# Vulnerabilities published in 2025 - [MAL-2025-192116](https://insights.sbomify.com/MAL-2025-192116/): Malicious code in elf-stats-piney-garland-824 (npm) (malicious package) - [MAL-2025-192115](https://insights.sbomify.com/MAL-2025-192115/): Malicious code in elf-stats-piney-fireplace-695 (npm) (malicious package) - [MAL-2025-192114](https://insights.sbomify.com/MAL-2025-192114/): Malicious code in elf-stats-peppermint-stocking-949 (npm) (malicious package) - [MAL-2025-192113](https://insights.sbomify.com/MAL-2025-192113/): Malicious code in elf-stats-peppermint-icicle-890 (npm) (malicious package) - [MAL-2025-192112](https://insights.sbomify.com/MAL-2025-192112/): Malicious code in elf-stats-peppermint-candy-233 (npm) (malicious package) - [MAL-2025-192111](https://insights.sbomify.com/MAL-2025-192111/): Malicious code in elf-stats-nutmeg-stocking-515 (npm) (malicious package) - [MAL-2025-192110](https://insights.sbomify.com/MAL-2025-192110/): Malicious code in elf-stats-nutmeg-nutcracker-538 (npm) (malicious package) - [MAL-2025-19211](https://insights.sbomify.com/MAL-2025-19211/): Malicious code in ecwkzuprogyavksi (npm) (malicious package) - [MAL-2025-192109](https://insights.sbomify.com/MAL-2025-192109/): Malicious code in elf-stats-nutmeg-giftbox-398 (npm) (malicious package) - [MAL-2025-192108](https://insights.sbomify.com/MAL-2025-192108/): Malicious code in elf-stats-northbound-wishlist-684 (npm) (malicious package) - [MAL-2025-192107](https://insights.sbomify.com/MAL-2025-192107/): Malicious code in elf-stats-northbound-wishlist-426 (npm) (malicious package) - [MAL-2025-192106](https://insights.sbomify.com/MAL-2025-192106/): Malicious code in elf-stats-northbound-star-801 (npm) (malicious package) - [MAL-2025-192105](https://insights.sbomify.com/MAL-2025-192105/): Malicious code in elf-stats-northbound-icicle-485 (npm) (malicious package) - [MAL-2025-192104](https://insights.sbomify.com/MAL-2025-192104/): Malicious code in elf-stats-northbound-garland-782 (npm) (malicious package) - [MAL-2025-192103](https://insights.sbomify.com/MAL-2025-192103/): Malicious code in elf-stats-mulled-wishlist-789 (npm) (malicious package) - [MAL-2025-192102](https://insights.sbomify.com/MAL-2025-192102/): Malicious code in elf-stats-mulled-stockpile-411 (npm) (malicious package) - [MAL-2025-192101](https://insights.sbomify.com/MAL-2025-192101/): Malicious code in elf-stats-mulled-rocket-415 (npm) (malicious package) - [MAL-2025-192100](https://insights.sbomify.com/MAL-2025-192100/): Malicious code in elf-stats-mulled-drum-529 (npm) (malicious package) - [MAL-2025-19210](https://insights.sbomify.com/MAL-2025-19210/): Malicious code in ecv-paypal (npm) (malicious package) - [MAL-2025-1921](https://insights.sbomify.com/MAL-2025-1921/): Malicious code in reqmanagementui (npm) (malicious package) - [MAL-2025-192099](https://insights.sbomify.com/MAL-2025-192099/): Malicious code in elf-stats-mistletoe-sparkler-211 (npm) (malicious package) - [MAL-2025-192098](https://insights.sbomify.com/MAL-2025-192098/): Malicious code in elf-stats-mistletoe-pinecone-620 (npm) (malicious package) - [MAL-2025-192097](https://insights.sbomify.com/MAL-2025-192097/): Malicious code in elf-stats-mistletoe-bell-913 (npm) (malicious package) - [MAL-2025-192096](https://insights.sbomify.com/MAL-2025-192096/): Malicious code in elf-stats-midnight-wreath-655 (npm) (malicious package) - [MAL-2025-192095](https://insights.sbomify.com/MAL-2025-192095/): Malicious code in elf-stats-midnight-workbench-208 (npm) (malicious package) - [MAL-2025-192094](https://insights.sbomify.com/MAL-2025-192094/): Malicious code in elf-stats-midnight-toy-513 (npm) (malicious package) - [MAL-2025-192093](https://insights.sbomify.com/MAL-2025-192093/): Malicious code in elf-stats-midnight-star-734 (npm) (malicious package) - [MAL-2025-192092](https://insights.sbomify.com/MAL-2025-192092/): Malicious code in elf-stats-midnight-pinecone-982 (npm) (malicious package) - [MAL-2025-192091](https://insights.sbomify.com/MAL-2025-192091/): Malicious code in elf-stats-midnight-mitten-226 (npm) (malicious package) - [MAL-2025-192090](https://insights.sbomify.com/MAL-2025-192090/): Malicious code in elf-stats-midnight-drum-606 (npm) (malicious package) - [MAL-2025-19209](https://insights.sbomify.com/MAL-2025-19209/): Malicious code in ecuvre (npm) (malicious package) - [MAL-2025-192089](https://insights.sbomify.com/MAL-2025-192089/): Malicious code in elf-stats-merry-stocking-539 (npm) (malicious package) - [MAL-2025-192088](https://insights.sbomify.com/MAL-2025-192088/): Malicious code in elf-stats-merry-sparkler-742 (npm) (malicious package) - [MAL-2025-192087](https://insights.sbomify.com/MAL-2025-192087/): Malicious code in elf-stats-merry-cookiejar-915 (npm) (malicious package) - [MAL-2025-192086](https://insights.sbomify.com/MAL-2025-192086/): Malicious code in elf-stats-merry-cookiejar-754 (npm) (malicious package) - [MAL-2025-192085](https://insights.sbomify.com/MAL-2025-192085/): Malicious code in elf-stats-merry-chimney-765 (npm) (malicious package) - [MAL-2025-192084](https://insights.sbomify.com/MAL-2025-192084/): Malicious code in elf-stats-merry-bell-515 (npm) (malicious package) - [MAL-2025-192083](https://insights.sbomify.com/MAL-2025-192083/): Malicious code in elf-stats-marzipan-muffin-733 (npm) (malicious package) - [MAL-2025-192082](https://insights.sbomify.com/MAL-2025-192082/): Malicious code in elf-stats-marzipan-fir-795 (npm) (malicious package) - [MAL-2025-192081](https://insights.sbomify.com/MAL-2025-192081/): Malicious code in elf-stats-marzipan-fir-219 (npm) (malicious package) - [MAL-2025-192080](https://insights.sbomify.com/MAL-2025-192080/): Malicious code in elf-stats-marzipan-cookiejar-316 (npm) (malicious package) - [MAL-2025-19208](https://insights.sbomify.com/MAL-2025-19208/): Malicious code in ecubee (npm) (malicious package) - [MAL-2025-192079](https://insights.sbomify.com/MAL-2025-192079/): Malicious code in elf-stats-magical-sleigh-777 (npm) (malicious package) - [MAL-2025-192078](https://insights.sbomify.com/MAL-2025-192078/): Malicious code in elf-stats-lanternlit-sled-571 (npm) (malicious package) - [MAL-2025-192077](https://insights.sbomify.com/MAL-2025-192077/): Malicious code in elf-stats-lanternlit-fir-170 (npm) (malicious package) - [MAL-2025-192076](https://insights.sbomify.com/MAL-2025-192076/): Malicious code in elf-stats-lanternlit-fir-106 (npm) (malicious package) - [MAL-2025-192075](https://insights.sbomify.com/MAL-2025-192075/): Malicious code in elf-stats-jubilant-chimney-189 (npm) (malicious package) - [MAL-2025-192074](https://insights.sbomify.com/MAL-2025-192074/): Malicious code in elf-stats-joyous-toy-934 (npm) (malicious package) - [MAL-2025-192073](https://insights.sbomify.com/MAL-2025-192073/): Malicious code in elf-stats-joyous-toy-475 (npm) (malicious package) - [MAL-2025-192072](https://insights.sbomify.com/MAL-2025-192072/): Malicious code in elf-stats-joyous-sparkler-816 (npm) (malicious package) - [MAL-2025-192071](https://insights.sbomify.com/MAL-2025-192071/): Malicious code in elf-stats-joyous-sparkler-347 (npm) (malicious package) - [MAL-2025-192070](https://insights.sbomify.com/MAL-2025-192070/): Malicious code in elf-stats-joyous-sled-261 (npm) (malicious package) - [MAL-2025-19207](https://insights.sbomify.com/MAL-2025-19207/): Malicious code in ecruve (npm) (malicious package) - [MAL-2025-192069](https://insights.sbomify.com/MAL-2025-192069/): Malicious code in elf-stats-joyous-pinecone-528 (npm) (malicious package) - [MAL-2025-192068](https://insights.sbomify.com/MAL-2025-192068/): Malicious code in elf-stats-joyous-mailbag-164 (npm) (malicious package) - [MAL-2025-192067](https://insights.sbomify.com/MAL-2025-192067/): Malicious code in elf-stats-joyous-hollyberry-379 (npm) (malicious package) - [MAL-2025-192066](https://insights.sbomify.com/MAL-2025-192066/): Malicious code in elf-stats-joyous-fireplace-187 (npm) (malicious package) - [MAL-2025-192065](https://insights.sbomify.com/MAL-2025-192065/): Malicious code in elf-stats-jolly-toolkit-984 (npm) (malicious package) - [MAL-2025-192064](https://insights.sbomify.com/MAL-2025-192064/): Malicious code in elf-stats-holly-stockpile-968 (npm) (malicious package) - [MAL-2025-192063](https://insights.sbomify.com/MAL-2025-192063/): Malicious code in elf-stats-holly-hammer-741 (npm) (malicious package) - [MAL-2025-192062](https://insights.sbomify.com/MAL-2025-192062/): Malicious code in elf-stats-glittering-wishlist-537 (npm) (malicious package) - [MAL-2025-192061](https://insights.sbomify.com/MAL-2025-192061/): Malicious code in elf-stats-glittering-nutcracker-591 (npm) (malicious package) - [MAL-2025-192060](https://insights.sbomify.com/MAL-2025-192060/): Malicious code in elf-stats-glittering-marshmallow-217 (npm) (malicious package) - [MAL-2025-19206](https://insights.sbomify.com/MAL-2025-19206/): Malicious code in ecosystem-vortex-vda657-project (npm) (malicious package) - [MAL-2025-192059](https://insights.sbomify.com/MAL-2025-192059/): Malicious code in elf-stats-glittering-lantern-418 (npm) (malicious package) - [MAL-2025-192058](https://insights.sbomify.com/MAL-2025-192058/): Malicious code in elf-stats-glittering-cookie-772 (npm) (malicious package) - [MAL-2025-192057](https://insights.sbomify.com/MAL-2025-192057/): Malicious code in elf-stats-gingersnap-sparkler-768 (npm) (malicious package) - [MAL-2025-192056](https://insights.sbomify.com/MAL-2025-192056/): Malicious code in elf-stats-gingersnap-reindeer-987 (npm) (malicious package) - [MAL-2025-192055](https://insights.sbomify.com/MAL-2025-192055/): Malicious code in elf-stats-gingersnap-pinecone-440 (npm) (malicious package) - [MAL-2025-192054](https://insights.sbomify.com/MAL-2025-192054/): Malicious code in elf-stats-ginger-workshop-948 (npm) (malicious package) - [MAL-2025-192053](https://insights.sbomify.com/MAL-2025-192053/): Malicious code in elf-stats-ginger-ledger-106 (npm) (malicious package) - [MAL-2025-192052](https://insights.sbomify.com/MAL-2025-192052/): Malicious code in elf-stats-ginger-icicle-707 (npm) (malicious package) - [MAL-2025-192051](https://insights.sbomify.com/MAL-2025-192051/): Malicious code in elf-stats-ginger-cookiejar-383 (npm) (malicious package) - [MAL-2025-192050](https://insights.sbomify.com/MAL-2025-192050/): Malicious code in elf-stats-ginger-bell-819 (npm) (malicious package) - [MAL-2025-19205](https://insights.sbomify.com/MAL-2025-19205/): Malicious code in ecosystem-violet-xqw050-project (npm) (malicious package) - [MAL-2025-192049](https://insights.sbomify.com/MAL-2025-192049/): Malicious code in elf-stats-fuzzy-sparkler-922 (npm) (malicious package) - [MAL-2025-192048](https://insights.sbomify.com/MAL-2025-192048/): Malicious code in elf-stats-fuzzy-pantry-827 (npm) (malicious package) - [MAL-2025-192047](https://insights.sbomify.com/MAL-2025-192047/): Malicious code in elf-stats-fuzzy-ornament-236 (npm) (malicious package) - [MAL-2025-192046](https://insights.sbomify.com/MAL-2025-192046/): Malicious code in elf-stats-fuzzy-mitten-891 (npm) (malicious package) - [MAL-2025-192045](https://insights.sbomify.com/MAL-2025-192045/): Malicious code in elf-stats-fuzzy-marshmallow-280 (npm) (malicious package) - [MAL-2025-192044](https://insights.sbomify.com/MAL-2025-192044/): Malicious code in elf-stats-fuzzy-cushion-615 (npm) (malicious package) - [MAL-2025-192043](https://insights.sbomify.com/MAL-2025-192043/): Malicious code in elf-stats-frosty-toy-870 (npm) (malicious package) - [MAL-2025-192042](https://insights.sbomify.com/MAL-2025-192042/): Malicious code in elf-stats-frosty-candy-152 (npm) (malicious package) - [MAL-2025-192041](https://insights.sbomify.com/MAL-2025-192041/): Malicious code in elf-stats-frostbitten-wishlist-794 (npm) (malicious package) - [MAL-2025-192040](https://insights.sbomify.com/MAL-2025-192040/): Malicious code in elf-stats-frostbitten-train-315 (npm) (malicious package) - [MAL-2025-19204](https://insights.sbomify.com/MAL-2025-19204/): Malicious code in ecosystem-uranium-fsi579-project (npm) (malicious package) - [MAL-2025-192039](https://insights.sbomify.com/MAL-2025-192039/): Malicious code in elf-stats-frostbitten-ribbon-950 (npm) (malicious package) - [MAL-2025-192038](https://insights.sbomify.com/MAL-2025-192038/): Malicious code in elf-stats-frostbitten-bow-539 (npm) (malicious package) - [MAL-2025-192037](https://insights.sbomify.com/MAL-2025-192037/): Malicious code in elf-stats-flickering-workbench-929 (npm) (malicious package) - [MAL-2025-192036](https://insights.sbomify.com/MAL-2025-192036/): Malicious code in elf-stats-flickering-wishlist-695 (npm) (malicious package) - [MAL-2025-192035](https://insights.sbomify.com/MAL-2025-192035/): Malicious code in elf-stats-flickering-saddlebag-301 (npm) (malicious package) - [MAL-2025-192034](https://insights.sbomify.com/MAL-2025-192034/): Malicious code in elf-stats-flickering-fir-572 (npm) (malicious package) - [MAL-2025-192033](https://insights.sbomify.com/MAL-2025-192033/): Malicious code in elf-stats-flickering-candy-280 (npm) (malicious package) - [MAL-2025-192032](https://insights.sbomify.com/MAL-2025-192032/): Malicious code in elf-stats-festive-wreath-502 (npm) (malicious package) - [MAL-2025-192031](https://insights.sbomify.com/MAL-2025-192031/): Malicious code in elf-stats-festive-train-714 (npm) (malicious package) - [MAL-2025-192030](https://insights.sbomify.com/MAL-2025-192030/): Malicious code in elf-stats-festive-snowglobe-440 (npm) (malicious package) - [MAL-2025-19203](https://insights.sbomify.com/MAL-2025-19203/): Malicious code in ecosystem-tornado-vgj614-project (npm) (malicious package) - [MAL-2025-192029](https://insights.sbomify.com/MAL-2025-192029/): Malicious code in elf-stats-festive-hollyberry-572 (npm) (malicious package) - [MAL-2025-192028](https://insights.sbomify.com/MAL-2025-192028/): Malicious code in elf-stats-festive-cocoa-106 (npm) (malicious package) - [MAL-2025-192027](https://insights.sbomify.com/MAL-2025-192027/): Malicious code in elf-stats-evergreen-workbench-462 (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/909/