# Vulnerabilities published in 2025 - [MAL-2025-22375](https://insights.sbomify.com/MAL-2025-22375/): Malicious code in helmet-framework-concurrently-jovian (npm) (malicious package) - [MAL-2025-22374](https://insights.sbomify.com/MAL-2025-22374/): Malicious code in helmet-bellatrix-kastra-pulsar (npm) (malicious package) - [MAL-2025-22373](https://insights.sbomify.com/MAL-2025-22373/): Malicious code in helmelar (npm) (malicious package) - [MAL-2025-22372](https://insights.sbomify.com/MAL-2025-22372/): Malicious code in hellstorm (npm) (malicious package) - [MAL-2025-22371](https://insights.sbomify.com/MAL-2025-22371/): Malicious code in hellonew (npm) (malicious package) - [MAL-2025-22370](https://insights.sbomify.com/MAL-2025-22370/): Malicious code in helloModule (npm) (malicious package) - [MAL-2025-2237](https://insights.sbomify.com/MAL-2025-2237/): Malicious code in ai-verify-shared-library (npm) (malicious package) - [MAL-2025-22369](https://insights.sbomify.com/MAL-2025-22369/): Malicious code in hellomav (npm) (malicious package) - [MAL-2025-22368](https://insights.sbomify.com/MAL-2025-22368/): Malicious code in hello_ltb (npm) (malicious package) - [MAL-2025-22367](https://insights.sbomify.com/MAL-2025-22367/): Malicious code in hello-world-target (npm) (malicious package) - [MAL-2025-22366](https://insights.sbomify.com/MAL-2025-22366/): Malicious code in hello-world-lupin (npm) (malicious package) - [MAL-2025-22365](https://insights.sbomify.com/MAL-2025-22365/): Malicious code in hello-world-from-lupin-99 (npm) (malicious package) - [MAL-2025-22364](https://insights.sbomify.com/MAL-2025-22364/): Malicious code in hello-world-from-lupin-95 (npm) (malicious package) - [MAL-2025-22363](https://insights.sbomify.com/MAL-2025-22363/): Malicious code in hello-cloud (npm) (malicious package) - [MAL-2025-22362](https://insights.sbomify.com/MAL-2025-22362/): Malicious code in hellcity (npm) (malicious package) - [MAL-2025-22361](https://insights.sbomify.com/MAL-2025-22361/): Malicious code in heliosphere-wormhole-mqqr (npm) (malicious package) - [MAL-2025-22360](https://insights.sbomify.com/MAL-2025-22360/): Malicious code in helios-ultra-rollup-plugin-gridsome (npm) (malicious package) - [MAL-2025-2236](https://insights.sbomify.com/MAL-2025-2236/): Malicious code in @supera/share (npm) (malicious package) - [MAL-2025-22359](https://insights.sbomify.com/MAL-2025-22359/): Malicious code in helios-joviology-changelog-less-loader (npm) (malicious package) - [MAL-2025-22358](https://insights.sbomify.com/MAL-2025-22358/): Malicious code in helios-coronalmassejection-carina-crust (npm) (malicious package) - [MAL-2025-22357](https://insights.sbomify.com/MAL-2025-22357/): Malicious code in heliophysics-gulp-interstellarmedium-asteroid (npm) (malicious package) - [MAL-2025-22356](https://insights.sbomify.com/MAL-2025-22356/): Malicious code in helicopter-xigua-m89x (npm) (malicious package) - [MAL-2025-22355](https://insights.sbomify.com/MAL-2025-22355/): Malicious code in helicopter-nectarine-18ix (npm) (malicious package) - [MAL-2025-22354](https://insights.sbomify.com/MAL-2025-22354/): Malicious code in helicopter-hotel-x38o (npm) (malicious package) - [MAL-2025-22353](https://insights.sbomify.com/MAL-2025-22353/): Malicious code in helicopter-airplane-4eq8 (npm) (malicious package) - [MAL-2025-22352](https://insights.sbomify.com/MAL-2025-22352/): Malicious code in heka-react-bootstrap-electron-builder-puppeteer (npm) (malicious package) - [MAL-2025-22351](https://insights.sbomify.com/MAL-2025-22351/): Malicious code in heka-native-frontend-lint-staged (npm) (malicious package) - [MAL-2025-22350](https://insights.sbomify.com/MAL-2025-22350/): Malicious code in heka-luminescence-parsec-janus (npm) (malicious package) - [MAL-2025-2235](https://insights.sbomify.com/MAL-2025-2235/): Malicious code in @supera/asjnakwndlja (npm) (malicious package) - [MAL-2025-22349](https://insights.sbomify.com/MAL-2025-22349/): Malicious code in heka-fornax-antares-phenomic (npm) (malicious package) - [MAL-2025-22348](https://insights.sbomify.com/MAL-2025-22348/): Malicious code in heiban (npm) (malicious package) - [MAL-2025-22347](https://insights.sbomify.com/MAL-2025-22347/): Malicious code in hedgehog-yucca-wxs277-project (npm) (malicious package) - [MAL-2025-22346](https://insights.sbomify.com/MAL-2025-22346/): Malicious code in hedgehog-xerus-cpl405-project (npm) (malicious package) - [MAL-2025-22345](https://insights.sbomify.com/MAL-2025-22345/): Malicious code in hedgehog-willow-klf228-project (npm) (malicious package) - [MAL-2025-22344](https://insights.sbomify.com/MAL-2025-22344/): Malicious code in hedgehog-whale-pdg410-project (npm) (malicious package) - [MAL-2025-22343](https://insights.sbomify.com/MAL-2025-22343/): Malicious code in hedgehog-vortex-hiz322-project (npm) (malicious package) - [MAL-2025-22342](https://insights.sbomify.com/MAL-2025-22342/): Malicious code in hedgehog-registry (npm) (malicious package) - [MAL-2025-22341](https://insights.sbomify.com/MAL-2025-22341/): Malicious code in hedgehog-quasar-ppf530-project (npm) (malicious package) - [MAL-2025-22340](https://insights.sbomify.com/MAL-2025-22340/): Malicious code in hedgehog-orchid-phg379-project (npm) (malicious package) - [MAL-2025-2234](https://insights.sbomify.com/MAL-2025-2234/): Malicious code in @supera/aaaaaaaaaaa (npm) (malicious package) - [MAL-2025-22339](https://insights.sbomify.com/MAL-2025-22339/): Malicious code in hedgehog-aroma-swh506-project (npm) (malicious package) - [MAL-2025-22338](https://insights.sbomify.com/MAL-2025-22338/): Malicious code in hebiteiki (npm) (malicious package) - [MAL-2025-22337](https://insights.sbomify.com/MAL-2025-22337/): Malicious code in heather_vhnao_2gvsk_paradise (npm) (malicious package) - [MAL-2025-22336](https://insights.sbomify.com/MAL-2025-22336/): Malicious code in heather_bq7g3_nf4xz_raven (npm) (malicious package) - [MAL-2025-22335](https://insights.sbomify.com/MAL-2025-22335/): Malicious code in heather_9km8u_9mvz3_jigsaw (npm) (malicious package) - [MAL-2025-22334](https://insights.sbomify.com/MAL-2025-22334/): Malicious code in heather_8n2kz_dg94m_cascade (npm) (malicious package) - [MAL-2025-22333](https://insights.sbomify.com/MAL-2025-22333/): Malicious code in heather_8j6tf_vvmrc_iris (npm) (malicious package) - [MAL-2025-22332](https://insights.sbomify.com/MAL-2025-22332/): Malicious code in heather_6ngoh_px1dt_aspen (npm) (malicious package) - [MAL-2025-22331](https://insights.sbomify.com/MAL-2025-22331/): Malicious code in hease-js-api (npm) (malicious package) - [MAL-2025-22330](https://insights.sbomify.com/MAL-2025-22330/): Malicious code in heartstone-nft-collcetion972 (npm) (malicious package) - [MAL-2025-2233](https://insights.sbomify.com/MAL-2025-2233/): Malicious code in @shein-components-test-ump/text-to-speech-tool (npm) (malicious package) - [MAL-2025-22329](https://insights.sbomify.com/MAL-2025-22329/): Malicious code in heartstone-nft-collcetion574 (npm) (malicious package) - [MAL-2025-22328](https://insights.sbomify.com/MAL-2025-22328/): Malicious code in heartstone-nft-collcetion397 (npm) (malicious package) - [MAL-2025-22327](https://insights.sbomify.com/MAL-2025-22327/): Malicious code in heartstone-nft-collcetion306 (npm) (malicious package) - [MAL-2025-22326](https://insights.sbomify.com/MAL-2025-22326/): Malicious code in heartstone-nft-collcetion131 (npm) (malicious package) - [MAL-2025-22325](https://insights.sbomify.com/MAL-2025-22325/): Malicious code in heartstone-nft-collcetion-free- (npm) (malicious package) - [MAL-2025-22324](https://insights.sbomify.com/MAL-2025-22324/): Malicious code in hearthwiz (npm) (malicious package) - [MAL-2025-22323](https://insights.sbomify.com/MAL-2025-22323/): Malicious code in hearth-xmwq7-1tcpj-aurora-project (npm) (malicious package) - [MAL-2025-22322](https://insights.sbomify.com/MAL-2025-22322/): Malicious code in hearth-lvynh-a7r5l-paradise-project (npm) (malicious package) - [MAL-2025-22321](https://insights.sbomify.com/MAL-2025-22321/): Malicious code in hearth-95bye-rdp1t-rose-project (npm) (malicious package) - [MAL-2025-22320](https://insights.sbomify.com/MAL-2025-22320/): Malicious code in hearforme (npm) (malicious package) - [MAL-2025-2232](https://insights.sbomify.com/MAL-2025-2232/): Malicious code in cb4good (npm) (malicious package) - [MAL-2025-22319](https://insights.sbomify.com/MAL-2025-22319/): Malicious code in healge (npm) (malicious package) - [MAL-2025-22318](https://insights.sbomify.com/MAL-2025-22318/): Malicious code in heading (npm) (malicious package) - [MAL-2025-22317](https://insights.sbomify.com/MAL-2025-22317/): Malicious code in headache (npm) (malicious package) - [MAL-2025-22316](https://insights.sbomify.com/MAL-2025-22316/): Malicious code in hdworld (npm) (malicious package) - [MAL-2025-22315](https://insights.sbomify.com/MAL-2025-22315/): Malicious code in hdkye (npm) (malicious package) - [MAL-2025-22314](https://insights.sbomify.com/MAL-2025-22314/): Malicious code in hdfkit (npm) (malicious package) - [MAL-2025-22313](https://insights.sbomify.com/MAL-2025-22313/): Malicious code in hdeky (npm) (malicious package) - [MAL-2025-22312](https://insights.sbomify.com/MAL-2025-22312/): Malicious code in hdebug (npm) (malicious package) - [MAL-2025-22311](https://insights.sbomify.com/MAL-2025-22311/): Malicious code in hcrckiosk (npm) (malicious package) - [MAL-2025-22310](https://insights.sbomify.com/MAL-2025-22310/): Malicious code in hcompare (npm) (malicious package) - [MAL-2025-2231](https://insights.sbomify.com/MAL-2025-2231/): Malicious code in @partner-tech/pax-illustrations (npm) (malicious package) - [MAL-2025-22309](https://insights.sbomify.com/MAL-2025-22309/): Malicious code in hcdemos (npm) (malicious package) - [MAL-2025-22308](https://insights.sbomify.com/MAL-2025-22308/): Malicious code in hbtrack (npm) (malicious package) - [MAL-2025-22307](https://insights.sbomify.com/MAL-2025-22307/): Malicious code in hbqxpro (npm) (malicious package) - [MAL-2025-22306](https://insights.sbomify.com/MAL-2025-22306/): Malicious code in hbmediaelement (npm) (malicious package) - [MAL-2025-22305](https://insights.sbomify.com/MAL-2025-22305/): Malicious code in hazel-windmill-tyeg (npm) (malicious package) - [MAL-2025-22304](https://insights.sbomify.com/MAL-2025-22304/): Malicious code in hazel-whiskey-l2ig (npm) (malicious package) - [MAL-2025-22303](https://insights.sbomify.com/MAL-2025-22303/): Malicious code in hazel-vinegar-mx3y (npm) (malicious package) - [MAL-2025-22302](https://insights.sbomify.com/MAL-2025-22302/): Malicious code in hazel-redshift-60dx (npm) (malicious package) - [MAL-2025-22301](https://insights.sbomify.com/MAL-2025-22301/): Malicious code in hazel-pier-9a36 (npm) (malicious package) - [MAL-2025-22300](https://insights.sbomify.com/MAL-2025-22300/): Malicious code in hazel-lunar-nemb (npm) (malicious package) - [MAL-2025-2230](https://insights.sbomify.com/MAL-2025-2230/): Malicious code in pixelary (npm) (malicious package) - [MAL-2025-223](https://insights.sbomify.com/MAL-2025-223/): Malicious code in prem-bot-convo (npm) (malicious package) - [MAL-2025-22299](https://insights.sbomify.com/MAL-2025-22299/): Malicious code in hazel-carrot-08sq (npm) (malicious package) - [MAL-2025-22298](https://insights.sbomify.com/MAL-2025-22298/): Malicious code in hazecod (npm) (malicious package) - [MAL-2025-22297](https://insights.sbomify.com/MAL-2025-22297/): Malicious code in haywyre (npm) (malicious package) - [MAL-2025-22296](https://insights.sbomify.com/MAL-2025-22296/): Malicious code in hayalevi (npm) (malicious package) - [MAL-2025-22295](https://insights.sbomify.com/MAL-2025-22295/): Malicious code in haxewumbo (npm) (malicious package) - [MAL-2025-22294](https://insights.sbomify.com/MAL-2025-22294/): Malicious code in hawkingradiation-promise-exec-greatfilter (npm) (malicious package) - [MAL-2025-22293](https://insights.sbomify.com/MAL-2025-22293/): Malicious code in hawkingradiation-prettier-quantumfoam-xenon (npm) (malicious package) - [MAL-2025-22292](https://insights.sbomify.com/MAL-2025-22292/): Malicious code in hawkingradiation-jupiter-pulsar-spica (npm) (malicious package) - [MAL-2025-22291](https://insights.sbomify.com/MAL-2025-22291/): Malicious code in hawkingradiation-deneb-xanthus-higgs (npm) (malicious package) - [MAL-2025-22290](https://insights.sbomify.com/MAL-2025-22290/): Malicious code in hawkingradiation-auriga-triton-extremophile (npm) (malicious package) - [MAL-2025-2229](https://insights.sbomify.com/MAL-2025-2229/): Malicious code in limit-order-validation (npm) (malicious package) - [MAL-2025-22289](https://insights.sbomify.com/MAL-2025-22289/): Malicious code in hawk-td-mocks (npm) (malicious package) - [MAL-2025-22288](https://insights.sbomify.com/MAL-2025-22288/): Malicious code in hawk-lib (npm) (malicious package) - [MAL-2025-22287](https://insights.sbomify.com/MAL-2025-22287/): Malicious code in havilland (npm) (malicious package) - [MAL-2025-22286](https://insights.sbomify.com/MAL-2025-22286/): Malicious code in haven-z90ym-6l2pr-ember-project (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/865/