# Vulnerabilities published in 2025


- [MAL-2025-19667](https://insights.sbomify.com/MAL-2025-19667/): Malicious code in enrrabada (npm) (malicious package)
- [MAL-2025-19666](https://insights.sbomify.com/MAL-2025-19666/): Malicious code in enqrypt (npm) (malicious package)
- [MAL-2025-19665](https://insights.sbomify.com/MAL-2025-19665/): Malicious code in enogex (npm) (malicious package)
- [MAL-2025-19664](https://insights.sbomify.com/MAL-2025-19664/): Malicious code in enneagram (npm) (malicious package)
- [MAL-2025-19663](https://insights.sbomify.com/MAL-2025-19663/): Malicious code in enlink-barrenos-leo (npm) (malicious package)
- [MAL-2025-19662](https://insights.sbomify.com/MAL-2025-19662/): Malicious code in enkicli (npm) (malicious package)
- [MAL-2025-19661](https://insights.sbomify.com/MAL-2025-19661/): Malicious code in enif-version-exec-oauth (npm) (malicious package)
- [MAL-2025-19660](https://insights.sbomify.com/MAL-2025-19660/): Malicious code in enif-markdown-pdf-mantle-boson (npm) (malicious package)
- [MAL-2025-1966](https://insights.sbomify.com/MAL-2025-1966/): Malicious code in aurm-desktop-client (PyPI) (malicious package)
- [MAL-2025-19659](https://insights.sbomify.com/MAL-2025-19659/): Malicious code in enif-eclipse-markdown-pdf-phoebe (npm) (malicious package)
- [MAL-2025-19658](https://insights.sbomify.com/MAL-2025-19658/): Malicious code in enif-async-panspermia-mini-css-extract-plugin (npm) (malicious package)
- [MAL-2025-19657](https://insights.sbomify.com/MAL-2025-19657/): Malicious code in enif-apollo-janus-hermes (npm) (malicious package)
- [MAL-2025-19656](https://insights.sbomify.com/MAL-2025-19656/): Malicious code in english-time (npm) (malicious package)
- [MAL-2025-19655](https://insights.sbomify.com/MAL-2025-19655/): Malicious code in engility (npm) (malicious package)
- [MAL-2025-19654](https://insights.sbomify.com/MAL-2025-19654/): Malicious code in engage-builder-templates-react (npm) (malicious package)
- [MAL-2025-19653](https://insights.sbomify.com/MAL-2025-19653/): Malicious code in eng-101-solutions-test (npm) (malicious package)
- [MAL-2025-19652](https://insights.sbomify.com/MAL-2025-19652/): Malicious code in energycap-angular2 (npm) (malicious package)
- [MAL-2025-19651](https://insights.sbomify.com/MAL-2025-19651/): Malicious code in energyCalculator-browser (npm) (malicious package)
- [MAL-2025-19650](https://insights.sbomify.com/MAL-2025-19650/): Malicious code in energyai (npm) (malicious package)
- [MAL-2025-1965](https://insights.sbomify.com/MAL-2025-1965/): Malicious code in asynchelpers (PyPI) (malicious package)
- [MAL-2025-19649](https://insights.sbomify.com/MAL-2025-19649/): Malicious code in energized (npm) (malicious package)
- [MAL-2025-19648](https://insights.sbomify.com/MAL-2025-19648/): Malicious code in endocon (npm) (malicious package)
- [MAL-2025-19647](https://insights.sbomify.com/MAL-2025-19647/): Malicious code in endgame-ui-input-text (npm) (malicious package)
- [MAL-2025-19646](https://insights.sbomify.com/MAL-2025-19646/): Malicious code in endevver (npm) (malicious package)
- [MAL-2025-19645](https://insights.sbomify.com/MAL-2025-19645/): Malicious code in encryptedcookies-paypal (npm) (malicious package)
- [MAL-2025-19644](https://insights.sbomify.com/MAL-2025-19644/): Malicious code in encrypt-layout-helper (npm) (malicious package)
- [MAL-2025-19643](https://insights.sbomify.com/MAL-2025-19643/): Malicious code in encrypt-compile-signal-visualize-root (npm) (malicious package)
- [MAL-2025-19642](https://insights.sbomify.com/MAL-2025-19642/): Malicious code in encphrujdkvxobmg (npm) (malicious package)
- [MAL-2025-19641](https://insights.sbomify.com/MAL-2025-19641/): Malicious code in encodeco (npm) (malicious package)
- [MAL-2025-19640](https://insights.sbomify.com/MAL-2025-19640/): Malicious code in enb-tanker (npm) (malicious package)
- [MAL-2025-1964](https://insights.sbomify.com/MAL-2025-1964/): Malicious code in astronomios (PyPI) (malicious package)
- [MAL-2025-19639](https://insights.sbomify.com/MAL-2025-19639/): Malicious code in en.ephoto360.com (npm) (malicious package)
- [MAL-2025-19638](https://insights.sbomify.com/MAL-2025-19638/): Malicious code in emulate-slow-execute-try-small (npm) (malicious package)
- [MAL-2025-19637](https://insights.sbomify.com/MAL-2025-19637/): Malicious code in emulate-earth-socket-rain-epsilon (npm) (malicious package)
- [MAL-2025-19636](https://insights.sbomify.com/MAL-2025-19636/): Malicious code in emulate-cloud-sed-wind-public (npm) (malicious package)
- [MAL-2025-19635](https://insights.sbomify.com/MAL-2025-19635/): Malicious code in emulate-boolean-info-enum-chi (npm) (malicious package)
- [MAL-2025-19634](https://insights.sbomify.com/MAL-2025-19634/): Malicious code in emteor (npm) (malicious package)
- [MAL-2025-19633](https://insights.sbomify.com/MAL-2025-19633/): Malicious code in emswidget (npm) (malicious package)
- [MAL-2025-19632](https://insights.sbomify.com/MAL-2025-19632/): Malicious code in emredis (npm) (malicious package)
- [MAL-2025-19631](https://insights.sbomify.com/MAL-2025-19631/): Malicious code in emr-ccd (npm) (malicious package)
- [MAL-2025-19630](https://insights.sbomify.com/MAL-2025-19630/): Malicious code in emoji-configsource-facebook (npm) (malicious package)
- [MAL-2025-1963](https://insights.sbomify.com/MAL-2025-1963/): Malicious code in astronomio (PyPI) (malicious package)
- [MAL-2025-19629](https://insights.sbomify.com/MAL-2025-19629/): Malicious code in emoblite (npm) (malicious package)
- [MAL-2025-19628](https://insights.sbomify.com/MAL-2025-19628/): Malicious code in emmet-sketch (npm) (malicious package)
- [MAL-2025-19627](https://insights.sbomify.com/MAL-2025-19627/): Malicious code in emis-gojs (npm) (malicious package)
- [MAL-2025-19626](https://insights.sbomify.com/MAL-2025-19626/): Malicious code in emilerl (npm) (malicious package)
- [MAL-2025-19625](https://insights.sbomify.com/MAL-2025-19625/): Malicious code in emgucv (npm) (malicious package)
- [MAL-2025-19624](https://insights.sbomify.com/MAL-2025-19624/): Malicious code in emgrid1 (npm) (malicious package)
- [MAL-2025-19623](https://insights.sbomify.com/MAL-2025-19623/): Malicious code in emgrid (npm) (malicious package)
- [MAL-2025-19622](https://insights.sbomify.com/MAL-2025-19622/): Malicious code in emerald-zenith-exj165-project (npm) (malicious package)
- [MAL-2025-19621](https://insights.sbomify.com/MAL-2025-19621/): Malicious code in emerald-xylophone-ymr222-project (npm) (malicious package)
- [MAL-2025-19620](https://insights.sbomify.com/MAL-2025-19620/): Malicious code in emerald-xylophone-xnv590-project (npm) (malicious package)
- [MAL-2025-1962](https://insights.sbomify.com/MAL-2025-1962/): Malicious code in astrono2mio (PyPI) (malicious package)
- [MAL-2025-19619](https://insights.sbomify.com/MAL-2025-19619/): Malicious code in emerald-xylophone-xkz384-project (npm) (malicious package)
- [MAL-2025-19618](https://insights.sbomify.com/MAL-2025-19618/): Malicious code in emerald-xerox-ksk428-project (npm) (malicious package)
- [MAL-2025-19617](https://insights.sbomify.com/MAL-2025-19617/): Malicious code in emerald-whale-vlj337-project (npm) (malicious package)
- [MAL-2025-19616](https://insights.sbomify.com/MAL-2025-19616/): Malicious code in emerald-vulture-ywp144-project (npm) (malicious package)
- [MAL-2025-19615](https://insights.sbomify.com/MAL-2025-19615/): Malicious code in emerald-violet-cgb614-project (npm) (malicious package)
- [MAL-2025-19614](https://insights.sbomify.com/MAL-2025-19614/): Malicious code in emerald-v5nct-6ad1h-moonlight-project (npm) (malicious package)
- [MAL-2025-19613](https://insights.sbomify.com/MAL-2025-19613/): Malicious code in emerald-pcoah-t9967-xylophone-project (npm) (malicious package)
- [MAL-2025-19612](https://insights.sbomify.com/MAL-2025-19612/): Malicious code in emerald-orchid-wys258-project (npm) (malicious package)
- [MAL-2025-19611](https://insights.sbomify.com/MAL-2025-19611/): Malicious code in emerald-opal-pjs139-project (npm) (malicious package)
- [MAL-2025-19610](https://insights.sbomify.com/MAL-2025-19610/): Malicious code in emerald-ofjfh-zlq5a-wisp-project (npm) (malicious package)
- [MAL-2025-19609](https://insights.sbomify.com/MAL-2025-19609/): Malicious code in emerald-oc235-69zgn-pinnacle-project (npm) (malicious package)
- [MAL-2025-19608](https://insights.sbomify.com/MAL-2025-19608/): Malicious code in emerald-myth-qog817-project (npm) (malicious package)
- [MAL-2025-19607](https://insights.sbomify.com/MAL-2025-19607/): Malicious code in emerald-mountain-tui290-project (npm) (malicious package)
- [MAL-2025-19606](https://insights.sbomify.com/MAL-2025-19606/): Malicious code in emerald-lagoon-hig728-project (npm) (malicious package)
- [MAL-2025-19605](https://insights.sbomify.com/MAL-2025-19605/): Malicious code in emerald-kelp-yye726-project (npm) (malicious package)
- [MAL-2025-19604](https://insights.sbomify.com/MAL-2025-19604/): Malicious code in emerald-jhthg-crleb-iceberg-project (npm) (malicious package)
- [MAL-2025-19603](https://insights.sbomify.com/MAL-2025-19603/): Malicious code in emerald-jasmine-smg556-project (npm) (malicious package)
- [MAL-2025-19602](https://insights.sbomify.com/MAL-2025-19602/): Malicious code in emerald-icicle-iyi553-project (npm) (malicious package)
- [MAL-2025-19601](https://insights.sbomify.com/MAL-2025-19601/): Malicious code in emerald-h89tc-5hoq6-opal-project (npm) (malicious package)
- [MAL-2025-19600](https://insights.sbomify.com/MAL-2025-19600/): Malicious code in emerald-glade-vmr298-project (npm) (malicious package)
- [MAL-2025-1960](https://insights.sbomify.com/MAL-2025-1960/): Malicious code in wpcom-checkout (npm) (malicious package)
- [MAL-2025-196](https://insights.sbomify.com/MAL-2025-196/): Malicious code in is-array-iter (npm) (malicious package)
- [MAL-2025-19599](https://insights.sbomify.com/MAL-2025-19599/): Malicious code in emerald-fcgxv-3upba-grove-project (npm) (malicious package)
- [MAL-2025-19598](https://insights.sbomify.com/MAL-2025-19598/): Malicious code in emerald-falcon-qto509-project (npm) (malicious package)
- [MAL-2025-19597](https://insights.sbomify.com/MAL-2025-19597/): Malicious code in emerald-dolphin-ixv293-project (npm) (malicious package)
- [MAL-2025-19596](https://insights.sbomify.com/MAL-2025-19596/): Malicious code in emerald-dandelion-cez160-project (npm) (malicious package)
- [MAL-2025-19595](https://insights.sbomify.com/MAL-2025-19595/): Malicious code in emerald-arctic-jhf013-project (npm) (malicious package)
- [MAL-2025-19594](https://insights.sbomify.com/MAL-2025-19594/): Malicious code in emehta (npm) (malicious package)
- [MAL-2025-19593](https://insights.sbomify.com/MAL-2025-19593/): Malicious code in emclaw (npm) (malicious package)
- [MAL-2025-19592](https://insights.sbomify.com/MAL-2025-19592/): Malicious code in emcitas (npm) (malicious package)
- [MAL-2025-19591](https://insights.sbomify.com/MAL-2025-19591/): Malicious code in embracegw (npm) (malicious package)
- [MAL-2025-19590](https://insights.sbomify.com/MAL-2025-19590/): Malicious code in embrace-wonder-bfq696-project (npm) (malicious package)
- [MAL-2025-1959](https://insights.sbomify.com/MAL-2025-1959/): Malicious code in worldpay-raft-connector (npm) (malicious package)
- [MAL-2025-19589](https://insights.sbomify.com/MAL-2025-19589/): Malicious code in embrace-uplift-dzx803-project (npm) (malicious package)
- [MAL-2025-19588](https://insights.sbomify.com/MAL-2025-19588/): Malicious code in embrace-inspire-wln181-project (npm) (malicious package)
- [MAL-2025-19587](https://insights.sbomify.com/MAL-2025-19587/): Malicious code in embercom-computed-properties (npm) (malicious package)
- [MAL-2025-19586](https://insights.sbomify.com/MAL-2025-19586/): Malicious code in ember_y79hn_7dwwd_raven (npm) (malicious package)
- [MAL-2025-19585](https://insights.sbomify.com/MAL-2025-19585/): Malicious code in ember_w4vz0_p4i1k_nectar (npm) (malicious package)
- [MAL-2025-19584](https://insights.sbomify.com/MAL-2025-19584/): Malicious code in ember_vytuq_arcrs_opaline (npm) (malicious package)
- [MAL-2025-19583](https://insights.sbomify.com/MAL-2025-19583/): Malicious code in ember_pt2ds_7qflu_fireworks (npm) (malicious package)
- [MAL-2025-19582](https://insights.sbomify.com/MAL-2025-19582/): Malicious code in ember_plspw_o0a2n_verdant (npm) (malicious package)
- [MAL-2025-19581](https://insights.sbomify.com/MAL-2025-19581/): Malicious code in ember_l12uw_mtim5_undertow (npm) (malicious package)
- [MAL-2025-19580](https://insights.sbomify.com/MAL-2025-19580/): Malicious code in ember_gqqxv_6hbod_saffron (npm) (malicious package)
- [MAL-2025-1958](https://insights.sbomify.com/MAL-2025-1958/): Malicious code in workerd-linux-arm64 (npm) (malicious package)
- [MAL-2025-19579](https://insights.sbomify.com/MAL-2025-19579/): Malicious code in ember_ekfkf_9u60d_xenolith (npm) (malicious package)
- [MAL-2025-19578](https://insights.sbomify.com/MAL-2025-19578/): Malicious code in ember_ei2gg_pqrhn_wander (npm) (malicious package)
- [MAL-2025-19577](https://insights.sbomify.com/MAL-2025-19577/): Malicious code in ember_cli_babe (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/895/