# Vulnerabilities published in 2025 - [MAL-2025-190587](https://insights.sbomify.com/MAL-2025-190587/): Malicious code in alicenpmpocpackage (npm) (malicious package) - [MAL-2025-190586](https://insights.sbomify.com/MAL-2025-190586/): Malicious code in identity-authn-core-ui (npm) (malicious package) - [MAL-2025-190585](https://insights.sbomify.com/MAL-2025-190585/): Malicious code in expertsvc-onboard-offboard (npm) (malicious package) - [MAL-2025-190584](https://insights.sbomify.com/MAL-2025-190584/): Malicious code in @kiwiiw/ez-lib (npm) (malicious package) - [MAL-2025-190583](https://insights.sbomify.com/MAL-2025-190583/): Malicious code in node-calculator-fa00 (npm) (malicious package) - [MAL-2025-190582](https://insights.sbomify.com/MAL-2025-190582/): Malicious code in just-a-calculator (npm) (malicious package) - [MAL-2025-190581](https://insights.sbomify.com/MAL-2025-190581/): Malicious code in com.unity.polyspatial.xr (npm) (malicious package) - [MAL-2025-190580](https://insights.sbomify.com/MAL-2025-190580/): Malicious code in lululemon-b2b-utils (npm) (malicious package) - [MAL-2025-19058](https://insights.sbomify.com/MAL-2025-19058/): Malicious code in eagle-albatross-ttk230-project (npm) (malicious package) - [MAL-2025-190579](https://insights.sbomify.com/MAL-2025-190579/): Malicious code in hellospa (npm) (malicious package) - [MAL-2025-190578](https://insights.sbomify.com/MAL-2025-190578/): Malicious code in node-calculator-cf8c (npm) (malicious package) - [MAL-2025-190577](https://insights.sbomify.com/MAL-2025-190577/): Malicious code in alicenpmpackage13 (npm) (malicious package) - [MAL-2025-190576](https://insights.sbomify.com/MAL-2025-190576/): Malicious code in alicenpmpackage1 (npm) (malicious package) - [MAL-2025-190575](https://insights.sbomify.com/MAL-2025-190575/): Malicious code in werufgugweuiguiwergqui (npm) (malicious package) - [MAL-2025-190574](https://insights.sbomify.com/MAL-2025-190574/): Malicious code in kc-next (npm) (malicious package) - [MAL-2025-190573](https://insights.sbomify.com/MAL-2025-190573/): Malicious code in gbiz-next (npm) (malicious package) - [MAL-2025-190572](https://insights.sbomify.com/MAL-2025-190572/): Malicious code in react-svg-module (npm) (malicious package) - [MAL-2025-190571](https://insights.sbomify.com/MAL-2025-190571/): Malicious code in react-svg-helper (npm) (malicious package) - [MAL-2025-190570](https://insights.sbomify.com/MAL-2025-190570/): Malicious code in node-calculator-8bf9 (npm) (malicious package) - [MAL-2025-19057](https://insights.sbomify.com/MAL-2025-19057/): Malicious code in eadlinks (npm) (malicious package) - [MAL-2025-190569](https://insights.sbomify.com/MAL-2025-190569/): Malicious code in node-calculator-b0e4 (npm) (malicious package) - [MAL-2025-190568](https://insights.sbomify.com/MAL-2025-190568/): Malicious code in captcha-paypal (npm) (malicious package) - [MAL-2025-190567](https://insights.sbomify.com/MAL-2025-190567/): Malicious code in security-testing-research22 (npm) (malicious package) - [MAL-2025-190566](https://insights.sbomify.com/MAL-2025-190566/): Malicious code in workingstealer (npm) (malicious package) - [MAL-2025-190565](https://insights.sbomify.com/MAL-2025-190565/): Malicious code in tailwindcss-setfavicon (npm) (malicious package) - [MAL-2025-190564](https://insights.sbomify.com/MAL-2025-190564/): Malicious code in tailwindcss-breezium (npm) (malicious package) - [MAL-2025-190563](https://insights.sbomify.com/MAL-2025-190563/): Malicious code in scriptstealer (npm) (malicious package) - [MAL-2025-190562](https://insights.sbomify.com/MAL-2025-190562/): Malicious code in node-calculator-3e62 (npm) (malicious package) - [MAL-2025-190561](https://insights.sbomify.com/MAL-2025-190561/): Malicious code in mystealer (npm) (malicious package) - [MAL-2025-190560](https://insights.sbomify.com/MAL-2025-190560/): Malicious code in mongoose-odm (npm) (malicious package) - [MAL-2025-19056](https://insights.sbomify.com/MAL-2025-19056/): Malicious code in eact (npm) (malicious package) - [MAL-2025-190559](https://insights.sbomify.com/MAL-2025-190559/): Malicious code in finastealer (npm) (malicious package) - [MAL-2025-190558](https://insights.sbomify.com/MAL-2025-190558/): Malicious code in @profmego/alipay-babyblue (npm) (malicious package) - [MAL-2025-190557](https://insights.sbomify.com/MAL-2025-190557/): Malicious code in @grumpycoffeecup/hello-npm-world (npm) (malicious package) - [MAL-2025-190556](https://insights.sbomify.com/MAL-2025-190556/): Malicious code in 1libxmljs2 (npm) (malicious package) - [MAL-2025-190555](https://insights.sbomify.com/MAL-2025-190555/): Malicious code in tailwindcss-webfont-awesome (npm) (malicious package) - [MAL-2025-190554](https://insights.sbomify.com/MAL-2025-190554/): Malicious code in pretty-jsonify (npm) (malicious package) - [MAL-2025-190553](https://insights.sbomify.com/MAL-2025-190553/): Malicious code in multi-provider-settings (npm) (malicious package) - [MAL-2025-190552](https://insights.sbomify.com/MAL-2025-190552/): Malicious code in chai-type (npm) (malicious package) - [MAL-2025-190551](https://insights.sbomify.com/MAL-2025-190551/): Malicious code in node-calculator-36ae (npm) (malicious package) - [MAL-2025-190550](https://insights.sbomify.com/MAL-2025-190550/): Malicious code in transparent-example-request99 (npm) (malicious package) - [MAL-2025-19055](https://insights.sbomify.com/MAL-2025-19055/): Malicious code in eability (npm) (malicious package) - [MAL-2025-190549](https://insights.sbomify.com/MAL-2025-190549/): Malicious code in ancestry-unified-logger (npm) (malicious package) - [MAL-2025-190548](https://insights.sbomify.com/MAL-2025-190548/): Malicious code in node-calculator-yktt (npm) (malicious package) - [MAL-2025-190547](https://insights.sbomify.com/MAL-2025-190547/): Malicious code in node-calculator-x7k9 (npm) (malicious package) - [MAL-2025-190546](https://insights.sbomify.com/MAL-2025-190546/): Malicious code in node-calculator-feea (npm) (malicious package) - [MAL-2025-190545](https://insights.sbomify.com/MAL-2025-190545/): Malicious code in node-calculator-f209 (npm) (malicious package) - [MAL-2025-190544](https://insights.sbomify.com/MAL-2025-190544/): Malicious code in node-calculator-ecec (npm) (malicious package) - [MAL-2025-190543](https://insights.sbomify.com/MAL-2025-190543/): Malicious code in node-calculator-e0b2 (npm) (malicious package) - [MAL-2025-190542](https://insights.sbomify.com/MAL-2025-190542/): Malicious code in node-calculator-de84 (npm) (malicious package) - [MAL-2025-190541](https://insights.sbomify.com/MAL-2025-190541/): Malicious code in node-calculator-d234 (npm) (malicious package) - [MAL-2025-190540](https://insights.sbomify.com/MAL-2025-190540/): Malicious code in node-calculator-c3ef (npm) (malicious package) - [MAL-2025-19054](https://insights.sbomify.com/MAL-2025-19054/): Malicious code in e4lectron (npm) (malicious package) - [MAL-2025-190539](https://insights.sbomify.com/MAL-2025-190539/): Malicious code in node-calculator-b57e (npm) (malicious package) - [MAL-2025-190538](https://insights.sbomify.com/MAL-2025-190538/): Malicious code in node-calculator-b549 (npm) (malicious package) - [MAL-2025-190537](https://insights.sbomify.com/MAL-2025-190537/): Malicious code in node-calculator-9c62 (npm) (malicious package) - [MAL-2025-190536](https://insights.sbomify.com/MAL-2025-190536/): Malicious code in node-calculator-9b93 (npm) (malicious package) - [MAL-2025-190535](https://insights.sbomify.com/MAL-2025-190535/): Malicious code in node-calculator-98b6 (npm) (malicious package) - [MAL-2025-190534](https://insights.sbomify.com/MAL-2025-190534/): Malicious code in node-calculator-91aa (npm) (malicious package) - [MAL-2025-190533](https://insights.sbomify.com/MAL-2025-190533/): Malicious code in node-calculator-8b5f (npm) (malicious package) - [MAL-2025-190532](https://insights.sbomify.com/MAL-2025-190532/): Malicious code in node-calculator-68f8 (npm) (malicious package) - [MAL-2025-190531](https://insights.sbomify.com/MAL-2025-190531/): Malicious code in node-calculator-522f (npm) (malicious package) - [MAL-2025-190530](https://insights.sbomify.com/MAL-2025-190530/): Malicious code in node-calculator-25bb (npm) (malicious package) - [MAL-2025-19053](https://insights.sbomify.com/MAL-2025-19053/): Malicious code in e3tt87 (npm) (malicious package) - [MAL-2025-190529](https://insights.sbomify.com/MAL-2025-190529/): Malicious code in node-calculator-239a (npm) (malicious package) - [MAL-2025-190528](https://insights.sbomify.com/MAL-2025-190528/): Malicious code in node-calculator-215d (npm) (malicious package) - [MAL-2025-190527](https://insights.sbomify.com/MAL-2025-190527/): Malicious code in node-calculator-1dc0 (npm) (malicious package) - [MAL-2025-190526](https://insights.sbomify.com/MAL-2025-190526/): Malicious code in node-calculator-0c8f (npm) (malicious package) - [MAL-2025-190525](https://insights.sbomify.com/MAL-2025-190525/): Malicious code in node-calculator-043e (npm) (malicious package) - [MAL-2025-190524](https://insights.sbomify.com/MAL-2025-190524/): Malicious code in node-calculator-8ddb (npm) (malicious package) - [MAL-2025-190523](https://insights.sbomify.com/MAL-2025-190523/): Malicious code in node-calculator-c213 (npm) (malicious package) - [MAL-2025-190522](https://insights.sbomify.com/MAL-2025-190522/): Malicious code in node-calculator-ac24 (npm) (malicious package) - [MAL-2025-190521](https://insights.sbomify.com/MAL-2025-190521/): Malicious code in node-calculator-7bea (npm) (malicious package) - [MAL-2025-190520](https://insights.sbomify.com/MAL-2025-190520/): Malicious code in node-calculator-4e41 (npm) (malicious package) - [MAL-2025-19052](https://insights.sbomify.com/MAL-2025-19052/): Malicious code in e3lectron (npm) (malicious package) - [MAL-2025-190519](https://insights.sbomify.com/MAL-2025-190519/): Malicious code in node-calculator-fc9a (npm) (malicious package) - [MAL-2025-190518](https://insights.sbomify.com/MAL-2025-190518/): Malicious code in node-calculator-9e41 (npm) (malicious package) - [MAL-2025-190517](https://insights.sbomify.com/MAL-2025-190517/): Malicious code in node-calculator-1b6e (npm) (malicious package) - [MAL-2025-190516](https://insights.sbomify.com/MAL-2025-190516/): Malicious code in node-calculator-0f50 (npm) (malicious package) - [MAL-2025-190515](https://insights.sbomify.com/MAL-2025-190515/): Malicious code in node-calculator-f4d5 (npm) (malicious package) - [MAL-2025-190514](https://insights.sbomify.com/MAL-2025-190514/): Malicious code in node-calculator-6a88 (npm) (malicious package) - [MAL-2025-190513](https://insights.sbomify.com/MAL-2025-190513/): Malicious code in tailwind-view-ui (npm) (malicious package) - [MAL-2025-190512](https://insights.sbomify.com/MAL-2025-190512/): Malicious code in bcryptkit (npm) (malicious package) - [MAL-2025-190511](https://insights.sbomify.com/MAL-2025-190511/): Malicious code in signals-embed (npm) (malicious package) - [MAL-2025-190510](https://insights.sbomify.com/MAL-2025-190510/): Malicious code in react-native-animated-shine (npm) (malicious package) - [MAL-2025-19051](https://insights.sbomify.com/MAL-2025-19051/): Malicious code in e2b7dl (npm) (malicious package) - [MAL-2025-190509](https://insights.sbomify.com/MAL-2025-190509/): Malicious code in react-confetti-modern (npm) (malicious package) - [MAL-2025-190508](https://insights.sbomify.com/MAL-2025-190508/): Malicious code in integrator-filescrypt2025 (npm) (malicious package) - [MAL-2025-190507](https://insights.sbomify.com/MAL-2025-190507/): Malicious code in integrator-2830 (npm) (malicious package) - [MAL-2025-190506](https://insights.sbomify.com/MAL-2025-190506/): Malicious code in integrator-2829 (npm) (malicious package) - [MAL-2025-190505](https://insights.sbomify.com/MAL-2025-190505/): Malicious code in dsidospsodlks (npm) (malicious package) - [MAL-2025-190504](https://insights.sbomify.com/MAL-2025-190504/): Malicious code in chai-proxify (npm) (malicious package) - [MAL-2025-190503](https://insights.sbomify.com/MAL-2025-190503/): Malicious code in applicationooks21 (npm) (malicious package) - [MAL-2025-190502](https://insights.sbomify.com/MAL-2025-190502/): Malicious code in application-phskck (npm) (malicious package) - [MAL-2025-190501](https://insights.sbomify.com/MAL-2025-190501/): Malicious code in tailwind-styled-scrollbar (npm) (malicious package) - [MAL-2025-190500](https://insights.sbomify.com/MAL-2025-190500/): Malicious code in com.mixpanel.unity (npm) (malicious package) - [MAL-2025-19050](https://insights.sbomify.com/MAL-2025-19050/): Malicious code in e0hgxp (npm) (malicious package) - [MAL-2025-1905](https://insights.sbomify.com/MAL-2025-1905/): Malicious code in nflx-metaflow (npm) (malicious package) - [MAL-2025-190499](https://insights.sbomify.com/MAL-2025-190499/): Malicious code in filifecycleserv-paypal (npm) (malicious package) - [MAL-2025-190498](https://insights.sbomify.com/MAL-2025-190498/): Malicious code in validator-node (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/926/