# Vulnerabilities published in 2025 - [MAL-2025-19396](https://insights.sbomify.com/MAL-2025-19396/): Malicious code in elecrtron (npm) (malicious package) - [MAL-2025-19395](https://insights.sbomify.com/MAL-2025-19395/): Malicious code in elecrton (npm) (malicious package) - [MAL-2025-19394](https://insights.sbomify.com/MAL-2025-19394/): Malicious code in elecrron (npm) (malicious package) - [MAL-2025-19393](https://insights.sbomify.com/MAL-2025-19393/): Malicious code in elecron (npm) (malicious package) - [MAL-2025-19392](https://insights.sbomify.com/MAL-2025-19392/): Malicious code in eleclerc (npm) (malicious package) - [MAL-2025-19391](https://insights.sbomify.com/MAL-2025-19391/): Malicious code in elechtron (npm) (malicious package) - [MAL-2025-19390](https://insights.sbomify.com/MAL-2025-19390/): Malicious code in elechron (npm) (malicious package) - [MAL-2025-1939](https://insights.sbomify.com/MAL-2025-1939/): Malicious code in secure-install-package (npm) (malicious package) - [MAL-2025-19389](https://insights.sbomify.com/MAL-2025-19389/): Malicious code in elecgtron (npm) (malicious package) - [MAL-2025-19388](https://insights.sbomify.com/MAL-2025-19388/): Malicious code in elecgron (npm) (malicious package) - [MAL-2025-19387](https://insights.sbomify.com/MAL-2025-19387/): Malicious code in elecftron (npm) (malicious package) - [MAL-2025-19386](https://insights.sbomify.com/MAL-2025-19386/): Malicious code in elecfron (npm) (malicious package) - [MAL-2025-19385](https://insights.sbomify.com/MAL-2025-19385/): Malicious code in elecdtron (npm) (malicious package) - [MAL-2025-19384](https://insights.sbomify.com/MAL-2025-19384/): Malicious code in elecctron (npm) (malicious package) - [MAL-2025-19383](https://insights.sbomify.com/MAL-2025-19383/): Malicious code in elec6tron (npm) (malicious package) - [MAL-2025-19382](https://insights.sbomify.com/MAL-2025-19382/): Malicious code in elec6ron (npm) (malicious package) - [MAL-2025-19381](https://insights.sbomify.com/MAL-2025-19381/): Malicious code in elec5tron (npm) (malicious package) - [MAL-2025-19380](https://insights.sbomify.com/MAL-2025-19380/): Malicious code in elec5ron (npm) (malicious package) - [MAL-2025-1938](https://insights.sbomify.com/MAL-2025-1938/): Malicious code in sdk-coin-polygon (npm) (malicious package) - [MAL-2025-19379](https://insights.sbomify.com/MAL-2025-19379/): Malicious code in ele4ctron (npm) (malicious package) - [MAL-2025-19378](https://insights.sbomify.com/MAL-2025-19378/): Malicious code in ele3ctron (npm) (malicious package) - [MAL-2025-19377](https://insights.sbomify.com/MAL-2025-19377/): Malicious code in eldsjal (npm) (malicious package) - [MAL-2025-19376](https://insights.sbomify.com/MAL-2025-19376/): Malicious code in elderberry-zulu-golf-toxtl (npm) (malicious package) - [MAL-2025-19375](https://insights.sbomify.com/MAL-2025-19375/): Malicious code in elderberry-zucchini-mango-wydxm (npm) (malicious package) - [MAL-2025-19374](https://insights.sbomify.com/MAL-2025-19374/): Malicious code in elderberry-yurt-vn9b (npm) (malicious package) - [MAL-2025-19373](https://insights.sbomify.com/MAL-2025-19373/): Malicious code in elderberry-yankee-upfv (npm) (malicious package) - [MAL-2025-19372](https://insights.sbomify.com/MAL-2025-19372/): Malicious code in elderberry-yankee-sierra-dvcff (npm) (malicious package) - [MAL-2025-19371](https://insights.sbomify.com/MAL-2025-19371/): Malicious code in elderberry-xigua-orange-kbfov (npm) (malicious package) - [MAL-2025-19370](https://insights.sbomify.com/MAL-2025-19370/): Malicious code in elderberry-whiskey-juliet-kxulu (npm) (malicious package) - [MAL-2025-1937](https://insights.sbomify.com/MAL-2025-1937/): Malicious code in sdk-coin-near (npm) (malicious package) - [MAL-2025-19369](https://insights.sbomify.com/MAL-2025-19369/): Malicious code in elderberry-w6w-project (npm) (malicious package) - [MAL-2025-19368](https://insights.sbomify.com/MAL-2025-19368/): Malicious code in elderberry-vpp-project (npm) (malicious package) - [MAL-2025-19367](https://insights.sbomify.com/MAL-2025-19367/): Malicious code in elderberry-viaduct-qj17 (npm) (malicious package) - [MAL-2025-19366](https://insights.sbomify.com/MAL-2025-19366/): Malicious code in elderberry-v58-project (npm) (malicious package) - [MAL-2025-19365](https://insights.sbomify.com/MAL-2025-19365/): Malicious code in elderberry-ulp-project (npm) (malicious package) - [MAL-2025-19364](https://insights.sbomify.com/MAL-2025-19364/): Malicious code in elderberry-tax-project (npm) (malicious package) - [MAL-2025-19363](https://insights.sbomify.com/MAL-2025-19363/): Malicious code in elderberry-t9v-project (npm) (malicious package) - [MAL-2025-19362](https://insights.sbomify.com/MAL-2025-19362/): Malicious code in elderberry-sierra-lqaz (npm) (malicious package) - [MAL-2025-19361](https://insights.sbomify.com/MAL-2025-19361/): Malicious code in elderberry-quince-rqkj (npm) (malicious package) - [MAL-2025-19360](https://insights.sbomify.com/MAL-2025-19360/): Malicious code in elderberry-quasar-1t05 (npm) (malicious package) - [MAL-2025-1936](https://insights.sbomify.com/MAL-2025-1936/): Malicious code in sdk-coin-ltc (npm) (malicious package) - [MAL-2025-19359](https://insights.sbomify.com/MAL-2025-19359/): Malicious code in elderberry-qkn-project (npm) (malicious package) - [MAL-2025-19358](https://insights.sbomify.com/MAL-2025-19358/): Malicious code in elderberry-q82-project (npm) (malicious package) - [MAL-2025-19357](https://insights.sbomify.com/MAL-2025-19357/): Malicious code in elderberry-py7-project (npm) (malicious package) - [MAL-2025-19356](https://insights.sbomify.com/MAL-2025-19356/): Malicious code in elderberry-pd6-project (npm) (malicious package) - [MAL-2025-19355](https://insights.sbomify.com/MAL-2025-19355/): Malicious code in elderberry-papaya-grape-vobzh (npm) (malicious package) - [MAL-2025-19354](https://insights.sbomify.com/MAL-2025-19354/): Malicious code in elderberry-oscar-jcvt (npm) (malicious package) - [MAL-2025-19353](https://insights.sbomify.com/MAL-2025-19353/): Malicious code in elderberry-orange-jrkw (npm) (malicious package) - [MAL-2025-19352](https://insights.sbomify.com/MAL-2025-19352/): Malicious code in elderberry-orange-htlt (npm) (malicious package) - [MAL-2025-19351](https://insights.sbomify.com/MAL-2025-19351/): Malicious code in elderberry-oa1-project (npm) (malicious package) - [MAL-2025-19350](https://insights.sbomify.com/MAL-2025-19350/): Malicious code in elderberry-mango-vmre (npm) (malicious package) - [MAL-2025-1935](https://insights.sbomify.com/MAL-2025-1935/): Malicious code in sdk-coin-hbar (npm) (malicious package) - [MAL-2025-19349](https://insights.sbomify.com/MAL-2025-19349/): Malicious code in elderberry-lkb-project (npm) (malicious package) - [MAL-2025-19348](https://insights.sbomify.com/MAL-2025-19348/): Malicious code in elderberry-lemon-raspberry-nfhbn (npm) (malicious package) - [MAL-2025-19347](https://insights.sbomify.com/MAL-2025-19347/): Malicious code in elderberry-kiwi-hiwl (npm) (malicious package) - [MAL-2025-19346](https://insights.sbomify.com/MAL-2025-19346/): Malicious code in elderberry-kilo-rtjz (npm) (malicious package) - [MAL-2025-19345](https://insights.sbomify.com/MAL-2025-19345/): Malicious code in elderberry-kgu-project (npm) (malicious package) - [MAL-2025-19344](https://insights.sbomify.com/MAL-2025-19344/): Malicious code in elderberry-jungle-qlty (npm) (malicious package) - [MAL-2025-19343](https://insights.sbomify.com/MAL-2025-19343/): Malicious code in elderberry-juliet-papa-amznw (npm) (malicious package) - [MAL-2025-19342](https://insights.sbomify.com/MAL-2025-19342/): Malicious code in elderberry-india-qq9l (npm) (malicious package) - [MAL-2025-19341](https://insights.sbomify.com/MAL-2025-19341/): Malicious code in elderberry-india-mkbk (npm) (malicious package) - [MAL-2025-19340](https://insights.sbomify.com/MAL-2025-19340/): Malicious code in elderberry-hja-project (npm) (malicious package) - [MAL-2025-1934](https://insights.sbomify.com/MAL-2025-1934/): Malicious code in sdk-coin-ethw (npm) (malicious package) - [MAL-2025-19339](https://insights.sbomify.com/MAL-2025-19339/): Malicious code in elderberry-hd7-project (npm) (malicious package) - [MAL-2025-19338](https://insights.sbomify.com/MAL-2025-19338/): Malicious code in elderberry-gwa-project (npm) (malicious package) - [MAL-2025-19337](https://insights.sbomify.com/MAL-2025-19337/): Malicious code in elderberry-grape-bvmj (npm) (malicious package) - [MAL-2025-19336](https://insights.sbomify.com/MAL-2025-19336/): Malicious code in elderberry-golf-smgj (npm) (malicious package) - [MAL-2025-19335](https://insights.sbomify.com/MAL-2025-19335/): Malicious code in elderberry-gmg-project (npm) (malicious package) - [MAL-2025-19334](https://insights.sbomify.com/MAL-2025-19334/): Malicious code in elderberry-ggd-project (npm) (malicious package) - [MAL-2025-19333](https://insights.sbomify.com/MAL-2025-19333/): Malicious code in elderberry-fig-twno (npm) (malicious package) - [MAL-2025-19332](https://insights.sbomify.com/MAL-2025-19332/): Malicious code in elderberry-fig-ezih (npm) (malicious package) - [MAL-2025-19331](https://insights.sbomify.com/MAL-2025-19331/): Malicious code in elderberry-echo-qwfg (npm) (malicious package) - [MAL-2025-19330](https://insights.sbomify.com/MAL-2025-19330/): Malicious code in elderberry-date-fopi (npm) (malicious package) - [MAL-2025-1933](https://insights.sbomify.com/MAL-2025-1933/): Malicious code in sdk-coin-eth2 (npm) (malicious package) - [MAL-2025-19329](https://insights.sbomify.com/MAL-2025-19329/): Malicious code in elderberry-cherry-doee (npm) (malicious package) - [MAL-2025-19328](https://insights.sbomify.com/MAL-2025-19328/): Malicious code in elderberry-banana-rksd (npm) (malicious package) - [MAL-2025-19327](https://insights.sbomify.com/MAL-2025-19327/): Malicious code in elderberry-banana-naio (npm) (malicious package) - [MAL-2025-19326](https://insights.sbomify.com/MAL-2025-19326/): Malicious code in elderberry-apple-hffa (npm) (malicious package) - [MAL-2025-19325](https://insights.sbomify.com/MAL-2025-19325/): Malicious code in elderberry-alpha-yankee-enctk (npm) (malicious package) - [MAL-2025-19324](https://insights.sbomify.com/MAL-2025-19324/): Malicious code in elderberry-87f-project (npm) (malicious package) - [MAL-2025-19323](https://insights.sbomify.com/MAL-2025-19323/): Malicious code in elderberry-7zy-project (npm) (malicious package) - [MAL-2025-19322](https://insights.sbomify.com/MAL-2025-19322/): Malicious code in elderberry-7bb-project (npm) (malicious package) - [MAL-2025-19321](https://insights.sbomify.com/MAL-2025-19321/): Malicious code in elderberry-6db-project (npm) (malicious package) - [MAL-2025-19320](https://insights.sbomify.com/MAL-2025-19320/): Malicious code in elderberry-6be-project (npm) (malicious package) - [MAL-2025-1932](https://insights.sbomify.com/MAL-2025-1932/): Malicious code in sdk-coin-eth (npm) (malicious package) - [MAL-2025-19319](https://insights.sbomify.com/MAL-2025-19319/): Malicious code in elderberry-686-project (npm) (malicious package) - [MAL-2025-19318](https://insights.sbomify.com/MAL-2025-19318/): Malicious code in elderberry-61f-project (npm) (malicious package) - [MAL-2025-19317](https://insights.sbomify.com/MAL-2025-19317/): Malicious code in eldectron (npm) (malicious package) - [MAL-2025-19316](https://insights.sbomify.com/MAL-2025-19316/): Malicious code in eldctron (npm) (malicious package) - [MAL-2025-19315](https://insights.sbomify.com/MAL-2025-19315/): Malicious code in elctron (npm) (malicious package) - [MAL-2025-19314](https://insights.sbomify.com/MAL-2025-19314/): Malicious code in elconqore (npm) (malicious package) - [MAL-2025-19313](https://insights.sbomify.com/MAL-2025-19313/): Malicious code in elcetron (npm) (malicious package) - [MAL-2025-19312](https://insights.sbomify.com/MAL-2025-19312/): Malicious code in elbrusapi (npm) (malicious package) - [MAL-2025-19311](https://insights.sbomify.com/MAL-2025-19311/): Malicious code in elated-mobile (npm) (malicious package) - [MAL-2025-19310](https://insights.sbomify.com/MAL-2025-19310/): Malicious code in elasticsearch-shopify-client (npm) (malicious package) - [MAL-2025-1931](https://insights.sbomify.com/MAL-2025-1931/): Malicious code in sdk-coin-etc (npm) (malicious package) - [MAL-2025-19309](https://insights.sbomify.com/MAL-2025-19309/): Malicious code in elasticsearch-shopify (npm) (malicious package) - [MAL-2025-19308](https://insights.sbomify.com/MAL-2025-19308/): Malicious code in elasticsearch-product-search-builder (npm) (malicious package) - [MAL-2025-19307](https://insights.sbomify.com/MAL-2025-19307/): Malicious code in elasticsearch-collections-client (npm) (malicious package) - [MAL-2025-19306](https://insights.sbomify.com/MAL-2025-19306/): Malicious code in elara-loglevel-cressida-auth0 (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/898/