# Vulnerabilities published in 2025


- [MAL-2025-90035](https://insights.sbomify.com/MAL-2025-90035/): Malicious code in riana-soto65-kyuki (npm) (malicious package)
- [MAL-2025-90034](https://insights.sbomify.com/MAL-2025-90034/): Malicious code in riana-soto49-riris (npm) (malicious package)
- [MAL-2025-90033](https://insights.sbomify.com/MAL-2025-90033/): Malicious code in riana-soto45-riris (npm) (malicious package)
- [MAL-2025-90032](https://insights.sbomify.com/MAL-2025-90032/): Malicious code in riana-soto36-riris (npm) (malicious package)
- [MAL-2025-90031](https://insights.sbomify.com/MAL-2025-90031/): Malicious code in riana-serabi91-miaww (npm) (malicious package)
- [MAL-2025-90030](https://insights.sbomify.com/MAL-2025-90030/): Malicious code in riana-sate38-riris (npm) (malicious package)
- [MAL-2025-9003](https://insights.sbomify.com/MAL-2025-9003/): Malicious code in @malware-test-think-apnea-cornu-actin/test-mlw3-think-apnea-cornu-actin (npm) (malicious package)
- [MAL-2025-90029](https://insights.sbomify.com/MAL-2025-90029/): Malicious code in riana-sambel89-riris (npm) (malicious package)
- [MAL-2025-90028](https://insights.sbomify.com/MAL-2025-90028/): Malicious code in riana-sambel85-riris (npm) (malicious package)
- [MAL-2025-90027](https://insights.sbomify.com/MAL-2025-90027/): Malicious code in riana-sambel51-kyuki (npm) (malicious package)
- [MAL-2025-90026](https://insights.sbomify.com/MAL-2025-90026/): Malicious code in riana-sambalado73-miaww (npm) (malicious package)
- [MAL-2025-90025](https://insights.sbomify.com/MAL-2025-90025/): Malicious code in riana-saguer45-kyuki (npm) (malicious package)
- [MAL-2025-90024](https://insights.sbomify.com/MAL-2025-90024/): Malicious code in riana-ruwet22-miaww (npm) (malicious package)
- [MAL-2025-90023](https://insights.sbomify.com/MAL-2025-90023/): Malicious code in riana-rujaksoto13-miaww (npm) (malicious package)
- [MAL-2025-90022](https://insights.sbomify.com/MAL-2025-90022/): Malicious code in riana-rendang96-miaww (npm) (malicious package)
- [MAL-2025-90021](https://insights.sbomify.com/MAL-2025-90021/): Malicious code in riana-rangginang23-riris (npm) (malicious package)
- [MAL-2025-90020](https://insights.sbomify.com/MAL-2025-90020/): Malicious code in riana-ragi93-miaww (npm) (malicious package)
- [MAL-2025-9002](https://insights.sbomify.com/MAL-2025-9002/): Malicious code in @malware-test-thawy-myoid-feoff-wiped/test-mlw3-thawy-myoid-feoff-wiped (npm) (malicious package)
- [MAL-2025-90019](https://insights.sbomify.com/MAL-2025-90019/): Malicious code in riana-ragi9-miaww (npm) (malicious package)
- [MAL-2025-90018](https://insights.sbomify.com/MAL-2025-90018/): Malicious code in riana-ragi73-miaww (npm) (malicious package)
- [MAL-2025-90017](https://insights.sbomify.com/MAL-2025-90017/): Malicious code in riana-ongol-ongol5-miaww (npm) (malicious package)
- [MAL-2025-90016](https://insights.sbomify.com/MAL-2025-90016/): Malicious code in riana-oncom15-miaww (npm) (malicious package)
- [MAL-2025-90015](https://insights.sbomify.com/MAL-2025-90015/): Malicious code in riana-oblok9-kyuki (npm) (malicious package)
- [MAL-2025-90014](https://insights.sbomify.com/MAL-2025-90014/): Malicious code in riana-oblok17-sluey (npm) (malicious package)
- [MAL-2025-90013](https://insights.sbomify.com/MAL-2025-90013/): Malicious code in riana-nasiuduk53-miaww (npm) (malicious package)
- [MAL-2025-90012](https://insights.sbomify.com/MAL-2025-90012/): Malicious code in riana-nasipecel62-kyuki (npm) (malicious package)
- [MAL-2025-90011](https://insights.sbomify.com/MAL-2025-90011/): Malicious code in riana-nasipecel29-miaww (npm) (malicious package)
- [MAL-2025-90010](https://insights.sbomify.com/MAL-2025-90010/): Malicious code in riana-nasi41-riris (npm) (malicious package)
- [MAL-2025-9001](https://insights.sbomify.com/MAL-2025-9001/): Malicious code in @malware-test-thars-cubit-rucks-kells/test-mlw3-thars-cubit-rucks-kells (npm) (malicious package)
- [MAL-2025-90009](https://insights.sbomify.com/MAL-2025-90009/): Malicious code in riana-nasi36-riris (npm) (malicious package)
- [MAL-2025-90008](https://insights.sbomify.com/MAL-2025-90008/): Malicious code in riana-miemee87-miaww (npm) (malicious package)
- [MAL-2025-90007](https://insights.sbomify.com/MAL-2025-90007/): Malicious code in riana-miemee70-miaww (npm) (malicious package)
- [MAL-2025-90006](https://insights.sbomify.com/MAL-2025-90006/): Malicious code in riana-miemee35-riris (npm) (malicious package)
- [MAL-2025-90005](https://insights.sbomify.com/MAL-2025-90005/): Malicious code in riana-menjes24-crottsekebon (npm) (malicious package)
- [MAL-2025-90004](https://insights.sbomify.com/MAL-2025-90004/): Malicious code in riana-martabak51-riris (npm) (malicious package)
- [MAL-2025-90003](https://insights.sbomify.com/MAL-2025-90003/): Malicious code in riana-mangut55-apidev (npm) (malicious package)
- [MAL-2025-90002](https://insights.sbomify.com/MAL-2025-90002/): Malicious code in riana-lontong69-riris (npm) (malicious package)
- [MAL-2025-90001](https://insights.sbomify.com/MAL-2025-90001/): Malicious code in riana-liwet100-miaww (npm) (malicious package)
- [MAL-2025-90000](https://insights.sbomify.com/MAL-2025-90000/): Malicious code in riana-lapis61-riris (npm) (malicious package)
- [MAL-2025-9000](https://insights.sbomify.com/MAL-2025-9000/): Malicious code in @malware-test-terse-oomph-reman-mohrs/test-mlw3-terse-oomph-reman-mohrs (npm) (malicious package)
- [MAL-2025-90](https://insights.sbomify.com/MAL-2025-90/): Malicious code in gfxapi-ls (npm) (malicious package)
- [MAL-2025-9](https://insights.sbomify.com/MAL-2025-9/): Malicious code in create-shopify-web-app (npm) (malicious package)
- [MAL-2025-89999](https://insights.sbomify.com/MAL-2025-89999/): Malicious code in riana-lapis23-miaww (npm) (malicious package)
- [MAL-2025-89998](https://insights.sbomify.com/MAL-2025-89998/): Malicious code in riana-kupang71-miaww (npm) (malicious package)
- [MAL-2025-89997](https://insights.sbomify.com/MAL-2025-89997/): Malicious code in riana-kue69-riris (npm) (malicious package)
- [MAL-2025-89996](https://insights.sbomify.com/MAL-2025-89996/): Malicious code in riana-kue69-miaww (npm) (malicious package)
- [MAL-2025-89995](https://insights.sbomify.com/MAL-2025-89995/): Malicious code in riana-kue32-riris (npm) (malicious package)
- [MAL-2025-89994](https://insights.sbomify.com/MAL-2025-89994/): Malicious code in riana-kue23-riris (npm) (malicious package)
- [MAL-2025-89993](https://insights.sbomify.com/MAL-2025-89993/): Malicious code in riana-kripik98-wekto (npm) (malicious package)
- [MAL-2025-89992](https://insights.sbomify.com/MAL-2025-89992/): Malicious code in riana-klipo38-riris (npm) (malicious package)
- [MAL-2025-89991](https://insights.sbomify.com/MAL-2025-89991/): Malicious code in riana-klentik1-miaww (npm) (malicious package)
- [MAL-2025-89990](https://insights.sbomify.com/MAL-2025-89990/): Malicious code in riana-ketoprak42-riris (npm) (malicious package)
- [MAL-2025-8999](https://insights.sbomify.com/MAL-2025-8999/): Malicious code in @malware-test-tenty-maple-hawse-audit/test-mlw3-tenty-maple-hawse-audit (npm) (malicious package)
- [MAL-2025-89989](https://insights.sbomify.com/MAL-2025-89989/): Malicious code in riana-ketoprak24-riris (npm) (malicious package)
- [MAL-2025-89988](https://insights.sbomify.com/MAL-2025-89988/): Malicious code in riana-ketan73-riris (npm) (malicious package)
- [MAL-2025-89987](https://insights.sbomify.com/MAL-2025-89987/): Malicious code in riana-keraktelor92-miaww (npm) (malicious package)
- [MAL-2025-89986](https://insights.sbomify.com/MAL-2025-89986/): Malicious code in riana-keraktelor70-riris (npm) (malicious package)
- [MAL-2025-89985](https://insights.sbomify.com/MAL-2025-89985/): Malicious code in riana-kepok76-miaww (npm) (malicious package)
- [MAL-2025-89984](https://insights.sbomify.com/MAL-2025-89984/): Malicious code in riana-kacang73-riris (npm) (malicious package)
- [MAL-2025-89983](https://insights.sbomify.com/MAL-2025-89983/): Malicious code in riana-jus64-riris (npm) (malicious package)
- [MAL-2025-89982](https://insights.sbomify.com/MAL-2025-89982/): Malicious code in riana-jus56-miaww (npm) (malicious package)
- [MAL-2025-89981](https://insights.sbomify.com/MAL-2025-89981/): Malicious code in riana-gulai99-riris (npm) (malicious package)
- [MAL-2025-89980](https://insights.sbomify.com/MAL-2025-89980/): Malicious code in riana-gulai53-apidev (npm) (malicious package)
- [MAL-2025-8998](https://insights.sbomify.com/MAL-2025-8998/): Malicious code in @malware-test-telos-stulm-table-paras/test-mlw3-telos-stulm-table-paras (npm) (malicious package)
- [MAL-2025-89979](https://insights.sbomify.com/MAL-2025-89979/): Malicious code in riana-gudeg86-riris (npm) (malicious package)
- [MAL-2025-89978](https://insights.sbomify.com/MAL-2025-89978/): Malicious code in riana-gorengan77-miaww (npm) (malicious package)
- [MAL-2025-89977](https://insights.sbomify.com/MAL-2025-89977/): Malicious code in riana-gepuk68-miaww (npm) (malicious package)
- [MAL-2025-89976](https://insights.sbomify.com/MAL-2025-89976/): Malicious code in riana-gepuk47-miaww (npm) (malicious package)
- [MAL-2025-89975](https://insights.sbomify.com/MAL-2025-89975/): Malicious code in riana-gepuk25-miaww (npm) (malicious package)
- [MAL-2025-89974](https://insights.sbomify.com/MAL-2025-89974/): Malicious code in riana-gaplek91-riris (npm) (malicious package)
- [MAL-2025-89973](https://insights.sbomify.com/MAL-2025-89973/): Malicious code in riana-esdoger95-riris (npm) (malicious package)
- [MAL-2025-89972](https://insights.sbomify.com/MAL-2025-89972/): Malicious code in riana-esdoger57-miaww (npm) (malicious package)
- [MAL-2025-89971](https://insights.sbomify.com/MAL-2025-89971/): Malicious code in riana-donat94-miaww (npm) (malicious package)
- [MAL-2025-89970](https://insights.sbomify.com/MAL-2025-89970/): Malicious code in riana-donat18-miaww (npm) (malicious package)
- [MAL-2025-8997](https://insights.sbomify.com/MAL-2025-8997/): Malicious code in @malware-test-teens-spode-aumil-sorts/test-mlw3-teens-spode-aumil-sorts (npm) (malicious package)
- [MAL-2025-89969](https://insights.sbomify.com/MAL-2025-89969/): Malicious code in riana-buburayam72-miaww (npm) (malicious package)
- [MAL-2025-89968](https://insights.sbomify.com/MAL-2025-89968/): Malicious code in riana-buburayam100-riris (npm) (malicious package)
- [MAL-2025-89967](https://insights.sbomify.com/MAL-2025-89967/): Malicious code in riana-bubur85-apidev (npm) (malicious package)
- [MAL-2025-89966](https://insights.sbomify.com/MAL-2025-89966/): Malicious code in riana-bubur63-riris (npm) (malicious package)
- [MAL-2025-89965](https://insights.sbomify.com/MAL-2025-89965/): Malicious code in riana-brongkos29-miaww (npm) (malicious package)
- [MAL-2025-89964](https://insights.sbomify.com/MAL-2025-89964/): Malicious code in riana-botok99-riris (npm) (malicious package)
- [MAL-2025-89963](https://insights.sbomify.com/MAL-2025-89963/): Malicious code in riana-botok58-riris (npm) (malicious package)
- [MAL-2025-89962](https://insights.sbomify.com/MAL-2025-89962/): Malicious code in riana-bakwan70-riris (npm) (malicious package)
- [MAL-2025-89961](https://insights.sbomify.com/MAL-2025-89961/): Malicious code in riana-bakso7-riris (npm) (malicious package)
- [MAL-2025-89960](https://insights.sbomify.com/MAL-2025-89960/): Malicious code in riana-asinan89-riris (npm) (malicious package)
- [MAL-2025-8996](https://insights.sbomify.com/MAL-2025-8996/): Malicious code in @malware-test-teens-satyr-rigor-esker/test-mlw3-teens-satyr-rigor-esker (npm) (malicious package)
- [MAL-2025-89959](https://insights.sbomify.com/MAL-2025-89959/): Malicious code in riana-asinan81-apidev (npm) (malicious package)
- [MAL-2025-89958](https://insights.sbomify.com/MAL-2025-89958/): Malicious code in riana-asinan79-riris (npm) (malicious package)
- [MAL-2025-89957](https://insights.sbomify.com/MAL-2025-89957/): Malicious code in riana-asinan17-riris (npm) (malicious package)
- [MAL-2025-89956](https://insights.sbomify.com/MAL-2025-89956/): Malicious code in riana-asinan12-riris (npm) (malicious package)
- [MAL-2025-89955](https://insights.sbomify.com/MAL-2025-89955/): Malicious code in retired_unicorn_z3n (npm) (malicious package)
- [MAL-2025-89954](https://insights.sbomify.com/MAL-2025-89954/): Malicious code in retail_possum_z3n (npm) (malicious package)
- [MAL-2025-89953](https://insights.sbomify.com/MAL-2025-89953/): Malicious code in retail_cricket_z3n (npm) (malicious package)
- [MAL-2025-89952](https://insights.sbomify.com/MAL-2025-89952/): Malicious code in resulting_vole_z3n (npm) (malicious package)
- [MAL-2025-89951](https://insights.sbomify.com/MAL-2025-89951/): Malicious code in resulting_condor_z3n (npm) (malicious package)
- [MAL-2025-89950](https://insights.sbomify.com/MAL-2025-89950/): Malicious code in responsible_nightingale_z3n (npm) (malicious package)
- [MAL-2025-8995](https://insights.sbomify.com/MAL-2025-8995/): Malicious code in @malware-test-tawse-elves-pluff-prosy/test-mlw3-tawse-elves-pluff-prosy (npm) (malicious package)
- [MAL-2025-89949](https://insights.sbomify.com/MAL-2025-89949/): Malicious code in responsible_llama_z3n (npm) (malicious package)
- [MAL-2025-89948](https://insights.sbomify.com/MAL-2025-89948/): Malicious code in responsible_flea_z3n (npm) (malicious package)
- [MAL-2025-89947](https://insights.sbomify.com/MAL-2025-89947/): Malicious code in respectable_dragon_z3n (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/115/