# Vulnerabilities published in 2025 - [MAL-2025-191937](https://insights.sbomify.com/MAL-2025-191937/): Malicious code in xsltproc (PyPI) (malicious package) - [MAL-2025-191936](https://insights.sbomify.com/MAL-2025-191936/): Malicious code in xenlib (PyPI) (malicious package) - [MAL-2025-191935](https://insights.sbomify.com/MAL-2025-191935/): Malicious code in win32str (PyPI) (malicious package) - [MAL-2025-191934](https://insights.sbomify.com/MAL-2025-191934/): Malicious code in win32evtlogutil (PyPI) (malicious package) - [MAL-2025-191933](https://insights.sbomify.com/MAL-2025-191933/): Malicious code in win32evtlog (PyPI) (malicious package) - [MAL-2025-191932](https://insights.sbomify.com/MAL-2025-191932/): Malicious code in win32con (PyPI) (malicious package) - [MAL-2025-191931](https://insights.sbomify.com/MAL-2025-191931/): Malicious code in wei516-tpa (PyPI) (malicious package) - [MAL-2025-191930](https://insights.sbomify.com/MAL-2025-191930/): Malicious code in wei516-ppa (PyPI) (malicious package) - [MAL-2025-19193](https://insights.sbomify.com/MAL-2025-19193/): Malicious code in ecosystem-delta-zny302-project (npm) (malicious package) - [MAL-2025-191929](https://insights.sbomify.com/MAL-2025-191929/): Malicious code in wei516-enconly (PyPI) (malicious package) - [MAL-2025-191928](https://insights.sbomify.com/MAL-2025-191928/): Malicious code in web3dummycti (PyPI) (malicious package) - [MAL-2025-191927](https://insights.sbomify.com/MAL-2025-191927/): Malicious code in wayspiritmcp-weather (PyPI) (malicious package) - [MAL-2025-191926](https://insights.sbomify.com/MAL-2025-191926/): Malicious code in wayspiritmcp-tpa (PyPI) (malicious package) - [MAL-2025-191925](https://insights.sbomify.com/MAL-2025-191925/): Malicious code in wayspiritmcp-ppa (PyPI) (malicious package) - [MAL-2025-191924](https://insights.sbomify.com/MAL-2025-191924/): Malicious code in wayspiritmcp-enconly (PyPI) (malicious package) - [MAL-2025-191923](https://insights.sbomify.com/MAL-2025-191923/): Malicious code in w3shi-h1 (PyPI) (malicious package) - [MAL-2025-191922](https://insights.sbomify.com/MAL-2025-191922/): Malicious code in voipms-service (PyPI) (malicious package) - [MAL-2025-191921](https://insights.sbomify.com/MAL-2025-191921/): Malicious code in voicemetterr (PyPI) (malicious package) - [MAL-2025-191920](https://insights.sbomify.com/MAL-2025-191920/): Malicious code in venomenallib (PyPI) (malicious package) - [MAL-2025-19192](https://insights.sbomify.com/MAL-2025-19192/): Malicious code in ecosystem-butterfly-zeu344-project (npm) (malicious package) - [MAL-2025-191919](https://insights.sbomify.com/MAL-2025-191919/): Malicious code in uzip (PyPI) (malicious package) - [MAL-2025-191918](https://insights.sbomify.com/MAL-2025-191918/): Malicious code in uuzip (PyPI) (malicious package) - [MAL-2025-191917](https://insights.sbomify.com/MAL-2025-191917/): Malicious code in updateuuid4 (PyPI) (malicious package) - [MAL-2025-191916](https://insights.sbomify.com/MAL-2025-191916/): Malicious code in unicore (PyPI) (malicious package) - [MAL-2025-191915](https://insights.sbomify.com/MAL-2025-191915/): Malicious code in ultrafasttelethon (PyPI) (malicious package) - [MAL-2025-191914](https://insights.sbomify.com/MAL-2025-191914/): Malicious code in typing-extensions-plus (PyPI) (malicious package) - [MAL-2025-191913](https://insights.sbomify.com/MAL-2025-191913/): Malicious code in tronpropy (PyPI) (malicious package) - [MAL-2025-191912](https://insights.sbomify.com/MAL-2025-191912/): Malicious code in tronlinknet (PyPI) (malicious package) - [MAL-2025-191911](https://insights.sbomify.com/MAL-2025-191911/): Malicious code in tronapihelper (PyPI) (malicious package) - [MAL-2025-191910](https://insights.sbomify.com/MAL-2025-191910/): Malicious code in treeherder-submitter (PyPI) (malicious package) - [MAL-2025-19191](https://insights.sbomify.com/MAL-2025-19191/): Malicious code in ecosystem-ant-mrn019-project (npm) (malicious package) - [MAL-2025-191909](https://insights.sbomify.com/MAL-2025-191909/): Malicious code in transaction-utils (PyPI) (malicious package) - [MAL-2025-191908](https://insights.sbomify.com/MAL-2025-191908/): Malicious code in tosa-serialization-lib (PyPI) (malicious package) - [MAL-2025-191907](https://insights.sbomify.com/MAL-2025-191907/): Malicious code in torchflow-experimental (PyPI) (malicious package) - [MAL-2025-191906](https://insights.sbomify.com/MAL-2025-191906/): Malicious code in tonetext (PyPI) (malicious package) - [MAL-2025-191905](https://insights.sbomify.com/MAL-2025-191905/): Malicious code in time-service-checker (PyPI) (malicious package) - [MAL-2025-191904](https://insights.sbomify.com/MAL-2025-191904/): Malicious code in time-server-test (PyPI) (malicious package) - [MAL-2025-191903](https://insights.sbomify.com/MAL-2025-191903/): Malicious code in time-server-analyzer (PyPI) (malicious package) - [MAL-2025-191902](https://insights.sbomify.com/MAL-2025-191902/): Malicious code in time-server-analysis (PyPI) (malicious package) - [MAL-2025-191901](https://insights.sbomify.com/MAL-2025-191901/): Malicious code in time-check-server-get (PyPI) (malicious package) - [MAL-2025-191900](https://insights.sbomify.com/MAL-2025-191900/): Malicious code in time-check-server (PyPI) (malicious package) - [MAL-2025-19190](https://insights.sbomify.com/MAL-2025-19190/): Malicious code in ecosia-deploy (npm) (malicious package) - [MAL-2025-1919](https://insights.sbomify.com/MAL-2025-1919/): Malicious code in react-v18 (npm) (malicious package) - [MAL-2025-191899](https://insights.sbomify.com/MAL-2025-191899/): Malicious code in tiksing (PyPI) (malicious package) - [MAL-2025-191898](https://insights.sbomify.com/MAL-2025-191898/): Malicious code in threading-helper (PyPI) (malicious package) - [MAL-2025-191897](https://insights.sbomify.com/MAL-2025-191897/): Malicious code in tgeffect (PyPI) (malicious package) - [MAL-2025-191896](https://insights.sbomify.com/MAL-2025-191896/): Malicious code in testt-abc (PyPI) (malicious package) - [MAL-2025-191895](https://insights.sbomify.com/MAL-2025-191895/): Malicious code in testpurpleteaming (PyPI) (malicious package) - [MAL-2025-191894](https://insights.sbomify.com/MAL-2025-191894/): Malicious code in testingpkgja (PyPI) (malicious package) - [MAL-2025-191893](https://insights.sbomify.com/MAL-2025-191893/): Malicious code in testcatplzignore (PyPI) (malicious package) - [MAL-2025-191892](https://insights.sbomify.com/MAL-2025-191892/): Malicious code in terminalcolornew (PyPI) (malicious package) - [MAL-2025-191891](https://insights.sbomify.com/MAL-2025-191891/): Malicious code in tensorflows (PyPI) (malicious package) - [MAL-2025-191890](https://insights.sbomify.com/MAL-2025-191890/): Malicious code in tensorflowlitex (PyPI) (malicious package) - [MAL-2025-19189](https://insights.sbomify.com/MAL-2025-19189/): Malicious code in economika (npm) (malicious package) - [MAL-2025-191889](https://insights.sbomify.com/MAL-2025-191889/): Malicious code in telepycore (PyPI) (malicious package) - [MAL-2025-191888](https://insights.sbomify.com/MAL-2025-191888/): Malicious code in telegramdoxing (PyPI) (malicious package) - [MAL-2025-191887](https://insights.sbomify.com/MAL-2025-191887/): Malicious code in tcloud-python-sdks (PyPI) (malicious package) - [MAL-2025-191886](https://insights.sbomify.com/MAL-2025-191886/): Malicious code in tclients-sdk (PyPI) (malicious package) - [MAL-2025-191885](https://insights.sbomify.com/MAL-2025-191885/): Malicious code in talbat (PyPI) (malicious package) - [MAL-2025-191884](https://insights.sbomify.com/MAL-2025-191884/): Malicious code in tableausdk (PyPI) (malicious package) - [MAL-2025-191883](https://insights.sbomify.com/MAL-2025-191883/): Malicious code in svcmanager (PyPI) (malicious package) - [MAL-2025-191882](https://insights.sbomify.com/MAL-2025-191882/): Malicious code in supersafereverse (PyPI) (malicious package) - [MAL-2025-191881](https://insights.sbomify.com/MAL-2025-191881/): Malicious code in supersafecalc (PyPI) (malicious package) - [MAL-2025-191880](https://insights.sbomify.com/MAL-2025-191880/): Malicious code in stubsoutagn (PyPI) (malicious package) - [MAL-2025-19188](https://insights.sbomify.com/MAL-2025-19188/): Malicious code in ecom-cdp (npm) (malicious package) - [MAL-2025-191879](https://insights.sbomify.com/MAL-2025-191879/): Malicious code in stubsout (PyPI) (malicious package) - [MAL-2025-191878](https://insights.sbomify.com/MAL-2025-191878/): Malicious code in statsapi (PyPI) (malicious package) - [MAL-2025-191877](https://insights.sbomify.com/MAL-2025-191877/): Malicious code in spyderlib (PyPI) (malicious package) - [MAL-2025-191876](https://insights.sbomify.com/MAL-2025-191876/): Malicious code in speedd-testing-bot (PyPI) (malicious package) - [MAL-2025-191875](https://insights.sbomify.com/MAL-2025-191875/): Malicious code in speed-testing-vps (PyPI) (malicious package) - [MAL-2025-191874](https://insights.sbomify.com/MAL-2025-191874/): Malicious code in speed-testing-nt (PyPI) (malicious package) - [MAL-2025-191873](https://insights.sbomify.com/MAL-2025-191873/): Malicious code in sorex (PyPI) (malicious package) - [MAL-2025-191872](https://insights.sbomify.com/MAL-2025-191872/): Malicious code in soopsocks (PyPI) (malicious package) - [MAL-2025-191871](https://insights.sbomify.com/MAL-2025-191871/): Malicious code in snapshot-photo (PyPI) (malicious package) - [MAL-2025-191870](https://insights.sbomify.com/MAL-2025-191870/): Malicious code in sitoogether (PyPI) (malicious package) - [MAL-2025-19187](https://insights.sbomify.com/MAL-2025-19187/): Malicious code in ecofip-ui (npm) (malicious package) - [MAL-2025-191869](https://insights.sbomify.com/MAL-2025-191869/): Malicious code in sintok (PyPI) (malicious package) - [MAL-2025-191868](https://insights.sbomify.com/MAL-2025-191868/): Malicious code in singtok (PyPI) (malicious package) - [MAL-2025-191867](https://insights.sbomify.com/MAL-2025-191867/): Malicious code in siitoogether (PyPI) (malicious package) - [MAL-2025-191866](https://insights.sbomify.com/MAL-2025-191866/): Malicious code in selenium-stealth-utils (PyPI) (malicious package) - [MAL-2025-191865](https://insights.sbomify.com/MAL-2025-191865/): Malicious code in selenium-stealth-helper (PyPI) (malicious package) - [MAL-2025-191864](https://insights.sbomify.com/MAL-2025-191864/): Malicious code in seclab-research-depconf-test-2 (PyPI) (malicious package) - [MAL-2025-191863](https://insights.sbomify.com/MAL-2025-191863/): Malicious code in seclab-research-depconf-test (PyPI) (malicious package) - [MAL-2025-191862](https://insights.sbomify.com/MAL-2025-191862/): Malicious code in saintone (PyPI) (malicious package) - [MAL-2025-191861](https://insights.sbomify.com/MAL-2025-191861/): Malicious code in s3transfer-sl (PyPI) (malicious package) - [MAL-2025-191860](https://insights.sbomify.com/MAL-2025-191860/): Malicious code in rtcpy (PyPI) (malicious package) - [MAL-2025-19186](https://insights.sbomify.com/MAL-2025-19186/): Malicious code in eclipse-xenon-vega-relay (npm) (malicious package) - [MAL-2025-191859](https://insights.sbomify.com/MAL-2025-191859/): Malicious code in rtcpstream (PyPI) (malicious package) - [MAL-2025-191858](https://insights.sbomify.com/MAL-2025-191858/): Malicious code in rtcplogin (PyPI) (malicious package) - [MAL-2025-191857](https://insights.sbomify.com/MAL-2025-191857/): Malicious code in requtils (PyPI) (malicious package) - [MAL-2025-191856](https://insights.sbomify.com/MAL-2025-191856/): Malicious code in req-pre-automate1 (PyPI) (malicious package) - [MAL-2025-191855](https://insights.sbomify.com/MAL-2025-191855/): Malicious code in req-pre-automate (PyPI) (malicious package) - [MAL-2025-191854](https://insights.sbomify.com/MAL-2025-191854/): Malicious code in req-ase-automate (PyPI) (malicious package) - [MAL-2025-191853](https://insights.sbomify.com/MAL-2025-191853/): Malicious code in req-ase (PyPI) (malicious package) - [MAL-2025-191852](https://insights.sbomify.com/MAL-2025-191852/): Malicious code in readosso (PyPI) (malicious package) - [MAL-2025-191851](https://insights.sbomify.com/MAL-2025-191851/): Malicious code in r-irkernel (PyPI) (malicious package) - [MAL-2025-191850](https://insights.sbomify.com/MAL-2025-191850/): Malicious code in quicksort-pro (PyPI) (malicious package) - [MAL-2025-19185](https://insights.sbomify.com/MAL-2025-19185/): Malicious code in eclipse-thuban-speleology-pipe (npm) (malicious package) - [MAL-2025-191849](https://insights.sbomify.com/MAL-2025-191849/): Malicious code in qtpv (PyPI) (malicious package) - [MAL-2025-191848](https://insights.sbomify.com/MAL-2025-191848/): Malicious code in pyximport (PyPI) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/911/