# Vulnerabilities published in 2025


- [MAL-2025-165927](https://insights.sbomify.com/MAL-2025-165927/): Malicious code in siregar-poke11 (npm) (malicious package)
- [MAL-2025-165926](https://insights.sbomify.com/MAL-2025-165926/): Malicious code in siregar-poke10 (npm) (malicious package)
- [MAL-2025-165925](https://insights.sbomify.com/MAL-2025-165925/): Malicious code in siregar-poke1 (npm) (malicious package)
- [MAL-2025-165924](https://insights.sbomify.com/MAL-2025-165924/): Malicious code in siddheshtea (npm) (malicious package)
- [MAL-2025-165923](https://insights.sbomify.com/MAL-2025-165923/): Malicious code in shilang-poke99 (npm) (malicious package)
- [MAL-2025-165922](https://insights.sbomify.com/MAL-2025-165922/): Malicious code in shilang-poke98 (npm) (malicious package)
- [MAL-2025-165921](https://insights.sbomify.com/MAL-2025-165921/): Malicious code in shilang-poke97 (npm) (malicious package)
- [MAL-2025-165920](https://insights.sbomify.com/MAL-2025-165920/): Malicious code in shilang-poke96 (npm) (malicious package)
- [MAL-2025-16592](https://insights.sbomify.com/MAL-2025-16592/): Malicious code in cascade-quasar-iwy892-project (npm) (malicious package)
- [MAL-2025-165919](https://insights.sbomify.com/MAL-2025-165919/): Malicious code in shilang-poke95 (npm) (malicious package)
- [MAL-2025-165918](https://insights.sbomify.com/MAL-2025-165918/): Malicious code in shilang-poke94 (npm) (malicious package)
- [MAL-2025-165917](https://insights.sbomify.com/MAL-2025-165917/): Malicious code in shilang-poke93 (npm) (malicious package)
- [MAL-2025-165916](https://insights.sbomify.com/MAL-2025-165916/): Malicious code in shilang-poke92 (npm) (malicious package)
- [MAL-2025-165915](https://insights.sbomify.com/MAL-2025-165915/): Malicious code in shilang-poke91 (npm) (malicious package)
- [MAL-2025-165914](https://insights.sbomify.com/MAL-2025-165914/): Malicious code in shilang-poke90 (npm) (malicious package)
- [MAL-2025-165913](https://insights.sbomify.com/MAL-2025-165913/): Malicious code in shilang-poke9 (npm) (malicious package)
- [MAL-2025-165912](https://insights.sbomify.com/MAL-2025-165912/): Malicious code in shilang-poke89 (npm) (malicious package)
- [MAL-2025-165911](https://insights.sbomify.com/MAL-2025-165911/): Malicious code in shilang-poke88 (npm) (malicious package)
- [MAL-2025-165910](https://insights.sbomify.com/MAL-2025-165910/): Malicious code in shilang-poke87 (npm) (malicious package)
- [MAL-2025-16591](https://insights.sbomify.com/MAL-2025-16591/): Malicious code in cascade-prairie-hlw298-project (npm) (malicious package)
- [MAL-2025-165909](https://insights.sbomify.com/MAL-2025-165909/): Malicious code in shilang-poke86 (npm) (malicious package)
- [MAL-2025-165908](https://insights.sbomify.com/MAL-2025-165908/): Malicious code in shilang-poke85 (npm) (malicious package)
- [MAL-2025-165907](https://insights.sbomify.com/MAL-2025-165907/): Malicious code in shilang-poke84 (npm) (malicious package)
- [MAL-2025-165906](https://insights.sbomify.com/MAL-2025-165906/): Malicious code in shilang-poke83 (npm) (malicious package)
- [MAL-2025-165905](https://insights.sbomify.com/MAL-2025-165905/): Malicious code in shilang-poke82 (npm) (malicious package)
- [MAL-2025-165904](https://insights.sbomify.com/MAL-2025-165904/): Malicious code in shilang-poke81 (npm) (malicious package)
- [MAL-2025-165903](https://insights.sbomify.com/MAL-2025-165903/): Malicious code in shilang-poke80 (npm) (malicious package)
- [MAL-2025-165902](https://insights.sbomify.com/MAL-2025-165902/): Malicious code in shilang-poke8 (npm) (malicious package)
- [MAL-2025-165901](https://insights.sbomify.com/MAL-2025-165901/): Malicious code in shilang-poke79 (npm) (malicious package)
- [MAL-2025-165900](https://insights.sbomify.com/MAL-2025-165900/): Malicious code in shilang-poke78 (npm) (malicious package)
- [MAL-2025-16590](https://insights.sbomify.com/MAL-2025-16590/): Malicious code in cascade-paradise-axa363-project (npm) (malicious package)
- [MAL-2025-1659](https://insights.sbomify.com/MAL-2025-1659/): Malicious code in com.google.xr.windowmirror (npm) (malicious package)
- [MAL-2025-165899](https://insights.sbomify.com/MAL-2025-165899/): Malicious code in shilang-poke77 (npm) (malicious package)
- [MAL-2025-165898](https://insights.sbomify.com/MAL-2025-165898/): Malicious code in shilang-poke76 (npm) (malicious package)
- [MAL-2025-165897](https://insights.sbomify.com/MAL-2025-165897/): Malicious code in shilang-poke75 (npm) (malicious package)
- [MAL-2025-165896](https://insights.sbomify.com/MAL-2025-165896/): Malicious code in shilang-poke74 (npm) (malicious package)
- [MAL-2025-165895](https://insights.sbomify.com/MAL-2025-165895/): Malicious code in shilang-poke73 (npm) (malicious package)
- [MAL-2025-165894](https://insights.sbomify.com/MAL-2025-165894/): Malicious code in shilang-poke72 (npm) (malicious package)
- [MAL-2025-165893](https://insights.sbomify.com/MAL-2025-165893/): Malicious code in shilang-poke71 (npm) (malicious package)
- [MAL-2025-165892](https://insights.sbomify.com/MAL-2025-165892/): Malicious code in shilang-poke70 (npm) (malicious package)
- [MAL-2025-165891](https://insights.sbomify.com/MAL-2025-165891/): Malicious code in shilang-poke7 (npm) (malicious package)
- [MAL-2025-165890](https://insights.sbomify.com/MAL-2025-165890/): Malicious code in shilang-poke69 (npm) (malicious package)
- [MAL-2025-16589](https://insights.sbomify.com/MAL-2025-16589/): Malicious code in cascade-moon-ufv550-project (npm) (malicious package)
- [MAL-2025-165889](https://insights.sbomify.com/MAL-2025-165889/): Malicious code in shilang-poke68 (npm) (malicious package)
- [MAL-2025-165888](https://insights.sbomify.com/MAL-2025-165888/): Malicious code in shilang-poke67 (npm) (malicious package)
- [MAL-2025-165887](https://insights.sbomify.com/MAL-2025-165887/): Malicious code in shilang-poke66 (npm) (malicious package)
- [MAL-2025-165886](https://insights.sbomify.com/MAL-2025-165886/): Malicious code in shilang-poke65 (npm) (malicious package)
- [MAL-2025-165885](https://insights.sbomify.com/MAL-2025-165885/): Malicious code in shilang-poke64 (npm) (malicious package)
- [MAL-2025-165884](https://insights.sbomify.com/MAL-2025-165884/): Malicious code in shilang-poke63 (npm) (malicious package)
- [MAL-2025-165883](https://insights.sbomify.com/MAL-2025-165883/): Malicious code in shilang-poke62 (npm) (malicious package)
- [MAL-2025-165882](https://insights.sbomify.com/MAL-2025-165882/): Malicious code in shilang-poke61 (npm) (malicious package)
- [MAL-2025-165881](https://insights.sbomify.com/MAL-2025-165881/): Malicious code in shilang-poke60 (npm) (malicious package)
- [MAL-2025-165880](https://insights.sbomify.com/MAL-2025-165880/): Malicious code in shilang-poke6 (npm) (malicious package)
- [MAL-2025-16588](https://insights.sbomify.com/MAL-2025-16588/): Malicious code in cascade-meadow-brg887-project (npm) (malicious package)
- [MAL-2025-165879](https://insights.sbomify.com/MAL-2025-165879/): Malicious code in shilang-poke59 (npm) (malicious package)
- [MAL-2025-165878](https://insights.sbomify.com/MAL-2025-165878/): Malicious code in shilang-poke58 (npm) (malicious package)
- [MAL-2025-165877](https://insights.sbomify.com/MAL-2025-165877/): Malicious code in shilang-poke57 (npm) (malicious package)
- [MAL-2025-165876](https://insights.sbomify.com/MAL-2025-165876/): Malicious code in shilang-poke56 (npm) (malicious package)
- [MAL-2025-165875](https://insights.sbomify.com/MAL-2025-165875/): Malicious code in shilang-poke55 (npm) (malicious package)
- [MAL-2025-165874](https://insights.sbomify.com/MAL-2025-165874/): Malicious code in shilang-poke54 (npm) (malicious package)
- [MAL-2025-165873](https://insights.sbomify.com/MAL-2025-165873/): Malicious code in shilang-poke53 (npm) (malicious package)
- [MAL-2025-165872](https://insights.sbomify.com/MAL-2025-165872/): Malicious code in shilang-poke52 (npm) (malicious package)
- [MAL-2025-165871](https://insights.sbomify.com/MAL-2025-165871/): Malicious code in shilang-poke51 (npm) (malicious package)
- [MAL-2025-165870](https://insights.sbomify.com/MAL-2025-165870/): Malicious code in shilang-poke50 (npm) (malicious package)
- [MAL-2025-16587](https://insights.sbomify.com/MAL-2025-16587/): Malicious code in cascade-l7vqn-5zp4o-iris-project (npm) (malicious package)
- [MAL-2025-165869](https://insights.sbomify.com/MAL-2025-165869/): Malicious code in shilang-poke5 (npm) (malicious package)
- [MAL-2025-165868](https://insights.sbomify.com/MAL-2025-165868/): Malicious code in shilang-poke49 (npm) (malicious package)
- [MAL-2025-165867](https://insights.sbomify.com/MAL-2025-165867/): Malicious code in shilang-poke48 (npm) (malicious package)
- [MAL-2025-165866](https://insights.sbomify.com/MAL-2025-165866/): Malicious code in shilang-poke47 (npm) (malicious package)
- [MAL-2025-165865](https://insights.sbomify.com/MAL-2025-165865/): Malicious code in shilang-poke46 (npm) (malicious package)
- [MAL-2025-165864](https://insights.sbomify.com/MAL-2025-165864/): Malicious code in shilang-poke45 (npm) (malicious package)
- [MAL-2025-165863](https://insights.sbomify.com/MAL-2025-165863/): Malicious code in shilang-poke44 (npm) (malicious package)
- [MAL-2025-165862](https://insights.sbomify.com/MAL-2025-165862/): Malicious code in shilang-poke43 (npm) (malicious package)
- [MAL-2025-165861](https://insights.sbomify.com/MAL-2025-165861/): Malicious code in shilang-poke42 (npm) (malicious package)
- [MAL-2025-165860](https://insights.sbomify.com/MAL-2025-165860/): Malicious code in shilang-poke41 (npm) (malicious package)
- [MAL-2025-16586](https://insights.sbomify.com/MAL-2025-16586/): Malicious code in cascade-kaleidoscope-mze501-project (npm) (malicious package)
- [MAL-2025-165859](https://insights.sbomify.com/MAL-2025-165859/): Malicious code in shilang-poke40 (npm) (malicious package)
- [MAL-2025-165858](https://insights.sbomify.com/MAL-2025-165858/): Malicious code in shilang-poke4 (npm) (malicious package)
- [MAL-2025-165857](https://insights.sbomify.com/MAL-2025-165857/): Malicious code in shilang-poke39 (npm) (malicious package)
- [MAL-2025-165856](https://insights.sbomify.com/MAL-2025-165856/): Malicious code in shilang-poke38 (npm) (malicious package)
- [MAL-2025-165855](https://insights.sbomify.com/MAL-2025-165855/): Malicious code in shilang-poke37 (npm) (malicious package)
- [MAL-2025-165854](https://insights.sbomify.com/MAL-2025-165854/): Malicious code in shilang-poke36 (npm) (malicious package)
- [MAL-2025-165853](https://insights.sbomify.com/MAL-2025-165853/): Malicious code in shilang-poke35 (npm) (malicious package)
- [MAL-2025-165852](https://insights.sbomify.com/MAL-2025-165852/): Malicious code in shilang-poke34 (npm) (malicious package)
- [MAL-2025-165851](https://insights.sbomify.com/MAL-2025-165851/): Malicious code in shilang-poke33 (npm) (malicious package)
- [MAL-2025-165850](https://insights.sbomify.com/MAL-2025-165850/): Malicious code in shilang-poke32 (npm) (malicious package)
- [MAL-2025-16585](https://insights.sbomify.com/MAL-2025-16585/): Malicious code in cascade-jasmine-pst615-project (npm) (malicious package)
- [MAL-2025-165849](https://insights.sbomify.com/MAL-2025-165849/): Malicious code in shilang-poke31 (npm) (malicious package)
- [MAL-2025-165848](https://insights.sbomify.com/MAL-2025-165848/): Malicious code in shilang-poke30 (npm) (malicious package)
- [MAL-2025-165847](https://insights.sbomify.com/MAL-2025-165847/): Malicious code in shilang-poke3 (npm) (malicious package)
- [MAL-2025-165846](https://insights.sbomify.com/MAL-2025-165846/): Malicious code in shilang-poke29 (npm) (malicious package)
- [MAL-2025-165845](https://insights.sbomify.com/MAL-2025-165845/): Malicious code in shilang-poke28 (npm) (malicious package)
- [MAL-2025-165844](https://insights.sbomify.com/MAL-2025-165844/): Malicious code in shilang-poke27 (npm) (malicious package)
- [MAL-2025-165843](https://insights.sbomify.com/MAL-2025-165843/): Malicious code in shilang-poke26 (npm) (malicious package)
- [MAL-2025-165842](https://insights.sbomify.com/MAL-2025-165842/): Malicious code in shilang-poke25 (npm) (malicious package)
- [MAL-2025-165841](https://insights.sbomify.com/MAL-2025-165841/): Malicious code in shilang-poke24 (npm) (malicious package)
- [MAL-2025-165840](https://insights.sbomify.com/MAL-2025-165840/): Malicious code in shilang-poke23 (npm) (malicious package)
- [MAL-2025-16584](https://insights.sbomify.com/MAL-2025-16584/): Malicious code in cascade-infinity-ahh628-project (npm) (malicious package)
- [MAL-2025-165839](https://insights.sbomify.com/MAL-2025-165839/): Malicious code in shilang-poke22 (npm) (malicious package)
- [MAL-2025-165838](https://insights.sbomify.com/MAL-2025-165838/): Malicious code in shilang-poke21 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1200/