# Vulnerabilities published in 2025


- [MAL-2025-173397](https://insights.sbomify.com/MAL-2025-173397/): Malicious code in buta-fbobna-gadafaif (npm) (malicious package)
- [MAL-2025-173396](https://insights.sbomify.com/MAL-2025-173396/): Malicious code in buta-fbobna-gadaaif (npm) (malicious package)
- [MAL-2025-173395](https://insights.sbomify.com/MAL-2025-173395/): Malicious code in buta-fbna-ngoafa (npm) (malicious package)
- [MAL-2025-173394](https://insights.sbomify.com/MAL-2025-173394/): Malicious code in buta-fbna-naigoafa (npm) (malicious package)
- [MAL-2025-173393](https://insights.sbomify.com/MAL-2025-173393/): Malicious code in buta-fbna-nafigoafa (npm) (malicious package)
- [MAL-2025-173392](https://insights.sbomify.com/MAL-2025-173392/): Malicious code in buta-fbna-nafigfoafa (npm) (malicious package)
- [MAL-2025-173391](https://insights.sbomify.com/MAL-2025-173391/): Malicious code in buta-fbna-nafifggfoafa (npm) (malicious package)
- [MAL-2025-173390](https://insights.sbomify.com/MAL-2025-173390/): Malicious code in buta-fbna-nafifgfoafa (npm) (malicious package)
- [MAL-2025-17339](https://insights.sbomify.com/MAL-2025-17339/): Malicious code in com.microsoft.mixedreality.toolkit.standardassets (npm) (malicious package)
- [MAL-2025-173389](https://insights.sbomify.com/MAL-2025-173389/): Malicious code in buta-fbna-nafifaggfoafa (npm) (malicious package)
- [MAL-2025-173388](https://insights.sbomify.com/MAL-2025-173388/): Malicious code in buta-fbna-goafa (npm) (malicious package)
- [MAL-2025-173387](https://insights.sbomify.com/MAL-2025-173387/): Malicious code in buta-fbna-gafida (npm) (malicious package)
- [MAL-2025-173386](https://insights.sbomify.com/MAL-2025-173386/): Malicious code in buta-fbna-gafia (npm) (malicious package)
- [MAL-2025-173385](https://insights.sbomify.com/MAL-2025-173385/): Malicious code in buta-fbna-gafa (npm) (malicious package)
- [MAL-2025-173384](https://insights.sbomify.com/MAL-2025-173384/): Malicious code in buta-fbna-gadfida (npm) (malicious package)
- [MAL-2025-173383](https://insights.sbomify.com/MAL-2025-173383/): Malicious code in buta-fbina-infa (npm) (malicious package)
- [MAL-2025-173382](https://insights.sbomify.com/MAL-2025-173382/): Malicious code in buta-fbbna-giodaiaif (npm) (malicious package)
- [MAL-2025-173381](https://insights.sbomify.com/MAL-2025-173381/): Malicious code in buta-fasg-fnda (npm) (malicious package)
- [MAL-2025-173380](https://insights.sbomify.com/MAL-2025-173380/): Malicious code in buta-fasg-fgvguaganda (npm) (malicious package)
- [MAL-2025-17338](https://insights.sbomify.com/MAL-2025-17338/): Malicious code in com.microsoft.mixedreality.toolkit.planefinding (npm) (malicious package)
- [MAL-2025-173379](https://insights.sbomify.com/MAL-2025-173379/): Malicious code in buta-fasg-fgvgganda (npm) (malicious package)
- [MAL-2025-173378](https://insights.sbomify.com/MAL-2025-173378/): Malicious code in buta-fasg-fgvganda (npm) (malicious package)
- [MAL-2025-173377](https://insights.sbomify.com/MAL-2025-173377/): Malicious code in buta-fasg-fgvgaganda (npm) (malicious package)
- [MAL-2025-173376](https://insights.sbomify.com/MAL-2025-173376/): Malicious code in buta-fasg-fgvanda (npm) (malicious package)
- [MAL-2025-173375](https://insights.sbomify.com/MAL-2025-173375/): Malicious code in buta-fasg-fganda (npm) (malicious package)
- [MAL-2025-173374](https://insights.sbomify.com/MAL-2025-173374/): Malicious code in buta-fasg-fanda (npm) (malicious package)
- [MAL-2025-173373](https://insights.sbomify.com/MAL-2025-173373/): Malicious code in buta-fasg-fagvguaganda (npm) (malicious package)
- [MAL-2025-173372](https://insights.sbomify.com/MAL-2025-173372/): Malicious code in buta-fasag-fnfdfa (npm) (malicious package)
- [MAL-2025-173371](https://insights.sbomify.com/MAL-2025-173371/): Malicious code in buta-fasag-fnfdaosgsfa (npm) (malicious package)
- [MAL-2025-173370](https://insights.sbomify.com/MAL-2025-173370/): Malicious code in buta-fasag-fnfdaogsfa (npm) (malicious package)
- [MAL-2025-17337](https://insights.sbomify.com/MAL-2025-17337/): Malicious code in com.microsoft.mixedreality.toolkit.micstream (npm) (malicious package)
- [MAL-2025-173369](https://insights.sbomify.com/MAL-2025-173369/): Malicious code in buta-fasag-fnfdaogfa (npm) (malicious package)
- [MAL-2025-173368](https://insights.sbomify.com/MAL-2025-173368/): Malicious code in buta-fasag-fnfdagfa (npm) (malicious package)
- [MAL-2025-173367](https://insights.sbomify.com/MAL-2025-173367/): Malicious code in buta-fasag-fnfda (npm) (malicious package)
- [MAL-2025-173366](https://insights.sbomify.com/MAL-2025-173366/): Malicious code in buta-fasag-fnda (npm) (malicious package)
- [MAL-2025-173365](https://insights.sbomify.com/MAL-2025-173365/): Malicious code in buta-fana-safa (npm) (malicious package)
- [MAL-2025-173364](https://insights.sbomify.com/MAL-2025-173364/): Malicious code in buta-fana-sadofgaa (npm) (malicious package)
- [MAL-2025-173363](https://insights.sbomify.com/MAL-2025-173363/): Malicious code in buta-fana-sadofagana (npm) (malicious package)
- [MAL-2025-173362](https://insights.sbomify.com/MAL-2025-173362/): Malicious code in buta-fana-sadofagaina (npm) (malicious package)
- [MAL-2025-173361](https://insights.sbomify.com/MAL-2025-173361/): Malicious code in buta-fana-sadofagaiana (npm) (malicious package)
- [MAL-2025-173360](https://insights.sbomify.com/MAL-2025-173360/): Malicious code in buta-fana-sadofagaa (npm) (malicious package)
- [MAL-2025-17336](https://insights.sbomify.com/MAL-2025-17336/): Malicious code in com.microsoft.mixedreality.toolkit.gpustats (npm) (malicious package)
- [MAL-2025-173359](https://insights.sbomify.com/MAL-2025-173359/): Malicious code in buta-fana-sadofaa (npm) (malicious package)
- [MAL-2025-173358](https://insights.sbomify.com/MAL-2025-173358/): Malicious code in buta-fana-sadofa (npm) (malicious package)
- [MAL-2025-173357](https://insights.sbomify.com/MAL-2025-173357/): Malicious code in buta-fana-sadfa (npm) (malicious package)
- [MAL-2025-173356](https://insights.sbomify.com/MAL-2025-173356/): Malicious code in buta-faina-saofagaiana (npm) (malicious package)
- [MAL-2025-173355](https://insights.sbomify.com/MAL-2025-173355/): Malicious code in buta-faina-sadofagaiana (npm) (malicious package)
- [MAL-2025-173354](https://insights.sbomify.com/MAL-2025-173354/): Malicious code in buta-faina-igaigna (npm) (malicious package)
- [MAL-2025-173353](https://insights.sbomify.com/MAL-2025-173353/): Malicious code in buta-faina-igaighfanaa (npm) (malicious package)
- [MAL-2025-173352](https://insights.sbomify.com/MAL-2025-173352/): Malicious code in buta-faina-igaighfana (npm) (malicious package)
- [MAL-2025-173351](https://insights.sbomify.com/MAL-2025-173351/): Malicious code in buta-faina-igaighana (npm) (malicious package)
- [MAL-2025-173350](https://insights.sbomify.com/MAL-2025-173350/): Malicious code in buta-faina-igaigana (npm) (malicious package)
- [MAL-2025-17335](https://insights.sbomify.com/MAL-2025-17335/): Malicious code in com.microsoft.mixedreality.toolkit.figmabridge (npm) (malicious package)
- [MAL-2025-173349](https://insights.sbomify.com/MAL-2025-173349/): Malicious code in buta-faina-aofagaiana (npm) (malicious package)
- [MAL-2025-173348](https://insights.sbomify.com/MAL-2025-173348/): Malicious code in buta-faina-aoagaiana (npm) (malicious package)
- [MAL-2025-173347](https://insights.sbomify.com/MAL-2025-173347/): Malicious code in buta-faina-aigna (npm) (malicious package)
- [MAL-2025-173346](https://insights.sbomify.com/MAL-2025-173346/): Malicious code in buta-faina-aigana (npm) (malicious package)
- [MAL-2025-173345](https://insights.sbomify.com/MAL-2025-173345/): Malicious code in buta-faina-aigagna (npm) (malicious package)
- [MAL-2025-173344](https://insights.sbomify.com/MAL-2025-173344/): Malicious code in buta-faina-agna (npm) (malicious package)
- [MAL-2025-173343](https://insights.sbomify.com/MAL-2025-173343/): Malicious code in buta-faina-agana (npm) (malicious package)
- [MAL-2025-173342](https://insights.sbomify.com/MAL-2025-173342/): Malicious code in buta-faina-agaana (npm) (malicious package)
- [MAL-2025-173341](https://insights.sbomify.com/MAL-2025-173341/): Malicious code in buta-faina-aagaiana (npm) (malicious package)
- [MAL-2025-173340](https://insights.sbomify.com/MAL-2025-173340/): Malicious code in buta-fadsg-vunda (npm) (malicious package)
- [MAL-2025-17334](https://insights.sbomify.com/MAL-2025-17334/): Malicious code in com.microsoft.mixedreality.toolkit.extensions (npm) (malicious package)
- [MAL-2025-173339](https://insights.sbomify.com/MAL-2025-173339/): Malicious code in buta-fadsg-vun (npm) (malicious package)
- [MAL-2025-173338](https://insights.sbomify.com/MAL-2025-173338/): Malicious code in buta-fadsg-vsgun (npm) (malicious package)
- [MAL-2025-173337](https://insights.sbomify.com/MAL-2025-173337/): Malicious code in buta-fadsg-vsfgun (npm) (malicious package)
- [MAL-2025-173336](https://insights.sbomify.com/MAL-2025-173336/): Malicious code in buta-fadsg-vfsfgun (npm) (malicious package)
- [MAL-2025-173335](https://insights.sbomify.com/MAL-2025-173335/): Malicious code in buta-fadsg-vfsdfgun (npm) (malicious package)
- [MAL-2025-173334](https://insights.sbomify.com/MAL-2025-173334/): Malicious code in buta-fadsg-vafsdfgun (npm) (malicious package)
- [MAL-2025-173333](https://insights.sbomify.com/MAL-2025-173333/): Malicious code in buta-fadsg-fvunda (npm) (malicious package)
- [MAL-2025-173332](https://insights.sbomify.com/MAL-2025-173332/): Malicious code in buta-fadsg-favunda (npm) (malicious package)
- [MAL-2025-173331](https://insights.sbomify.com/MAL-2025-173331/): Malicious code in buta-fadsg-fagvunda (npm) (malicious package)
- [MAL-2025-173330](https://insights.sbomify.com/MAL-2025-173330/): Malicious code in buta-fadsg-fagvuanda (npm) (malicious package)
- [MAL-2025-17333](https://insights.sbomify.com/MAL-2025-17333/): Malicious code in com.microsoft.mixedreality.toolkit.examples (npm) (malicious package)
- [MAL-2025-173329](https://insights.sbomify.com/MAL-2025-173329/): Malicious code in buta-fadsg-fagvguanda (npm) (malicious package)
- [MAL-2025-173328](https://insights.sbomify.com/MAL-2025-173328/): Malicious code in buta-fadsg-fagvguaganda (npm) (malicious package)
- [MAL-2025-173327](https://insights.sbomify.com/MAL-2025-173327/): Malicious code in buta-fadsg-fagvguaanda (npm) (malicious package)
- [MAL-2025-173326](https://insights.sbomify.com/MAL-2025-173326/): Malicious code in buta-fadg-vun (npm) (malicious package)
- [MAL-2025-173325](https://insights.sbomify.com/MAL-2025-173325/): Malicious code in buta-fadg-vaun (npm) (malicious package)
- [MAL-2025-173324](https://insights.sbomify.com/MAL-2025-173324/): Malicious code in buta-fadg-vafun (npm) (malicious package)
- [MAL-2025-173323](https://insights.sbomify.com/MAL-2025-173323/): Malicious code in buta-fadg-vafsfgun (npm) (malicious package)
- [MAL-2025-173322](https://insights.sbomify.com/MAL-2025-173322/): Malicious code in buta-fadg-vafsdfgun (npm) (malicious package)
- [MAL-2025-173321](https://insights.sbomify.com/MAL-2025-173321/): Malicious code in buta-fadg-vafgun (npm) (malicious package)
- [MAL-2025-173320](https://insights.sbomify.com/MAL-2025-173320/): Malicious code in buta-fadg-vaffgun (npm) (malicious package)
- [MAL-2025-17332](https://insights.sbomify.com/MAL-2025-17332/): Malicious code in com.microsoft.mixedreality.sceneunderstanding (npm) (malicious package)
- [MAL-2025-173319](https://insights.sbomify.com/MAL-2025-173319/): Malicious code in buta-faag-sfa (npm) (malicious package)
- [MAL-2025-173318](https://insights.sbomify.com/MAL-2025-173318/): Malicious code in buta-faag-saigaiagfa (npm) (malicious package)
- [MAL-2025-173317](https://insights.sbomify.com/MAL-2025-173317/): Malicious code in buta-faag-saigaiaagfa (npm) (malicious package)
- [MAL-2025-173316](https://insights.sbomify.com/MAL-2025-173316/): Malicious code in buta-faag-saigagfa (npm) (malicious package)
- [MAL-2025-173315](https://insights.sbomify.com/MAL-2025-173315/): Malicious code in buta-faag-saigafa (npm) (malicious package)
- [MAL-2025-173314](https://insights.sbomify.com/MAL-2025-173314/): Malicious code in buta-faag-saigaagfa (npm) (malicious package)
- [MAL-2025-173313](https://insights.sbomify.com/MAL-2025-173313/): Malicious code in buta-faag-saifa (npm) (malicious package)
- [MAL-2025-173312](https://insights.sbomify.com/MAL-2025-173312/): Malicious code in buta-faag-saiafa (npm) (malicious package)
- [MAL-2025-173311](https://insights.sbomify.com/MAL-2025-173311/): Malicious code in buta-faag-safa (npm) (malicious package)
- [MAL-2025-173310](https://insights.sbomify.com/MAL-2025-173310/): Malicious code in buta-faag-fsfa (npm) (malicious package)
- [MAL-2025-17331](https://insights.sbomify.com/MAL-2025-17331/): Malicious code in com.microsoft.mixedreality.powerthermalnotification (npm) (malicious package)
- [MAL-2025-173309](https://insights.sbomify.com/MAL-2025-173309/): Malicious code in buta-faag-fnogsfa (npm) (malicious package)
- [MAL-2025-173308](https://insights.sbomify.com/MAL-2025-173308/): Malicious code in buta-faag-fngsfa (npm) (malicious package)
- [MAL-2025-173307](https://insights.sbomify.com/MAL-2025-173307/): Malicious code in buta-faag-fnfosgsfa (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1117/