# Vulnerabilities published in 2025


- [MAL-2025-166106](https://insights.sbomify.com/MAL-2025-166106/): Malicious code in slamet-poke84 (npm) (malicious package)
- [MAL-2025-166105](https://insights.sbomify.com/MAL-2025-166105/): Malicious code in slamet-poke83 (npm) (malicious package)
- [MAL-2025-166104](https://insights.sbomify.com/MAL-2025-166104/): Malicious code in slamet-poke82 (npm) (malicious package)
- [MAL-2025-166103](https://insights.sbomify.com/MAL-2025-166103/): Malicious code in slamet-poke81 (npm) (malicious package)
- [MAL-2025-166102](https://insights.sbomify.com/MAL-2025-166102/): Malicious code in slamet-poke80 (npm) (malicious package)
- [MAL-2025-166101](https://insights.sbomify.com/MAL-2025-166101/): Malicious code in slamet-poke8 (npm) (malicious package)
- [MAL-2025-166100](https://insights.sbomify.com/MAL-2025-166100/): Malicious code in slamet-poke79 (npm) (malicious package)
- [MAL-2025-16610](https://insights.sbomify.com/MAL-2025-16610/): Malicious code in cascade_qajvx_qv3p9_harmony (npm) (malicious package)
- [MAL-2025-1661](https://insights.sbomify.com/MAL-2025-1661/): Malicious code in ringcentral-web-phone-v2 (npm) (malicious package)
- [MAL-2025-166099](https://insights.sbomify.com/MAL-2025-166099/): Malicious code in slamet-poke78 (npm) (malicious package)
- [MAL-2025-166098](https://insights.sbomify.com/MAL-2025-166098/): Malicious code in slamet-poke77 (npm) (malicious package)
- [MAL-2025-166097](https://insights.sbomify.com/MAL-2025-166097/): Malicious code in slamet-poke76 (npm) (malicious package)
- [MAL-2025-166096](https://insights.sbomify.com/MAL-2025-166096/): Malicious code in slamet-poke75 (npm) (malicious package)
- [MAL-2025-166095](https://insights.sbomify.com/MAL-2025-166095/): Malicious code in slamet-poke74 (npm) (malicious package)
- [MAL-2025-166094](https://insights.sbomify.com/MAL-2025-166094/): Malicious code in slamet-poke73 (npm) (malicious package)
- [MAL-2025-166093](https://insights.sbomify.com/MAL-2025-166093/): Malicious code in slamet-poke72 (npm) (malicious package)
- [MAL-2025-166092](https://insights.sbomify.com/MAL-2025-166092/): Malicious code in slamet-poke71 (npm) (malicious package)
- [MAL-2025-166091](https://insights.sbomify.com/MAL-2025-166091/): Malicious code in slamet-poke70 (npm) (malicious package)
- [MAL-2025-166090](https://insights.sbomify.com/MAL-2025-166090/): Malicious code in slamet-poke7 (npm) (malicious package)
- [MAL-2025-16609](https://insights.sbomify.com/MAL-2025-16609/): Malicious code in cascade_q7kfh_i8il6_mystic (npm) (malicious package)
- [MAL-2025-166089](https://insights.sbomify.com/MAL-2025-166089/): Malicious code in slamet-poke69 (npm) (malicious package)
- [MAL-2025-166088](https://insights.sbomify.com/MAL-2025-166088/): Malicious code in slamet-poke68 (npm) (malicious package)
- [MAL-2025-166087](https://insights.sbomify.com/MAL-2025-166087/): Malicious code in slamet-poke67 (npm) (malicious package)
- [MAL-2025-166086](https://insights.sbomify.com/MAL-2025-166086/): Malicious code in slamet-poke66 (npm) (malicious package)
- [MAL-2025-166085](https://insights.sbomify.com/MAL-2025-166085/): Malicious code in slamet-poke65 (npm) (malicious package)
- [MAL-2025-166084](https://insights.sbomify.com/MAL-2025-166084/): Malicious code in slamet-poke64 (npm) (malicious package)
- [MAL-2025-166083](https://insights.sbomify.com/MAL-2025-166083/): Malicious code in slamet-poke63 (npm) (malicious package)
- [MAL-2025-166082](https://insights.sbomify.com/MAL-2025-166082/): Malicious code in slamet-poke62 (npm) (malicious package)
- [MAL-2025-166081](https://insights.sbomify.com/MAL-2025-166081/): Malicious code in slamet-poke61 (npm) (malicious package)
- [MAL-2025-166080](https://insights.sbomify.com/MAL-2025-166080/): Malicious code in slamet-poke60 (npm) (malicious package)
- [MAL-2025-16608](https://insights.sbomify.com/MAL-2025-16608/): Malicious code in cascade_phnht_ng8w0_opaline (npm) (malicious package)
- [MAL-2025-166079](https://insights.sbomify.com/MAL-2025-166079/): Malicious code in slamet-poke6 (npm) (malicious package)
- [MAL-2025-166078](https://insights.sbomify.com/MAL-2025-166078/): Malicious code in slamet-poke59 (npm) (malicious package)
- [MAL-2025-166077](https://insights.sbomify.com/MAL-2025-166077/): Malicious code in slamet-poke589 (npm) (malicious package)
- [MAL-2025-166076](https://insights.sbomify.com/MAL-2025-166076/): Malicious code in slamet-poke588 (npm) (malicious package)
- [MAL-2025-166075](https://insights.sbomify.com/MAL-2025-166075/): Malicious code in slamet-poke58 (npm) (malicious package)
- [MAL-2025-166074](https://insights.sbomify.com/MAL-2025-166074/): Malicious code in slamet-poke57 (npm) (malicious package)
- [MAL-2025-166073](https://insights.sbomify.com/MAL-2025-166073/): Malicious code in slamet-poke56 (npm) (malicious package)
- [MAL-2025-166072](https://insights.sbomify.com/MAL-2025-166072/): Malicious code in slamet-poke55 (npm) (malicious package)
- [MAL-2025-166071](https://insights.sbomify.com/MAL-2025-166071/): Malicious code in slamet-poke54 (npm) (malicious package)
- [MAL-2025-166070](https://insights.sbomify.com/MAL-2025-166070/): Malicious code in slamet-poke53 (npm) (malicious package)
- [MAL-2025-16607](https://insights.sbomify.com/MAL-2025-16607/): Malicious code in cascade_lcth4_b245i_antelope (npm) (malicious package)
- [MAL-2025-166069](https://insights.sbomify.com/MAL-2025-166069/): Malicious code in slamet-poke52 (npm) (malicious package)
- [MAL-2025-166068](https://insights.sbomify.com/MAL-2025-166068/): Malicious code in slamet-poke51 (npm) (malicious package)
- [MAL-2025-166067](https://insights.sbomify.com/MAL-2025-166067/): Malicious code in slamet-poke50 (npm) (malicious package)
- [MAL-2025-166066](https://insights.sbomify.com/MAL-2025-166066/): Malicious code in slamet-poke5 (npm) (malicious package)
- [MAL-2025-166065](https://insights.sbomify.com/MAL-2025-166065/): Malicious code in slamet-poke49 (npm) (malicious package)
- [MAL-2025-166064](https://insights.sbomify.com/MAL-2025-166064/): Malicious code in slamet-poke48 (npm) (malicious package)
- [MAL-2025-166063](https://insights.sbomify.com/MAL-2025-166063/): Malicious code in slamet-poke47 (npm) (malicious package)
- [MAL-2025-166062](https://insights.sbomify.com/MAL-2025-166062/): Malicious code in slamet-poke46 (npm) (malicious package)
- [MAL-2025-166061](https://insights.sbomify.com/MAL-2025-166061/): Malicious code in slamet-poke45 (npm) (malicious package)
- [MAL-2025-166060](https://insights.sbomify.com/MAL-2025-166060/): Malicious code in slamet-poke44 (npm) (malicious package)
- [MAL-2025-16606](https://insights.sbomify.com/MAL-2025-16606/): Malicious code in cascade_hd4kj_z4dhx_zephyr (npm) (malicious package)
- [MAL-2025-166059](https://insights.sbomify.com/MAL-2025-166059/): Malicious code in slamet-poke43 (npm) (malicious package)
- [MAL-2025-166058](https://insights.sbomify.com/MAL-2025-166058/): Malicious code in slamet-poke42 (npm) (malicious package)
- [MAL-2025-166057](https://insights.sbomify.com/MAL-2025-166057/): Malicious code in slamet-poke41 (npm) (malicious package)
- [MAL-2025-166056](https://insights.sbomify.com/MAL-2025-166056/): Malicious code in slamet-poke40 (npm) (malicious package)
- [MAL-2025-166055](https://insights.sbomify.com/MAL-2025-166055/): Malicious code in slamet-poke4 (npm) (malicious package)
- [MAL-2025-166054](https://insights.sbomify.com/MAL-2025-166054/): Malicious code in slamet-poke39 (npm) (malicious package)
- [MAL-2025-166053](https://insights.sbomify.com/MAL-2025-166053/): Malicious code in slamet-poke38 (npm) (malicious package)
- [MAL-2025-166052](https://insights.sbomify.com/MAL-2025-166052/): Malicious code in slamet-poke37 (npm) (malicious package)
- [MAL-2025-166051](https://insights.sbomify.com/MAL-2025-166051/): Malicious code in slamet-poke36 (npm) (malicious package)
- [MAL-2025-166050](https://insights.sbomify.com/MAL-2025-166050/): Malicious code in slamet-poke35 (npm) (malicious package)
- [MAL-2025-16605](https://insights.sbomify.com/MAL-2025-16605/): Malicious code in cascade_b3hwp_vtgle_illusion (npm) (malicious package)
- [MAL-2025-166049](https://insights.sbomify.com/MAL-2025-166049/): Malicious code in slamet-poke34 (npm) (malicious package)
- [MAL-2025-166048](https://insights.sbomify.com/MAL-2025-166048/): Malicious code in slamet-poke33 (npm) (malicious package)
- [MAL-2025-166047](https://insights.sbomify.com/MAL-2025-166047/): Malicious code in slamet-poke32 (npm) (malicious package)
- [MAL-2025-166046](https://insights.sbomify.com/MAL-2025-166046/): Malicious code in slamet-poke31 (npm) (malicious package)
- [MAL-2025-166045](https://insights.sbomify.com/MAL-2025-166045/): Malicious code in slamet-poke30 (npm) (malicious package)
- [MAL-2025-166044](https://insights.sbomify.com/MAL-2025-166044/): Malicious code in slamet-poke3 (npm) (malicious package)
- [MAL-2025-166043](https://insights.sbomify.com/MAL-2025-166043/): Malicious code in slamet-poke29 (npm) (malicious package)
- [MAL-2025-166042](https://insights.sbomify.com/MAL-2025-166042/): Malicious code in slamet-poke28 (npm) (malicious package)
- [MAL-2025-166041](https://insights.sbomify.com/MAL-2025-166041/): Malicious code in slamet-poke27 (npm) (malicious package)
- [MAL-2025-166040](https://insights.sbomify.com/MAL-2025-166040/): Malicious code in slamet-poke26 (npm) (malicious package)
- [MAL-2025-16604](https://insights.sbomify.com/MAL-2025-16604/): Malicious code in cascade_6wd35_l27dk_xylophone (npm) (malicious package)
- [MAL-2025-166039](https://insights.sbomify.com/MAL-2025-166039/): Malicious code in slamet-poke25 (npm) (malicious package)
- [MAL-2025-166038](https://insights.sbomify.com/MAL-2025-166038/): Malicious code in slamet-poke24 (npm) (malicious package)
- [MAL-2025-166037](https://insights.sbomify.com/MAL-2025-166037/): Malicious code in slamet-poke23 (npm) (malicious package)
- [MAL-2025-166036](https://insights.sbomify.com/MAL-2025-166036/): Malicious code in slamet-poke22 (npm) (malicious package)
- [MAL-2025-166035](https://insights.sbomify.com/MAL-2025-166035/): Malicious code in slamet-poke21 (npm) (malicious package)
- [MAL-2025-166034](https://insights.sbomify.com/MAL-2025-166034/): Malicious code in slamet-poke20 (npm) (malicious package)
- [MAL-2025-166033](https://insights.sbomify.com/MAL-2025-166033/): Malicious code in slamet-poke2 (npm) (malicious package)
- [MAL-2025-166032](https://insights.sbomify.com/MAL-2025-166032/): Malicious code in slamet-poke19 (npm) (malicious package)
- [MAL-2025-166031](https://insights.sbomify.com/MAL-2025-166031/): Malicious code in slamet-poke18 (npm) (malicious package)
- [MAL-2025-166030](https://insights.sbomify.com/MAL-2025-166030/): Malicious code in slamet-poke17 (npm) (malicious package)
- [MAL-2025-16603](https://insights.sbomify.com/MAL-2025-16603/): Malicious code in cascade_51cts_vwepo_ivy (npm) (malicious package)
- [MAL-2025-166029](https://insights.sbomify.com/MAL-2025-166029/): Malicious code in slamet-poke16 (npm) (malicious package)
- [MAL-2025-166028](https://insights.sbomify.com/MAL-2025-166028/): Malicious code in slamet-poke15 (npm) (malicious package)
- [MAL-2025-166027](https://insights.sbomify.com/MAL-2025-166027/): Malicious code in slamet-poke14 (npm) (malicious package)
- [MAL-2025-166026](https://insights.sbomify.com/MAL-2025-166026/): Malicious code in slamet-poke13 (npm) (malicious package)
- [MAL-2025-166025](https://insights.sbomify.com/MAL-2025-166025/): Malicious code in slamet-poke120 (npm) (malicious package)
- [MAL-2025-166024](https://insights.sbomify.com/MAL-2025-166024/): Malicious code in slamet-poke12 (npm) (malicious package)
- [MAL-2025-166023](https://insights.sbomify.com/MAL-2025-166023/): Malicious code in slamet-poke119 (npm) (malicious package)
- [MAL-2025-166022](https://insights.sbomify.com/MAL-2025-166022/): Malicious code in slamet-poke118 (npm) (malicious package)
- [MAL-2025-166021](https://insights.sbomify.com/MAL-2025-166021/): Malicious code in slamet-poke117 (npm) (malicious package)
- [MAL-2025-166020](https://insights.sbomify.com/MAL-2025-166020/): Malicious code in slamet-poke116 (npm) (malicious package)
- [MAL-2025-16602](https://insights.sbomify.com/MAL-2025-16602/): Malicious code in cascade_4kz3e_ruhct_indigo (npm) (malicious package)
- [MAL-2025-166019](https://insights.sbomify.com/MAL-2025-166019/): Malicious code in slamet-poke115 (npm) (malicious package)
- [MAL-2025-166018](https://insights.sbomify.com/MAL-2025-166018/): Malicious code in slamet-poke114 (npm) (malicious package)
- [MAL-2025-166017](https://insights.sbomify.com/MAL-2025-166017/): Malicious code in slamet-poke113 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1198/