# Vulnerabilities published in 2025 - [MAL-2025-22825](https://insights.sbomify.com/MAL-2025-22825/): Malicious code in hw-survey (npm) (malicious package) - [MAL-2025-22824](https://insights.sbomify.com/MAL-2025-22824/): Malicious code in hw-performance-tracking (npm) (malicious package) - [MAL-2025-22823](https://insights.sbomify.com/MAL-2025-22823/): Malicious code in hw-olab (npm) (malicious package) - [MAL-2025-22822](https://insights.sbomify.com/MAL-2025-22822/): Malicious code in hw-me (npm) (malicious package) - [MAL-2025-22821](https://insights.sbomify.com/MAL-2025-22821/): Malicious code in hw-marketing (npm) (malicious package) - [MAL-2025-22820](https://insights.sbomify.com/MAL-2025-22820/): Malicious code in hw-intl (npm) (malicious package) - [MAL-2025-2282](https://insights.sbomify.com/MAL-2025-2282/): Malicious code in small-awesome-shop (npm) (malicious package) - [MAL-2025-22819](https://insights.sbomify.com/MAL-2025-22819/): Malicious code in hw-interstitial (npm) (malicious package) - [MAL-2025-22818](https://insights.sbomify.com/MAL-2025-22818/): Malicious code in hw-intent-media (npm) (malicious package) - [MAL-2025-22817](https://insights.sbomify.com/MAL-2025-22817/): Malicious code in hw-exception (npm) (malicious package) - [MAL-2025-22816](https://insights.sbomify.com/MAL-2025-22816/): Malicious code in hw-customer-stats (npm) (malicious package) - [MAL-2025-22815](https://insights.sbomify.com/MAL-2025-22815/): Malicious code in hw-currency (npm) (malicious package) - [MAL-2025-22814](https://insights.sbomify.com/MAL-2025-22814/): Malicious code in hw-clientid (npm) (malicious package) - [MAL-2025-22813](https://insights.sbomify.com/MAL-2025-22813/): Malicious code in hw-branding (npm) (malicious package) - [MAL-2025-22812](https://insights.sbomify.com/MAL-2025-22812/): Malicious code in hw-banner (npm) (malicious package) - [MAL-2025-22811](https://insights.sbomify.com/MAL-2025-22811/): Malicious code in hw-api-secret (npm) (malicious package) - [MAL-2025-22810](https://insights.sbomify.com/MAL-2025-22810/): Malicious code in hw-angular-validator (npm) (malicious package) - [MAL-2025-2281](https://insights.sbomify.com/MAL-2025-2281/): Malicious code in simple-progress-cli (npm) (malicious package) - [MAL-2025-22809](https://insights.sbomify.com/MAL-2025-22809/): Malicious code in hw-affiliate-toast (npm) (malicious package) - [MAL-2025-22808](https://insights.sbomify.com/MAL-2025-22808/): Malicious code in hustlejs (npm) (malicious package) - [MAL-2025-22807](https://insights.sbomify.com/MAL-2025-22807/): Malicious code in huskyos (npm) (malicious package) - [MAL-2025-22806](https://insights.sbomify.com/MAL-2025-22806/): Malicious code in husky-zenith-less-yonder (npm) (malicious package) - [MAL-2025-22805](https://insights.sbomify.com/MAL-2025-22805/): Malicious code in husky-stratigraphy-gravity-orogeny (npm) (malicious package) - [MAL-2025-22804](https://insights.sbomify.com/MAL-2025-22804/): Malicious code in husky-library-janus-supervisor (npm) (malicious package) - [MAL-2025-22803](https://insights.sbomify.com/MAL-2025-22803/): Malicious code in hush_hptfz_u1ddr_valley (npm) (malicious package) - [MAL-2025-22802](https://insights.sbomify.com/MAL-2025-22802/): Malicious code in hurge (npm) (malicious package) - [MAL-2025-22801](https://insights.sbomify.com/MAL-2025-22801/): Malicious code in huqas_web (npm) (malicious package) - [MAL-2025-22800](https://insights.sbomify.com/MAL-2025-22800/): Malicious code in huobi-trading-view-hbcloud (npm) (malicious package) - [MAL-2025-2280](https://insights.sbomify.com/MAL-2025-2280/): Malicious code in simple-export-map (npm) (malicious package) - [MAL-2025-228](https://insights.sbomify.com/MAL-2025-228/): Malicious code in prem-instagram (npm) (malicious package) - [MAL-2025-22799](https://insights.sbomify.com/MAL-2025-22799/): Malicious code in huobi-bs-fe-common (npm) (malicious package) - [MAL-2025-22798](https://insights.sbomify.com/MAL-2025-22798/): Malicious code in hunters (npm) (malicious package) - [MAL-2025-22797](https://insights.sbomify.com/MAL-2025-22797/): Malicious code in hungarian (npm) (malicious package) - [MAL-2025-22796](https://insights.sbomify.com/MAL-2025-22796/): Malicious code in hunexdlwgsybpizf (npm) (malicious package) - [MAL-2025-22795](https://insights.sbomify.com/MAL-2025-22795/): Malicious code in hummawawa (npm) (malicious package) - [MAL-2025-22794](https://insights.sbomify.com/MAL-2025-22794/): Malicious code in humanapi-mongoose-list (npm) (malicious package) - [MAL-2025-22793](https://insights.sbomify.com/MAL-2025-22793/): Malicious code in humanapi-mongoose-encrypt (npm) (malicious package) - [MAL-2025-22792](https://insights.sbomify.com/MAL-2025-22792/): Malicious code in humanapi-models (npm) (malicious package) - [MAL-2025-22791](https://insights.sbomify.com/MAL-2025-22791/): Malicious code in humanapi-logger (npm) (malicious package) - [MAL-2025-22790](https://insights.sbomify.com/MAL-2025-22790/): Malicious code in humanapi-grunt-tasks (npm) (malicious package) - [MAL-2025-2279](https://insights.sbomify.com/MAL-2025-2279/): Malicious code in rexz-nsfw-detection (npm) (malicious package) - [MAL-2025-22789](https://insights.sbomify.com/MAL-2025-22789/): Malicious code in humanapi-belt (npm) (malicious package) - [MAL-2025-22788](https://insights.sbomify.com/MAL-2025-22788/): Malicious code in hulp (npm) (malicious package) - [MAL-2025-22787](https://insights.sbomify.com/MAL-2025-22787/): Malicious code in hulasync (npm) (malicious package) - [MAL-2025-22786](https://insights.sbomify.com/MAL-2025-22786/): Malicious code in hukax (npm) (malicious package) - [MAL-2025-22785](https://insights.sbomify.com/MAL-2025-22785/): Malicious code in huiguan (npm) (malicious package) - [MAL-2025-22784](https://insights.sbomify.com/MAL-2025-22784/): Malicious code in hugomatic (npm) (malicious package) - [MAL-2025-22783](https://insights.sbomify.com/MAL-2025-22783/): Malicious code in hugo-thermosphere-nebula-spectroscopy (npm) (malicious package) - [MAL-2025-22782](https://insights.sbomify.com/MAL-2025-22782/): Malicious code in hugo-neptune-config-mineralogy (npm) (malicious package) - [MAL-2025-22781](https://insights.sbomify.com/MAL-2025-22781/): Malicious code in hugo-fornax-neptune-playwright (npm) (malicious package) - [MAL-2025-22780](https://insights.sbomify.com/MAL-2025-22780/): Malicious code in hugo-draco-mini-css-extract-plugin-paleoanthropology (npm) (malicious package) - [MAL-2025-2278](https://insights.sbomify.com/MAL-2025-2278/): Malicious code in rexz-imagine-ai (npm) (malicious package) - [MAL-2025-22779](https://insights.sbomify.com/MAL-2025-22779/): Malicious code in hugo-changelog-achernar-event (npm) (malicious package) - [MAL-2025-22778](https://insights.sbomify.com/MAL-2025-22778/): Malicious code in hugehard (npm) (malicious package) - [MAL-2025-22777](https://insights.sbomify.com/MAL-2025-22777/): Malicious code in hufnagel (npm) (malicious package) - [MAL-2025-22776](https://insights.sbomify.com/MAL-2025-22776/): Malicious code in huflungdu (npm) (malicious package) - [MAL-2025-22775](https://insights.sbomify.com/MAL-2025-22775/): Malicious code in huffpost (npm) (malicious package) - [MAL-2025-22774](https://insights.sbomify.com/MAL-2025-22774/): Malicious code in huf_secure_access_api (npm) (malicious package) - [MAL-2025-22773](https://insights.sbomify.com/MAL-2025-22773/): Malicious code in hudctl (npm) (malicious package) - [MAL-2025-22772](https://insights.sbomify.com/MAL-2025-22772/): Malicious code in hubspawn (npm) (malicious package) - [MAL-2025-22771](https://insights.sbomify.com/MAL-2025-22771/): Malicious code in hubot-frostedio-env (npm) (malicious package) - [MAL-2025-22770](https://insights.sbomify.com/MAL-2025-22770/): Malicious code in hubot-factoids-3ch01c (npm) (malicious package) - [MAL-2025-2277](https://insights.sbomify.com/MAL-2025-2277/): Malicious code in retool-quickopen-extension (npm) (malicious package) - [MAL-2025-22769](https://insights.sbomify.com/MAL-2025-22769/): Malicious code in httpunch (npm) (malicious package) - [MAL-2025-22768](https://insights.sbomify.com/MAL-2025-22768/): Malicious code in httprules (npm) (malicious package) - [MAL-2025-22767](https://insights.sbomify.com/MAL-2025-22767/): Malicious code in httplistd (npm) (malicious package) - [MAL-2025-22766](https://insights.sbomify.com/MAL-2025-22766/): Malicious code in httpguide (npm) (malicious package) - [MAL-2025-22765](https://insights.sbomify.com/MAL-2025-22765/): Malicious code in httpeace-node-plugin-upload (npm) (malicious package) - [MAL-2025-22764](https://insights.sbomify.com/MAL-2025-22764/): Malicious code in httpeace-node-core (npm) (malicious package) - [MAL-2025-22763](https://insights.sbomify.com/MAL-2025-22763/): Malicious code in http-promises-async (npm) (malicious package) - [MAL-2025-22762](https://insights.sbomify.com/MAL-2025-22762/): Malicious code in http-helmet (npm) (malicious package) - [MAL-2025-22761](https://insights.sbomify.com/MAL-2025-22761/): Malicious code in http-geobase (npm) (malicious package) - [MAL-2025-22760](https://insights.sbomify.com/MAL-2025-22760/): Malicious code in http (npm) (malicious package) - [MAL-2025-2276](https://insights.sbomify.com/MAL-2025-2276/): Malicious code in relay-prototyping-tools (npm) (malicious package) - [MAL-2025-22759](https://insights.sbomify.com/MAL-2025-22759/): Malicious code in httiyn7n4avhlugd6xvldzgbwpjsrfjp (npm) (malicious package) - [MAL-2025-22758](https://insights.sbomify.com/MAL-2025-22758/): Malicious code in htrapit (npm) (malicious package) - [MAL-2025-22757](https://insights.sbomify.com/MAL-2025-22757/): Malicious code in htproject (npm) (malicious package) - [MAL-2025-22756](https://insights.sbomify.com/MAL-2025-22756/): Malicious code in htmlglue (npm) (malicious package) - [MAL-2025-22755](https://insights.sbomify.com/MAL-2025-22755/): Malicious code in html5-escape (npm) (malicious package) - [MAL-2025-22754](https://insights.sbomify.com/MAL-2025-22754/): Malicious code in html2coffeekup-bal (npm) (malicious package) - [MAL-2025-22753](https://insights.sbomify.com/MAL-2025-22753/): Malicious code in html-webpack-plugin-panspermia-local-tachyon (npm) (malicious package) - [MAL-2025-22752](https://insights.sbomify.com/MAL-2025-22752/): Malicious code in html-webpack-plugin-odin-jest-transform (npm) (malicious package) - [MAL-2025-22751](https://insights.sbomify.com/MAL-2025-22751/): Malicious code in html-patcher (npm) (malicious package) - [MAL-2025-22750](https://insights.sbomify.com/MAL-2025-22750/): Malicious code in hstester (npm) (malicious package) - [MAL-2025-2275](https://insights.sbomify.com/MAL-2025-2275/): Malicious code in referrals-landing-page (npm) (malicious package) - [MAL-2025-22749](https://insights.sbomify.com/MAL-2025-22749/): Malicious code in hsrmap (npm) (malicious package) - [MAL-2025-22748](https://insights.sbomify.com/MAL-2025-22748/): Malicious code in hsreport (npm) (malicious package) - [MAL-2025-22747](https://insights.sbomify.com/MAL-2025-22747/): Malicious code in hsf-server (npm) (malicious package) - [MAL-2025-22746](https://insights.sbomify.com/MAL-2025-22746/): Malicious code in hsf-clients (npm) (malicious package) - [MAL-2025-22745](https://insights.sbomify.com/MAL-2025-22745/): Malicious code in hscday (npm) (malicious package) - [MAL-2025-22744](https://insights.sbomify.com/MAL-2025-22744/): Malicious code in hsbc-modal (npm) (malicious package) - [MAL-2025-22743](https://insights.sbomify.com/MAL-2025-22743/): Malicious code in hs_codes (npm) (malicious package) - [MAL-2025-22742](https://insights.sbomify.com/MAL-2025-22742/): Malicious code in hs-sha3 (npm) (malicious package) - [MAL-2025-22741](https://insights.sbomify.com/MAL-2025-22741/): Malicious code in hs-api-next-gen (npm) (malicious package) - [MAL-2025-22740](https://insights.sbomify.com/MAL-2025-22740/): Malicious code in hrodei (npm) (malicious package) - [MAL-2025-2274](https://insights.sbomify.com/MAL-2025-2274/): Malicious code in react-textfit-example (npm) (malicious package) - [MAL-2025-22739](https://insights.sbomify.com/MAL-2025-22739/): Malicious code in hqsql (npm) (malicious package) - [MAL-2025-22738](https://insights.sbomify.com/MAL-2025-22738/): Malicious code in hqlkgubcovjiskta (npm) (malicious package) - [MAL-2025-22737](https://insights.sbomify.com/MAL-2025-22737/): Malicious code in hqj0rx (npm) (malicious package) - [MAL-2025-22736](https://insights.sbomify.com/MAL-2025-22736/): Malicious code in hpygdtsiukcxolvw (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/860/