# Vulnerabilities published in 2025 - [MAL-2025-24715](https://insights.sbomify.com/MAL-2025-24715/): Malicious code in koa-meteor-foundation-express (npm) (malicious package) - [MAL-2025-24714](https://insights.sbomify.com/MAL-2025-24714/): Malicious code in koa-holography-charon-blueshift (npm) (malicious package) - [MAL-2025-24713](https://insights.sbomify.com/MAL-2025-24713/): Malicious code in koa-highway (npm) (malicious package) - [MAL-2025-24712](https://insights.sbomify.com/MAL-2025-24712/): Malicious code in koa-callback-ursa-private (npm) (malicious package) - [MAL-2025-24711](https://insights.sbomify.com/MAL-2025-24711/): Malicious code in koa-body-parse (npm) (malicious package) - [MAL-2025-24710](https://insights.sbomify.com/MAL-2025-24710/): Malicious code in knykode (npm) (malicious package) - [MAL-2025-2471](https://insights.sbomify.com/MAL-2025-2471/): Malicious code in probe.gl-monorepo (npm) (malicious package) - [MAL-2025-24709](https://insights.sbomify.com/MAL-2025-24709/): Malicious code in knowtify (npm) (malicious package) - [MAL-2025-24708](https://insights.sbomify.com/MAL-2025-24708/): Malicious code in knowsql (npm) (malicious package) - [MAL-2025-24707](https://insights.sbomify.com/MAL-2025-24707/): Malicious code in knotsy (npm) (malicious package) - [MAL-2025-24706](https://insights.sbomify.com/MAL-2025-24706/): Malicious code in knoll-wlgpg-jmevs-radiance-project (npm) (malicious package) - [MAL-2025-24705](https://insights.sbomify.com/MAL-2025-24705/): Malicious code in knoll-u8h2o-1k3qx-comet-project (npm) (malicious package) - [MAL-2025-24704](https://insights.sbomify.com/MAL-2025-24704/): Malicious code in knoll-pcxw7-14c2a-comet-project (npm) (malicious package) - [MAL-2025-24703](https://insights.sbomify.com/MAL-2025-24703/): Malicious code in knoll-l70vl-1ipps-opal-project (npm) (malicious package) - [MAL-2025-24702](https://insights.sbomify.com/MAL-2025-24702/): Malicious code in knoll-gsc5b-abrky-coral-project (npm) (malicious package) - [MAL-2025-24701](https://insights.sbomify.com/MAL-2025-24701/): Malicious code in knoll-enjzc-bj10j-whisper-project (npm) (malicious package) - [MAL-2025-24700](https://insights.sbomify.com/MAL-2025-24700/): Malicious code in knoll-efow7-6ddj5-plume-project (npm) (malicious package) - [MAL-2025-2470](https://insights.sbomify.com/MAL-2025-2470/): Malicious code in pdftodoc (npm) (malicious package) - [MAL-2025-247](https://insights.sbomify.com/MAL-2025-247/): Malicious code in ssv-sdk (npm) (malicious package) - [MAL-2025-24699](https://insights.sbomify.com/MAL-2025-24699/): Malicious code in knoll-cbx0a-ruz7g-xanadu-project (npm) (malicious package) - [MAL-2025-24698](https://insights.sbomify.com/MAL-2025-24698/): Malicious code in knoll-06u2w-hm6ri-vista-project (npm) (malicious package) - [MAL-2025-24697](https://insights.sbomify.com/MAL-2025-24697/): Malicious code in knodat (npm) (malicious package) - [MAL-2025-24696](https://insights.sbomify.com/MAL-2025-24696/): Malicious code in knmwitazqylrucfo (npm) (malicious package) - [MAL-2025-24695](https://insights.sbomify.com/MAL-2025-24695/): Malicious code in knicks-store---nba-jersey (npm) (malicious package) - [MAL-2025-24694](https://insights.sbomify.com/MAL-2025-24694/): Malicious code in knexpress (npm) (malicious package) - [MAL-2025-24693](https://insights.sbomify.com/MAL-2025-24693/): Malicious code in knell-player (npm) (malicious package) - [MAL-2025-24692](https://insights.sbomify.com/MAL-2025-24692/): Malicious code in knebe2 (npm) (malicious package) - [MAL-2025-24691](https://insights.sbomify.com/MAL-2025-24691/): Malicious code in knabees (npm) (malicious package) - [MAL-2025-24690](https://insights.sbomify.com/MAL-2025-24690/): Malicious code in kn96j1 (npm) (malicious package) - [MAL-2025-2469](https://insights.sbomify.com/MAL-2025-2469/): Malicious code in panmirror (npm) (malicious package) - [MAL-2025-24689](https://insights.sbomify.com/MAL-2025-24689/): Malicious code in kmp1lo (npm) (malicious package) - [MAL-2025-24688](https://insights.sbomify.com/MAL-2025-24688/): Malicious code in klvapzgdusimojeb (npm) (malicious package) - [MAL-2025-24687](https://insights.sbomify.com/MAL-2025-24687/): Malicious code in klicker (npm) (malicious package) - [MAL-2025-24686](https://insights.sbomify.com/MAL-2025-24686/): Malicious code in klasemen-liga-inggris (npm) (malicious package) - [MAL-2025-24685](https://insights.sbomify.com/MAL-2025-24685/): Malicious code in klaseko (npm) (malicious package) - [MAL-2025-24684](https://insights.sbomify.com/MAL-2025-24684/): Malicious code in kknzougrdmvpfeat (npm) (malicious package) - [MAL-2025-24683](https://insights.sbomify.com/MAL-2025-24683/): Malicious code in kk-proxy (npm) (malicious package) - [MAL-2025-24682](https://insights.sbomify.com/MAL-2025-24682/): Malicious code in kjtkeygclqrsnoph (npm) (malicious package) - [MAL-2025-24681](https://insights.sbomify.com/MAL-2025-24681/): Malicious code in kjnschqumowlxfze (npm) (malicious package) - [MAL-2025-24680](https://insights.sbomify.com/MAL-2025-24680/): Malicious code in kjjr66 (npm) (malicious package) - [MAL-2025-2468](https://insights.sbomify.com/MAL-2025-2468/): Malicious code in node-llama-cpp-project (npm) (malicious package) - [MAL-2025-24679](https://insights.sbomify.com/MAL-2025-24679/): Malicious code in kjjgjgjkg (npm) (malicious package) - [MAL-2025-24678](https://insights.sbomify.com/MAL-2025-24678/): Malicious code in kiwmnamnw (npm) (malicious package) - [MAL-2025-24677](https://insights.sbomify.com/MAL-2025-24677/): Malicious code in kiwi-zulu-xnao (npm) (malicious package) - [MAL-2025-24676](https://insights.sbomify.com/MAL-2025-24676/): Malicious code in kiwi-zulu-vdyv (npm) (malicious package) - [MAL-2025-24675](https://insights.sbomify.com/MAL-2025-24675/): Malicious code in kiwi-zulu-anhj (npm) (malicious package) - [MAL-2025-24674](https://insights.sbomify.com/MAL-2025-24674/): Malicious code in kiwi-zucchini-mfok (npm) (malicious package) - [MAL-2025-24673](https://insights.sbomify.com/MAL-2025-24673/): Malicious code in kiwi-zr2-project (npm) (malicious package) - [MAL-2025-24672](https://insights.sbomify.com/MAL-2025-24672/): Malicious code in kiwi-ynq-project (npm) (malicious package) - [MAL-2025-24671](https://insights.sbomify.com/MAL-2025-24671/): Malicious code in kiwi-yeti-kdz317-project (npm) (malicious package) - [MAL-2025-24670](https://insights.sbomify.com/MAL-2025-24670/): Malicious code in kiwi-yacht-vtmp (npm) (malicious package) - [MAL-2025-2467](https://insights.sbomify.com/MAL-2025-2467/): Malicious code in malwaretesting2 (npm) (malicious package) - [MAL-2025-24669](https://insights.sbomify.com/MAL-2025-24669/): Malicious code in kiwi-xigua-x9qd (npm) (malicious package) - [MAL-2025-24668](https://insights.sbomify.com/MAL-2025-24668/): Malicious code in kiwi-xigua-h597 (npm) (malicious package) - [MAL-2025-24667](https://insights.sbomify.com/MAL-2025-24667/): Malicious code in kiwi-whiskey-78kf (npm) (malicious package) - [MAL-2025-24666](https://insights.sbomify.com/MAL-2025-24666/): Malicious code in kiwi-watermelon-banana-zabnl (npm) (malicious package) - [MAL-2025-24665](https://insights.sbomify.com/MAL-2025-24665/): Malicious code in kiwi-vista-csy498-project (npm) (malicious package) - [MAL-2025-24664](https://insights.sbomify.com/MAL-2025-24664/): Malicious code in kiwi-vanilla-htjd (npm) (malicious package) - [MAL-2025-24663](https://insights.sbomify.com/MAL-2025-24663/): Malicious code in kiwi-v11-project (npm) (malicious package) - [MAL-2025-24662](https://insights.sbomify.com/MAL-2025-24662/): Malicious code in kiwi-uranium-fkn516-project (npm) (malicious package) - [MAL-2025-24661](https://insights.sbomify.com/MAL-2025-24661/): Malicious code in kiwi-uniform-tango-lsird (npm) (malicious package) - [MAL-2025-24660](https://insights.sbomify.com/MAL-2025-24660/): Malicious code in kiwi-tundra-kew950-project (npm) (malicious package) - [MAL-2025-2466](https://insights.sbomify.com/MAL-2025-2466/): Malicious code in luigi-core-private (npm) (malicious package) - [MAL-2025-24659](https://insights.sbomify.com/MAL-2025-24659/): Malicious code in kiwi-tundra-cdd408-project (npm) (malicious package) - [MAL-2025-24658](https://insights.sbomify.com/MAL-2025-24658/): Malicious code in kiwi-tt4-project (npm) (malicious package) - [MAL-2025-24657](https://insights.sbomify.com/MAL-2025-24657/): Malicious code in kiwi-tkk-project (npm) (malicious package) - [MAL-2025-24656](https://insights.sbomify.com/MAL-2025-24656/): Malicious code in kiwi-tangerine-eofx (npm) (malicious package) - [MAL-2025-24655](https://insights.sbomify.com/MAL-2025-24655/): Malicious code in kiwi-strawberry-yam-qnhow (npm) (malicious package) - [MAL-2025-24654](https://insights.sbomify.com/MAL-2025-24654/): Malicious code in kiwi-star-chn001-project (npm) (malicious package) - [MAL-2025-24653](https://insights.sbomify.com/MAL-2025-24653/): Malicious code in kiwi-sierra-nrpz (npm) (malicious package) - [MAL-2025-24652](https://insights.sbomify.com/MAL-2025-24652/): Malicious code in kiwi-sequoia-jmd582-project (npm) (malicious package) - [MAL-2025-24651](https://insights.sbomify.com/MAL-2025-24651/): Malicious code in kiwi-saturn-ymt368-project (npm) (malicious package) - [MAL-2025-24650](https://insights.sbomify.com/MAL-2025-24650/): Malicious code in kiwi-romeo-banana-tngno (npm) (malicious package) - [MAL-2025-2465](https://insights.sbomify.com/MAL-2025-2465/): Malicious code in homeappserver (npm) (malicious package) - [MAL-2025-24649](https://insights.sbomify.com/MAL-2025-24649/): Malicious code in kiwi-ripple-ujc543-project (npm) (malicious package) - [MAL-2025-24648](https://insights.sbomify.com/MAL-2025-24648/): Malicious code in kiwi-reef-hib694-project (npm) (malicious package) - [MAL-2025-24647](https://insights.sbomify.com/MAL-2025-24647/): Malicious code in kiwi-raspberry-rbgj (npm) (malicious package) - [MAL-2025-24646](https://insights.sbomify.com/MAL-2025-24646/): Malicious code in kiwi-quince-dtya (npm) (malicious package) - [MAL-2025-24645](https://insights.sbomify.com/MAL-2025-24645/): Malicious code in kiwi-quince-abim (npm) (malicious package) - [MAL-2025-24644](https://insights.sbomify.com/MAL-2025-24644/): Malicious code in kiwi-quill-awy160-project (npm) (malicious package) - [MAL-2025-24643](https://insights.sbomify.com/MAL-2025-24643/): Malicious code in kiwi-quebec-qjfc (npm) (malicious package) - [MAL-2025-24642](https://insights.sbomify.com/MAL-2025-24642/): Malicious code in kiwi-quebec-ngyf (npm) (malicious package) - [MAL-2025-24641](https://insights.sbomify.com/MAL-2025-24641/): Malicious code in kiwi-quasar-qeu197-project (npm) (malicious package) - [MAL-2025-24640](https://insights.sbomify.com/MAL-2025-24640/): Malicious code in kiwi-qlk-project (npm) (malicious package) - [MAL-2025-2464](https://insights.sbomify.com/MAL-2025-2464/): Malicious code in eslint8_flat_config_mjs (npm) (malicious package) - [MAL-2025-24639](https://insights.sbomify.com/MAL-2025-24639/): Malicious code in kiwi-prairie-btj223-project (npm) (malicious package) - [MAL-2025-24638](https://insights.sbomify.com/MAL-2025-24638/): Malicious code in kiwi-platform (npm) (malicious package) - [MAL-2025-24637](https://insights.sbomify.com/MAL-2025-24637/): Malicious code in kiwi-pkt-project (npm) (malicious package) - [MAL-2025-24636](https://insights.sbomify.com/MAL-2025-24636/): Malicious code in kiwi-piano-skj156-project (npm) (malicious package) - [MAL-2025-24635](https://insights.sbomify.com/MAL-2025-24635/): Malicious code in kiwi-piano-rtj084-project (npm) (malicious package) - [MAL-2025-24634](https://insights.sbomify.com/MAL-2025-24634/): Malicious code in kiwi-pg4-project (npm) (malicious package) - [MAL-2025-24633](https://insights.sbomify.com/MAL-2025-24633/): Malicious code in kiwi-peony-hln756-project (npm) (malicious package) - [MAL-2025-24632](https://insights.sbomify.com/MAL-2025-24632/): Malicious code in kiwi-peacock-qji902-project (npm) (malicious package) - [MAL-2025-24631](https://insights.sbomify.com/MAL-2025-24631/): Malicious code in kiwi-pde-project (npm) (malicious package) - [MAL-2025-24630](https://insights.sbomify.com/MAL-2025-24630/): Malicious code in kiwi-papa-ipts (npm) (malicious package) - [MAL-2025-2463](https://insights.sbomify.com/MAL-2025-2463/): Malicious code in ear-gui-portal (npm) (malicious package) - [MAL-2025-24629](https://insights.sbomify.com/MAL-2025-24629/): Malicious code in kiwi-papa-fxbu (npm) (malicious package) - [MAL-2025-24628](https://insights.sbomify.com/MAL-2025-24628/): Malicious code in kiwi-p3k-project (npm) (malicious package) - [MAL-2025-24627](https://insights.sbomify.com/MAL-2025-24627/): Malicious code in kiwi-oscar-papaya-psfdy (npm) (malicious package) - [MAL-2025-24626](https://insights.sbomify.com/MAL-2025-24626/): Malicious code in kiwi-orange-swzm (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/839/