# Vulnerabilities published in 2025


- [MAL-2025-24986](https://insights.sbomify.com/MAL-2025-24986/): Malicious code in lava-yacht-hfy974-project (npm) (malicious package)
- [MAL-2025-24985](https://insights.sbomify.com/MAL-2025-24985/): Malicious code in lava-xylophone-dgt758-project (npm) (malicious package)
- [MAL-2025-24984](https://insights.sbomify.com/MAL-2025-24984/): Malicious code in lava-xenon-tls920-project (npm) (malicious package)
- [MAL-2025-24983](https://insights.sbomify.com/MAL-2025-24983/): Malicious code in lava-tide-dfd075-project (npm) (malicious package)
- [MAL-2025-24982](https://insights.sbomify.com/MAL-2025-24982/): Malicious code in lava-thistle-izd211-project (npm) (malicious package)
- [MAL-2025-24981](https://insights.sbomify.com/MAL-2025-24981/): Malicious code in lava-saturn-eir283-project (npm) (malicious package)
- [MAL-2025-24980](https://insights.sbomify.com/MAL-2025-24980/): Malicious code in lava-rainbow-ykg517-project (npm) (malicious package)
- [MAL-2025-2498](https://insights.sbomify.com/MAL-2025-2498/): Malicious code in connectrix (npm) (malicious package)
- [MAL-2025-24979](https://insights.sbomify.com/MAL-2025-24979/): Malicious code in lava-octopus-tna469-project (npm) (malicious package)
- [MAL-2025-24978](https://insights.sbomify.com/MAL-2025-24978/): Malicious code in lava-labyrinth-gwx069-project (npm) (malicious package)
- [MAL-2025-24977](https://insights.sbomify.com/MAL-2025-24977/): Malicious code in lava-kite-ydp165-project (npm) (malicious package)
- [MAL-2025-24976](https://insights.sbomify.com/MAL-2025-24976/): Malicious code in lava-jade-qmd286-project (npm) (malicious package)
- [MAL-2025-24975](https://insights.sbomify.com/MAL-2025-24975/): Malicious code in lava-hill-ley368-project (npm) (malicious package)
- [MAL-2025-24974](https://insights.sbomify.com/MAL-2025-24974/): Malicious code in lava-hammock-owx175-project (npm) (malicious package)
- [MAL-2025-24973](https://insights.sbomify.com/MAL-2025-24973/): Malicious code in lava-fjord-bvg897-project (npm) (malicious package)
- [MAL-2025-24972](https://insights.sbomify.com/MAL-2025-24972/): Malicious code in lava-fern-ulm049-project (npm) (malicious package)
- [MAL-2025-24971](https://insights.sbomify.com/MAL-2025-24971/): Malicious code in lava-aroma-gtg518-project (npm) (malicious package)
- [MAL-2025-24970](https://insights.sbomify.com/MAL-2025-24970/): Malicious code in launchpad-integration-test (npm) (malicious package)
- [MAL-2025-2497](https://insights.sbomify.com/MAL-2025-2497/): Malicious code in compliancereadserv-paypal (npm) (malicious package)
- [MAL-2025-24969](https://insights.sbomify.com/MAL-2025-24969/): Malicious code in launce (npm) (malicious package)
- [MAL-2025-24968](https://insights.sbomify.com/MAL-2025-24968/): Malicious code in latexsq (npm) (malicious package)
- [MAL-2025-24967](https://insights.sbomify.com/MAL-2025-24967/): Malicious code in latexocr (npm) (malicious package)
- [MAL-2025-24966](https://insights.sbomify.com/MAL-2025-24966/): Malicious code in latestgps (npm) (malicious package)
- [MAL-2025-24965](https://insights.sbomify.com/MAL-2025-24965/): Malicious code in lat9xw (npm) (malicious package)
- [MAL-2025-24964](https://insights.sbomify.com/MAL-2025-24964/): Malicious code in lasttry (npm) (malicious package)
- [MAL-2025-24963](https://insights.sbomify.com/MAL-2025-24963/): Malicious code in lasttrack (npm) (malicious package)
- [MAL-2025-24962](https://insights.sbomify.com/MAL-2025-24962/): Malicious code in lastbash (npm) (malicious package)
- [MAL-2025-24961](https://insights.sbomify.com/MAL-2025-24961/): Malicious code in lasertank (npm) (malicious package)
- [MAL-2025-24960](https://insights.sbomify.com/MAL-2025-24960/): Malicious code in laserhawk (npm) (malicious package)
- [MAL-2025-2496](https://insights.sbomify.com/MAL-2025-2496/): Malicious code in com.unity.connect.share (npm) (malicious package)
- [MAL-2025-24959](https://insights.sbomify.com/MAL-2025-24959/): Malicious code in larch-yew-oj7m (npm) (malicious package)
- [MAL-2025-24958](https://insights.sbomify.com/MAL-2025-24958/): Malicious code in larch-lettuce-pgsj (npm) (malicious package)
- [MAL-2025-24957](https://insights.sbomify.com/MAL-2025-24957/): Malicious code in larch-lettuce-er6h (npm) (malicious package)
- [MAL-2025-24956](https://insights.sbomify.com/MAL-2025-24956/): Malicious code in larch-kapok-ty92 (npm) (malicious package)
- [MAL-2025-24955](https://insights.sbomify.com/MAL-2025-24955/): Malicious code in larch-island-yjpq (npm) (malicious package)
- [MAL-2025-24954](https://insights.sbomify.com/MAL-2025-24954/): Malicious code in larch-grape-aeon (npm) (malicious package)
- [MAL-2025-24953](https://insights.sbomify.com/MAL-2025-24953/): Malicious code in larch-gorilla-n0m6 (npm) (malicious package)
- [MAL-2025-24952](https://insights.sbomify.com/MAL-2025-24952/): Malicious code in laptrinhc (npm) (malicious package)
- [MAL-2025-24951](https://insights.sbomify.com/MAL-2025-24951/): Malicious code in lapsing (npm) (malicious package)
- [MAL-2025-24950](https://insights.sbomify.com/MAL-2025-24950/): Malicious code in lantern-core (npm) (malicious package)
- [MAL-2025-2495](https://insights.sbomify.com/MAL-2025-2495/): Malicious code in com.github-glitchenzo.nugetforunity (npm) (malicious package)
- [MAL-2025-24949](https://insights.sbomify.com/MAL-2025-24949/): Malicious code in lantern-blueprint (npm) (malicious package)
- [MAL-2025-24948](https://insights.sbomify.com/MAL-2025-24948/): Malicious code in lanstant (npm) (malicious package)
- [MAL-2025-24947](https://insights.sbomify.com/MAL-2025-24947/): Malicious code in lanmei (npm) (malicious package)
- [MAL-2025-24946](https://insights.sbomify.com/MAL-2025-24946/): Malicious code in langsci (npm) (malicious package)
- [MAL-2025-24945](https://insights.sbomify.com/MAL-2025-24945/): Malicious code in langdet (npm) (malicious package)
- [MAL-2025-24944](https://insights.sbomify.com/MAL-2025-24944/): Malicious code in lang-rep (npm) (malicious package)
- [MAL-2025-24943](https://insights.sbomify.com/MAL-2025-24943/): Malicious code in landslide (npm) (malicious package)
- [MAL-2025-24942](https://insights.sbomify.com/MAL-2025-24942/): Malicious code in landsend (npm) (malicious package)
- [MAL-2025-24941](https://insights.sbomify.com/MAL-2025-24941/): Malicious code in lametasks (npm) (malicious package)
- [MAL-2025-24940](https://insights.sbomify.com/MAL-2025-24940/): Malicious code in lambda-pipeline-construct (npm) (malicious package)
- [MAL-2025-2494](https://insights.sbomify.com/MAL-2025-2494/): Malicious code in cbridge (npm) (malicious package)
- [MAL-2025-24939](https://insights.sbomify.com/MAL-2025-24939/): Malicious code in lambda-fast-yaml-quick-virtualize (npm) (malicious package)
- [MAL-2025-24938](https://insights.sbomify.com/MAL-2025-24938/): Malicious code in lakers-shop---nba-jersey (npm) (malicious package)
- [MAL-2025-24937](https://insights.sbomify.com/MAL-2025-24937/): Malicious code in lake_xxkfm_2fude_dusk (npm) (malicious package)
- [MAL-2025-24936](https://insights.sbomify.com/MAL-2025-24936/): Malicious code in lake_tfts4_ivnpt_kale (npm) (malicious package)
- [MAL-2025-24935](https://insights.sbomify.com/MAL-2025-24935/): Malicious code in lake_lbios_u9fv2_verdant (npm) (malicious package)
- [MAL-2025-24934](https://insights.sbomify.com/MAL-2025-24934/): Malicious code in lake_ixge7_z8q3d_pinnacle (npm) (malicious package)
- [MAL-2025-24933](https://insights.sbomify.com/MAL-2025-24933/): Malicious code in lake-fqqnv-wiwwj-zephyr-project (npm) (malicious package)
- [MAL-2025-24932](https://insights.sbomify.com/MAL-2025-24932/): Malicious code in laila-tempe94-sukiwir (npm) (malicious package)
- [MAL-2025-24931](https://insights.sbomify.com/MAL-2025-24931/): Malicious code in laila-tempe69-breki (npm) (malicious package)
- [MAL-2025-24930](https://insights.sbomify.com/MAL-2025-24930/): Malicious code in laila-soto27-kuki (npm) (malicious package)
- [MAL-2025-2493](https://insights.sbomify.com/MAL-2025-2493/): Malicious code in backjob (npm) (malicious package)
- [MAL-2025-24929](https://insights.sbomify.com/MAL-2025-24929/): Malicious code in laila-sambel76-sukiwir (npm) (malicious package)
- [MAL-2025-24928](https://insights.sbomify.com/MAL-2025-24928/): Malicious code in laila-ruwet77-breki (npm) (malicious package)
- [MAL-2025-24927](https://insights.sbomify.com/MAL-2025-24927/): Malicious code in laila-rojak24-kuki (npm) (malicious package)
- [MAL-2025-24926](https://insights.sbomify.com/MAL-2025-24926/): Malicious code in laila-ragi80-sukiwir (npm) (malicious package)
- [MAL-2025-24925](https://insights.sbomify.com/MAL-2025-24925/): Malicious code in laila-mie31-sukiwir (npm) (malicious package)
- [MAL-2025-24924](https://insights.sbomify.com/MAL-2025-24924/): Malicious code in laila-lepet44-breki (npm) (malicious package)
- [MAL-2025-24923](https://insights.sbomify.com/MAL-2025-24923/): Malicious code in laila-kue74-sukiwir (npm) (malicious package)
- [MAL-2025-24922](https://insights.sbomify.com/MAL-2025-24922/): Malicious code in laila-keraktelor26-sukiwir (npm) (malicious package)
- [MAL-2025-24921](https://insights.sbomify.com/MAL-2025-24921/): Malicious code in laila-gorengan19-sukiwir (npm) (malicious package)
- [MAL-2025-24920](https://insights.sbomify.com/MAL-2025-24920/): Malicious code in laila-gembus90-breki (npm) (malicious package)
- [MAL-2025-2492](https://insights.sbomify.com/MAL-2025-2492/): Malicious code in @theoretical123/ssh2 (npm) (malicious package)
- [MAL-2025-24919](https://insights.sbomify.com/MAL-2025-24919/): Malicious code in laila-dodol42-breki (npm) (malicious package)
- [MAL-2025-24918](https://insights.sbomify.com/MAL-2025-24918/): Malicious code in lagoon-zenith-emv060-project (npm) (malicious package)
- [MAL-2025-24917](https://insights.sbomify.com/MAL-2025-24917/): Malicious code in lagoon-yucca-etn281-project (npm) (malicious package)
- [MAL-2025-24916](https://insights.sbomify.com/MAL-2025-24916/): Malicious code in lagoon-xylophone-uel276-project (npm) (malicious package)
- [MAL-2025-24915](https://insights.sbomify.com/MAL-2025-24915/): Malicious code in lagoon-tundra-wlc725-project (npm) (malicious package)
- [MAL-2025-24914](https://insights.sbomify.com/MAL-2025-24914/): Malicious code in lagoon-thunder-top089-project (npm) (malicious package)
- [MAL-2025-24913](https://insights.sbomify.com/MAL-2025-24913/): Malicious code in lagoon-thistle-wdj542-project (npm) (malicious package)
- [MAL-2025-24912](https://insights.sbomify.com/MAL-2025-24912/): Malicious code in lagoon-thistle-slk112-project (npm) (malicious package)
- [MAL-2025-24911](https://insights.sbomify.com/MAL-2025-24911/): Malicious code in lagoon-sunset-iea408-project (npm) (malicious package)
- [MAL-2025-24910](https://insights.sbomify.com/MAL-2025-24910/): Malicious code in lagoon-rose-gpy887-project (npm) (malicious package)
- [MAL-2025-2491](https://insights.sbomify.com/MAL-2025-2491/): Malicious code in @theoretical123/providers (npm) (malicious package)
- [MAL-2025-24909](https://insights.sbomify.com/MAL-2025-24909/): Malicious code in lagoon-quasar-ksv190-project (npm) (malicious package)
- [MAL-2025-24908](https://insights.sbomify.com/MAL-2025-24908/): Malicious code in lagoon-oak-njc366-project (npm) (malicious package)
- [MAL-2025-24907](https://insights.sbomify.com/MAL-2025-24907/): Malicious code in lagoon-oak-fex595-project (npm) (malicious package)
- [MAL-2025-24906](https://insights.sbomify.com/MAL-2025-24906/): Malicious code in lagoon-moon-hmy577-project (npm) (malicious package)
- [MAL-2025-24905](https://insights.sbomify.com/MAL-2025-24905/): Malicious code in lagoon-kelp-smx161-project (npm) (malicious package)
- [MAL-2025-24904](https://insights.sbomify.com/MAL-2025-24904/): Malicious code in lagoon-jewel-shr048-project (npm) (malicious package)
- [MAL-2025-24903](https://insights.sbomify.com/MAL-2025-24903/): Malicious code in lagoon-island-lar086-project (npm) (malicious package)
- [MAL-2025-24902](https://insights.sbomify.com/MAL-2025-24902/): Malicious code in lagoon-infinity-iyv611-project (npm) (malicious package)
- [MAL-2025-24901](https://insights.sbomify.com/MAL-2025-24901/): Malicious code in lagoon-icicle-crl222-project (npm) (malicious package)
- [MAL-2025-24900](https://insights.sbomify.com/MAL-2025-24900/): Malicious code in lagoon-hollow-bgf252-project (npm) (malicious package)
- [MAL-2025-2490](https://insights.sbomify.com/MAL-2025-2490/): Malicious code in @theoretical123/ethers (npm) (malicious package)
- [MAL-2025-249](https://insights.sbomify.com/MAL-2025-249/): Malicious code in storytel.github.io (npm) (malicious package)
- [MAL-2025-24899](https://insights.sbomify.com/MAL-2025-24899/): Malicious code in lagoon-galaxy-ipr289-project (npm) (malicious package)
- [MAL-2025-24898](https://insights.sbomify.com/MAL-2025-24898/): Malicious code in lagoon-evergreen-kwq796-project (npm) (malicious package)
- [MAL-2025-24897](https://insights.sbomify.com/MAL-2025-24897/): Malicious code in lagoon-ant-evs874-project (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/836/