# Vulnerabilities published in 2025


- [MAL-2025-173306](https://insights.sbomify.com/MAL-2025-173306/): Malicious code in buta-faag-fnfogsfa (npm) (malicious package)
- [MAL-2025-173305](https://insights.sbomify.com/MAL-2025-173305/): Malicious code in buta-faag-fnfdosgsfa (npm) (malicious package)
- [MAL-2025-173304](https://insights.sbomify.com/MAL-2025-173304/): Malicious code in buta-faag-fnfdaosgsfa (npm) (malicious package)
- [MAL-2025-173303](https://insights.sbomify.com/MAL-2025-173303/): Malicious code in buta-faag-fgsfa (npm) (malicious package)
- [MAL-2025-173302](https://insights.sbomify.com/MAL-2025-173302/): Malicious code in buta-faa-siagfa (npm) (malicious package)
- [MAL-2025-173301](https://insights.sbomify.com/MAL-2025-173301/): Malicious code in buta-faa-saiiagfa (npm) (malicious package)
- [MAL-2025-173300](https://insights.sbomify.com/MAL-2025-173300/): Malicious code in buta-faa-saiiaagfa (npm) (malicious package)
- [MAL-2025-17330](https://insights.sbomify.com/MAL-2025-17330/): Malicious code in com.microsoft.mixedreality.openxr (npm) (malicious package)
- [MAL-2025-1733](https://insights.sbomify.com/MAL-2025-1733/): Malicious code in apple-oauth (npm) (malicious package)
- [MAL-2025-173299](https://insights.sbomify.com/MAL-2025-173299/): Malicious code in buta-faa-saigaiaagfa (npm) (malicious package)
- [MAL-2025-173298](https://insights.sbomify.com/MAL-2025-173298/): Malicious code in buta-faa-saiaiaagfa (npm) (malicious package)
- [MAL-2025-173297](https://insights.sbomify.com/MAL-2025-173297/): Malicious code in buta-faa-saiagfa (npm) (malicious package)
- [MAL-2025-173296](https://insights.sbomify.com/MAL-2025-173296/): Malicious code in buta-faa-safa (npm) (malicious package)
- [MAL-2025-173295](https://insights.sbomify.com/MAL-2025-173295/): Malicious code in buta-f0boobuna-giodaiaif (npm) (malicious package)
- [MAL-2025-173294](https://insights.sbomify.com/MAL-2025-173294/): Malicious code in buta-f0bobuna-giodaiaif (npm) (malicious package)
- [MAL-2025-173293](https://insights.sbomify.com/MAL-2025-173293/): Malicious code in buis-suninna-mubnaaba (npm) (malicious package)
- [MAL-2025-173292](https://insights.sbomify.com/MAL-2025-173292/): Malicious code in buis-suninna-mubanavaba (npm) (malicious package)
- [MAL-2025-173291](https://insights.sbomify.com/MAL-2025-173291/): Malicious code in buis-suninna-mubanaaba (npm) (malicious package)
- [MAL-2025-173290](https://insights.sbomify.com/MAL-2025-173290/): Malicious code in buis-suninna-mna (npm) (malicious package)
- [MAL-2025-17329](https://insights.sbomify.com/MAL-2025-17329/): Malicious code in com.microsoft.mixedreality.movingplatform (npm) (malicious package)
- [MAL-2025-173289](https://insights.sbomify.com/MAL-2025-173289/): Malicious code in buis-suninna-mbnaaba (npm) (malicious package)
- [MAL-2025-173288](https://insights.sbomify.com/MAL-2025-173288/): Malicious code in buis-suninna-mbba (npm) (malicious package)
- [MAL-2025-173287](https://insights.sbomify.com/MAL-2025-173287/): Malicious code in buis-suninna-mbaba (npm) (malicious package)
- [MAL-2025-173286](https://insights.sbomify.com/MAL-2025-173286/): Malicious code in buis-suninna-mbaaba (npm) (malicious package)
- [MAL-2025-173285](https://insights.sbomify.com/MAL-2025-173285/): Malicious code in buis-suninna-manado (npm) (malicious package)
- [MAL-2025-173284](https://insights.sbomify.com/MAL-2025-173284/): Malicious code in buis-suninna-manadado (npm) (malicious package)
- [MAL-2025-173283](https://insights.sbomify.com/MAL-2025-173283/): Malicious code in buis-suninna-manad (npm) (malicious package)
- [MAL-2025-173282](https://insights.sbomify.com/MAL-2025-173282/): Malicious code in buis-suninna-mana (npm) (malicious package)
- [MAL-2025-173281](https://insights.sbomify.com/MAL-2025-173281/): Malicious code in buis-suninna-ma (npm) (malicious package)
- [MAL-2025-173280](https://insights.sbomify.com/MAL-2025-173280/): Malicious code in buis-suninana-mao (npm) (malicious package)
- [MAL-2025-17328](https://insights.sbomify.com/MAL-2025-17328/): Malicious code in com.microsoft.mixedreality.input (npm) (malicious package)
- [MAL-2025-173279](https://insights.sbomify.com/MAL-2025-173279/): Malicious code in buis-suninana-mando (npm) (malicious package)
- [MAL-2025-173278](https://insights.sbomify.com/MAL-2025-173278/): Malicious code in buis-suninana-manado (npm) (malicious package)
- [MAL-2025-173277](https://insights.sbomify.com/MAL-2025-173277/): Malicious code in buis-suninana-manadado (npm) (malicious package)
- [MAL-2025-173276](https://insights.sbomify.com/MAL-2025-173276/): Malicious code in buis-suninana-manaado (npm) (malicious package)
- [MAL-2025-173275](https://insights.sbomify.com/MAL-2025-173275/): Malicious code in buis-suninana-maduo (npm) (malicious package)
- [MAL-2025-173274](https://insights.sbomify.com/MAL-2025-173274/): Malicious code in buis-suninana-mado (npm) (malicious package)
- [MAL-2025-173273](https://insights.sbomify.com/MAL-2025-173273/): Malicious code in buis-suninana-madiuo (npm) (malicious package)
- [MAL-2025-173272](https://insights.sbomify.com/MAL-2025-173272/): Malicious code in buis-suninana-madibuo (npm) (malicious package)
- [MAL-2025-173271](https://insights.sbomify.com/MAL-2025-173271/): Malicious code in buis-suninana-madibumovfa (npm) (malicious package)
- [MAL-2025-173270](https://insights.sbomify.com/MAL-2025-173270/): Malicious code in buis-suninana-madibumofa (npm) (malicious package)
- [MAL-2025-17327](https://insights.sbomify.com/MAL-2025-17327/): Malicious code in com.microsoft.azure.spatial-anchors-sdk.windows (npm) (malicious package)
- [MAL-2025-173269](https://insights.sbomify.com/MAL-2025-173269/): Malicious code in buis-suninana-madibumof (npm) (malicious package)
- [MAL-2025-173268](https://insights.sbomify.com/MAL-2025-173268/): Malicious code in buis-suninana-madibumo (npm) (malicious package)
- [MAL-2025-173267](https://insights.sbomify.com/MAL-2025-173267/): Malicious code in buis-sunina-munaban (npm) (malicious package)
- [MAL-2025-173266](https://insights.sbomify.com/MAL-2025-173266/): Malicious code in buis-sunina-mubn (npm) (malicious package)
- [MAL-2025-173265](https://insights.sbomify.com/MAL-2025-173265/): Malicious code in buis-sunina-mubanavba (npm) (malicious package)
- [MAL-2025-173264](https://insights.sbomify.com/MAL-2025-173264/): Malicious code in buis-sunina-mubanavaba (npm) (malicious package)
- [MAL-2025-173263](https://insights.sbomify.com/MAL-2025-173263/): Malicious code in buis-sunina-mubanava (npm) (malicious package)
- [MAL-2025-173262](https://insights.sbomify.com/MAL-2025-173262/): Malicious code in buis-sunina-mubanav (npm) (malicious package)
- [MAL-2025-173261](https://insights.sbomify.com/MAL-2025-173261/): Malicious code in buis-sunina-mubana (npm) (malicious package)
- [MAL-2025-173260](https://insights.sbomify.com/MAL-2025-173260/): Malicious code in buis-sunina-muabn (npm) (malicious package)
- [MAL-2025-17326](https://insights.sbomify.com/MAL-2025-17326/): Malicious code in com.microsoft.azure.spatial-anchors-sdk.ios (npm) (malicious package)
- [MAL-2025-173259](https://insights.sbomify.com/MAL-2025-173259/): Malicious code in buis-sunia-nunif (npm) (malicious package)
- [MAL-2025-173258](https://insights.sbomify.com/MAL-2025-173258/): Malicious code in buis-sunia-nudnif (npm) (malicious package)
- [MAL-2025-173257](https://insights.sbomify.com/MAL-2025-173257/): Malicious code in buis-sunia-nudanif (npm) (malicious package)
- [MAL-2025-173256](https://insights.sbomify.com/MAL-2025-173256/): Malicious code in buis-sunia-nudanidsf (npm) (malicious package)
- [MAL-2025-173255](https://insights.sbomify.com/MAL-2025-173255/): Malicious code in buis-sunia-nnif (npm) (malicious package)
- [MAL-2025-173254](https://insights.sbomify.com/MAL-2025-173254/): Malicious code in buis-sunia-nnf (npm) (malicious package)
- [MAL-2025-173253](https://insights.sbomify.com/MAL-2025-173253/): Malicious code in buis-sunia-nf (npm) (malicious package)
- [MAL-2025-173252](https://insights.sbomify.com/MAL-2025-173252/): Malicious code in buis-sunia-nafna (npm) (malicious package)
- [MAL-2025-173251](https://insights.sbomify.com/MAL-2025-173251/): Malicious code in buis-sunia-nafanda (npm) (malicious package)
- [MAL-2025-173250](https://insights.sbomify.com/MAL-2025-173250/): Malicious code in buis-sunia-nafand (npm) (malicious package)
- [MAL-2025-17325](https://insights.sbomify.com/MAL-2025-17325/): Malicious code in com.microsoft.azure.spatial-anchors-sdk.core (npm) (malicious package)
- [MAL-2025-173249](https://insights.sbomify.com/MAL-2025-173249/): Malicious code in buis-sunia-nafanada (npm) (malicious package)
- [MAL-2025-173248](https://insights.sbomify.com/MAL-2025-173248/): Malicious code in buis-sunia-nafana (npm) (malicious package)
- [MAL-2025-173247](https://insights.sbomify.com/MAL-2025-173247/): Malicious code in buis-sunia-nafan (npm) (malicious package)
- [MAL-2025-173246](https://insights.sbomify.com/MAL-2025-173246/): Malicious code in buis-sunia-nafamna (npm) (malicious package)
- [MAL-2025-173245](https://insights.sbomify.com/MAL-2025-173245/): Malicious code in buis-sunia-nafamana (npm) (malicious package)
- [MAL-2025-173244](https://insights.sbomify.com/MAL-2025-173244/): Malicious code in buis-sunia-nafa (npm) (malicious package)
- [MAL-2025-173243](https://insights.sbomify.com/MAL-2025-173243/): Malicious code in buis-sunia-naf (npm) (malicious package)
- [MAL-2025-173242](https://insights.sbomify.com/MAL-2025-173242/): Malicious code in buis-sunia-munaba (npm) (malicious package)
- [MAL-2025-173241](https://insights.sbomify.com/MAL-2025-173241/): Malicious code in buis-sunia-muna (npm) (malicious package)
- [MAL-2025-173240](https://insights.sbomify.com/MAL-2025-173240/): Malicious code in buis-suinana-mamvfa (npm) (malicious package)
- [MAL-2025-17324](https://insights.sbomify.com/MAL-2025-17324/): Malicious code in com.microsoft.azure.spatial-anchors-sdk.android (npm) (malicious package)
- [MAL-2025-173239](https://insights.sbomify.com/MAL-2025-173239/): Malicious code in buis-suinana-mamva (npm) (malicious package)
- [MAL-2025-173238](https://insights.sbomify.com/MAL-2025-173238/): Malicious code in buis-suinana-mamovfa (npm) (malicious package)
- [MAL-2025-173237](https://insights.sbomify.com/MAL-2025-173237/): Malicious code in buis-suinana-mammva (npm) (malicious package)
- [MAL-2025-173236](https://insights.sbomify.com/MAL-2025-173236/): Malicious code in buis-suinana-mamavmva (npm) (malicious package)
- [MAL-2025-173235](https://insights.sbomify.com/MAL-2025-173235/): Malicious code in buis-suinana-madumovfa (npm) (malicious package)
- [MAL-2025-173234](https://insights.sbomify.com/MAL-2025-173234/): Malicious code in buis-suinana-madmovfa (npm) (malicious package)
- [MAL-2025-173233](https://insights.sbomify.com/MAL-2025-173233/): Malicious code in buis-suinana-madibumovfa (npm) (malicious package)
- [MAL-2025-173232](https://insights.sbomify.com/MAL-2025-173232/): Malicious code in buis-suinana-madibumovafa (npm) (malicious package)
- [MAL-2025-173231](https://insights.sbomify.com/MAL-2025-173231/): Malicious code in buis-suinana-madbumovfa (npm) (malicious package)
- [MAL-2025-173230](https://insights.sbomify.com/MAL-2025-173230/): Malicious code in buis-masi-nui (npm) (malicious package)
- [MAL-2025-17323](https://insights.sbomify.com/MAL-2025-17323/): Malicious code in com.microsoft.azure.remote-rendering (npm) (malicious package)
- [MAL-2025-173229](https://insights.sbomify.com/MAL-2025-173229/): Malicious code in buis-masi-nudanif (npm) (malicious package)
- [MAL-2025-173228](https://insights.sbomify.com/MAL-2025-173228/): Malicious code in buis-masi-nudaniaf (npm) (malicious package)
- [MAL-2025-173227](https://insights.sbomify.com/MAL-2025-173227/): Malicious code in buis-masi-nudaniadf (npm) (malicious package)
- [MAL-2025-173226](https://insights.sbomify.com/MAL-2025-173226/): Malicious code in buis-masi-nudai (npm) (malicious package)
- [MAL-2025-173225](https://insights.sbomify.com/MAL-2025-173225/): Malicious code in buis-masi-nuai (npm) (malicious package)
- [MAL-2025-173224](https://insights.sbomify.com/MAL-2025-173224/): Malicious code in buis-masi-mafsfmasdaf (npm) (malicious package)
- [MAL-2025-173223](https://insights.sbomify.com/MAL-2025-173223/): Malicious code in buis-masi-mafmasdaf (npm) (malicious package)
- [MAL-2025-173222](https://insights.sbomify.com/MAL-2025-173222/): Malicious code in buis-masi-mafmadaf (npm) (malicious package)
- [MAL-2025-173221](https://insights.sbomify.com/MAL-2025-173221/): Malicious code in buis-masi-mafmada (npm) (malicious package)
- [MAL-2025-173220](https://insights.sbomify.com/MAL-2025-173220/): Malicious code in buis-masi-mafida (npm) (malicious package)
- [MAL-2025-17322](https://insights.sbomify.com/MAL-2025-17322/): Malicious code in com.microsoft.azure.object-anchors.runtime (npm) (malicious package)
- [MAL-2025-173219](https://insights.sbomify.com/MAL-2025-173219/): Malicious code in buis-masi-mafia (npm) (malicious package)
- [MAL-2025-173218](https://insights.sbomify.com/MAL-2025-173218/): Malicious code in buis-masi-mafi (npm) (malicious package)
- [MAL-2025-173217](https://insights.sbomify.com/MAL-2025-173217/): Malicious code in buis-masi-maffmasdaf (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1118/