# Vulnerabilities published in 2025


- [MAL-2025-164306](https://insights.sbomify.com/MAL-2025-164306/): Malicious code in pitra-36 (npm) (malicious package)
- [MAL-2025-164305](https://insights.sbomify.com/MAL-2025-164305/): Malicious code in pitra-35 (npm) (malicious package)
- [MAL-2025-164304](https://insights.sbomify.com/MAL-2025-164304/): Malicious code in pitra-34 (npm) (malicious package)
- [MAL-2025-164303](https://insights.sbomify.com/MAL-2025-164303/): Malicious code in pitra-33 (npm) (malicious package)
- [MAL-2025-164302](https://insights.sbomify.com/MAL-2025-164302/): Malicious code in pitra-32 (npm) (malicious package)
- [MAL-2025-164301](https://insights.sbomify.com/MAL-2025-164301/): Malicious code in pitra-31 (npm) (malicious package)
- [MAL-2025-164300](https://insights.sbomify.com/MAL-2025-164300/): Malicious code in pitra-30 (npm) (malicious package)
- [MAL-2025-16430](https://insights.sbomify.com/MAL-2025-16430/): Malicious code in cahlk (npm) (malicious package)
- [MAL-2025-1643](https://insights.sbomify.com/MAL-2025-1643/): Malicious code in web-pw-sample-app (npm) (malicious package)
- [MAL-2025-164299](https://insights.sbomify.com/MAL-2025-164299/): Malicious code in pitra-3 (npm) (malicious package)
- [MAL-2025-164298](https://insights.sbomify.com/MAL-2025-164298/): Malicious code in pitra-29 (npm) (malicious package)
- [MAL-2025-164297](https://insights.sbomify.com/MAL-2025-164297/): Malicious code in pitra-28 (npm) (malicious package)
- [MAL-2025-164296](https://insights.sbomify.com/MAL-2025-164296/): Malicious code in pitra-27 (npm) (malicious package)
- [MAL-2025-164295](https://insights.sbomify.com/MAL-2025-164295/): Malicious code in pitra-26 (npm) (malicious package)
- [MAL-2025-164294](https://insights.sbomify.com/MAL-2025-164294/): Malicious code in pitra-25 (npm) (malicious package)
- [MAL-2025-164293](https://insights.sbomify.com/MAL-2025-164293/): Malicious code in pitra-24 (npm) (malicious package)
- [MAL-2025-164292](https://insights.sbomify.com/MAL-2025-164292/): Malicious code in pitra-23 (npm) (malicious package)
- [MAL-2025-164291](https://insights.sbomify.com/MAL-2025-164291/): Malicious code in pitra-22 (npm) (malicious package)
- [MAL-2025-164290](https://insights.sbomify.com/MAL-2025-164290/): Malicious code in pitra-21 (npm) (malicious package)
- [MAL-2025-16429](https://insights.sbomify.com/MAL-2025-16429/): Malicious code in cage-js (npm) (malicious package)
- [MAL-2025-164289](https://insights.sbomify.com/MAL-2025-164289/): Malicious code in pitra-20 (npm) (malicious package)
- [MAL-2025-164288](https://insights.sbomify.com/MAL-2025-164288/): Malicious code in pitra-2 (npm) (malicious package)
- [MAL-2025-164287](https://insights.sbomify.com/MAL-2025-164287/): Malicious code in pitra-19 (npm) (malicious package)
- [MAL-2025-164286](https://insights.sbomify.com/MAL-2025-164286/): Malicious code in pitra-18 (npm) (malicious package)
- [MAL-2025-164285](https://insights.sbomify.com/MAL-2025-164285/): Malicious code in pitra-17 (npm) (malicious package)
- [MAL-2025-164284](https://insights.sbomify.com/MAL-2025-164284/): Malicious code in pitra-16 (npm) (malicious package)
- [MAL-2025-164283](https://insights.sbomify.com/MAL-2025-164283/): Malicious code in pitra-15 (npm) (malicious package)
- [MAL-2025-164282](https://insights.sbomify.com/MAL-2025-164282/): Malicious code in pitra-14 (npm) (malicious package)
- [MAL-2025-164281](https://insights.sbomify.com/MAL-2025-164281/): Malicious code in pitra-13 (npm) (malicious package)
- [MAL-2025-164280](https://insights.sbomify.com/MAL-2025-164280/): Malicious code in pitra-12 (npm) (malicious package)
- [MAL-2025-16428](https://insights.sbomify.com/MAL-2025-16428/): Malicious code in caeruleum (npm) (malicious package)
- [MAL-2025-164279](https://insights.sbomify.com/MAL-2025-164279/): Malicious code in pitra-11 (npm) (malicious package)
- [MAL-2025-164278](https://insights.sbomify.com/MAL-2025-164278/): Malicious code in pitra-10 (npm) (malicious package)
- [MAL-2025-164277](https://insights.sbomify.com/MAL-2025-164277/): Malicious code in pitra-1 (npm) (malicious package)
- [MAL-2025-164276](https://insights.sbomify.com/MAL-2025-164276/): Malicious code in pilvika-kaliu-nubulikvi (npm) (malicious package)
- [MAL-2025-164275](https://insights.sbomify.com/MAL-2025-164275/): Malicious code in pilvaika-kaliu-nubulikvi (npm) (malicious package)
- [MAL-2025-164274](https://insights.sbomify.com/MAL-2025-164274/): Malicious code in piluvka-kaialbu-nunubai (npm) (malicious package)
- [MAL-2025-164273](https://insights.sbomify.com/MAL-2025-164273/): Malicious code in piluvaka-kaiuabulibu-nunubai (npm) (malicious package)
- [MAL-2025-164272](https://insights.sbomify.com/MAL-2025-164272/): Malicious code in piluvaka-kaiuabulbu-nunubai (npm) (malicious package)
- [MAL-2025-164271](https://insights.sbomify.com/MAL-2025-164271/): Malicious code in piluvaka-kaiuablbu-nunubai (npm) (malicious package)
- [MAL-2025-164270](https://insights.sbomify.com/MAL-2025-164270/): Malicious code in piluvaka-kaialbu-nunubai (npm) (malicious package)
- [MAL-2025-16427](https://insights.sbomify.com/MAL-2025-16427/): Malicious code in cadnz9mkfcvvkkzrs93jcelc1ubphrn0 (npm) (malicious package)
- [MAL-2025-164269](https://insights.sbomify.com/MAL-2025-164269/): Malicious code in piluvaka-kaiablbu-nunubai (npm) (malicious package)
- [MAL-2025-164268](https://insights.sbomify.com/MAL-2025-164268/): Malicious code in piluvaika-kaliu-nubulikvi (npm) (malicious package)
- [MAL-2025-164267](https://insights.sbomify.com/MAL-2025-164267/): Malicious code in piluvaika-kaiualibu-nunubai (npm) (malicious package)
- [MAL-2025-164266](https://insights.sbomify.com/MAL-2025-164266/): Malicious code in piluvaika-kaiuabulibu-nunubai (npm) (malicious package)
- [MAL-2025-164265](https://insights.sbomify.com/MAL-2025-164265/): Malicious code in piluvaika-kaiuablibu-nunubai (npm) (malicious package)
- [MAL-2025-164264](https://insights.sbomify.com/MAL-2025-164264/): Malicious code in piluvaika-kaiu-nunubai (npm) (malicious package)
- [MAL-2025-164263](https://insights.sbomify.com/MAL-2025-164263/): Malicious code in piluvaika-kaiu-nubulivi (npm) (malicious package)
- [MAL-2025-164262](https://insights.sbomify.com/MAL-2025-164262/): Malicious code in piluvaika-kaiu-nubuliv (npm) (malicious package)
- [MAL-2025-164261](https://insights.sbomify.com/MAL-2025-164261/): Malicious code in piluvaika-kaiu-nubuli (npm) (malicious package)
- [MAL-2025-164260](https://insights.sbomify.com/MAL-2025-164260/): Malicious code in piluvaika-kaiu-nubi (npm) (malicious package)
- [MAL-2025-16426](https://insights.sbomify.com/MAL-2025-16426/): Malicious code in caching-framework (npm) (malicious package)
- [MAL-2025-164259](https://insights.sbomify.com/MAL-2025-164259/): Malicious code in piluvaika-kaiu-nubai (npm) (malicious package)
- [MAL-2025-164258](https://insights.sbomify.com/MAL-2025-164258/): Malicious code in piluvaika-kailibu-nunubai (npm) (malicious package)
- [MAL-2025-164257](https://insights.sbomify.com/MAL-2025-164257/): Malicious code in piluvaika-kailbu-nunubai (npm) (malicious package)
- [MAL-2025-164256](https://insights.sbomify.com/MAL-2025-164256/): Malicious code in piluvaika-kaibu-nunubai (npm) (malicious package)
- [MAL-2025-164255](https://insights.sbomify.com/MAL-2025-164255/): Malicious code in piluvaika-kaialibu-nunubai (npm) (malicious package)
- [MAL-2025-164254](https://insights.sbomify.com/MAL-2025-164254/): Malicious code in piluka-lulni-pibalima (npm) (malicious package)
- [MAL-2025-164253](https://insights.sbomify.com/MAL-2025-164253/): Malicious code in piluka-llni-pibalima (npm) (malicious package)
- [MAL-2025-164252](https://insights.sbomify.com/MAL-2025-164252/): Malicious code in piluka-kamali-bicupibai (npm) (malicious package)
- [MAL-2025-164251](https://insights.sbomify.com/MAL-2025-164251/): Malicious code in piluka-kamali-bicupaibai (npm) (malicious package)
- [MAL-2025-164250](https://insights.sbomify.com/MAL-2025-164250/): Malicious code in piluka-kamali-bicuibai (npm) (malicious package)
- [MAL-2025-16425](https://insights.sbomify.com/MAL-2025-16425/): Malicious code in cacheondb (npm) (malicious package)
- [MAL-2025-164249](https://insights.sbomify.com/MAL-2025-164249/): Malicious code in piluka-kamai-bicuibai (npm) (malicious package)
- [MAL-2025-164248](https://insights.sbomify.com/MAL-2025-164248/): Malicious code in piluka-kama-bicuibai (npm) (malicious package)
- [MAL-2025-164247](https://insights.sbomify.com/MAL-2025-164247/): Malicious code in piluka-kali-bicupaibai (npm) (malicious package)
- [MAL-2025-164246](https://insights.sbomify.com/MAL-2025-164246/): Malicious code in piluka-kaiamlbu-kiluna (npm) (malicious package)
- [MAL-2025-164245](https://insights.sbomify.com/MAL-2025-164245/): Malicious code in piluka-kaialbu-nunubai (npm) (malicious package)
- [MAL-2025-164244](https://insights.sbomify.com/MAL-2025-164244/): Malicious code in piluka-kaialbu-nunbai (npm) (malicious package)
- [MAL-2025-164243](https://insights.sbomify.com/MAL-2025-164243/): Malicious code in piluka-kaialbu-nunai (npm) (malicious package)
- [MAL-2025-164242](https://insights.sbomify.com/MAL-2025-164242/): Malicious code in piluka-kaialbu-nuna (npm) (malicious package)
- [MAL-2025-164241](https://insights.sbomify.com/MAL-2025-164241/): Malicious code in piluka-kaialbu-kiuna (npm) (malicious package)
- [MAL-2025-164240](https://insights.sbomify.com/MAL-2025-164240/): Malicious code in piluka-kaialbu-kiluna (npm) (malicious package)
- [MAL-2025-16424](https://insights.sbomify.com/MAL-2025-16424/): Malicious code in cache-table-cloud-encrypt-reject (npm) (malicious package)
- [MAL-2025-164239](https://insights.sbomify.com/MAL-2025-164239/): Malicious code in piluka-kaialbu-iuna (npm) (malicious package)
- [MAL-2025-164238](https://insights.sbomify.com/MAL-2025-164238/): Malicious code in piluka-kaialbu-inuna (npm) (malicious package)
- [MAL-2025-164237](https://insights.sbomify.com/MAL-2025-164237/): Malicious code in piluka-kaali-bicupaibai (npm) (malicious package)
- [MAL-2025-164236](https://insights.sbomify.com/MAL-2025-164236/): Malicious code in piluka-aluni-pibalim (npm) (malicious package)
- [MAL-2025-164235](https://insights.sbomify.com/MAL-2025-164235/): Malicious code in piluka-aluni-pibali (npm) (malicious package)
- [MAL-2025-164234](https://insights.sbomify.com/MAL-2025-164234/): Malicious code in piluka-aluni-pbai (npm) (malicious package)
- [MAL-2025-164233](https://insights.sbomify.com/MAL-2025-164233/): Malicious code in piluka-aluni-ipibai (npm) (malicious package)
- [MAL-2025-164232](https://insights.sbomify.com/MAL-2025-164232/): Malicious code in piluka-aluni-ipbai (npm) (malicious package)
- [MAL-2025-164231](https://insights.sbomify.com/MAL-2025-164231/): Malicious code in piluka-alun-ipibai (npm) (malicious package)
- [MAL-2025-164230](https://insights.sbomify.com/MAL-2025-164230/): Malicious code in piluka-alulni-pibalima (npm) (malicious package)
- [MAL-2025-16423](https://insights.sbomify.com/MAL-2025-16423/): Malicious code in cache-omega-socket-decrypt-xml (npm) (malicious package)
- [MAL-2025-164229](https://insights.sbomify.com/MAL-2025-164229/): Malicious code in piluka-aln-ipibai (npm) (malicious package)
- [MAL-2025-164228](https://insights.sbomify.com/MAL-2025-164228/): Malicious code in piluka-ali-ipibi (npm) (malicious package)
- [MAL-2025-164227](https://insights.sbomify.com/MAL-2025-164227/): Malicious code in piluka-ali-ipibai (npm) (malicious package)
- [MAL-2025-164226](https://insights.sbomify.com/MAL-2025-164226/): Malicious code in piluka-ali-ipib (npm) (malicious package)
- [MAL-2025-164225](https://insights.sbomify.com/MAL-2025-164225/): Malicious code in piluka-ali-icupaibai (npm) (malicious package)
- [MAL-2025-164224](https://insights.sbomify.com/MAL-2025-164224/): Malicious code in piluka-ali-icpibai (npm) (malicious package)
- [MAL-2025-164223](https://insights.sbomify.com/MAL-2025-164223/): Malicious code in piluka-ali-icpaibai (npm) (malicious package)
- [MAL-2025-164222](https://insights.sbomify.com/MAL-2025-164222/): Malicious code in piluka-ali-bicupaibai (npm) (malicious package)
- [MAL-2025-164221](https://insights.sbomify.com/MAL-2025-164221/): Malicious code in pilu-aku-kin (npm) (malicious package)
- [MAL-2025-164220](https://insights.sbomify.com/MAL-2025-164220/): Malicious code in pilka-luzmu-kinuijani (npm) (malicious package)
- [MAL-2025-16422](https://insights.sbomify.com/MAL-2025-16422/): Malicious code in cache-mgt (npm) (malicious package)
- [MAL-2025-164219](https://insights.sbomify.com/MAL-2025-164219/): Malicious code in pilka-luzmu-kinugijani (npm) (malicious package)
- [MAL-2025-164218](https://insights.sbomify.com/MAL-2025-164218/): Malicious code in pilka-luzmu-kinuani (npm) (malicious package)
- [MAL-2025-164217](https://insights.sbomify.com/MAL-2025-164217/): Malicious code in pilka-luzimu-kinuani (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1218/
