# Vulnerabilities published in 2025 - [MAL-2025-20575](https://insights.sbomify.com/MAL-2025-20575/): Malicious code in finnbrain (npm) (malicious package) - [MAL-2025-20574](https://insights.sbomify.com/MAL-2025-20574/): Malicious code in finn-lib-supported-platforms (npm) (malicious package) - [MAL-2025-20573](https://insights.sbomify.com/MAL-2025-20573/): Malicious code in findmate (npm) (malicious package) - [MAL-2025-20572](https://insights.sbomify.com/MAL-2025-20572/): Malicious code in findall (npm) (malicious package) - [MAL-2025-20571](https://insights.sbomify.com/MAL-2025-20571/): Malicious code in find-images.js (npm) (malicious package) - [MAL-2025-20570](https://insights.sbomify.com/MAL-2025-20570/): Malicious code in finally-sed-process-good-container (npm) (malicious package) - [MAL-2025-2057](https://insights.sbomify.com/MAL-2025-2057/): Malicious code in wefweg32 (npm) (malicious package) - [MAL-2025-20569](https://insights.sbomify.com/MAL-2025-20569/): Malicious code in finally-parse-star-tau-zero (npm) (malicious package) - [MAL-2025-20568](https://insights.sbomify.com/MAL-2025-20568/): Malicious code in finally-enum-byte-kappa-load (npm) (malicious package) - [MAL-2025-20567](https://insights.sbomify.com/MAL-2025-20567/): Malicious code in final-sigma-warn-emulate-big (npm) (malicious package) - [MAL-2025-20566](https://insights.sbomify.com/MAL-2025-20566/): Malicious code in final-lambda-java-fast-gamma (npm) (malicious package) - [MAL-2025-20565](https://insights.sbomify.com/MAL-2025-20565/): Malicious code in final-html (npm) (malicious package) - [MAL-2025-20564](https://insights.sbomify.com/MAL-2025-20564/): Malicious code in final-abstract-info-benchmark-gamma (npm) (malicious package) - [MAL-2025-20563](https://insights.sbomify.com/MAL-2025-20563/): Malicious code in finacle (npm) (malicious package) - [MAL-2025-20562](https://insights.sbomify.com/MAL-2025-20562/): Malicious code in fin-vue-cli (npm) (malicious package) - [MAL-2025-20561](https://insights.sbomify.com/MAL-2025-20561/): Malicious code in fin-heytap-official (npm) (malicious package) - [MAL-2025-20560](https://insights.sbomify.com/MAL-2025-20560/): Malicious code in fimanagementservice_ca-paypal (npm) (malicious package) - [MAL-2025-2056](https://insights.sbomify.com/MAL-2025-2056/): Malicious code in twitter-sc (npm) (malicious package) - [MAL-2025-20559](https://insights.sbomify.com/MAL-2025-20559/): Malicious code in fimanagementserv_ca (npm) (malicious package) - [MAL-2025-20558](https://insights.sbomify.com/MAL-2025-20558/): Malicious code in filterui (npm) (malicious package) - [MAL-2025-20557](https://insights.sbomify.com/MAL-2025-20557/): Malicious code in filter-stack (npm) (malicious package) - [MAL-2025-20556](https://insights.sbomify.com/MAL-2025-20556/): Malicious code in filter-node-package (npm) (malicious package) - [MAL-2025-20555](https://insights.sbomify.com/MAL-2025-20555/): Malicious code in filmoteca (npm) (malicious package) - [MAL-2025-20554](https://insights.sbomify.com/MAL-2025-20554/): Malicious code in filmark (npm) (malicious package) - [MAL-2025-20553](https://insights.sbomify.com/MAL-2025-20553/): Malicious code in filerc (npm) (malicious package) - [MAL-2025-20552](https://insights.sbomify.com/MAL-2025-20552/): Malicious code in filename-id (npm) (malicious package) - [MAL-2025-20551](https://insights.sbomify.com/MAL-2025-20551/): Malicious code in filedez (npm) (malicious package) - [MAL-2025-20550](https://insights.sbomify.com/MAL-2025-20550/): Malicious code in filecrush (npm) (malicious package) - [MAL-2025-2055](https://insights.sbomify.com/MAL-2025-2055/): Malicious code in tg-shell-installer (npm) (malicious package) - [MAL-2025-20549](https://insights.sbomify.com/MAL-2025-20549/): Malicious code in file-test-decode-balance-secure (npm) (malicious package) - [MAL-2025-20548](https://insights.sbomify.com/MAL-2025-20548/): Malicious code in file-logging (npm) (malicious package) - [MAL-2025-20547](https://insights.sbomify.com/MAL-2025-20547/): Malicious code in file-load-validate-cat-decode (npm) (malicious package) - [MAL-2025-20546](https://insights.sbomify.com/MAL-2025-20546/): Malicious code in file-corrupt-x00-detect (npm) (malicious package) - [MAL-2025-20545](https://insights.sbomify.com/MAL-2025-20545/): Malicious code in file-alb-um-zip-new-mp3-the-argument-42zje-bbcgpm (npm) (malicious package) - [MAL-2025-20544](https://insights.sbomify.com/MAL-2025-20544/): Malicious code in file-alb-um-zip-new-mp3-satanic-panic-in-the-attic-43hjw-elhfex (npm) (malicious package) - [MAL-2025-20543](https://insights.sbomify.com/MAL-2025-20543/): Malicious code in file-alb-um-zip-new-mp3-none-shall-pass-9w6ra-hddlmn (npm) (malicious package) - [MAL-2025-20542](https://insights.sbomify.com/MAL-2025-20542/): Malicious code in file-alb-um-zip-new-mp3-65426-satyagraha-1-lpo1l-rqohyk (npm) (malicious package) - [MAL-2025-20541](https://insights.sbomify.com/MAL-2025-20541/): Malicious code in file-alb-um-zip-new-mp3-5722-vanishing-point-iu8kn-ggwnhe (npm) (malicious package) - [MAL-2025-20540](https://insights.sbomify.com/MAL-2025-20540/): Malicious code in file-alb-um-zip-new-mp3-56040-vengeance-9f1kt-wcbqbj (npm) (malicious package) - [MAL-2025-2054](https://insights.sbomify.com/MAL-2025-2054/): Malicious code in tg-shell-bot (npm) (malicious package) - [MAL-2025-20539](https://insights.sbomify.com/MAL-2025-20539/): Malicious code in file-alb-um-zip-new-mp3-5298-reality-1-rymoz-ptimcb (npm) (malicious package) - [MAL-2025-20538](https://insights.sbomify.com/MAL-2025-20538/): Malicious code in file-alb-um-zip-new-mp3-38030-too-legit-to-quit-0d58y-hddhtz (npm) (malicious package) - [MAL-2025-20537](https://insights.sbomify.com/MAL-2025-20537/): Malicious code in file-alb-um-zip-new-mp3-37992-alone-ii-the-home-recordings-of-rivers-cuomo-s7x6l-djjkak (npm) (malicious package) - [MAL-2025-20536](https://insights.sbomify.com/MAL-2025-20536/): Malicious code in file-alb-um-zip-new-mp3-35910-walking-in-london-t632p-ssrons (npm) (malicious package) - [MAL-2025-20535](https://insights.sbomify.com/MAL-2025-20535/): Malicious code in file-alb-um-zip-new-mp3-35841-harbor-lights-hzhvw-aeyuch (npm) (malicious package) - [MAL-2025-20534](https://insights.sbomify.com/MAL-2025-20534/): Malicious code in file-alb-um-zip-new-mp3-345273-dancing-with-the-devil-the-art-of-starting-over-ox6x8-trglkl (npm) (malicious package) - [MAL-2025-20533](https://insights.sbomify.com/MAL-2025-20533/): Malicious code in file-alb-um-zip-new-mp3-283978-tim-melina-theo-bobby-bsdj4-wndzis (npm) (malicious package) - [MAL-2025-20532](https://insights.sbomify.com/MAL-2025-20532/): Malicious code in file-alb-um-zip-new-mp3-200499-threads-i0tvt-cdrrmq (npm) (malicious package) - [MAL-2025-20531](https://insights.sbomify.com/MAL-2025-20531/): Malicious code in file-alb-um-zip-new-mp3-100573-ossuarium-silhouettes-unhallowed-riqt1-sxowry (npm) (malicious package) - [MAL-2025-20530](https://insights.sbomify.com/MAL-2025-20530/): Malicious code in filament-yakutsk-farout-scripts (npm) (malicious package) - [MAL-2025-2053](https://insights.sbomify.com/MAL-2025-2053/): Malicious code in stripe-sample-accept-a-card-payment (npm) (malicious package) - [MAL-2025-20529](https://insights.sbomify.com/MAL-2025-20529/): Malicious code in filament-protractor-library-css-minimizer-webpack-plugin (npm) (malicious package) - [MAL-2025-20528](https://insights.sbomify.com/MAL-2025-20528/): Malicious code in filament-fermion-jasmine-fusion (npm) (malicious package) - [MAL-2025-20527](https://insights.sbomify.com/MAL-2025-20527/): Malicious code in fikfifif (npm) (malicious package) - [MAL-2025-20526](https://insights.sbomify.com/MAL-2025-20526/): Malicious code in fiissuerread-paypal (npm) (malicious package) - [MAL-2025-20525](https://insights.sbomify.com/MAL-2025-20525/): Malicious code in figures-umbra-async-joviology (npm) (malicious package) - [MAL-2025-20524](https://insights.sbomify.com/MAL-2025-20524/): Malicious code in figures-jest-astro-draco (npm) (malicious package) - [MAL-2025-20523](https://insights.sbomify.com/MAL-2025-20523/): Malicious code in figurer (npm) (malicious package) - [MAL-2025-20522](https://insights.sbomify.com/MAL-2025-20522/): Malicious code in figstack (npm) (malicious package) - [MAL-2025-20521](https://insights.sbomify.com/MAL-2025-20521/): Malicious code in figma-to-streamlit (npm) (malicious package) - [MAL-2025-20520](https://insights.sbomify.com/MAL-2025-20520/): Malicious code in figma-api-spellcheck (npm) (malicious package) - [MAL-2025-2052](https://insights.sbomify.com/MAL-2025-2052/): Malicious code in staked-celo-app (npm) (malicious package) - [MAL-2025-20519](https://insights.sbomify.com/MAL-2025-20519/): Malicious code in fightly (npm) (malicious package) - [MAL-2025-20518](https://insights.sbomify.com/MAL-2025-20518/): Malicious code in figcquery (npm) (malicious package) - [MAL-2025-20517](https://insights.sbomify.com/MAL-2025-20517/): Malicious code in fig-z7u-project (npm) (malicious package) - [MAL-2025-20516](https://insights.sbomify.com/MAL-2025-20516/): Malicious code in fig-yam-owns (npm) (malicious package) - [MAL-2025-20515](https://insights.sbomify.com/MAL-2025-20515/): Malicious code in fig-xray-mango-cuoyn (npm) (malicious package) - [MAL-2025-20514](https://insights.sbomify.com/MAL-2025-20514/): Malicious code in fig-xigua-xray-jdjku (npm) (malicious package) - [MAL-2025-20513](https://insights.sbomify.com/MAL-2025-20513/): Malicious code in fig-xigua-kiwi-qpeir (npm) (malicious package) - [MAL-2025-20512](https://insights.sbomify.com/MAL-2025-20512/): Malicious code in fig-wge-project (npm) (malicious package) - [MAL-2025-20511](https://insights.sbomify.com/MAL-2025-20511/): Malicious code in fig-wasabi-r9if (npm) (malicious package) - [MAL-2025-20510](https://insights.sbomify.com/MAL-2025-20510/): Malicious code in fig-void-rxui (npm) (malicious package) - [MAL-2025-2051](https://insights.sbomify.com/MAL-2025-2051/): Malicious code in self-focused (npm) (malicious package) - [MAL-2025-20509](https://insights.sbomify.com/MAL-2025-20509/): Malicious code in fig-victor-november-kweva (npm) (malicious package) - [MAL-2025-20508](https://insights.sbomify.com/MAL-2025-20508/): Malicious code in fig-victor-fx5p (npm) (malicious package) - [MAL-2025-20507](https://insights.sbomify.com/MAL-2025-20507/): Malicious code in fig-victor-cvjd (npm) (malicious package) - [MAL-2025-20506](https://insights.sbomify.com/MAL-2025-20506/): Malicious code in fig-vanilla-kcwd (npm) (malicious package) - [MAL-2025-20505](https://insights.sbomify.com/MAL-2025-20505/): Malicious code in fig-tqy-project (npm) (malicious package) - [MAL-2025-20504](https://insights.sbomify.com/MAL-2025-20504/): Malicious code in fig-tango-ohla (npm) (malicious package) - [MAL-2025-20503](https://insights.sbomify.com/MAL-2025-20503/): Malicious code in fig-tangerine-foxtrot-liano (npm) (malicious package) - [MAL-2025-20502](https://insights.sbomify.com/MAL-2025-20502/): Malicious code in fig-t7l-project (npm) (malicious package) - [MAL-2025-20501](https://insights.sbomify.com/MAL-2025-20501/): Malicious code in fig-t1g-project (npm) (malicious package) - [MAL-2025-20500](https://insights.sbomify.com/MAL-2025-20500/): Malicious code in fig-sui-project (npm) (malicious package) - [MAL-2025-2050](https://insights.sbomify.com/MAL-2025-2050/): Malicious code in segment-anything-mini-demo (npm) (malicious package) - [MAL-2025-205](https://insights.sbomify.com/MAL-2025-205/): Malicious code in markets-history-data (npm) (malicious package) - [MAL-2025-20499](https://insights.sbomify.com/MAL-2025-20499/): Malicious code in fig-spinach-cge0 (npm) (malicious package) - [MAL-2025-20498](https://insights.sbomify.com/MAL-2025-20498/): Malicious code in fig-sierra-bla6 (npm) (malicious package) - [MAL-2025-20497](https://insights.sbomify.com/MAL-2025-20497/): Malicious code in fig-rainbow-9z3s (npm) (malicious package) - [MAL-2025-20496](https://insights.sbomify.com/MAL-2025-20496/): Malicious code in fig-papa-mike-zytmo (npm) (malicious package) - [MAL-2025-20495](https://insights.sbomify.com/MAL-2025-20495/): Malicious code in fig-papa-date-hvvks (npm) (malicious package) - [MAL-2025-20494](https://insights.sbomify.com/MAL-2025-20494/): Malicious code in fig-oscar-ilok (npm) (malicious package) - [MAL-2025-20493](https://insights.sbomify.com/MAL-2025-20493/): Malicious code in fig-orange-vxjw (npm) (malicious package) - [MAL-2025-20492](https://insights.sbomify.com/MAL-2025-20492/): Malicious code in fig-orange-mango-krqzj (npm) (malicious package) - [MAL-2025-20491](https://insights.sbomify.com/MAL-2025-20491/): Malicious code in fig-o37-project (npm) (malicious package) - [MAL-2025-20490](https://insights.sbomify.com/MAL-2025-20490/): Malicious code in fig-mountain-ds9b (npm) (malicious package) - [MAL-2025-2049](https://insights.sbomify.com/MAL-2025-2049/): Malicious code in sc-twitter (npm) (malicious package) - [MAL-2025-20489](https://insights.sbomify.com/MAL-2025-20489/): Malicious code in fig-mjx-project (npm) (malicious package) - [MAL-2025-20488](https://insights.sbomify.com/MAL-2025-20488/): Malicious code in fig-mango-lima-uevfl (npm) (malicious package) - [MAL-2025-20487](https://insights.sbomify.com/MAL-2025-20487/): Malicious code in fig-mango-hubp (npm) (malicious package) - [MAL-2025-20486](https://insights.sbomify.com/MAL-2025-20486/): Malicious code in fig-mango-4qhu (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/885/