# Vulnerabilities published in 2025


- [MAL-2025-24445](https://insights.sbomify.com/MAL-2025-24445/): Malicious code in khttpd (npm) (malicious package)
- [MAL-2025-24444](https://insights.sbomify.com/MAL-2025-24444/): Malicious code in khsgkyqmbjnuivpf (npm) (malicious package)
- [MAL-2025-24443](https://insights.sbomify.com/MAL-2025-24443/): Malicious code in kftsrxlpagdjhkvz (npm) (malicious package)
- [MAL-2025-24442](https://insights.sbomify.com/MAL-2025-24442/): Malicious code in kfsnaser (npm) (malicious package)
- [MAL-2025-24441](https://insights.sbomify.com/MAL-2025-24441/): Malicious code in kfalasa (npm) (malicious package)
- [MAL-2025-24440](https://insights.sbomify.com/MAL-2025-24440/): Malicious code in keyzen (npm) (malicious package)
- [MAL-2025-2444](https://insights.sbomify.com/MAL-2025-2444/): Malicious code in invoiceread-paypal (npm) (malicious package)
- [MAL-2025-24439](https://insights.sbomify.com/MAL-2025-24439/): Malicious code in keyy (npm) (malicious package)
- [MAL-2025-24438](https://insights.sbomify.com/MAL-2025-24438/): Malicious code in keystone_yzv2t_pq7nv_solstice (npm) (malicious package)
- [MAL-2025-24437](https://insights.sbomify.com/MAL-2025-24437/): Malicious code in keystone_lldfp_zswue_hush (npm) (malicious package)
- [MAL-2025-24436](https://insights.sbomify.com/MAL-2025-24436/): Malicious code in keystone_h41zw_fglov_rainbow (npm) (malicious package)
- [MAL-2025-24435](https://insights.sbomify.com/MAL-2025-24435/): Malicious code in keystone_6bvec_7pepr_zodiac (npm) (malicious package)
- [MAL-2025-24434](https://insights.sbomify.com/MAL-2025-24434/): Malicious code in keystone_0bzhd_89wv0_blossom (npm) (malicious package)
- [MAL-2025-24433](https://insights.sbomify.com/MAL-2025-24433/): Malicious code in keystone-quzon-wwl1d-yonder-project (npm) (malicious package)
- [MAL-2025-24432](https://insights.sbomify.com/MAL-2025-24432/): Malicious code in keystone-q9lbl-2l4ff-quiver-project (npm) (malicious package)
- [MAL-2025-24431](https://insights.sbomify.com/MAL-2025-24431/): Malicious code in keystone-l3lm5-zmvsr-birch-project (npm) (malicious package)
- [MAL-2025-24430](https://insights.sbomify.com/MAL-2025-24430/): Malicious code in keystone-8xuj0-kbwlm-xenith-project (npm) (malicious package)
- [MAL-2025-2443](https://insights.sbomify.com/MAL-2025-2443/): Malicious code in assert_cmd (npm) (malicious package)
- [MAL-2025-24429](https://insights.sbomify.com/MAL-2025-24429/): Malicious code in keystone-4rmyi-tz6yz-nebula-project (npm) (malicious package)
- [MAL-2025-24428](https://insights.sbomify.com/MAL-2025-24428/): Malicious code in keystone-4r8qt-gojpm-fjord-project (npm) (malicious package)
- [MAL-2025-24427](https://insights.sbomify.com/MAL-2025-24427/): Malicious code in keycmd (npm) (malicious package)
- [MAL-2025-24426](https://insights.sbomify.com/MAL-2025-24426/): Malicious code in keycaster (npm) (malicious package)
- [MAL-2025-24425](https://insights.sbomify.com/MAL-2025-24425/): Malicious code in key_value_model (npm) (malicious package)
- [MAL-2025-24424](https://insights.sbomify.com/MAL-2025-24424/): Malicious code in key-sigma-dog-slow-authorize (npm) (malicious package)
- [MAL-2025-24423](https://insights.sbomify.com/MAL-2025-24423/): Malicious code in key-recovery-service-v2 (npm) (malicious package)
- [MAL-2025-24422](https://insights.sbomify.com/MAL-2025-24422/): Malicious code in key-pi-string-byte-easy (npm) (malicious package)
- [MAL-2025-24421](https://insights.sbomify.com/MAL-2025-24421/): Malicious code in kettlers (npm) (malicious package)
- [MAL-2025-24420](https://insights.sbomify.com/MAL-2025-24420/): Malicious code in kestrel_xytu1_61sdy_meadow (npm) (malicious package)
- [MAL-2025-2442](https://insights.sbomify.com/MAL-2025-2442/): Malicious code in ionicaiosampleapp (npm) (malicious package)
- [MAL-2025-24419](https://insights.sbomify.com/MAL-2025-24419/): Malicious code in kestrel_w9n41_eqgxd_kaleidoscope (npm) (malicious package)
- [MAL-2025-24418](https://insights.sbomify.com/MAL-2025-24418/): Malicious code in kestrel_ropuk_yjllf_quicksilver (npm) (malicious package)
- [MAL-2025-24417](https://insights.sbomify.com/MAL-2025-24417/): Malicious code in kestrel_r5j8s_lh6f6_crystal (npm) (malicious package)
- [MAL-2025-24416](https://insights.sbomify.com/MAL-2025-24416/): Malicious code in kestrel_pymox_6wh87_ocean (npm) (malicious package)
- [MAL-2025-24415](https://insights.sbomify.com/MAL-2025-24415/): Malicious code in kestrel_6udmw_ispp1_hush (npm) (malicious package)
- [MAL-2025-24414](https://insights.sbomify.com/MAL-2025-24414/): Malicious code in kestrel-zrs7t-6e2fc-lavender-project (npm) (malicious package)
- [MAL-2025-24413](https://insights.sbomify.com/MAL-2025-24413/): Malicious code in kestrel-ziyzj-cbipt-quicksilver-project (npm) (malicious package)
- [MAL-2025-24412](https://insights.sbomify.com/MAL-2025-24412/): Malicious code in kestrel-uplift-psk732-project (npm) (malicious package)
- [MAL-2025-24411](https://insights.sbomify.com/MAL-2025-24411/): Malicious code in kestrel-iuz5s-c3us9-dynamo-project (npm) (malicious package)
- [MAL-2025-24410](https://insights.sbomify.com/MAL-2025-24410/): Malicious code in kestrel-bn23z-8ai06-ember-project (npm) (malicious package)
- [MAL-2025-2441](https://insights.sbomify.com/MAL-2025-2441/): Malicious code in devpod (npm) (malicious package)
- [MAL-2025-24409](https://insights.sbomify.com/MAL-2025-24409/): Malicious code in kespapp (npm) (malicious package)
- [MAL-2025-24408](https://insights.sbomify.com/MAL-2025-24408/): Malicious code in keroris (npm) (malicious package)
- [MAL-2025-24407](https://insights.sbomify.com/MAL-2025-24407/): Malicious code in kerocinedeizel (npm) (malicious package)
- [MAL-2025-24406](https://insights.sbomify.com/MAL-2025-24406/): Malicious code in kernellib (npm) (malicious package)
- [MAL-2025-24405](https://insights.sbomify.com/MAL-2025-24405/): Malicious code in kernel-iota-simple-simulate-integer (npm) (malicious package)
- [MAL-2025-24404](https://insights.sbomify.com/MAL-2025-24404/): Malicious code in kernel-abstract-compile-proxy-orchestrate (npm) (malicious package)
- [MAL-2025-24403](https://insights.sbomify.com/MAL-2025-24403/): Malicious code in keresztes (npm) (malicious package)
- [MAL-2025-24402](https://insights.sbomify.com/MAL-2025-24402/): Malicious code in kentico-kontent-angular-http-service (npm) (malicious package)
- [MAL-2025-24401](https://insights.sbomify.com/MAL-2025-24401/): Malicious code in kentest (npm) (malicious package)
- [MAL-2025-24400](https://insights.sbomify.com/MAL-2025-24400/): Malicious code in kelp-yacht-slw305-project (npm) (malicious package)
- [MAL-2025-2440](https://insights.sbomify.com/MAL-2025-2440/): Malicious code in whatsapp-sdk-docs (npm) (malicious package)
- [MAL-2025-244](https://insights.sbomify.com/MAL-2025-244/): Malicious code in spark-ar-libs (npm) (malicious package)
- [MAL-2025-24399](https://insights.sbomify.com/MAL-2025-24399/): Malicious code in kelp-xylophone-gpk255-project (npm) (malicious package)
- [MAL-2025-24398](https://insights.sbomify.com/MAL-2025-24398/): Malicious code in kelp-whirlpool-rjg403-project (npm) (malicious package)
- [MAL-2025-24397](https://insights.sbomify.com/MAL-2025-24397/): Malicious code in kelp-tide-azp985-project (npm) (malicious package)
- [MAL-2025-24396](https://insights.sbomify.com/MAL-2025-24396/): Malicious code in kelp-reef-fcj514-project (npm) (malicious package)
- [MAL-2025-24395](https://insights.sbomify.com/MAL-2025-24395/): Malicious code in kelp-phv21-uhi1b-rose-project (npm) (malicious package)
- [MAL-2025-24394](https://insights.sbomify.com/MAL-2025-24394/): Malicious code in kelp-nimbus-ahk549-project (npm) (malicious package)
- [MAL-2025-24393](https://insights.sbomify.com/MAL-2025-24393/): Malicious code in kelp-mieow-7b9r2-alchemy-project (npm) (malicious package)
- [MAL-2025-24392](https://insights.sbomify.com/MAL-2025-24392/): Malicious code in kelp-kiwi-wji912-project (npm) (malicious package)
- [MAL-2025-24391](https://insights.sbomify.com/MAL-2025-24391/): Malicious code in kelp-kap3d-l0sah-lichen-project (npm) (malicious package)
- [MAL-2025-24390](https://insights.sbomify.com/MAL-2025-24390/): Malicious code in kelp-il8b0-gyeqx-coral-project (npm) (malicious package)
- [MAL-2025-2439](https://insights.sbomify.com/MAL-2025-2439/): Malicious code in starrocks (npm) (malicious package)
- [MAL-2025-24389](https://insights.sbomify.com/MAL-2025-24389/): Malicious code in kelp-iceberg-vlx739-project (npm) (malicious package)
- [MAL-2025-24388](https://insights.sbomify.com/MAL-2025-24388/): Malicious code in kelp-hxsmg-z9po5-silk-project (npm) (malicious package)
- [MAL-2025-24387](https://insights.sbomify.com/MAL-2025-24387/): Malicious code in kelp-horizon-pnc039-project (npm) (malicious package)
- [MAL-2025-24386](https://insights.sbomify.com/MAL-2025-24386/): Malicious code in kelp-horizon-eua884-project (npm) (malicious package)
- [MAL-2025-24385](https://insights.sbomify.com/MAL-2025-24385/): Malicious code in kelp-hill-kfn417-project (npm) (malicious package)
- [MAL-2025-24384](https://insights.sbomify.com/MAL-2025-24384/): Malicious code in kelp-grove-tfv987-project (npm) (malicious package)
- [MAL-2025-24383](https://insights.sbomify.com/MAL-2025-24383/): Malicious code in kelp-gorilla-eaa530-project (npm) (malicious package)
- [MAL-2025-24382](https://insights.sbomify.com/MAL-2025-24382/): Malicious code in kelp-fox-bkt354-project (npm) (malicious package)
- [MAL-2025-24381](https://insights.sbomify.com/MAL-2025-24381/): Malicious code in kelp-fjord-sxj057-project (npm) (malicious package)
- [MAL-2025-24380](https://insights.sbomify.com/MAL-2025-24380/): Malicious code in kelp-dragon-vrd871-project (npm) (malicious package)
- [MAL-2025-2438](https://insights.sbomify.com/MAL-2025-2438/): Malicious code in specialist-pwm (npm) (malicious package)
- [MAL-2025-24379](https://insights.sbomify.com/MAL-2025-24379/): Malicious code in kelp-br0yo-tus4l-vista-project (npm) (malicious package)
- [MAL-2025-24378](https://insights.sbomify.com/MAL-2025-24378/): Malicious code in kelp-aspen-ipb400-project (npm) (malicious package)
- [MAL-2025-24377](https://insights.sbomify.com/MAL-2025-24377/): Malicious code in kelp-48i4l-nypqa-grove-project (npm) (malicious package)
- [MAL-2025-24376](https://insights.sbomify.com/MAL-2025-24376/): Malicious code in kelp-30onm-abxgx-frost-project (npm) (malicious package)
- [MAL-2025-24375](https://insights.sbomify.com/MAL-2025-24375/): Malicious code in keikogi (npm) (malicious package)
- [MAL-2025-24374](https://insights.sbomify.com/MAL-2025-24374/): Malicious code in kegcop (npm) (malicious package)
- [MAL-2025-24373](https://insights.sbomify.com/MAL-2025-24373/): Malicious code in keebler-paypal (npm) (malicious package)
- [MAL-2025-24372](https://insights.sbomify.com/MAL-2025-24372/): Malicious code in keccak256-helper (npm) (malicious package)
- [MAL-2025-24371](https://insights.sbomify.com/MAL-2025-24371/): Malicious code in kearys (npm) (malicious package)
- [MAL-2025-24370](https://insights.sbomify.com/MAL-2025-24370/): Malicious code in kdofmjlhupveskwq (npm) (malicious package)
- [MAL-2025-2437](https://insights.sbomify.com/MAL-2025-2437/): Malicious code in zero-timeout-message (npm) (malicious package)
- [MAL-2025-24369](https://insights.sbomify.com/MAL-2025-24369/): Malicious code in kdkskx (npm) (malicious package)
- [MAL-2025-24368](https://insights.sbomify.com/MAL-2025-24368/): Malicious code in kdjn6p3rsskz9lm3zchrej7gymbpbe4v (npm) (malicious package)
- [MAL-2025-24367](https://insights.sbomify.com/MAL-2025-24367/): Malicious code in kdbt2 (npm) (malicious package)
- [MAL-2025-24366](https://insights.sbomify.com/MAL-2025-24366/): Malicious code in kcruby (npm) (malicious package)
- [MAL-2025-24365](https://insights.sbomify.com/MAL-2025-24365/): Malicious code in kcpycamp (npm) (malicious package)
- [MAL-2025-24364](https://insights.sbomify.com/MAL-2025-24364/): Malicious code in kcpb (npm) (malicious package)
- [MAL-2025-24363](https://insights.sbomify.com/MAL-2025-24363/): Malicious code in kccenter (npm) (malicious package)
- [MAL-2025-24362](https://insights.sbomify.com/MAL-2025-24362/): Malicious code in kbrltzqeasmipudy (npm) (malicious package)
- [MAL-2025-24361](https://insights.sbomify.com/MAL-2025-24361/): Malicious code in kbounce (npm) (malicious package)
- [MAL-2025-24360](https://insights.sbomify.com/MAL-2025-24360/): Malicious code in kbkjyqzmfxuhodnt (npm) (malicious package)
- [MAL-2025-2436](https://insights.sbomify.com/MAL-2025-2436/): Malicious code in xeno-client (npm) (malicious package)
- [MAL-2025-24359](https://insights.sbomify.com/MAL-2025-24359/): Malicious code in kbfnqgrwpkumvcyi (npm) (malicious package)
- [MAL-2025-24358](https://insights.sbomify.com/MAL-2025-24358/): Malicious code in kbezvoastwprqmdu (npm) (malicious package)
- [MAL-2025-24357](https://insights.sbomify.com/MAL-2025-24357/): Malicious code in kbcontrol (npm) (malicious package)
- [MAL-2025-24356](https://insights.sbomify.com/MAL-2025-24356/): Malicious code in kayqcs (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/842/