# Vulnerabilities published in 2025 - [MAL-2025-169257](https://insights.sbomify.com/MAL-2025-169257/): Malicious code in trevora-cir60 (npm) (malicious package) - [MAL-2025-169256](https://insights.sbomify.com/MAL-2025-169256/): Malicious code in trevora-cir6 (npm) (malicious package) - [MAL-2025-169255](https://insights.sbomify.com/MAL-2025-169255/): Malicious code in trevora-cir59 (npm) (malicious package) - [MAL-2025-169254](https://insights.sbomify.com/MAL-2025-169254/): Malicious code in trevora-cir58 (npm) (malicious package) - [MAL-2025-169253](https://insights.sbomify.com/MAL-2025-169253/): Malicious code in trevora-cir57 (npm) (malicious package) - [MAL-2025-169252](https://insights.sbomify.com/MAL-2025-169252/): Malicious code in trevora-cir56 (npm) (malicious package) - [MAL-2025-169251](https://insights.sbomify.com/MAL-2025-169251/): Malicious code in trevora-cir55 (npm) (malicious package) - [MAL-2025-169250](https://insights.sbomify.com/MAL-2025-169250/): Malicious code in trevora-cir54 (npm) (malicious package) - [MAL-2025-16925](https://insights.sbomify.com/MAL-2025-16925/): Malicious code in cherry-inferno-yqot (npm) (malicious package) - [MAL-2025-169249](https://insights.sbomify.com/MAL-2025-169249/): Malicious code in trevora-cir53 (npm) (malicious package) - [MAL-2025-169248](https://insights.sbomify.com/MAL-2025-169248/): Malicious code in trevora-cir52 (npm) (malicious package) - [MAL-2025-169247](https://insights.sbomify.com/MAL-2025-169247/): Malicious code in trevora-cir51 (npm) (malicious package) - [MAL-2025-169246](https://insights.sbomify.com/MAL-2025-169246/): Malicious code in trevora-cir50 (npm) (malicious package) - [MAL-2025-169245](https://insights.sbomify.com/MAL-2025-169245/): Malicious code in trevora-cir5 (npm) (malicious package) - [MAL-2025-169244](https://insights.sbomify.com/MAL-2025-169244/): Malicious code in trevora-cir49 (npm) (malicious package) - [MAL-2025-169243](https://insights.sbomify.com/MAL-2025-169243/): Malicious code in trevora-cir48 (npm) (malicious package) - [MAL-2025-169242](https://insights.sbomify.com/MAL-2025-169242/): Malicious code in trevora-cir47 (npm) (malicious package) - [MAL-2025-169241](https://insights.sbomify.com/MAL-2025-169241/): Malicious code in trevora-cir46 (npm) (malicious package) - [MAL-2025-169240](https://insights.sbomify.com/MAL-2025-169240/): Malicious code in trevora-cir45 (npm) (malicious package) - [MAL-2025-16924](https://insights.sbomify.com/MAL-2025-16924/): Malicious code in cherry-india-raspberry-zrfxp (npm) (malicious package) - [MAL-2025-169239](https://insights.sbomify.com/MAL-2025-169239/): Malicious code in trevora-cir44 (npm) (malicious package) - [MAL-2025-169238](https://insights.sbomify.com/MAL-2025-169238/): Malicious code in trevora-cir43 (npm) (malicious package) - [MAL-2025-169237](https://insights.sbomify.com/MAL-2025-169237/): Malicious code in trevora-cir42 (npm) (malicious package) - [MAL-2025-169236](https://insights.sbomify.com/MAL-2025-169236/): Malicious code in trevora-cir41 (npm) (malicious package) - [MAL-2025-169235](https://insights.sbomify.com/MAL-2025-169235/): Malicious code in trevora-cir40 (npm) (malicious package) - [MAL-2025-169234](https://insights.sbomify.com/MAL-2025-169234/): Malicious code in trevora-cir4 (npm) (malicious package) - [MAL-2025-169233](https://insights.sbomify.com/MAL-2025-169233/): Malicious code in trevora-cir39 (npm) (malicious package) - [MAL-2025-169232](https://insights.sbomify.com/MAL-2025-169232/): Malicious code in trevora-cir38 (npm) (malicious package) - [MAL-2025-169231](https://insights.sbomify.com/MAL-2025-169231/): Malicious code in trevora-cir37 (npm) (malicious package) - [MAL-2025-169230](https://insights.sbomify.com/MAL-2025-169230/): Malicious code in trevora-cir36 (npm) (malicious package) - [MAL-2025-16923](https://insights.sbomify.com/MAL-2025-16923/): Malicious code in cherry-ifs-project (npm) (malicious package) - [MAL-2025-169229](https://insights.sbomify.com/MAL-2025-169229/): Malicious code in trevora-cir35 (npm) (malicious package) - [MAL-2025-169228](https://insights.sbomify.com/MAL-2025-169228/): Malicious code in trevora-cir34 (npm) (malicious package) - [MAL-2025-169227](https://insights.sbomify.com/MAL-2025-169227/): Malicious code in trevora-cir33 (npm) (malicious package) - [MAL-2025-169226](https://insights.sbomify.com/MAL-2025-169226/): Malicious code in trevora-cir32 (npm) (malicious package) - [MAL-2025-169225](https://insights.sbomify.com/MAL-2025-169225/): Malicious code in trevora-cir31 (npm) (malicious package) - [MAL-2025-169224](https://insights.sbomify.com/MAL-2025-169224/): Malicious code in trevora-cir30 (npm) (malicious package) - [MAL-2025-169223](https://insights.sbomify.com/MAL-2025-169223/): Malicious code in trevora-cir3 (npm) (malicious package) - [MAL-2025-169222](https://insights.sbomify.com/MAL-2025-169222/): Malicious code in trevora-cir29 (npm) (malicious package) - [MAL-2025-169221](https://insights.sbomify.com/MAL-2025-169221/): Malicious code in trevora-cir28 (npm) (malicious package) - [MAL-2025-169220](https://insights.sbomify.com/MAL-2025-169220/): Malicious code in trevora-cir27 (npm) (malicious package) - [MAL-2025-16922](https://insights.sbomify.com/MAL-2025-16922/): Malicious code in cherry-ida-project (npm) (malicious package) - [MAL-2025-169219](https://insights.sbomify.com/MAL-2025-169219/): Malicious code in trevora-cir26 (npm) (malicious package) - [MAL-2025-169218](https://insights.sbomify.com/MAL-2025-169218/): Malicious code in trevora-cir25 (npm) (malicious package) - [MAL-2025-169217](https://insights.sbomify.com/MAL-2025-169217/): Malicious code in trevora-cir24 (npm) (malicious package) - [MAL-2025-169216](https://insights.sbomify.com/MAL-2025-169216/): Malicious code in trevora-cir23 (npm) (malicious package) - [MAL-2025-169215](https://insights.sbomify.com/MAL-2025-169215/): Malicious code in trevora-cir22 (npm) (malicious package) - [MAL-2025-169214](https://insights.sbomify.com/MAL-2025-169214/): Malicious code in trevora-cir21 (npm) (malicious package) - [MAL-2025-169213](https://insights.sbomify.com/MAL-2025-169213/): Malicious code in trevora-cir20 (npm) (malicious package) - [MAL-2025-169212](https://insights.sbomify.com/MAL-2025-169212/): Malicious code in trevora-cir2 (npm) (malicious package) - [MAL-2025-169211](https://insights.sbomify.com/MAL-2025-169211/): Malicious code in trevora-cir19 (npm) (malicious package) - [MAL-2025-169210](https://insights.sbomify.com/MAL-2025-169210/): Malicious code in trevora-cir18 (npm) (malicious package) - [MAL-2025-16921](https://insights.sbomify.com/MAL-2025-16921/): Malicious code in cherry-hotel-byxb (npm) (malicious package) - [MAL-2025-169209](https://insights.sbomify.com/MAL-2025-169209/): Malicious code in trevora-cir17 (npm) (malicious package) - [MAL-2025-169208](https://insights.sbomify.com/MAL-2025-169208/): Malicious code in trevora-cir16 (npm) (malicious package) - [MAL-2025-169207](https://insights.sbomify.com/MAL-2025-169207/): Malicious code in trevora-cir150 (npm) (malicious package) - [MAL-2025-169206](https://insights.sbomify.com/MAL-2025-169206/): Malicious code in trevora-cir15 (npm) (malicious package) - [MAL-2025-169205](https://insights.sbomify.com/MAL-2025-169205/): Malicious code in trevora-cir149 (npm) (malicious package) - [MAL-2025-169204](https://insights.sbomify.com/MAL-2025-169204/): Malicious code in trevora-cir148 (npm) (malicious package) - [MAL-2025-169203](https://insights.sbomify.com/MAL-2025-169203/): Malicious code in trevora-cir147 (npm) (malicious package) - [MAL-2025-169202](https://insights.sbomify.com/MAL-2025-169202/): Malicious code in trevora-cir146 (npm) (malicious package) - [MAL-2025-169201](https://insights.sbomify.com/MAL-2025-169201/): Malicious code in trevora-cir145 (npm) (malicious package) - [MAL-2025-169200](https://insights.sbomify.com/MAL-2025-169200/): Malicious code in trevora-cir144 (npm) (malicious package) - [MAL-2025-16920](https://insights.sbomify.com/MAL-2025-16920/): Malicious code in cherry-honeydew-yankee-rlbya (npm) (malicious package) - [MAL-2025-1692](https://insights.sbomify.com/MAL-2025-1692/): Malicious code in @kone-ds/webcomponents-react (npm) (malicious package) - [MAL-2025-169199](https://insights.sbomify.com/MAL-2025-169199/): Malicious code in trevora-cir143 (npm) (malicious package) - [MAL-2025-169198](https://insights.sbomify.com/MAL-2025-169198/): Malicious code in trevora-cir142 (npm) (malicious package) - [MAL-2025-169197](https://insights.sbomify.com/MAL-2025-169197/): Malicious code in trevora-cir141 (npm) (malicious package) - [MAL-2025-169196](https://insights.sbomify.com/MAL-2025-169196/): Malicious code in trevora-cir140 (npm) (malicious package) - [MAL-2025-169195](https://insights.sbomify.com/MAL-2025-169195/): Malicious code in trevora-cir14 (npm) (malicious package) - [MAL-2025-169194](https://insights.sbomify.com/MAL-2025-169194/): Malicious code in trevora-cir139 (npm) (malicious package) - [MAL-2025-169193](https://insights.sbomify.com/MAL-2025-169193/): Malicious code in trevora-cir138 (npm) (malicious package) - [MAL-2025-169192](https://insights.sbomify.com/MAL-2025-169192/): Malicious code in trevora-cir137 (npm) (malicious package) - [MAL-2025-169191](https://insights.sbomify.com/MAL-2025-169191/): Malicious code in trevora-cir136 (npm) (malicious package) - [MAL-2025-169190](https://insights.sbomify.com/MAL-2025-169190/): Malicious code in trevora-cir135 (npm) (malicious package) - [MAL-2025-16919](https://insights.sbomify.com/MAL-2025-16919/): Malicious code in cherry-grape-bcej (npm) (malicious package) - [MAL-2025-169189](https://insights.sbomify.com/MAL-2025-169189/): Malicious code in trevora-cir134 (npm) (malicious package) - [MAL-2025-169188](https://insights.sbomify.com/MAL-2025-169188/): Malicious code in trevora-cir133 (npm) (malicious package) - [MAL-2025-169187](https://insights.sbomify.com/MAL-2025-169187/): Malicious code in trevora-cir132 (npm) (malicious package) - [MAL-2025-169186](https://insights.sbomify.com/MAL-2025-169186/): Malicious code in trevora-cir131 (npm) (malicious package) - [MAL-2025-169185](https://insights.sbomify.com/MAL-2025-169185/): Malicious code in trevora-cir130 (npm) (malicious package) - [MAL-2025-169184](https://insights.sbomify.com/MAL-2025-169184/): Malicious code in trevora-cir13 (npm) (malicious package) - [MAL-2025-169183](https://insights.sbomify.com/MAL-2025-169183/): Malicious code in trevora-cir129 (npm) (malicious package) - [MAL-2025-169182](https://insights.sbomify.com/MAL-2025-169182/): Malicious code in trevora-cir128 (npm) (malicious package) - [MAL-2025-169181](https://insights.sbomify.com/MAL-2025-169181/): Malicious code in trevora-cir127 (npm) (malicious package) - [MAL-2025-169180](https://insights.sbomify.com/MAL-2025-169180/): Malicious code in trevora-cir126 (npm) (malicious package) - [MAL-2025-16918](https://insights.sbomify.com/MAL-2025-16918/): Malicious code in cherry-galaxy-big896-project (npm) (malicious package) - [MAL-2025-169179](https://insights.sbomify.com/MAL-2025-169179/): Malicious code in trevora-cir125 (npm) (malicious package) - [MAL-2025-169178](https://insights.sbomify.com/MAL-2025-169178/): Malicious code in trevora-cir124 (npm) (malicious package) - [MAL-2025-169177](https://insights.sbomify.com/MAL-2025-169177/): Malicious code in trevora-cir123 (npm) (malicious package) - [MAL-2025-169176](https://insights.sbomify.com/MAL-2025-169176/): Malicious code in trevora-cir122 (npm) (malicious package) - [MAL-2025-169175](https://insights.sbomify.com/MAL-2025-169175/): Malicious code in trevora-cir121 (npm) (malicious package) - [MAL-2025-169174](https://insights.sbomify.com/MAL-2025-169174/): Malicious code in trevora-cir120 (npm) (malicious package) - [MAL-2025-169173](https://insights.sbomify.com/MAL-2025-169173/): Malicious code in trevora-cir12 (npm) (malicious package) - [MAL-2025-169172](https://insights.sbomify.com/MAL-2025-169172/): Malicious code in trevora-cir119 (npm) (malicious package) - [MAL-2025-169171](https://insights.sbomify.com/MAL-2025-169171/): Malicious code in trevora-cir118 (npm) (malicious package) - [MAL-2025-169170](https://insights.sbomify.com/MAL-2025-169170/): Malicious code in trevora-cir117 (npm) (malicious package) - [MAL-2025-16917](https://insights.sbomify.com/MAL-2025-16917/): Malicious code in cherry-fjord-iig088-project (npm) (malicious package) - [MAL-2025-169169](https://insights.sbomify.com/MAL-2025-169169/): Malicious code in trevora-cir116 (npm) (malicious package) - [MAL-2025-169168](https://insights.sbomify.com/MAL-2025-169168/): Malicious code in trevora-cir115 (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1163/