# Vulnerabilities published in 2025


- [MAL-2025-191036](https://insights.sbomify.com/MAL-2025-191036/): Malicious code in @ntnx/t (npm) (malicious package)
- [MAL-2025-191035](https://insights.sbomify.com/MAL-2025-191035/): Malicious code in @ntnx/passport-wso2 (npm) (malicious package)
- [MAL-2025-191034](https://insights.sbomify.com/MAL-2025-191034/): Malicious code in @lpdjs/firestore-repo-service (npm) (malicious package)
- [MAL-2025-191033](https://insights.sbomify.com/MAL-2025-191033/): Malicious code in @louisle2/core (npm) (malicious package)
- [MAL-2025-191032](https://insights.sbomify.com/MAL-2025-191032/): Malicious code in @lessondesk/schoolbus (npm) (malicious package)
- [MAL-2025-191031](https://insights.sbomify.com/MAL-2025-191031/): Malicious code in @lessondesk/react-table-context (npm) (malicious package)
- [MAL-2025-191030](https://insights.sbomify.com/MAL-2025-191030/): Malicious code in @lessondesk/material-icons (npm) (malicious package)
- [MAL-2025-19103](https://insights.sbomify.com/MAL-2025-19103/): Malicious code in ebay-items-react-widget-server (npm) (malicious package)
- [MAL-2025-191029](https://insights.sbomify.com/MAL-2025-191029/): Malicious code in @lessondesk/eslint-config (npm) (malicious package)
- [MAL-2025-191028](https://insights.sbomify.com/MAL-2025-191028/): Malicious code in @lessondesk/electron-group-api-client (npm) (malicious package)
- [MAL-2025-191027](https://insights.sbomify.com/MAL-2025-191027/): Malicious code in @lessondesk/babel-preset (npm) (malicious package)
- [MAL-2025-191026](https://insights.sbomify.com/MAL-2025-191026/): Malicious code in @lessondesk/api-client (npm) (malicious package)
- [MAL-2025-191025](https://insights.sbomify.com/MAL-2025-191025/): Malicious code in 02-echo (npm) (malicious package)
- [MAL-2025-191024](https://insights.sbomify.com/MAL-2025-191024/): Malicious code in tiaan (npm) (malicious package)
- [MAL-2025-191023](https://insights.sbomify.com/MAL-2025-191023/): Malicious code in tenacious-fetch (npm) (malicious package)
- [MAL-2025-191022](https://insights.sbomify.com/MAL-2025-191022/): Malicious code in template-micro-service (npm) (malicious package)
- [MAL-2025-191021](https://insights.sbomify.com/MAL-2025-191021/): Malicious code in template-lib (npm) (malicious package)
- [MAL-2025-191020](https://insights.sbomify.com/MAL-2025-191020/): Malicious code in tcsp-test-vd (npm) (malicious package)
- [MAL-2025-19102](https://insights.sbomify.com/MAL-2025-19102/): Malicious code in eb-styles (npm) (malicious package)
- [MAL-2025-191019](https://insights.sbomify.com/MAL-2025-191019/): Malicious code in tcsp-draw-test (npm) (malicious package)
- [MAL-2025-191018](https://insights.sbomify.com/MAL-2025-191018/): Malicious code in tanstack-shadcn-table (npm) (malicious package)
- [MAL-2025-191017](https://insights.sbomify.com/MAL-2025-191017/): Malicious code in svelte-toasty (npm) (malicious package)
- [MAL-2025-191016](https://insights.sbomify.com/MAL-2025-191016/): Malicious code in svelte-autocomplete-select (npm) (malicious package)
- [MAL-2025-191015](https://insights.sbomify.com/MAL-2025-191015/): Malicious code in super-commit (npm) (malicious package)
- [MAL-2025-191014](https://insights.sbomify.com/MAL-2025-191014/): Malicious code in stoor (npm) (malicious package)
- [MAL-2025-191013](https://insights.sbomify.com/MAL-2025-191013/): Malicious code in stat-fns (npm) (malicious package)
- [MAL-2025-191012](https://insights.sbomify.com/MAL-2025-191012/): Malicious code in south-african-id-info (npm) (malicious package)
- [MAL-2025-191011](https://insights.sbomify.com/MAL-2025-191011/): Malicious code in sort-by-distance (npm) (malicious package)
- [MAL-2025-191010](https://insights.sbomify.com/MAL-2025-191010/): Malicious code in set-nested-prop (npm) (malicious package)
- [MAL-2025-19101](https://insights.sbomify.com/MAL-2025-19101/): Malicious code in eazeup-service-address (npm) (malicious package)
- [MAL-2025-191009](https://insights.sbomify.com/MAL-2025-191009/): Malicious code in sa-id-gen (npm) (malicious package)
- [MAL-2025-191008](https://insights.sbomify.com/MAL-2025-191008/): Malicious code in sa-company-registration-number-regex (npm) (malicious package)
- [MAL-2025-191007](https://insights.sbomify.com/MAL-2025-191007/): Malicious code in react-qr-image (npm) (malicious package)
- [MAL-2025-191006](https://insights.sbomify.com/MAL-2025-191006/): Malicious code in react-native-websocket (npm) (malicious package)
- [MAL-2025-191005](https://insights.sbomify.com/MAL-2025-191005/): Malicious code in react-native-view-finder (npm) (malicious package)
- [MAL-2025-191004](https://insights.sbomify.com/MAL-2025-191004/): Malicious code in react-native-retriable-fetch (npm) (malicious package)
- [MAL-2025-191003](https://insights.sbomify.com/MAL-2025-191003/): Malicious code in react-native-phone-call (npm) (malicious package)
- [MAL-2025-191002](https://insights.sbomify.com/MAL-2025-191002/): Malicious code in react-native-modest-storage (npm) (malicious package)
- [MAL-2025-191001](https://insights.sbomify.com/MAL-2025-191001/): Malicious code in react-native-modest-checkbox (npm) (malicious package)
- [MAL-2025-191000](https://insights.sbomify.com/MAL-2025-191000/): Malicious code in react-native-log-level (npm) (malicious package)
- [MAL-2025-19100](https://insights.sbomify.com/MAL-2025-19100/): Malicious code in eazegraph (npm) (malicious package)
- [MAL-2025-1910](https://insights.sbomify.com/MAL-2025-1910/): Malicious code in owl.carousel.custom (npm) (malicious package)
- [MAL-2025-191](https://insights.sbomify.com/MAL-2025-191/): Malicious code in geotab-sdk (npm) (malicious package)
- [MAL-2025-190999](https://insights.sbomify.com/MAL-2025-190999/): Malicious code in react-native-google-maps-directions (npm) (malicious package)
- [MAL-2025-190998](https://insights.sbomify.com/MAL-2025-190998/): Malicious code in react-native-get-pixel-dimensions (npm) (malicious package)
- [MAL-2025-190997](https://insights.sbomify.com/MAL-2025-190997/): Malicious code in react-native-fetch (npm) (malicious package)
- [MAL-2025-190996](https://insights.sbomify.com/MAL-2025-190996/): Malicious code in react-native-email (npm) (malicious package)
- [MAL-2025-190995](https://insights.sbomify.com/MAL-2025-190995/): Malicious code in react-native-datepicker-modal (npm) (malicious package)
- [MAL-2025-190994](https://insights.sbomify.com/MAL-2025-190994/): Malicious code in react-micromodal.js (npm) (malicious package)
- [MAL-2025-190993](https://insights.sbomify.com/MAL-2025-190993/): Malicious code in react-linear-loader (npm) (malicious package)
- [MAL-2025-190992](https://insights.sbomify.com/MAL-2025-190992/): Malicious code in react-keycloak-context (npm) (malicious package)
- [MAL-2025-190991](https://insights.sbomify.com/MAL-2025-190991/): Malicious code in react-jam-icons (npm) (malicious package)
- [MAL-2025-190990](https://insights.sbomify.com/MAL-2025-190990/): Malicious code in react-hook-form-persist (npm) (malicious package)
- [MAL-2025-19099](https://insights.sbomify.com/MAL-2025-19099/): Malicious code in eaze.com (npm) (malicious package)
- [MAL-2025-190989](https://insights.sbomify.com/MAL-2025-190989/): Malicious code in react-component-taggers (npm) (malicious package)
- [MAL-2025-190988](https://insights.sbomify.com/MAL-2025-190988/): Malicious code in prompt-eng (npm) (malicious package)
- [MAL-2025-190987](https://insights.sbomify.com/MAL-2025-190987/): Malicious code in prime-one-table (npm) (malicious package)
- [MAL-2025-190986](https://insights.sbomify.com/MAL-2025-190986/): Malicious code in pico-uid (npm) (malicious package)
- [MAL-2025-190985](https://insights.sbomify.com/MAL-2025-190985/): Malicious code in pdf-annotation (npm) (malicious package)
- [MAL-2025-190984](https://insights.sbomify.com/MAL-2025-190984/): Malicious code in parcel-plugin-asset-copier (npm) (malicious package)
- [MAL-2025-190983](https://insights.sbomify.com/MAL-2025-190983/): Malicious code in package-tester (npm) (malicious package)
- [MAL-2025-190982](https://insights.sbomify.com/MAL-2025-190982/): Malicious code in orchestrix (npm) (malicious package)
- [MAL-2025-190981](https://insights.sbomify.com/MAL-2025-190981/): Malicious code in next-styled-nprogress (npm) (malicious package)
- [MAL-2025-190980](https://insights.sbomify.com/MAL-2025-190980/): Malicious code in next-simple-google-analytics (npm) (malicious package)
- [MAL-2025-19098](https://insights.sbomify.com/MAL-2025-19098/): Malicious code in eatkghoyufvpznrb (npm) (malicious package)
- [MAL-2025-190979](https://insights.sbomify.com/MAL-2025-190979/): Malicious code in next-circular-dependency (npm) (malicious package)
- [MAL-2025-190978](https://insights.sbomify.com/MAL-2025-190978/): Malicious code in nanoreset (npm) (malicious package)
- [MAL-2025-190977](https://insights.sbomify.com/MAL-2025-190977/): Malicious code in n8n-nodes-vercel-ai-sdk (npm) (malicious package)
- [MAL-2025-190976](https://insights.sbomify.com/MAL-2025-190976/): Malicious code in mon-package-react-typescript (npm) (malicious package)
- [MAL-2025-190975](https://insights.sbomify.com/MAL-2025-190975/): Malicious code in mod10-check-digit (npm) (malicious package)
- [MAL-2025-190974](https://insights.sbomify.com/MAL-2025-190974/): Malicious code in jacob-zuma (npm) (malicious package)
- [MAL-2025-190973](https://insights.sbomify.com/MAL-2025-190973/): Malicious code in itobuz-angular-button (npm) (malicious package)
- [MAL-2025-190972](https://insights.sbomify.com/MAL-2025-190972/): Malicious code in itobuz-angular-auth (npm) (malicious package)
- [MAL-2025-190971](https://insights.sbomify.com/MAL-2025-190971/): Malicious code in itobuz-angular (npm) (malicious package)
- [MAL-2025-190970](https://insights.sbomify.com/MAL-2025-190970/): Malicious code in ito-button (npm) (malicious package)
- [MAL-2025-19097](https://insights.sbomify.com/MAL-2025-19097/): Malicious code in easyupnp (npm) (malicious package)
- [MAL-2025-190969](https://insights.sbomify.com/MAL-2025-190969/): Malicious code in invo (npm) (malicious package)
- [MAL-2025-190968](https://insights.sbomify.com/MAL-2025-190968/): Malicious code in image-to-uri (npm) (malicious package)
- [MAL-2025-190967](https://insights.sbomify.com/MAL-2025-190967/): Malicious code in hyperterm-hipster (npm) (malicious package)
- [MAL-2025-190966](https://insights.sbomify.com/MAL-2025-190966/): Malicious code in httpness (npm) (malicious package)
- [MAL-2025-190965](https://insights.sbomify.com/MAL-2025-190965/): Malicious code in hover-design-prototype (npm) (malicious package)
- [MAL-2025-190964](https://insights.sbomify.com/MAL-2025-190964/): Malicious code in hopedraw (npm) (malicious package)
- [MAL-2025-190963](https://insights.sbomify.com/MAL-2025-190963/): Malicious code in hope-mapboxdraw (npm) (malicious package)
- [MAL-2025-190962](https://insights.sbomify.com/MAL-2025-190962/): Malicious code in haufe-axera-api-client (npm) (malicious package)
- [MAL-2025-190961](https://insights.sbomify.com/MAL-2025-190961/): Malicious code in expressos (npm) (malicious package)
- [MAL-2025-190960](https://insights.sbomify.com/MAL-2025-190960/): Malicious code in eslint-config-nitpicky (npm) (malicious package)
- [MAL-2025-19096](https://insights.sbomify.com/MAL-2025-19096/): Malicious code in easytwb (npm) (malicious package)
- [MAL-2025-190959](https://insights.sbomify.com/MAL-2025-190959/): Malicious code in enforce-branch-name (npm) (malicious package)
- [MAL-2025-190958](https://insights.sbomify.com/MAL-2025-190958/): Malicious code in email-deliverability-tester (npm) (malicious package)
- [MAL-2025-190957](https://insights.sbomify.com/MAL-2025-190957/): Malicious code in dont-go (npm) (malicious package)
- [MAL-2025-190956](https://insights.sbomify.com/MAL-2025-190956/): Malicious code in docusaurus-plugin-vanilla-extract (npm) (malicious package)
- [MAL-2025-190955](https://insights.sbomify.com/MAL-2025-190955/): Malicious code in designstudiouiux (npm) (malicious package)
- [MAL-2025-190954](https://insights.sbomify.com/MAL-2025-190954/): Malicious code in dashboard-empty-state (npm) (malicious package)
- [MAL-2025-190953](https://insights.sbomify.com/MAL-2025-190953/): Malicious code in css-dedoupe (npm) (malicious package)
- [MAL-2025-190952](https://insights.sbomify.com/MAL-2025-190952/): Malicious code in count-it-down (npm) (malicious package)
- [MAL-2025-190951](https://insights.sbomify.com/MAL-2025-190951/): Malicious code in composite-reducer (npm) (malicious package)
- [MAL-2025-190950](https://insights.sbomify.com/MAL-2025-190950/): Malicious code in compare-obj (npm) (malicious package)
- [MAL-2025-19095](https://insights.sbomify.com/MAL-2025-19095/): Malicious code in easyply (npm) (malicious package)
- [MAL-2025-190949](https://insights.sbomify.com/MAL-2025-190949/): Malicious code in colors-regex (npm) (malicious package)
- [MAL-2025-190948](https://insights.sbomify.com/MAL-2025-190948/): Malicious code in coinmarketcap-api (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/921/