# Vulnerabilities published in 2025 - [MAL-2025-90669](https://insights.sbomify.com/MAL-2025-90669/): Malicious code in siska-tahu88-miaww (npm) (malicious package) - [MAL-2025-90668](https://insights.sbomify.com/MAL-2025-90668/): Malicious code in siska-tahu79-miaww (npm) (malicious package) - [MAL-2025-90667](https://insights.sbomify.com/MAL-2025-90667/): Malicious code in siska-sroto69-miaww (npm) (malicious package) - [MAL-2025-90666](https://insights.sbomify.com/MAL-2025-90666/): Malicious code in siska-soto83-riris (npm) (malicious package) - [MAL-2025-90665](https://insights.sbomify.com/MAL-2025-90665/): Malicious code in siska-sego80-riris (npm) (malicious package) - [MAL-2025-90664](https://insights.sbomify.com/MAL-2025-90664/): Malicious code in siska-sasag100-miaww (npm) (malicious package) - [MAL-2025-90663](https://insights.sbomify.com/MAL-2025-90663/): Malicious code in siska-sambel76-riris (npm) (malicious package) - [MAL-2025-90662](https://insights.sbomify.com/MAL-2025-90662/): Malicious code in siska-sambalado47-miaww (npm) (malicious package) - [MAL-2025-90661](https://insights.sbomify.com/MAL-2025-90661/): Malicious code in siska-ruwet78-riris (npm) (malicious package) - [MAL-2025-90660](https://insights.sbomify.com/MAL-2025-90660/): Malicious code in siska-ruwet75-miaww (npm) (malicious package) - [MAL-2025-9066](https://insights.sbomify.com/MAL-2025-9066/): Malicious code in @malware-test-welts-hazes/test-mlw3-welts-hazes (npm) (malicious package) - [MAL-2025-90659](https://insights.sbomify.com/MAL-2025-90659/): Malicious code in siska-ruwet18-riris (npm) (malicious package) - [MAL-2025-90658](https://insights.sbomify.com/MAL-2025-90658/): Malicious code in siska-rujak97-riris (npm) (malicious package) - [MAL-2025-90657](https://insights.sbomify.com/MAL-2025-90657/): Malicious code in siska-rojak32-riris (npm) (malicious package) - [MAL-2025-90656](https://insights.sbomify.com/MAL-2025-90656/): Malicious code in siska-rangginang70-miaww (npm) (malicious package) - [MAL-2025-90655](https://insights.sbomify.com/MAL-2025-90655/): Malicious code in siska-rangginang2-riris (npm) (malicious package) - [MAL-2025-90654](https://insights.sbomify.com/MAL-2025-90654/): Malicious code in siska-pisang70-riris (npm) (malicious package) - [MAL-2025-90653](https://insights.sbomify.com/MAL-2025-90653/): Malicious code in siska-pecel95-miaww (npm) (malicious package) - [MAL-2025-90652](https://insights.sbomify.com/MAL-2025-90652/): Malicious code in siska-ongol-ongol64-riris (npm) (malicious package) - [MAL-2025-90651](https://insights.sbomify.com/MAL-2025-90651/): Malicious code in siska-oncom35-apidev (npm) (malicious package) - [MAL-2025-90650](https://insights.sbomify.com/MAL-2025-90650/): Malicious code in siska-oblok45-apidev (npm) (malicious package) - [MAL-2025-9065](https://insights.sbomify.com/MAL-2025-9065/): Malicious code in @malware-test-welsh-blitz-serrs-absit/test-mlw3-welsh-blitz-serrs-absit (npm) (malicious package) - [MAL-2025-90649](https://insights.sbomify.com/MAL-2025-90649/): Malicious code in siska-nasipecel40-miaww (npm) (malicious package) - [MAL-2025-90648](https://insights.sbomify.com/MAL-2025-90648/): Malicious code in siska-nasi88-miaww (npm) (malicious package) - [MAL-2025-90647](https://insights.sbomify.com/MAL-2025-90647/): Malicious code in siska-nasi6-wekto (npm) (malicious package) - [MAL-2025-90646](https://insights.sbomify.com/MAL-2025-90646/): Malicious code in siska-nasi35-miaww (npm) (malicious package) - [MAL-2025-90645](https://insights.sbomify.com/MAL-2025-90645/): Malicious code in siska-miemee62-wekto (npm) (malicious package) - [MAL-2025-90644](https://insights.sbomify.com/MAL-2025-90644/): Malicious code in siska-miebogor97-riris (npm) (malicious package) - [MAL-2025-90643](https://insights.sbomify.com/MAL-2025-90643/): Malicious code in siska-mieaceh96-miaww (npm) (malicious package) - [MAL-2025-90642](https://insights.sbomify.com/MAL-2025-90642/): Malicious code in siska-martabak32-miaww (npm) (malicious package) - [MAL-2025-90641](https://insights.sbomify.com/MAL-2025-90641/): Malicious code in siska-lutis76-kyuki (npm) (malicious package) - [MAL-2025-90640](https://insights.sbomify.com/MAL-2025-90640/): Malicious code in siska-lumpur33-miaww (npm) (malicious package) - [MAL-2025-9064](https://insights.sbomify.com/MAL-2025-9064/): Malicious code in @malware-test-weepy-sprue-gulch-geats/test-mlw3-weepy-sprue-gulch-geats (npm) (malicious package) - [MAL-2025-90639](https://insights.sbomify.com/MAL-2025-90639/): Malicious code in siska-lapis36-riris (npm) (malicious package) - [MAL-2025-90638](https://insights.sbomify.com/MAL-2025-90638/): Malicious code in siska-kupat1-riris (npm) (malicious package) - [MAL-2025-90637](https://insights.sbomify.com/MAL-2025-90637/): Malicious code in siska-kue90-riris (npm) (malicious package) - [MAL-2025-90636](https://insights.sbomify.com/MAL-2025-90636/): Malicious code in siska-kue23-crottsekebon (npm) (malicious package) - [MAL-2025-90635](https://insights.sbomify.com/MAL-2025-90635/): Malicious code in siska-kolak6-riris (npm) (malicious package) - [MAL-2025-90634](https://insights.sbomify.com/MAL-2025-90634/): Malicious code in siska-klipo98-miaww (npm) (malicious package) - [MAL-2025-90633](https://insights.sbomify.com/MAL-2025-90633/): Malicious code in siska-klanting44-sluey (npm) (malicious package) - [MAL-2025-90632](https://insights.sbomify.com/MAL-2025-90632/): Malicious code in siska-keripik4-riris (npm) (malicious package) - [MAL-2025-90631](https://insights.sbomify.com/MAL-2025-90631/): Malicious code in siska-keripik38-riris (npm) (malicious package) - [MAL-2025-90630](https://insights.sbomify.com/MAL-2025-90630/): Malicious code in siska-keripik15-riris (npm) (malicious package) - [MAL-2025-9063](https://insights.sbomify.com/MAL-2025-9063/): Malicious code in @malware-test-weary-gamed-baurs-pened/test-mlw3-weary-gamed-baurs-pened (npm) (malicious package) - [MAL-2025-90629](https://insights.sbomify.com/MAL-2025-90629/): Malicious code in siska-keripik1-kyuki (npm) (malicious package) - [MAL-2025-90628](https://insights.sbomify.com/MAL-2025-90628/): Malicious code in siska-keraktelor12-riris (npm) (malicious package) - [MAL-2025-90627](https://insights.sbomify.com/MAL-2025-90627/): Malicious code in siska-kentang36-riris (npm) (malicious package) - [MAL-2025-90626](https://insights.sbomify.com/MAL-2025-90626/): Malicious code in siska-kembang56-miaww (npm) (malicious package) - [MAL-2025-90625](https://insights.sbomify.com/MAL-2025-90625/): Malicious code in siska-gudeg88-riris (npm) (malicious package) - [MAL-2025-90624](https://insights.sbomify.com/MAL-2025-90624/): Malicious code in siska-gudeg31-miaww (npm) (malicious package) - [MAL-2025-90623](https://insights.sbomify.com/MAL-2025-90623/): Malicious code in siska-gorengan19-riris (npm) (malicious package) - [MAL-2025-90622](https://insights.sbomify.com/MAL-2025-90622/): Malicious code in siska-getuk15-kyuki (npm) (malicious package) - [MAL-2025-90621](https://insights.sbomify.com/MAL-2025-90621/): Malicious code in siska-gepuk66-miaww (npm) (malicious package) - [MAL-2025-90620](https://insights.sbomify.com/MAL-2025-90620/): Malicious code in siska-gaplek99-riris (npm) (malicious package) - [MAL-2025-9062](https://insights.sbomify.com/MAL-2025-9062/): Malicious code in @malware-test-wears-skive-clank-hilus/test-mlw3-wears-skive-clank-hilus (npm) (malicious package) - [MAL-2025-90619](https://insights.sbomify.com/MAL-2025-90619/): Malicious code in siska-gaplek24-riris (npm) (malicious package) - [MAL-2025-90618](https://insights.sbomify.com/MAL-2025-90618/): Malicious code in siska-esdoger98-riris (npm) (malicious package) - [MAL-2025-90617](https://insights.sbomify.com/MAL-2025-90617/): Malicious code in siska-enting62-riris (npm) (malicious package) - [MAL-2025-90616](https://insights.sbomify.com/MAL-2025-90616/): Malicious code in siska-enting54-riris (npm) (malicious package) - [MAL-2025-90615](https://insights.sbomify.com/MAL-2025-90615/): Malicious code in siska-enting40-apidev (npm) (malicious package) - [MAL-2025-90614](https://insights.sbomify.com/MAL-2025-90614/): Malicious code in siska-empal59-riris (npm) (malicious package) - [MAL-2025-90613](https://insights.sbomify.com/MAL-2025-90613/): Malicious code in siska-dodol35-miaww (npm) (malicious package) - [MAL-2025-90612](https://insights.sbomify.com/MAL-2025-90612/): Malicious code in siska-bubursumsum4-miaww (npm) (malicious package) - [MAL-2025-90611](https://insights.sbomify.com/MAL-2025-90611/): Malicious code in siska-bubursumsum2-miaww (npm) (malicious package) - [MAL-2025-90610](https://insights.sbomify.com/MAL-2025-90610/): Malicious code in siska-bubursumsum1-riris (npm) (malicious package) - [MAL-2025-9061](https://insights.sbomify.com/MAL-2025-9061/): Malicious code in @malware-test-waved-dusky-bidon-nevus/test-mlw3-waved-dusky-bidon-nevus (npm) (malicious package) - [MAL-2025-90609](https://insights.sbomify.com/MAL-2025-90609/): Malicious code in siska-bubur72-wekto (npm) (malicious package) - [MAL-2025-90608](https://insights.sbomify.com/MAL-2025-90608/): Malicious code in siska-bubur19-miaww (npm) (malicious package) - [MAL-2025-90607](https://insights.sbomify.com/MAL-2025-90607/): Malicious code in siska-botok52-miaww (npm) (malicious package) - [MAL-2025-90606](https://insights.sbomify.com/MAL-2025-90606/): Malicious code in siska-bika57-miaww (npm) (malicious package) - [MAL-2025-90605](https://insights.sbomify.com/MAL-2025-90605/): Malicious code in siska-bika24-miaww (npm) (malicious package) - [MAL-2025-90604](https://insights.sbomify.com/MAL-2025-90604/): Malicious code in siska-bakwan46-kyuki (npm) (malicious package) - [MAL-2025-90603](https://insights.sbomify.com/MAL-2025-90603/): Malicious code in siska-asinan34-miaww (npm) (malicious package) - [MAL-2025-90602](https://insights.sbomify.com/MAL-2025-90602/): Malicious code in sinta-wajit21-miaww (npm) (malicious package) - [MAL-2025-90601](https://insights.sbomify.com/MAL-2025-90601/): Malicious code in sinta-tongseng38-riris (npm) (malicious package) - [MAL-2025-90600](https://insights.sbomify.com/MAL-2025-90600/): Malicious code in sinta-tomat71-apidev (npm) (malicious package) - [MAL-2025-9060](https://insights.sbomify.com/MAL-2025-9060/): Malicious code in @malware-test-wasms-alkyl-untie-staph/test-mlw3-wasms-alkyl-untie-staph (npm) (malicious package) - [MAL-2025-906](https://insights.sbomify.com/MAL-2025-906/): Malicious code in bytedance-chat (PyPI) (malicious package) - [MAL-2025-90599](https://insights.sbomify.com/MAL-2025-90599/): Malicious code in sinta-tiwul88-miaww (npm) (malicious package) - [MAL-2025-90598](https://insights.sbomify.com/MAL-2025-90598/): Malicious code in sinta-tiwul81-miaww (npm) (malicious package) - [MAL-2025-90597](https://insights.sbomify.com/MAL-2025-90597/): Malicious code in sinta-tiwul39-miaww (npm) (malicious package) - [MAL-2025-90596](https://insights.sbomify.com/MAL-2025-90596/): Malicious code in sinta-telurtahu100-riris (npm) (malicious package) - [MAL-2025-90595](https://insights.sbomify.com/MAL-2025-90595/): Malicious code in sinta-teh95-miaww (npm) (malicious package) - [MAL-2025-90594](https://insights.sbomify.com/MAL-2025-90594/): Malicious code in sinta-takokak35-miaww (npm) (malicious package) - [MAL-2025-90593](https://insights.sbomify.com/MAL-2025-90593/): Malicious code in sinta-taiwan90-miaww (npm) (malicious package) - [MAL-2025-90592](https://insights.sbomify.com/MAL-2025-90592/): Malicious code in sinta-taiwan39-riris (npm) (malicious package) - [MAL-2025-90591](https://insights.sbomify.com/MAL-2025-90591/): Malicious code in sinta-tahu40-riris (npm) (malicious package) - [MAL-2025-90590](https://insights.sbomify.com/MAL-2025-90590/): Malicious code in sinta-sroto11-riris (npm) (malicious package) - [MAL-2025-9059](https://insights.sbomify.com/MAL-2025-9059/): Malicious code in @malware-test-warns-lobos-globs-boche/test-mlw3-warns-lobos-globs-boche (npm) (malicious package) - [MAL-2025-90589](https://insights.sbomify.com/MAL-2025-90589/): Malicious code in sinta-soto91-riris (npm) (malicious package) - [MAL-2025-90588](https://insights.sbomify.com/MAL-2025-90588/): Malicious code in sinta-soto69-miaww (npm) (malicious package) - [MAL-2025-90587](https://insights.sbomify.com/MAL-2025-90587/): Malicious code in sinta-soto55-apidev (npm) (malicious package) - [MAL-2025-90586](https://insights.sbomify.com/MAL-2025-90586/): Malicious code in sinta-semur47-riris (npm) (malicious package) - [MAL-2025-90585](https://insights.sbomify.com/MAL-2025-90585/): Malicious code in sinta-semur25-riris (npm) (malicious package) - [MAL-2025-90584](https://insights.sbomify.com/MAL-2025-90584/): Malicious code in sinta-sego19-riris (npm) (malicious package) - [MAL-2025-90583](https://insights.sbomify.com/MAL-2025-90583/): Malicious code in sinta-sate97-miaww (npm) (malicious package) - [MAL-2025-90582](https://insights.sbomify.com/MAL-2025-90582/): Malicious code in sinta-sate49-miaww (npm) (malicious package) - [MAL-2025-90581](https://insights.sbomify.com/MAL-2025-90581/): Malicious code in sinta-sambel11-kyuki (npm) (malicious package) - [MAL-2025-90580](https://insights.sbomify.com/MAL-2025-90580/): Malicious code in sinta-sambalado90-miaww (npm) (malicious package) - [MAL-2025-9058](https://insights.sbomify.com/MAL-2025-9058/): Malicious code in @malware-test-wanly-dunno-nulls-jaups/test-mlw3-wanly-dunno-nulls-jaups (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/108/