# Vulnerabilities published in 2025 - [MAL-2025-20124](https://insights.sbomify.com/MAL-2025-20124/): Malicious code in f443 (npm) (malicious package) - [MAL-2025-20123](https://insights.sbomify.com/MAL-2025-20123/): Malicious code in f39qm5 (npm) (malicious package) - [MAL-2025-20122](https://insights.sbomify.com/MAL-2025-20122/): Malicious code in f34th3r-react-components (npm) (malicious package) - [MAL-2025-20121](https://insights.sbomify.com/MAL-2025-20121/): Malicious code in f-deku (npm) (malicious package) - [MAL-2025-20120](https://insights.sbomify.com/MAL-2025-20120/): Malicious code in ezvbby (npm) (malicious package) - [MAL-2025-2012](https://insights.sbomify.com/MAL-2025-2012/): Malicious code in web3imports (PyPI) (malicious package) - [MAL-2025-20119](https://insights.sbomify.com/MAL-2025-20119/): Malicious code in eztxter (npm) (malicious package) - [MAL-2025-20118](https://insights.sbomify.com/MAL-2025-20118/): Malicious code in eztrade (npm) (malicious package) - [MAL-2025-20117](https://insights.sbomify.com/MAL-2025-20117/): Malicious code in ezmoodle (npm) (malicious package) - [MAL-2025-20116](https://insights.sbomify.com/MAL-2025-20116/): Malicious code in ezedit (npm) (malicious package) - [MAL-2025-20115](https://insights.sbomify.com/MAL-2025-20115/): Malicious code in eywkwae (npm) (malicious package) - [MAL-2025-20114](https://insights.sbomify.com/MAL-2025-20114/): Malicious code in eyisozlrnavjwhkc (npm) (malicious package) - [MAL-2025-20113](https://insights.sbomify.com/MAL-2025-20113/): Malicious code in eyexam (npm) (malicious package) - [MAL-2025-20112](https://insights.sbomify.com/MAL-2025-20112/): Malicious code in eyeos-extra (npm) (malicious package) - [MAL-2025-20111](https://insights.sbomify.com/MAL-2025-20111/): Malicious code in exutil (npm) (malicious package) - [MAL-2025-20110](https://insights.sbomify.com/MAL-2025-20110/): Malicious code in extremophile-venus-neptune-run-script (npm) (malicious package) - [MAL-2025-20109](https://insights.sbomify.com/MAL-2025-20109/): Malicious code in extremophile-morgan-indus-fermion (npm) (malicious package) - [MAL-2025-20108](https://insights.sbomify.com/MAL-2025-20108/): Malicious code in extremophile-electron-blueshift-wormhole (npm) (malicious package) - [MAL-2025-20107](https://insights.sbomify.com/MAL-2025-20107/): Malicious code in extraction-test-react-utilities (npm) (malicious package) - [MAL-2025-20106](https://insights.sbomify.com/MAL-2025-20106/): Malicious code in extraction-test-javascript-utilities (npm) (malicious package) - [MAL-2025-20105](https://insights.sbomify.com/MAL-2025-20105/): Malicious code in external-api (npm) (malicious package) - [MAL-2025-20104](https://insights.sbomify.com/MAL-2025-20104/): Malicious code in extension-point-as-vanity-pricing (npm) (malicious package) - [MAL-2025-20103](https://insights.sbomify.com/MAL-2025-20103/): Malicious code in ext-zip (npm) (malicious package) - [MAL-2025-20102](https://insights.sbomify.com/MAL-2025-20102/): Malicious code in exsemt (npm) (malicious package) - [MAL-2025-20101](https://insights.sbomify.com/MAL-2025-20101/): Malicious code in exrpess (npm) (malicious package) - [MAL-2025-20100](https://insights.sbomify.com/MAL-2025-20100/): Malicious code in exprss (npm) (malicious package) - [MAL-2025-201](https://insights.sbomify.com/MAL-2025-201/): Malicious code in lib-wallet (npm) (malicious package) - [MAL-2025-20099](https://insights.sbomify.com/MAL-2025-20099/): Malicious code in exprses (npm) (malicious package) - [MAL-2025-20098](https://insights.sbomify.com/MAL-2025-20098/): Malicious code in exprono (npm) (malicious package) - [MAL-2025-20097](https://insights.sbomify.com/MAL-2025-20097/): Malicious code in expressjs-mynodeutils (npm) (malicious package) - [MAL-2025-20096](https://insights.sbomify.com/MAL-2025-20096/): Malicious code in expressful-tools (npm) (malicious package) - [MAL-2025-20095](https://insights.sbomify.com/MAL-2025-20095/): Malicious code in ExpressCart (npm) (malicious package) - [MAL-2025-20094](https://insights.sbomify.com/MAL-2025-20094/): Malicious code in express-ycsrf (npm) (malicious package) - [MAL-2025-20093](https://insights.sbomify.com/MAL-2025-20093/): Malicious code in express-yandex-host-fallback (npm) (malicious package) - [MAL-2025-20092](https://insights.sbomify.com/MAL-2025-20092/): Malicious code in express-yandex-csp (npm) (malicious package) - [MAL-2025-20091](https://insights.sbomify.com/MAL-2025-20091/): Malicious code in express-ya-frameguard (npm) (malicious package) - [MAL-2025-20090](https://insights.sbomify.com/MAL-2025-20090/): Malicious code in express-whitedwarf-augmentedreality-cluster (npm) (malicious package) - [MAL-2025-20089](https://insights.sbomify.com/MAL-2025-20089/): Malicious code in express-websockets-sedna-mongodb (npm) (malicious package) - [MAL-2025-20088](https://insights.sbomify.com/MAL-2025-20088/): Malicious code in express-uatraits-mock (npm) (malicious package) - [MAL-2025-20087](https://insights.sbomify.com/MAL-2025-20087/): Malicious code in express-uatraits-extend (npm) (malicious package) - [MAL-2025-20086](https://insights.sbomify.com/MAL-2025-20086/): Malicious code in express-transport-celeste-carpo (npm) (malicious package) - [MAL-2025-20085](https://insights.sbomify.com/MAL-2025-20085/): Malicious code in express-tld (npm) (malicious package) - [MAL-2025-20084](https://insights.sbomify.com/MAL-2025-20084/): Malicious code in express-sso (npm) (malicious package) - [MAL-2025-20083](https://insights.sbomify.com/MAL-2025-20083/): Malicious code in express-secretkey (npm) (malicious package) - [MAL-2025-20082](https://insights.sbomify.com/MAL-2025-20082/): Malicious code in express-renew-bb-session (npm) (malicious package) - [MAL-2025-20081](https://insights.sbomify.com/MAL-2025-20081/): Malicious code in express-national-redirect2 (npm) (malicious package) - [MAL-2025-20080](https://insights.sbomify.com/MAL-2025-20080/): Malicious code in express-middleware-ip-blocker (npm) (malicious package) - [MAL-2025-2008](https://insights.sbomify.com/MAL-2025-2008/): Malicious code in usvr-agent (PyPI) (malicious package) - [MAL-2025-20079](https://insights.sbomify.com/MAL-2025-20079/): Malicious code in express-meta (npm) (malicious package) - [MAL-2025-20078](https://insights.sbomify.com/MAL-2025-20078/): Malicious code in express-meetings (npm) (malicious package) - [MAL-2025-20077](https://insights.sbomify.com/MAL-2025-20077/): Malicious code in express-langdetect (npm) (malicious package) - [MAL-2025-20076](https://insights.sbomify.com/MAL-2025-20076/): Malicious code in express-juggernaut (npm) (malicious package) - [MAL-2025-20075](https://insights.sbomify.com/MAL-2025-20075/): Malicious code in express-image-bunker (npm) (malicious package) - [MAL-2025-20074](https://insights.sbomify.com/MAL-2025-20074/): Malicious code in express-http-uatraits (npm) (malicious package) - [MAL-2025-20073](https://insights.sbomify.com/MAL-2025-20073/): Malicious code in express-hermes-quasar-puppeteer (npm) (malicious package) - [MAL-2025-20072](https://insights.sbomify.com/MAL-2025-20072/): Malicious code in express-element-ui-shelljs-apollo (npm) (malicious package) - [MAL-2025-20071](https://insights.sbomify.com/MAL-2025-20071/): Malicious code in express-domain-access (npm) (malicious package) - [MAL-2025-20070](https://insights.sbomify.com/MAL-2025-20070/): Malicious code in express-chat (npm) (malicious package) - [MAL-2025-2007](https://insights.sbomify.com/MAL-2025-2007/): Malicious code in useragents (PyPI) (malicious package) - [MAL-2025-20069](https://insights.sbomify.com/MAL-2025-20069/): Malicious code in express-bunker-i18n (npm) (malicious package) - [MAL-2025-20068](https://insights.sbomify.com/MAL-2025-20068/): Malicious code in express-bundle-response (npm) (malicious package) - [MAL-2025-20067](https://insights.sbomify.com/MAL-2025-20067/): Malicious code in express-arcturus-thuban-frontend (npm) (malicious package) - [MAL-2025-20066](https://insights.sbomify.com/MAL-2025-20066/): Malicious code in express-angular-seed (npm) (malicious package) - [MAL-2025-20065](https://insights.sbomify.com/MAL-2025-20065/): Malicious code in exppress (npm) (malicious package) - [MAL-2025-20064](https://insights.sbomify.com/MAL-2025-20064/): Malicious code in export-route-kernel-wind-big (npm) (malicious package) - [MAL-2025-20063](https://insights.sbomify.com/MAL-2025-20063/): Malicious code in export-double-cache-benchmark-resolve (npm) (malicious package) - [MAL-2025-20062](https://insights.sbomify.com/MAL-2025-20062/): Malicious code in expify (npm) (malicious package) - [MAL-2025-20061](https://insights.sbomify.com/MAL-2025-20061/): Malicious code in expess (npm) (malicious package) - [MAL-2025-20060](https://insights.sbomify.com/MAL-2025-20060/): Malicious code in experss (npm) (malicious package) - [MAL-2025-2006](https://insights.sbomify.com/MAL-2025-2006/): Malicious code in usar-agent (PyPI) (malicious package) - [MAL-2025-20059](https://insights.sbomify.com/MAL-2025-20059/): Malicious code in experimentation-paypal (npm) (malicious package) - [MAL-2025-20058](https://insights.sbomify.com/MAL-2025-20058/): Malicious code in expectant (npm) (malicious package) - [MAL-2025-20057](https://insights.sbomify.com/MAL-2025-20057/): Malicious code in expatblog (npm) (malicious package) - [MAL-2025-20056](https://insights.sbomify.com/MAL-2025-20056/): Malicious code in exosphere-figures-deimos-pavo (npm) (malicious package) - [MAL-2025-20055](https://insights.sbomify.com/MAL-2025-20055/): Malicious code in exoplanetology-postcss-loader-local-quantum-computing (npm) (malicious package) - [MAL-2025-20054](https://insights.sbomify.com/MAL-2025-20054/): Malicious code in exoplanetology-package-config-aldebaran (npm) (malicious package) - [MAL-2025-20053](https://insights.sbomify.com/MAL-2025-20053/): Malicious code in exoplanetology-extremophile-html-webpack-plugin-webdriver-mocha (npm) (malicious package) - [MAL-2025-20052](https://insights.sbomify.com/MAL-2025-20052/): Malicious code in exoplanetology-australis-colors-comet (npm) (malicious package) - [MAL-2025-20051](https://insights.sbomify.com/MAL-2025-20051/): Malicious code in exoplanet-webdriverio-archaeoastronomy-lynx (npm) (malicious package) - [MAL-2025-20050](https://insights.sbomify.com/MAL-2025-20050/): Malicious code in exoplanet-pulsar-antares-miranda (npm) (malicious package) - [MAL-2025-2005](https://insights.sbomify.com/MAL-2025-2005/): Malicious code in tronyx (PyPI) (malicious package) - [MAL-2025-20049](https://insights.sbomify.com/MAL-2025-20049/): Malicious code in exoplanet-hexo-sagitta-auth0 (npm) (malicious package) - [MAL-2025-20048](https://insights.sbomify.com/MAL-2025-20048/): Malicious code in exobiology-pegasus-virtualreality-writable (npm) (malicious package) - [MAL-2025-20047](https://insights.sbomify.com/MAL-2025-20047/): Malicious code in exobiology-axios-cryovolcano-spinner (npm) (malicious package) - [MAL-2025-20046](https://insights.sbomify.com/MAL-2025-20046/): Malicious code in exmodel (npm) (malicious package) - [MAL-2025-20045](https://insights.sbomify.com/MAL-2025-20045/): Malicious code in exmo_api_lib_demo (npm) (malicious package) - [MAL-2025-20044](https://insights.sbomify.com/MAL-2025-20044/): Malicious code in existdb (npm) (malicious package) - [MAL-2025-20043](https://insights.sbomify.com/MAL-2025-20043/): Malicious code in exercise-evaluation (npm) (malicious package) - [MAL-2025-20042](https://insights.sbomify.com/MAL-2025-20042/): Malicious code in exec-thuban-australis-slidev (npm) (malicious package) - [MAL-2025-20041](https://insights.sbomify.com/MAL-2025-20041/): Malicious code in exec-mineralogy-command-nightwatch (npm) (malicious package) - [MAL-2025-20040](https://insights.sbomify.com/MAL-2025-20040/): Malicious code in exec-less-request-cosmicweb (npm) (malicious package) - [MAL-2025-2004](https://insights.sbomify.com/MAL-2025-2004/): Malicious code in tronx (PyPI) (malicious package) - [MAL-2025-20039](https://insights.sbomify.com/MAL-2025-20039/): Malicious code in exec-concurrently-run-script-pm2 (npm) (malicious package) - [MAL-2025-20038](https://insights.sbomify.com/MAL-2025-20038/): Malicious code in exdataana (npm) (malicious package) - [MAL-2025-20037](https://insights.sbomify.com/MAL-2025-20037/): Malicious code in exchange-rate-reporter (npm) (malicious package) - [MAL-2025-20036](https://insights.sbomify.com/MAL-2025-20036/): Malicious code in excel-data-exporter (npm) (malicious package) - [MAL-2025-20035](https://insights.sbomify.com/MAL-2025-20035/): Malicious code in exas (npm) (malicious package) - [MAL-2025-20034](https://insights.sbomify.com/MAL-2025-20034/): Malicious code in exapp (npm) (malicious package) - [MAL-2025-20033](https://insights.sbomify.com/MAL-2025-20033/): Malicious code in example-maliciou (npm) (malicious package) - [MAL-2025-20032](https://insights.sbomify.com/MAL-2025-20032/): Malicious code in example-ethers-v4 (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/890/