# Vulnerabilities published in 2025


- [MAL-2025-191577](https://insights.sbomify.com/MAL-2025-191577/): Malicious code in kyjnzu (npm) (malicious package)
- [MAL-2025-191576](https://insights.sbomify.com/MAL-2025-191576/): Malicious code in jqxcore (npm) (malicious package)
- [MAL-2025-191575](https://insights.sbomify.com/MAL-2025-191575/): Malicious code in ing-ideal-acquiring-shared (npm) (malicious package)
- [MAL-2025-191574](https://insights.sbomify.com/MAL-2025-191574/): Malicious code in eslint-lodash (npm) (malicious package)
- [MAL-2025-191573](https://insights.sbomify.com/MAL-2025-191573/): Malicious code in data-noxcqn (npm) (malicious package)
- [MAL-2025-191572](https://insights.sbomify.com/MAL-2025-191572/): Malicious code in cwanner (npm) (malicious package)
- [MAL-2025-191571](https://insights.sbomify.com/MAL-2025-191571/): Malicious code in ctf2libxmljs2 (npm) (malicious package)
- [MAL-2025-191570](https://insights.sbomify.com/MAL-2025-191570/): Malicious code in core-ruw7ck (npm) (malicious package)
- [MAL-2025-19157](https://insights.sbomify.com/MAL-2025-19157/): Malicious code in echo-tangerine-bric (npm) (malicious package)
- [MAL-2025-191569](https://insights.sbomify.com/MAL-2025-191569/): Malicious code in cookie-validate (npm) (malicious package)
- [MAL-2025-191568](https://insights.sbomify.com/MAL-2025-191568/): Malicious code in client-6wr4qk (npm) (malicious package)
- [MAL-2025-191567](https://insights.sbomify.com/MAL-2025-191567/): Malicious code in chai-sync (npm) (malicious package)
- [MAL-2025-191566](https://insights.sbomify.com/MAL-2025-191566/): Malicious code in chai-promise-chain (npm) (malicious package)
- [MAL-2025-191565](https://insights.sbomify.com/MAL-2025-191565/): Malicious code in auth-1s7epg (npm) (malicious package)
- [MAL-2025-191564](https://insights.sbomify.com/MAL-2025-191564/): Malicious code in aps-simple-viewer-nodejs (npm) (malicious package)
- [MAL-2025-191563](https://insights.sbomify.com/MAL-2025-191563/): Malicious code in @ukg-oneapp/common-lib (npm) (malicious package)
- [MAL-2025-191562](https://insights.sbomify.com/MAL-2025-191562/): Malicious code in @gr-exports/head (npm) (malicious package)
- [MAL-2025-191561](https://insights.sbomify.com/MAL-2025-191561/): Malicious code in @gr-exports/body (npm) (malicious package)
- [MAL-2025-191560](https://insights.sbomify.com/MAL-2025-191560/): Malicious code in @gr-exports/async (npm) (malicious package)
- [MAL-2025-19156](https://insights.sbomify.com/MAL-2025-19156/): Malicious code in echo-t7p-project (npm) (malicious package)
- [MAL-2025-191559](https://insights.sbomify.com/MAL-2025-191559/): Malicious code in @gr-common/async (npm) (malicious package)
- [MAL-2025-191558](https://insights.sbomify.com/MAL-2025-191558/): Malicious code in data-xabit (npm) (malicious package)
- [MAL-2025-191557](https://insights.sbomify.com/MAL-2025-191557/): Malicious code in codemirror-5 (npm) (malicious package)
- [MAL-2025-191556](https://insights.sbomify.com/MAL-2025-191556/): Malicious code in btc-transaction-helper (npm) (malicious package)
- [MAL-2025-191555](https://insights.sbomify.com/MAL-2025-191555/): Malicious code in ui-cluster-driver-otccce (npm) (malicious package)
- [MAL-2025-191554](https://insights.sbomify.com/MAL-2025-191554/): Malicious code in tensorfi-secure-hash (npm) (malicious package)
- [MAL-2025-191553](https://insights.sbomify.com/MAL-2025-191553/): Malicious code in tailwind-scrollbar-variant (npm) (malicious package)
- [MAL-2025-191552](https://insights.sbomify.com/MAL-2025-191552/): Malicious code in tailwind-scrollbar-plugin (npm) (malicious package)
- [MAL-2025-191551](https://insights.sbomify.com/MAL-2025-191551/): Malicious code in solana-dexfi-suite (npm) (malicious package)
- [MAL-2025-191550](https://insights.sbomify.com/MAL-2025-191550/): Malicious code in react-animated-glow (npm) (malicious package)
- [MAL-2025-19155](https://insights.sbomify.com/MAL-2025-19155/): Malicious code in echo-sx7-project (npm) (malicious package)
- [MAL-2025-191549](https://insights.sbomify.com/MAL-2025-191549/): Malicious code in multer-cli (npm) (malicious package)
- [MAL-2025-191548](https://insights.sbomify.com/MAL-2025-191548/): Malicious code in internallib_v881 (npm) (malicious package)
- [MAL-2025-191547](https://insights.sbomify.com/MAL-2025-191547/): Malicious code in ddos-l7 (npm) (malicious package)
- [MAL-2025-191546](https://insights.sbomify.com/MAL-2025-191546/): Malicious code in chai-status (npm) (malicious package)
- [MAL-2025-191545](https://insights.sbomify.com/MAL-2025-191545/): Malicious code in wfui-test-e2e (npm) (malicious package)
- [MAL-2025-191544](https://insights.sbomify.com/MAL-2025-191544/): Malicious code in tdspt-helper (npm) (malicious package)
- [MAL-2025-191543](https://insights.sbomify.com/MAL-2025-191543/): Malicious code in stream-xor-chain (npm) (malicious package)
- [MAL-2025-191542](https://insights.sbomify.com/MAL-2025-191542/): Malicious code in nodenetbanxsdk (npm) (malicious package)
- [MAL-2025-191541](https://insights.sbomify.com/MAL-2025-191541/): Malicious code in bignumx (npm) (malicious package)
- [MAL-2025-191540](https://insights.sbomify.com/MAL-2025-191540/): Malicious code in @shr3k/tdspt-helper-ng (npm) (malicious package)
- [MAL-2025-19154](https://insights.sbomify.com/MAL-2025-19154/): Malicious code in echo-strawberry-spog (npm) (malicious package)
- [MAL-2025-191539](https://insights.sbomify.com/MAL-2025-191539/): Malicious code in @shr3k/tdspt-helper (npm) (malicious package)
- [MAL-2025-191538](https://insights.sbomify.com/MAL-2025-191538/): Malicious code in hl-naduccio (npm) (malicious package)
- [MAL-2025-191537](https://insights.sbomify.com/MAL-2025-191537/): Malicious code in cyber-fca (npm) (malicious package)
- [MAL-2025-191536](https://insights.sbomify.com/MAL-2025-191536/): Malicious code in @wxi-dev/serverless-tsc-config (npm) (malicious package)
- [MAL-2025-191535](https://insights.sbomify.com/MAL-2025-191535/): Malicious code in tableate (PyPI) (malicious package)
- [MAL-2025-191534](https://insights.sbomify.com/MAL-2025-191534/): Malicious code in tablates (PyPI) (malicious package)
- [MAL-2025-191533](https://insights.sbomify.com/MAL-2025-191533/): Malicious code in spellcheckers (PyPI) (malicious package)
- [MAL-2025-191532](https://insights.sbomify.com/MAL-2025-191532/): Malicious code in yq-go (npm) (malicious package)
- [MAL-2025-191531](https://insights.sbomify.com/MAL-2025-191531/): Malicious code in usb_dev (npm) (malicious package)
- [MAL-2025-191530](https://insights.sbomify.com/MAL-2025-191530/): Malicious code in tilt-ui (npm) (malicious package)
- [MAL-2025-19153](https://insights.sbomify.com/MAL-2025-19153/): Malicious code in echo-skc-project (npm) (malicious package)
- [MAL-2025-191529](https://insights.sbomify.com/MAL-2025-191529/): Malicious code in terrain-sample (npm) (malicious package)
- [MAL-2025-191528](https://insights.sbomify.com/MAL-2025-191528/): Malicious code in telesis (npm) (malicious package)
- [MAL-2025-191527](https://insights.sbomify.com/MAL-2025-191527/): Malicious code in solana-dev-mcp (npm) (malicious package)
- [MAL-2025-191526](https://insights.sbomify.com/MAL-2025-191526/): Malicious code in silentcipherui (npm) (malicious package)
- [MAL-2025-191525](https://insights.sbomify.com/MAL-2025-191525/): Malicious code in ripiocoin (npm) (malicious package)
- [MAL-2025-191524](https://insights.sbomify.com/MAL-2025-191524/): Malicious code in render-stage (npm) (malicious package)
- [MAL-2025-191523](https://insights.sbomify.com/MAL-2025-191523/): Malicious code in privy-frames-v2-demo (npm) (malicious package)
- [MAL-2025-191522](https://insights.sbomify.com/MAL-2025-191522/): Malicious code in privy-farcaster-demo (npm) (malicious package)
- [MAL-2025-191521](https://insights.sbomify.com/MAL-2025-191521/): Malicious code in nova-angular-project (npm) (malicious package)
- [MAL-2025-191520](https://insights.sbomify.com/MAL-2025-191520/): Malicious code in nnc-web (npm) (malicious package)
- [MAL-2025-19152](https://insights.sbomify.com/MAL-2025-19152/): Malicious code in echo-sierra-wxlz (npm) (malicious package)
- [MAL-2025-191519](https://insights.sbomify.com/MAL-2025-191519/): Malicious code in mongodb-stitch-server-testutils (npm) (malicious package)
- [MAL-2025-191518](https://insights.sbomify.com/MAL-2025-191518/): Malicious code in mongodb-compass (npm) (malicious package)
- [MAL-2025-191517](https://insights.sbomify.com/MAL-2025-191517/): Malicious code in mongodb-atlas-cli-toc-generator (npm) (malicious package)
- [MAL-2025-191516](https://insights.sbomify.com/MAL-2025-191516/): Malicious code in markdownlint-cli2-action (npm) (malicious package)
- [MAL-2025-191515](https://insights.sbomify.com/MAL-2025-191515/): Malicious code in leafygreen-docs (npm) (malicious package)
- [MAL-2025-191514](https://insights.sbomify.com/MAL-2025-191514/): Malicious code in kubernetes-helm (npm) (malicious package)
- [MAL-2025-191513](https://insights.sbomify.com/MAL-2025-191513/): Malicious code in kubernetes-controller-tools (npm) (malicious package)
- [MAL-2025-191512](https://insights.sbomify.com/MAL-2025-191512/): Malicious code in kubebuilder (npm) (malicious package)
- [MAL-2025-191511](https://insights.sbomify.com/MAL-2025-191511/): Malicious code in iife-sample (npm) (malicious package)
- [MAL-2025-191510](https://insights.sbomify.com/MAL-2025-191510/): Malicious code in hpi-porsche-app (npm) (malicious package)
- [MAL-2025-19151](https://insights.sbomify.com/MAL-2025-19151/): Malicious code in echo-sierra-victor-pjwct (npm) (malicious package)
- [MAL-2025-191509](https://insights.sbomify.com/MAL-2025-191509/): Malicious code in debug-common (npm) (malicious package)
- [MAL-2025-191508](https://insights.sbomify.com/MAL-2025-191508/): Malicious code in dataset-view (npm) (malicious package)
- [MAL-2025-191507](https://insights.sbomify.com/MAL-2025-191507/): Malicious code in b3dtiles-sample (npm) (malicious package)
- [MAL-2025-191506](https://insights.sbomify.com/MAL-2025-191506/): Malicious code in animation-debug-app (npm) (malicious package)
- [MAL-2025-191505](https://insights.sbomify.com/MAL-2025-191505/): Malicious code in angular-promql (npm) (malicious package)
- [MAL-2025-191504](https://insights.sbomify.com/MAL-2025-191504/): Malicious code in testhaus (npm) (malicious package)
- [MAL-2025-191503](https://insights.sbomify.com/MAL-2025-191503/): Malicious code in start-internal (npm) (malicious package)
- [MAL-2025-191502](https://insights.sbomify.com/MAL-2025-191502/): Malicious code in pluxee-design-system (npm) (malicious package)
- [MAL-2025-191501](https://insights.sbomify.com/MAL-2025-191501/): Malicious code in old-hd-keyring (npm) (malicious package)
- [MAL-2025-191500](https://insights.sbomify.com/MAL-2025-191500/): Malicious code in m365-action-sdk (npm) (malicious package)
- [MAL-2025-19150](https://insights.sbomify.com/MAL-2025-19150/): Malicious code in echo-rpc-service (npm) (malicious package)
- [MAL-2025-1915](https://insights.sbomify.com/MAL-2025-1915/): Malicious code in probe-dictionary-mozilla (npm) (malicious package)
- [MAL-2025-191499](https://insights.sbomify.com/MAL-2025-191499/): Malicious code in libdebugrouter.so (npm) (malicious package)
- [MAL-2025-191498](https://insights.sbomify.com/MAL-2025-191498/): Malicious code in kmf-cookieservice (npm) (malicious package)
- [MAL-2025-191497](https://insights.sbomify.com/MAL-2025-191497/): Malicious code in handtalk-test-app (npm) (malicious package)
- [MAL-2025-191496](https://insights.sbomify.com/MAL-2025-191496/): Malicious code in @hand-talk/yotta-core (npm) (malicious package)
- [MAL-2025-191495](https://insights.sbomify.com/MAL-2025-191495/): Malicious code in @bingads-webui-clientcenter/instrumentation (npm) (malicious package)
- [MAL-2025-191494](https://insights.sbomify.com/MAL-2025-191494/): Malicious code in wds-icons (npm) (malicious package)
- [MAL-2025-191493](https://insights.sbomify.com/MAL-2025-191493/): Malicious code in 7715-permissions-shared (npm) (malicious package)
- [MAL-2025-191492](https://insights.sbomify.com/MAL-2025-191492/): Malicious code in umap-wasm (npm) (malicious package)
- [MAL-2025-191491](https://insights.sbomify.com/MAL-2025-191491/): Malicious code in babel-plugin-standalone (npm) (malicious package)
- [MAL-2025-191490](https://insights.sbomify.com/MAL-2025-191490/): Malicious code in com.unity.sharp-zip-lib (npm) (malicious package)
- [MAL-2025-19149](https://insights.sbomify.com/MAL-2025-19149/): Malicious code in echo-romeo-cibi (npm) (malicious package)
- [MAL-2025-191489](https://insights.sbomify.com/MAL-2025-191489/): Malicious code in liblynxtextra.so (npm) (malicious package)
- [MAL-2025-191488](https://insights.sbomify.com/MAL-2025-191488/): Malicious code in eslint-plugin-react-hooks-published (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/915/