# Vulnerabilities published in 2025


- [MAL-2025-20304](https://insights.sbomify.com/MAL-2025-20304/): Malicious code in fca-pro (npm) (malicious package)
- [MAL-2025-20303](https://insights.sbomify.com/MAL-2025-20303/): Malicious code in fca-pisting-yawa (npm) (malicious package)
- [MAL-2025-20302](https://insights.sbomify.com/MAL-2025-20302/): Malicious code in fca-manh19fc-remake (npm) (malicious package)
- [MAL-2025-20301](https://insights.sbomify.com/MAL-2025-20301/): Malicious code in fca-huykaiser-remake (npm) (malicious package)
- [MAL-2025-20300](https://insights.sbomify.com/MAL-2025-20300/): Malicious code in fca-huykaiser (npm) (malicious package)
- [MAL-2025-2030](https://insights.sbomify.com/MAL-2025-2030/): Malicious code in accept-a-payment-playwright-testing (npm) (malicious package)
- [MAL-2025-203](https://insights.sbomify.com/MAL-2025-203/): Malicious code in lit-2 (npm) (malicious package)
- [MAL-2025-20299](https://insights.sbomify.com/MAL-2025-20299/): Malicious code in fca-hurezun (npm) (malicious package)
- [MAL-2025-20298](https://insights.sbomify.com/MAL-2025-20298/): Malicious code in fca-horizon-remake (npm) (malicious package)
- [MAL-2025-20297](https://insights.sbomify.com/MAL-2025-20297/): Malicious code in fca-duong (npm) (malicious package)
- [MAL-2025-20296](https://insights.sbomify.com/MAL-2025-20296/): Malicious code in fca-donqdz2006 (npm) (malicious package)
- [MAL-2025-20295](https://insights.sbomify.com/MAL-2025-20295/): Malicious code in fca-deku-test (npm) (malicious package)
- [MAL-2025-20294](https://insights.sbomify.com/MAL-2025-20294/): Malicious code in fca-deku-remake (npm) (malicious package)
- [MAL-2025-20293](https://insights.sbomify.com/MAL-2025-20293/): Malicious code in fca-deko (npm) (malicious package)
- [MAL-2025-20292](https://insights.sbomify.com/MAL-2025-20292/): Malicious code in fca-d-rm1 (npm) (malicious package)
- [MAL-2025-20291](https://insights.sbomify.com/MAL-2025-20291/): Malicious code in fca-d-rm (npm) (malicious package)
- [MAL-2025-20290](https://insights.sbomify.com/MAL-2025-20290/): Malicious code in fca-carla (npm) (malicious package)
- [MAL-2025-2029](https://insights.sbomify.com/MAL-2025-2029/): Malicious code in accept-a-payment (npm) (malicious package)
- [MAL-2025-20289](https://insights.sbomify.com/MAL-2025-20289/): Malicious code in fca-bot-game (npm) (malicious package)
- [MAL-2025-20288](https://insights.sbomify.com/MAL-2025-20288/): Malicious code in fca-anya-remake (npm) (malicious package)
- [MAL-2025-20287](https://insights.sbomify.com/MAL-2025-20287/): Malicious code in fca-anjelo (npm) (malicious package)
- [MAL-2025-20286](https://insights.sbomify.com/MAL-2025-20286/): Malicious code in fca-aliya-remake (npm) (malicious package)
- [MAL-2025-20285](https://insights.sbomify.com/MAL-2025-20285/): Malicious code in fca-aliiya-remake (npm) (malicious package)
- [MAL-2025-20284](https://insights.sbomify.com/MAL-2025-20284/): Malicious code in fca-ali-atf (npm) (malicious package)
- [MAL-2025-20283](https://insights.sbomify.com/MAL-2025-20283/): Malicious code in fca-ali (npm) (malicious package)
- [MAL-2025-20282](https://insights.sbomify.com/MAL-2025-20282/): Malicious code in fca (npm) (malicious package)
- [MAL-2025-20281](https://insights.sbomify.com/MAL-2025-20281/): Malicious code in fbxloader (npm) (malicious package)
- [MAL-2025-20280](https://insights.sbomify.com/MAL-2025-20280/): Malicious code in fbw-platform-common (npm) (malicious package)
- [MAL-2025-2028](https://insights.sbomify.com/MAL-2025-2028/): Malicious code in @tim0310/fetch (npm) (malicious package)
- [MAL-2025-20279](https://insights.sbomify.com/MAL-2025-20279/): Malicious code in fbrain (npm) (malicious package)
- [MAL-2025-20278](https://insights.sbomify.com/MAL-2025-20278/): Malicious code in fboffline (npm) (malicious package)
- [MAL-2025-20277](https://insights.sbomify.com/MAL-2025-20277/): Malicious code in fbjs-opensource (npm) (malicious package)
- [MAL-2025-20276](https://insights.sbomify.com/MAL-2025-20276/): Malicious code in fbiframe (npm) (malicious package)
- [MAL-2025-20275](https://insights.sbomify.com/MAL-2025-20275/): Malicious code in fbfr4 (npm) (malicious package)
- [MAL-2025-20274](https://insights.sbomify.com/MAL-2025-20274/): Malicious code in fbdeoxicwnlkgkvt (npm) (malicious package)
- [MAL-2025-20273](https://insights.sbomify.com/MAL-2025-20273/): Malicious code in fbdemo (npm) (malicious package)
- [MAL-2025-20272](https://insights.sbomify.com/MAL-2025-20272/): Malicious code in fbconsole (npm) (malicious package)
- [MAL-2025-20271](https://insights.sbomify.com/MAL-2025-20271/): Malicious code in fbcode (npm) (malicious package)
- [MAL-2025-20270](https://insights.sbomify.com/MAL-2025-20270/): Malicious code in fbchan (npm) (malicious package)
- [MAL-2025-2027](https://insights.sbomify.com/MAL-2025-2027/): Malicious code in @sie-ppr-web-store/app (npm) (malicious package)
- [MAL-2025-20269](https://insights.sbomify.com/MAL-2025-20269/): Malicious code in fb-tanjiro (npm) (malicious package)
- [MAL-2025-20268](https://insights.sbomify.com/MAL-2025-20268/): Malicious code in fb-logger (npm) (malicious package)
- [MAL-2025-20267](https://insights.sbomify.com/MAL-2025-20267/): Malicious code in fb-jake (npm) (malicious package)
- [MAL-2025-20266](https://insights.sbomify.com/MAL-2025-20266/): Malicious code in fb-deku-rm (npm) (malicious package)
- [MAL-2025-20265](https://insights.sbomify.com/MAL-2025-20265/): Malicious code in fb-deku-remake (npm) (malicious package)
- [MAL-2025-20264](https://insights.sbomify.com/MAL-2025-20264/): Malicious code in fb-chat-shadow (npm) (malicious package)
- [MAL-2025-20263](https://insights.sbomify.com/MAL-2025-20263/): Malicious code in fb-chat-deku (npm) (malicious package)
- [MAL-2025-20262](https://insights.sbomify.com/MAL-2025-20262/): Malicious code in fb-anya (npm) (malicious package)
- [MAL-2025-20261](https://insights.sbomify.com/MAL-2025-20261/): Malicious code in fazilet-scrapper (npm) (malicious package)
- [MAL-2025-20260](https://insights.sbomify.com/MAL-2025-20260/): Malicious code in fazilet-cli (npm) (malicious package)
- [MAL-2025-2026](https://insights.sbomify.com/MAL-2025-2026/): Malicious code in @optimystic99/test2 (npm) (malicious package)
- [MAL-2025-20259](https://insights.sbomify.com/MAL-2025-20259/): Malicious code in fazana (npm) (malicious package)
- [MAL-2025-20258](https://insights.sbomify.com/MAL-2025-20258/): Malicious code in favour (npm) (malicious package)
- [MAL-2025-20257](https://insights.sbomify.com/MAL-2025-20257/): Malicious code in fauzi-tempe17-breki (npm) (malicious package)
- [MAL-2025-20256](https://insights.sbomify.com/MAL-2025-20256/): Malicious code in fauzi-sasag90-sukiwir (npm) (malicious package)
- [MAL-2025-20255](https://insights.sbomify.com/MAL-2025-20255/): Malicious code in fauzi-pecel42-breki (npm) (malicious package)
- [MAL-2025-20254](https://insights.sbomify.com/MAL-2025-20254/): Malicious code in fauzi-martabak74-sukiwir (npm) (malicious package)
- [MAL-2025-20253](https://insights.sbomify.com/MAL-2025-20253/): Malicious code in fauzi-lapis65-kuki (npm) (malicious package)
- [MAL-2025-20252](https://insights.sbomify.com/MAL-2025-20252/): Malicious code in fauzi-getuk35-sukiwir (npm) (malicious package)
- [MAL-2025-20251](https://insights.sbomify.com/MAL-2025-20251/): Malicious code in faustwp-core (npm) (malicious package)
- [MAL-2025-20250](https://insights.sbomify.com/MAL-2025-20250/): Malicious code in faustwp-cli (npm) (malicious package)
- [MAL-2025-2025](https://insights.sbomify.com/MAL-2025-2025/): Malicious code in @optimystic99/dev-utils-2 (npm) (malicious package)
- [MAL-2025-20249](https://insights.sbomify.com/MAL-2025-20249/): Malicious code in faustwp (npm) (malicious package)
- [MAL-2025-20248](https://insights.sbomify.com/MAL-2025-20248/): Malicious code in fatkit (npm) (malicious package)
- [MAL-2025-20247](https://insights.sbomify.com/MAL-2025-20247/): Malicious code in fastyle (npm) (malicious package)
- [MAL-2025-20246](https://insights.sbomify.com/MAL-2025-20246/): Malicious code in fastpaxos (npm) (malicious package)
- [MAL-2025-20245](https://insights.sbomify.com/MAL-2025-20245/): Malicious code in fastip (npm) (malicious package)
- [MAL-2025-20244](https://insights.sbomify.com/MAL-2025-20244/): Malicious code in fastgcn (npm) (malicious package)
- [MAL-2025-20243](https://insights.sbomify.com/MAL-2025-20243/): Malicious code in fastcgiqt (npm) (malicious package)
- [MAL-2025-20242](https://insights.sbomify.com/MAL-2025-20242/): Malicious code in fast-requests (npm) (malicious package)
- [MAL-2025-20241](https://insights.sbomify.com/MAL-2025-20241/): Malicious code in fast-proxy-pi-query-zeta (npm) (malicious package)
- [MAL-2025-20240](https://insights.sbomify.com/MAL-2025-20240/): Malicious code in fast-pack-app-components (npm) (malicious package)
- [MAL-2025-2024](https://insights.sbomify.com/MAL-2025-2024/): Malicious code in @f2p-mml-frontends/mml-components (npm) (malicious package)
- [MAL-2025-20239](https://insights.sbomify.com/MAL-2025-20239/): Malicious code in fast-mu-moon-moon-permission (npm) (malicious package)
- [MAL-2025-20238](https://insights.sbomify.com/MAL-2025-20238/): Malicious code in fast-long-secure-function-bundle (npm) (malicious package)
- [MAL-2025-20237](https://insights.sbomify.com/MAL-2025-20237/): Malicious code in fast-enum-compress-index-minify (npm) (malicious package)
- [MAL-2025-20236](https://insights.sbomify.com/MAL-2025-20236/): Malicious code in fast-cloud-mu-debug-sandbox (npm) (malicious package)
- [MAL-2025-20235](https://insights.sbomify.com/MAL-2025-20235/): Malicious code in fast-bash-tree-reject-omicron (npm) (malicious package)
- [MAL-2025-20234](https://insights.sbomify.com/MAL-2025-20234/): Malicious code in fashiongo-web-admin-v2-web (npm) (malicious package)
- [MAL-2025-20233](https://insights.sbomify.com/MAL-2025-20233/): Malicious code in fasetter (npm) (malicious package)
- [MAL-2025-20232](https://insights.sbomify.com/MAL-2025-20232/): Malicious code in farwolf (npm) (malicious package)
- [MAL-2025-20231](https://insights.sbomify.com/MAL-2025-20231/): Malicious code in farout-stream-loglevel-sequelize (npm) (malicious package)
- [MAL-2025-20230](https://insights.sbomify.com/MAL-2025-20230/): Malicious code in farout-redis-neptune-gatsby (npm) (malicious package)
- [MAL-2025-2023](https://insights.sbomify.com/MAL-2025-2023/): Malicious code in @ethena/shared-ui (npm) (malicious package)
- [MAL-2025-20229](https://insights.sbomify.com/MAL-2025-20229/): Malicious code in farout-publish-fornax-on (npm) (malicious package)
- [MAL-2025-20228](https://insights.sbomify.com/MAL-2025-20228/): Malicious code in farout-petrology-darkmatter-gatsby (npm) (malicious package)
- [MAL-2025-20227](https://insights.sbomify.com/MAL-2025-20227/): Malicious code in farout-hadron-terraforming-impulse (npm) (malicious package)
- [MAL-2025-20226](https://insights.sbomify.com/MAL-2025-20226/): Malicious code in farout-fetch-eslint-config-wolf (npm) (malicious package)
- [MAL-2025-20225](https://insights.sbomify.com/MAL-2025-20225/): Malicious code in farout-apollo-comet-wavefunction (npm) (malicious package)
- [MAL-2025-20224](https://insights.sbomify.com/MAL-2025-20224/): Malicious code in farmtick (npm) (malicious package)
- [MAL-2025-20223](https://insights.sbomify.com/MAL-2025-20223/): Malicious code in farmshare (npm) (malicious package)
- [MAL-2025-20222](https://insights.sbomify.com/MAL-2025-20222/): Malicious code in faraday-statsd (npm) (malicious package)
- [MAL-2025-20221](https://insights.sbomify.com/MAL-2025-20221/): Malicious code in faraasa (npm) (malicious package)
- [MAL-2025-20220](https://insights.sbomify.com/MAL-2025-20220/): Malicious code in fankctoxvrkdsmgq (npm) (malicious package)
- [MAL-2025-2022](https://insights.sbomify.com/MAL-2025-2022/): Malicious code in @dealfront/df-dictionaries (npm) (malicious package)
- [MAL-2025-20219](https://insights.sbomify.com/MAL-2025-20219/): Malicious code in fanfav (npm) (malicious package)
- [MAL-2025-20218](https://insights.sbomify.com/MAL-2025-20218/): Malicious code in fancy-radiate-ygx449-project (npm) (malicious package)
- [MAL-2025-20217](https://insights.sbomify.com/MAL-2025-20217/): Malicious code in fancy-pure-vfk847-project (npm) (malicious package)
- [MAL-2025-20216](https://insights.sbomify.com/MAL-2025-20216/): Malicious code in fanada (npm) (malicious package)
- [MAL-2025-20215](https://insights.sbomify.com/MAL-2025-20215/): Malicious code in family-island-unlimited-energy463 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/888/