# Vulnerabilities published in 2025


- [MAL-2025-91032](https://insights.sbomify.com/MAL-2025-91032/): Malicious code in tiara-bakwan28-miaww (npm) (malicious package)
- [MAL-2025-91031](https://insights.sbomify.com/MAL-2025-91031/): Malicious code in tiara-bakso75-kyuki (npm) (malicious package)
- [MAL-2025-91030](https://insights.sbomify.com/MAL-2025-91030/): Malicious code in tiara-bakso66-wekto (npm) (malicious package)
- [MAL-2025-9103](https://insights.sbomify.com/MAL-2025-9103/): Malicious code in @mintstudiouicore/coreutil (npm) (malicious package)
- [MAL-2025-91029](https://insights.sbomify.com/MAL-2025-91029/): Malicious code in tiara-bakso60-riris (npm) (malicious package)
- [MAL-2025-91028](https://insights.sbomify.com/MAL-2025-91028/): Malicious code in tiara-bakso54-miaww (npm) (malicious package)
- [MAL-2025-91027](https://insights.sbomify.com/MAL-2025-91027/): Malicious code in thundering_ferret_z3n (npm) (malicious package)
- [MAL-2025-91026](https://insights.sbomify.com/MAL-2025-91026/): Malicious code in thundering_dog_z3n (npm) (malicious package)
- [MAL-2025-91025](https://insights.sbomify.com/MAL-2025-91025/): Malicious code in thoughtless_monkey_z3n (npm) (malicious package)
- [MAL-2025-91024](https://insights.sbomify.com/MAL-2025-91024/): Malicious code in thoughtless_elephant_z3n (npm) (malicious package)
- [MAL-2025-91023](https://insights.sbomify.com/MAL-2025-91023/): Malicious code in thoughtful_mockingbird_z3n (npm) (malicious package)
- [MAL-2025-91022](https://insights.sbomify.com/MAL-2025-91022/): Malicious code in thorough_tyrannosaurus_z3n (npm) (malicious package)
- [MAL-2025-91021](https://insights.sbomify.com/MAL-2025-91021/): Malicious code in thorough_toad_z3n (npm) (malicious package)
- [MAL-2025-91020](https://insights.sbomify.com/MAL-2025-91020/): Malicious code in thirsty_marmoset_z3n (npm) (malicious package)
- [MAL-2025-9102](https://insights.sbomify.com/MAL-2025-9102/): Malicious code in @michaljaz/backdoor (npm) (malicious package)
- [MAL-2025-91019](https://insights.sbomify.com/MAL-2025-91019/): Malicious code in thirsty_boar_z3n (npm) (malicious package)
- [MAL-2025-91018](https://insights.sbomify.com/MAL-2025-91018/): Malicious code in thin_pig_z3n (npm) (malicious package)
- [MAL-2025-91017](https://insights.sbomify.com/MAL-2025-91017/): Malicious code in thick_fish_z3n (npm) (malicious package)
- [MAL-2025-91016](https://insights.sbomify.com/MAL-2025-91016/): Malicious code in theoretical_mackerel_z3n (npm) (malicious package)
- [MAL-2025-91015](https://insights.sbomify.com/MAL-2025-91015/): Malicious code in testy_trout_z3n (npm) (malicious package)
- [MAL-2025-91014](https://insights.sbomify.com/MAL-2025-91014/): Malicious code in testy_rook_z3n (npm) (malicious package)
- [MAL-2025-91013](https://insights.sbomify.com/MAL-2025-91013/): Malicious code in testy_possum_z3n (npm) (malicious package)
- [MAL-2025-91012](https://insights.sbomify.com/MAL-2025-91012/): Malicious code in testy_marmoset_z3n (npm) (malicious package)
- [MAL-2025-91011](https://insights.sbomify.com/MAL-2025-91011/): Malicious code in testy_butterfly_z3n (npm) (malicious package)
- [MAL-2025-91010](https://insights.sbomify.com/MAL-2025-91010/): Malicious code in test-skill-korea (npm) (malicious package)
- [MAL-2025-9101](https://insights.sbomify.com/MAL-2025-9101/): Malicious code in @merge-api/merge-javascript-shared (npm) (malicious package)
- [MAL-2025-91009](https://insights.sbomify.com/MAL-2025-91009/): Malicious code in territorial_platypus_z3n (npm) (malicious package)
- [MAL-2025-91008](https://insights.sbomify.com/MAL-2025-91008/): Malicious code in territorial_bonobo_z3n (npm) (malicious package)
- [MAL-2025-91007](https://insights.sbomify.com/MAL-2025-91007/): Malicious code in territorial_aardvark_z3n (npm) (malicious package)
- [MAL-2025-91006](https://insights.sbomify.com/MAL-2025-91006/): Malicious code in terrible_bear_z3n (npm) (malicious package)
- [MAL-2025-91005](https://insights.sbomify.com/MAL-2025-91005/): Malicious code in tense_wildcat_z3n (npm) (malicious package)
- [MAL-2025-91004](https://insights.sbomify.com/MAL-2025-91004/): Malicious code in tender_guanaco_z3n (npm) (malicious package)
- [MAL-2025-91003](https://insights.sbomify.com/MAL-2025-91003/): Malicious code in tender_dinosaur_z3n (npm) (malicious package)
- [MAL-2025-91002](https://insights.sbomify.com/MAL-2025-91002/): Malicious code in temporary_sawfish_z3n (npm) (malicious package)
- [MAL-2025-91001](https://insights.sbomify.com/MAL-2025-91001/): Malicious code in teenage_scallop_z3n (npm) (malicious package)
- [MAL-2025-91000](https://insights.sbomify.com/MAL-2025-91000/): Malicious code in teenage_crane_z3n (npm) (malicious package)
- [MAL-2025-9100](https://insights.sbomify.com/MAL-2025-9100/): Malicious code in @mediaspace/shared (npm) (malicious package)
- [MAL-2025-91](https://insights.sbomify.com/MAL-2025-91/): Malicious code in gha-update-image (npm) (malicious package)
- [MAL-2025-90999](https://insights.sbomify.com/MAL-2025-90999/): Malicious code in technological_wren_z3n (npm) (malicious package)
- [MAL-2025-90998](https://insights.sbomify.com/MAL-2025-90998/): Malicious code in technological_rabbit_z3n (npm) (malicious package)
- [MAL-2025-90997](https://insights.sbomify.com/MAL-2025-90997/): Malicious code in technological_lemming_z3n (npm) (malicious package)
- [MAL-2025-90996](https://insights.sbomify.com/MAL-2025-90996/): Malicious code in technical_rhinoceros_z3n (npm) (malicious package)
- [MAL-2025-90995](https://insights.sbomify.com/MAL-2025-90995/): Malicious code in technical_puffin_z3n (npm) (malicious package)
- [MAL-2025-90994](https://insights.sbomify.com/MAL-2025-90994/): Malicious code in tasty_mammal_z3n (npm) (malicious package)
- [MAL-2025-90993](https://insights.sbomify.com/MAL-2025-90993/): Malicious code in tasteless_bobolink_z3n (npm) (malicious package)
- [MAL-2025-90992](https://insights.sbomify.com/MAL-2025-90992/): Malicious code in tart_alligator_z3n (npm) (malicious package)
- [MAL-2025-90991](https://insights.sbomify.com/MAL-2025-90991/): Malicious code in tania-wajit88-miaww (npm) (malicious package)
- [MAL-2025-90990](https://insights.sbomify.com/MAL-2025-90990/): Malicious code in tania-wajit40-miaww (npm) (malicious package)
- [MAL-2025-90989](https://insights.sbomify.com/MAL-2025-90989/): Malicious code in tania-tumis85-miaww (npm) (malicious package)
- [MAL-2025-90988](https://insights.sbomify.com/MAL-2025-90988/): Malicious code in tania-tongseng14-miaww (npm) (malicious package)
- [MAL-2025-90987](https://insights.sbomify.com/MAL-2025-90987/): Malicious code in tania-tempe8-miaww (npm) (malicious package)
- [MAL-2025-90986](https://insights.sbomify.com/MAL-2025-90986/): Malicious code in tania-telurtahu91-miaww (npm) (malicious package)
- [MAL-2025-90985](https://insights.sbomify.com/MAL-2025-90985/): Malicious code in tania-telurtahu67-miaww (npm) (malicious package)
- [MAL-2025-90984](https://insights.sbomify.com/MAL-2025-90984/): Malicious code in tania-telur87-riris (npm) (malicious package)
- [MAL-2025-90983](https://insights.sbomify.com/MAL-2025-90983/): Malicious code in tania-tek19-riris (npm) (malicious package)
- [MAL-2025-90982](https://insights.sbomify.com/MAL-2025-90982/): Malicious code in tania-takokak56-miaww (npm) (malicious package)
- [MAL-2025-90981](https://insights.sbomify.com/MAL-2025-90981/): Malicious code in tania-taiwan79-riris (npm) (malicious package)
- [MAL-2025-90980](https://insights.sbomify.com/MAL-2025-90980/): Malicious code in tania-taiwan45-riris (npm) (malicious package)
- [MAL-2025-9098](https://insights.sbomify.com/MAL-2025-9098/): Malicious code in @market-explorer/market-explorer (npm) (malicious package)
- [MAL-2025-90979](https://insights.sbomify.com/MAL-2025-90979/): Malicious code in tania-tahu88-miaww (npm) (malicious package)
- [MAL-2025-90978](https://insights.sbomify.com/MAL-2025-90978/): Malicious code in tania-tahu74-riris (npm) (malicious package)
- [MAL-2025-90977](https://insights.sbomify.com/MAL-2025-90977/): Malicious code in tania-tahu35-kyuki (npm) (malicious package)
- [MAL-2025-90976](https://insights.sbomify.com/MAL-2025-90976/): Malicious code in tania-soto12-miaww (npm) (malicious package)
- [MAL-2025-90975](https://insights.sbomify.com/MAL-2025-90975/): Malicious code in tania-serimuka76-miaww (npm) (malicious package)
- [MAL-2025-90974](https://insights.sbomify.com/MAL-2025-90974/): Malicious code in tania-sasag41-apidev (npm) (malicious package)
- [MAL-2025-90973](https://insights.sbomify.com/MAL-2025-90973/): Malicious code in tania-sambalado17-miaww (npm) (malicious package)
- [MAL-2025-90972](https://insights.sbomify.com/MAL-2025-90972/): Malicious code in tania-rujaksoto32-riris (npm) (malicious package)
- [MAL-2025-90971](https://insights.sbomify.com/MAL-2025-90971/): Malicious code in tania-rujaksoto31-apidev (npm) (malicious package)
- [MAL-2025-90970](https://insights.sbomify.com/MAL-2025-90970/): Malicious code in tania-rujak32-miaww (npm) (malicious package)
- [MAL-2025-9097](https://insights.sbomify.com/MAL-2025-9097/): Malicious code in @marcos_feitoza/timer-tracker-swim (npm) (malicious package)
- [MAL-2025-90969](https://insights.sbomify.com/MAL-2025-90969/): Malicious code in tania-rendang87-riris (npm) (malicious package)
- [MAL-2025-90968](https://insights.sbomify.com/MAL-2025-90968/): Malicious code in tania-rangi86-miaww (npm) (malicious package)
- [MAL-2025-90967](https://insights.sbomify.com/MAL-2025-90967/): Malicious code in tania-pisang73-miaww (npm) (malicious package)
- [MAL-2025-90966](https://insights.sbomify.com/MAL-2025-90966/): Malicious code in tania-pecel60-riris (npm) (malicious package)
- [MAL-2025-90965](https://insights.sbomify.com/MAL-2025-90965/): Malicious code in tania-otak-otak80-apidev (npm) (malicious package)
- [MAL-2025-90964](https://insights.sbomify.com/MAL-2025-90964/): Malicious code in tania-ongol-ongol9-riris (npm) (malicious package)
- [MAL-2025-90963](https://insights.sbomify.com/MAL-2025-90963/): Malicious code in tania-oncom43-riris (npm) (malicious package)
- [MAL-2025-90962](https://insights.sbomify.com/MAL-2025-90962/): Malicious code in tania-nasi77-riris (npm) (malicious package)
- [MAL-2025-90961](https://insights.sbomify.com/MAL-2025-90961/): Malicious code in tania-naget87-riris (npm) (malicious package)
- [MAL-2025-90960](https://insights.sbomify.com/MAL-2025-90960/): Malicious code in tania-moci29-riris (npm) (malicious package)
- [MAL-2025-9096](https://insights.sbomify.com/MAL-2025-9096/): Malicious code in @marcos_feitoza/thebestrelay (npm) (malicious package)
- [MAL-2025-90959](https://insights.sbomify.com/MAL-2025-90959/): Malicious code in tania-miebogor34-riris (npm) (malicious package)
- [MAL-2025-90958](https://insights.sbomify.com/MAL-2025-90958/): Malicious code in tania-mieayam93-riris (npm) (malicious package)
- [MAL-2025-90957](https://insights.sbomify.com/MAL-2025-90957/): Malicious code in tania-menjes92-miaww (npm) (malicious package)
- [MAL-2025-90956](https://insights.sbomify.com/MAL-2025-90956/): Malicious code in tania-menjes48-riris (npm) (malicious package)
- [MAL-2025-90955](https://insights.sbomify.com/MAL-2025-90955/): Malicious code in tania-menjes30-riris (npm) (malicious package)
- [MAL-2025-90954](https://insights.sbomify.com/MAL-2025-90954/): Malicious code in tania-mendut31-riris (npm) (malicious package)
- [MAL-2025-90953](https://insights.sbomify.com/MAL-2025-90953/): Malicious code in tania-martabak96-wekto (npm) (malicious package)
- [MAL-2025-90952](https://insights.sbomify.com/MAL-2025-90952/): Malicious code in tania-martabak94-riris (npm) (malicious package)
- [MAL-2025-90951](https://insights.sbomify.com/MAL-2025-90951/): Malicious code in tania-martabak65-miaww (npm) (malicious package)
- [MAL-2025-90950](https://insights.sbomify.com/MAL-2025-90950/): Malicious code in tania-martabak36-riris (npm) (malicious package)
- [MAL-2025-9095](https://insights.sbomify.com/MAL-2025-9095/): Malicious code in @marcos_feitoza/test-release (npm) (malicious package)
- [MAL-2025-90949](https://insights.sbomify.com/MAL-2025-90949/): Malicious code in tania-mangut91-riris (npm) (malicious package)
- [MAL-2025-90948](https://insights.sbomify.com/MAL-2025-90948/): Malicious code in tania-mangut80-riris (npm) (malicious package)
- [MAL-2025-90947](https://insights.sbomify.com/MAL-2025-90947/): Malicious code in tania-mangut57-riris (npm) (malicious package)
- [MAL-2025-90946](https://insights.sbomify.com/MAL-2025-90946/): Malicious code in tania-lodeh53-miaww (npm) (malicious package)
- [MAL-2025-90945](https://insights.sbomify.com/MAL-2025-90945/): Malicious code in tania-lapis69-wekto (npm) (malicious package)
- [MAL-2025-90944](https://insights.sbomify.com/MAL-2025-90944/): Malicious code in tania-lapis40-miaww (npm) (malicious package)
- [MAL-2025-90943](https://insights.sbomify.com/MAL-2025-90943/): Malicious code in tania-kupat45-riris (npm) (malicious package)
- [MAL-2025-90942](https://insights.sbomify.com/MAL-2025-90942/): Malicious code in tania-kupang17-kyuki (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/104/