# Vulnerabilities published in 2025


- [MAL-2025-190677](https://insights.sbomify.com/MAL-2025-190677/): Malicious code in @trigo/atrix (npm) (malicious package)
- [MAL-2025-190676](https://insights.sbomify.com/MAL-2025-190676/): Malicious code in @postman/aether-icons (npm) (malicious package)
- [MAL-2025-190675](https://insights.sbomify.com/MAL-2025-190675/): Malicious code in @posthog/rrweb-utils (npm) (malicious package)
- [MAL-2025-190674](https://insights.sbomify.com/MAL-2025-190674/): Malicious code in @posthog/rrweb-snapshot (npm) (malicious package)
- [MAL-2025-190673](https://insights.sbomify.com/MAL-2025-190673/): Malicious code in @posthog/rrweb (npm) (malicious package)
- [MAL-2025-190672](https://insights.sbomify.com/MAL-2025-190672/): Malicious code in @posthog/rrdom (npm) (malicious package)
- [MAL-2025-190671](https://insights.sbomify.com/MAL-2025-190671/): Malicious code in @posthog/cli (npm) (malicious package)
- [MAL-2025-190670](https://insights.sbomify.com/MAL-2025-190670/): Malicious code in @orbitgtbelgium/time-slider (npm) (malicious package)
- [MAL-2025-19067](https://insights.sbomify.com/MAL-2025-19067/): Malicious code in eagle-kiwi-brm479-project (npm) (malicious package)
- [MAL-2025-190669](https://insights.sbomify.com/MAL-2025-190669/): Malicious code in @orbitgtbelgium/orbit-components (npm) (malicious package)
- [MAL-2025-190668](https://insights.sbomify.com/MAL-2025-190668/): Malicious code in @orbitgtbelgium/mapbox-gl-draw-scale-rotate-mode (npm) (malicious package)
- [MAL-2025-190667](https://insights.sbomify.com/MAL-2025-190667/): Malicious code in @ensdomains/eth-ens-namehash (npm) (malicious package)
- [MAL-2025-190666](https://insights.sbomify.com/MAL-2025-190666/): Malicious code in @ensdomains/content-hash (npm) (malicious package)
- [MAL-2025-190665](https://insights.sbomify.com/MAL-2025-190665/): Malicious code in @ensdomains/address-encoder (npm) (malicious package)
- [MAL-2025-190664](https://insights.sbomify.com/MAL-2025-190664/): Malicious code in @asyncapi/problem (npm) (malicious package)
- [MAL-2025-190663](https://insights.sbomify.com/MAL-2025-190663/): Malicious code in @asyncapi/optimizer (npm) (malicious package)
- [MAL-2025-190662](https://insights.sbomify.com/MAL-2025-190662/): Malicious code in @asyncapi/nunjucks-filters (npm) (malicious package)
- [MAL-2025-190661](https://insights.sbomify.com/MAL-2025-190661/): Malicious code in @asyncapi/multi-parser (npm) (malicious package)
- [MAL-2025-190660](https://insights.sbomify.com/MAL-2025-190660/): Malicious code in @asyncapi/modelina-cli (npm) (malicious package)
- [MAL-2025-19066](https://insights.sbomify.com/MAL-2025-19066/): Malicious code in eagle-kilo-ncl0 (npm) (malicious package)
- [MAL-2025-190659](https://insights.sbomify.com/MAL-2025-190659/): Malicious code in @asyncapi/markdown-template (npm) (malicious package)
- [MAL-2025-190658](https://insights.sbomify.com/MAL-2025-190658/): Malicious code in @asyncapi/html-template (npm) (malicious package)
- [MAL-2025-190657](https://insights.sbomify.com/MAL-2025-190657/): Malicious code in @asyncapi/generator-helpers (npm) (malicious package)
- [MAL-2025-190656](https://insights.sbomify.com/MAL-2025-190656/): Malicious code in @asyncapi/generator-components (npm) (malicious package)
- [MAL-2025-190655](https://insights.sbomify.com/MAL-2025-190655/): Malicious code in @asyncapi/diff (npm) (malicious package)
- [MAL-2025-190654](https://insights.sbomify.com/MAL-2025-190654/): Malicious code in @asyncapi/converter (npm) (malicious package)
- [MAL-2025-190653](https://insights.sbomify.com/MAL-2025-190653/): Malicious code in @asyncapi/cli (npm) (malicious package)
- [MAL-2025-190652](https://insights.sbomify.com/MAL-2025-190652/): Malicious code in @asyncapi/bundler (npm) (malicious package)
- [MAL-2025-190651](https://insights.sbomify.com/MAL-2025-190651/): Malicious code in @alaan/s2s-auth (npm) (malicious package)
- [MAL-2025-190650](https://insights.sbomify.com/MAL-2025-190650/): Malicious code in signup-failover (npm) (malicious package)
- [MAL-2025-19065](https://insights.sbomify.com/MAL-2025-19065/): Malicious code in eagle-hollow-jth740-project (npm) (malicious package)
- [MAL-2025-190649](https://insights.sbomify.com/MAL-2025-190649/): Malicious code in posthog-react-native-session-replay (npm) (malicious package)
- [MAL-2025-190648](https://insights.sbomify.com/MAL-2025-190648/): Malicious code in @zapier/zapier-sdk (npm) (malicious package)
- [MAL-2025-190647](https://insights.sbomify.com/MAL-2025-190647/): Malicious code in @postman/tunnel-agent (npm) (malicious package)
- [MAL-2025-190646](https://insights.sbomify.com/MAL-2025-190646/): Malicious code in @postman/csv-parse (npm) (malicious package)
- [MAL-2025-190645](https://insights.sbomify.com/MAL-2025-190645/): Malicious code in @posthog/core (npm) (malicious package)
- [MAL-2025-190644](https://insights.sbomify.com/MAL-2025-190644/): Malicious code in @posthog/ai (npm) (malicious package)
- [MAL-2025-190643](https://insights.sbomify.com/MAL-2025-190643/): Malicious code in @asyncapi/specs (npm) (malicious package)
- [MAL-2025-190642](https://insights.sbomify.com/MAL-2025-190642/): Malicious code in @asyncapi/react-component (npm) (malicious package)
- [MAL-2025-190641](https://insights.sbomify.com/MAL-2025-190641/): Malicious code in @asyncapi/protobuf-schema-parser (npm) (malicious package)
- [MAL-2025-190640](https://insights.sbomify.com/MAL-2025-190640/): Malicious code in @asyncapi/parser (npm) (malicious package)
- [MAL-2025-19064](https://insights.sbomify.com/MAL-2025-19064/): Malicious code in eagle-harbor-byu278-project (npm) (malicious package)
- [MAL-2025-190639](https://insights.sbomify.com/MAL-2025-190639/): Malicious code in @asyncapi/openapi-schema-parser (npm) (malicious package)
- [MAL-2025-190638](https://insights.sbomify.com/MAL-2025-190638/): Malicious code in @asyncapi/modelina (npm) (malicious package)
- [MAL-2025-190637](https://insights.sbomify.com/MAL-2025-190637/): Malicious code in @asyncapi/generator-react-sdk (npm) (malicious package)
- [MAL-2025-190636](https://insights.sbomify.com/MAL-2025-190636/): Malicious code in @asyncapi/generator (npm) (malicious package)
- [MAL-2025-190635](https://insights.sbomify.com/MAL-2025-190635/): Malicious code in @asyncapi/avro-schema-parser (npm) (malicious package)
- [MAL-2025-190634](https://insights.sbomify.com/MAL-2025-190634/): Malicious code in @validate-pubkey/hex (npm) (malicious package)
- [MAL-2025-190633](https://insights.sbomify.com/MAL-2025-190633/): Malicious code in token-verify-passport (npm) (malicious package)
- [MAL-2025-190632](https://insights.sbomify.com/MAL-2025-190632/): Malicious code in tailwind-pulse (npm) (malicious package)
- [MAL-2025-190631](https://insights.sbomify.com/MAL-2025-190631/): Malicious code in tailwind-inquirer (npm) (malicious package)
- [MAL-2025-190630](https://insights.sbomify.com/MAL-2025-190630/): Malicious code in parse-session (npm) (malicious package)
- [MAL-2025-19063](https://insights.sbomify.com/MAL-2025-19063/): Malicious code in eagle-elephant-jzsx (npm) (malicious package)
- [MAL-2025-190629](https://insights.sbomify.com/MAL-2025-190629/): Malicious code in loliloli (npm) (malicious package)
- [MAL-2025-190628](https://insights.sbomify.com/MAL-2025-190628/): Malicious code in hash-guard (npm) (malicious package)
- [MAL-2025-190627](https://insights.sbomify.com/MAL-2025-190627/): Malicious code in chai-async-chain (npm) (malicious package)
- [MAL-2025-190626](https://insights.sbomify.com/MAL-2025-190626/): Malicious code in vue3-transpiler (npm) (malicious package)
- [MAL-2025-190625](https://insights.sbomify.com/MAL-2025-190625/): Malicious code in lion-second-package (npm) (malicious package)
- [MAL-2025-190624](https://insights.sbomify.com/MAL-2025-190624/): Malicious code in base62-58x (npm) (malicious package)
- [MAL-2025-190623](https://insights.sbomify.com/MAL-2025-190623/): Malicious code in cbre-flow-common (npm) (malicious package)
- [MAL-2025-190622](https://insights.sbomify.com/MAL-2025-190622/): Malicious code in com.unity.xr.visionos (npm) (malicious package)
- [MAL-2025-190621](https://insights.sbomify.com/MAL-2025-190621/): Malicious code in @eagleview/ev-mapviewer-interactions (npm) (malicious package)
- [MAL-2025-190620](https://insights.sbomify.com/MAL-2025-190620/): Malicious code in lyft-ui (npm) (malicious package)
- [MAL-2025-19062](https://insights.sbomify.com/MAL-2025-19062/): Malicious code in eagle-cherry-uoym (npm) (malicious package)
- [MAL-2025-190619](https://insights.sbomify.com/MAL-2025-190619/): Malicious code in hyatt-ui (npm) (malicious package)
- [MAL-2025-190618](https://insights.sbomify.com/MAL-2025-190618/): Malicious code in epicgames-ui (npm) (malicious package)
- [MAL-2025-190617](https://insights.sbomify.com/MAL-2025-190617/): Malicious code in doordash-ui (npm) (malicious package)
- [MAL-2025-190616](https://insights.sbomify.com/MAL-2025-190616/): Malicious code in uber-ui (npm) (malicious package)
- [MAL-2025-190615](https://insights.sbomify.com/MAL-2025-190615/): Malicious code in snapchat-ui (npm) (malicious package)
- [MAL-2025-190614](https://insights.sbomify.com/MAL-2025-190614/): Malicious code in sentry-ui (npm) (malicious package)
- [MAL-2025-190613](https://insights.sbomify.com/MAL-2025-190613/): Malicious code in linkedin-ui (npm) (malicious package)
- [MAL-2025-190612](https://insights.sbomify.com/MAL-2025-190612/): Malicious code in instacart-ui (npm) (malicious package)
- [MAL-2025-190611](https://insights.sbomify.com/MAL-2025-190611/): Malicious code in hilton-ui (npm) (malicious package)
- [MAL-2025-190610](https://insights.sbomify.com/MAL-2025-190610/): Malicious code in wishlist_dropdown (npm) (malicious package)
- [MAL-2025-19061](https://insights.sbomify.com/MAL-2025-19061/): Malicious code in eagle-cherry-qdj767-project (npm) (malicious package)
- [MAL-2025-190609](https://insights.sbomify.com/MAL-2025-190609/): Malicious code in o2-tooltip (npm) (malicious package)
- [MAL-2025-190608](https://insights.sbomify.com/MAL-2025-190608/): Malicious code in o2-modal (npm) (malicious package)
- [MAL-2025-190607](https://insights.sbomify.com/MAL-2025-190607/): Malicious code in airbnb-vermeer-node (npm) (malicious package)
- [MAL-2025-190606](https://insights.sbomify.com/MAL-2025-190606/): Malicious code in airbnb-story-constants (npm) (malicious package)
- [MAL-2025-190605](https://insights.sbomify.com/MAL-2025-190605/): Malicious code in airbnb-react-router-legacy-v3 (npm) (malicious package)
- [MAL-2025-190604](https://insights.sbomify.com/MAL-2025-190604/): Malicious code in airbnb-react-router-legacy (npm) (malicious package)
- [MAL-2025-190603](https://insights.sbomify.com/MAL-2025-190603/): Malicious code in airbnb-phoenix (npm) (malicious package)
- [MAL-2025-190602](https://insights.sbomify.com/MAL-2025-190602/): Malicious code in airbnb-luxury-messaging (npm) (malicious package)
- [MAL-2025-190601](https://insights.sbomify.com/MAL-2025-190601/): Malicious code in airbnb-blueimp-file-upload (npm) (malicious package)
- [MAL-2025-190600](https://insights.sbomify.com/MAL-2025-190600/): Malicious code in optly (npm) (malicious package)
- [MAL-2025-19060](https://insights.sbomify.com/MAL-2025-19060/): Malicious code in eagle-bark-6bag (npm) (malicious package)
- [MAL-2025-1906](https://insights.sbomify.com/MAL-2025-1906/): Malicious code in npm-manifest (npm) (malicious package)
- [MAL-2025-190599](https://insights.sbomify.com/MAL-2025-190599/): Malicious code in @vreden-team/baileys (npm) (malicious package)
- [MAL-2025-190598](https://insights.sbomify.com/MAL-2025-190598/): Malicious code in @ra-ide/udt-frontend (npm) (malicious package)
- [MAL-2025-190597](https://insights.sbomify.com/MAL-2025-190597/): Malicious code in @ra-ide/tag-editor-frontend (npm) (malicious package)
- [MAL-2025-190596](https://insights.sbomify.com/MAL-2025-190596/): Malicious code in @ra-ide/system (npm) (malicious package)
- [MAL-2025-190595](https://insights.sbomify.com/MAL-2025-190595/): Malicious code in @ra-ide/st-frontend (npm) (malicious package)
- [MAL-2025-190594](https://insights.sbomify.com/MAL-2025-190594/): Malicious code in @ra-ide/source-code-frontend (npm) (malicious package)
- [MAL-2025-190593](https://insights.sbomify.com/MAL-2025-190593/): Malicious code in @ra-ide/logix-frontend (npm) (malicious package)
- [MAL-2025-190592](https://insights.sbomify.com/MAL-2025-190592/): Malicious code in @ra-ide/ld-frontend (npm) (malicious package)
- [MAL-2025-190591](https://insights.sbomify.com/MAL-2025-190591/): Malicious code in @ra-ide/extension-ui (npm) (malicious package)
- [MAL-2025-190590](https://insights.sbomify.com/MAL-2025-190590/): Malicious code in @ra-ide/code-editor-frontend (npm) (malicious package)
- [MAL-2025-19059](https://insights.sbomify.com/MAL-2025-19059/): Malicious code in eagle-bamboo-abr842-project (npm) (malicious package)
- [MAL-2025-190589](https://insights.sbomify.com/MAL-2025-190589/): Malicious code in @ra-ftds/motion-extension (npm) (malicious package)
- [MAL-2025-190588](https://insights.sbomify.com/MAL-2025-190588/): Malicious code in @ra-ftds/ra-flourish-design-tokens (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/925/