# Vulnerabilities published in 2025 - [MAL-2025-23455](https://insights.sbomify.com/MAL-2025-23455/): Malicious code in isv-buc-client (npm) (malicious package) - [MAL-2025-23454](https://insights.sbomify.com/MAL-2025-23454/): Malicious code in istanbus (npm) (malicious package) - [MAL-2025-23453](https://insights.sbomify.com/MAL-2025-23453/): Malicious code in issuancemanagementserv (npm) (malicious package) - [MAL-2025-23452](https://insights.sbomify.com/MAL-2025-23452/): Malicious code in issuancehistoryserv (npm) (malicious package) - [MAL-2025-23451](https://insights.sbomify.com/MAL-2025-23451/): Malicious code in issaiko (npm) (malicious package) - [MAL-2025-23450](https://insights.sbomify.com/MAL-2025-23450/): Malicious code in isover (npm) (malicious package) - [MAL-2025-2345](https://insights.sbomify.com/MAL-2025-2345/): Malicious code in mstplotlib (PyPI) (malicious package) - [MAL-2025-23449](https://insights.sbomify.com/MAL-2025-23449/): Malicious code in isotope_zudyp_nn07o_solstice (npm) (malicious package) - [MAL-2025-23448](https://insights.sbomify.com/MAL-2025-23448/): Malicious code in isotope_yyrj0_mwgxs_quiver (npm) (malicious package) - [MAL-2025-23447](https://insights.sbomify.com/MAL-2025-23447/): Malicious code in isotope_umtwr_vc4uq_whisper (npm) (malicious package) - [MAL-2025-23446](https://insights.sbomify.com/MAL-2025-23446/): Malicious code in isotope_n82ie_zixw6_serenade (npm) (malicious package) - [MAL-2025-23445](https://insights.sbomify.com/MAL-2025-23445/): Malicious code in isotope_m0omj_qdafl_night (npm) (malicious package) - [MAL-2025-23444](https://insights.sbomify.com/MAL-2025-23444/): Malicious code in isotope_lznzo_g55ay_zenith (npm) (malicious package) - [MAL-2025-23443](https://insights.sbomify.com/MAL-2025-23443/): Malicious code in isotope_7cbky_d6dcc_ocean (npm) (malicious package) - [MAL-2025-23442](https://insights.sbomify.com/MAL-2025-23442/): Malicious code in isotope_6am4g_corpc_phoenix (npm) (malicious package) - [MAL-2025-23441](https://insights.sbomify.com/MAL-2025-23441/): Malicious code in isotope_3pyse_l3m1i_xylophone (npm) (malicious package) - [MAL-2025-23440](https://insights.sbomify.com/MAL-2025-23440/): Malicious code in isotope-webhooks (npm) (malicious package) - [MAL-2025-2344](https://insights.sbomify.com/MAL-2025-2344/): Malicious code in mocha-dast-reporter (npm) (malicious package) - [MAL-2025-23439](https://insights.sbomify.com/MAL-2025-23439/): Malicious code in isotope-dev (npm) (malicious package) - [MAL-2025-23438](https://insights.sbomify.com/MAL-2025-23438/): Malicious code in isotemplate (npm) (malicious package) - [MAL-2025-23437](https://insights.sbomify.com/MAL-2025-23437/): Malicious code in isostasy-sirius-eventhoriz-run-script (npm) (malicious package) - [MAL-2025-23436](https://insights.sbomify.com/MAL-2025-23436/): Malicious code in isostasy-morgan-unuk-loglevel (npm) (malicious package) - [MAL-2025-23435](https://insights.sbomify.com/MAL-2025-23435/): Malicious code in isostasy-hawkingradiation-pegasus-axios (npm) (malicious package) - [MAL-2025-23434](https://insights.sbomify.com/MAL-2025-23434/): Malicious code in isoscatr (npm) (malicious package) - [MAL-2025-23433](https://insights.sbomify.com/MAL-2025-23433/): Malicious code in isolcss (npm) (malicious package) - [MAL-2025-23432](https://insights.sbomify.com/MAL-2025-23432/): Malicious code in isohill (npm) (malicious package) - [MAL-2025-23431](https://insights.sbomify.com/MAL-2025-23431/): Malicious code in islands-promo (npm) (malicious package) - [MAL-2025-23430](https://insights.sbomify.com/MAL-2025-23430/): Malicious code in islands-codestyle (npm) (malicious package) - [MAL-2025-2343](https://insights.sbomify.com/MAL-2025-2343/): Malicious code in messaging-components (npm) (malicious package) - [MAL-2025-23429](https://insights.sbomify.com/MAL-2025-23429/): Malicious code in island_izpwg_um9xj_xylophone (npm) (malicious package) - [MAL-2025-23428](https://insights.sbomify.com/MAL-2025-23428/): Malicious code in island_gkd44_dvr2v_illusion (npm) (malicious package) - [MAL-2025-23427](https://insights.sbomify.com/MAL-2025-23427/): Malicious code in island_g2gzs_j69zv_yacht (npm) (malicious package) - [MAL-2025-23426](https://insights.sbomify.com/MAL-2025-23426/): Malicious code in island-yak-gav530-project (npm) (malicious package) - [MAL-2025-23425](https://insights.sbomify.com/MAL-2025-23425/): Malicious code in island-xerus-fev101-project (npm) (malicious package) - [MAL-2025-23424](https://insights.sbomify.com/MAL-2025-23424/): Malicious code in island-vzo41-veekc-kelp-project (npm) (malicious package) - [MAL-2025-23423](https://insights.sbomify.com/MAL-2025-23423/): Malicious code in island-spinach-tehl (npm) (malicious package) - [MAL-2025-23422](https://insights.sbomify.com/MAL-2025-23422/): Malicious code in island-rf1j2-dz73l-raven-project (npm) (malicious package) - [MAL-2025-23421](https://insights.sbomify.com/MAL-2025-23421/): Malicious code in island-reef-nhk867-project (npm) (malicious package) - [MAL-2025-23420](https://insights.sbomify.com/MAL-2025-23420/): Malicious code in island-quokka-u0mv (npm) (malicious package) - [MAL-2025-2342](https://insights.sbomify.com/MAL-2025-2342/): Malicious code in foundry-js-react-blueprint (npm) (malicious package) - [MAL-2025-23419](https://insights.sbomify.com/MAL-2025-23419/): Malicious code in island-quail-ooy506-project (npm) (malicious package) - [MAL-2025-23418](https://insights.sbomify.com/MAL-2025-23418/): Malicious code in island-peacock-uhs701-project (npm) (malicious package) - [MAL-2025-23417](https://insights.sbomify.com/MAL-2025-23417/): Malicious code in island-ntgm1-zymvl-harmony-project (npm) (malicious package) - [MAL-2025-23416](https://insights.sbomify.com/MAL-2025-23416/): Malicious code in island-nebula-fxk717-project (npm) (malicious package) - [MAL-2025-23415](https://insights.sbomify.com/MAL-2025-23415/): Malicious code in island-lunar-t7bx (npm) (malicious package) - [MAL-2025-23414](https://insights.sbomify.com/MAL-2025-23414/): Malicious code in island-koala-ify991-project (npm) (malicious package) - [MAL-2025-23413](https://insights.sbomify.com/MAL-2025-23413/): Malicious code in island-kapok-xsa8 (npm) (malicious package) - [MAL-2025-23412](https://insights.sbomify.com/MAL-2025-23412/): Malicious code in island-jj8iw-b2xwb-jade-project (npm) (malicious package) - [MAL-2025-23411](https://insights.sbomify.com/MAL-2025-23411/): Malicious code in island-icicle-cgg499-project (npm) (malicious package) - [MAL-2025-23410](https://insights.sbomify.com/MAL-2025-23410/): Malicious code in island-horizon-gsx090-project (npm) (malicious package) - [MAL-2025-2341](https://insights.sbomify.com/MAL-2025-2341/): Malicious code in @contraktor-tech/poc_confusion (npm) (malicious package) - [MAL-2025-23409](https://insights.sbomify.com/MAL-2025-23409/): Malicious code in island-hedgehog-qvo612-project (npm) (malicious package) - [MAL-2025-23408](https://insights.sbomify.com/MAL-2025-23408/): Malicious code in island-everglow-wde261-project (npm) (malicious package) - [MAL-2025-23407](https://insights.sbomify.com/MAL-2025-23407/): Malicious code in island-everest-gde191-project (npm) (malicious package) - [MAL-2025-23406](https://insights.sbomify.com/MAL-2025-23406/): Malicious code in island-elephant-smh001-project (npm) (malicious package) - [MAL-2025-23405](https://insights.sbomify.com/MAL-2025-23405/): Malicious code in island-coral-vzt892-project (npm) (malicious package) - [MAL-2025-23404](https://insights.sbomify.com/MAL-2025-23404/): Malicious code in island-aspen-oki765-project (npm) (malicious package) - [MAL-2025-23403](https://insights.sbomify.com/MAL-2025-23403/): Malicious code in island-arctic-zmw994-project (npm) (malicious package) - [MAL-2025-23402](https://insights.sbomify.com/MAL-2025-23402/): Malicious code in island-798ev-2csww-twilight-project (npm) (malicious package) - [MAL-2025-23401](https://insights.sbomify.com/MAL-2025-23401/): Malicious code in island-6cg1j-kjrhe-throne-project (npm) (malicious package) - [MAL-2025-23400](https://insights.sbomify.com/MAL-2025-23400/): Malicious code in islamway (npm) (malicious package) - [MAL-2025-2340](https://insights.sbomify.com/MAL-2025-2340/): Malicious code in notification-center-admin (npm) (malicious package) - [MAL-2025-234](https://insights.sbomify.com/MAL-2025-234/): Malicious code in prombox (npm) (malicious package) - [MAL-2025-23399](https://insights.sbomify.com/MAL-2025-23399/): Malicious code in ishtiaq (npm) (malicious package) - [MAL-2025-23398](https://insights.sbomify.com/MAL-2025-23398/): Malicious code in iseage (npm) (malicious package) - [MAL-2025-23397](https://insights.sbomify.com/MAL-2025-23397/): Malicious code in iscaffold (npm) (malicious package) - [MAL-2025-23396](https://insights.sbomify.com/MAL-2025-23396/): Malicious code in isabel (npm) (malicious package) - [MAL-2025-23395](https://insights.sbomify.com/MAL-2025-23395/): Malicious code in is-mlcs (npm) (malicious package) - [MAL-2025-23394](https://insights.sbomify.com/MAL-2025-23394/): Malicious code in is-jailbreak (npm) (malicious package) - [MAL-2025-23393](https://insights.sbomify.com/MAL-2025-23393/): Malicious code in ironwasp (npm) (malicious package) - [MAL-2025-23392](https://insights.sbomify.com/MAL-2025-23392/): Malicious code in ironic (npm) (malicious package) - [MAL-2025-23391](https://insights.sbomify.com/MAL-2025-23391/): Malicious code in ironfist (npm) (malicious package) - [MAL-2025-23390](https://insights.sbomify.com/MAL-2025-23390/): Malicious code in ironeye (npm) (malicious package) - [MAL-2025-2339](https://insights.sbomify.com/MAL-2025-2339/): Malicious code in malwaretesting (npm) (malicious package) - [MAL-2025-23389](https://insights.sbomify.com/MAL-2025-23389/): Malicious code in iron-bem (npm) (malicious package) - [MAL-2025-23388](https://insights.sbomify.com/MAL-2025-23388/): Malicious code in irma-tumis55-breki (npm) (malicious package) - [MAL-2025-23387](https://insights.sbomify.com/MAL-2025-23387/): Malicious code in irma-ruwet47-sukiwir (npm) (malicious package) - [MAL-2025-23386](https://insights.sbomify.com/MAL-2025-23386/): Malicious code in irma-ragi93-breki (npm) (malicious package) - [MAL-2025-23385](https://insights.sbomify.com/MAL-2025-23385/): Malicious code in irma-keraktelor39-sukiwir (npm) (malicious package) - [MAL-2025-23384](https://insights.sbomify.com/MAL-2025-23384/): Malicious code in irishfool (npm) (malicious package) - [MAL-2025-23383](https://insights.sbomify.com/MAL-2025-23383/): Malicious code in iris_rfoep_vb4b8_crystal (npm) (malicious package) - [MAL-2025-23382](https://insights.sbomify.com/MAL-2025-23382/): Malicious code in iris_o1bot_lp45d_unicorn (npm) (malicious package) - [MAL-2025-23381](https://insights.sbomify.com/MAL-2025-23381/): Malicious code in iris_dbnpv_2cgaw_solace (npm) (malicious package) - [MAL-2025-23380](https://insights.sbomify.com/MAL-2025-23380/): Malicious code in iris_2e89x_rkrpt_fern (npm) (malicious package) - [MAL-2025-2338](https://insights.sbomify.com/MAL-2025-2338/): Malicious code in malwaretest (npm) (malicious package) - [MAL-2025-23379](https://insights.sbomify.com/MAL-2025-23379/): Malicious code in iris_1rgzu_iul0o_wander (npm) (malicious package) - [MAL-2025-23378](https://insights.sbomify.com/MAL-2025-23378/): Malicious code in iris-zenith-iyo103-project (npm) (malicious package) - [MAL-2025-23377](https://insights.sbomify.com/MAL-2025-23377/): Malicious code in iris-yucca-lsx431-project (npm) (malicious package) - [MAL-2025-23376](https://insights.sbomify.com/MAL-2025-23376/): Malicious code in iris-ys7oy-ayux1-obsidian-project (npm) (malicious package) - [MAL-2025-23375](https://insights.sbomify.com/MAL-2025-23375/): Malicious code in iris-y2iti-64tpg-zenith-project (npm) (malicious package) - [MAL-2025-23374](https://insights.sbomify.com/MAL-2025-23374/): Malicious code in iris-xvlcy-eyt04-wander-project (npm) (malicious package) - [MAL-2025-23373](https://insights.sbomify.com/MAL-2025-23373/): Malicious code in iris-ue74j-6ofnn-oracle-project (npm) (malicious package) - [MAL-2025-23372](https://insights.sbomify.com/MAL-2025-23372/): Malicious code in iris-klf5s-q9m49-quill-project (npm) (malicious package) - [MAL-2025-23371](https://insights.sbomify.com/MAL-2025-23371/): Malicious code in iris-kiwi-bmi271-project (npm) (malicious package) - [MAL-2025-23370](https://insights.sbomify.com/MAL-2025-23370/): Malicious code in iris-fjord-wdj348-project (npm) (malicious package) - [MAL-2025-2337](https://insights.sbomify.com/MAL-2025-2337/): Malicious code in zaggletech (npm) (malicious package) - [MAL-2025-23369](https://insights.sbomify.com/MAL-2025-23369/): Malicious code in iris-e8878-zrte5-labyrinth-project (npm) (malicious package) - [MAL-2025-23368](https://insights.sbomify.com/MAL-2025-23368/): Malicious code in iris-dandelion-zmt963-project (npm) (malicious package) - [MAL-2025-23367](https://insights.sbomify.com/MAL-2025-23367/): Malicious code in iris-cloud-ntm849-project (npm) (malicious package) - [MAL-2025-23366](https://insights.sbomify.com/MAL-2025-23366/): Malicious code in iris-cd611-f1bbs-zen-project (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/853/