# Vulnerabilities published in 2025


- [MAL-2025-165116](https://insights.sbomify.com/MAL-2025-165116/): Malicious code in riyanto-poke11 (npm) (malicious package)
- [MAL-2025-165115](https://insights.sbomify.com/MAL-2025-165115/): Malicious code in riyanto-poke103 (npm) (malicious package)
- [MAL-2025-165114](https://insights.sbomify.com/MAL-2025-165114/): Malicious code in riyanto-poke102 (npm) (malicious package)
- [MAL-2025-165113](https://insights.sbomify.com/MAL-2025-165113/): Malicious code in riyanto-poke101 (npm) (malicious package)
- [MAL-2025-165112](https://insights.sbomify.com/MAL-2025-165112/): Malicious code in riyanto-poke100 (npm) (malicious package)
- [MAL-2025-165111](https://insights.sbomify.com/MAL-2025-165111/): Malicious code in riyanto-poke10 (npm) (malicious package)
- [MAL-2025-165110](https://insights.sbomify.com/MAL-2025-165110/): Malicious code in riyanto-poke1 (npm) (malicious package)
- [MAL-2025-16511](https://insights.sbomify.com/MAL-2025-16511/): Malicious code in capella-element-ui-loglevel-bootes (npm) (malicious package)
- [MAL-2025-165109](https://insights.sbomify.com/MAL-2025-165109/): Malicious code in riyanto-125 (npm) (malicious package)
- [MAL-2025-165108](https://insights.sbomify.com/MAL-2025-165108/): Malicious code in riyanto-124 (npm) (malicious package)
- [MAL-2025-165107](https://insights.sbomify.com/MAL-2025-165107/): Malicious code in riyanto-123 (npm) (malicious package)
- [MAL-2025-165106](https://insights.sbomify.com/MAL-2025-165106/): Malicious code in riyanto-122 (npm) (malicious package)
- [MAL-2025-165105](https://insights.sbomify.com/MAL-2025-165105/): Malicious code in riyanto-121 (npm) (malicious package)
- [MAL-2025-165104](https://insights.sbomify.com/MAL-2025-165104/): Malicious code in riyanto-120 (npm) (malicious package)
- [MAL-2025-165103](https://insights.sbomify.com/MAL-2025-165103/): Malicious code in riyanto-119 (npm) (malicious package)
- [MAL-2025-165102](https://insights.sbomify.com/MAL-2025-165102/): Malicious code in riyanto-118 (npm) (malicious package)
- [MAL-2025-165101](https://insights.sbomify.com/MAL-2025-165101/): Malicious code in riyanto-117 (npm) (malicious package)
- [MAL-2025-165100](https://insights.sbomify.com/MAL-2025-165100/): Malicious code in riyanto-116 (npm) (malicious package)
- [MAL-2025-16510](https://insights.sbomify.com/MAL-2025-16510/): Malicious code in capella-chromedriver-algol-postcss (npm) (malicious package)
- [MAL-2025-1651](https://insights.sbomify.com/MAL-2025-1651/): Malicious code in local_editor_top (npm) (malicious package)
- [MAL-2025-165099](https://insights.sbomify.com/MAL-2025-165099/): Malicious code in riyanto-115 (npm) (malicious package)
- [MAL-2025-165098](https://insights.sbomify.com/MAL-2025-165098/): Malicious code in riyanto-114 (npm) (malicious package)
- [MAL-2025-165097](https://insights.sbomify.com/MAL-2025-165097/): Malicious code in riyanto-113 (npm) (malicious package)
- [MAL-2025-165096](https://insights.sbomify.com/MAL-2025-165096/): Malicious code in riyanto-112 (npm) (malicious package)
- [MAL-2025-165095](https://insights.sbomify.com/MAL-2025-165095/): Malicious code in riyanto-111 (npm) (malicious package)
- [MAL-2025-165094](https://insights.sbomify.com/MAL-2025-165094/): Malicious code in riyanto-110 (npm) (malicious package)
- [MAL-2025-165093](https://insights.sbomify.com/MAL-2025-165093/): Malicious code in riyanto-109 (npm) (malicious package)
- [MAL-2025-165092](https://insights.sbomify.com/MAL-2025-165092/): Malicious code in riyanto-108 (npm) (malicious package)
- [MAL-2025-165091](https://insights.sbomify.com/MAL-2025-165091/): Malicious code in riyanto-107 (npm) (malicious package)
- [MAL-2025-165090](https://insights.sbomify.com/MAL-2025-165090/): Malicious code in riyanto-106 (npm) (malicious package)
- [MAL-2025-16509](https://insights.sbomify.com/MAL-2025-16509/): Malicious code in capella-aldebaran-semantic-release-hapi (npm) (malicious package)
- [MAL-2025-165089](https://insights.sbomify.com/MAL-2025-165089/): Malicious code in riyanto-105 (npm) (malicious package)
- [MAL-2025-165088](https://insights.sbomify.com/MAL-2025-165088/): Malicious code in riyanto-104 (npm) (malicious package)
- [MAL-2025-165087](https://insights.sbomify.com/MAL-2025-165087/): Malicious code in rival-poke99 (npm) (malicious package)
- [MAL-2025-165086](https://insights.sbomify.com/MAL-2025-165086/): Malicious code in rival-poke98 (npm) (malicious package)
- [MAL-2025-165085](https://insights.sbomify.com/MAL-2025-165085/): Malicious code in rival-poke97 (npm) (malicious package)
- [MAL-2025-165084](https://insights.sbomify.com/MAL-2025-165084/): Malicious code in rival-poke96 (npm) (malicious package)
- [MAL-2025-165083](https://insights.sbomify.com/MAL-2025-165083/): Malicious code in rival-poke95 (npm) (malicious package)
- [MAL-2025-165082](https://insights.sbomify.com/MAL-2025-165082/): Malicious code in rival-poke94 (npm) (malicious package)
- [MAL-2025-165081](https://insights.sbomify.com/MAL-2025-165081/): Malicious code in rival-poke93 (npm) (malicious package)
- [MAL-2025-165080](https://insights.sbomify.com/MAL-2025-165080/): Malicious code in rival-poke92 (npm) (malicious package)
- [MAL-2025-16508](https://insights.sbomify.com/MAL-2025-16508/): Malicious code in capchi (npm) (malicious package)
- [MAL-2025-165079](https://insights.sbomify.com/MAL-2025-165079/): Malicious code in rival-poke91 (npm) (malicious package)
- [MAL-2025-165078](https://insights.sbomify.com/MAL-2025-165078/): Malicious code in rival-poke90 (npm) (malicious package)
- [MAL-2025-165077](https://insights.sbomify.com/MAL-2025-165077/): Malicious code in rival-poke9 (npm) (malicious package)
- [MAL-2025-165076](https://insights.sbomify.com/MAL-2025-165076/): Malicious code in rival-poke89 (npm) (malicious package)
- [MAL-2025-165075](https://insights.sbomify.com/MAL-2025-165075/): Malicious code in rival-poke88 (npm) (malicious package)
- [MAL-2025-165074](https://insights.sbomify.com/MAL-2025-165074/): Malicious code in rival-poke87 (npm) (malicious package)
- [MAL-2025-165073](https://insights.sbomify.com/MAL-2025-165073/): Malicious code in rival-poke86 (npm) (malicious package)
- [MAL-2025-165072](https://insights.sbomify.com/MAL-2025-165072/): Malicious code in rival-poke85 (npm) (malicious package)
- [MAL-2025-165071](https://insights.sbomify.com/MAL-2025-165071/): Malicious code in rival-poke84 (npm) (malicious package)
- [MAL-2025-165070](https://insights.sbomify.com/MAL-2025-165070/): Malicious code in rival-poke83 (npm) (malicious package)
- [MAL-2025-16507](https://insights.sbomify.com/MAL-2025-16507/): Malicious code in canyon_pqkll_ehq4p_harmony (npm) (malicious package)
- [MAL-2025-165069](https://insights.sbomify.com/MAL-2025-165069/): Malicious code in rival-poke82 (npm) (malicious package)
- [MAL-2025-165068](https://insights.sbomify.com/MAL-2025-165068/): Malicious code in rival-poke81 (npm) (malicious package)
- [MAL-2025-165067](https://insights.sbomify.com/MAL-2025-165067/): Malicious code in rival-poke80 (npm) (malicious package)
- [MAL-2025-165066](https://insights.sbomify.com/MAL-2025-165066/): Malicious code in rival-poke8 (npm) (malicious package)
- [MAL-2025-165065](https://insights.sbomify.com/MAL-2025-165065/): Malicious code in rival-poke79 (npm) (malicious package)
- [MAL-2025-165064](https://insights.sbomify.com/MAL-2025-165064/): Malicious code in rival-poke78 (npm) (malicious package)
- [MAL-2025-165063](https://insights.sbomify.com/MAL-2025-165063/): Malicious code in rival-poke77 (npm) (malicious package)
- [MAL-2025-165062](https://insights.sbomify.com/MAL-2025-165062/): Malicious code in rival-poke76 (npm) (malicious package)
- [MAL-2025-165061](https://insights.sbomify.com/MAL-2025-165061/): Malicious code in rival-poke75 (npm) (malicious package)
- [MAL-2025-165060](https://insights.sbomify.com/MAL-2025-165060/): Malicious code in rival-poke74 (npm) (malicious package)
- [MAL-2025-16506](https://insights.sbomify.com/MAL-2025-16506/): Malicious code in canyon_3xggw_4wtld_crown (npm) (malicious package)
- [MAL-2025-165059](https://insights.sbomify.com/MAL-2025-165059/): Malicious code in rival-poke73 (npm) (malicious package)
- [MAL-2025-165058](https://insights.sbomify.com/MAL-2025-165058/): Malicious code in rival-poke72 (npm) (malicious package)
- [MAL-2025-165057](https://insights.sbomify.com/MAL-2025-165057/): Malicious code in rival-poke71 (npm) (malicious package)
- [MAL-2025-165056](https://insights.sbomify.com/MAL-2025-165056/): Malicious code in rival-poke70 (npm) (malicious package)
- [MAL-2025-165055](https://insights.sbomify.com/MAL-2025-165055/): Malicious code in rival-poke7 (npm) (malicious package)
- [MAL-2025-165054](https://insights.sbomify.com/MAL-2025-165054/): Malicious code in rival-poke69 (npm) (malicious package)
- [MAL-2025-165053](https://insights.sbomify.com/MAL-2025-165053/): Malicious code in rival-poke68 (npm) (malicious package)
- [MAL-2025-165052](https://insights.sbomify.com/MAL-2025-165052/): Malicious code in rival-poke67 (npm) (malicious package)
- [MAL-2025-165051](https://insights.sbomify.com/MAL-2025-165051/): Malicious code in rival-poke66 (npm) (malicious package)
- [MAL-2025-165050](https://insights.sbomify.com/MAL-2025-165050/): Malicious code in rival-poke65 (npm) (malicious package)
- [MAL-2025-16505](https://insights.sbomify.com/MAL-2025-16505/): Malicious code in canway (npm) (malicious package)
- [MAL-2025-165049](https://insights.sbomify.com/MAL-2025-165049/): Malicious code in rival-poke64 (npm) (malicious package)
- [MAL-2025-165048](https://insights.sbomify.com/MAL-2025-165048/): Malicious code in rival-poke63 (npm) (malicious package)
- [MAL-2025-165047](https://insights.sbomify.com/MAL-2025-165047/): Malicious code in rival-poke62 (npm) (malicious package)
- [MAL-2025-165046](https://insights.sbomify.com/MAL-2025-165046/): Malicious code in rival-poke61 (npm) (malicious package)
- [MAL-2025-165045](https://insights.sbomify.com/MAL-2025-165045/): Malicious code in rival-poke60 (npm) (malicious package)
- [MAL-2025-165044](https://insights.sbomify.com/MAL-2025-165044/): Malicious code in rival-poke6 (npm) (malicious package)
- [MAL-2025-165043](https://insights.sbomify.com/MAL-2025-165043/): Malicious code in rival-poke59 (npm) (malicious package)
- [MAL-2025-165042](https://insights.sbomify.com/MAL-2025-165042/): Malicious code in rival-poke58 (npm) (malicious package)
- [MAL-2025-165041](https://insights.sbomify.com/MAL-2025-165041/): Malicious code in rival-poke57 (npm) (malicious package)
- [MAL-2025-165040](https://insights.sbomify.com/MAL-2025-165040/): Malicious code in rival-poke56 (npm) (malicious package)
- [MAL-2025-16504](https://insights.sbomify.com/MAL-2025-16504/): Malicious code in canvasino (npm) (malicious package)
- [MAL-2025-165039](https://insights.sbomify.com/MAL-2025-165039/): Malicious code in rival-poke55 (npm) (malicious package)
- [MAL-2025-165038](https://insights.sbomify.com/MAL-2025-165038/): Malicious code in rival-poke54 (npm) (malicious package)
- [MAL-2025-165037](https://insights.sbomify.com/MAL-2025-165037/): Malicious code in rival-poke53 (npm) (malicious package)
- [MAL-2025-165036](https://insights.sbomify.com/MAL-2025-165036/): Malicious code in rival-poke52 (npm) (malicious package)
- [MAL-2025-165035](https://insights.sbomify.com/MAL-2025-165035/): Malicious code in rival-poke51 (npm) (malicious package)
- [MAL-2025-165034](https://insights.sbomify.com/MAL-2025-165034/): Malicious code in rival-poke50 (npm) (malicious package)
- [MAL-2025-165033](https://insights.sbomify.com/MAL-2025-165033/): Malicious code in rival-poke5 (npm) (malicious package)
- [MAL-2025-165032](https://insights.sbomify.com/MAL-2025-165032/): Malicious code in rival-poke49 (npm) (malicious package)
- [MAL-2025-165031](https://insights.sbomify.com/MAL-2025-165031/): Malicious code in rival-poke48 (npm) (malicious package)
- [MAL-2025-165030](https://insights.sbomify.com/MAL-2025-165030/): Malicious code in rival-poke47 (npm) (malicious package)
- [MAL-2025-16503](https://insights.sbomify.com/MAL-2025-16503/): Malicious code in canvasbars (npm) (malicious package)
- [MAL-2025-165029](https://insights.sbomify.com/MAL-2025-165029/): Malicious code in rival-poke46 (npm) (malicious package)
- [MAL-2025-165028](https://insights.sbomify.com/MAL-2025-165028/): Malicious code in rival-poke45 (npm) (malicious package)
- [MAL-2025-165027](https://insights.sbomify.com/MAL-2025-165027/): Malicious code in rival-poke44 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1209/