# Vulnerabilities published in 2025 - [MAL-2025-20395](https://insights.sbomify.com/MAL-2025-20395/): Malicious code in fern-yacht-agt852-project (npm) (malicious package) - [MAL-2025-20394](https://insights.sbomify.com/MAL-2025-20394/): Malicious code in fern-xerox-ksc946-project (npm) (malicious package) - [MAL-2025-20393](https://insights.sbomify.com/MAL-2025-20393/): Malicious code in fern-waterfall-lqr143-project (npm) (malicious package) - [MAL-2025-20392](https://insights.sbomify.com/MAL-2025-20392/): Malicious code in fern-valley-jab758-project (npm) (malicious package) - [MAL-2025-20391](https://insights.sbomify.com/MAL-2025-20391/): Malicious code in fern-umbra-pbc551-project (npm) (malicious package) - [MAL-2025-20390](https://insights.sbomify.com/MAL-2025-20390/): Malicious code in fern-thunder-ucl604-project (npm) (malicious package) - [MAL-2025-2039](https://insights.sbomify.com/MAL-2025-2039/): Malicious code in eyeglass-multirepo (npm) (malicious package) - [MAL-2025-20389](https://insights.sbomify.com/MAL-2025-20389/): Malicious code in fern-spruce-mhi021-project (npm) (malicious package) - [MAL-2025-20388](https://insights.sbomify.com/MAL-2025-20388/): Malicious code in fern-sapphire-vaj643-project (npm) (malicious package) - [MAL-2025-20387](https://insights.sbomify.com/MAL-2025-20387/): Malicious code in fern-sapphire-bqq869-project (npm) (malicious package) - [MAL-2025-20386](https://insights.sbomify.com/MAL-2025-20386/): Malicious code in fern-penguin-xnm338-project (npm) (malicious package) - [MAL-2025-20385](https://insights.sbomify.com/MAL-2025-20385/): Malicious code in fern-paradise-csu395-project (npm) (malicious package) - [MAL-2025-20384](https://insights.sbomify.com/MAL-2025-20384/): Malicious code in fern-orchid-pew049-project (npm) (malicious package) - [MAL-2025-20383](https://insights.sbomify.com/MAL-2025-20383/): Malicious code in fern-opaline-kok458-project (npm) (malicious package) - [MAL-2025-20382](https://insights.sbomify.com/MAL-2025-20382/): Malicious code in fern-nautilus-jnl763-project (npm) (malicious package) - [MAL-2025-20381](https://insights.sbomify.com/MAL-2025-20381/): Malicious code in fern-mp6by-yo6yg-lunar-project (npm) (malicious package) - [MAL-2025-20380](https://insights.sbomify.com/MAL-2025-20380/): Malicious code in fern-moon-gbr665-project (npm) (malicious package) - [MAL-2025-2038](https://insights.sbomify.com/MAL-2025-2038/): Malicious code in dependabot-pull-request-action (npm) (malicious package) - [MAL-2025-20379](https://insights.sbomify.com/MAL-2025-20379/): Malicious code in fern-lagoon-whs390-project (npm) (malicious package) - [MAL-2025-20378](https://insights.sbomify.com/MAL-2025-20378/): Malicious code in fern-labyrinth-fqw138-project (npm) (malicious package) - [MAL-2025-20377](https://insights.sbomify.com/MAL-2025-20377/): Malicious code in fern-kite-phz349-project (npm) (malicious package) - [MAL-2025-20376](https://insights.sbomify.com/MAL-2025-20376/): Malicious code in fern-jellyfish-wna630-project (npm) (malicious package) - [MAL-2025-20375](https://insights.sbomify.com/MAL-2025-20375/): Malicious code in fern-jade-jjt515-project (npm) (malicious package) - [MAL-2025-20374](https://insights.sbomify.com/MAL-2025-20374/): Malicious code in fern-htydd-3fugw-drift-project (npm) (malicious package) - [MAL-2025-20373](https://insights.sbomify.com/MAL-2025-20373/): Malicious code in fern-hill-pkz349-project (npm) (malicious package) - [MAL-2025-20372](https://insights.sbomify.com/MAL-2025-20372/): Malicious code in fern-gorilla-mpy966-project (npm) (malicious package) - [MAL-2025-20371](https://insights.sbomify.com/MAL-2025-20371/): Malicious code in fern-frost-hud075-project (npm) (malicious package) - [MAL-2025-20370](https://insights.sbomify.com/MAL-2025-20370/): Malicious code in fern-fki7x-thxqi-zenith-project (npm) (malicious package) - [MAL-2025-2037](https://insights.sbomify.com/MAL-2025-2037/): Malicious code in decode-a-gif (npm) (malicious package) - [MAL-2025-20369](https://insights.sbomify.com/MAL-2025-20369/): Malicious code in fern-crystal-urv373-project (npm) (malicious package) - [MAL-2025-20368](https://insights.sbomify.com/MAL-2025-20368/): Malicious code in fern-buffalo-pii831-project (npm) (malicious package) - [MAL-2025-20367](https://insights.sbomify.com/MAL-2025-20367/): Malicious code in fern-albatross-yqa640-project (npm) (malicious package) - [MAL-2025-20366](https://insights.sbomify.com/MAL-2025-20366/): Malicious code in fern-4dcnh-crd0z-essence-project (npm) (malicious package) - [MAL-2025-20365](https://insights.sbomify.com/MAL-2025-20365/): Malicious code in fern-19e2h-a1mxj-willow-project (npm) (malicious package) - [MAL-2025-20364](https://insights.sbomify.com/MAL-2025-20364/): Malicious code in fermiparadox-repository-nightwatch-radiometric (npm) (malicious package) - [MAL-2025-20363](https://insights.sbomify.com/MAL-2025-20363/): Malicious code in fermiparadox-promise-figures-hawkingradiation (npm) (malicious package) - [MAL-2025-20362](https://insights.sbomify.com/MAL-2025-20362/): Malicious code in fermiparadox-fornax-whitedwarf-fornax (npm) (malicious package) - [MAL-2025-20361](https://insights.sbomify.com/MAL-2025-20361/): Malicious code in fermion-graviton-sedna-gravity (npm) (malicious package) - [MAL-2025-20360](https://insights.sbomify.com/MAL-2025-20360/): Malicious code in fennel-ugli-0sb8 (npm) (malicious package) - [MAL-2025-2036](https://insights.sbomify.com/MAL-2025-2036/): Malicious code in ct-connect-stripe (npm) (malicious package) - [MAL-2025-20359](https://insights.sbomify.com/MAL-2025-20359/): Malicious code in fennel-nutmeg-8lcy (npm) (malicious package) - [MAL-2025-20358](https://insights.sbomify.com/MAL-2025-20358/): Malicious code in fennel-moat-he2z (npm) (malicious package) - [MAL-2025-20357](https://insights.sbomify.com/MAL-2025-20357/): Malicious code in fennecfox (npm) (malicious package) - [MAL-2025-20356](https://insights.sbomify.com/MAL-2025-20356/): Malicious code in fenlaz (npm) (malicious package) - [MAL-2025-20355](https://insights.sbomify.com/MAL-2025-20355/): Malicious code in fenghf (npm) (malicious package) - [MAL-2025-20354](https://insights.sbomify.com/MAL-2025-20354/): Malicious code in fengche (npm) (malicious package) - [MAL-2025-20353](https://insights.sbomify.com/MAL-2025-20353/): Malicious code in felectron (npm) (malicious package) - [MAL-2025-20352](https://insights.sbomify.com/MAL-2025-20352/): Malicious code in feedtojs (npm) (malicious package) - [MAL-2025-20351](https://insights.sbomify.com/MAL-2025-20351/): Malicious code in feedcal (npm) (malicious package) - [MAL-2025-20350](https://insights.sbomify.com/MAL-2025-20350/): Malicious code in fedfujhyk (npm) (malicious package) - [MAL-2025-2035](https://insights.sbomify.com/MAL-2025-2035/): Malicious code in console-node-ts (npm) (malicious package) - [MAL-2025-20349](https://insights.sbomify.com/MAL-2025-20349/): Malicious code in fed.m-xpack (npm) (malicious package) - [MAL-2025-20348](https://insights.sbomify.com/MAL-2025-20348/): Malicious code in feclient (npm) (malicious package) - [MAL-2025-20347](https://insights.sbomify.com/MAL-2025-20347/): Malicious code in febalist-gulp (npm) (malicious package) - [MAL-2025-20346](https://insights.sbomify.com/MAL-2025-20346/): Malicious code in feature.genrator (npm) (malicious package) - [MAL-2025-20345](https://insights.sbomify.com/MAL-2025-20345/): Malicious code in feathur (npm) (malicious package) - [MAL-2025-20344](https://insights.sbomify.com/MAL-2025-20344/): Malicious code in feathers-protectpay (npm) (malicious package) - [MAL-2025-20343](https://insights.sbomify.com/MAL-2025-20343/): Malicious code in feathers-credstash (npm) (malicious package) - [MAL-2025-20342](https://insights.sbomify.com/MAL-2025-20342/): Malicious code in feathers-amqp-events (npm) (malicious package) - [MAL-2025-20341](https://insights.sbomify.com/MAL-2025-20341/): Malicious code in fear-core-tasks (npm) (malicious package) - [MAL-2025-20340](https://insights.sbomify.com/MAL-2025-20340/): Malicious code in fe-state (npm) (malicious package) - [MAL-2025-2034](https://insights.sbomify.com/MAL-2025-2034/): Malicious code in com.frl.aepsych (npm) (malicious package) - [MAL-2025-20339](https://insights.sbomify.com/MAL-2025-20339/): Malicious code in fe-ops-renderizr-warmup (npm) (malicious package) - [MAL-2025-20338](https://insights.sbomify.com/MAL-2025-20338/): Malicious code in fe-ops-renderizr-client-fallback (npm) (malicious package) - [MAL-2025-20337](https://insights.sbomify.com/MAL-2025-20337/): Malicious code in fe-extension (npm) (malicious package) - [MAL-2025-20336](https://insights.sbomify.com/MAL-2025-20336/): Malicious code in fe-assignment (npm) (malicious package) - [MAL-2025-20335](https://insights.sbomify.com/MAL-2025-20335/): Malicious code in fe-app-inbox (npm) (malicious package) - [MAL-2025-20334](https://insights.sbomify.com/MAL-2025-20334/): Malicious code in fdsre3 (npm) (malicious package) - [MAL-2025-20333](https://insights.sbomify.com/MAL-2025-20333/): Malicious code in fdsafdas (npm) (malicious package) - [MAL-2025-20332](https://insights.sbomify.com/MAL-2025-20332/): Malicious code in fdgert3 (npm) (malicious package) - [MAL-2025-20331](https://insights.sbomify.com/MAL-2025-20331/): Malicious code in fdfddfdf (npm) (malicious package) - [MAL-2025-20330](https://insights.sbomify.com/MAL-2025-20330/): Malicious code in fdaeqmrptxkjuiwc (npm) (malicious package) - [MAL-2025-2033](https://insights.sbomify.com/MAL-2025-2033/): Malicious code in checkout-one-time-payments (npm) (malicious package) - [MAL-2025-20329](https://insights.sbomify.com/MAL-2025-20329/): Malicious code in fd4335 (npm) (malicious package) - [MAL-2025-20328](https://insights.sbomify.com/MAL-2025-20328/): Malicious code in fcsquare (npm) (malicious package) - [MAL-2025-20327](https://insights.sbomify.com/MAL-2025-20327/): Malicious code in fcrxzymdnlaviqeu (npm) (malicious package) - [MAL-2025-20326](https://insights.sbomify.com/MAL-2025-20326/): Malicious code in fcn-gin-services (npm) (malicious package) - [MAL-2025-20325](https://insights.sbomify.com/MAL-2025-20325/): Malicious code in fcn-gin-navigation (npm) (malicious package) - [MAL-2025-20324](https://insights.sbomify.com/MAL-2025-20324/): Malicious code in fcn-gin-components (npm) (malicious package) - [MAL-2025-20323](https://insights.sbomify.com/MAL-2025-20323/): Malicious code in fcn-gin-cards (npm) (malicious package) - [MAL-2025-20322](https://insights.sbomify.com/MAL-2025-20322/): Malicious code in fcmrqltxghvoujks (npm) (malicious package) - [MAL-2025-20321](https://insights.sbomify.com/MAL-2025-20321/): Malicious code in fcimport (npm) (malicious package) - [MAL-2025-20320](https://insights.sbomify.com/MAL-2025-20320/): Malicious code in fca-zyx (npm) (malicious package) - [MAL-2025-2032](https://insights.sbomify.com/MAL-2025-2032/): Malicious code in bindbc-lua (npm) (malicious package) - [MAL-2025-20319](https://insights.sbomify.com/MAL-2025-20319/): Malicious code in fca-zour-qlam (npm) (malicious package) - [MAL-2025-20318](https://insights.sbomify.com/MAL-2025-20318/): Malicious code in fca-zour (npm) (malicious package) - [MAL-2025-20317](https://insights.sbomify.com/MAL-2025-20317/): Malicious code in fca-zeus-tan (npm) (malicious package) - [MAL-2025-20316](https://insights.sbomify.com/MAL-2025-20316/): Malicious code in fca-zera-remake (npm) (malicious package) - [MAL-2025-20315](https://insights.sbomify.com/MAL-2025-20315/): Malicious code in fca-yawa (npm) (malicious package) - [MAL-2025-20314](https://insights.sbomify.com/MAL-2025-20314/): Malicious code in fca-xyz (npm) (malicious package) - [MAL-2025-20313](https://insights.sbomify.com/MAL-2025-20313/): Malicious code in fca-tuandz (npm) (malicious package) - [MAL-2025-20312](https://insights.sbomify.com/MAL-2025-20312/): Malicious code in fca-tnxtrick (npm) (malicious package) - [MAL-2025-20311](https://insights.sbomify.com/MAL-2025-20311/): Malicious code in fca-tisting (npm) (malicious package) - [MAL-2025-20310](https://insights.sbomify.com/MAL-2025-20310/): Malicious code in fca-sus (npm) (malicious package) - [MAL-2025-2031](https://insights.sbomify.com/MAL-2025-2031/): Malicious code in animated_vector_annotations (npm) (malicious package) - [MAL-2025-20309](https://insights.sbomify.com/MAL-2025-20309/): Malicious code in fca-shadow (npm) (malicious package) - [MAL-2025-20308](https://insights.sbomify.com/MAL-2025-20308/): Malicious code in fca-rqzax-remake (npm) (malicious package) - [MAL-2025-20307](https://insights.sbomify.com/MAL-2025-20307/): Malicious code in fca-rqzax-dev (npm) (malicious package) - [MAL-2025-20306](https://insights.sbomify.com/MAL-2025-20306/): Malicious code in fca-qlamzour (npm) (malicious package) - [MAL-2025-20305](https://insights.sbomify.com/MAL-2025-20305/): Malicious code in fca-qlam (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/887/