# Vulnerabilities published in 2025 - [MAL-2025-190767](https://insights.sbomify.com/MAL-2025-190767/): Malicious code in create-glee-app (npm) (malicious package) - [MAL-2025-190766](https://insights.sbomify.com/MAL-2025-190766/): Malicious code in capacitor-purchase-history (npm) (malicious package) - [MAL-2025-190765](https://insights.sbomify.com/MAL-2025-190765/): Malicious code in capacitor-plugin-scgssigninwithgoogle (npm) (malicious package) - [MAL-2025-190764](https://insights.sbomify.com/MAL-2025-190764/): Malicious code in atrix (npm) (malicious package) - [MAL-2025-190763](https://insights.sbomify.com/MAL-2025-190763/): Malicious code in @zapier/eslint-plugin-zapier (npm) (malicious package) - [MAL-2025-190762](https://insights.sbomify.com/MAL-2025-190762/): Malicious code in @zapier/browserslist-config-zapier (npm) (malicious package) - [MAL-2025-190761](https://insights.sbomify.com/MAL-2025-190761/): Malicious code in @zapier/babel-preset-zapier (npm) (malicious package) - [MAL-2025-190760](https://insights.sbomify.com/MAL-2025-190760/): Malicious code in @trigo/atrix-soap (npm) (malicious package) - [MAL-2025-19076](https://insights.sbomify.com/MAL-2025-19076/): Malicious code in eagle-walnut-l9x3 (npm) (malicious package) - [MAL-2025-190759](https://insights.sbomify.com/MAL-2025-190759/): Malicious code in @trigo/atrix-elasticsearch (npm) (malicious package) - [MAL-2025-190758](https://insights.sbomify.com/MAL-2025-190758/): Malicious code in @strapbuild/react-native-perspective-image-cropper (npm) (malicious package) - [MAL-2025-190757](https://insights.sbomify.com/MAL-2025-190757/): Malicious code in @seung-ju/react-hooks (npm) (malicious package) - [MAL-2025-190756](https://insights.sbomify.com/MAL-2025-190756/): Malicious code in @seung-ju/openapi-generator (npm) (malicious package) - [MAL-2025-190755](https://insights.sbomify.com/MAL-2025-190755/): Malicious code in @seung-ju/next (npm) (malicious package) - [MAL-2025-190754](https://insights.sbomify.com/MAL-2025-190754/): Malicious code in @postman/node-keytar (npm) (malicious package) - [MAL-2025-190753](https://insights.sbomify.com/MAL-2025-190753/): Malicious code in @posthog/siphash (npm) (malicious package) - [MAL-2025-190752](https://insights.sbomify.com/MAL-2025-190752/): Malicious code in @posthog/rrweb-record (npm) (malicious package) - [MAL-2025-190751](https://insights.sbomify.com/MAL-2025-190751/): Malicious code in @posthog/plugin-contrib (npm) (malicious package) - [MAL-2025-190750](https://insights.sbomify.com/MAL-2025-190750/): Malicious code in @posthog/piscina (npm) (malicious package) - [MAL-2025-19075](https://insights.sbomify.com/MAL-2025-19075/): Malicious code in eagle-reef-nbj731-project (npm) (malicious package) - [MAL-2025-190749](https://insights.sbomify.com/MAL-2025-190749/): Malicious code in @posthog/nuxt (npm) (malicious package) - [MAL-2025-190748](https://insights.sbomify.com/MAL-2025-190748/): Malicious code in @posthog/agent (npm) (malicious package) - [MAL-2025-190747](https://insights.sbomify.com/MAL-2025-190747/): Malicious code in @kvytech/web (npm) (malicious package) - [MAL-2025-190746](https://insights.sbomify.com/MAL-2025-190746/): Malicious code in @kvytech/medusa-plugin-product-reviews (npm) (malicious package) - [MAL-2025-190745](https://insights.sbomify.com/MAL-2025-190745/): Malicious code in @kvytech/medusa-plugin-management (npm) (malicious package) - [MAL-2025-190744](https://insights.sbomify.com/MAL-2025-190744/): Malicious code in @kvytech/medusa-plugin-announcement (npm) (malicious package) - [MAL-2025-190743](https://insights.sbomify.com/MAL-2025-190743/): Malicious code in @kvytech/components (npm) (malicious package) - [MAL-2025-190742](https://insights.sbomify.com/MAL-2025-190742/): Malicious code in @kvytech/cli (npm) (malicious package) - [MAL-2025-190741](https://insights.sbomify.com/MAL-2025-190741/): Malicious code in @ensdomains/vite-plugin-i18next-loader (npm) (malicious package) - [MAL-2025-190740](https://insights.sbomify.com/MAL-2025-190740/): Malicious code in @ensdomains/unicode-confusables (npm) (malicious package) - [MAL-2025-19074](https://insights.sbomify.com/MAL-2025-19074/): Malicious code in eagle-raspberry-s5k2 (npm) (malicious package) - [MAL-2025-190739](https://insights.sbomify.com/MAL-2025-190739/): Malicious code in @ensdomains/thorin (npm) (malicious package) - [MAL-2025-190738](https://insights.sbomify.com/MAL-2025-190738/): Malicious code in @ensdomains/test-utils (npm) (malicious package) - [MAL-2025-190737](https://insights.sbomify.com/MAL-2025-190737/): Malicious code in @ensdomains/solsha1 (npm) (malicious package) - [MAL-2025-190736](https://insights.sbomify.com/MAL-2025-190736/): Malicious code in @ensdomains/reverse-records (npm) (malicious package) - [MAL-2025-190735](https://insights.sbomify.com/MAL-2025-190735/): Malicious code in @ensdomains/renewal-widget (npm) (malicious package) - [MAL-2025-190734](https://insights.sbomify.com/MAL-2025-190734/): Malicious code in @ensdomains/hardhat-toolbox-viem-extended (npm) (malicious package) - [MAL-2025-190733](https://insights.sbomify.com/MAL-2025-190733/): Malicious code in @ensdomains/hardhat-chai-matchers-viem (npm) (malicious package) - [MAL-2025-190732](https://insights.sbomify.com/MAL-2025-190732/): Malicious code in @ensdomains/hackathon-registrar (npm) (malicious package) - [MAL-2025-190731](https://insights.sbomify.com/MAL-2025-190731/): Malicious code in @ensdomains/ens-validation (npm) (malicious package) - [MAL-2025-190730](https://insights.sbomify.com/MAL-2025-190730/): Malicious code in @ensdomains/ens-avatar (npm) (malicious package) - [MAL-2025-19073](https://insights.sbomify.com/MAL-2025-19073/): Malicious code in eagle-quill-tsk027-project (npm) (malicious package) - [MAL-2025-190729](https://insights.sbomify.com/MAL-2025-190729/): Malicious code in @ensdomains/durin-middleware (npm) (malicious package) - [MAL-2025-190728](https://insights.sbomify.com/MAL-2025-190728/): Malicious code in @ensdomains/dnssecoraclejs (npm) (malicious package) - [MAL-2025-190727](https://insights.sbomify.com/MAL-2025-190727/): Malicious code in @ensdomains/dnsprovejs (npm) (malicious package) - [MAL-2025-190726](https://insights.sbomify.com/MAL-2025-190726/): Malicious code in @ensdomains/curvearithmetics (npm) (malicious package) - [MAL-2025-190725](https://insights.sbomify.com/MAL-2025-190725/): Malicious code in @ensdomains/ccip-read-worker-viem (npm) (malicious package) - [MAL-2025-190724](https://insights.sbomify.com/MAL-2025-190724/): Malicious code in @ensdomains/ccip-read-router (npm) (malicious package) - [MAL-2025-190723](https://insights.sbomify.com/MAL-2025-190723/): Malicious code in @ensdomains/ccip-read-dns-gateway (npm) (malicious package) - [MAL-2025-190722](https://insights.sbomify.com/MAL-2025-190722/): Malicious code in @ensdomains/blacklist (npm) (malicious package) - [MAL-2025-190721](https://insights.sbomify.com/MAL-2025-190721/): Malicious code in @asyncapi/web-component (npm) (malicious package) - [MAL-2025-190720](https://insights.sbomify.com/MAL-2025-190720/): Malicious code in @asyncapi/python-paho-template (npm) (malicious package) - [MAL-2025-19072](https://insights.sbomify.com/MAL-2025-19072/): Malicious code in eagle-quagmire-jfp294-project (npm) (malicious package) - [MAL-2025-190719](https://insights.sbomify.com/MAL-2025-190719/): Malicious code in @asyncapi/nodejs-ws-template (npm) (malicious package) - [MAL-2025-190718](https://insights.sbomify.com/MAL-2025-190718/): Malicious code in @asyncapi/nodejs-template (npm) (malicious package) - [MAL-2025-190717](https://insights.sbomify.com/MAL-2025-190717/): Malicious code in @asyncapi/java-template (npm) (malicious package) - [MAL-2025-190716](https://insights.sbomify.com/MAL-2025-190716/): Malicious code in @asyncapi/java-spring-template (npm) (malicious package) - [MAL-2025-190715](https://insights.sbomify.com/MAL-2025-190715/): Malicious code in @asyncapi/java-spring-cloud-stream-template (npm) (malicious package) - [MAL-2025-190714](https://insights.sbomify.com/MAL-2025-190714/): Malicious code in @asyncapi/go-watermill-template (npm) (malicious package) - [MAL-2025-190713](https://insights.sbomify.com/MAL-2025-190713/): Malicious code in @aryanhussain/my-angular-lib (npm) (malicious package) - [MAL-2025-190712](https://insights.sbomify.com/MAL-2025-190712/): Malicious code in @actbase/react-native-tiktok (npm) (malicious package) - [MAL-2025-190711](https://insights.sbomify.com/MAL-2025-190711/): Malicious code in @actbase/react-native-naver-login (npm) (malicious package) - [MAL-2025-190710](https://insights.sbomify.com/MAL-2025-190710/): Malicious code in @actbase/react-native-less-transformer (npm) (malicious package) - [MAL-2025-19071](https://insights.sbomify.com/MAL-2025-19071/): Malicious code in eagle-penguin-ifv401-project (npm) (malicious package) - [MAL-2025-190709](https://insights.sbomify.com/MAL-2025-190709/): Malicious code in @actbase/react-native-fast-image (npm) (malicious package) - [MAL-2025-190708](https://insights.sbomify.com/MAL-2025-190708/): Malicious code in @actbase/react-daum-postcode (npm) (malicious package) - [MAL-2025-190707](https://insights.sbomify.com/MAL-2025-190707/): Malicious code in @actbase/node-server (npm) (malicious package) - [MAL-2025-190706](https://insights.sbomify.com/MAL-2025-190706/): Malicious code in @actbase/css-to-react-native-transform (npm) (malicious package) - [MAL-2025-190705](https://insights.sbomify.com/MAL-2025-190705/): Malicious code in zapier-platform-schema (npm) (malicious package) - [MAL-2025-190704](https://insights.sbomify.com/MAL-2025-190704/): Malicious code in zapier-platform-core (npm) (malicious package) - [MAL-2025-190703](https://insights.sbomify.com/MAL-2025-190703/): Malicious code in zapier-platform-cli (npm) (malicious package) - [MAL-2025-190702](https://insights.sbomify.com/MAL-2025-190702/): Malicious code in trigo-react-app (npm) (malicious package) - [MAL-2025-190701](https://insights.sbomify.com/MAL-2025-190701/): Malicious code in redux-forge (npm) (malicious package) - [MAL-2025-190700](https://insights.sbomify.com/MAL-2025-190700/): Malicious code in react-library-setup (npm) (malicious package) - [MAL-2025-19070](https://insights.sbomify.com/MAL-2025-19070/): Malicious code in eagle-paradise-qdg941-project (npm) (malicious package) - [MAL-2025-1907](https://insights.sbomify.com/MAL-2025-1907/): Malicious code in oj-sp-attachments-common (npm) (malicious package) - [MAL-2025-190699](https://insights.sbomify.com/MAL-2025-190699/): Malicious code in react-element-prompt-inspector (npm) (malicious package) - [MAL-2025-190698](https://insights.sbomify.com/MAL-2025-190698/): Malicious code in orbit-nebula-draw-tools (npm) (malicious package) - [MAL-2025-190697](https://insights.sbomify.com/MAL-2025-190697/): Malicious code in exact-ticker (npm) (malicious package) - [MAL-2025-190696](https://insights.sbomify.com/MAL-2025-190696/): Malicious code in ethereum-ens (npm) (malicious package) - [MAL-2025-190695](https://insights.sbomify.com/MAL-2025-190695/): Malicious code in eslint-config-trigo (npm) (malicious package) - [MAL-2025-190694](https://insights.sbomify.com/MAL-2025-190694/): Malicious code in crypto-addr-codec (npm) (malicious package) - [MAL-2025-190693](https://insights.sbomify.com/MAL-2025-190693/): Malicious code in bool-expressions (npm) (malicious package) - [MAL-2025-190692](https://insights.sbomify.com/MAL-2025-190692/): Malicious code in atrix-mongoose (npm) (malicious package) - [MAL-2025-190691](https://insights.sbomify.com/MAL-2025-190691/): Malicious code in @zapier/secret-scrubber (npm) (malicious package) - [MAL-2025-190690](https://insights.sbomify.com/MAL-2025-190690/): Malicious code in @trigo/trigo-hapijs (npm) (malicious package) - [MAL-2025-19069](https://insights.sbomify.com/MAL-2025-19069/): Malicious code in eagle-lilac-xok373-project (npm) (malicious package) - [MAL-2025-190689](https://insights.sbomify.com/MAL-2025-190689/): Malicious code in @trigo/pathfinder-ui-css (npm) (malicious package) - [MAL-2025-190688](https://insights.sbomify.com/MAL-2025-190688/): Malicious code in @trigo/node-soap (npm) (malicious package) - [MAL-2025-190687](https://insights.sbomify.com/MAL-2025-190687/): Malicious code in @trigo/keycloak-api (npm) (malicious package) - [MAL-2025-190686](https://insights.sbomify.com/MAL-2025-190686/): Malicious code in @trigo/jsdt (npm) (malicious package) - [MAL-2025-190685](https://insights.sbomify.com/MAL-2025-190685/): Malicious code in @trigo/fsm (npm) (malicious package) - [MAL-2025-190684](https://insights.sbomify.com/MAL-2025-190684/): Malicious code in @trigo/eslint-config-trigo (npm) (malicious package) - [MAL-2025-190683](https://insights.sbomify.com/MAL-2025-190683/): Malicious code in @trigo/bool-expressions (npm) (malicious package) - [MAL-2025-190682](https://insights.sbomify.com/MAL-2025-190682/): Malicious code in @trigo/atrix-redis (npm) (malicious package) - [MAL-2025-190681](https://insights.sbomify.com/MAL-2025-190681/): Malicious code in @trigo/atrix-postgres (npm) (malicious package) - [MAL-2025-190680](https://insights.sbomify.com/MAL-2025-190680/): Malicious code in @trigo/atrix-orientdb (npm) (malicious package) - [MAL-2025-19068](https://insights.sbomify.com/MAL-2025-19068/): Malicious code in eagle-kiwi-turs (npm) (malicious package) - [MAL-2025-190679](https://insights.sbomify.com/MAL-2025-190679/): Malicious code in @trigo/atrix-mongoose (npm) (malicious package) - [MAL-2025-190678](https://insights.sbomify.com/MAL-2025-190678/): Malicious code in @trigo/atrix-acl (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/924/