# Vulnerabilities published in 2025


- [MAL-2025-20031](https://insights.sbomify.com/MAL-2025-20031/): Malicious code in example-backend-next (npm) (malicious package)
- [MAL-2025-20030](https://insights.sbomify.com/MAL-2025-20030/): Malicious code in examplary (npm) (malicious package)
- [MAL-2025-2003](https://insights.sbomify.com/MAL-2025-2003/): Malicious code in tronwebpy (PyPI) (malicious package)
- [MAL-2025-20029](https://insights.sbomify.com/MAL-2025-20029/): Malicious code in examfirst (npm) (malicious package)
- [MAL-2025-20028](https://insights.sbomify.com/MAL-2025-20028/): Malicious code in exam-service (npm) (malicious package)
- [MAL-2025-20027](https://insights.sbomify.com/MAL-2025-20027/): Malicious code in exagfynprdbouihw (npm) (malicious package)
- [MAL-2025-20026](https://insights.sbomify.com/MAL-2025-20026/): Malicious code in ewlectron (npm) (malicious package)
- [MAL-2025-20025](https://insights.sbomify.com/MAL-2025-20025/): Malicious code in ewalena (npm) (malicious package)
- [MAL-2025-20024](https://insights.sbomify.com/MAL-2025-20024/): Malicious code in ew0nfx (npm) (malicious package)
- [MAL-2025-20023](https://insights.sbomify.com/MAL-2025-20023/): Malicious code in evvnt-submission-form-angular (npm) (malicious package)
- [MAL-2025-20022](https://insights.sbomify.com/MAL-2025-20022/): Malicious code in evusau (npm) (malicious package)
- [MAL-2025-20021](https://insights.sbomify.com/MAL-2025-20021/): Malicious code in evuilgapkczwsorj (npm) (malicious package)
- [MAL-2025-20020](https://insights.sbomify.com/MAL-2025-20020/): Malicious code in evtiyugznposamqw (npm) (malicious package)
- [MAL-2025-2002](https://insights.sbomify.com/MAL-2025-2002/): Malicious code in tronpyweb (PyPI) (malicious package)
- [MAL-2025-20019](https://insights.sbomify.com/MAL-2025-20019/): Malicious code in evs-livepam-ui (npm) (malicious package)
- [MAL-2025-20018](https://insights.sbomify.com/MAL-2025-20018/): Malicious code in evony-resources-hack883 (npm) (malicious package)
- [MAL-2025-20017](https://insights.sbomify.com/MAL-2025-20017/): Malicious code in evony-resources-hack844 (npm) (malicious package)
- [MAL-2025-20016](https://insights.sbomify.com/MAL-2025-20016/): Malicious code in evony-resources-hack809 (npm) (malicious package)
- [MAL-2025-20015](https://insights.sbomify.com/MAL-2025-20015/): Malicious code in evony-resources-hack691 (npm) (malicious package)
- [MAL-2025-20014](https://insights.sbomify.com/MAL-2025-20014/): Malicious code in evony-resources-hack662 (npm) (malicious package)
- [MAL-2025-20013](https://insights.sbomify.com/MAL-2025-20013/): Malicious code in evony-resources-hack513 (npm) (malicious package)
- [MAL-2025-20012](https://insights.sbomify.com/MAL-2025-20012/): Malicious code in evony-resources-hack415 (npm) (malicious package)
- [MAL-2025-20011](https://insights.sbomify.com/MAL-2025-20011/): Malicious code in evony-resources-hack390 (npm) (malicious package)
- [MAL-2025-20010](https://insights.sbomify.com/MAL-2025-20010/): Malicious code in evony-resources-hack386 (npm) (malicious package)
- [MAL-2025-2001](https://insights.sbomify.com/MAL-2025-2001/): Malicious code in tronpynet (PyPI) (malicious package)
- [MAL-2025-20009](https://insights.sbomify.com/MAL-2025-20009/): Malicious code in evony-resources-hack292 (npm) (malicious package)
- [MAL-2025-20008](https://insights.sbomify.com/MAL-2025-20008/): Malicious code in evony-resources-hack241 (npm) (malicious package)
- [MAL-2025-20007](https://insights.sbomify.com/MAL-2025-20007/): Malicious code in evony-resources-hack173 (npm) (malicious package)
- [MAL-2025-20006](https://insights.sbomify.com/MAL-2025-20006/): Malicious code in evony-resources-hack124 (npm) (malicious package)
- [MAL-2025-20005](https://insights.sbomify.com/MAL-2025-20005/): Malicious code in evony-resources-hack030 (npm) (malicious package)
- [MAL-2025-20004](https://insights.sbomify.com/MAL-2025-20004/): Malicious code in evolubots (npm) (malicious package)
- [MAL-2025-20003](https://insights.sbomify.com/MAL-2025-20003/): Malicious code in evoke_z6use_vypu5_banyan (npm) (malicious package)
- [MAL-2025-20002](https://insights.sbomify.com/MAL-2025-20002/): Malicious code in evoke_y1jkd_wlep8_undertow (npm) (malicious package)
- [MAL-2025-20001](https://insights.sbomify.com/MAL-2025-20001/): Malicious code in evoke_r2ucs_lurqr_tempest (npm) (malicious package)
- [MAL-2025-20000](https://insights.sbomify.com/MAL-2025-20000/): Malicious code in evoke_or3w0_pwfga_glow (npm) (malicious package)
- [MAL-2025-2000](https://insights.sbomify.com/MAL-2025-2000/): Malicious code in tronnetpy (PyPI) (malicious package)
- [MAL-2025-200](https://insights.sbomify.com/MAL-2025-200/): Malicious code in language-common (npm) (malicious package)
- [MAL-2025-20](https://insights.sbomify.com/MAL-2025-20/): Malicious code in hd-base (npm) (malicious package)
- [MAL-2025-2](https://insights.sbomify.com/MAL-2025-2/): Malicious code in payouts-banking-info (npm) (malicious package)
- [MAL-2025-19999](https://insights.sbomify.com/MAL-2025-19999/): Malicious code in evoke_d4ses_oo44u_yonder (npm) (malicious package)
- [MAL-2025-19998](https://insights.sbomify.com/MAL-2025-19998/): Malicious code in evoke_8ph5f_d1a8h_undertow (npm) (malicious package)
- [MAL-2025-19997](https://insights.sbomify.com/MAL-2025-19997/): Malicious code in evoke_5nocp_br9mv_rose (npm) (malicious package)
- [MAL-2025-19996](https://insights.sbomify.com/MAL-2025-19996/): Malicious code in evm-testing (npm) (malicious package)
- [MAL-2025-19995](https://insights.sbomify.com/MAL-2025-19995/): Malicious code in evm-cctp-contracts (npm) (malicious package)
- [MAL-2025-19994](https://insights.sbomify.com/MAL-2025-19994/): Malicious code in evilunit (npm) (malicious package)
- [MAL-2025-19993](https://insights.sbomify.com/MAL-2025-19993/): Malicious code in evil-npm-package-tonghuaroot (npm) (malicious package)
- [MAL-2025-19992](https://insights.sbomify.com/MAL-2025-19992/): Malicious code in evil-npm-package (npm) (malicious package)
- [MAL-2025-19991](https://insights.sbomify.com/MAL-2025-19991/): Malicious code in evevalmar (npm) (malicious package)
- [MAL-2025-19990](https://insights.sbomify.com/MAL-2025-19990/): Malicious code in every-time (npm) (malicious package)
- [MAL-2025-1999](https://insights.sbomify.com/MAL-2025-1999/): Malicious code in tronlinkpy (PyPI) (malicious package)
- [MAL-2025-19989](https://insights.sbomify.com/MAL-2025-19989/): Malicious code in everwhere (npm) (malicious package)
- [MAL-2025-19988](https://insights.sbomify.com/MAL-2025-19988/): Malicious code in evergreen-yonder-dhh073-project (npm) (malicious package)
- [MAL-2025-19987](https://insights.sbomify.com/MAL-2025-19987/): Malicious code in evergreen-yambean-cskx (npm) (malicious package)
- [MAL-2025-19986](https://insights.sbomify.com/MAL-2025-19986/): Malicious code in evergreen-xenon-xjc570-project (npm) (malicious package)
- [MAL-2025-19985](https://insights.sbomify.com/MAL-2025-19985/): Malicious code in evergreen-xenon-izt079-project (npm) (malicious package)
- [MAL-2025-19984](https://insights.sbomify.com/MAL-2025-19984/): Malicious code in evergreen-wormhole-hr5p (npm) (malicious package)
- [MAL-2025-19983](https://insights.sbomify.com/MAL-2025-19983/): Malicious code in evergreen-whale-fqy333-project (npm) (malicious package)
- [MAL-2025-19982](https://insights.sbomify.com/MAL-2025-19982/): Malicious code in evergreen-whale-eew152-project (npm) (malicious package)
- [MAL-2025-19981](https://insights.sbomify.com/MAL-2025-19981/): Malicious code in evergreen-viaduct-pqpx (npm) (malicious package)
- [MAL-2025-19980](https://insights.sbomify.com/MAL-2025-19980/): Malicious code in evergreen-udon-d9ai (npm) (malicious package)
- [MAL-2025-1998](https://insights.sbomify.com/MAL-2025-1998/): Malicious code in trongridpy (PyPI) (malicious package)
- [MAL-2025-19979](https://insights.sbomify.com/MAL-2025-19979/): Malicious code in evergreen-thistle-ekl656-project (npm) (malicious package)
- [MAL-2025-19978](https://insights.sbomify.com/MAL-2025-19978/): Malicious code in evergreen-reef-ydt108-project (npm) (malicious package)
- [MAL-2025-19977](https://insights.sbomify.com/MAL-2025-19977/): Malicious code in evergreen-quarry-tqkx (npm) (malicious package)
- [MAL-2025-19976](https://insights.sbomify.com/MAL-2025-19976/): Malicious code in evergreen-prairie-hcz928-project (npm) (malicious package)
- [MAL-2025-19975](https://insights.sbomify.com/MAL-2025-19975/): Malicious code in evergreen-peacock-ffl597-project (npm) (malicious package)
- [MAL-2025-19974](https://insights.sbomify.com/MAL-2025-19974/): Malicious code in evergreen-opaline-igu642-project (npm) (malicious package)
- [MAL-2025-19973](https://insights.sbomify.com/MAL-2025-19973/): Malicious code in evergreen-octopus-cdu240-project (npm) (malicious package)
- [MAL-2025-19972](https://insights.sbomify.com/MAL-2025-19972/): Malicious code in evergreen-moon-bgo009-project (npm) (malicious package)
- [MAL-2025-19971](https://insights.sbomify.com/MAL-2025-19971/): Malicious code in evergreen-meadow-hjb574-project (npm) (malicious package)
- [MAL-2025-19970](https://insights.sbomify.com/MAL-2025-19970/): Malicious code in evergreen-iris-dxz619-project (npm) (malicious package)
- [MAL-2025-19969](https://insights.sbomify.com/MAL-2025-19969/): Malicious code in evergreen-fern-dqv608-project (npm) (malicious package)
- [MAL-2025-19968](https://insights.sbomify.com/MAL-2025-19968/): Malicious code in evergreen-elephant-bcb030-project (npm) (malicious package)
- [MAL-2025-19967](https://insights.sbomify.com/MAL-2025-19967/): Malicious code in evergreen-dock-xxn5 (npm) (malicious package)
- [MAL-2025-19966](https://insights.sbomify.com/MAL-2025-19966/): Malicious code in evergreen-crystal-rua635-project (npm) (malicious package)
- [MAL-2025-19965](https://insights.sbomify.com/MAL-2025-19965/): Malicious code in evergreen-cloud-wew202-project (npm) (malicious package)
- [MAL-2025-19964](https://insights.sbomify.com/MAL-2025-19964/): Malicious code in evergreen-aspen-sbd685-project (npm) (malicious package)
- [MAL-2025-19963](https://insights.sbomify.com/MAL-2025-19963/): Malicious code in evergreen-ant-knn177-project (npm) (malicious package)
- [MAL-2025-19962](https://insights.sbomify.com/MAL-2025-19962/): Malicious code in evergreen-amber-dck289-project (npm) (malicious package)
- [MAL-2025-19961](https://insights.sbomify.com/MAL-2025-19961/): Malicious code in everglow-yawn-whe125-project (npm) (malicious package)
- [MAL-2025-19960](https://insights.sbomify.com/MAL-2025-19960/): Malicious code in everglow-wisp-lve550-project (npm) (malicious package)
- [MAL-2025-1996](https://insights.sbomify.com/MAL-2025-1996/): Malicious code in superline (PyPI) (malicious package)
- [MAL-2025-19959](https://insights.sbomify.com/MAL-2025-19959/): Malicious code in everglow-willow-msx578-project (npm) (malicious package)
- [MAL-2025-19958](https://insights.sbomify.com/MAL-2025-19958/): Malicious code in everglow-quasar-rim009-project (npm) (malicious package)
- [MAL-2025-19957](https://insights.sbomify.com/MAL-2025-19957/): Malicious code in everglow-penguin-uap180-project (npm) (malicious package)
- [MAL-2025-19956](https://insights.sbomify.com/MAL-2025-19956/): Malicious code in everglow-moose-eaf816-project (npm) (malicious package)
- [MAL-2025-19955](https://insights.sbomify.com/MAL-2025-19955/): Malicious code in everglow-island-pzk441-project (npm) (malicious package)
- [MAL-2025-19954](https://insights.sbomify.com/MAL-2025-19954/): Malicious code in everglow-elephant-pqt831-project (npm) (malicious package)
- [MAL-2025-19953](https://insights.sbomify.com/MAL-2025-19953/): Malicious code in everglow-delta-ftl462-project (npm) (malicious package)
- [MAL-2025-19952](https://insights.sbomify.com/MAL-2025-19952/): Malicious code in everglow-butterfly-qji813-project (npm) (malicious package)
- [MAL-2025-19951](https://insights.sbomify.com/MAL-2025-19951/): Malicious code in everglow-buffalo-dol222-project (npm) (malicious package)
- [MAL-2025-19950](https://insights.sbomify.com/MAL-2025-19950/): Malicious code in everglow-asteroid-aht158-project (npm) (malicious package)
- [MAL-2025-1995](https://insights.sbomify.com/MAL-2025-1995/): Malicious code in rqsts (PyPI) (malicious package)
- [MAL-2025-19949](https://insights.sbomify.com/MAL-2025-19949/): Malicious code in everest-yak-utk814-project (npm) (malicious package)
- [MAL-2025-19948](https://insights.sbomify.com/MAL-2025-19948/): Malicious code in everest-vine-wkp559-project (npm) (malicious package)
- [MAL-2025-19947](https://insights.sbomify.com/MAL-2025-19947/): Malicious code in everest-vine-gox096-project (npm) (malicious package)
- [MAL-2025-19946](https://insights.sbomify.com/MAL-2025-19946/): Malicious code in everest-star-dwy943-project (npm) (malicious package)
- [MAL-2025-19945](https://insights.sbomify.com/MAL-2025-19945/): Malicious code in everest-ripple-sla471-project (npm) (malicious package)
- [MAL-2025-19944](https://insights.sbomify.com/MAL-2025-19944/): Malicious code in everest-pebble-qke610-project (npm) (malicious package)
- [MAL-2025-19943](https://insights.sbomify.com/MAL-2025-19943/): Malicious code in everest-peacock-pmb616-project (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/891/