# Vulnerabilities published in 2025


- [MAL-2025-192927](https://insights.sbomify.com/MAL-2025-192927/): Malicious code in adril7123 (npm) (malicious package)
- [MAL-2025-192926](https://insights.sbomify.com/MAL-2025-192926/): Malicious code in @airtel-web/clickstream (npm) (malicious package)
- [MAL-2025-192925](https://insights.sbomify.com/MAL-2025-192925/): Malicious code in verificator (RubyGems) (malicious package)
- [MAL-2025-192924](https://insights.sbomify.com/MAL-2025-192924/): Malicious code in u2f_client (RubyGems) (malicious package)
- [MAL-2025-192923](https://insights.sbomify.com/MAL-2025-192923/): Malicious code in test_gem_978483406ebb19126a2e8c001649a4eb (RubyGems) (malicious package)
- [MAL-2025-192922](https://insights.sbomify.com/MAL-2025-192922/): Malicious code in stripe-server (RubyGems) (malicious package)
- [MAL-2025-192921](https://insights.sbomify.com/MAL-2025-192921/): Malicious code in stripe-rubocop (RubyGems) (malicious package)
- [MAL-2025-192920](https://insights.sbomify.com/MAL-2025-192920/): Malicious code in stripe-backup (RubyGems) (malicious package)
- [MAL-2025-19292](https://insights.sbomify.com/MAL-2025-19292/): Malicious code in eklectron (npm) (malicious package)
- [MAL-2025-192919](https://insights.sbomify.com/MAL-2025-192919/): Malicious code in sq-samsa (RubyGems) (malicious package)
- [MAL-2025-192918](https://insights.sbomify.com/MAL-2025-192918/): Malicious code in sq-mdc (RubyGems) (malicious package)
- [MAL-2025-192917](https://insights.sbomify.com/MAL-2025-192917/): Malicious code in space-commander (RubyGems) (malicious package)
- [MAL-2025-192916](https://insights.sbomify.com/MAL-2025-192916/): Malicious code in redis_connectable (RubyGems) (malicious package)
- [MAL-2025-192915](https://insights.sbomify.com/MAL-2025-192915/): Malicious code in rails-structured-logging (RubyGems) (malicious package)
- [MAL-2025-192914](https://insights.sbomify.com/MAL-2025-192914/): Malicious code in queenbee-plugin (RubyGems) (malicious package)
- [MAL-2025-192913](https://insights.sbomify.com/MAL-2025-192913/): Malicious code in prometheus_gcstat (RubyGems) (malicious package)
- [MAL-2025-192912](https://insights.sbomify.com/MAL-2025-192912/): Malicious code in prometheus_client_ruby (RubyGems) (malicious package)
- [MAL-2025-192911](https://insights.sbomify.com/MAL-2025-192911/): Malicious code in md_confluence (RubyGems) (malicious package)
- [MAL-2025-192910](https://insights.sbomify.com/MAL-2025-192910/): Malicious code in macklemore (RubyGems) (malicious package)
- [MAL-2025-19291](https://insights.sbomify.com/MAL-2025-19291/): Malicious code in ekinrt (npm) (malicious package)
- [MAL-2025-192909](https://insights.sbomify.com/MAL-2025-192909/): Malicious code in html_scrubber (RubyGems) (malicious package)
- [MAL-2025-192908](https://insights.sbomify.com/MAL-2025-192908/): Malicious code in hola_rreichel3github (RubyGems) (malicious package)
- [MAL-2025-192907](https://insights.sbomify.com/MAL-2025-192907/): Malicious code in hockeystick (RubyGems) (malicious package)
- [MAL-2025-192906](https://insights.sbomify.com/MAL-2025-192906/): Malicious code in haybales (RubyGems) (malicious package)
- [MAL-2025-192905](https://insights.sbomify.com/MAL-2025-192905/): Malicious code in critter (RubyGems) (malicious package)
- [MAL-2025-192904](https://insights.sbomify.com/MAL-2025-192904/): Malicious code in cocoapod (RubyGems) (malicious package)
- [MAL-2025-192903](https://insights.sbomify.com/MAL-2025-192903/): Malicious code in chalk-thrift (RubyGems) (malicious package)
- [MAL-2025-192902](https://insights.sbomify.com/MAL-2025-192902/): Malicious code in chalk-service (RubyGems) (malicious package)
- [MAL-2025-192901](https://insights.sbomify.com/MAL-2025-192901/): Malicious code in chalk-sentry (RubyGems) (malicious package)
- [MAL-2025-192900](https://insights.sbomify.com/MAL-2025-192900/): Malicious code in chalk-interface (RubyGems) (malicious package)
- [MAL-2025-19290](https://insights.sbomify.com/MAL-2025-19290/): Malicious code in ekectron (npm) (malicious package)
- [MAL-2025-1929](https://insights.sbomify.com/MAL-2025-1929/): Malicious code in sdk-coin-dot (npm) (malicious package)
- [MAL-2025-192899](https://insights.sbomify.com/MAL-2025-192899/): Malicious code in chalk-hostname (RubyGems) (malicious package)
- [MAL-2025-192898](https://insights.sbomify.com/MAL-2025-192898/): Malicious code in chalk-henson (RubyGems) (malicious package)
- [MAL-2025-192897](https://insights.sbomify.com/MAL-2025-192897/): Malicious code in chalk-consul (RubyGems) (malicious package)
- [MAL-2025-192896](https://insights.sbomify.com/MAL-2025-192896/): Malicious code in chalk-cli (RubyGems) (malicious package)
- [MAL-2025-192895](https://insights.sbomify.com/MAL-2025-192895/): Malicious code in chalk-aws (RubyGems) (malicious package)
- [MAL-2025-192894](https://insights.sbomify.com/MAL-2025-192894/): Malicious code in activestorage-redundancy (RubyGems) (malicious package)
- [MAL-2025-192893](https://insights.sbomify.com/MAL-2025-192893/): Malicious code in fireeye-main (PyPI) (malicious package)
- [MAL-2025-192892](https://insights.sbomify.com/MAL-2025-192892/): Malicious code in fire-eye-bcs (PyPI) (malicious package)
- [MAL-2025-192891](https://insights.sbomify.com/MAL-2025-192891/): Malicious code in blastchamber-python-pypi (PyPI) (malicious package)
- [MAL-2025-192890](https://insights.sbomify.com/MAL-2025-192890/): Malicious code in sqzrframework480 (NuGet) (malicious package)
- [MAL-2025-19289](https://insights.sbomify.com/MAL-2025-19289/): Malicious code in ekameno (npm) (malicious package)
- [MAL-2025-192889](https://insights.sbomify.com/MAL-2025-192889/): Malicious code in minimutex (NuGet) (malicious package)
- [MAL-2025-192888](https://insights.sbomify.com/MAL-2025-192888/): Malicious code in workvivo-layout-extension (npm) (malicious package)
- [MAL-2025-192887](https://insights.sbomify.com/MAL-2025-192887/): Malicious code in workvivo-chatbot (npm) (malicious package)
- [MAL-2025-192886](https://insights.sbomify.com/MAL-2025-192886/): Malicious code in workvivo-anniversary-automation (npm) (malicious package)
- [MAL-2025-192885](https://insights.sbomify.com/MAL-2025-192885/): Malicious code in wealthbox-marketing (npm) (malicious package)
- [MAL-2025-192884](https://insights.sbomify.com/MAL-2025-192884/): Malicious code in vite-react-setting (npm) (malicious package)
- [MAL-2025-192883](https://insights.sbomify.com/MAL-2025-192883/): Malicious code in varshade-afc (npm) (malicious package)
- [MAL-2025-192882](https://insights.sbomify.com/MAL-2025-192882/): Malicious code in vapark-boost-v1 (npm) (malicious package)
- [MAL-2025-192881](https://insights.sbomify.com/MAL-2025-192881/): Malicious code in typeface-maison-neue (npm) (malicious package)
- [MAL-2025-192880](https://insights.sbomify.com/MAL-2025-192880/): Malicious code in tierlist (npm) (malicious package)
- [MAL-2025-19288](https://insights.sbomify.com/MAL-2025-19288/): Malicious code in eka-nasiuduk68-kuki (npm) (malicious package)
- [MAL-2025-192879](https://insights.sbomify.com/MAL-2025-192879/): Malicious code in tescoutils (npm) (malicious package)
- [MAL-2025-192878](https://insights.sbomify.com/MAL-2025-192878/): Malicious code in teeseest (npm) (malicious package)
- [MAL-2025-192877](https://insights.sbomify.com/MAL-2025-192877/): Malicious code in tdm-react (npm) (malicious package)
- [MAL-2025-192876](https://insights.sbomify.com/MAL-2025-192876/): Malicious code in suntik-tiktok (npm) (malicious package)
- [MAL-2025-192875](https://insights.sbomify.com/MAL-2025-192875/): Malicious code in sturdyfetch9 (npm) (malicious package)
- [MAL-2025-192874](https://insights.sbomify.com/MAL-2025-192874/): Malicious code in sturdyfetch5 (npm) (malicious package)
- [MAL-2025-192873](https://insights.sbomify.com/MAL-2025-192873/): Malicious code in sturdyfetch4 (npm) (malicious package)
- [MAL-2025-192872](https://insights.sbomify.com/MAL-2025-192872/): Malicious code in sturdyfetch3 (npm) (malicious package)
- [MAL-2025-192871](https://insights.sbomify.com/MAL-2025-192871/): Malicious code in sturdyfetch22 (npm) (malicious package)
- [MAL-2025-192870](https://insights.sbomify.com/MAL-2025-192870/): Malicious code in sturdyfetch21 (npm) (malicious package)
- [MAL-2025-19287](https://insights.sbomify.com/MAL-2025-19287/): Malicious code in eka-martabak89-breki (npm) (malicious package)
- [MAL-2025-192869](https://insights.sbomify.com/MAL-2025-192869/): Malicious code in sturdyfetch19 (npm) (malicious package)
- [MAL-2025-192868](https://insights.sbomify.com/MAL-2025-192868/): Malicious code in sturdyfetch18 (npm) (malicious package)
- [MAL-2025-192867](https://insights.sbomify.com/MAL-2025-192867/): Malicious code in sturdyfetch17 (npm) (malicious package)
- [MAL-2025-192866](https://insights.sbomify.com/MAL-2025-192866/): Malicious code in sturdyfetch15 (npm) (malicious package)
- [MAL-2025-192865](https://insights.sbomify.com/MAL-2025-192865/): Malicious code in streamlinear (npm) (malicious package)
- [MAL-2025-192864](https://insights.sbomify.com/MAL-2025-192864/): Malicious code in stream-chain-xor (npm) (malicious package)
- [MAL-2025-192863](https://insights.sbomify.com/MAL-2025-192863/): Malicious code in smart-parser (npm) (malicious package)
- [MAL-2025-192862](https://insights.sbomify.com/MAL-2025-192862/): Malicious code in session-parse (npm) (malicious package)
- [MAL-2025-192861](https://insights.sbomify.com/MAL-2025-192861/): Malicious code in session-keeper (npm) (malicious package)
- [MAL-2025-192860](https://insights.sbomify.com/MAL-2025-192860/): Malicious code in security-testing-research99 (npm) (malicious package)
- [MAL-2025-19286](https://insights.sbomify.com/MAL-2025-19286/): Malicious code in eka-martabak4-breki (npm) (malicious package)
- [MAL-2025-192859](https://insights.sbomify.com/MAL-2025-192859/): Malicious code in security-testing-research- (npm) (malicious package)
- [MAL-2025-192858](https://insights.sbomify.com/MAL-2025-192858/): Malicious code in resethp (npm) (malicious package)
- [MAL-2025-192857](https://insights.sbomify.com/MAL-2025-192857/): Malicious code in redux-motion (npm) (malicious package)
- [MAL-2025-192856](https://insights.sbomify.com/MAL-2025-192856/): Malicious code in react-resizable-text (npm) (malicious package)
- [MAL-2025-192855](https://insights.sbomify.com/MAL-2025-192855/): Malicious code in react-flex-tools (npm) (malicious package)
- [MAL-2025-192854](https://insights.sbomify.com/MAL-2025-192854/): Malicious code in react-confetti-enhanced (npm) (malicious package)
- [MAL-2025-192853](https://insights.sbomify.com/MAL-2025-192853/): Malicious code in portal-aes (npm) (malicious package)
- [MAL-2025-192852](https://insights.sbomify.com/MAL-2025-192852/): Malicious code in polyfill-corejs2 (npm) (malicious package)
- [MAL-2025-192851](https://insights.sbomify.com/MAL-2025-192851/): Malicious code in petco-test (npm) (malicious package)
- [MAL-2025-192850](https://insights.sbomify.com/MAL-2025-192850/): Malicious code in pentestlyio-testpackage (npm) (malicious package)
- [MAL-2025-19285](https://insights.sbomify.com/MAL-2025-19285/): Malicious code in eka-getuk2-kuki (npm) (malicious package)
- [MAL-2025-192849](https://insights.sbomify.com/MAL-2025-192849/): Malicious code in oneday-worm-research (npm) (malicious package)
- [MAL-2025-192848](https://insights.sbomify.com/MAL-2025-192848/): Malicious code in nokaca (npm) (malicious package)
- [MAL-2025-192847](https://insights.sbomify.com/MAL-2025-192847/): Malicious code in node-calculator-x7k9-grabber (npm) (malicious package)
- [MAL-2025-192846](https://insights.sbomify.com/MAL-2025-192846/): Malicious code in node-calculator-x7k9-evil (npm) (malicious package)
- [MAL-2025-192845](https://insights.sbomify.com/MAL-2025-192845/): Malicious code in node-calculator-fe54 (npm) (malicious package)
- [MAL-2025-192844](https://insights.sbomify.com/MAL-2025-192844/): Malicious code in node-calculator-f483 (npm) (malicious package)
- [MAL-2025-192843](https://insights.sbomify.com/MAL-2025-192843/): Malicious code in node-calculator-f2af (npm) (malicious package)
- [MAL-2025-192842](https://insights.sbomify.com/MAL-2025-192842/): Malicious code in node-calculator-e776 (npm) (malicious package)
- [MAL-2025-192841](https://insights.sbomify.com/MAL-2025-192841/): Malicious code in node-calculator-dfd9 (npm) (malicious package)
- [MAL-2025-192840](https://insights.sbomify.com/MAL-2025-192840/): Malicious code in node-calculator-bde6 (npm) (malicious package)
- [MAL-2025-19284](https://insights.sbomify.com/MAL-2025-19284/): Malicious code in eka-dradag43-kuki (npm) (malicious package)
- [MAL-2025-192839](https://insights.sbomify.com/MAL-2025-192839/): Malicious code in node-calculator-ad83 (npm) (malicious package)
- [MAL-2025-192838](https://insights.sbomify.com/MAL-2025-192838/): Malicious code in node-calculator-ab44 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/900/