# Vulnerabilities published in 2025


- [MAL-2025-23996](https://insights.sbomify.com/MAL-2025-23996/): Malicious code in jukubox (npm) (malicious package)
- [MAL-2025-23995](https://insights.sbomify.com/MAL-2025-23995/): Malicious code in jukepi (npm) (malicious package)
- [MAL-2025-23994](https://insights.sbomify.com/MAL-2025-23994/): Malicious code in juicip (npm) (malicious package)
- [MAL-2025-23993](https://insights.sbomify.com/MAL-2025-23993/): Malicious code in juicer-plugin (npm) (malicious package)
- [MAL-2025-23992](https://insights.sbomify.com/MAL-2025-23992/): Malicious code in juiced (npm) (malicious package)
- [MAL-2025-23991](https://insights.sbomify.com/MAL-2025-23991/): Malicious code in juhuwai (npm) (malicious package)
- [MAL-2025-23990](https://insights.sbomify.com/MAL-2025-23990/): Malicious code in juffer-xor (npm) (malicious package)
- [MAL-2025-2399](https://insights.sbomify.com/MAL-2025-2399/): Malicious code in plz-bas-ek-bar-dilado-batman (npm) (malicious package)
- [MAL-2025-23989](https://insights.sbomify.com/MAL-2025-23989/): Malicious code in juetpy (npm) (malicious package)
- [MAL-2025-23988](https://insights.sbomify.com/MAL-2025-23988/): Malicious code in judith-m (npm) (malicious package)
- [MAL-2025-23987](https://insights.sbomify.com/MAL-2025-23987/): Malicious code in judgeme (npm) (malicious package)
- [MAL-2025-23986](https://insights.sbomify.com/MAL-2025-23986/): Malicious code in judejude (npm) (malicious package)
- [MAL-2025-23985](https://insights.sbomify.com/MAL-2025-23985/): Malicious code in jubilee-apple-oki112-project (npm) (malicious package)
- [MAL-2025-23984](https://insights.sbomify.com/MAL-2025-23984/): Malicious code in jtstream (npm) (malicious package)
- [MAL-2025-23983](https://insights.sbomify.com/MAL-2025-23983/): Malicious code in jtr-hbs (npm) (malicious package)
- [MAL-2025-23982](https://insights.sbomify.com/MAL-2025-23982/): Malicious code in jtlibrary (npm) (malicious package)
- [MAL-2025-23981](https://insights.sbomify.com/MAL-2025-23981/): Malicious code in jtgnalkypqrzxhes (npm) (malicious package)
- [MAL-2025-23980](https://insights.sbomify.com/MAL-2025-23980/): Malicious code in jtextgame (npm) (malicious package)
- [MAL-2025-2398](https://insights.sbomify.com/MAL-2025-2398/): Malicious code in paypal-logger (npm) (malicious package)
- [MAL-2025-23979](https://insights.sbomify.com/MAL-2025-23979/): Malicious code in jtb-mytrips (npm) (malicious package)
- [MAL-2025-23978](https://insights.sbomify.com/MAL-2025-23978/): Malicious code in jsua-rux (npm) (malicious package)
- [MAL-2025-23977](https://insights.sbomify.com/MAL-2025-23977/): Malicious code in jstoolnpp (npm) (malicious package)
- [MAL-2025-23976](https://insights.sbomify.com/MAL-2025-23976/): Malicious code in jstiuzdorkkfcmxp (npm) (malicious package)
- [MAL-2025-23975](https://insights.sbomify.com/MAL-2025-23975/): Malicious code in jsteward (npm) (malicious package)
- [MAL-2025-23974](https://insights.sbomify.com/MAL-2025-23974/): Malicious code in jsrsasign-browser (npm) (malicious package)
- [MAL-2025-23973](https://insights.sbomify.com/MAL-2025-23973/): Malicious code in jsplc-date (npm) (malicious package)
- [MAL-2025-23972](https://insights.sbomify.com/MAL-2025-23972/): Malicious code in jspeel (npm) (malicious package)
- [MAL-2025-23971](https://insights.sbomify.com/MAL-2025-23971/): Malicious code in jsonweqjoken (npm) (malicious package)
- [MAL-2025-23970](https://insights.sbomify.com/MAL-2025-23970/): Malicious code in jsontome (npm) (malicious package)
- [MAL-2025-2397](https://insights.sbomify.com/MAL-2025-2397/): Malicious code in oauth2-paypal (npm) (malicious package)
- [MAL-2025-23969](https://insights.sbomify.com/MAL-2025-23969/): Malicious code in jsonp-testcafe-aether-blazar (npm) (malicious package)
- [MAL-2025-23968](https://insights.sbomify.com/MAL-2025-23968/): Malicious code in jsonp-reveal-md-rollup-plugin-envconfig (npm) (malicious package)
- [MAL-2025-23967](https://insights.sbomify.com/MAL-2025-23967/): Malicious code in jsonp-neptune-neptune-zephyr (npm) (malicious package)
- [MAL-2025-23966](https://insights.sbomify.com/MAL-2025-23966/): Malicious code in jsonp-init-command-bunyan (npm) (malicious package)
- [MAL-2025-23965](https://insights.sbomify.com/MAL-2025-23965/): Malicious code in jsonp-envconfig-betelgeuse-eslint (npm) (malicious package)
- [MAL-2025-23964](https://insights.sbomify.com/MAL-2025-23964/): Malicious code in jsonlift (npm) (malicious package)
- [MAL-2025-23963](https://insights.sbomify.com/MAL-2025-23963/): Malicious code in jsonl10nfilecomparer (npm) (malicious package)
- [MAL-2025-23962](https://insights.sbomify.com/MAL-2025-23962/): Malicious code in jsoncake (npm) (malicious package)
- [MAL-2025-23961](https://insights.sbomify.com/MAL-2025-23961/): Malicious code in jsonbind (npm) (malicious package)
- [MAL-2025-23960](https://insights.sbomify.com/MAL-2025-23960/): Malicious code in json_log_formatter (npm) (malicious package)
- [MAL-2025-2396](https://insights.sbomify.com/MAL-2025-2396/): Malicious code in node-key-lister (npm) (malicious package)
- [MAL-2025-23959](https://insights.sbomify.com/MAL-2025-23959/): Malicious code in json9 (npm) (malicious package)
- [MAL-2025-23958](https://insights.sbomify.com/MAL-2025-23958/): Malicious code in json-soap-postcss-tectonic (npm) (malicious package)
- [MAL-2025-23957](https://insights.sbomify.com/MAL-2025-23957/): Malicious code in json-search (npm) (malicious package)
- [MAL-2025-23956](https://insights.sbomify.com/MAL-2025-23956/): Malicious code in json-resources (npm) (malicious package)
- [MAL-2025-23955](https://insights.sbomify.com/MAL-2025-23955/): Malicious code in json-perseus-package-ursa (npm) (malicious package)
- [MAL-2025-23954](https://insights.sbomify.com/MAL-2025-23954/): Malicious code in json-packet-parser (npm) (malicious package)
- [MAL-2025-23953](https://insights.sbomify.com/MAL-2025-23953/): Malicious code in json-language-server (npm) (malicious package)
- [MAL-2025-23952](https://insights.sbomify.com/MAL-2025-23952/): Malicious code in json-juno-pegasus-ursa (npm) (malicious package)
- [MAL-2025-23951](https://insights.sbomify.com/MAL-2025-23951/): Malicious code in json-configs (npm) (malicious package)
- [MAL-2025-23950](https://insights.sbomify.com/MAL-2025-23950/): Malicious code in jsmsha3 (npm) (malicious package)
- [MAL-2025-2395](https://insights.sbomify.com/MAL-2025-2395/): Malicious code in nicegirl (npm) (malicious package)
- [MAL-2025-23949](https://insights.sbomify.com/MAL-2025-23949/): Malicious code in jsii-calc (npm) (malicious package)
- [MAL-2025-23948](https://insights.sbomify.com/MAL-2025-23948/): Malicious code in jsii-build-tools (npm) (malicious package)
- [MAL-2025-23947](https://insights.sbomify.com/MAL-2025-23947/): Malicious code in jsify (npm) (malicious package)
- [MAL-2025-23946](https://insights.sbomify.com/MAL-2025-23946/): Malicious code in jshydra (npm) (malicious package)
- [MAL-2025-23945](https://insights.sbomify.com/MAL-2025-23945/): Malicious code in jshkrnxbylzdpfqi (npm) (malicious package)
- [MAL-2025-23944](https://insights.sbomify.com/MAL-2025-23944/): Malicious code in jshdate (npm) (malicious package)
- [MAL-2025-23943](https://insights.sbomify.com/MAL-2025-23943/): Malicious code in jshashset (npm) (malicious package)
- [MAL-2025-23942](https://insights.sbomify.com/MAL-2025-23942/): Malicious code in jscourse (npm) (malicious package)
- [MAL-2025-23941](https://insights.sbomify.com/MAL-2025-23941/): Malicious code in jscarton (npm) (malicious package)
- [MAL-2025-23940](https://insights.sbomify.com/MAL-2025-23940/): Malicious code in js3030-week4 (npm) (malicious package)
- [MAL-2025-2394](https://insights.sbomify.com/MAL-2025-2394/): Malicious code in newland-digitization-ui (npm) (malicious package)
- [MAL-2025-23939](https://insights.sbomify.com/MAL-2025-23939/): Malicious code in js3030-week3 (npm) (malicious package)
- [MAL-2025-23938](https://insights.sbomify.com/MAL-2025-23938/): Malicious code in js3030-week2 (npm) (malicious package)
- [MAL-2025-23937](https://insights.sbomify.com/MAL-2025-23937/): Malicious code in js3030-week1 (npm) (malicious package)
- [MAL-2025-23936](https://insights.sbomify.com/MAL-2025-23936/): Malicious code in js3030-main (npm) (malicious package)
- [MAL-2025-23935](https://insights.sbomify.com/MAL-2025-23935/): Malicious code in js3030-installation (npm) (malicious package)
- [MAL-2025-23934](https://insights.sbomify.com/MAL-2025-23934/): Malicious code in js-wha3 (npm) (malicious package)
- [MAL-2025-23933](https://insights.sbomify.com/MAL-2025-23933/): Malicious code in js-task-paths (npm) (malicious package)
- [MAL-2025-23932](https://insights.sbomify.com/MAL-2025-23932/): Malicious code in js-sxa3 (npm) (malicious package)
- [MAL-2025-23931](https://insights.sbomify.com/MAL-2025-23931/): Malicious code in js-sla3 (npm) (malicious package)
- [MAL-2025-23930](https://insights.sbomify.com/MAL-2025-23930/): Malicious code in js-sja3 (npm) (malicious package)
- [MAL-2025-2393](https://insights.sbomify.com/MAL-2025-2393/): Malicious code in newland-component-test (npm) (malicious package)
- [MAL-2025-23929](https://insights.sbomify.com/MAL-2025-23929/): Malicious code in js-sia3 (npm) (malicious package)
- [MAL-2025-23928](https://insights.sbomify.com/MAL-2025-23928/): Malicious code in js-shq3 (npm) (malicious package)
- [MAL-2025-23927](https://insights.sbomify.com/MAL-2025-23927/): Malicious code in js-shi3 (npm) (malicious package)
- [MAL-2025-23926](https://insights.sbomify.com/MAL-2025-23926/): Malicious code in js-she3 (npm) (malicious package)
- [MAL-2025-23925](https://insights.sbomify.com/MAL-2025-23925/): Malicious code in js-shc3 (npm) (malicious package)
- [MAL-2025-23924](https://insights.sbomify.com/MAL-2025-23924/): Malicious code in js-shas (npm) (malicious package)
- [MAL-2025-23923](https://insights.sbomify.com/MAL-2025-23923/): Malicious code in js-sha7 (npm) (malicious package)
- [MAL-2025-23922](https://insights.sbomify.com/MAL-2025-23922/): Malicious code in js-sequence-diagrams (npm) (malicious package)
- [MAL-2025-23921](https://insights.sbomify.com/MAL-2025-23921/): Malicious code in js-rha3 (npm) (malicious package)
- [MAL-2025-23920](https://insights.sbomify.com/MAL-2025-23920/): Malicious code in js-regular (npm) (malicious package)
- [MAL-2025-2392](https://insights.sbomify.com/MAL-2025-2392/): Malicious code in newland-component (npm) (malicious package)
- [MAL-2025-23919](https://insights.sbomify.com/MAL-2025-23919/): Malicious code in js-qha3 (npm) (malicious package)
- [MAL-2025-23918](https://insights.sbomify.com/MAL-2025-23918/): Malicious code in js-presets (npm) (malicious package)
- [MAL-2025-23917](https://insights.sbomify.com/MAL-2025-23917/): Malicious code in js-mods (npm) (malicious package)
- [MAL-2025-23916](https://insights.sbomify.com/MAL-2025-23916/): Malicious code in js-donkey (npm) (malicious package)
- [MAL-2025-23915](https://insights.sbomify.com/MAL-2025-23915/): Malicious code in js-cha3 (npm) (malicious package)
- [MAL-2025-23914](https://insights.sbomify.com/MAL-2025-23914/): Malicious code in js-base64-int (npm) (malicious package)
- [MAL-2025-23913](https://insights.sbomify.com/MAL-2025-23913/): Malicious code in js-3ha3 (npm) (malicious package)
- [MAL-2025-23912](https://insights.sbomify.com/MAL-2025-23912/): Malicious code in jrswizzle (npm) (malicious package)
- [MAL-2025-23911](https://insights.sbomify.com/MAL-2025-23911/): Malicious code in jrplidar (npm) (malicious package)
- [MAL-2025-23910](https://insights.sbomify.com/MAL-2025-23910/): Malicious code in jreplay (npm) (malicious package)
- [MAL-2025-2391](https://insights.sbomify.com/MAL-2025-2391/): Malicious code in new-nav-docusaurus-2-2 (npm) (malicious package)
- [MAL-2025-23909](https://insights.sbomify.com/MAL-2025-23909/): Malicious code in jreject (npm) (malicious package)
- [MAL-2025-23908](https://insights.sbomify.com/MAL-2025-23908/): Malicious code in jradius (npm) (malicious package)
- [MAL-2025-23907](https://insights.sbomify.com/MAL-2025-23907/): Malicious code in jr-sha3 (npm) (malicious package)
- [MAL-2025-23906](https://insights.sbomify.com/MAL-2025-23906/): Malicious code in jquey (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/847/