# Vulnerabilities published in 2025


- [MAL-2025-175016](https://insights.sbomify.com/MAL-2025-175016/): Malicious code in irfan-poke4 (npm) (malicious package)
- [MAL-2025-175015](https://insights.sbomify.com/MAL-2025-175015/): Malicious code in irfan-poke3 (npm) (malicious package)
- [MAL-2025-175014](https://insights.sbomify.com/MAL-2025-175014/): Malicious code in irfan-poke25 (npm) (malicious package)
- [MAL-2025-175013](https://insights.sbomify.com/MAL-2025-175013/): Malicious code in irfan-poke24 (npm) (malicious package)
- [MAL-2025-175012](https://insights.sbomify.com/MAL-2025-175012/): Malicious code in irfan-poke23 (npm) (malicious package)
- [MAL-2025-175011](https://insights.sbomify.com/MAL-2025-175011/): Malicious code in irfan-poke22 (npm) (malicious package)
- [MAL-2025-175010](https://insights.sbomify.com/MAL-2025-175010/): Malicious code in irfan-poke21 (npm) (malicious package)
- [MAL-2025-17501](https://insights.sbomify.com/MAL-2025-17501/): Malicious code in consul-hcp (npm) (malicious package)
- [MAL-2025-175009](https://insights.sbomify.com/MAL-2025-175009/): Malicious code in irfan-poke20 (npm) (malicious package)
- [MAL-2025-175008](https://insights.sbomify.com/MAL-2025-175008/): Malicious code in irfan-poke2 (npm) (malicious package)
- [MAL-2025-175007](https://insights.sbomify.com/MAL-2025-175007/): Malicious code in irfan-poke19 (npm) (malicious package)
- [MAL-2025-175006](https://insights.sbomify.com/MAL-2025-175006/): Malicious code in irfan-poke18 (npm) (malicious package)
- [MAL-2025-175005](https://insights.sbomify.com/MAL-2025-175005/): Malicious code in irfan-poke17 (npm) (malicious package)
- [MAL-2025-175004](https://insights.sbomify.com/MAL-2025-175004/): Malicious code in irfan-poke16 (npm) (malicious package)
- [MAL-2025-175003](https://insights.sbomify.com/MAL-2025-175003/): Malicious code in irfan-poke15 (npm) (malicious package)
- [MAL-2025-175002](https://insights.sbomify.com/MAL-2025-175002/): Malicious code in irfan-poke14 (npm) (malicious package)
- [MAL-2025-175001](https://insights.sbomify.com/MAL-2025-175001/): Malicious code in irfan-poke13 (npm) (malicious package)
- [MAL-2025-175000](https://insights.sbomify.com/MAL-2025-175000/): Malicious code in irfan-poke12 (npm) (malicious package)
- [MAL-2025-17500](https://insights.sbomify.com/MAL-2025-17500/): Malicious code in consul-acls (npm) (malicious package)
- [MAL-2025-1750](https://insights.sbomify.com/MAL-2025-1750/): Malicious code in calypso-polyfills (npm) (malicious package)
- [MAL-2025-175](https://insights.sbomify.com/MAL-2025-175/): Malicious code in contrast-local-scan-action (npm) (malicious package)
- [MAL-2025-174999](https://insights.sbomify.com/MAL-2025-174999/): Malicious code in irfan-poke11 (npm) (malicious package)
- [MAL-2025-174998](https://insights.sbomify.com/MAL-2025-174998/): Malicious code in irfan-poke10 (npm) (malicious package)
- [MAL-2025-174997](https://insights.sbomify.com/MAL-2025-174997/): Malicious code in irfan-poke1 (npm) (malicious package)
- [MAL-2025-174996](https://insights.sbomify.com/MAL-2025-174996/): Malicious code in ira-9 (npm) (malicious package)
- [MAL-2025-174995](https://insights.sbomify.com/MAL-2025-174995/): Malicious code in ira-8 (npm) (malicious package)
- [MAL-2025-174994](https://insights.sbomify.com/MAL-2025-174994/): Malicious code in ira-7 (npm) (malicious package)
- [MAL-2025-174993](https://insights.sbomify.com/MAL-2025-174993/): Malicious code in ira-6 (npm) (malicious package)
- [MAL-2025-174992](https://insights.sbomify.com/MAL-2025-174992/): Malicious code in ira-50 (npm) (malicious package)
- [MAL-2025-174991](https://insights.sbomify.com/MAL-2025-174991/): Malicious code in ira-5 (npm) (malicious package)
- [MAL-2025-174990](https://insights.sbomify.com/MAL-2025-174990/): Malicious code in ira-49 (npm) (malicious package)
- [MAL-2025-17499](https://insights.sbomify.com/MAL-2025-17499/): Malicious code in constant_resolver (npm) (malicious package)
- [MAL-2025-174989](https://insights.sbomify.com/MAL-2025-174989/): Malicious code in ira-48 (npm) (malicious package)
- [MAL-2025-174988](https://insights.sbomify.com/MAL-2025-174988/): Malicious code in ira-47 (npm) (malicious package)
- [MAL-2025-174987](https://insights.sbomify.com/MAL-2025-174987/): Malicious code in ira-46 (npm) (malicious package)
- [MAL-2025-174986](https://insights.sbomify.com/MAL-2025-174986/): Malicious code in ira-45 (npm) (malicious package)
- [MAL-2025-174985](https://insights.sbomify.com/MAL-2025-174985/): Malicious code in ira-44 (npm) (malicious package)
- [MAL-2025-174984](https://insights.sbomify.com/MAL-2025-174984/): Malicious code in ira-43 (npm) (malicious package)
- [MAL-2025-174983](https://insights.sbomify.com/MAL-2025-174983/): Malicious code in ira-42 (npm) (malicious package)
- [MAL-2025-174982](https://insights.sbomify.com/MAL-2025-174982/): Malicious code in ira-41 (npm) (malicious package)
- [MAL-2025-174981](https://insights.sbomify.com/MAL-2025-174981/): Malicious code in ira-40 (npm) (malicious package)
- [MAL-2025-174980](https://insights.sbomify.com/MAL-2025-174980/): Malicious code in ira-4 (npm) (malicious package)
- [MAL-2025-17498](https://insights.sbomify.com/MAL-2025-17498/): Malicious code in consolerotate (npm) (malicious package)
- [MAL-2025-174979](https://insights.sbomify.com/MAL-2025-174979/): Malicious code in ira-39 (npm) (malicious package)
- [MAL-2025-174978](https://insights.sbomify.com/MAL-2025-174978/): Malicious code in ira-38 (npm) (malicious package)
- [MAL-2025-174977](https://insights.sbomify.com/MAL-2025-174977/): Malicious code in ira-37 (npm) (malicious package)
- [MAL-2025-174976](https://insights.sbomify.com/MAL-2025-174976/): Malicious code in ira-36 (npm) (malicious package)
- [MAL-2025-174975](https://insights.sbomify.com/MAL-2025-174975/): Malicious code in ira-35 (npm) (malicious package)
- [MAL-2025-174974](https://insights.sbomify.com/MAL-2025-174974/): Malicious code in ira-34 (npm) (malicious package)
- [MAL-2025-174973](https://insights.sbomify.com/MAL-2025-174973/): Malicious code in ira-33 (npm) (malicious package)
- [MAL-2025-174972](https://insights.sbomify.com/MAL-2025-174972/): Malicious code in ira-32 (npm) (malicious package)
- [MAL-2025-174971](https://insights.sbomify.com/MAL-2025-174971/): Malicious code in ira-31 (npm) (malicious package)
- [MAL-2025-174970](https://insights.sbomify.com/MAL-2025-174970/): Malicious code in ira-30 (npm) (malicious package)
- [MAL-2025-17497](https://insights.sbomify.com/MAL-2025-17497/): Malicious code in consent_decree (npm) (malicious package)
- [MAL-2025-174969](https://insights.sbomify.com/MAL-2025-174969/): Malicious code in ira-3 (npm) (malicious package)
- [MAL-2025-174968](https://insights.sbomify.com/MAL-2025-174968/): Malicious code in ira-29 (npm) (malicious package)
- [MAL-2025-174967](https://insights.sbomify.com/MAL-2025-174967/): Malicious code in ira-28 (npm) (malicious package)
- [MAL-2025-174966](https://insights.sbomify.com/MAL-2025-174966/): Malicious code in ira-27 (npm) (malicious package)
- [MAL-2025-174965](https://insights.sbomify.com/MAL-2025-174965/): Malicious code in ira-26 (npm) (malicious package)
- [MAL-2025-174964](https://insights.sbomify.com/MAL-2025-174964/): Malicious code in ira-25 (npm) (malicious package)
- [MAL-2025-174963](https://insights.sbomify.com/MAL-2025-174963/): Malicious code in ira-24 (npm) (malicious package)
- [MAL-2025-174962](https://insights.sbomify.com/MAL-2025-174962/): Malicious code in ira-23 (npm) (malicious package)
- [MAL-2025-174961](https://insights.sbomify.com/MAL-2025-174961/): Malicious code in ira-22 (npm) (malicious package)
- [MAL-2025-174960](https://insights.sbomify.com/MAL-2025-174960/): Malicious code in ira-21 (npm) (malicious package)
- [MAL-2025-17496](https://insights.sbomify.com/MAL-2025-17496/): Malicious code in connectservice (npm) (malicious package)
- [MAL-2025-174959](https://insights.sbomify.com/MAL-2025-174959/): Malicious code in ira-20 (npm) (malicious package)
- [MAL-2025-174958](https://insights.sbomify.com/MAL-2025-174958/): Malicious code in ira-2 (npm) (malicious package)
- [MAL-2025-174957](https://insights.sbomify.com/MAL-2025-174957/): Malicious code in ira-19 (npm) (malicious package)
- [MAL-2025-174956](https://insights.sbomify.com/MAL-2025-174956/): Malicious code in ira-18 (npm) (malicious package)
- [MAL-2025-174955](https://insights.sbomify.com/MAL-2025-174955/): Malicious code in ira-17 (npm) (malicious package)
- [MAL-2025-174954](https://insights.sbomify.com/MAL-2025-174954/): Malicious code in ira-16 (npm) (malicious package)
- [MAL-2025-174953](https://insights.sbomify.com/MAL-2025-174953/): Malicious code in ira-15 (npm) (malicious package)
- [MAL-2025-174952](https://insights.sbomify.com/MAL-2025-174952/): Malicious code in ira-14 (npm) (malicious package)
- [MAL-2025-174951](https://insights.sbomify.com/MAL-2025-174951/): Malicious code in ira-13 (npm) (malicious package)
- [MAL-2025-174950](https://insights.sbomify.com/MAL-2025-174950/): Malicious code in ira-12 (npm) (malicious package)
- [MAL-2025-17495](https://insights.sbomify.com/MAL-2025-17495/): Malicious code in connected-cells (npm) (malicious package)
- [MAL-2025-174949](https://insights.sbomify.com/MAL-2025-174949/): Malicious code in ira-11 (npm) (malicious package)
- [MAL-2025-174948](https://insights.sbomify.com/MAL-2025-174948/): Malicious code in ira-10 (npm) (malicious package)
- [MAL-2025-174947](https://insights.sbomify.com/MAL-2025-174947/): Malicious code in ira-1 (npm) (malicious package)
- [MAL-2025-174946](https://insights.sbomify.com/MAL-2025-174946/): Malicious code in inul-poke9 (npm) (malicious package)
- [MAL-2025-174945](https://insights.sbomify.com/MAL-2025-174945/): Malicious code in inul-poke8 (npm) (malicious package)
- [MAL-2025-174944](https://insights.sbomify.com/MAL-2025-174944/): Malicious code in inul-poke7 (npm) (malicious package)
- [MAL-2025-174943](https://insights.sbomify.com/MAL-2025-174943/): Malicious code in inul-poke5 (npm) (malicious package)
- [MAL-2025-174942](https://insights.sbomify.com/MAL-2025-174942/): Malicious code in inul-poke4 (npm) (malicious package)
- [MAL-2025-174941](https://insights.sbomify.com/MAL-2025-174941/): Malicious code in inul-poke3 (npm) (malicious package)
- [MAL-2025-174940](https://insights.sbomify.com/MAL-2025-174940/): Malicious code in inul-poke25 (npm) (malicious package)
- [MAL-2025-17494](https://insights.sbomify.com/MAL-2025-17494/): Malicious code in connect-mayfly (npm) (malicious package)
- [MAL-2025-174939](https://insights.sbomify.com/MAL-2025-174939/): Malicious code in inul-poke24 (npm) (malicious package)
- [MAL-2025-174938](https://insights.sbomify.com/MAL-2025-174938/): Malicious code in inul-poke23 (npm) (malicious package)
- [MAL-2025-174937](https://insights.sbomify.com/MAL-2025-174937/): Malicious code in inul-poke22 (npm) (malicious package)
- [MAL-2025-174936](https://insights.sbomify.com/MAL-2025-174936/): Malicious code in inul-poke21 (npm) (malicious package)
- [MAL-2025-174935](https://insights.sbomify.com/MAL-2025-174935/): Malicious code in inul-poke20 (npm) (malicious package)
- [MAL-2025-174934](https://insights.sbomify.com/MAL-2025-174934/): Malicious code in inul-poke2 (npm) (malicious package)
- [MAL-2025-174933](https://insights.sbomify.com/MAL-2025-174933/): Malicious code in inul-poke19 (npm) (malicious package)
- [MAL-2025-174932](https://insights.sbomify.com/MAL-2025-174932/): Malicious code in inul-poke18 (npm) (malicious package)
- [MAL-2025-174931](https://insights.sbomify.com/MAL-2025-174931/): Malicious code in inul-poke17 (npm) (malicious package)
- [MAL-2025-174930](https://insights.sbomify.com/MAL-2025-174930/): Malicious code in inul-poke16 (npm) (malicious package)
- [MAL-2025-17493](https://insights.sbomify.com/MAL-2025-17493/): Malicious code in conmendator-api-client (npm) (malicious package)
- [MAL-2025-174929](https://insights.sbomify.com/MAL-2025-174929/): Malicious code in inul-poke15 (npm) (malicious package)
- [MAL-2025-174928](https://insights.sbomify.com/MAL-2025-174928/): Malicious code in inul-poke14 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1099/