# Vulnerabilities published in 2025


- [MAL-2025-99568](https://insights.sbomify.com/MAL-2025-99568/): Malicious code in arif-kue99-remi (npm) (malicious package)
- [MAL-2025-99567](https://insights.sbomify.com/MAL-2025-99567/): Malicious code in arif-kue96-ruro (npm) (malicious package)
- [MAL-2025-99566](https://insights.sbomify.com/MAL-2025-99566/): Malicious code in arif-kue5-ruro (npm) (malicious package)
- [MAL-2025-99565](https://insights.sbomify.com/MAL-2025-99565/): Malicious code in arif-kue28-ruro (npm) (malicious package)
- [MAL-2025-99564](https://insights.sbomify.com/MAL-2025-99564/): Malicious code in arif-kripik80-ruro (npm) (malicious package)
- [MAL-2025-99563](https://insights.sbomify.com/MAL-2025-99563/): Malicious code in arif-kripik27-remi (npm) (malicious package)
- [MAL-2025-99562](https://insights.sbomify.com/MAL-2025-99562/): Malicious code in arif-kripik24-ruro (npm) (malicious package)
- [MAL-2025-99561](https://insights.sbomify.com/MAL-2025-99561/): Malicious code in arif-klipo39-ruro (npm) (malicious package)
- [MAL-2025-99560](https://insights.sbomify.com/MAL-2025-99560/): Malicious code in arif-klentik93-ruro (npm) (malicious package)
- [MAL-2025-9956](https://insights.sbomify.com/MAL-2025-9956/): Malicious code in @zalastax/nolb-_e1 (npm) (malicious package)
- [MAL-2025-99559](https://insights.sbomify.com/MAL-2025-99559/): Malicious code in arif-keripik45-remi (npm) (malicious package)
- [MAL-2025-99558](https://insights.sbomify.com/MAL-2025-99558/): Malicious code in arif-kacang92-ruro (npm) (malicious package)
- [MAL-2025-99557](https://insights.sbomify.com/MAL-2025-99557/): Malicious code in arif-jus71-ruro (npm) (malicious package)
- [MAL-2025-99556](https://insights.sbomify.com/MAL-2025-99556/): Malicious code in arif-jengkol87-ruro (npm) (malicious package)
- [MAL-2025-99555](https://insights.sbomify.com/MAL-2025-99555/): Malicious code in arif-jamblang82-ruro (npm) (malicious package)
- [MAL-2025-99554](https://insights.sbomify.com/MAL-2025-99554/): Malicious code in arif-ikan96-ruro (npm) (malicious package)
- [MAL-2025-99553](https://insights.sbomify.com/MAL-2025-99553/): Malicious code in arif-gulai96-ruro (npm) (malicious package)
- [MAL-2025-99552](https://insights.sbomify.com/MAL-2025-99552/): Malicious code in arif-gorengan65-ruro (npm) (malicious package)
- [MAL-2025-99551](https://insights.sbomify.com/MAL-2025-99551/): Malicious code in arif-gorengan38-ruro (npm) (malicious package)
- [MAL-2025-99550](https://insights.sbomify.com/MAL-2025-99550/): Malicious code in arif-gandul41-ruro (npm) (malicious package)
- [MAL-2025-9955](https://insights.sbomify.com/MAL-2025-9955/): Malicious code in @zalastax/nolb-_e0 (npm) (malicious package)
- [MAL-2025-99549](https://insights.sbomify.com/MAL-2025-99549/): Malicious code in arif-esdoger99-ruro (npm) (malicious package)
- [MAL-2025-99548](https://insights.sbomify.com/MAL-2025-99548/): Malicious code in arif-bubursumsum43-ruro (npm) (malicious package)
- [MAL-2025-99547](https://insights.sbomify.com/MAL-2025-99547/): Malicious code in arif-bubur93-ruro (npm) (malicious package)
- [MAL-2025-99546](https://insights.sbomify.com/MAL-2025-99546/): Malicious code in arif-brengkes80-ruro (npm) (malicious package)
- [MAL-2025-99545](https://insights.sbomify.com/MAL-2025-99545/): Malicious code in arif-bakwan88-ruro (npm) (malicious package)
- [MAL-2025-99544](https://insights.sbomify.com/MAL-2025-99544/): Malicious code in arif-asinan7-ruro (npm) (malicious package)
- [MAL-2025-99543](https://insights.sbomify.com/MAL-2025-99543/): Malicious code in architectural_warbler_replicate_automation (npm) (malicious package)
- [MAL-2025-99542](https://insights.sbomify.com/MAL-2025-99542/): Malicious code in architectural_fly_z3n (npm) (malicious package)
- [MAL-2025-99541](https://insights.sbomify.com/MAL-2025-99541/): Malicious code in architectural_cobra_z3n (npm) (malicious package)
- [MAL-2025-99540](https://insights.sbomify.com/MAL-2025-99540/): Malicious code in arbitrary_starfish_z3n (npm) (malicious package)
- [MAL-2025-9954](https://insights.sbomify.com/MAL-2025-9954/): Malicious code in @zalastax/nolb-_e (npm) (malicious package)
- [MAL-2025-99539](https://insights.sbomify.com/MAL-2025-99539/): Malicious code in arbitrary_partridge-appteadev (npm) (malicious package)
- [MAL-2025-99538](https://insights.sbomify.com/MAL-2025-99538/): Malicious code in arbitrary_kiwi_z3n (npm) (malicious package)
- [MAL-2025-99537](https://insights.sbomify.com/MAL-2025-99537/): Malicious code in arbitrary_fly-appteadev (npm) (malicious package)
- [MAL-2025-99536](https://insights.sbomify.com/MAL-2025-99536/): Malicious code in arbitrary_felidae-appteadev (npm) (malicious package)
- [MAL-2025-99535](https://insights.sbomify.com/MAL-2025-99535/): Malicious code in arbitrary_elephant_0xrequest (npm) (malicious package)
- [MAL-2025-99534](https://insights.sbomify.com/MAL-2025-99534/): Malicious code in aqflkx-devapptea (npm) (malicious package)
- [MAL-2025-99533](https://insights.sbomify.com/MAL-2025-99533/): Malicious code in apricot-notthedevs (npm) (malicious package)
- [MAL-2025-99532](https://insights.sbomify.com/MAL-2025-99532/): Malicious code in appropriate_unicorn_z3n (npm) (malicious package)
- [MAL-2025-99531](https://insights.sbomify.com/MAL-2025-99531/): Malicious code in appropriate_mollusk_0xrequest (npm) (malicious package)
- [MAL-2025-99530](https://insights.sbomify.com/MAL-2025-99530/): Malicious code in appropriate_mammal_dumbs (npm) (malicious package)
- [MAL-2025-9953](https://insights.sbomify.com/MAL-2025-9953/): Malicious code in @zalastax/nolb-_due (npm) (malicious package)
- [MAL-2025-99529](https://insights.sbomify.com/MAL-2025-99529/): Malicious code in appropriate_locust_0xrequest (npm) (malicious package)
- [MAL-2025-99528](https://insights.sbomify.com/MAL-2025-99528/): Malicious code in appropriate_hoverfly_0xrequest (npm) (malicious package)
- [MAL-2025-99527](https://insights.sbomify.com/MAL-2025-99527/): Malicious code in appropriate_armadillo-appteadev (npm) (malicious package)
- [MAL-2025-99526](https://insights.sbomify.com/MAL-2025-99526/): Malicious code in applicable_wolf-appteadev (npm) (malicious package)
- [MAL-2025-99525](https://insights.sbomify.com/MAL-2025-99525/): Malicious code in applicable_tiglon-silentdev (npm) (malicious package)
- [MAL-2025-99524](https://insights.sbomify.com/MAL-2025-99524/): Malicious code in applicable_tern_dumbs (npm) (malicious package)
- [MAL-2025-99523](https://insights.sbomify.com/MAL-2025-99523/): Malicious code in applicable_roundworm_z3n (npm) (malicious package)
- [MAL-2025-99522](https://insights.sbomify.com/MAL-2025-99522/): Malicious code in applicable_puma_z3n (npm) (malicious package)
- [MAL-2025-99521](https://insights.sbomify.com/MAL-2025-99521/): Malicious code in applicable_owl_0xrequest (npm) (malicious package)
- [MAL-2025-99520](https://insights.sbomify.com/MAL-2025-99520/): Malicious code in applicable_firefly-appteadev (npm) (malicious package)
- [MAL-2025-9952](https://insights.sbomify.com/MAL-2025-9952/): Malicious code in @zalastax/nolb-_du2 (npm) (malicious package)
- [MAL-2025-99519](https://insights.sbomify.com/MAL-2025-99519/): Malicious code in applicable_cuckoo_z3n (npm) (malicious package)
- [MAL-2025-99518](https://insights.sbomify.com/MAL-2025-99518/): Malicious code in apparent_wildebeest_z3n (npm) (malicious package)
- [MAL-2025-99517](https://insights.sbomify.com/MAL-2025-99517/): Malicious code in apparent_kingfisher_0xrequest (npm) (malicious package)
- [MAL-2025-99516](https://insights.sbomify.com/MAL-2025-99516/): Malicious code in apparent_hamster_0xrequest (npm) (malicious package)
- [MAL-2025-99515](https://insights.sbomify.com/MAL-2025-99515/): Malicious code in apparent_firefly_z3n (npm) (malicious package)
- [MAL-2025-99514](https://insights.sbomify.com/MAL-2025-99514/): Malicious code in apparent_earthworm_z3n (npm) (malicious package)
- [MAL-2025-99513](https://insights.sbomify.com/MAL-2025-99513/): Malicious code in apparent_dolphin_z3n (npm) (malicious package)
- [MAL-2025-99512](https://insights.sbomify.com/MAL-2025-99512/): Malicious code in apparent_damselfly_z3n (npm) (malicious package)
- [MAL-2025-99511](https://insights.sbomify.com/MAL-2025-99511/): Malicious code in appalling_wombat_z3n (npm) (malicious package)
- [MAL-2025-99510](https://insights.sbomify.com/MAL-2025-99510/): Malicious code in appalling_wallaby_z3n (npm) (malicious package)
- [MAL-2025-9951](https://insights.sbomify.com/MAL-2025-9951/): Malicious code in @zalastax/nolb-_dsr-rollback-org-s (npm) (malicious package)
- [MAL-2025-99509](https://insights.sbomify.com/MAL-2025-99509/): Malicious code in appalling_unicorn_z3n (npm) (malicious package)
- [MAL-2025-99508](https://insights.sbomify.com/MAL-2025-99508/): Malicious code in appalling_silkworm_0xrequest (npm) (malicious package)
- [MAL-2025-99507](https://insights.sbomify.com/MAL-2025-99507/): Malicious code in appalling_reindeer_z3n (npm) (malicious package)
- [MAL-2025-99506](https://insights.sbomify.com/MAL-2025-99506/): Malicious code in appalling_raccoon_z3n (npm) (malicious package)
- [MAL-2025-99505](https://insights.sbomify.com/MAL-2025-99505/): Malicious code in appalling_quail_0xrequest (npm) (malicious package)
- [MAL-2025-99504](https://insights.sbomify.com/MAL-2025-99504/): Malicious code in appalling_marlin-teagooddev (npm) (malicious package)
- [MAL-2025-99503](https://insights.sbomify.com/MAL-2025-99503/): Malicious code in appalling_lion_z3n (npm) (malicious package)
- [MAL-2025-99502](https://insights.sbomify.com/MAL-2025-99502/): Malicious code in appalling_guineafowl_z3n (npm) (malicious package)
- [MAL-2025-99501](https://insights.sbomify.com/MAL-2025-99501/): Malicious code in appalling_falcon_0xrequest (npm) (malicious package)
- [MAL-2025-99500](https://insights.sbomify.com/MAL-2025-99500/): Malicious code in appalling_falcon-smiletea (npm) (malicious package)
- [MAL-2025-9950](https://insights.sbomify.com/MAL-2025-9950/): Malicious code in @zalastax/nolb-_dsr-rollback-org-r (npm) (malicious package)
- [MAL-2025-995](https://insights.sbomify.com/MAL-2025-995/): Malicious code in toneo (PyPI) (malicious package)
- [MAL-2025-99499](https://insights.sbomify.com/MAL-2025-99499/): Malicious code in aozalm-devapptea (npm) (malicious package)
- [MAL-2025-99498](https://insights.sbomify.com/MAL-2025-99498/): Malicious code in anxious_tortoise_z3n (npm) (malicious package)
- [MAL-2025-99497](https://insights.sbomify.com/MAL-2025-99497/): Malicious code in anxious_starfish_z3n (npm) (malicious package)
- [MAL-2025-99496](https://insights.sbomify.com/MAL-2025-99496/): Malicious code in anxious_hamster_z3n (npm) (malicious package)
- [MAL-2025-99495](https://insights.sbomify.com/MAL-2025-99495/): Malicious code in anxious_haddock_z3n (npm) (malicious package)
- [MAL-2025-99494](https://insights.sbomify.com/MAL-2025-99494/): Malicious code in anxious_galliform-silentdev (npm) (malicious package)
- [MAL-2025-99493](https://insights.sbomify.com/MAL-2025-99493/): Malicious code in anxious_fox_z3n (npm) (malicious package)
- [MAL-2025-99492](https://insights.sbomify.com/MAL-2025-99492/): Malicious code in anxious_eagle-silentdev (npm) (malicious package)
- [MAL-2025-99491](https://insights.sbomify.com/MAL-2025-99491/): Malicious code in anxious_deer_z3n (npm) (malicious package)
- [MAL-2025-99490](https://insights.sbomify.com/MAL-2025-99490/): Malicious code in anxious_caterpillar-appteadev (npm) (malicious package)
- [MAL-2025-9949](https://insights.sbomify.com/MAL-2025-9949/): Malicious code in @zalastax/nolb-_dsr-rollback-org-q (npm) (malicious package)
- [MAL-2025-99489](https://insights.sbomify.com/MAL-2025-99489/): Malicious code in anxious_antlion-appteadev (npm) (malicious package)
- [MAL-2025-99488](https://insights.sbomify.com/MAL-2025-99488/): Malicious code in anxious_angelfish_z3n (npm) (malicious package)
- [MAL-2025-99487](https://insights.sbomify.com/MAL-2025-99487/): Malicious code in anthony-wallet-store (npm) (malicious package)
- [MAL-2025-99486](https://insights.sbomify.com/MAL-2025-99486/): Malicious code in anthony-validator-catalyst (npm) (malicious package)
- [MAL-2025-99485](https://insights.sbomify.com/MAL-2025-99485/): Malicious code in anthony-soluble-pot (npm) (malicious package)
- [MAL-2025-99484](https://insights.sbomify.com/MAL-2025-99484/): Malicious code in anonymous_tarantula_z3n (npm) (malicious package)
- [MAL-2025-99483](https://insights.sbomify.com/MAL-2025-99483/): Malicious code in anonymous_peafowl_z3n (npm) (malicious package)
- [MAL-2025-99482](https://insights.sbomify.com/MAL-2025-99482/): Malicious code in anonymous_clownfish-appteadev (npm) (malicious package)
- [MAL-2025-99481](https://insights.sbomify.com/MAL-2025-99481/): Malicious code in anonymous_bobcat_z3n (npm) (malicious package)
- [MAL-2025-99480](https://insights.sbomify.com/MAL-2025-99480/): Malicious code in anonymous_bison_z3n (npm) (malicious package)
- [MAL-2025-9948](https://insights.sbomify.com/MAL-2025-9948/): Malicious code in @zalastax/nolb-_dsr-rollback-org-p (npm) (malicious package)
- [MAL-2025-99479](https://insights.sbomify.com/MAL-2025-99479/): Malicious code in annual_quokka_dumbs (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/10/