# Vulnerabilities published in 2025 - [MAL-2025-22465](https://insights.sbomify.com/MAL-2025-22465/): Malicious code in hkaga-ana (npm) (malicious package) - [MAL-2025-22464](https://insights.sbomify.com/MAL-2025-22464/): Malicious code in hkaga-ama (npm) (malicious package) - [MAL-2025-22463](https://insights.sbomify.com/MAL-2025-22463/): Malicious code in hjvgvgggx (npm) (malicious package) - [MAL-2025-22462](https://insights.sbomify.com/MAL-2025-22462/): Malicious code in hjrivaeclknbouyf (npm) (malicious package) - [MAL-2025-22461](https://insights.sbomify.com/MAL-2025-22461/): Malicious code in hjgsawkkrqdivxeo (npm) (malicious package) - [MAL-2025-22460](https://insights.sbomify.com/MAL-2025-22460/): Malicious code in hiwaydb (npm) (malicious package) - [MAL-2025-2246](https://insights.sbomify.com/MAL-2025-2246/): Malicious code in code-comment-linter (npm) (malicious package) - [MAL-2025-22459](https://insights.sbomify.com/MAL-2025-22459/): Malicious code in hivemed-logic (npm) (malicious package) - [MAL-2025-22458](https://insights.sbomify.com/MAL-2025-22458/): Malicious code in hitler (npm) (malicious package) - [MAL-2025-22457](https://insights.sbomify.com/MAL-2025-22457/): Malicious code in hitground (npm) (malicious package) - [MAL-2025-22456](https://insights.sbomify.com/MAL-2025-22456/): Malicious code in histories (npm) (malicious package) - [MAL-2025-22455](https://insights.sbomify.com/MAL-2025-22455/): Malicious code in histonat (npm) (malicious package) - [MAL-2025-22454](https://insights.sbomify.com/MAL-2025-22454/): Malicious code in hiredo (npm) (malicious package) - [MAL-2025-22453](https://insights.sbomify.com/MAL-2025-22453/): Malicious code in hirake (npm) (malicious package) - [MAL-2025-22452](https://insights.sbomify.com/MAL-2025-22452/): Malicious code in hiptime (npm) (malicious package) - [MAL-2025-22451](https://insights.sbomify.com/MAL-2025-22451/): Malicious code in hipstest (npm) (malicious package) - [MAL-2025-22450](https://insights.sbomify.com/MAL-2025-22450/): Malicious code in hipsterbg (npm) (malicious package) - [MAL-2025-2245](https://insights.sbomify.com/MAL-2025-2245/): Malicious code in chocolatechipjs-shopify (npm) (malicious package) - [MAL-2025-22449](https://insights.sbomify.com/MAL-2025-22449/): Malicious code in hippocms (npm) (malicious package) - [MAL-2025-22448](https://insights.sbomify.com/MAL-2025-22448/): Malicious code in hipmunk (npm) (malicious package) - [MAL-2025-22447](https://insights.sbomify.com/MAL-2025-22447/): Malicious code in hiplib (npm) (malicious package) - [MAL-2025-22446](https://insights.sbomify.com/MAL-2025-22446/): Malicious code in hiot-messaging (npm) (malicious package) - [MAL-2025-22445](https://insights.sbomify.com/MAL-2025-22445/): Malicious code in hiot-api (npm) (malicious package) - [MAL-2025-22444](https://insights.sbomify.com/MAL-2025-22444/): Malicious code in himoysimi (npm) (malicious package) - [MAL-2025-22443](https://insights.sbomify.com/MAL-2025-22443/): Malicious code in hill-undertow-dhf073-project (npm) (malicious package) - [MAL-2025-22442](https://insights.sbomify.com/MAL-2025-22442/): Malicious code in hill-tornado-pds437-project (npm) (malicious package) - [MAL-2025-22441](https://insights.sbomify.com/MAL-2025-22441/): Malicious code in hill-thistle-rdk333-project (npm) (malicious package) - [MAL-2025-22440](https://insights.sbomify.com/MAL-2025-22440/): Malicious code in hill-quasar-ubz623-project (npm) (malicious package) - [MAL-2025-2244](https://insights.sbomify.com/MAL-2025-2244/): Malicious code in bg-todomvc (npm) (malicious package) - [MAL-2025-22439](https://insights.sbomify.com/MAL-2025-22439/): Malicious code in hill-quartz-ysz022-project (npm) (malicious package) - [MAL-2025-22438](https://insights.sbomify.com/MAL-2025-22438/): Malicious code in hill-nugget-xok455-project (npm) (malicious package) - [MAL-2025-22437](https://insights.sbomify.com/MAL-2025-22437/): Malicious code in hill-gorge-huh825-project (npm) (malicious package) - [MAL-2025-22436](https://insights.sbomify.com/MAL-2025-22436/): Malicious code in hill-ecosystem-kdd949-project (npm) (malicious package) - [MAL-2025-22435](https://insights.sbomify.com/MAL-2025-22435/): Malicious code in hill-dragon-vem951-project (npm) (malicious package) - [MAL-2025-22434](https://insights.sbomify.com/MAL-2025-22434/): Malicious code in hill-boulder-izu499-project (npm) (malicious package) - [MAL-2025-22433](https://insights.sbomify.com/MAL-2025-22433/): Malicious code in hilaris (npm) (malicious package) - [MAL-2025-22432](https://insights.sbomify.com/MAL-2025-22432/): Malicious code in hijink (npm) (malicious package) - [MAL-2025-22431](https://insights.sbomify.com/MAL-2025-22431/): Malicious code in hihihiha (npm) (malicious package) - [MAL-2025-22430](https://insights.sbomify.com/MAL-2025-22430/): Malicious code in higirl (npm) (malicious package) - [MAL-2025-2243](https://insights.sbomify.com/MAL-2025-2243/): Malicious code in better_dotenv (npm) (malicious package) - [MAL-2025-22429](https://insights.sbomify.com/MAL-2025-22429/): Malicious code in highliht.js (npm) (malicious package) - [MAL-2025-22428](https://insights.sbomify.com/MAL-2025-22428/): Malicious code in highkick (npm) (malicious package) - [MAL-2025-22427](https://insights.sbomify.com/MAL-2025-22427/): Malicious code in highjump (npm) (malicious package) - [MAL-2025-22426](https://insights.sbomify.com/MAL-2025-22426/): Malicious code in higgs-bellatrix-resolvers-typeorm (npm) (malicious package) - [MAL-2025-22425](https://insights.sbomify.com/MAL-2025-22425/): Malicious code in hifijs (npm) (malicious package) - [MAL-2025-22424](https://insights.sbomify.com/MAL-2025-22424/): Malicious code in hidbase (npm) (malicious package) - [MAL-2025-22423](https://insights.sbomify.com/MAL-2025-22423/): Malicious code in hhotel (npm) (malicious package) - [MAL-2025-22422](https://insights.sbomify.com/MAL-2025-22422/): Malicious code in hhjslib (npm) (malicious package) - [MAL-2025-22421](https://insights.sbomify.com/MAL-2025-22421/): Malicious code in hgfiuythdjfhgff (npm) (malicious package) - [MAL-2025-22420](https://insights.sbomify.com/MAL-2025-22420/): Malicious code in hfwehew (npm) (malicious package) - [MAL-2025-2242](https://insights.sbomify.com/MAL-2025-2242/): Malicious code in bastion-react-app (npm) (malicious package) - [MAL-2025-22419](https://insights.sbomify.com/MAL-2025-22419/): Malicious code in hfjh5sm3jihqkc1toapmcrfkma08ki46 (npm) (malicious package) - [MAL-2025-22418](https://insights.sbomify.com/MAL-2025-22418/): Malicious code in hfexcjvbsimukypz (npm) (malicious package) - [MAL-2025-22417](https://insights.sbomify.com/MAL-2025-22417/): Malicious code in heyhamont (npm) (malicious package) - [MAL-2025-22416](https://insights.sbomify.com/MAL-2025-22416/): Malicious code in hextest (npm) (malicious package) - [MAL-2025-22415](https://insights.sbomify.com/MAL-2025-22415/): Malicious code in hexpacker (npm) (malicious package) - [MAL-2025-22414](https://insights.sbomify.com/MAL-2025-22414/): Malicious code in hexo-iota-betelgeuse-development (npm) (malicious package) - [MAL-2025-22413](https://insights.sbomify.com/MAL-2025-22413/): Malicious code in hexo-fermion-holography-quasarjet (npm) (malicious package) - [MAL-2025-22412](https://insights.sbomify.com/MAL-2025-22412/): Malicious code in hexo-cluster-steganography-jsonp (npm) (malicious package) - [MAL-2025-22411](https://insights.sbomify.com/MAL-2025-22411/): Malicious code in hexkits (npm) (malicious package) - [MAL-2025-22410](https://insights.sbomify.com/MAL-2025-22410/): Malicious code in hexarobot (npm) (malicious package) - [MAL-2025-2241](https://insights.sbomify.com/MAL-2025-2241/): Malicious code in autogestion-aprendizaje (npm) (malicious package) - [MAL-2025-22409](https://insights.sbomify.com/MAL-2025-22409/): Malicious code in hexapong (npm) (malicious package) - [MAL-2025-22408](https://insights.sbomify.com/MAL-2025-22408/): Malicious code in hexagone (npm) (malicious package) - [MAL-2025-22407](https://insights.sbomify.com/MAL-2025-22407/): Malicious code in hexabump (npm) (malicious package) - [MAL-2025-22406](https://insights.sbomify.com/MAL-2025-22406/): Malicious code in hewotuan (npm) (malicious package) - [MAL-2025-22405](https://insights.sbomify.com/MAL-2025-22405/): Malicious code in hevajra (npm) (malicious package) - [MAL-2025-22404](https://insights.sbomify.com/MAL-2025-22404/): Malicious code in heumon (npm) (malicious package) - [MAL-2025-22403](https://insights.sbomify.com/MAL-2025-22403/): Malicious code in hesseso (npm) (malicious package) - [MAL-2025-22402](https://insights.sbomify.com/MAL-2025-22402/): Malicious code in herotale (npm) (malicious package) - [MAL-2025-22401](https://insights.sbomify.com/MAL-2025-22401/): Malicious code in herokuup (npm) (malicious package) - [MAL-2025-22400](https://insights.sbomify.com/MAL-2025-22400/): Malicious code in herokupy (npm) (malicious package) - [MAL-2025-2240](https://insights.sbomify.com/MAL-2025-2240/): Malicious code in atm-event-app (npm) (malicious package) - [MAL-2025-224](https://insights.sbomify.com/MAL-2025-224/): Malicious code in prem-downloader (npm) (malicious package) - [MAL-2025-22399](https://insights.sbomify.com/MAL-2025-22399/): Malicious code in heroku-sudo (npm) (malicious package) - [MAL-2025-22398](https://insights.sbomify.com/MAL-2025-22398/): Malicious code in hermes-paleontology-taurus-wavefunction (npm) (malicious package) - [MAL-2025-22397](https://insights.sbomify.com/MAL-2025-22397/): Malicious code in hermes-orbit-eslint-config-comet (npm) (malicious package) - [MAL-2025-22396](https://insights.sbomify.com/MAL-2025-22396/): Malicious code in hermes-fornax-typeorm-shelljs (npm) (malicious package) - [MAL-2025-22395](https://insights.sbomify.com/MAL-2025-22395/): Malicious code in hermes-epimetheus-meteor-commitlint (npm) (malicious package) - [MAL-2025-22394](https://insights.sbomify.com/MAL-2025-22394/): Malicious code in hermes-celeste-react-bootstrap-nodejs (npm) (malicious package) - [MAL-2025-22393](https://insights.sbomify.com/MAL-2025-22393/): Malicious code in herkcoin (npm) (malicious package) - [MAL-2025-22392](https://insights.sbomify.com/MAL-2025-22392/): Malicious code in hereaccount-nodejs (npm) (malicious package) - [MAL-2025-22391](https://insights.sbomify.com/MAL-2025-22391/): Malicious code in herdit (npm) (malicious package) - [MAL-2025-22390](https://insights.sbomify.com/MAL-2025-22390/): Malicious code in hercules-changelog-tectonic-restart (npm) (malicious package) - [MAL-2025-2239](https://insights.sbomify.com/MAL-2025-2239/): Malicious code in app-register (npm) (malicious package) - [MAL-2025-22389](https://insights.sbomify.com/MAL-2025-22389/): Malicious code in hercules-centaurus-oberon-sync (npm) (malicious package) - [MAL-2025-22388](https://insights.sbomify.com/MAL-2025-22388/): Malicious code in hercules-build-metalsmith-graviton (npm) (malicious package) - [MAL-2025-22387](https://insights.sbomify.com/MAL-2025-22387/): Malicious code in heqetlabs (npm) (malicious package) - [MAL-2025-22386](https://insights.sbomify.com/MAL-2025-22386/): Malicious code in hendra-taiwan91-sukiwir (npm) (malicious package) - [MAL-2025-22385](https://insights.sbomify.com/MAL-2025-22385/): Malicious code in hendra-semur33-breki (npm) (malicious package) - [MAL-2025-22384](https://insights.sbomify.com/MAL-2025-22384/): Malicious code in hendra-saguer49-breki (npm) (malicious package) - [MAL-2025-22383](https://insights.sbomify.com/MAL-2025-22383/): Malicious code in hendra-miemee87-breki (npm) (malicious package) - [MAL-2025-22382](https://insights.sbomify.com/MAL-2025-22382/): Malicious code in hendra-brengkes62-breki (npm) (malicious package) - [MAL-2025-22381](https://insights.sbomify.com/MAL-2025-22381/): Malicious code in hemnet (npm) (malicious package) - [MAL-2025-22380](https://insights.sbomify.com/MAL-2025-22380/): Malicious code in helptools (npm) (malicious package) - [MAL-2025-2238](https://insights.sbomify.com/MAL-2025-2238/): Malicious code in angularonlineauthclient (npm) (malicious package) - [MAL-2025-22379](https://insights.sbomify.com/MAL-2025-22379/): Malicious code in helptml (npm) (malicious package) - [MAL-2025-22378](https://insights.sbomify.com/MAL-2025-22378/): Malicious code in helowrold (npm) (malicious package) - [MAL-2025-22377](https://insights.sbomify.com/MAL-2025-22377/): Malicious code in helmet-spectroscopy-nucleosynthesis-jsonp (npm) (malicious package) - [MAL-2025-22376](https://insights.sbomify.com/MAL-2025-22376/): Malicious code in helmet-lepton-baryon-gravitationalwave (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/864/