# Vulnerabilities published in 2025


- [MAL-2025-173487](https://insights.sbomify.com/MAL-2025-173487/): Malicious code in buta-fs0boina-infa (npm) (malicious package)
- [MAL-2025-173486](https://insights.sbomify.com/MAL-2025-173486/): Malicious code in buta-fs0boina-ifa (npm) (malicious package)
- [MAL-2025-173485](https://insights.sbomify.com/MAL-2025-173485/): Malicious code in buta-fs0boina-giooifa (npm) (malicious package)
- [MAL-2025-173484](https://insights.sbomify.com/MAL-2025-173484/): Malicious code in buta-fs0boina-gioifa (npm) (malicious package)
- [MAL-2025-173483](https://insights.sbomify.com/MAL-2025-173483/): Malicious code in buta-fs0boina-gauafiooifa (npm) (malicious package)
- [MAL-2025-173482](https://insights.sbomify.com/MAL-2025-173482/): Malicious code in buta-fs0boina-gafiooifa (npm) (malicious package)
- [MAL-2025-173481](https://insights.sbomify.com/MAL-2025-173481/): Malicious code in buta-fna-nafiffa (npm) (malicious package)
- [MAL-2025-173480](https://insights.sbomify.com/MAL-2025-173480/): Malicious code in buta-fna-nafifaggfoafa (npm) (malicious package)
- [MAL-2025-17348](https://insights.sbomify.com/MAL-2025-17348/): Malicious code in com.mobilebridge.cordova (npm) (malicious package)
- [MAL-2025-173479](https://insights.sbomify.com/MAL-2025-173479/): Malicious code in buta-fna-nafifagfofa (npm) (malicious package)
- [MAL-2025-173478](https://insights.sbomify.com/MAL-2025-173478/): Malicious code in buta-fna-nafifagfoafa (npm) (malicious package)
- [MAL-2025-173477](https://insights.sbomify.com/MAL-2025-173477/): Malicious code in buta-fna-nafifagffa (npm) (malicious package)
- [MAL-2025-173476](https://insights.sbomify.com/MAL-2025-173476/): Malicious code in buta-fna-nafifafa (npm) (malicious package)
- [MAL-2025-173475](https://insights.sbomify.com/MAL-2025-173475/): Malicious code in buta-fna-nafifa (npm) (malicious package)
- [MAL-2025-173474](https://insights.sbomify.com/MAL-2025-173474/): Malicious code in buta-fna-naffa (npm) (malicious package)
- [MAL-2025-173473](https://insights.sbomify.com/MAL-2025-173473/): Malicious code in buta-fna-nafa (npm) (malicious package)
- [MAL-2025-173472](https://insights.sbomify.com/MAL-2025-173472/): Malicious code in buta-fna-naa (npm) (malicious package)
- [MAL-2025-173471](https://insights.sbomify.com/MAL-2025-173471/): Malicious code in buta-fna-ihfnaa (npm) (malicious package)
- [MAL-2025-173470](https://insights.sbomify.com/MAL-2025-173470/): Malicious code in buta-fna-ighfnaa (npm) (malicious package)
- [MAL-2025-17347](https://insights.sbomify.com/MAL-2025-17347/): Malicious code in com.microsoft.spatialaudio.spatializer.unity (npm) (malicious package)
- [MAL-2025-173469](https://insights.sbomify.com/MAL-2025-173469/): Malicious code in buta-fna-igaighfnaa (npm) (malicious package)
- [MAL-2025-173468](https://insights.sbomify.com/MAL-2025-173468/): Malicious code in buta-fna-igaghfnaa (npm) (malicious package)
- [MAL-2025-173467](https://insights.sbomify.com/MAL-2025-173467/): Malicious code in buta-fna-hfnaa (npm) (malicious package)
- [MAL-2025-173466](https://insights.sbomify.com/MAL-2025-173466/): Malicious code in buta-fna-fnaa (npm) (malicious package)
- [MAL-2025-173465](https://insights.sbomify.com/MAL-2025-173465/): Malicious code in buta-fiuoofoana-infa (npm) (malicious package)
- [MAL-2025-173464](https://insights.sbomify.com/MAL-2025-173464/): Malicious code in buta-fiuofoana-infa (npm) (malicious package)
- [MAL-2025-173463](https://insights.sbomify.com/MAL-2025-173463/): Malicious code in buta-fiuofoana-inafa (npm) (malicious package)
- [MAL-2025-173462](https://insights.sbomify.com/MAL-2025-173462/): Malicious code in buta-fiufoana-inafa (npm) (malicious package)
- [MAL-2025-173461](https://insights.sbomify.com/MAL-2025-173461/): Malicious code in buta-fiuaoofoana-infa (npm) (malicious package)
- [MAL-2025-173460](https://insights.sbomify.com/MAL-2025-173460/): Malicious code in buta-fiuaoofoana-inafa (npm) (malicious package)
- [MAL-2025-17346](https://insights.sbomify.com/MAL-2025-17346/): Malicious code in com.microsoft.mixedreality.worldlockingtools (npm) (malicious package)
- [MAL-2025-173459](https://insights.sbomify.com/MAL-2025-173459/): Malicious code in buta-fiuaofoana-inafa (npm) (malicious package)
- [MAL-2025-173458](https://insights.sbomify.com/MAL-2025-173458/): Malicious code in buta-fippoa-inaufa (npm) (malicious package)
- [MAL-2025-173457](https://insights.sbomify.com/MAL-2025-173457/): Malicious code in buta-fippoa-inaoufa (npm) (malicious package)
- [MAL-2025-173456](https://insights.sbomify.com/MAL-2025-173456/): Malicious code in buta-fippoa-inaofufua (npm) (malicious package)
- [MAL-2025-173455](https://insights.sbomify.com/MAL-2025-173455/): Malicious code in buta-fippoa-inaofufa (npm) (malicious package)
- [MAL-2025-173454](https://insights.sbomify.com/MAL-2025-173454/): Malicious code in buta-fippnoa-inaufa (npm) (malicious package)
- [MAL-2025-173453](https://insights.sbomify.com/MAL-2025-173453/): Malicious code in buta-fipofa-iuhfuh (npm) (malicious package)
- [MAL-2025-173452](https://insights.sbomify.com/MAL-2025-173452/): Malicious code in buta-fipofa-iuahfuh (npm) (malicious package)
- [MAL-2025-173451](https://insights.sbomify.com/MAL-2025-173451/): Malicious code in buta-fipofa-ihuh (npm) (malicious package)
- [MAL-2025-173450](https://insights.sbomify.com/MAL-2025-173450/): Malicious code in buta-fipofa-ihauh (npm) (malicious package)
- [MAL-2025-17345](https://insights.sbomify.com/MAL-2025-17345/): Malicious code in com.microsoft.mixedreality.worldlockingsamples (npm) (malicious package)
- [MAL-2025-173449](https://insights.sbomify.com/MAL-2025-173449/): Malicious code in buta-fipofa-ihauah (npm) (malicious package)
- [MAL-2025-173448](https://insights.sbomify.com/MAL-2025-173448/): Malicious code in buta-fipofa-ihasufah (npm) (malicious package)
- [MAL-2025-173447](https://insights.sbomify.com/MAL-2025-173447/): Malicious code in buta-fipofa-ihasuah (npm) (malicious package)
- [MAL-2025-173446](https://insights.sbomify.com/MAL-2025-173446/): Malicious code in buta-fipofa-ihadsufah (npm) (malicious package)
- [MAL-2025-173445](https://insights.sbomify.com/MAL-2025-173445/): Malicious code in buta-fipoa-iuua (npm) (malicious package)
- [MAL-2025-173444](https://insights.sbomify.com/MAL-2025-173444/): Malicious code in buta-fipoa-iufua (npm) (malicious package)
- [MAL-2025-173443](https://insights.sbomify.com/MAL-2025-173443/): Malicious code in buta-fipoa-inufua (npm) (malicious package)
- [MAL-2025-173442](https://insights.sbomify.com/MAL-2025-173442/): Malicious code in buta-fipoa-inoufua (npm) (malicious package)
- [MAL-2025-173441](https://insights.sbomify.com/MAL-2025-173441/): Malicious code in buta-fipoa-inaoufua (npm) (malicious package)
- [MAL-2025-173440](https://insights.sbomify.com/MAL-2025-173440/): Malicious code in buta-fipoa-inaofufua (npm) (malicious package)
- [MAL-2025-17344](https://insights.sbomify.com/MAL-2025-17344/): Malicious code in com.microsoft.mixedreality.wlt.asa.samples (npm) (malicious package)
- [MAL-2025-173439](https://insights.sbomify.com/MAL-2025-173439/): Malicious code in buta-fipoa-ihuah (npm) (malicious package)
- [MAL-2025-173438](https://insights.sbomify.com/MAL-2025-173438/): Malicious code in buta-fipoa-ihua (npm) (malicious package)
- [MAL-2025-173437](https://insights.sbomify.com/MAL-2025-173437/): Malicious code in buta-fipoa-ihsufah (npm) (malicious package)
- [MAL-2025-173436](https://insights.sbomify.com/MAL-2025-173436/): Malicious code in buta-fipoa-ihdsufah (npm) (malicious package)
- [MAL-2025-173435](https://insights.sbomify.com/MAL-2025-173435/): Malicious code in buta-fipoa-ihadsufah (npm) (malicious package)
- [MAL-2025-173434](https://insights.sbomify.com/MAL-2025-173434/): Malicious code in buta-fipna-inafa (npm) (malicious package)
- [MAL-2025-173433](https://insights.sbomify.com/MAL-2025-173433/): Malicious code in buta-fipanoa-inafa (npm) (malicious package)
- [MAL-2025-173432](https://insights.sbomify.com/MAL-2025-173432/): Malicious code in buta-fipana-inafa (npm) (malicious package)
- [MAL-2025-173431](https://insights.sbomify.com/MAL-2025-173431/): Malicious code in buta-fipajapnoa-inaufa (npm) (malicious package)
- [MAL-2025-173430](https://insights.sbomify.com/MAL-2025-173430/): Malicious code in buta-fipajapnoa-inafa (npm) (malicious package)
- [MAL-2025-17343](https://insights.sbomify.com/MAL-2025-17343/): Malicious code in com.microsoft.mixedreality.wlt.asa (npm) (malicious package)
- [MAL-2025-173429](https://insights.sbomify.com/MAL-2025-173429/): Malicious code in buta-fipajapanoa-inaufa (npm) (malicious package)
- [MAL-2025-173428](https://insights.sbomify.com/MAL-2025-173428/): Malicious code in buta-fipajapanoa-inafa (npm) (malicious package)
- [MAL-2025-173427](https://insights.sbomify.com/MAL-2025-173427/): Malicious code in buta-fipajanoa-inafa (npm) (malicious package)
- [MAL-2025-173426](https://insights.sbomify.com/MAL-2025-173426/): Malicious code in buta-fipaapnoa-inaufa (npm) (malicious package)
- [MAL-2025-173425](https://insights.sbomify.com/MAL-2025-173425/): Malicious code in buta-fipaanoa-inafa (npm) (malicious package)
- [MAL-2025-173424](https://insights.sbomify.com/MAL-2025-173424/): Malicious code in buta-fiona-infa (npm) (malicious package)
- [MAL-2025-173423](https://insights.sbomify.com/MAL-2025-173423/): Malicious code in buta-fiofoana-infa (npm) (malicious package)
- [MAL-2025-173422](https://insights.sbomify.com/MAL-2025-173422/): Malicious code in buta-fioana-infa (npm) (malicious package)
- [MAL-2025-173421](https://insights.sbomify.com/MAL-2025-173421/): Malicious code in buta-fioana-inafa (npm) (malicious package)
- [MAL-2025-173420](https://insights.sbomify.com/MAL-2025-173420/): Malicious code in buta-fina-inafa (npm) (malicious package)
- [MAL-2025-17342](https://insights.sbomify.com/MAL-2025-17342/): Malicious code in com.microsoft.mixedreality.webrtc.samples (npm) (malicious package)
- [MAL-2025-173419](https://insights.sbomify.com/MAL-2025-173419/): Malicious code in buta-fifoana-inafa (npm) (malicious package)
- [MAL-2025-173418](https://insights.sbomify.com/MAL-2025-173418/): Malicious code in buta-fiana-inafa (npm) (malicious package)
- [MAL-2025-173417](https://insights.sbomify.com/MAL-2025-173417/): Malicious code in buta-fbona-gdoda (npm) (malicious package)
- [MAL-2025-173416](https://insights.sbomify.com/MAL-2025-173416/): Malicious code in buta-fbona-gdda (npm) (malicious package)
- [MAL-2025-173415](https://insights.sbomify.com/MAL-2025-173415/): Malicious code in buta-fbona-gadodff (npm) (malicious package)
- [MAL-2025-173414](https://insights.sbomify.com/MAL-2025-173414/): Malicious code in buta-fbona-gadodf (npm) (malicious package)
- [MAL-2025-173413](https://insights.sbomify.com/MAL-2025-173413/): Malicious code in buta-fbona-gadodafaf (npm) (malicious package)
- [MAL-2025-173412](https://insights.sbomify.com/MAL-2025-173412/): Malicious code in buta-fbona-gadodaafaif (npm) (malicious package)
- [MAL-2025-173411](https://insights.sbomify.com/MAL-2025-173411/): Malicious code in buta-fbona-gadoda (npm) (malicious package)
- [MAL-2025-173410](https://insights.sbomify.com/MAL-2025-173410/): Malicious code in buta-fbona-gadfda (npm) (malicious package)
- [MAL-2025-17341](https://insights.sbomify.com/MAL-2025-17341/): Malicious code in com.microsoft.mixedreality.webrtc (npm) (malicious package)
- [MAL-2025-173409](https://insights.sbomify.com/MAL-2025-173409/): Malicious code in buta-fbona-gadda (npm) (malicious package)
- [MAL-2025-173408](https://insights.sbomify.com/MAL-2025-173408/): Malicious code in buta-fbobuna-giodaiaif (npm) (malicious package)
- [MAL-2025-173407](https://insights.sbomify.com/MAL-2025-173407/): Malicious code in buta-fbobna-giodaif (npm) (malicious package)
- [MAL-2025-173406](https://insights.sbomify.com/MAL-2025-173406/): Malicious code in buta-fbobna-giodaiaif (npm) (malicious package)
- [MAL-2025-173405](https://insights.sbomify.com/MAL-2025-173405/): Malicious code in buta-fbobna-giodaaif (npm) (malicious package)
- [MAL-2025-173404](https://insights.sbomify.com/MAL-2025-173404/): Malicious code in buta-fbobna-gidaif (npm) (malicious package)
- [MAL-2025-173403](https://insights.sbomify.com/MAL-2025-173403/): Malicious code in buta-fbobna-gdif (npm) (malicious package)
- [MAL-2025-173402](https://insights.sbomify.com/MAL-2025-173402/): Malicious code in buta-fbobna-gdaif (npm) (malicious package)
- [MAL-2025-173401](https://insights.sbomify.com/MAL-2025-173401/): Malicious code in buta-fbobna-gadodafaif (npm) (malicious package)
- [MAL-2025-173400](https://insights.sbomify.com/MAL-2025-173400/): Malicious code in buta-fbobna-gadodaafaif (npm) (malicious package)
- [MAL-2025-17340](https://insights.sbomify.com/MAL-2025-17340/): Malicious code in com.microsoft.mixedreality.toolkit.testutilities (npm) (malicious package)
- [MAL-2025-1734](https://insights.sbomify.com/MAL-2025-1734/): Malicious code in apple-parser (npm) (malicious package)
- [MAL-2025-173399](https://insights.sbomify.com/MAL-2025-173399/): Malicious code in buta-fbobna-gadif (npm) (malicious package)
- [MAL-2025-173398](https://insights.sbomify.com/MAL-2025-173398/): Malicious code in buta-fbobna-gaddafaif (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1116/