# Vulnerabilities published in 2025


- [MAL-2025-90850](https://insights.sbomify.com/MAL-2025-90850/): Malicious code in surya-liwet74-riris (npm) (malicious package)
- [MAL-2025-9085](https://insights.sbomify.com/MAL-2025-9085/): Malicious code in @malware-test-yucca-moras-pekes-lades/test-mlw3-yucca-moras-pekes-lades (npm) (malicious package)
- [MAL-2025-90849](https://insights.sbomify.com/MAL-2025-90849/): Malicious code in surya-liwet17-riris (npm) (malicious package)
- [MAL-2025-90848](https://insights.sbomify.com/MAL-2025-90848/): Malicious code in surya-liwet12-miaww (npm) (malicious package)
- [MAL-2025-90847](https://insights.sbomify.com/MAL-2025-90847/): Malicious code in surya-lapis66-miaww (npm) (malicious package)
- [MAL-2025-90846](https://insights.sbomify.com/MAL-2025-90846/): Malicious code in surya-lapis16-riris (npm) (malicious package)
- [MAL-2025-90845](https://insights.sbomify.com/MAL-2025-90845/): Malicious code in surya-kupang5-riris (npm) (malicious package)
- [MAL-2025-90844](https://insights.sbomify.com/MAL-2025-90844/): Malicious code in surya-kue50-miaww (npm) (malicious package)
- [MAL-2025-90843](https://insights.sbomify.com/MAL-2025-90843/): Malicious code in surya-kue3-miaww (npm) (malicious package)
- [MAL-2025-90842](https://insights.sbomify.com/MAL-2025-90842/): Malicious code in surya-kue20-miaww (npm) (malicious package)
- [MAL-2025-90841](https://insights.sbomify.com/MAL-2025-90841/): Malicious code in surya-kue100-apidev (npm) (malicious package)
- [MAL-2025-90840](https://insights.sbomify.com/MAL-2025-90840/): Malicious code in surya-kripik90-riris (npm) (malicious package)
- [MAL-2025-9084](https://insights.sbomify.com/MAL-2025-9084/): Malicious code in @malware-test-yores-wamus-kadis-plots/test-mlw3-yores-wamus-kadis-plots (npm) (malicious package)
- [MAL-2025-90839](https://insights.sbomify.com/MAL-2025-90839/): Malicious code in surya-ketan2-miaww (npm) (malicious package)
- [MAL-2025-90838](https://insights.sbomify.com/MAL-2025-90838/): Malicious code in surya-keripik96-riris (npm) (malicious package)
- [MAL-2025-90837](https://insights.sbomify.com/MAL-2025-90837/): Malicious code in surya-keripik80-apidev (npm) (malicious package)
- [MAL-2025-90836](https://insights.sbomify.com/MAL-2025-90836/): Malicious code in surya-kentang84-riris (npm) (malicious package)
- [MAL-2025-90835](https://insights.sbomify.com/MAL-2025-90835/): Malicious code in surya-kemplang5-riris (npm) (malicious package)
- [MAL-2025-90834](https://insights.sbomify.com/MAL-2025-90834/): Malicious code in surya-kacang64-miaww (npm) (malicious package)
- [MAL-2025-90833](https://insights.sbomify.com/MAL-2025-90833/): Malicious code in surya-kacang26-riris (npm) (malicious package)
- [MAL-2025-90832](https://insights.sbomify.com/MAL-2025-90832/): Malicious code in surya-kacang25-miaww (npm) (malicious package)
- [MAL-2025-90831](https://insights.sbomify.com/MAL-2025-90831/): Malicious code in surya-kacang14-miaww (npm) (malicious package)
- [MAL-2025-90830](https://insights.sbomify.com/MAL-2025-90830/): Malicious code in surya-kacang10-riris (npm) (malicious package)
- [MAL-2025-9083](https://insights.sbomify.com/MAL-2025-9083/): Malicious code in @malware-test-yoick-souks-alods-bajus/test-mlw3-yoick-souks-alods-bajus (npm) (malicious package)
- [MAL-2025-90829](https://insights.sbomify.com/MAL-2025-90829/): Malicious code in surya-jamblang97-riris (npm) (malicious package)
- [MAL-2025-90828](https://insights.sbomify.com/MAL-2025-90828/): Malicious code in surya-jamblang49-miaww (npm) (malicious package)
- [MAL-2025-90827](https://insights.sbomify.com/MAL-2025-90827/): Malicious code in surya-gorengan28-apidev (npm) (malicious package)
- [MAL-2025-90826](https://insights.sbomify.com/MAL-2025-90826/): Malicious code in surya-gorengan17-miaww (npm) (malicious package)
- [MAL-2025-90825](https://insights.sbomify.com/MAL-2025-90825/): Malicious code in surya-getuk69-miaww (npm) (malicious package)
- [MAL-2025-90824](https://insights.sbomify.com/MAL-2025-90824/): Malicious code in surya-gembus74-miaww (npm) (malicious package)
- [MAL-2025-90823](https://insights.sbomify.com/MAL-2025-90823/): Malicious code in surya-esdoger52-riris (npm) (malicious package)
- [MAL-2025-90822](https://insights.sbomify.com/MAL-2025-90822/): Malicious code in surya-esdoger45-riris (npm) (malicious package)
- [MAL-2025-90821](https://insights.sbomify.com/MAL-2025-90821/): Malicious code in surya-enting96-riris (npm) (malicious package)
- [MAL-2025-90820](https://insights.sbomify.com/MAL-2025-90820/): Malicious code in surya-enting55-riris (npm) (malicious package)
- [MAL-2025-9082](https://insights.sbomify.com/MAL-2025-9082/): Malicious code in @malware-test-ylkes-sprit-boats-lossy/test-mlw3-ylkes-sprit-boats-lossy (npm) (malicious package)
- [MAL-2025-90819](https://insights.sbomify.com/MAL-2025-90819/): Malicious code in surya-donat25-miaww (npm) (malicious package)
- [MAL-2025-90818](https://insights.sbomify.com/MAL-2025-90818/): Malicious code in surya-buburayam73-riris (npm) (malicious package)
- [MAL-2025-90817](https://insights.sbomify.com/MAL-2025-90817/): Malicious code in surya-buburayam15-miaww (npm) (malicious package)
- [MAL-2025-90816](https://insights.sbomify.com/MAL-2025-90816/): Malicious code in surya-brongkos76-miaww (npm) (malicious package)
- [MAL-2025-90815](https://insights.sbomify.com/MAL-2025-90815/): Malicious code in surya-brengkes54-miaww (npm) (malicious package)
- [MAL-2025-90814](https://insights.sbomify.com/MAL-2025-90814/): Malicious code in surya-bika4-miaww (npm) (malicious package)
- [MAL-2025-90813](https://insights.sbomify.com/MAL-2025-90813/): Malicious code in surya-bakwan63-kyuki (npm) (malicious package)
- [MAL-2025-90812](https://insights.sbomify.com/MAL-2025-90812/): Malicious code in surrounding_newt_z3n (npm) (malicious package)
- [MAL-2025-90811](https://insights.sbomify.com/MAL-2025-90811/): Malicious code in surrounding_jellyfish_z3n (npm) (malicious package)
- [MAL-2025-90810](https://insights.sbomify.com/MAL-2025-90810/): Malicious code in surprising_weasel_z3n (npm) (malicious package)
- [MAL-2025-9081](https://insights.sbomify.com/MAL-2025-9081/): Malicious code in @malware-test-yince-clubs-logia-posey/test-mlw3-yince-clubs-logia-posey (npm) (malicious package)
- [MAL-2025-90809](https://insights.sbomify.com/MAL-2025-90809/): Malicious code in surprising_goldfish_z3n (npm) (malicious package)
- [MAL-2025-90808](https://insights.sbomify.com/MAL-2025-90808/): Malicious code in surprised_fox_z3n (npm) (malicious package)
- [MAL-2025-90807](https://insights.sbomify.com/MAL-2025-90807/): Malicious code in sure_thrush_z3n (npm) (malicious package)
- [MAL-2025-90806](https://insights.sbomify.com/MAL-2025-90806/): Malicious code in sure_dragonfly_z3n (npm) (malicious package)
- [MAL-2025-90805](https://insights.sbomify.com/MAL-2025-90805/): Malicious code in supreme_moth_z3n (npm) (malicious package)
- [MAL-2025-90804](https://insights.sbomify.com/MAL-2025-90804/): Malicious code in supposed_rodent_z3n (npm) (malicious package)
- [MAL-2025-90803](https://insights.sbomify.com/MAL-2025-90803/): Malicious code in supposed_kite_z3n (npm) (malicious package)
- [MAL-2025-90802](https://insights.sbomify.com/MAL-2025-90802/): Malicious code in supposed_bass_z3n (npm) (malicious package)
- [MAL-2025-90801](https://insights.sbomify.com/MAL-2025-90801/): Malicious code in supporting_eel_z3n (npm) (malicious package)
- [MAL-2025-90800](https://insights.sbomify.com/MAL-2025-90800/): Malicious code in superb_jackal_z3n (npm) (malicious package)
- [MAL-2025-9080](https://insights.sbomify.com/MAL-2025-9080/): Malicious code in @malware-test-yield-kauri-kaama-lezes/test-mlw3-yield-kauri-kaama-lezes (npm) (malicious package)
- [MAL-2025-90799](https://insights.sbomify.com/MAL-2025-90799/): Malicious code in super_rat_z3n (npm) (malicious package)
- [MAL-2025-90798](https://insights.sbomify.com/MAL-2025-90798/): Malicious code in super_manatee_z3n (npm) (malicious package)
- [MAL-2025-90797](https://insights.sbomify.com/MAL-2025-90797/): Malicious code in super_louse_z3n (npm) (malicious package)
- [MAL-2025-90796](https://insights.sbomify.com/MAL-2025-90796/): Malicious code in sunny_crow_z3n (npm) (malicious package)
- [MAL-2025-90795](https://insights.sbomify.com/MAL-2025-90795/): Malicious code in suitable_hare_z3n (npm) (malicious package)
- [MAL-2025-90794](https://insights.sbomify.com/MAL-2025-90794/): Malicious code in sudden_turkey_z3n (npm) (malicious package)
- [MAL-2025-90793](https://insights.sbomify.com/MAL-2025-90793/): Malicious code in sudden_tern_z3n (npm) (malicious package)
- [MAL-2025-90792](https://insights.sbomify.com/MAL-2025-90792/): Malicious code in successive_turkey_z3n (npm) (malicious package)
- [MAL-2025-90791](https://insights.sbomify.com/MAL-2025-90791/): Malicious code in successive_pike_z3n (npm) (malicious package)
- [MAL-2025-90790](https://insights.sbomify.com/MAL-2025-90790/): Malicious code in successive_otter_z3n (npm) (malicious package)
- [MAL-2025-9079](https://insights.sbomify.com/MAL-2025-9079/): Malicious code in @malware-test-yetts-trios-graze-elves/test-mlw3-yetts-trios-graze-elves (npm) (malicious package)
- [MAL-2025-90789](https://insights.sbomify.com/MAL-2025-90789/): Malicious code in successive_crayfish_z3n (npm) (malicious package)
- [MAL-2025-90788](https://insights.sbomify.com/MAL-2025-90788/): Malicious code in subtle_kingfisher_z3n (npm) (malicious package)
- [MAL-2025-90787](https://insights.sbomify.com/MAL-2025-90787/): Malicious code in subtle_gayal_z3n (npm) (malicious package)
- [MAL-2025-90786](https://insights.sbomify.com/MAL-2025-90786/): Malicious code in subtle_chipmunk_z3n (npm) (malicious package)
- [MAL-2025-90785](https://insights.sbomify.com/MAL-2025-90785/): Malicious code in substantial_sole_z3n (npm) (malicious package)
- [MAL-2025-90784](https://insights.sbomify.com/MAL-2025-90784/): Malicious code in substantial_orangutan_z3n (npm) (malicious package)
- [MAL-2025-90783](https://insights.sbomify.com/MAL-2025-90783/): Malicious code in substantial_guppy_z3n (npm) (malicious package)
- [MAL-2025-90782](https://insights.sbomify.com/MAL-2025-90782/): Malicious code in substantial_bedbug_z3n (npm) (malicious package)
- [MAL-2025-90781](https://insights.sbomify.com/MAL-2025-90781/): Malicious code in subsequent_salmon_z3n (npm) (malicious package)
- [MAL-2025-90780](https://insights.sbomify.com/MAL-2025-90780/): Malicious code in subjective_wasp_z3n (npm) (malicious package)
- [MAL-2025-9078](https://insights.sbomify.com/MAL-2025-9078/): Malicious code in @malware-test-yeast-pings-sysop-foams/test-mlw3-yeast-pings-sysop-foams (npm) (malicious package)
- [MAL-2025-90779](https://insights.sbomify.com/MAL-2025-90779/): Malicious code in subjective_leopard_z3n (npm) (malicious package)
- [MAL-2025-90778](https://insights.sbomify.com/MAL-2025-90778/): Malicious code in subjective_hawk_z3n (npm) (malicious package)
- [MAL-2025-90777](https://insights.sbomify.com/MAL-2025-90777/): Malicious code in subjective_guppy_z3n (npm) (malicious package)
- [MAL-2025-90776](https://insights.sbomify.com/MAL-2025-90776/): Malicious code in stupid_constrictor_z3n (npm) (malicious package)
- [MAL-2025-90775](https://insights.sbomify.com/MAL-2025-90775/): Malicious code in stuck_quokka_z3n (npm) (malicious package)
- [MAL-2025-90774](https://insights.sbomify.com/MAL-2025-90774/): Malicious code in structural_tyrannosaurus_z3n (npm) (malicious package)
- [MAL-2025-90773](https://insights.sbomify.com/MAL-2025-90773/): Malicious code in structural_quail_z3n (npm) (malicious package)
- [MAL-2025-90772](https://insights.sbomify.com/MAL-2025-90772/): Malicious code in striped_spider_z3n (npm) (malicious package)
- [MAL-2025-90771](https://insights.sbomify.com/MAL-2025-90771/): Malicious code in striped_muskox_z3n (npm) (malicious package)
- [MAL-2025-90770](https://insights.sbomify.com/MAL-2025-90770/): Malicious code in striking_barnacle_z3n (npm) (malicious package)
- [MAL-2025-9077](https://insights.sbomify.com/MAL-2025-9077/): Malicious code in @malware-test-wrack-palsy-paddy-blets/test-mlw3-wrack-palsy-paddy-blets (npm) (malicious package)
- [MAL-2025-90769](https://insights.sbomify.com/MAL-2025-90769/): Malicious code in strict_turtle_z3n (npm) (malicious package)
- [MAL-2025-90768](https://insights.sbomify.com/MAL-2025-90768/): Malicious code in strict_rooster_z3n (npm) (malicious package)
- [MAL-2025-90767](https://insights.sbomify.com/MAL-2025-90767/): Malicious code in strict_bug_z3n (npm) (malicious package)
- [MAL-2025-90766](https://insights.sbomify.com/MAL-2025-90766/): Malicious code in strategic_swordtail_z3n (npm) (malicious package)
- [MAL-2025-90765](https://insights.sbomify.com/MAL-2025-90765/): Malicious code in strategic_iguana_z3n (npm) (malicious package)
- [MAL-2025-90764](https://insights.sbomify.com/MAL-2025-90764/): Malicious code in strategic_hornet_z3n (npm) (malicious package)
- [MAL-2025-90763](https://insights.sbomify.com/MAL-2025-90763/): Malicious code in strategic_ferret_z3n (npm) (malicious package)
- [MAL-2025-90762](https://insights.sbomify.com/MAL-2025-90762/): Malicious code in straightforward_woodpecker_z3n (npm) (malicious package)
- [MAL-2025-90761](https://insights.sbomify.com/MAL-2025-90761/): Malicious code in stormy_haddock_z3n (npm) (malicious package)
- [MAL-2025-90760](https://insights.sbomify.com/MAL-2025-90760/): Malicious code in stingy_pelican_z3n (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/106/