# Vulnerabilities published in 2025


- [MAL-2025-90941](https://insights.sbomify.com/MAL-2025-90941/): Malicious code in tania-kue94-miaww (npm) (malicious package)
- [MAL-2025-90940](https://insights.sbomify.com/MAL-2025-90940/): Malicious code in tania-kue60-miaww (npm) (malicious package)
- [MAL-2025-9094](https://insights.sbomify.com/MAL-2025-9094/): Malicious code in @marcos_feitoza/ola-mundo (npm) (malicious package)
- [MAL-2025-90939](https://insights.sbomify.com/MAL-2025-90939/): Malicious code in tania-kue21-riris (npm) (malicious package)
- [MAL-2025-90938](https://insights.sbomify.com/MAL-2025-90938/): Malicious code in tania-kripik93-riris (npm) (malicious package)
- [MAL-2025-90937](https://insights.sbomify.com/MAL-2025-90937/): Malicious code in tania-kripik69-riris (npm) (malicious package)
- [MAL-2025-90936](https://insights.sbomify.com/MAL-2025-90936/): Malicious code in tania-kripik41-riris (npm) (malicious package)
- [MAL-2025-90935](https://insights.sbomify.com/MAL-2025-90935/): Malicious code in tania-kolak77-riris (npm) (malicious package)
- [MAL-2025-90934](https://insights.sbomify.com/MAL-2025-90934/): Malicious code in tania-klipo29-miaww (npm) (malicious package)
- [MAL-2025-90933](https://insights.sbomify.com/MAL-2025-90933/): Malicious code in tania-klentik62-miaww (npm) (malicious package)
- [MAL-2025-90932](https://insights.sbomify.com/MAL-2025-90932/): Malicious code in tania-ketan66-wekto (npm) (malicious package)
- [MAL-2025-90931](https://insights.sbomify.com/MAL-2025-90931/): Malicious code in tania-ketan11-miaww (npm) (malicious package)
- [MAL-2025-90930](https://insights.sbomify.com/MAL-2025-90930/): Malicious code in tania-keripik83-miaww (npm) (malicious package)
- [MAL-2025-9093](https://insights.sbomify.com/MAL-2025-9093/): Malicious code in @marcos_feitoza/may-ip (npm) (malicious package)
- [MAL-2025-90929](https://insights.sbomify.com/MAL-2025-90929/): Malicious code in tania-kemplang50-miaww (npm) (malicious package)
- [MAL-2025-90928](https://insights.sbomify.com/MAL-2025-90928/): Malicious code in tania-kemplang11-riris (npm) (malicious package)
- [MAL-2025-90927](https://insights.sbomify.com/MAL-2025-90927/): Malicious code in tania-kacang62-sluey (npm) (malicious package)
- [MAL-2025-90926](https://insights.sbomify.com/MAL-2025-90926/): Malicious code in tania-jengkol74-wekto (npm) (malicious package)
- [MAL-2025-90925](https://insights.sbomify.com/MAL-2025-90925/): Malicious code in tania-gulai33-riris (npm) (malicious package)
- [MAL-2025-90924](https://insights.sbomify.com/MAL-2025-90924/): Malicious code in tania-gudeg97-sluey (npm) (malicious package)
- [MAL-2025-90923](https://insights.sbomify.com/MAL-2025-90923/): Malicious code in tania-gudeg48-riris (npm) (malicious package)
- [MAL-2025-90922](https://insights.sbomify.com/MAL-2025-90922/): Malicious code in tania-gorengan65-riris (npm) (malicious package)
- [MAL-2025-90921](https://insights.sbomify.com/MAL-2025-90921/): Malicious code in tania-getas85-riris (npm) (malicious package)
- [MAL-2025-90920](https://insights.sbomify.com/MAL-2025-90920/): Malicious code in tania-gepuk71-miaww (npm) (malicious package)
- [MAL-2025-9092](https://insights.sbomify.com/MAL-2025-9092/): Malicious code in @marcos_feitoza/docker-image (npm) (malicious package)
- [MAL-2025-90919](https://insights.sbomify.com/MAL-2025-90919/): Malicious code in tania-gandul46-riris (npm) (malicious package)
- [MAL-2025-90918](https://insights.sbomify.com/MAL-2025-90918/): Malicious code in tania-esdoger52-riris (npm) (malicious package)
- [MAL-2025-90917](https://insights.sbomify.com/MAL-2025-90917/): Malicious code in tania-empal53-miaww (npm) (malicious package)
- [MAL-2025-90916](https://insights.sbomify.com/MAL-2025-90916/): Malicious code in tania-dradag59-miaww (npm) (malicious package)
- [MAL-2025-90915](https://insights.sbomify.com/MAL-2025-90915/): Malicious code in tania-dradag18-riris (npm) (malicious package)
- [MAL-2025-90914](https://insights.sbomify.com/MAL-2025-90914/): Malicious code in tania-dodol55-riris (npm) (malicious package)
- [MAL-2025-90913](https://insights.sbomify.com/MAL-2025-90913/): Malicious code in tania-brengkes89-miaww (npm) (malicious package)
- [MAL-2025-90912](https://insights.sbomify.com/MAL-2025-90912/): Malicious code in tania-bakwan57-miaww (npm) (malicious package)
- [MAL-2025-90911](https://insights.sbomify.com/MAL-2025-90911/): Malicious code in tania-bakwan54-riris (npm) (malicious package)
- [MAL-2025-90910](https://insights.sbomify.com/MAL-2025-90910/): Malicious code in tania-bakso87-riris (npm) (malicious package)
- [MAL-2025-9091](https://insights.sbomify.com/MAL-2025-9091/): Malicious code in @marcos_feitoza/devops-helm (npm) (malicious package)
- [MAL-2025-90909](https://insights.sbomify.com/MAL-2025-90909/): Malicious code in tania-bakso46-crottsekebon (npm) (malicious package)
- [MAL-2025-90908](https://insights.sbomify.com/MAL-2025-90908/): Malicious code in tania-asinan7-riris (npm) (malicious package)
- [MAL-2025-90907](https://insights.sbomify.com/MAL-2025-90907/): Malicious code in tame_heron_z3n (npm) (malicious package)
- [MAL-2025-90906](https://insights.sbomify.com/MAL-2025-90906/): Malicious code in tame_gopher_z3n (npm) (malicious package)
- [MAL-2025-90905](https://insights.sbomify.com/MAL-2025-90905/): Malicious code in tall_snipe_z3n (npm) (malicious package)
- [MAL-2025-90904](https://insights.sbomify.com/MAL-2025-90904/): Malicious code in sympathetic_koi_z3n (npm) (malicious package)
- [MAL-2025-90903](https://insights.sbomify.com/MAL-2025-90903/): Malicious code in sympathetic_guanaco_z3n (npm) (malicious package)
- [MAL-2025-90902](https://insights.sbomify.com/MAL-2025-90902/): Malicious code in sympathetic_butterfly_z3n (npm) (malicious package)
- [MAL-2025-90901](https://insights.sbomify.com/MAL-2025-90901/): Malicious code in symbolic_tuna_z3n (npm) (malicious package)
- [MAL-2025-90900](https://insights.sbomify.com/MAL-2025-90900/): Malicious code in swift_koala_z3n (npm) (malicious package)
- [MAL-2025-9090](https://insights.sbomify.com/MAL-2025-9090/): Malicious code in @marcos_feitoza/dashboard (npm) (malicious package)
- [MAL-2025-90899](https://insights.sbomify.com/MAL-2025-90899/): Malicious code in swift_deer_z3n (npm) (malicious package)
- [MAL-2025-90898](https://insights.sbomify.com/MAL-2025-90898/): Malicious code in swift_bonobo_z3n (npm) (malicious package)
- [MAL-2025-90897](https://insights.sbomify.com/MAL-2025-90897/): Malicious code in sweet_condor_z3n (npm) (malicious package)
- [MAL-2025-90896](https://insights.sbomify.com/MAL-2025-90896/): Malicious code in suspicious_tapir_z3n (npm) (malicious package)
- [MAL-2025-90895](https://insights.sbomify.com/MAL-2025-90895/): Malicious code in suspicious_meadowlark_z3n (npm) (malicious package)
- [MAL-2025-90894](https://insights.sbomify.com/MAL-2025-90894/): Malicious code in suspicious_dragonfly_z3n (npm) (malicious package)
- [MAL-2025-90893](https://insights.sbomify.com/MAL-2025-90893/): Malicious code in surya-wajit46-miaww (npm) (malicious package)
- [MAL-2025-90892](https://insights.sbomify.com/MAL-2025-90892/): Malicious code in surya-ubi81-miaww (npm) (malicious package)
- [MAL-2025-90891](https://insights.sbomify.com/MAL-2025-90891/): Malicious code in surya-tumis38-riris (npm) (malicious package)
- [MAL-2025-90890](https://insights.sbomify.com/MAL-2025-90890/): Malicious code in surya-tongseng19-riris (npm) (malicious package)
- [MAL-2025-9089](https://insights.sbomify.com/MAL-2025-9089/): Malicious code in @malware-test-zones-strag-grouf-paged/test-mlw3-zones-strag-grouf-paged (npm) (malicious package)
- [MAL-2025-90889](https://insights.sbomify.com/MAL-2025-90889/): Malicious code in surya-tomat22-riris (npm) (malicious package)
- [MAL-2025-90888](https://insights.sbomify.com/MAL-2025-90888/): Malicious code in surya-toge21-miaww (npm) (malicious package)
- [MAL-2025-90887](https://insights.sbomify.com/MAL-2025-90887/): Malicious code in surya-tiwul100-miaww (npm) (malicious package)
- [MAL-2025-90886](https://insights.sbomify.com/MAL-2025-90886/): Malicious code in surya-tempe44-sluey (npm) (malicious package)
- [MAL-2025-90885](https://insights.sbomify.com/MAL-2025-90885/): Malicious code in surya-tahutek34-miaww (npm) (malicious package)
- [MAL-2025-90884](https://insights.sbomify.com/MAL-2025-90884/): Malicious code in surya-tahu78-miaww (npm) (malicious package)
- [MAL-2025-90883](https://insights.sbomify.com/MAL-2025-90883/): Malicious code in surya-tahu2-miaww (npm) (malicious package)
- [MAL-2025-90882](https://insights.sbomify.com/MAL-2025-90882/): Malicious code in surya-sasag88-riris (npm) (malicious package)
- [MAL-2025-90881](https://insights.sbomify.com/MAL-2025-90881/): Malicious code in surya-sasag24-riris (npm) (malicious package)
- [MAL-2025-90880](https://insights.sbomify.com/MAL-2025-90880/): Malicious code in surya-sambel47-kyuki (npm) (malicious package)
- [MAL-2025-9088](https://insights.sbomify.com/MAL-2025-9088/): Malicious code in @malware-test-zeros-cheep-howes-ciggy/test-mlw3-zeros-cheep-howes-ciggy (npm) (malicious package)
- [MAL-2025-90879](https://insights.sbomify.com/MAL-2025-90879/): Malicious code in surya-saguer97-riris (npm) (malicious package)
- [MAL-2025-90878](https://insights.sbomify.com/MAL-2025-90878/): Malicious code in surya-saguer43-miaww (npm) (malicious package)
- [MAL-2025-90877](https://insights.sbomify.com/MAL-2025-90877/): Malicious code in surya-ronde94-miaww (npm) (malicious package)
- [MAL-2025-90876](https://insights.sbomify.com/MAL-2025-90876/): Malicious code in surya-ronde3-miaww (npm) (malicious package)
- [MAL-2025-90875](https://insights.sbomify.com/MAL-2025-90875/): Malicious code in surya-rangginang5-riris (npm) (malicious package)
- [MAL-2025-90874](https://insights.sbomify.com/MAL-2025-90874/): Malicious code in surya-pisang48-riris (npm) (malicious package)
- [MAL-2025-90873](https://insights.sbomify.com/MAL-2025-90873/): Malicious code in surya-pecel64-riris (npm) (malicious package)
- [MAL-2025-90872](https://insights.sbomify.com/MAL-2025-90872/): Malicious code in surya-papeda43-miaww (npm) (malicious package)
- [MAL-2025-90871](https://insights.sbomify.com/MAL-2025-90871/): Malicious code in surya-papeda15-miaww (npm) (malicious package)
- [MAL-2025-90870](https://insights.sbomify.com/MAL-2025-90870/): Malicious code in surya-oblok43-riris (npm) (malicious package)
- [MAL-2025-9087](https://insights.sbomify.com/MAL-2025-9087/): Malicious code in @malware-test-zeist-guana-clefs-kaama/test-mlw3-zeist-guana-clefs-kaama (npm) (malicious package)
- [MAL-2025-90869](https://insights.sbomify.com/MAL-2025-90869/): Malicious code in surya-nasisayur74-miaww (npm) (malicious package)
- [MAL-2025-90868](https://insights.sbomify.com/MAL-2025-90868/): Malicious code in surya-nasipecel48-riris (npm) (malicious package)
- [MAL-2025-90867](https://insights.sbomify.com/MAL-2025-90867/): Malicious code in surya-nasipecel34-riris (npm) (malicious package)
- [MAL-2025-90866](https://insights.sbomify.com/MAL-2025-90866/): Malicious code in surya-nasicampur65-miaww (npm) (malicious package)
- [MAL-2025-90865](https://insights.sbomify.com/MAL-2025-90865/): Malicious code in surya-nasi94-riris (npm) (malicious package)
- [MAL-2025-90864](https://insights.sbomify.com/MAL-2025-90864/): Malicious code in surya-miemee39-apidev (npm) (malicious package)
- [MAL-2025-90863](https://insights.sbomify.com/MAL-2025-90863/): Malicious code in surya-miebogor47-riris (npm) (malicious package)
- [MAL-2025-90862](https://insights.sbomify.com/MAL-2025-90862/): Malicious code in surya-mieaceh29-miaww (npm) (malicious package)
- [MAL-2025-90861](https://insights.sbomify.com/MAL-2025-90861/): Malicious code in surya-mieaceh20-miaww (npm) (malicious package)
- [MAL-2025-90860](https://insights.sbomify.com/MAL-2025-90860/): Malicious code in surya-menjes19-riris (npm) (malicious package)
- [MAL-2025-9086](https://insights.sbomify.com/MAL-2025-9086/): Malicious code in @malware-test-yukes-tigon-grume-cling/test-mlw3-yukes-tigon-grume-cling (npm) (malicious package)
- [MAL-2025-90859](https://insights.sbomify.com/MAL-2025-90859/): Malicious code in surya-mendoan71-miaww (npm) (malicious package)
- [MAL-2025-90858](https://insights.sbomify.com/MAL-2025-90858/): Malicious code in surya-mendoan11-riris (npm) (malicious package)
- [MAL-2025-90857](https://insights.sbomify.com/MAL-2025-90857/): Malicious code in surya-mangut94-riris (npm) (malicious package)
- [MAL-2025-90856](https://insights.sbomify.com/MAL-2025-90856/): Malicious code in surya-mangut9-miaww (npm) (malicious package)
- [MAL-2025-90855](https://insights.sbomify.com/MAL-2025-90855/): Malicious code in surya-mangut8-sluey (npm) (malicious package)
- [MAL-2025-90854](https://insights.sbomify.com/MAL-2025-90854/): Malicious code in surya-mangut13-riris (npm) (malicious package)
- [MAL-2025-90853](https://insights.sbomify.com/MAL-2025-90853/): Malicious code in surya-mangga13-miaww (npm) (malicious package)
- [MAL-2025-90852](https://insights.sbomify.com/MAL-2025-90852/): Malicious code in surya-lupis44-riris (npm) (malicious package)
- [MAL-2025-90851](https://insights.sbomify.com/MAL-2025-90851/): Malicious code in surya-lodeh9-crottsekebon (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/105/