# Vulnerabilities published in 2025


- [MAL-2025-22645](https://insights.sbomify.com/MAL-2025-22645/): Malicious code in horizon_0cirm_dz4mp_giraffe (npm) (malicious package)
- [MAL-2025-22644](https://insights.sbomify.com/MAL-2025-22644/): Malicious code in horizon-xylophone-fsj386-project (npm) (malicious package)
- [MAL-2025-22643](https://insights.sbomify.com/MAL-2025-22643/): Malicious code in horizon-vdqrx-5z7dm-ember-project (npm) (malicious package)
- [MAL-2025-22642](https://insights.sbomify.com/MAL-2025-22642/): Malicious code in horizon-utgdy-61qus-mystic-project (npm) (malicious package)
- [MAL-2025-22641](https://insights.sbomify.com/MAL-2025-22641/): Malicious code in horizon-sp (npm) (malicious package)
- [MAL-2025-22640](https://insights.sbomify.com/MAL-2025-22640/): Malicious code in horizon-octopus-rhk645-project (npm) (malicious package)
- [MAL-2025-2264](https://insights.sbomify.com/MAL-2025-2264/): Malicious code in linear-open-issue (npm) (malicious package)
- [MAL-2025-22639](https://insights.sbomify.com/MAL-2025-22639/): Malicious code in horizon-mebjh-bw69m-song-project (npm) (malicious package)
- [MAL-2025-22638](https://insights.sbomify.com/MAL-2025-22638/): Malicious code in horizon-jc8hn-tnmjo-comet-project (npm) (malicious package)
- [MAL-2025-22637](https://insights.sbomify.com/MAL-2025-22637/): Malicious code in horizon-he4a0-y31v1-karma-project (npm) (malicious package)
- [MAL-2025-22636](https://insights.sbomify.com/MAL-2025-22636/): Malicious code in horizon-gorilla-zst235-project (npm) (malicious package)
- [MAL-2025-22635](https://insights.sbomify.com/MAL-2025-22635/): Malicious code in horizon-fr53a-wyawp-frost-project (npm) (malicious package)
- [MAL-2025-22634](https://insights.sbomify.com/MAL-2025-22634/): Malicious code in horizon-fern-syz975-project (npm) (malicious package)
- [MAL-2025-22633](https://insights.sbomify.com/MAL-2025-22633/): Malicious code in horizon-fern-bro318-project (npm) (malicious package)
- [MAL-2025-22632](https://insights.sbomify.com/MAL-2025-22632/): Malicious code in horizon-dragon-khi299-project (npm) (malicious package)
- [MAL-2025-22631](https://insights.sbomify.com/MAL-2025-22631/): Malicious code in horizon-df4f1-ig352-juniper-project (npm) (malicious package)
- [MAL-2025-22630](https://insights.sbomify.com/MAL-2025-22630/): Malicious code in horizon-7q1v0-dpx1u-nebula-project (npm) (malicious package)
- [MAL-2025-2263](https://insights.sbomify.com/MAL-2025-2263/): Malicious code in linear-file-upload-example (npm) (malicious package)
- [MAL-2025-22629](https://insights.sbomify.com/MAL-2025-22629/): Malicious code in horadric.js (npm) (malicious package)
- [MAL-2025-22628](https://insights.sbomify.com/MAL-2025-22628/): Malicious code in hoptimist (npm) (malicious package)
- [MAL-2025-22627](https://insights.sbomify.com/MAL-2025-22627/): Malicious code in hopital (npm) (malicious package)
- [MAL-2025-22626](https://insights.sbomify.com/MAL-2025-22626/): Malicious code in hope-widget-xyz (npm) (malicious package)
- [MAL-2025-22625](https://insights.sbomify.com/MAL-2025-22625/): Malicious code in hoonshow (npm) (malicious package)
- [MAL-2025-22624](https://insights.sbomify.com/MAL-2025-22624/): Malicious code in hoomba (npm) (malicious package)
- [MAL-2025-22623](https://insights.sbomify.com/MAL-2025-22623/): Malicious code in hookie.js (npm) (malicious package)
- [MAL-2025-22622](https://insights.sbomify.com/MAL-2025-22622/): Malicious code in hooka-tools (npm) (malicious package)
- [MAL-2025-22621](https://insights.sbomify.com/MAL-2025-22621/): Malicious code in hook-listen-test (npm) (malicious package)
- [MAL-2025-22620](https://insights.sbomify.com/MAL-2025-22620/): Malicious code in hoodstats (npm) (malicious package)
- [MAL-2025-2262](https://insights.sbomify.com/MAL-2025-2262/): Malicious code in json-schema-verify (npm) (malicious package)
- [MAL-2025-22619](https://insights.sbomify.com/MAL-2025-22619/): Malicious code in honrphys (npm) (malicious package)
- [MAL-2025-22618](https://insights.sbomify.com/MAL-2025-22618/): Malicious code in honeydew-yankee-ubpq (npm) (malicious package)
- [MAL-2025-22617](https://insights.sbomify.com/MAL-2025-22617/): Malicious code in honeydew-yankee-mthv (npm) (malicious package)
- [MAL-2025-22616](https://insights.sbomify.com/MAL-2025-22616/): Malicious code in honeydew-yankee-bravo-wjosv (npm) (malicious package)
- [MAL-2025-22615](https://insights.sbomify.com/MAL-2025-22615/): Malicious code in honeydew-xray-papa-xntxv (npm) (malicious package)
- [MAL-2025-22614](https://insights.sbomify.com/MAL-2025-22614/): Malicious code in honeydew-xqz-project (npm) (malicious package)
- [MAL-2025-22613](https://insights.sbomify.com/MAL-2025-22613/): Malicious code in honeydew-xigua-ieqf (npm) (malicious package)
- [MAL-2025-22612](https://insights.sbomify.com/MAL-2025-22612/): Malicious code in honeydew-xigua-gqho (npm) (malicious package)
- [MAL-2025-22611](https://insights.sbomify.com/MAL-2025-22611/): Malicious code in honeydew-xigua-aynr (npm) (malicious package)
- [MAL-2025-22610](https://insights.sbomify.com/MAL-2025-22610/): Malicious code in honeydew-vvb-project (npm) (malicious package)
- [MAL-2025-2261](https://insights.sbomify.com/MAL-2025-2261/): Malicious code in init-spa (npm) (malicious package)
- [MAL-2025-22609](https://insights.sbomify.com/MAL-2025-22609/): Malicious code in honeydew-victor-november-ibkty (npm) (malicious package)
- [MAL-2025-22608](https://insights.sbomify.com/MAL-2025-22608/): Malicious code in honeydew-victor-cherry-lalwt (npm) (malicious package)
- [MAL-2025-22607](https://insights.sbomify.com/MAL-2025-22607/): Malicious code in honeydew-vanilla-xigua-injij (npm) (malicious package)
- [MAL-2025-22606](https://insights.sbomify.com/MAL-2025-22606/): Malicious code in honeydew-vanilla-c6ge (npm) (malicious package)
- [MAL-2025-22605](https://insights.sbomify.com/MAL-2025-22605/): Malicious code in honeydew-va5-project (npm) (malicious package)
- [MAL-2025-22604](https://insights.sbomify.com/MAL-2025-22604/): Malicious code in honeydew-ugli-5jbd (npm) (malicious package)
- [MAL-2025-22603](https://insights.sbomify.com/MAL-2025-22603/): Malicious code in honeydew-tangerine-xray-heqld (npm) (malicious package)
- [MAL-2025-22602](https://insights.sbomify.com/MAL-2025-22602/): Malicious code in honeydew-tangerine-whiskey-ormij (npm) (malicious package)
- [MAL-2025-22601](https://insights.sbomify.com/MAL-2025-22601/): Malicious code in honeydew-romeo-nzgg (npm) (malicious package)
- [MAL-2025-22600](https://insights.sbomify.com/MAL-2025-22600/): Malicious code in honeydew-rjx-project (npm) (malicious package)
- [MAL-2025-2260](https://insights.sbomify.com/MAL-2025-2260/): Malicious code in image-watermarks (npm) (malicious package)
- [MAL-2025-226](https://insights.sbomify.com/MAL-2025-226/): Malicious code in prem-fb-downloader (npm) (malicious package)
- [MAL-2025-22599](https://insights.sbomify.com/MAL-2025-22599/): Malicious code in honeydew-rj9-project (npm) (malicious package)
- [MAL-2025-22598](https://insights.sbomify.com/MAL-2025-22598/): Malicious code in honeydew-raspberry-lcxj (npm) (malicious package)
- [MAL-2025-22597](https://insights.sbomify.com/MAL-2025-22597/): Malicious code in honeydew-quebec-xdpl (npm) (malicious package)
- [MAL-2025-22596](https://insights.sbomify.com/MAL-2025-22596/): Malicious code in honeydew-pqv-project (npm) (malicious package)
- [MAL-2025-22595](https://insights.sbomify.com/MAL-2025-22595/): Malicious code in honeydew-papaya-kjuh (npm) (malicious package)
- [MAL-2025-22594](https://insights.sbomify.com/MAL-2025-22594/): Malicious code in honeydew-orange-vnin (npm) (malicious package)
- [MAL-2025-22593](https://insights.sbomify.com/MAL-2025-22593/): Malicious code in honeydew-orange-juliet-yroxo (npm) (malicious package)
- [MAL-2025-22592](https://insights.sbomify.com/MAL-2025-22592/): Malicious code in honeydew-orange-isyn (npm) (malicious package)
- [MAL-2025-22591](https://insights.sbomify.com/MAL-2025-22591/): Malicious code in honeydew-oe7-project (npm) (malicious package)
- [MAL-2025-22590](https://insights.sbomify.com/MAL-2025-22590/): Malicious code in honeydew-nzj-project (npm) (malicious package)
- [MAL-2025-2259](https://insights.sbomify.com/MAL-2025-2259/): Malicious code in gss.survey.application (npm) (malicious package)
- [MAL-2025-22589](https://insights.sbomify.com/MAL-2025-22589/): Malicious code in honeydew-nutmeg-wc4w (npm) (malicious package)
- [MAL-2025-22588](https://insights.sbomify.com/MAL-2025-22588/): Malicious code in honeydew-november-rnbx (npm) (malicious package)
- [MAL-2025-22587](https://insights.sbomify.com/MAL-2025-22587/): Malicious code in honeydew-n6l-project (npm) (malicious package)
- [MAL-2025-22586](https://insights.sbomify.com/MAL-2025-22586/): Malicious code in honeydew-mike-zulu-ncvvt (npm) (malicious package)
- [MAL-2025-22585](https://insights.sbomify.com/MAL-2025-22585/): Malicious code in honeydew-mike-ltcl (npm) (malicious package)
- [MAL-2025-22584](https://insights.sbomify.com/MAL-2025-22584/): Malicious code in honeydew-mango-57pl (npm) (malicious package)
- [MAL-2025-22583](https://insights.sbomify.com/MAL-2025-22583/): Malicious code in honeydew-lemon-olij (npm) (malicious package)
- [MAL-2025-22582](https://insights.sbomify.com/MAL-2025-22582/): Malicious code in honeydew-l9d-project (npm) (malicious package)
- [MAL-2025-22581](https://insights.sbomify.com/MAL-2025-22581/): Malicious code in honeydew-kkf-project (npm) (malicious package)
- [MAL-2025-22580](https://insights.sbomify.com/MAL-2025-22580/): Malicious code in honeydew-kilo-kiwi-qhdhe (npm) (malicious package)
- [MAL-2025-2258](https://insights.sbomify.com/MAL-2025-2258/): Malicious code in gh-node-module-generatebom (npm) (malicious package)
- [MAL-2025-22579](https://insights.sbomify.com/MAL-2025-22579/): Malicious code in honeydew-juliet-delta-umiqg (npm) (malicious package)
- [MAL-2025-22578](https://insights.sbomify.com/MAL-2025-22578/): Malicious code in honeydew-iceberg-gelu (npm) (malicious package)
- [MAL-2025-22577](https://insights.sbomify.com/MAL-2025-22577/): Malicious code in honeydew-grape-lrdy (npm) (malicious package)
- [MAL-2025-22576](https://insights.sbomify.com/MAL-2025-22576/): Malicious code in honeydew-golf-gkqb (npm) (malicious package)
- [MAL-2025-22575](https://insights.sbomify.com/MAL-2025-22575/): Malicious code in honeydew-f57-project (npm) (malicious package)
- [MAL-2025-22574](https://insights.sbomify.com/MAL-2025-22574/): Malicious code in honeydew-ekg-project (npm) (malicious package)
- [MAL-2025-22573](https://insights.sbomify.com/MAL-2025-22573/): Malicious code in honeydew-echo-ausc (npm) (malicious package)
- [MAL-2025-22572](https://insights.sbomify.com/MAL-2025-22572/): Malicious code in honeydew-dby-project (npm) (malicious package)
- [MAL-2025-22571](https://insights.sbomify.com/MAL-2025-22571/): Malicious code in honeydew-date-tango-eyggp (npm) (malicious package)
- [MAL-2025-22570](https://insights.sbomify.com/MAL-2025-22570/): Malicious code in honeydew-date-srmf (npm) (malicious package)
- [MAL-2025-2257](https://insights.sbomify.com/MAL-2025-2257/): Malicious code in example-nodejs-express (npm) (malicious package)
- [MAL-2025-22569](https://insights.sbomify.com/MAL-2025-22569/): Malicious code in honeydew-date-mango-asrqr (npm) (malicious package)
- [MAL-2025-22568](https://insights.sbomify.com/MAL-2025-22568/): Malicious code in honeydew-car-qi7n (npm) (malicious package)
- [MAL-2025-22567](https://insights.sbomify.com/MAL-2025-22567/): Malicious code in honeydew-bravo-ptah (npm) (malicious package)
- [MAL-2025-22566](https://insights.sbomify.com/MAL-2025-22566/): Malicious code in honeydew-bravo-papa-zttfg (npm) (malicious package)
- [MAL-2025-22565](https://insights.sbomify.com/MAL-2025-22565/): Malicious code in honeydew-bravo-4aez (npm) (malicious package)
- [MAL-2025-22564](https://insights.sbomify.com/MAL-2025-22564/): Malicious code in honeydew-banana-xxoz (npm) (malicious package)
- [MAL-2025-22563](https://insights.sbomify.com/MAL-2025-22563/): Malicious code in honeydew-banana-dlbc (npm) (malicious package)
- [MAL-2025-22562](https://insights.sbomify.com/MAL-2025-22562/): Malicious code in honeydew-a8v-project (npm) (malicious package)
- [MAL-2025-22561](https://insights.sbomify.com/MAL-2025-22561/): Malicious code in honeydew-9xd-project (npm) (malicious package)
- [MAL-2025-22560](https://insights.sbomify.com/MAL-2025-22560/): Malicious code in honeydew-6pp-project (npm) (malicious package)
- [MAL-2025-2256](https://insights.sbomify.com/MAL-2025-2256/): Malicious code in env-check-helper (npm) (malicious package)
- [MAL-2025-22559](https://insights.sbomify.com/MAL-2025-22559/): Malicious code in honeydew-411-project (npm) (malicious package)
- [MAL-2025-22558](https://insights.sbomify.com/MAL-2025-22558/): Malicious code in honeydew-27r-project (npm) (malicious package)
- [MAL-2025-22557](https://insights.sbomify.com/MAL-2025-22557/): Malicious code in honeydew-0m2-project (npm) (malicious package)
- [MAL-2025-22556](https://insights.sbomify.com/MAL-2025-22556/): Malicious code in honeycomb-vulture-zfl489-project (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/862/