# Vulnerabilities published in 2025


- [MAL-2025-25255](https://insights.sbomify.com/MAL-2025-25255/): Malicious code in lichen-1iocs-k4zcj-ripple-project (npm) (malicious package)
- [MAL-2025-25254](https://insights.sbomify.com/MAL-2025-25254/): Malicious code in licence-checker (npm) (malicious package)
- [MAL-2025-25253](https://insights.sbomify.com/MAL-2025-25253/): Malicious code in libusby (npm) (malicious package)
- [MAL-2025-25252](https://insights.sbomify.com/MAL-2025-25252/): Malicious code in libusbip (npm) (malicious package)
- [MAL-2025-25251](https://insights.sbomify.com/MAL-2025-25251/): Malicious code in libucl (npm) (malicious package)
- [MAL-2025-25250](https://insights.sbomify.com/MAL-2025-25250/): Malicious code in libsord (npm) (malicious package)
- [MAL-2025-2525](https://insights.sbomify.com/MAL-2025-2525/): Malicious code in py_pool (npm) (malicious package)
- [MAL-2025-25249](https://insights.sbomify.com/MAL-2025-25249/): Malicious code in libsipc (npm) (malicious package)
- [MAL-2025-25248](https://insights.sbomify.com/MAL-2025-25248/): Malicious code in libsignon (npm) (malicious package)
- [MAL-2025-25247](https://insights.sbomify.com/MAL-2025-25247/): Malicious code in libretee (npm) (malicious package)
- [MAL-2025-25246](https://insights.sbomify.com/MAL-2025-25246/): Malicious code in library-slides-spectron-webdriver-isostasy (npm) (malicious package)
- [MAL-2025-25245](https://insights.sbomify.com/MAL-2025-25245/): Malicious code in library-metalsmith-apollo-protractor (npm) (malicious package)
- [MAL-2025-25244](https://insights.sbomify.com/MAL-2025-25244/): Malicious code in library-commitizen-webdriver-manager-neptunology (npm) (malicious package)
- [MAL-2025-25243](https://insights.sbomify.com/MAL-2025-25243/): Malicious code in libpostcss (npm) (malicious package)
- [MAL-2025-25242](https://insights.sbomify.com/MAL-2025-25242/): Malicious code in libparty (npm) (malicious package)
- [MAL-2025-25241](https://insights.sbomify.com/MAL-2025-25241/): Malicious code in liboccam (npm) (malicious package)
- [MAL-2025-25240](https://insights.sbomify.com/MAL-2025-25240/): Malicious code in libnfc (npm) (malicious package)
- [MAL-2025-2524](https://insights.sbomify.com/MAL-2025-2524/): Malicious code in plasty (npm) (malicious package)
- [MAL-2025-25239](https://insights.sbomify.com/MAL-2025-25239/): Malicious code in libmii (npm) (malicious package)
- [MAL-2025-25238](https://insights.sbomify.com/MAL-2025-25238/): Malicious code in libmap (npm) (malicious package)
- [MAL-2025-25237](https://insights.sbomify.com/MAL-2025-25237/): Malicious code in liblcdgr (npm) (malicious package)
- [MAL-2025-25236](https://insights.sbomify.com/MAL-2025-25236/): Malicious code in libinoro (npm) (malicious package)
- [MAL-2025-25235](https://insights.sbomify.com/MAL-2025-25235/): Malicious code in libi-common (npm) (malicious package)
- [MAL-2025-25234](https://insights.sbomify.com/MAL-2025-25234/): Malicious code in libhid (npm) (malicious package)
- [MAL-2025-25233](https://insights.sbomify.com/MAL-2025-25233/): Malicious code in libhbaapi (npm) (malicious package)
- [MAL-2025-25232](https://insights.sbomify.com/MAL-2025-25232/): Malicious code in libfluid (npm) (malicious package)
- [MAL-2025-25231](https://insights.sbomify.com/MAL-2025-25231/): Malicious code in libefsm (npm) (malicious package)
- [MAL-2025-25230](https://insights.sbomify.com/MAL-2025-25230/): Malicious code in libdvd (npm) (malicious package)
- [MAL-2025-2523](https://insights.sbomify.com/MAL-2025-2523/): Malicious code in plast3y (npm) (malicious package)
- [MAL-2025-25229](https://insights.sbomify.com/MAL-2025-25229/): Malicious code in libdgg (npm) (malicious package)
- [MAL-2025-25228](https://insights.sbomify.com/MAL-2025-25228/): Malicious code in libcutsim (npm) (malicious package)
- [MAL-2025-25227](https://insights.sbomify.com/MAL-2025-25227/): Malicious code in libbsd (npm) (malicious package)
- [MAL-2025-25226](https://insights.sbomify.com/MAL-2025-25226/): Malicious code in libblp (npm) (malicious package)
- [MAL-2025-25225](https://insights.sbomify.com/MAL-2025-25225/): Malicious code in lib-transmit (npm) (malicious package)
- [MAL-2025-25224](https://insights.sbomify.com/MAL-2025-25224/): Malicious code in lib-react-component-page-notifications (npm) (malicious package)
- [MAL-2025-25223](https://insights.sbomify.com/MAL-2025-25223/): Malicious code in lib-deepdocs-js (npm) (malicious package)
- [MAL-2025-25222](https://insights.sbomify.com/MAL-2025-25222/): Malicious code in lianji (npm) (malicious package)
- [MAL-2025-25221](https://insights.sbomify.com/MAL-2025-25221/): Malicious code in lhrwvaebftsxmkjk (npm) (malicious package)
- [MAL-2025-25220](https://insights.sbomify.com/MAL-2025-25220/): Malicious code in lhdnysawcxbgukrk (npm) (malicious package)
- [MAL-2025-2522](https://insights.sbomify.com/MAL-2025-2522/): Malicious code in picl-server (npm) (malicious package)
- [MAL-2025-25219](https://insights.sbomify.com/MAL-2025-25219/): Malicious code in lg-mutator-mobile-ads (npm) (malicious package)
- [MAL-2025-25218](https://insights.sbomify.com/MAL-2025-25218/): Malicious code in lfnvrkikegxtocpb (npm) (malicious package)
- [MAL-2025-25217](https://insights.sbomify.com/MAL-2025-25217/): Malicious code in lfgjkvmrzyueksoh (npm) (malicious package)
- [MAL-2025-25216](https://insights.sbomify.com/MAL-2025-25216/): Malicious code in leysersfx (npm) (malicious package)
- [MAL-2025-25215](https://insights.sbomify.com/MAL-2025-25215/): Malicious code in lexmar (npm) (malicious package)
- [MAL-2025-25214](https://insights.sbomify.com/MAL-2025-25214/): Malicious code in lexicrypt (npm) (malicious package)
- [MAL-2025-25213](https://insights.sbomify.com/MAL-2025-25213/): Malicious code in lexi-data-api (npm) (malicious package)
- [MAL-2025-25212](https://insights.sbomify.com/MAL-2025-25212/): Malicious code in lexemus (npm) (malicious package)
- [MAL-2025-25211](https://insights.sbomify.com/MAL-2025-25211/): Malicious code in lew (npm) (malicious package)
- [MAL-2025-25210](https://insights.sbomify.com/MAL-2025-25210/): Malicious code in levontest (npm) (malicious package)
- [MAL-2025-2521](https://insights.sbomify.com/MAL-2025-2521/): Malicious code in pendeck (npm) (malicious package)
- [MAL-2025-25209](https://insights.sbomify.com/MAL-2025-25209/): Malicious code in levis (npm) (malicious package)
- [MAL-2025-25208](https://insights.sbomify.com/MAL-2025-25208/): Malicious code in levels-yakutsk-gemini-tethys (npm) (malicious package)
- [MAL-2025-25207](https://insights.sbomify.com/MAL-2025-25207/): Malicious code in levels-xanthus-publish-publish (npm) (malicious package)
- [MAL-2025-25206](https://insights.sbomify.com/MAL-2025-25206/): Malicious code in levels-postgres-io-grus (npm) (malicious package)
- [MAL-2025-25205](https://insights.sbomify.com/MAL-2025-25205/): Malicious code in levels-optimize-css-assets-webpack-plugin-hermes-callisto (npm) (malicious package)
- [MAL-2025-25204](https://insights.sbomify.com/MAL-2025-25204/): Malicious code in levels-carpo-nightwatch-local (npm) (malicious package)
- [MAL-2025-25203](https://insights.sbomify.com/MAL-2025-25203/): Malicious code in levels-alphard-meteor-meissa (npm) (malicious package)
- [MAL-2025-25202](https://insights.sbomify.com/MAL-2025-25202/): Malicious code in levelq (npm) (malicious package)
- [MAL-2025-25201](https://insights.sbomify.com/MAL-2025-25201/): Malicious code in level-json-wrapper (npm) (malicious package)
- [MAL-2025-25200](https://insights.sbomify.com/MAL-2025-25200/): Malicious code in level-json-cache (npm) (malicious package)
- [MAL-2025-2520](https://insights.sbomify.com/MAL-2025-2520/): Malicious code in paymentapiplatformservice-paypal (npm) (malicious package)
- [MAL-2025-252](https://insights.sbomify.com/MAL-2025-252/): Malicious code in tinywallet (npm) (malicious package)
- [MAL-2025-25199](https://insights.sbomify.com/MAL-2025-25199/): Malicious code in level-json (npm) (malicious package)
- [MAL-2025-25198](https://insights.sbomify.com/MAL-2025-25198/): Malicious code in level-flush (npm) (malicious package)
- [MAL-2025-25197](https://insights.sbomify.com/MAL-2025-25197/): Malicious code in level-client (npm) (malicious package)
- [MAL-2025-25196](https://insights.sbomify.com/MAL-2025-25196/): Malicious code in lettuce-zulu-74in (npm) (malicious package)
- [MAL-2025-25195](https://insights.sbomify.com/MAL-2025-25195/): Malicious code in lettuce-wormhole-5bh3 (npm) (malicious package)
- [MAL-2025-25194](https://insights.sbomify.com/MAL-2025-25194/): Malicious code in lettuce-tornado-5aby (npm) (malicious package)
- [MAL-2025-25193](https://insights.sbomify.com/MAL-2025-25193/): Malicious code in lettuce-flare-w6xj (npm) (malicious package)
- [MAL-2025-25192](https://insights.sbomify.com/MAL-2025-25192/): Malicious code in lettuce-date-6zbg (npm) (malicious package)
- [MAL-2025-25191](https://insights.sbomify.com/MAL-2025-25191/): Malicious code in letsmrt (npm) (malicious package)
- [MAL-2025-25190](https://insights.sbomify.com/MAL-2025-25190/): Malicious code in letra (npm) (malicious package)
- [MAL-2025-2519](https://insights.sbomify.com/MAL-2025-2519/): Malicious code in nnc-editor (npm) (malicious package)
- [MAL-2025-25189](https://insights.sbomify.com/MAL-2025-25189/): Malicious code in letproj (npm) (malicious package)
- [MAL-2025-25188](https://insights.sbomify.com/MAL-2025-25188/): Malicious code in letotests (npm) (malicious package)
- [MAL-2025-25187](https://insights.sbomify.com/MAL-2025-25187/): Malicious code in letjzsndypcavoqr (npm) (malicious package)
- [MAL-2025-25186](https://insights.sbomify.com/MAL-2025-25186/): Malicious code in lessonly-chrome-extension (npm) (malicious package)
- [MAL-2025-25185](https://insights.sbomify.com/MAL-2025-25185/): Malicious code in lessio (npm) (malicious package)
- [MAL-2025-25184](https://insights.sbomify.com/MAL-2025-25184/): Malicious code in lessaddin (npm) (malicious package)
- [MAL-2025-25183](https://insights.sbomify.com/MAL-2025-25183/): Malicious code in less-xml-asteroid-cryonics (npm) (malicious package)
- [MAL-2025-25182](https://insights.sbomify.com/MAL-2025-25182/): Malicious code in less-update-kaus-build (npm) (malicious package)
- [MAL-2025-25181](https://insights.sbomify.com/MAL-2025-25181/): Malicious code in less-triton-selenology-castor (npm) (malicious package)
- [MAL-2025-25180](https://insights.sbomify.com/MAL-2025-25180/): Malicious code in less-sadr-test-enceladus (npm) (malicious package)
- [MAL-2025-2518](https://insights.sbomify.com/MAL-2025-2518/): Malicious code in near-lake-raw-printer (npm) (malicious package)
- [MAL-2025-25179](https://insights.sbomify.com/MAL-2025-25179/): Malicious code in less-loader-spectron-exoplanetology-phenomic (npm) (malicious package)
- [MAL-2025-25178](https://insights.sbomify.com/MAL-2025-25178/): Malicious code in less-loader-resolvers-zephyr-postcss (npm) (malicious package)
- [MAL-2025-25177](https://insights.sbomify.com/MAL-2025-25177/): Malicious code in less-loader-nightmare-dendrochronology-chromedriver (npm) (malicious package)
- [MAL-2025-25176](https://insights.sbomify.com/MAL-2025-25176/): Malicious code in less-loader-colors-nashira-docusaurus (npm) (malicious package)
- [MAL-2025-25175](https://insights.sbomify.com/MAL-2025-25175/): Malicious code in less-loader-algol-chakra-ui-octans (npm) (malicious package)
- [MAL-2025-25174](https://insights.sbomify.com/MAL-2025-25174/): Malicious code in less-common-words (npm) (malicious package)
- [MAL-2025-25173](https://insights.sbomify.com/MAL-2025-25173/): Malicious code in less-auriga-relay-yaml (npm) (malicious package)
- [MAL-2025-25172](https://insights.sbomify.com/MAL-2025-25172/): Malicious code in lesmetro (npm) (malicious package)
- [MAL-2025-25171](https://insights.sbomify.com/MAL-2025-25171/): Malicious code in lerna-test-app3 (npm) (malicious package)
- [MAL-2025-25170](https://insights.sbomify.com/MAL-2025-25170/): Malicious code in lerna-test-app2 (npm) (malicious package)
- [MAL-2025-2517](https://insights.sbomify.com/MAL-2025-2517/): Malicious code in near-crossword (npm) (malicious package)
- [MAL-2025-25169](https://insights.sbomify.com/MAL-2025-25169/): Malicious code in lerna-test-app1 (npm) (malicious package)
- [MAL-2025-25168](https://insights.sbomify.com/MAL-2025-25168/): Malicious code in leopard-yeti-kzy985-project (npm) (malicious package)
- [MAL-2025-25167](https://insights.sbomify.com/MAL-2025-25167/): Malicious code in leopard-xerus-vup017-project (npm) (malicious package)
- [MAL-2025-25166](https://insights.sbomify.com/MAL-2025-25166/): Malicious code in leopard-umbra-cdv910-project (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/833/