# Vulnerabilities published in 2025


- [MAL-2025-23365](https://insights.sbomify.com/MAL-2025-23365/): Malicious code in iris-asteroid-mcb936-project (npm) (malicious package)
- [MAL-2025-23364](https://insights.sbomify.com/MAL-2025-23364/): Malicious code in iris-7sth0-wdjq6-moonlight-project (npm) (malicious package)
- [MAL-2025-23363](https://insights.sbomify.com/MAL-2025-23363/): Malicious code in iris-7cmmq-sgta5-yarn-project (npm) (malicious package)
- [MAL-2025-23362](https://insights.sbomify.com/MAL-2025-23362/): Malicious code in iris-4bgmc-7zm3t-nova-project (npm) (malicious package)
- [MAL-2025-23361](https://insights.sbomify.com/MAL-2025-23361/): Malicious code in iris-46nms-0q2tk-song-project (npm) (malicious package)
- [MAL-2025-23360](https://insights.sbomify.com/MAL-2025-23360/): Malicious code in iris-3rsqa-g5lty-kelp-project (npm) (malicious package)
- [MAL-2025-2336](https://insights.sbomify.com/MAL-2025-2336/): Malicious code in yoojae-validator (npm) (malicious package)
- [MAL-2025-23359](https://insights.sbomify.com/MAL-2025-23359/): Malicious code in iris-2qmor-i4x6n-raven-project (npm) (malicious package)
- [MAL-2025-23358](https://insights.sbomify.com/MAL-2025-23358/): Malicious code in ireflex (npm) (malicious package)
- [MAL-2025-23357](https://insights.sbomify.com/MAL-2025-23357/): Malicious code in ircpybots (npm) (malicious package)
- [MAL-2025-23356](https://insights.sbomify.com/MAL-2025-23356/): Malicious code in irce-server (npm) (malicious package)
- [MAL-2025-23355](https://insights.sbomify.com/MAL-2025-23355/): Malicious code in ircaddon (npm) (malicious package)
- [MAL-2025-23354](https://insights.sbomify.com/MAL-2025-23354/): Malicious code in irator (npm) (malicious package)
- [MAL-2025-23353](https://insights.sbomify.com/MAL-2025-23353/): Malicious code in iqfight (npm) (malicious package)
- [MAL-2025-23352](https://insights.sbomify.com/MAL-2025-23352/): Malicious code in iqboxy-api (npm) (malicious package)
- [MAL-2025-23351](https://insights.sbomify.com/MAL-2025-23351/): Malicious code in iq_delivery_recommendations (npm) (malicious package)
- [MAL-2025-23350](https://insights.sbomify.com/MAL-2025-23350/): Malicious code in iq1eqq (npm) (malicious package)
- [MAL-2025-2335](https://insights.sbomify.com/MAL-2025-2335/): Malicious code in ward-steward (npm) (malicious package)
- [MAL-2025-23349](https://insights.sbomify.com/MAL-2025-23349/): Malicious code in ipwnedyou (npm) (malicious package)
- [MAL-2025-23348](https://insights.sbomify.com/MAL-2025-23348/): Malicious code in ipumsir (npm) (malicious package)
- [MAL-2025-23347](https://insights.sbomify.com/MAL-2025-23347/): Malicious code in ips-visual-parse (npm) (malicious package)
- [MAL-2025-23346](https://insights.sbomify.com/MAL-2025-23346/): Malicious code in ipremote (npm) (malicious package)
- [MAL-2025-23345](https://insights.sbomify.com/MAL-2025-23345/): Malicious code in iplanner (npm) (malicious package)
- [MAL-2025-23344](https://insights.sbomify.com/MAL-2025-23344/): Malicious code in ipi-cli (npm) (malicious package)
- [MAL-2025-23343](https://insights.sbomify.com/MAL-2025-23343/): Malicious code in iphttp (npm) (malicious package)
- [MAL-2025-23342](https://insights.sbomify.com/MAL-2025-23342/): Malicious code in iphonegap (npm) (malicious package)
- [MAL-2025-23341](https://insights.sbomify.com/MAL-2025-23341/): Malicious code in iphilia (npm) (malicious package)
- [MAL-2025-23340](https://insights.sbomify.com/MAL-2025-23340/): Malicious code in ipgmail (npm) (malicious package)
- [MAL-2025-2334](https://insights.sbomify.com/MAL-2025-2334/): Malicious code in support-lib (npm) (malicious package)
- [MAL-2025-23339](https://insights.sbomify.com/MAL-2025-23339/): Malicious code in ipfs-pack (npm) (malicious package)
- [MAL-2025-23338](https://insights.sbomify.com/MAL-2025-23338/): Malicious code in ipconv (npm) (malicious package)
- [MAL-2025-23337](https://insights.sbomify.com/MAL-2025-23337/): Malicious code in ipccopy (npm) (malicious package)
- [MAL-2025-23336](https://insights.sbomify.com/MAL-2025-23336/): Malicious code in ipavowels (npm) (malicious package)
- [MAL-2025-23335](https://insights.sbomify.com/MAL-2025-23335/): Malicious code in ipatra (npm) (malicious package)
- [MAL-2025-23334](https://insights.sbomify.com/MAL-2025-23334/): Malicious code in ipadcalc (npm) (malicious package)
- [MAL-2025-23333](https://insights.sbomify.com/MAL-2025-23333/): Malicious code in iothgyksxeuvwlab (npm) (malicious package)
- [MAL-2025-23332](https://insights.sbomify.com/MAL-2025-23332/): Malicious code in iotcdk (npm) (malicious package)
- [MAL-2025-23331](https://insights.sbomify.com/MAL-2025-23331/): Malicious code in iota-style-loader-lepton-cygnus (npm) (malicious package)
- [MAL-2025-23330](https://insights.sbomify.com/MAL-2025-23330/): Malicious code in iota-nu-deploy-delta-epsilon (npm) (malicious package)
- [MAL-2025-2333](https://insights.sbomify.com/MAL-2025-2333/): Malicious code in stringify-bytes32 (npm) (malicious package)
- [MAL-2025-23329](https://insights.sbomify.com/MAL-2025-23329/): Malicious code in iota-class-info-phi-code (npm) (malicious package)
- [MAL-2025-23328](https://insights.sbomify.com/MAL-2025-23328/): Malicious code in iota-bootes-kinetic-quasar (npm) (malicious package)
- [MAL-2025-23327](https://insights.sbomify.com/MAL-2025-23327/): Malicious code in iota-biohacking-dotenv-safe-delphinus (npm) (malicious package)
- [MAL-2025-23326](https://insights.sbomify.com/MAL-2025-23326/): Malicious code in iota-auth-nebula-transhumanism (npm) (malicious package)
- [MAL-2025-23325](https://insights.sbomify.com/MAL-2025-23325/): Malicious code in iota-aurora-dione-archaeometry (npm) (malicious package)
- [MAL-2025-23324](https://insights.sbomify.com/MAL-2025-23324/): Malicious code in iot-gateway-plugin-rtls (npm) (malicious package)
- [MAL-2025-23323](https://insights.sbomify.com/MAL-2025-23323/): Malicious code in iostools (npm) (malicious package)
- [MAL-2025-23322](https://insights.sbomify.com/MAL-2025-23322/): Malicious code in iostarter (npm) (malicious package)
- [MAL-2025-23321](https://insights.sbomify.com/MAL-2025-23321/): Malicious code in iossegue (npm) (malicious package)
- [MAL-2025-23320](https://insights.sbomify.com/MAL-2025-23320/): Malicious code in ioslib2 (npm) (malicious package)
- [MAL-2025-2332](https://insights.sbomify.com/MAL-2025-2332/): Malicious code in stdo-env (npm) (malicious package)
- [MAL-2025-23319](https://insights.sbomify.com/MAL-2025-23319/): Malicious code in iosiphone (npm) (malicious package)
- [MAL-2025-23318](https://insights.sbomify.com/MAL-2025-23318/): Malicious code in iosgithub (npm) (malicious package)
- [MAL-2025-23317](https://insights.sbomify.com/MAL-2025-23317/): Malicious code in iosfizmo (npm) (malicious package)
- [MAL-2025-23316](https://insights.sbomify.com/MAL-2025-23316/): Malicious code in ionstudio (npm) (malicious package)
- [MAL-2025-23315](https://insights.sbomify.com/MAL-2025-23315/): Malicious code in ionosphere-promise-vuepress-spectron-webdriver (npm) (malicious package)
- [MAL-2025-23314](https://insights.sbomify.com/MAL-2025-23314/): Malicious code in ionosphere-prettier-plugin-markdown-yonder-chai (npm) (malicious package)
- [MAL-2025-23313](https://insights.sbomify.com/MAL-2025-23313/): Malicious code in ionosphere-cryptography-quasar-radioastronomy (npm) (malicious package)
- [MAL-2025-23312](https://insights.sbomify.com/MAL-2025-23312/): Malicious code in ionicfb (npm) (malicious package)
- [MAL-2025-23311](https://insights.sbomify.com/MAL-2025-23311/): Malicious code in ioniccrd (npm) (malicious package)
- [MAL-2025-23310](https://insights.sbomify.com/MAL-2025-23310/): Malicious code in ion-lsp-server (npm) (malicious package)
- [MAL-2025-2331](https://insights.sbomify.com/MAL-2025-2331/): Malicious code in spectrocoin (npm) (malicious package)
- [MAL-2025-23309](https://insights.sbomify.com/MAL-2025-23309/): Malicious code in iomeme (npm) (malicious package)
- [MAL-2025-23308](https://insights.sbomify.com/MAL-2025-23308/): Malicious code in iomarks (npm) (malicious package)
- [MAL-2025-23307](https://insights.sbomify.com/MAL-2025-23307/): Malicious code in iodash (npm) (malicious package)
- [MAL-2025-23306](https://insights.sbomify.com/MAL-2025-23306/): Malicious code in iobroker.tr-064-community (npm) (malicious package)
- [MAL-2025-23305](https://insights.sbomify.com/MAL-2025-23305/): Malicious code in iobroker.covid-19 (npm) (malicious package)
- [MAL-2025-23304](https://insights.sbomify.com/MAL-2025-23304/): Malicious code in iobeam (npm) (malicious package)
- [MAL-2025-23303](https://insights.sbomify.com/MAL-2025-23303/): Malicious code in io-umbriel-betelgeuse-chakra-ui (npm) (malicious package)
- [MAL-2025-23302](https://insights.sbomify.com/MAL-2025-23302/): Malicious code in io-nextjs-loopback-blitz (npm) (malicious package)
- [MAL-2025-23301](https://insights.sbomify.com/MAL-2025-23301/): Malicious code in io-ini-antares-radiometric (npm) (malicious package)
- [MAL-2025-23300](https://insights.sbomify.com/MAL-2025-23300/): Malicious code in io-despina-crust-brane (npm) (malicious package)
- [MAL-2025-2330](https://insights.sbomify.com/MAL-2025-2330/): Malicious code in sniper-hashing (npm) (malicious package)
- [MAL-2025-233](https://insights.sbomify.com/MAL-2025-233/): Malicious code in prh-rules (npm) (malicious package)
- [MAL-2025-23299](https://insights.sbomify.com/MAL-2025-23299/): Malicious code in inwentarz (npm) (malicious package)
- [MAL-2025-23298](https://insights.sbomify.com/MAL-2025-23298/): Malicious code in invoicingserv (npm) (malicious package)
- [MAL-2025-23297](https://insights.sbomify.com/MAL-2025-23297/): Malicious code in invoiceserv (npm) (malicious package)
- [MAL-2025-23296](https://insights.sbomify.com/MAL-2025-23296/): Malicious code in invoicepy (npm) (malicious package)
- [MAL-2025-23295](https://insights.sbomify.com/MAL-2025-23295/): Malicious code in inventory-models (npm) (malicious package)
- [MAL-2025-23294](https://insights.sbomify.com/MAL-2025-23294/): Malicious code in invenio (npm) (malicious package)
- [MAL-2025-23293](https://insights.sbomify.com/MAL-2025-23293/): Malicious code in introtor (npm) (malicious package)
- [MAL-2025-23292](https://insights.sbomify.com/MAL-2025-23292/): Malicious code in introspy (npm) (malicious package)
- [MAL-2025-23291](https://insights.sbomify.com/MAL-2025-23291/): Malicious code in introcie (npm) (malicious package)
- [MAL-2025-23290](https://insights.sbomify.com/MAL-2025-23290/): Malicious code in intoprufa (npm) (malicious package)
- [MAL-2025-2329](https://insights.sbomify.com/MAL-2025-2329/): Malicious code in shein-uesragent-detection (npm) (malicious package)
- [MAL-2025-23289](https://insights.sbomify.com/MAL-2025-23289/): Malicious code in intl-summer-2017 (npm) (malicious package)
- [MAL-2025-23288](https://insights.sbomify.com/MAL-2025-23288/): Malicious code in interstellarmedium-postcss-loader-chromedriver-innercore (npm) (malicious package)
- [MAL-2025-23287](https://insights.sbomify.com/MAL-2025-23287/): Malicious code in interstellarmedium-init-rollup-electron-builder (npm) (malicious package)
- [MAL-2025-23286](https://insights.sbomify.com/MAL-2025-23286/): Malicious code in interstellarmedium-configstore-dotenv-safe-oauth (npm) (malicious package)
- [MAL-2025-23285](https://insights.sbomify.com/MAL-2025-23285/): Malicious code in interstellarmedium-biomimicry-sirius-rimraf (npm) (malicious package)
- [MAL-2025-23284](https://insights.sbomify.com/MAL-2025-23284/): Malicious code in intershop-schematics4 (npm) (malicious package)
- [MAL-2025-23283](https://insights.sbomify.com/MAL-2025-23283/): Malicious code in intershop-schematics (npm) (malicious package)
- [MAL-2025-23282](https://insights.sbomify.com/MAL-2025-23282/): Malicious code in interpret-rain-delta-sed-resolve (npm) (malicious package)
- [MAL-2025-23281](https://insights.sbomify.com/MAL-2025-23281/): Malicious code in internallib_v741 (npm) (malicious package)
- [MAL-2025-23280](https://insights.sbomify.com/MAL-2025-23280/): Malicious code in internal_app (npm) (malicious package)
- [MAL-2025-2328](https://insights.sbomify.com/MAL-2025-2328/): Malicious code in shein-feedbcak (npm) (malicious package)
- [MAL-2025-23279](https://insights.sbomify.com/MAL-2025-23279/): Malicious code in interferometry-seismology-bulma-rigel (npm) (malicious package)
- [MAL-2025-23278](https://insights.sbomify.com/MAL-2025-23278/): Malicious code in interferometry-hyperion-astrophysics-xml (npm) (malicious package)
- [MAL-2025-23277](https://insights.sbomify.com/MAL-2025-23277/): Malicious code in interferometry-europa-run-script-xanthus (npm) (malicious package)
- [MAL-2025-23276](https://insights.sbomify.com/MAL-2025-23276/): Malicious code in interferometry-cluster-hadron-paleoanthropology (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/854/