# Vulnerabilities published in 2025


- [MAL-2025-165026](https://insights.sbomify.com/MAL-2025-165026/): Malicious code in rival-poke43 (npm) (malicious package)
- [MAL-2025-165025](https://insights.sbomify.com/MAL-2025-165025/): Malicious code in rival-poke42 (npm) (malicious package)
- [MAL-2025-165024](https://insights.sbomify.com/MAL-2025-165024/): Malicious code in rival-poke41 (npm) (malicious package)
- [MAL-2025-165023](https://insights.sbomify.com/MAL-2025-165023/): Malicious code in rival-poke40 (npm) (malicious package)
- [MAL-2025-165022](https://insights.sbomify.com/MAL-2025-165022/): Malicious code in rival-poke4 (npm) (malicious package)
- [MAL-2025-165021](https://insights.sbomify.com/MAL-2025-165021/): Malicious code in rival-poke39 (npm) (malicious package)
- [MAL-2025-165020](https://insights.sbomify.com/MAL-2025-165020/): Malicious code in rival-poke38 (npm) (malicious package)
- [MAL-2025-16502](https://insights.sbomify.com/MAL-2025-16502/): Malicious code in canvas-hikki (npm) (malicious package)
- [MAL-2025-165019](https://insights.sbomify.com/MAL-2025-165019/): Malicious code in rival-poke37 (npm) (malicious package)
- [MAL-2025-165018](https://insights.sbomify.com/MAL-2025-165018/): Malicious code in rival-poke36 (npm) (malicious package)
- [MAL-2025-165017](https://insights.sbomify.com/MAL-2025-165017/): Malicious code in rival-poke35 (npm) (malicious package)
- [MAL-2025-165016](https://insights.sbomify.com/MAL-2025-165016/): Malicious code in rival-poke34 (npm) (malicious package)
- [MAL-2025-165015](https://insights.sbomify.com/MAL-2025-165015/): Malicious code in rival-poke33 (npm) (malicious package)
- [MAL-2025-165014](https://insights.sbomify.com/MAL-2025-165014/): Malicious code in rival-poke32 (npm) (malicious package)
- [MAL-2025-165013](https://insights.sbomify.com/MAL-2025-165013/): Malicious code in rival-poke31 (npm) (malicious package)
- [MAL-2025-165012](https://insights.sbomify.com/MAL-2025-165012/): Malicious code in rival-poke30 (npm) (malicious package)
- [MAL-2025-165011](https://insights.sbomify.com/MAL-2025-165011/): Malicious code in rival-poke3 (npm) (malicious package)
- [MAL-2025-165010](https://insights.sbomify.com/MAL-2025-165010/): Malicious code in rival-poke29 (npm) (malicious package)
- [MAL-2025-16501](https://insights.sbomify.com/MAL-2025-16501/): Malicious code in cantynovi (npm) (malicious package)
- [MAL-2025-165009](https://insights.sbomify.com/MAL-2025-165009/): Malicious code in rival-poke28 (npm) (malicious package)
- [MAL-2025-165008](https://insights.sbomify.com/MAL-2025-165008/): Malicious code in rival-poke27 (npm) (malicious package)
- [MAL-2025-165007](https://insights.sbomify.com/MAL-2025-165007/): Malicious code in rival-poke26 (npm) (malicious package)
- [MAL-2025-165006](https://insights.sbomify.com/MAL-2025-165006/): Malicious code in rival-poke25 (npm) (malicious package)
- [MAL-2025-165005](https://insights.sbomify.com/MAL-2025-165005/): Malicious code in rival-poke24 (npm) (malicious package)
- [MAL-2025-165004](https://insights.sbomify.com/MAL-2025-165004/): Malicious code in rival-poke23 (npm) (malicious package)
- [MAL-2025-165003](https://insights.sbomify.com/MAL-2025-165003/): Malicious code in rival-poke22 (npm) (malicious package)
- [MAL-2025-165002](https://insights.sbomify.com/MAL-2025-165002/): Malicious code in rival-poke21 (npm) (malicious package)
- [MAL-2025-165001](https://insights.sbomify.com/MAL-2025-165001/): Malicious code in rival-poke20 (npm) (malicious package)
- [MAL-2025-165000](https://insights.sbomify.com/MAL-2025-165000/): Malicious code in rival-poke2 (npm) (malicious package)
- [MAL-2025-16500](https://insights.sbomify.com/MAL-2025-16500/): Malicious code in canopus-middleware-jsonp-slidev (npm) (malicious package)
- [MAL-2025-1650](https://insights.sbomify.com/MAL-2025-1650/): Malicious code in iff-root (npm) (malicious package)
- [MAL-2025-165](https://insights.sbomify.com/MAL-2025-165/): Malicious code in bbc-http-client (npm) (malicious package)
- [MAL-2025-164999](https://insights.sbomify.com/MAL-2025-164999/): Malicious code in rival-poke19 (npm) (malicious package)
- [MAL-2025-164998](https://insights.sbomify.com/MAL-2025-164998/): Malicious code in rival-poke18 (npm) (malicious package)
- [MAL-2025-164997](https://insights.sbomify.com/MAL-2025-164997/): Malicious code in rival-poke17 (npm) (malicious package)
- [MAL-2025-164996](https://insights.sbomify.com/MAL-2025-164996/): Malicious code in rival-poke16 (npm) (malicious package)
- [MAL-2025-164995](https://insights.sbomify.com/MAL-2025-164995/): Malicious code in rival-poke15 (npm) (malicious package)
- [MAL-2025-164994](https://insights.sbomify.com/MAL-2025-164994/): Malicious code in rival-poke14 (npm) (malicious package)
- [MAL-2025-164993](https://insights.sbomify.com/MAL-2025-164993/): Malicious code in rival-poke13 (npm) (malicious package)
- [MAL-2025-164992](https://insights.sbomify.com/MAL-2025-164992/): Malicious code in rival-poke12 (npm) (malicious package)
- [MAL-2025-164991](https://insights.sbomify.com/MAL-2025-164991/): Malicious code in rival-poke111 (npm) (malicious package)
- [MAL-2025-164990](https://insights.sbomify.com/MAL-2025-164990/): Malicious code in rival-poke110 (npm) (malicious package)
- [MAL-2025-16499](https://insights.sbomify.com/MAL-2025-16499/): Malicious code in canopus-jest-ini-equinox (npm) (malicious package)
- [MAL-2025-164989](https://insights.sbomify.com/MAL-2025-164989/): Malicious code in rival-poke11 (npm) (malicious package)
- [MAL-2025-164988](https://insights.sbomify.com/MAL-2025-164988/): Malicious code in rival-poke109 (npm) (malicious package)
- [MAL-2025-164987](https://insights.sbomify.com/MAL-2025-164987/): Malicious code in rival-poke108 (npm) (malicious package)
- [MAL-2025-164986](https://insights.sbomify.com/MAL-2025-164986/): Malicious code in rival-poke107 (npm) (malicious package)
- [MAL-2025-164985](https://insights.sbomify.com/MAL-2025-164985/): Malicious code in rival-poke106 (npm) (malicious package)
- [MAL-2025-164984](https://insights.sbomify.com/MAL-2025-164984/): Malicious code in rival-poke105 (npm) (malicious package)
- [MAL-2025-164983](https://insights.sbomify.com/MAL-2025-164983/): Malicious code in rival-poke104 (npm) (malicious package)
- [MAL-2025-164982](https://insights.sbomify.com/MAL-2025-164982/): Malicious code in rival-poke103 (npm) (malicious package)
- [MAL-2025-164981](https://insights.sbomify.com/MAL-2025-164981/): Malicious code in rival-poke102 (npm) (malicious package)
- [MAL-2025-164980](https://insights.sbomify.com/MAL-2025-164980/): Malicious code in rival-poke101 (npm) (malicious package)
- [MAL-2025-16498](https://insights.sbomify.com/MAL-2025-16498/): Malicious code in canopus-cosmogenic-dysonswarm-elektra (npm) (malicious package)
- [MAL-2025-164979](https://insights.sbomify.com/MAL-2025-164979/): Malicious code in rival-poke100 (npm) (malicious package)
- [MAL-2025-164978](https://insights.sbomify.com/MAL-2025-164978/): Malicious code in rival-poke10 (npm) (malicious package)
- [MAL-2025-164977](https://insights.sbomify.com/MAL-2025-164977/): Malicious code in rival-poke1 (npm) (malicious package)
- [MAL-2025-164976](https://insights.sbomify.com/MAL-2025-164976/): Malicious code in rita-99 (npm) (malicious package)
- [MAL-2025-164975](https://insights.sbomify.com/MAL-2025-164975/): Malicious code in rita-98 (npm) (malicious package)
- [MAL-2025-164974](https://insights.sbomify.com/MAL-2025-164974/): Malicious code in rita-97 (npm) (malicious package)
- [MAL-2025-164973](https://insights.sbomify.com/MAL-2025-164973/): Malicious code in rita-96 (npm) (malicious package)
- [MAL-2025-164972](https://insights.sbomify.com/MAL-2025-164972/): Malicious code in rita-95 (npm) (malicious package)
- [MAL-2025-164971](https://insights.sbomify.com/MAL-2025-164971/): Malicious code in rita-94 (npm) (malicious package)
- [MAL-2025-164970](https://insights.sbomify.com/MAL-2025-164970/): Malicious code in rita-93 (npm) (malicious package)
- [MAL-2025-16497](https://insights.sbomify.com/MAL-2025-16497/): Malicious code in candycoin (npm) (malicious package)
- [MAL-2025-164969](https://insights.sbomify.com/MAL-2025-164969/): Malicious code in rita-92 (npm) (malicious package)
- [MAL-2025-164968](https://insights.sbomify.com/MAL-2025-164968/): Malicious code in rita-91 (npm) (malicious package)
- [MAL-2025-164967](https://insights.sbomify.com/MAL-2025-164967/): Malicious code in rita-90 (npm) (malicious package)
- [MAL-2025-164966](https://insights.sbomify.com/MAL-2025-164966/): Malicious code in rita-9 (npm) (malicious package)
- [MAL-2025-164965](https://insights.sbomify.com/MAL-2025-164965/): Malicious code in rita-89 (npm) (malicious package)
- [MAL-2025-164964](https://insights.sbomify.com/MAL-2025-164964/): Malicious code in rita-88 (npm) (malicious package)
- [MAL-2025-164963](https://insights.sbomify.com/MAL-2025-164963/): Malicious code in rita-87 (npm) (malicious package)
- [MAL-2025-164962](https://insights.sbomify.com/MAL-2025-164962/): Malicious code in rita-86 (npm) (malicious package)
- [MAL-2025-164961](https://insights.sbomify.com/MAL-2025-164961/): Malicious code in rita-85 (npm) (malicious package)
- [MAL-2025-164960](https://insights.sbomify.com/MAL-2025-164960/): Malicious code in rita-84 (npm) (malicious package)
- [MAL-2025-16496](https://insights.sbomify.com/MAL-2025-16496/): Malicious code in candra-nasicampur30-breki (npm) (malicious package)
- [MAL-2025-164959](https://insights.sbomify.com/MAL-2025-164959/): Malicious code in rita-83 (npm) (malicious package)
- [MAL-2025-164958](https://insights.sbomify.com/MAL-2025-164958/): Malicious code in rita-82 (npm) (malicious package)
- [MAL-2025-164957](https://insights.sbomify.com/MAL-2025-164957/): Malicious code in rita-81 (npm) (malicious package)
- [MAL-2025-164956](https://insights.sbomify.com/MAL-2025-164956/): Malicious code in rita-80 (npm) (malicious package)
- [MAL-2025-164955](https://insights.sbomify.com/MAL-2025-164955/): Malicious code in rita-8 (npm) (malicious package)
- [MAL-2025-164954](https://insights.sbomify.com/MAL-2025-164954/): Malicious code in rita-79 (npm) (malicious package)
- [MAL-2025-164953](https://insights.sbomify.com/MAL-2025-164953/): Malicious code in rita-78 (npm) (malicious package)
- [MAL-2025-164952](https://insights.sbomify.com/MAL-2025-164952/): Malicious code in rita-77 (npm) (malicious package)
- [MAL-2025-164951](https://insights.sbomify.com/MAL-2025-164951/): Malicious code in rita-76 (npm) (malicious package)
- [MAL-2025-164950](https://insights.sbomify.com/MAL-2025-164950/): Malicious code in rita-75 (npm) (malicious package)
- [MAL-2025-16495](https://insights.sbomify.com/MAL-2025-16495/): Malicious code in candra-lutis19-sukiwir (npm) (malicious package)
- [MAL-2025-164949](https://insights.sbomify.com/MAL-2025-164949/): Malicious code in rita-74 (npm) (malicious package)
- [MAL-2025-164948](https://insights.sbomify.com/MAL-2025-164948/): Malicious code in rita-73 (npm) (malicious package)
- [MAL-2025-164947](https://insights.sbomify.com/MAL-2025-164947/): Malicious code in rita-72 (npm) (malicious package)
- [MAL-2025-164946](https://insights.sbomify.com/MAL-2025-164946/): Malicious code in rita-71 (npm) (malicious package)
- [MAL-2025-164945](https://insights.sbomify.com/MAL-2025-164945/): Malicious code in rita-70 (npm) (malicious package)
- [MAL-2025-164944](https://insights.sbomify.com/MAL-2025-164944/): Malicious code in rita-7 (npm) (malicious package)
- [MAL-2025-164943](https://insights.sbomify.com/MAL-2025-164943/): Malicious code in rita-69 (npm) (malicious package)
- [MAL-2025-164942](https://insights.sbomify.com/MAL-2025-164942/): Malicious code in rita-68 (npm) (malicious package)
- [MAL-2025-164941](https://insights.sbomify.com/MAL-2025-164941/): Malicious code in rita-67 (npm) (malicious package)
- [MAL-2025-164940](https://insights.sbomify.com/MAL-2025-164940/): Malicious code in rita-66 (npm) (malicious package)
- [MAL-2025-16494](https://insights.sbomify.com/MAL-2025-16494/): Malicious code in candra-lodeh40-kuki (npm) (malicious package)
- [MAL-2025-164939](https://insights.sbomify.com/MAL-2025-164939/): Malicious code in rita-65 (npm) (malicious package)
- [MAL-2025-164938](https://insights.sbomify.com/MAL-2025-164938/): Malicious code in rita-64 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1210/