# Vulnerabilities published in 2025


- [MAL-2025-19305](https://insights.sbomify.com/MAL-2025-19305/): Malicious code in elara-eventhoriz-nightwatch-exec (npm) (malicious package)
- [MAL-2025-19304](https://insights.sbomify.com/MAL-2025-19304/): Malicious code in elabstest (npm) (malicious package)
- [MAL-2025-19303](https://insights.sbomify.com/MAL-2025-19303/): Malicious code in el4ectron (npm) (malicious package)
- [MAL-2025-19302](https://insights.sbomify.com/MAL-2025-19302/): Malicious code in el4ctron (npm) (malicious package)
- [MAL-2025-193014](https://insights.sbomify.com/MAL-2025-193014/): Malicious code in cas-base (PyPI) (malicious package)
- [MAL-2025-193011](https://insights.sbomify.com/MAL-2025-193011/): Malicious code in requeses (PyPI) (malicious package)
- [MAL-2025-193010](https://insights.sbomify.com/MAL-2025-193010/): Malicious code in pyrogrqm (PyPI) (malicious package)
- [MAL-2025-19301](https://insights.sbomify.com/MAL-2025-19301/): Malicious code in el3ectron (npm) (malicious package)
- [MAL-2025-193009](https://insights.sbomify.com/MAL-2025-193009/): Malicious code in @polystream/streaming (npm) (malicious package)
- [MAL-2025-193008](https://insights.sbomify.com/MAL-2025-193008/): Malicious code in telegreph (PyPI) (malicious package)
- [MAL-2025-193007](https://insights.sbomify.com/MAL-2025-193007/): Malicious code in aiogrem (PyPI) (malicious package)
- [MAL-2025-193006](https://insights.sbomify.com/MAL-2025-193006/): Malicious code in accesspdp (PyPI) (malicious package)
- [MAL-2025-193005](https://insights.sbomify.com/MAL-2025-193005/): Malicious code in landingpage-service (npm) (malicious package)
- [MAL-2025-193004](https://insights.sbomify.com/MAL-2025-193004/): Malicious code in @vietmoney/vision-camera-code-scanner (npm) (malicious package)
- [MAL-2025-193003](https://insights.sbomify.com/MAL-2025-193003/): Malicious code in @vietmoney/vietmoneywork (npm) (malicious package)
- [MAL-2025-193002](https://insights.sbomify.com/MAL-2025-193002/): Malicious code in @vietmoney/react-native-vnpay-merchant (npm) (malicious package)
- [MAL-2025-193001](https://insights.sbomify.com/MAL-2025-193001/): Malicious code in @vietmoney/react-native-true-id (npm) (malicious package)
- [MAL-2025-193000](https://insights.sbomify.com/MAL-2025-193000/): Malicious code in @vietmoney/react-native-tags-input (npm) (malicious package)
- [MAL-2025-19300](https://insights.sbomify.com/MAL-2025-19300/): Malicious code in el3ctron (npm) (malicious package)
- [MAL-2025-1930](https://insights.sbomify.com/MAL-2025-1930/): Malicious code in sdk-coin-eos (npm) (malicious package)
- [MAL-2025-193](https://insights.sbomify.com/MAL-2025-193/): Malicious code in glia-widgets-ionic (npm) (malicious package)
- [MAL-2025-192999](https://insights.sbomify.com/MAL-2025-192999/): Malicious code in @vietmoney/react-native-smart-page (npm) (malicious package)
- [MAL-2025-192998](https://insights.sbomify.com/MAL-2025-192998/): Malicious code in @vietmoney/react-native-smart-gallery (npm) (malicious package)
- [MAL-2025-192997](https://insights.sbomify.com/MAL-2025-192997/): Malicious code in @vietmoney/react-native-image-transformer (npm) (malicious package)
- [MAL-2025-192996](https://insights.sbomify.com/MAL-2025-192996/): Malicious code in @vietmoney/react-native-htmlview (npm) (malicious package)
- [MAL-2025-192995](https://insights.sbomify.com/MAL-2025-192995/): Malicious code in @vietmoney/react-native-action-button (npm) (malicious package)
- [MAL-2025-192994](https://insights.sbomify.com/MAL-2025-192994/): Malicious code in @vietmoney/react-big-calendar (npm) (malicious package)
- [MAL-2025-192993](https://insights.sbomify.com/MAL-2025-192993/): Malicious code in weorewfoi2393 (PyPI) (malicious package)
- [MAL-2025-192992](https://insights.sbomify.com/MAL-2025-192992/): Malicious code in umap (PyPI) (malicious package)
- [MAL-2025-192991](https://insights.sbomify.com/MAL-2025-192991/): Malicious code in pyrogrem (PyPI) (malicious package)
- [MAL-2025-192990](https://insights.sbomify.com/MAL-2025-192990/): Malicious code in broooxddd1414 (PyPI) (malicious package)
- [MAL-2025-19299](https://insights.sbomify.com/MAL-2025-19299/): Malicious code in ekvhatmpfnzyrxdj (npm) (malicious package)
- [MAL-2025-192989](https://insights.sbomify.com/MAL-2025-192989/): Malicious code in brolool4141412 (PyPI) (malicious package)
- [MAL-2025-192988](https://insights.sbomify.com/MAL-2025-192988/): Malicious code in yellowdiscordlookup (npm) (malicious package)
- [MAL-2025-192987](https://insights.sbomify.com/MAL-2025-192987/): Malicious code in npm-xmt (npm) (malicious package)
- [MAL-2025-192986](https://insights.sbomify.com/MAL-2025-192986/): Malicious code in nbugs-video (npm) (malicious package)
- [MAL-2025-192985](https://insights.sbomify.com/MAL-2025-192985/): Malicious code in error-fallback (npm) (malicious package)
- [MAL-2025-192984](https://insights.sbomify.com/MAL-2025-192984/): Malicious code in chai-promised-chains (npm) (malicious package)
- [MAL-2025-192983](https://insights.sbomify.com/MAL-2025-192983/): Malicious code in bigmathex (npm) (malicious package)
- [MAL-2025-192982](https://insights.sbomify.com/MAL-2025-192982/): Malicious code in @ptest2535/ui-core_mal (npm) (malicious package)
- [MAL-2025-192981](https://insights.sbomify.com/MAL-2025-192981/): Malicious code in @ptest2535/test_package (npm) (malicious package)
- [MAL-2025-192980](https://insights.sbomify.com/MAL-2025-192980/): Malicious code in @ptest2535/l_woker_mal (npm) (malicious package)
- [MAL-2025-19298](https://insights.sbomify.com/MAL-2025-19298/): Malicious code in eksi-server (npm) (malicious package)
- [MAL-2025-192979](https://insights.sbomify.com/MAL-2025-192979/): Malicious code in @ptest2535/artifactory-demo-ptest (npm) (malicious package)
- [MAL-2025-192978](https://insights.sbomify.com/MAL-2025-192978/): Malicious code in tailwindcss-typography-style (npm) (malicious package)
- [MAL-2025-192977](https://insights.sbomify.com/MAL-2025-192977/): Malicious code in shopify-app-react-router (npm) (malicious package)
- [MAL-2025-192976](https://insights.sbomify.com/MAL-2025-192976/): Malicious code in shop-minis-docs (npm) (malicious package)
- [MAL-2025-192975](https://insights.sbomify.com/MAL-2025-192975/): Malicious code in rt-text-media-collection (npm) (malicious package)
- [MAL-2025-192974](https://insights.sbomify.com/MAL-2025-192974/): Malicious code in rt-interactive-card-collection (npm) (malicious package)
- [MAL-2025-192973](https://insights.sbomify.com/MAL-2025-192973/): Malicious code in react-dom-bindings (npm) (malicious package)
- [MAL-2025-192972](https://insights.sbomify.com/MAL-2025-192972/): Malicious code in react-devtools-shared (npm) (malicious package)
- [MAL-2025-192971](https://insights.sbomify.com/MAL-2025-192971/): Malicious code in react-devtools-extensions (npm) (malicious package)
- [MAL-2025-192970](https://insights.sbomify.com/MAL-2025-192970/): Malicious code in portal-lise (npm) (malicious package)
- [MAL-2025-19297](https://insights.sbomify.com/MAL-2025-19297/): Malicious code in eko-tempe81-sukiwir (npm) (malicious package)
- [MAL-2025-192969](https://insights.sbomify.com/MAL-2025-192969/): Malicious code in pepsico-ds (npm) (malicious package)
- [MAL-2025-192968](https://insights.sbomify.com/MAL-2025-192968/): Malicious code in express-js-web (npm) (malicious package)
- [MAL-2025-192967](https://insights.sbomify.com/MAL-2025-192967/): Malicious code in eb-csr (npm) (malicious package)
- [MAL-2025-192966](https://insights.sbomify.com/MAL-2025-192966/): Malicious code in cdd-plugin-for-datawarrior (npm) (malicious package)
- [MAL-2025-192965](https://insights.sbomify.com/MAL-2025-192965/): Malicious code in awsmcc (npm) (malicious package)
- [MAL-2025-192964](https://insights.sbomify.com/MAL-2025-192964/): Malicious code in @peter_wilson12091/internal-json-test-parser (npm) (malicious package)
- [MAL-2025-192963](https://insights.sbomify.com/MAL-2025-192963/): Malicious code in @bugdtest/test1 (npm) (malicious package)
- [MAL-2025-192962](https://insights.sbomify.com/MAL-2025-192962/): Malicious code in rippling-cli (PyPI) (malicious package)
- [MAL-2025-192961](https://insights.sbomify.com/MAL-2025-192961/): Malicious code in awsutil (PyPI) (malicious package)
- [MAL-2025-192960](https://insights.sbomify.com/MAL-2025-192960/): Malicious code in kcheck (npm) (malicious package)
- [MAL-2025-19296](https://insights.sbomify.com/MAL-2025-19296/): Malicious code in eko-tempe26-breki (npm) (malicious package)
- [MAL-2025-192959](https://insights.sbomify.com/MAL-2025-192959/): Malicious code in intl-tel-input-utils (npm) (malicious package)
- [MAL-2025-192958](https://insights.sbomify.com/MAL-2025-192958/): Malicious code in smtmlib (PyPI) (malicious package)
- [MAL-2025-192957](https://insights.sbomify.com/MAL-2025-192957/): Malicious code in crypto-trade-analyzer (npm) (malicious package)
- [MAL-2025-192956](https://insights.sbomify.com/MAL-2025-192956/): Malicious code in cryptozip (PyPI) (malicious package)
- [MAL-2025-192955](https://insights.sbomify.com/MAL-2025-192955/): Malicious code in eslint-config-pexip-engage (npm) (malicious package)
- [MAL-2025-192954](https://insights.sbomify.com/MAL-2025-192954/): Malicious code in api-umbrella-admin-ui (npm) (malicious package)
- [MAL-2025-192953](https://insights.sbomify.com/MAL-2025-192953/): Malicious code in aiogram-types-v3 (PyPI) (malicious package)
- [MAL-2025-192952](https://insights.sbomify.com/MAL-2025-192952/): Malicious code in eslint-config-sdk (npm) (malicious package)
- [MAL-2025-192951](https://insights.sbomify.com/MAL-2025-192951/): Malicious code in ugc-kit (npm) (malicious package)
- [MAL-2025-192950](https://insights.sbomify.com/MAL-2025-192950/): Malicious code in ing-feat-ui-image (npm) (malicious package)
- [MAL-2025-19295](https://insights.sbomify.com/MAL-2025-19295/): Malicious code in eko-lapis68-kuki (npm) (malicious package)
- [MAL-2025-192949](https://insights.sbomify.com/MAL-2025-192949/): Malicious code in ing-feat-malware-detection (npm) (malicious package)
- [MAL-2025-192948](https://insights.sbomify.com/MAL-2025-192948/): Malicious code in extrazip (PyPI) (malicious package)
- [MAL-2025-192947](https://insights.sbomify.com/MAL-2025-192947/): Malicious code in crypo (PyPI) (malicious package)
- [MAL-2025-192946](https://insights.sbomify.com/MAL-2025-192946/): Malicious code in crpto (PyPI) (malicious package)
- [MAL-2025-192945](https://insights.sbomify.com/MAL-2025-192945/): Malicious code in flaask (PyPI) (malicious package)
- [MAL-2025-192944](https://insights.sbomify.com/MAL-2025-192944/): Malicious code in backstage-plugin-glean (npm) (malicious package)
- [MAL-2025-192943](https://insights.sbomify.com/MAL-2025-192943/): Malicious code in telegrem (PyPI) (malicious package)
- [MAL-2025-192942](https://insights.sbomify.com/MAL-2025-192942/): Malicious code in telebot-bot (PyPI) (malicious package)
- [MAL-2025-192941](https://insights.sbomify.com/MAL-2025-192941/): Malicious code in bola511 (npm) (malicious package)
- [MAL-2025-192940](https://insights.sbomify.com/MAL-2025-192940/): Malicious code in aiogram-3 (PyPI) (malicious package)
- [MAL-2025-19294](https://insights.sbomify.com/MAL-2025-19294/): Malicious code in ekmoxrhnckljfdbp (npm) (malicious package)
- [MAL-2025-192939](https://insights.sbomify.com/MAL-2025-192939/): Malicious code in magic-poc (npm) (malicious package)
- [MAL-2025-192938](https://insights.sbomify.com/MAL-2025-192938/): Malicious code in bettermode-icons (npm) (malicious package)
- [MAL-2025-192937](https://insights.sbomify.com/MAL-2025-192937/): Malicious code in bettermode-common (npm) (malicious package)
- [MAL-2025-192936](https://insights.sbomify.com/MAL-2025-192936/): Malicious code in ing-feat-pis-single-payments (npm) (malicious package)
- [MAL-2025-192935](https://insights.sbomify.com/MAL-2025-192935/): Malicious code in ing-feat-mortgage-consent-starter (npm) (malicious package)
- [MAL-2025-192934](https://insights.sbomify.com/MAL-2025-192934/): Malicious code in ing-feat-kyc-consent (npm) (malicious package)
- [MAL-2025-192933](https://insights.sbomify.com/MAL-2025-192933/): Malicious code in ing-feat-auth-idin (npm) (malicious package)
- [MAL-2025-192932](https://insights.sbomify.com/MAL-2025-192932/): Malicious code in cc-raiesy (npm) (malicious package)
- [MAL-2025-192931](https://insights.sbomify.com/MAL-2025-192931/): Malicious code in aiogram-sever-patch (PyPI) (malicious package)
- [MAL-2025-192930](https://insights.sbomify.com/MAL-2025-192930/): Malicious code in pxdbench (PyPI) (malicious package)
- [MAL-2025-19293](https://insights.sbomify.com/MAL-2025-19293/): Malicious code in eklogger (npm) (malicious package)
- [MAL-2025-192929](https://insights.sbomify.com/MAL-2025-192929/): Malicious code in envtoolsx (PyPI) (malicious package)
- [MAL-2025-192928](https://insights.sbomify.com/MAL-2025-192928/): Malicious code in livekit-agents-hedra (PyPI) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/899/