# Vulnerabilities published in 2025 - [MAL-2025-192297](https://insights.sbomify.com/MAL-2025-192297/): Malicious code in elf-stats-bright-cocoa-293 (npm) (malicious package) - [MAL-2025-192296](https://insights.sbomify.com/MAL-2025-192296/): Malicious code in beep-types (npm) (malicious package) - [MAL-2025-192295](https://insights.sbomify.com/MAL-2025-192295/): Malicious code in elf-stats-jubilant-ornament-641 (npm) (malicious package) - [MAL-2025-192294](https://insights.sbomify.com/MAL-2025-192294/): Malicious code in elf-stats-festive-sparkler-275 (npm) (malicious package) - [MAL-2025-192293](https://insights.sbomify.com/MAL-2025-192293/): Malicious code in tailwindcss-animation-css (npm) (malicious package) - [MAL-2025-192292](https://insights.sbomify.com/MAL-2025-192292/): Malicious code in email-validated (npm) (malicious package) - [MAL-2025-192291](https://insights.sbomify.com/MAL-2025-192291/): Malicious code in email-regexed (npm) (malicious package) - [MAL-2025-192290](https://insights.sbomify.com/MAL-2025-192290/): Malicious code in dotenv-intend (npm) (malicious package) - [MAL-2025-19229](https://insights.sbomify.com/MAL-2025-19229/): Malicious code in ee-web-core (npm) (malicious package) - [MAL-2025-192289](https://insights.sbomify.com/MAL-2025-192289/): Malicious code in chai-test-await (npm) (malicious package) - [MAL-2025-192288](https://insights.sbomify.com/MAL-2025-192288/): Malicious code in self-service-portal-prod (npm) (malicious package) - [MAL-2025-192287](https://insights.sbomify.com/MAL-2025-192287/): Malicious code in elf-stats-twinkling-ribbon-344 (npm) (malicious package) - [MAL-2025-192286](https://insights.sbomify.com/MAL-2025-192286/): Malicious code in elf-stats-tinsel-sparkler-289 (npm) (malicious package) - [MAL-2025-192285](https://insights.sbomify.com/MAL-2025-192285/): Malicious code in elf-stats-sugarplum-cookiejar-287 (npm) (malicious package) - [MAL-2025-192284](https://insights.sbomify.com/MAL-2025-192284/): Malicious code in elf-stats-sprucey-fireplace-355 (npm) (malicious package) - [MAL-2025-192283](https://insights.sbomify.com/MAL-2025-192283/): Malicious code in elf-stats-sparkly-candy-805 (npm) (malicious package) - [MAL-2025-192282](https://insights.sbomify.com/MAL-2025-192282/): Malicious code in elf-stats-joyous-train-754 (npm) (malicious package) - [MAL-2025-192281](https://insights.sbomify.com/MAL-2025-192281/): Malicious code in elf-stats-frostbitten-pantry-235 (npm) (malicious package) - [MAL-2025-192280](https://insights.sbomify.com/MAL-2025-192280/): Malicious code in elf-stats-evergreen-pantry-410 (npm) (malicious package) - [MAL-2025-19228](https://insights.sbomify.com/MAL-2025-19228/): Malicious code in edx-icon (npm) (malicious package) - [MAL-2025-192279](https://insights.sbomify.com/MAL-2025-192279/): Malicious code in elf-stats-candystriped-chimney-879 (npm) (malicious package) - [MAL-2025-192278](https://insights.sbomify.com/MAL-2025-192278/): Malicious code in elf-stats-aurora-toy-659 (npm) (malicious package) - [MAL-2025-192277](https://insights.sbomify.com/MAL-2025-192277/): Malicious code in elf-stats-sugarplum-ribbon-151 (npm) (malicious package) - [MAL-2025-192276](https://insights.sbomify.com/MAL-2025-192276/): Malicious code in elf-stats-snowy-northstar-860 (npm) (malicious package) - [MAL-2025-192275](https://insights.sbomify.com/MAL-2025-192275/): Malicious code in elf-stats-sleighing-mailbag-621 (npm) (malicious package) - [MAL-2025-192274](https://insights.sbomify.com/MAL-2025-192274/): Malicious code in elf-stats-mulled-nightcap-782 (npm) (malicious package) - [MAL-2025-192273](https://insights.sbomify.com/MAL-2025-192273/): Malicious code in elf-stats-merry-cookiejar-139 (npm) (malicious package) - [MAL-2025-192272](https://insights.sbomify.com/MAL-2025-192272/): Malicious code in elf-stats-candystriped-ornament-933 (npm) (malicious package) - [MAL-2025-192271](https://insights.sbomify.com/MAL-2025-192271/): Malicious code in @bhyolken/echotest (npm) (malicious package) - [MAL-2025-192270](https://insights.sbomify.com/MAL-2025-192270/): Malicious code in elf-stats-tinsel-candy-605 (npm) (malicious package) - [MAL-2025-19227](https://insights.sbomify.com/MAL-2025-19227/): Malicious code in edutrack (npm) (malicious package) - [MAL-2025-192269](https://insights.sbomify.com/MAL-2025-192269/): Malicious code in elf-stats-snowdusted-train-837 (npm) (malicious package) - [MAL-2025-192268](https://insights.sbomify.com/MAL-2025-192268/): Malicious code in elf-stats-snowdusted-stockpile-595 (npm) (malicious package) - [MAL-2025-192267](https://insights.sbomify.com/MAL-2025-192267/): Malicious code in elf-stats-snowdusted-lantern-234 (npm) (malicious package) - [MAL-2025-192266](https://insights.sbomify.com/MAL-2025-192266/): Malicious code in elf-stats-silvered-star-676 (npm) (malicious package) - [MAL-2025-192265](https://insights.sbomify.com/MAL-2025-192265/): Malicious code in elf-stats-rooftop-fireplace-499 (npm) (malicious package) - [MAL-2025-192264](https://insights.sbomify.com/MAL-2025-192264/): Malicious code in elf-stats-rooftop-cocoa-966 (npm) (malicious package) - [MAL-2025-192263](https://insights.sbomify.com/MAL-2025-192263/): Malicious code in elf-stats-nutmeg-garland-645 (npm) (malicious package) - [MAL-2025-192262](https://insights.sbomify.com/MAL-2025-192262/): Malicious code in elf-stats-joyous-hollyberry-121 (npm) (malicious package) - [MAL-2025-192261](https://insights.sbomify.com/MAL-2025-192261/): Malicious code in elf-stats-jolly-workshop-110 (npm) (malicious package) - [MAL-2025-192260](https://insights.sbomify.com/MAL-2025-192260/): Malicious code in elf-stats-flickering-ornament-344 (npm) (malicious package) - [MAL-2025-19226](https://insights.sbomify.com/MAL-2025-19226/): Malicious code in educagent (npm) (malicious package) - [MAL-2025-192259](https://insights.sbomify.com/MAL-2025-192259/): Malicious code in unified11 (npm) (malicious package) - [MAL-2025-192258](https://insights.sbomify.com/MAL-2025-192258/): Malicious code in stats-engine (npm) (malicious package) - [MAL-2025-192257](https://insights.sbomify.com/MAL-2025-192257/): Malicious code in elf-stats-midnight-saddlebag-720 (npm) (malicious package) - [MAL-2025-192256](https://insights.sbomify.com/MAL-2025-192256/): Malicious code in elf-stats-frostbitten-drum-529 (npm) (malicious package) - [MAL-2025-192255](https://insights.sbomify.com/MAL-2025-192255/): Malicious code in elf-stats-festive-workshop-566 (npm) (malicious package) - [MAL-2025-192254](https://insights.sbomify.com/MAL-2025-192254/): Malicious code in unified10 (npm) (malicious package) - [MAL-2025-192253](https://insights.sbomify.com/MAL-2025-192253/): Malicious code in remark-stringify10 (npm) (malicious package) - [MAL-2025-192252](https://insights.sbomify.com/MAL-2025-192252/): Malicious code in elf-stats-sleighing-mailbag-109 (npm) (malicious package) - [MAL-2025-192251](https://insights.sbomify.com/MAL-2025-192251/): Malicious code in elf-stats-silvered-stocking-120 (npm) (malicious package) - [MAL-2025-192250](https://insights.sbomify.com/MAL-2025-192250/): Malicious code in elf-stats-shimmering-workbench-301 (npm) (malicious package) - [MAL-2025-19225](https://insights.sbomify.com/MAL-2025-19225/): Malicious code in eduarda (npm) (malicious package) - [MAL-2025-192249](https://insights.sbomify.com/MAL-2025-192249/): Malicious code in elf-stats-shimmering-muffin-598 (npm) (malicious package) - [MAL-2025-192248](https://insights.sbomify.com/MAL-2025-192248/): Malicious code in elf-stats-marzipan-pantry-560 (npm) (malicious package) - [MAL-2025-192247](https://insights.sbomify.com/MAL-2025-192247/): Malicious code in elf-stats-holly-wishlist-355 (npm) (malicious package) - [MAL-2025-192246](https://insights.sbomify.com/MAL-2025-192246/): Malicious code in remark-parse10 (npm) (malicious package) - [MAL-2025-192245](https://insights.sbomify.com/MAL-2025-192245/): Malicious code in remark-mdx2.3 (npm) (malicious package) - [MAL-2025-192244](https://insights.sbomify.com/MAL-2025-192244/): Malicious code in hast-util-to-mdast9 (npm) (malicious package) - [MAL-2025-192243](https://insights.sbomify.com/MAL-2025-192243/): Malicious code in elf-stats-wintry-cocoa-831 (npm) (malicious package) - [MAL-2025-192242](https://insights.sbomify.com/MAL-2025-192242/): Malicious code in elf-stats-whimsical-chimney-949 (npm) (malicious package) - [MAL-2025-192241](https://insights.sbomify.com/MAL-2025-192241/): Malicious code in elf-stats-velvet-snowman-470 (npm) (malicious package) - [MAL-2025-192240](https://insights.sbomify.com/MAL-2025-192240/): Malicious code in elf-stats-velvet-ornament-148 (npm) (malicious package) - [MAL-2025-19224](https://insights.sbomify.com/MAL-2025-19224/): Malicious code in ednexio (npm) (malicious package) - [MAL-2025-192239](https://insights.sbomify.com/MAL-2025-192239/): Malicious code in elf-stats-tinsel-train-397 (npm) (malicious package) - [MAL-2025-192238](https://insights.sbomify.com/MAL-2025-192238/): Malicious code in elf-stats-sugarplum-muffin-944 (npm) (malicious package) - [MAL-2025-192237](https://insights.sbomify.com/MAL-2025-192237/): Malicious code in elf-stats-storybook-snowglobe-157 (npm) (malicious package) - [MAL-2025-192236](https://insights.sbomify.com/MAL-2025-192236/): Malicious code in elf-stats-storybook-marshmallow-471 (npm) (malicious package) - [MAL-2025-192235](https://insights.sbomify.com/MAL-2025-192235/): Malicious code in elf-stats-sprucey-stockpile-628 (npm) (malicious package) - [MAL-2025-192234](https://insights.sbomify.com/MAL-2025-192234/): Malicious code in elf-stats-snuggly-ornament-764 (npm) (malicious package) - [MAL-2025-192233](https://insights.sbomify.com/MAL-2025-192233/): Malicious code in elf-stats-snowy-candy-518 (npm) (malicious package) - [MAL-2025-192232](https://insights.sbomify.com/MAL-2025-192232/): Malicious code in elf-stats-snowy-bow-730 (npm) (malicious package) - [MAL-2025-192231](https://insights.sbomify.com/MAL-2025-192231/): Malicious code in elf-stats-snowdusted-drum-647 (npm) (malicious package) - [MAL-2025-192230](https://insights.sbomify.com/MAL-2025-192230/): Malicious code in elf-stats-snowdusted-cocoa-694 (npm) (malicious package) - [MAL-2025-19223](https://insights.sbomify.com/MAL-2025-19223/): Malicious code in edmara (npm) (malicious package) - [MAL-2025-192229](https://insights.sbomify.com/MAL-2025-192229/): Malicious code in elf-stats-sleighing-nutcracker-806 (npm) (malicious package) - [MAL-2025-192228](https://insights.sbomify.com/MAL-2025-192228/): Malicious code in elf-stats-piney-nightcap-782 (npm) (malicious package) - [MAL-2025-192227](https://insights.sbomify.com/MAL-2025-192227/): Malicious code in elf-stats-piney-icicle-383 (npm) (malicious package) - [MAL-2025-192226](https://insights.sbomify.com/MAL-2025-192226/): Malicious code in elf-stats-peppermint-hollyberry-893 (npm) (malicious package) - [MAL-2025-192225](https://insights.sbomify.com/MAL-2025-192225/): Malicious code in elf-stats-nutmeg-stockpile-999 (npm) (malicious package) - [MAL-2025-192224](https://insights.sbomify.com/MAL-2025-192224/): Malicious code in elf-stats-nutmeg-cookie-584 (npm) (malicious package) - [MAL-2025-192223](https://insights.sbomify.com/MAL-2025-192223/): Malicious code in elf-stats-nutmeg-cocoa-967 (npm) (malicious package) - [MAL-2025-192222](https://insights.sbomify.com/MAL-2025-192222/): Malicious code in elf-stats-mulled-stocking-538 (npm) (malicious package) - [MAL-2025-192221](https://insights.sbomify.com/MAL-2025-192221/): Malicious code in elf-stats-midnight-chimney-291 (npm) (malicious package) - [MAL-2025-192220](https://insights.sbomify.com/MAL-2025-192220/): Malicious code in elf-stats-merry-cookiejar-646 (npm) (malicious package) - [MAL-2025-19222](https://insights.sbomify.com/MAL-2025-19222/): Malicious code in edlectron (npm) (malicious package) - [MAL-2025-192219](https://insights.sbomify.com/MAL-2025-192219/): Malicious code in elf-stats-merry-cookiejar-511 (npm) (malicious package) - [MAL-2025-192218](https://insights.sbomify.com/MAL-2025-192218/): Malicious code in elf-stats-merry-cookiejar-442 (npm) (malicious package) - [MAL-2025-192217](https://insights.sbomify.com/MAL-2025-192217/): Malicious code in elf-stats-jubilant-bow-187 (npm) (malicious package) - [MAL-2025-192216](https://insights.sbomify.com/MAL-2025-192216/): Malicious code in elf-stats-glittering-reindeer-615 (npm) (malicious package) - [MAL-2025-192215](https://insights.sbomify.com/MAL-2025-192215/): Malicious code in elf-stats-glittering-nutcracker-709 (npm) (malicious package) - [MAL-2025-192214](https://insights.sbomify.com/MAL-2025-192214/): Malicious code in elf-stats-glittering-fir-252 (npm) (malicious package) - [MAL-2025-192213](https://insights.sbomify.com/MAL-2025-192213/): Malicious code in elf-stats-gingersnap-ornament-469 (npm) (malicious package) - [MAL-2025-192212](https://insights.sbomify.com/MAL-2025-192212/): Malicious code in elf-stats-ginger-reindeer-411 (npm) (malicious package) - [MAL-2025-192211](https://insights.sbomify.com/MAL-2025-192211/): Malicious code in elf-stats-fuzzy-hollyberry-736 (npm) (malicious package) - [MAL-2025-192210](https://insights.sbomify.com/MAL-2025-192210/): Malicious code in elf-stats-frostbitten-reindeer-875 (npm) (malicious package) - [MAL-2025-19221](https://insights.sbomify.com/MAL-2025-19221/): Malicious code in edjpyxikkhbatqrs (npm) (malicious package) - [MAL-2025-192209](https://insights.sbomify.com/MAL-2025-192209/): Malicious code in elf-stats-ember-reindeer-211 (npm) (malicious package) - [MAL-2025-192208](https://insights.sbomify.com/MAL-2025-192208/): Malicious code in elf-stats-cranberry-hollyberry-804 (npm) (malicious package) - [MAL-2025-192207](https://insights.sbomify.com/MAL-2025-192207/): Malicious code in elf-stats-cocoa-train-606-pwn2 (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/907/