# Vulnerabilities published in 2025


- [MAL-2025-24355](https://insights.sbomify.com/MAL-2025-24355/): Malicious code in kayak-yam-duob (npm) (malicious package)
- [MAL-2025-24354](https://insights.sbomify.com/MAL-2025-24354/): Malicious code in kayak-drone-ypze (npm) (malicious package)
- [MAL-2025-24353](https://insights.sbomify.com/MAL-2025-24353/): Malicious code in kaus-unuk-miranda-radiant (npm) (malicious package)
- [MAL-2025-24352](https://insights.sbomify.com/MAL-2025-24352/): Malicious code in kaus-petrology-postcss-loader-andromeda (npm) (malicious package)
- [MAL-2025-24351](https://insights.sbomify.com/MAL-2025-24351/): Malicious code in kaus-pavo-grus-ignite (npm) (malicious package)
- [MAL-2025-24350](https://insights.sbomify.com/MAL-2025-24350/): Malicious code in kaus-oauth-chakra-ui-membrane (npm) (malicious package)
- [MAL-2025-2435](https://insights.sbomify.com/MAL-2025-2435/): Malicious code in workfront-twind (npm) (malicious package)
- [MAL-2025-24349](https://insights.sbomify.com/MAL-2025-24349/): Malicious code in kaus-less-karma-nova (npm) (malicious package)
- [MAL-2025-24348](https://insights.sbomify.com/MAL-2025-24348/): Malicious code in kaus-bootes-quark-sirius (npm) (malicious package)
- [MAL-2025-24347](https://insights.sbomify.com/MAL-2025-24347/): Malicious code in kaus-auth-hermes-parcel (npm) (malicious package)
- [MAL-2025-24346](https://insights.sbomify.com/MAL-2025-24346/): Malicious code in kaula (npm) (malicious package)
- [MAL-2025-24345](https://insights.sbomify.com/MAL-2025-24345/): Malicious code in kato-memory (npm) (malicious package)
- [MAL-2025-24344](https://insights.sbomify.com/MAL-2025-24344/): Malicious code in kato-local (npm) (malicious package)
- [MAL-2025-24343](https://insights.sbomify.com/MAL-2025-24343/): Malicious code in katari (npm) (malicious package)
- [MAL-2025-24342](https://insights.sbomify.com/MAL-2025-24342/): Malicious code in kastra-tachyon-andromeda-passport (npm) (malicious package)
- [MAL-2025-24341](https://insights.sbomify.com/MAL-2025-24341/): Malicious code in kastra-regulus-yonder-magnetosphere (npm) (malicious package)
- [MAL-2025-24340](https://insights.sbomify.com/MAL-2025-24340/): Malicious code in kastra-pm2-tardigrade-paleomagnetism (npm) (malicious package)
- [MAL-2025-2434](https://insights.sbomify.com/MAL-2025-2434/): Malicious code in workfront-tailwind-base (npm) (malicious package)
- [MAL-2025-24339](https://insights.sbomify.com/MAL-2025-24339/): Malicious code in kastra-neutronstar-tardigrade-perseus (npm) (malicious package)
- [MAL-2025-24338](https://insights.sbomify.com/MAL-2025-24338/): Malicious code in kastra-gravity-oauth-hermes (npm) (malicious package)
- [MAL-2025-24337](https://insights.sbomify.com/MAL-2025-24337/): Malicious code in kastra-flare-wasat-nodemon (npm) (malicious package)
- [MAL-2025-24336](https://insights.sbomify.com/MAL-2025-24336/): Malicious code in kasino (npm) (malicious package)
- [MAL-2025-24335](https://insights.sbomify.com/MAL-2025-24335/): Malicious code in kashable-mobile-common (npm) (malicious package)
- [MAL-2025-24334](https://insights.sbomify.com/MAL-2025-24334/): Malicious code in karone (npm) (malicious package)
- [MAL-2025-24333](https://insights.sbomify.com/MAL-2025-24333/): Malicious code in karma_m7rym_98yk3_vortex (npm) (malicious package)
- [MAL-2025-24332](https://insights.sbomify.com/MAL-2025-24332/): Malicious code in karma_ezdnq_hgl1e_phoenix (npm) (malicious package)
- [MAL-2025-24331](https://insights.sbomify.com/MAL-2025-24331/): Malicious code in karma_a70l3_z1fzv_kryptonite (npm) (malicious package)
- [MAL-2025-24330](https://insights.sbomify.com/MAL-2025-24330/): Malicious code in karma-webpack-deployment-test (npm) (malicious package)
- [MAL-2025-2433](https://insights.sbomify.com/MAL-2025-2433/): Malicious code in winston-js (npm) (malicious package)
- [MAL-2025-24329](https://insights.sbomify.com/MAL-2025-24329/): Malicious code in karma-ulx2j-ax8si-hearth-project (npm) (malicious package)
- [MAL-2025-24328](https://insights.sbomify.com/MAL-2025-24328/): Malicious code in karma-tmpl2html-preprocessor (npm) (malicious package)
- [MAL-2025-24327](https://insights.sbomify.com/MAL-2025-24327/): Malicious code in karma-repository-request-helmet (npm) (malicious package)
- [MAL-2025-24326](https://insights.sbomify.com/MAL-2025-24326/): Malicious code in karma-puida-4cu7u-quiver-project (npm) (malicious package)
- [MAL-2025-24325](https://insights.sbomify.com/MAL-2025-24325/): Malicious code in karma-middleware (npm) (malicious package)
- [MAL-2025-24324](https://insights.sbomify.com/MAL-2025-24324/): Malicious code in karma-jnaf9-xzor1-lavender-project (npm) (malicious package)
- [MAL-2025-24323](https://insights.sbomify.com/MAL-2025-24323/): Malicious code in karma-humanity-stack (npm) (malicious package)
- [MAL-2025-24322](https://insights.sbomify.com/MAL-2025-24322/): Malicious code in karma-hapi-sedna-testcafe (npm) (malicious package)
- [MAL-2025-24321](https://insights.sbomify.com/MAL-2025-24321/): Malicious code in karma-got-reveal-md-proxima (npm) (malicious package)
- [MAL-2025-24320](https://insights.sbomify.com/MAL-2025-24320/): Malicious code in karma-gatsby-virtualreality-concurrently (npm) (malicious package)
- [MAL-2025-2432](https://insights.sbomify.com/MAL-2025-2432/): Malicious code in vue-plugin-rely2 (npm) (malicious package)
- [MAL-2025-24319](https://insights.sbomify.com/MAL-2025-24319/): Malicious code in karma-gatsby-nodejs-europa (npm) (malicious package)
- [MAL-2025-24318](https://insights.sbomify.com/MAL-2025-24318/): Malicious code in karma-b2ijo-n034e-yellow-project (npm) (malicious package)
- [MAL-2025-24317](https://insights.sbomify.com/MAL-2025-24317/): Malicious code in karma-550dy-x9a4k-gale-project (npm) (malicious package)
- [MAL-2025-24316](https://insights.sbomify.com/MAL-2025-24316/): Malicious code in karma-4wfu7-8esg8-twilight-project (npm) (malicious package)
- [MAL-2025-24315](https://insights.sbomify.com/MAL-2025-24315/): Malicious code in karma-4vbyb-kbfgk-juniper-project (npm) (malicious package)
- [MAL-2025-24314](https://insights.sbomify.com/MAL-2025-24314/): Malicious code in kardashevscale-markdown-pdf-cressida-fetch (npm) (malicious package)
- [MAL-2025-24313](https://insights.sbomify.com/MAL-2025-24313/): Malicious code in kardashevscale-hugo-wezen-luna (npm) (malicious package)
- [MAL-2025-24312](https://insights.sbomify.com/MAL-2025-24312/): Malicious code in kardashevscale-fornax-ceres-package (npm) (malicious package)
- [MAL-2025-24311](https://insights.sbomify.com/MAL-2025-24311/): Malicious code in kardashevscale-element-ui-element-ui-cosmogenic (npm) (malicious package)
- [MAL-2025-24310](https://insights.sbomify.com/MAL-2025-24310/): Malicious code in karboom (npm) (malicious package)
- [MAL-2025-2431](https://insights.sbomify.com/MAL-2025-2431/): Malicious code in vue-plugin-rely1 (npm) (malicious package)
- [MAL-2025-24309](https://insights.sbomify.com/MAL-2025-24309/): Malicious code in karajinov (npm) (malicious package)
- [MAL-2025-24308](https://insights.sbomify.com/MAL-2025-24308/): Malicious code in karabulin (npm) (malicious package)
- [MAL-2025-24307](https://insights.sbomify.com/MAL-2025-24307/): Malicious code in kapsel-plugin-i18n (npm) (malicious package)
- [MAL-2025-24306](https://insights.sbomify.com/MAL-2025-24306/): Malicious code in kappaking (npm) (malicious package)
- [MAL-2025-24305](https://insights.sbomify.com/MAL-2025-24305/): Malicious code in kappa-gamma-byte-sandbox-cloud (npm) (malicious package)
- [MAL-2025-24304](https://insights.sbomify.com/MAL-2025-24304/): Malicious code in kapok-supernova-ap4u (npm) (malicious package)
- [MAL-2025-24303](https://insights.sbomify.com/MAL-2025-24303/): Malicious code in kapok-strawberry-fpcm (npm) (malicious package)
- [MAL-2025-24302](https://insights.sbomify.com/MAL-2025-24302/): Malicious code in kapok-hazel-w31k (npm) (malicious package)
- [MAL-2025-24301](https://insights.sbomify.com/MAL-2025-24301/): Malicious code in kapok-bravo-sfb2 (npm) (malicious package)
- [MAL-2025-24300](https://insights.sbomify.com/MAL-2025-24300/): Malicious code in kapok-blackhole-wuav (npm) (malicious package)
- [MAL-2025-2430](https://insights.sbomify.com/MAL-2025-2430/): Malicious code in visitor-targeting (npm) (malicious package)
- [MAL-2025-243](https://insights.sbomify.com/MAL-2025-243/): Malicious code in solhint-config-keep (npm) (malicious package)
- [MAL-2025-24299](https://insights.sbomify.com/MAL-2025-24299/): Malicious code in kapok-apple-17oe (npm) (malicious package)
- [MAL-2025-24298](https://insights.sbomify.com/MAL-2025-24298/): Malicious code in kapian (npm) (malicious package)
- [MAL-2025-24297](https://insights.sbomify.com/MAL-2025-24297/): Malicious code in kaocious (npm) (malicious package)
- [MAL-2025-24296](https://insights.sbomify.com/MAL-2025-24296/): Malicious code in kanzeon (npm) (malicious package)
- [MAL-2025-24295](https://insights.sbomify.com/MAL-2025-24295/): Malicious code in kanjidex (npm) (malicious package)
- [MAL-2025-24294](https://insights.sbomify.com/MAL-2025-24294/): Malicious code in kangaroo-ziggurat-hg4z (npm) (malicious package)
- [MAL-2025-24293](https://insights.sbomify.com/MAL-2025-24293/): Malicious code in kangaroo-underpass-kdg1 (npm) (malicious package)
- [MAL-2025-24292](https://insights.sbomify.com/MAL-2025-24292/): Malicious code in kangaroo-meteor-y7m1 (npm) (malicious package)
- [MAL-2025-24291](https://insights.sbomify.com/MAL-2025-24291/): Malicious code in kangaroo-kiwi-3q02 (npm) (malicious package)
- [MAL-2025-24290](https://insights.sbomify.com/MAL-2025-24290/): Malicious code in kangaroo-dwarf-dqx2 (npm) (malicious package)
- [MAL-2025-2429](https://insights.sbomify.com/MAL-2025-2429/): Malicious code in user-paypal (npm) (malicious package)
- [MAL-2025-24289](https://insights.sbomify.com/MAL-2025-24289/): Malicious code in kanchuan-nvrenxin-mihuo-nanrenzhen (npm) (malicious package)
- [MAL-2025-24288](https://insights.sbomify.com/MAL-2025-24288/): Malicious code in kanaquiz (npm) (malicious package)
- [MAL-2025-24287](https://insights.sbomify.com/MAL-2025-24287/): Malicious code in kamonetuzx (npm) (malicious package)
- [MAL-2025-24286](https://insights.sbomify.com/MAL-2025-24286/): Malicious code in kamonetuv (npm) (malicious package)
- [MAL-2025-24285](https://insights.sbomify.com/MAL-2025-24285/): Malicious code in kamonetuq (npm) (malicious package)
- [MAL-2025-24284](https://insights.sbomify.com/MAL-2025-24284/): Malicious code in kamonetum (npm) (malicious package)
- [MAL-2025-24283](https://insights.sbomify.com/MAL-2025-24283/): Malicious code in kamonetucx (npm) (malicious package)
- [MAL-2025-24282](https://insights.sbomify.com/MAL-2025-24282/): Malicious code in kamonetucl (npm) (malicious package)
- [MAL-2025-24281](https://insights.sbomify.com/MAL-2025-24281/): Malicious code in kamonetuck (npm) (malicious package)
- [MAL-2025-24280](https://insights.sbomify.com/MAL-2025-24280/): Malicious code in kamonetucj (npm) (malicious package)
- [MAL-2025-2428](https://insights.sbomify.com/MAL-2025-2428/): Malicious code in twilio-live-interactive-video (npm) (malicious package)
- [MAL-2025-24279](https://insights.sbomify.com/MAL-2025-24279/): Malicious code in kamonetuci (npm) (malicious package)
- [MAL-2025-24278](https://insights.sbomify.com/MAL-2025-24278/): Malicious code in kamonetuch (npm) (malicious package)
- [MAL-2025-24277](https://insights.sbomify.com/MAL-2025-24277/): Malicious code in kamonetucg (npm) (malicious package)
- [MAL-2025-24276](https://insights.sbomify.com/MAL-2025-24276/): Malicious code in kamonetucf (npm) (malicious package)
- [MAL-2025-24275](https://insights.sbomify.com/MAL-2025-24275/): Malicious code in kamonetuce (npm) (malicious package)
- [MAL-2025-24274](https://insights.sbomify.com/MAL-2025-24274/): Malicious code in kamonetucd (npm) (malicious package)
- [MAL-2025-24273](https://insights.sbomify.com/MAL-2025-24273/): Malicious code in kamonetucc (npm) (malicious package)
- [MAL-2025-24272](https://insights.sbomify.com/MAL-2025-24272/): Malicious code in kamonetucbzo (npm) (malicious package)
- [MAL-2025-24271](https://insights.sbomify.com/MAL-2025-24271/): Malicious code in kamonetucbzn (npm) (malicious package)
- [MAL-2025-24270](https://insights.sbomify.com/MAL-2025-24270/): Malicious code in kamonetucbzm (npm) (malicious package)
- [MAL-2025-2427](https://insights.sbomify.com/MAL-2025-2427/): Malicious code in tsl-select-trigger (npm) (malicious package)
- [MAL-2025-24269](https://insights.sbomify.com/MAL-2025-24269/): Malicious code in kamonetucbzl (npm) (malicious package)
- [MAL-2025-24268](https://insights.sbomify.com/MAL-2025-24268/): Malicious code in kamonetucbzk (npm) (malicious package)
- [MAL-2025-24267](https://insights.sbomify.com/MAL-2025-24267/): Malicious code in kamonetucbzj (npm) (malicious package)
- [MAL-2025-24266](https://insights.sbomify.com/MAL-2025-24266/): Malicious code in kamonetucbzi (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/843/