious package)
- [MAL-2025-25568](https://insights.sbomify.com/MAL-2025-25568/): Malicious code in lonelyme (npm) (malicious package)
- [MAL-2025-25567](https://insights.sbomify.com/MAL-2025-25567/): Malicious code in londieall (npm) (malicious package)
- [MAL-2025-25566](https://insights.sbomify.com/MAL-2025-25566/): Malicious code in lolpro (npm) (malicious package)
- [MAL-2025-25565](https://insights.sbomify.com/MAL-2025-25565/): Malicious code in lolock (npm) (malicious package)
- [MAL-2025-25564](https://insights.sbomify.com/MAL-2025-25564/): Malicious code in lolman (npm) (malicious package)
- [MAL-2025-25563](https://insights.sbomify.com/MAL-2025-25563/): Malicious code in lolis.life (npm) (malicious package)
- [MAL-2025-25562](https://insights.sbomify.com/MAL-2025-25562/): Malicious code in lolapifun (npm) (malicious package)
- [MAL-2025-25561](https://insights.sbomify.com/MAL-2025-25561/): Malicious code in loksabha (npm) (malicious package)
- [MAL-2025-25560](https://insights.sbomify.com/MAL-2025-25560/): Malicious code in lojack (npm) (malicious package)
- [MAL-2025-2556](https://insights.sbomify.com/MAL-2025-2556/): Malicious code in pb-node-modules (npm) (malicious package)
- [MAL-2025-25559](https://insights.sbomify.com/MAL-2025-25559/): Malicious code in loguru (npm) (malicious package)
- [MAL-2025-25558](https://insights.sbomify.com/MAL-2025-25558/): Malicious code in logtoeye (npm) (malicious package)
- [MAL-2025-25557](https://insights.sbomify.com/MAL-2025-25557/): Malicious code in logsymbles (npm) (malicious package)
- [MAL-2025-25556](https://insights.sbomify.com/MAL-2025-25556/): Malicious code in logsoul (npm) (malicious package)
- [MAL-2025-25555](https://insights.sbomify.com/MAL-2025-25555/): Malicious code in logrocket-video-mirror (npm) (malicious package)
- [MAL-2025-25554](https://insights.sbomify.com/MAL-2025-25554/): Malicious code in logrocket-video-common (npm) (malicious package)
- [MAL-2025-25553](https://insights.sbomify.com/MAL-2025-25553/): Malicious code in logrocket-video (npm) (malicious package)
- [MAL-2025-25552](https://insights.sbomify.com/MAL-2025-25552/): Malicious code in logrocket-utils (npm) (malicious package)
- [MAL-2025-25551](https://insights.sbomify.com/MAL-2025-25551/): Malicious code in logrocket-protocol (npm) (malicious package)
- [MAL-2025-25550](https://insights.sbomify.com/MAL-2025-25550/): Malicious code in logrocket-prebuilt (npm) (malicious package)
- [MAL-2025-2555](https://insights.sbomify.com/MAL-2025-2555/): Malicious code in ethereum-cryptoshanye (npm) (malicious package)
- [MAL-2025-25549](https://insights.sbomify.com/MAL-2025-25549/): Malicious code in logrocket-network (npm) (malicious package)
- [MAL-2025-25548](https://insights.sbomify.com/MAL-2025-25548/): Malicious code in logrocket-navigation (npm) (malicious package)
- [MAL-2025-25547](https://insights.sbomify.com/MAL-2025-25547/): Malicious code in logrocket-fetch (npm) (malicious package)
- [MAL-2025-25546](https://insights.sbomify.com/MAL-2025-25546/): Malicious code in logrocket-dom (npm) (malicious package)
- [MAL-2025-25545](https://insights.sbomify.com/MAL-2025-25545/): Malicious code in logrocket-core-worker (npm) (malicious package)
- [MAL-2025-25544](https://insights.sbomify.com/MAL-2025-25544/): Malicious code in logrocket-core (npm) (malicious package)
- [MAL-2025-25543](https://insights.sbomify.com/MAL-2025-25543/): Malicious code in logrocket-browser (npm) (malicious package)
- [MAL-2025-25542](https://insights.sbomify.com/MAL-2025-25542/): Malicious code in logojoy-app (npm) (malicious package)
- [MAL-2025-25541](https://insights.sbomify.com/MAL-2025-25541/): Malicious code in logoiconic (npm) (malicious package)
- [MAL-2025-25540](https://insights.sbomify.com/MAL-2025-25540/): Malicious code in loglevel-whitedwarf-postcss-loader-betelgeuse (npm) (malicious package)
- [MAL-2025-2554](https://insights.sbomify.com/MAL-2025-2554/): Malicious code in ethereum-cryptog (npm) (malicious package)
- [MAL-2025-25539](https://insights.sbomify.com/MAL-2025-25539/): Malicious code in loglevel-rate-limiter-perseus-playwright (npm) (malicious package)
- [MAL-2025-25538](https://insights.sbomify.com/MAL-2025-25538/): Malicious code in loglevel-paleobotany-subduction-postcss (npm) (malicious package)
- [MAL-2025-25537](https://insights.sbomify.com/MAL-2025-25537/): Malicious code in loglevel-docusaurus-scripts-less (npm) (malicious package)
- [MAL-2025-25536](https://insights.sbomify.com/MAL-2025-25536/): Malicious code in loglevel-australis-cors-ganymede (npm) (malicious package)
- [MAL-2025-25535](https://insights.sbomify.com/MAL-2025-25535/): Malicious code in loglevel-astro-docusaurus-adonis (npm) (malicious package)
- [MAL-2025-25534](https://insights.sbomify.com/MAL-2025-25534/): Malicious code in logincookie-paypal (npm) (malicious package)
- [MAL-2025-25533](https://insights.sbomify.com/MAL-2025-25533/): Malicious code in login-sbobet (npm) (malicious package)
- [MAL-2025-25532](https://insights.sbomify.com/MAL-2025-25532/): Malicious code in logicom (npm) (malicious package)
- [MAL-2025-25531](https://insights.sbomify.com/MAL-2025-25531/): Malicious code in logiciel (npm) (malicious package)
- [MAL-2025-25530](https://insights.sbomify.com/MAL-2025-25530/): Malicious code in logichex (npm) (malicious package)
- [MAL-2025-2553](https://insights.sbomify.com/MAL-2025-2553/): Malicious code in @shanye3501/curvess (npm) (malicious package)
- [MAL-2025-25529](https://insights.sbomify.com/MAL-2025-25529/): Malicious code in logging-repository (npm) (malicious package)
- [MAL-2025-25528](https://insights.sbomify.com/MAL-2025-25528/): Malicious code in logdoc (npm) (malicious package)
- [MAL-2025-25527](https://insights.sbomify.com/MAL-2025-25527/): Malicious code in logcry (npm) (malicious package)
- [MAL-2025-25526](https://insights.sbomify.com/MAL-2025-25526/): Malicious code in logbrewer (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/829/