# Vulnerabilities published in 2025


- [MAL-2025-21024](https://insights.sbomify.com/MAL-2025-21024/): Malicious code in ftwidget (npm) (malicious package)
- [MAL-2025-21023](https://insights.sbomify.com/MAL-2025-21023/): Malicious code in ftsgdekxpnuylmkh (npm) (malicious package)
- [MAL-2025-21022](https://insights.sbomify.com/MAL-2025-21022/): Malicious code in ftrg4 (npm) (malicious package)
- [MAL-2025-21021](https://insights.sbomify.com/MAL-2025-21021/): Malicious code in ftp-adaptor (npm) (malicious package)
- [MAL-2025-21020](https://insights.sbomify.com/MAL-2025-21020/): Malicious code in ftacup (npm) (malicious package)
- [MAL-2025-2102](https://insights.sbomify.com/MAL-2025-2102/): Malicious code in cors_error_preventor (npm) (malicious package)
- [MAL-2025-21019](https://insights.sbomify.com/MAL-2025-21019/): Malicious code in ft-next-signup (npm) (malicious package)
- [MAL-2025-21018](https://insights.sbomify.com/MAL-2025-21018/): Malicious code in fsworker (npm) (malicious package)
- [MAL-2025-21017](https://insights.sbomify.com/MAL-2025-21017/): Malicious code in fstoolkit (npm) (malicious package)
- [MAL-2025-21016](https://insights.sbomify.com/MAL-2025-21016/): Malicious code in fstg-service-authentication (npm) (malicious package)
- [MAL-2025-21015](https://insights.sbomify.com/MAL-2025-21015/): Malicious code in fssp-request (npm) (malicious package)
- [MAL-2025-21014](https://insights.sbomify.com/MAL-2025-21014/): Malicious code in fsrazor (npm) (malicious package)
- [MAL-2025-21013](https://insights.sbomify.com/MAL-2025-21013/): Malicious code in fsmfun (npm) (malicious package)
- [MAL-2025-21012](https://insights.sbomify.com/MAL-2025-21012/): Malicious code in fsimage (npm) (malicious package)
- [MAL-2025-21011](https://insights.sbomify.com/MAL-2025-21011/): Malicious code in fsgbymhkvtpnrozu (npm) (malicious package)
- [MAL-2025-21010](https://insights.sbomify.com/MAL-2025-21010/): Malicious code in fsefwe223 (npm) (malicious package)
- [MAL-2025-2101](https://insights.sbomify.com/MAL-2025-2101/): Malicious code in com.unity.2d.animation (npm) (malicious package)
- [MAL-2025-21009](https://insights.sbomify.com/MAL-2025-21009/): Malicious code in fsd44 (npm) (malicious package)
- [MAL-2025-21008](https://insights.sbomify.com/MAL-2025-21008/): Malicious code in fs-xetra (npm) (malicious package)
- [MAL-2025-21007](https://insights.sbomify.com/MAL-2025-21007/): Malicious code in fs-filter (npm) (malicious package)
- [MAL-2025-21006](https://insights.sbomify.com/MAL-2025-21006/): Malicious code in fs-extar (npm) (malicious package)
- [MAL-2025-21005](https://insights.sbomify.com/MAL-2025-21005/): Malicious code in fs-exrta (npm) (malicious package)
- [MAL-2025-21004](https://insights.sbomify.com/MAL-2025-21004/): Malicious code in fs-etxra (npm) (malicious package)
- [MAL-2025-21003](https://insights.sbomify.com/MAL-2025-21003/): Malicious code in fs (npm) (malicious package)
- [MAL-2025-21002](https://insights.sbomify.com/MAL-2025-21002/): Malicious code in frxkucmqbwkyzdlh (npm) (malicious package)
- [MAL-2025-21001](https://insights.sbomify.com/MAL-2025-21001/): Malicious code in frugile-s3 (npm) (malicious package)
- [MAL-2025-21000](https://insights.sbomify.com/MAL-2025-21000/): Malicious code in frugal-s3 (npm) (malicious package)
- [MAL-2025-2100](https://insights.sbomify.com/MAL-2025-2100/): Malicious code in com.github-glitchenzo.nugetforunit (npm) (malicious package)
- [MAL-2025-210](https://insights.sbomify.com/MAL-2025-210/): Malicious code in nimiq-pool (npm) (malicious package)
- [MAL-2025-21](https://insights.sbomify.com/MAL-2025-21/): Malicious code in tree-sitter-strings (npm) (malicious package)
- [MAL-2025-20999](https://insights.sbomify.com/MAL-2025-20999/): Malicious code in frpsokyawchukjvq (npm) (malicious package)
- [MAL-2025-20998](https://insights.sbomify.com/MAL-2025-20998/): Malicious code in frost-yarn-vxi052-project (npm) (malicious package)
- [MAL-2025-20997](https://insights.sbomify.com/MAL-2025-20997/): Malicious code in frost-v4h4t-0stpa-essence-project (npm) (malicious package)
- [MAL-2025-20996](https://insights.sbomify.com/MAL-2025-20996/): Malicious code in frost-utopia-zoo471-project (npm) (malicious package)
- [MAL-2025-20995](https://insights.sbomify.com/MAL-2025-20995/): Malicious code in frost-swan-wpe549-project (npm) (malicious package)
- [MAL-2025-20994](https://insights.sbomify.com/MAL-2025-20994/): Malicious code in frost-secp256k1-evm (npm) (malicious package)
- [MAL-2025-20993](https://insights.sbomify.com/MAL-2025-20993/): Malicious code in frost-quartz-oll021-project (npm) (malicious package)
- [MAL-2025-20992](https://insights.sbomify.com/MAL-2025-20992/): Malicious code in frost-patxq-y6wr4-boulder-project (npm) (malicious package)
- [MAL-2025-20991](https://insights.sbomify.com/MAL-2025-20991/): Malicious code in frost-nurture-kjw536-project (npm) (malicious package)
- [MAL-2025-20990](https://insights.sbomify.com/MAL-2025-20990/): Malicious code in frost-lagoon-imm088-project (npm) (malicious package)
- [MAL-2025-2099](https://insights.sbomify.com/MAL-2025-2099/): Malicious code in celo-token-list (npm) (malicious package)
- [MAL-2025-20989](https://insights.sbomify.com/MAL-2025-20989/): Malicious code in frost-infinity-gyp730-project (npm) (malicious package)
- [MAL-2025-20988](https://insights.sbomify.com/MAL-2025-20988/): Malicious code in frost-giraffe-qit327-project (npm) (malicious package)
- [MAL-2025-20987](https://insights.sbomify.com/MAL-2025-20987/): Malicious code in frost-forest-oow784-project (npm) (malicious package)
- [MAL-2025-20986](https://insights.sbomify.com/MAL-2025-20986/): Malicious code in frost-enlgz-2sz23-nymph-project (npm) (malicious package)
- [MAL-2025-20985](https://insights.sbomify.com/MAL-2025-20985/): Malicious code in frost-dragon-jtp425-project (npm) (malicious package)
- [MAL-2025-20984](https://insights.sbomify.com/MAL-2025-20984/): Malicious code in frost-desert-gfb130-project (npm) (malicious package)
- [MAL-2025-20983](https://insights.sbomify.com/MAL-2025-20983/): Malicious code in frost-cwiag-w3nw5-dew-project (npm) (malicious package)
- [MAL-2025-20982](https://insights.sbomify.com/MAL-2025-20982/): Malicious code in frost-asteroid-tdu634-project (npm) (malicious package)
- [MAL-2025-20981](https://insights.sbomify.com/MAL-2025-20981/): Malicious code in frost-aru5x-op3hw-zen-project (npm) (malicious package)
- [MAL-2025-20980](https://insights.sbomify.com/MAL-2025-20980/): Malicious code in frost-amber-ccc534-project (npm) (malicious package)
- [MAL-2025-2098](https://insights.sbomify.com/MAL-2025-2098/): Malicious code in bsc-web3-bundler (npm) (malicious package)
- [MAL-2025-20979](https://insights.sbomify.com/MAL-2025-20979/): Malicious code in frost-825b3-bhhrs-ice-project (npm) (malicious package)
- [MAL-2025-20978](https://insights.sbomify.com/MAL-2025-20978/): Malicious code in frontify-plugin (npm) (malicious package)
- [MAL-2025-20977](https://insights.sbomify.com/MAL-2025-20977/): Malicious code in frontiers (npm) (malicious package)
- [MAL-2025-20976](https://insights.sbomify.com/MAL-2025-20976/): Malicious code in frontend-zenobia-outercore-eridanus (npm) (malicious package)
- [MAL-2025-20975](https://insights.sbomify.com/MAL-2025-20975/): Malicious code in frontend-services (npm) (malicious package)
- [MAL-2025-20974](https://insights.sbomify.com/MAL-2025-20974/): Malicious code in frontend-resonance-speleology-redshift (npm) (malicious package)
- [MAL-2025-20973](https://insights.sbomify.com/MAL-2025-20973/): Malicious code in frontend-redis-orogeny-karma (npm) (malicious package)
- [MAL-2025-20972](https://insights.sbomify.com/MAL-2025-20972/): Malicious code in frontend-logging (npm) (malicious package)
- [MAL-2025-20971](https://insights.sbomify.com/MAL-2025-20971/): Malicious code in frontend-js-web-component (npm) (malicious package)
- [MAL-2025-20970](https://insights.sbomify.com/MAL-2025-20970/): Malicious code in frontend-element-ui-magellan-toml (npm) (malicious package)
- [MAL-2025-2097](https://insights.sbomify.com/MAL-2025-2097/): Malicious code in blackhoole (npm) (malicious package)
- [MAL-2025-20969](https://insights.sbomify.com/MAL-2025-20969/): Malicious code in frontend-config (npm) (malicious package)
- [MAL-2025-20968](https://insights.sbomify.com/MAL-2025-20968/): Malicious code in frontend-auth-client (npm) (malicious package)
- [MAL-2025-20967](https://insights.sbomify.com/MAL-2025-20967/): Malicious code in front-end-cli (npm) (malicious package)
- [MAL-2025-20966](https://insights.sbomify.com/MAL-2025-20966/): Malicious code in froidz (npm) (malicious package)
- [MAL-2025-20965](https://insights.sbomify.com/MAL-2025-20965/): Malicious code in froghair (npm) (malicious package)
- [MAL-2025-20964](https://insights.sbomify.com/MAL-2025-20964/): Malicious code in froever (npm) (malicious package)
- [MAL-2025-20963](https://insights.sbomify.com/MAL-2025-20963/): Malicious code in frmtst (npm) (malicious package)
- [MAL-2025-20962](https://insights.sbomify.com/MAL-2025-20962/): Malicious code in frizbot (npm) (malicious package)
- [MAL-2025-20961](https://insights.sbomify.com/MAL-2025-20961/): Malicious code in friendlys (npm) (malicious package)
- [MAL-2025-20960](https://insights.sbomify.com/MAL-2025-20960/): Malicious code in frhqojsevxlugnim (npm) (malicious package)
- [MAL-2025-2096](https://insights.sbomify.com/MAL-2025-2096/): Malicious code in bitget-main (npm) (malicious package)
- [MAL-2025-20959](https://insights.sbomify.com/MAL-2025-20959/): Malicious code in freightsmb-frontend (npm) (malicious package)
- [MAL-2025-20958](https://insights.sbomify.com/MAL-2025-20958/): Malicious code in freexue (npm) (malicious package)
- [MAL-2025-20957](https://insights.sbomify.com/MAL-2025-20957/): Malicious code in freetale (npm) (malicious package)
- [MAL-2025-20956](https://insights.sbomify.com/MAL-2025-20956/): Malicious code in freesand (npm) (malicious package)
- [MAL-2025-20955](https://insights.sbomify.com/MAL-2025-20955/): Malicious code in freerte-webpack-config (npm) (malicious package)
- [MAL-2025-20954](https://insights.sbomify.com/MAL-2025-20954/): Malicious code in freerte-paste-plugin (npm) (malicious package)
- [MAL-2025-20953](https://insights.sbomify.com/MAL-2025-20953/): Malicious code in freerte-cut-plugin (npm) (malicious package)
- [MAL-2025-20952](https://insights.sbomify.com/MAL-2025-20952/): Malicious code in freerte-copy-plugin (npm) (malicious package)
- [MAL-2025-20951](https://insights.sbomify.com/MAL-2025-20951/): Malicious code in freeplane (npm) (malicious package)
- [MAL-2025-20950](https://insights.sbomify.com/MAL-2025-20950/): Malicious code in freenger (npm) (malicious package)
- [MAL-2025-2095](https://insights.sbomify.com/MAL-2025-2095/): Malicious code in bitget-internal (npm) (malicious package)
- [MAL-2025-20949](https://insights.sbomify.com/MAL-2025-20949/): Malicious code in freemdm (npm) (malicious package)
- [MAL-2025-20948](https://insights.sbomify.com/MAL-2025-20948/): Malicious code in freemaid (npm) (malicious package)
- [MAL-2025-20947](https://insights.sbomify.com/MAL-2025-20947/): Malicious code in freefroot (npm) (malicious package)
- [MAL-2025-20946](https://insights.sbomify.com/MAL-2025-20946/): Malicious code in freefem (npm) (malicious package)
- [MAL-2025-20945](https://insights.sbomify.com/MAL-2025-20945/): Malicious code in freebsd (npm) (malicious package)
- [MAL-2025-20944](https://insights.sbomify.com/MAL-2025-20944/): Malicious code in freeaml (npm) (malicious package)
- [MAL-2025-20943](https://insights.sbomify.com/MAL-2025-20943/): Malicious code in free-xbox-codes-app001 (npm) (malicious package)
- [MAL-2025-20942](https://insights.sbomify.com/MAL-2025-20942/): Malicious code in free-vbucks-fortnite-2023-april-efkzd (npm) (malicious package)
- [MAL-2025-20941](https://insights.sbomify.com/MAL-2025-20941/): Malicious code in free-unlimited-fortnite-vbucks-april-2023-dkdzdz (npm) (malicious package)
- [MAL-2025-20940](https://insights.sbomify.com/MAL-2025-20940/): Malicious code in free-spins-in-coin-master-today-only-jdzdza (npm) (malicious package)
- [MAL-2025-2094](https://insights.sbomify.com/MAL-2025-2094/): Malicious code in bitget-dev (npm) (malicious package)
- [MAL-2025-20939](https://insights.sbomify.com/MAL-2025-20939/): Malicious code in free-spins-in-coin-master-2023-working-free-spins-jkdz (npm) (malicious package)
- [MAL-2025-20938](https://insights.sbomify.com/MAL-2025-20938/): Malicious code in free-robux (npm) (malicious package)
- [MAL-2025-20937](https://insights.sbomify.com/MAL-2025-20937/): Malicious code in free-gems-and-passes-on-episode---part-6 (npm) (malicious package)
- [MAL-2025-20936](https://insights.sbomify.com/MAL-2025-20936/): Malicious code in free-fortnite-vbucks-march-2023-updated-djkzez (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/880/
