# Vulnerabilities published in 2025


- [MAL-2025-22915](https://insights.sbomify.com/MAL-2025-22915/): Malicious code in ichnology-phylogenetics-cosmicweb-yaml (npm) (malicious package)
- [MAL-2025-22914](https://insights.sbomify.com/MAL-2025-22914/): Malicious code in ichnology-link-config-neutronstar (npm) (malicious package)
- [MAL-2025-22913](https://insights.sbomify.com/MAL-2025-22913/): Malicious code in ichnology-less-loader-eigenstate-asthenosphere (npm) (malicious package)
- [MAL-2025-22912](https://insights.sbomify.com/MAL-2025-22912/): Malicious code in ichnology-helios-grus-vuetify (npm) (malicious package)
- [MAL-2025-22911](https://insights.sbomify.com/MAL-2025-22911/): Malicious code in ichnology-blueshift-cache-comet (npm) (malicious package)
- [MAL-2025-22910](https://insights.sbomify.com/MAL-2025-22910/): Malicious code in ichnaea (npm) (malicious package)
- [MAL-2025-2291](https://insights.sbomify.com/MAL-2025-2291/): Malicious code in bsee-shared-hmd (npm) (malicious package)
- [MAL-2025-22909](https://insights.sbomify.com/MAL-2025-22909/): Malicious code in ichigodot (npm) (malicious package)
- [MAL-2025-22908](https://insights.sbomify.com/MAL-2025-22908/): Malicious code in ichartjs (npm) (malicious package)
- [MAL-2025-22907](https://insights.sbomify.com/MAL-2025-22907/): Malicious code in icewind (npm) (malicious package)
- [MAL-2025-22906](https://insights.sbomify.com/MAL-2025-22906/): Malicious code in icelus (npm) (malicious package)
- [MAL-2025-22905](https://insights.sbomify.com/MAL-2025-22905/): Malicious code in iceberg-xylophone-rtu806-project (npm) (malicious package)
- [MAL-2025-22904](https://insights.sbomify.com/MAL-2025-22904/): Malicious code in iceberg-umbrella-ubwk (npm) (malicious package)
- [MAL-2025-22903](https://insights.sbomify.com/MAL-2025-22903/): Malicious code in iceberg-quagmire-xjc232-project (npm) (malicious package)
- [MAL-2025-22902](https://insights.sbomify.com/MAL-2025-22902/): Malicious code in iceberg-qgf3n-qfx04-valley-project (npm) (malicious package)
- [MAL-2025-22901](https://insights.sbomify.com/MAL-2025-22901/): Malicious code in iceberg-paradise-fuq126-project (npm) (malicious package)
- [MAL-2025-22900](https://insights.sbomify.com/MAL-2025-22900/): Malicious code in iceberg-observatory-fud0 (npm) (malicious package)
- [MAL-2025-2290](https://insights.sbomify.com/MAL-2025-2290/): Malicious code in actions-project-version-check (npm) (malicious package)
- [MAL-2025-229](https://insights.sbomify.com/MAL-2025-229/): Malicious code in prem-media-downloader (npm) (malicious package)
- [MAL-2025-22899](https://insights.sbomify.com/MAL-2025-22899/): Malicious code in iceberg-lct0z-lyaw0-moonlight-project (npm) (malicious package)
- [MAL-2025-22898](https://insights.sbomify.com/MAL-2025-22898/): Malicious code in iceberg-larch-813s (npm) (malicious package)
- [MAL-2025-22897](https://insights.sbomify.com/MAL-2025-22897/): Malicious code in iceberg-j9z4i-is4u2-amber-project (npm) (malicious package)
- [MAL-2025-22896](https://insights.sbomify.com/MAL-2025-22896/): Malicious code in iceberg-ihxd3-iw60c-pinnacle-project (npm) (malicious package)
- [MAL-2025-22895](https://insights.sbomify.com/MAL-2025-22895/): Malicious code in iceberg-icicle-pip930-project (npm) (malicious package)
- [MAL-2025-22894](https://insights.sbomify.com/MAL-2025-22894/): Malicious code in iceberg-grove-wyf494-project (npm) (malicious package)
- [MAL-2025-22893](https://insights.sbomify.com/MAL-2025-22893/): Malicious code in iceberg-gorilla-igfp (npm) (malicious package)
- [MAL-2025-22892](https://insights.sbomify.com/MAL-2025-22892/): Malicious code in iceberg-falcon-vn21 (npm) (malicious package)
- [MAL-2025-22891](https://insights.sbomify.com/MAL-2025-22891/): Malicious code in iceberg-almond-jx84 (npm) (malicious package)
- [MAL-2025-22890](https://insights.sbomify.com/MAL-2025-22890/): Malicious code in ice-y9v7e-pjp3g-solace-project (npm) (malicious package)
- [MAL-2025-2289](https://insights.sbomify.com/MAL-2025-2289/): Malicious code in customer-identity-mfe-dev (npm) (malicious package)
- [MAL-2025-22889](https://insights.sbomify.com/MAL-2025-22889/): Malicious code in ice-uud8z-um6ib-uplift-project (npm) (malicious package)
- [MAL-2025-22888](https://insights.sbomify.com/MAL-2025-22888/): Malicious code in ice-templates (npm) (malicious package)
- [MAL-2025-22887](https://insights.sbomify.com/MAL-2025-22887/): Malicious code in ice-fnzvy-v1nyz-lunar-project (npm) (malicious package)
- [MAL-2025-22886](https://insights.sbomify.com/MAL-2025-22886/): Malicious code in ice-e592h-rted6-jade-project (npm) (malicious package)
- [MAL-2025-22885](https://insights.sbomify.com/MAL-2025-22885/): Malicious code in ice-0csyt-uwn4e-xenith-project (npm) (malicious package)
- [MAL-2025-22884](https://insights.sbomify.com/MAL-2025-22884/): Malicious code in icctest (npm) (malicious package)
- [MAL-2025-22883](https://insights.sbomify.com/MAL-2025-22883/): Malicious code in ic-tools-mailer (npm) (malicious package)
- [MAL-2025-22882](https://insights.sbomify.com/MAL-2025-22882/): Malicious code in ic-model-admin (npm) (malicious package)
- [MAL-2025-22881](https://insights.sbomify.com/MAL-2025-22881/): Malicious code in ibslkpaeqczrtgdy (npm) (malicious package)
- [MAL-2025-22880](https://insights.sbomify.com/MAL-2025-22880/): Malicious code in ibfupgadsozeqktw (npm) (malicious package)
- [MAL-2025-2288](https://insights.sbomify.com/MAL-2025-2288/): Malicious code in customer-identity-mfe (npm) (malicious package)
- [MAL-2025-22879](https://insights.sbomify.com/MAL-2025-22879/): Malicious code in ibfinder (npm) (malicious package)
- [MAL-2025-22878](https://insights.sbomify.com/MAL-2025-22878/): Malicious code in ibercnudjtysgpfk (npm) (malicious package)
- [MAL-2025-22877](https://insights.sbomify.com/MAL-2025-22877/): Malicious code in ibc (npm) (malicious package)
- [MAL-2025-22876](https://insights.sbomify.com/MAL-2025-22876/): Malicious code in ibantay (npm) (malicious package)
- [MAL-2025-22875](https://insights.sbomify.com/MAL-2025-22875/): Malicious code in ibanan (npm) (malicious package)
- [MAL-2025-22874](https://insights.sbomify.com/MAL-2025-22874/): Malicious code in ibadge (npm) (malicious package)
- [MAL-2025-22873](https://insights.sbomify.com/MAL-2025-22873/): Malicious code in iambtwob (npm) (malicious package)
- [MAL-2025-22872](https://insights.sbomify.com/MAL-2025-22872/): Malicious code in iafwjeqovtmnhcrk (npm) (malicious package)
- [MAL-2025-22871](https://insights.sbomify.com/MAL-2025-22871/): Malicious code in iadvice (npm) (malicious package)
- [MAL-2025-22870](https://insights.sbomify.com/MAL-2025-22870/): Malicious code in i_json (npm) (malicious package)
- [MAL-2025-2287](https://insights.sbomify.com/MAL-2025-2287/): Malicious code in www-discoveryeducation-com (npm) (malicious package)
- [MAL-2025-22869](https://insights.sbomify.com/MAL-2025-22869/): Malicious code in i18next-xlsx-to-json (npm) (malicious package)
- [MAL-2025-22868](https://insights.sbomify.com/MAL-2025-22868/): Malicious code in i-knew-that (npm) (malicious package)
- [MAL-2025-22867](https://insights.sbomify.com/MAL-2025-22867/): Malicious code in hzrbqljeavcsnpkf (npm) (malicious package)
- [MAL-2025-22866](https://insights.sbomify.com/MAL-2025-22866/): Malicious code in hytb3nqln1s0tp3d7ygf2wnl9djb5emc (npm) (malicious package)
- [MAL-2025-22865](https://insights.sbomify.com/MAL-2025-22865/): Malicious code in hyrmedia (npm) (malicious package)
- [MAL-2025-22864](https://insights.sbomify.com/MAL-2025-22864/): Malicious code in hyptrails (npm) (malicious package)
- [MAL-2025-22863](https://insights.sbomify.com/MAL-2025-22863/): Malicious code in hypnosphi (npm) (malicious package)
- [MAL-2025-22862](https://insights.sbomify.com/MAL-2025-22862/): Malicious code in hypngqbzkmwjuiar (npm) (malicious package)
- [MAL-2025-22861](https://insights.sbomify.com/MAL-2025-22861/): Malicious code in hypertheme-matrix (npm) (malicious package)
- [MAL-2025-22860](https://insights.sbomify.com/MAL-2025-22860/): Malicious code in hyperjoy (npm) (malicious package)
- [MAL-2025-2286](https://insights.sbomify.com/MAL-2025-2286/): Malicious code in web-tracing-framework (npm) (malicious package)
- [MAL-2025-22859](https://insights.sbomify.com/MAL-2025-22859/): Malicious code in hyperion-spectron-webdriver-meteor-bulma (npm) (malicious package)
- [MAL-2025-22858](https://insights.sbomify.com/MAL-2025-22858/): Malicious code in hyperion-reveal-md-wasat-ganymede (npm) (malicious package)
- [MAL-2025-22857](https://insights.sbomify.com/MAL-2025-22857/): Malicious code in hyperion-koa-vuepress-zenith (npm) (malicious package)
- [MAL-2025-22856](https://insights.sbomify.com/MAL-2025-22856/): Malicious code in hyperion-graviton-filament-ionosphere (npm) (malicious package)
- [MAL-2025-22855](https://insights.sbomify.com/MAL-2025-22855/): Malicious code in hyperion-element-ui-google-link (npm) (malicious package)
- [MAL-2025-22854](https://insights.sbomify.com/MAL-2025-22854/): Malicious code in hyperion-concurrently-photon-metabolomics (npm) (malicious package)
- [MAL-2025-22853](https://insights.sbomify.com/MAL-2025-22853/): Malicious code in hyperion-buffer-centauri-express (npm) (malicious package)
- [MAL-2025-22852](https://insights.sbomify.com/MAL-2025-22852/): Malicious code in hyperion-baryon-fork-graphql (npm) (malicious package)
- [MAL-2025-22851](https://insights.sbomify.com/MAL-2025-22851/): Malicious code in hypc (npm) (malicious package)
- [MAL-2025-22850](https://insights.sbomify.com/MAL-2025-22850/): Malicious code in hyiot-module (npm) (malicious package)
- [MAL-2025-2285](https://insights.sbomify.com/MAL-2025-2285/): Malicious code in veryimportantdigiasdf (npm) (malicious package)
- [MAL-2025-22849](https://insights.sbomify.com/MAL-2025-22849/): Malicious code in hydrogeology-transform-crust-library (npm) (malicious package)
- [MAL-2025-22848](https://insights.sbomify.com/MAL-2025-22848/): Malicious code in hydrogeology-primatology-galaxy-astrophysics (npm) (malicious package)
- [MAL-2025-22847](https://insights.sbomify.com/MAL-2025-22847/): Malicious code in hydrogeology-event-wezen-eris (npm) (malicious package)
- [MAL-2025-22846](https://insights.sbomify.com/MAL-2025-22846/): Malicious code in hydrogeology-darkmatter-achernar-inquirer (npm) (malicious package)
- [MAL-2025-22845](https://insights.sbomify.com/MAL-2025-22845/): Malicious code in hydrogen-ui-alpha (npm) (malicious package)
- [MAL-2025-22844](https://insights.sbomify.com/MAL-2025-22844/): Malicious code in hydrogen-react (npm) (malicious package)
- [MAL-2025-22843](https://insights.sbomify.com/MAL-2025-22843/): Malicious code in hydra-rollup-kuiperbelt-node-sass (npm) (malicious package)
- [MAL-2025-22842](https://insights.sbomify.com/MAL-2025-22842/): Malicious code in hydra-orogeny-nanotechnology-zenobia (npm) (malicious package)
- [MAL-2025-22841](https://insights.sbomify.com/MAL-2025-22841/): Malicious code in hydra-chalk-io-exec (npm) (malicious package)
- [MAL-2025-22840](https://insights.sbomify.com/MAL-2025-22840/): Malicious code in hydra-abiogenesis-auriga-decoherence (npm) (malicious package)
- [MAL-2025-2284](https://insights.sbomify.com/MAL-2025-2284/): Malicious code in valentinesgiftt (npm) (malicious package)
- [MAL-2025-22839](https://insights.sbomify.com/MAL-2025-22839/): Malicious code in hyctymbw (npm) (malicious package)
- [MAL-2025-22838](https://insights.sbomify.com/MAL-2025-22838/): Malicious code in hybliz (npm) (malicious package)
- [MAL-2025-22837](https://insights.sbomify.com/MAL-2025-22837/): Malicious code in hx9ehzesmiby2b0bcicrnno9m9l4agzz (npm) (malicious package)
- [MAL-2025-22836](https://insights.sbomify.com/MAL-2025-22836/): Malicious code in hwtbar (npm) (malicious package)
- [MAL-2025-22835](https://insights.sbomify.com/MAL-2025-22835/): Malicious code in hwriter (npm) (malicious package)
- [MAL-2025-22834](https://insights.sbomify.com/MAL-2025-22834/): Malicious code in hwonutkbfeigalqk (npm) (malicious package)
- [MAL-2025-22833](https://insights.sbomify.com/MAL-2025-22833/): Malicious code in hwdong (npm) (malicious package)
- [MAL-2025-22832](https://insights.sbomify.com/MAL-2025-22832/): Malicious code in hwatch (npm) (malicious package)
- [MAL-2025-22831](https://insights.sbomify.com/MAL-2025-22831/): Malicious code in hw-trnasport-u2f (npm) (malicious package)
- [MAL-2025-22830](https://insights.sbomify.com/MAL-2025-22830/): Malicious code in hw-tracking (npm) (malicious package)
- [MAL-2025-2283](https://insights.sbomify.com/MAL-2025-2283/): Malicious code in upload-aliyun-oss (npm) (malicious package)
- [MAL-2025-22829](https://insights.sbomify.com/MAL-2025-22829/): Malicious code in hw-timeout-layer (npm) (malicious package)
- [MAL-2025-22828](https://insights.sbomify.com/MAL-2025-22828/): Malicious code in hw-theme-rebrand (npm) (malicious package)
- [MAL-2025-22827](https://insights.sbomify.com/MAL-2025-22827/): Malicious code in hw-theme (npm) (malicious package)
- [MAL-2025-22826](https://insights.sbomify.com/MAL-2025-22826/): Malicious code in hw-tealium (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/859/