# Vulnerabilities published in 2025


- [MAL-2025-23815](https://insights.sbomify.com/MAL-2025-23815/): Malicious code in jjeg1979-palindrome (npm) (malicious package)
- [MAL-2025-23814](https://insights.sbomify.com/MAL-2025-23814/): Malicious code in jitsi-meet-logger (npm) (malicious package)
- [MAL-2025-23813](https://insights.sbomify.com/MAL-2025-23813/): Malicious code in jira-agile-api (npm) (malicious package)
- [MAL-2025-23812](https://insights.sbomify.com/MAL-2025-23812/): Malicious code in jinqjs (npm) (malicious package)
- [MAL-2025-23811](https://insights.sbomify.com/MAL-2025-23811/): Malicious code in jinqitest (npm) (malicious package)
- [MAL-2025-23810](https://insights.sbomify.com/MAL-2025-23810/): Malicious code in jimuskin (npm) (malicious package)
- [MAL-2025-2381](https://insights.sbomify.com/MAL-2025-2381/): Malicious code in epic-debug (npm) (malicious package)
- [MAL-2025-23809](https://insights.sbomify.com/MAL-2025-23809/): Malicious code in jimplunk (npm) (malicious package)
- [MAL-2025-23808](https://insights.sbomify.com/MAL-2025-23808/): Malicious code in jimmis (npm) (malicious package)
- [MAL-2025-23807](https://insights.sbomify.com/MAL-2025-23807/): Malicious code in jimdo-web-library (npm) (malicious package)
- [MAL-2025-23806](https://insights.sbomify.com/MAL-2025-23806/): Malicious code in jimbooth (npm) (malicious package)
- [MAL-2025-23805](https://insights.sbomify.com/MAL-2025-23805/): Malicious code in jima23-frame-print (npm) (malicious package)
- [MAL-2025-23804](https://insights.sbomify.com/MAL-2025-23804/): Malicious code in jillingme (npm) (malicious package)
- [MAL-2025-23803](https://insights.sbomify.com/MAL-2025-23803/): Malicious code in jiinfo (npm) (malicious package)
- [MAL-2025-23802](https://insights.sbomify.com/MAL-2025-23802/): Malicious code in jigsolver (npm) (malicious package)
- [MAL-2025-23801](https://insights.sbomify.com/MAL-2025-23801/): Malicious code in jigsaw_zfcc1_hc9s5_blossom (npm) (malicious package)
- [MAL-2025-23800](https://insights.sbomify.com/MAL-2025-23800/): Malicious code in jigsaw_uwy3e_clwpf_plume (npm) (malicious package)
- [MAL-2025-2380](https://insights.sbomify.com/MAL-2025-2380/): Malicious code in elementor-hello-theme (npm) (malicious package)
- [MAL-2025-238](https://insights.sbomify.com/MAL-2025-238/): Malicious code in selectkit1 (npm) (malicious package)
- [MAL-2025-23799](https://insights.sbomify.com/MAL-2025-23799/): Malicious code in jigsaw_a6r5x_yr1si_lake (npm) (malicious package)
- [MAL-2025-23798](https://insights.sbomify.com/MAL-2025-23798/): Malicious code in jiduan-ziwo-jiushiwang (npm) (malicious package)
- [MAL-2025-23797](https://insights.sbomify.com/MAL-2025-23797/): Malicious code in jibo-sdk (npm) (malicious package)
- [MAL-2025-23796](https://insights.sbomify.com/MAL-2025-23796/): Malicious code in jiandehaoren-xinmao (npm) (malicious package)
- [MAL-2025-23795](https://insights.sbomify.com/MAL-2025-23795/): Malicious code in jiami-jiemi-jishu (npm) (malicious package)
- [MAL-2025-23794](https://insights.sbomify.com/MAL-2025-23794/): Malicious code in jiababe (npm) (malicious package)
- [MAL-2025-23793](https://insights.sbomify.com/MAL-2025-23793/): Malicious code in jhipster-transasia-client (npm) (malicious package)
- [MAL-2025-23792](https://insights.sbomify.com/MAL-2025-23792/): Malicious code in jhdesidl (npm) (malicious package)
- [MAL-2025-23791](https://insights.sbomify.com/MAL-2025-23791/): Malicious code in jhashids (npm) (malicious package)
- [MAL-2025-23790](https://insights.sbomify.com/MAL-2025-23790/): Malicious code in jh-rce-package (npm) (malicious package)
- [MAL-2025-2379](https://insights.sbomify.com/MAL-2025-2379/): Malicious code in elementor-editor-github-actions (npm) (malicious package)
- [MAL-2025-23789](https://insights.sbomify.com/MAL-2025-23789/): Malicious code in jh-private-package (npm) (malicious package)
- [MAL-2025-23788](https://insights.sbomify.com/MAL-2025-23788/): Malicious code in jh-one-awesome-package (npm) (malicious package)
- [MAL-2025-23787](https://insights.sbomify.com/MAL-2025-23787/): Malicious code in jh-another-package (npm) (malicious package)
- [MAL-2025-23786](https://insights.sbomify.com/MAL-2025-23786/): Malicious code in jgltut (npm) (malicious package)
- [MAL-2025-23785](https://insights.sbomify.com/MAL-2025-23785/): Malicious code in jgjgjgjgjg (npm) (malicious package)
- [MAL-2025-23784](https://insights.sbomify.com/MAL-2025-23784/): Malicious code in jgjgig (npm) (malicious package)
- [MAL-2025-23783](https://insights.sbomify.com/MAL-2025-23783/): Malicious code in jgdzr1 (npm) (malicious package)
- [MAL-2025-23782](https://insights.sbomify.com/MAL-2025-23782/): Malicious code in jfrog-midgard (npm) (malicious package)
- [MAL-2025-23781](https://insights.sbomify.com/MAL-2025-23781/): Malicious code in jfrog-asgard (npm) (malicious package)
- [MAL-2025-23780](https://insights.sbomify.com/MAL-2025-23780/): Malicious code in jfisher (npm) (malicious package)
- [MAL-2025-2378](https://insights.sbomify.com/MAL-2025-2378/): Malicious code in dvd-ai-pc-rag (npm) (malicious package)
- [MAL-2025-23779](https://insights.sbomify.com/MAL-2025-23779/): Malicious code in jfedmsg (npm) (malicious package)
- [MAL-2025-23778](https://insights.sbomify.com/MAL-2025-23778/): Malicious code in jfchat (npm) (malicious package)
- [MAL-2025-23777](https://insights.sbomify.com/MAL-2025-23777/): Malicious code in jexnpm (npm) (malicious package)
- [MAL-2025-23776](https://insights.sbomify.com/MAL-2025-23776/): Malicious code in jewel_z0tl4_70rlp_zephyr (npm) (malicious package)
- [MAL-2025-23775](https://insights.sbomify.com/MAL-2025-23775/): Malicious code in jewel_igs6f_xm0z2_tundra (npm) (malicious package)
- [MAL-2025-23774](https://insights.sbomify.com/MAL-2025-23774/): Malicious code in jewel_h5ml2_8jxas_verdant (npm) (malicious package)
- [MAL-2025-23773](https://insights.sbomify.com/MAL-2025-23773/): Malicious code in jewel-zephyr-lbq273-project (npm) (malicious package)
- [MAL-2025-23772](https://insights.sbomify.com/MAL-2025-23772/): Malicious code in jewel-yjsw3-7iemy-flame-project (npm) (malicious package)
- [MAL-2025-23771](https://insights.sbomify.com/MAL-2025-23771/): Malicious code in jewel-thistle-dot828-project (npm) (malicious package)
- [MAL-2025-23770](https://insights.sbomify.com/MAL-2025-23770/): Malicious code in jewel-reef-bbu982-project (npm) (malicious package)
- [MAL-2025-2377](https://insights.sbomify.com/MAL-2025-2377/): Malicious code in dingpengtest-ui (npm) (malicious package)
- [MAL-2025-23769](https://insights.sbomify.com/MAL-2025-23769/): Malicious code in jewel-quasar-wpv095-project (npm) (malicious package)
- [MAL-2025-23768](https://insights.sbomify.com/MAL-2025-23768/): Malicious code in jewel-opaline-mac025-project (npm) (malicious package)
- [MAL-2025-23767](https://insights.sbomify.com/MAL-2025-23767/): Malicious code in jewel-nugget-cuc525-project (npm) (malicious package)
- [MAL-2025-23766](https://insights.sbomify.com/MAL-2025-23766/): Malicious code in jewel-nautilus-wyc463-project (npm) (malicious package)
- [MAL-2025-23765](https://insights.sbomify.com/MAL-2025-23765/): Malicious code in jewel-kiwi-skz312-project (npm) (malicious package)
- [MAL-2025-23764](https://insights.sbomify.com/MAL-2025-23764/): Malicious code in jewel-izrlu-qnwps-dynamo-project (npm) (malicious package)
- [MAL-2025-23763](https://insights.sbomify.com/MAL-2025-23763/): Malicious code in jewel-hxjd6-wrdqf-willow-project (npm) (malicious package)
- [MAL-2025-23762](https://insights.sbomify.com/MAL-2025-23762/): Malicious code in jewel-hollow-sle513-project (npm) (malicious package)
- [MAL-2025-23761](https://insights.sbomify.com/MAL-2025-23761/): Malicious code in jewel-gorilla-sui317-project (npm) (malicious package)
- [MAL-2025-23760](https://insights.sbomify.com/MAL-2025-23760/): Malicious code in jewel-fqn5p-ojmgf-lotus-project (npm) (malicious package)
- [MAL-2025-2376](https://insights.sbomify.com/MAL-2025-2376/): Malicious code in dingpeng-ui (npm) (malicious package)
- [MAL-2025-23759](https://insights.sbomify.com/MAL-2025-23759/): Malicious code in jewel-fjord-soh936-project (npm) (malicious package)
- [MAL-2025-23758](https://insights.sbomify.com/MAL-2025-23758/): Malicious code in jewel-delta-xbh835-project (npm) (malicious package)
- [MAL-2025-23757](https://insights.sbomify.com/MAL-2025-23757/): Malicious code in jewel-delta-bbo611-project (npm) (malicious package)
- [MAL-2025-23756](https://insights.sbomify.com/MAL-2025-23756/): Malicious code in jewel-c2ogk-xj2sg-glow-project (npm) (malicious package)
- [MAL-2025-23755](https://insights.sbomify.com/MAL-2025-23755/): Malicious code in jewel-5ue47-k2dx1-whisper-project (npm) (malicious package)
- [MAL-2025-23754](https://insights.sbomify.com/MAL-2025-23754/): Malicious code in jetty-xigua-p5wn (npm) (malicious package)
- [MAL-2025-23753](https://insights.sbomify.com/MAL-2025-23753/): Malicious code in jetty-shack-fmik (npm) (malicious package)
- [MAL-2025-23752](https://insights.sbomify.com/MAL-2025-23752/): Malicious code in jetty-ocean-vznq (npm) (malicious package)
- [MAL-2025-23751](https://insights.sbomify.com/MAL-2025-23751/): Malicious code in jetty-lettuce-q489 (npm) (malicious package)
- [MAL-2025-23750](https://insights.sbomify.com/MAL-2025-23750/): Malicious code in jetty-carrot-tdb4 (npm) (malicious package)
- [MAL-2025-2375](https://insights.sbomify.com/MAL-2025-2375/): Malicious code in ding123123131 (npm) (malicious package)
- [MAL-2025-23749](https://insights.sbomify.com/MAL-2025-23749/): Malicious code in jetty-blackhole-fpot (npm) (malicious package)
- [MAL-2025-23748](https://insights.sbomify.com/MAL-2025-23748/): Malicious code in jetpack-js-tools (npm) (malicious package)
- [MAL-2025-23747](https://insights.sbomify.com/MAL-2025-23747/): Malicious code in jetcms (npm) (malicious package)
- [MAL-2025-23746](https://insights.sbomify.com/MAL-2025-23746/): Malicious code in jestjs (npm) (malicious package)
- [MAL-2025-23745](https://insights.sbomify.com/MAL-2025-23745/): Malicious code in jest-sync-json-reporter (npm) (malicious package)
- [MAL-2025-23744](https://insights.sbomify.com/MAL-2025-23744/): Malicious code in jest-nextjs-wormhole-hadron (npm) (malicious package)
- [MAL-2025-23743](https://insights.sbomify.com/MAL-2025-23743/): Malicious code in jest-mocha-parcel-hyperion (npm) (malicious package)
- [MAL-2025-23742](https://insights.sbomify.com/MAL-2025-23742/): Malicious code in jest-miranda-child-process-deneb (npm) (malicious package)
- [MAL-2025-23741](https://insights.sbomify.com/MAL-2025-23741/): Malicious code in jest-eslint-plugin-fomalhaut-quasar (npm) (malicious package)
- [MAL-2025-23740](https://insights.sbomify.com/MAL-2025-23740/): Malicious code in jermiah (npm) (malicious package)
- [MAL-2025-2374](https://insights.sbomify.com/MAL-2025-2374/): Malicious code in digits-electron-src (npm) (malicious package)
- [MAL-2025-23739](https://insights.sbomify.com/MAL-2025-23739/): Malicious code in jenkins-master (npm) (malicious package)
- [MAL-2025-23738](https://insights.sbomify.com/MAL-2025-23738/): Malicious code in jeminis (npm) (malicious package)
- [MAL-2025-23737](https://insights.sbomify.com/MAL-2025-23737/): Malicious code in jellyfish-yellow-dar237-project (npm) (malicious package)
- [MAL-2025-23736](https://insights.sbomify.com/MAL-2025-23736/): Malicious code in jellyfish-waterfall-xwl317-project (npm) (malicious package)
- [MAL-2025-23735](https://insights.sbomify.com/MAL-2025-23735/): Malicious code in jellyfish-umbra-jgp412-project (npm) (malicious package)
- [MAL-2025-23734](https://insights.sbomify.com/MAL-2025-23734/): Malicious code in jellyfish-reef-rco151-project (npm) (malicious package)
- [MAL-2025-23733](https://insights.sbomify.com/MAL-2025-23733/): Malicious code in jellyfish-oak-hrf615-project (npm) (malicious package)
- [MAL-2025-23732](https://insights.sbomify.com/MAL-2025-23732/): Malicious code in jellyfish-lilypad-urf910-project (npm) (malicious package)
- [MAL-2025-23731](https://insights.sbomify.com/MAL-2025-23731/): Malicious code in jellyfish-giraffe-lxp049-project (npm) (malicious package)
- [MAL-2025-23730](https://insights.sbomify.com/MAL-2025-23730/): Malicious code in jellyfish-dragon-rqn676-project (npm) (malicious package)
- [MAL-2025-2373](https://insights.sbomify.com/MAL-2025-2373/): Malicious code in digits-common (npm) (malicious package)
- [MAL-2025-23729](https://insights.sbomify.com/MAL-2025-23729/): Malicious code in jellyfish-cloud-gpo655-project (npm) (malicious package)
- [MAL-2025-23728](https://insights.sbomify.com/MAL-2025-23728/): Malicious code in jellyfish-bonfire-tuv847-project (npm) (malicious package)
- [MAL-2025-23727](https://insights.sbomify.com/MAL-2025-23727/): Malicious code in jellyfish-bamboo-zhn735-project (npm) (malicious package)
- [MAL-2025-23726](https://insights.sbomify.com/MAL-2025-23726/): Malicious code in jellyfish-arctic-chz647-project (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/849/