# Vulnerabilities published in 2025


- [MAL-2025-22195](https://insights.sbomify.com/MAL-2025-22195/): Malicious code in harbor-caravan-hvj800-project (npm) (malicious package)
- [MAL-2025-22194](https://insights.sbomify.com/MAL-2025-22194/): Malicious code in harbor-bonfire-qwl670-project (npm) (malicious package)
- [MAL-2025-22193](https://insights.sbomify.com/MAL-2025-22193/): Malicious code in harbor-bonfire-fqx182-project (npm) (malicious package)
- [MAL-2025-22192](https://insights.sbomify.com/MAL-2025-22192/): Malicious code in harbor-aspen-dmp363-project (npm) (malicious package)
- [MAL-2025-22191](https://insights.sbomify.com/MAL-2025-22191/): Malicious code in harbor-apple-6ip0 (npm) (malicious package)
- [MAL-2025-22190](https://insights.sbomify.com/MAL-2025-22190/): Malicious code in haraka-plugin-footer (npm) (malicious package)
- [MAL-2025-2219](https://insights.sbomify.com/MAL-2025-2219/): Malicious code in sendbird-chat-sample-react (npm) (malicious package)
- [MAL-2025-22189](https://insights.sbomify.com/MAL-2025-22189/): Malicious code in hapico (npm) (malicious package)
- [MAL-2025-22188](https://insights.sbomify.com/MAL-2025-22188/): Malicious code in hapi-slidev-mesosphere-standard (npm) (malicious package)
- [MAL-2025-22187](https://insights.sbomify.com/MAL-2025-22187/): Malicious code in hapi-services (npm) (malicious package)
- [MAL-2025-22186](https://insights.sbomify.com/MAL-2025-22186/): Malicious code in hapi-selenium (npm) (malicious package)
- [MAL-2025-22185](https://insights.sbomify.com/MAL-2025-22185/): Malicious code in hapi-pulsar-xanthus-avior (npm) (malicious package)
- [MAL-2025-22184](https://insights.sbomify.com/MAL-2025-22184/): Malicious code in hapi-proteomics-whitedwarf-nucleosynthesis (npm) (malicious package)
- [MAL-2025-22183](https://insights.sbomify.com/MAL-2025-22183/): Malicious code in hapi-node-avro-io (npm) (malicious package)
- [MAL-2025-22182](https://insights.sbomify.com/MAL-2025-22182/): Malicious code in hapi-logstash-tester (npm) (malicious package)
- [MAL-2025-22181](https://insights.sbomify.com/MAL-2025-22181/): Malicious code in hapi-kafka-node (npm) (malicious package)
- [MAL-2025-22180](https://insights.sbomify.com/MAL-2025-22180/): Malicious code in hapi-inquirer-kastra-event (npm) (malicious package)
- [MAL-2025-2218](https://insights.sbomify.com/MAL-2025-2218/): Malicious code in bankingbundleserv (npm) (malicious package)
- [MAL-2025-22179](https://insights.sbomify.com/MAL-2025-22179/): Malicious code in hapi-express-avior-ignite (npm) (malicious package)
- [MAL-2025-22178](https://insights.sbomify.com/MAL-2025-22178/): Malicious code in hapi-event-store (npm) (malicious package)
- [MAL-2025-22177](https://insights.sbomify.com/MAL-2025-22177/): Malicious code in hapi-doc-test (npm) (malicious package)
- [MAL-2025-22176](https://insights.sbomify.com/MAL-2025-22176/): Malicious code in hapi-data (npm) (malicious package)
- [MAL-2025-22175](https://insights.sbomify.com/MAL-2025-22175/): Malicious code in hanute (npm) (malicious package)
- [MAL-2025-22174](https://insights.sbomify.com/MAL-2025-22174/): Malicious code in hangars (npm) (malicious package)
- [MAL-2025-22173](https://insights.sbomify.com/MAL-2025-22173/): Malicious code in hang-tag-site (npm) (malicious package)
- [MAL-2025-22172](https://insights.sbomify.com/MAL-2025-22172/): Malicious code in handlebars-inline-precompile (npm) (malicious package)
- [MAL-2025-22171](https://insights.sbomify.com/MAL-2025-22171/): Malicious code in hanafi-takokak90-sukiwir (npm) (malicious package)
- [MAL-2025-22170](https://insights.sbomify.com/MAL-2025-22170/): Malicious code in hanafi-taiwan83-kuki (npm) (malicious package)
- [MAL-2025-2217](https://insights.sbomify.com/MAL-2025-2217/): Malicious code in zuaxnull (npm) (malicious package)
- [MAL-2025-22169](https://insights.sbomify.com/MAL-2025-22169/): Malicious code in hanafi-sasag7-sukiwir (npm) (malicious package)
- [MAL-2025-22168](https://insights.sbomify.com/MAL-2025-22168/): Malicious code in hanafi-nasi16-breki (npm) (malicious package)
- [MAL-2025-22167](https://insights.sbomify.com/MAL-2025-22167/): Malicious code in hanafi-martabak54-breki (npm) (malicious package)
- [MAL-2025-22166](https://insights.sbomify.com/MAL-2025-22166/): Malicious code in hanafi-keripik78-sukiwir (npm) (malicious package)
- [MAL-2025-22165](https://insights.sbomify.com/MAL-2025-22165/): Malicious code in hanafi-keripik30-breki (npm) (malicious package)
- [MAL-2025-22164](https://insights.sbomify.com/MAL-2025-22164/): Malicious code in hammock-wisp-fmh908-project (npm) (malicious package)
- [MAL-2025-22163](https://insights.sbomify.com/MAL-2025-22163/): Malicious code in hammock-vine-jhj888-project (npm) (malicious package)
- [MAL-2025-22162](https://insights.sbomify.com/MAL-2025-22162/): Malicious code in hammock-sunset-jye200-project (npm) (malicious package)
- [MAL-2025-22161](https://insights.sbomify.com/MAL-2025-22161/): Malicious code in hammock-opaline-zen621-project (npm) (malicious package)
- [MAL-2025-22160](https://insights.sbomify.com/MAL-2025-22160/): Malicious code in hammock-moose-wlx635-project (npm) (malicious package)
- [MAL-2025-2216](https://insights.sbomify.com/MAL-2025-2216/): Malicious code in @idme-components/component-utilities (npm) (malicious package)
- [MAL-2025-22159](https://insights.sbomify.com/MAL-2025-22159/): Malicious code in hammock-lilac-izk224-project (npm) (malicious package)
- [MAL-2025-22158](https://insights.sbomify.com/MAL-2025-22158/): Malicious code in hammock-kaleidoscope-ijd211-project (npm) (malicious package)
- [MAL-2025-22157](https://insights.sbomify.com/MAL-2025-22157/): Malicious code in hammock-kaleidoscope-cno871-project (npm) (malicious package)
- [MAL-2025-22156](https://insights.sbomify.com/MAL-2025-22156/): Malicious code in hammock-glade-qbo685-project (npm) (malicious package)
- [MAL-2025-22155](https://insights.sbomify.com/MAL-2025-22155/): Malicious code in hammock-glade-irt151-project (npm) (malicious package)
- [MAL-2025-22154](https://insights.sbomify.com/MAL-2025-22154/): Malicious code in hammock-amber-wqq626-project (npm) (malicious package)
- [MAL-2025-22153](https://insights.sbomify.com/MAL-2025-22153/): Malicious code in halp-server (npm) (malicious package)
- [MAL-2025-22152](https://insights.sbomify.com/MAL-2025-22152/): Malicious code in halowhip (npm) (malicious package)
- [MAL-2025-22151](https://insights.sbomify.com/MAL-2025-22151/): Malicious code in halotech (npm) (malicious package)
- [MAL-2025-22150](https://insights.sbomify.com/MAL-2025-22150/): Malicious code in halomod (npm) (malicious package)
- [MAL-2025-2215](https://insights.sbomify.com/MAL-2025-2215/): Malicious code in vtctld2 (npm) (malicious package)
- [MAL-2025-22149](https://insights.sbomify.com/MAL-2025-22149/): Malicious code in haloaa (npm) (malicious package)
- [MAL-2025-22148](https://insights.sbomify.com/MAL-2025-22148/): Malicious code in halo2vis (npm) (malicious package)
- [MAL-2025-22147](https://insights.sbomify.com/MAL-2025-22147/): Malicious code in halo-shell (npm) (malicious package)
- [MAL-2025-22146](https://insights.sbomify.com/MAL-2025-22146/): Malicious code in halmos-cheatcodes (npm) (malicious package)
- [MAL-2025-22145](https://insights.sbomify.com/MAL-2025-22145/): Malicious code in halmalloc (npm) (malicious package)
- [MAL-2025-22144](https://insights.sbomify.com/MAL-2025-22144/): Malicious code in halley-yakutsk-axios-scripts (npm) (malicious package)
- [MAL-2025-22143](https://insights.sbomify.com/MAL-2025-22143/): Malicious code in halley-stream-biohacking-zooarchaeology (npm) (malicious package)
- [MAL-2025-22142](https://insights.sbomify.com/MAL-2025-22142/): Malicious code in halley-sedimentology-orbit-gammarayburst (npm) (malicious package)
- [MAL-2025-22141](https://insights.sbomify.com/MAL-2025-22141/): Malicious code in halley-pyxis-lightyear-zenith (npm) (malicious package)
- [MAL-2025-22140](https://insights.sbomify.com/MAL-2025-22140/): Malicious code in halley-procyon-yonder-gulp (npm) (malicious package)
- [MAL-2025-2214](https://insights.sbomify.com/MAL-2025-2214/): Malicious code in brunch-with-ember-reloaded (npm) (malicious package)
- [MAL-2025-22139](https://insights.sbomify.com/MAL-2025-22139/): Malicious code in halley-middleware-blazar-brane (npm) (malicious package)
- [MAL-2025-22138](https://insights.sbomify.com/MAL-2025-22138/): Malicious code in halley-jabbah-antimatter-metabolomics (npm) (malicious package)
- [MAL-2025-22137](https://insights.sbomify.com/MAL-2025-22137/): Malicious code in halley-express-deneb-draco (npm) (malicious package)
- [MAL-2025-22136](https://insights.sbomify.com/MAL-2025-22136/): Malicious code in halley-eclipse-mini-css-extract-plugin-nightwatch (npm) (malicious package)
- [MAL-2025-22135](https://insights.sbomify.com/MAL-2025-22135/): Malicious code in halley-concurrently-string-selenology (npm) (malicious package)
- [MAL-2025-22134](https://insights.sbomify.com/MAL-2025-22134/): Malicious code in halley-cli-nuxtjs-pegasus (npm) (malicious package)
- [MAL-2025-22133](https://insights.sbomify.com/MAL-2025-22133/): Malicious code in halk (npm) (malicious package)
- [MAL-2025-22132](https://insights.sbomify.com/MAL-2025-22132/): Malicious code in halfback (npm) (malicious package)
- [MAL-2025-22131](https://insights.sbomify.com/MAL-2025-22131/): Malicious code in haiwei (npm) (malicious package)
- [MAL-2025-22130](https://insights.sbomify.com/MAL-2025-22130/): Malicious code in haiscommondclient (npm) (malicious package)
- [MAL-2025-2213](https://insights.sbomify.com/MAL-2025-2213/): Malicious code in next-tab (npm) (malicious package)
- [MAL-2025-22129](https://insights.sbomify.com/MAL-2025-22129/): Malicious code in haiscommond (npm) (malicious package)
- [MAL-2025-22128](https://insights.sbomify.com/MAL-2025-22128/): Malicious code in haircolor (npm) (malicious package)
- [MAL-2025-22127](https://insights.sbomify.com/MAL-2025-22127/): Malicious code in haikuary (npm) (malicious package)
- [MAL-2025-22126](https://insights.sbomify.com/MAL-2025-22126/): Malicious code in haijiao (npm) (malicious package)
- [MAL-2025-22125](https://insights.sbomify.com/MAL-2025-22125/): Malicious code in haeui (npm) (malicious package)
- [MAL-2025-22124](https://insights.sbomify.com/MAL-2025-22124/): Malicious code in hadron-volcanology-subscription-auth (npm) (malicious package)
- [MAL-2025-22123](https://insights.sbomify.com/MAL-2025-22123/): Malicious code in hadron-planetology-izar-semantic-release (npm) (malicious package)
- [MAL-2025-22122](https://insights.sbomify.com/MAL-2025-22122/): Malicious code in hadron-ophiuchus-bootstrap-lacerta (npm) (malicious package)
- [MAL-2025-22121](https://insights.sbomify.com/MAL-2025-22121/): Malicious code in hadqmvognjrbluxe (npm) (malicious package)
- [MAL-2025-22120](https://insights.sbomify.com/MAL-2025-22120/): Malicious code in hadianto-rujak13-kuki (npm) (malicious package)
- [MAL-2025-2212](https://insights.sbomify.com/MAL-2025-2212/): Malicious code in testnet-contracts (npm) (malicious package)
- [MAL-2025-22119](https://insights.sbomify.com/MAL-2025-22119/): Malicious code in hadianto-nasiuduk70-breki (npm) (malicious package)
- [MAL-2025-22118](https://insights.sbomify.com/MAL-2025-22118/): Malicious code in hadianto-nasi20-sukiwir (npm) (malicious package)
- [MAL-2025-22117](https://insights.sbomify.com/MAL-2025-22117/): Malicious code in hadianto-mieayam57-sukiwir (npm) (malicious package)
- [MAL-2025-22116](https://insights.sbomify.com/MAL-2025-22116/): Malicious code in hadianto-mendut74-breki (npm) (malicious package)
- [MAL-2025-22115](https://insights.sbomify.com/MAL-2025-22115/): Malicious code in hadianto-martabak73-breki (npm) (malicious package)
- [MAL-2025-22114](https://insights.sbomify.com/MAL-2025-22114/): Malicious code in hadianto-lengko50-kuki (npm) (malicious package)
- [MAL-2025-22113](https://insights.sbomify.com/MAL-2025-22113/): Malicious code in hadianto-kue89-breki (npm) (malicious package)
- [MAL-2025-22112](https://insights.sbomify.com/MAL-2025-22112/): Malicious code in hadianto-klipo99-breki (npm) (malicious package)
- [MAL-2025-22111](https://insights.sbomify.com/MAL-2025-22111/): Malicious code in hadi-tumis40-kuki (npm) (malicious package)
- [MAL-2025-22110](https://insights.sbomify.com/MAL-2025-22110/): Malicious code in hadi-lupis61-sukiwir (npm) (malicious package)
- [MAL-2025-2211](https://insights.sbomify.com/MAL-2025-2211/): Malicious code in realityspiral (npm) (malicious package)
- [MAL-2025-22109](https://insights.sbomify.com/MAL-2025-22109/): Malicious code in hadi-kupat14-sukiwir (npm) (malicious package)
- [MAL-2025-22108](https://insights.sbomify.com/MAL-2025-22108/): Malicious code in hadi-kemplang8-sukiwir (npm) (malicious package)
- [MAL-2025-22107](https://insights.sbomify.com/MAL-2025-22107/): Malicious code in hadi-jamblang63-sukiwir (npm) (malicious package)
- [MAL-2025-22106](https://insights.sbomify.com/MAL-2025-22106/): Malicious code in hadi-gudeg60-kuki (npm) (malicious package)
- [MAL-2025-22105](https://insights.sbomify.com/MAL-2025-22105/): Malicious code in hadean (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/867/