# Vulnerabilities published in 2025


- [MAL-2025-166557](https://insights.sbomify.com/MAL-2025-166557/): Malicious code in syahlan-poke56 (npm) (malicious package)
- [MAL-2025-166556](https://insights.sbomify.com/MAL-2025-166556/): Malicious code in syahlan-poke55 (npm) (malicious package)
- [MAL-2025-166555](https://insights.sbomify.com/MAL-2025-166555/): Malicious code in syahlan-poke54 (npm) (malicious package)
- [MAL-2025-166554](https://insights.sbomify.com/MAL-2025-166554/): Malicious code in syahlan-poke53 (npm) (malicious package)
- [MAL-2025-166553](https://insights.sbomify.com/MAL-2025-166553/): Malicious code in syahlan-poke52 (npm) (malicious package)
- [MAL-2025-166552](https://insights.sbomify.com/MAL-2025-166552/): Malicious code in syahlan-poke51 (npm) (malicious package)
- [MAL-2025-166551](https://insights.sbomify.com/MAL-2025-166551/): Malicious code in syahlan-poke50 (npm) (malicious package)
- [MAL-2025-166550](https://insights.sbomify.com/MAL-2025-166550/): Malicious code in syahlan-poke5 (npm) (malicious package)
- [MAL-2025-16655](https://insights.sbomify.com/MAL-2025-16655/): Malicious code in cat-xerox-mjs874-project (npm) (malicious package)
- [MAL-2025-166549](https://insights.sbomify.com/MAL-2025-166549/): Malicious code in syahlan-poke49 (npm) (malicious package)
- [MAL-2025-166548](https://insights.sbomify.com/MAL-2025-166548/): Malicious code in syahlan-poke48 (npm) (malicious package)
- [MAL-2025-166547](https://insights.sbomify.com/MAL-2025-166547/): Malicious code in syahlan-poke47 (npm) (malicious package)
- [MAL-2025-166546](https://insights.sbomify.com/MAL-2025-166546/): Malicious code in syahlan-poke46 (npm) (malicious package)
- [MAL-2025-166545](https://insights.sbomify.com/MAL-2025-166545/): Malicious code in syahlan-poke45 (npm) (malicious package)
- [MAL-2025-166544](https://insights.sbomify.com/MAL-2025-166544/): Malicious code in syahlan-poke44 (npm) (malicious package)
- [MAL-2025-166543](https://insights.sbomify.com/MAL-2025-166543/): Malicious code in syahlan-poke43 (npm) (malicious package)
- [MAL-2025-166542](https://insights.sbomify.com/MAL-2025-166542/): Malicious code in syahlan-poke42 (npm) (malicious package)
- [MAL-2025-166541](https://insights.sbomify.com/MAL-2025-166541/): Malicious code in syahlan-poke41 (npm) (malicious package)
- [MAL-2025-166540](https://insights.sbomify.com/MAL-2025-166540/): Malicious code in syahlan-poke40 (npm) (malicious package)
- [MAL-2025-16654](https://insights.sbomify.com/MAL-2025-16654/): Malicious code in cat-wisp-gib542-project (npm) (malicious package)
- [MAL-2025-166539](https://insights.sbomify.com/MAL-2025-166539/): Malicious code in syahlan-poke4 (npm) (malicious package)
- [MAL-2025-166538](https://insights.sbomify.com/MAL-2025-166538/): Malicious code in syahlan-poke39 (npm) (malicious package)
- [MAL-2025-166537](https://insights.sbomify.com/MAL-2025-166537/): Malicious code in syahlan-poke38 (npm) (malicious package)
- [MAL-2025-166536](https://insights.sbomify.com/MAL-2025-166536/): Malicious code in syahlan-poke37 (npm) (malicious package)
- [MAL-2025-166535](https://insights.sbomify.com/MAL-2025-166535/): Malicious code in syahlan-poke36 (npm) (malicious package)
- [MAL-2025-166534](https://insights.sbomify.com/MAL-2025-166534/): Malicious code in syahlan-poke35 (npm) (malicious package)
- [MAL-2025-166533](https://insights.sbomify.com/MAL-2025-166533/): Malicious code in syahlan-poke34 (npm) (malicious package)
- [MAL-2025-166532](https://insights.sbomify.com/MAL-2025-166532/): Malicious code in syahlan-poke33 (npm) (malicious package)
- [MAL-2025-166531](https://insights.sbomify.com/MAL-2025-166531/): Malicious code in syahlan-poke32 (npm) (malicious package)
- [MAL-2025-166530](https://insights.sbomify.com/MAL-2025-166530/): Malicious code in syahlan-poke31 (npm) (malicious package)
- [MAL-2025-16653](https://insights.sbomify.com/MAL-2025-16653/): Malicious code in cat-whirlpool-mhx700-project (npm) (malicious package)
- [MAL-2025-166529](https://insights.sbomify.com/MAL-2025-166529/): Malicious code in syahlan-poke30 (npm) (malicious package)
- [MAL-2025-166528](https://insights.sbomify.com/MAL-2025-166528/): Malicious code in syahlan-poke3 (npm) (malicious package)
- [MAL-2025-166527](https://insights.sbomify.com/MAL-2025-166527/): Malicious code in syahlan-poke29 (npm) (malicious package)
- [MAL-2025-166526](https://insights.sbomify.com/MAL-2025-166526/): Malicious code in syahlan-poke28 (npm) (malicious package)
- [MAL-2025-166525](https://insights.sbomify.com/MAL-2025-166525/): Malicious code in syahlan-poke27 (npm) (malicious package)
- [MAL-2025-166524](https://insights.sbomify.com/MAL-2025-166524/): Malicious code in syahlan-poke26 (npm) (malicious package)
- [MAL-2025-166523](https://insights.sbomify.com/MAL-2025-166523/): Malicious code in syahlan-poke25 (npm) (malicious package)
- [MAL-2025-166522](https://insights.sbomify.com/MAL-2025-166522/): Malicious code in syahlan-poke24 (npm) (malicious package)
- [MAL-2025-166521](https://insights.sbomify.com/MAL-2025-166521/): Malicious code in syahlan-poke23 (npm) (malicious package)
- [MAL-2025-166520](https://insights.sbomify.com/MAL-2025-166520/): Malicious code in syahlan-poke22 (npm) (malicious package)
- [MAL-2025-16652](https://insights.sbomify.com/MAL-2025-16652/): Malicious code in cat-undertow-nlw175-project (npm) (malicious package)
- [MAL-2025-166519](https://insights.sbomify.com/MAL-2025-166519/): Malicious code in syahlan-poke21 (npm) (malicious package)
- [MAL-2025-166518](https://insights.sbomify.com/MAL-2025-166518/): Malicious code in syahlan-poke20 (npm) (malicious package)
- [MAL-2025-166517](https://insights.sbomify.com/MAL-2025-166517/): Malicious code in syahlan-poke2 (npm) (malicious package)
- [MAL-2025-166516](https://insights.sbomify.com/MAL-2025-166516/): Malicious code in syahlan-poke19 (npm) (malicious package)
- [MAL-2025-166515](https://insights.sbomify.com/MAL-2025-166515/): Malicious code in syahlan-poke18 (npm) (malicious package)
- [MAL-2025-166514](https://insights.sbomify.com/MAL-2025-166514/): Malicious code in syahlan-poke17 (npm) (malicious package)
- [MAL-2025-166513](https://insights.sbomify.com/MAL-2025-166513/): Malicious code in syahlan-poke16 (npm) (malicious package)
- [MAL-2025-166512](https://insights.sbomify.com/MAL-2025-166512/): Malicious code in syahlan-poke15 (npm) (malicious package)
- [MAL-2025-166511](https://insights.sbomify.com/MAL-2025-166511/): Malicious code in syahlan-poke14 (npm) (malicious package)
- [MAL-2025-166510](https://insights.sbomify.com/MAL-2025-166510/): Malicious code in syahlan-poke13 (npm) (malicious package)
- [MAL-2025-16651](https://insights.sbomify.com/MAL-2025-16651/): Malicious code in cat-sunset-moo712-project (npm) (malicious package)
- [MAL-2025-166509](https://insights.sbomify.com/MAL-2025-166509/): Malicious code in syahlan-poke12 (npm) (malicious package)
- [MAL-2025-166508](https://insights.sbomify.com/MAL-2025-166508/): Malicious code in syahlan-poke110 (npm) (malicious package)
- [MAL-2025-166507](https://insights.sbomify.com/MAL-2025-166507/): Malicious code in syahlan-poke11 (npm) (malicious package)
- [MAL-2025-166506](https://insights.sbomify.com/MAL-2025-166506/): Malicious code in syahlan-poke109 (npm) (malicious package)
- [MAL-2025-166505](https://insights.sbomify.com/MAL-2025-166505/): Malicious code in syahlan-poke108 (npm) (malicious package)
- [MAL-2025-166504](https://insights.sbomify.com/MAL-2025-166504/): Malicious code in syahlan-poke107 (npm) (malicious package)
- [MAL-2025-166503](https://insights.sbomify.com/MAL-2025-166503/): Malicious code in syahlan-poke106 (npm) (malicious package)
- [MAL-2025-166502](https://insights.sbomify.com/MAL-2025-166502/): Malicious code in syahlan-poke105 (npm) (malicious package)
- [MAL-2025-166501](https://insights.sbomify.com/MAL-2025-166501/): Malicious code in syahlan-poke104 (npm) (malicious package)
- [MAL-2025-166500](https://insights.sbomify.com/MAL-2025-166500/): Malicious code in syahlan-poke103 (npm) (malicious package)
- [MAL-2025-16650](https://insights.sbomify.com/MAL-2025-16650/): Malicious code in cat-quagmire-zok537-project (npm) (malicious package)
- [MAL-2025-1665](https://insights.sbomify.com/MAL-2025-1665/): Malicious code in ocular-monorepo (npm) (malicious package)
- [MAL-2025-166499](https://insights.sbomify.com/MAL-2025-166499/): Malicious code in syahlan-poke102 (npm) (malicious package)
- [MAL-2025-166498](https://insights.sbomify.com/MAL-2025-166498/): Malicious code in syahlan-poke101 (npm) (malicious package)
- [MAL-2025-166497](https://insights.sbomify.com/MAL-2025-166497/): Malicious code in syahlan-poke100 (npm) (malicious package)
- [MAL-2025-166496](https://insights.sbomify.com/MAL-2025-166496/): Malicious code in syahlan-poke10 (npm) (malicious package)
- [MAL-2025-166495](https://insights.sbomify.com/MAL-2025-166495/): Malicious code in syahlan-poke1 (npm) (malicious package)
- [MAL-2025-166494](https://insights.sbomify.com/MAL-2025-166494/): Malicious code in sunderlan-uyud-vamunuanin (npm) (malicious package)
- [MAL-2025-166493](https://insights.sbomify.com/MAL-2025-166493/): Malicious code in sunderlan-uyud-vamunnin (npm) (malicious package)
- [MAL-2025-166492](https://insights.sbomify.com/MAL-2025-166492/): Malicious code in sunderlan-uyud-vamunin (npm) (malicious package)
- [MAL-2025-166491](https://insights.sbomify.com/MAL-2025-166491/): Malicious code in sunderlan-uyud-vamunanin (npm) (malicious package)
- [MAL-2025-166490](https://insights.sbomify.com/MAL-2025-166490/): Malicious code in sunderlan-uyud-vamukualaiabaupalanimuanin (npm) (malicious package)
- [MAL-2025-16649](https://insights.sbomify.com/MAL-2025-16649/): Malicious code in cat-nautilus-aou981-project (npm) (malicious package)
- [MAL-2025-166489](https://insights.sbomify.com/MAL-2025-166489/): Malicious code in sunderlan-uyud-vamukaupalanimuanin (npm) (malicious package)
- [MAL-2025-166488](https://insights.sbomify.com/MAL-2025-166488/): Malicious code in sunderlan-uyud-vamukapalanimuanin (npm) (malicious package)
- [MAL-2025-166487](https://insights.sbomify.com/MAL-2025-166487/): Malicious code in sunderlan-uyud-vamukanmuanin (npm) (malicious package)
- [MAL-2025-166486](https://insights.sbomify.com/MAL-2025-166486/): Malicious code in sunderlan-uyud-vamukanimuanin (npm) (malicious package)
- [MAL-2025-166485](https://insights.sbomify.com/MAL-2025-166485/): Malicious code in sunderlan-uyud-vamukalanimuanin (npm) (malicious package)
- [MAL-2025-166484](https://insights.sbomify.com/MAL-2025-166484/): Malicious code in sunderlan-uyud-vamukalaiabaupalanimuanin (npm) (malicious package)
- [MAL-2025-166483](https://insights.sbomify.com/MAL-2025-166483/): Malicious code in sunderlan-uyud-vamukaiabaupalanimuanin (npm) (malicious package)
- [MAL-2025-166482](https://insights.sbomify.com/MAL-2025-166482/): Malicious code in sunderlan-uyud-vamukaaupalanimuanin (npm) (malicious package)
- [MAL-2025-166481](https://insights.sbomify.com/MAL-2025-166481/): Malicious code in sunderlan-uyud-vamukaalanimuanin (npm) (malicious package)
- [MAL-2025-166480](https://insights.sbomify.com/MAL-2025-166480/): Malicious code in sunderlan-uyud-vamukaaiabaupalanimuanin (npm) (malicious package)
- [MAL-2025-16648](https://insights.sbomify.com/MAL-2025-16648/): Malicious code in cat-gorge-doe917-project (npm) (malicious package)
- [MAL-2025-166479](https://insights.sbomify.com/MAL-2025-166479/): Malicious code in sunderlan-uyud-vamukaabaupalanimuanin (npm) (malicious package)
- [MAL-2025-166478](https://insights.sbomify.com/MAL-2025-166478/): Malicious code in sunderlan-uyud-vamuanmuanin (npm) (malicious package)
- [MAL-2025-166477](https://insights.sbomify.com/MAL-2025-166477/): Malicious code in sunderlan-uyud-vamknakiunin (npm) (malicious package)
- [MAL-2025-166476](https://insights.sbomify.com/MAL-2025-166476/): Malicious code in sunderlan-uyud-vamknaiunin (npm) (malicious package)
- [MAL-2025-166475](https://insights.sbomify.com/MAL-2025-166475/): Malicious code in sunderlan-uyud-vamaiunin (npm) (malicious package)
- [MAL-2025-166474](https://insights.sbomify.com/MAL-2025-166474/): Malicious code in sunderlan-uylud-vamuuknauin (npm) (malicious package)
- [MAL-2025-166473](https://insights.sbomify.com/MAL-2025-166473/): Malicious code in sunderlan-uylud-vamuiusuabavasiknauin (npm) (malicious package)
- [MAL-2025-166472](https://insights.sbomify.com/MAL-2025-166472/): Malicious code in sunderlan-uylud-vamuiusabavasiknauin (npm) (malicious package)
- [MAL-2025-166471](https://insights.sbomify.com/MAL-2025-166471/): Malicious code in sunderlan-uylud-vamuiuknauin (npm) (malicious package)
- [MAL-2025-166470](https://insights.sbomify.com/MAL-2025-166470/): Malicious code in sunderlan-uylud-vamuiubknauin (npm) (malicious package)
- [MAL-2025-16647](https://insights.sbomify.com/MAL-2025-16647/): Malicious code in cat-etc-passwd (npm) (malicious package)
- [MAL-2025-166469](https://insights.sbomify.com/MAL-2025-166469/): Malicious code in sunderlan-uylud-vamuiubavasiknauin (npm) (malicious package)
- [MAL-2025-166468](https://insights.sbomify.com/MAL-2025-166468/): Malicious code in sunderlan-uylud-vamuiubaknauin (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1193/