# Vulnerabilities published in 2025


- [MAL-2025-174657](https://insights.sbomify.com/MAL-2025-174657/): Malicious code in hitachi-poke20 (npm) (malicious package)
- [MAL-2025-174656](https://insights.sbomify.com/MAL-2025-174656/): Malicious code in hitachi-poke2 (npm) (malicious package)
- [MAL-2025-174655](https://insights.sbomify.com/MAL-2025-174655/): Malicious code in hitachi-poke19 (npm) (malicious package)
- [MAL-2025-174654](https://insights.sbomify.com/MAL-2025-174654/): Malicious code in hitachi-poke18 (npm) (malicious package)
- [MAL-2025-174653](https://insights.sbomify.com/MAL-2025-174653/): Malicious code in hitachi-poke17 (npm) (malicious package)
- [MAL-2025-174652](https://insights.sbomify.com/MAL-2025-174652/): Malicious code in hitachi-poke16 (npm) (malicious package)
- [MAL-2025-174651](https://insights.sbomify.com/MAL-2025-174651/): Malicious code in hitachi-poke15 (npm) (malicious package)
- [MAL-2025-174650](https://insights.sbomify.com/MAL-2025-174650/): Malicious code in hitachi-poke14 (npm) (malicious package)
- [MAL-2025-17465](https://insights.sbomify.com/MAL-2025-17465/): Malicious code in concurrently-centauri-planetology-archaeometry (npm) (malicious package)
- [MAL-2025-174649](https://insights.sbomify.com/MAL-2025-174649/): Malicious code in hitachi-poke130 (npm) (malicious package)
- [MAL-2025-174648](https://insights.sbomify.com/MAL-2025-174648/): Malicious code in hitachi-poke13 (npm) (malicious package)
- [MAL-2025-174647](https://insights.sbomify.com/MAL-2025-174647/): Malicious code in hitachi-poke129 (npm) (malicious package)
- [MAL-2025-174646](https://insights.sbomify.com/MAL-2025-174646/): Malicious code in hitachi-poke128 (npm) (malicious package)
- [MAL-2025-174645](https://insights.sbomify.com/MAL-2025-174645/): Malicious code in hitachi-poke127 (npm) (malicious package)
- [MAL-2025-174644](https://insights.sbomify.com/MAL-2025-174644/): Malicious code in hitachi-poke126 (npm) (malicious package)
- [MAL-2025-174643](https://insights.sbomify.com/MAL-2025-174643/): Malicious code in hitachi-poke125 (npm) (malicious package)
- [MAL-2025-174642](https://insights.sbomify.com/MAL-2025-174642/): Malicious code in hitachi-poke124 (npm) (malicious package)
- [MAL-2025-174641](https://insights.sbomify.com/MAL-2025-174641/): Malicious code in hitachi-poke123 (npm) (malicious package)
- [MAL-2025-174640](https://insights.sbomify.com/MAL-2025-174640/): Malicious code in hitachi-poke122 (npm) (malicious package)
- [MAL-2025-17464](https://insights.sbomify.com/MAL-2025-17464/): Malicious code in conagua (npm) (malicious package)
- [MAL-2025-174639](https://insights.sbomify.com/MAL-2025-174639/): Malicious code in hitachi-poke121 (npm) (malicious package)
- [MAL-2025-174638](https://insights.sbomify.com/MAL-2025-174638/): Malicious code in hitachi-poke120 (npm) (malicious package)
- [MAL-2025-174637](https://insights.sbomify.com/MAL-2025-174637/): Malicious code in hitachi-poke12 (npm) (malicious package)
- [MAL-2025-174636](https://insights.sbomify.com/MAL-2025-174636/): Malicious code in hitachi-poke119 (npm) (malicious package)
- [MAL-2025-174635](https://insights.sbomify.com/MAL-2025-174635/): Malicious code in hitachi-poke118 (npm) (malicious package)
- [MAL-2025-174634](https://insights.sbomify.com/MAL-2025-174634/): Malicious code in hitachi-poke117 (npm) (malicious package)
- [MAL-2025-174633](https://insights.sbomify.com/MAL-2025-174633/): Malicious code in hitachi-poke116 (npm) (malicious package)
- [MAL-2025-174632](https://insights.sbomify.com/MAL-2025-174632/): Malicious code in hitachi-poke115 (npm) (malicious package)
- [MAL-2025-174631](https://insights.sbomify.com/MAL-2025-174631/): Malicious code in hitachi-poke114 (npm) (malicious package)
- [MAL-2025-174630](https://insights.sbomify.com/MAL-2025-174630/): Malicious code in hitachi-poke113 (npm) (malicious package)
- [MAL-2025-17463](https://insights.sbomify.com/MAL-2025-17463/): Malicious code in comradefy (npm) (malicious package)
- [MAL-2025-174629](https://insights.sbomify.com/MAL-2025-174629/): Malicious code in hitachi-poke112 (npm) (malicious package)
- [MAL-2025-174628](https://insights.sbomify.com/MAL-2025-174628/): Malicious code in hitachi-poke111 (npm) (malicious package)
- [MAL-2025-174627](https://insights.sbomify.com/MAL-2025-174627/): Malicious code in hitachi-poke110 (npm) (malicious package)
- [MAL-2025-174626](https://insights.sbomify.com/MAL-2025-174626/): Malicious code in hitachi-poke11 (npm) (malicious package)
- [MAL-2025-174625](https://insights.sbomify.com/MAL-2025-174625/): Malicious code in hitachi-poke109 (npm) (malicious package)
- [MAL-2025-174624](https://insights.sbomify.com/MAL-2025-174624/): Malicious code in hitachi-poke108 (npm) (malicious package)
- [MAL-2025-174623](https://insights.sbomify.com/MAL-2025-174623/): Malicious code in hitachi-poke107 (npm) (malicious package)
- [MAL-2025-174622](https://insights.sbomify.com/MAL-2025-174622/): Malicious code in hitachi-poke106 (npm) (malicious package)
- [MAL-2025-174621](https://insights.sbomify.com/MAL-2025-174621/): Malicious code in hitachi-poke105 (npm) (malicious package)
- [MAL-2025-174620](https://insights.sbomify.com/MAL-2025-174620/): Malicious code in hitachi-poke104 (npm) (malicious package)
- [MAL-2025-17462](https://insights.sbomify.com/MAL-2025-17462/): Malicious code in compton (npm) (malicious package)
- [MAL-2025-174619](https://insights.sbomify.com/MAL-2025-174619/): Malicious code in hitachi-poke103 (npm) (malicious package)
- [MAL-2025-174618](https://insights.sbomify.com/MAL-2025-174618/): Malicious code in hitachi-poke102 (npm) (malicious package)
- [MAL-2025-174617](https://insights.sbomify.com/MAL-2025-174617/): Malicious code in hitachi-poke101 (npm) (malicious package)
- [MAL-2025-174616](https://insights.sbomify.com/MAL-2025-174616/): Malicious code in hitachi-poke100 (npm) (malicious package)
- [MAL-2025-174615](https://insights.sbomify.com/MAL-2025-174615/): Malicious code in hitachi-poke10 (npm) (malicious package)
- [MAL-2025-174614](https://insights.sbomify.com/MAL-2025-174614/): Malicious code in hitachi-poke1 (npm) (malicious package)
- [MAL-2025-174613](https://insights.sbomify.com/MAL-2025-174613/): Malicious code in haruni-poke126 (npm) (malicious package)
- [MAL-2025-174612](https://insights.sbomify.com/MAL-2025-174612/): Malicious code in haruni-poke125 (npm) (malicious package)
- [MAL-2025-174611](https://insights.sbomify.com/MAL-2025-174611/): Malicious code in haruni-poke124 (npm) (malicious package)
- [MAL-2025-174610](https://insights.sbomify.com/MAL-2025-174610/): Malicious code in haruni-poke123 (npm) (malicious package)
- [MAL-2025-17461](https://insights.sbomify.com/MAL-2025-17461/): Malicious code in compress-route-query-route-permission (npm) (malicious package)
- [MAL-2025-174609](https://insights.sbomify.com/MAL-2025-174609/): Malicious code in haruni-poke122 (npm) (malicious package)
- [MAL-2025-174608](https://insights.sbomify.com/MAL-2025-174608/): Malicious code in haruni-poke121 (npm) (malicious package)
- [MAL-2025-174607](https://insights.sbomify.com/MAL-2025-174607/): Malicious code in haruni-poke120 (npm) (malicious package)
- [MAL-2025-174606](https://insights.sbomify.com/MAL-2025-174606/): Malicious code in haruni-poke119 (npm) (malicious package)
- [MAL-2025-174605](https://insights.sbomify.com/MAL-2025-174605/): Malicious code in haruni-poke118 (npm) (malicious package)
- [MAL-2025-174604](https://insights.sbomify.com/MAL-2025-174604/): Malicious code in haruni-poke117 (npm) (malicious package)
- [MAL-2025-174603](https://insights.sbomify.com/MAL-2025-174603/): Malicious code in haruni-poke116 (npm) (malicious package)
- [MAL-2025-174602](https://insights.sbomify.com/MAL-2025-174602/): Malicious code in haruni-poke115 (npm) (malicious package)
- [MAL-2025-174601](https://insights.sbomify.com/MAL-2025-174601/): Malicious code in haruni-poke114 (npm) (malicious package)
- [MAL-2025-174600](https://insights.sbomify.com/MAL-2025-174600/): Malicious code in haruni-poke113 (npm) (malicious package)
- [MAL-2025-17460](https://insights.sbomify.com/MAL-2025-17460/): Malicious code in compress-process-sandbox-float-validate (npm) (malicious package)
- [MAL-2025-1746](https://insights.sbomify.com/MAL-2025-1746/): Malicious code in business-kpi-manager-1.0.0 (npm) (malicious package)
- [MAL-2025-174599](https://insights.sbomify.com/MAL-2025-174599/): Malicious code in haruni-poke112 (npm) (malicious package)
- [MAL-2025-174598](https://insights.sbomify.com/MAL-2025-174598/): Malicious code in haruni-poke111 (npm) (malicious package)
- [MAL-2025-174597](https://insights.sbomify.com/MAL-2025-174597/): Malicious code in haruni-poke109 (npm) (malicious package)
- [MAL-2025-174596](https://insights.sbomify.com/MAL-2025-174596/): Malicious code in haruni-poke108 (npm) (malicious package)
- [MAL-2025-174595](https://insights.sbomify.com/MAL-2025-174595/): Malicious code in haruni-poke107 (npm) (malicious package)
- [MAL-2025-174594](https://insights.sbomify.com/MAL-2025-174594/): Malicious code in haruni-poke106 (npm) (malicious package)
- [MAL-2025-174593](https://insights.sbomify.com/MAL-2025-174593/): Malicious code in haruni-poke105 (npm) (malicious package)
- [MAL-2025-174592](https://insights.sbomify.com/MAL-2025-174592/): Malicious code in haruni-poke104 (npm) (malicious package)
- [MAL-2025-174591](https://insights.sbomify.com/MAL-2025-174591/): Malicious code in haruni-poke103 (npm) (malicious package)
- [MAL-2025-174590](https://insights.sbomify.com/MAL-2025-174590/): Malicious code in haruni-poke102 (npm) (malicious package)
- [MAL-2025-17459](https://insights.sbomify.com/MAL-2025-17459/): Malicious code in compress-img-and-upload-to-s3-securely-pretty-please-with-sugar-on-top (npm) (malicious package)
- [MAL-2025-174589](https://insights.sbomify.com/MAL-2025-174589/): Malicious code in haritono-poke9 (npm) (malicious package)
- [MAL-2025-174588](https://insights.sbomify.com/MAL-2025-174588/): Malicious code in haritono-poke8 (npm) (malicious package)
- [MAL-2025-174587](https://insights.sbomify.com/MAL-2025-174587/): Malicious code in haritono-poke7 (npm) (malicious package)
- [MAL-2025-174586](https://insights.sbomify.com/MAL-2025-174586/): Malicious code in haritono-poke6 (npm) (malicious package)
- [MAL-2025-174585](https://insights.sbomify.com/MAL-2025-174585/): Malicious code in haritono-poke5 (npm) (malicious package)
- [MAL-2025-174584](https://insights.sbomify.com/MAL-2025-174584/): Malicious code in haritono-poke45 (npm) (malicious package)
- [MAL-2025-174583](https://insights.sbomify.com/MAL-2025-174583/): Malicious code in haritono-poke44 (npm) (malicious package)
- [MAL-2025-174582](https://insights.sbomify.com/MAL-2025-174582/): Malicious code in haritono-poke43 (npm) (malicious package)
- [MAL-2025-174581](https://insights.sbomify.com/MAL-2025-174581/): Malicious code in haritono-poke42 (npm) (malicious package)
- [MAL-2025-174580](https://insights.sbomify.com/MAL-2025-174580/): Malicious code in haritono-poke41 (npm) (malicious package)
- [MAL-2025-17458](https://insights.sbomify.com/MAL-2025-17458/): Malicious code in compress-decrypt-load-kernel-delta (npm) (malicious package)
- [MAL-2025-174579](https://insights.sbomify.com/MAL-2025-174579/): Malicious code in haritono-poke40 (npm) (malicious package)
- [MAL-2025-174578](https://insights.sbomify.com/MAL-2025-174578/): Malicious code in haritono-poke4 (npm) (malicious package)
- [MAL-2025-174577](https://insights.sbomify.com/MAL-2025-174577/): Malicious code in haritono-poke39 (npm) (malicious package)
- [MAL-2025-174576](https://insights.sbomify.com/MAL-2025-174576/): Malicious code in haritono-poke38 (npm) (malicious package)
- [MAL-2025-174575](https://insights.sbomify.com/MAL-2025-174575/): Malicious code in haritono-poke37 (npm) (malicious package)
- [MAL-2025-174574](https://insights.sbomify.com/MAL-2025-174574/): Malicious code in haritono-poke36 (npm) (malicious package)
- [MAL-2025-174573](https://insights.sbomify.com/MAL-2025-174573/): Malicious code in haritono-poke35 (npm) (malicious package)
- [MAL-2025-174572](https://insights.sbomify.com/MAL-2025-174572/): Malicious code in haritono-poke34 (npm) (malicious package)
- [MAL-2025-174571](https://insights.sbomify.com/MAL-2025-174571/): Malicious code in haritono-poke33 (npm) (malicious package)
- [MAL-2025-174570](https://insights.sbomify.com/MAL-2025-174570/): Malicious code in haritono-poke32 (npm) (malicious package)
- [MAL-2025-17457](https://insights.sbomify.com/MAL-2025-17457/): Malicious code in composer-connector-harmony-hlfv1 (npm) (malicious package)
- [MAL-2025-174569](https://insights.sbomify.com/MAL-2025-174569/): Malicious code in haritono-poke31 (npm) (malicious package)
- [MAL-2025-174568](https://insights.sbomify.com/MAL-2025-174568/): Malicious code in haritono-poke30 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1103/