# Vulnerabilities published in 2025 - [MAL-2025-192026](https://insights.sbomify.com/MAL-2025-192026/): Malicious code in elf-stats-evergreen-snowglobe-961 (npm) (malicious package) - [MAL-2025-192025](https://insights.sbomify.com/MAL-2025-192025/): Malicious code in elf-stats-evergreen-sled-681 (npm) (malicious package) - [MAL-2025-192024](https://insights.sbomify.com/MAL-2025-192024/): Malicious code in elf-stats-evergreen-muffin-867 (npm) (malicious package) - [MAL-2025-192023](https://insights.sbomify.com/MAL-2025-192023/): Malicious code in elf-stats-evergreen-mitten-361 (npm) (malicious package) - [MAL-2025-192022](https://insights.sbomify.com/MAL-2025-192022/): Malicious code in elf-stats-evergreen-mailbag-606 (npm) (malicious package) - [MAL-2025-192021](https://insights.sbomify.com/MAL-2025-192021/): Malicious code in elf-stats-evergreen-fir-211 (npm) (malicious package) - [MAL-2025-192020](https://insights.sbomify.com/MAL-2025-192020/): Malicious code in elf-stats-evergreen-chimney-857 (npm) (malicious package) - [MAL-2025-19202](https://insights.sbomify.com/MAL-2025-19202/): Malicious code in ecosystem-thistle-tru313-project (npm) (malicious package) - [MAL-2025-192019](https://insights.sbomify.com/MAL-2025-192019/): Malicious code in elf-stats-evergreen-bow-653 (npm) (malicious package) - [MAL-2025-192018](https://insights.sbomify.com/MAL-2025-192018/): Malicious code in elf-stats-ember-stockpile-641 (npm) (malicious package) - [MAL-2025-192017](https://insights.sbomify.com/MAL-2025-192017/): Malicious code in elf-stats-ember-muffin-717 (npm) (malicious package) - [MAL-2025-192016](https://insights.sbomify.com/MAL-2025-192016/): Malicious code in elf-stats-ember-hammer-340 (npm) (malicious package) - [MAL-2025-192015](https://insights.sbomify.com/MAL-2025-192015/): Malicious code in elf-stats-cranberry-mailbag-505 (npm) (malicious package) - [MAL-2025-192014](https://insights.sbomify.com/MAL-2025-192014/): Malicious code in elf-stats-cranberry-icicle-864 (npm) (malicious package) - [MAL-2025-192013](https://insights.sbomify.com/MAL-2025-192013/): Malicious code in elf-stats-cosy-wishlist-811 (npm) (malicious package) - [MAL-2025-192012](https://insights.sbomify.com/MAL-2025-192012/): Malicious code in elf-stats-cosy-pantry-344 (npm) (malicious package) - [MAL-2025-192011](https://insights.sbomify.com/MAL-2025-192011/): Malicious code in elf-stats-cocoa-train-606-pwn (npm) (malicious package) - [MAL-2025-192010](https://insights.sbomify.com/MAL-2025-192010/): Malicious code in elf-stats-cocoa-train-606 (npm) (malicious package) - [MAL-2025-19201](https://insights.sbomify.com/MAL-2025-19201/): Malicious code in ecosystem-rainbow-xym443-project (npm) (malicious package) - [MAL-2025-192009](https://insights.sbomify.com/MAL-2025-192009/): Malicious code in elf-stats-cocoa-reindeer-663 (npm) (malicious package) - [MAL-2025-192008](https://insights.sbomify.com/MAL-2025-192008/): Malicious code in elf-stats-cocoa-northstar-632 (npm) (malicious package) - [MAL-2025-192007](https://insights.sbomify.com/MAL-2025-192007/): Malicious code in elf-stats-cocoa-muffin-395 (npm) (malicious package) - [MAL-2025-192006](https://insights.sbomify.com/MAL-2025-192006/): Malicious code in elf-stats-cheery-satchel-119 (npm) (malicious package) - [MAL-2025-192005](https://insights.sbomify.com/MAL-2025-192005/): Malicious code in elf-stats-cheery-fireplace-598 (npm) (malicious package) - [MAL-2025-192004](https://insights.sbomify.com/MAL-2025-192004/): Malicious code in elf-stats-cheery-chimney-392 (npm) (malicious package) - [MAL-2025-192003](https://insights.sbomify.com/MAL-2025-192003/): Malicious code in elf-stats-cheery-bell-343 (npm) (malicious package) - [MAL-2025-192002](https://insights.sbomify.com/MAL-2025-192002/): Malicious code in elf-stats-caroling-toy-109 (npm) (malicious package) - [MAL-2025-192001](https://insights.sbomify.com/MAL-2025-192001/): Malicious code in elf-stats-caroling-sleigh-970 (npm) (malicious package) - [MAL-2025-192000](https://insights.sbomify.com/MAL-2025-192000/): Malicious code in elf-stats-caroling-hollyberry-628 (npm) (malicious package) - [MAL-2025-19200](https://insights.sbomify.com/MAL-2025-19200/): Malicious code in ecosystem-opal-lxo696-project (npm) (malicious package) - [MAL-2025-1920](https://insights.sbomify.com/MAL-2025-1920/): Malicious code in req-management-ui (npm) (malicious package) - [MAL-2025-192](https://insights.sbomify.com/MAL-2025-192/): Malicious code in glance-android-core-sdk (npm) (malicious package) - [MAL-2025-191999](https://insights.sbomify.com/MAL-2025-191999/): Malicious code in elf-stats-candystriped-saddlebag-217 (npm) (malicious package) - [MAL-2025-191998](https://insights.sbomify.com/MAL-2025-191998/): Malicious code in elf-stats-candystriped-lantern-205 (npm) (malicious package) - [MAL-2025-191997](https://insights.sbomify.com/MAL-2025-191997/): Malicious code in elf-stats-candystriped-hollyberry-986 (npm) (malicious package) - [MAL-2025-191996](https://insights.sbomify.com/MAL-2025-191996/): Malicious code in elf-stats-candlelit-toy-571 (npm) (malicious package) - [MAL-2025-191995](https://insights.sbomify.com/MAL-2025-191995/): Malicious code in elf-stats-candlelit-reindeer-881 (npm) (malicious package) - [MAL-2025-191994](https://insights.sbomify.com/MAL-2025-191994/): Malicious code in elf-stats-bright-star-712 (npm) (malicious package) - [MAL-2025-191993](https://insights.sbomify.com/MAL-2025-191993/): Malicious code in elf-stats-bright-cushion-246 (npm) (malicious package) - [MAL-2025-191992](https://insights.sbomify.com/MAL-2025-191992/): Malicious code in elf-stats-bright-bow-377 (npm) (malicious package) - [MAL-2025-191991](https://insights.sbomify.com/MAL-2025-191991/): Malicious code in elf-stats-aurora-workbench-5l3 (npm) (malicious package) - [MAL-2025-191990](https://insights.sbomify.com/MAL-2025-191990/): Malicious code in elf-stats-aurora-workbench-513 (npm) (malicious package) - [MAL-2025-19199](https://insights.sbomify.com/MAL-2025-19199/): Malicious code in ecosystem-mountain-fql199-project (npm) (malicious package) - [MAL-2025-191989](https://insights.sbomify.com/MAL-2025-191989/): Malicious code in elf-stats-aurora-garland-513 (npm) (malicious package) - [MAL-2025-191988](https://insights.sbomify.com/MAL-2025-191988/): Malicious code in elf-stats-aurora-candy-291 (npm) (malicious package) - [MAL-2025-191987](https://insights.sbomify.com/MAL-2025-191987/): Malicious code in elf-stats-starlit-ribbon-255 (npm) (malicious package) - [MAL-2025-191986](https://insights.sbomify.com/MAL-2025-191986/): Malicious code in elf-stats-mulled-bauble-252 (npm) (malicious package) - [MAL-2025-191985](https://insights.sbomify.com/MAL-2025-191985/): Malicious code in elf-stats-shimmering-lantern-668 (npm) (malicious package) - [MAL-2025-191984](https://insights.sbomify.com/MAL-2025-191984/): Malicious code in elf-stats-sparkly-garland-970 (npm) (malicious package) - [MAL-2025-191983](https://insights.sbomify.com/MAL-2025-191983/): Malicious code in elf-stats-nutmeg-chimney-245 (npm) (malicious package) - [MAL-2025-191982](https://insights.sbomify.com/MAL-2025-191982/): Malicious code in elf-stats-ginger-hammer-326 (npm) (malicious package) - [MAL-2025-191981](https://insights.sbomify.com/MAL-2025-191981/): Malicious code in elf-stats-frosty-candy-393 (npm) (malicious package) - [MAL-2025-191980](https://insights.sbomify.com/MAL-2025-191980/): Malicious code in elf-stats-cosy-sleigh-356 (npm) (malicious package) - [MAL-2025-19198](https://insights.sbomify.com/MAL-2025-19198/): Malicious code in ecosystem-meadow-dye920-project (npm) (malicious package) - [MAL-2025-191979](https://insights.sbomify.com/MAL-2025-191979/): Malicious code in buffer-envjs (npm) (malicious package) - [MAL-2025-191978](https://insights.sbomify.com/MAL-2025-191978/): Malicious code in elf-stats-cranberry-sleigh-853 (npm) (malicious package) - [MAL-2025-191977](https://insights.sbomify.com/MAL-2025-191977/): Malicious code in elf-stats-rooftop-stockpile-626 (npm) (malicious package) - [MAL-2025-191976](https://insights.sbomify.com/MAL-2025-191976/): Malicious code in elf-stats-sleighing-bow-514 (npm) (malicious package) - [MAL-2025-191975](https://insights.sbomify.com/MAL-2025-191975/): Malicious code in elf-stats-merry-cookiejar-987 (npm) (malicious package) - [MAL-2025-191974](https://insights.sbomify.com/MAL-2025-191974/): Malicious code in elf-stats-wintry-northstar-674 (npm) (malicious package) - [MAL-2025-191973](https://insights.sbomify.com/MAL-2025-191973/): Malicious code in elf-stats-fuzzy-fir-973 (npm) (malicious package) - [MAL-2025-191972](https://insights.sbomify.com/MAL-2025-191972/): Malicious code in hellospa (PyPI) (malicious package) - [MAL-2025-191971](https://insights.sbomify.com/MAL-2025-191971/): Malicious code in @testfei/hallo-word (npm) (malicious package) - [MAL-2025-191970](https://insights.sbomify.com/MAL-2025-191970/): Malicious code in kwp-router (npm) (malicious package) - [MAL-2025-19197](https://insights.sbomify.com/MAL-2025-19197/): Malicious code in ecosystem-jellyfish-umz952-project (npm) (malicious package) - [MAL-2025-191969](https://insights.sbomify.com/MAL-2025-191969/): Malicious code in kkkaremn (npm) (malicious package) - [MAL-2025-191968](https://insights.sbomify.com/MAL-2025-191968/): Malicious code in karemm7 (npm) (malicious package) - [MAL-2025-191967](https://insights.sbomify.com/MAL-2025-191967/): Malicious code in karemm6 (npm) (malicious package) - [MAL-2025-191966](https://insights.sbomify.com/MAL-2025-191966/): Malicious code in karemm5 (npm) (malicious package) - [MAL-2025-191965](https://insights.sbomify.com/MAL-2025-191965/): Malicious code in karemm3 (npm) (malicious package) - [MAL-2025-191964](https://insights.sbomify.com/MAL-2025-191964/): Malicious code in karemm2 (npm) (malicious package) - [MAL-2025-191963](https://insights.sbomify.com/MAL-2025-191963/): Malicious code in karemm1 (npm) (malicious package) - [MAL-2025-191962](https://insights.sbomify.com/MAL-2025-191962/): Malicious code in karem7 (npm) (malicious package) - [MAL-2025-191961](https://insights.sbomify.com/MAL-2025-191961/): Malicious code in karem5 (npm) (malicious package) - [MAL-2025-191960](https://insights.sbomify.com/MAL-2025-191960/): Malicious code in karem4 (npm) (malicious package) - [MAL-2025-19196](https://insights.sbomify.com/MAL-2025-19196/): Malicious code in ecosystem-iris-eab640-project (npm) (malicious package) - [MAL-2025-191959](https://insights.sbomify.com/MAL-2025-191959/): Malicious code in karem10 (npm) (malicious package) - [MAL-2025-191958](https://insights.sbomify.com/MAL-2025-191958/): Malicious code in karem1 (npm) (malicious package) - [MAL-2025-191957](https://insights.sbomify.com/MAL-2025-191957/): Malicious code in elf-stats-sparkly-hammer-880 (npm) (malicious package) - [MAL-2025-191956](https://insights.sbomify.com/MAL-2025-191956/): Malicious code in elf-stats-snowdusted-wishlist-166 (npm) (malicious package) - [MAL-2025-191955](https://insights.sbomify.com/MAL-2025-191955/): Malicious code in elf-stats-snowdusted-sparkler-261 (npm) (malicious package) - [MAL-2025-191954](https://insights.sbomify.com/MAL-2025-191954/): Malicious code in elf-stats-silvered-ornament-756 (npm) (malicious package) - [MAL-2025-191953](https://insights.sbomify.com/MAL-2025-191953/): Malicious code in elf-stats-cosy-stockpile-694 (npm) (malicious package) - [MAL-2025-191952](https://insights.sbomify.com/MAL-2025-191952/): Malicious code in angular-trackjs (npm) (malicious package) - [MAL-2025-191951](https://insights.sbomify.com/MAL-2025-191951/): Malicious code in @wb-drive/icons (npm) (malicious package) - [MAL-2025-191950](https://insights.sbomify.com/MAL-2025-191950/): Malicious code in @hand-talk/yotta-icons (npm) (malicious package) - [MAL-2025-19195](https://insights.sbomify.com/MAL-2025-19195/): Malicious code in ecosystem-iceberg-chk796-project (npm) (malicious package) - [MAL-2025-191949](https://insights.sbomify.com/MAL-2025-191949/): Malicious code in kmz1 (npm) (malicious package) - [MAL-2025-191948](https://insights.sbomify.com/MAL-2025-191948/): Malicious code in kkkarem (npm) (malicious package) - [MAL-2025-191947](https://insights.sbomify.com/MAL-2025-191947/): Malicious code in karemz (npm) (malicious package) - [MAL-2025-191946](https://insights.sbomify.com/MAL-2025-191946/): Malicious code in gtkfuscator (PyPI) (malicious package) - [MAL-2025-191945](https://insights.sbomify.com/MAL-2025-191945/): Malicious code in zsender (PyPI) (malicious package) - [MAL-2025-191944](https://insights.sbomify.com/MAL-2025-191944/): Malicious code in zscaner (PyPI) (malicious package) - [MAL-2025-191943](https://insights.sbomify.com/MAL-2025-191943/): Malicious code in zmaker (PyPI) (malicious package) - [MAL-2025-191942](https://insights.sbomify.com/MAL-2025-191942/): Malicious code in zamino (PyPI) (malicious package) - [MAL-2025-191941](https://insights.sbomify.com/MAL-2025-191941/): Malicious code in zakuraweb (PyPI) (malicious package) - [MAL-2025-191940](https://insights.sbomify.com/MAL-2025-191940/): Malicious code in zakuchienne (PyPI) (malicious package) - [MAL-2025-19194](https://insights.sbomify.com/MAL-2025-19194/): Malicious code in ecosystem-grove-wfv387-project (npm) (malicious package) - [MAL-2025-191939](https://insights.sbomify.com/MAL-2025-191939/): Malicious code in xx-ent-wiki-sm (PyPI) (malicious package) - [MAL-2025-191938](https://insights.sbomify.com/MAL-2025-191938/): Malicious code in xwormclient (PyPI) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/910/