# Vulnerabilities published in 2025 - [MAL-2025-191757](https://insights.sbomify.com/MAL-2025-191757/): Malicious code in hexdeclink (PyPI) (malicious package) - [MAL-2025-191756](https://insights.sbomify.com/MAL-2025-191756/): Malicious code in hexdecimal (PyPI) (malicious package) - [MAL-2025-191755](https://insights.sbomify.com/MAL-2025-191755/): Malicious code in hexcon (PyPI) (malicious package) - [MAL-2025-191754](https://insights.sbomify.com/MAL-2025-191754/): Malicious code in hexadecpy (PyPI) (malicious package) - [MAL-2025-191753](https://insights.sbomify.com/MAL-2025-191753/): Malicious code in hexadec (PyPI) (malicious package) - [MAL-2025-191752](https://insights.sbomify.com/MAL-2025-191752/): Malicious code in helmet-fastapi (PyPI) (malicious package) - [MAL-2025-191751](https://insights.sbomify.com/MAL-2025-191751/): Malicious code in hello-from-shiphero (PyPI) (malicious package) - [MAL-2025-191750](https://insights.sbomify.com/MAL-2025-191750/): Malicious code in hekamhelp (PyPI) (malicious package) - [MAL-2025-19175](https://insights.sbomify.com/MAL-2025-19175/): Malicious code in echo_bc67m_cf5am_fern (npm) (malicious package) - [MAL-2025-191749](https://insights.sbomify.com/MAL-2025-191749/): Malicious code in hashstation (PyPI) (malicious package) - [MAL-2025-191748](https://insights.sbomify.com/MAL-2025-191748/): Malicious code in hancsv (PyPI) (malicious package) - [MAL-2025-191747](https://insights.sbomify.com/MAL-2025-191747/): Malicious code in hamubika (PyPI) (malicious package) - [MAL-2025-191746](https://insights.sbomify.com/MAL-2025-191746/): Malicious code in hahabott (PyPI) (malicious package) - [MAL-2025-191745](https://insights.sbomify.com/MAL-2025-191745/): Malicious code in gtts-lts (PyPI) (malicious package) - [MAL-2025-191744](https://insights.sbomify.com/MAL-2025-191744/): Malicious code in gradio-videotimeline (PyPI) (malicious package) - [MAL-2025-191743](https://insights.sbomify.com/MAL-2025-191743/): Malicious code in gpu-free-ai (PyPI) (malicious package) - [MAL-2025-191742](https://insights.sbomify.com/MAL-2025-191742/): Malicious code in gptall (PyPI) (malicious package) - [MAL-2025-191741](https://insights.sbomify.com/MAL-2025-191741/): Malicious code in google-cloud-iam-credentials (PyPI) (malicious package) - [MAL-2025-191740](https://insights.sbomify.com/MAL-2025-191740/): Malicious code in gnosis-py (PyPI) (malicious package) - [MAL-2025-19174](https://insights.sbomify.com/MAL-2025-19174/): Malicious code in echo_4fiuf_asywl_mystic (npm) (malicious package) - [MAL-2025-191739](https://insights.sbomify.com/MAL-2025-191739/): Malicious code in giteegit (PyPI) (malicious package) - [MAL-2025-191738](https://insights.sbomify.com/MAL-2025-191738/): Malicious code in getpublicip (PyPI) (malicious package) - [MAL-2025-191737](https://insights.sbomify.com/MAL-2025-191737/): Malicious code in gclient-eval (PyPI) (malicious package) - [MAL-2025-191736](https://insights.sbomify.com/MAL-2025-191736/): Malicious code in fuckyoubitchbro (PyPI) (malicious package) - [MAL-2025-191735](https://insights.sbomify.com/MAL-2025-191735/): Malicious code in fromwherebitch (PyPI) (malicious package) - [MAL-2025-191734](https://insights.sbomify.com/MAL-2025-191734/): Malicious code in freelabs (PyPI) (malicious package) - [MAL-2025-191733](https://insights.sbomify.com/MAL-2025-191733/): Malicious code in fonafx (PyPI) (malicious package) - [MAL-2025-191732](https://insights.sbomify.com/MAL-2025-191732/): Malicious code in flask-tdg-cyberx (PyPI) (malicious package) - [MAL-2025-191731](https://insights.sbomify.com/MAL-2025-191731/): Malicious code in flask-auth-system (PyPI) (malicious package) - [MAL-2025-191730](https://insights.sbomify.com/MAL-2025-191730/): Malicious code in flask-auth-sys (PyPI) (malicious package) - [MAL-2025-19173](https://insights.sbomify.com/MAL-2025-19173/): Malicious code in echo_0uy0j_pyafj_tempest (npm) (malicious package) - [MAL-2025-191729](https://insights.sbomify.com/MAL-2025-191729/): Malicious code in flashsimplelogger (PyPI) (malicious package) - [MAL-2025-191728](https://insights.sbomify.com/MAL-2025-191728/): Malicious code in fernets (PyPI) (malicious package) - [MAL-2025-191727](https://insights.sbomify.com/MAL-2025-191727/): Malicious code in fenomenallib (PyPI) (malicious package) - [MAL-2025-191726](https://insights.sbomify.com/MAL-2025-191726/): Malicious code in feature-gen-dt (PyPI) (malicious package) - [MAL-2025-191725](https://insights.sbomify.com/MAL-2025-191725/): Malicious code in fb303-core (PyPI) (malicious package) - [MAL-2025-191724](https://insights.sbomify.com/MAL-2025-191724/): Malicious code in fastgram (PyPI) (malicious package) - [MAL-2025-191723](https://insights.sbomify.com/MAL-2025-191723/): Malicious code in fastertelethon (PyPI) (malicious package) - [MAL-2025-191722](https://insights.sbomify.com/MAL-2025-191722/): Malicious code in evil-py-argo-shell (PyPI) (malicious package) - [MAL-2025-191721](https://insights.sbomify.com/MAL-2025-191721/): Malicious code in enumer-iam (PyPI) (malicious package) - [MAL-2025-191720](https://insights.sbomify.com/MAL-2025-191720/): Malicious code in djangoframework-test (PyPI) (malicious package) - [MAL-2025-19172](https://insights.sbomify.com/MAL-2025-19172/): Malicious code in echo-ys9b7-9cg2s-frost-project (npm) (malicious package) - [MAL-2025-191719](https://insights.sbomify.com/MAL-2025-191719/): Malicious code in discordhelper-ecr (PyPI) (malicious package) - [MAL-2025-191718](https://insights.sbomify.com/MAL-2025-191718/): Malicious code in discord-selfsbotsx (PyPI) (malicious package) - [MAL-2025-191717](https://insights.sbomify.com/MAL-2025-191717/): Malicious code in dev-server-python (PyPI) (malicious package) - [MAL-2025-191716](https://insights.sbomify.com/MAL-2025-191716/): Malicious code in denomenallib (PyPI) (malicious package) - [MAL-2025-191715](https://insights.sbomify.com/MAL-2025-191715/): Malicious code in dcbotoffline3 (PyPI) (malicious package) - [MAL-2025-191714](https://insights.sbomify.com/MAL-2025-191714/): Malicious code in dcbot-online (PyPI) (malicious package) - [MAL-2025-191713](https://insights.sbomify.com/MAL-2025-191713/): Malicious code in db-aggregator-api (PyPI) (malicious package) - [MAL-2025-191712](https://insights.sbomify.com/MAL-2025-191712/): Malicious code in d1snakegame (PyPI) (malicious package) - [MAL-2025-191711](https://insights.sbomify.com/MAL-2025-191711/): Malicious code in d1n0exploitaaaa (PyPI) (malicious package) - [MAL-2025-191710](https://insights.sbomify.com/MAL-2025-191710/): Malicious code in d1n0-exploit-aaaa (PyPI) (malicious package) - [MAL-2025-19171](https://insights.sbomify.com/MAL-2025-19171/): Malicious code in echo-ydc-project (npm) (malicious package) - [MAL-2025-191709](https://insights.sbomify.com/MAL-2025-191709/): Malicious code in cti-ctf-challenges (PyPI) (malicious package) - [MAL-2025-191708](https://insights.sbomify.com/MAL-2025-191708/): Malicious code in crto5 (PyPI) (malicious package) - [MAL-2025-191707](https://insights.sbomify.com/MAL-2025-191707/): Malicious code in crpt (PyPI) (malicious package) - [MAL-2025-191706](https://insights.sbomify.com/MAL-2025-191706/): Malicious code in conn-utils (PyPI) (malicious package) - [MAL-2025-191705](https://insights.sbomify.com/MAL-2025-191705/): Malicious code in computestpspeedcompcomp (PyPI) (malicious package) - [MAL-2025-191704](https://insights.sbomify.com/MAL-2025-191704/): Malicious code in computestpspeedcomp (PyPI) (malicious package) - [MAL-2025-191703](https://insights.sbomify.com/MAL-2025-191703/): Malicious code in compute-st-speed (PyPI) (malicious package) - [MAL-2025-191702](https://insights.sbomify.com/MAL-2025-191702/): Malicious code in chromifypro (PyPI) (malicious package) - [MAL-2025-191701](https://insights.sbomify.com/MAL-2025-191701/): Malicious code in chimera-sandbox-extensions (PyPI) (malicious package) - [MAL-2025-191700](https://insights.sbomify.com/MAL-2025-191700/): Malicious code in chicopute (PyPI) (malicious package) - [MAL-2025-19170](https://insights.sbomify.com/MAL-2025-19170/): Malicious code in echo-yankee-nvpu (npm) (malicious package) - [MAL-2025-1917](https://insights.sbomify.com/MAL-2025-1917/): Malicious code in react-dom-v18 (npm) (malicious package) - [MAL-2025-191699](https://insights.sbomify.com/MAL-2025-191699/): Malicious code in chat-prompt-logger (PyPI) (malicious package) - [MAL-2025-191698](https://insights.sbomify.com/MAL-2025-191698/): Malicious code in callistopy (PyPI) (malicious package) - [MAL-2025-191697](https://insights.sbomify.com/MAL-2025-191697/): Malicious code in caas-jupyter-tools (PyPI) (malicious package) - [MAL-2025-191696](https://insights.sbomify.com/MAL-2025-191696/): Malicious code in browser-run (PyPI) (malicious package) - [MAL-2025-191695](https://insights.sbomify.com/MAL-2025-191695/): Malicious code in browser-history-analytics (PyPI) (malicious package) - [MAL-2025-191694](https://insights.sbomify.com/MAL-2025-191694/): Malicious code in bprintoor (PyPI) (malicious package) - [MAL-2025-191693](https://insights.sbomify.com/MAL-2025-191693/): Malicious code in bprinter (PyPI) (malicious package) - [MAL-2025-191692](https://insights.sbomify.com/MAL-2025-191692/): Malicious code in bh-usa-req-ase (PyPI) (malicious package) - [MAL-2025-191691](https://insights.sbomify.com/MAL-2025-191691/): Malicious code in bh-usa-automate-req-ase (PyPI) (malicious package) - [MAL-2025-191690](https://insights.sbomify.com/MAL-2025-191690/): Malicious code in bh-25-req-ase (PyPI) (malicious package) - [MAL-2025-19169](https://insights.sbomify.com/MAL-2025-19169/): Malicious code in echo-yam-ykry (npm) (malicious package) - [MAL-2025-191689](https://insights.sbomify.com/MAL-2025-191689/): Malicious code in backtradingbot (PyPI) (malicious package) - [MAL-2025-191688](https://insights.sbomify.com/MAL-2025-191688/): Malicious code in axonify (PyPI) (malicious package) - [MAL-2025-191687](https://insights.sbomify.com/MAL-2025-191687/): Malicious code in awscloud-clients-core (PyPI) (malicious package) - [MAL-2025-191686](https://insights.sbomify.com/MAL-2025-191686/): Malicious code in aws-enumerateiam (PyPI) (malicious package) - [MAL-2025-191685](https://insights.sbomify.com/MAL-2025-191685/): Malicious code in avatar-handler (PyPI) (malicious package) - [MAL-2025-191684](https://insights.sbomify.com/MAL-2025-191684/): Malicious code in ase-jreq (PyPI) (malicious package) - [MAL-2025-191683](https://insights.sbomify.com/MAL-2025-191683/): Malicious code in aphorism-lib (PyPI) (malicious package) - [MAL-2025-191682](https://insights.sbomify.com/MAL-2025-191682/): Malicious code in aounitaounit2 (PyPI) (malicious package) - [MAL-2025-191681](https://insights.sbomify.com/MAL-2025-191681/): Malicious code in anothertestproject (PyPI) (malicious package) - [MAL-2025-191680](https://insights.sbomify.com/MAL-2025-191680/): Malicious code in amzn-sagemaker-studio (PyPI) (malicious package) - [MAL-2025-19168](https://insights.sbomify.com/MAL-2025-19168/): Malicious code in echo-xray-quince-tddjm (npm) (malicious package) - [MAL-2025-191679](https://insights.sbomify.com/MAL-2025-191679/): Malicious code in amzclients-sdk (PyPI) (malicious package) - [MAL-2025-191678](https://insights.sbomify.com/MAL-2025-191678/): Malicious code in amd-taichi (PyPI) (malicious package) - [MAL-2025-191677](https://insights.sbomify.com/MAL-2025-191677/): Malicious code in alicloud-client-sdk (PyPI) (malicious package) - [MAL-2025-191676](https://insights.sbomify.com/MAL-2025-191676/): Malicious code in alicloud-client (PyPI) (malicious package) - [MAL-2025-191675](https://insights.sbomify.com/MAL-2025-191675/): Malicious code in aiostreams (PyPI) (malicious package) - [MAL-2025-191674](https://insights.sbomify.com/MAL-2025-191674/): Malicious code in aiogram-msgeffect (PyPI) (malicious package) - [MAL-2025-191673](https://insights.sbomify.com/MAL-2025-191673/): Malicious code in acloud-clients (PyPI) (malicious package) - [MAL-2025-191672](https://insights.sbomify.com/MAL-2025-191672/): Malicious code in acloud-client-uses (PyPI) (malicious package) - [MAL-2025-191671](https://insights.sbomify.com/MAL-2025-191671/): Malicious code in aclient-sdk (PyPI) (malicious package) - [MAL-2025-191670](https://insights.sbomify.com/MAL-2025-191670/): Malicious code in abhamzufu (PyPI) (malicious package) - [MAL-2025-19167](https://insights.sbomify.com/MAL-2025-19167/): Malicious code in echo-wzy34-gvilf-yellow-project (npm) (malicious package) - [MAL-2025-191669](https://insights.sbomify.com/MAL-2025-191669/): Malicious code in wfui-dsm-react-ui (npm) (malicious package) - [MAL-2025-191668](https://insights.sbomify.com/MAL-2025-191668/): Malicious code in wfui-dbd-react-ui (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/913/