# Vulnerabilities published in 2025


- [MAL-2025-164667](https://insights.sbomify.com/MAL-2025-164667/): Malicious code in rino-poke23 (npm) (malicious package)
- [MAL-2025-164666](https://insights.sbomify.com/MAL-2025-164666/): Malicious code in rino-poke22 (npm) (malicious package)
- [MAL-2025-164665](https://insights.sbomify.com/MAL-2025-164665/): Malicious code in rino-poke21 (npm) (malicious package)
- [MAL-2025-164664](https://insights.sbomify.com/MAL-2025-164664/): Malicious code in rino-poke20 (npm) (malicious package)
- [MAL-2025-164663](https://insights.sbomify.com/MAL-2025-164663/): Malicious code in rino-poke2 (npm) (malicious package)
- [MAL-2025-164662](https://insights.sbomify.com/MAL-2025-164662/): Malicious code in rino-poke19 (npm) (malicious package)
- [MAL-2025-164661](https://insights.sbomify.com/MAL-2025-164661/): Malicious code in rino-poke18 (npm) (malicious package)
- [MAL-2025-164660](https://insights.sbomify.com/MAL-2025-164660/): Malicious code in rino-poke17 (npm) (malicious package)
- [MAL-2025-16466](https://insights.sbomify.com/MAL-2025-16466/): Malicious code in calm-wander-cxx597-project (npm) (malicious package)
- [MAL-2025-164659](https://insights.sbomify.com/MAL-2025-164659/): Malicious code in rino-poke16 (npm) (malicious package)
- [MAL-2025-164658](https://insights.sbomify.com/MAL-2025-164658/): Malicious code in rino-poke15 (npm) (malicious package)
- [MAL-2025-164657](https://insights.sbomify.com/MAL-2025-164657/): Malicious code in rino-poke14 (npm) (malicious package)
- [MAL-2025-164656](https://insights.sbomify.com/MAL-2025-164656/): Malicious code in rino-poke13 (npm) (malicious package)
- [MAL-2025-164655](https://insights.sbomify.com/MAL-2025-164655/): Malicious code in rino-poke12 (npm) (malicious package)
- [MAL-2025-164654](https://insights.sbomify.com/MAL-2025-164654/): Malicious code in rino-poke110 (npm) (malicious package)
- [MAL-2025-164653](https://insights.sbomify.com/MAL-2025-164653/): Malicious code in rino-poke11 (npm) (malicious package)
- [MAL-2025-164652](https://insights.sbomify.com/MAL-2025-164652/): Malicious code in rino-poke109 (npm) (malicious package)
- [MAL-2025-164651](https://insights.sbomify.com/MAL-2025-164651/): Malicious code in rino-poke108 (npm) (malicious package)
- [MAL-2025-164650](https://insights.sbomify.com/MAL-2025-164650/): Malicious code in rino-poke107 (npm) (malicious package)
- [MAL-2025-16465](https://insights.sbomify.com/MAL-2025-16465/): Malicious code in calm-ponder-ufs454-project (npm) (malicious package)
- [MAL-2025-164649](https://insights.sbomify.com/MAL-2025-164649/): Malicious code in rino-poke106 (npm) (malicious package)
- [MAL-2025-164648](https://insights.sbomify.com/MAL-2025-164648/): Malicious code in rino-poke105 (npm) (malicious package)
- [MAL-2025-164647](https://insights.sbomify.com/MAL-2025-164647/): Malicious code in rino-poke104 (npm) (malicious package)
- [MAL-2025-164646](https://insights.sbomify.com/MAL-2025-164646/): Malicious code in rino-poke103 (npm) (malicious package)
- [MAL-2025-164645](https://insights.sbomify.com/MAL-2025-164645/): Malicious code in rino-poke102 (npm) (malicious package)
- [MAL-2025-164644](https://insights.sbomify.com/MAL-2025-164644/): Malicious code in rino-poke101 (npm) (malicious package)
- [MAL-2025-164643](https://insights.sbomify.com/MAL-2025-164643/): Malicious code in rino-poke100 (npm) (malicious package)
- [MAL-2025-164642](https://insights.sbomify.com/MAL-2025-164642/): Malicious code in rino-poke10 (npm) (malicious package)
- [MAL-2025-164641](https://insights.sbomify.com/MAL-2025-164641/): Malicious code in rino-poke1 (npm) (malicious package)
- [MAL-2025-164640](https://insights.sbomify.com/MAL-2025-164640/): Malicious code in ramadan-poke9 (npm) (malicious package)
- [MAL-2025-16464](https://insights.sbomify.com/MAL-2025-16464/): Malicious code in callnotes (npm) (malicious package)
- [MAL-2025-164639](https://insights.sbomify.com/MAL-2025-164639/): Malicious code in ramadan-poke8 (npm) (malicious package)
- [MAL-2025-164638](https://insights.sbomify.com/MAL-2025-164638/): Malicious code in ramadan-poke7 (npm) (malicious package)
- [MAL-2025-164637](https://insights.sbomify.com/MAL-2025-164637/): Malicious code in ramadan-poke6 (npm) (malicious package)
- [MAL-2025-164636](https://insights.sbomify.com/MAL-2025-164636/): Malicious code in ramadan-poke5 (npm) (malicious package)
- [MAL-2025-164635](https://insights.sbomify.com/MAL-2025-164635/): Malicious code in ramadan-poke49 (npm) (malicious package)
- [MAL-2025-164634](https://insights.sbomify.com/MAL-2025-164634/): Malicious code in ramadan-poke48 (npm) (malicious package)
- [MAL-2025-164633](https://insights.sbomify.com/MAL-2025-164633/): Malicious code in ramadan-poke47 (npm) (malicious package)
- [MAL-2025-164632](https://insights.sbomify.com/MAL-2025-164632/): Malicious code in ramadan-poke46 (npm) (malicious package)
- [MAL-2025-164631](https://insights.sbomify.com/MAL-2025-164631/): Malicious code in ramadan-poke45 (npm) (malicious package)
- [MAL-2025-164630](https://insights.sbomify.com/MAL-2025-164630/): Malicious code in ramadan-poke44 (npm) (malicious package)
- [MAL-2025-16463](https://insights.sbomify.com/MAL-2025-16463/): Malicious code in callisto-subscription-selenology-cybernetics (npm) (malicious package)
- [MAL-2025-164629](https://insights.sbomify.com/MAL-2025-164629/): Malicious code in ramadan-poke43 (npm) (malicious package)
- [MAL-2025-164628](https://insights.sbomify.com/MAL-2025-164628/): Malicious code in ramadan-poke42 (npm) (malicious package)
- [MAL-2025-164627](https://insights.sbomify.com/MAL-2025-164627/): Malicious code in ramadan-poke41 (npm) (malicious package)
- [MAL-2025-164626](https://insights.sbomify.com/MAL-2025-164626/): Malicious code in ramadan-poke40 (npm) (malicious package)
- [MAL-2025-164625](https://insights.sbomify.com/MAL-2025-164625/): Malicious code in ramadan-poke4 (npm) (malicious package)
- [MAL-2025-164624](https://insights.sbomify.com/MAL-2025-164624/): Malicious code in ramadan-poke39 (npm) (malicious package)
- [MAL-2025-164623](https://insights.sbomify.com/MAL-2025-164623/): Malicious code in ramadan-poke38 (npm) (malicious package)
- [MAL-2025-164622](https://insights.sbomify.com/MAL-2025-164622/): Malicious code in ramadan-poke37 (npm) (malicious package)
- [MAL-2025-164621](https://insights.sbomify.com/MAL-2025-164621/): Malicious code in ramadan-poke36 (npm) (malicious package)
- [MAL-2025-164620](https://insights.sbomify.com/MAL-2025-164620/): Malicious code in ramadan-poke35 (npm) (malicious package)
- [MAL-2025-16462](https://insights.sbomify.com/MAL-2025-16462/): Malicious code in callisto-playwright-chariklo-exoplanet (npm) (malicious package)
- [MAL-2025-164619](https://insights.sbomify.com/MAL-2025-164619/): Malicious code in ramadan-poke34 (npm) (malicious package)
- [MAL-2025-164618](https://insights.sbomify.com/MAL-2025-164618/): Malicious code in ramadan-poke33 (npm) (malicious package)
- [MAL-2025-164617](https://insights.sbomify.com/MAL-2025-164617/): Malicious code in ramadan-poke32 (npm) (malicious package)
- [MAL-2025-164616](https://insights.sbomify.com/MAL-2025-164616/): Malicious code in ramadan-poke31 (npm) (malicious package)
- [MAL-2025-164615](https://insights.sbomify.com/MAL-2025-164615/): Malicious code in ramadan-poke30 (npm) (malicious package)
- [MAL-2025-164614](https://insights.sbomify.com/MAL-2025-164614/): Malicious code in ramadan-poke3 (npm) (malicious package)
- [MAL-2025-164613](https://insights.sbomify.com/MAL-2025-164613/): Malicious code in ramadan-poke29 (npm) (malicious package)
- [MAL-2025-164612](https://insights.sbomify.com/MAL-2025-164612/): Malicious code in ramadan-poke28 (npm) (malicious package)
- [MAL-2025-164611](https://insights.sbomify.com/MAL-2025-164611/): Malicious code in ramadan-poke27 (npm) (malicious package)
- [MAL-2025-164610](https://insights.sbomify.com/MAL-2025-164610/): Malicious code in ramadan-poke26 (npm) (malicious package)
- [MAL-2025-16461](https://insights.sbomify.com/MAL-2025-16461/): Malicious code in callin (npm) (malicious package)
- [MAL-2025-164609](https://insights.sbomify.com/MAL-2025-164609/): Malicious code in ramadan-poke25 (npm) (malicious package)
- [MAL-2025-164608](https://insights.sbomify.com/MAL-2025-164608/): Malicious code in ramadan-poke24 (npm) (malicious package)
- [MAL-2025-164607](https://insights.sbomify.com/MAL-2025-164607/): Malicious code in ramadan-poke23 (npm) (malicious package)
- [MAL-2025-164606](https://insights.sbomify.com/MAL-2025-164606/): Malicious code in ramadan-poke22 (npm) (malicious package)
- [MAL-2025-164605](https://insights.sbomify.com/MAL-2025-164605/): Malicious code in ramadan-poke21 (npm) (malicious package)
- [MAL-2025-164604](https://insights.sbomify.com/MAL-2025-164604/): Malicious code in ramadan-poke20 (npm) (malicious package)
- [MAL-2025-164603](https://insights.sbomify.com/MAL-2025-164603/): Malicious code in ramadan-poke2 (npm) (malicious package)
- [MAL-2025-164602](https://insights.sbomify.com/MAL-2025-164602/): Malicious code in ramadan-poke19 (npm) (malicious package)
- [MAL-2025-164601](https://insights.sbomify.com/MAL-2025-164601/): Malicious code in ramadan-poke18 (npm) (malicious package)
- [MAL-2025-164600](https://insights.sbomify.com/MAL-2025-164600/): Malicious code in ramadan-poke17 (npm) (malicious package)
- [MAL-2025-16460](https://insights.sbomify.com/MAL-2025-16460/): Malicious code in callback_test_package (npm) (malicious package)
- [MAL-2025-1646](https://insights.sbomify.com/MAL-2025-1646/): Malicious code in battleships-player (npm) (malicious package)
- [MAL-2025-164599](https://insights.sbomify.com/MAL-2025-164599/): Malicious code in ramadan-poke16 (npm) (malicious package)
- [MAL-2025-164598](https://insights.sbomify.com/MAL-2025-164598/): Malicious code in ramadan-poke15 (npm) (malicious package)
- [MAL-2025-164597](https://insights.sbomify.com/MAL-2025-164597/): Malicious code in ramadan-poke14 (npm) (malicious package)
- [MAL-2025-164596](https://insights.sbomify.com/MAL-2025-164596/): Malicious code in ramadan-poke13 (npm) (malicious package)
- [MAL-2025-164595](https://insights.sbomify.com/MAL-2025-164595/): Malicious code in ramadan-poke12 (npm) (malicious package)
- [MAL-2025-164594](https://insights.sbomify.com/MAL-2025-164594/): Malicious code in ramadan-poke11 (npm) (malicious package)
- [MAL-2025-164593](https://insights.sbomify.com/MAL-2025-164593/): Malicious code in ramadan-poke10 (npm) (malicious package)
- [MAL-2025-164592](https://insights.sbomify.com/MAL-2025-164592/): Malicious code in ramadan-poke1 (npm) (malicious package)
- [MAL-2025-164591](https://insights.sbomify.com/MAL-2025-164591/): Malicious code in putri-poke9 (npm) (malicious package)
- [MAL-2025-164590](https://insights.sbomify.com/MAL-2025-164590/): Malicious code in putri-poke8 (npm) (malicious package)
- [MAL-2025-16459](https://insights.sbomify.com/MAL-2025-16459/): Malicious code in callback-oberon-framework-magellan (npm) (malicious package)
- [MAL-2025-164589](https://insights.sbomify.com/MAL-2025-164589/): Malicious code in putri-poke7 (npm) (malicious package)
- [MAL-2025-164588](https://insights.sbomify.com/MAL-2025-164588/): Malicious code in putri-poke6 (npm) (malicious package)
- [MAL-2025-164587](https://insights.sbomify.com/MAL-2025-164587/): Malicious code in putri-poke5 (npm) (malicious package)
- [MAL-2025-164586](https://insights.sbomify.com/MAL-2025-164586/): Malicious code in putri-poke4 (npm) (malicious package)
- [MAL-2025-164585](https://insights.sbomify.com/MAL-2025-164585/): Malicious code in putri-poke3 (npm) (malicious package)
- [MAL-2025-164584](https://insights.sbomify.com/MAL-2025-164584/): Malicious code in putri-poke25 (npm) (malicious package)
- [MAL-2025-164583](https://insights.sbomify.com/MAL-2025-164583/): Malicious code in putri-poke24 (npm) (malicious package)
- [MAL-2025-164582](https://insights.sbomify.com/MAL-2025-164582/): Malicious code in putri-poke23 (npm) (malicious package)
- [MAL-2025-164581](https://insights.sbomify.com/MAL-2025-164581/): Malicious code in putri-poke22 (npm) (malicious package)
- [MAL-2025-164580](https://insights.sbomify.com/MAL-2025-164580/): Malicious code in putri-poke21 (npm) (malicious package)
- [MAL-2025-16458](https://insights.sbomify.com/MAL-2025-16458/): Malicious code in callback-kardashevscale-dynamo-hyperion (npm) (malicious package)
- [MAL-2025-164579](https://insights.sbomify.com/MAL-2025-164579/): Malicious code in putri-poke20 (npm) (malicious package)
- [MAL-2025-164578](https://insights.sbomify.com/MAL-2025-164578/): Malicious code in putri-poke2 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1214/