# Vulnerabilities published in 2025


- [MAL-2025-23545](https://insights.sbomify.com/MAL-2025-23545/): Malicious code in jade-5xkjj-wz9uc-nymph-project (npm) (malicious package)
- [MAL-2025-23544](https://insights.sbomify.com/MAL-2025-23544/): Malicious code in jade-3wr62-0nu1x-quill-project (npm) (malicious package)
- [MAL-2025-23543](https://insights.sbomify.com/MAL-2025-23543/): Malicious code in jacson (npm) (malicious package)
- [MAL-2025-23542](https://insights.sbomify.com/MAL-2025-23542/): Malicious code in jacolo (npm) (malicious package)
- [MAL-2025-23541](https://insights.sbomify.com/MAL-2025-23541/): Malicious code in jackrust (npm) (malicious package)
- [MAL-2025-23540](https://insights.sbomify.com/MAL-2025-23540/): Malicious code in jackieboy (npm) (malicious package)
- [MAL-2025-2354](https://insights.sbomify.com/MAL-2025-2354/): Malicious code in @sheingroup/niceshot (npm) (malicious package)
- [MAL-2025-23539](https://insights.sbomify.com/MAL-2025-23539/): Malicious code in jacket-wave-qep731-project (npm) (malicious package)
- [MAL-2025-23538](https://insights.sbomify.com/MAL-2025-23538/): Malicious code in jacket-peacock-hjy273-project (npm) (malicious package)
- [MAL-2025-23537](https://insights.sbomify.com/MAL-2025-23537/): Malicious code in jacket-paradise-ahm955-project (npm) (malicious package)
- [MAL-2025-23536](https://insights.sbomify.com/MAL-2025-23536/): Malicious code in jacket-ocean-wds111-project (npm) (malicious package)
- [MAL-2025-23535](https://insights.sbomify.com/MAL-2025-23535/): Malicious code in jacket-hill-lrm508-project (npm) (malicious package)
- [MAL-2025-23534](https://insights.sbomify.com/MAL-2025-23534/): Malicious code in jacket-hedgehog-aut206-project (npm) (malicious package)
- [MAL-2025-23533](https://insights.sbomify.com/MAL-2025-23533/): Malicious code in jacket-brook-cim504-project (npm) (malicious package)
- [MAL-2025-23532](https://insights.sbomify.com/MAL-2025-23532/): Malicious code in jacket-arctic-dwo959-project (npm) (malicious package)
- [MAL-2025-23531](https://insights.sbomify.com/MAL-2025-23531/): Malicious code in jaccia (npm) (malicious package)
- [MAL-2025-23530](https://insights.sbomify.com/MAL-2025-23530/): Malicious code in jabbah-subduction-got-duplex (npm) (malicious package)
- [MAL-2025-2353](https://insights.sbomify.com/MAL-2025-2353/): Malicious code in @sheingroup/loveshiro (npm) (malicious package)
- [MAL-2025-23529](https://insights.sbomify.com/MAL-2025-23529/): Malicious code in jabbah-graviton-on-areology (npm) (malicious package)
- [MAL-2025-23528](https://insights.sbomify.com/MAL-2025-23528/): Malicious code in jabbah-futurology-sedna-augmentedreality (npm) (malicious package)
- [MAL-2025-23527](https://insights.sbomify.com/MAL-2025-23527/): Malicious code in jabbah-eridanus-jupiter-hugo (npm) (malicious package)
- [MAL-2025-23526](https://insights.sbomify.com/MAL-2025-23526/): Malicious code in jabbah-chakra-ui-pino-chromedriver (npm) (malicious package)
- [MAL-2025-23525](https://insights.sbomify.com/MAL-2025-23525/): Malicious code in jabbah-bootes-nebula-seismology (npm) (malicious package)
- [MAL-2025-23524](https://insights.sbomify.com/MAL-2025-23524/): Malicious code in j3-sha3 (npm) (malicious package)
- [MAL-2025-23523](https://insights.sbomify.com/MAL-2025-23523/): Malicious code in j2-cli (npm) (malicious package)
- [MAL-2025-23522](https://insights.sbomify.com/MAL-2025-23522/): Malicious code in iztlaiptv (npm) (malicious package)
- [MAL-2025-23521](https://insights.sbomify.com/MAL-2025-23521/): Malicious code in izberg-backoffice-inventory-js (npm) (malicious package)
- [MAL-2025-23520](https://insights.sbomify.com/MAL-2025-23520/): Malicious code in izar-bellatrix-accretion-photon (npm) (malicious package)
- [MAL-2025-2352](https://insights.sbomify.com/MAL-2025-2352/): Malicious code in @sheingroup/justakiss (npm) (malicious package)
- [MAL-2025-23519](https://insights.sbomify.com/MAL-2025-23519/): Malicious code in ixordocs-portal-gui (npm) (malicious package)
- [MAL-2025-23518](https://insights.sbomify.com/MAL-2025-23518/): Malicious code in ixmixdrix (npm) (malicious package)
- [MAL-2025-23517](https://insights.sbomify.com/MAL-2025-23517/): Malicious code in ixmcqkwnbvglrpes (npm) (malicious package)
- [MAL-2025-23516](https://insights.sbomify.com/MAL-2025-23516/): Malicious code in ixacalc (npm) (malicious package)
- [MAL-2025-23515](https://insights.sbomify.com/MAL-2025-23515/): Malicious code in iwwa-front (npm) (malicious package)
- [MAL-2025-23514](https://insights.sbomify.com/MAL-2025-23514/): Malicious code in iwsprxkcnhgbyatk (npm) (malicious package)
- [MAL-2025-23513](https://insights.sbomify.com/MAL-2025-23513/): Malicious code in iwenrvfsdjhckkuo (npm) (malicious package)
- [MAL-2025-23512](https://insights.sbomify.com/MAL-2025-23512/): Malicious code in iwasm-ion-schema (npm) (malicious package)
- [MAL-2025-23511](https://insights.sbomify.com/MAL-2025-23511/): Malicious code in iwan-tahu72-breki (npm) (malicious package)
- [MAL-2025-23510](https://insights.sbomify.com/MAL-2025-23510/): Malicious code in iwan-soto44-kuki (npm) (malicious package)
- [MAL-2025-2351](https://insights.sbomify.com/MAL-2025-2351/): Malicious code in @sheingroup/babetonight (npm) (malicious package)
- [MAL-2025-23509](https://insights.sbomify.com/MAL-2025-23509/): Malicious code in iwan-lapis67-breki (npm) (malicious package)
- [MAL-2025-23508](https://insights.sbomify.com/MAL-2025-23508/): Malicious code in iwan-buburayam68-sukiwir (npm) (malicious package)
- [MAL-2025-23507](https://insights.sbomify.com/MAL-2025-23507/): Malicious code in ivyplug (npm) (malicious package)
- [MAL-2025-23506](https://insights.sbomify.com/MAL-2025-23506/): Malicious code in ivyedge (npm) (malicious package)
- [MAL-2025-23505](https://insights.sbomify.com/MAL-2025-23505/): Malicious code in ivycrm (npm) (malicious package)
- [MAL-2025-23504](https://insights.sbomify.com/MAL-2025-23504/): Malicious code in ivy_ogoro_8cq5s_glacier (npm) (malicious package)
- [MAL-2025-23503](https://insights.sbomify.com/MAL-2025-23503/): Malicious code in ivy_msxbq_uy1fu_willow (npm) (malicious package)
- [MAL-2025-23502](https://insights.sbomify.com/MAL-2025-23502/): Malicious code in ivy-z3xgp-yt7sr-ember-project (npm) (malicious package)
- [MAL-2025-23501](https://insights.sbomify.com/MAL-2025-23501/): Malicious code in ivy-wasabi-5glb (npm) (malicious package)
- [MAL-2025-23500](https://insights.sbomify.com/MAL-2025-23500/): Malicious code in ivy-vt5ig-u6rtm-terra-project (npm) (malicious package)
- [MAL-2025-2350](https://insights.sbomify.com/MAL-2025-2350/): Malicious code in @od-react/od-react-test (npm) (malicious package)
- [MAL-2025-235](https://insights.sbomify.com/MAL-2025-235/): Malicious code in pyroscope-oss (npm) (malicious package)
- [MAL-2025-23499](https://insights.sbomify.com/MAL-2025-23499/): Malicious code in ivy-volcano-085d (npm) (malicious package)
- [MAL-2025-23498](https://insights.sbomify.com/MAL-2025-23498/): Malicious code in ivy-vcrrz-7b7vr-glow-project (npm) (malicious package)
- [MAL-2025-23497](https://insights.sbomify.com/MAL-2025-23497/): Malicious code in ivy-sierra-iu11 (npm) (malicious package)
- [MAL-2025-23496](https://insights.sbomify.com/MAL-2025-23496/): Malicious code in ivy-raspberry-a549 (npm) (malicious package)
- [MAL-2025-23495](https://insights.sbomify.com/MAL-2025-23495/): Malicious code in ivy-ognqy-uy9rz-tranquil-project (npm) (malicious package)
- [MAL-2025-23494](https://insights.sbomify.com/MAL-2025-23494/): Malicious code in ivy-lib (npm) (malicious package)
- [MAL-2025-23493](https://insights.sbomify.com/MAL-2025-23493/): Malicious code in ivy-kuiper-gvol (npm) (malicious package)
- [MAL-2025-23492](https://insights.sbomify.com/MAL-2025-23492/): Malicious code in ivy-kiwi-jyje (npm) (malicious package)
- [MAL-2025-23491](https://insights.sbomify.com/MAL-2025-23491/): Malicious code in ivy-i8xdk-583dw-kelp-project (npm) (malicious package)
- [MAL-2025-23490](https://insights.sbomify.com/MAL-2025-23490/): Malicious code in ivy-fnddb-h7jq1-twilight-project (npm) (malicious package)
- [MAL-2025-2349](https://insights.sbomify.com/MAL-2025-2349/): Malicious code in spot-the-station-app (npm) (malicious package)
- [MAL-2025-23489](https://insights.sbomify.com/MAL-2025-23489/): Malicious code in ivy-cyi1h-sycc9-knoll-project (npm) (malicious package)
- [MAL-2025-23488](https://insights.sbomify.com/MAL-2025-23488/): Malicious code in ivy-6m9fb-tsi90-fable-project (npm) (malicious package)
- [MAL-2025-23487](https://insights.sbomify.com/MAL-2025-23487/): Malicious code in ivy-0nx1s-8jfp0-unity-project (npm) (malicious package)
- [MAL-2025-23486](https://insights.sbomify.com/MAL-2025-23486/): Malicious code in ivtvrecsh (npm) (malicious package)
- [MAL-2025-23485](https://insights.sbomify.com/MAL-2025-23485/): Malicious code in ivr (npm) (malicious package)
- [MAL-2025-23484](https://insights.sbomify.com/MAL-2025-23484/): Malicious code in ivory-infinite-kgy760-project (npm) (malicious package)
- [MAL-2025-23483](https://insights.sbomify.com/MAL-2025-23483/): Malicious code in ivocab (npm) (malicious package)
- [MAL-2025-23482](https://insights.sbomify.com/MAL-2025-23482/): Malicious code in ivmaker (npm) (malicious package)
- [MAL-2025-23481](https://insights.sbomify.com/MAL-2025-23481/): Malicious code in ivm_client (npm) (malicious package)
- [MAL-2025-23480](https://insights.sbomify.com/MAL-2025-23480/): Malicious code in ivisitors (npm) (malicious package)
- [MAL-2025-2348](https://insights.sbomify.com/MAL-2025-2348/): Malicious code in k8s-deploy-action (npm) (malicious package)
- [MAL-2025-23479](https://insights.sbomify.com/MAL-2025-23479/): Malicious code in iview-cacscader-multi (npm) (malicious package)
- [MAL-2025-23478](https://insights.sbomify.com/MAL-2025-23478/): Malicious code in ivenyang (npm) (malicious package)
- [MAL-2025-23477](https://insights.sbomify.com/MAL-2025-23477/): Malicious code in iuythdjfhgffyg (npm) (malicious package)
- [MAL-2025-23476](https://insights.sbomify.com/MAL-2025-23476/): Malicious code in iuythdjfhgffs (npm) (malicious package)
- [MAL-2025-23475](https://insights.sbomify.com/MAL-2025-23475/): Malicious code in iuythdjfhgffdf (npm) (malicious package)
- [MAL-2025-23474](https://insights.sbomify.com/MAL-2025-23474/): Malicious code in iuythdjfhgff (npm) (malicious package)
- [MAL-2025-23473](https://insights.sbomify.com/MAL-2025-23473/): Malicious code in iuythdjfghgff (npm) (malicious package)
- [MAL-2025-23472](https://insights.sbomify.com/MAL-2025-23472/): Malicious code in iunxtio (npm) (malicious package)
- [MAL-2025-23471](https://insights.sbomify.com/MAL-2025-23471/): Malicious code in iunnoman (npm) (malicious package)
- [MAL-2025-23470](https://insights.sbomify.com/MAL-2025-23470/): Malicious code in itwsii (npm) (malicious package)
- [MAL-2025-2347](https://insights.sbomify.com/MAL-2025-2347/): Malicious code in cryptomus-aurora-kit (npm) (malicious package)
- [MAL-2025-23469](https://insights.sbomify.com/MAL-2025-23469/): Malicious code in itwd-icons (npm) (malicious package)
- [MAL-2025-23468](https://insights.sbomify.com/MAL-2025-23468/): Malicious code in itvrepo (npm) (malicious package)
- [MAL-2025-23467](https://insights.sbomify.com/MAL-2025-23467/): Malicious code in itsorits (npm) (malicious package)
- [MAL-2025-23466](https://insights.sbomify.com/MAL-2025-23466/): Malicious code in itprod (npm) (malicious package)
- [MAL-2025-23465](https://insights.sbomify.com/MAL-2025-23465/): Malicious code in itmoah (npm) (malicious package)
- [MAL-2025-23464](https://insights.sbomify.com/MAL-2025-23464/): Malicious code in ithemes (npm) (malicious package)
- [MAL-2025-23463](https://insights.sbomify.com/MAL-2025-23463/): Malicious code in itemsound (npm) (malicious package)
- [MAL-2025-23462](https://insights.sbomify.com/MAL-2025-23462/): Malicious code in itembuyer (npm) (malicious package)
- [MAL-2025-23461](https://insights.sbomify.com/MAL-2025-23461/): Malicious code in itelepass (npm) (malicious package)
- [MAL-2025-23460](https://insights.sbomify.com/MAL-2025-23460/): Malicious code in itdart (npm) (malicious package)
- [MAL-2025-2346](https://insights.sbomify.com/MAL-2025-2346/): Malicious code in oasis-os-common (npm) (malicious package)
- [MAL-2025-23459](https://insights.sbomify.com/MAL-2025-23459/): Malicious code in itbank (npm) (malicious package)
- [MAL-2025-23458](https://insights.sbomify.com/MAL-2025-23458/): Malicious code in isvalidelectroneumaddress (npm) (malicious package)
- [MAL-2025-23457](https://insights.sbomify.com/MAL-2025-23457/): Malicious code in isv-upx-client (npm) (malicious package)
- [MAL-2025-23456](https://insights.sbomify.com/MAL-2025-23456/): Malicious code in isv-buc-utils (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/852/