# Vulnerabilities published in 2025 - [MAL-2025-20485](https://insights.sbomify.com/MAL-2025-20485/): Malicious code in fig-lima-vanilla-zksua (npm) (malicious package) - [MAL-2025-20484](https://insights.sbomify.com/MAL-2025-20484/): Malicious code in fig-lima-jtrl (npm) (malicious package) - [MAL-2025-20483](https://insights.sbomify.com/MAL-2025-20483/): Malicious code in fig-lemon-india-frbia (npm) (malicious package) - [MAL-2025-20482](https://insights.sbomify.com/MAL-2025-20482/): Malicious code in fig-l1x-project (npm) (malicious package) - [MAL-2025-20481](https://insights.sbomify.com/MAL-2025-20481/): Malicious code in fig-kiwi-dunl (npm) (malicious package) - [MAL-2025-20480](https://insights.sbomify.com/MAL-2025-20480/): Malicious code in fig-kilo-imdl (npm) (malicious package) - [MAL-2025-2048](https://insights.sbomify.com/MAL-2025-2048/): Malicious code in safe-settings (npm) (malicious package) - [MAL-2025-20479](https://insights.sbomify.com/MAL-2025-20479/): Malicious code in fig-kilo-dloy (npm) (malicious package) - [MAL-2025-20478](https://insights.sbomify.com/MAL-2025-20478/): Malicious code in fig-juliet-kilo-aasfj (npm) (malicious package) - [MAL-2025-20477](https://insights.sbomify.com/MAL-2025-20477/): Malicious code in fig-j5o-project (npm) (malicious package) - [MAL-2025-20476](https://insights.sbomify.com/MAL-2025-20476/): Malicious code in fig-j0p-project (npm) (malicious package) - [MAL-2025-20475](https://insights.sbomify.com/MAL-2025-20475/): Malicious code in fig-india-ubne (npm) (malicious package) - [MAL-2025-20474](https://insights.sbomify.com/MAL-2025-20474/): Malicious code in fig-india-owcb (npm) (malicious package) - [MAL-2025-20473](https://insights.sbomify.com/MAL-2025-20473/): Malicious code in fig-india-mabn (npm) (malicious package) - [MAL-2025-20472](https://insights.sbomify.com/MAL-2025-20472/): Malicious code in fig-hotel-zssj (npm) (malicious package) - [MAL-2025-20471](https://insights.sbomify.com/MAL-2025-20471/): Malicious code in fig-hotel-vanilla-tncqg (npm) (malicious package) - [MAL-2025-20470](https://insights.sbomify.com/MAL-2025-20470/): Malicious code in fig-hotel-lima-pqjez (npm) (malicious package) - [MAL-2025-2047](https://insights.sbomify.com/MAL-2025-2047/): Malicious code in paypal-sdk-server-side-integration (npm) (malicious package) - [MAL-2025-20469](https://insights.sbomify.com/MAL-2025-20469/): Malicious code in fig-hotel-iqba (npm) (malicious package) - [MAL-2025-20468](https://insights.sbomify.com/MAL-2025-20468/): Malicious code in fig-hotel-fpgm (npm) (malicious package) - [MAL-2025-20467](https://insights.sbomify.com/MAL-2025-20467/): Malicious code in fig-hotel-delta-gtoia (npm) (malicious package) - [MAL-2025-20466](https://insights.sbomify.com/MAL-2025-20466/): Malicious code in fig-honeydew-oscar-hocrx (npm) (malicious package) - [MAL-2025-20465](https://insights.sbomify.com/MAL-2025-20465/): Malicious code in fig-h6r-project (npm) (malicious package) - [MAL-2025-20464](https://insights.sbomify.com/MAL-2025-20464/): Malicious code in fig-golf-papaya-vckwr (npm) (malicious package) - [MAL-2025-20463](https://insights.sbomify.com/MAL-2025-20463/): Malicious code in fig-golf-hhvz (npm) (malicious package) - [MAL-2025-20462](https://insights.sbomify.com/MAL-2025-20462/): Malicious code in fig-foxtrot-cvma (npm) (malicious package) - [MAL-2025-20461](https://insights.sbomify.com/MAL-2025-20461/): Malicious code in fig-ferry-0fki (npm) (malicious package) - [MAL-2025-20460](https://insights.sbomify.com/MAL-2025-20460/): Malicious code in fig-eg8-project (npm) (malicious package) - [MAL-2025-2046](https://insights.sbomify.com/MAL-2025-2046/): Malicious code in ossar-action (npm) (malicious package) - [MAL-2025-20459](https://insights.sbomify.com/MAL-2025-20459/): Malicious code in fig-echo-wyji (npm) (malicious package) - [MAL-2025-20458](https://insights.sbomify.com/MAL-2025-20458/): Malicious code in fig-echo-mango-puoow (npm) (malicious package) - [MAL-2025-20457](https://insights.sbomify.com/MAL-2025-20457/): Malicious code in fig-dragonfruit-ak3o (npm) (malicious package) - [MAL-2025-20456](https://insights.sbomify.com/MAL-2025-20456/): Malicious code in fig-date-uniform-ijmcz (npm) (malicious package) - [MAL-2025-20455](https://insights.sbomify.com/MAL-2025-20455/): Malicious code in fig-cherry-yejf (npm) (malicious package) - [MAL-2025-20454](https://insights.sbomify.com/MAL-2025-20454/): Malicious code in fig-charlie-kilo-euejx (npm) (malicious package) - [MAL-2025-20453](https://insights.sbomify.com/MAL-2025-20453/): Malicious code in fig-bfp-project (npm) (malicious package) - [MAL-2025-20452](https://insights.sbomify.com/MAL-2025-20452/): Malicious code in fig-bark-difg (npm) (malicious package) - [MAL-2025-20451](https://insights.sbomify.com/MAL-2025-20451/): Malicious code in fig-b77-project (npm) (malicious package) - [MAL-2025-20450](https://insights.sbomify.com/MAL-2025-20450/): Malicious code in fig-ato-project (npm) (malicious package) - [MAL-2025-2045](https://insights.sbomify.com/MAL-2025-2045/): Malicious code in minipay-minidapps (npm) (malicious package) - [MAL-2025-20449](https://insights.sbomify.com/MAL-2025-20449/): Malicious code in fig-apple-victor-lqfxr (npm) (malicious package) - [MAL-2025-20448](https://insights.sbomify.com/MAL-2025-20448/): Malicious code in fig-93k-project (npm) (malicious package) - [MAL-2025-20447](https://insights.sbomify.com/MAL-2025-20447/): Malicious code in fig-49o-project (npm) (malicious package) - [MAL-2025-20446](https://insights.sbomify.com/MAL-2025-20446/): Malicious code in fig-17u-project (npm) (malicious package) - [MAL-2025-20445](https://insights.sbomify.com/MAL-2025-20445/): Malicious code in fig-13d-project (npm) (malicious package) - [MAL-2025-20444](https://insights.sbomify.com/MAL-2025-20444/): Malicious code in fifa-23-points (npm) (malicious package) - [MAL-2025-20443](https://insights.sbomify.com/MAL-2025-20443/): Malicious code in fiestah (npm) (malicious package) - [MAL-2025-20442](https://insights.sbomify.com/MAL-2025-20442/): Malicious code in fieldtext (npm) (malicious package) - [MAL-2025-20441](https://insights.sbomify.com/MAL-2025-20441/): Malicious code in ficlovers (npm) (malicious package) - [MAL-2025-20440](https://insights.sbomify.com/MAL-2025-20440/): Malicious code in fhstdcelrxinoaju (npm) (malicious package) - [MAL-2025-2044](https://insights.sbomify.com/MAL-2025-2044/): Malicious code in mercury-web (npm) (malicious package) - [MAL-2025-20439](https://insights.sbomify.com/MAL-2025-20439/): Malicious code in fgsqlbzkpxkivdce (npm) (malicious package) - [MAL-2025-20438](https://insights.sbomify.com/MAL-2025-20438/): Malicious code in fgnfgj5 (npm) (malicious package) - [MAL-2025-20437](https://insights.sbomify.com/MAL-2025-20437/): Malicious code in fgbpcylsztjauxeh (npm) (malicious package) - [MAL-2025-20436](https://insights.sbomify.com/MAL-2025-20436/): Malicious code in fg-recorder (npm) (malicious package) - [MAL-2025-20435](https://insights.sbomify.com/MAL-2025-20435/): Malicious code in ffxfx-paypal (npm) (malicious package) - [MAL-2025-20434](https://insights.sbomify.com/MAL-2025-20434/): Malicious code in fftool (npm) (malicious package) - [MAL-2025-20433](https://insights.sbomify.com/MAL-2025-20433/): Malicious code in fftiers (npm) (malicious package) - [MAL-2025-20432](https://insights.sbomify.com/MAL-2025-20432/): Malicious code in ffosrepl (npm) (malicious package) - [MAL-2025-20431](https://insights.sbomify.com/MAL-2025-20431/): Malicious code in ffmobile (npm) (malicious package) - [MAL-2025-20430](https://insights.sbomify.com/MAL-2025-20430/): Malicious code in ffiruby (npm) (malicious package) - [MAL-2025-2043](https://insights.sbomify.com/MAL-2025-2043/): Malicious code in jfrog-ide-webview (npm) (malicious package) - [MAL-2025-20429](https://insights.sbomify.com/MAL-2025-20429/): Malicious code in ffhfjhfjhf (npm) (malicious package) - [MAL-2025-20428](https://insights.sbomify.com/MAL-2025-20428/): Malicious code in ffg-ui (npm) (malicious package) - [MAL-2025-20427](https://insights.sbomify.com/MAL-2025-20427/): Malicious code in ffg-env (npm) (malicious package) - [MAL-2025-20426](https://insights.sbomify.com/MAL-2025-20426/): Malicious code in ff4as (npm) (malicious package) - [MAL-2025-20425](https://insights.sbomify.com/MAL-2025-20425/): Malicious code in ff-db (npm) (malicious package) - [MAL-2025-20424](https://insights.sbomify.com/MAL-2025-20424/): Malicious code in fetgat (npm) (malicious package) - [MAL-2025-20423](https://insights.sbomify.com/MAL-2025-20423/): Malicious code in fetch-zenobia-metabolomics-quantum-computing (npm) (malicious package) - [MAL-2025-20422](https://insights.sbomify.com/MAL-2025-20422/): Malicious code in fetch-typeorm-karma-technocracy (npm) (malicious package) - [MAL-2025-20421](https://insights.sbomify.com/MAL-2025-20421/): Malicious code in fetch-tethys-remark-taurus (npm) (malicious package) - [MAL-2025-20420](https://insights.sbomify.com/MAL-2025-20420/): Malicious code in fetch-selenology-yaml-koa (npm) (malicious package) - [MAL-2025-2042](https://insights.sbomify.com/MAL-2025-2042/): Malicious code in jfrog-docker-desktop-extension (npm) (malicious package) - [MAL-2025-20419](https://insights.sbomify.com/MAL-2025-20419/): Malicious code in fetch-cluster-carpo-await (npm) (malicious package) - [MAL-2025-20418](https://insights.sbomify.com/MAL-2025-20418/): Malicious code in fesenko (npm) (malicious package) - [MAL-2025-20417](https://insights.sbomify.com/MAL-2025-20417/): Malicious code in ferv3 (npm) (malicious package) - [MAL-2025-20416](https://insights.sbomify.com/MAL-2025-20416/): Malicious code in ferry-xerophyte-2j08 (npm) (malicious package) - [MAL-2025-20415](https://insights.sbomify.com/MAL-2025-20415/): Malicious code in ferry-whiskey-bdq3 (npm) (malicious package) - [MAL-2025-20414](https://insights.sbomify.com/MAL-2025-20414/): Malicious code in ferry-underpass-4clm (npm) (malicious package) - [MAL-2025-20413](https://insights.sbomify.com/MAL-2025-20413/): Malicious code in ferry-umbrella-770z (npm) (malicious package) - [MAL-2025-20412](https://insights.sbomify.com/MAL-2025-20412/): Malicious code in ferry-supernova-jy3d (npm) (malicious package) - [MAL-2025-20411](https://insights.sbomify.com/MAL-2025-20411/): Malicious code in ferry-redshift-64b4 (npm) (malicious package) - [MAL-2025-20410](https://insights.sbomify.com/MAL-2025-20410/): Malicious code in ferry-quokka-5r3g (npm) (malicious package) - [MAL-2025-2041](https://insights.sbomify.com/MAL-2025-2041/): Malicious code in internallib_v488 (npm) (malicious package) - [MAL-2025-20409](https://insights.sbomify.com/MAL-2025-20409/): Malicious code in ferry-quebec-y8bf (npm) (malicious package) - [MAL-2025-20408](https://insights.sbomify.com/MAL-2025-20408/): Malicious code in ferry-nightingale-qkai (npm) (malicious package) - [MAL-2025-20407](https://insights.sbomify.com/MAL-2025-20407/): Malicious code in ferry-hotel-qo0e (npm) (malicious package) - [MAL-2025-20406](https://insights.sbomify.com/MAL-2025-20406/): Malicious code in ferry-cherry-83vm (npm) (malicious package) - [MAL-2025-20405](https://insights.sbomify.com/MAL-2025-20405/): Malicious code in fernando (npm) (malicious package) - [MAL-2025-20404](https://insights.sbomify.com/MAL-2025-20404/): Malicious code in fern_xo47y_eym2e_quasar (npm) (malicious package) - [MAL-2025-20403](https://insights.sbomify.com/MAL-2025-20403/): Malicious code in fern_scbyx_dxdqu_echo (npm) (malicious package) - [MAL-2025-20402](https://insights.sbomify.com/MAL-2025-20402/): Malicious code in fern_kr4rn_pvcqk_xenon (npm) (malicious package) - [MAL-2025-20401](https://insights.sbomify.com/MAL-2025-20401/): Malicious code in fern_jwpbr_94ibm_ultraviolet (npm) (malicious package) - [MAL-2025-20400](https://insights.sbomify.com/MAL-2025-20400/): Malicious code in fern_i96r3_ntopu_ocean (npm) (malicious package) - [MAL-2025-2040](https://insights.sbomify.com/MAL-2025-2040/): Malicious code in grpc-examples (npm) (malicious package) - [MAL-2025-204](https://insights.sbomify.com/MAL-2025-204/): Malicious code in mafid (npm) (malicious package) - [MAL-2025-20399](https://insights.sbomify.com/MAL-2025-20399/): Malicious code in fern_c55lp_pa0f7_quicksilver (npm) (malicious package) - [MAL-2025-20398](https://insights.sbomify.com/MAL-2025-20398/): Malicious code in fern_3yulj_lvnfd_dream (npm) (malicious package) - [MAL-2025-20397](https://insights.sbomify.com/MAL-2025-20397/): Malicious code in fern-z5eve-u85id-quill-project (npm) (malicious package) - [MAL-2025-20396](https://insights.sbomify.com/MAL-2025-20396/): Malicious code in fern-yellow-vwx036-project (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/886/