# Vulnerabilities published in 2025 - [MAL-2025-191126](https://insights.sbomify.com/MAL-2025-191126/): Malicious code in luno-api (npm) (malicious package) - [MAL-2025-191125](https://insights.sbomify.com/MAL-2025-191125/): Malicious code in lui-vue-test (npm) (malicious package) - [MAL-2025-191124](https://insights.sbomify.com/MAL-2025-191124/): Malicious code in lint-staged-imagemin (npm) (malicious package) - [MAL-2025-191123](https://insights.sbomify.com/MAL-2025-191123/): Malicious code in license-o-matic (npm) (malicious package) - [MAL-2025-191122](https://insights.sbomify.com/MAL-2025-191122/): Malicious code in lang-codes (npm) (malicious package) - [MAL-2025-191121](https://insights.sbomify.com/MAL-2025-191121/): Malicious code in kwami (npm) (malicious package) - [MAL-2025-191120](https://insights.sbomify.com/MAL-2025-191120/): Malicious code in kns-error-code (npm) (malicious package) - [MAL-2025-19112](https://insights.sbomify.com/MAL-2025-19112/): Malicious code in ecelue (npm) (malicious package) - [MAL-2025-191119](https://insights.sbomify.com/MAL-2025-191119/): Malicious code in kinvey-flex-scripts (npm) (malicious package) - [MAL-2025-191118](https://insights.sbomify.com/MAL-2025-191118/): Malicious code in kinvey-cli-wrapper (npm) (malicious package) - [MAL-2025-191117](https://insights.sbomify.com/MAL-2025-191117/): Malicious code in kinetix-default-token-list (npm) (malicious package) - [MAL-2025-191116](https://insights.sbomify.com/MAL-2025-191116/): Malicious code in kill-port (npm) (malicious package) - [MAL-2025-191115](https://insights.sbomify.com/MAL-2025-191115/): Malicious code in just-toasty (npm) (malicious package) - [MAL-2025-191114](https://insights.sbomify.com/MAL-2025-191114/): Malicious code in jsonsurge (npm) (malicious package) - [MAL-2025-191113](https://insights.sbomify.com/MAL-2025-191113/): Malicious code in jquery-bindings (npm) (malicious package) - [MAL-2025-191112](https://insights.sbomify.com/MAL-2025-191112/): Malicious code in jaetut-varit-test (npm) (malicious package) - [MAL-2025-191111](https://insights.sbomify.com/MAL-2025-191111/): Malicious code in insomnia-plugin-random-pick (npm) (malicious package) - [MAL-2025-191110](https://insights.sbomify.com/MAL-2025-191110/): Malicious code in inmaa-map (npm) (malicious package) - [MAL-2025-19111](https://insights.sbomify.com/MAL-2025-19111/): Malicious code in eccmeteor (npm) (malicious package) - [MAL-2025-191109](https://insights.sbomify.com/MAL-2025-191109/): Malicious code in ids-enterprise-typings (npm) (malicious package) - [MAL-2025-191108](https://insights.sbomify.com/MAL-2025-191108/): Malicious code in ids-enterprise-ng (npm) (malicious package) - [MAL-2025-191107](https://insights.sbomify.com/MAL-2025-191107/): Malicious code in ids-enterprise-mcp-server (npm) (malicious package) - [MAL-2025-191106](https://insights.sbomify.com/MAL-2025-191106/): Malicious code in ids-css (npm) (malicious package) - [MAL-2025-191105](https://insights.sbomify.com/MAL-2025-191105/): Malicious code in gulp-inject-envs (npm) (malicious package) - [MAL-2025-191104](https://insights.sbomify.com/MAL-2025-191104/): Malicious code in gitsafe (npm) (malicious package) - [MAL-2025-191103](https://insights.sbomify.com/MAL-2025-191103/): Malicious code in get-them-args (npm) (malicious package) - [MAL-2025-191102](https://insights.sbomify.com/MAL-2025-191102/): Malicious code in generator-ng-itobuz (npm) (malicious package) - [MAL-2025-191101](https://insights.sbomify.com/MAL-2025-191101/): Malicious code in generator-meteor-stock (npm) (malicious package) - [MAL-2025-191100](https://insights.sbomify.com/MAL-2025-191100/): Malicious code in gatsby-plugin-cname (npm) (malicious package) - [MAL-2025-19110](https://insights.sbomify.com/MAL-2025-19110/): Malicious code in ecademy (npm) (malicious package) - [MAL-2025-1911](https://insights.sbomify.com/MAL-2025-1911/): Malicious code in page-pattern-modal (npm) (malicious package) - [MAL-2025-191099](https://insights.sbomify.com/MAL-2025-191099/): Malicious code in fuzzy-finder (npm) (malicious package) - [MAL-2025-191098](https://insights.sbomify.com/MAL-2025-191098/): Malicious code in frontity-starter-theme (npm) (malicious package) - [MAL-2025-191097](https://insights.sbomify.com/MAL-2025-191097/): Malicious code in formik-store (npm) (malicious package) - [MAL-2025-191096](https://insights.sbomify.com/MAL-2025-191096/): Malicious code in formik-error-focus (npm) (malicious package) - [MAL-2025-191095](https://insights.sbomify.com/MAL-2025-191095/): Malicious code in flatten-unflatten (npm) (malicious package) - [MAL-2025-191094](https://insights.sbomify.com/MAL-2025-191094/): Malicious code in flapstacks (npm) (malicious package) - [MAL-2025-191093](https://insights.sbomify.com/MAL-2025-191093/): Malicious code in fittxt (npm) (malicious package) - [MAL-2025-191092](https://insights.sbomify.com/MAL-2025-191092/): Malicious code in firestore-search-engine (npm) (malicious package) - [MAL-2025-191091](https://insights.sbomify.com/MAL-2025-191091/): Malicious code in feature-flip (npm) (malicious package) - [MAL-2025-191090](https://insights.sbomify.com/MAL-2025-191090/): Malicious code in fat-fingered (npm) (malicious package) - [MAL-2025-19109](https://insights.sbomify.com/MAL-2025-19109/): Malicious code in eca-customer-web (npm) (malicious package) - [MAL-2025-191089](https://insights.sbomify.com/MAL-2025-191089/): Malicious code in express-starter-template (npm) (malicious package) - [MAL-2025-191088](https://insights.sbomify.com/MAL-2025-191088/): Malicious code in expo-router-on-rails (npm) (malicious package) - [MAL-2025-191087](https://insights.sbomify.com/MAL-2025-191087/): Malicious code in esbuild-plugin-brotli (npm) (malicious package) - [MAL-2025-191086](https://insights.sbomify.com/MAL-2025-191086/): Malicious code in electron-volt (npm) (malicious package) - [MAL-2025-191085](https://insights.sbomify.com/MAL-2025-191085/): Malicious code in easypanel-sdk (npm) (malicious package) - [MAL-2025-191084](https://insights.sbomify.com/MAL-2025-191084/): Malicious code in csv-tool-cli (npm) (malicious package) - [MAL-2025-191083](https://insights.sbomify.com/MAL-2025-191083/): Malicious code in create-kinvey-flex-service (npm) (malicious package) - [MAL-2025-191082](https://insights.sbomify.com/MAL-2025-191082/): Malicious code in create-director-app (npm) (malicious package) - [MAL-2025-191081](https://insights.sbomify.com/MAL-2025-191081/): Malicious code in chrome-extension-downloads (npm) (malicious package) - [MAL-2025-191080](https://insights.sbomify.com/MAL-2025-191080/): Malicious code in bytes-to-x (npm) (malicious package) - [MAL-2025-19108](https://insights.sbomify.com/MAL-2025-19108/): Malicious code in ebsjs (npm) (malicious package) - [MAL-2025-191079](https://insights.sbomify.com/MAL-2025-191079/): Malicious code in bun-plugin-httpfile (npm) (malicious package) - [MAL-2025-191078](https://insights.sbomify.com/MAL-2025-191078/): Malicious code in buffered-interpolation-babylon6 (npm) (malicious package) - [MAL-2025-191077](https://insights.sbomify.com/MAL-2025-191077/): Malicious code in blob-to-base64 (npm) (malicious package) - [MAL-2025-191076](https://insights.sbomify.com/MAL-2025-191076/): Malicious code in blinqio-executions-cli (npm) (malicious package) - [MAL-2025-191075](https://insights.sbomify.com/MAL-2025-191075/): Malicious code in bidirectional-adapter (npm) (malicious package) - [MAL-2025-191074](https://insights.sbomify.com/MAL-2025-191074/): Malicious code in better-queue-nedb (npm) (malicious package) - [MAL-2025-191073](https://insights.sbomify.com/MAL-2025-191073/): Malicious code in better-auth-nuxt (npm) (malicious package) - [MAL-2025-191072](https://insights.sbomify.com/MAL-2025-191072/): Malicious code in best_gpio_controller (npm) (malicious package) - [MAL-2025-191071](https://insights.sbomify.com/MAL-2025-191071/): Malicious code in benmostyn-frame-print (npm) (malicious package) - [MAL-2025-191070](https://insights.sbomify.com/MAL-2025-191070/): Malicious code in barebones-css (npm) (malicious package) - [MAL-2025-19107](https://insights.sbomify.com/MAL-2025-19107/): Malicious code in ebos_lambda_utils (npm) (malicious package) - [MAL-2025-191069](https://insights.sbomify.com/MAL-2025-191069/): Malicious code in babel-preset-kinvey-flex-service (npm) (malicious package) - [MAL-2025-191068](https://insights.sbomify.com/MAL-2025-191068/): Malicious code in axios-timed (npm) (malicious package) - [MAL-2025-191067](https://insights.sbomify.com/MAL-2025-191067/): Malicious code in avvvatars-vue (npm) (malicious package) - [MAL-2025-191066](https://insights.sbomify.com/MAL-2025-191066/): Malicious code in automation_model (npm) (malicious package) - [MAL-2025-191065](https://insights.sbomify.com/MAL-2025-191065/): Malicious code in asciitranslator (npm) (malicious package) - [MAL-2025-191064](https://insights.sbomify.com/MAL-2025-191064/): Malicious code in arc-cli-fc (npm) (malicious package) - [MAL-2025-191063](https://insights.sbomify.com/MAL-2025-191063/): Malicious code in ai-crowl-shield (npm) (malicious package) - [MAL-2025-191062](https://insights.sbomify.com/MAL-2025-191062/): Malicious code in @varsityvibe/validation-schemas (npm) (malicious package) - [MAL-2025-191061](https://insights.sbomify.com/MAL-2025-191061/): Malicious code in @varsityvibe/utils (npm) (malicious package) - [MAL-2025-191060](https://insights.sbomify.com/MAL-2025-191060/): Malicious code in @varsityvibe/api-client (npm) (malicious package) - [MAL-2025-19106](https://insights.sbomify.com/MAL-2025-19106/): Malicious code in ebitly (npm) (malicious package) - [MAL-2025-191059](https://insights.sbomify.com/MAL-2025-191059/): Malicious code in @trigo/atrix-swagger (npm) (malicious package) - [MAL-2025-191058](https://insights.sbomify.com/MAL-2025-191058/): Malicious code in @trefox/sleekshop-js (npm) (malicious package) - [MAL-2025-191057](https://insights.sbomify.com/MAL-2025-191057/): Malicious code in @tiaanduplessis/react-progressbar (npm) (malicious package) - [MAL-2025-191056](https://insights.sbomify.com/MAL-2025-191056/): Malicious code in @tiaanduplessis/json (npm) (malicious package) - [MAL-2025-191055](https://insights.sbomify.com/MAL-2025-191055/): Malicious code in @thedelta/eslint-config (npm) (malicious package) - [MAL-2025-191054](https://insights.sbomify.com/MAL-2025-191054/): Malicious code in @suraj_h/medium-common (npm) (malicious package) - [MAL-2025-191053](https://insights.sbomify.com/MAL-2025-191053/): Malicious code in @seezo/sdr-mcp-server (npm) (malicious package) - [MAL-2025-191052](https://insights.sbomify.com/MAL-2025-191052/): Malicious code in @relyt/mcp-server-relytone (npm) (malicious package) - [MAL-2025-191051](https://insights.sbomify.com/MAL-2025-191051/): Malicious code in @relyt/claude-context-mcp (npm) (malicious package) - [MAL-2025-191050](https://insights.sbomify.com/MAL-2025-191050/): Malicious code in @relyt/claude-context-core (npm) (malicious package) - [MAL-2025-19105](https://insights.sbomify.com/MAL-2025-19105/): Malicious code in ebfzuntxkwrklidj (npm) (malicious package) - [MAL-2025-191049](https://insights.sbomify.com/MAL-2025-191049/): Malicious code in @pruthvi21/use-debounce (npm) (malicious package) - [MAL-2025-191048](https://insights.sbomify.com/MAL-2025-191048/): Malicious code in @pradhumngautam/common-app (npm) (malicious package) - [MAL-2025-191047](https://insights.sbomify.com/MAL-2025-191047/): Malicious code in @osmanekrem/error-handler (npm) (malicious package) - [MAL-2025-191046](https://insights.sbomify.com/MAL-2025-191046/): Malicious code in @osmanekrem/bmad (npm) (malicious package) - [MAL-2025-191045](https://insights.sbomify.com/MAL-2025-191045/): Malicious code in @orbitgtbelgium/mapbox-gl-draw-cut-polygon-mode (npm) (malicious package) - [MAL-2025-191044](https://insights.sbomify.com/MAL-2025-191044/): Malicious code in @opentermsarchive/engine (npm) (malicious package) - [MAL-2025-191043](https://insights.sbomify.com/MAL-2025-191043/): Malicious code in @oku-ui/use-composable (npm) (malicious package) - [MAL-2025-191042](https://insights.sbomify.com/MAL-2025-191042/): Malicious code in @oku-ui/slot (npm) (malicious package) - [MAL-2025-191041](https://insights.sbomify.com/MAL-2025-191041/): Malicious code in @oku-ui/primitives (npm) (malicious package) - [MAL-2025-191040](https://insights.sbomify.com/MAL-2025-191040/): Malicious code in @oku-ui/motion (npm) (malicious package) - [MAL-2025-19104](https://insights.sbomify.com/MAL-2025-19104/): Malicious code in ebdhqzxjwkoipcrg (npm) (malicious package) - [MAL-2025-191039](https://insights.sbomify.com/MAL-2025-191039/): Malicious code in @oku-ui/label (npm) (malicious package) - [MAL-2025-191038](https://insights.sbomify.com/MAL-2025-191038/): Malicious code in @oku-ui/focus-scope (npm) (malicious package) - [MAL-2025-191037](https://insights.sbomify.com/MAL-2025-191037/): Malicious code in @oku-ui/accordion (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/920/