# Vulnerabilities published in 2025


- [MAL-2025-175557](https://insights.sbomify.com/MAL-2025-175557/): Malicious code in koko-poke6 (npm) (malicious package)
- [MAL-2025-175556](https://insights.sbomify.com/MAL-2025-175556/): Malicious code in koko-poke5 (npm) (malicious package)
- [MAL-2025-175555](https://insights.sbomify.com/MAL-2025-175555/): Malicious code in koko-poke4 (npm) (malicious package)
- [MAL-2025-175554](https://insights.sbomify.com/MAL-2025-175554/): Malicious code in koko-poke3 (npm) (malicious package)
- [MAL-2025-175553](https://insights.sbomify.com/MAL-2025-175553/): Malicious code in koko-poke25 (npm) (malicious package)
- [MAL-2025-175552](https://insights.sbomify.com/MAL-2025-175552/): Malicious code in koko-poke24 (npm) (malicious package)
- [MAL-2025-175551](https://insights.sbomify.com/MAL-2025-175551/): Malicious code in koko-poke23 (npm) (malicious package)
- [MAL-2025-175550](https://insights.sbomify.com/MAL-2025-175550/): Malicious code in koko-poke22 (npm) (malicious package)
- [MAL-2025-17555](https://insights.sbomify.com/MAL-2025-17555/): Malicious code in coral-yeti-wvi805-project (npm) (malicious package)
- [MAL-2025-175549](https://insights.sbomify.com/MAL-2025-175549/): Malicious code in koko-poke21 (npm) (malicious package)
- [MAL-2025-175548](https://insights.sbomify.com/MAL-2025-175548/): Malicious code in koko-poke20 (npm) (malicious package)
- [MAL-2025-175547](https://insights.sbomify.com/MAL-2025-175547/): Malicious code in koko-poke2 (npm) (malicious package)
- [MAL-2025-175546](https://insights.sbomify.com/MAL-2025-175546/): Malicious code in koko-poke19 (npm) (malicious package)
- [MAL-2025-175545](https://insights.sbomify.com/MAL-2025-175545/): Malicious code in koko-poke18 (npm) (malicious package)
- [MAL-2025-175544](https://insights.sbomify.com/MAL-2025-175544/): Malicious code in koko-poke17 (npm) (malicious package)
- [MAL-2025-175543](https://insights.sbomify.com/MAL-2025-175543/): Malicious code in koko-poke16 (npm) (malicious package)
- [MAL-2025-175542](https://insights.sbomify.com/MAL-2025-175542/): Malicious code in koko-poke15 (npm) (malicious package)
- [MAL-2025-175541](https://insights.sbomify.com/MAL-2025-175541/): Malicious code in koko-poke14 (npm) (malicious package)
- [MAL-2025-175540](https://insights.sbomify.com/MAL-2025-175540/): Malicious code in koko-poke13 (npm) (malicious package)
- [MAL-2025-17554](https://insights.sbomify.com/MAL-2025-17554/): Malicious code in coral-yak-kgy897-project (npm) (malicious package)
- [MAL-2025-175539](https://insights.sbomify.com/MAL-2025-175539/): Malicious code in koko-poke12 (npm) (malicious package)
- [MAL-2025-175538](https://insights.sbomify.com/MAL-2025-175538/): Malicious code in koko-poke11 (npm) (malicious package)
- [MAL-2025-175537](https://insights.sbomify.com/MAL-2025-175537/): Malicious code in koko-poke10 (npm) (malicious package)
- [MAL-2025-175536](https://insights.sbomify.com/MAL-2025-175536/): Malicious code in koko-poke1 (npm) (malicious package)
- [MAL-2025-175535](https://insights.sbomify.com/MAL-2025-175535/): Malicious code in kimdjiwon-erui-vert (npm) (malicious package)
- [MAL-2025-175534](https://insights.sbomify.com/MAL-2025-175534/): Malicious code in kimdjiwon-ersui-vert (npm) (malicious package)
- [MAL-2025-175533](https://insights.sbomify.com/MAL-2025-175533/): Malicious code in kim-sohyun-memeq (npm) (malicious package)
- [MAL-2025-175532](https://insights.sbomify.com/MAL-2025-175532/): Malicious code in kim-sohyu-memeq (npm) (malicious package)
- [MAL-2025-175531](https://insights.sbomify.com/MAL-2025-175531/): Malicious code in kim-sohy-memeq (npm) (malicious package)
- [MAL-2025-175530](https://insights.sbomify.com/MAL-2025-175530/): Malicious code in kim-so-memeq (npm) (malicious package)
- [MAL-2025-17553](https://insights.sbomify.com/MAL-2025-17553/): Malicious code in coral-violet-cjh501-project (npm) (malicious package)
- [MAL-2025-175529](https://insights.sbomify.com/MAL-2025-175529/): Malicious code in kim-s-memeq (npm) (malicious package)
- [MAL-2025-175528](https://insights.sbomify.com/MAL-2025-175528/): Malicious code in kim-memeq-bau (npm) (malicious package)
- [MAL-2025-175527](https://insights.sbomify.com/MAL-2025-175527/): Malicious code in kim-jiwon-men (npm) (malicious package)
- [MAL-2025-175526](https://insights.sbomify.com/MAL-2025-175526/): Malicious code in kim-jiwon-memeq (npm) (malicious package)
- [MAL-2025-175525](https://insights.sbomify.com/MAL-2025-175525/): Malicious code in kim-jiwon-meme (npm) (malicious package)
- [MAL-2025-175524](https://insights.sbomify.com/MAL-2025-175524/): Malicious code in kim-jiwon-mem (npm) (malicious package)
- [MAL-2025-175523](https://insights.sbomify.com/MAL-2025-175523/): Malicious code in kim-jiwon-me (npm) (malicious package)
- [MAL-2025-175522](https://insights.sbomify.com/MAL-2025-175522/): Malicious code in kim-jiwon-m (npm) (malicious package)
- [MAL-2025-175521](https://insights.sbomify.com/MAL-2025-175521/): Malicious code in kim-jiwon-bau (npm) (malicious package)
- [MAL-2025-175520](https://insights.sbomify.com/MAL-2025-175520/): Malicious code in kim-jiwon-ba (npm) (malicious package)
- [MAL-2025-17552](https://insights.sbomify.com/MAL-2025-17552/): Malicious code in coral-savanna-rbt648-project (npm) (malicious package)
- [MAL-2025-175519](https://insights.sbomify.com/MAL-2025-175519/): Malicious code in kim-jiwo-bau (npm) (malicious package)
- [MAL-2025-175518](https://insights.sbomify.com/MAL-2025-175518/): Malicious code in kim-jiw-bau (npm) (malicious package)
- [MAL-2025-175517](https://insights.sbomify.com/MAL-2025-175517/): Malicious code in kim-ji-bau (npm) (malicious package)
- [MAL-2025-175516](https://insights.sbomify.com/MAL-2025-175516/): Malicious code in kiki-poke9 (npm) (malicious package)
- [MAL-2025-175515](https://insights.sbomify.com/MAL-2025-175515/): Malicious code in kiki-poke8 (npm) (malicious package)
- [MAL-2025-175514](https://insights.sbomify.com/MAL-2025-175514/): Malicious code in kiki-poke7 (npm) (malicious package)
- [MAL-2025-175513](https://insights.sbomify.com/MAL-2025-175513/): Malicious code in kiki-poke6 (npm) (malicious package)
- [MAL-2025-175512](https://insights.sbomify.com/MAL-2025-175512/): Malicious code in kiki-poke5 (npm) (malicious package)
- [MAL-2025-175511](https://insights.sbomify.com/MAL-2025-175511/): Malicious code in kiki-poke4 (npm) (malicious package)
- [MAL-2025-175510](https://insights.sbomify.com/MAL-2025-175510/): Malicious code in kiki-poke3 (npm) (malicious package)
- [MAL-2025-17551](https://insights.sbomify.com/MAL-2025-17551/): Malicious code in coral-qun2y-frgjo-yeti-project (npm) (malicious package)
- [MAL-2025-175509](https://insights.sbomify.com/MAL-2025-175509/): Malicious code in kiki-poke25 (npm) (malicious package)
- [MAL-2025-175508](https://insights.sbomify.com/MAL-2025-175508/): Malicious code in kiki-poke24 (npm) (malicious package)
- [MAL-2025-175507](https://insights.sbomify.com/MAL-2025-175507/): Malicious code in kiki-poke23 (npm) (malicious package)
- [MAL-2025-175506](https://insights.sbomify.com/MAL-2025-175506/): Malicious code in kiki-poke22 (npm) (malicious package)
- [MAL-2025-175505](https://insights.sbomify.com/MAL-2025-175505/): Malicious code in kiki-poke21 (npm) (malicious package)
- [MAL-2025-175504](https://insights.sbomify.com/MAL-2025-175504/): Malicious code in kiki-poke20 (npm) (malicious package)
- [MAL-2025-175503](https://insights.sbomify.com/MAL-2025-175503/): Malicious code in kiki-poke2 (npm) (malicious package)
- [MAL-2025-175502](https://insights.sbomify.com/MAL-2025-175502/): Malicious code in kiki-poke19 (npm) (malicious package)
- [MAL-2025-175501](https://insights.sbomify.com/MAL-2025-175501/): Malicious code in kiki-poke18 (npm) (malicious package)
- [MAL-2025-175500](https://insights.sbomify.com/MAL-2025-175500/): Malicious code in kiki-poke17 (npm) (malicious package)
- [MAL-2025-17550](https://insights.sbomify.com/MAL-2025-17550/): Malicious code in coral-quill-tom161-project (npm) (malicious package)
- [MAL-2025-1755](https://insights.sbomify.com/MAL-2025-1755/): Malicious code in ciaoaibot-dev (npm) (malicious package)
- [MAL-2025-175499](https://insights.sbomify.com/MAL-2025-175499/): Malicious code in kiki-poke16 (npm) (malicious package)
- [MAL-2025-175498](https://insights.sbomify.com/MAL-2025-175498/): Malicious code in kiki-poke15 (npm) (malicious package)
- [MAL-2025-175497](https://insights.sbomify.com/MAL-2025-175497/): Malicious code in kiki-poke14 (npm) (malicious package)
- [MAL-2025-175496](https://insights.sbomify.com/MAL-2025-175496/): Malicious code in kiki-poke13 (npm) (malicious package)
- [MAL-2025-175495](https://insights.sbomify.com/MAL-2025-175495/): Malicious code in kiki-poke12 (npm) (malicious package)
- [MAL-2025-175494](https://insights.sbomify.com/MAL-2025-175494/): Malicious code in kiki-poke11 (npm) (malicious package)
- [MAL-2025-175493](https://insights.sbomify.com/MAL-2025-175493/): Malicious code in kiki-poke10 (npm) (malicious package)
- [MAL-2025-175492](https://insights.sbomify.com/MAL-2025-175492/): Malicious code in kiki-poke1 (npm) (malicious package)
- [MAL-2025-175491](https://insights.sbomify.com/MAL-2025-175491/): Malicious code in keke-poke9 (npm) (malicious package)
- [MAL-2025-175490](https://insights.sbomify.com/MAL-2025-175490/): Malicious code in keke-poke8 (npm) (malicious package)
- [MAL-2025-17549](https://insights.sbomify.com/MAL-2025-17549/): Malicious code in coral-quagmire-axk584-project (npm) (malicious package)
- [MAL-2025-175489](https://insights.sbomify.com/MAL-2025-175489/): Malicious code in keke-poke7 (npm) (malicious package)
- [MAL-2025-175488](https://insights.sbomify.com/MAL-2025-175488/): Malicious code in keke-poke6 (npm) (malicious package)
- [MAL-2025-175487](https://insights.sbomify.com/MAL-2025-175487/): Malicious code in keke-poke5 (npm) (malicious package)
- [MAL-2025-175486](https://insights.sbomify.com/MAL-2025-175486/): Malicious code in keke-poke4 (npm) (malicious package)
- [MAL-2025-175485](https://insights.sbomify.com/MAL-2025-175485/): Malicious code in keke-poke3 (npm) (malicious package)
- [MAL-2025-175484](https://insights.sbomify.com/MAL-2025-175484/): Malicious code in keke-poke25 (npm) (malicious package)
- [MAL-2025-175483](https://insights.sbomify.com/MAL-2025-175483/): Malicious code in keke-poke24 (npm) (malicious package)
- [MAL-2025-175482](https://insights.sbomify.com/MAL-2025-175482/): Malicious code in keke-poke23 (npm) (malicious package)
- [MAL-2025-175481](https://insights.sbomify.com/MAL-2025-175481/): Malicious code in keke-poke22 (npm) (malicious package)
- [MAL-2025-175480](https://insights.sbomify.com/MAL-2025-175480/): Malicious code in keke-poke21 (npm) (malicious package)
- [MAL-2025-17548](https://insights.sbomify.com/MAL-2025-17548/): Malicious code in coral-lcph3-fkdfa-amethyst-project (npm) (malicious package)
- [MAL-2025-175479](https://insights.sbomify.com/MAL-2025-175479/): Malicious code in keke-poke20 (npm) (malicious package)
- [MAL-2025-175478](https://insights.sbomify.com/MAL-2025-175478/): Malicious code in keke-poke2 (npm) (malicious package)
- [MAL-2025-175477](https://insights.sbomify.com/MAL-2025-175477/): Malicious code in keke-poke19 (npm) (malicious package)
- [MAL-2025-175476](https://insights.sbomify.com/MAL-2025-175476/): Malicious code in keke-poke18 (npm) (malicious package)
- [MAL-2025-175475](https://insights.sbomify.com/MAL-2025-175475/): Malicious code in keke-poke17 (npm) (malicious package)
- [MAL-2025-175474](https://insights.sbomify.com/MAL-2025-175474/): Malicious code in keke-poke16 (npm) (malicious package)
- [MAL-2025-175473](https://insights.sbomify.com/MAL-2025-175473/): Malicious code in keke-poke15 (npm) (malicious package)
- [MAL-2025-175472](https://insights.sbomify.com/MAL-2025-175472/): Malicious code in keke-poke14 (npm) (malicious package)
- [MAL-2025-175471](https://insights.sbomify.com/MAL-2025-175471/): Malicious code in keke-poke13 (npm) (malicious package)
- [MAL-2025-175470](https://insights.sbomify.com/MAL-2025-175470/): Malicious code in keke-poke12 (npm) (malicious package)
- [MAL-2025-17547](https://insights.sbomify.com/MAL-2025-17547/): Malicious code in coral-lagoon-qzq948-project (npm) (malicious package)
- [MAL-2025-175469](https://insights.sbomify.com/MAL-2025-175469/): Malicious code in keke-poke11 (npm) (malicious package)
- [MAL-2025-175468](https://insights.sbomify.com/MAL-2025-175468/): Malicious code in keke-poke10 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1093/