# Vulnerabilities published in 2025 - [MAL-2025-91123](https://insights.sbomify.com/MAL-2025-91123/): Malicious code in tomi-botok57-riris (npm) (malicious package) - [MAL-2025-91122](https://insights.sbomify.com/MAL-2025-91122/): Malicious code in tomi-botok36-miaww (npm) (malicious package) - [MAL-2025-91121](https://insights.sbomify.com/MAL-2025-91121/): Malicious code in tomi-bika65-miaww (npm) (malicious package) - [MAL-2025-91120](https://insights.sbomify.com/MAL-2025-91120/): Malicious code in tomi-bakso34-riris (npm) (malicious package) - [MAL-2025-9112](https://insights.sbomify.com/MAL-2025-9112/): Malicious code in @neednova/credit-passport-supply (npm) (malicious package) - [MAL-2025-91119](https://insights.sbomify.com/MAL-2025-91119/): Malicious code in tired_anglerfish_z3n (npm) (malicious package) - [MAL-2025-91118](https://insights.sbomify.com/MAL-2025-91118/): Malicious code in tiny_guineafowl_z3n (npm) (malicious package) - [MAL-2025-91117](https://insights.sbomify.com/MAL-2025-91117/): Malicious code in tight_gayal_z3n (npm) (malicious package) - [MAL-2025-91116](https://insights.sbomify.com/MAL-2025-91116/): Malicious code in tiara-toge88-riris (npm) (malicious package) - [MAL-2025-91115](https://insights.sbomify.com/MAL-2025-91115/): Malicious code in tiara-tempe96-miaww (npm) (malicious package) - [MAL-2025-91114](https://insights.sbomify.com/MAL-2025-91114/): Malicious code in tiara-telurtahu30-riris (npm) (malicious package) - [MAL-2025-91113](https://insights.sbomify.com/MAL-2025-91113/): Malicious code in tiara-tapai99-riris (npm) (malicious package) - [MAL-2025-91112](https://insights.sbomify.com/MAL-2025-91112/): Malicious code in tiara-takokak6-riris (npm) (malicious package) - [MAL-2025-91111](https://insights.sbomify.com/MAL-2025-91111/): Malicious code in tiara-taiwan88-riris (npm) (malicious package) - [MAL-2025-91110](https://insights.sbomify.com/MAL-2025-91110/): Malicious code in tiara-tahu76-miaww (npm) (malicious package) - [MAL-2025-9111](https://insights.sbomify.com/MAL-2025-9111/): Malicious code in @neednova/cash (npm) (malicious package) - [MAL-2025-91109](https://insights.sbomify.com/MAL-2025-91109/): Malicious code in tiara-soto31-apidev (npm) (malicious package) - [MAL-2025-91108](https://insights.sbomify.com/MAL-2025-91108/): Malicious code in tiara-soto26-miaww (npm) (malicious package) - [MAL-2025-91107](https://insights.sbomify.com/MAL-2025-91107/): Malicious code in tiara-serimuka50-riris (npm) (malicious package) - [MAL-2025-91106](https://insights.sbomify.com/MAL-2025-91106/): Malicious code in tiara-semur11-miaww (npm) (malicious package) - [MAL-2025-91105](https://insights.sbomify.com/MAL-2025-91105/): Malicious code in tiara-sego100-miaww (npm) (malicious package) - [MAL-2025-91104](https://insights.sbomify.com/MAL-2025-91104/): Malicious code in tiara-sambalado26-miaww (npm) (malicious package) - [MAL-2025-91103](https://insights.sbomify.com/MAL-2025-91103/): Malicious code in tiara-sambalado13-riris (npm) (malicious package) - [MAL-2025-91102](https://insights.sbomify.com/MAL-2025-91102/): Malicious code in tiara-ruwet75-wekto (npm) (malicious package) - [MAL-2025-91101](https://insights.sbomify.com/MAL-2025-91101/): Malicious code in tiara-rujaksoto18-miaww (npm) (malicious package) - [MAL-2025-91100](https://insights.sbomify.com/MAL-2025-91100/): Malicious code in tiara-rojak66-riris (npm) (malicious package) - [MAL-2025-9110](https://insights.sbomify.com/MAL-2025-9110/): Malicious code in @mylong.io/jackson-candidate-app (npm) (malicious package) - [MAL-2025-91099](https://insights.sbomify.com/MAL-2025-91099/): Malicious code in tiara-rendang23-miaww (npm) (malicious package) - [MAL-2025-91098](https://insights.sbomify.com/MAL-2025-91098/): Malicious code in tiara-rawon35-apidev (npm) (malicious package) - [MAL-2025-91097](https://insights.sbomify.com/MAL-2025-91097/): Malicious code in tiara-rangi98-miaww (npm) (malicious package) - [MAL-2025-91096](https://insights.sbomify.com/MAL-2025-91096/): Malicious code in tiara-rangi97-kyuki (npm) (malicious package) - [MAL-2025-91095](https://insights.sbomify.com/MAL-2025-91095/): Malicious code in tiara-rangi51-miaww (npm) (malicious package) - [MAL-2025-91094](https://insights.sbomify.com/MAL-2025-91094/): Malicious code in tiara-ragi53-riris (npm) (malicious package) - [MAL-2025-91093](https://insights.sbomify.com/MAL-2025-91093/): Malicious code in tiara-pecel14-crottsekebon (npm) (malicious package) - [MAL-2025-91092](https://insights.sbomify.com/MAL-2025-91092/): Malicious code in tiara-papeda76-kyuki (npm) (malicious package) - [MAL-2025-91091](https://insights.sbomify.com/MAL-2025-91091/): Malicious code in tiara-papeda26-miaww (npm) (malicious package) - [MAL-2025-91090](https://insights.sbomify.com/MAL-2025-91090/): Malicious code in tiara-otak-otak56-kyuki (npm) (malicious package) - [MAL-2025-9109](https://insights.sbomify.com/MAL-2025-9109/): Malicious code in @my-reports/express-report (npm) (malicious package) - [MAL-2025-91089](https://insights.sbomify.com/MAL-2025-91089/): Malicious code in tiara-otak-otak14-miaww (npm) (malicious package) - [MAL-2025-91088](https://insights.sbomify.com/MAL-2025-91088/): Malicious code in tiara-ongol-ongol93-apidev (npm) (malicious package) - [MAL-2025-91087](https://insights.sbomify.com/MAL-2025-91087/): Malicious code in tiara-oncom37-miaww (npm) (malicious package) - [MAL-2025-91086](https://insights.sbomify.com/MAL-2025-91086/): Malicious code in tiara-nasisayur6-miaww (npm) (malicious package) - [MAL-2025-91085](https://insights.sbomify.com/MAL-2025-91085/): Malicious code in tiara-nasi70-riris (npm) (malicious package) - [MAL-2025-91084](https://insights.sbomify.com/MAL-2025-91084/): Malicious code in tiara-naget64-kyuki (npm) (malicious package) - [MAL-2025-91083](https://insights.sbomify.com/MAL-2025-91083/): Malicious code in tiara-moci82-crottsekebon (npm) (malicious package) - [MAL-2025-91082](https://insights.sbomify.com/MAL-2025-91082/): Malicious code in tiara-mie54-riris (npm) (malicious package) - [MAL-2025-91081](https://insights.sbomify.com/MAL-2025-91081/): Malicious code in tiara-menjes93-miaww (npm) (malicious package) - [MAL-2025-91080](https://insights.sbomify.com/MAL-2025-91080/): Malicious code in tiara-menjes9-riris (npm) (malicious package) - [MAL-2025-9108](https://insights.sbomify.com/MAL-2025-9108/): Malicious code in @moonpig/web-core-utils (npm) (malicious package) - [MAL-2025-91079](https://insights.sbomify.com/MAL-2025-91079/): Malicious code in tiara-menjes42-miaww (npm) (malicious package) - [MAL-2025-91078](https://insights.sbomify.com/MAL-2025-91078/): Malicious code in tiara-mendoan69-riris (npm) (malicious package) - [MAL-2025-91077](https://insights.sbomify.com/MAL-2025-91077/): Malicious code in tiara-mendoan1-miaww (npm) (malicious package) - [MAL-2025-91076](https://insights.sbomify.com/MAL-2025-91076/): Malicious code in tiara-mangut15-kyuki (npm) (malicious package) - [MAL-2025-91075](https://insights.sbomify.com/MAL-2025-91075/): Malicious code in tiara-lupis59-miaww (npm) (malicious package) - [MAL-2025-91074](https://insights.sbomify.com/MAL-2025-91074/): Malicious code in tiara-lumpur38-riris (npm) (malicious package) - [MAL-2025-91073](https://insights.sbomify.com/MAL-2025-91073/): Malicious code in tiara-lumpur25-riris (npm) (malicious package) - [MAL-2025-91072](https://insights.sbomify.com/MAL-2025-91072/): Malicious code in tiara-liwet57-miaww (npm) (malicious package) - [MAL-2025-91071](https://insights.sbomify.com/MAL-2025-91071/): Malicious code in tiara-lengko48-miaww (npm) (malicious package) - [MAL-2025-91070](https://insights.sbomify.com/MAL-2025-91070/): Malicious code in tiara-lapis88-miaww (npm) (malicious package) - [MAL-2025-9107](https://insights.sbomify.com/MAL-2025-9107/): Malicious code in @moonpig/web-core-app (npm) (malicious package) - [MAL-2025-91069](https://insights.sbomify.com/MAL-2025-91069/): Malicious code in tiara-lapis65-miaww (npm) (malicious package) - [MAL-2025-91068](https://insights.sbomify.com/MAL-2025-91068/): Malicious code in tiara-kupang62-riris (npm) (malicious package) - [MAL-2025-91067](https://insights.sbomify.com/MAL-2025-91067/): Malicious code in tiara-kue98-miaww (npm) (malicious package) - [MAL-2025-91066](https://insights.sbomify.com/MAL-2025-91066/): Malicious code in tiara-kue27-kyuki (npm) (malicious package) - [MAL-2025-91065](https://insights.sbomify.com/MAL-2025-91065/): Malicious code in tiara-kripik38-riris (npm) (malicious package) - [MAL-2025-91064](https://insights.sbomify.com/MAL-2025-91064/): Malicious code in tiara-kolak45-riris (npm) (malicious package) - [MAL-2025-91063](https://insights.sbomify.com/MAL-2025-91063/): Malicious code in tiara-klentik98-miaww (npm) (malicious package) - [MAL-2025-91062](https://insights.sbomify.com/MAL-2025-91062/): Malicious code in tiara-klentik58-riris (npm) (malicious package) - [MAL-2025-91061](https://insights.sbomify.com/MAL-2025-91061/): Malicious code in tiara-ketan70-riris (npm) (malicious package) - [MAL-2025-91060](https://insights.sbomify.com/MAL-2025-91060/): Malicious code in tiara-keripik88-miaww (npm) (malicious package) - [MAL-2025-9106](https://insights.sbomify.com/MAL-2025-9106/): Malicious code in @moonpig/web-core-analytics (npm) (malicious package) - [MAL-2025-91059](https://insights.sbomify.com/MAL-2025-91059/): Malicious code in tiara-keripik77-riris (npm) (malicious package) - [MAL-2025-91058](https://insights.sbomify.com/MAL-2025-91058/): Malicious code in tiara-keripik67-riris (npm) (malicious package) - [MAL-2025-91057](https://insights.sbomify.com/MAL-2025-91057/): Malicious code in tiara-keripik47-riris (npm) (malicious package) - [MAL-2025-91056](https://insights.sbomify.com/MAL-2025-91056/): Malicious code in tiara-keripik33-riris (npm) (malicious package) - [MAL-2025-91055](https://insights.sbomify.com/MAL-2025-91055/): Malicious code in tiara-kepok86-riris (npm) (malicious package) - [MAL-2025-91054](https://insights.sbomify.com/MAL-2025-91054/): Malicious code in tiara-kepok53-miaww (npm) (malicious package) - [MAL-2025-91053](https://insights.sbomify.com/MAL-2025-91053/): Malicious code in tiara-kentang83-riris (npm) (malicious package) - [MAL-2025-91052](https://insights.sbomify.com/MAL-2025-91052/): Malicious code in tiara-kembang61-riris (npm) (malicious package) - [MAL-2025-91051](https://insights.sbomify.com/MAL-2025-91051/): Malicious code in tiara-kembang20-riris (npm) (malicious package) - [MAL-2025-91050](https://insights.sbomify.com/MAL-2025-91050/): Malicious code in tiara-kacang76-kyuki (npm) (malicious package) - [MAL-2025-9105](https://insights.sbomify.com/MAL-2025-9105/): Malicious code in @moneyguide-dev/style-provider (npm) (malicious package) - [MAL-2025-91049](https://insights.sbomify.com/MAL-2025-91049/): Malicious code in tiara-kacang28-riris (npm) (malicious package) - [MAL-2025-91048](https://insights.sbomify.com/MAL-2025-91048/): Malicious code in tiara-gudeg49-riris (npm) (malicious package) - [MAL-2025-91047](https://insights.sbomify.com/MAL-2025-91047/): Malicious code in tiara-getuk62-riris (npm) (malicious package) - [MAL-2025-91046](https://insights.sbomify.com/MAL-2025-91046/): Malicious code in tiara-getuk5-miaww (npm) (malicious package) - [MAL-2025-91045](https://insights.sbomify.com/MAL-2025-91045/): Malicious code in tiara-getas39-miaww (npm) (malicious package) - [MAL-2025-91044](https://insights.sbomify.com/MAL-2025-91044/): Malicious code in tiara-getas16-miaww (npm) (malicious package) - [MAL-2025-91043](https://insights.sbomify.com/MAL-2025-91043/): Malicious code in tiara-gepuk97-kyuki (npm) (malicious package) - [MAL-2025-91042](https://insights.sbomify.com/MAL-2025-91042/): Malicious code in tiara-gepuk34-riris (npm) (malicious package) - [MAL-2025-91041](https://insights.sbomify.com/MAL-2025-91041/): Malicious code in tiara-gandul19-riris (npm) (malicious package) - [MAL-2025-91040](https://insights.sbomify.com/MAL-2025-91040/): Malicious code in tiara-enting8-miaww (npm) (malicious package) - [MAL-2025-9104](https://insights.sbomify.com/MAL-2025-9104/): Malicious code in @mintstudiouicore/telemetry (npm) (malicious package) - [MAL-2025-91039](https://insights.sbomify.com/MAL-2025-91039/): Malicious code in tiara-dodol13-riris (npm) (malicious package) - [MAL-2025-91038](https://insights.sbomify.com/MAL-2025-91038/): Malicious code in tiara-bubursumsum68-miaww (npm) (malicious package) - [MAL-2025-91037](https://insights.sbomify.com/MAL-2025-91037/): Malicious code in tiara-buburayam90-riris (npm) (malicious package) - [MAL-2025-91036](https://insights.sbomify.com/MAL-2025-91036/): Malicious code in tiara-bubur6-miaww (npm) (malicious package) - [MAL-2025-91035](https://insights.sbomify.com/MAL-2025-91035/): Malicious code in tiara-brengkes32-miaww (npm) (malicious package) - [MAL-2025-91034](https://insights.sbomify.com/MAL-2025-91034/): Malicious code in tiara-bakwan70-riris (npm) (malicious package) - [MAL-2025-91033](https://insights.sbomify.com/MAL-2025-91033/): Malicious code in tiara-bakwan64-riris (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/103/