# Vulnerabilities published in 2025 - [MAL-2025-178347](https://insights.sbomify.com/MAL-2025-178347/): Malicious code in rubiyem-must-nirta (npm) (malicious package) - [MAL-2025-178346](https://insights.sbomify.com/MAL-2025-178346/): Malicious code in rubiyem-must-butui (npm) (malicious package) - [MAL-2025-178345](https://insights.sbomify.com/MAL-2025-178345/): Malicious code in rubiyem-must-buts (npm) (malicious package) - [MAL-2025-178344](https://insights.sbomify.com/MAL-2025-178344/): Malicious code in rubiyem-buyt-tegte (npm) (malicious package) - [MAL-2025-178343](https://insights.sbomify.com/MAL-2025-178343/): Malicious code in rubiyem-buyt-butui (npm) (malicious package) - [MAL-2025-178342](https://insights.sbomify.com/MAL-2025-178342/): Malicious code in rrrrramadan-zidan-tea (npm) (malicious package) - [MAL-2025-178341](https://insights.sbomify.com/MAL-2025-178341/): Malicious code in rrrramadan-zidan-tea (npm) (malicious package) - [MAL-2025-178340](https://insights.sbomify.com/MAL-2025-178340/): Malicious code in rrramadan-zidan-tea (npm) (malicious package) - [MAL-2025-17834](https://insights.sbomify.com/MAL-2025-17834/): Malicious code in custom-mysql2 (npm) (malicious package) - [MAL-2025-178339](https://insights.sbomify.com/MAL-2025-178339/): Malicious code in rramadan-zidan-tea (npm) (malicious package) - [MAL-2025-178338](https://insights.sbomify.com/MAL-2025-178338/): Malicious code in riya-9 (npm) (malicious package) - [MAL-2025-178337](https://insights.sbomify.com/MAL-2025-178337/): Malicious code in riya-8 (npm) (malicious package) - [MAL-2025-178336](https://insights.sbomify.com/MAL-2025-178336/): Malicious code in riya-7 (npm) (malicious package) - [MAL-2025-178335](https://insights.sbomify.com/MAL-2025-178335/): Malicious code in riya-6 (npm) (malicious package) - [MAL-2025-178334](https://insights.sbomify.com/MAL-2025-178334/): Malicious code in riya-51 (npm) (malicious package) - [MAL-2025-178333](https://insights.sbomify.com/MAL-2025-178333/): Malicious code in riya-50 (npm) (malicious package) - [MAL-2025-178332](https://insights.sbomify.com/MAL-2025-178332/): Malicious code in riya-5 (npm) (malicious package) - [MAL-2025-178331](https://insights.sbomify.com/MAL-2025-178331/): Malicious code in riya-49 (npm) (malicious package) - [MAL-2025-178330](https://insights.sbomify.com/MAL-2025-178330/): Malicious code in riya-48 (npm) (malicious package) - [MAL-2025-17833](https://insights.sbomify.com/MAL-2025-17833/): Malicious code in custom-get-org-chart (npm) (malicious package) - [MAL-2025-178329](https://insights.sbomify.com/MAL-2025-178329/): Malicious code in riya-47 (npm) (malicious package) - [MAL-2025-178328](https://insights.sbomify.com/MAL-2025-178328/): Malicious code in riya-46 (npm) (malicious package) - [MAL-2025-178327](https://insights.sbomify.com/MAL-2025-178327/): Malicious code in riya-45 (npm) (malicious package) - [MAL-2025-178326](https://insights.sbomify.com/MAL-2025-178326/): Malicious code in riya-44 (npm) (malicious package) - [MAL-2025-178325](https://insights.sbomify.com/MAL-2025-178325/): Malicious code in riya-43 (npm) (malicious package) - [MAL-2025-178324](https://insights.sbomify.com/MAL-2025-178324/): Malicious code in riya-42 (npm) (malicious package) - [MAL-2025-178323](https://insights.sbomify.com/MAL-2025-178323/): Malicious code in riya-41 (npm) (malicious package) - [MAL-2025-178322](https://insights.sbomify.com/MAL-2025-178322/): Malicious code in riya-40 (npm) (malicious package) - [MAL-2025-178321](https://insights.sbomify.com/MAL-2025-178321/): Malicious code in riya-4 (npm) (malicious package) - [MAL-2025-178320](https://insights.sbomify.com/MAL-2025-178320/): Malicious code in riya-39 (npm) (malicious package) - [MAL-2025-17832](https://insights.sbomify.com/MAL-2025-17832/): Malicious code in curvelib (npm) (malicious package) - [MAL-2025-178319](https://insights.sbomify.com/MAL-2025-178319/): Malicious code in riya-38 (npm) (malicious package) - [MAL-2025-178318](https://insights.sbomify.com/MAL-2025-178318/): Malicious code in riya-37 (npm) (malicious package) - [MAL-2025-178317](https://insights.sbomify.com/MAL-2025-178317/): Malicious code in riya-36 (npm) (malicious package) - [MAL-2025-178316](https://insights.sbomify.com/MAL-2025-178316/): Malicious code in riya-35 (npm) (malicious package) - [MAL-2025-178315](https://insights.sbomify.com/MAL-2025-178315/): Malicious code in riya-34 (npm) (malicious package) - [MAL-2025-178314](https://insights.sbomify.com/MAL-2025-178314/): Malicious code in riya-33 (npm) (malicious package) - [MAL-2025-178313](https://insights.sbomify.com/MAL-2025-178313/): Malicious code in riya-32 (npm) (malicious package) - [MAL-2025-178312](https://insights.sbomify.com/MAL-2025-178312/): Malicious code in riya-31 (npm) (malicious package) - [MAL-2025-178311](https://insights.sbomify.com/MAL-2025-178311/): Malicious code in riya-30 (npm) (malicious package) - [MAL-2025-178310](https://insights.sbomify.com/MAL-2025-178310/): Malicious code in riya-3 (npm) (malicious package) - [MAL-2025-17831](https://insights.sbomify.com/MAL-2025-17831/): Malicious code in cursorapp (npm) (malicious package) - [MAL-2025-178309](https://insights.sbomify.com/MAL-2025-178309/): Malicious code in riya-29 (npm) (malicious package) - [MAL-2025-178308](https://insights.sbomify.com/MAL-2025-178308/): Malicious code in riya-28 (npm) (malicious package) - [MAL-2025-178307](https://insights.sbomify.com/MAL-2025-178307/): Malicious code in riya-27 (npm) (malicious package) - [MAL-2025-178306](https://insights.sbomify.com/MAL-2025-178306/): Malicious code in riya-26 (npm) (malicious package) - [MAL-2025-178305](https://insights.sbomify.com/MAL-2025-178305/): Malicious code in riya-25 (npm) (malicious package) - [MAL-2025-178304](https://insights.sbomify.com/MAL-2025-178304/): Malicious code in riya-24 (npm) (malicious package) - [MAL-2025-178303](https://insights.sbomify.com/MAL-2025-178303/): Malicious code in riya-23 (npm) (malicious package) - [MAL-2025-178302](https://insights.sbomify.com/MAL-2025-178302/): Malicious code in riya-22 (npm) (malicious package) - [MAL-2025-178301](https://insights.sbomify.com/MAL-2025-178301/): Malicious code in riya-21 (npm) (malicious package) - [MAL-2025-178300](https://insights.sbomify.com/MAL-2025-178300/): Malicious code in riya-20 (npm) (malicious package) - [MAL-2025-17830](https://insights.sbomify.com/MAL-2025-17830/): Malicious code in cursoof (npm) (malicious package) - [MAL-2025-1783](https://insights.sbomify.com/MAL-2025-1783/): Malicious code in dropbox-checkout (npm) (malicious package) - [MAL-2025-178299](https://insights.sbomify.com/MAL-2025-178299/): Malicious code in riya-2 (npm) (malicious package) - [MAL-2025-178298](https://insights.sbomify.com/MAL-2025-178298/): Malicious code in riya-19 (npm) (malicious package) - [MAL-2025-178297](https://insights.sbomify.com/MAL-2025-178297/): Malicious code in riya-18 (npm) (malicious package) - [MAL-2025-178296](https://insights.sbomify.com/MAL-2025-178296/): Malicious code in riya-17 (npm) (malicious package) - [MAL-2025-178295](https://insights.sbomify.com/MAL-2025-178295/): Malicious code in riya-16 (npm) (malicious package) - [MAL-2025-178294](https://insights.sbomify.com/MAL-2025-178294/): Malicious code in riya-15 (npm) (malicious package) - [MAL-2025-178293](https://insights.sbomify.com/MAL-2025-178293/): Malicious code in riya-14 (npm) (malicious package) - [MAL-2025-178292](https://insights.sbomify.com/MAL-2025-178292/): Malicious code in riya-13 (npm) (malicious package) - [MAL-2025-178291](https://insights.sbomify.com/MAL-2025-178291/): Malicious code in riya-12 (npm) (malicious package) - [MAL-2025-178290](https://insights.sbomify.com/MAL-2025-178290/): Malicious code in riya-11 (npm) (malicious package) - [MAL-2025-17829](https://insights.sbomify.com/MAL-2025-17829/): Malicious code in cursame (npm) (malicious package) - [MAL-2025-178289](https://insights.sbomify.com/MAL-2025-178289/): Malicious code in riya-10 (npm) (malicious package) - [MAL-2025-178288](https://insights.sbomify.com/MAL-2025-178288/): Malicious code in riya-1 (npm) (malicious package) - [MAL-2025-178287](https://insights.sbomify.com/MAL-2025-178287/): Malicious code in risky-putri-tea (npm) (malicious package) - [MAL-2025-178286](https://insights.sbomify.com/MAL-2025-178286/): Malicious code in rintono-poke99 (npm) (malicious package) - [MAL-2025-178285](https://insights.sbomify.com/MAL-2025-178285/): Malicious code in rintono-poke98 (npm) (malicious package) - [MAL-2025-178284](https://insights.sbomify.com/MAL-2025-178284/): Malicious code in rintono-poke97 (npm) (malicious package) - [MAL-2025-178283](https://insights.sbomify.com/MAL-2025-178283/): Malicious code in rintono-poke96 (npm) (malicious package) - [MAL-2025-178282](https://insights.sbomify.com/MAL-2025-178282/): Malicious code in rintono-poke95 (npm) (malicious package) - [MAL-2025-178281](https://insights.sbomify.com/MAL-2025-178281/): Malicious code in rintono-poke94 (npm) (malicious package) - [MAL-2025-178280](https://insights.sbomify.com/MAL-2025-178280/): Malicious code in rintono-poke93 (npm) (malicious package) - [MAL-2025-17828](https://insights.sbomify.com/MAL-2025-17828/): Malicious code in curlik (npm) (malicious package) - [MAL-2025-178279](https://insights.sbomify.com/MAL-2025-178279/): Malicious code in rintono-poke92 (npm) (malicious package) - [MAL-2025-178278](https://insights.sbomify.com/MAL-2025-178278/): Malicious code in rintono-poke91 (npm) (malicious package) - [MAL-2025-178277](https://insights.sbomify.com/MAL-2025-178277/): Malicious code in rintono-poke90 (npm) (malicious package) - [MAL-2025-178276](https://insights.sbomify.com/MAL-2025-178276/): Malicious code in rintono-poke89 (npm) (malicious package) - [MAL-2025-178275](https://insights.sbomify.com/MAL-2025-178275/): Malicious code in rintono-poke88 (npm) (malicious package) - [MAL-2025-178274](https://insights.sbomify.com/MAL-2025-178274/): Malicious code in rintono-poke87 (npm) (malicious package) - [MAL-2025-178273](https://insights.sbomify.com/MAL-2025-178273/): Malicious code in rintono-poke86 (npm) (malicious package) - [MAL-2025-178272](https://insights.sbomify.com/MAL-2025-178272/): Malicious code in rintono-poke85 (npm) (malicious package) - [MAL-2025-178271](https://insights.sbomify.com/MAL-2025-178271/): Malicious code in rintono-poke84 (npm) (malicious package) - [MAL-2025-178270](https://insights.sbomify.com/MAL-2025-178270/): Malicious code in rintono-poke83 (npm) (malicious package) - [MAL-2025-17827](https://insights.sbomify.com/MAL-2025-17827/): Malicious code in curiouscat-spam (npm) (malicious package) - [MAL-2025-178269](https://insights.sbomify.com/MAL-2025-178269/): Malicious code in rintono-poke82 (npm) (malicious package) - [MAL-2025-178268](https://insights.sbomify.com/MAL-2025-178268/): Malicious code in rintono-poke81 (npm) (malicious package) - [MAL-2025-178267](https://insights.sbomify.com/MAL-2025-178267/): Malicious code in rintono-poke80 (npm) (malicious package) - [MAL-2025-178266](https://insights.sbomify.com/MAL-2025-178266/): Malicious code in rintono-poke79 (npm) (malicious package) - [MAL-2025-178265](https://insights.sbomify.com/MAL-2025-178265/): Malicious code in rintono-poke78 (npm) (malicious package) - [MAL-2025-178264](https://insights.sbomify.com/MAL-2025-178264/): Malicious code in rintono-poke110 (npm) (malicious package) - [MAL-2025-178263](https://insights.sbomify.com/MAL-2025-178263/): Malicious code in rintono-poke109 (npm) (malicious package) - [MAL-2025-178262](https://insights.sbomify.com/MAL-2025-178262/): Malicious code in rintono-poke108 (npm) (malicious package) - [MAL-2025-178261](https://insights.sbomify.com/MAL-2025-178261/): Malicious code in rintono-poke107 (npm) (malicious package) - [MAL-2025-178260](https://insights.sbomify.com/MAL-2025-178260/): Malicious code in rintono-poke106 (npm) (malicious package) - [MAL-2025-17826](https://insights.sbomify.com/MAL-2025-17826/): Malicious code in cupduck (npm) (malicious package) - [MAL-2025-178259](https://insights.sbomify.com/MAL-2025-178259/): Malicious code in rintono-poke105 (npm) (malicious package) - [MAL-2025-178258](https://insights.sbomify.com/MAL-2025-178258/): Malicious code in rintono-poke104 (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1062/