# Vulnerabilities published in 2025


- [MAL-2025-20214](https://insights.sbomify.com/MAL-2025-20214/): Malicious code in family-island-unlimited-energy447 (npm) (malicious package)
- [MAL-2025-20213](https://insights.sbomify.com/MAL-2025-20213/): Malicious code in family-island-unlimited-energy362 (npm) (malicious package)
- [MAL-2025-20212](https://insights.sbomify.com/MAL-2025-20212/): Malicious code in family-island-unlimited-energy285 (npm) (malicious package)
- [MAL-2025-20211](https://insights.sbomify.com/MAL-2025-20211/): Malicious code in family-island-unlimited-energy167 (npm) (malicious package)
- [MAL-2025-20210](https://insights.sbomify.com/MAL-2025-20210/): Malicious code in fallguys (npm) (malicious package)
- [MAL-2025-2021](https://insights.sbomify.com/MAL-2025-2021/): Malicious code in orchestration-types (npm) (malicious package)
- [MAL-2025-20209](https://insights.sbomify.com/MAL-2025-20209/): Malicious code in fallbax (npm) (malicious package)
- [MAL-2025-20208](https://insights.sbomify.com/MAL-2025-20208/): Malicious code in falcon-zenith-ams842-project (npm) (malicious package)
- [MAL-2025-20207](https://insights.sbomify.com/MAL-2025-20207/): Malicious code in falcon-yambean-1mhv (npm) (malicious package)
- [MAL-2025-20206](https://insights.sbomify.com/MAL-2025-20206/): Malicious code in falcon-walnut-jpd7 (npm) (malicious package)
- [MAL-2025-20205](https://insights.sbomify.com/MAL-2025-20205/): Malicious code in falcon-quokka-hz3n (npm) (malicious package)
- [MAL-2025-20204](https://insights.sbomify.com/MAL-2025-20204/): Malicious code in falcon-quasar-our901-project (npm) (malicious package)
- [MAL-2025-20203](https://insights.sbomify.com/MAL-2025-20203/): Malicious code in falcon-peacock-evw208-project (npm) (malicious package)
- [MAL-2025-20202](https://insights.sbomify.com/MAL-2025-20202/): Malicious code in falcon-oak-526l (npm) (malicious package)
- [MAL-2025-20201](https://insights.sbomify.com/MAL-2025-20201/): Malicious code in falcon-nutmeg-hw6d (npm) (malicious package)
- [MAL-2025-20200](https://insights.sbomify.com/MAL-2025-20200/): Malicious code in falcon-nocturne-tln311-project (npm) (malicious package)
- [MAL-2025-2020](https://insights.sbomify.com/MAL-2025-2020/): Malicious code in vdkweb-utils (npm) (malicious package)
- [MAL-2025-202](https://insights.sbomify.com/MAL-2025-202/): Malicious code in lichess-org (npm) (malicious package)
- [MAL-2025-20199](https://insights.sbomify.com/MAL-2025-20199/): Malicious code in falcon-nautilus-xni459-project (npm) (malicious package)
- [MAL-2025-20198](https://insights.sbomify.com/MAL-2025-20198/): Malicious code in falcon-moose-wrp793-project (npm) (malicious package)
- [MAL-2025-20197](https://insights.sbomify.com/MAL-2025-20197/): Malicious code in falcon-meadow-mjg856-project (npm) (malicious package)
- [MAL-2025-20196](https://insights.sbomify.com/MAL-2025-20196/): Malicious code in falcon-meadow-btc304-project (npm) (malicious package)
- [MAL-2025-20195](https://insights.sbomify.com/MAL-2025-20195/): Malicious code in falcon-lightning-gxl169-project (npm) (malicious package)
- [MAL-2025-20194](https://insights.sbomify.com/MAL-2025-20194/): Malicious code in falcon-jasmine-ini080-project (npm) (malicious package)
- [MAL-2025-20193](https://insights.sbomify.com/MAL-2025-20193/): Malicious code in falcon-jade-vpi888-project (npm) (malicious package)
- [MAL-2025-20192](https://insights.sbomify.com/MAL-2025-20192/): Malicious code in falcon-jade-uhj749-project (npm) (malicious package)
- [MAL-2025-20191](https://insights.sbomify.com/MAL-2025-20191/): Malicious code in falcon-iceberg-g9hh (npm) (malicious package)
- [MAL-2025-20190](https://insights.sbomify.com/MAL-2025-20190/): Malicious code in falcon-horizon-ocd445-project (npm) (malicious package)
- [MAL-2025-2019](https://insights.sbomify.com/MAL-2025-2019/): Malicious code in vladmandic (npm) (malicious package)
- [MAL-2025-20189](https://insights.sbomify.com/MAL-2025-20189/): Malicious code in falcon-horizon-muf992-project (npm) (malicious package)
- [MAL-2025-20188](https://insights.sbomify.com/MAL-2025-20188/): Malicious code in falcon-honey-vid757-project (npm) (malicious package)
- [MAL-2025-20187](https://insights.sbomify.com/MAL-2025-20187/): Malicious code in falcon-hill-zyq727-project (npm) (malicious package)
- [MAL-2025-20186](https://insights.sbomify.com/MAL-2025-20186/): Malicious code in falcon-fern-zar747-project (npm) (malicious package)
- [MAL-2025-20185](https://insights.sbomify.com/MAL-2025-20185/): Malicious code in falcon-emerald-zce370-project (npm) (malicious package)
- [MAL-2025-20184](https://insights.sbomify.com/MAL-2025-20184/): Malicious code in falcon-dove-uoi805-project (npm) (malicious package)
- [MAL-2025-20183](https://insights.sbomify.com/MAL-2025-20183/): Malicious code in falcon-dandelion-ozo954-project (npm) (malicious package)
- [MAL-2025-20182](https://insights.sbomify.com/MAL-2025-20182/): Malicious code in falcon-amber-zkm371-project (npm) (malicious package)
- [MAL-2025-20181](https://insights.sbomify.com/MAL-2025-20181/): Malicious code in falcon-almond-8v6v (npm) (malicious package)
- [MAL-2025-20180](https://insights.sbomify.com/MAL-2025-20180/): Malicious code in fakechat (npm) (malicious package)
- [MAL-2025-2018](https://insights.sbomify.com/MAL-2025-2018/): Malicious code in calculated_members_message (npm) (malicious package)
- [MAL-2025-20179](https://insights.sbomify.com/MAL-2025-20179/): Malicious code in fakearray (npm) (malicious package)
- [MAL-2025-20178](https://insights.sbomify.com/MAL-2025-20178/): Malicious code in fake-twilio (npm) (malicious package)
- [MAL-2025-20177](https://insights.sbomify.com/MAL-2025-20177/): Malicious code in fajar-takokak48-breki (npm) (malicious package)
- [MAL-2025-20176](https://insights.sbomify.com/MAL-2025-20176/): Malicious code in fajar-tahutek66-breki (npm) (malicious package)
- [MAL-2025-20175](https://insights.sbomify.com/MAL-2025-20175/): Malicious code in fajar-mieayam81-breki (npm) (malicious package)
- [MAL-2025-20174](https://insights.sbomify.com/MAL-2025-20174/): Malicious code in fajar-mie13-breki (npm) (malicious package)
- [MAL-2025-20173](https://insights.sbomify.com/MAL-2025-20173/): Malicious code in fajar-lodeh47-kuki (npm) (malicious package)
- [MAL-2025-20172](https://insights.sbomify.com/MAL-2025-20172/): Malicious code in fajar-ketoprak41-breki (npm) (malicious package)
- [MAL-2025-20171](https://insights.sbomify.com/MAL-2025-20171/): Malicious code in fajar-gembus92-breki (npm) (malicious package)
- [MAL-2025-20170](https://insights.sbomify.com/MAL-2025-20170/): Malicious code in fajar-gandul54-sukiwir (npm) (malicious package)
- [MAL-2025-2017](https://insights.sbomify.com/MAL-2025-2017/): Malicious code in aws-features-signin-proxy-client (npm) (malicious package)
- [MAL-2025-20169](https://insights.sbomify.com/MAL-2025-20169/): Malicious code in fajar-donat97-sukiwir (npm) (malicious package)
- [MAL-2025-20168](https://insights.sbomify.com/MAL-2025-20168/): Malicious code in fajar-bubursumsum11-sukiwir (npm) (malicious package)
- [MAL-2025-20167](https://insights.sbomify.com/MAL-2025-20167/): Malicious code in fajar-buburayam19-breki (npm) (malicious package)
- [MAL-2025-20166](https://insights.sbomify.com/MAL-2025-20166/): Malicious code in fajar-asinan15-kuki (npm) (malicious package)
- [MAL-2025-20165](https://insights.sbomify.com/MAL-2025-20165/): Malicious code in fairmount (npm) (malicious package)
- [MAL-2025-20164](https://insights.sbomify.com/MAL-2025-20164/): Malicious code in faircore (npm) (malicious package)
- [MAL-2025-20163](https://insights.sbomify.com/MAL-2025-20163/): Malicious code in failing-line (npm) (malicious package)
- [MAL-2025-20162](https://insights.sbomify.com/MAL-2025-20162/): Malicious code in failing-code (npm) (malicious package)
- [MAL-2025-20161](https://insights.sbomify.com/MAL-2025-20161/): Malicious code in fafalios (npm) (malicious package)
- [MAL-2025-20160](https://insights.sbomify.com/MAL-2025-20160/): Malicious code in fadhil-tahu79-breki (npm) (malicious package)
- [MAL-2025-2016](https://insights.sbomify.com/MAL-2025-2016/): Malicious code in adyenaddon (npm) (malicious package)
- [MAL-2025-20159](https://insights.sbomify.com/MAL-2025-20159/): Malicious code in fadhil-rojak36-sukiwir (npm) (malicious package)
- [MAL-2025-20158](https://insights.sbomify.com/MAL-2025-20158/): Malicious code in fadhil-nasipecel73-sukiwir (npm) (malicious package)
- [MAL-2025-20157](https://insights.sbomify.com/MAL-2025-20157/): Malicious code in fadhil-miebogor82-sukiwir (npm) (malicious package)
- [MAL-2025-20156](https://insights.sbomify.com/MAL-2025-20156/): Malicious code in fadhil-kue67-breki (npm) (malicious package)
- [MAL-2025-20155](https://insights.sbomify.com/MAL-2025-20155/): Malicious code in fadhil-keraktelor42-sukiwir (npm) (malicious package)
- [MAL-2025-20154](https://insights.sbomify.com/MAL-2025-20154/): Malicious code in fadhil-kacang37-breki (npm) (malicious package)
- [MAL-2025-20153](https://insights.sbomify.com/MAL-2025-20153/): Malicious code in fadhil-empal82-breki (npm) (malicious package)
- [MAL-2025-20152](https://insights.sbomify.com/MAL-2025-20152/): Malicious code in facturae (npm) (malicious package)
- [MAL-2025-20151](https://insights.sbomify.com/MAL-2025-20151/): Malicious code in faceworld (npm) (malicious package)
- [MAL-2025-20150](https://insights.sbomify.com/MAL-2025-20150/): Malicious code in facetjs-mysql-requester (npm) (malicious package)
- [MAL-2025-2015](https://insights.sbomify.com/MAL-2025-2015/): Malicious code in timify-packager (npm) (malicious package)
- [MAL-2025-20149](https://insights.sbomify.com/MAL-2025-20149/): Malicious code in facetjs-legacy (npm) (malicious package)
- [MAL-2025-20148](https://insights.sbomify.com/MAL-2025-20148/): Malicious code in facetjs-druid-requester (npm) (malicious package)
- [MAL-2025-20147](https://insights.sbomify.com/MAL-2025-20147/): Malicious code in facetjs (npm) (malicious package)
- [MAL-2025-20146](https://insights.sbomify.com/MAL-2025-20146/): Malicious code in facet-cli (npm) (malicious package)
- [MAL-2025-20145](https://insights.sbomify.com/MAL-2025-20145/): Malicious code in facerecog (npm) (malicious package)
- [MAL-2025-20144](https://insights.sbomify.com/MAL-2025-20144/): Malicious code in facedect (npm) (malicious package)
- [MAL-2025-20143](https://insights.sbomify.com/MAL-2025-20143/): Malicious code in facebook-chat-api-deku (npm) (malicious package)
- [MAL-2025-20142](https://insights.sbomify.com/MAL-2025-20142/): Malicious code in face-engine (npm) (malicious package)
- [MAL-2025-20141](https://insights.sbomify.com/MAL-2025-20141/): Malicious code in fable_8a2ib_5kltb_solace (npm) (malicious package)
- [MAL-2025-20140](https://insights.sbomify.com/MAL-2025-20140/): Malicious code in fable-yekno-ajgx2-lake-project (npm) (malicious package)
- [MAL-2025-2014](https://insights.sbomify.com/MAL-2025-2014/): Malicious code in configs-web-react (npm) (malicious package)
- [MAL-2025-20139](https://insights.sbomify.com/MAL-2025-20139/): Malicious code in fable-unison-egl659-project (npm) (malicious package)
- [MAL-2025-20138](https://insights.sbomify.com/MAL-2025-20138/): Malicious code in fable-ronu2-be0jn-jasper-project (npm) (malicious package)
- [MAL-2025-20137](https://insights.sbomify.com/MAL-2025-20137/): Malicious code in fable-i5rf0-fh8uj-fern-project (npm) (malicious package)
- [MAL-2025-20136](https://insights.sbomify.com/MAL-2025-20136/): Malicious code in fable-d60nj-92p6f-lunar-project (npm) (malicious package)
- [MAL-2025-20135](https://insights.sbomify.com/MAL-2025-20135/): Malicious code in fable-bmpfz-eqd5r-thunder-project (npm) (malicious package)
- [MAL-2025-20134](https://insights.sbomify.com/MAL-2025-20134/): Malicious code in fable-501vd-qim9k-moonstone-project (npm) (malicious package)
- [MAL-2025-20133](https://insights.sbomify.com/MAL-2025-20133/): Malicious code in fable-2jhy3-dbplf-juniper-project (npm) (malicious package)
- [MAL-2025-20132](https://insights.sbomify.com/MAL-2025-20132/): Malicious code in fable-1gy3t-t9z99-xenon-project (npm) (malicious package)
- [MAL-2025-20131](https://insights.sbomify.com/MAL-2025-20131/): Malicious code in fabeve (npm) (malicious package)
- [MAL-2025-20130](https://insights.sbomify.com/MAL-2025-20130/): Malicious code in fabalous-runtime-web (npm) (malicious package)
- [MAL-2025-2013](https://insights.sbomify.com/MAL-2025-2013/): Malicious code in xuiniadb (PyPI) (malicious package)
- [MAL-2025-20129](https://insights.sbomify.com/MAL-2025-20129/): Malicious code in fabalous-login (npm) (malicious package)
- [MAL-2025-20128](https://insights.sbomify.com/MAL-2025-20128/): Malicious code in fabalous-core (npm) (malicious package)
- [MAL-2025-20127](https://insights.sbomify.com/MAL-2025-20127/): Malicious code in fa-sdk-web (npm) (malicious package)
- [MAL-2025-20126](https://insights.sbomify.com/MAL-2025-20126/): Malicious code in f9gixr (npm) (malicious package)
- [MAL-2025-20125](https://insights.sbomify.com/MAL-2025-20125/): Malicious code in f5fg (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/889/