# Vulnerabilities published in 2025 - [MAL-2025-89405](https://insights.sbomify.com/MAL-2025-89405/): Malicious code in patria-kue91-riris (npm) (malicious package) - [MAL-2025-89404](https://insights.sbomify.com/MAL-2025-89404/): Malicious code in patria-kue55-miaww (npm) (malicious package) - [MAL-2025-89403](https://insights.sbomify.com/MAL-2025-89403/): Malicious code in patria-kue18-kyuki (npm) (malicious package) - [MAL-2025-89402](https://insights.sbomify.com/MAL-2025-89402/): Malicious code in patria-klentik86-miaww (npm) (malicious package) - [MAL-2025-89401](https://insights.sbomify.com/MAL-2025-89401/): Malicious code in patria-klentik57-kyuki (npm) (malicious package) - [MAL-2025-89400](https://insights.sbomify.com/MAL-2025-89400/): Malicious code in patria-klanting38-riris (npm) (malicious package) - [MAL-2025-8940](https://insights.sbomify.com/MAL-2025-8940/): Malicious code in @malware-test-sorgo-dying-tomes-snarl/test-mlw3-sorgo-dying-tomes-snarl (npm) (malicious package) - [MAL-2025-894](https://insights.sbomify.com/MAL-2025-894/): Malicious code in MicrŠ¾soft.EntetyFrameworkCore (NuGet) (malicious package) - [MAL-2025-89399](https://insights.sbomify.com/MAL-2025-89399/): Malicious code in patria-ketoprak88-miaww (npm) (malicious package) - [MAL-2025-89398](https://insights.sbomify.com/MAL-2025-89398/): Malicious code in patria-ketoprak1-riris (npm) (malicious package) - [MAL-2025-89397](https://insights.sbomify.com/MAL-2025-89397/): Malicious code in patria-keripik66-crottsekebon (npm) (malicious package) - [MAL-2025-89396](https://insights.sbomify.com/MAL-2025-89396/): Malicious code in patria-keraktelor82-riris (npm) (malicious package) - [MAL-2025-89395](https://insights.sbomify.com/MAL-2025-89395/): Malicious code in patria-keraktelor37-miaww (npm) (malicious package) - [MAL-2025-89394](https://insights.sbomify.com/MAL-2025-89394/): Malicious code in patria-kembang15-riris (npm) (malicious package) - [MAL-2025-89393](https://insights.sbomify.com/MAL-2025-89393/): Malicious code in patria-kacang58-apidev (npm) (malicious package) - [MAL-2025-89392](https://insights.sbomify.com/MAL-2025-89392/): Malicious code in patria-jus34-riris (npm) (malicious package) - [MAL-2025-89391](https://insights.sbomify.com/MAL-2025-89391/): Malicious code in patria-jengkol32-apidev (npm) (malicious package) - [MAL-2025-89390](https://insights.sbomify.com/MAL-2025-89390/): Malicious code in patria-jamblang21-riris (npm) (malicious package) - [MAL-2025-8939](https://insights.sbomify.com/MAL-2025-8939/): Malicious code in @malware-test-sored-novel-afear-neves/test-mlw3-sored-novel-afear-neves (npm) (malicious package) - [MAL-2025-89389](https://insights.sbomify.com/MAL-2025-89389/): Malicious code in patria-gudeg52-miaww (npm) (malicious package) - [MAL-2025-89388](https://insights.sbomify.com/MAL-2025-89388/): Malicious code in patria-gudeg45-wekto (npm) (malicious package) - [MAL-2025-89387](https://insights.sbomify.com/MAL-2025-89387/): Malicious code in patria-gudeg28-miaww (npm) (malicious package) - [MAL-2025-89386](https://insights.sbomify.com/MAL-2025-89386/): Malicious code in patria-gorengan73-crottsekebon (npm) (malicious package) - [MAL-2025-89385](https://insights.sbomify.com/MAL-2025-89385/): Malicious code in patria-getuk67-miaww (npm) (malicious package) - [MAL-2025-89384](https://insights.sbomify.com/MAL-2025-89384/): Malicious code in patria-getas63-miaww (npm) (malicious package) - [MAL-2025-89383](https://insights.sbomify.com/MAL-2025-89383/): Malicious code in patria-gaplek62-crottsekebon (npm) (malicious package) - [MAL-2025-89382](https://insights.sbomify.com/MAL-2025-89382/): Malicious code in patria-enting85-riris (npm) (malicious package) - [MAL-2025-89381](https://insights.sbomify.com/MAL-2025-89381/): Malicious code in patria-dradag36-miaww (npm) (malicious package) - [MAL-2025-89380](https://insights.sbomify.com/MAL-2025-89380/): Malicious code in patria-dodol82-riris (npm) (malicious package) - [MAL-2025-8938](https://insights.sbomify.com/MAL-2025-8938/): Malicious code in @malware-test-sordo-quips-tokes-flory/test-mlw3-sordo-quips-tokes-flory (npm) (malicious package) - [MAL-2025-89379](https://insights.sbomify.com/MAL-2025-89379/): Malicious code in patria-dodol33-miaww (npm) (malicious package) - [MAL-2025-89378](https://insights.sbomify.com/MAL-2025-89378/): Malicious code in patria-bubursumsum68-miaww (npm) (malicious package) - [MAL-2025-89377](https://insights.sbomify.com/MAL-2025-89377/): Malicious code in patria-bubursumsum16-riris (npm) (malicious package) - [MAL-2025-89376](https://insights.sbomify.com/MAL-2025-89376/): Malicious code in patria-bubur12-miaww (npm) (malicious package) - [MAL-2025-89375](https://insights.sbomify.com/MAL-2025-89375/): Malicious code in patria-brengkes67-riris (npm) (malicious package) - [MAL-2025-89374](https://insights.sbomify.com/MAL-2025-89374/): Malicious code in patria-brengkes28-riris (npm) (malicious package) - [MAL-2025-89373](https://insights.sbomify.com/MAL-2025-89373/): Malicious code in patria-bakwan68-miaww (npm) (malicious package) - [MAL-2025-89372](https://insights.sbomify.com/MAL-2025-89372/): Malicious code in patria-bakwan64-miaww (npm) (malicious package) - [MAL-2025-89371](https://insights.sbomify.com/MAL-2025-89371/): Malicious code in patria-bakwan44-riris (npm) (malicious package) - [MAL-2025-89370](https://insights.sbomify.com/MAL-2025-89370/): Malicious code in patria-bakso62-riris (npm) (malicious package) - [MAL-2025-8937](https://insights.sbomify.com/MAL-2025-8937/): Malicious code in @malware-test-sooty-gapes-frore-kombu/test-mlw3-sooty-gapes-frore-kombu (npm) (malicious package) - [MAL-2025-89369](https://insights.sbomify.com/MAL-2025-89369/): Malicious code in patria-asinan71-crottsekebon (npm) (malicious package) - [MAL-2025-89368](https://insights.sbomify.com/MAL-2025-89368/): Malicious code in patria-asinan37-riris (npm) (malicious package) - [MAL-2025-89367](https://insights.sbomify.com/MAL-2025-89367/): Malicious code in patient_owl_z3n (npm) (malicious package) - [MAL-2025-89366](https://insights.sbomify.com/MAL-2025-89366/): Malicious code in past_skunk_z3n (npm) (malicious package) - [MAL-2025-89365](https://insights.sbomify.com/MAL-2025-89365/): Malicious code in past_hoverfly_z3n (npm) (malicious package) - [MAL-2025-89364](https://insights.sbomify.com/MAL-2025-89364/): Malicious code in past_gorilla_z3n (npm) (malicious package) - [MAL-2025-89363](https://insights.sbomify.com/MAL-2025-89363/): Malicious code in past_frog_z3n (npm) (malicious package) - [MAL-2025-89362](https://insights.sbomify.com/MAL-2025-89362/): Malicious code in passive_ermine_z3n (npm) (malicious package) - [MAL-2025-89361](https://insights.sbomify.com/MAL-2025-89361/): Malicious code in passing_panda_z3n (npm) (malicious package) - [MAL-2025-89360](https://insights.sbomify.com/MAL-2025-89360/): Malicious code in particular_snake_z3n (npm) (malicious package) - [MAL-2025-8936](https://insights.sbomify.com/MAL-2025-8936/): Malicious code in @malware-test-sools-appay-hafts-lowes/test-mlw3-sools-appay-hafts-lowes (npm) (malicious package) - [MAL-2025-89359](https://insights.sbomify.com/MAL-2025-89359/): Malicious code in particular_albatross_z3n (npm) (malicious package) - [MAL-2025-89358](https://insights.sbomify.com/MAL-2025-89358/): Malicious code in partial_owl_z3n (npm) (malicious package) - [MAL-2025-89357](https://insights.sbomify.com/MAL-2025-89357/): Malicious code in partial_asp_z3n (npm) (malicious package) - [MAL-2025-89356](https://insights.sbomify.com/MAL-2025-89356/): Malicious code in parliamentary_panther_z3n (npm) (malicious package) - [MAL-2025-89355](https://insights.sbomify.com/MAL-2025-89355/): Malicious code in parallel_platypus_z3n (npm) (malicious package) - [MAL-2025-89354](https://insights.sbomify.com/MAL-2025-89354/): Malicious code in parallel_piranha_z3n (npm) (malicious package) - [MAL-2025-89353](https://insights.sbomify.com/MAL-2025-89353/): Malicious code in parallel_gibbon_z3n (npm) (malicious package) - [MAL-2025-89352](https://insights.sbomify.com/MAL-2025-89352/): Malicious code in panicky_mastodon_z3n (npm) (malicious package) - [MAL-2025-89351](https://insights.sbomify.com/MAL-2025-89351/): Malicious code in panicky_falcon_z3n (npm) (malicious package) - [MAL-2025-89350](https://insights.sbomify.com/MAL-2025-89350/): Malicious code in pale_tortoise_z3n (npm) (malicious package) - [MAL-2025-8935](https://insights.sbomify.com/MAL-2025-8935/): Malicious code in @malware-test-sones-amove-roosa-hyena/test-mlw3-sones-amove-roosa-hyena (npm) (malicious package) - [MAL-2025-89349](https://insights.sbomify.com/MAL-2025-89349/): Malicious code in painful_hedgehog_z3n (npm) (malicious package) - [MAL-2025-89348](https://insights.sbomify.com/MAL-2025-89348/): Malicious code in overwhelming_lynx_z3n (npm) (malicious package) - [MAL-2025-89347](https://insights.sbomify.com/MAL-2025-89347/): Malicious code in overwhelming_grouse_z3n (npm) (malicious package) - [MAL-2025-89346](https://insights.sbomify.com/MAL-2025-89346/): Malicious code in overwhelming_egret_z3n (npm) (malicious package) - [MAL-2025-89345](https://insights.sbomify.com/MAL-2025-89345/): Malicious code in overseas_wombat_z3n (npm) (malicious package) - [MAL-2025-89344](https://insights.sbomify.com/MAL-2025-89344/): Malicious code in overall_wildcat_z3n (npm) (malicious package) - [MAL-2025-89343](https://insights.sbomify.com/MAL-2025-89343/): Malicious code in overall_tern_z3n (npm) (malicious package) - [MAL-2025-89342](https://insights.sbomify.com/MAL-2025-89342/): Malicious code in overall_silverfish_z3n (npm) (malicious package) - [MAL-2025-89341](https://insights.sbomify.com/MAL-2025-89341/): Malicious code in overall_finch_z3n (npm) (malicious package) - [MAL-2025-89340](https://insights.sbomify.com/MAL-2025-89340/): Malicious code in outside_rhinoceros_z3n (npm) (malicious package) - [MAL-2025-8934](https://insights.sbomify.com/MAL-2025-8934/): Malicious code in @malware-test-solus-belly-praus-aredd/test-mlw3-solus-belly-praus-aredd (npm) (malicious package) - [MAL-2025-89339](https://insights.sbomify.com/MAL-2025-89339/): Malicious code in outside_ocelot_z3n (npm) (malicious package) - [MAL-2025-89338](https://insights.sbomify.com/MAL-2025-89338/): Malicious code in outside_koala_z3n (npm) (malicious package) - [MAL-2025-89337](https://insights.sbomify.com/MAL-2025-89337/): Malicious code in outside_finch_z3n (npm) (malicious package) - [MAL-2025-89336](https://insights.sbomify.com/MAL-2025-89336/): Malicious code in outrageous_duck_z3n (npm) (malicious package) - [MAL-2025-89335](https://insights.sbomify.com/MAL-2025-89335/): Malicious code in outer_squirrel_z3n (npm) (malicious package) - [MAL-2025-89334](https://insights.sbomify.com/MAL-2025-89334/): Malicious code in outer_crocodile_z3n (npm) (malicious package) - [MAL-2025-89333](https://insights.sbomify.com/MAL-2025-89333/): Malicious code in outdoor_swan_z3n (npm) (malicious package) - [MAL-2025-89332](https://insights.sbomify.com/MAL-2025-89332/): Malicious code in other_primate_z3n (npm) (malicious package) - [MAL-2025-89331](https://insights.sbomify.com/MAL-2025-89331/): Malicious code in other_marmot_z3n (npm) (malicious package) - [MAL-2025-89330](https://insights.sbomify.com/MAL-2025-89330/): Malicious code in other_mammal_z3n (npm) (malicious package) - [MAL-2025-8933](https://insights.sbomify.com/MAL-2025-8933/): Malicious code in @malware-test-soken-ciaos-scuds-sicko/test-mlw3-soken-ciaos-scuds-sicko (npm) (malicious package) - [MAL-2025-89329](https://insights.sbomify.com/MAL-2025-89329/): Malicious code in orthodox_lamprey_z3n (npm) (malicious package) - [MAL-2025-89328](https://insights.sbomify.com/MAL-2025-89328/): Malicious code in orthodox_cat_z3n (npm) (malicious package) - [MAL-2025-89327](https://insights.sbomify.com/MAL-2025-89327/): Malicious code in original_vole_z3n (npm) (malicious package) - [MAL-2025-89326](https://insights.sbomify.com/MAL-2025-89326/): Malicious code in original_swift_z3n (npm) (malicious package) - [MAL-2025-89325](https://insights.sbomify.com/MAL-2025-89325/): Malicious code in original_swallow_z3n (npm) (malicious package) - [MAL-2025-89324](https://insights.sbomify.com/MAL-2025-89324/): Malicious code in original_quail_z3n (npm) (malicious package) - [MAL-2025-89323](https://insights.sbomify.com/MAL-2025-89323/): Malicious code in original_elephant_z3n (npm) (malicious package) - [MAL-2025-89322](https://insights.sbomify.com/MAL-2025-89322/): Malicious code in organic_swallow_z3n (npm) (malicious package) - [MAL-2025-89321](https://insights.sbomify.com/MAL-2025-89321/): Malicious code in organic_stoat_z3n (npm) (malicious package) - [MAL-2025-89320](https://insights.sbomify.com/MAL-2025-89320/): Malicious code in organic_bee_z3n (npm) (malicious package) - [MAL-2025-8932](https://insights.sbomify.com/MAL-2025-8932/): Malicious code in @malware-test-soddy-gummy-homes-ashet/test-mlw3-soddy-gummy-homes-ashet (npm) (malicious package) - [MAL-2025-89319](https://insights.sbomify.com/MAL-2025-89319/): Malicious code in ordinary_ladybug_z3n (npm) (malicious package) - [MAL-2025-89318](https://insights.sbomify.com/MAL-2025-89318/): Malicious code in oral_cuckoo_z3n (npm) (malicious package) - [MAL-2025-89317](https://insights.sbomify.com/MAL-2025-89317/): Malicious code in opposite_alligator_z3n (npm) (malicious package) - [MAL-2025-89316](https://insights.sbomify.com/MAL-2025-89316/): Malicious code in operational_pig_z3n (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/122/