# Vulnerabilities published in 2025


- [MAL-2025-20755](https://insights.sbomify.com/MAL-2025-20755/): Malicious code in foodheat (npm) (malicious package)
- [MAL-2025-20754](https://insights.sbomify.com/MAL-2025-20754/): Malicious code in foodgap (npm) (malicious package)
- [MAL-2025-20753](https://insights.sbomify.com/MAL-2025-20753/): Malicious code in fooddiary (npm) (malicious package)
- [MAL-2025-20752](https://insights.sbomify.com/MAL-2025-20752/): Malicious code in fooda_tweet_fetcher (npm) (malicious package)
- [MAL-2025-20751](https://insights.sbomify.com/MAL-2025-20751/): Malicious code in foo2 (npm) (malicious package)
- [MAL-2025-20750](https://insights.sbomify.com/MAL-2025-20750/): Malicious code in fontcharacter (npm) (malicious package)
- [MAL-2025-2075](https://insights.sbomify.com/MAL-2025-2075/): Malicious code in @airtel-lego/sentry (npm) (malicious package)
- [MAL-2025-20749](https://insights.sbomify.com/MAL-2025-20749/): Malicious code in fontawesome-pro-all (npm) (malicious package)
- [MAL-2025-20748](https://insights.sbomify.com/MAL-2025-20748/): Malicious code in font-scrubber (npm) (malicious package)
- [MAL-2025-20747](https://insights.sbomify.com/MAL-2025-20747/): Malicious code in font-filter (npm) (malicious package)
- [MAL-2025-20746](https://insights.sbomify.com/MAL-2025-20746/): Malicious code in fonemas (npm) (malicious package)
- [MAL-2025-20745](https://insights.sbomify.com/MAL-2025-20745/): Malicious code in fonarikua (npm) (malicious package)
- [MAL-2025-20744](https://insights.sbomify.com/MAL-2025-20744/): Malicious code in fomalhaut-triton-astrometry-jsonp (npm) (malicious package)
- [MAL-2025-20743](https://insights.sbomify.com/MAL-2025-20743/): Malicious code in fomalhaut-deneb-jabbah-achernar (npm) (malicious package)
- [MAL-2025-20742](https://insights.sbomify.com/MAL-2025-20742/): Malicious code in fomalhaut-australis-isostasy-ora (npm) (malicious package)
- [MAL-2025-20741](https://insights.sbomify.com/MAL-2025-20741/): Malicious code in fomalhaut-antares-phenomic-outercore (npm) (malicious package)
- [MAL-2025-20740](https://insights.sbomify.com/MAL-2025-20740/): Malicious code in followers-for-snapchat713 (npm) (malicious package)
- [MAL-2025-2074](https://insights.sbomify.com/MAL-2025-2074/): Malicious code in adminauthserv-paypal (npm) (malicious package)
- [MAL-2025-20739](https://insights.sbomify.com/MAL-2025-20739/): Malicious code in followers-for-snapchat306 (npm) (malicious package)
- [MAL-2025-20738](https://insights.sbomify.com/MAL-2025-20738/): Malicious code in folksr (npm) (malicious package)
- [MAL-2025-20737](https://insights.sbomify.com/MAL-2025-20737/): Malicious code in foldem (npm) (malicious package)
- [MAL-2025-20736](https://insights.sbomify.com/MAL-2025-20736/): Malicious code in foever (npm) (malicious package)
- [MAL-2025-20735](https://insights.sbomify.com/MAL-2025-20735/): Malicious code in fodash (npm) (malicious package)
- [MAL-2025-20734](https://insights.sbomify.com/MAL-2025-20734/): Malicious code in focusbot (npm) (malicious package)
- [MAL-2025-20733](https://insights.sbomify.com/MAL-2025-20733/): Malicious code in focus-sherlock (npm) (malicious package)
- [MAL-2025-20732](https://insights.sbomify.com/MAL-2025-20732/): Malicious code in foamtree (npm) (malicious package)
- [MAL-2025-20731](https://insights.sbomify.com/MAL-2025-20731/): Malicious code in fnkotbrswpvhigux (npm) (malicious package)
- [MAL-2025-20730](https://insights.sbomify.com/MAL-2025-20730/): Malicious code in fnd-ridgian (npm) (malicious package)
- [MAL-2025-2073](https://insights.sbomify.com/MAL-2025-2073/): Malicious code in symphony-data-map (npm) (malicious package)
- [MAL-2025-20729](https://insights.sbomify.com/MAL-2025-20729/): Malicious code in fnckrxvsqwkldzgi (npm) (malicious package)
- [MAL-2025-20728](https://insights.sbomify.com/MAL-2025-20728/): Malicious code in fnatural (npm) (malicious package)
- [MAL-2025-20727](https://insights.sbomify.com/MAL-2025-20727/): Malicious code in fn-util (npm) (malicious package)
- [MAL-2025-20726](https://insights.sbomify.com/MAL-2025-20726/): Malicious code in flyteconsole (npm) (malicious package)
- [MAL-2025-20725](https://insights.sbomify.com/MAL-2025-20725/): Malicious code in fluxible.io (npm) (malicious package)
- [MAL-2025-20724](https://insights.sbomify.com/MAL-2025-20724/): Malicious code in fluxbuntu (npm) (malicious package)
- [MAL-2025-20723](https://insights.sbomify.com/MAL-2025-20723/): Malicious code in fluogas (npm) (malicious package)
- [MAL-2025-20722](https://insights.sbomify.com/MAL-2025-20722/): Malicious code in fluidsale (npm) (malicious package)
- [MAL-2025-20721](https://insights.sbomify.com/MAL-2025-20721/): Malicious code in fluidapp (npm) (malicious package)
- [MAL-2025-20720](https://insights.sbomify.com/MAL-2025-20720/): Malicious code in flowreferencewallet (npm) (malicious package)
- [MAL-2025-2072](https://insights.sbomify.com/MAL-2025-2072/): Malicious code in ddataflow (npm) (malicious package)
- [MAL-2025-20719](https://insights.sbomify.com/MAL-2025-20719/): Malicious code in FlowerPassword (npm) (malicious package)
- [MAL-2025-20718](https://insights.sbomify.com/MAL-2025-20718/): Malicious code in flowcrypt-browser (npm) (malicious package)
- [MAL-2025-20717](https://insights.sbomify.com/MAL-2025-20717/): Malicious code in flow_trigger_connector (npm) (malicious package)
- [MAL-2025-20716](https://insights.sbomify.com/MAL-2025-20716/): Malicious code in flow_actions_connector (npm) (malicious package)
- [MAL-2025-20715](https://insights.sbomify.com/MAL-2025-20715/): Malicious code in flow_action_connector (npm) (malicious package)
- [MAL-2025-20714](https://insights.sbomify.com/MAL-2025-20714/): Malicious code in flourish-voyage-xlb743-project (npm) (malicious package)
- [MAL-2025-20713](https://insights.sbomify.com/MAL-2025-20713/): Malicious code in floradex (npm) (malicious package)
- [MAL-2025-20712](https://insights.sbomify.com/MAL-2025-20712/): Malicious code in flora-naeki-0irjp-moondust-project (npm) (malicious package)
- [MAL-2025-20711](https://insights.sbomify.com/MAL-2025-20711/): Malicious code in flora-jb63s-o00ps-bramble-project (npm) (malicious package)
- [MAL-2025-20710](https://insights.sbomify.com/MAL-2025-20710/): Malicious code in flora-hcyw7-r1b7b-universe-project (npm) (malicious package)
- [MAL-2025-2071](https://insights.sbomify.com/MAL-2025-2071/): Malicious code in connector123 (npm) (malicious package)
- [MAL-2025-20709](https://insights.sbomify.com/MAL-2025-20709/): Malicious code in flora-7i74l-oef07-yonder-project (npm) (malicious package)
- [MAL-2025-20708](https://insights.sbomify.com/MAL-2025-20708/): Malicious code in flora-6evw8-5gm76-indigo-project (npm) (malicious package)
- [MAL-2025-20707](https://insights.sbomify.com/MAL-2025-20707/): Malicious code in flora-5qrg4-9lwo2-dawn-project (npm) (malicious package)
- [MAL-2025-20706](https://insights.sbomify.com/MAL-2025-20706/): Malicious code in flora-59pn3-0lvp9-keystone-project (npm) (malicious package)
- [MAL-2025-20705](https://insights.sbomify.com/MAL-2025-20705/): Malicious code in flora-3mdfo-zp4v0-iceberg-project (npm) (malicious package)
- [MAL-2025-20704](https://insights.sbomify.com/MAL-2025-20704/): Malicious code in floor7js (npm) (malicious package)
- [MAL-2025-20703](https://insights.sbomify.com/MAL-2025-20703/): Malicious code in flockulick (npm) (malicious package)
- [MAL-2025-20702](https://insights.sbomify.com/MAL-2025-20702/): Malicious code in float-module-export-encode-parse (npm) (malicious package)
- [MAL-2025-20701](https://insights.sbomify.com/MAL-2025-20701/): Malicious code in flipcup (npm) (malicious package)
- [MAL-2025-20700](https://insights.sbomify.com/MAL-2025-20700/): Malicious code in flickr-view (npm) (malicious package)
- [MAL-2025-2070](https://insights.sbomify.com/MAL-2025-2070/): Malicious code in connector-colaborator1 (npm) (malicious package)
- [MAL-2025-207](https://insights.sbomify.com/MAL-2025-207/): Malicious code in mintapp (npm) (malicious package)
- [MAL-2025-20699](https://insights.sbomify.com/MAL-2025-20699/): Malicious code in flickr-photo-brick (npm) (malicious package)
- [MAL-2025-20698](https://insights.sbomify.com/MAL-2025-20698/): Malicious code in flexiweb (npm) (malicious package)
- [MAL-2025-20697](https://insights.sbomify.com/MAL-2025-20697/): Malicious code in flexishow (npm) (malicious package)
- [MAL-2025-20696](https://insights.sbomify.com/MAL-2025-20696/): Malicious code in flex-config (npm) (malicious package)
- [MAL-2025-20695](https://insights.sbomify.com/MAL-2025-20695/): Malicious code in fleet.vimcar.com (npm) (malicious package)
- [MAL-2025-20694](https://insights.sbomify.com/MAL-2025-20694/): Malicious code in fleebee (npm) (malicious package)
- [MAL-2025-20693](https://insights.sbomify.com/MAL-2025-20693/): Malicious code in flc4yn (npm) (malicious package)
- [MAL-2025-20692](https://insights.sbomify.com/MAL-2025-20692/): Malicious code in flbtznmirqpweyxh (npm) (malicious package)
- [MAL-2025-20691](https://insights.sbomify.com/MAL-2025-20691/): Malicious code in flaw-m18 (npm) (malicious package)
- [MAL-2025-20690](https://insights.sbomify.com/MAL-2025-20690/): Malicious code in flatmap-stream (npm) (malicious package)
- [MAL-2025-2069](https://insights.sbomify.com/MAL-2025-2069/): Malicious code in connector-colaborator (npm) (malicious package)
- [MAL-2025-20689](https://insights.sbomify.com/MAL-2025-20689/): Malicious code in flatchr (npm) (malicious package)
- [MAL-2025-20688](https://insights.sbomify.com/MAL-2025-20688/): Malicious code in flat-glob (npm) (malicious package)
- [MAL-2025-20687](https://insights.sbomify.com/MAL-2025-20687/): Malicious code in flaskplay (npm) (malicious package)
- [MAL-2025-20686](https://insights.sbomify.com/MAL-2025-20686/): Malicious code in flasknado (npm) (malicious package)
- [MAL-2025-20685](https://insights.sbomify.com/MAL-2025-20685/): Malicious code in flaskbase (npm) (malicious package)
- [MAL-2025-20684](https://insights.sbomify.com/MAL-2025-20684/): Malicious code in flashsort (npm) (malicious package)
- [MAL-2025-20683](https://insights.sbomify.com/MAL-2025-20683/): Malicious code in flashseo (npm) (malicious package)
- [MAL-2025-20682](https://insights.sbomify.com/MAL-2025-20682/): Malicious code in flashpro (npm) (malicious package)
- [MAL-2025-20681](https://insights.sbomify.com/MAL-2025-20681/): Malicious code in flashcap (npm) (malicious package)
- [MAL-2025-20680](https://insights.sbomify.com/MAL-2025-20680/): Malicious code in flashbaq (npm) (malicious package)
- [MAL-2025-2068](https://insights.sbomify.com/MAL-2025-2068/): Malicious code in unms-server (npm) (malicious package)
- [MAL-2025-20679](https://insights.sbomify.com/MAL-2025-20679/): Malicious code in flash-list (npm) (malicious package)
- [MAL-2025-20678](https://insights.sbomify.com/MAL-2025-20678/): Malicious code in flare_j98at_gzsii_boulder (npm) (malicious package)
- [MAL-2025-20677](https://insights.sbomify.com/MAL-2025-20677/): Malicious code in flare_eyuhh_d4qrp_thunder (npm) (malicious package)
- [MAL-2025-20676](https://insights.sbomify.com/MAL-2025-20676/): Malicious code in flare_af1ps_oxuv6_fern (npm) (malicious package)
- [MAL-2025-20675](https://insights.sbomify.com/MAL-2025-20675/): Malicious code in flare-xenon-1tkh (npm) (malicious package)
- [MAL-2025-20674](https://insights.sbomify.com/MAL-2025-20674/): Malicious code in flare-ugli-vxl9 (npm) (malicious package)
- [MAL-2025-20673](https://insights.sbomify.com/MAL-2025-20673/): Malicious code in flare-testcafe-futurology-subduction (npm) (malicious package)
- [MAL-2025-20672](https://insights.sbomify.com/MAL-2025-20672/): Malicious code in flare-smart-contracts (npm) (malicious package)
- [MAL-2025-20671](https://insights.sbomify.com/MAL-2025-20671/): Malicious code in flare-less-loader-callisto-spectron-webdriver (npm) (malicious package)
- [MAL-2025-20670](https://insights.sbomify.com/MAL-2025-20670/): Malicious code in flare-helicopter-3bkb (npm) (malicious package)
- [MAL-2025-2067](https://insights.sbomify.com/MAL-2025-2067/): Malicious code in product-custom-grid-columns (npm) (malicious package)
- [MAL-2025-20669](https://insights.sbomify.com/MAL-2025-20669/): Malicious code in flare-elderberry-kufs (npm) (malicious package)
- [MAL-2025-20668](https://insights.sbomify.com/MAL-2025-20668/): Malicious code in flare-delta-dz9g (npm) (malicious package)
- [MAL-2025-20667](https://insights.sbomify.com/MAL-2025-20667/): Malicious code in flappycat (npm) (malicious package)
- [MAL-2025-20666](https://insights.sbomify.com/MAL-2025-20666/): Malicious code in flamsted (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/883/