# Vulnerabilities published in 2025 - [MAL-2025-192206](https://insights.sbomify.com/MAL-2025-192206/): Malicious code in elf-stats-cocoa-fir-846 (npm) (malicious package) - [MAL-2025-192205](https://insights.sbomify.com/MAL-2025-192205/): Malicious code in elf-stats-cocoa-cocoa-280 (npm) (malicious package) - [MAL-2025-192204](https://insights.sbomify.com/MAL-2025-192204/): Malicious code in elf-stats-caroling-mailbag-397 (npm) (malicious package) - [MAL-2025-192203](https://insights.sbomify.com/MAL-2025-192203/): Malicious code in elf-stats-cocoa-ribbon-476 (npm) (malicious package) - [MAL-2025-192202](https://insights.sbomify.com/MAL-2025-192202/): Malicious code in elf-stats-sleighing-stocking-579 (npm) (malicious package) - [MAL-2025-192201](https://insights.sbomify.com/MAL-2025-192201/): Malicious code in elf-stats-merry-garland-548 (npm) (malicious package) - [MAL-2025-192200](https://insights.sbomify.com/MAL-2025-192200/): Malicious code in elf-stats-wintry-sled-578 (npm) (malicious package) - [MAL-2025-19220](https://insights.sbomify.com/MAL-2025-19220/): Malicious code in edit-modes (npm) (malicious package) - [MAL-2025-1922](https://insights.sbomify.com/MAL-2025-1922/): Malicious code in sally-fw (npm) (malicious package) - [MAL-2025-192199](https://insights.sbomify.com/MAL-2025-192199/): Malicious code in elf-stats-wintry-satchel-723 (npm) (malicious package) - [MAL-2025-192198](https://insights.sbomify.com/MAL-2025-192198/): Malicious code in elf-stats-wintry-ornament-960 (npm) (malicious package) - [MAL-2025-192197](https://insights.sbomify.com/MAL-2025-192197/): Malicious code in elf-stats-wintry-icicle-283 (npm) (malicious package) - [MAL-2025-192196](https://insights.sbomify.com/MAL-2025-192196/): Malicious code in elf-stats-wintry-hollyberry-832 (npm) (malicious package) - [MAL-2025-192195](https://insights.sbomify.com/MAL-2025-192195/): Malicious code in elf-stats-wintry-hammer-196 (npm) (malicious package) - [MAL-2025-192194](https://insights.sbomify.com/MAL-2025-192194/): Malicious code in elf-stats-wintry-fir-892 (npm) (malicious package) - [MAL-2025-192193](https://insights.sbomify.com/MAL-2025-192193/): Malicious code in elf-stats-whimsical-snowflake-250 (npm) (malicious package) - [MAL-2025-192192](https://insights.sbomify.com/MAL-2025-192192/): Malicious code in elf-stats-whimsical-rocket-922 (npm) (malicious package) - [MAL-2025-192191](https://insights.sbomify.com/MAL-2025-192191/): Malicious code in elf-stats-whimsical-muffin-613 (npm) (malicious package) - [MAL-2025-192190](https://insights.sbomify.com/MAL-2025-192190/): Malicious code in elf-stats-whimsical-marshmallow-258 (npm) (malicious package) - [MAL-2025-19219](https://insights.sbomify.com/MAL-2025-19219/): Malicious code in edge_api_namebuddy (npm) (malicious package) - [MAL-2025-192189](https://insights.sbomify.com/MAL-2025-192189/): Malicious code in elf-stats-whimsical-marshmallow-212 (npm) (malicious package) - [MAL-2025-192188](https://insights.sbomify.com/MAL-2025-192188/): Malicious code in elf-stats-whimsical-ledger-767 (npm) (malicious package) - [MAL-2025-192187](https://insights.sbomify.com/MAL-2025-192187/): Malicious code in elf-stats-whimsical-lantern-823 (npm) (malicious package) - [MAL-2025-192186](https://insights.sbomify.com/MAL-2025-192186/): Malicious code in elf-stats-velvet-ornament-935 (npm) (malicious package) - [MAL-2025-192185](https://insights.sbomify.com/MAL-2025-192185/): Malicious code in elf-stats-velvet-cocoa-992 (npm) (malicious package) - [MAL-2025-192184](https://insights.sbomify.com/MAL-2025-192184/): Malicious code in elf-stats-twinkling-wreath-730 (npm) (malicious package) - [MAL-2025-192183](https://insights.sbomify.com/MAL-2025-192183/): Malicious code in elf-stats-twinkling-sled-276 (npm) (malicious package) - [MAL-2025-192182](https://insights.sbomify.com/MAL-2025-192182/): Malicious code in elf-stats-twinkling-reindeer-382 (npm) (malicious package) - [MAL-2025-192181](https://insights.sbomify.com/MAL-2025-192181/): Malicious code in elf-stats-twinkling-marshmallow-913 (npm) (malicious package) - [MAL-2025-192180](https://insights.sbomify.com/MAL-2025-192180/): Malicious code in elf-stats-twinkling-ledger-989 (npm) (malicious package) - [MAL-2025-19218](https://insights.sbomify.com/MAL-2025-19218/): Malicious code in edge-ai-tuning-kit (npm) (malicious package) - [MAL-2025-192179](https://insights.sbomify.com/MAL-2025-192179/): Malicious code in elf-stats-twinkling-ledger-863 (npm) (malicious package) - [MAL-2025-192178](https://insights.sbomify.com/MAL-2025-192178/): Malicious code in elf-stats-tinsel-pantry-856 (npm) (malicious package) - [MAL-2025-192177](https://insights.sbomify.com/MAL-2025-192177/): Malicious code in elf-stats-tinsel-giftbox-192 (npm) (malicious package) - [MAL-2025-192176](https://insights.sbomify.com/MAL-2025-192176/): Malicious code in elf-stats-tinsel-drum-369 (npm) (malicious package) - [MAL-2025-192175](https://insights.sbomify.com/MAL-2025-192175/): Malicious code in elf-stats-sugarplum-workshop-950 (npm) (malicious package) - [MAL-2025-192174](https://insights.sbomify.com/MAL-2025-192174/): Malicious code in elf-stats-sugarplum-stockpile-238 (npm) (malicious package) - [MAL-2025-192173](https://insights.sbomify.com/MAL-2025-192173/): Malicious code in elf-stats-sugarplum-star-404 (npm) (malicious package) - [MAL-2025-192172](https://insights.sbomify.com/MAL-2025-192172/): Malicious code in elf-stats-sugarplum-saddlebag-236 (npm) (malicious package) - [MAL-2025-192171](https://insights.sbomify.com/MAL-2025-192171/): Malicious code in elf-stats-sugarplum-fireplace-278 (npm) (malicious package) - [MAL-2025-192170](https://insights.sbomify.com/MAL-2025-192170/): Malicious code in elf-stats-storybook-stocking-662 (npm) (malicious package) - [MAL-2025-19217](https://insights.sbomify.com/MAL-2025-19217/): Malicious code in edenredui (npm) (malicious package) - [MAL-2025-192169](https://insights.sbomify.com/MAL-2025-192169/): Malicious code in elf-stats-storybook-reindeer-552 (npm) (malicious package) - [MAL-2025-192168](https://insights.sbomify.com/MAL-2025-192168/): Malicious code in elf-stats-storybook-marshmallow-729 (npm) (malicious package) - [MAL-2025-192167](https://insights.sbomify.com/MAL-2025-192167/): Malicious code in elf-stats-storybook-cookiejar-481 (npm) (malicious package) - [MAL-2025-192166](https://insights.sbomify.com/MAL-2025-192166/): Malicious code in elf-stats-storybook-cookiejar-394 (npm) (malicious package) - [MAL-2025-192165](https://insights.sbomify.com/MAL-2025-192165/): Malicious code in elf-stats-storybook-bow-866 (npm) (malicious package) - [MAL-2025-192164](https://insights.sbomify.com/MAL-2025-192164/): Malicious code in elf-stats-starlit-train-195 (npm) (malicious package) - [MAL-2025-192163](https://insights.sbomify.com/MAL-2025-192163/): Malicious code in elf-stats-starlit-rocket-905 (npm) (malicious package) - [MAL-2025-192162](https://insights.sbomify.com/MAL-2025-192162/): Malicious code in elf-stats-starlit-northstar-873 (npm) (malicious package) - [MAL-2025-192161](https://insights.sbomify.com/MAL-2025-192161/): Malicious code in elf-stats-starlit-mitten-980 (npm) (malicious package) - [MAL-2025-192160](https://insights.sbomify.com/MAL-2025-192160/): Malicious code in elf-stats-sprucey-train-471 (npm) (malicious package) - [MAL-2025-19216](https://insights.sbomify.com/MAL-2025-19216/): Malicious code in edcm-gui (npm) (malicious package) - [MAL-2025-192159](https://insights.sbomify.com/MAL-2025-192159/): Malicious code in elf-stats-sprucey-snowman-250 (npm) (malicious package) - [MAL-2025-192158](https://insights.sbomify.com/MAL-2025-192158/): Malicious code in elf-stats-sprucey-mitten-825 (npm) (malicious package) - [MAL-2025-192157](https://insights.sbomify.com/MAL-2025-192157/): Malicious code in elf-stats-sprucey-icicle-606 (npm) (malicious package) - [MAL-2025-192156](https://insights.sbomify.com/MAL-2025-192156/): Malicious code in elf-stats-sparkly-snowflake-139 (npm) (malicious package) - [MAL-2025-192155](https://insights.sbomify.com/MAL-2025-192155/): Malicious code in elf-stats-sparkly-cushion-340 (npm) (malicious package) - [MAL-2025-192154](https://insights.sbomify.com/MAL-2025-192154/): Malicious code in elf-stats-sparkly-cocoa-863 (npm) (malicious package) - [MAL-2025-192153](https://insights.sbomify.com/MAL-2025-192153/): Malicious code in elf-stats-sparkly-bow-901 (npm) (malicious package) - [MAL-2025-192152](https://insights.sbomify.com/MAL-2025-192152/): Malicious code in elf-stats-snuggly-workshop-421 (npm) (malicious package) - [MAL-2025-192151](https://insights.sbomify.com/MAL-2025-192151/): Malicious code in elf-stats-snuggly-workbench-425 (npm) (malicious package) - [MAL-2025-192150](https://insights.sbomify.com/MAL-2025-192150/): Malicious code in elf-stats-snuggly-rocket-941 (npm) (malicious package) - [MAL-2025-19215](https://insights.sbomify.com/MAL-2025-19215/): Malicious code in edc-ng2-select (npm) (malicious package) - [MAL-2025-192149](https://insights.sbomify.com/MAL-2025-192149/): Malicious code in elf-stats-snuggly-cookie-673 (npm) (malicious package) - [MAL-2025-192148](https://insights.sbomify.com/MAL-2025-192148/): Malicious code in elf-stats-snowy-train-725 (npm) (malicious package) - [MAL-2025-192147](https://insights.sbomify.com/MAL-2025-192147/): Malicious code in elf-stats-snowy-train-565 (npm) (malicious package) - [MAL-2025-192146](https://insights.sbomify.com/MAL-2025-192146/): Malicious code in elf-stats-snowy-snowman-433 (npm) (malicious package) - [MAL-2025-192145](https://insights.sbomify.com/MAL-2025-192145/): Malicious code in elf-stats-snowy-sleigh-766 (npm) (malicious package) - [MAL-2025-192144](https://insights.sbomify.com/MAL-2025-192144/): Malicious code in elf-stats-snowy-cookiejar-589 (npm) (malicious package) - [MAL-2025-192143](https://insights.sbomify.com/MAL-2025-192143/): Malicious code in elf-stats-snowy-candy-850 (npm) (malicious package) - [MAL-2025-192142](https://insights.sbomify.com/MAL-2025-192142/): Malicious code in elf-stats-snowdusted-stocking-130 (npm) (malicious package) - [MAL-2025-192141](https://insights.sbomify.com/MAL-2025-192141/): Malicious code in elf-stats-snowdusted-saddlebag-790 (npm) (malicious package) - [MAL-2025-192140](https://insights.sbomify.com/MAL-2025-192140/): Malicious code in elf-stats-snowdusted-fireplace-396 (npm) (malicious package) - [MAL-2025-19214](https://insights.sbomify.com/MAL-2025-19214/): Malicious code in edakia (npm) (malicious package) - [MAL-2025-192139](https://insights.sbomify.com/MAL-2025-192139/): Malicious code in elf-stats-snowdusted-bauble-104 (npm) (malicious package) - [MAL-2025-192138](https://insights.sbomify.com/MAL-2025-192138/): Malicious code in elf-stats-sleighing-lantern-878 (npm) (malicious package) - [MAL-2025-192137](https://insights.sbomify.com/MAL-2025-192137/): Malicious code in elf-stats-sleighing-hollyberry-360 (npm) (malicious package) - [MAL-2025-192136](https://insights.sbomify.com/MAL-2025-192136/): Malicious code in elf-stats-sleighing-hammer-214 (npm) (malicious package) - [MAL-2025-192135](https://insights.sbomify.com/MAL-2025-192135/): Malicious code in elf-stats-silvered-snowman-898 (npm) (malicious package) - [MAL-2025-192134](https://insights.sbomify.com/MAL-2025-192134/): Malicious code in elf-stats-silvered-mitten-503 (npm) (malicious package) - [MAL-2025-192133](https://insights.sbomify.com/MAL-2025-192133/): Malicious code in elf-stats-silvered-bauble-482 (npm) (malicious package) - [MAL-2025-192132](https://insights.sbomify.com/MAL-2025-192132/): Malicious code in elf-stats-shimmering-workshop-590 (npm) (malicious package) - [MAL-2025-192131](https://insights.sbomify.com/MAL-2025-192131/): Malicious code in elf-stats-shimmering-workbench-778 (npm) (malicious package) - [MAL-2025-192130](https://insights.sbomify.com/MAL-2025-192130/): Malicious code in elf-stats-shimmering-pinecone-965 (npm) (malicious package) - [MAL-2025-19213](https://insights.sbomify.com/MAL-2025-19213/): Malicious code in ecyglpki (npm) (malicious package) - [MAL-2025-192129](https://insights.sbomify.com/MAL-2025-192129/): Malicious code in elf-stats-shimmering-northstar-293 (npm) (malicious package) - [MAL-2025-192128](https://insights.sbomify.com/MAL-2025-192128/): Malicious code in elf-stats-shimmering-nightcap-245 (npm) (malicious package) - [MAL-2025-192127](https://insights.sbomify.com/MAL-2025-192127/): Malicious code in elf-stats-shimmering-icicle-214 (npm) (malicious package) - [MAL-2025-192126](https://insights.sbomify.com/MAL-2025-192126/): Malicious code in elf-stats-shimmering-icicle-213 (npm) (malicious package) - [MAL-2025-192125](https://insights.sbomify.com/MAL-2025-192125/): Malicious code in elf-stats-shimmering-icicle-212 (npm) (malicious package) - [MAL-2025-192124](https://insights.sbomify.com/MAL-2025-192124/): Malicious code in elf-stats-rooftop-hammer-580 (npm) (malicious package) - [MAL-2025-192123](https://insights.sbomify.com/MAL-2025-192123/): Malicious code in elf-stats-rooftop-hammer-362 (npm) (malicious package) - [MAL-2025-192122](https://insights.sbomify.com/MAL-2025-192122/): Malicious code in elf-stats-rooftop-giftbox-464 (npm) (malicious package) - [MAL-2025-192121](https://insights.sbomify.com/MAL-2025-192121/): Malicious code in elf-stats-rooftop-garland-184 (npm) (malicious package) - [MAL-2025-192120](https://insights.sbomify.com/MAL-2025-192120/): Malicious code in elf-stats-rooftop-candy-837 (npm) (malicious package) - [MAL-2025-19212](https://insights.sbomify.com/MAL-2025-19212/): Malicious code in ecxkkmwjrldvuytb (npm) (malicious package) - [MAL-2025-192119](https://insights.sbomify.com/MAL-2025-192119/): Malicious code in elf-stats-piney-pinecone-203 (npm) (malicious package) - [MAL-2025-192118](https://insights.sbomify.com/MAL-2025-192118/): Malicious code in elf-stats-piney-ledger-864 (npm) (malicious package) - [MAL-2025-192117](https://insights.sbomify.com/MAL-2025-192117/): Malicious code in elf-stats-piney-icicle-501 (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/908/