# Vulnerabilities published in 2025 - [MAL-2025-175737](https://insights.sbomify.com/MAL-2025-175737/): Malicious code in kupaio-kulaa-jiakalai (npm) (malicious package) - [MAL-2025-175736](https://insights.sbomify.com/MAL-2025-175736/): Malicious code in kupaio-kulaa-jiakajualai (npm) (malicious package) - [MAL-2025-175735](https://insights.sbomify.com/MAL-2025-175735/): Malicious code in kupaio-kulaa-jiakai (npm) (malicious package) - [MAL-2025-175734](https://insights.sbomify.com/MAL-2025-175734/): Malicious code in kupaio-kulaa-jiaka (npm) (malicious package) - [MAL-2025-175733](https://insights.sbomify.com/MAL-2025-175733/): Malicious code in kupaio-kulaa-jiak (npm) (malicious package) - [MAL-2025-175732](https://insights.sbomify.com/MAL-2025-175732/): Malicious code in kupaio-kulaa-jia (npm) (malicious package) - [MAL-2025-175731](https://insights.sbomify.com/MAL-2025-175731/): Malicious code in kupaio-kulaa-jai (npm) (malicious package) - [MAL-2025-175730](https://insights.sbomify.com/MAL-2025-175730/): Malicious code in kupaio-kula-jokosimao (npm) (malicious package) - [MAL-2025-17573](https://insights.sbomify.com/MAL-2025-17573/): Malicious code in cordova-sqlite-plugin-2 (npm) (malicious package) - [MAL-2025-175729](https://insights.sbomify.com/MAL-2025-175729/): Malicious code in kupaio-kula-jokosimalo (npm) (malicious package) - [MAL-2025-175728](https://insights.sbomify.com/MAL-2025-175728/): Malicious code in kupaio-kula-jokosima (npm) (malicious package) - [MAL-2025-175727](https://insights.sbomify.com/MAL-2025-175727/): Malicious code in kupaio-kula-jokosim (npm) (malicious package) - [MAL-2025-175726](https://insights.sbomify.com/MAL-2025-175726/): Malicious code in kupaio-kula-jokosi (npm) (malicious package) - [MAL-2025-175725](https://insights.sbomify.com/MAL-2025-175725/): Malicious code in kupaio-kula-jokos (npm) (malicious package) - [MAL-2025-175724](https://insights.sbomify.com/MAL-2025-175724/): Malicious code in kupaio-kula-joko (npm) (malicious package) - [MAL-2025-175723](https://insights.sbomify.com/MAL-2025-175723/): Malicious code in kupaio-kula-jok (npm) (malicious package) - [MAL-2025-175722](https://insights.sbomify.com/MAL-2025-175722/): Malicious code in kupaio-kula-joiuna (npm) (malicious package) - [MAL-2025-175721](https://insights.sbomify.com/MAL-2025-175721/): Malicious code in kupaio-kula-joiluna (npm) (malicious package) - [MAL-2025-175720](https://insights.sbomify.com/MAL-2025-175720/): Malicious code in kupaio-kula-joia (npm) (malicious package) - [MAL-2025-17572](https://insights.sbomify.com/MAL-2025-17572/): Malicious code in cordova-plugins-devextremeaddon (npm) (malicious package) - [MAL-2025-175719](https://insights.sbomify.com/MAL-2025-175719/): Malicious code in kupaio-kula-joi (npm) (malicious package) - [MAL-2025-175718](https://insights.sbomify.com/MAL-2025-175718/): Malicious code in kupaio-kula-jo (npm) (malicious package) - [MAL-2025-175717](https://insights.sbomify.com/MAL-2025-175717/): Malicious code in kupaio-kula-jaoi (npm) (malicious package) - [MAL-2025-175716](https://insights.sbomify.com/MAL-2025-175716/): Malicious code in kupaio-kula-jaloki (npm) (malicious package) - [MAL-2025-175715](https://insights.sbomify.com/MAL-2025-175715/): Malicious code in kupaio-kula-jalaoki (npm) (malicious package) - [MAL-2025-175714](https://insights.sbomify.com/MAL-2025-175714/): Malicious code in kupaio-kula-jalalokioja (npm) (malicious package) - [MAL-2025-175713](https://insights.sbomify.com/MAL-2025-175713/): Malicious code in kupaio-kula-jalalokioj (npm) (malicious package) - [MAL-2025-175712](https://insights.sbomify.com/MAL-2025-175712/): Malicious code in kupaio-kula-jalalokio (npm) (malicious package) - [MAL-2025-175711](https://insights.sbomify.com/MAL-2025-175711/): Malicious code in kupaio-kula-jalaloki (npm) (malicious package) - [MAL-2025-175710](https://insights.sbomify.com/MAL-2025-175710/): Malicious code in kupaio-kula-jai (npm) (malicious package) - [MAL-2025-17571](https://insights.sbomify.com/MAL-2025-17571/): Malicious code in cordova-plugin-wifi-monitoring (npm) (malicious package) - [MAL-2025-175709](https://insights.sbomify.com/MAL-2025-175709/): Malicious code in kupaio-kila-jakaiaoai (npm) (malicious package) - [MAL-2025-175708](https://insights.sbomify.com/MAL-2025-175708/): Malicious code in kupaio-kila-jakaiaoaai (npm) (malicious package) - [MAL-2025-175707](https://insights.sbomify.com/MAL-2025-175707/): Malicious code in kupaio-kila-jakaiai (npm) (malicious package) - [MAL-2025-175706](https://insights.sbomify.com/MAL-2025-175706/): Malicious code in kupaio-kila-jakaiaai (npm) (malicious package) - [MAL-2025-175705](https://insights.sbomify.com/MAL-2025-175705/): Malicious code in kupaio-kil-kaoakoi (npm) (malicious package) - [MAL-2025-175704](https://insights.sbomify.com/MAL-2025-175704/): Malicious code in kupaio-kil-kakoi (npm) (malicious package) - [MAL-2025-175703](https://insights.sbomify.com/MAL-2025-175703/): Malicious code in kupaio-kil-kai (npm) (malicious package) - [MAL-2025-175702](https://insights.sbomify.com/MAL-2025-175702/): Malicious code in kupaio-kil-jakaiai (npm) (malicious package) - [MAL-2025-175701](https://insights.sbomify.com/MAL-2025-175701/): Malicious code in kupaio-kil-jakai (npm) (malicious package) - [MAL-2025-175700](https://insights.sbomify.com/MAL-2025-175700/): Malicious code in kupaio-kia-jakasfoai (npm) (malicious package) - [MAL-2025-17570](https://insights.sbomify.com/MAL-2025-17570/): Malicious code in cordova-plugin-secrets (npm) (malicious package) - [MAL-2025-1757](https://insights.sbomify.com/MAL-2025-1757/): Malicious code in ciaoaibot-production (npm) (malicious package) - [MAL-2025-175699](https://insights.sbomify.com/MAL-2025-175699/): Malicious code in kupaio-kia-jakaopoai (npm) (malicious package) - [MAL-2025-175698](https://insights.sbomify.com/MAL-2025-175698/): Malicious code in kupaio-kia-jakaooai (npm) (malicious package) - [MAL-2025-175697](https://insights.sbomify.com/MAL-2025-175697/): Malicious code in kupaio-kia-jakaoai (npm) (malicious package) - [MAL-2025-175696](https://insights.sbomify.com/MAL-2025-175696/): Malicious code in kupaio-kia-jakaiaopoai (npm) (malicious package) - [MAL-2025-175695](https://insights.sbomify.com/MAL-2025-175695/): Malicious code in kupaio-kia-jakaiaolapoai (npm) (malicious package) - [MAL-2025-175694](https://insights.sbomify.com/MAL-2025-175694/): Malicious code in kupaio-kia-jakafoai (npm) (malicious package) - [MAL-2025-175693](https://insights.sbomify.com/MAL-2025-175693/): Malicious code in kupaio-kia-jakafasfoai (npm) (malicious package) - [MAL-2025-175692](https://insights.sbomify.com/MAL-2025-175692/): Malicious code in kupaio-kia-jakafafswofoai (npm) (malicious package) - [MAL-2025-175691](https://insights.sbomify.com/MAL-2025-175691/): Malicious code in kupaio-kia-jakafafswaofoai (npm) (malicious package) - [MAL-2025-175690](https://insights.sbomify.com/MAL-2025-175690/): Malicious code in kupaio-kia-jakafafswafofoai (npm) (malicious package) - [MAL-2025-17569](https://insights.sbomify.com/MAL-2025-17569/): Malicious code in cordova-plugin-ooyala (npm) (malicious package) - [MAL-2025-175689](https://insights.sbomify.com/MAL-2025-175689/): Malicious code in kupaio-kia-jakafafsfoai (npm) (malicious package) - [MAL-2025-175688](https://insights.sbomify.com/MAL-2025-175688/): Malicious code in kupaio-kia-jakaaopoai (npm) (malicious package) - [MAL-2025-175687](https://insights.sbomify.com/MAL-2025-175687/): Malicious code in kupai-ukutia-jok (npm) (malicious package) - [MAL-2025-175686](https://insights.sbomify.com/MAL-2025-175686/): Malicious code in kuku-poke9 (npm) (malicious package) - [MAL-2025-175685](https://insights.sbomify.com/MAL-2025-175685/): Malicious code in kuku-poke8 (npm) (malicious package) - [MAL-2025-175684](https://insights.sbomify.com/MAL-2025-175684/): Malicious code in kuku-poke7 (npm) (malicious package) - [MAL-2025-175683](https://insights.sbomify.com/MAL-2025-175683/): Malicious code in kuku-poke6 (npm) (malicious package) - [MAL-2025-175682](https://insights.sbomify.com/MAL-2025-175682/): Malicious code in kuku-poke5 (npm) (malicious package) - [MAL-2025-175681](https://insights.sbomify.com/MAL-2025-175681/): Malicious code in kuku-poke4 (npm) (malicious package) - [MAL-2025-175680](https://insights.sbomify.com/MAL-2025-175680/): Malicious code in kuku-poke3 (npm) (malicious package) - [MAL-2025-17568](https://insights.sbomify.com/MAL-2025-17568/): Malicious code in cordova-plugin-onyxbeacon (npm) (malicious package) - [MAL-2025-175679](https://insights.sbomify.com/MAL-2025-175679/): Malicious code in kuku-poke25 (npm) (malicious package) - [MAL-2025-175678](https://insights.sbomify.com/MAL-2025-175678/): Malicious code in kuku-poke24 (npm) (malicious package) - [MAL-2025-175677](https://insights.sbomify.com/MAL-2025-175677/): Malicious code in kuku-poke23 (npm) (malicious package) - [MAL-2025-175676](https://insights.sbomify.com/MAL-2025-175676/): Malicious code in kuku-poke22 (npm) (malicious package) - [MAL-2025-175675](https://insights.sbomify.com/MAL-2025-175675/): Malicious code in kuku-poke21 (npm) (malicious package) - [MAL-2025-175674](https://insights.sbomify.com/MAL-2025-175674/): Malicious code in kuku-poke20 (npm) (malicious package) - [MAL-2025-175673](https://insights.sbomify.com/MAL-2025-175673/): Malicious code in kuku-poke2 (npm) (malicious package) - [MAL-2025-175672](https://insights.sbomify.com/MAL-2025-175672/): Malicious code in kuku-poke19 (npm) (malicious package) - [MAL-2025-175671](https://insights.sbomify.com/MAL-2025-175671/): Malicious code in kuku-poke18 (npm) (malicious package) - [MAL-2025-175670](https://insights.sbomify.com/MAL-2025-175670/): Malicious code in kuku-poke17 (npm) (malicious package) - [MAL-2025-17567](https://insights.sbomify.com/MAL-2025-17567/): Malicious code in cordova-plugin-ios-no-export-compliance (npm) (malicious package) - [MAL-2025-175669](https://insights.sbomify.com/MAL-2025-175669/): Malicious code in kuku-poke16 (npm) (malicious package) - [MAL-2025-175668](https://insights.sbomify.com/MAL-2025-175668/): Malicious code in kuku-poke15 (npm) (malicious package) - [MAL-2025-175667](https://insights.sbomify.com/MAL-2025-175667/): Malicious code in kuku-poke14 (npm) (malicious package) - [MAL-2025-175666](https://insights.sbomify.com/MAL-2025-175666/): Malicious code in kuku-poke13 (npm) (malicious package) - [MAL-2025-175665](https://insights.sbomify.com/MAL-2025-175665/): Malicious code in kuku-poke12 (npm) (malicious package) - [MAL-2025-175664](https://insights.sbomify.com/MAL-2025-175664/): Malicious code in kuku-poke11 (npm) (malicious package) - [MAL-2025-175663](https://insights.sbomify.com/MAL-2025-175663/): Malicious code in kuku-poke10 (npm) (malicious package) - [MAL-2025-175662](https://insights.sbomify.com/MAL-2025-175662/): Malicious code in kuku-poke1 (npm) (malicious package) - [MAL-2025-175661](https://insights.sbomify.com/MAL-2025-175661/): Malicious code in ksaki-kaisom-olomalao (npm) (malicious package) - [MAL-2025-175660](https://insights.sbomify.com/MAL-2025-175660/): Malicious code in ksaki-kaisom-aolomalao (npm) (malicious package) - [MAL-2025-17566](https://insights.sbomify.com/MAL-2025-17566/): Malicious code in cordova-plugin-firebase-lovespace (npm) (malicious package) - [MAL-2025-175659](https://insights.sbomify.com/MAL-2025-175659/): Malicious code in ksaki-kaisoim-olosdsdsdgggnika (npm) (malicious package) - [MAL-2025-175658](https://insights.sbomify.com/MAL-2025-175658/): Malicious code in ksaki-kaisoim-olosdsdgnika (npm) (malicious package) - [MAL-2025-175657](https://insights.sbomify.com/MAL-2025-175657/): Malicious code in ksaki-kaisoim-olosdsdggnika (npm) (malicious package) - [MAL-2025-175656](https://insights.sbomify.com/MAL-2025-175656/): Malicious code in ksaki-kaisoim-olonka (npm) (malicious package) - [MAL-2025-175655](https://insights.sbomify.com/MAL-2025-175655/): Malicious code in ksaki-kaisoim-oloka (npm) (malicious package) - [MAL-2025-175654](https://insights.sbomify.com/MAL-2025-175654/): Malicious code in ksaki-kaisoim-olok (npm) (malicious package) - [MAL-2025-175653](https://insights.sbomify.com/MAL-2025-175653/): Malicious code in ksaki-kaisoim-olo (npm) (malicious package) - [MAL-2025-175652](https://insights.sbomify.com/MAL-2025-175652/): Malicious code in ksaki-kaisoim-aolomalao (npm) (malicious package) - [MAL-2025-175651](https://insights.sbomify.com/MAL-2025-175651/): Malicious code in ksaki-kaisoim-aololao (npm) (malicious package) - [MAL-2025-175650](https://insights.sbomify.com/MAL-2025-175650/): Malicious code in ksaki-kaisoim-aoloao (npm) (malicious package) - [MAL-2025-17565](https://insights.sbomify.com/MAL-2025-17565/): Malicious code in cordova-plugin-devextremeaddon1 (npm) (malicious package) - [MAL-2025-175649](https://insights.sbomify.com/MAL-2025-175649/): Malicious code in ksai-kilotaa-ailolioia (npm) (malicious package) - [MAL-2025-175648](https://insights.sbomify.com/MAL-2025-175648/): Malicious code in ksai-kilota-aioi (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1091/