# Vulnerabilities published in 2025 - [MAL-2025-25435](https://insights.sbomify.com/MAL-2025-25435/): Malicious code in lisa-tempe47-kuki (npm) (malicious package) - [MAL-2025-25434](https://insights.sbomify.com/MAL-2025-25434/): Malicious code in lisa-telurtahu71-breki (npm) (malicious package) - [MAL-2025-25433](https://insights.sbomify.com/MAL-2025-25433/): Malicious code in lisa-sate96-kuki (npm) (malicious package) - [MAL-2025-25432](https://insights.sbomify.com/MAL-2025-25432/): Malicious code in lisa-peyek86-kuki (npm) (malicious package) - [MAL-2025-25431](https://insights.sbomify.com/MAL-2025-25431/): Malicious code in lisa-ongol-ongol1-kuki (npm) (malicious package) - [MAL-2025-25430](https://insights.sbomify.com/MAL-2025-25430/): Malicious code in lisa-mie2-kuki (npm) (malicious package) - [MAL-2025-2543](https://insights.sbomify.com/MAL-2025-2543/): Malicious code in azure-rest-api-specs (npm) (malicious package) - [MAL-2025-25429](https://insights.sbomify.com/MAL-2025-25429/): Malicious code in lisa-lapis74-breki (npm) (malicious package) - [MAL-2025-25428](https://insights.sbomify.com/MAL-2025-25428/): Malicious code in liruby (npm) (malicious package) - [MAL-2025-25427](https://insights.sbomify.com/MAL-2025-25427/): Malicious code in liquid-c (npm) (malicious package) - [MAL-2025-25426](https://insights.sbomify.com/MAL-2025-25426/): Malicious code in lipoas (npm) (malicious package) - [MAL-2025-25425](https://insights.sbomify.com/MAL-2025-25425/): Malicious code in lior-testflow (npm) (malicious package) - [MAL-2025-25424](https://insights.sbomify.com/MAL-2025-25424/): Malicious code in lionwiki (npm) (malicious package) - [MAL-2025-25423](https://insights.sbomify.com/MAL-2025-25423/): Malicious code in lion-vinegar-fpow (npm) (malicious package) - [MAL-2025-25422](https://insights.sbomify.com/MAL-2025-25422/): Malicious code in lion-orbit-wk7y (npm) (malicious package) - [MAL-2025-25421](https://insights.sbomify.com/MAL-2025-25421/): Malicious code in lion-jungle-02k8 (npm) (malicious package) - [MAL-2025-25420](https://insights.sbomify.com/MAL-2025-25420/): Malicious code in lion-grape-atbg (npm) (malicious package) - [MAL-2025-2542](https://insights.sbomify.com/MAL-2025-2542/): Malicious code in tag-soup-ng (npm) (malicious package) - [MAL-2025-25419](https://insights.sbomify.com/MAL-2025-25419/): Malicious code in lion-falcon-lrub (npm) (malicious package) - [MAL-2025-25418](https://insights.sbomify.com/MAL-2025-25418/): Malicious code in linuxrite (npm) (malicious package) - [MAL-2025-25417](https://insights.sbomify.com/MAL-2025-25417/): Malicious code in linuxjoy (npm) (malicious package) - [MAL-2025-25416](https://insights.sbomify.com/MAL-2025-25416/): Malicious code in linuxiats (npm) (malicious package) - [MAL-2025-25415](https://insights.sbomify.com/MAL-2025-25415/): Malicious code in linuxfun (npm) (malicious package) - [MAL-2025-25414](https://insights.sbomify.com/MAL-2025-25414/): Malicious code in linuxdict (npm) (malicious package) - [MAL-2025-25413](https://insights.sbomify.com/MAL-2025-25413/): Malicious code in linux-libs (npm) (malicious package) - [MAL-2025-25412](https://insights.sbomify.com/MAL-2025-25412/): Malicious code in linux-heike-rumen (npm) (malicious package) - [MAL-2025-25411](https://insights.sbomify.com/MAL-2025-25411/): Malicious code in lint-staged-mesosphere-geomorphology-blazar (npm) (malicious package) - [MAL-2025-25410](https://insights.sbomify.com/MAL-2025-25410/): Malicious code in lint-staged-install-bellatrix-geodynamo (npm) (malicious package) - [MAL-2025-2541](https://insights.sbomify.com/MAL-2025-2541/): Malicious code in yellowcard-styling-config (npm) (malicious package) - [MAL-2025-25409](https://insights.sbomify.com/MAL-2025-25409/): Malicious code in lint-staged-ceres-metalsmith-non-blocking (npm) (malicious package) - [MAL-2025-25408](https://insights.sbomify.com/MAL-2025-25408/): Malicious code in lint-slidev-fork-nebula (npm) (malicious package) - [MAL-2025-25407](https://insights.sbomify.com/MAL-2025-25407/): Malicious code in lint-perseus-css-minimizer-webpack-plugin-cygnus (npm) (malicious package) - [MAL-2025-25406](https://insights.sbomify.com/MAL-2025-25406/): Malicious code in lint-hydra-gravity-prosthetics (npm) (malicious package) - [MAL-2025-25405](https://insights.sbomify.com/MAL-2025-25405/): Malicious code in lint-framework-link-toml (npm) (malicious package) - [MAL-2025-25404](https://insights.sbomify.com/MAL-2025-25404/): Malicious code in lint-branch-name (npm) (malicious package) - [MAL-2025-25403](https://insights.sbomify.com/MAL-2025-25403/): Malicious code in lint-apex-magnetar-pulsar (npm) (malicious package) - [MAL-2025-25402](https://insights.sbomify.com/MAL-2025-25402/): Malicious code in linkstrgo (npm) (malicious package) - [MAL-2025-25401](https://insights.sbomify.com/MAL-2025-25401/): Malicious code in linkpath-paypal (npm) (malicious package) - [MAL-2025-25400](https://insights.sbomify.com/MAL-2025-25400/): Malicious code in linkomnia (npm) (malicious package) - [MAL-2025-2540](https://insights.sbomify.com/MAL-2025-2540/): Malicious code in symphony-duplicates (npm) (malicious package) - [MAL-2025-254](https://insights.sbomify.com/MAL-2025-254/): Malicious code in uber-direct-js-sdk-examples (npm) (malicious package) - [MAL-2025-25399](https://insights.sbomify.com/MAL-2025-25399/): Malicious code in linkedout (npm) (malicious package) - [MAL-2025-25398](https://insights.sbomify.com/MAL-2025-25398/): Malicious code in linkatzju (npm) (malicious package) - [MAL-2025-25397](https://insights.sbomify.com/MAL-2025-25397/): Malicious code in link-rest-client (npm) (malicious package) - [MAL-2025-25396](https://insights.sbomify.com/MAL-2025-25396/): Malicious code in link-phoenix-jsonp-concurrently (npm) (malicious package) - [MAL-2025-25395](https://insights.sbomify.com/MAL-2025-25395/): Malicious code in link-next (npm) (malicious package) - [MAL-2025-25394](https://insights.sbomify.com/MAL-2025-25394/): Malicious code in link-function-info-tree-sandbox (npm) (malicious package) - [MAL-2025-25393](https://insights.sbomify.com/MAL-2025-25393/): Malicious code in link-eslint-config-jabbah-darkenergy (npm) (malicious package) - [MAL-2025-25392](https://insights.sbomify.com/MAL-2025-25392/): Malicious code in linickx (npm) (malicious package) - [MAL-2025-25391](https://insights.sbomify.com/MAL-2025-25391/): Malicious code in lingotool (npm) (malicious package) - [MAL-2025-25390](https://insights.sbomify.com/MAL-2025-25390/): Malicious code in lines-three (npm) (malicious package) - [MAL-2025-2539](https://insights.sbomify.com/MAL-2025-2539/): Malicious code in @brix-crypto/crypto-js (npm) (malicious package) - [MAL-2025-25389](https://insights.sbomify.com/MAL-2025-25389/): Malicious code in lineqs (npm) (malicious package) - [MAL-2025-25388](https://insights.sbomify.com/MAL-2025-25388/): Malicious code in linear-connect (npm) (malicious package) - [MAL-2025-25387](https://insights.sbomify.com/MAL-2025-25387/): Malicious code in line-charts-g200172 (npm) (malicious package) - [MAL-2025-25386](https://insights.sbomify.com/MAL-2025-25386/): Malicious code in lindas (npm) (malicious package) - [MAL-2025-25385](https://insights.sbomify.com/MAL-2025-25385/): Malicious code in linbot (npm) (malicious package) - [MAL-2025-25384](https://insights.sbomify.com/MAL-2025-25384/): Malicious code in linaeduca (npm) (malicious package) - [MAL-2025-25383](https://insights.sbomify.com/MAL-2025-25383/): Malicious code in lina-telurtahu75-sukiwir (npm) (malicious package) - [MAL-2025-25382](https://insights.sbomify.com/MAL-2025-25382/): Malicious code in lina-ruwet47-sukiwir (npm) (malicious package) - [MAL-2025-25381](https://insights.sbomify.com/MAL-2025-25381/): Malicious code in lina-rojak73-kuki (npm) (malicious package) - [MAL-2025-25380](https://insights.sbomify.com/MAL-2025-25380/): Malicious code in lina-rojak30-sukiwir (npm) (malicious package) - [MAL-2025-2538](https://insights.sbomify.com/MAL-2025-2538/): Malicious code in wokes (npm) (malicious package) - [MAL-2025-25379](https://insights.sbomify.com/MAL-2025-25379/): Malicious code in lina-nasi59-kuki (npm) (malicious package) - [MAL-2025-25378](https://insights.sbomify.com/MAL-2025-25378/): Malicious code in lina-lapis39-breki (npm) (malicious package) - [MAL-2025-25377](https://insights.sbomify.com/MAL-2025-25377/): Malicious code in lina-klipo76-sukiwir (npm) (malicious package) - [MAL-2025-25376](https://insights.sbomify.com/MAL-2025-25376/): Malicious code in lina-bubur29-breki (npm) (malicious package) - [MAL-2025-25375](https://insights.sbomify.com/MAL-2025-25375/): Malicious code in lina-brongkos42-breki (npm) (malicious package) - [MAL-2025-25374](https://insights.sbomify.com/MAL-2025-25374/): Malicious code in limonero (npm) (malicious package) - [MAL-2025-25373](https://insights.sbomify.com/MAL-2025-25373/): Malicious code in limited-parallel-loop (npm) (malicious package) - [MAL-2025-25372](https://insights.sbomify.com/MAL-2025-25372/): Malicious code in limitationlifecycle-paypal (npm) (malicious package) - [MAL-2025-25371](https://insights.sbomify.com/MAL-2025-25371/): Malicious code in limestone_tij9k_27eoq_quicksilver (npm) (malicious package) - [MAL-2025-25370](https://insights.sbomify.com/MAL-2025-25370/): Malicious code in limestone_t9xdc_ja3o0_boulder (npm) (malicious package) - [MAL-2025-2537](https://insights.sbomify.com/MAL-2025-2537/): Malicious code in vertex-core (npm) (malicious package) - [MAL-2025-25369](https://insights.sbomify.com/MAL-2025-25369/): Malicious code in limestone_jbv4x_w7cvm_whirlwind (npm) (malicious package) - [MAL-2025-25368](https://insights.sbomify.com/MAL-2025-25368/): Malicious code in limestone_b9sgs_b58v6_yellow (npm) (malicious package) - [MAL-2025-25367](https://insights.sbomify.com/MAL-2025-25367/): Malicious code in limart (npm) (malicious package) - [MAL-2025-25366](https://insights.sbomify.com/MAL-2025-25366/): Malicious code in lima-zulu-ytsi (npm) (malicious package) - [MAL-2025-25365](https://insights.sbomify.com/MAL-2025-25365/): Malicious code in lima-watermelon-9djg (npm) (malicious package) - [MAL-2025-25364](https://insights.sbomify.com/MAL-2025-25364/): Malicious code in lima-vanilla-plfd (npm) (malicious package) - [MAL-2025-25363](https://insights.sbomify.com/MAL-2025-25363/): Malicious code in lima-vanilla-eueu (npm) (malicious package) - [MAL-2025-25362](https://insights.sbomify.com/MAL-2025-25362/): Malicious code in lima-uniform-sierra-dkkgm (npm) (malicious package) - [MAL-2025-25361](https://insights.sbomify.com/MAL-2025-25361/): Malicious code in lima-ugli-zulu-jipaz (npm) (malicious package) - [MAL-2025-25360](https://insights.sbomify.com/MAL-2025-25360/): Malicious code in lima-ugli-kiwi-ytpln (npm) (malicious package) - [MAL-2025-2536](https://insights.sbomify.com/MAL-2025-2536/): Malicious code in tokesjs (npm) (malicious package) - [MAL-2025-25359](https://insights.sbomify.com/MAL-2025-25359/): Malicious code in lima-sierra-schr (npm) (malicious package) - [MAL-2025-25358](https://insights.sbomify.com/MAL-2025-25358/): Malicious code in lima-sierra-gtmc (npm) (malicious package) - [MAL-2025-25357](https://insights.sbomify.com/MAL-2025-25357/): Malicious code in lima-sierra-echo-ejkmd (npm) (malicious package) - [MAL-2025-25356](https://insights.sbomify.com/MAL-2025-25356/): Malicious code in lima-s4w-project (npm) (malicious package) - [MAL-2025-25355](https://insights.sbomify.com/MAL-2025-25355/): Malicious code in lima-romeo-hbxh (npm) (malicious package) - [MAL-2025-25354](https://insights.sbomify.com/MAL-2025-25354/): Malicious code in lima-papa-xigua-fmxiy (npm) (malicious package) - [MAL-2025-25353](https://insights.sbomify.com/MAL-2025-25353/): Malicious code in lima-papa-bpro (npm) (malicious package) - [MAL-2025-25352](https://insights.sbomify.com/MAL-2025-25352/): Malicious code in lima-p92-project (npm) (malicious package) - [MAL-2025-25351](https://insights.sbomify.com/MAL-2025-25351/): Malicious code in lima-oscar-kiwi-ogzar (npm) (malicious package) - [MAL-2025-25350](https://insights.sbomify.com/MAL-2025-25350/): Malicious code in lima-november-alpha-otykt (npm) (malicious package) - [MAL-2025-2535](https://insights.sbomify.com/MAL-2025-2535/): Malicious code in tokes (npm) (malicious package) - [MAL-2025-25349](https://insights.sbomify.com/MAL-2025-25349/): Malicious code in lima-nko-project (npm) (malicious package) - [MAL-2025-25348](https://insights.sbomify.com/MAL-2025-25348/): Malicious code in lima-nectarine-ywyp (npm) (malicious package) - [MAL-2025-25347](https://insights.sbomify.com/MAL-2025-25347/): Malicious code in lima-nectarine-lcdl (npm) (malicious package) - [MAL-2025-25346](https://insights.sbomify.com/MAL-2025-25346/): Malicious code in lima-nectarine-echo-ypzst (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/831/