# Vulnerabilities published in 2025


- [MAL-2025-89586](https://insights.sbomify.com/MAL-2025-89586/): Malicious code in putra-miemee55-miaww (npm) (malicious package)
- [MAL-2025-89585](https://insights.sbomify.com/MAL-2025-89585/): Malicious code in putra-mieayam82-riris (npm) (malicious package)
- [MAL-2025-89584](https://insights.sbomify.com/MAL-2025-89584/): Malicious code in putra-mieayam78-riris (npm) (malicious package)
- [MAL-2025-89583](https://insights.sbomify.com/MAL-2025-89583/): Malicious code in putra-mie48-riris (npm) (malicious package)
- [MAL-2025-89582](https://insights.sbomify.com/MAL-2025-89582/): Malicious code in putra-martabak7-riris (npm) (malicious package)
- [MAL-2025-89581](https://insights.sbomify.com/MAL-2025-89581/): Malicious code in putra-martabak47-apidev (npm) (malicious package)
- [MAL-2025-89580](https://insights.sbomify.com/MAL-2025-89580/): Malicious code in putra-martabak33-riris (npm) (malicious package)
- [MAL-2025-8958](https://insights.sbomify.com/MAL-2025-8958/): Malicious code in @malware-test-state-tides-miffy-buroo/test-mlw3-state-tides-miffy-buroo (npm) (malicious package)
- [MAL-2025-89579](https://insights.sbomify.com/MAL-2025-89579/): Malicious code in putra-lepet100-riris (npm) (malicious package)
- [MAL-2025-89578](https://insights.sbomify.com/MAL-2025-89578/): Malicious code in putra-lengko77-kyuki (npm) (malicious package)
- [MAL-2025-89577](https://insights.sbomify.com/MAL-2025-89577/): Malicious code in putra-lapis42-riris (npm) (malicious package)
- [MAL-2025-89576](https://insights.sbomify.com/MAL-2025-89576/): Malicious code in putra-kue96-apidev (npm) (malicious package)
- [MAL-2025-89575](https://insights.sbomify.com/MAL-2025-89575/): Malicious code in putra-kue80-miaww (npm) (malicious package)
- [MAL-2025-89574](https://insights.sbomify.com/MAL-2025-89574/): Malicious code in putra-kolak39-riris (npm) (malicious package)
- [MAL-2025-89573](https://insights.sbomify.com/MAL-2025-89573/): Malicious code in putra-kolak10-riris (npm) (malicious package)
- [MAL-2025-89572](https://insights.sbomify.com/MAL-2025-89572/): Malicious code in putra-klipo90-riris (npm) (malicious package)
- [MAL-2025-89571](https://insights.sbomify.com/MAL-2025-89571/): Malicious code in putra-klentik93-miaww (npm) (malicious package)
- [MAL-2025-89570](https://insights.sbomify.com/MAL-2025-89570/): Malicious code in putra-klentik65-riris (npm) (malicious package)
- [MAL-2025-8957](https://insights.sbomify.com/MAL-2025-8957/): Malicious code in @malware-test-stall-knish-cooky-muted/test-mlw3-stall-knish-cooky-muted (npm) (malicious package)
- [MAL-2025-89569](https://insights.sbomify.com/MAL-2025-89569/): Malicious code in putra-klanting94-riris (npm) (malicious package)
- [MAL-2025-89568](https://insights.sbomify.com/MAL-2025-89568/): Malicious code in putra-ketoprak78-miaww (npm) (malicious package)
- [MAL-2025-89567](https://insights.sbomify.com/MAL-2025-89567/): Malicious code in putra-keripik76-apidev (npm) (malicious package)
- [MAL-2025-89566](https://insights.sbomify.com/MAL-2025-89566/): Malicious code in putra-keripik47-miaww (npm) (malicious package)
- [MAL-2025-89565](https://insights.sbomify.com/MAL-2025-89565/): Malicious code in putra-keripik36-riris (npm) (malicious package)
- [MAL-2025-89564](https://insights.sbomify.com/MAL-2025-89564/): Malicious code in putra-keripik27-miaww (npm) (malicious package)
- [MAL-2025-89563](https://insights.sbomify.com/MAL-2025-89563/): Malicious code in putra-jus76-riris (npm) (malicious package)
- [MAL-2025-89562](https://insights.sbomify.com/MAL-2025-89562/): Malicious code in putra-jus73-miaww (npm) (malicious package)
- [MAL-2025-89561](https://insights.sbomify.com/MAL-2025-89561/): Malicious code in putra-jengkol82-riris (npm) (malicious package)
- [MAL-2025-89560](https://insights.sbomify.com/MAL-2025-89560/): Malicious code in putra-jamblang96-kyuki (npm) (malicious package)
- [MAL-2025-8956](https://insights.sbomify.com/MAL-2025-8956/): Malicious code in @malware-test-stack-scend-panes-misos/test-mlw3-stack-scend-panes-misos (npm) (malicious package)
- [MAL-2025-89559](https://insights.sbomify.com/MAL-2025-89559/): Malicious code in putra-gulai98-riris (npm) (malicious package)
- [MAL-2025-89558](https://insights.sbomify.com/MAL-2025-89558/): Malicious code in putra-gorengan81-riris (npm) (malicious package)
- [MAL-2025-89557](https://insights.sbomify.com/MAL-2025-89557/): Malicious code in putra-getas48-miaww (npm) (malicious package)
- [MAL-2025-89556](https://insights.sbomify.com/MAL-2025-89556/): Malicious code in putra-gaplek23-riris (npm) (malicious package)
- [MAL-2025-89555](https://insights.sbomify.com/MAL-2025-89555/): Malicious code in putra-donat8-apidev (npm) (malicious package)
- [MAL-2025-89554](https://insights.sbomify.com/MAL-2025-89554/): Malicious code in putra-donat53-riris (npm) (malicious package)
- [MAL-2025-89553](https://insights.sbomify.com/MAL-2025-89553/): Malicious code in putra-dodol90-riris (npm) (malicious package)
- [MAL-2025-89552](https://insights.sbomify.com/MAL-2025-89552/): Malicious code in putra-bika38-miaww (npm) (malicious package)
- [MAL-2025-89551](https://insights.sbomify.com/MAL-2025-89551/): Malicious code in putra-bika1-riris (npm) (malicious package)
- [MAL-2025-89550](https://insights.sbomify.com/MAL-2025-89550/): Malicious code in putra-bakwan62-miaww (npm) (malicious package)
- [MAL-2025-8955](https://insights.sbomify.com/MAL-2025-8955/): Malicious code in @malware-test-squat-nerds-bosun-nacho/test-mlw3-squat-nerds-bosun-nacho (npm) (malicious package)
- [MAL-2025-89549](https://insights.sbomify.com/MAL-2025-89549/): Malicious code in putra-bakwan48-miaww (npm) (malicious package)
- [MAL-2025-89548](https://insights.sbomify.com/MAL-2025-89548/): Malicious code in putra-bakso80-riris (npm) (malicious package)
- [MAL-2025-89547](https://insights.sbomify.com/MAL-2025-89547/): Malicious code in putra-bakso23-riris (npm) (malicious package)
- [MAL-2025-89546](https://insights.sbomify.com/MAL-2025-89546/): Malicious code in putra-asinan12-riris (npm) (malicious package)
- [MAL-2025-89545](https://insights.sbomify.com/MAL-2025-89545/): Malicious code in pure_rook_z3n (npm) (malicious package)
- [MAL-2025-89544](https://insights.sbomify.com/MAL-2025-89544/): Malicious code in pure_lungfish_z3n (npm) (malicious package)
- [MAL-2025-89543](https://insights.sbomify.com/MAL-2025-89543/): Malicious code in public_lynx_z3n (npm) (malicious package)
- [MAL-2025-89542](https://insights.sbomify.com/MAL-2025-89542/): Malicious code in psychiatric_zebra_z3n (npm) (malicious package)
- [MAL-2025-89541](https://insights.sbomify.com/MAL-2025-89541/): Malicious code in psychiatric_turkey_z3n (npm) (malicious package)
- [MAL-2025-89540](https://insights.sbomify.com/MAL-2025-89540/): Malicious code in psychiatric_smelt_z3n (npm) (malicious package)
- [MAL-2025-8954](https://insights.sbomify.com/MAL-2025-8954/): Malicious code in @malware-test-sprod-label/test-mlw3-sprod-label (npm) (malicious package)
- [MAL-2025-89539](https://insights.sbomify.com/MAL-2025-89539/): Malicious code in proud_vicuna_z3n (npm) (malicious package)
- [MAL-2025-89538](https://insights.sbomify.com/MAL-2025-89538/): Malicious code in proud_pinniped_z3n (npm) (malicious package)
- [MAL-2025-89537](https://insights.sbomify.com/MAL-2025-89537/): Malicious code in protestant_slug_z3n (npm) (malicious package)
- [MAL-2025-89536](https://insights.sbomify.com/MAL-2025-89536/): Malicious code in protestant_quail_z3n (npm) (malicious package)
- [MAL-2025-89535](https://insights.sbomify.com/MAL-2025-89535/): Malicious code in protective_halibut_z3n (npm) (malicious package)
- [MAL-2025-89534](https://insights.sbomify.com/MAL-2025-89534/): Malicious code in protective_antlion_z3n (npm) (malicious package)
- [MAL-2025-89533](https://insights.sbomify.com/MAL-2025-89533/): Malicious code in prospective_sparrow_z3n (npm) (malicious package)
- [MAL-2025-89532](https://insights.sbomify.com/MAL-2025-89532/): Malicious code in prospective_marten_z3n (npm) (malicious package)
- [MAL-2025-89531](https://insights.sbomify.com/MAL-2025-89531/): Malicious code in proposed_sailfish_z3n (npm) (malicious package)
- [MAL-2025-89530](https://insights.sbomify.com/MAL-2025-89530/): Malicious code in proposed_goose_z3n (npm) (malicious package)
- [MAL-2025-8953](https://insights.sbomify.com/MAL-2025-8953/): Malicious code in @malware-test-spots-acton-curns-zippy/test-mlw3-spots-acton-curns-zippy (npm) (malicious package)
- [MAL-2025-89529](https://insights.sbomify.com/MAL-2025-89529/): Malicious code in proper_python_z3n (npm) (malicious package)
- [MAL-2025-89528](https://insights.sbomify.com/MAL-2025-89528/): Malicious code in prominent_aardwolf_z3n (npm) (malicious package)
- [MAL-2025-89527](https://insights.sbomify.com/MAL-2025-89527/): Malicious code in progressive_wallaby_z3n (npm) (malicious package)
- [MAL-2025-89526](https://insights.sbomify.com/MAL-2025-89526/): Malicious code in profound_salamander_z3n (npm) (malicious package)
- [MAL-2025-89525](https://insights.sbomify.com/MAL-2025-89525/): Malicious code in profound_fish_z3n (npm) (malicious package)
- [MAL-2025-89524](https://insights.sbomify.com/MAL-2025-89524/): Malicious code in profitable_lion_z3n (npm) (malicious package)
- [MAL-2025-89523](https://insights.sbomify.com/MAL-2025-89523/): Malicious code in profitable_guppy_z3n (npm) (malicious package)
- [MAL-2025-89522](https://insights.sbomify.com/MAL-2025-89522/): Malicious code in productive_vulture_z3n (npm) (malicious package)
- [MAL-2025-89521](https://insights.sbomify.com/MAL-2025-89521/): Malicious code in probable_dolphin_z3n (npm) (malicious package)
- [MAL-2025-89520](https://insights.sbomify.com/MAL-2025-89520/): Malicious code in prior_stork_z3n (npm) (malicious package)
- [MAL-2025-8952](https://insights.sbomify.com/MAL-2025-8952/): Malicious code in @malware-test-spook-edges-corse-decoy/test-mlw3-spook-edges-corse-decoy (npm) (malicious package)
- [MAL-2025-89519](https://insights.sbomify.com/MAL-2025-89519/): Malicious code in prior_leopard_z3n (npm) (malicious package)
- [MAL-2025-89518](https://insights.sbomify.com/MAL-2025-89518/): Malicious code in printed_squirrel_z3n (npm) (malicious package)
- [MAL-2025-89517](https://insights.sbomify.com/MAL-2025-89517/): Malicious code in primitive_tarsier_z3n (npm) (malicious package)
- [MAL-2025-89516](https://insights.sbomify.com/MAL-2025-89516/): Malicious code in primitive_tapir_z3n (npm) (malicious package)
- [MAL-2025-89515](https://insights.sbomify.com/MAL-2025-89515/): Malicious code in primitive_herring_z3n (npm) (malicious package)
- [MAL-2025-89514](https://insights.sbomify.com/MAL-2025-89514/): Malicious code in prime_planarian_z3n (npm) (malicious package)
- [MAL-2025-89513](https://insights.sbomify.com/MAL-2025-89513/): Malicious code in prickly_muskox_z3n (npm) (malicious package)
- [MAL-2025-89512](https://insights.sbomify.com/MAL-2025-89512/): Malicious code in prickly_mackerel_z3n (npm) (malicious package)
- [MAL-2025-89511](https://insights.sbomify.com/MAL-2025-89511/): Malicious code in previous_planarian_z3n (npm) (malicious package)
- [MAL-2025-89510](https://insights.sbomify.com/MAL-2025-89510/): Malicious code in previous_anaconda_z3n (npm) (malicious package)
- [MAL-2025-8951](https://insights.sbomify.com/MAL-2025-8951/): Malicious code in @malware-test-spine-aecia/test-mlw3-spine-aecia (npm) (malicious package)
- [MAL-2025-89509](https://insights.sbomify.com/MAL-2025-89509/): Malicious code in pretty_tuna_z3n (npm) (malicious package)
- [MAL-2025-89508](https://insights.sbomify.com/MAL-2025-89508/): Malicious code in pretty_swift_z3n (npm) (malicious package)
- [MAL-2025-89507](https://insights.sbomify.com/MAL-2025-89507/): Malicious code in pretty_moth_z3n (npm) (malicious package)
- [MAL-2025-89506](https://insights.sbomify.com/MAL-2025-89506/): Malicious code in presidential_woodpecker_z3n (npm) (malicious package)
- [MAL-2025-89505](https://insights.sbomify.com/MAL-2025-89505/): Malicious code in present_lynx_z3n (npm) (malicious package)
- [MAL-2025-89504](https://insights.sbomify.com/MAL-2025-89504/): Malicious code in prepared_opossum_z3n (npm) (malicious package)
- [MAL-2025-89503](https://insights.sbomify.com/MAL-2025-89503/): Malicious code in prepared_harrier_z3n (npm) (malicious package)
- [MAL-2025-89502](https://insights.sbomify.com/MAL-2025-89502/): Malicious code in premier_stoat_z3n (npm) (malicious package)
- [MAL-2025-89501](https://insights.sbomify.com/MAL-2025-89501/): Malicious code in premier_squirrel_z3n (npm) (malicious package)
- [MAL-2025-89500](https://insights.sbomify.com/MAL-2025-89500/): Malicious code in premier_scorpion_z3n (npm) (malicious package)
- [MAL-2025-8950](https://insights.sbomify.com/MAL-2025-8950/): Malicious code in @malware-test-spilt-bajri-lownd-junto/test-mlw3-spilt-bajri-lownd-junto (npm) (malicious package)
- [MAL-2025-895](https://insights.sbomify.com/MAL-2025-895/): Malicious code in Mircоsoft.EntetyFrameworkCore (NuGet) (malicious package)
- [MAL-2025-89499](https://insights.sbomify.com/MAL-2025-89499/): Malicious code in preliminary_sawfish_z3n (npm) (malicious package)
- [MAL-2025-89498](https://insights.sbomify.com/MAL-2025-89498/): Malicious code in pregnant_condor_z3n (npm) (malicious package)
- [MAL-2025-89497](https://insights.sbomify.com/MAL-2025-89497/): Malicious code in preferred_unicorn_z3n (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/120/