# Vulnerabilities published in 2025


- [MAL-2025-192387](https://insights.sbomify.com/MAL-2025-192387/): Malicious code in do-not-install-this-package-001 (PyPI) (malicious package)
- [MAL-2025-192386](https://insights.sbomify.com/MAL-2025-192386/): Malicious code in telcoo (PyPI) (malicious package)
- [MAL-2025-192385](https://insights.sbomify.com/MAL-2025-192385/): Malicious code in graphsync (PyPI) (malicious package)
- [MAL-2025-192384](https://insights.sbomify.com/MAL-2025-192384/): Malicious code in jsonify-errors (npm) (malicious package)
- [MAL-2025-192383](https://insights.sbomify.com/MAL-2025-192383/): Malicious code in chai-uuids (npm) (malicious package)
- [MAL-2025-192382](https://insights.sbomify.com/MAL-2025-192382/): Malicious code in raft-dask (PyPI) (malicious package)
- [MAL-2025-192381](https://insights.sbomify.com/MAL-2025-192381/): Malicious code in configurator-framework (npm) (malicious package)
- [MAL-2025-192380](https://insights.sbomify.com/MAL-2025-192380/): Malicious code in sketchfab-spinner (PyPI) (malicious package)
- [MAL-2025-19238](https://insights.sbomify.com/MAL-2025-19238/): Malicious code in eevxhwk (npm) (malicious package)
- [MAL-2025-192379](https://insights.sbomify.com/MAL-2025-192379/): Malicious code in helloharry123p (PyPI) (malicious package)
- [MAL-2025-192378](https://insights.sbomify.com/MAL-2025-192378/): Malicious code in shop-api-sdk (npm) (malicious package)
- [MAL-2025-192377](https://insights.sbomify.com/MAL-2025-192377/): Malicious code in gs-uitk-lodash (npm) (malicious package)
- [MAL-2025-192376](https://insights.sbomify.com/MAL-2025-192376/): Malicious code in graphnode (PyPI) (malicious package)
- [MAL-2025-192375](https://insights.sbomify.com/MAL-2025-192375/): Malicious code in tensor-fi-utils-core (npm) (malicious package)
- [MAL-2025-192374](https://insights.sbomify.com/MAL-2025-192374/): Malicious code in solana-dexco-basic (npm) (malicious package)
- [MAL-2025-192373](https://insights.sbomify.com/MAL-2025-192373/): Malicious code in @notrainers/nobtrainer-sdk (npm) (malicious package)
- [MAL-2025-192372](https://insights.sbomify.com/MAL-2025-192372/): Malicious code in volume-viz (npm) (malicious package)
- [MAL-2025-192371](https://insights.sbomify.com/MAL-2025-192371/): Malicious code in tna_xmlparser (npm) (malicious package)
- [MAL-2025-192370](https://insights.sbomify.com/MAL-2025-192370/): Malicious code in elf-stats-snowdusted-cookiejar-250 (npm) (malicious package)
- [MAL-2025-19237](https://insights.sbomify.com/MAL-2025-19237/): Malicious code in eetesting (npm) (malicious package)
- [MAL-2025-192369](https://insights.sbomify.com/MAL-2025-192369/): Malicious code in elf-stats-caroling-wishlist-626 (npm) (malicious package)
- [MAL-2025-192368](https://insights.sbomify.com/MAL-2025-192368/): Malicious code in paysera-checkout-modal (npm) (malicious package)
- [MAL-2025-192367](https://insights.sbomify.com/MAL-2025-192367/): Malicious code in hexdeci (PyPI) (malicious package)
- [MAL-2025-192366](https://insights.sbomify.com/MAL-2025-192366/): Malicious code in react-hook-form-5 (npm) (malicious package)
- [MAL-2025-192365](https://insights.sbomify.com/MAL-2025-192365/): Malicious code in python-tg-bot (PyPI) (malicious package)
- [MAL-2025-192364](https://insights.sbomify.com/MAL-2025-192364/): Malicious code in blank-lib (PyPI) (malicious package)
- [MAL-2025-192363](https://insights.sbomify.com/MAL-2025-192363/): Malicious code in telco (PyPI) (malicious package)
- [MAL-2025-192362](https://insights.sbomify.com/MAL-2025-192362/): Malicious code in evil-rce2 (PyPI) (malicious package)
- [MAL-2025-192361](https://insights.sbomify.com/MAL-2025-192361/): Malicious code in datadog-checks-base (npm) (malicious package)
- [MAL-2025-192360](https://insights.sbomify.com/MAL-2025-192360/): Malicious code in ssf-desktop-api-openfin (npm) (malicious package)
- [MAL-2025-19236](https://insights.sbomify.com/MAL-2025-19236/): Malicious code in eeslint-plugin-airtable (npm) (malicious package)
- [MAL-2025-192359](https://insights.sbomify.com/MAL-2025-192359/): Malicious code in ssf-desktop-api-browser (npm) (malicious package)
- [MAL-2025-192358](https://insights.sbomify.com/MAL-2025-192358/): Malicious code in sharp32 (npm) (malicious package)
- [MAL-2025-192357](https://insights.sbomify.com/MAL-2025-192357/): Malicious code in ido-sdk-web (npm) (malicious package)
- [MAL-2025-192356](https://insights.sbomify.com/MAL-2025-192356/): Malicious code in fdir5 (npm) (malicious package)
- [MAL-2025-192355](https://insights.sbomify.com/MAL-2025-192355/): Malicious code in fdir4 (npm) (malicious package)
- [MAL-2025-192354](https://insights.sbomify.com/MAL-2025-192354/): Malicious code in fdir2 (npm) (malicious package)
- [MAL-2025-192353](https://insights.sbomify.com/MAL-2025-192353/): Malicious code in fdir1 (npm) (malicious package)
- [MAL-2025-192352](https://insights.sbomify.com/MAL-2025-192352/): Malicious code in enclose-eslint (npm) (malicious package)
- [MAL-2025-192351](https://insights.sbomify.com/MAL-2025-192351/): Malicious code in evil-rce (PyPI) (malicious package)
- [MAL-2025-192350](https://insights.sbomify.com/MAL-2025-192350/): Malicious code in express-my-error-handler (npm) (malicious package)
- [MAL-2025-19235](https://insights.sbomify.com/MAL-2025-19235/): Malicious code in eemaster (npm) (malicious package)
- [MAL-2025-192349](https://insights.sbomify.com/MAL-2025-192349/): Malicious code in qt-main (PyPI) (malicious package)
- [MAL-2025-192348](https://insights.sbomify.com/MAL-2025-192348/): Malicious code in sd-notexsit (npm) (malicious package)
- [MAL-2025-192347](https://insights.sbomify.com/MAL-2025-192347/): Malicious code in sd-123456 (npm) (malicious package)
- [MAL-2025-192346](https://insights.sbomify.com/MAL-2025-192346/): Malicious code in non-modular-buildable (npm) (malicious package)
- [MAL-2025-192345](https://insights.sbomify.com/MAL-2025-192345/): Malicious code in native-component-list (npm) (malicious package)
- [MAL-2025-192344](https://insights.sbomify.com/MAL-2025-192344/): Malicious code in elf-stats-whimsical-pantry-974 (npm) (malicious package)
- [MAL-2025-192343](https://insights.sbomify.com/MAL-2025-192343/): Malicious code in elf-stats-velvet-train-152 (npm) (malicious package)
- [MAL-2025-192342](https://insights.sbomify.com/MAL-2025-192342/): Malicious code in elf-stats-tinsel-muffin-395 (npm) (malicious package)
- [MAL-2025-192341](https://insights.sbomify.com/MAL-2025-192341/): Malicious code in elf-stats-sparkly-workbench-689 (npm) (malicious package)
- [MAL-2025-192340](https://insights.sbomify.com/MAL-2025-192340/): Malicious code in elf-stats-sparkly-icicle-845 (npm) (malicious package)
- [MAL-2025-19234](https://insights.sbomify.com/MAL-2025-19234/): Malicious code in eeload (npm) (malicious package)
- [MAL-2025-192339](https://insights.sbomify.com/MAL-2025-192339/): Malicious code in elf-stats-snowdusted-chimney-406 (npm) (malicious package)
- [MAL-2025-192338](https://insights.sbomify.com/MAL-2025-192338/): Malicious code in elf-stats-shimmering-toolkit-483 (npm) (malicious package)
- [MAL-2025-192337](https://insights.sbomify.com/MAL-2025-192337/): Malicious code in elf-stats-shimmering-garland-476 (npm) (malicious package)
- [MAL-2025-192336](https://insights.sbomify.com/MAL-2025-192336/): Malicious code in elf-stats-northbound-drum-422 (npm) (malicious package)
- [MAL-2025-192335](https://insights.sbomify.com/MAL-2025-192335/): Malicious code in elf-stats-mulled-snowglobe-636 (npm) (malicious package)
- [MAL-2025-192334](https://insights.sbomify.com/MAL-2025-192334/): Malicious code in elf-stats-midnight-rocket-813 (npm) (malicious package)
- [MAL-2025-192333](https://insights.sbomify.com/MAL-2025-192333/): Malicious code in elf-stats-lanternlit-saddlebag-279 (npm) (malicious package)
- [MAL-2025-192332](https://insights.sbomify.com/MAL-2025-192332/): Malicious code in elf-stats-flickering-lantern-502 (npm) (malicious package)
- [MAL-2025-192331](https://insights.sbomify.com/MAL-2025-192331/): Malicious code in elf-stats-evergreen-satchel-264 (npm) (malicious package)
- [MAL-2025-192330](https://insights.sbomify.com/MAL-2025-192330/): Malicious code in elf-stats-cranberry-pinecone-878 (npm) (malicious package)
- [MAL-2025-19233](https://insights.sbomify.com/MAL-2025-19233/): Malicious code in eelectron (npm) (malicious package)
- [MAL-2025-192329](https://insights.sbomify.com/MAL-2025-192329/): Malicious code in elf-stats-cosy-toy-308 (npm) (malicious package)
- [MAL-2025-192328](https://insights.sbomify.com/MAL-2025-192328/): Malicious code in elf-stats-cosy-sled-550 (npm) (malicious package)
- [MAL-2025-192327](https://insights.sbomify.com/MAL-2025-192327/): Malicious code in elf-stats-candystriped-garland-735 (npm) (malicious package)
- [MAL-2025-192326](https://insights.sbomify.com/MAL-2025-192326/): Malicious code in elf-stats-candlelit-hollyberry-248 (npm) (malicious package)
- [MAL-2025-192325](https://insights.sbomify.com/MAL-2025-192325/): Malicious code in elf-stats-aurora-mailbag-938 (npm) (malicious package)
- [MAL-2025-192324](https://insights.sbomify.com/MAL-2025-192324/): Malicious code in ambient-map (npm) (malicious package)
- [MAL-2025-192323](https://insights.sbomify.com/MAL-2025-192323/): Malicious code in rendom (PyPI) (malicious package)
- [MAL-2025-192322](https://insights.sbomify.com/MAL-2025-192322/): Malicious code in joyboyw (PyPI) (malicious package)
- [MAL-2025-192321](https://insights.sbomify.com/MAL-2025-192321/): Malicious code in json-map-source (npm) (malicious package)
- [MAL-2025-192320](https://insights.sbomify.com/MAL-2025-192320/): Malicious code in dotnetenv (npm) (malicious package)
- [MAL-2025-19232](https://insights.sbomify.com/MAL-2025-19232/): Malicious code in eelctron (npm) (malicious package)
- [MAL-2025-192319](https://insights.sbomify.com/MAL-2025-192319/): Malicious code in chai-promised-chain (npm) (malicious package)
- [MAL-2025-192318](https://insights.sbomify.com/MAL-2025-192318/): Malicious code in chai-as-deployed (npm) (malicious package)
- [MAL-2025-192317](https://insights.sbomify.com/MAL-2025-192317/): Malicious code in tailwindcss-setfont (npm) (malicious package)
- [MAL-2025-192316](https://insights.sbomify.com/MAL-2025-192316/): Malicious code in tailwindcss-animation-helper (npm) (malicious package)
- [MAL-2025-192315](https://insights.sbomify.com/MAL-2025-192315/): Malicious code in seeds-random (npm) (malicious package)
- [MAL-2025-192314](https://insights.sbomify.com/MAL-2025-192314/): Malicious code in react-svg-supporter (npm) (malicious package)
- [MAL-2025-192313](https://insights.sbomify.com/MAL-2025-192313/): Malicious code in react-svg-fill (npm) (malicious package)
- [MAL-2025-192312](https://insights.sbomify.com/MAL-2025-192312/): Malicious code in react-svg-bundler (npm) (malicious package)
- [MAL-2025-192311](https://insights.sbomify.com/MAL-2025-192311/): Malicious code in react-icon-updater (npm) (malicious package)
- [MAL-2025-192310](https://insights.sbomify.com/MAL-2025-192310/): Malicious code in node-tailwind (npm) (malicious package)
- [MAL-2025-19231](https://insights.sbomify.com/MAL-2025-19231/): Malicious code in eeeeerrre (npm) (malicious package)
- [MAL-2025-192309](https://insights.sbomify.com/MAL-2025-192309/): Malicious code in node-dpapi1 (npm) (malicious package)
- [MAL-2025-192308](https://insights.sbomify.com/MAL-2025-192308/): Malicious code in module-listener (npm) (malicious package)
- [MAL-2025-192307](https://insights.sbomify.com/MAL-2025-192307/): Malicious code in jsonify-settings (npm) (malicious package)
- [MAL-2025-192306](https://insights.sbomify.com/MAL-2025-192306/): Malicious code in dell-restore-system (PyPI) (malicious package)
- [MAL-2025-192305](https://insights.sbomify.com/MAL-2025-192305/): Malicious code in dell-recovery (PyPI) (malicious package)
- [MAL-2025-192304](https://insights.sbomify.com/MAL-2025-192304/): Malicious code in elf-stats-northbound-sparkler-410 (npm) (malicious package)
- [MAL-2025-192303](https://insights.sbomify.com/MAL-2025-192303/): Malicious code in elf-stats-ginger-wreath-646 (npm) (malicious package)
- [MAL-2025-192302](https://insights.sbomify.com/MAL-2025-192302/): Malicious code in coremsft (PyPI) (malicious package)
- [MAL-2025-192301](https://insights.sbomify.com/MAL-2025-192301/): Malicious code in elf-stats-mulled-ornament-810 (npm) (malicious package)
- [MAL-2025-192300](https://insights.sbomify.com/MAL-2025-192300/): Malicious code in elf-stats-marzipan-cocoa-562 (npm) (malicious package)
- [MAL-2025-19230](https://insights.sbomify.com/MAL-2025-19230/): Malicious code in eectron (npm) (malicious package)
- [MAL-2025-1923](https://insights.sbomify.com/MAL-2025-1923/): Malicious code in sasdsdasdsdsda (npm) (malicious package)
- [MAL-2025-192299](https://insights.sbomify.com/MAL-2025-192299/): Malicious code in elf-stats-lanternlit-snowman-834 (npm) (malicious package)
- [MAL-2025-192298](https://insights.sbomify.com/MAL-2025-192298/): Malicious code in elf-stats-candlelit-marshmallow-663 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/906/