# Vulnerabilities published in 2025 - [MAL-2025-192837](https://insights.sbomify.com/MAL-2025-192837/): Malicious code in node-calculator-a34e (npm) (malicious package) - [MAL-2025-192836](https://insights.sbomify.com/MAL-2025-192836/): Malicious code in node-calculator-98ba (npm) (malicious package) - [MAL-2025-192835](https://insights.sbomify.com/MAL-2025-192835/): Malicious code in node-calculator-8f0c (npm) (malicious package) - [MAL-2025-192834](https://insights.sbomify.com/MAL-2025-192834/): Malicious code in node-calculator-7b82 (npm) (malicious package) - [MAL-2025-192833](https://insights.sbomify.com/MAL-2025-192833/): Malicious code in node-calculator-78c0 (npm) (malicious package) - [MAL-2025-192832](https://insights.sbomify.com/MAL-2025-192832/): Malicious code in node-calculator-73dd (npm) (malicious package) - [MAL-2025-192831](https://insights.sbomify.com/MAL-2025-192831/): Malicious code in node-calculator-603e (npm) (malicious package) - [MAL-2025-192830](https://insights.sbomify.com/MAL-2025-192830/): Malicious code in node-calculator-5b8f (npm) (malicious package) - [MAL-2025-19283](https://insights.sbomify.com/MAL-2025-19283/): Malicious code in eka-asinan10-breki (npm) (malicious package) - [MAL-2025-192829](https://insights.sbomify.com/MAL-2025-192829/): Malicious code in node-calculator-40ed (npm) (malicious package) - [MAL-2025-192828](https://insights.sbomify.com/MAL-2025-192828/): Malicious code in node-calculator-2eb4 (npm) (malicious package) - [MAL-2025-192827](https://insights.sbomify.com/MAL-2025-192827/): Malicious code in node-calculator-290c (npm) (malicious package) - [MAL-2025-192826](https://insights.sbomify.com/MAL-2025-192826/): Malicious code in node-calculator-190a (npm) (malicious package) - [MAL-2025-192825](https://insights.sbomify.com/MAL-2025-192825/): Malicious code in no-use-extend-native (npm) (malicious package) - [MAL-2025-192824](https://insights.sbomify.com/MAL-2025-192824/): Malicious code in no-unsanitized (npm) (malicious package) - [MAL-2025-192823](https://insights.sbomify.com/MAL-2025-192823/): Malicious code in nintendo-test (npm) (malicious package) - [MAL-2025-192822](https://insights.sbomify.com/MAL-2025-192822/): Malicious code in ke-moma2 (npm) (malicious package) - [MAL-2025-192821](https://insights.sbomify.com/MAL-2025-192821/): Malicious code in ke-moma (npm) (malicious package) - [MAL-2025-192820](https://insights.sbomify.com/MAL-2025-192820/): Malicious code in karem6 (npm) (malicious package) - [MAL-2025-19282](https://insights.sbomify.com/MAL-2025-19282/): Malicious code in ejungle (npm) (malicious package) - [MAL-2025-192819](https://insights.sbomify.com/MAL-2025-192819/): Malicious code in jz-user-js-bridge (npm) (malicious package) - [MAL-2025-192818](https://insights.sbomify.com/MAL-2025-192818/): Malicious code in jz-ui-user (npm) (malicious package) - [MAL-2025-192817](https://insights.sbomify.com/MAL-2025-192817/): Malicious code in jz-native-js-bridge (npm) (malicious package) - [MAL-2025-192816](https://insights.sbomify.com/MAL-2025-192816/): Malicious code in jsxswap (npm) (malicious package) - [MAL-2025-192815](https://insights.sbomify.com/MAL-2025-192815/): Malicious code in jstoauto (npm) (malicious package) - [MAL-2025-192814](https://insights.sbomify.com/MAL-2025-192814/): Malicious code in jsswapper (npm) (malicious package) - [MAL-2025-192813](https://insights.sbomify.com/MAL-2025-192813/): Malicious code in jsonupon (npm) (malicious package) - [MAL-2025-192812](https://insights.sbomify.com/MAL-2025-192812/): Malicious code in jsonrecap (npm) (malicious package) - [MAL-2025-192811](https://insights.sbomify.com/MAL-2025-192811/): Malicious code in jsonauto (npm) (malicious package) - [MAL-2025-192810](https://insights.sbomify.com/MAL-2025-192810/): Malicious code in jsonauthcap (npm) (malicious package) - [MAL-2025-19281](https://insights.sbomify.com/MAL-2025-19281/): Malicious code in ejstags (npm) (malicious package) - [MAL-2025-192809](https://insights.sbomify.com/MAL-2025-192809/): Malicious code in jsonauth (npm) (malicious package) - [MAL-2025-192808](https://insights.sbomify.com/MAL-2025-192808/): Malicious code in jsonapptoken (npm) (malicious package) - [MAL-2025-192807](https://insights.sbomify.com/MAL-2025-192807/): Malicious code in json-panels (npm) (malicious package) - [MAL-2025-192806](https://insights.sbomify.com/MAL-2025-192806/): Malicious code in jest-formatting (npm) (malicious package) - [MAL-2025-192805](https://insights.sbomify.com/MAL-2025-192805/): Malicious code in intuit-test (npm) (malicious package) - [MAL-2025-192804](https://insights.sbomify.com/MAL-2025-192804/): Malicious code in injectorpackage (npm) (malicious package) - [MAL-2025-192803](https://insights.sbomify.com/MAL-2025-192803/): Malicious code in init-router (npm) (malicious package) - [MAL-2025-192802](https://insights.sbomify.com/MAL-2025-192802/): Malicious code in ingka-test (npm) (malicious package) - [MAL-2025-192801](https://insights.sbomify.com/MAL-2025-192801/): Malicious code in hiro-docs (npm) (malicious package) - [MAL-2025-192800](https://insights.sbomify.com/MAL-2025-192800/): Malicious code in gibertserct8 (npm) (malicious package) - [MAL-2025-19280](https://insights.sbomify.com/MAL-2025-19280/): Malicious code in ejson2env (npm) (malicious package) - [MAL-2025-1928](https://insights.sbomify.com/MAL-2025-1928/): Malicious code in sdk-coin-doge (npm) (malicious package) - [MAL-2025-192799](https://insights.sbomify.com/MAL-2025-192799/): Malicious code in gibertserct15 (npm) (malicious package) - [MAL-2025-192798](https://insights.sbomify.com/MAL-2025-192798/): Malicious code in flagstealer (npm) (malicious package) - [MAL-2025-192797](https://insights.sbomify.com/MAL-2025-192797/): Malicious code in fe-cdnpath-transform (npm) (malicious package) - [MAL-2025-192796](https://insights.sbomify.com/MAL-2025-192796/): Malicious code in estree-util (npm) (malicious package) - [MAL-2025-192795](https://insights.sbomify.com/MAL-2025-192795/): Malicious code in elf-stats-whimsical-satchel-586 (npm) (malicious package) - [MAL-2025-192794](https://insights.sbomify.com/MAL-2025-192794/): Malicious code in elf-stats-whimsical-cocoa-613 (npm) (malicious package) - [MAL-2025-192793](https://insights.sbomify.com/MAL-2025-192793/): Malicious code in elf-stats-whimsical-cocoa-243 (npm) (malicious package) - [MAL-2025-192792](https://insights.sbomify.com/MAL-2025-192792/): Malicious code in elf-stats-velvet-sparkler-555 (npm) (malicious package) - [MAL-2025-192791](https://insights.sbomify.com/MAL-2025-192791/): Malicious code in elf-stats-velvet-bow-244 (npm) (malicious package) - [MAL-2025-192790](https://insights.sbomify.com/MAL-2025-192790/): Malicious code in elf-stats-sprucey-giftbox-118 (npm) (malicious package) - [MAL-2025-19279](https://insights.sbomify.com/MAL-2025-19279/): Malicious code in ejson-rails (npm) (malicious package) - [MAL-2025-192789](https://insights.sbomify.com/MAL-2025-192789/): Malicious code in elf-stats-sprucey-cookie-492 (npm) (malicious package) - [MAL-2025-192788](https://insights.sbomify.com/MAL-2025-192788/): Malicious code in elf-stats-sparkly-train-831 (npm) (malicious package) - [MAL-2025-192787](https://insights.sbomify.com/MAL-2025-192787/): Malicious code in elf-stats-sparkly-toolkit-703 (npm) (malicious package) - [MAL-2025-192786](https://insights.sbomify.com/MAL-2025-192786/): Malicious code in elf-stats-sparkly-sled-484 (npm) (malicious package) - [MAL-2025-192785](https://insights.sbomify.com/MAL-2025-192785/): Malicious code in elf-stats-sleighing-hammer-902 (npm) (malicious package) - [MAL-2025-192784](https://insights.sbomify.com/MAL-2025-192784/): Malicious code in elf-stats-silvered-toolkit-914 (npm) (malicious package) - [MAL-2025-192783](https://insights.sbomify.com/MAL-2025-192783/): Malicious code in elf-stats-silvered-bow-679 (npm) (malicious package) - [MAL-2025-192782](https://insights.sbomify.com/MAL-2025-192782/): Malicious code in elf-stats-shimmering-fir-491 (npm) (malicious package) - [MAL-2025-192781](https://insights.sbomify.com/MAL-2025-192781/): Malicious code in elf-stats-rooftop-pinecone-887 (npm) (malicious package) - [MAL-2025-192780](https://insights.sbomify.com/MAL-2025-192780/): Malicious code in elf-stats-rooftop-mitten-324 (npm) (malicious package) - [MAL-2025-19278](https://insights.sbomify.com/MAL-2025-19278/): Malicious code in ejs-client (npm) (malicious package) - [MAL-2025-192779](https://insights.sbomify.com/MAL-2025-192779/): Malicious code in elf-stats-piney-train-884 (npm) (malicious package) - [MAL-2025-192778](https://insights.sbomify.com/MAL-2025-192778/): Malicious code in elf-stats-nutmeg-fir-716 (npm) (malicious package) - [MAL-2025-192777](https://insights.sbomify.com/MAL-2025-192777/): Malicious code in elf-stats-mistletoe-muffin-976 (npm) (malicious package) - [MAL-2025-192776](https://insights.sbomify.com/MAL-2025-192776/): Malicious code in elf-stats-mistletoe-cookie-256 (npm) (malicious package) - [MAL-2025-192775](https://insights.sbomify.com/MAL-2025-192775/): Malicious code in elf-stats-merry-sparkler-797 (npm) (malicious package) - [MAL-2025-192774](https://insights.sbomify.com/MAL-2025-192774/): Malicious code in elf-stats-joyous-saddlebag-967 (npm) (malicious package) - [MAL-2025-192773](https://insights.sbomify.com/MAL-2025-192773/): Malicious code in elf-stats-jolly-snowglobe-266 (npm) (malicious package) - [MAL-2025-192772](https://insights.sbomify.com/MAL-2025-192772/): Malicious code in elf-stats-holly-fir-593 (npm) (malicious package) - [MAL-2025-192771](https://insights.sbomify.com/MAL-2025-192771/): Malicious code in elf-stats-glittering-cookie-844 (npm) (malicious package) - [MAL-2025-192770](https://insights.sbomify.com/MAL-2025-192770/): Malicious code in elf-stats-ginger-bow-370 (npm) (malicious package) - [MAL-2025-19277](https://insights.sbomify.com/MAL-2025-19277/): Malicious code in ejrfsqmkdconukbl (npm) (malicious package) - [MAL-2025-192769](https://insights.sbomify.com/MAL-2025-192769/): Malicious code in elf-stats-fuzzy-ribbon-205 (npm) (malicious package) - [MAL-2025-192768](https://insights.sbomify.com/MAL-2025-192768/): Malicious code in elf-stats-flickering-satchel-815 (npm) (malicious package) - [MAL-2025-192767](https://insights.sbomify.com/MAL-2025-192767/): Malicious code in elf-stats-festive-marshmallow-962 (npm) (malicious package) - [MAL-2025-192766](https://insights.sbomify.com/MAL-2025-192766/): Malicious code in elf-stats-evergreen-lantern-387 (npm) (malicious package) - [MAL-2025-192765](https://insights.sbomify.com/MAL-2025-192765/): Malicious code in elf-stats-ember-workbench-742 (npm) (malicious package) - [MAL-2025-192764](https://insights.sbomify.com/MAL-2025-192764/): Malicious code in trial-guard (npm) (malicious package) - [MAL-2025-192763](https://insights.sbomify.com/MAL-2025-192763/): Malicious code in supply_chain_dummy_test_4 (npm) (malicious package) - [MAL-2025-192762](https://insights.sbomify.com/MAL-2025-192762/): Malicious code in supply_chain_dummy_test_3 (npm) (malicious package) - [MAL-2025-192761](https://insights.sbomify.com/MAL-2025-192761/): Malicious code in supply_chain_dummy_test_2 (npm) (malicious package) - [MAL-2025-192760](https://insights.sbomify.com/MAL-2025-192760/): Malicious code in supply_chain_dummy_test_1 (npm) (malicious package) - [MAL-2025-19276](https://insights.sbomify.com/MAL-2025-19276/): Malicious code in ejercico (npm) (malicious package) - [MAL-2025-192759](https://insights.sbomify.com/MAL-2025-192759/): Malicious code in start-log-plugin (npm) (malicious package) - [MAL-2025-192758](https://insights.sbomify.com/MAL-2025-192758/): Malicious code in start-log-backend (npm) (malicious package) - [MAL-2025-192757](https://insights.sbomify.com/MAL-2025-192757/): Malicious code in qxytest1 (npm) (malicious package) - [MAL-2025-192756](https://insights.sbomify.com/MAL-2025-192756/): Malicious code in qxytest (npm) (malicious package) - [MAL-2025-192755](https://insights.sbomify.com/MAL-2025-192755/): Malicious code in dotjsenv (npm) (malicious package) - [MAL-2025-192754](https://insights.sbomify.com/MAL-2025-192754/): Malicious code in chai-max (npm) (malicious package) - [MAL-2025-192753](https://insights.sbomify.com/MAL-2025-192753/): Malicious code in chai-async-chains (npm) (malicious package) - [MAL-2025-192752](https://insights.sbomify.com/MAL-2025-192752/): Malicious code in @google_recaptcha/js (npm) (malicious package) - [MAL-2025-192751](https://insights.sbomify.com/MAL-2025-192751/): Malicious code in elf-stats-cosy-sled-455 (npm) (malicious package) - [MAL-2025-192750](https://insights.sbomify.com/MAL-2025-192750/): Malicious code in elf-stats-cosy-cocoa-331 (npm) (malicious package) - [MAL-2025-19275](https://insights.sbomify.com/MAL-2025-19275/): Malicious code in ejdgrvaqkioslhbf (npm) (malicious package) - [MAL-2025-192749](https://insights.sbomify.com/MAL-2025-192749/): Malicious code in rpc-validate (npm) (malicious package) - [MAL-2025-192748](https://insights.sbomify.com/MAL-2025-192748/): Malicious code in lotusbail (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/901/