# Vulnerabilities published in 2025


- [MAL-2025-22285](https://insights.sbomify.com/MAL-2025-22285/): Malicious code in haven-y9kxr-qkcm0-grove-project (npm) (malicious package)
- [MAL-2025-22284](https://insights.sbomify.com/MAL-2025-22284/): Malicious code in haven-x5nz7-1h12l-obsidian-project (npm) (malicious package)
- [MAL-2025-22283](https://insights.sbomify.com/MAL-2025-22283/): Malicious code in haven-x3evf-636lr-iris-project (npm) (malicious package)
- [MAL-2025-22282](https://insights.sbomify.com/MAL-2025-22282/): Malicious code in haven-wyjzj-i1oih-frost-project (npm) (malicious package)
- [MAL-2025-22281](https://insights.sbomify.com/MAL-2025-22281/): Malicious code in haven-w6yjy-3d9rf-terra-project (npm) (malicious package)
- [MAL-2025-22280](https://insights.sbomify.com/MAL-2025-22280/): Malicious code in haven-sdk4c-zhbb0-fjord-project (npm) (malicious package)
- [MAL-2025-2228](https://insights.sbomify.com/MAL-2025-2228/): Malicious code in prblingd (npm) (malicious package)
- [MAL-2025-22279](https://insights.sbomify.com/MAL-2025-22279/): Malicious code in haven-qoxpr-q6vgc-zenith-project (npm) (malicious package)
- [MAL-2025-22278](https://insights.sbomify.com/MAL-2025-22278/): Malicious code in haven-ilsmr-kgh8y-ice-project (npm) (malicious package)
- [MAL-2025-22277](https://insights.sbomify.com/MAL-2025-22277/): Malicious code in haven-hj2xz-07tw6-jewel-project (npm) (malicious package)
- [MAL-2025-22276](https://insights.sbomify.com/MAL-2025-22276/): Malicious code in haven-dutwo-9afnl-lavender-project (npm) (malicious package)
- [MAL-2025-22275](https://insights.sbomify.com/MAL-2025-22275/): Malicious code in haven-bes9v-66v54-fern-project (npm) (malicious package)
- [MAL-2025-22274](https://insights.sbomify.com/MAL-2025-22274/): Malicious code in haven-bd1rs-tber9-solace-project (npm) (malicious package)
- [MAL-2025-22273](https://insights.sbomify.com/MAL-2025-22273/): Malicious code in haven-a2bca-taw6k-nymph-project (npm) (malicious package)
- [MAL-2025-22272](https://insights.sbomify.com/MAL-2025-22272/): Malicious code in haven-9yae4-l6wbd-ember-project (npm) (malicious package)
- [MAL-2025-22271](https://insights.sbomify.com/MAL-2025-22271/): Malicious code in haven-5ynlj-z2reg-raven-project (npm) (malicious package)
- [MAL-2025-22270](https://insights.sbomify.com/MAL-2025-22270/): Malicious code in haven-387xx-89mga-coral-project (npm) (malicious package)
- [MAL-2025-2227](https://insights.sbomify.com/MAL-2025-2227/): Malicious code in nyc-config (npm) (malicious package)
- [MAL-2025-22269](https://insights.sbomify.com/MAL-2025-22269/): Malicious code in haven-2i52m-qglgk-star-project (npm) (malicious package)
- [MAL-2025-22268](https://insights.sbomify.com/MAL-2025-22268/): Malicious code in haven-23lrq-dpwho-pearl-project (npm) (malicious package)
- [MAL-2025-22267](https://insights.sbomify.com/MAL-2025-22267/): Malicious code in haven-1v0nt-fi8so-xenon-project (npm) (malicious package)
- [MAL-2025-22266](https://insights.sbomify.com/MAL-2025-22266/): Malicious code in haven-1ec7t-dogih-orbit-project (npm) (malicious package)
- [MAL-2025-22265](https://insights.sbomify.com/MAL-2025-22265/): Malicious code in havegive (npm) (malicious package)
- [MAL-2025-22264](https://insights.sbomify.com/MAL-2025-22264/): Malicious code in haucict (npm) (malicious package)
- [MAL-2025-22263](https://insights.sbomify.com/MAL-2025-22263/): Malicious code in hathway (npm) (malicious package)
- [MAL-2025-22262](https://insights.sbomify.com/MAL-2025-22262/): Malicious code in hathormobile (npm) (malicious package)
- [MAL-2025-22261](https://insights.sbomify.com/MAL-2025-22261/): Malicious code in hathor-wallet-headless (npm) (malicious package)
- [MAL-2025-22260](https://insights.sbomify.com/MAL-2025-22260/): Malicious code in hathor-wallet (npm) (malicious package)
- [MAL-2025-2226](https://insights.sbomify.com/MAL-2025-2226/): Malicious code in atlas-user-monitor (npm) (malicious package)
- [MAL-2025-22259](https://insights.sbomify.com/MAL-2025-22259/): Malicious code in hathor-healthcheck-lib (npm) (malicious package)
- [MAL-2025-22258](https://insights.sbomify.com/MAL-2025-22258/): Malicious code in hatebu (npm) (malicious package)
- [MAL-2025-22257](https://insights.sbomify.com/MAL-2025-22257/): Malicious code in hatcraft (npm) (malicious package)
- [MAL-2025-22256](https://insights.sbomify.com/MAL-2025-22256/): Malicious code in hasulam (npm) (malicious package)
- [MAL-2025-22255](https://insights.sbomify.com/MAL-2025-22255/): Malicious code in hashdump (npm) (malicious package)
- [MAL-2025-22254](https://insights.sbomify.com/MAL-2025-22254/): Malicious code in hash-spy-mock-web-sed (npm) (malicious package)
- [MAL-2025-22253](https://insights.sbomify.com/MAL-2025-22253/): Malicious code in hash-sha256 (npm) (malicious package)
- [MAL-2025-22252](https://insights.sbomify.com/MAL-2025-22252/): Malicious code in hash-query-string-assert-catch (npm) (malicious package)
- [MAL-2025-22251](https://insights.sbomify.com/MAL-2025-22251/): Malicious code in hash-cloud-short-void-cluster (npm) (malicious package)
- [MAL-2025-22250](https://insights.sbomify.com/MAL-2025-22250/): Malicious code in hash-bash-easy-xi-table (npm) (malicious package)
- [MAL-2025-2225](https://insights.sbomify.com/MAL-2025-2225/): Malicious code in layouts-lib (npm) (malicious package)
- [MAL-2025-22249](https://insights.sbomify.com/MAL-2025-22249/): Malicious code in hasaweb (npm) (malicious package)
- [MAL-2025-22248](https://insights.sbomify.com/MAL-2025-22248/): Malicious code in hasard-core (npm) (malicious package)
- [MAL-2025-22247](https://insights.sbomify.com/MAL-2025-22247/): Malicious code in harvesting-utils (npm) (malicious package)
- [MAL-2025-22246](https://insights.sbomify.com/MAL-2025-22246/): Malicious code in harvesting-twitter (npm) (malicious package)
- [MAL-2025-22245](https://insights.sbomify.com/MAL-2025-22245/): Malicious code in harvesting-mongodb (npm) (malicious package)
- [MAL-2025-22244](https://insights.sbomify.com/MAL-2025-22244/): Malicious code in hartree (npm) (malicious package)
- [MAL-2025-22243](https://insights.sbomify.com/MAL-2025-22243/): Malicious code in harpjs (npm) (malicious package)
- [MAL-2025-22242](https://insights.sbomify.com/MAL-2025-22242/): Malicious code in harpia (npm) (malicious package)
- [MAL-2025-22241](https://insights.sbomify.com/MAL-2025-22241/): Malicious code in harp-yi7i7-gj0g0-dew-project (npm) (malicious package)
- [MAL-2025-22240](https://insights.sbomify.com/MAL-2025-22240/): Malicious code in harp-xru52-rref5-verdant-project (npm) (malicious package)
- [MAL-2025-2224](https://insights.sbomify.com/MAL-2025-2224/): Malicious code in atlas-websocket (npm) (malicious package)
- [MAL-2025-22239](https://insights.sbomify.com/MAL-2025-22239/): Malicious code in harp-cdng6-y0md2-dawn-project (npm) (malicious package)
- [MAL-2025-22238](https://insights.sbomify.com/MAL-2025-22238/): Malicious code in harp-8uplv-sqsxc-harmony-project (npm) (malicious package)
- [MAL-2025-22237](https://insights.sbomify.com/MAL-2025-22237/): Malicious code in harp-8dtdy-0fmvk-glow-project (npm) (malicious package)
- [MAL-2025-22236](https://insights.sbomify.com/MAL-2025-22236/): Malicious code in harp-86myn-b5m8t-dusk-project (npm) (malicious package)
- [MAL-2025-22235](https://insights.sbomify.com/MAL-2025-22235/): Malicious code in harmony_w1byd_ibuca_whisper (npm) (malicious package)
- [MAL-2025-22234](https://insights.sbomify.com/MAL-2025-22234/): Malicious code in harmony_n5gop_4pegj_cascade (npm) (malicious package)
- [MAL-2025-22233](https://insights.sbomify.com/MAL-2025-22233/): Malicious code in harmony_hwbu4_njhyw_jade (npm) (malicious package)
- [MAL-2025-22232](https://insights.sbomify.com/MAL-2025-22232/): Malicious code in harmony_d8lvx_ev6db_dream (npm) (malicious package)
- [MAL-2025-22231](https://insights.sbomify.com/MAL-2025-22231/): Malicious code in harmony_2kg4k_k65to_xenith (npm) (malicious package)
- [MAL-2025-22230](https://insights.sbomify.com/MAL-2025-22230/): Malicious code in harmony-v4atz-4fx7f-zenith-project (npm) (malicious package)
- [MAL-2025-2223](https://insights.sbomify.com/MAL-2025-2223/): Malicious code in patternfly-build (npm) (malicious package)
- [MAL-2025-22229](https://insights.sbomify.com/MAL-2025-22229/): Malicious code in harmony-uww9b-qqxzw-lunar-project (npm) (malicious package)
- [MAL-2025-22228](https://insights.sbomify.com/MAL-2025-22228/): Malicious code in harmony-runtime (npm) (malicious package)
- [MAL-2025-22227](https://insights.sbomify.com/MAL-2025-22227/): Malicious code in harmony-common (npm) (malicious package)
- [MAL-2025-22226](https://insights.sbomify.com/MAL-2025-22226/): Malicious code in harmony-1inh6-b1o7d-harp-project (npm) (malicious package)
- [MAL-2025-22225](https://insights.sbomify.com/MAL-2025-22225/): Malicious code in harmony-08d7w-43ckl-xanadu-project (npm) (malicious package)
- [MAL-2025-22224](https://insights.sbomify.com/MAL-2025-22224/): Malicious code in harmonic_v8o5m_ho0xa_dusk (npm) (malicious package)
- [MAL-2025-22223](https://insights.sbomify.com/MAL-2025-22223/): Malicious code in harmonic_bezft_36s9d_banyan (npm) (malicious package)
- [MAL-2025-22222](https://insights.sbomify.com/MAL-2025-22222/): Malicious code in harmonic_a1ca2_ql76a_ocean (npm) (malicious package)
- [MAL-2025-22221](https://insights.sbomify.com/MAL-2025-22221/): Malicious code in harmonic_9v7xh_78x6j_twilight (npm) (malicious package)
- [MAL-2025-22220](https://insights.sbomify.com/MAL-2025-22220/): Malicious code in harmonic_1ld6h_hkctz_pinnacle (npm) (malicious package)
- [MAL-2025-2222](https://insights.sbomify.com/MAL-2025-2222/): Malicious code in userrelationship-paypal (npm) (malicious package)
- [MAL-2025-22219](https://insights.sbomify.com/MAL-2025-22219/): Malicious code in harmoney (npm) (malicious package)
- [MAL-2025-22218](https://insights.sbomify.com/MAL-2025-22218/): Malicious code in harmlesspackage (npm) (malicious package)
- [MAL-2025-22217](https://insights.sbomify.com/MAL-2025-22217/): Malicious code in harman (npm) (malicious package)
- [MAL-2025-22216](https://insights.sbomify.com/MAL-2025-22216/): Malicious code in hardytest (npm) (malicious package)
- [MAL-2025-22215](https://insights.sbomify.com/MAL-2025-22215/): Malicious code in hardy_har_har (npm) (malicious package)
- [MAL-2025-22214](https://insights.sbomify.com/MAL-2025-22214/): Malicious code in hardinfo (npm) (malicious package)
- [MAL-2025-22213](https://insights.sbomify.com/MAL-2025-22213/): Malicious code in hardhat-waffle (npm) (malicious package)
- [MAL-2025-22212](https://insights.sbomify.com/MAL-2025-22212/): Malicious code in hardhat-contract-deploy (npm) (malicious package)
- [MAL-2025-22211](https://insights.sbomify.com/MAL-2025-22211/): Malicious code in harbor-xenon-dne615-project (npm) (malicious package)
- [MAL-2025-22210](https://insights.sbomify.com/MAL-2025-22210/): Malicious code in harbor-uplift-vkr207-project (npm) (malicious package)
- [MAL-2025-2221](https://insights.sbomify.com/MAL-2025-2221/): Malicious code in userbridge-paypal (npm) (malicious package)
- [MAL-2025-22209](https://insights.sbomify.com/MAL-2025-22209/): Malicious code in harbor-tornado-gaq963-project (npm) (malicious package)
- [MAL-2025-22208](https://insights.sbomify.com/MAL-2025-22208/): Malicious code in harbor-river-xur763-project (npm) (malicious package)
- [MAL-2025-22207](https://insights.sbomify.com/MAL-2025-22207/): Malicious code in harbor-reef-inz755-project (npm) (malicious package)
- [MAL-2025-22206](https://insights.sbomify.com/MAL-2025-22206/): Malicious code in harbor-rainbow-s7vp (npm) (malicious package)
- [MAL-2025-22205](https://insights.sbomify.com/MAL-2025-22205/): Malicious code in harbor-prairie-kta125-project (npm) (malicious package)
- [MAL-2025-22204](https://insights.sbomify.com/MAL-2025-22204/): Malicious code in harbor-nugget-qyw196-project (npm) (malicious package)
- [MAL-2025-22203](https://insights.sbomify.com/MAL-2025-22203/): Malicious code in harbor-maple-jwaq (npm) (malicious package)
- [MAL-2025-22202](https://insights.sbomify.com/MAL-2025-22202/): Malicious code in harbor-lettuce-yl8i (npm) (malicious package)
- [MAL-2025-22201](https://insights.sbomify.com/MAL-2025-22201/): Malicious code in harbor-jewel-rxy620-project (npm) (malicious package)
- [MAL-2025-22200](https://insights.sbomify.com/MAL-2025-22200/): Malicious code in harbor-india-eqi7 (npm) (malicious package)
- [MAL-2025-2220](https://insights.sbomify.com/MAL-2025-2220/): Malicious code in testsdvsdfsdf (npm) (malicious package)
- [MAL-2025-222](https://insights.sbomify.com/MAL-2025-222/): Malicious code in prem-babu-media (npm) (malicious package)
- [MAL-2025-22199](https://insights.sbomify.com/MAL-2025-22199/): Malicious code in harbor-grove-yvc860-project (npm) (malicious package)
- [MAL-2025-22198](https://insights.sbomify.com/MAL-2025-22198/): Malicious code in harbor-ferry-afx0 (npm) (malicious package)
- [MAL-2025-22197](https://insights.sbomify.com/MAL-2025-22197/): Malicious code in harbor-eggplant-gwqy (npm) (malicious package)
- [MAL-2025-22196](https://insights.sbomify.com/MAL-2025-22196/): Malicious code in harbor-chime-mpr471-project (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/866/