# Vulnerabilities published in 2025 - [MAL-2025-25075](https://insights.sbomify.com/MAL-2025-25075/): Malicious code in leectron (npm) (malicious package) - [MAL-2025-25074](https://insights.sbomify.com/MAL-2025-25074/): Malicious code in ledweb (npm) (malicious package) - [MAL-2025-25073](https://insights.sbomify.com/MAL-2025-25073/): Malicious code in ledvance-living-style-guide (npm) (malicious package) - [MAL-2025-25072](https://insights.sbomify.com/MAL-2025-25072/): Malicious code in ledlamp (npm) (malicious package) - [MAL-2025-25071](https://insights.sbomify.com/MAL-2025-25071/): Malicious code in ledcandle (npm) (malicious package) - [MAL-2025-25070](https://insights.sbomify.com/MAL-2025-25070/): Malicious code in leda-wormhole-astrometry-module (npm) (malicious package) - [MAL-2025-2507](https://insights.sbomify.com/MAL-2025-2507/): Malicious code in gash (npm) (malicious package) - [MAL-2025-25069](https://insights.sbomify.com/MAL-2025-25069/): Malicious code in leda-selenology-phenomic-webpack (npm) (malicious package) - [MAL-2025-25068](https://insights.sbomify.com/MAL-2025-25068/): Malicious code in leda-protractor-exoplanet-frontend (npm) (malicious package) - [MAL-2025-25067](https://insights.sbomify.com/MAL-2025-25067/): Malicious code in leda-middleware-pm2-impulse (npm) (malicious package) - [MAL-2025-25066](https://insights.sbomify.com/MAL-2025-25066/): Malicious code in leda-fornax-dagda-css-loader (npm) (malicious package) - [MAL-2025-25065](https://insights.sbomify.com/MAL-2025-25065/): Malicious code in leda-development-config-eclipse (npm) (malicious package) - [MAL-2025-25064](https://insights.sbomify.com/MAL-2025-25064/): Malicious code in lectron (npm) (malicious package) - [MAL-2025-25063](https://insights.sbomify.com/MAL-2025-25063/): Malicious code in lebardon (npm) (malicious package) - [MAL-2025-25062](https://insights.sbomify.com/MAL-2025-25062/): Malicious code in leatherman-js (npm) (malicious package) - [MAL-2025-25061](https://insights.sbomify.com/MAL-2025-25061/): Malicious code in learns (npm) (malicious package) - [MAL-2025-25060](https://insights.sbomify.com/MAL-2025-25060/): Malicious code in learnbdd (npm) (malicious package) - [MAL-2025-2506](https://insights.sbomify.com/MAL-2025-2506/): Malicious code in exampleeeeeeeeeeeeeeeeeeee (npm) (malicious package) - [MAL-2025-25059](https://insights.sbomify.com/MAL-2025-25059/): Malicious code in leapviz (npm) (malicious package) - [MAL-2025-25058](https://insights.sbomify.com/MAL-2025-25058/): Malicious code in leapboard (npm) (malicious package) - [MAL-2025-25057](https://insights.sbomify.com/MAL-2025-25057/): Malicious code in leaiss (npm) (malicious package) - [MAL-2025-25056](https://insights.sbomify.com/MAL-2025-25056/): Malicious code in leafbox (npm) (malicious package) - [MAL-2025-25055](https://insights.sbomify.com/MAL-2025-25055/): Malicious code in leadcrm (npm) (malicious package) - [MAL-2025-25054](https://insights.sbomify.com/MAL-2025-25054/): Malicious code in leadconduit-zipcodes (npm) (malicious package) - [MAL-2025-25053](https://insights.sbomify.com/MAL-2025-25053/): Malicious code in leadconduit-zillow (npm) (malicious package) - [MAL-2025-25052](https://insights.sbomify.com/MAL-2025-25052/): Malicious code in leadconduit-whitepages (npm) (malicious package) - [MAL-2025-25051](https://insights.sbomify.com/MAL-2025-25051/): Malicious code in leadconduit-webbula (npm) (malicious package) - [MAL-2025-25050](https://insights.sbomify.com/MAL-2025-25050/): Malicious code in leadconduit-versium (npm) (malicious package) - [MAL-2025-2505](https://insights.sbomify.com/MAL-2025-2505/): Malicious code in ex-edge (npm) (malicious package) - [MAL-2025-25049](https://insights.sbomify.com/MAL-2025-25049/): Malicious code in leadconduit-velocify (npm) (malicious package) - [MAL-2025-25048](https://insights.sbomify.com/MAL-2025-25048/): Malicious code in leadconduit-twitter (npm) (malicious package) - [MAL-2025-25047](https://insights.sbomify.com/MAL-2025-25047/): Malicious code in leadconduit-twilio (npm) (malicious package) - [MAL-2025-25046](https://insights.sbomify.com/MAL-2025-25046/): Malicious code in leadconduit-towerdata (npm) (malicious package) - [MAL-2025-25045](https://insights.sbomify.com/MAL-2025-25045/): Malicious code in leadconduit-telesign (npm) (malicious package) - [MAL-2025-25044](https://insights.sbomify.com/MAL-2025-25044/): Malicious code in leadconduit-sendgrid (npm) (malicious package) - [MAL-2025-25043](https://insights.sbomify.com/MAL-2025-25043/): Malicious code in leadconduit-salesforce (npm) (malicious package) - [MAL-2025-25042](https://insights.sbomify.com/MAL-2025-25042/): Malicious code in leadconduit-powerbi (npm) (malicious package) - [MAL-2025-25041](https://insights.sbomify.com/MAL-2025-25041/): Malicious code in leadconduit-pipelinesuccess (npm) (malicious package) - [MAL-2025-25040](https://insights.sbomify.com/MAL-2025-25040/): Malicious code in leadconduit-pipeline-success (npm) (malicious package) - [MAL-2025-2504](https://insights.sbomify.com/MAL-2025-2504/): Malicious code in ember-inner-addon (npm) (malicious package) - [MAL-2025-25039](https://insights.sbomify.com/MAL-2025-25039/): Malicious code in leadconduit-pcdi (npm) (malicious package) - [MAL-2025-25038](https://insights.sbomify.com/MAL-2025-25038/): Malicious code in leadconduit-national-renewable-energy-lab (npm) (malicious package) - [MAL-2025-25037](https://insights.sbomify.com/MAL-2025-25037/): Malicious code in leadconduit-mortech (npm) (malicious package) - [MAL-2025-25036](https://insights.sbomify.com/MAL-2025-25036/): Malicious code in leadconduit-militarydotcom (npm) (malicious package) - [MAL-2025-25035](https://insights.sbomify.com/MAL-2025-25035/): Malicious code in leadconduit-marketo (npm) (malicious package) - [MAL-2025-25034](https://insights.sbomify.com/MAL-2025-25034/): Malicious code in leadconduit-lowermybills (npm) (malicious package) - [MAL-2025-25033](https://insights.sbomify.com/MAL-2025-25033/): Malicious code in leadconduit-lendio (npm) (malicious package) - [MAL-2025-25032](https://insights.sbomify.com/MAL-2025-25032/): Malicious code in leadconduit-lendingtree (npm) (malicious package) - [MAL-2025-25031](https://insights.sbomify.com/MAL-2025-25031/): Malicious code in leadconduit-leadpoint (npm) (malicious package) - [MAL-2025-25030](https://insights.sbomify.com/MAL-2025-25030/): Malicious code in leadconduit-leadperfection (npm) (malicious package) - [MAL-2025-2503](https://insights.sbomify.com/MAL-2025-2503/): Malicious code in defi-handbook (npm) (malicious package) - [MAL-2025-25029](https://insights.sbomify.com/MAL-2025-25029/): Malicious code in leadconduit-leadid (npm) (malicious package) - [MAL-2025-25028](https://insights.sbomify.com/MAL-2025-25028/): Malicious code in leadconduit-integration-autoresponder (npm) (malicious package) - [MAL-2025-25027](https://insights.sbomify.com/MAL-2025-25027/): Malicious code in leadconduit-hubspot (npm) (malicious package) - [MAL-2025-25026](https://insights.sbomify.com/MAL-2025-25026/): Malicious code in leadconduit-homesdotcom (npm) (malicious package) - [MAL-2025-25025](https://insights.sbomify.com/MAL-2025-25025/): Malicious code in leadconduit-highrise (npm) (malicious package) - [MAL-2025-25024](https://insights.sbomify.com/MAL-2025-25024/): Malicious code in leadconduit-generic (npm) (malicious package) - [MAL-2025-25023](https://insights.sbomify.com/MAL-2025-25023/): Malicious code in leadconduit-facebook (npm) (malicious package) - [MAL-2025-25022](https://insights.sbomify.com/MAL-2025-25022/): Malicious code in leadconduit-experian (npm) (malicious package) - [MAL-2025-25021](https://insights.sbomify.com/MAL-2025-25021/): Malicious code in leadconduit-email-delivery (npm) (malicious package) - [MAL-2025-25020](https://insights.sbomify.com/MAL-2025-25020/): Malicious code in leadconduit-datamyx (npm) (malicious package) - [MAL-2025-2502](https://insights.sbomify.com/MAL-2025-2502/): Malicious code in cortex-player-chromeoscortex (npm) (malicious package) - [MAL-2025-25019](https://insights.sbomify.com/MAL-2025-25019/): Malicious code in leadconduit-costco (npm) (malicious package) - [MAL-2025-25018](https://insights.sbomify.com/MAL-2025-25018/): Malicious code in leadconduit-closeio (npm) (malicious package) - [MAL-2025-25017](https://insights.sbomify.com/MAL-2025-25017/): Malicious code in leadconduit-clearbit (npm) (malicious package) - [MAL-2025-25016](https://insights.sbomify.com/MAL-2025-25016/): Malicious code in leadconduit-cashcall (npm) (malicious package) - [MAL-2025-25015](https://insights.sbomify.com/MAL-2025-25015/): Malicious code in leadconduit-calq (npm) (malicious package) - [MAL-2025-25014](https://insights.sbomify.com/MAL-2025-25014/): Malicious code in leadconduit-cake (npm) (malicious package) - [MAL-2025-25013](https://insights.sbomify.com/MAL-2025-25013/): Malicious code in leadconduit-briteverify (npm) (malicious package) - [MAL-2025-25012](https://insights.sbomify.com/MAL-2025-25012/): Malicious code in leadconduit-billsdotcom (npm) (malicious package) - [MAL-2025-25011](https://insights.sbomify.com/MAL-2025-25011/): Malicious code in leadconduit-autoresponder (npm) (malicious package) - [MAL-2025-25010](https://insights.sbomify.com/MAL-2025-25010/): Malicious code in ldxzfmewhpjaunok (npm) (malicious package) - [MAL-2025-2501](https://insights.sbomify.com/MAL-2025-2501/): Malicious code in cortex-net-node (npm) (malicious package) - [MAL-2025-25009](https://insights.sbomify.com/MAL-2025-25009/): Malicious code in ldweisser (npm) (malicious package) - [MAL-2025-25008](https://insights.sbomify.com/MAL-2025-25008/): Malicious code in ldvbug (npm) (malicious package) - [MAL-2025-25007](https://insights.sbomify.com/MAL-2025-25007/): Malicious code in ldoash (npm) (malicious package) - [MAL-2025-25006](https://insights.sbomify.com/MAL-2025-25006/): Malicious code in lddgame (npm) (malicious package) - [MAL-2025-25005](https://insights.sbomify.com/MAL-2025-25005/): Malicious code in ldbench (npm) (malicious package) - [MAL-2025-25004](https://insights.sbomify.com/MAL-2025-25004/): Malicious code in ldash (npm) (malicious package) - [MAL-2025-25003](https://insights.sbomify.com/MAL-2025-25003/): Malicious code in ldaptool (npm) (malicious package) - [MAL-2025-25002](https://insights.sbomify.com/MAL-2025-25002/): Malicious code in lcshub (npm) (malicious package) - [MAL-2025-25001](https://insights.sbomify.com/MAL-2025-25001/): Malicious code in lc50uo (npm) (malicious package) - [MAL-2025-25000](https://insights.sbomify.com/MAL-2025-25000/): Malicious code in lbuebird (npm) (malicious package) - [MAL-2025-2500](https://insights.sbomify.com/MAL-2025-2500/): Malicious code in cortex-app-utils (npm) (malicious package) - [MAL-2025-250](https://insights.sbomify.com/MAL-2025-250/): Malicious code in stylexjs-scripts (npm) (malicious package) - [MAL-2025-25](https://insights.sbomify.com/MAL-2025-25/): Malicious code in ecpfs-react-jest-helpers (npm) (malicious package) - [MAL-2025-24999](https://insights.sbomify.com/MAL-2025-24999/): Malicious code in lbswrdkhvyfjxica (npm) (malicious package) - [MAL-2025-24998](https://insights.sbomify.com/MAL-2025-24998/): Malicious code in lbibli (npm) (malicious package) - [MAL-2025-24997](https://insights.sbomify.com/MAL-2025-24997/): Malicious code in lbench (npm) (malicious package) - [MAL-2025-24996](https://insights.sbomify.com/MAL-2025-24996/): Malicious code in lazyseq (npm) (malicious package) - [MAL-2025-24995](https://insights.sbomify.com/MAL-2025-24995/): Malicious code in layout-experimental (npm) (malicious package) - [MAL-2025-24994](https://insights.sbomify.com/MAL-2025-24994/): Malicious code in laxfragor (npm) (malicious package) - [MAL-2025-24993](https://insights.sbomify.com/MAL-2025-24993/): Malicious code in lawliet (npm) (malicious package) - [MAL-2025-24992](https://insights.sbomify.com/MAL-2025-24992/): Malicious code in lavender-ux121-pvzlc-xanadu-project (npm) (malicious package) - [MAL-2025-24991](https://insights.sbomify.com/MAL-2025-24991/): Malicious code in lavender-smab1-0r9t7-crescent-project (npm) (malicious package) - [MAL-2025-24990](https://insights.sbomify.com/MAL-2025-24990/): Malicious code in lavender-munq4-1mpil-grove-project (npm) (malicious package) - [MAL-2025-2499](https://insights.sbomify.com/MAL-2025-2499/): Malicious code in cortex-app-tutorial (npm) (malicious package) - [MAL-2025-24989](https://insights.sbomify.com/MAL-2025-24989/): Malicious code in lavender-kmk4q-04c0e-night-project (npm) (malicious package) - [MAL-2025-24988](https://insights.sbomify.com/MAL-2025-24988/): Malicious code in lavender-jr66q-bimn1-wander-project (npm) (malicious package) - [MAL-2025-24987](https://insights.sbomify.com/MAL-2025-24987/): Malicious code in lavender-9w6q2-wpzp8-emerald-project (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/835/