# Vulnerabilities published in 2025 - [MAL-2025-23185](https://insights.sbomify.com/MAL-2025-23185/): Malicious code in indus-xerxes-hermes-electron (npm) (malicious package) - [MAL-2025-23184](https://insights.sbomify.com/MAL-2025-23184/): Malicious code in indus-postgres-avior-node-config (npm) (malicious package) - [MAL-2025-23183](https://insights.sbomify.com/MAL-2025-23183/): Malicious code in indus-io-prettier-stylelint-cygnus (npm) (malicious package) - [MAL-2025-23182](https://insights.sbomify.com/MAL-2025-23182/): Malicious code in indizio (npm) (malicious package) - [MAL-2025-23181](https://insights.sbomify.com/MAL-2025-23181/): Malicious code in indigo_z3u10_4rpwx_vista (npm) (malicious package) - [MAL-2025-23180](https://insights.sbomify.com/MAL-2025-23180/): Malicious code in indigo_vfsca_sg7uv_willow (npm) (malicious package) - [MAL-2025-2318](https://insights.sbomify.com/MAL-2025-2318/): Malicious code in language-ring (npm) (malicious package) - [MAL-2025-23179](https://insights.sbomify.com/MAL-2025-23179/): Malicious code in indigo_rgiqq_vnnwe_glacier (npm) (malicious package) - [MAL-2025-23178](https://insights.sbomify.com/MAL-2025-23178/): Malicious code in indigo_qzrd8_rr7y6_driftwood (npm) (malicious package) - [MAL-2025-23177](https://insights.sbomify.com/MAL-2025-23177/): Malicious code in indigo_atzug_mqey4_lunar (npm) (malicious package) - [MAL-2025-23176](https://insights.sbomify.com/MAL-2025-23176/): Malicious code in indigo_02i5p_kkrqj_xylophone (npm) (malicious package) - [MAL-2025-23175](https://insights.sbomify.com/MAL-2025-23175/): Malicious code in indigo-wbimi-zf1d4-vortex-project (npm) (malicious package) - [MAL-2025-23174](https://insights.sbomify.com/MAL-2025-23174/): Malicious code in indigo-lrk6k-y1ei4-nova-project (npm) (malicious package) - [MAL-2025-23173](https://insights.sbomify.com/MAL-2025-23173/): Malicious code in india-zucchini-romeo-vvqdk (npm) (malicious package) - [MAL-2025-23172](https://insights.sbomify.com/MAL-2025-23172/): Malicious code in india-yankee-wnki (npm) (malicious package) - [MAL-2025-23171](https://insights.sbomify.com/MAL-2025-23171/): Malicious code in india-xyb-project (npm) (malicious package) - [MAL-2025-23170](https://insights.sbomify.com/MAL-2025-23170/): Malicious code in india-xigua-mojx (npm) (malicious package) - [MAL-2025-2317](https://insights.sbomify.com/MAL-2025-2317/): Malicious code in is-buffer-validator (npm) (malicious package) - [MAL-2025-23169](https://insights.sbomify.com/MAL-2025-23169/): Malicious code in india-xigua-grape-fsony (npm) (malicious package) - [MAL-2025-23168](https://insights.sbomify.com/MAL-2025-23168/): Malicious code in india-w82-project (npm) (malicious package) - [MAL-2025-23167](https://insights.sbomify.com/MAL-2025-23167/): Malicious code in india-vanilla-kuqz (npm) (malicious package) - [MAL-2025-23166](https://insights.sbomify.com/MAL-2025-23166/): Malicious code in india-uniform-idtv (npm) (malicious package) - [MAL-2025-23165](https://insights.sbomify.com/MAL-2025-23165/): Malicious code in india-underpass-cna5 (npm) (malicious package) - [MAL-2025-23164](https://insights.sbomify.com/MAL-2025-23164/): Malicious code in india-ugli-akih (npm) (malicious package) - [MAL-2025-23163](https://insights.sbomify.com/MAL-2025-23163/): Malicious code in india-u7j-project (npm) (malicious package) - [MAL-2025-23162](https://insights.sbomify.com/MAL-2025-23162/): Malicious code in india-to8-project (npm) (malicious package) - [MAL-2025-23161](https://insights.sbomify.com/MAL-2025-23161/): Malicious code in india-tangerine-vcki (npm) (malicious package) - [MAL-2025-23160](https://insights.sbomify.com/MAL-2025-23160/): Malicious code in india-tangerine-tygs (npm) (malicious package) - [MAL-2025-2316](https://insights.sbomify.com/MAL-2025-2316/): Malicious code in icloud-xod (npm) (malicious package) - [MAL-2025-23159](https://insights.sbomify.com/MAL-2025-23159/): Malicious code in india-strawberry-yam-fhydd (npm) (malicious package) - [MAL-2025-23158](https://insights.sbomify.com/MAL-2025-23158/): Malicious code in india-strawberry-hotel-isgee (npm) (malicious package) - [MAL-2025-23157](https://insights.sbomify.com/MAL-2025-23157/): Malicious code in india-strawberry-banana-vqdib (npm) (malicious package) - [MAL-2025-23156](https://insights.sbomify.com/MAL-2025-23156/): Malicious code in india-sierra-papaya-hixcq (npm) (malicious package) - [MAL-2025-23155](https://insights.sbomify.com/MAL-2025-23155/): Malicious code in india-sierra-bhsm (npm) (malicious package) - [MAL-2025-23154](https://insights.sbomify.com/MAL-2025-23154/): Malicious code in india-r7w-project (npm) (malicious package) - [MAL-2025-23153](https://insights.sbomify.com/MAL-2025-23153/): Malicious code in india-quince-vqzo (npm) (malicious package) - [MAL-2025-23152](https://insights.sbomify.com/MAL-2025-23152/): Malicious code in india-pma-project (npm) (malicious package) - [MAL-2025-23151](https://insights.sbomify.com/MAL-2025-23151/): Malicious code in india-papa-zulu-nryuc (npm) (malicious package) - [MAL-2025-23150](https://insights.sbomify.com/MAL-2025-23150/): Malicious code in india-papa-runh (npm) (malicious package) - [MAL-2025-2315](https://insights.sbomify.com/MAL-2025-2315/): Malicious code in hardhat-ethers-react-ts-starter (npm) (malicious package) - [MAL-2025-23149](https://insights.sbomify.com/MAL-2025-23149/): Malicious code in india-oscar-cherry-jaoae (npm) (malicious package) - [MAL-2025-23148](https://insights.sbomify.com/MAL-2025-23148/): Malicious code in india-nz1-project (npm) (malicious package) - [MAL-2025-23147](https://insights.sbomify.com/MAL-2025-23147/): Malicious code in india-november-k3im (npm) (malicious package) - [MAL-2025-23146](https://insights.sbomify.com/MAL-2025-23146/): Malicious code in india-nectarine-pvpq (npm) (malicious package) - [MAL-2025-23145](https://insights.sbomify.com/MAL-2025-23145/): Malicious code in india-mike-hotel-iuqps (npm) (malicious package) - [MAL-2025-23144](https://insights.sbomify.com/MAL-2025-23144/): Malicious code in india-mbr-project (npm) (malicious package) - [MAL-2025-23143](https://insights.sbomify.com/MAL-2025-23143/): Malicious code in india-mango-apple-bbwex (npm) (malicious package) - [MAL-2025-23142](https://insights.sbomify.com/MAL-2025-23142/): Malicious code in india-lima-charlie-slrga (npm) (malicious package) - [MAL-2025-23141](https://insights.sbomify.com/MAL-2025-23141/): Malicious code in india-kwt-project (npm) (malicious package) - [MAL-2025-23140](https://insights.sbomify.com/MAL-2025-23140/): Malicious code in india-kiwi-date-viqoy (npm) (malicious package) - [MAL-2025-2314](https://insights.sbomify.com/MAL-2025-2314/): Malicious code in googlepeay (npm) (malicious package) - [MAL-2025-23139](https://insights.sbomify.com/MAL-2025-23139/): Malicious code in india-k9e-project (npm) (malicious package) - [MAL-2025-23138](https://insights.sbomify.com/MAL-2025-23138/): Malicious code in india-juliet-orange-hxbfx (npm) (malicious package) - [MAL-2025-23137](https://insights.sbomify.com/MAL-2025-23137/): Malicious code in india-juliet-gjly (npm) (malicious package) - [MAL-2025-23136](https://insights.sbomify.com/MAL-2025-23136/): Malicious code in india-inferno-kafm (npm) (malicious package) - [MAL-2025-23135](https://insights.sbomify.com/MAL-2025-23135/): Malicious code in india-hotel-tangerine-ihqvz (npm) (malicious package) - [MAL-2025-23134](https://insights.sbomify.com/MAL-2025-23134/): Malicious code in india-grape-elderberry-notgb (npm) (malicious package) - [MAL-2025-23133](https://insights.sbomify.com/MAL-2025-23133/): Malicious code in india-golf-dnji (npm) (malicious package) - [MAL-2025-23132](https://insights.sbomify.com/MAL-2025-23132/): Malicious code in india-foxtrot-bqdg (npm) (malicious package) - [MAL-2025-23131](https://insights.sbomify.com/MAL-2025-23131/): Malicious code in india-fir-8748 (npm) (malicious package) - [MAL-2025-23130](https://insights.sbomify.com/MAL-2025-23130/): Malicious code in india-ferry-odt1 (npm) (malicious package) - [MAL-2025-2313](https://insights.sbomify.com/MAL-2025-2313/): Malicious code in freezelists (npm) (malicious package) - [MAL-2025-23129](https://insights.sbomify.com/MAL-2025-23129/): Malicious code in india-echo-szzu (npm) (malicious package) - [MAL-2025-23128](https://insights.sbomify.com/MAL-2025-23128/): Malicious code in india-dwarf-sle1 (npm) (malicious package) - [MAL-2025-23127](https://insights.sbomify.com/MAL-2025-23127/): Malicious code in india-delta-ybzv (npm) (malicious package) - [MAL-2025-23126](https://insights.sbomify.com/MAL-2025-23126/): Malicious code in india-delta-tdin (npm) (malicious package) - [MAL-2025-23125](https://insights.sbomify.com/MAL-2025-23125/): Malicious code in india-delta-ervi (npm) (malicious package) - [MAL-2025-23124](https://insights.sbomify.com/MAL-2025-23124/): Malicious code in india-bravo-papa-lgddp (npm) (malicious package) - [MAL-2025-23123](https://insights.sbomify.com/MAL-2025-23123/): Malicious code in india-banana-zcxj (npm) (malicious package) - [MAL-2025-23122](https://insights.sbomify.com/MAL-2025-23122/): Malicious code in india-banana-xray-uadxb (npm) (malicious package) - [MAL-2025-23121](https://insights.sbomify.com/MAL-2025-23121/): Malicious code in india-ba6-project (npm) (malicious package) - [MAL-2025-23120](https://insights.sbomify.com/MAL-2025-23120/): Malicious code in india-alpha-uniform-gyywa (npm) (malicious package) - [MAL-2025-2312](https://insights.sbomify.com/MAL-2025-2312/): Malicious code in expect-violations (npm) (malicious package) - [MAL-2025-23119](https://insights.sbomify.com/MAL-2025-23119/): Malicious code in india-a8t-project (npm) (malicious package) - [MAL-2025-23118](https://insights.sbomify.com/MAL-2025-23118/): Malicious code in india-9k4-project (npm) (malicious package) - [MAL-2025-23117](https://insights.sbomify.com/MAL-2025-23117/): Malicious code in india-8ep-project (npm) (malicious package) - [MAL-2025-23116](https://insights.sbomify.com/MAL-2025-23116/): Malicious code in indexhtml-cli (npm) (malicious package) - [MAL-2025-23115](https://insights.sbomify.com/MAL-2025-23115/): Malicious code in indexhtml (npm) (malicious package) - [MAL-2025-23114](https://insights.sbomify.com/MAL-2025-23114/): Malicious code in index-gamma-await-sanitize-private (npm) (malicious package) - [MAL-2025-23113](https://insights.sbomify.com/MAL-2025-23113/): Malicious code in indentui (npm) (malicious package) - [MAL-2025-23112](https://insights.sbomify.com/MAL-2025-23112/): Malicious code in indah-soto89-kuki (npm) (malicious package) - [MAL-2025-23111](https://insights.sbomify.com/MAL-2025-23111/): Malicious code in indah-sate33-kuki (npm) (malicious package) - [MAL-2025-23110](https://insights.sbomify.com/MAL-2025-23110/): Malicious code in indah-mangga4-sukiwir (npm) (malicious package) - [MAL-2025-2311](https://insights.sbomify.com/MAL-2025-2311/): Malicious code in events-utils (npm) (malicious package) - [MAL-2025-23109](https://insights.sbomify.com/MAL-2025-23109/): Malicious code in indah-klipo64-kuki (npm) (malicious package) - [MAL-2025-23108](https://insights.sbomify.com/MAL-2025-23108/): Malicious code in indah-gudeg76-breki (npm) (malicious package) - [MAL-2025-23107](https://insights.sbomify.com/MAL-2025-23107/): Malicious code in indah-bakwan53-sukiwir (npm) (malicious package) - [MAL-2025-23106](https://insights.sbomify.com/MAL-2025-23106/): Malicious code in indah-bakso45-sukiwir (npm) (malicious package) - [MAL-2025-23105](https://insights.sbomify.com/MAL-2025-23105/): Malicious code in incrowd (npm) (malicious package) - [MAL-2025-23104](https://insights.sbomify.com/MAL-2025-23104/): Malicious code in incrmean (npm) (malicious package) - [MAL-2025-23103](https://insights.sbomify.com/MAL-2025-23103/): Malicious code in includesec-dependency-confusion (npm) (malicious package) - [MAL-2025-23102](https://insights.sbomify.com/MAL-2025-23102/): Malicious code in Incheon (npm) (malicious package) - [MAL-2025-23101](https://insights.sbomify.com/MAL-2025-23101/): Malicious code in in-process-engine (npm) (malicious package) - [MAL-2025-23100](https://insights.sbomify.com/MAL-2025-23100/): Malicious code in imunify-plugin-client (npm) (malicious package) - [MAL-2025-2310](https://insights.sbomify.com/MAL-2025-2310/): Malicious code in event-handle-package (npm) (malicious package) - [MAL-2025-231](https://insights.sbomify.com/MAL-2025-231/): Malicious code in prem-video-downloader (npm) (malicious package) - [MAL-2025-23099](https://insights.sbomify.com/MAL-2025-23099/): Malicious code in imsbench (npm) (malicious package) - [MAL-2025-23098](https://insights.sbomify.com/MAL-2025-23098/): Malicious code in imrpjs (npm) (malicious package) - [MAL-2025-23097](https://insights.sbomify.com/MAL-2025-23097/): Malicious code in imrp-sandbox (npm) (malicious package) - [MAL-2025-23096](https://insights.sbomify.com/MAL-2025-23096/): Malicious code in imrp (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/856/