# Vulnerabilities published in 2025


- [MAL-2025-20845](https://insights.sbomify.com/MAL-2025-20845/): Malicious code in foxgame (npm) (malicious package)
- [MAL-2025-20844](https://insights.sbomify.com/MAL-2025-20844/): Malicious code in fox-zebra-lqc707-project (npm) (malicious package)
- [MAL-2025-20843](https://insights.sbomify.com/MAL-2025-20843/): Malicious code in fox-yucca-xkc015-project (npm) (malicious package)
- [MAL-2025-20842](https://insights.sbomify.com/MAL-2025-20842/): Malicious code in fox-utopia-omi519-project (npm) (malicious package)
- [MAL-2025-20841](https://insights.sbomify.com/MAL-2025-20841/): Malicious code in fox-undertow-xry056-project (npm) (malicious package)
- [MAL-2025-20840](https://insights.sbomify.com/MAL-2025-20840/): Malicious code in fox-undertow-wmc930-project (npm) (malicious package)
- [MAL-2025-2084](https://insights.sbomify.com/MAL-2025-2084/): Malicious code in @usaa-grp-ent-conv-platform/usaa (npm) (malicious package)
- [MAL-2025-20839](https://insights.sbomify.com/MAL-2025-20839/): Malicious code in fox-tundra-vjc448-project (npm) (malicious package)
- [MAL-2025-20838](https://insights.sbomify.com/MAL-2025-20838/): Malicious code in fox-thunder-hlv017-project (npm) (malicious package)
- [MAL-2025-20837](https://insights.sbomify.com/MAL-2025-20837/): Malicious code in fox-rose-jzq209-project (npm) (malicious package)
- [MAL-2025-20836](https://insights.sbomify.com/MAL-2025-20836/): Malicious code in fox-nugget-spj176-project (npm) (malicious package)
- [MAL-2025-20835](https://insights.sbomify.com/MAL-2025-20835/): Malicious code in fox-nautilus-ird564-project (npm) (malicious package)
- [MAL-2025-20834](https://insights.sbomify.com/MAL-2025-20834/): Malicious code in fox-mist-jeo648-project (npm) (malicious package)
- [MAL-2025-20833](https://insights.sbomify.com/MAL-2025-20833/): Malicious code in fox-meadow-nhx407-project (npm) (malicious package)
- [MAL-2025-20832](https://insights.sbomify.com/MAL-2025-20832/): Malicious code in fox-lagoon-hub517-project (npm) (malicious package)
- [MAL-2025-20831](https://insights.sbomify.com/MAL-2025-20831/): Malicious code in fox-island-zot837-project (npm) (malicious package)
- [MAL-2025-20830](https://insights.sbomify.com/MAL-2025-20830/): Malicious code in fox-grove-eyi798-project (npm) (malicious package)
- [MAL-2025-2083](https://insights.sbomify.com/MAL-2025-2083/): Malicious code in @ton-wallet/create (npm) (malicious package)
- [MAL-2025-20829](https://insights.sbomify.com/MAL-2025-20829/): Malicious code in fox-everest-qwb036-project (npm) (malicious package)
- [MAL-2025-20828](https://insights.sbomify.com/MAL-2025-20828/): Malicious code in fox-eagle-qrz110-project (npm) (malicious package)
- [MAL-2025-20827](https://insights.sbomify.com/MAL-2025-20827/): Malicious code in fox-dove-zdr554-project (npm) (malicious package)
- [MAL-2025-20826](https://insights.sbomify.com/MAL-2025-20826/): Malicious code in fox-cloud-mjp330-project (npm) (malicious package)
- [MAL-2025-20825](https://insights.sbomify.com/MAL-2025-20825/): Malicious code in fox-arctic-qmu744-project (npm) (malicious package)
- [MAL-2025-20824](https://insights.sbomify.com/MAL-2025-20824/): Malicious code in fourlic (npm) (malicious package)
- [MAL-2025-20823](https://insights.sbomify.com/MAL-2025-20823/): Malicious code in fourcore (npm) (malicious package)
- [MAL-2025-20822](https://insights.sbomify.com/MAL-2025-20822/): Malicious code in fountain_px1yi_lr921_kestrel (npm) (malicious package)
- [MAL-2025-20821](https://insights.sbomify.com/MAL-2025-20821/): Malicious code in fountain_kg0rq_4jiu9_pulse (npm) (malicious package)
- [MAL-2025-20820](https://insights.sbomify.com/MAL-2025-20820/): Malicious code in fountain_hv8dt_s7anh_undertow (npm) (malicious package)
- [MAL-2025-2082](https://insights.sbomify.com/MAL-2025-2082/): Malicious code in @siemens-ag/twodc-fonts (npm) (malicious package)
- [MAL-2025-20819](https://insights.sbomify.com/MAL-2025-20819/): Malicious code in fountain_4yxmh_8jh5i_lily (npm) (malicious package)
- [MAL-2025-20818](https://insights.sbomify.com/MAL-2025-20818/): Malicious code in fountain_2rkey_k9gk6_night (npm) (malicious package)
- [MAL-2025-20817](https://insights.sbomify.com/MAL-2025-20817/): Malicious code in foundyou (npm) (malicious package)
- [MAL-2025-20816](https://insights.sbomify.com/MAL-2025-20816/): Malicious code in foundtain (npm) (malicious package)
- [MAL-2025-20815](https://insights.sbomify.com/MAL-2025-20815/): Malicious code in foundation-supervisor-meissa-polaris (npm) (malicious package)
- [MAL-2025-20814](https://insights.sbomify.com/MAL-2025-20814/): Malicious code in foundation-higgs-colors-gravitationalwave (npm) (malicious package)
- [MAL-2025-20813](https://insights.sbomify.com/MAL-2025-20813/): Malicious code in foundation-ariel-canopus-ini (npm) (malicious package)
- [MAL-2025-20812](https://insights.sbomify.com/MAL-2025-20812/): Malicious code in foundation-accretion-indus-cosmiconfig (npm) (malicious package)
- [MAL-2025-20811](https://insights.sbomify.com/MAL-2025-20811/): Malicious code in founda (npm) (malicious package)
- [MAL-2025-20810](https://insights.sbomify.com/MAL-2025-20810/): Malicious code in fotopin (npm) (malicious package)
- [MAL-2025-2081](https://insights.sbomify.com/MAL-2025-2081/): Malicious code in @roku-web-ui/legacy-styleguide (npm) (malicious package)
- [MAL-2025-20809](https://insights.sbomify.com/MAL-2025-20809/): Malicious code in fossdev (npm) (malicious package)
- [MAL-2025-20808](https://insights.sbomify.com/MAL-2025-20808/): Malicious code in fossamail (npm) (malicious package)
- [MAL-2025-20807](https://insights.sbomify.com/MAL-2025-20807/): Malicious code in forumpp (npm) (malicious package)
- [MAL-2025-20806](https://insights.sbomify.com/MAL-2025-20806/): Malicious code in forumpe (npm) (malicious package)
- [MAL-2025-20805](https://insights.sbomify.com/MAL-2025-20805/): Malicious code in fortunka (npm) (malicious package)
- [MAL-2025-20804](https://insights.sbomify.com/MAL-2025-20804/): Malicious code in fortressjs-naked (npm) (malicious package)
- [MAL-2025-20803](https://insights.sbomify.com/MAL-2025-20803/): Malicious code in fortnite-free-vbucks-2023-april-vbucks-fkdz (npm) (malicious package)
- [MAL-2025-20802](https://insights.sbomify.com/MAL-2025-20802/): Malicious code in fortnite-free-v-bucks-april-2023-working-jedkaa (npm) (malicious package)
- [MAL-2025-20801](https://insights.sbomify.com/MAL-2025-20801/): Malicious code in fortitude-server (npm) (malicious package)
- [MAL-2025-20800](https://insights.sbomify.com/MAL-2025-20800/): Malicious code in forscene (npm) (malicious package)
- [MAL-2025-2080](https://insights.sbomify.com/MAL-2025-2080/): Malicious code in @roku-web-ui/legacy-nav-page-standard-wrapper (npm) (malicious package)
- [MAL-2025-208](https://insights.sbomify.com/MAL-2025-208/): Malicious code in network-update-pricing-options (npm) (malicious package)
- [MAL-2025-20799](https://insights.sbomify.com/MAL-2025-20799/): Malicious code in fornax-stream-spica-janus (npm) (malicious package)
- [MAL-2025-20798](https://insights.sbomify.com/MAL-2025-20798/): Malicious code in fornax-mantle-brane-nuxtjs (npm) (malicious package)
- [MAL-2025-20797](https://insights.sbomify.com/MAL-2025-20797/): Malicious code in fornax-init-typeorm-bunyan (npm) (malicious package)
- [MAL-2025-20796](https://insights.sbomify.com/MAL-2025-20796/): Malicious code in fornax-graphql-server-wasat (npm) (malicious package)
- [MAL-2025-20795](https://insights.sbomify.com/MAL-2025-20795/): Malicious code in fornax-express-package-metalsmith (npm) (malicious package)
- [MAL-2025-20794](https://insights.sbomify.com/MAL-2025-20794/): Malicious code in fornax-blitz-nuxtjs-spica (npm) (malicious package)
- [MAL-2025-20793](https://insights.sbomify.com/MAL-2025-20793/): Malicious code in fornax-betelgeuse-ichnology-halley (npm) (malicious package)
- [MAL-2025-20792](https://insights.sbomify.com/MAL-2025-20792/): Malicious code in fornax-algol-altair-cosmochemistry (npm) (malicious package)
- [MAL-2025-20791](https://insights.sbomify.com/MAL-2025-20791/): Malicious code in formik.js (npm) (malicious package)
- [MAL-2025-20790](https://insights.sbomify.com/MAL-2025-20790/): Malicious code in formboy (npm) (malicious package)
- [MAL-2025-2079](https://insights.sbomify.com/MAL-2025-2079/): Malicious code in @roku-web-ui/kitchensink-ui-base (npm) (malicious package)
- [MAL-2025-20789](https://insights.sbomify.com/MAL-2025-20789/): Malicious code in format-text (npm) (malicious package)
- [MAL-2025-20788](https://insights.sbomify.com/MAL-2025-20788/): Malicious code in forkprove (npm) (malicious package)
- [MAL-2025-20787](https://insights.sbomify.com/MAL-2025-20787/): Malicious code in fork-ts-checker-webpack-plugin-v5 (npm) (malicious package)
- [MAL-2025-20786](https://insights.sbomify.com/MAL-2025-20786/): Malicious code in fork-sun-star-bundle-iota (npm) (malicious package)
- [MAL-2025-20785](https://insights.sbomify.com/MAL-2025-20785/): Malicious code in fork-serialize-secure-grid-load (npm) (malicious package)
- [MAL-2025-20784](https://insights.sbomify.com/MAL-2025-20784/): Malicious code in fork-sedna-jupiter-ablation (npm) (malicious package)
- [MAL-2025-20783](https://insights.sbomify.com/MAL-2025-20783/): Malicious code in fork-publish-vega-zenith (npm) (malicious package)
- [MAL-2025-20782](https://insights.sbomify.com/MAL-2025-20782/): Malicious code in fork-kappa-tree-notify-object (npm) (malicious package)
- [MAL-2025-20781](https://insights.sbomify.com/MAL-2025-20781/): Malicious code in fork-daemon-container-wind-boolean (npm) (malicious package)
- [MAL-2025-20780](https://insights.sbomify.com/MAL-2025-20780/): Malicious code in forgot-sent (npm) (malicious package)
- [MAL-2025-2078](https://insights.sbomify.com/MAL-2025-2078/): Malicious code in @roku-web-ui/header (npm) (malicious package)
- [MAL-2025-20779](https://insights.sbomify.com/MAL-2025-20779/): Malicious code in forge-vscode (npm) (malicious package)
- [MAL-2025-20778](https://insights.sbomify.com/MAL-2025-20778/): Malicious code in forever-bellatrix-chromedriver-stream (npm) (malicious package)
- [MAL-2025-20777](https://insights.sbomify.com/MAL-2025-20777/): Malicious code in forever-astrochemistry-mysql-archaeogenetics (npm) (malicious package)
- [MAL-2025-20776](https://insights.sbomify.com/MAL-2025-20776/): Malicious code in forever-apex-vega-neptune (npm) (malicious package)
- [MAL-2025-20775](https://insights.sbomify.com/MAL-2025-20775/): Malicious code in forest-zenith-rbk381-project (npm) (malicious package)
- [MAL-2025-20774](https://insights.sbomify.com/MAL-2025-20774/): Malicious code in forest-xylophone-xik202-project (npm) (malicious package)
- [MAL-2025-20773](https://insights.sbomify.com/MAL-2025-20773/): Malicious code in forest-whirlpool-gua248-project (npm) (malicious package)
- [MAL-2025-20772](https://insights.sbomify.com/MAL-2025-20772/): Malicious code in forest-wave-fzd599-project (npm) (malicious package)
- [MAL-2025-20771](https://insights.sbomify.com/MAL-2025-20771/): Malicious code in forest-waterfall-atq265-project (npm) (malicious package)
- [MAL-2025-20770](https://insights.sbomify.com/MAL-2025-20770/): Malicious code in forest-uranium-rdl996-project (npm) (malicious package)
- [MAL-2025-2077](https://insights.sbomify.com/MAL-2025-2077/): Malicious code in @fcss/ui-component-library (npm) (malicious package)
- [MAL-2025-20769](https://insights.sbomify.com/MAL-2025-20769/): Malicious code in forest-rainbow-dbn331-project (npm) (malicious package)
- [MAL-2025-20768](https://insights.sbomify.com/MAL-2025-20768/): Malicious code in forest-quill-znf368-project (npm) (malicious package)
- [MAL-2025-20767](https://insights.sbomify.com/MAL-2025-20767/): Malicious code in forest-quagmire-jun890-project (npm) (malicious package)
- [MAL-2025-20766](https://insights.sbomify.com/MAL-2025-20766/): Malicious code in forest-prairie-itk284-project (npm) (malicious package)
- [MAL-2025-20765](https://insights.sbomify.com/MAL-2025-20765/): Malicious code in forest-mist-wbh282-project (npm) (malicious package)
- [MAL-2025-20764](https://insights.sbomify.com/MAL-2025-20764/): Malicious code in forest-infinity-zqx963-project (npm) (malicious package)
- [MAL-2025-20763](https://insights.sbomify.com/MAL-2025-20763/): Malicious code in forest-hill-oon603-project (npm) (malicious package)
- [MAL-2025-20762](https://insights.sbomify.com/MAL-2025-20762/): Malicious code in forclix (npm) (malicious package)
- [MAL-2025-20761](https://insights.sbomify.com/MAL-2025-20761/): Malicious code in force_webui (npm) (malicious package)
- [MAL-2025-20760](https://insights.sbomify.com/MAL-2025-20760/): Malicious code in fooseapp (npm) (malicious package)
- [MAL-2025-2076](https://insights.sbomify.com/MAL-2025-2076/): Malicious code in @cdplinetest/user-account-spec (npm) (malicious package)
- [MAL-2025-20759](https://insights.sbomify.com/MAL-2025-20759/): Malicious code in foosboom (npm) (malicious package)
- [MAL-2025-20758](https://insights.sbomify.com/MAL-2025-20758/): Malicious code in foonet (npm) (malicious package)
- [MAL-2025-20757](https://insights.sbomify.com/MAL-2025-20757/): Malicious code in foogle (npm) (malicious package)
- [MAL-2025-20756](https://insights.sbomify.com/MAL-2025-20756/): Malicious code in foodswap (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/882/