# Vulnerabilities published in 2025 - [MAL-2025-191847](https://insights.sbomify.com/MAL-2025-191847/): Malicious code in pytzv (PyPI) (malicious package) - [MAL-2025-191846](https://insights.sbomify.com/MAL-2025-191846/): Malicious code in pythondm32 (PyPI) (malicious package) - [MAL-2025-191845](https://insights.sbomify.com/MAL-2025-191845/): Malicious code in python3-shodan (PyPI) (malicious package) - [MAL-2025-191844](https://insights.sbomify.com/MAL-2025-191844/): Malicious code in python3-autopep8 (PyPI) (malicious package) - [MAL-2025-191843](https://insights.sbomify.com/MAL-2025-191843/): Malicious code in python3-6 (PyPI) (malicious package) - [MAL-2025-191842](https://insights.sbomify.com/MAL-2025-191842/): Malicious code in python-uvicorn (PyPI) (malicious package) - [MAL-2025-191841](https://insights.sbomify.com/MAL-2025-191841/): Malicious code in python-rootpath (PyPI) (malicious package) - [MAL-2025-191840](https://insights.sbomify.com/MAL-2025-191840/): Malicious code in python-doenv (PyPI) (malicious package) - [MAL-2025-19184](https://insights.sbomify.com/MAL-2025-19184/): Malicious code in eclipse-spectron-webdriver-venus-babel (npm) (malicious package) - [MAL-2025-191839](https://insights.sbomify.com/MAL-2025-191839/): Malicious code in python-dev-toolkit (PyPI) (malicious package) - [MAL-2025-191838](https://insights.sbomify.com/MAL-2025-191838/): Malicious code in pytelegramapi (PyPI) (malicious package) - [MAL-2025-191837](https://insights.sbomify.com/MAL-2025-191837/): Malicious code in pyrtp (PyPI) (malicious package) - [MAL-2025-191836](https://insights.sbomify.com/MAL-2025-191836/): Malicious code in pyrovider (PyPI) (malicious package) - [MAL-2025-191835](https://insights.sbomify.com/MAL-2025-191835/): Malicious code in pylibcugraph (PyPI) (malicious package) - [MAL-2025-191834](https://insights.sbomify.com/MAL-2025-191834/): Malicious code in pyinite (PyPI) (malicious package) - [MAL-2025-191833](https://insights.sbomify.com/MAL-2025-191833/): Malicious code in pydefender (PyPI) (malicious package) - [MAL-2025-191832](https://insights.sbomify.com/MAL-2025-191832/): Malicious code in pycrackhash (PyPI) (malicious package) - [MAL-2025-191831](https://insights.sbomify.com/MAL-2025-191831/): Malicious code in pyapiepo (PyPI) (malicious package) - [MAL-2025-191830](https://insights.sbomify.com/MAL-2025-191830/): Malicious code in pulsecord (PyPI) (malicious package) - [MAL-2025-19183](https://insights.sbomify.com/MAL-2025-19183/): Malicious code in eclipse-dorado-jsonp-gacrux (npm) (malicious package) - [MAL-2025-191829](https://insights.sbomify.com/MAL-2025-191829/): Malicious code in prof-tgqu (PyPI) (malicious package) - [MAL-2025-191828](https://insights.sbomify.com/MAL-2025-191828/): Malicious code in prof-tg-to-qu (PyPI) (malicious package) - [MAL-2025-191827](https://insights.sbomify.com/MAL-2025-191827/): Malicious code in prof-tg-go-qu (PyPI) (malicious package) - [MAL-2025-191826](https://insights.sbomify.com/MAL-2025-191826/): Malicious code in prof-tg-gjho-qu (PyPI) (malicious package) - [MAL-2025-191825](https://insights.sbomify.com/MAL-2025-191825/): Malicious code in prof-tg-gdghho-qu (PyPI) (malicious package) - [MAL-2025-191824](https://insights.sbomify.com/MAL-2025-191824/): Malicious code in prof-tg-dooorto-qu (PyPI) (malicious package) - [MAL-2025-191823](https://insights.sbomify.com/MAL-2025-191823/): Malicious code in prof-tg-dggrto-qu (PyPI) (malicious package) - [MAL-2025-191822](https://insights.sbomify.com/MAL-2025-191822/): Malicious code in prof-qx (PyPI) (malicious package) - [MAL-2025-191821](https://insights.sbomify.com/MAL-2025-191821/): Malicious code in prof-qux (PyPI) (malicious package) - [MAL-2025-191820](https://insights.sbomify.com/MAL-2025-191820/): Malicious code in prof-quotex (PyPI) (malicious package) - [MAL-2025-19182](https://insights.sbomify.com/MAL-2025-19182/): Malicious code in eclinical-auth (npm) (malicious package) - [MAL-2025-191819](https://insights.sbomify.com/MAL-2025-191819/): Malicious code in prof-qu (PyPI) (malicious package) - [MAL-2025-191818](https://insights.sbomify.com/MAL-2025-191818/): Malicious code in prmduc193 (PyPI) (malicious package) - [MAL-2025-191817](https://insights.sbomify.com/MAL-2025-191817/): Malicious code in private-evolution (PyPI) (malicious package) - [MAL-2025-191816](https://insights.sbomify.com/MAL-2025-191816/): Malicious code in pretty-cli-logger (PyPI) (malicious package) - [MAL-2025-191815](https://insights.sbomify.com/MAL-2025-191815/): Malicious code in pokemon-app-sdk (PyPI) (malicious package) - [MAL-2025-191814](https://insights.sbomify.com/MAL-2025-191814/): Malicious code in perfviewer (PyPI) (malicious package) - [MAL-2025-191813](https://insights.sbomify.com/MAL-2025-191813/): Malicious code in peptest2 (PyPI) (malicious package) - [MAL-2025-191812](https://insights.sbomify.com/MAL-2025-191812/): Malicious code in peptest (PyPI) (malicious package) - [MAL-2025-191811](https://insights.sbomify.com/MAL-2025-191811/): Malicious code in paradox-pydevdeps (PyPI) (malicious package) - [MAL-2025-191810](https://insights.sbomify.com/MAL-2025-191810/): Malicious code in pam98wyfupa98w (PyPI) (malicious package) - [MAL-2025-19181](https://insights.sbomify.com/MAL-2025-19181/): Malicious code in ecilop (npm) (malicious package) - [MAL-2025-191809](https://insights.sbomify.com/MAL-2025-191809/): Malicious code in packed-w3shi (PyPI) (malicious package) - [MAL-2025-191808](https://insights.sbomify.com/MAL-2025-191808/): Malicious code in package-resources (PyPI) (malicious package) - [MAL-2025-191807](https://insights.sbomify.com/MAL-2025-191807/): Malicious code in package-346234294 (PyPI) (malicious package) - [MAL-2025-191806](https://insights.sbomify.com/MAL-2025-191806/): Malicious code in onnxruntime-winml (PyPI) (malicious package) - [MAL-2025-191805](https://insights.sbomify.com/MAL-2025-191805/): Malicious code in nspacercesolve (PyPI) (malicious package) - [MAL-2025-191804](https://insights.sbomify.com/MAL-2025-191804/): Malicious code in notary-client (PyPI) (malicious package) - [MAL-2025-191803](https://insights.sbomify.com/MAL-2025-191803/): Malicious code in network-utils-simple (PyPI) (malicious package) - [MAL-2025-191802](https://insights.sbomify.com/MAL-2025-191802/): Malicious code in netmanagement (PyPI) (malicious package) - [MAL-2025-191801](https://insights.sbomify.com/MAL-2025-191801/): Malicious code in neov (PyPI) (malicious package) - [MAL-2025-191800](https://insights.sbomify.com/MAL-2025-191800/): Malicious code in nayzakishere (PyPI) (malicious package) - [MAL-2025-19180](https://insights.sbomify.com/MAL-2025-19180/): Malicious code in ecidemo (npm) (malicious package) - [MAL-2025-1918](https://insights.sbomify.com/MAL-2025-1918/): Malicious code in react-redux-v8 (npm) (malicious package) - [MAL-2025-191799](https://insights.sbomify.com/MAL-2025-191799/): Malicious code in mzip (PyPI) (malicious package) - [MAL-2025-191798](https://insights.sbomify.com/MAL-2025-191798/): Malicious code in multithreadedexecution (PyPI) (malicious package) - [MAL-2025-191797](https://insights.sbomify.com/MAL-2025-191797/): Malicious code in multis (PyPI) (malicious package) - [MAL-2025-191796](https://insights.sbomify.com/MAL-2025-191796/): Malicious code in mulaptested-pakname (PyPI) (malicious package) - [MAL-2025-191795](https://insights.sbomify.com/MAL-2025-191795/): Malicious code in morosint (PyPI) (malicious package) - [MAL-2025-191794](https://insights.sbomify.com/MAL-2025-191794/): Malicious code in mongland (PyPI) (malicious package) - [MAL-2025-191793](https://insights.sbomify.com/MAL-2025-191793/): Malicious code in missing-module (PyPI) (malicious package) - [MAL-2025-191792](https://insights.sbomify.com/MAL-2025-191792/): Malicious code in minizip (PyPI) (malicious package) - [MAL-2025-191791](https://insights.sbomify.com/MAL-2025-191791/): Malicious code in minemeld-core (PyPI) (malicious package) - [MAL-2025-191790](https://insights.sbomify.com/MAL-2025-191790/): Malicious code in mescouilles (PyPI) (malicious package) - [MAL-2025-19179](https://insights.sbomify.com/MAL-2025-19179/): Malicious code in echoml (npm) (malicious package) - [MAL-2025-191789](https://insights.sbomify.com/MAL-2025-191789/): Malicious code in mcp-weather-full (PyPI) (malicious package) - [MAL-2025-191788](https://insights.sbomify.com/MAL-2025-191788/): Malicious code in mcp-runcmd-server (PyPI) (malicious package) - [MAL-2025-191787](https://insights.sbomify.com/MAL-2025-191787/): Malicious code in matplotliv (PyPI) (malicious package) - [MAL-2025-191786](https://insights.sbomify.com/MAL-2025-191786/): Malicious code in matplotlibe (PyPI) (malicious package) - [MAL-2025-191785](https://insights.sbomify.com/MAL-2025-191785/): Malicious code in matlab-cli (PyPI) (malicious package) - [MAL-2025-191784](https://insights.sbomify.com/MAL-2025-191784/): Malicious code in loquru (PyPI) (malicious package) - [MAL-2025-191783](https://insights.sbomify.com/MAL-2025-191783/): Malicious code in logguru (PyPI) (malicious package) - [MAL-2025-191782](https://insights.sbomify.com/MAL-2025-191782/): Malicious code in loggerex (PyPI) (malicious package) - [MAL-2025-191781](https://insights.sbomify.com/MAL-2025-191781/): Malicious code in lightgboost (PyPI) (malicious package) - [MAL-2025-191780](https://insights.sbomify.com/MAL-2025-191780/): Malicious code in libopenblas (PyPI) (malicious package) - [MAL-2025-19178](https://insights.sbomify.com/MAL-2025-19178/): Malicious code in echo_z2v9o_yjo47_vantage (npm) (malicious package) - [MAL-2025-191779](https://insights.sbomify.com/MAL-2025-191779/): Malicious code in lazmat (PyPI) (malicious package) - [MAL-2025-191778](https://insights.sbomify.com/MAL-2025-191778/): Malicious code in kraken123 (PyPI) (malicious package) - [MAL-2025-191777](https://insights.sbomify.com/MAL-2025-191777/): Malicious code in klsosdoids5 (PyPI) (malicious package) - [MAL-2025-191776](https://insights.sbomify.com/MAL-2025-191776/): Malicious code in klsosdoids2 (PyPI) (malicious package) - [MAL-2025-191775](https://insights.sbomify.com/MAL-2025-191775/): Malicious code in kingwork-test (PyPI) (malicious package) - [MAL-2025-191774](https://insights.sbomify.com/MAL-2025-191774/): Malicious code in kertash (PyPI) (malicious package) - [MAL-2025-191773](https://insights.sbomify.com/MAL-2025-191773/): Malicious code in kekovayalibka (PyPI) (malicious package) - [MAL-2025-191772](https://insights.sbomify.com/MAL-2025-191772/): Malicious code in kdewebhelper (PyPI) (malicious package) - [MAL-2025-191771](https://insights.sbomify.com/MAL-2025-191771/): Malicious code in jython-file (PyPI) (malicious package) - [MAL-2025-191770](https://insights.sbomify.com/MAL-2025-191770/): Malicious code in just-framework (PyPI) (malicious package) - [MAL-2025-19177](https://insights.sbomify.com/MAL-2025-19177/): Malicious code in echo_o3b0s_3jeij_bluebird (npm) (malicious package) - [MAL-2025-191769](https://insights.sbomify.com/MAL-2025-191769/): Malicious code in jsonschemex (PyPI) (malicious package) - [MAL-2025-191768](https://insights.sbomify.com/MAL-2025-191768/): Malicious code in jsonreq-ase (PyPI) (malicious package) - [MAL-2025-191767](https://insights.sbomify.com/MAL-2025-191767/): Malicious code in jsonist (PyPI) (malicious package) - [MAL-2025-191766](https://insights.sbomify.com/MAL-2025-191766/): Malicious code in inkpy-jinja (PyPI) (malicious package) - [MAL-2025-191765](https://insights.sbomify.com/MAL-2025-191765/): Malicious code in import-license-checker (PyPI) (malicious package) - [MAL-2025-191764](https://insights.sbomify.com/MAL-2025-191764/): Malicious code in imad213tools (PyPI) (malicious package) - [MAL-2025-191763](https://insights.sbomify.com/MAL-2025-191763/): Malicious code in hyper-request (PyPI) (malicious package) - [MAL-2025-191762](https://insights.sbomify.com/MAL-2025-191762/): Malicious code in huzzleup (PyPI) (malicious package) - [MAL-2025-191761](https://insights.sbomify.com/MAL-2025-191761/): Malicious code in hooktest3 (PyPI) (malicious package) - [MAL-2025-191760](https://insights.sbomify.com/MAL-2025-191760/): Malicious code in hooktest1 (PyPI) (malicious package) - [MAL-2025-19176](https://insights.sbomify.com/MAL-2025-19176/): Malicious code in echo_lnyqf_s1ry2_banyan (npm) (malicious package) - [MAL-2025-191759](https://insights.sbomify.com/MAL-2025-191759/): Malicious code in hkmat (PyPI) (malicious package) - [MAL-2025-191758](https://insights.sbomify.com/MAL-2025-191758/): Malicious code in hexdecnet (PyPI) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/912/