# Vulnerabilities published in 2025 - [MAL-2025-19852](https://insights.sbomify.com/MAL-2025-19852/): Malicious code in eslint-plugin-coda-rules (npm) (malicious package) - [MAL-2025-19851](https://insights.sbomify.com/MAL-2025-19851/): Malicious code in eslint-plugin-cli (npm) (malicious package) - [MAL-2025-19850](https://insights.sbomify.com/MAL-2025-19850/): Malicious code in eslint-plugin-automation-custom (npm) (malicious package) - [MAL-2025-1985](https://insights.sbomify.com/MAL-2025-1985/): Malicious code in novatwo (PyPI) (malicious package) - [MAL-2025-19849](https://insights.sbomify.com/MAL-2025-19849/): Malicious code in eslint-plugin-airbnb-base (npm) (malicious package) - [MAL-2025-19848](https://insights.sbomify.com/MAL-2025-19848/): Malicious code in eslint-plugin-airbnb (npm) (malicious package) - [MAL-2025-19847](https://insights.sbomify.com/MAL-2025-19847/): Malicious code in eslint-plugin-aether-phenomic-redis (npm) (malicious package) - [MAL-2025-19846](https://insights.sbomify.com/MAL-2025-19846/): Malicious code in eslint-jabbah-europa-markdown (npm) (malicious package) - [MAL-2025-19845](https://insights.sbomify.com/MAL-2025-19845/): Malicious code in eslint-config-yandex-morda (npm) (malicious package) - [MAL-2025-19844](https://insights.sbomify.com/MAL-2025-19844/): Malicious code in eslint-config-xtdet (npm) (malicious package) - [MAL-2025-19843](https://insights.sbomify.com/MAL-2025-19843/): Malicious code in eslint-config-volebonet (npm) (malicious package) - [MAL-2025-19842](https://insights.sbomify.com/MAL-2025-19842/): Malicious code in eslint-config-techintouch (npm) (malicious package) - [MAL-2025-19841](https://insights.sbomify.com/MAL-2025-19841/): Malicious code in eslint-config-starry (npm) (malicious package) - [MAL-2025-19840](https://insights.sbomify.com/MAL-2025-19840/): Malicious code in eslint-config-skyscanner-test (npm) (malicious package) - [MAL-2025-1984](https://insights.sbomify.com/MAL-2025-1984/): Malicious code in nflx-metaflow (PyPI) (malicious package) - [MAL-2025-19839](https://insights.sbomify.com/MAL-2025-19839/): Malicious code in eslint-config-sebastienbarre (npm) (malicious package) - [MAL-2025-19838](https://insights.sbomify.com/MAL-2025-19838/): Malicious code in eslint-config-public-archaeometry-paleontology (npm) (malicious package) - [MAL-2025-19837](https://insights.sbomify.com/MAL-2025-19837/): Malicious code in eslint-config-pardel (npm) (malicious package) - [MAL-2025-19836](https://insights.sbomify.com/MAL-2025-19836/): Malicious code in eslint-config-ok (npm) (malicious package) - [MAL-2025-19835](https://insights.sbomify.com/MAL-2025-19835/): Malicious code in eslint-config-lendesk (npm) (malicious package) - [MAL-2025-19834](https://insights.sbomify.com/MAL-2025-19834/): Malicious code in eslint-config-kptests (npm) (malicious package) - [MAL-2025-19833](https://insights.sbomify.com/MAL-2025-19833/): Malicious code in eslint-config-jitsi (npm) (malicious package) - [MAL-2025-19832](https://insights.sbomify.com/MAL-2025-19832/): Malicious code in eslint-config-iot-app-kit (npm) (malicious package) - [MAL-2025-19831](https://insights.sbomify.com/MAL-2025-19831/): Malicious code in eslint-config-inectum (npm) (malicious package) - [MAL-2025-19830](https://insights.sbomify.com/MAL-2025-19830/): Malicious code in eslint-config-googlejs-es6 (npm) (malicious package) - [MAL-2025-1983](https://insights.sbomify.com/MAL-2025-1983/): Malicious code in mlc-llm-nightly-cu123 (PyPI) (malicious package) - [MAL-2025-19829](https://insights.sbomify.com/MAL-2025-19829/): Malicious code in eslint-config-gacrux-hercules-element-ui (npm) (malicious package) - [MAL-2025-19828](https://insights.sbomify.com/MAL-2025-19828/): Malicious code in eslint-config-frantic1048 (npm) (malicious package) - [MAL-2025-19827](https://insights.sbomify.com/MAL-2025-19827/): Malicious code in eslint-config-earnest (npm) (malicious package) - [MAL-2025-19826](https://insights.sbomify.com/MAL-2025-19826/): Malicious code in eslint-config-data-ui (npm) (malicious package) - [MAL-2025-19825](https://insights.sbomify.com/MAL-2025-19825/): Malicious code in eslint-config-coupang (npm) (malicious package) - [MAL-2025-19824](https://insights.sbomify.com/MAL-2025-19824/): Malicious code in eslint-config-colourbox-example (npm) (malicious package) - [MAL-2025-19823](https://insights.sbomify.com/MAL-2025-19823/): Malicious code in eslint-config-10up (npm) (malicious package) - [MAL-2025-19822](https://insights.sbomify.com/MAL-2025-19822/): Malicious code in eslectron (npm) (malicious package) - [MAL-2025-19821](https://insights.sbomify.com/MAL-2025-19821/): Malicious code in eskema (npm) (malicious package) - [MAL-2025-19820](https://insights.sbomify.com/MAL-2025-19820/): Malicious code in esgpsdemo (npm) (malicious package) - [MAL-2025-1982](https://insights.sbomify.com/MAL-2025-1982/): Malicious code in mlc-ai-nightly-rocm62 (PyPI) (malicious package) - [MAL-2025-19819](https://insights.sbomify.com/MAL-2025-19819/): Malicious code in escape-hatch-tooling (npm) (malicious package) - [MAL-2025-19818](https://insights.sbomify.com/MAL-2025-19818/): Malicious code in esbuild-linux-arm32 (npm) (malicious package) - [MAL-2025-19817](https://insights.sbomify.com/MAL-2025-19817/): Malicious code in esba (npm) (malicious package) - [MAL-2025-19816](https://insights.sbomify.com/MAL-2025-19816/): Malicious code in esales-frontend (npm) (malicious package) - [MAL-2025-19815](https://insights.sbomify.com/MAL-2025-19815/): Malicious code in es6templatetest (npm) (malicious package) - [MAL-2025-19814](https://insights.sbomify.com/MAL-2025-19814/): Malicious code in es6guardian (npm) (malicious package) - [MAL-2025-19813](https://insights.sbomify.com/MAL-2025-19813/): Malicious code in es6-prmoise (npm) (malicious package) - [MAL-2025-19812](https://insights.sbomify.com/MAL-2025-19812/): Malicious code in es6-http-status-codes (npm) (malicious package) - [MAL-2025-19811](https://insights.sbomify.com/MAL-2025-19811/): Malicious code in es6-demo-react-npm2 (npm) (malicious package) - [MAL-2025-19810](https://insights.sbomify.com/MAL-2025-19810/): Malicious code in es-data-table (npm) (malicious package) - [MAL-2025-1981](https://insights.sbomify.com/MAL-2025-1981/): Malicious code in mlc-ai-nightly-cu123 (PyPI) (malicious package) - [MAL-2025-19809](https://insights.sbomify.com/MAL-2025-19809/): Malicious code in erwin-sambalado45-sukiwir (npm) (malicious package) - [MAL-2025-19808](https://insights.sbomify.com/MAL-2025-19808/): Malicious code in erwin-rojak69-kuki (npm) (malicious package) - [MAL-2025-19807](https://insights.sbomify.com/MAL-2025-19807/): Malicious code in erwin-martabak50-sukiwir (npm) (malicious package) - [MAL-2025-19806](https://insights.sbomify.com/MAL-2025-19806/): Malicious code in erwin-lapis73-breki (npm) (malicious package) - [MAL-2025-19805](https://insights.sbomify.com/MAL-2025-19805/): Malicious code in erwin-kue45-breki (npm) (malicious package) - [MAL-2025-19804](https://insights.sbomify.com/MAL-2025-19804/): Malicious code in erwin-jengkol63-breki (npm) (malicious package) - [MAL-2025-19803](https://insights.sbomify.com/MAL-2025-19803/): Malicious code in erwin-enting100-sukiwir (npm) (malicious package) - [MAL-2025-19802](https://insights.sbomify.com/MAL-2025-19802/): Malicious code in erwin-empal63-breki (npm) (malicious package) - [MAL-2025-19801](https://insights.sbomify.com/MAL-2025-19801/): Malicious code in eruvaka (npm) (malicious package) - [MAL-2025-19800](https://insights.sbomify.com/MAL-2025-19800/): Malicious code in eruification (npm) (malicious package) - [MAL-2025-1980](https://insights.sbomify.com/MAL-2025-1980/): Malicious code in mlc-ai-nightly (PyPI) (malicious package) - [MAL-2025-198](https://insights.sbomify.com/MAL-2025-198/): Malicious code in jsexports (npm) (malicious package) - [MAL-2025-19799](https://insights.sbomify.com/MAL-2025-19799/): Malicious code in erroroji (npm) (malicious package) - [MAL-2025-19798](https://insights.sbomify.com/MAL-2025-19798/): Malicious code in error-sun-eta-assert-error (npm) (malicious package) - [MAL-2025-19797](https://insights.sbomify.com/MAL-2025-19797/): Malicious code in error-module (npm) (malicious package) - [MAL-2025-19796](https://insights.sbomify.com/MAL-2025-19796/): Malicious code in error-loggerjs (npm) (malicious package) - [MAL-2025-19795](https://insights.sbomify.com/MAL-2025-19795/): Malicious code in error-iota-file-quick-shell (npm) (malicious package) - [MAL-2025-19794](https://insights.sbomify.com/MAL-2025-19794/): Malicious code in error-float-report-resolve-sigma (npm) (malicious package) - [MAL-2025-19793](https://insights.sbomify.com/MAL-2025-19793/): Malicious code in error-byte-earth-cache-tau (npm) (malicious package) - [MAL-2025-19792](https://insights.sbomify.com/MAL-2025-19792/): Malicious code in errification (npm) (malicious package) - [MAL-2025-19791](https://insights.sbomify.com/MAL-2025-19791/): Malicious code in erreee (npm) (malicious package) - [MAL-2025-19790](https://insights.sbomify.com/MAL-2025-19790/): Malicious code in erquest (npm) (malicious package) - [MAL-2025-1979](https://insights.sbomify.com/MAL-2025-1979/): Malicious code in maliciouspkg (PyPI) (malicious package) - [MAL-2025-19789](https://insights.sbomify.com/MAL-2025-19789/): Malicious code in erpserver (npm) (malicious package) - [MAL-2025-19788](https://insights.sbomify.com/MAL-2025-19788/): Malicious code in erpold (npm) (malicious package) - [MAL-2025-19787](https://insights.sbomify.com/MAL-2025-19787/): Malicious code in eroeling (npm) (malicious package) - [MAL-2025-19786](https://insights.sbomify.com/MAL-2025-19786/): Malicious code in erlypda (npm) (malicious package) - [MAL-2025-19785](https://insights.sbomify.com/MAL-2025-19785/): Malicious code in erlstats (npm) (malicious package) - [MAL-2025-19784](https://insights.sbomify.com/MAL-2025-19784/): Malicious code in erlectron (npm) (malicious package) - [MAL-2025-19783](https://insights.sbomify.com/MAL-2025-19783/): Malicious code in erlbfdmkjxktusin (npm) (malicious package) - [MAL-2025-19782](https://insights.sbomify.com/MAL-2025-19782/): Malicious code in erlangfix (npm) (malicious package) - [MAL-2025-19781](https://insights.sbomify.com/MAL-2025-19781/): Malicious code in eris-regulus-semantic-ui-meissa (npm) (malicious package) - [MAL-2025-19780](https://insights.sbomify.com/MAL-2025-19780/): Malicious code in eris-primatology-nightmare-hologram (npm) (malicious package) - [MAL-2025-1978](https://insights.sbomify.com/MAL-2025-1978/): Malicious code in javascan (PyPI) (malicious package) - [MAL-2025-19779](https://insights.sbomify.com/MAL-2025-19779/): Malicious code in eris-polaris-pulsar-cygnus (npm) (malicious package) - [MAL-2025-19778](https://insights.sbomify.com/MAL-2025-19778/): Malicious code in erificatsion (npm) (malicious package) - [MAL-2025-19777](https://insights.sbomify.com/MAL-2025-19777/): Malicious code in erification (npm) (malicious package) - [MAL-2025-19776](https://insights.sbomify.com/MAL-2025-19776/): Malicious code in eridanus-local-gammarayburst-janus (npm) (malicious package) - [MAL-2025-19775](https://insights.sbomify.com/MAL-2025-19775/): Malicious code in eridanus-grunt-puppeteer-private (npm) (malicious package) - [MAL-2025-19774](https://insights.sbomify.com/MAL-2025-19774/): Malicious code in eridanus-airbnb-steganography-miranda (npm) (malicious package) - [MAL-2025-19773](https://insights.sbomify.com/MAL-2025-19773/): Malicious code in ericlesch (npm) (malicious package) - [MAL-2025-19772](https://insights.sbomify.com/MAL-2025-19772/): Malicious code in erick-pisang9-sukiwir (npm) (malicious package) - [MAL-2025-19771](https://insights.sbomify.com/MAL-2025-19771/): Malicious code in erick-kue8-breki (npm) (malicious package) - [MAL-2025-19770](https://insights.sbomify.com/MAL-2025-19770/): Malicious code in erick-kue2-breki (npm) (malicious package) - [MAL-2025-1977](https://insights.sbomify.com/MAL-2025-1977/): Malicious code in hellohackers (PyPI) (malicious package) - [MAL-2025-19769](https://insights.sbomify.com/MAL-2025-19769/): Malicious code in erick-kue100-sukiwir (npm) (malicious package) - [MAL-2025-19768](https://insights.sbomify.com/MAL-2025-19768/): Malicious code in erick-ikan48-sukiwir (npm) (malicious package) - [MAL-2025-19767](https://insights.sbomify.com/MAL-2025-19767/): Malicious code in erick-getuk30-sukiwir (npm) (malicious package) - [MAL-2025-19766](https://insights.sbomify.com/MAL-2025-19766/): Malicious code in ericcui (npm) (malicious package) - [MAL-2025-19765](https://insights.sbomify.com/MAL-2025-19765/): Malicious code in ergo (npm) (malicious package) - [MAL-2025-19764](https://insights.sbomify.com/MAL-2025-19764/): Malicious code in erfxlbtuswmcokha (npm) (malicious package) - [MAL-2025-19763](https://insights.sbomify.com/MAL-2025-19763/): Malicious code in erepair (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/893/