# Vulnerabilities published in 2025 - [MAL-2025-23725](https://insights.sbomify.com/MAL-2025-23725/): Malicious code in jellyderp (npm) (malicious package) - [MAL-2025-23724](https://insights.sbomify.com/MAL-2025-23724/): Malicious code in jekyll-thermochronology-farout-sagitta (npm) (malicious package) - [MAL-2025-23723](https://insights.sbomify.com/MAL-2025-23723/): Malicious code in jekyll-cypress-exobiology-miranda (npm) (malicious package) - [MAL-2025-23722](https://insights.sbomify.com/MAL-2025-23722/): Malicious code in jekpress (npm) (malicious package) - [MAL-2025-23721](https://insights.sbomify.com/MAL-2025-23721/): Malicious code in jefftrax (npm) (malicious package) - [MAL-2025-23720](https://insights.sbomify.com/MAL-2025-23720/): Malicious code in jeetbad (npm) (malicious package) - [MAL-2025-2372](https://insights.sbomify.com/MAL-2025-2372/): Malicious code in dev-debugger-vite (npm) (malicious package) - [MAL-2025-23719](https://insights.sbomify.com/MAL-2025-23719/): Malicious code in jedismash (npm) (malicious package) - [MAL-2025-23718](https://insights.sbomify.com/MAL-2025-23718/): Malicious code in jdevice-nodejs-sdk (npm) (malicious package) - [MAL-2025-23717](https://insights.sbomify.com/MAL-2025-23717/): Malicious code in jddfdsdmadgktestdjjtema (npm) (malicious package) - [MAL-2025-23716](https://insights.sbomify.com/MAL-2025-23716/): Malicious code in jdctest (npm) (malicious package) - [MAL-2025-23715](https://insights.sbomify.com/MAL-2025-23715/): Malicious code in jdcbrkytsvfimwhg (npm) (malicious package) - [MAL-2025-23714](https://insights.sbomify.com/MAL-2025-23714/): Malicious code in jdb.js (npm) (malicious package) - [MAL-2025-23713](https://insights.sbomify.com/MAL-2025-23713/): Malicious code in jd7x4x (npm) (malicious package) - [MAL-2025-23712](https://insights.sbomify.com/MAL-2025-23712/): Malicious code in jcterm (npm) (malicious package) - [MAL-2025-23711](https://insights.sbomify.com/MAL-2025-23711/): Malicious code in jcrmtvxbeksqdaiu (npm) (malicious package) - [MAL-2025-23710](https://insights.sbomify.com/MAL-2025-23710/): Malicious code in jcqkdgtzykohwrun (npm) (malicious package) - [MAL-2025-2371](https://insights.sbomify.com/MAL-2025-2371/): Malicious code in dependencyconfusion9 (npm) (malicious package) - [MAL-2025-23709](https://insights.sbomify.com/MAL-2025-23709/): Malicious code in jcicorereturnservice (npm) (malicious package) - [MAL-2025-23708](https://insights.sbomify.com/MAL-2025-23708/): Malicious code in jchatsock (npm) (malicious package) - [MAL-2025-23707](https://insights.sbomify.com/MAL-2025-23707/): Malicious code in jcatalog-react-reference-search (npm) (malicious package) - [MAL-2025-23706](https://insights.sbomify.com/MAL-2025-23706/): Malicious code in jcatalog-react-fixed-data-table (npm) (malicious package) - [MAL-2025-23705](https://insights.sbomify.com/MAL-2025-23705/): Malicious code in jc-sha3 (npm) (malicious package) - [MAL-2025-23704](https://insights.sbomify.com/MAL-2025-23704/): Malicious code in jbspacer (npm) (malicious package) - [MAL-2025-23703](https://insights.sbomify.com/MAL-2025-23703/): Malicious code in jbsignal (npm) (malicious package) - [MAL-2025-23702](https://insights.sbomify.com/MAL-2025-23702/): Malicious code in jblank (npm) (malicious package) - [MAL-2025-23701](https://insights.sbomify.com/MAL-2025-23701/): Malicious code in jb-abtest (npm) (malicious package) - [MAL-2025-23700](https://insights.sbomify.com/MAL-2025-23700/): Malicious code in jayparser (npm) (malicious package) - [MAL-2025-2370](https://insights.sbomify.com/MAL-2025-2370/): Malicious code in data-ui-v (npm) (malicious package) - [MAL-2025-237](https://insights.sbomify.com/MAL-2025-237/): Malicious code in scrumretro (npm) (malicious package) - [MAL-2025-23699](https://insights.sbomify.com/MAL-2025-23699/): Malicious code in jaynan (npm) (malicious package) - [MAL-2025-23698](https://insights.sbomify.com/MAL-2025-23698/): Malicious code in jaydocs (npm) (malicious package) - [MAL-2025-23697](https://insights.sbomify.com/MAL-2025-23697/): Malicious code in jayaff (npm) (malicious package) - [MAL-2025-23696](https://insights.sbomify.com/MAL-2025-23696/): Malicious code in jaxproc (npm) (malicious package) - [MAL-2025-23695](https://insights.sbomify.com/MAL-2025-23695/): Malicious code in jawema (npm) (malicious package) - [MAL-2025-23694](https://insights.sbomify.com/MAL-2025-23694/): Malicious code in javauto (npm) (malicious package) - [MAL-2025-23693](https://insights.sbomify.com/MAL-2025-23693/): Malicious code in javatres (npm) (malicious package) - [MAL-2025-23692](https://insights.sbomify.com/MAL-2025-23692/): Malicious code in javastoreid (npm) (malicious package) - [MAL-2025-23691](https://insights.sbomify.com/MAL-2025-23691/): Malicious code in javasite (npm) (malicious package) - [MAL-2025-23690](https://insights.sbomify.com/MAL-2025-23690/): Malicious code in javashop (npm) (malicious package) - [MAL-2025-2369](https://insights.sbomify.com/MAL-2025-2369/): Malicious code in core-pino (npm) (malicious package) - [MAL-2025-23689](https://insights.sbomify.com/MAL-2025-23689/): Malicious code in javascript3030 (npm) (malicious package) - [MAL-2025-23688](https://insights.sbomify.com/MAL-2025-23688/): Malicious code in javascript-xenos-rigel-izar (npm) (malicious package) - [MAL-2025-23687](https://insights.sbomify.com/MAL-2025-23687/): Malicious code in javascript-radioastronomy-morgan-carina (npm) (malicious package) - [MAL-2025-23686](https://insights.sbomify.com/MAL-2025-23686/): Malicious code in javascript-protoplanetarydisk-yakutsk-string (npm) (malicious package) - [MAL-2025-23685](https://insights.sbomify.com/MAL-2025-23685/): Malicious code in javascript-package-kaus-xml (npm) (malicious package) - [MAL-2025-23684](https://insights.sbomify.com/MAL-2025-23684/): Malicious code in javascript-outercore-scripts-gridsome (npm) (malicious package) - [MAL-2025-23683](https://insights.sbomify.com/MAL-2025-23683/): Malicious code in javascript-nightmare-jekyll-postcss-loader (npm) (malicious package) - [MAL-2025-23682](https://insights.sbomify.com/MAL-2025-23682/): Malicious code in javascript-msx-sdk (npm) (malicious package) - [MAL-2025-23681](https://insights.sbomify.com/MAL-2025-23681/): Malicious code in javascript-astrochemistry-panspermia-mongoose (npm) (malicious package) - [MAL-2025-23680](https://insights.sbomify.com/MAL-2025-23680/): Malicious code in javarepo (npm) (malicious package) - [MAL-2025-2368](https://insights.sbomify.com/MAL-2025-2368/): Malicious code in cclr-huge-ui (npm) (malicious package) - [MAL-2025-23679](https://insights.sbomify.com/MAL-2025-23679/): Malicious code in javarat (npm) (malicious package) - [MAL-2025-23678](https://insights.sbomify.com/MAL-2025-23678/): Malicious code in javapong (npm) (malicious package) - [MAL-2025-23677](https://insights.sbomify.com/MAL-2025-23677/): Malicious code in javapay (npm) (malicious package) - [MAL-2025-23676](https://insights.sbomify.com/MAL-2025-23676/): Malicious code in javaodev (npm) (malicious package) - [MAL-2025-23675](https://insights.sbomify.com/MAL-2025-23675/): Malicious code in javagift (npm) (malicious package) - [MAL-2025-23674](https://insights.sbomify.com/MAL-2025-23674/): Malicious code in javagames (npm) (malicious package) - [MAL-2025-23673](https://insights.sbomify.com/MAL-2025-23673/): Malicious code in javacuda (npm) (malicious package) - [MAL-2025-23672](https://insights.sbomify.com/MAL-2025-23672/): Malicious code in java-validate-monitor-link-private (npm) (malicious package) - [MAL-2025-23671](https://insights.sbomify.com/MAL-2025-23671/): Malicious code in java-fork-byte-double-epsilon (npm) (malicious package) - [MAL-2025-23670](https://insights.sbomify.com/MAL-2025-23670/): Malicious code in jaticker (npm) (malicious package) - [MAL-2025-2367](https://insights.sbomify.com/MAL-2025-2367/): Malicious code in ccl-utilities (npm) (malicious package) - [MAL-2025-23669](https://insights.sbomify.com/MAL-2025-23669/): Malicious code in jaspilite (npm) (malicious package) - [MAL-2025-23668](https://insights.sbomify.com/MAL-2025-23668/): Malicious code in jasper-yzxyc-s87r4-star-project (npm) (malicious package) - [MAL-2025-23667](https://insights.sbomify.com/MAL-2025-23667/): Malicious code in jasper-repository (npm) (malicious package) - [MAL-2025-23666](https://insights.sbomify.com/MAL-2025-23666/): Malicious code in jasper-qopud-py5vt-paradise-project (npm) (malicious package) - [MAL-2025-23665](https://insights.sbomify.com/MAL-2025-23665/): Malicious code in jasper-fj3y3-aiha8-orbit-project (npm) (malicious package) - [MAL-2025-23664](https://insights.sbomify.com/MAL-2025-23664/): Malicious code in jasper-avbkv-p4win-lavender-project (npm) (malicious package) - [MAL-2025-23663](https://insights.sbomify.com/MAL-2025-23663/): Malicious code in jasper-95fp6-txeo1-xenith-project (npm) (malicious package) - [MAL-2025-23662](https://insights.sbomify.com/MAL-2025-23662/): Malicious code in jasper-6rm7t-t2w99-solace-project (npm) (malicious package) - [MAL-2025-23661](https://insights.sbomify.com/MAL-2025-23661/): Malicious code in jasper-43bbw-2obmm-vortex-project (npm) (malicious package) - [MAL-2025-23660](https://insights.sbomify.com/MAL-2025-23660/): Malicious code in jasmine_smycx_tjmmc_cascade (npm) (malicious package) - [MAL-2025-2366](https://insights.sbomify.com/MAL-2025-2366/): Malicious code in cashbabe (npm) (malicious package) - [MAL-2025-23659](https://insights.sbomify.com/MAL-2025-23659/): Malicious code in jasmine_igjpe_a7kgl_arcade (npm) (malicious package) - [MAL-2025-23658](https://insights.sbomify.com/MAL-2025-23658/): Malicious code in jasmine_i4oid_q9bdd_dawn (npm) (malicious package) - [MAL-2025-23657](https://insights.sbomify.com/MAL-2025-23657/): Malicious code in jasmine_a9gho_9fr2f_drizzle (npm) (malicious package) - [MAL-2025-23656](https://insights.sbomify.com/MAL-2025-23656/): Malicious code in jasmine_9nnaq_beblx_ember (npm) (malicious package) - [MAL-2025-23655](https://insights.sbomify.com/MAL-2025-23655/): Malicious code in jasmine_1u5ay_6cqvo_aroma (npm) (malicious package) - [MAL-2025-23654](https://insights.sbomify.com/MAL-2025-23654/): Malicious code in jasmine-xanadu-law175-project (npm) (malicious package) - [MAL-2025-23653](https://insights.sbomify.com/MAL-2025-23653/): Malicious code in jasmine-whirlpool-wbx348-project (npm) (malicious package) - [MAL-2025-23652](https://insights.sbomify.com/MAL-2025-23652/): Malicious code in jasmine-whale-pvs490-project (npm) (malicious package) - [MAL-2025-23651](https://insights.sbomify.com/MAL-2025-23651/): Malicious code in jasmine-wave-bfy074-project (npm) (malicious package) - [MAL-2025-23650](https://insights.sbomify.com/MAL-2025-23650/): Malicious code in jasmine-waterfall-paz932-project (npm) (malicious package) - [MAL-2025-2365](https://insights.sbomify.com/MAL-2025-2365/): Malicious code in build-toolchain (npm) (malicious package) - [MAL-2025-23649](https://insights.sbomify.com/MAL-2025-23649/): Malicious code in jasmine-waterfall-iqc218-project (npm) (malicious package) - [MAL-2025-23648](https://insights.sbomify.com/MAL-2025-23648/): Malicious code in jasmine-vortex-znm895-project (npm) (malicious package) - [MAL-2025-23647](https://insights.sbomify.com/MAL-2025-23647/): Malicious code in jasmine-tornado-kvy749-project (npm) (malicious package) - [MAL-2025-23646](https://insights.sbomify.com/MAL-2025-23646/): Malicious code in jasmine-tiger-agm120-project (npm) (malicious package) - [MAL-2025-23645](https://insights.sbomify.com/MAL-2025-23645/): Malicious code in jasmine-stream-element-ui-config (npm) (malicious package) - [MAL-2025-23644](https://insights.sbomify.com/MAL-2025-23644/): Malicious code in jasmine-quagmire-ivu514-project (npm) (malicious package) - [MAL-2025-23643](https://insights.sbomify.com/MAL-2025-23643/): Malicious code in jasmine-nymph-cxc922-project (npm) (malicious package) - [MAL-2025-23642](https://insights.sbomify.com/MAL-2025-23642/): Malicious code in jasmine-nni8i-sfaqw-night-project (npm) (malicious package) - [MAL-2025-23641](https://insights.sbomify.com/MAL-2025-23641/): Malicious code in jasmine-nectar-dtg648-project (npm) (malicious package) - [MAL-2025-23640](https://insights.sbomify.com/MAL-2025-23640/): Malicious code in jasmine-lagoon-lqr805-project (npm) (malicious package) - [MAL-2025-2364](https://insights.sbomify.com/MAL-2025-2364/): Malicious code in bigmoneymaker (npm) (malicious package) - [MAL-2025-23639](https://insights.sbomify.com/MAL-2025-23639/): Malicious code in jasmine-lagoon-dbn414-project (npm) (malicious package) - [MAL-2025-23638](https://insights.sbomify.com/MAL-2025-23638/): Malicious code in jasmine-koala-qpt182-project (npm) (malicious package) - [MAL-2025-23637](https://insights.sbomify.com/MAL-2025-23637/): Malicious code in jasmine-jellyfish-ovp374-project (npm) (malicious package) - [MAL-2025-23636](https://insights.sbomify.com/MAL-2025-23636/): Malicious code in jasmine-jade-qff900-project (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/850/