# Vulnerabilities published in 2025 - [MAL-2025-25525](https://insights.sbomify.com/MAL-2025-25525/): Malicious code in loganmall (npm) (malicious package) - [MAL-2025-25524](https://insights.sbomify.com/MAL-2025-25524/): Malicious code in logadmin (npm) (malicious package) - [MAL-2025-25523](https://insights.sbomify.com/MAL-2025-25523/): Malicious code in log4js-vue-log-bus (npm) (malicious package) - [MAL-2025-25522](https://insights.sbomify.com/MAL-2025-25522/): Malicious code in log-zeta-resolve-index-module (npm) (malicious package) - [MAL-2025-25521](https://insights.sbomify.com/MAL-2025-25521/): Malicious code in log-symboles (npm) (malicious package) - [MAL-2025-25520](https://insights.sbomify.com/MAL-2025-25520/): Malicious code in log-rendering-error (npm) (malicious package) - [MAL-2025-2552](https://insights.sbomify.com/MAL-2025-2552/): Malicious code in io.github.leetcrunch:scribejava-core (Maven) (malicious package) - [MAL-2025-25519](https://insights.sbomify.com/MAL-2025-25519/): Malicious code in log-final-public-upsilon-virtualize (npm) (malicious package) - [MAL-2025-25518](https://insights.sbomify.com/MAL-2025-25518/): Malicious code in loftre (npm) (malicious package) - [MAL-2025-25517](https://insights.sbomify.com/MAL-2025-25517/): Malicious code in lodstats (npm) (malicious package) - [MAL-2025-25516](https://insights.sbomify.com/MAL-2025-25516/): Malicious code in lodsah (npm) (malicious package) - [MAL-2025-25515](https://insights.sbomify.com/MAL-2025-25515/): Malicious code in lodqwh (npm) (malicious package) - [MAL-2025-25514](https://insights.sbomify.com/MAL-2025-25514/): Malicious code in lodqsh (npm) (malicious package) - [MAL-2025-25513](https://insights.sbomify.com/MAL-2025-25513/): Malicious code in lodownryanhanks1106 (npm) (malicious package) - [MAL-2025-25512](https://insights.sbomify.com/MAL-2025-25512/): Malicious code in lodown-samsung329 (npm) (malicious package) - [MAL-2025-25511](https://insights.sbomify.com/MAL-2025-25511/): Malicious code in lodassh (npm) (malicious package) - [MAL-2025-25510](https://insights.sbomify.com/MAL-2025-25510/): Malicious code in lodasn (npm) (malicious package) - [MAL-2025-2551](https://insights.sbomify.com/MAL-2025-2551/): Malicious code in github.com/vainreboot/layout (Go) (malicious package) - [MAL-2025-25509](https://insights.sbomify.com/MAL-2025-25509/): Malicious code in lodashn (npm) (malicious package) - [MAL-2025-25508](https://insights.sbomify.com/MAL-2025-25508/): Malicious code in lodashh (npm) (malicious package) - [MAL-2025-25507](https://insights.sbomify.com/MAL-2025-25507/): Malicious code in lodash_tailwind (npm) (malicious package) - [MAL-2025-25506](https://insights.sbomify.com/MAL-2025-25506/): Malicious code in lodash.js (npm) (malicious package) - [MAL-2025-25505](https://insights.sbomify.com/MAL-2025-25505/): Malicious code in lodash-simple (npm) (malicious package) - [MAL-2025-25504](https://insights.sbomify.com/MAL-2025-25504/): Malicious code in lodash-g (npm) (malicious package) - [MAL-2025-25503](https://insights.sbomify.com/MAL-2025-25503/): Malicious code in lodash-fast (npm) (malicious package) - [MAL-2025-25502](https://insights.sbomify.com/MAL-2025-25502/): Malicious code in lodahs (npm) (malicious package) - [MAL-2025-25501](https://insights.sbomify.com/MAL-2025-25501/): Malicious code in lodah (npm) (malicious package) - [MAL-2025-25500](https://insights.sbomify.com/MAL-2025-25500/): Malicious code in lodache (npm) (malicious package) - [MAL-2025-2550](https://insights.sbomify.com/MAL-2025-2550/): Malicious code in github.com/utilizedsun/layout (Go) (malicious package) - [MAL-2025-255](https://insights.sbomify.com/MAL-2025-255/): Malicious code in vimium (npm) (malicious package) - [MAL-2025-25499](https://insights.sbomify.com/MAL-2025-25499/): Malicious code in locoquizz (npm) (malicious package) - [MAL-2025-25498](https://insights.sbomify.com/MAL-2025-25498/): Malicious code in loclys-leaflet-routing-machine (npm) (malicious package) - [MAL-2025-25497](https://insights.sbomify.com/MAL-2025-25497/): Malicious code in locktools (npm) (malicious package) - [MAL-2025-25496](https://insights.sbomify.com/MAL-2025-25496/): Malicious code in lockheed-react (npm) (malicious package) - [MAL-2025-25495](https://insights.sbomify.com/MAL-2025-25495/): Malicious code in locker-client-js-manifest (npm) (malicious package) - [MAL-2025-25494](https://insights.sbomify.com/MAL-2025-25494/): Malicious code in lock-test6035 (npm) (malicious package) - [MAL-2025-25493](https://insights.sbomify.com/MAL-2025-25493/): Malicious code in locits (npm) (malicious package) - [MAL-2025-25492](https://insights.sbomify.com/MAL-2025-25492/): Malicious code in locationary (npm) (malicious package) - [MAL-2025-25491](https://insights.sbomify.com/MAL-2025-25491/): Malicious code in localz-react-native-sdk (npm) (malicious package) - [MAL-2025-25490](https://insights.sbomify.com/MAL-2025-25490/): Malicious code in localz-lastmile-ui-login (npm) (malicious package) - [MAL-2025-2549](https://insights.sbomify.com/MAL-2025-2549/): Malicious code in github.com/thankfulmai/hypert (Go) (malicious package) - [MAL-2025-25489](https://insights.sbomify.com/MAL-2025-25489/): Malicious code in localz-lastmile-react-native-sdk (npm) (malicious package) - [MAL-2025-25488](https://insights.sbomify.com/MAL-2025-25488/): Malicious code in locale-dev-cdbs (npm) (malicious package) - [MAL-2025-25487](https://insights.sbomify.com/MAL-2025-25487/): Malicious code in local-terser-wasat-ophiuchus (npm) (malicious package) - [MAL-2025-25486](https://insights.sbomify.com/MAL-2025-25486/): Malicious code in local-storage-manager-html5 (npm) (malicious package) - [MAL-2025-25485](https://insights.sbomify.com/MAL-2025-25485/): Malicious code in local-quantumfoam-cypress-cosmology (npm) (malicious package) - [MAL-2025-25484](https://insights.sbomify.com/MAL-2025-25484/): Malicious code in local-phoebe-soap-react-bootstrap (npm) (malicious package) - [MAL-2025-25483](https://insights.sbomify.com/MAL-2025-25483/): Malicious code in local-news-stream (npm) (malicious package) - [MAL-2025-25482](https://insights.sbomify.com/MAL-2025-25482/): Malicious code in local-modules-as-global (npm) (malicious package) - [MAL-2025-25481](https://insights.sbomify.com/MAL-2025-25481/): Malicious code in local-lds (npm) (malicious package) - [MAL-2025-25480](https://insights.sbomify.com/MAL-2025-25480/): Malicious code in local-impulse-decoherence-stream (npm) (malicious package) - [MAL-2025-2548](https://insights.sbomify.com/MAL-2025-2548/): Malicious code in github.com/shallowmulti/hypert (Go) (malicious package) - [MAL-2025-25479](https://insights.sbomify.com/MAL-2025-25479/): Malicious code in local-dependency (npm) (malicious package) - [MAL-2025-25478](https://insights.sbomify.com/MAL-2025-25478/): Malicious code in local-debug (npm) (malicious package) - [MAL-2025-25477](https://insights.sbomify.com/MAL-2025-25477/): Malicious code in lobbying (npm) (malicious package) - [MAL-2025-25476](https://insights.sbomify.com/MAL-2025-25476/): Malicious code in loan-match-list (npm) (malicious package) - [MAL-2025-25475](https://insights.sbomify.com/MAL-2025-25475/): Malicious code in loadyaml (npm) (malicious package) - [MAL-2025-25474](https://insights.sbomify.com/MAL-2025-25474/): Malicious code in loader-8319331108 (npm) (malicious package) - [MAL-2025-25473](https://insights.sbomify.com/MAL-2025-25473/): Malicious code in load-validate-function-star-execute (npm) (malicious package) - [MAL-2025-25472](https://insights.sbomify.com/MAL-2025-25472/): Malicious code in load-runtime-benchmark-hash-cluster (npm) (malicious package) - [MAL-2025-25471](https://insights.sbomify.com/MAL-2025-25471/): Malicious code in load-lambda-fire-code-emulate (npm) (malicious package) - [MAL-2025-25470](https://insights.sbomify.com/MAL-2025-25470/): Malicious code in load-hot-info-delta-encode (npm) (malicious package) - [MAL-2025-2547](https://insights.sbomify.com/MAL-2025-2547/): Malicious code in github.com/shadowybulk/hypert (Go) (malicious package) - [MAL-2025-25469](https://insights.sbomify.com/MAL-2025-25469/): Malicious code in load-cat-container-hot-book (npm) (malicious package) - [MAL-2025-25468](https://insights.sbomify.com/MAL-2025-25468/): Malicious code in load-book-encrypt-deserialize-permission (npm) (malicious package) - [MAL-2025-25467](https://insights.sbomify.com/MAL-2025-25467/): Malicious code in lnxqpyseckhfwikg (npm) (malicious package) - [MAL-2025-25466](https://insights.sbomify.com/MAL-2025-25466/): Malicious code in lnchubgit (npm) (malicious package) - [MAL-2025-25465](https://insights.sbomify.com/MAL-2025-25465/): Malicious code in LMX-Data (npm) (malicious package) - [MAL-2025-25464](https://insights.sbomify.com/MAL-2025-25464/): Malicious code in lmONE (npm) (malicious package) - [MAL-2025-25463](https://insights.sbomify.com/MAL-2025-25463/): Malicious code in lmaocr (npm) (malicious package) - [MAL-2025-25462](https://insights.sbomify.com/MAL-2025-25462/): Malicious code in llaveros (npm) (malicious package) - [MAL-2025-25461](https://insights.sbomify.com/MAL-2025-25461/): Malicious code in lkwoqtgnxcrkjupm (npm) (malicious package) - [MAL-2025-25460](https://insights.sbomify.com/MAL-2025-25460/): Malicious code in lkmhvfiqzdoxntge (npm) (malicious package) - [MAL-2025-2546](https://insights.sbomify.com/MAL-2025-2546/): Malicious code in github.com/ornatedoctrin/layout (Go) (malicious package) - [MAL-2025-25459](https://insights.sbomify.com/MAL-2025-25459/): Malicious code in ljudtest (npm) (malicious package) - [MAL-2025-25458](https://insights.sbomify.com/MAL-2025-25458/): Malicious code in ljgeyrvziktfndxw (npm) (malicious package) - [MAL-2025-25457](https://insights.sbomify.com/MAL-2025-25457/): Malicious code in liyxsbnmqvfkauoe (npm) (malicious package) - [MAL-2025-25456](https://insights.sbomify.com/MAL-2025-25456/): Malicious code in livermore (npm) (malicious package) - [MAL-2025-25455](https://insights.sbomify.com/MAL-2025-25455/): Malicious code in livepipe (npm) (malicious package) - [MAL-2025-25454](https://insights.sbomify.com/MAL-2025-25454/): Malicious code in livemesh (npm) (malicious package) - [MAL-2025-25453](https://insights.sbomify.com/MAL-2025-25453/): Malicious code in liveclone (npm) (malicious package) - [MAL-2025-25452](https://insights.sbomify.com/MAL-2025-25452/): Malicious code in liveadhan (npm) (malicious package) - [MAL-2025-25451](https://insights.sbomify.com/MAL-2025-25451/): Malicious code in littletea (npm) (malicious package) - [MAL-2025-25450](https://insights.sbomify.com/MAL-2025-25450/): Malicious code in little-pictures (npm) (malicious package) - [MAL-2025-2545](https://insights.sbomify.com/MAL-2025-2545/): Malicious code in github.com/boltdb-go/bolt (Go) (malicious package) - [MAL-2025-25449](https://insights.sbomify.com/MAL-2025-25449/): Malicious code in litteras (npm) (malicious package) - [MAL-2025-25448](https://insights.sbomify.com/MAL-2025-25448/): Malicious code in lithosphere-ophiuchus-technosignature-sedimentology (npm) (malicious package) - [MAL-2025-25447](https://insights.sbomify.com/MAL-2025-25447/): Malicious code in lithosphere-cryonics-gammarayburst-epigenetics (npm) (malicious package) - [MAL-2025-25446](https://insights.sbomify.com/MAL-2025-25446/): Malicious code in lithosphere-astro-prompts-paleoceanography (npm) (malicious package) - [MAL-2025-25445](https://insights.sbomify.com/MAL-2025-25445/): Malicious code in lithcrypt (npm) (malicious package) - [MAL-2025-25444](https://insights.sbomify.com/MAL-2025-25444/): Malicious code in litemvc (npm) (malicious package) - [MAL-2025-25443](https://insights.sbomify.com/MAL-2025-25443/): Malicious code in litemodal (npm) (malicious package) - [MAL-2025-25442](https://insights.sbomify.com/MAL-2025-25442/): Malicious code in litecpool (npm) (malicious package) - [MAL-2025-25441](https://insights.sbomify.com/MAL-2025-25441/): Malicious code in litechat (npm) (malicious package) - [MAL-2025-25440](https://insights.sbomify.com/MAL-2025-25440/): Malicious code in lita-external (npm) (malicious package) - [MAL-2025-2544](https://insights.sbomify.com/MAL-2025-2544/): Malicious code in github.com/belatedplanet/hypert (Go) (malicious package) - [MAL-2025-25439](https://insights.sbomify.com/MAL-2025-25439/): Malicious code in listtasks (npm) (malicious package) - [MAL-2025-25438](https://insights.sbomify.com/MAL-2025-25438/): Malicious code in listables (npm) (malicious package) - [MAL-2025-25437](https://insights.sbomify.com/MAL-2025-25437/): Malicious code in lisponaut (npm) (malicious package) - [MAL-2025-25436](https://insights.sbomify.com/MAL-2025-25436/): Malicious code in liscom (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/830/