# Vulnerabilities published in 2025


- [MAL-2025-20665](https://insights.sbomify.com/MAL-2025-20665/): Malicious code in flamma (npm) (malicious package)
- [MAL-2025-20664](https://insights.sbomify.com/MAL-2025-20664/): Malicious code in flame-treasure-nsk229-project (npm) (malicious package)
- [MAL-2025-20663](https://insights.sbomify.com/MAL-2025-20663/): Malicious code in flame-mo59h-wujz3-glow-project (npm) (malicious package)
- [MAL-2025-20662](https://insights.sbomify.com/MAL-2025-20662/): Malicious code in flame-fb9wz-y9wkd-crystal-project (npm) (malicious package)
- [MAL-2025-20661](https://insights.sbomify.com/MAL-2025-20661/): Malicious code in flame-awklr-zlaf6-yarn-project (npm) (malicious package)
- [MAL-2025-20660](https://insights.sbomify.com/MAL-2025-20660/): Malicious code in flame-1aq5p-6oszx-xenith-project (npm) (malicious package)
- [MAL-2025-2066](https://insights.sbomify.com/MAL-2025-2066/): Malicious code in aem-maven-archetype (npm) (malicious package)
- [MAL-2025-20659](https://insights.sbomify.com/MAL-2025-20659/): Malicious code in flagueinc (npm) (malicious package)
- [MAL-2025-20658](https://insights.sbomify.com/MAL-2025-20658/): Malicious code in flagquizz (npm) (malicious package)
- [MAL-2025-20657](https://insights.sbomify.com/MAL-2025-20657/): Malicious code in flagbuild (npm) (malicious package)
- [MAL-2025-20656](https://insights.sbomify.com/MAL-2025-20656/): Malicious code in fkyroxlucdzbiwav (npm) (malicious package)
- [MAL-2025-20655](https://insights.sbomify.com/MAL-2025-20655/): Malicious code in fkyqbrzjwtnkgdch (npm) (malicious package)
- [MAL-2025-20654](https://insights.sbomify.com/MAL-2025-20654/): Malicious code in fkpblevdrznyjoux (npm) (malicious package)
- [MAL-2025-20653](https://insights.sbomify.com/MAL-2025-20653/): Malicious code in fkmnauybkhjpwdgz (npm) (malicious package)
- [MAL-2025-20652](https://insights.sbomify.com/MAL-2025-20652/): Malicious code in fkkulvetqcjznbow (npm) (malicious package)
- [MAL-2025-20651](https://insights.sbomify.com/MAL-2025-20651/): Malicious code in fkhpldqgubkatcys (npm) (malicious package)
- [MAL-2025-20650](https://insights.sbomify.com/MAL-2025-20650/): Malicious code in fk-cs-dashboards-skill-manager (npm) (malicious package)
- [MAL-2025-2065](https://insights.sbomify.com/MAL-2025-2065/): Malicious code in qaboard (npm) (malicious package)
- [MAL-2025-20649](https://insights.sbomify.com/MAL-2025-20649/): Malicious code in fk-cs-dashboards-dt-issue-type (npm) (malicious package)
- [MAL-2025-20648](https://insights.sbomify.com/MAL-2025-20648/): Malicious code in fk-cs-dashboards-dt-error-string (npm) (malicious package)
- [MAL-2025-20647](https://insights.sbomify.com/MAL-2025-20647/): Malicious code in fjxsuchnkwaopieg (npm) (malicious package)
- [MAL-2025-20646](https://insights.sbomify.com/MAL-2025-20646/): Malicious code in fjord-vskja-e9xfr-quartz-project (npm) (malicious package)
- [MAL-2025-20645](https://insights.sbomify.com/MAL-2025-20645/): Malicious code in fjord-utopia-ofh506-project (npm) (malicious package)
- [MAL-2025-20644](https://insights.sbomify.com/MAL-2025-20644/): Malicious code in fjord-utopia-kcz091-project (npm) (malicious package)
- [MAL-2025-20643](https://insights.sbomify.com/MAL-2025-20643/): Malicious code in fjord-sunset-xfc483-project (npm) (malicious package)
- [MAL-2025-20642](https://insights.sbomify.com/MAL-2025-20642/): Malicious code in fjord-quilt-ctu468-project (npm) (malicious package)
- [MAL-2025-20641](https://insights.sbomify.com/MAL-2025-20641/): Malicious code in fjord-p4gll-meyw1-meadow-project (npm) (malicious package)
- [MAL-2025-20640](https://insights.sbomify.com/MAL-2025-20640/): Malicious code in fjord-orangutan-ini579-project (npm) (malicious package)
- [MAL-2025-2064](https://insights.sbomify.com/MAL-2025-2064/): Malicious code in bahamazing (npm) (malicious package)
- [MAL-2025-20639](https://insights.sbomify.com/MAL-2025-20639/): Malicious code in fjord-lightning-dxa064-project (npm) (malicious package)
- [MAL-2025-20638](https://insights.sbomify.com/MAL-2025-20638/): Malicious code in fjord-glacier-deb197-project (npm) (malicious package)
- [MAL-2025-20637](https://insights.sbomify.com/MAL-2025-20637/): Malicious code in fjord-fern-ndv172-project (npm) (malicious package)
- [MAL-2025-20636](https://insights.sbomify.com/MAL-2025-20636/): Malicious code in fjord-emerald-tgy084-project (npm) (malicious package)
- [MAL-2025-20635](https://insights.sbomify.com/MAL-2025-20635/): Malicious code in fjord-edrgl-q411u-willow-project (npm) (malicious package)
- [MAL-2025-20634](https://insights.sbomify.com/MAL-2025-20634/): Malicious code in fjord-cfdg2-kufau-reef-project (npm) (malicious package)
- [MAL-2025-20633](https://insights.sbomify.com/MAL-2025-20633/): Malicious code in fjord-cascade-nuy350-project (npm) (malicious package)
- [MAL-2025-20632](https://insights.sbomify.com/MAL-2025-20632/): Malicious code in fjord-axyhv-udbri-hearth-project (npm) (malicious package)
- [MAL-2025-20631](https://insights.sbomify.com/MAL-2025-20631/): Malicious code in fizzler (npm) (malicious package)
- [MAL-2025-20630](https://insights.sbomify.com/MAL-2025-20630/): Malicious code in fixspec (npm) (malicious package)
- [MAL-2025-2063](https://insights.sbomify.com/MAL-2025-2063/): Malicious code in safe-client-gateway (npm) (malicious package)
- [MAL-2025-20629](https://insights.sbomify.com/MAL-2025-20629/): Malicious code in fixpred (npm) (malicious package)
- [MAL-2025-20628](https://insights.sbomify.com/MAL-2025-20628/): Malicious code in fixmetoo (npm) (malicious package)
- [MAL-2025-20627](https://insights.sbomify.com/MAL-2025-20627/): Malicious code in fixico (npm) (malicious package)
- [MAL-2025-20626](https://insights.sbomify.com/MAL-2025-20626/): Malicious code in fivetran-webhook-example-express (npm) (malicious package)
- [MAL-2025-20625](https://insights.sbomify.com/MAL-2025-20625/): Malicious code in fivaldi-template (npm) (malicious package)
- [MAL-2025-20624](https://insights.sbomify.com/MAL-2025-20624/): Malicious code in fitscore (npm) (malicious package)
- [MAL-2025-20623](https://insights.sbomify.com/MAL-2025-20623/): Malicious code in fitrpg (npm) (malicious package)
- [MAL-2025-20622](https://insights.sbomify.com/MAL-2025-20622/): Malicious code in fitri-martabak25-kuki (npm) (malicious package)
- [MAL-2025-20621](https://insights.sbomify.com/MAL-2025-20621/): Malicious code in fitri-mangut59-breki (npm) (malicious package)
- [MAL-2025-20620](https://insights.sbomify.com/MAL-2025-20620/): Malicious code in fitri-kupat83-kuki (npm) (malicious package)
- [MAL-2025-2062](https://insights.sbomify.com/MAL-2025-2062/): Malicious code in learning-kotlin (npm) (malicious package)
- [MAL-2025-20619](https://insights.sbomify.com/MAL-2025-20619/): Malicious code in fitri-kentang19-sukiwir (npm) (malicious package)
- [MAL-2025-20618](https://insights.sbomify.com/MAL-2025-20618/): Malicious code in fitools (npm) (malicious package)
- [MAL-2025-20617](https://insights.sbomify.com/MAL-2025-20617/): Malicious code in fispatch (npm) (malicious package)
- [MAL-2025-20616](https://insights.sbomify.com/MAL-2025-20616/): Malicious code in fiskal (npm) (malicious package)
- [MAL-2025-20615](https://insights.sbomify.com/MAL-2025-20615/): Malicious code in fishutils (npm) (malicious package)
- [MAL-2025-20614](https://insights.sbomify.com/MAL-2025-20614/): Malicious code in fishtally (npm) (malicious package)
- [MAL-2025-20613](https://insights.sbomify.com/MAL-2025-20613/): Malicious code in fis3-lint-eslint-umu (npm) (malicious package)
- [MAL-2025-20612](https://insights.sbomify.com/MAL-2025-20612/): Malicious code in fis-rgs (npm) (malicious package)
- [MAL-2025-20611](https://insights.sbomify.com/MAL-2025-20611/): Malicious code in fis-postpackager-zseajs (npm) (malicious package)
- [MAL-2025-20610](https://insights.sbomify.com/MAL-2025-20610/): Malicious code in fis-msprd-react-build (npm) (malicious package)
- [MAL-2025-2061](https://insights.sbomify.com/MAL-2025-2061/): Malicious code in atpw-reactive-form (npm) (malicious package)
- [MAL-2025-20609](https://insights.sbomify.com/MAL-2025-20609/): Malicious code in firtstan (npm) (malicious package)
- [MAL-2025-20608](https://insights.sbomify.com/MAL-2025-20608/): Malicious code in firstzf (npm) (malicious package)
- [MAL-2025-20607](https://insights.sbomify.com/MAL-2025-20607/): Malicious code in firstror (npm) (malicious package)
- [MAL-2025-20606](https://insights.sbomify.com/MAL-2025-20606/): Malicious code in firstgold (npm) (malicious package)
- [MAL-2025-20605](https://insights.sbomify.com/MAL-2025-20605/): Malicious code in firstgem (npm) (malicious package)
- [MAL-2025-20604](https://insights.sbomify.com/MAL-2025-20604/): Malicious code in first-val (npm) (malicious package)
- [MAL-2025-20603](https://insights.sbomify.com/MAL-2025-20603/): Malicious code in firpsm (npm) (malicious package)
- [MAL-2025-20602](https://insights.sbomify.com/MAL-2025-20602/): Malicious code in fireworks_mhejg_v4mk1_zephyr (npm) (malicious package)
- [MAL-2025-20601](https://insights.sbomify.com/MAL-2025-20601/): Malicious code in fireworks_9alox_mb1vn_giraffe (npm) (malicious package)
- [MAL-2025-20600](https://insights.sbomify.com/MAL-2025-20600/): Malicious code in firewind (npm) (malicious package)
- [MAL-2025-2060](https://insights.sbomify.com/MAL-2025-2060/): Malicious code in subscriptionmgmtserv (npm) (malicious package)
- [MAL-2025-206](https://insights.sbomify.com/MAL-2025-206/): Malicious code in matic-child-subgraphs (npm) (malicious package)
- [MAL-2025-20599](https://insights.sbomify.com/MAL-2025-20599/): Malicious code in firetaxi (npm) (malicious package)
- [MAL-2025-20598](https://insights.sbomify.com/MAL-2025-20598/): Malicious code in firestore-stripe-invoices (npm) (malicious package)
- [MAL-2025-20597](https://insights.sbomify.com/MAL-2025-20597/): Malicious code in firelines (npm) (malicious package)
- [MAL-2025-20596](https://insights.sbomify.com/MAL-2025-20596/): Malicious code in fireforos (npm) (malicious package)
- [MAL-2025-20595](https://insights.sbomify.com/MAL-2025-20595/): Malicious code in firefly_xl1o4_yet5h_giraffe (npm) (malicious package)
- [MAL-2025-20594](https://insights.sbomify.com/MAL-2025-20594/): Malicious code in firefly_unlcj_d3ftd_xenon (npm) (malicious package)
- [MAL-2025-20593](https://insights.sbomify.com/MAL-2025-20593/): Malicious code in firefly_u1w0u_6tjog_nebula (npm) (malicious package)
- [MAL-2025-20592](https://insights.sbomify.com/MAL-2025-20592/): Malicious code in firefly_h2i0v_z7sya_underworld (npm) (malicious package)
- [MAL-2025-20591](https://insights.sbomify.com/MAL-2025-20591/): Malicious code in firefly_efov4_bncl0_quiver (npm) (malicious package)
- [MAL-2025-20590](https://insights.sbomify.com/MAL-2025-20590/): Malicious code in firefly_drm5y_12h6d_voyage (npm) (malicious package)
- [MAL-2025-2059](https://insights.sbomify.com/MAL-2025-2059/): Malicious code in subnplanmgmtserv (npm) (malicious package)
- [MAL-2025-20589](https://insights.sbomify.com/MAL-2025-20589/): Malicious code in firefly_2jzh6_bngzi_bloom (npm) (malicious package)
- [MAL-2025-20588](https://insights.sbomify.com/MAL-2025-20588/): Malicious code in fireboard (npm) (malicious package)
- [MAL-2025-20587](https://insights.sbomify.com/MAL-2025-20587/): Malicious code in firebase-queue-client (npm) (malicious package)
- [MAL-2025-20586](https://insights.sbomify.com/MAL-2025-20586/): Malicious code in firebase-io-taurus-procyon (npm) (malicious package)
- [MAL-2025-20585](https://insights.sbomify.com/MAL-2025-20585/): Malicious code in firebase-babel-apollo-dotenv-safe (npm) (malicious package)
- [MAL-2025-20584](https://insights.sbomify.com/MAL-2025-20584/): Malicious code in fireasp (npm) (malicious package)
- [MAL-2025-20583](https://insights.sbomify.com/MAL-2025-20583/): Malicious code in fire-new-encode-fire-transpile (npm) (malicious package)
- [MAL-2025-20582](https://insights.sbomify.com/MAL-2025-20582/): Malicious code in fire-good-serialize-process-phi (npm) (malicious package)
- [MAL-2025-20581](https://insights.sbomify.com/MAL-2025-20581/): Malicious code in fire-error-pipe-delta-old (npm) (malicious package)
- [MAL-2025-20580](https://insights.sbomify.com/MAL-2025-20580/): Malicious code in fir-grape-behe (npm) (malicious package)
- [MAL-2025-2058](https://insights.sbomify.com/MAL-2025-2058/): Malicious code in buttonfactoryserv-paypal (npm) (malicious package)
- [MAL-2025-20579](https://insights.sbomify.com/MAL-2025-20579/): Malicious code in fintrak (npm) (malicious package)
- [MAL-2025-20578](https://insights.sbomify.com/MAL-2025-20578/): Malicious code in finnlet-topbar-minimal (npm) (malicious package)
- [MAL-2025-20577](https://insights.sbomify.com/MAL-2025-20577/): Malicious code in finnlet-topbar (npm) (malicious package)
- [MAL-2025-20576](https://insights.sbomify.com/MAL-2025-20576/): Malicious code in finnlet-footer (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/884/