# Vulnerabilities published in 2025


- [MAL-2025-22735](https://insights.sbomify.com/MAL-2025-22735/): Malicious code in hpmm (npm) (malicious package)
- [MAL-2025-22734](https://insights.sbomify.com/MAL-2025-22734/): Malicious code in hpioj5 (npm) (malicious package)
- [MAL-2025-22733](https://insights.sbomify.com/MAL-2025-22733/): Malicious code in hpfeedirc (npm) (malicious package)
- [MAL-2025-22732](https://insights.sbomify.com/MAL-2025-22732/): Malicious code in hp1dma (npm) (malicious package)
- [MAL-2025-22731](https://insights.sbomify.com/MAL-2025-22731/): Malicious code in hp-svc-facs-store (npm) (malicious package)
- [MAL-2025-22730](https://insights.sbomify.com/MAL-2025-22730/): Malicious code in howwrong (npm) (malicious package)
- [MAL-2025-2273](https://insights.sbomify.com/MAL-2025-2273/): Malicious code in radiodesign (npm) (malicious package)
- [MAL-2025-22729](https://insights.sbomify.com/MAL-2025-22729/): Malicious code in how-to-npm-tester-lee (npm) (malicious package)
- [MAL-2025-22728](https://insights.sbomify.com/MAL-2025-22728/): Malicious code in how-to-get-unlimited-coin-master-spins-daily-in-2023-efkedz (npm) (malicious package)
- [MAL-2025-22727](https://insights.sbomify.com/MAL-2025-22727/): Malicious code in how-to-get-free-fortnite-vbucks-2023-zdkdz (npm) (malicious package)
- [MAL-2025-22726](https://insights.sbomify.com/MAL-2025-22726/): Malicious code in how-to-get-free-coin-master-spins-2023-working-and-updated-jjeef (npm) (malicious package)
- [MAL-2025-22725](https://insights.sbomify.com/MAL-2025-22725/): Malicious code in how-to-get-followers-on-instagram-without-following (npm) (malicious package)
- [MAL-2025-22724](https://insights.sbomify.com/MAL-2025-22724/): Malicious code in how-iget-free-fortnite-vbucks-daily-jfkze (npm) (malicious package)
- [MAL-2025-22723](https://insights.sbomify.com/MAL-2025-22723/): Malicious code in hoverpuck (npm) (malicious package)
- [MAL-2025-22722](https://insights.sbomify.com/MAL-2025-22722/): Malicious code in housefind (npm) (malicious package)
- [MAL-2025-22721](https://insights.sbomify.com/MAL-2025-22721/): Malicious code in hottg47gggg (npm) (malicious package)
- [MAL-2025-22720](https://insights.sbomify.com/MAL-2025-22720/): Malicious code in hotline-frontend (npm) (malicious package)
- [MAL-2025-2272](https://insights.sbomify.com/MAL-2025-2272/): Malicious code in radar-frontend (npm) (malicious package)
- [MAL-2025-22719](https://insights.sbomify.com/MAL-2025-22719/): Malicious code in HotJS (npm) (malicious package)
- [MAL-2025-22718](https://insights.sbomify.com/MAL-2025-22718/): Malicious code in hotelsys (npm) (malicious package)
- [MAL-2025-22717](https://insights.sbomify.com/MAL-2025-22717/): Malicious code in hotel-zucchini-sierra-ehqmk (npm) (malicious package)
- [MAL-2025-22716](https://insights.sbomify.com/MAL-2025-22716/): Malicious code in hotel-xray-pjod (npm) (malicious package)
- [MAL-2025-22715](https://insights.sbomify.com/MAL-2025-22715/): Malicious code in hotel-xigua-nfoh (npm) (malicious package)
- [MAL-2025-22714](https://insights.sbomify.com/MAL-2025-22714/): Malicious code in hotel-xgw-project (npm) (malicious package)
- [MAL-2025-22713](https://insights.sbomify.com/MAL-2025-22713/): Malicious code in hotel-xenon-m0k3 (npm) (malicious package)
- [MAL-2025-22712](https://insights.sbomify.com/MAL-2025-22712/): Malicious code in hotel-whiskey-alpha-qwqlo (npm) (malicious package)
- [MAL-2025-22711](https://insights.sbomify.com/MAL-2025-22711/): Malicious code in hotel-v6f-project (npm) (malicious package)
- [MAL-2025-22710](https://insights.sbomify.com/MAL-2025-22710/): Malicious code in hotel-u7v-project (npm) (malicious package)
- [MAL-2025-2271](https://insights.sbomify.com/MAL-2025-2271/): Malicious code in psd2-registration-example-ts (npm) (malicious package)
- [MAL-2025-22709](https://insights.sbomify.com/MAL-2025-22709/): Malicious code in hotel-strawberry-lemon-cfqzi (npm) (malicious package)
- [MAL-2025-22708](https://insights.sbomify.com/MAL-2025-22708/): Malicious code in hotel-romeo-ifxx (npm) (malicious package)
- [MAL-2025-22707](https://insights.sbomify.com/MAL-2025-22707/): Malicious code in hotel-re0-project (npm) (malicious package)
- [MAL-2025-22706](https://insights.sbomify.com/MAL-2025-22706/): Malicious code in hotel-raspberry-uogt (npm) (malicious package)
- [MAL-2025-22705](https://insights.sbomify.com/MAL-2025-22705/): Malicious code in hotel-pr7-project (npm) (malicious package)
- [MAL-2025-22704](https://insights.sbomify.com/MAL-2025-22704/): Malicious code in hotel-oscar-fig-hmfhw (npm) (malicious package)
- [MAL-2025-22703](https://insights.sbomify.com/MAL-2025-22703/): Malicious code in hotel-o8p-project (npm) (malicious package)
- [MAL-2025-22702](https://insights.sbomify.com/MAL-2025-22702/): Malicious code in hotel-o0e-project (npm) (malicious package)
- [MAL-2025-22701](https://insights.sbomify.com/MAL-2025-22701/): Malicious code in hotel-nl6-project (npm) (malicious package)
- [MAL-2025-22700](https://insights.sbomify.com/MAL-2025-22700/): Malicious code in hotel-mike-zucchini-tbpst (npm) (malicious package)
- [MAL-2025-2270](https://insights.sbomify.com/MAL-2025-2270/): Malicious code in prop2json (npm) (malicious package)
- [MAL-2025-227](https://insights.sbomify.com/MAL-2025-227/): Malicious code in prem-ig-downloader (npm) (malicious package)
- [MAL-2025-22699](https://insights.sbomify.com/MAL-2025-22699/): Malicious code in hotel-mango-ypoo (npm) (malicious package)
- [MAL-2025-22698](https://insights.sbomify.com/MAL-2025-22698/): Malicious code in hotel-lima-tango-xcygz (npm) (malicious package)
- [MAL-2025-22697](https://insights.sbomify.com/MAL-2025-22697/): Malicious code in hotel-l19-project (npm) (malicious package)
- [MAL-2025-22696](https://insights.sbomify.com/MAL-2025-22696/): Malicious code in hotel-kiwi-22a8 (npm) (malicious package)
- [MAL-2025-22695](https://insights.sbomify.com/MAL-2025-22695/): Malicious code in hotel-kilo-jrme (npm) (malicious package)
- [MAL-2025-22694](https://insights.sbomify.com/MAL-2025-22694/): Malicious code in hotel-k7n-project (npm) (malicious package)
- [MAL-2025-22693](https://insights.sbomify.com/MAL-2025-22693/): Malicious code in hotel-k2x-project (npm) (malicious package)
- [MAL-2025-22692](https://insights.sbomify.com/MAL-2025-22692/): Malicious code in hotel-juliet-yyno (npm) (malicious package)
- [MAL-2025-22691](https://insights.sbomify.com/MAL-2025-22691/): Malicious code in hotel-juliet-udfh (npm) (malicious package)
- [MAL-2025-22690](https://insights.sbomify.com/MAL-2025-22690/): Malicious code in hotel-india-ihhi (npm) (malicious package)
- [MAL-2025-2269](https://insights.sbomify.com/MAL-2025-2269/): Malicious code in nodes-tree-visualizer-server (npm) (malicious package)
- [MAL-2025-22689](https://insights.sbomify.com/MAL-2025-22689/): Malicious code in hotel-honeydew-qjlt (npm) (malicious package)
- [MAL-2025-22688](https://insights.sbomify.com/MAL-2025-22688/): Malicious code in hotel-helicopter-rzk6 (npm) (malicious package)
- [MAL-2025-22687](https://insights.sbomify.com/MAL-2025-22687/): Malicious code in hotel-h1p-project (npm) (malicious package)
- [MAL-2025-22686](https://insights.sbomify.com/MAL-2025-22686/): Malicious code in hotel-golf-lmol (npm) (malicious package)
- [MAL-2025-22685](https://insights.sbomify.com/MAL-2025-22685/): Malicious code in hotel-fig-ewgs (npm) (malicious package)
- [MAL-2025-22684](https://insights.sbomify.com/MAL-2025-22684/): Malicious code in hotel-f63-project (npm) (malicious package)
- [MAL-2025-22683](https://insights.sbomify.com/MAL-2025-22683/): Malicious code in hotel-etm-project (npm) (malicious package)
- [MAL-2025-22682](https://insights.sbomify.com/MAL-2025-22682/): Malicious code in hotel-elderberry-vsgz (npm) (malicious package)
- [MAL-2025-22681](https://insights.sbomify.com/MAL-2025-22681/): Malicious code in hotel-elderberry-tangerine-vpmde (npm) (malicious package)
- [MAL-2025-22680](https://insights.sbomify.com/MAL-2025-22680/): Malicious code in hotel-elderberry-hhou (npm) (malicious package)
- [MAL-2025-2268](https://insights.sbomify.com/MAL-2025-2268/): Malicious code in nl-wallet-web (npm) (malicious package)
- [MAL-2025-22679](https://insights.sbomify.com/MAL-2025-22679/): Malicious code in hotel-echo-papaya-rfurx (npm) (malicious package)
- [MAL-2025-22678](https://insights.sbomify.com/MAL-2025-22678/): Malicious code in hotel-echo-date-woscz (npm) (malicious package)
- [MAL-2025-22677](https://insights.sbomify.com/MAL-2025-22677/): Malicious code in hotel-czu-project (npm) (malicious package)
- [MAL-2025-22676](https://insights.sbomify.com/MAL-2025-22676/): Malicious code in hotel-cld-project (npm) (malicious package)
- [MAL-2025-22675](https://insights.sbomify.com/MAL-2025-22675/): Malicious code in hotel-c43-project (npm) (malicious package)
- [MAL-2025-22674](https://insights.sbomify.com/MAL-2025-22674/): Malicious code in hotel-byc-project (npm) (malicious package)
- [MAL-2025-22673](https://insights.sbomify.com/MAL-2025-22673/): Malicious code in hotel-banana-fmhr (npm) (malicious package)
- [MAL-2025-22672](https://insights.sbomify.com/MAL-2025-22672/): Malicious code in hotel-apple-banana-bdaxu (npm) (malicious package)
- [MAL-2025-22671](https://insights.sbomify.com/MAL-2025-22671/): Malicious code in hotel-ab7-project (npm) (malicious package)
- [MAL-2025-22670](https://insights.sbomify.com/MAL-2025-22670/): Malicious code in hotel-5wp-project (npm) (malicious package)
- [MAL-2025-2267](https://insights.sbomify.com/MAL-2025-2267/): Malicious code in ngweb (npm) (malicious package)
- [MAL-2025-22669](https://insights.sbomify.com/MAL-2025-22669/): Malicious code in hotel-4w1-project (npm) (malicious package)
- [MAL-2025-22668](https://insights.sbomify.com/MAL-2025-22668/): Malicious code in hotel-2hp-project (npm) (malicious package)
- [MAL-2025-22667](https://insights.sbomify.com/MAL-2025-22667/): Malicious code in hotel-03v-project (npm) (malicious package)
- [MAL-2025-22666](https://insights.sbomify.com/MAL-2025-22666/): Malicious code in hotbeer (npm) (malicious package)
- [MAL-2025-22665](https://insights.sbomify.com/MAL-2025-22665/): Malicious code in hot-decrypt-private-orchestrate-tau (npm) (malicious package)
- [MAL-2025-22664](https://insights.sbomify.com/MAL-2025-22664/): Malicious code in hot-air-thread-minify-assert (npm) (malicious package)
- [MAL-2025-22663](https://insights.sbomify.com/MAL-2025-22663/): Malicious code in hostname_chacker (npm) (malicious package)
- [MAL-2025-22662](https://insights.sbomify.com/MAL-2025-22662/): Malicious code in hosted-hubot (npm) (malicious package)
- [MAL-2025-22661](https://insights.sbomify.com/MAL-2025-22661/): Malicious code in host-demo (npm) (malicious package)
- [MAL-2025-22660](https://insights.sbomify.com/MAL-2025-22660/): Malicious code in horseradish-yam-7jib (npm) (malicious package)
- [MAL-2025-2266](https://insights.sbomify.com/MAL-2025-2266/): Malicious code in mijn-bureau-portal (npm) (malicious package)
- [MAL-2025-22659](https://insights.sbomify.com/MAL-2025-22659/): Malicious code in horseradish-watermelon-f06z (npm) (malicious package)
- [MAL-2025-22658](https://insights.sbomify.com/MAL-2025-22658/): Malicious code in horseradish-supernova-9uzi (npm) (malicious package)
- [MAL-2025-22657](https://insights.sbomify.com/MAL-2025-22657/): Malicious code in horseradish-shack-oqi7 (npm) (malicious package)
- [MAL-2025-22656](https://insights.sbomify.com/MAL-2025-22656/): Malicious code in horseradish-quinoa-cths (npm) (malicious package)
- [MAL-2025-22655](https://insights.sbomify.com/MAL-2025-22655/): Malicious code in horseradish-heliosphere-bjo7 (npm) (malicious package)
- [MAL-2025-22654](https://insights.sbomify.com/MAL-2025-22654/): Malicious code in horseradish-ginger-1r1f (npm) (malicious package)
- [MAL-2025-22653](https://insights.sbomify.com/MAL-2025-22653/): Malicious code in horseradish-elderberry-ll0r (npm) (malicious package)
- [MAL-2025-22652](https://insights.sbomify.com/MAL-2025-22652/): Malicious code in horizon_ydbzk_xdkpx_trill (npm) (malicious package)
- [MAL-2025-22651](https://insights.sbomify.com/MAL-2025-22651/): Malicious code in horizon_tsmnl_vbm7p_unicorn (npm) (malicious package)
- [MAL-2025-22650](https://insights.sbomify.com/MAL-2025-22650/): Malicious code in horizon_oiwy1_2qofz_dream (npm) (malicious package)
- [MAL-2025-2265](https://insights.sbomify.com/MAL-2025-2265/): Malicious code in linear-zapier (npm) (malicious package)
- [MAL-2025-22649](https://insights.sbomify.com/MAL-2025-22649/): Malicious code in horizon_ev4uw_9dmsw_snow (npm) (malicious package)
- [MAL-2025-22648](https://insights.sbomify.com/MAL-2025-22648/): Malicious code in horizon_e4emh_cpwvt_ultraviolet (npm) (malicious package)
- [MAL-2025-22647](https://insights.sbomify.com/MAL-2025-22647/): Malicious code in horizon_arlxn_4xc4j_quasar (npm) (malicious package)
- [MAL-2025-22646](https://insights.sbomify.com/MAL-2025-22646/): Malicious code in horizon_3m5i5_d5cgm_hush (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/861/