# Vulnerabilities published in 2025


- [MAL-2025-166647](https://insights.sbomify.com/MAL-2025-166647/): Malicious code in syahmuda-poke48 (npm) (malicious package)
- [MAL-2025-166646](https://insights.sbomify.com/MAL-2025-166646/): Malicious code in syahmuda-poke47 (npm) (malicious package)
- [MAL-2025-166645](https://insights.sbomify.com/MAL-2025-166645/): Malicious code in syahmuda-poke46 (npm) (malicious package)
- [MAL-2025-166644](https://insights.sbomify.com/MAL-2025-166644/): Malicious code in syahmuda-poke45 (npm) (malicious package)
- [MAL-2025-166643](https://insights.sbomify.com/MAL-2025-166643/): Malicious code in syahmuda-poke44 (npm) (malicious package)
- [MAL-2025-166642](https://insights.sbomify.com/MAL-2025-166642/): Malicious code in syahmuda-poke43 (npm) (malicious package)
- [MAL-2025-166641](https://insights.sbomify.com/MAL-2025-166641/): Malicious code in syahmuda-poke42 (npm) (malicious package)
- [MAL-2025-166640](https://insights.sbomify.com/MAL-2025-166640/): Malicious code in syahmuda-poke41 (npm) (malicious package)
- [MAL-2025-16664](https://insights.sbomify.com/MAL-2025-16664/): Malicious code in CategoryJS (npm) (malicious package)
- [MAL-2025-166639](https://insights.sbomify.com/MAL-2025-166639/): Malicious code in syahmuda-poke40 (npm) (malicious package)
- [MAL-2025-166638](https://insights.sbomify.com/MAL-2025-166638/): Malicious code in syahmuda-poke4 (npm) (malicious package)
- [MAL-2025-166637](https://insights.sbomify.com/MAL-2025-166637/): Malicious code in syahmuda-poke39 (npm) (malicious package)
- [MAL-2025-166636](https://insights.sbomify.com/MAL-2025-166636/): Malicious code in syahmuda-poke38 (npm) (malicious package)
- [MAL-2025-166635](https://insights.sbomify.com/MAL-2025-166635/): Malicious code in syahmuda-poke37 (npm) (malicious package)
- [MAL-2025-166634](https://insights.sbomify.com/MAL-2025-166634/): Malicious code in syahmuda-poke36 (npm) (malicious package)
- [MAL-2025-166633](https://insights.sbomify.com/MAL-2025-166633/): Malicious code in syahmuda-poke35 (npm) (malicious package)
- [MAL-2025-166632](https://insights.sbomify.com/MAL-2025-166632/): Malicious code in syahmuda-poke34 (npm) (malicious package)
- [MAL-2025-166631](https://insights.sbomify.com/MAL-2025-166631/): Malicious code in syahmuda-poke33 (npm) (malicious package)
- [MAL-2025-166630](https://insights.sbomify.com/MAL-2025-166630/): Malicious code in syahmuda-poke32 (npm) (malicious package)
- [MAL-2025-16663](https://insights.sbomify.com/MAL-2025-16663/): Malicious code in categorize-files (npm) (malicious package)
- [MAL-2025-166629](https://insights.sbomify.com/MAL-2025-166629/): Malicious code in syahmuda-poke31 (npm) (malicious package)
- [MAL-2025-166628](https://insights.sbomify.com/MAL-2025-166628/): Malicious code in syahmuda-poke30 (npm) (malicious package)
- [MAL-2025-166627](https://insights.sbomify.com/MAL-2025-166627/): Malicious code in syahmuda-poke3 (npm) (malicious package)
- [MAL-2025-166626](https://insights.sbomify.com/MAL-2025-166626/): Malicious code in syahmuda-poke29 (npm) (malicious package)
- [MAL-2025-166625](https://insights.sbomify.com/MAL-2025-166625/): Malicious code in syahmuda-poke28 (npm) (malicious package)
- [MAL-2025-166624](https://insights.sbomify.com/MAL-2025-166624/): Malicious code in syahmuda-poke27 (npm) (malicious package)
- [MAL-2025-166623](https://insights.sbomify.com/MAL-2025-166623/): Malicious code in syahmuda-poke26 (npm) (malicious package)
- [MAL-2025-166622](https://insights.sbomify.com/MAL-2025-166622/): Malicious code in syahmuda-poke25 (npm) (malicious package)
- [MAL-2025-166621](https://insights.sbomify.com/MAL-2025-166621/): Malicious code in syahmuda-poke24 (npm) (malicious package)
- [MAL-2025-166620](https://insights.sbomify.com/MAL-2025-166620/): Malicious code in syahmuda-poke23 (npm) (malicious package)
- [MAL-2025-16662](https://insights.sbomify.com/MAL-2025-16662/): Malicious code in catech (npm) (malicious package)
- [MAL-2025-166619](https://insights.sbomify.com/MAL-2025-166619/): Malicious code in syahmuda-poke22 (npm) (malicious package)
- [MAL-2025-166618](https://insights.sbomify.com/MAL-2025-166618/): Malicious code in syahmuda-poke21 (npm) (malicious package)
- [MAL-2025-166617](https://insights.sbomify.com/MAL-2025-166617/): Malicious code in syahmuda-poke20 (npm) (malicious package)
- [MAL-2025-166616](https://insights.sbomify.com/MAL-2025-166616/): Malicious code in syahmuda-poke2 (npm) (malicious package)
- [MAL-2025-166615](https://insights.sbomify.com/MAL-2025-166615/): Malicious code in syahmuda-poke19 (npm) (malicious package)
- [MAL-2025-166614](https://insights.sbomify.com/MAL-2025-166614/): Malicious code in syahmuda-poke18 (npm) (malicious package)
- [MAL-2025-166613](https://insights.sbomify.com/MAL-2025-166613/): Malicious code in syahmuda-poke17 (npm) (malicious package)
- [MAL-2025-166612](https://insights.sbomify.com/MAL-2025-166612/): Malicious code in syahmuda-poke16 (npm) (malicious package)
- [MAL-2025-166611](https://insights.sbomify.com/MAL-2025-166611/): Malicious code in syahmuda-poke15 (npm) (malicious package)
- [MAL-2025-166610](https://insights.sbomify.com/MAL-2025-166610/): Malicious code in syahmuda-poke14 (npm) (malicious package)
- [MAL-2025-16661](https://insights.sbomify.com/MAL-2025-16661/): Malicious code in catch-secure-user-benchmark-scale (npm) (malicious package)
- [MAL-2025-166609](https://insights.sbomify.com/MAL-2025-166609/): Malicious code in syahmuda-poke13 (npm) (malicious package)
- [MAL-2025-166608](https://insights.sbomify.com/MAL-2025-166608/): Malicious code in syahmuda-poke12 (npm) (malicious package)
- [MAL-2025-166607](https://insights.sbomify.com/MAL-2025-166607/): Malicious code in syahmuda-poke11 (npm) (malicious package)
- [MAL-2025-166606](https://insights.sbomify.com/MAL-2025-166606/): Malicious code in syahmuda-poke10 (npm) (malicious package)
- [MAL-2025-166605](https://insights.sbomify.com/MAL-2025-166605/): Malicious code in syahmuda-poke1 (npm) (malicious package)
- [MAL-2025-166604](https://insights.sbomify.com/MAL-2025-166604/): Malicious code in syahlan-poke99 (npm) (malicious package)
- [MAL-2025-166603](https://insights.sbomify.com/MAL-2025-166603/): Malicious code in syahlan-poke98 (npm) (malicious package)
- [MAL-2025-166602](https://insights.sbomify.com/MAL-2025-166602/): Malicious code in syahlan-poke97 (npm) (malicious package)
- [MAL-2025-166601](https://insights.sbomify.com/MAL-2025-166601/): Malicious code in syahlan-poke96 (npm) (malicious package)
- [MAL-2025-166600](https://insights.sbomify.com/MAL-2025-166600/): Malicious code in syahlan-poke95 (npm) (malicious package)
- [MAL-2025-16660](https://insights.sbomify.com/MAL-2025-16660/): Malicious code in catbox-sqlserver (npm) (malicious package)
- [MAL-2025-1666](https://insights.sbomify.com/MAL-2025-1666/): Malicious code in metrics-aggregator (npm) (malicious package)
- [MAL-2025-166599](https://insights.sbomify.com/MAL-2025-166599/): Malicious code in syahlan-poke94 (npm) (malicious package)
- [MAL-2025-166598](https://insights.sbomify.com/MAL-2025-166598/): Malicious code in syahlan-poke93 (npm) (malicious package)
- [MAL-2025-166597](https://insights.sbomify.com/MAL-2025-166597/): Malicious code in syahlan-poke92 (npm) (malicious package)
- [MAL-2025-166596](https://insights.sbomify.com/MAL-2025-166596/): Malicious code in syahlan-poke91 (npm) (malicious package)
- [MAL-2025-166595](https://insights.sbomify.com/MAL-2025-166595/): Malicious code in syahlan-poke90 (npm) (malicious package)
- [MAL-2025-166594](https://insights.sbomify.com/MAL-2025-166594/): Malicious code in syahlan-poke9 (npm) (malicious package)
- [MAL-2025-166593](https://insights.sbomify.com/MAL-2025-166593/): Malicious code in syahlan-poke89 (npm) (malicious package)
- [MAL-2025-166592](https://insights.sbomify.com/MAL-2025-166592/): Malicious code in syahlan-poke88 (npm) (malicious package)
- [MAL-2025-166591](https://insights.sbomify.com/MAL-2025-166591/): Malicious code in syahlan-poke87 (npm) (malicious package)
- [MAL-2025-166590](https://insights.sbomify.com/MAL-2025-166590/): Malicious code in syahlan-poke86 (npm) (malicious package)
- [MAL-2025-16659](https://insights.sbomify.com/MAL-2025-16659/): Malicious code in catalogus (npm) (malicious package)
- [MAL-2025-166589](https://insights.sbomify.com/MAL-2025-166589/): Malicious code in syahlan-poke85 (npm) (malicious package)
- [MAL-2025-166588](https://insights.sbomify.com/MAL-2025-166588/): Malicious code in syahlan-poke84 (npm) (malicious package)
- [MAL-2025-166587](https://insights.sbomify.com/MAL-2025-166587/): Malicious code in syahlan-poke83 (npm) (malicious package)
- [MAL-2025-166586](https://insights.sbomify.com/MAL-2025-166586/): Malicious code in syahlan-poke82 (npm) (malicious package)
- [MAL-2025-166585](https://insights.sbomify.com/MAL-2025-166585/): Malicious code in syahlan-poke81 (npm) (malicious package)
- [MAL-2025-166584](https://insights.sbomify.com/MAL-2025-166584/): Malicious code in syahlan-poke80 (npm) (malicious package)
- [MAL-2025-166583](https://insights.sbomify.com/MAL-2025-166583/): Malicious code in syahlan-poke8 (npm) (malicious package)
- [MAL-2025-166582](https://insights.sbomify.com/MAL-2025-166582/): Malicious code in syahlan-poke79 (npm) (malicious package)
- [MAL-2025-166581](https://insights.sbomify.com/MAL-2025-166581/): Malicious code in syahlan-poke78 (npm) (malicious package)
- [MAL-2025-166580](https://insights.sbomify.com/MAL-2025-166580/): Malicious code in syahlan-poke77 (npm) (malicious package)
- [MAL-2025-16658](https://insights.sbomify.com/MAL-2025-16658/): Malicious code in catalano (npm) (malicious package)
- [MAL-2025-166579](https://insights.sbomify.com/MAL-2025-166579/): Malicious code in syahlan-poke76 (npm) (malicious package)
- [MAL-2025-166578](https://insights.sbomify.com/MAL-2025-166578/): Malicious code in syahlan-poke75 (npm) (malicious package)
- [MAL-2025-166577](https://insights.sbomify.com/MAL-2025-166577/): Malicious code in syahlan-poke74 (npm) (malicious package)
- [MAL-2025-166576](https://insights.sbomify.com/MAL-2025-166576/): Malicious code in syahlan-poke73 (npm) (malicious package)
- [MAL-2025-166575](https://insights.sbomify.com/MAL-2025-166575/): Malicious code in syahlan-poke72 (npm) (malicious package)
- [MAL-2025-166574](https://insights.sbomify.com/MAL-2025-166574/): Malicious code in syahlan-poke71 (npm) (malicious package)
- [MAL-2025-166573](https://insights.sbomify.com/MAL-2025-166573/): Malicious code in syahlan-poke70 (npm) (malicious package)
- [MAL-2025-166572](https://insights.sbomify.com/MAL-2025-166572/): Malicious code in syahlan-poke7 (npm) (malicious package)
- [MAL-2025-166571](https://insights.sbomify.com/MAL-2025-166571/): Malicious code in syahlan-poke69 (npm) (malicious package)
- [MAL-2025-166570](https://insights.sbomify.com/MAL-2025-166570/): Malicious code in syahlan-poke68 (npm) (malicious package)
- [MAL-2025-16657](https://insights.sbomify.com/MAL-2025-16657/): Malicious code in cat-yeti-lzv426-project (npm) (malicious package)
- [MAL-2025-166569](https://insights.sbomify.com/MAL-2025-166569/): Malicious code in syahlan-poke67 (npm) (malicious package)
- [MAL-2025-166568](https://insights.sbomify.com/MAL-2025-166568/): Malicious code in syahlan-poke66 (npm) (malicious package)
- [MAL-2025-166567](https://insights.sbomify.com/MAL-2025-166567/): Malicious code in syahlan-poke65 (npm) (malicious package)
- [MAL-2025-166566](https://insights.sbomify.com/MAL-2025-166566/): Malicious code in syahlan-poke64 (npm) (malicious package)
- [MAL-2025-166565](https://insights.sbomify.com/MAL-2025-166565/): Malicious code in syahlan-poke63 (npm) (malicious package)
- [MAL-2025-166564](https://insights.sbomify.com/MAL-2025-166564/): Malicious code in syahlan-poke62 (npm) (malicious package)
- [MAL-2025-166563](https://insights.sbomify.com/MAL-2025-166563/): Malicious code in syahlan-poke61 (npm) (malicious package)
- [MAL-2025-166562](https://insights.sbomify.com/MAL-2025-166562/): Malicious code in syahlan-poke60 (npm) (malicious package)
- [MAL-2025-166561](https://insights.sbomify.com/MAL-2025-166561/): Malicious code in syahlan-poke6 (npm) (malicious package)
- [MAL-2025-166560](https://insights.sbomify.com/MAL-2025-166560/): Malicious code in syahlan-poke59 (npm) (malicious package)
- [MAL-2025-16656](https://insights.sbomify.com/MAL-2025-16656/): Malicious code in cat-xerus-wui769-project (npm) (malicious package)
- [MAL-2025-166559](https://insights.sbomify.com/MAL-2025-166559/): Malicious code in syahlan-poke58 (npm) (malicious package)
- [MAL-2025-166558](https://insights.sbomify.com/MAL-2025-166558/): Malicious code in syahlan-poke57 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1192/