# Vulnerabilities published in 2025


- [MAL-2025-22555](https://insights.sbomify.com/MAL-2025-22555/): Malicious code in honeycomb-vulture-tbp716-project (npm) (malicious package)
- [MAL-2025-22554](https://insights.sbomify.com/MAL-2025-22554/): Malicious code in honeycomb-tulip-zie836-project (npm) (malicious package)
- [MAL-2025-22553](https://insights.sbomify.com/MAL-2025-22553/): Malicious code in honeycomb-topaz-hgl525-project (npm) (malicious package)
- [MAL-2025-22552](https://insights.sbomify.com/MAL-2025-22552/): Malicious code in honeycomb-swan-nek326-project (npm) (malicious package)
- [MAL-2025-22551](https://insights.sbomify.com/MAL-2025-22551/): Malicious code in honeycomb-sapphire-vgy006-project (npm) (malicious package)
- [MAL-2025-22550](https://insights.sbomify.com/MAL-2025-22550/): Malicious code in honeycomb-ripple-rmo970-project (npm) (malicious package)
- [MAL-2025-2255](https://insights.sbomify.com/MAL-2025-2255/): Malicious code in ember-js-buy (npm) (malicious package)
- [MAL-2025-22549](https://insights.sbomify.com/MAL-2025-22549/): Malicious code in honeycomb-peacock-oys396-project (npm) (malicious package)
- [MAL-2025-22548](https://insights.sbomify.com/MAL-2025-22548/): Malicious code in honeycomb-opaline-mcv575-project (npm) (malicious package)
- [MAL-2025-22547](https://insights.sbomify.com/MAL-2025-22547/): Malicious code in honeycomb-octopus-ydn536-project (npm) (malicious package)
- [MAL-2025-22546](https://insights.sbomify.com/MAL-2025-22546/): Malicious code in honeycomb-lava-hxw725-project (npm) (malicious package)
- [MAL-2025-22545](https://insights.sbomify.com/MAL-2025-22545/): Malicious code in honeycomb-koala-hro888-project (npm) (malicious package)
- [MAL-2025-22544](https://insights.sbomify.com/MAL-2025-22544/): Malicious code in honeycomb-kaleidoscope-jmn345-project (npm) (malicious package)
- [MAL-2025-22543](https://insights.sbomify.com/MAL-2025-22543/): Malicious code in honeycomb-jasmine-uho811-project (npm) (malicious package)
- [MAL-2025-22542](https://insights.sbomify.com/MAL-2025-22542/): Malicious code in honeycomb-jasmine-cjr567-project (npm) (malicious package)
- [MAL-2025-22541](https://insights.sbomify.com/MAL-2025-22541/): Malicious code in honeycomb-glade-ckc132-project (npm) (malicious package)
- [MAL-2025-22540](https://insights.sbomify.com/MAL-2025-22540/): Malicious code in honeycomb-glacier-hye029-project (npm) (malicious package)
- [MAL-2025-2254](https://insights.sbomify.com/MAL-2025-2254/): Malicious code in ee-server-auth-nodejs (npm) (malicious package)
- [MAL-2025-22539](https://insights.sbomify.com/MAL-2025-22539/): Malicious code in honeycomb-butterfly-yrp574-project (npm) (malicious package)
- [MAL-2025-22538](https://insights.sbomify.com/MAL-2025-22538/): Malicious code in honeybird (npm) (malicious package)
- [MAL-2025-22537](https://insights.sbomify.com/MAL-2025-22537/): Malicious code in honeybase (npm) (malicious package)
- [MAL-2025-22536](https://insights.sbomify.com/MAL-2025-22536/): Malicious code in honey_ty0o2_jv1xm_infinity (npm) (malicious package)
- [MAL-2025-22535](https://insights.sbomify.com/MAL-2025-22535/): Malicious code in honey-zenith-vzw435-project (npm) (malicious package)
- [MAL-2025-22534](https://insights.sbomify.com/MAL-2025-22534/): Malicious code in honey-yacht-ksy900-project (npm) (malicious package)
- [MAL-2025-22533](https://insights.sbomify.com/MAL-2025-22533/): Malicious code in honey-xerox-scg393-project (npm) (malicious package)
- [MAL-2025-22532](https://insights.sbomify.com/MAL-2025-22532/): Malicious code in honey-wisp-pws898-project (npm) (malicious package)
- [MAL-2025-22531](https://insights.sbomify.com/MAL-2025-22531/): Malicious code in honey-volcano-hki072-project (npm) (malicious package)
- [MAL-2025-22530](https://insights.sbomify.com/MAL-2025-22530/): Malicious code in honey-tundra-tah530-project (npm) (malicious package)
- [MAL-2025-2253](https://insights.sbomify.com/MAL-2025-2253/): Malicious code in dt-helper (npm) (malicious package)
- [MAL-2025-22529](https://insights.sbomify.com/MAL-2025-22529/): Malicious code in honey-quasar-gwd409-project (npm) (malicious package)
- [MAL-2025-22528](https://insights.sbomify.com/MAL-2025-22528/): Malicious code in honey-penguin-czs624-project (npm) (malicious package)
- [MAL-2025-22527](https://insights.sbomify.com/MAL-2025-22527/): Malicious code in honey-nymph-yce559-project (npm) (malicious package)
- [MAL-2025-22526](https://insights.sbomify.com/MAL-2025-22526/): Malicious code in honey-mist-ary569-project (npm) (malicious package)
- [MAL-2025-22525](https://insights.sbomify.com/MAL-2025-22525/): Malicious code in honey-jade-qcr844-project (npm) (malicious package)
- [MAL-2025-22524](https://insights.sbomify.com/MAL-2025-22524/): Malicious code in honey-iris-zki944-project (npm) (malicious package)
- [MAL-2025-22523](https://insights.sbomify.com/MAL-2025-22523/): Malicious code in honey-infinity-ooh364-project (npm) (malicious package)
- [MAL-2025-22522](https://insights.sbomify.com/MAL-2025-22522/): Malicious code in honey-cliff-tnd256-project (npm) (malicious package)
- [MAL-2025-22521](https://insights.sbomify.com/MAL-2025-22521/): Malicious code in honey-acorn-pec137-project (npm) (malicious package)
- [MAL-2025-22520](https://insights.sbomify.com/MAL-2025-22520/): Malicious code in homomaid (npm) (malicious package)
- [MAL-2025-2252](https://insights.sbomify.com/MAL-2025-2252/): Malicious code in dir-size-analyzer (npm) (malicious package)
- [MAL-2025-22519](https://insights.sbomify.com/MAL-2025-22519/): Malicious code in homoglyphs (npm) (malicious package)
- [MAL-2025-22518](https://insights.sbomify.com/MAL-2025-22518/): Malicious code in homey-device-discovery (npm) (malicious package)
- [MAL-2025-22517](https://insights.sbomify.com/MAL-2025-22517/): Malicious code in homework-module-14 (npm) (malicious package)
- [MAL-2025-22516](https://insights.sbomify.com/MAL-2025-22516/): Malicious code in homepod (npm) (malicious package)
- [MAL-2025-22515](https://insights.sbomify.com/MAL-2025-22515/): Malicious code in homematic-js-km200 (npm) (malicious package)
- [MAL-2025-22514](https://insights.sbomify.com/MAL-2025-22514/): Malicious code in homebridge-platform-smartac-f659675 (npm) (malicious package)
- [MAL-2025-22513](https://insights.sbomify.com/MAL-2025-22513/): Malicious code in homebridge-dyson (npm) (malicious package)
- [MAL-2025-22512](https://insights.sbomify.com/MAL-2025-22512/): Malicious code in homebridge-433mhz-light (npm) (malicious package)
- [MAL-2025-22511](https://insights.sbomify.com/MAL-2025-22511/): Malicious code in home-device-inventory (npm) (malicious package)
- [MAL-2025-22510](https://insights.sbomify.com/MAL-2025-22510/): Malicious code in homals (npm) (malicious package)
- [MAL-2025-2251](https://insights.sbomify.com/MAL-2025-2251/): Malicious code in data-ext-extra (npm) (malicious package)
- [MAL-2025-22509](https://insights.sbomify.com/MAL-2025-22509/): Malicious code in holography-heka-mesosphere-biomimicry (npm) (malicious package)
- [MAL-2025-22508](https://insights.sbomify.com/MAL-2025-22508/): Malicious code in holography-ganymede-proxima-hexo (npm) (malicious package)
- [MAL-2025-22507](https://insights.sbomify.com/MAL-2025-22507/): Malicious code in holography-entanglement-ignite-chalk (npm) (malicious package)
- [MAL-2025-22506](https://insights.sbomify.com/MAL-2025-22506/): Malicious code in holography-charon-axios-development (npm) (malicious package)
- [MAL-2025-22505](https://insights.sbomify.com/MAL-2025-22505/): Malicious code in hologramm (npm) (malicious package)
- [MAL-2025-22504](https://insights.sbomify.com/MAL-2025-22504/): Malicious code in hologram-taurus-lightyear-auth0 (npm) (malicious package)
- [MAL-2025-22503](https://insights.sbomify.com/MAL-2025-22503/): Malicious code in hologram-oscillation-rehype-await (npm) (malicious package)
- [MAL-2025-22502](https://insights.sbomify.com/MAL-2025-22502/): Malicious code in hologram-meteor-scorpius-jabbah (npm) (malicious package)
- [MAL-2025-22501](https://insights.sbomify.com/MAL-2025-22501/): Malicious code in hologram-ini-elara-dysonswarm (npm) (malicious package)
- [MAL-2025-22500](https://insights.sbomify.com/MAL-2025-22500/): Malicious code in hologram-cors-quito-string (npm) (malicious package)
- [MAL-2025-2250](https://insights.sbomify.com/MAL-2025-2250/): Malicious code in custom-networking-behavior (npm) (malicious package)
- [MAL-2025-225](https://insights.sbomify.com/MAL-2025-225/): Malicious code in prem-facebook (npm) (malicious package)
- [MAL-2025-22499](https://insights.sbomify.com/MAL-2025-22499/): Malicious code in hollywood-hdtv-shield-server (npm) (malicious package)
- [MAL-2025-22498](https://insights.sbomify.com/MAL-2025-22498/): Malicious code in hollow-waterfall-bez687-project (npm) (malicious package)
- [MAL-2025-22497](https://insights.sbomify.com/MAL-2025-22497/): Malicious code in hollow-utopia-sex755-project (npm) (malicious package)
- [MAL-2025-22496](https://insights.sbomify.com/MAL-2025-22496/): Malicious code in hollow-umbra-xdi001-project (npm) (malicious package)
- [MAL-2025-22495](https://insights.sbomify.com/MAL-2025-22495/): Malicious code in hollow-tornado-itq402-project (npm) (malicious package)
- [MAL-2025-22494](https://insights.sbomify.com/MAL-2025-22494/): Malicious code in hollow-moose-aeu448-project (npm) (malicious package)
- [MAL-2025-22493](https://insights.sbomify.com/MAL-2025-22493/): Malicious code in hollow-lagoon-xew578-project (npm) (malicious package)
- [MAL-2025-22492](https://insights.sbomify.com/MAL-2025-22492/): Malicious code in hollow-falcon-gzs027-project (npm) (malicious package)
- [MAL-2025-22491](https://insights.sbomify.com/MAL-2025-22491/): Malicious code in hollow-elephant-rdz573-project (npm) (malicious package)
- [MAL-2025-22490](https://insights.sbomify.com/MAL-2025-22490/): Malicious code in hollow-ecosystem-rth157-project (npm) (malicious package)
- [MAL-2025-2249](https://insights.sbomify.com/MAL-2025-2249/): Malicious code in cta-agency-backoffice (npm) (malicious package)
- [MAL-2025-22489](https://insights.sbomify.com/MAL-2025-22489/): Malicious code in hollow-dewdrop-aic413-project (npm) (malicious package)
- [MAL-2025-22488](https://insights.sbomify.com/MAL-2025-22488/): Malicious code in hollow-asteroid-svq681-project (npm) (malicious package)
- [MAL-2025-22487](https://insights.sbomify.com/MAL-2025-22487/): Malicious code in holhos (npm) (malicious package)
- [MAL-2025-22486](https://insights.sbomify.com/MAL-2025-22486/): Malicious code in holesaw (npm) (malicious package)
- [MAL-2025-22485](https://insights.sbomify.com/MAL-2025-22485/): Malicious code in holdingread-paypal (npm) (malicious package)
- [MAL-2025-22484](https://insights.sbomify.com/MAL-2025-22484/): Malicious code in hockeygm (npm) (malicious package)
- [MAL-2025-22483](https://insights.sbomify.com/MAL-2025-22483/): Malicious code in hocizrfnkskmvygw (npm) (malicious package)
- [MAL-2025-22482](https://insights.sbomify.com/MAL-2025-22482/): Malicious code in hoauth (npm) (malicious package)
- [MAL-2025-22481](https://insights.sbomify.com/MAL-2025-22481/): Malicious code in hn-facets-ng-core (npm) (malicious package)
- [MAL-2025-22480](https://insights.sbomify.com/MAL-2025-22480/): Malicious code in hmtqkr (npm) (malicious package)
- [MAL-2025-2248](https://insights.sbomify.com/MAL-2025-2248/): Malicious code in crd-frontend-login (npm) (malicious package)
- [MAL-2025-22479](https://insights.sbomify.com/MAL-2025-22479/): Malicious code in hm-graphs (npm) (malicious package)
- [MAL-2025-22478](https://insights.sbomify.com/MAL-2025-22478/): Malicious code in hltstudy (npm) (malicious package)
- [MAL-2025-22477](https://insights.sbomify.com/MAL-2025-22477/): Malicious code in hlscore (npm) (malicious package)
- [MAL-2025-22476](https://insights.sbomify.com/MAL-2025-22476/): Malicious code in hl7.fhir.us.davinci-hrex (npm) (malicious package)
- [MAL-2025-22475](https://insights.sbomify.com/MAL-2025-22475/): Malicious code in hl7.fhir.us.core (npm) (malicious package)
- [MAL-2025-22474](https://insights.sbomify.com/MAL-2025-22474/): Malicious code in hl7.fhir.r4.core (npm) (malicious package)
- [MAL-2025-22473](https://insights.sbomify.com/MAL-2025-22473/): Malicious code in hktoolkit (npm) (malicious package)
- [MAL-2025-22472](https://insights.sbomify.com/MAL-2025-22472/): Malicious code in hkpmfygezqtjdras (npm) (malicious package)
- [MAL-2025-22471](https://insights.sbomify.com/MAL-2025-22471/): Malicious code in hkjfhgdk (npm) (malicious package)
- [MAL-2025-22470](https://insights.sbomify.com/MAL-2025-22470/): Malicious code in hkjdfhdsfhjkhsdfkhg (npm) (malicious package)
- [MAL-2025-2247](https://insights.sbomify.com/MAL-2025-2247/): Malicious code in cpp-spa-loginad (npm) (malicious package)
- [MAL-2025-22469](https://insights.sbomify.com/MAL-2025-22469/): Malicious code in hkit (npm) (malicious package)
- [MAL-2025-22468](https://insights.sbomify.com/MAL-2025-22468/): Malicious code in hkhkhk (npm) (malicious package)
- [MAL-2025-22467](https://insights.sbomify.com/MAL-2025-22467/): Malicious code in hkdoekpmlfcjygtx (npm) (malicious package)
- [MAL-2025-22466](https://insights.sbomify.com/MAL-2025-22466/): Malicious code in hkbudget (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/863/