# Vulnerabilities published in 2025


- [MAL-2025-192747](https://insights.sbomify.com/MAL-2025-192747/): Malicious code in excluder-mcp-package (npm) (malicious package)
- [MAL-2025-192746](https://insights.sbomify.com/MAL-2025-192746/): Malicious code in excluder-mcp (npm) (malicious package)
- [MAL-2025-192745](https://insights.sbomify.com/MAL-2025-192745/): Malicious code in @aa-techops-ui/ping-authentication (npm) (malicious package)
- [MAL-2025-192744](https://insights.sbomify.com/MAL-2025-192744/): Malicious code in huangmingming-demo (npm) (malicious package)
- [MAL-2025-192743](https://insights.sbomify.com/MAL-2025-192743/): Malicious code in dotenv-extend (npm) (malicious package)
- [MAL-2025-192742](https://insights.sbomify.com/MAL-2025-192742/): Malicious code in chai-tests-await (npm) (malicious package)
- [MAL-2025-192741](https://insights.sbomify.com/MAL-2025-192741/): Malicious code in elf-stats-cocoa-mitten-558 (npm) (malicious package)
- [MAL-2025-192740](https://insights.sbomify.com/MAL-2025-192740/): Malicious code in elf-stats-caroling-wreath-635 (npm) (malicious package)
- [MAL-2025-19274](https://insights.sbomify.com/MAL-2025-19274/): Malicious code in eivybsafunmzpxlg (npm) (malicious package)
- [MAL-2025-192739](https://insights.sbomify.com/MAL-2025-192739/): Malicious code in elf-stats-caroling-train-677 (npm) (malicious package)
- [MAL-2025-192738](https://insights.sbomify.com/MAL-2025-192738/): Malicious code in elf-stats-caroling-star-725 (npm) (malicious package)
- [MAL-2025-192737](https://insights.sbomify.com/MAL-2025-192737/): Malicious code in elf-stats-candlelit-ornament-402 (npm) (malicious package)
- [MAL-2025-192736](https://insights.sbomify.com/MAL-2025-192736/): Malicious code in elf-stats-bright-pinecone-706 (npm) (malicious package)
- [MAL-2025-192735](https://insights.sbomify.com/MAL-2025-192735/): Malicious code in elf-stats-aurora-rocket-733 (npm) (malicious package)
- [MAL-2025-192734](https://insights.sbomify.com/MAL-2025-192734/): Malicious code in elf-stats-aurora-drum-979 (npm) (malicious package)
- [MAL-2025-192733](https://insights.sbomify.com/MAL-2025-192733/): Malicious code in ddxq_cms_tools (npm) (malicious package)
- [MAL-2025-192732](https://insights.sbomify.com/MAL-2025-192732/): Malicious code in ddos-turbo-max (npm) (malicious package)
- [MAL-2025-192731](https://insights.sbomify.com/MAL-2025-192731/): Malicious code in ddos-turbo-ecma (npm) (malicious package)
- [MAL-2025-192730](https://insights.sbomify.com/MAL-2025-192730/): Malicious code in corplib (npm) (malicious package)
- [MAL-2025-19273](https://insights.sbomify.com/MAL-2025-19273/): Malicious code in eip-119-json-provider (npm) (malicious package)
- [MAL-2025-192729](https://insights.sbomify.com/MAL-2025-192729/): Malicious code in streamixer (npm) (malicious package)
- [MAL-2025-192728](https://insights.sbomify.com/MAL-2025-192728/): Malicious code in cookie-mapper (npm) (malicious package)
- [MAL-2025-192727](https://insights.sbomify.com/MAL-2025-192727/): Malicious code in cookie-breaker (npm) (malicious package)
- [MAL-2025-192726](https://insights.sbomify.com/MAL-2025-192726/): Malicious code in cms_comp_popup (npm) (malicious package)
- [MAL-2025-192725](https://insights.sbomify.com/MAL-2025-192725/): Malicious code in chai-pack (npm) (malicious package)
- [MAL-2025-192724](https://insights.sbomify.com/MAL-2025-192724/): Malicious code in chai-as-validated (npm) (malicious package)
- [MAL-2025-192723](https://insights.sbomify.com/MAL-2025-192723/): Malicious code in chai-as-tested (npm) (malicious package)
- [MAL-2025-192722](https://insights.sbomify.com/MAL-2025-192722/): Malicious code in chai-as-deploy (npm) (malicious package)
- [MAL-2025-192721](https://insights.sbomify.com/MAL-2025-192721/): Malicious code in caterpillar-test (npm) (malicious package)
- [MAL-2025-192720](https://insights.sbomify.com/MAL-2025-192720/): Malicious code in canva-test (npm) (malicious package)
- [MAL-2025-19272](https://insights.sbomify.com/MAL-2025-19272/): Malicious code in einkaufen (npm) (malicious package)
- [MAL-2025-192719](https://insights.sbomify.com/MAL-2025-192719/): Malicious code in calculator-40ed (npm) (malicious package)
- [MAL-2025-192718](https://insights.sbomify.com/MAL-2025-192718/): Malicious code in bootstrap-setflexcolor (npm) (malicious package)
- [MAL-2025-192717](https://insights.sbomify.com/MAL-2025-192717/): Malicious code in bootstrap-setcolors (npm) (malicious package)
- [MAL-2025-192716](https://insights.sbomify.com/MAL-2025-192716/): Malicious code in bootstrap-setcolor (npm) (malicious package)
- [MAL-2025-192715](https://insights.sbomify.com/MAL-2025-192715/): Malicious code in booms-ai (npm) (malicious package)
- [MAL-2025-192714](https://insights.sbomify.com/MAL-2025-192714/): Malicious code in bignumberx (npm) (malicious package)
- [MAL-2025-192713](https://insights.sbomify.com/MAL-2025-192713/): Malicious code in baidu-src-test4 (npm) (malicious package)
- [MAL-2025-192712](https://insights.sbomify.com/MAL-2025-192712/): Malicious code in auth-handler (npm) (malicious package)
- [MAL-2025-192711](https://insights.sbomify.com/MAL-2025-192711/): Malicious code in assert-json-not (npm) (malicious package)
- [MAL-2025-192710](https://insights.sbomify.com/MAL-2025-192710/): Malicious code in amournapraia (npm) (malicious package)
- [MAL-2025-19271](https://insights.sbomify.com/MAL-2025-19271/): Malicious code in einfprog (npm) (malicious package)
- [MAL-2025-192709](https://insights.sbomify.com/MAL-2025-192709/): Malicious code in amazon-testpackage (npm) (malicious package)
- [MAL-2025-192708](https://insights.sbomify.com/MAL-2025-192708/): Malicious code in alicenpmpackage (npm) (malicious package)
- [MAL-2025-192707](https://insights.sbomify.com/MAL-2025-192707/): Malicious code in acz.view.src (npm) (malicious package)
- [MAL-2025-192706](https://insights.sbomify.com/MAL-2025-192706/): Malicious code in @ownbackup/ob-query-builder (npm) (malicious package)
- [MAL-2025-192705](https://insights.sbomify.com/MAL-2025-192705/): Malicious code in @ownbackup/ob-loader (npm) (malicious package)
- [MAL-2025-192704](https://insights.sbomify.com/MAL-2025-192704/): Malicious code in @ownbackup/ob-design-system (npm) (malicious package)
- [MAL-2025-192703](https://insights.sbomify.com/MAL-2025-192703/): Malicious code in @ownbackup/icons (npm) (malicious package)
- [MAL-2025-192702](https://insights.sbomify.com/MAL-2025-192702/): Malicious code in @ownbackup/data-grid (npm) (malicious package)
- [MAL-2025-192701](https://insights.sbomify.com/MAL-2025-192701/): Malicious code in @ownbackup/data-chart (npm) (malicious package)
- [MAL-2025-192700](https://insights.sbomify.com/MAL-2025-192700/): Malicious code in @ads-core/types (npm) (malicious package)
- [MAL-2025-19270](https://insights.sbomify.com/MAL-2025-19270/): Malicious code in ein-services (npm) (malicious package)
- [MAL-2025-1927](https://insights.sbomify.com/MAL-2025-1927/): Malicious code in sdk-coin-dash (npm) (malicious package)
- [MAL-2025-192699](https://insights.sbomify.com/MAL-2025-192699/): Malicious code in lanchain-openai (PyPI) (malicious package)
- [MAL-2025-192698](https://insights.sbomify.com/MAL-2025-192698/): Malicious code in ro-mobile (npm) (malicious package)
- [MAL-2025-192697](https://insights.sbomify.com/MAL-2025-192697/): Malicious code in mw-frontend-utils (npm) (malicious package)
- [MAL-2025-192696](https://insights.sbomify.com/MAL-2025-192696/): Malicious code in mui-wrapper-core (npm) (malicious package)
- [MAL-2025-192695](https://insights.sbomify.com/MAL-2025-192695/): Malicious code in ivx-cloud-client-v1 (npm) (malicious package)
- [MAL-2025-192694](https://insights.sbomify.com/MAL-2025-192694/): Malicious code in dc-extras (npm) (malicious package)
- [MAL-2025-192693](https://insights.sbomify.com/MAL-2025-192693/): Malicious code in airslate-dep-webpack (npm) (malicious package)
- [MAL-2025-192692](https://insights.sbomify.com/MAL-2025-192692/): Malicious code in @vienna_cancer_center_portal/js (npm) (malicious package)
- [MAL-2025-192691](https://insights.sbomify.com/MAL-2025-192691/): Malicious code in cloudy-uvi-sense-v11 (npm) (malicious package)
- [MAL-2025-192690](https://insights.sbomify.com/MAL-2025-192690/): Malicious code in smtrlib (PyPI) (malicious package)
- [MAL-2025-19269](https://insights.sbomify.com/MAL-2025-19269/): Malicious code in ein-loader (npm) (malicious package)
- [MAL-2025-192689](https://insights.sbomify.com/MAL-2025-192689/): Malicious code in unizip (PyPI) (malicious package)
- [MAL-2025-192688](https://insights.sbomify.com/MAL-2025-192688/): Malicious code in utif-updated (npm) (malicious package)
- [MAL-2025-192687](https://insights.sbomify.com/MAL-2025-192687/): Malicious code in commander-stable (npm) (malicious package)
- [MAL-2025-192686](https://insights.sbomify.com/MAL-2025-192686/): Malicious code in runtimeutils (PyPI) (malicious package)
- [MAL-2025-192685](https://insights.sbomify.com/MAL-2025-192685/): Malicious code in hooktest-fin (PyPI) (malicious package)
- [MAL-2025-192684](https://insights.sbomify.com/MAL-2025-192684/): Malicious code in colorfulpacket (PyPI) (malicious package)
- [MAL-2025-192683](https://insights.sbomify.com/MAL-2025-192683/): Malicious code in ai-cypher (PyPI) (malicious package)
- [MAL-2025-192682](https://insights.sbomify.com/MAL-2025-192682/): Malicious code in @nosinovacao/nosid-mfe-common (npm) (malicious package)
- [MAL-2025-192681](https://insights.sbomify.com/MAL-2025-192681/): Malicious code in othw (npm) (malicious package)
- [MAL-2025-192680](https://insights.sbomify.com/MAL-2025-192680/): Malicious code in escaux-scrumboard-api (npm) (malicious package)
- [MAL-2025-19268](https://insights.sbomify.com/MAL-2025-19268/): Malicious code in eikpndvxbtfhkcas (npm) (malicious package)
- [MAL-2025-192679](https://insights.sbomify.com/MAL-2025-192679/): Malicious code in system-health-check-test-unique (PyPI) (malicious package)
- [MAL-2025-192678](https://insights.sbomify.com/MAL-2025-192678/): Malicious code in jest-stable (npm) (malicious package)
- [MAL-2025-192677](https://insights.sbomify.com/MAL-2025-192677/): Malicious code in shakti20261 (npm) (malicious package)
- [MAL-2025-192676](https://insights.sbomify.com/MAL-2025-192676/): Malicious code in zebracros-bahlil (npm) (malicious package)
- [MAL-2025-192675](https://insights.sbomify.com/MAL-2025-192675/): Malicious code in xnetgpt-lite (npm) (malicious package)
- [MAL-2025-192674](https://insights.sbomify.com/MAL-2025-192674/): Malicious code in xnetgpt (npm) (malicious package)
- [MAL-2025-192673](https://insights.sbomify.com/MAL-2025-192673/): Malicious code in xmlwtf3 (npm) (malicious package)
- [MAL-2025-192672](https://insights.sbomify.com/MAL-2025-192672/): Malicious code in wifi-killer-xnet (npm) (malicious package)
- [MAL-2025-192671](https://insights.sbomify.com/MAL-2025-192671/): Malicious code in spamsms (npm) (malicious package)
- [MAL-2025-192670](https://insights.sbomify.com/MAL-2025-192670/): Malicious code in sonia3-npm-js (npm) (malicious package)
- [MAL-2025-19267](https://insights.sbomify.com/MAL-2025-19267/): Malicious code in eikasia (npm) (malicious package)
- [MAL-2025-192669](https://insights.sbomify.com/MAL-2025-192669/): Malicious code in nmapchecker (npm) (malicious package)
- [MAL-2025-192668](https://insights.sbomify.com/MAL-2025-192668/): Malicious code in ddos-gacor-v2 (npm) (malicious package)
- [MAL-2025-192667](https://insights.sbomify.com/MAL-2025-192667/): Malicious code in ctfvampir (npm) (malicious package)
- [MAL-2025-192666](https://insights.sbomify.com/MAL-2025-192666/): Malicious code in ctfvamp (npm) (malicious package)
- [MAL-2025-192665](https://insights.sbomify.com/MAL-2025-192665/): Malicious code in baidu-tester (npm) (malicious package)
- [MAL-2025-192664](https://insights.sbomify.com/MAL-2025-192664/): Malicious code in asdfgh33 (npm) (malicious package)
- [MAL-2025-192663](https://insights.sbomify.com/MAL-2025-192663/): Malicious code in ahmed_salem_o (npm) (malicious package)
- [MAL-2025-192662](https://insights.sbomify.com/MAL-2025-192662/): Malicious code in adeliana-xnetgpt (npm) (malicious package)
- [MAL-2025-192661](https://insights.sbomify.com/MAL-2025-192661/): Malicious code in adel-xnetgpt (npm) (malicious package)
- [MAL-2025-192660](https://insights.sbomify.com/MAL-2025-192660/): Malicious code in @sodexo-connect/sap-cdc-client (npm) (malicious package)
- [MAL-2025-19266](https://insights.sbomify.com/MAL-2025-19266/): Malicious code in eigenstate-test-technocracy-javascript (npm) (malicious package)
- [MAL-2025-192659](https://insights.sbomify.com/MAL-2025-192659/): Malicious code in hidden-powershell-runner-ax7 (PyPI) (malicious package)
- [MAL-2025-192658](https://insights.sbomify.com/MAL-2025-192658/): Malicious code in connections-api-hidden-runner (PyPI) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/902/