# Vulnerabilities published in 2025


- [MAL-2025-192567](https://insights.sbomify.com/MAL-2025-192567/): Malicious code in uba-plugins (npm) (malicious package)
- [MAL-2025-192566](https://insights.sbomify.com/MAL-2025-192566/): Malicious code in shopify-monorail (npm) (malicious package)
- [MAL-2025-192565](https://insights.sbomify.com/MAL-2025-192565/): Malicious code in sdbao-content-sems (npm) (malicious package)
- [MAL-2025-192564](https://insights.sbomify.com/MAL-2025-192564/): Malicious code in sdbao-content-report (npm) (malicious package)
- [MAL-2025-192563](https://insights.sbomify.com/MAL-2025-192563/): Malicious code in sd-pay-ts (npm) (malicious package)
- [MAL-2025-192562](https://insights.sbomify.com/MAL-2025-192562/): Malicious code in sd-pay (npm) (malicious package)
- [MAL-2025-192561](https://insights.sbomify.com/MAL-2025-192561/): Malicious code in pp-js-lib (npm) (malicious package)
- [MAL-2025-192560](https://insights.sbomify.com/MAL-2025-192560/): Malicious code in kashif-mallah-fca (npm) (malicious package)
- [MAL-2025-19256](https://insights.sbomify.com/MAL-2025-19256/): Malicious code in egmoizjqkvybsulc (npm) (malicious package)
- [MAL-2025-192559](https://insights.sbomify.com/MAL-2025-192559/): Malicious code in iraza2-fca (npm) (malicious package)
- [MAL-2025-192558](https://insights.sbomify.com/MAL-2025-192558/): Malicious code in eslint-config-zoo (npm) (malicious package)
- [MAL-2025-192557](https://insights.sbomify.com/MAL-2025-192557/): Malicious code in cos-js-sdk-v6 (npm) (malicious package)
- [MAL-2025-192556](https://insights.sbomify.com/MAL-2025-192556/): Malicious code in cms_comp_static (npm) (malicious package)
- [MAL-2025-192555](https://insights.sbomify.com/MAL-2025-192555/): Malicious code in cms_comp (npm) (malicious package)
- [MAL-2025-192554](https://insights.sbomify.com/MAL-2025-192554/): Malicious code in camscanner-seo (npm) (malicious package)
- [MAL-2025-192553](https://insights.sbomify.com/MAL-2025-192553/): Malicious code in abrhide (npm) (malicious package)
- [MAL-2025-192552](https://insights.sbomify.com/MAL-2025-192552/): Malicious code in hfruitmaliciousxmlparser (npm) (malicious package)
- [MAL-2025-192551](https://insights.sbomify.com/MAL-2025-192551/): Malicious code in gfruitmaliciousxmlparser (npm) (malicious package)
- [MAL-2025-192550](https://insights.sbomify.com/MAL-2025-192550/): Malicious code in fruit-malicious-xml-parser (npm) (malicious package)
- [MAL-2025-19255](https://insights.sbomify.com/MAL-2025-19255/): Malicious code in egjs-cli (npm) (malicious package)
- [MAL-2025-192549](https://insights.sbomify.com/MAL-2025-192549/): Malicious code in ffruitmaliciousxmlparser (npm) (malicious package)
- [MAL-2025-192548](https://insights.sbomify.com/MAL-2025-192548/): Malicious code in efruitmaliciousxmlparser (npm) (malicious package)
- [MAL-2025-192547](https://insights.sbomify.com/MAL-2025-192547/): Malicious code in dfruitmaliciousxmlparser (npm) (malicious package)
- [MAL-2025-192546](https://insights.sbomify.com/MAL-2025-192546/): Malicious code in cfruitmaliciousxmlparser (npm) (malicious package)
- [MAL-2025-192545](https://insights.sbomify.com/MAL-2025-192545/): Malicious code in bfruitmaliciousxmlparser (npm) (malicious package)
- [MAL-2025-192544](https://insights.sbomify.com/MAL-2025-192544/): Malicious code in afruitmaliciousxmlparser (npm) (malicious package)
- [MAL-2025-192543](https://insights.sbomify.com/MAL-2025-192543/): Malicious code in mw-proto-ts (npm) (malicious package)
- [MAL-2025-192542](https://insights.sbomify.com/MAL-2025-192542/): Malicious code in mui-wrapper-styles (npm) (malicious package)
- [MAL-2025-192541](https://insights.sbomify.com/MAL-2025-192541/): Malicious code in mui-wrapper-icons (npm) (malicious package)
- [MAL-2025-192540](https://insights.sbomify.com/MAL-2025-192540/): Malicious code in elf-stats-twinkling-wishlist-283 (npm) (malicious package)
- [MAL-2025-19254](https://insights.sbomify.com/MAL-2025-19254/): Malicious code in egis-tsc (npm) (malicious package)
- [MAL-2025-192539](https://insights.sbomify.com/MAL-2025-192539/): Malicious code in elf-stats-twinkling-bell-867 (npm) (malicious package)
- [MAL-2025-192538](https://insights.sbomify.com/MAL-2025-192538/): Malicious code in elf-stats-tinsel-sleigh-669 (npm) (malicious package)
- [MAL-2025-192537](https://insights.sbomify.com/MAL-2025-192537/): Malicious code in elf-stats-tinsel-cookiejar-315 (npm) (malicious package)
- [MAL-2025-192536](https://insights.sbomify.com/MAL-2025-192536/): Malicious code in elf-stats-sugarplum-wishlist-141 (npm) (malicious package)
- [MAL-2025-192535](https://insights.sbomify.com/MAL-2025-192535/): Malicious code in elf-stats-sugarplum-toolkit-176 (npm) (malicious package)
- [MAL-2025-192534](https://insights.sbomify.com/MAL-2025-192534/): Malicious code in elf-stats-sugarplum-snowman-116 (npm) (malicious package)
- [MAL-2025-192533](https://insights.sbomify.com/MAL-2025-192533/): Malicious code in elf-stats-sprucey-train-710 (npm) (malicious package)
- [MAL-2025-192532](https://insights.sbomify.com/MAL-2025-192532/): Malicious code in elf-stats-sparkly-toolkit-821 (npm) (malicious package)
- [MAL-2025-192531](https://insights.sbomify.com/MAL-2025-192531/): Malicious code in elf-stats-sparkly-fir-398 (npm) (malicious package)
- [MAL-2025-192530](https://insights.sbomify.com/MAL-2025-192530/): Malicious code in elf-stats-snuggly-nutcracker-187 (npm) (malicious package)
- [MAL-2025-19253](https://insights.sbomify.com/MAL-2025-19253/): Malicious code in eggplant-umbrella-aig1 (npm) (malicious package)
- [MAL-2025-192529](https://insights.sbomify.com/MAL-2025-192529/): Malicious code in elf-stats-snowdusted-saddlebag-127 (npm) (malicious package)
- [MAL-2025-192528](https://insights.sbomify.com/MAL-2025-192528/): Malicious code in elf-stats-snowdusted-marshmallow-228 (npm) (malicious package)
- [MAL-2025-192527](https://insights.sbomify.com/MAL-2025-192527/): Malicious code in elf-stats-snowdusted-bell-846 (npm) (malicious package)
- [MAL-2025-192526](https://insights.sbomify.com/MAL-2025-192526/): Malicious code in elf-stats-sleighing-drum-467 (npm) (malicious package)
- [MAL-2025-192525](https://insights.sbomify.com/MAL-2025-192525/): Malicious code in elf-stats-silvered-wishlist-708 (npm) (malicious package)
- [MAL-2025-192524](https://insights.sbomify.com/MAL-2025-192524/): Malicious code in elf-stats-silvered-cushion-811 (npm) (malicious package)
- [MAL-2025-192523](https://insights.sbomify.com/MAL-2025-192523/): Malicious code in elf-stats-rooftop-wishlist-723 (npm) (malicious package)
- [MAL-2025-192522](https://insights.sbomify.com/MAL-2025-192522/): Malicious code in elf-stats-peppermint-wishlist-307 (npm) (malicious package)
- [MAL-2025-192521](https://insights.sbomify.com/MAL-2025-192521/): Malicious code in elf-stats-peppermint-fir-730 (npm) (malicious package)
- [MAL-2025-192520](https://insights.sbomify.com/MAL-2025-192520/): Malicious code in elf-stats-nutmeg-candy-869 (npm) (malicious package)
- [MAL-2025-19252](https://insights.sbomify.com/MAL-2025-19252/): Malicious code in eggplant-radish-ka52 (npm) (malicious package)
- [MAL-2025-192519](https://insights.sbomify.com/MAL-2025-192519/): Malicious code in elf-stats-northbound-cocoa-368 (npm) (malicious package)
- [MAL-2025-192518](https://insights.sbomify.com/MAL-2025-192518/): Malicious code in elf-stats-northbound-bauble-535 (npm) (malicious package)
- [MAL-2025-192517](https://insights.sbomify.com/MAL-2025-192517/): Malicious code in elf-stats-mistletoe-mailbag-834 (npm) (malicious package)
- [MAL-2025-192516](https://insights.sbomify.com/MAL-2025-192516/): Malicious code in elf-stats-midnight-rocket-499 (npm) (malicious package)
- [MAL-2025-192515](https://insights.sbomify.com/MAL-2025-192515/): Malicious code in elf-stats-merry-hammer-791 (npm) (malicious package)
- [MAL-2025-192514](https://insights.sbomify.com/MAL-2025-192514/): Malicious code in elf-stats-merry-cookiejar-796 (npm) (malicious package)
- [MAL-2025-192513](https://insights.sbomify.com/MAL-2025-192513/): Malicious code in elf-stats-marzipan-nightcap-982 (npm) (malicious package)
- [MAL-2025-192512](https://insights.sbomify.com/MAL-2025-192512/): Malicious code in elf-stats-marzipan-cocoa-977 (npm) (malicious package)
- [MAL-2025-192511](https://insights.sbomify.com/MAL-2025-192511/): Malicious code in elf-stats-lanternlit-cocoa-651 (npm) (malicious package)
- [MAL-2025-192510](https://insights.sbomify.com/MAL-2025-192510/): Malicious code in elf-stats-jubilant-wreath-403 (npm) (malicious package)
- [MAL-2025-19251](https://insights.sbomify.com/MAL-2025-19251/): Malicious code in eggplant-juniper-lcjd (npm) (malicious package)
- [MAL-2025-192509](https://insights.sbomify.com/MAL-2025-192509/): Malicious code in elf-stats-joyous-ribbon-819 (npm) (malicious package)
- [MAL-2025-192508](https://insights.sbomify.com/MAL-2025-192508/): Malicious code in elf-stats-jolly-ornament-687 (npm) (malicious package)
- [MAL-2025-192507](https://insights.sbomify.com/MAL-2025-192507/): Malicious code in elf-stats-holly-stocking-294 (npm) (malicious package)
- [MAL-2025-192506](https://insights.sbomify.com/MAL-2025-192506/): Malicious code in elf-stats-holly-candy-802 (npm) (malicious package)
- [MAL-2025-192505](https://insights.sbomify.com/MAL-2025-192505/): Malicious code in elf-stats-gingersnap-mitten-648 (npm) (malicious package)
- [MAL-2025-192504](https://insights.sbomify.com/MAL-2025-192504/): Malicious code in elf-stats-ginger-hollyberry-135 (npm) (malicious package)
- [MAL-2025-192503](https://insights.sbomify.com/MAL-2025-192503/): Malicious code in elf-stats-fuzzy-workbench-102 (npm) (malicious package)
- [MAL-2025-192502](https://insights.sbomify.com/MAL-2025-192502/): Malicious code in elf-stats-fuzzy-fireplace-615 (npm) (malicious package)
- [MAL-2025-192501](https://insights.sbomify.com/MAL-2025-192501/): Malicious code in elf-stats-frostbitten-muffin-867 (npm) (malicious package)
- [MAL-2025-192500](https://insights.sbomify.com/MAL-2025-192500/): Malicious code in elf-stats-frostbitten-cookie-757 (npm) (malicious package)
- [MAL-2025-19250](https://insights.sbomify.com/MAL-2025-19250/): Malicious code in eggplant-grape-7uej (npm) (malicious package)
- [MAL-2025-1925](https://insights.sbomify.com/MAL-2025-1925/): Malicious code in sdk-coin-celo (npm) (malicious package)
- [MAL-2025-192499](https://insights.sbomify.com/MAL-2025-192499/): Malicious code in elf-stats-festive-sleigh-368 (npm) (malicious package)
- [MAL-2025-192498](https://insights.sbomify.com/MAL-2025-192498/): Malicious code in elf-stats-festive-hollyberry-475 (npm) (malicious package)
- [MAL-2025-192497](https://insights.sbomify.com/MAL-2025-192497/): Malicious code in elf-stats-evergreen-workbench-842 (npm) (malicious package)
- [MAL-2025-192496](https://insights.sbomify.com/MAL-2025-192496/): Malicious code in elf-stats-evergreen-satchel-868 (npm) (malicious package)
- [MAL-2025-192495](https://insights.sbomify.com/MAL-2025-192495/): Malicious code in elf-stats-evergreen-nightcap-747 (npm) (malicious package)
- [MAL-2025-192494](https://insights.sbomify.com/MAL-2025-192494/): Malicious code in elf-stats-ember-stocking-807 (npm) (malicious package)
- [MAL-2025-192493](https://insights.sbomify.com/MAL-2025-192493/): Malicious code in elf-stats-ember-cookiejar-768 (npm) (malicious package)
- [MAL-2025-192492](https://insights.sbomify.com/MAL-2025-192492/): Malicious code in elf-stats-cranberry-saddlebag-402 (npm) (malicious package)
- [MAL-2025-192491](https://insights.sbomify.com/MAL-2025-192491/): Malicious code in elf-stats-cosy-sparkler-518 (npm) (malicious package)
- [MAL-2025-192490](https://insights.sbomify.com/MAL-2025-192490/): Malicious code in elf-stats-cosy-ribbon-689 (npm) (malicious package)
- [MAL-2025-19249](https://insights.sbomify.com/MAL-2025-19249/): Malicious code in eggplant-delta-8omx (npm) (malicious package)
- [MAL-2025-192489](https://insights.sbomify.com/MAL-2025-192489/): Malicious code in elf-stats-cosy-chimney-268 (npm) (malicious package)
- [MAL-2025-192488](https://insights.sbomify.com/MAL-2025-192488/): Malicious code in elf-stats-cocoa-pinecone-118 (npm) (malicious package)
- [MAL-2025-192487](https://insights.sbomify.com/MAL-2025-192487/): Malicious code in elf-stats-cheery-sparkler-521 (npm) (malicious package)
- [MAL-2025-192486](https://insights.sbomify.com/MAL-2025-192486/): Malicious code in elf-stats-cheery-sleigh-538 (npm) (malicious package)
- [MAL-2025-192485](https://insights.sbomify.com/MAL-2025-192485/): Malicious code in elf-stats-cheery-northstar-345 (npm) (malicious package)
- [MAL-2025-192484](https://insights.sbomify.com/MAL-2025-192484/): Malicious code in elf-stats-cheery-muffin-949 (npm) (malicious package)
- [MAL-2025-192483](https://insights.sbomify.com/MAL-2025-192483/): Malicious code in elf-stats-caroling-workshop-885 (npm) (malicious package)
- [MAL-2025-192482](https://insights.sbomify.com/MAL-2025-192482/): Malicious code in elf-stats-caroling-sparkler-130 (npm) (malicious package)
- [MAL-2025-192481](https://insights.sbomify.com/MAL-2025-192481/): Malicious code in elf-stats-caroling-sled-530 (npm) (malicious package)
- [MAL-2025-192480](https://insights.sbomify.com/MAL-2025-192480/): Malicious code in elf-stats-caroling-hammer-382 (npm) (malicious package)
- [MAL-2025-19248](https://insights.sbomify.com/MAL-2025-19248/): Malicious code in eggdrop (npm) (malicious package)
- [MAL-2025-192479](https://insights.sbomify.com/MAL-2025-192479/): Malicious code in elf-stats-caroling-bow-570 (npm) (malicious package)
- [MAL-2025-192478](https://insights.sbomify.com/MAL-2025-192478/): Malicious code in elf-stats-candystriped-workbench-865 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/904/