# Vulnerabilities published in 2025


- [MAL-2025-191667](https://insights.sbomify.com/MAL-2025-191667/): Malicious code in pg_result_init (RubyGems) (malicious package)
- [MAL-2025-191666](https://insights.sbomify.com/MAL-2025-191666/): Malicious code in yelp-pkg (PyPI) (malicious package)
- [MAL-2025-191665](https://insights.sbomify.com/MAL-2025-191665/): Malicious code in windowsrequir (PyPI) (malicious package)
- [MAL-2025-191664](https://insights.sbomify.com/MAL-2025-191664/): Malicious code in unclesky5910 (PyPI) (malicious package)
- [MAL-2025-191663](https://insights.sbomify.com/MAL-2025-191663/): Malicious code in syschecker (PyPI) (malicious package)
- [MAL-2025-191662](https://insights.sbomify.com/MAL-2025-191662/): Malicious code in starexx (PyPI) (malicious package)
- [MAL-2025-191661](https://insights.sbomify.com/MAL-2025-191661/): Malicious code in smart-scheduler (PyPI) (malicious package)
- [MAL-2025-191660](https://insights.sbomify.com/MAL-2025-191660/): Malicious code in rsa2026 (PyPI) (malicious package)
- [MAL-2025-19166](https://insights.sbomify.com/MAL-2025-19166/): Malicious code in echo-wqs-project (npm) (malicious package)
- [MAL-2025-191659](https://insights.sbomify.com/MAL-2025-191659/): Malicious code in rizco09 (PyPI) (malicious package)
- [MAL-2025-191658](https://insights.sbomify.com/MAL-2025-191658/): Malicious code in richx (PyPI) (malicious package)
- [MAL-2025-191657](https://insights.sbomify.com/MAL-2025-191657/): Malicious code in requests-os (PyPI) (malicious package)
- [MAL-2025-191656](https://insights.sbomify.com/MAL-2025-191656/): Malicious code in realstarexx (PyPI) (malicious package)
- [MAL-2025-191655](https://insights.sbomify.com/MAL-2025-191655/): Malicious code in rando0192490 (PyPI) (malicious package)
- [MAL-2025-191654](https://insights.sbomify.com/MAL-2025-191654/): Malicious code in pygments-richstyle (PyPI) (malicious package)
- [MAL-2025-191653](https://insights.sbomify.com/MAL-2025-191653/): Malicious code in ptxcompiler (PyPI) (malicious package)
- [MAL-2025-191652](https://insights.sbomify.com/MAL-2025-191652/): Malicious code in poc-suppentest (PyPI) (malicious package)
- [MAL-2025-191651](https://insights.sbomify.com/MAL-2025-191651/): Malicious code in my-first-pypi-demo (PyPI) (malicious package)
- [MAL-2025-191650](https://insights.sbomify.com/MAL-2025-191650/): Malicious code in musl-dev (PyPI) (malicious package)
- [MAL-2025-19165](https://insights.sbomify.com/MAL-2025-19165/): Malicious code in echo-vtyi3-ci5xr-quill-project (npm) (malicious package)
- [MAL-2025-191649](https://insights.sbomify.com/MAL-2025-191649/): Malicious code in md5-en (PyPI) (malicious package)
- [MAL-2025-191648](https://insights.sbomify.com/MAL-2025-191648/): Malicious code in mcp-runcommand-server2 (PyPI) (malicious package)
- [MAL-2025-191647](https://insights.sbomify.com/MAL-2025-191647/): Malicious code in mcp-runcommand-server (PyPI) (malicious package)
- [MAL-2025-191646](https://insights.sbomify.com/MAL-2025-191646/): Malicious code in makronlox (PyPI) (malicious package)
- [MAL-2025-191645](https://insights.sbomify.com/MAL-2025-191645/): Malicious code in libtasnl (PyPI) (malicious package)
- [MAL-2025-191644](https://insights.sbomify.com/MAL-2025-191644/): Malicious code in lbank-connector-pythons (PyPI) (malicious package)
- [MAL-2025-191643](https://insights.sbomify.com/MAL-2025-191643/): Malicious code in krisp-audio (PyPI) (malicious package)
- [MAL-2025-191642](https://insights.sbomify.com/MAL-2025-191642/): Malicious code in kirux189894 (PyPI) (malicious package)
- [MAL-2025-191641](https://insights.sbomify.com/MAL-2025-191641/): Malicious code in installyoura (PyPI) (malicious package)
- [MAL-2025-191640](https://insights.sbomify.com/MAL-2025-191640/): Malicious code in install-all-setup (PyPI) (malicious package)
- [MAL-2025-19164](https://insights.sbomify.com/MAL-2025-19164/): Malicious code in echo-vanilla-watermelon-iewpq (npm) (malicious package)
- [MAL-2025-191639](https://insights.sbomify.com/MAL-2025-191639/): Malicious code in imad213insta (PyPI) (malicious package)
- [MAL-2025-191638](https://insights.sbomify.com/MAL-2025-191638/): Malicious code in huzzleuo130 (PyPI) (malicious package)
- [MAL-2025-191637](https://insights.sbomify.com/MAL-2025-191637/): Malicious code in humunculous5910145 (PyPI) (malicious package)
- [MAL-2025-191636](https://insights.sbomify.com/MAL-2025-191636/): Malicious code in humunculous591014 (PyPI) (malicious package)
- [MAL-2025-191635](https://insights.sbomify.com/MAL-2025-191635/): Malicious code in humunculous59101 (PyPI) (malicious package)
- [MAL-2025-191634](https://insights.sbomify.com/MAL-2025-191634/): Malicious code in humunculous5910 (PyPI) (malicious package)
- [MAL-2025-191633](https://insights.sbomify.com/MAL-2025-191633/): Malicious code in humunaiodio2443 (PyPI) (malicious package)
- [MAL-2025-191632](https://insights.sbomify.com/MAL-2025-191632/): Malicious code in httpserver-cache (PyPI) (malicious package)
- [MAL-2025-191631](https://insights.sbomify.com/MAL-2025-191631/): Malicious code in hexdecpy (PyPI) (malicious package)
- [MAL-2025-191630](https://insights.sbomify.com/MAL-2025-191630/): Malicious code in hexdecli (PyPI) (malicious package)
- [MAL-2025-19163](https://insights.sbomify.com/MAL-2025-19163/): Malicious code in echo-us9-project (npm) (malicious package)
- [MAL-2025-191629](https://insights.sbomify.com/MAL-2025-191629/): Malicious code in hexdec (PyPI) (malicious package)
- [MAL-2025-191628](https://insights.sbomify.com/MAL-2025-191628/): Malicious code in hamurico (PyPI) (malicious package)
- [MAL-2025-191627](https://insights.sbomify.com/MAL-2025-191627/): Malicious code in ga3fario (PyPI) (malicious package)
- [MAL-2025-191626](https://insights.sbomify.com/MAL-2025-191626/): Malicious code in ga3farifo (PyPI) (malicious package)
- [MAL-2025-191625](https://insights.sbomify.com/MAL-2025-191625/): Malicious code in faker-py123123thon (PyPI) (malicious package)
- [MAL-2025-191624](https://insights.sbomify.com/MAL-2025-191624/): Malicious code in ethaddrlib (PyPI) (malicious package)
- [MAL-2025-191623](https://insights.sbomify.com/MAL-2025-191623/): Malicious code in egarcia-poc (PyPI) (malicious package)
- [MAL-2025-191622](https://insights.sbomify.com/MAL-2025-191622/): Malicious code in donotinstall (PyPI) (malicious package)
- [MAL-2025-191621](https://insights.sbomify.com/MAL-2025-191621/): Malicious code in cheezokdi10 (PyPI) (malicious package)
- [MAL-2025-191620](https://insights.sbomify.com/MAL-2025-191620/): Malicious code in benign-lib (PyPI) (malicious package)
- [MAL-2025-19162](https://insights.sbomify.com/MAL-2025-19162/): Malicious code in echo-u98cz-oix2f-tranquil-project (npm) (malicious package)
- [MAL-2025-191619](https://insights.sbomify.com/MAL-2025-191619/): Malicious code in asynhttp (PyPI) (malicious package)
- [MAL-2025-191618](https://insights.sbomify.com/MAL-2025-191618/): Malicious code in aiohttp-ssl (PyPI) (malicious package)
- [MAL-2025-191617](https://insights.sbomify.com/MAL-2025-191617/): Malicious code in aiohttp-openssl (PyPI) (malicious package)
- [MAL-2025-191616](https://insights.sbomify.com/MAL-2025-191616/): Malicious code in aiohappyeyeball (PyPI) (malicious package)
- [MAL-2025-191615](https://insights.sbomify.com/MAL-2025-191615/): Malicious code in solnetunified (NuGet) (malicious package)
- [MAL-2025-191614](https://insights.sbomify.com/MAL-2025-191614/): Malicious code in solnetplus (NuGet) (malicious package)
- [MAL-2025-191613](https://insights.sbomify.com/MAL-2025-191613/): Malicious code in solnetall (NuGet) (malicious package)
- [MAL-2025-191612](https://insights.sbomify.com/MAL-2025-191612/): Malicious code in solananet (NuGet) (malicious package)
- [MAL-2025-191611](https://insights.sbomify.com/MAL-2025-191611/): Malicious code in netherеum.all (NuGet) (malicious package)
- [MAL-2025-191610](https://insights.sbomify.com/MAL-2025-191610/): Malicious code in nethereumunified (NuGet) (malicious package)
- [MAL-2025-19161](https://insights.sbomify.com/MAL-2025-19161/): Malicious code in echo-tango-urrv (npm) (malicious package)
- [MAL-2025-191609](https://insights.sbomify.com/MAL-2025-191609/): Malicious code in nbitcoin.unified (NuGet) (malicious package)
- [MAL-2025-191608](https://insights.sbomify.com/MAL-2025-191608/): Malicious code in googleads.api (NuGet) (malicious package)
- [MAL-2025-191607](https://insights.sbomify.com/MAL-2025-191607/): Malicious code in coinbase.net.api (NuGet) (malicious package)
- [MAL-2025-191606](https://insights.sbomify.com/MAL-2025-191606/): Malicious code in bybitapi.net (NuGet) (malicious package)
- [MAL-2025-191605](https://insights.sbomify.com/MAL-2025-191605/): Malicious code in bitcoincore (NuGet) (malicious package)
- [MAL-2025-191604](https://insights.sbomify.com/MAL-2025-191604/): Malicious code in binance.csharp (NuGet) (malicious package)
- [MAL-2025-191603](https://insights.sbomify.com/MAL-2025-191603/): Malicious code in xmenddddl (npm) (malicious package)
- [MAL-2025-191602](https://insights.sbomify.com/MAL-2025-191602/): Malicious code in web-uj65mn (npm) (malicious package)
- [MAL-2025-191601](https://insights.sbomify.com/MAL-2025-191601/): Malicious code in web-nbq6lx (npm) (malicious package)
- [MAL-2025-191600](https://insights.sbomify.com/MAL-2025-191600/): Malicious code in vite-dynamic-chunks (npm) (malicious package)
- [MAL-2025-19160](https://insights.sbomify.com/MAL-2025-19160/): Malicious code in echo-tango-eoqj (npm) (malicious package)
- [MAL-2025-1916](https://insights.sbomify.com/MAL-2025-1916/): Malicious code in rallyslack (npm) (malicious package)
- [MAL-2025-191599](https://insights.sbomify.com/MAL-2025-191599/): Malicious code in vbails (npm) (malicious package)
- [MAL-2025-191598](https://insights.sbomify.com/MAL-2025-191598/): Malicious code in test-dependency-confusion-g3ksec (npm) (malicious package)
- [MAL-2025-191597](https://insights.sbomify.com/MAL-2025-191597/): Malicious code in tensor-fi-crypto-utils (npm) (malicious package)
- [MAL-2025-191596](https://insights.sbomify.com/MAL-2025-191596/): Malicious code in telegram-api-test (npm) (malicious package)
- [MAL-2025-191595](https://insights.sbomify.com/MAL-2025-191595/): Malicious code in tailwindcss-forms (npm) (malicious package)
- [MAL-2025-191594](https://insights.sbomify.com/MAL-2025-191594/): Malicious code in tailwind-style-override (npm) (malicious package)
- [MAL-2025-191593](https://insights.sbomify.com/MAL-2025-191593/): Malicious code in tailwind-state (npm) (malicious package)
- [MAL-2025-191592](https://insights.sbomify.com/MAL-2025-191592/): Malicious code in szsec-infoss-report (npm) (malicious package)
- [MAL-2025-191591](https://insights.sbomify.com/MAL-2025-191591/): Malicious code in szsec-infos-report-wh2sper (npm) (malicious package)
- [MAL-2025-191590](https://insights.sbomify.com/MAL-2025-191590/): Malicious code in szsec-infos-report-wh1sper (npm) (malicious package)
- [MAL-2025-19159](https://insights.sbomify.com/MAL-2025-19159/): Malicious code in echo-tangerine-raspberry-srhxp (npm) (malicious package)
- [MAL-2025-191589](https://insights.sbomify.com/MAL-2025-191589/): Malicious code in szsec-info-report (npm) (malicious package)
- [MAL-2025-191588](https://insights.sbomify.com/MAL-2025-191588/): Malicious code in stringify-coder (npm) (malicious package)
- [MAL-2025-191587](https://insights.sbomify.com/MAL-2025-191587/): Malicious code in sing-fest-es-logger (npm) (malicious package)
- [MAL-2025-191586](https://insights.sbomify.com/MAL-2025-191586/): Malicious code in session-validate (npm) (malicious package)
- [MAL-2025-191585](https://insights.sbomify.com/MAL-2025-191585/): Malicious code in revit-to-ifc-scheduler (npm) (malicious package)
- [MAL-2025-191584](https://insights.sbomify.com/MAL-2025-191584/): Malicious code in redirect-clrm2u (npm) (malicious package)
- [MAL-2025-191583](https://insights.sbomify.com/MAL-2025-191583/): Malicious code in redirect-5k9q5v (npm) (malicious package)
- [MAL-2025-191582](https://insights.sbomify.com/MAL-2025-191582/): Malicious code in react-mandes (npm) (malicious package)
- [MAL-2025-191581](https://insights.sbomify.com/MAL-2025-191581/): Malicious code in react-adparser (npm) (malicious package)
- [MAL-2025-191580](https://insights.sbomify.com/MAL-2025-191580/): Malicious code in pixel-bloom (npm) (malicious package)
- [MAL-2025-19158](https://insights.sbomify.com/MAL-2025-19158/): Malicious code in echo-tangerine-jmah (npm) (malicious package)
- [MAL-2025-191579](https://insights.sbomify.com/MAL-2025-191579/): Malicious code in lbank-connector-nodejs (npm) (malicious package)
- [MAL-2025-191578](https://insights.sbomify.com/MAL-2025-191578/): Malicious code in lbank-connector (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/914/