# Vulnerabilities published in 2025 - [MAL-2025-166016](https://insights.sbomify.com/MAL-2025-166016/): Malicious code in slamet-poke112 (npm) (malicious package) - [MAL-2025-166015](https://insights.sbomify.com/MAL-2025-166015/): Malicious code in slamet-poke111 (npm) (malicious package) - [MAL-2025-166014](https://insights.sbomify.com/MAL-2025-166014/): Malicious code in slamet-poke110 (npm) (malicious package) - [MAL-2025-166013](https://insights.sbomify.com/MAL-2025-166013/): Malicious code in slamet-poke11 (npm) (malicious package) - [MAL-2025-166012](https://insights.sbomify.com/MAL-2025-166012/): Malicious code in slamet-poke109 (npm) (malicious package) - [MAL-2025-166011](https://insights.sbomify.com/MAL-2025-166011/): Malicious code in slamet-poke108 (npm) (malicious package) - [MAL-2025-166010](https://insights.sbomify.com/MAL-2025-166010/): Malicious code in slamet-poke107 (npm) (malicious package) - [MAL-2025-16601](https://insights.sbomify.com/MAL-2025-16601/): Malicious code in cascade_3hq0h_z8fyr_quasar (npm) (malicious package) - [MAL-2025-166009](https://insights.sbomify.com/MAL-2025-166009/): Malicious code in slamet-poke106 (npm) (malicious package) - [MAL-2025-166008](https://insights.sbomify.com/MAL-2025-166008/): Malicious code in slamet-poke105 (npm) (malicious package) - [MAL-2025-166007](https://insights.sbomify.com/MAL-2025-166007/): Malicious code in slamet-poke104 (npm) (malicious package) - [MAL-2025-166006](https://insights.sbomify.com/MAL-2025-166006/): Malicious code in slamet-poke103 (npm) (malicious package) - [MAL-2025-166005](https://insights.sbomify.com/MAL-2025-166005/): Malicious code in slamet-poke102 (npm) (malicious package) - [MAL-2025-166004](https://insights.sbomify.com/MAL-2025-166004/): Malicious code in slamet-poke101 (npm) (malicious package) - [MAL-2025-166003](https://insights.sbomify.com/MAL-2025-166003/): Malicious code in slamet-poke100 (npm) (malicious package) - [MAL-2025-166002](https://insights.sbomify.com/MAL-2025-166002/): Malicious code in slamet-poke10 (npm) (malicious package) - [MAL-2025-166001](https://insights.sbomify.com/MAL-2025-166001/): Malicious code in slamet-poke1 (npm) (malicious package) - [MAL-2025-166000](https://insights.sbomify.com/MAL-2025-166000/): Malicious code in slabuni-nibia-lubi (npm) (malicious package) - [MAL-2025-16600](https://insights.sbomify.com/MAL-2025-16600/): Malicious code in cascade-zephyr-hri941-project (npm) (malicious package) - [MAL-2025-1660](https://insights.sbomify.com/MAL-2025-1660/): Malicious code in pinterest-api-quickstart (npm) (malicious package) - [MAL-2025-166](https://insights.sbomify.com/MAL-2025-166/): Malicious code in bbm-enterprise (npm) (malicious package) - [MAL-2025-165999](https://insights.sbomify.com/MAL-2025-165999/): Malicious code in siregar-poke9 (npm) (malicious package) - [MAL-2025-165998](https://insights.sbomify.com/MAL-2025-165998/): Malicious code in siregar-poke8 (npm) (malicious package) - [MAL-2025-165997](https://insights.sbomify.com/MAL-2025-165997/): Malicious code in siregar-poke75 (npm) (malicious package) - [MAL-2025-165996](https://insights.sbomify.com/MAL-2025-165996/): Malicious code in siregar-poke74 (npm) (malicious package) - [MAL-2025-165995](https://insights.sbomify.com/MAL-2025-165995/): Malicious code in siregar-poke73 (npm) (malicious package) - [MAL-2025-165994](https://insights.sbomify.com/MAL-2025-165994/): Malicious code in siregar-poke72 (npm) (malicious package) - [MAL-2025-165993](https://insights.sbomify.com/MAL-2025-165993/): Malicious code in siregar-poke71 (npm) (malicious package) - [MAL-2025-165992](https://insights.sbomify.com/MAL-2025-165992/): Malicious code in siregar-poke70 (npm) (malicious package) - [MAL-2025-165991](https://insights.sbomify.com/MAL-2025-165991/): Malicious code in siregar-poke7 (npm) (malicious package) - [MAL-2025-165990](https://insights.sbomify.com/MAL-2025-165990/): Malicious code in siregar-poke69 (npm) (malicious package) - [MAL-2025-16599](https://insights.sbomify.com/MAL-2025-16599/): Malicious code in cascade-zega1-tr62q-haven-project (npm) (malicious package) - [MAL-2025-165989](https://insights.sbomify.com/MAL-2025-165989/): Malicious code in siregar-poke68 (npm) (malicious package) - [MAL-2025-165988](https://insights.sbomify.com/MAL-2025-165988/): Malicious code in siregar-poke67 (npm) (malicious package) - [MAL-2025-165987](https://insights.sbomify.com/MAL-2025-165987/): Malicious code in siregar-poke66 (npm) (malicious package) - [MAL-2025-165986](https://insights.sbomify.com/MAL-2025-165986/): Malicious code in siregar-poke65 (npm) (malicious package) - [MAL-2025-165985](https://insights.sbomify.com/MAL-2025-165985/): Malicious code in siregar-poke64 (npm) (malicious package) - [MAL-2025-165984](https://insights.sbomify.com/MAL-2025-165984/): Malicious code in siregar-poke63 (npm) (malicious package) - [MAL-2025-165983](https://insights.sbomify.com/MAL-2025-165983/): Malicious code in siregar-poke62 (npm) (malicious package) - [MAL-2025-165982](https://insights.sbomify.com/MAL-2025-165982/): Malicious code in siregar-poke61 (npm) (malicious package) - [MAL-2025-165981](https://insights.sbomify.com/MAL-2025-165981/): Malicious code in siregar-poke60 (npm) (malicious package) - [MAL-2025-165980](https://insights.sbomify.com/MAL-2025-165980/): Malicious code in siregar-poke6 (npm) (malicious package) - [MAL-2025-16598](https://insights.sbomify.com/MAL-2025-16598/): Malicious code in cascade-yearn-mhs812-project (npm) (malicious package) - [MAL-2025-165979](https://insights.sbomify.com/MAL-2025-165979/): Malicious code in siregar-poke59 (npm) (malicious package) - [MAL-2025-165978](https://insights.sbomify.com/MAL-2025-165978/): Malicious code in siregar-poke58 (npm) (malicious package) - [MAL-2025-165977](https://insights.sbomify.com/MAL-2025-165977/): Malicious code in siregar-poke57 (npm) (malicious package) - [MAL-2025-165976](https://insights.sbomify.com/MAL-2025-165976/): Malicious code in siregar-poke56 (npm) (malicious package) - [MAL-2025-165975](https://insights.sbomify.com/MAL-2025-165975/): Malicious code in siregar-poke55 (npm) (malicious package) - [MAL-2025-165974](https://insights.sbomify.com/MAL-2025-165974/): Malicious code in siregar-poke54 (npm) (malicious package) - [MAL-2025-165973](https://insights.sbomify.com/MAL-2025-165973/): Malicious code in siregar-poke53 (npm) (malicious package) - [MAL-2025-165972](https://insights.sbomify.com/MAL-2025-165972/): Malicious code in siregar-poke52 (npm) (malicious package) - [MAL-2025-165971](https://insights.sbomify.com/MAL-2025-165971/): Malicious code in siregar-poke51 (npm) (malicious package) - [MAL-2025-165970](https://insights.sbomify.com/MAL-2025-165970/): Malicious code in siregar-poke50 (npm) (malicious package) - [MAL-2025-16597](https://insights.sbomify.com/MAL-2025-16597/): Malicious code in cascade-valley-uli453-project (npm) (malicious package) - [MAL-2025-165969](https://insights.sbomify.com/MAL-2025-165969/): Malicious code in siregar-poke5 (npm) (malicious package) - [MAL-2025-165968](https://insights.sbomify.com/MAL-2025-165968/): Malicious code in siregar-poke49 (npm) (malicious package) - [MAL-2025-165967](https://insights.sbomify.com/MAL-2025-165967/): Malicious code in siregar-poke48 (npm) (malicious package) - [MAL-2025-165966](https://insights.sbomify.com/MAL-2025-165966/): Malicious code in siregar-poke47 (npm) (malicious package) - [MAL-2025-165965](https://insights.sbomify.com/MAL-2025-165965/): Malicious code in siregar-poke46 (npm) (malicious package) - [MAL-2025-165964](https://insights.sbomify.com/MAL-2025-165964/): Malicious code in siregar-poke45 (npm) (malicious package) - [MAL-2025-165963](https://insights.sbomify.com/MAL-2025-165963/): Malicious code in siregar-poke44 (npm) (malicious package) - [MAL-2025-165962](https://insights.sbomify.com/MAL-2025-165962/): Malicious code in siregar-poke43 (npm) (malicious package) - [MAL-2025-165961](https://insights.sbomify.com/MAL-2025-165961/): Malicious code in siregar-poke42 (npm) (malicious package) - [MAL-2025-165960](https://insights.sbomify.com/MAL-2025-165960/): Malicious code in siregar-poke41 (npm) (malicious package) - [MAL-2025-16596](https://insights.sbomify.com/MAL-2025-16596/): Malicious code in cascade-undertow-qes338-project (npm) (malicious package) - [MAL-2025-165959](https://insights.sbomify.com/MAL-2025-165959/): Malicious code in siregar-poke40 (npm) (malicious package) - [MAL-2025-165958](https://insights.sbomify.com/MAL-2025-165958/): Malicious code in siregar-poke4 (npm) (malicious package) - [MAL-2025-165957](https://insights.sbomify.com/MAL-2025-165957/): Malicious code in siregar-poke39 (npm) (malicious package) - [MAL-2025-165956](https://insights.sbomify.com/MAL-2025-165956/): Malicious code in siregar-poke38 (npm) (malicious package) - [MAL-2025-165955](https://insights.sbomify.com/MAL-2025-165955/): Malicious code in siregar-poke37 (npm) (malicious package) - [MAL-2025-165954](https://insights.sbomify.com/MAL-2025-165954/): Malicious code in siregar-poke36 (npm) (malicious package) - [MAL-2025-165953](https://insights.sbomify.com/MAL-2025-165953/): Malicious code in siregar-poke35 (npm) (malicious package) - [MAL-2025-165952](https://insights.sbomify.com/MAL-2025-165952/): Malicious code in siregar-poke34 (npm) (malicious package) - [MAL-2025-165951](https://insights.sbomify.com/MAL-2025-165951/): Malicious code in siregar-poke33 (npm) (malicious package) - [MAL-2025-165950](https://insights.sbomify.com/MAL-2025-165950/): Malicious code in siregar-poke32 (npm) (malicious package) - [MAL-2025-16595](https://insights.sbomify.com/MAL-2025-16595/): Malicious code in cascade-thistle-bmg827-project (npm) (malicious package) - [MAL-2025-165949](https://insights.sbomify.com/MAL-2025-165949/): Malicious code in siregar-poke31 (npm) (malicious package) - [MAL-2025-165948](https://insights.sbomify.com/MAL-2025-165948/): Malicious code in siregar-poke30 (npm) (malicious package) - [MAL-2025-165947](https://insights.sbomify.com/MAL-2025-165947/): Malicious code in siregar-poke3 (npm) (malicious package) - [MAL-2025-165946](https://insights.sbomify.com/MAL-2025-165946/): Malicious code in siregar-poke29 (npm) (malicious package) - [MAL-2025-165945](https://insights.sbomify.com/MAL-2025-165945/): Malicious code in siregar-poke28 (npm) (malicious package) - [MAL-2025-165944](https://insights.sbomify.com/MAL-2025-165944/): Malicious code in siregar-poke27 (npm) (malicious package) - [MAL-2025-165943](https://insights.sbomify.com/MAL-2025-165943/): Malicious code in siregar-poke26 (npm) (malicious package) - [MAL-2025-165942](https://insights.sbomify.com/MAL-2025-165942/): Malicious code in siregar-poke25 (npm) (malicious package) - [MAL-2025-165941](https://insights.sbomify.com/MAL-2025-165941/): Malicious code in siregar-poke24 (npm) (malicious package) - [MAL-2025-165940](https://insights.sbomify.com/MAL-2025-165940/): Malicious code in siregar-poke23 (npm) (malicious package) - [MAL-2025-16594](https://insights.sbomify.com/MAL-2025-16594/): Malicious code in cascade-te0bd-093di-kale-project (npm) (malicious package) - [MAL-2025-165939](https://insights.sbomify.com/MAL-2025-165939/): Malicious code in siregar-poke22 (npm) (malicious package) - [MAL-2025-165938](https://insights.sbomify.com/MAL-2025-165938/): Malicious code in siregar-poke21 (npm) (malicious package) - [MAL-2025-165937](https://insights.sbomify.com/MAL-2025-165937/): Malicious code in siregar-poke20 (npm) (malicious package) - [MAL-2025-165936](https://insights.sbomify.com/MAL-2025-165936/): Malicious code in siregar-poke2 (npm) (malicious package) - [MAL-2025-165935](https://insights.sbomify.com/MAL-2025-165935/): Malicious code in siregar-poke19 (npm) (malicious package) - [MAL-2025-165934](https://insights.sbomify.com/MAL-2025-165934/): Malicious code in siregar-poke18 (npm) (malicious package) - [MAL-2025-165933](https://insights.sbomify.com/MAL-2025-165933/): Malicious code in siregar-poke17 (npm) (malicious package) - [MAL-2025-165932](https://insights.sbomify.com/MAL-2025-165932/): Malicious code in siregar-poke16 (npm) (malicious package) - [MAL-2025-165931](https://insights.sbomify.com/MAL-2025-165931/): Malicious code in siregar-poke15 (npm) (malicious package) - [MAL-2025-165930](https://insights.sbomify.com/MAL-2025-165930/): Malicious code in siregar-poke14 (npm) (malicious package) - [MAL-2025-16593](https://insights.sbomify.com/MAL-2025-16593/): Malicious code in cascade-star-cla341-project (npm) (malicious package) - [MAL-2025-165929](https://insights.sbomify.com/MAL-2025-165929/): Malicious code in siregar-poke13 (npm) (malicious package) - [MAL-2025-165928](https://insights.sbomify.com/MAL-2025-165928/): Malicious code in siregar-poke12 (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1199/