# Vulnerabilities published in 2025 - [MAL-2025-23004](https://insights.sbomify.com/MAL-2025-23004/): Malicious code in igloo-pinnacle-uxm771-project (npm) (malicious package) - [MAL-2025-23003](https://insights.sbomify.com/MAL-2025-23003/): Malicious code in igloo-november-uve9 (npm) (malicious package) - [MAL-2025-23002](https://insights.sbomify.com/MAL-2025-23002/): Malicious code in igloo-mountain-seb898-project (npm) (malicious package) - [MAL-2025-23001](https://insights.sbomify.com/MAL-2025-23001/): Malicious code in igloo-mangrove-aim739-project (npm) (malicious package) - [MAL-2025-23000](https://insights.sbomify.com/MAL-2025-23000/): Malicious code in igloo-jewel-vwx081-project (npm) (malicious package) - [MAL-2025-2300](https://insights.sbomify.com/MAL-2025-2300/): Malicious code in client-analytisc-sdk (npm) (malicious package) - [MAL-2025-230](https://insights.sbomify.com/MAL-2025-230/): Malicious code in prem-tempy (npm) (malicious package) - [MAL-2025-23](https://insights.sbomify.com/MAL-2025-23/): Malicious code in zetessf (npm) (malicious package) - [MAL-2025-22999](https://insights.sbomify.com/MAL-2025-22999/): Malicious code in igloo-dune-rma443-project (npm) (malicious package) - [MAL-2025-22998](https://insights.sbomify.com/MAL-2025-22998/): Malicious code in igloo-dewdrop-xki089-project (npm) (malicious package) - [MAL-2025-22997](https://insights.sbomify.com/MAL-2025-22997/): Malicious code in igloo-caravan-rjc896-project (npm) (malicious package) - [MAL-2025-22996](https://insights.sbomify.com/MAL-2025-22996/): Malicious code in igloo-ant-lua338-project (npm) (malicious package) - [MAL-2025-22995](https://insights.sbomify.com/MAL-2025-22995/): Malicious code in igamma (npm) (malicious package) - [MAL-2025-22994](https://insights.sbomify.com/MAL-2025-22994/): Malicious code in ig.gfx.solid (npm) (malicious package) - [MAL-2025-22993](https://insights.sbomify.com/MAL-2025-22993/): Malicious code in ifunfacts (npm) (malicious package) - [MAL-2025-22992](https://insights.sbomify.com/MAL-2025-22992/): Malicious code in iftads (npm) (malicious package) - [MAL-2025-22991](https://insights.sbomify.com/MAL-2025-22991/): Malicious code in ifrtlaxcjygzqenk (npm) (malicious package) - [MAL-2025-22990](https://insights.sbomify.com/MAL-2025-22990/): Malicious code in iframed (npm) (malicious package) - [MAL-2025-2299](https://insights.sbomify.com/MAL-2025-2299/): Malicious code in chialisp-lsp-test (npm) (malicious package) - [MAL-2025-22989](https://insights.sbomify.com/MAL-2025-22989/): Malicious code in ifm-length (npm) (malicious package) - [MAL-2025-22988](https://insights.sbomify.com/MAL-2025-22988/): Malicious code in iflix-portal (npm) (malicious package) - [MAL-2025-22987](https://insights.sbomify.com/MAL-2025-22987/): Malicious code in ifbyphone (npm) (malicious package) - [MAL-2025-22986](https://insights.sbomify.com/MAL-2025-22986/): Malicious code in iezfumgcxaotnphd (npm) (malicious package) - [MAL-2025-22985](https://insights.sbomify.com/MAL-2025-22985/): Malicious code in ieubpm (npm) (malicious package) - [MAL-2025-22984](https://insights.sbomify.com/MAL-2025-22984/): Malicious code in ienroll (npm) (malicious package) - [MAL-2025-22983](https://insights.sbomify.com/MAL-2025-22983/): Malicious code in iekgzqbacdrwslok (npm) (malicious package) - [MAL-2025-22982](https://insights.sbomify.com/MAL-2025-22982/): Malicious code in iejgdnlfvpkbcuxa (npm) (malicious package) - [MAL-2025-22981](https://insights.sbomify.com/MAL-2025-22981/): Malicious code in ieee-mcoe-ts-cordova (npm) (malicious package) - [MAL-2025-22980](https://insights.sbomify.com/MAL-2025-22980/): Malicious code in idsyao (npm) (malicious package) - [MAL-2025-2298](https://insights.sbomify.com/MAL-2025-2298/): Malicious code in auth0-langgraph-state-rag-js (npm) (malicious package) - [MAL-2025-22979](https://insights.sbomify.com/MAL-2025-22979/): Malicious code in idshjyvoguaxfpnc (npm) (malicious package) - [MAL-2025-22978](https://insights.sbomify.com/MAL-2025-22978/): Malicious code in idnpoker (npm) (malicious package) - [MAL-2025-22977](https://insights.sbomify.com/MAL-2025-22977/): Malicious code in idms-web-components (npm) (malicious package) - [MAL-2025-22976](https://insights.sbomify.com/MAL-2025-22976/): Malicious code in idlgkxebvqnarmow (npm) (malicious package) - [MAL-2025-22975](https://insights.sbomify.com/MAL-2025-22975/): Malicious code in idig-solus (npm) (malicious package) - [MAL-2025-22974](https://insights.sbomify.com/MAL-2025-22974/): Malicious code in idig-openstack (npm) (malicious package) - [MAL-2025-22973](https://insights.sbomify.com/MAL-2025-22973/): Malicious code in idig-onapp (npm) (malicious package) - [MAL-2025-22972](https://insights.sbomify.com/MAL-2025-22972/): Malicious code in idid-db (npm) (malicious package) - [MAL-2025-22971](https://insights.sbomify.com/MAL-2025-22971/): Malicious code in idfastq (npm) (malicious package) - [MAL-2025-22970](https://insights.sbomify.com/MAL-2025-22970/): Malicious code in idexx-spot (npm) (malicious package) - [MAL-2025-2297](https://insights.sbomify.com/MAL-2025-2297/): Malicious code in auth-validator (npm) (malicious package) - [MAL-2025-22969](https://insights.sbomify.com/MAL-2025-22969/): Malicious code in identitydocumentserv (npm) (malicious package) - [MAL-2025-22968](https://insights.sbomify.com/MAL-2025-22968/): Malicious code in identity_cache (npm) (malicious package) - [MAL-2025-22967](https://insights.sbomify.com/MAL-2025-22967/): Malicious code in identity-frontend-common (npm) (malicious package) - [MAL-2025-22966](https://insights.sbomify.com/MAL-2025-22966/): Malicious code in identifications (npm) (malicious package) - [MAL-2025-22965](https://insights.sbomify.com/MAL-2025-22965/): Malicious code in idempotent-json (npm) (malicious package) - [MAL-2025-22964](https://insights.sbomify.com/MAL-2025-22964/): Malicious code in idelfonso-package (npm) (malicious package) - [MAL-2025-22963](https://insights.sbomify.com/MAL-2025-22963/): Malicious code in idelfonso-first-npm (npm) (malicious package) - [MAL-2025-22962](https://insights.sbomify.com/MAL-2025-22962/): Malicious code in ideedz (npm) (malicious package) - [MAL-2025-22961](https://insights.sbomify.com/MAL-2025-22961/): Malicious code in ideatome (npm) (malicious package) - [MAL-2025-22960](https://insights.sbomify.com/MAL-2025-22960/): Malicious code in idealmap (npm) (malicious package) - [MAL-2025-2296](https://insights.sbomify.com/MAL-2025-2296/): Malicious code in array-empty-validator (npm) (malicious package) - [MAL-2025-22959](https://insights.sbomify.com/MAL-2025-22959/): Malicious code in ideainvest-component-library (npm) (malicious package) - [MAL-2025-22958](https://insights.sbomify.com/MAL-2025-22958/): Malicious code in ide-stubs (npm) (malicious package) - [MAL-2025-22957](https://insights.sbomify.com/MAL-2025-22957/): Malicious code in idaddon (npm) (malicious package) - [MAL-2025-22956](https://insights.sbomify.com/MAL-2025-22956/): Malicious code in ida-ubi47-breki (npm) (malicious package) - [MAL-2025-22955](https://insights.sbomify.com/MAL-2025-22955/): Malicious code in ida-tempe89-breki (npm) (malicious package) - [MAL-2025-22954](https://insights.sbomify.com/MAL-2025-22954/): Malicious code in ida-teh81-sukiwir (npm) (malicious package) - [MAL-2025-22953](https://insights.sbomify.com/MAL-2025-22953/): Malicious code in ida-tahu92-kuki (npm) (malicious package) - [MAL-2025-22952](https://insights.sbomify.com/MAL-2025-22952/): Malicious code in ida-sroto52-breki (npm) (malicious package) - [MAL-2025-22951](https://insights.sbomify.com/MAL-2025-22951/): Malicious code in ida-naget41-sukiwir (npm) (malicious package) - [MAL-2025-22950](https://insights.sbomify.com/MAL-2025-22950/): Malicious code in ida-lapis56-breki (npm) (malicious package) - [MAL-2025-2295](https://insights.sbomify.com/MAL-2025-2295/): Malicious code in angular-remove-diacritics (npm) (malicious package) - [MAL-2025-22949](https://insights.sbomify.com/MAL-2025-22949/): Malicious code in ida-kue29-breki (npm) (malicious package) - [MAL-2025-22948](https://insights.sbomify.com/MAL-2025-22948/): Malicious code in ida-enting60-sukiwir (npm) (malicious package) - [MAL-2025-22947](https://insights.sbomify.com/MAL-2025-22947/): Malicious code in ida-dodol25-breki (npm) (malicious package) - [MAL-2025-22946](https://insights.sbomify.com/MAL-2025-22946/): Malicious code in id-cookies (npm) (malicious package) - [MAL-2025-22945](https://insights.sbomify.com/MAL-2025-22945/): Malicious code in ictvapp (npm) (malicious package) - [MAL-2025-22944](https://insights.sbomify.com/MAL-2025-22944/): Malicious code in icornr (npm) (malicious package) - [MAL-2025-22943](https://insights.sbomify.com/MAL-2025-22943/): Malicious code in iconuk (npm) (malicious package) - [MAL-2025-22942](https://insights.sbomify.com/MAL-2025-22942/): Malicious code in icons-generator (npm) (malicious package) - [MAL-2025-22941](https://insights.sbomify.com/MAL-2025-22941/): Malicious code in iconfont-consumer-paypal (npm) (malicious package) - [MAL-2025-22940](https://insights.sbomify.com/MAL-2025-22940/): Malicious code in icondepan (npm) (malicious package) - [MAL-2025-2294](https://insights.sbomify.com/MAL-2025-2294/): Malicious code in across-package-prod (npm) (malicious package) - [MAL-2025-22939](https://insights.sbomify.com/MAL-2025-22939/): Malicious code in icogsci (npm) (malicious package) - [MAL-2025-22938](https://insights.sbomify.com/MAL-2025-22938/): Malicious code in iclaim (npm) (malicious package) - [MAL-2025-22937](https://insights.sbomify.com/MAL-2025-22937/): Malicious code in icicle-yucca-jur519-project (npm) (malicious package) - [MAL-2025-22936](https://insights.sbomify.com/MAL-2025-22936/): Malicious code in icicle-yellow-qva287-project (npm) (malicious package) - [MAL-2025-22935](https://insights.sbomify.com/MAL-2025-22935/): Malicious code in icicle-waterfall-wix021-project (npm) (malicious package) - [MAL-2025-22934](https://insights.sbomify.com/MAL-2025-22934/): Malicious code in icicle-utopia-hld871-project (npm) (malicious package) - [MAL-2025-22933](https://insights.sbomify.com/MAL-2025-22933/): Malicious code in icicle-topaz-ltb727-project (npm) (malicious package) - [MAL-2025-22932](https://insights.sbomify.com/MAL-2025-22932/): Malicious code in icicle-reef-dyf367-project (npm) (malicious package) - [MAL-2025-22931](https://insights.sbomify.com/MAL-2025-22931/): Malicious code in icicle-rainbow-akk321-project (npm) (malicious package) - [MAL-2025-22930](https://insights.sbomify.com/MAL-2025-22930/): Malicious code in icicle-quasar-urh125-project (npm) (malicious package) - [MAL-2025-2293](https://insights.sbomify.com/MAL-2025-2293/): Malicious code in cfa-react-components (npm) (malicious package) - [MAL-2025-22929](https://insights.sbomify.com/MAL-2025-22929/): Malicious code in icicle-myth-xgn480-project (npm) (malicious package) - [MAL-2025-22928](https://insights.sbomify.com/MAL-2025-22928/): Malicious code in icicle-moon-zdu476-project (npm) (malicious package) - [MAL-2025-22927](https://insights.sbomify.com/MAL-2025-22927/): Malicious code in icicle-lightning-feb821-project (npm) (malicious package) - [MAL-2025-22926](https://insights.sbomify.com/MAL-2025-22926/): Malicious code in icicle-leopard-gxz071-project (npm) (malicious package) - [MAL-2025-22925](https://insights.sbomify.com/MAL-2025-22925/): Malicious code in icicle-koala-yqb603-project (npm) (malicious package) - [MAL-2025-22924](https://insights.sbomify.com/MAL-2025-22924/): Malicious code in icicle-kaleidoscope-tdl275-project (npm) (malicious package) - [MAL-2025-22923](https://insights.sbomify.com/MAL-2025-22923/): Malicious code in icicle-kale-sea780-project (npm) (malicious package) - [MAL-2025-22922](https://insights.sbomify.com/MAL-2025-22922/): Malicious code in icicle-jade-ysp547-project (npm) (malicious package) - [MAL-2025-22921](https://insights.sbomify.com/MAL-2025-22921/): Malicious code in icicle-iris-rqm905-project (npm) (malicious package) - [MAL-2025-22920](https://insights.sbomify.com/MAL-2025-22920/): Malicious code in icicle-honeycomb-qtz954-project (npm) (malicious package) - [MAL-2025-2292](https://insights.sbomify.com/MAL-2025-2292/): Malicious code in hybrid-frontend (npm) (malicious package) - [MAL-2025-22919](https://insights.sbomify.com/MAL-2025-22919/): Malicious code in icicle-gorilla-nav513-project (npm) (malicious package) - [MAL-2025-22918](https://insights.sbomify.com/MAL-2025-22918/): Malicious code in icicle-dandelion-odl347-project (npm) (malicious package) - [MAL-2025-22917](https://insights.sbomify.com/MAL-2025-22917/): Malicious code in icicle-dandelion-ajv970-project (npm) (malicious package) - [MAL-2025-22916](https://insights.sbomify.com/MAL-2025-22916/): Malicious code in ichnology-pyxis-antd-higgs (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/858/