# Vulnerabilities published in 2025


- [MAL-2025-25165](https://insights.sbomify.com/MAL-2025-25165/): Malicious code in leopard-tornado-qro175-project (npm) (malicious package)
- [MAL-2025-25164](https://insights.sbomify.com/MAL-2025-25164/): Malicious code in leopard-reef-tgh987-project (npm) (malicious package)
- [MAL-2025-25163](https://insights.sbomify.com/MAL-2025-25163/): Malicious code in leopard-reef-fef391-project (npm) (malicious package)
- [MAL-2025-25162](https://insights.sbomify.com/MAL-2025-25162/): Malicious code in leopard-quilt-ehn798-project (npm) (malicious package)
- [MAL-2025-25161](https://insights.sbomify.com/MAL-2025-25161/): Malicious code in leopard-opaline-wuc995-project (npm) (malicious package)
- [MAL-2025-25160](https://insights.sbomify.com/MAL-2025-25160/): Malicious code in leopard-opal-nfa379-project (npm) (malicious package)
- [MAL-2025-2516](https://insights.sbomify.com/MAL-2025-2516/): Malicious code in mysql_nlp (npm) (malicious package)
- [MAL-2025-25159](https://insights.sbomify.com/MAL-2025-25159/): Malicious code in leopard-nymph-ffs528-project (npm) (malicious package)
- [MAL-2025-25158](https://insights.sbomify.com/MAL-2025-25158/): Malicious code in leopard-labyrinth-vpd730-project (npm) (malicious package)
- [MAL-2025-25157](https://insights.sbomify.com/MAL-2025-25157/): Malicious code in leopard-kale-fyu360-project (npm) (malicious package)
- [MAL-2025-25156](https://insights.sbomify.com/MAL-2025-25156/): Malicious code in leopard-jellyfish-alw656-project (npm) (malicious package)
- [MAL-2025-25155](https://insights.sbomify.com/MAL-2025-25155/): Malicious code in leopard-hedgehog-syt044-project (npm) (malicious package)
- [MAL-2025-25154](https://insights.sbomify.com/MAL-2025-25154/): Malicious code in leopard-glade-ybz022-project (npm) (malicious package)
- [MAL-2025-25153](https://insights.sbomify.com/MAL-2025-25153/): Malicious code in leopard-evergreen-tdg897-project (npm) (malicious package)
- [MAL-2025-25152](https://insights.sbomify.com/MAL-2025-25152/): Malicious code in leomira (npm) (malicious package)
- [MAL-2025-25151](https://insights.sbomify.com/MAL-2025-25151/): Malicious code in leo-password-reset-service (npm) (malicious package)
- [MAL-2025-25150](https://insights.sbomify.com/MAL-2025-25150/): Malicious code in lens-data (npm) (malicious package)
- [MAL-2025-2515](https://insights.sbomify.com/MAL-2025-2515/): Malicious code in micropilot (npm) (malicious package)
- [MAL-2025-25149](https://insights.sbomify.com/MAL-2025-25149/): Malicious code in lengxue-jiushi (npm) (malicious package)
- [MAL-2025-25148](https://insights.sbomify.com/MAL-2025-25148/): Malicious code in lemurwall (npm) (malicious package)
- [MAL-2025-25147](https://insights.sbomify.com/MAL-2025-25147/): Malicious code in lemputes (npm) (malicious package)
- [MAL-2025-25146](https://insights.sbomify.com/MAL-2025-25146/): Malicious code in lemonboy (npm) (malicious package)
- [MAL-2025-25145](https://insights.sbomify.com/MAL-2025-25145/): Malicious code in lemon-zulu-ccee (npm) (malicious package)
- [MAL-2025-25144](https://insights.sbomify.com/MAL-2025-25144/): Malicious code in lemon-zulu-banana-vwybn (npm) (malicious package)
- [MAL-2025-25143](https://insights.sbomify.com/MAL-2025-25143/): Malicious code in lemon-yo5-project (npm) (malicious package)
- [MAL-2025-25142](https://insights.sbomify.com/MAL-2025-25142/): Malicious code in lemon-yankee-tjcb (npm) (malicious package)
- [MAL-2025-25141](https://insights.sbomify.com/MAL-2025-25141/): Malicious code in lemon-yankee-pkql (npm) (malicious package)
- [MAL-2025-25140](https://insights.sbomify.com/MAL-2025-25140/): Malicious code in lemon-yankee-jvht (npm) (malicious package)
- [MAL-2025-2514](https://insights.sbomify.com/MAL-2025-2514/): Malicious code in jupyter-optmwidgets (npm) (malicious package)
- [MAL-2025-25139](https://insights.sbomify.com/MAL-2025-25139/): Malicious code in lemon-yam-jhtm (npm) (malicious package)
- [MAL-2025-25138](https://insights.sbomify.com/MAL-2025-25138/): Malicious code in lemon-xray-wvzh (npm) (malicious package)
- [MAL-2025-25137](https://insights.sbomify.com/MAL-2025-25137/): Malicious code in lemon-xray-strawberry-qwova (npm) (malicious package)
- [MAL-2025-25136](https://insights.sbomify.com/MAL-2025-25136/): Malicious code in lemon-xray-romeo-qundn (npm) (malicious package)
- [MAL-2025-25135](https://insights.sbomify.com/MAL-2025-25135/): Malicious code in lemon-xerophyte-6rbr (npm) (malicious package)
- [MAL-2025-25134](https://insights.sbomify.com/MAL-2025-25134/): Malicious code in lemon-xdt-project (npm) (malicious package)
- [MAL-2025-25133](https://insights.sbomify.com/MAL-2025-25133/): Malicious code in lemon-wzy-project (npm) (malicious package)
- [MAL-2025-25132](https://insights.sbomify.com/MAL-2025-25132/): Malicious code in lemon-watermelon-hihe (npm) (malicious package)
- [MAL-2025-25131](https://insights.sbomify.com/MAL-2025-25131/): Malicious code in lemon-vzr-project (npm) (malicious package)
- [MAL-2025-25130](https://insights.sbomify.com/MAL-2025-25130/): Malicious code in lemon-vlh-project (npm) (malicious package)
- [MAL-2025-2513](https://insights.sbomify.com/MAL-2025-2513/): Malicious code in invoiceitem-paypal (npm) (malicious package)
- [MAL-2025-25129](https://insights.sbomify.com/MAL-2025-25129/): Malicious code in lemon-uit-project (npm) (malicious package)
- [MAL-2025-25128](https://insights.sbomify.com/MAL-2025-25128/): Malicious code in lemon-tango-cherry-pnsyi (npm) (malicious package)
- [MAL-2025-25127](https://insights.sbomify.com/MAL-2025-25127/): Malicious code in lemon-strawberry-victor-xdnms (npm) (malicious package)
- [MAL-2025-25126](https://insights.sbomify.com/MAL-2025-25126/): Malicious code in lemon-raspberry-yankee-bhebn (npm) (malicious package)
- [MAL-2025-25125](https://insights.sbomify.com/MAL-2025-25125/): Malicious code in lemon-qut-project (npm) (malicious package)
- [MAL-2025-25124](https://insights.sbomify.com/MAL-2025-25124/): Malicious code in lemon-papaya-pzy3 (npm) (malicious package)
- [MAL-2025-25123](https://insights.sbomify.com/MAL-2025-25123/): Malicious code in lemon-papaya-golf-eyqvl (npm) (malicious package)
- [MAL-2025-25122](https://insights.sbomify.com/MAL-2025-25122/): Malicious code in lemon-p1s-project (npm) (malicious package)
- [MAL-2025-25121](https://insights.sbomify.com/MAL-2025-25121/): Malicious code in lemon-orange-rkmb (npm) (malicious package)
- [MAL-2025-25120](https://insights.sbomify.com/MAL-2025-25120/): Malicious code in lemon-oba-project (npm) (malicious package)
- [MAL-2025-2512](https://insights.sbomify.com/MAL-2025-2512/): Malicious code in input-process (npm) (malicious package)
- [MAL-2025-25119](https://insights.sbomify.com/MAL-2025-25119/): Malicious code in lemon-o7s-project (npm) (malicious package)
- [MAL-2025-25118](https://insights.sbomify.com/MAL-2025-25118/): Malicious code in lemon-nvs-project (npm) (malicious package)
- [MAL-2025-25117](https://insights.sbomify.com/MAL-2025-25117/): Malicious code in lemon-november-sierra-ypzgl (npm) (malicious package)
- [MAL-2025-25116](https://insights.sbomify.com/MAL-2025-25116/): Malicious code in lemon-mike-papa-zfgsi (npm) (malicious package)
- [MAL-2025-25115](https://insights.sbomify.com/MAL-2025-25115/): Malicious code in lemon-mango-cherry-ldblp (npm) (malicious package)
- [MAL-2025-25114](https://insights.sbomify.com/MAL-2025-25114/): Malicious code in lemon-kuiper-5i4j (npm) (malicious package)
- [MAL-2025-25113](https://insights.sbomify.com/MAL-2025-25113/): Malicious code in lemon-jbe-project (npm) (malicious package)
- [MAL-2025-25112](https://insights.sbomify.com/MAL-2025-25112/): Malicious code in lemon-i0q-project (npm) (malicious package)
- [MAL-2025-25111](https://insights.sbomify.com/MAL-2025-25111/): Malicious code in lemon-hotel-lwns (npm) (malicious package)
- [MAL-2025-25110](https://insights.sbomify.com/MAL-2025-25110/): Malicious code in lemon-grape-zwmv (npm) (malicious package)
- [MAL-2025-2511](https://insights.sbomify.com/MAL-2025-2511/): Malicious code in importo (npm) (malicious package)
- [MAL-2025-25109](https://insights.sbomify.com/MAL-2025-25109/): Malicious code in lemon-foxtrot-kiwi-kcomt (npm) (malicious package)
- [MAL-2025-25108](https://insights.sbomify.com/MAL-2025-25108/): Malicious code in lemon-fig-spuj (npm) (malicious package)
- [MAL-2025-25107](https://insights.sbomify.com/MAL-2025-25107/): Malicious code in lemon-fig-dfyo (npm) (malicious package)
- [MAL-2025-25106](https://insights.sbomify.com/MAL-2025-25106/): Malicious code in lemon-elderberry-fig-lqoac (npm) (malicious package)
- [MAL-2025-25105](https://insights.sbomify.com/MAL-2025-25105/): Malicious code in lemon-echo-gmgn (npm) (malicious package)
- [MAL-2025-25104](https://insights.sbomify.com/MAL-2025-25104/): Malicious code in lemon-dvd-project (npm) (malicious package)
- [MAL-2025-25103](https://insights.sbomify.com/MAL-2025-25103/): Malicious code in lemon-date-xigua-ipxic (npm) (malicious package)
- [MAL-2025-25102](https://insights.sbomify.com/MAL-2025-25102/): Malicious code in lemon-date-wdif (npm) (malicious package)
- [MAL-2025-25101](https://insights.sbomify.com/MAL-2025-25101/): Malicious code in lemon-banana-uvsg (npm) (malicious package)
- [MAL-2025-25100](https://insights.sbomify.com/MAL-2025-25100/): Malicious code in lemon-banana-cwns (npm) (malicious package)
- [MAL-2025-2510](https://insights.sbomify.com/MAL-2025-2510/): Malicious code in imagehostingserv-paypal (npm) (malicious package)
- [MAL-2025-251](https://insights.sbomify.com/MAL-2025-251/): Malicious code in testing-in-reise (npm) (malicious package)
- [MAL-2025-25099](https://insights.sbomify.com/MAL-2025-25099/): Malicious code in lemon-apple-victor-idjgi (npm) (malicious package)
- [MAL-2025-25098](https://insights.sbomify.com/MAL-2025-25098/): Malicious code in lemon-apple-banana-cghuc (npm) (malicious package)
- [MAL-2025-25097](https://insights.sbomify.com/MAL-2025-25097/): Malicious code in lemon-a2e-project (npm) (malicious package)
- [MAL-2025-25096](https://insights.sbomify.com/MAL-2025-25096/): Malicious code in lemon-94n-project (npm) (malicious package)
- [MAL-2025-25095](https://insights.sbomify.com/MAL-2025-25095/): Malicious code in lemon-8s5-project (npm) (malicious package)
- [MAL-2025-25094](https://insights.sbomify.com/MAL-2025-25094/): Malicious code in lemon-8rx-project (npm) (malicious package)
- [MAL-2025-25093](https://insights.sbomify.com/MAL-2025-25093/): Malicious code in lemon-6sj-project (npm) (malicious package)
- [MAL-2025-25092](https://insights.sbomify.com/MAL-2025-25092/): Malicious code in lemon-5mn-project (npm) (malicious package)
- [MAL-2025-25091](https://insights.sbomify.com/MAL-2025-25091/): Malicious code in lemon-3y0-project (npm) (malicious package)
- [MAL-2025-25090](https://insights.sbomify.com/MAL-2025-25090/): Malicious code in lemon-3l1-project (npm) (malicious package)
- [MAL-2025-2509](https://insights.sbomify.com/MAL-2025-2509/): Malicious code in gufferjs (npm) (malicious package)
- [MAL-2025-25089](https://insights.sbomify.com/MAL-2025-25089/): Malicious code in lemon-0hw-project (npm) (malicious package)
- [MAL-2025-25088](https://insights.sbomify.com/MAL-2025-25088/): Malicious code in lekrep (npm) (malicious package)
- [MAL-2025-25087](https://insights.sbomify.com/MAL-2025-25087/): Malicious code in leijure (npm) (malicious package)
- [MAL-2025-25086](https://insights.sbomify.com/MAL-2025-25086/): Malicious code in leihgreen (npm) (malicious package)
- [MAL-2025-25085](https://insights.sbomify.com/MAL-2025-25085/): Malicious code in legoquiz (npm) (malicious package)
- [MAL-2025-25084](https://insights.sbomify.com/MAL-2025-25084/): Malicious code in legobot (npm) (malicious package)
- [MAL-2025-25083](https://insights.sbomify.com/MAL-2025-25083/): Malicious code in leggings (npm) (malicious package)
- [MAL-2025-25082](https://insights.sbomify.com/MAL-2025-25082/): Malicious code in legend_qmyr1_3npqh_fern (npm) (malicious package)
- [MAL-2025-25081](https://insights.sbomify.com/MAL-2025-25081/): Malicious code in legend_ph02a_g6ca0_maple (npm) (malicious package)
- [MAL-2025-25080](https://insights.sbomify.com/MAL-2025-25080/): Malicious code in legend_nl0kp_7kl0k_rose (npm) (malicious package)
- [MAL-2025-2508](https://insights.sbomify.com/MAL-2025-2508/): Malicious code in gatsby-starter-hello-world (npm) (malicious package)
- [MAL-2025-25079](https://insights.sbomify.com/MAL-2025-25079/): Malicious code in legend_dd1pc_pveew_wind (npm) (malicious package)
- [MAL-2025-25078](https://insights.sbomify.com/MAL-2025-25078/): Malicious code in lefunge (npm) (malicious package)
- [MAL-2025-25077](https://insights.sbomify.com/MAL-2025-25077/): Malicious code in left-hand-navigation (npm) (malicious package)
- [MAL-2025-25076](https://insights.sbomify.com/MAL-2025-25076/): Malicious code in leekloud (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/834/