# Vulnerabilities published in 2025


- [MAL-2025-19942](https://insights.sbomify.com/MAL-2025-19942/): Malicious code in everest-moose-ayl794-project (npm) (malicious package)
- [MAL-2025-19941](https://insights.sbomify.com/MAL-2025-19941/): Malicious code in everest-giraffe-jjn691-project (npm) (malicious package)
- [MAL-2025-19940](https://insights.sbomify.com/MAL-2025-19940/): Malicious code in everest-fjord-rtr735-project (npm) (malicious package)
- [MAL-2025-1994](https://insights.sbomify.com/MAL-2025-1994/): Malicious code in requesttss (PyPI) (malicious package)
- [MAL-2025-19939](https://insights.sbomify.com/MAL-2025-19939/): Malicious code in everest-emerald-bmw433-project (npm) (malicious package)
- [MAL-2025-19938](https://insights.sbomify.com/MAL-2025-19938/): Malicious code in everest-dragon-jzf552-project (npm) (malicious package)
- [MAL-2025-19937](https://insights.sbomify.com/MAL-2025-19937/): Malicious code in everest-dewdrop-nwe880-project (npm) (malicious package)
- [MAL-2025-19936](https://insights.sbomify.com/MAL-2025-19936/): Malicious code in everest-delta-sco019-project (npm) (malicious package)
- [MAL-2025-19935](https://insights.sbomify.com/MAL-2025-19935/): Malicious code in everest-caravan-qca846-project (npm) (malicious package)
- [MAL-2025-19934](https://insights.sbomify.com/MAL-2025-19934/): Malicious code in everest-ant-yma980-project (npm) (malicious package)
- [MAL-2025-19933](https://insights.sbomify.com/MAL-2025-19933/): Malicious code in everedit (npm) (malicious package)
- [MAL-2025-19932](https://insights.sbomify.com/MAL-2025-19932/): Malicious code in ever-wever (npm) (malicious package)
- [MAL-2025-19931](https://insights.sbomify.com/MAL-2025-19931/): Malicious code in eventsdb (npm) (malicious package)
- [MAL-2025-19930](https://insights.sbomify.com/MAL-2025-19930/): Malicious code in EventRelayEmitter (npm) (malicious package)
- [MAL-2025-1993](https://insights.sbomify.com/MAL-2025-1993/): Malicious code in requestsa (PyPI) (malicious package)
- [MAL-2025-19929](https://insights.sbomify.com/MAL-2025-19929/): Malicious code in eventhoriz-meissa-morgan-axios (npm) (malicious package)
- [MAL-2025-19928](https://insights.sbomify.com/MAL-2025-19928/): Malicious code in eventfeed (npm) (malicious package)
- [MAL-2025-19927](https://insights.sbomify.com/MAL-2025-19927/): Malicious code in eventelis-dashboard (npm) (malicious package)
- [MAL-2025-19926](https://insights.sbomify.com/MAL-2025-19926/): Malicious code in eventcat (npm) (malicious package)
- [MAL-2025-19925](https://insights.sbomify.com/MAL-2025-19925/): Malicious code in eventagon (npm) (malicious package)
- [MAL-2025-19924](https://insights.sbomify.com/MAL-2025-19924/): Malicious code in event-on-apollo-vortex (npm) (malicious package)
- [MAL-2025-19923](https://insights.sbomify.com/MAL-2025-19923/): Malicious code in event-lib (npm) (malicious package)
- [MAL-2025-19922](https://insights.sbomify.com/MAL-2025-19922/): Malicious code in evanyou (npm) (malicious package)
- [MAL-2025-19921](https://insights.sbomify.com/MAL-2025-19921/): Malicious code in evalist (npm) (malicious package)
- [MAL-2025-19920](https://insights.sbomify.com/MAL-2025-19920/): Malicious code in ev-scroll-loader (npm) (malicious package)
- [MAL-2025-1992](https://insights.sbomify.com/MAL-2025-1992/): Malicious code in requests-x64 (PyPI) (malicious package)
- [MAL-2025-19919](https://insights.sbomify.com/MAL-2025-19919/): Malicious code in ev-scaffolder (npm) (malicious package)
- [MAL-2025-19918](https://insights.sbomify.com/MAL-2025-19918/): Malicious code in ev-refresh-cf (npm) (malicious package)
- [MAL-2025-19917](https://insights.sbomify.com/MAL-2025-19917/): Malicious code in euuoon (npm) (malicious package)
- [MAL-2025-19916](https://insights.sbomify.com/MAL-2025-19916/): Malicious code in europcar (npm) (malicious package)
- [MAL-2025-19915](https://insights.sbomify.com/MAL-2025-19915/): Malicious code in europaphp (npm) (malicious package)
- [MAL-2025-19914](https://insights.sbomify.com/MAL-2025-19914/): Malicious code in europa-zenith-deneb-nestjs (npm) (malicious package)
- [MAL-2025-19913](https://insights.sbomify.com/MAL-2025-19913/): Malicious code in europa-ultra-epimetheus-fermion (npm) (malicious package)
- [MAL-2025-19912](https://insights.sbomify.com/MAL-2025-19912/): Malicious code in europa-standard-bellatrix-test (npm) (malicious package)
- [MAL-2025-19911](https://insights.sbomify.com/MAL-2025-19911/): Malicious code in europa-sqlite-neutronstar-quasar (npm) (malicious package)
- [MAL-2025-19910](https://insights.sbomify.com/MAL-2025-19910/): Malicious code in europa-ora-exosphere-norma (npm) (malicious package)
- [MAL-2025-1991](https://insights.sbomify.com/MAL-2025-1991/): Malicious code in requesra (PyPI) (malicious package)
- [MAL-2025-19909](https://insights.sbomify.com/MAL-2025-19909/): Malicious code in europa-indus-puppeteer-polaris (npm) (malicious package)
- [MAL-2025-19908](https://insights.sbomify.com/MAL-2025-19908/): Malicious code in europa-hugo-spectron-foundation-chalk-server (npm) (malicious package)
- [MAL-2025-19907](https://insights.sbomify.com/MAL-2025-19907/): Malicious code in europa-fornax-fomalhaut-config (npm) (malicious package)
- [MAL-2025-19906](https://insights.sbomify.com/MAL-2025-19906/): Malicious code in europa-express-development-luminescence (npm) (malicious package)
- [MAL-2025-19905](https://insights.sbomify.com/MAL-2025-19905/): Malicious code in euromedia-gulp (npm) (malicious package)
- [MAL-2025-19904](https://insights.sbomify.com/MAL-2025-19904/): Malicious code in euogctiabnwpskjx (npm) (malicious package)
- [MAL-2025-19903](https://insights.sbomify.com/MAL-2025-19903/): Malicious code in eulogy (npm) (malicious package)
- [MAL-2025-19902](https://insights.sbomify.com/MAL-2025-19902/): Malicious code in eui-react-scripts (npm) (malicious package)
- [MAL-2025-19901](https://insights.sbomify.com/MAL-2025-19901/): Malicious code in euclides (npm) (malicious package)
- [MAL-2025-19900](https://insights.sbomify.com/MAL-2025-19900/): Malicious code in eu.fairmanager.mobile (npm) (malicious package)
- [MAL-2025-1990](https://insights.sbomify.com/MAL-2025-1990/): Malicious code in reques (PyPI) (malicious package)
- [MAL-2025-199](https://insights.sbomify.com/MAL-2025-199/): Malicious code in kubeflow-pipelines (npm) (malicious package)
- [MAL-2025-19899](https://insights.sbomify.com/MAL-2025-19899/): Malicious code in etymonline (npm) (malicious package)
- [MAL-2025-19898](https://insights.sbomify.com/MAL-2025-19898/): Malicious code in etwitty (npm) (malicious package)
- [MAL-2025-19897](https://insights.sbomify.com/MAL-2025-19897/): Malicious code in etplugin (npm) (malicious package)
- [MAL-2025-19896](https://insights.sbomify.com/MAL-2025-19896/): Malicious code in etltools (npm) (malicious package)
- [MAL-2025-19895](https://insights.sbomify.com/MAL-2025-19895/): Malicious code in ethology-sedimentology-geoarchaeology-geomorphology (npm) (malicious package)
- [MAL-2025-19894](https://insights.sbomify.com/MAL-2025-19894/): Malicious code in ethology-bootes-dotenv-safe-xerxes (npm) (malicious package)
- [MAL-2025-19893](https://insights.sbomify.com/MAL-2025-19893/): Malicious code in ethers-util.js (npm) (malicious package)
- [MAL-2025-19892](https://insights.sbomify.com/MAL-2025-19892/): Malicious code in ethers-util (npm) (malicious package)
- [MAL-2025-19891](https://insights.sbomify.com/MAL-2025-19891/): Malicious code in etherres (npm) (malicious package)
- [MAL-2025-19890](https://insights.sbomify.com/MAL-2025-19890/): Malicious code in ethermega (npm) (malicious package)
- [MAL-2025-1989](https://insights.sbomify.com/MAL-2025-1989/): Malicious code in reque (PyPI) (malicious package)
- [MAL-2025-19889](https://insights.sbomify.com/MAL-2025-19889/): Malicious code in ethan-prime-time (npm) (malicious package)
- [MAL-2025-19888](https://insights.sbomify.com/MAL-2025-19888/): Malicious code in eth_private_key_to_address (npm) (malicious package)
- [MAL-2025-19887](https://insights.sbomify.com/MAL-2025-19887/): Malicious code in etdpqayjnkhvfkzi (npm) (malicious package)
- [MAL-2025-19886](https://insights.sbomify.com/MAL-2025-19886/): Malicious code in etch-in-stone (npm) (malicious package)
- [MAL-2025-19885](https://insights.sbomify.com/MAL-2025-19885/): Malicious code in etcdrepl (npm) (malicious package)
- [MAL-2025-19884](https://insights.sbomify.com/MAL-2025-19884/): Malicious code in eta-xml-wind-parse-cron (npm) (malicious package)
- [MAL-2025-19883](https://insights.sbomify.com/MAL-2025-19883/): Malicious code in eta-reject-fork-char-cat (npm) (malicious package)
- [MAL-2025-19882](https://insights.sbomify.com/MAL-2025-19882/): Malicious code in eta-chi-socket-easy-module (npm) (malicious package)
- [MAL-2025-19881](https://insights.sbomify.com/MAL-2025-19881/): Malicious code in eswyoivnamrkuftd (npm) (malicious package)
- [MAL-2025-19880](https://insights.sbomify.com/MAL-2025-19880/): Malicious code in estudoweb (npm) (malicious package)
- [MAL-2025-1988](https://insights.sbomify.com/MAL-2025-1988/): Malicious code in ransomware (PyPI) (malicious package)
- [MAL-2025-19879](https://insights.sbomify.com/MAL-2025-19879/): Malicious code in estroids (npm) (malicious package)
- [MAL-2025-19878](https://insights.sbomify.com/MAL-2025-19878/): Malicious code in estosneu1 (npm) (malicious package)
- [MAL-2025-19877](https://insights.sbomify.com/MAL-2025-19877/): Malicious code in essence-qdi4e-o5akm-jungle-project (npm) (malicious package)
- [MAL-2025-19876](https://insights.sbomify.com/MAL-2025-19876/): Malicious code in essence-hlqjl-6drw8-aurora-project (npm) (malicious package)
- [MAL-2025-19875](https://insights.sbomify.com/MAL-2025-19875/): Malicious code in essence-gr20e-klty5-opal-project (npm) (malicious package)
- [MAL-2025-19874](https://insights.sbomify.com/MAL-2025-19874/): Malicious code in essence-dszwm-d3xs1-cascade-project (npm) (malicious package)
- [MAL-2025-19873](https://insights.sbomify.com/MAL-2025-19873/): Malicious code in essence-dbif3-g4ce3-twilight-project (npm) (malicious package)
- [MAL-2025-19872](https://insights.sbomify.com/MAL-2025-19872/): Malicious code in essence-2eyt7-ftz97-verdant-project (npm) (malicious package)
- [MAL-2025-19871](https://insights.sbomify.com/MAL-2025-19871/): Malicious code in essence-18y8m-i7gf5-yellow-project (npm) (malicious package)
- [MAL-2025-19870](https://insights.sbomify.com/MAL-2025-19870/): Malicious code in esselin (npm) (malicious package)
- [MAL-2025-1987](https://insights.sbomify.com/MAL-2025-1987/): Malicious code in randomuseragent (PyPI) (malicious package)
- [MAL-2025-19869](https://insights.sbomify.com/MAL-2025-19869/): Malicious code in esri (npm) (malicious package)
- [MAL-2025-19868](https://insights.sbomify.com/MAL-2025-19868/): Malicious code in esprime (npm) (malicious package)
- [MAL-2025-19867](https://insights.sbomify.com/MAL-2025-19867/): Malicious code in esovtaj (npm) (malicious package)
- [MAL-2025-19866](https://insights.sbomify.com/MAL-2025-19866/): Malicious code in esolutions-ui-framework (npm) (malicious package)
- [MAL-2025-19865](https://insights.sbomify.com/MAL-2025-19865/): Malicious code in eslint-virtru-lint (npm) (malicious package)
- [MAL-2025-19864](https://insights.sbomify.com/MAL-2025-19864/): Malicious code in eslint-plugin-virtru-lint (npm) (malicious package)
- [MAL-2025-19863](https://insights.sbomify.com/MAL-2025-19863/): Malicious code in eslint-plugin-spectrum-web-components (npm) (malicious package)
- [MAL-2025-19862](https://insights.sbomify.com/MAL-2025-19862/): Malicious code in eslint-plugin-restart-vega-soap (npm) (malicious package)
- [MAL-2025-19861](https://insights.sbomify.com/MAL-2025-19861/): Malicious code in eslint-plugin-relay-internal (npm) (malicious package)
- [MAL-2025-19860](https://insights.sbomify.com/MAL-2025-19860/): Malicious code in eslint-plugin-react-internal (npm) (malicious package)
- [MAL-2025-1986](https://insights.sbomify.com/MAL-2025-1986/): Malicious code in pxz (PyPI) (malicious package)
- [MAL-2025-19859](https://insights.sbomify.com/MAL-2025-19859/): Malicious code in eslint-plugin-pb (npm) (malicious package)
- [MAL-2025-19858](https://insights.sbomify.com/MAL-2025-19858/): Malicious code in eslint-plugin-market (npm) (malicious package)
- [MAL-2025-19857](https://insights.sbomify.com/MAL-2025-19857/): Malicious code in eslint-plugin-lwc (npm) (malicious package)
- [MAL-2025-19856](https://insights.sbomify.com/MAL-2025-19856/): Malicious code in eslint-plugin-kg-jslint-codeanalyzers (npm) (malicious package)
- [MAL-2025-19855](https://insights.sbomify.com/MAL-2025-19855/): Malicious code in eslint-plugin-jasmine-augmentedreality-airbnb (npm) (malicious package)
- [MAL-2025-19854](https://insights.sbomify.com/MAL-2025-19854/): Malicious code in eslint-plugin-got-ursa-taurus (npm) (malicious package)
- [MAL-2025-19853](https://insights.sbomify.com/MAL-2025-19853/): Malicious code in eslint-plugin-es-spec (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/892/