# Vulnerabilities published in 2025


- [MAL-2025-89135](https://insights.sbomify.com/MAL-2025-89135/): Malicious code in ogi-telurtahu72-riris (npm) (malicious package)
- [MAL-2025-89134](https://insights.sbomify.com/MAL-2025-89134/): Malicious code in ogi-tek66-riris (npm) (malicious package)
- [MAL-2025-89133](https://insights.sbomify.com/MAL-2025-89133/): Malicious code in ogi-tapai98-riris (npm) (malicious package)
- [MAL-2025-89132](https://insights.sbomify.com/MAL-2025-89132/): Malicious code in ogi-takokak40-miaww (npm) (malicious package)
- [MAL-2025-89131](https://insights.sbomify.com/MAL-2025-89131/): Malicious code in ogi-tahutek69-wekto (npm) (malicious package)
- [MAL-2025-89130](https://insights.sbomify.com/MAL-2025-89130/): Malicious code in ogi-tahu79-riris (npm) (malicious package)
- [MAL-2025-8913](https://insights.sbomify.com/MAL-2025-8913/): Malicious code in @malware-test-silex-oracy-grows-mened/test-mlw3-silex-oracy-grows-mened (npm) (malicious package)
- [MAL-2025-89129](https://insights.sbomify.com/MAL-2025-89129/): Malicious code in ogi-sroto15-miaww (npm) (malicious package)
- [MAL-2025-89128](https://insights.sbomify.com/MAL-2025-89128/): Malicious code in ogi-soto91-riris (npm) (malicious package)
- [MAL-2025-89127](https://insights.sbomify.com/MAL-2025-89127/): Malicious code in ogi-soto8-riris (npm) (malicious package)
- [MAL-2025-89126](https://insights.sbomify.com/MAL-2025-89126/): Malicious code in ogi-soto64-miaww (npm) (malicious package)
- [MAL-2025-89125](https://insights.sbomify.com/MAL-2025-89125/): Malicious code in ogi-semur49-riris (npm) (malicious package)
- [MAL-2025-89124](https://insights.sbomify.com/MAL-2025-89124/): Malicious code in ogi-semur30-miaww (npm) (malicious package)
- [MAL-2025-89123](https://insights.sbomify.com/MAL-2025-89123/): Malicious code in ogi-sego17-kyuki (npm) (malicious package)
- [MAL-2025-89122](https://insights.sbomify.com/MAL-2025-89122/): Malicious code in ogi-sate84-riris (npm) (malicious package)
- [MAL-2025-89121](https://insights.sbomify.com/MAL-2025-89121/): Malicious code in ogi-sate36-miaww (npm) (malicious package)
- [MAL-2025-89120](https://insights.sbomify.com/MAL-2025-89120/): Malicious code in ogi-sambalado82-riris (npm) (malicious package)
- [MAL-2025-8912](https://insights.sbomify.com/MAL-2025-8912/): Malicious code in @malware-test-silex-bilgy-attic-nates/test-mlw3-silex-bilgy-attic-nates (npm) (malicious package)
- [MAL-2025-89119](https://insights.sbomify.com/MAL-2025-89119/): Malicious code in ogi-sambalado75-miaww (npm) (malicious package)
- [MAL-2025-89118](https://insights.sbomify.com/MAL-2025-89118/): Malicious code in ogi-ruwet26-miaww (npm) (malicious package)
- [MAL-2025-89117](https://insights.sbomify.com/MAL-2025-89117/): Malicious code in ogi-rujaksoto7-miaww (npm) (malicious package)
- [MAL-2025-89116](https://insights.sbomify.com/MAL-2025-89116/): Malicious code in ogi-rujak34-crottsekebon (npm) (malicious package)
- [MAL-2025-89115](https://insights.sbomify.com/MAL-2025-89115/): Malicious code in ogi-rojak51-riris (npm) (malicious package)
- [MAL-2025-89114](https://insights.sbomify.com/MAL-2025-89114/): Malicious code in ogi-rojak32-miaww (npm) (malicious package)
- [MAL-2025-89113](https://insights.sbomify.com/MAL-2025-89113/): Malicious code in ogi-rendang1-miaww (npm) (malicious package)
- [MAL-2025-89112](https://insights.sbomify.com/MAL-2025-89112/): Malicious code in ogi-rawon55-riris (npm) (malicious package)
- [MAL-2025-89111](https://insights.sbomify.com/MAL-2025-89111/): Malicious code in ogi-rangi78-kyuki (npm) (malicious package)
- [MAL-2025-89110](https://insights.sbomify.com/MAL-2025-89110/): Malicious code in ogi-ragi67-miaww (npm) (malicious package)
- [MAL-2025-8911](https://insights.sbomify.com/MAL-2025-8911/): Malicious code in @malware-test-setts-abrin-morts-skail/test-mlw3-setts-abrin-morts-skail (npm) (malicious package)
- [MAL-2025-89109](https://insights.sbomify.com/MAL-2025-89109/): Malicious code in ogi-peyek61-kyuki (npm) (malicious package)
- [MAL-2025-89108](https://insights.sbomify.com/MAL-2025-89108/): Malicious code in ogi-pecel87-riris (npm) (malicious package)
- [MAL-2025-89107](https://insights.sbomify.com/MAL-2025-89107/): Malicious code in ogi-otak-otak75-miaww (npm) (malicious package)
- [MAL-2025-89106](https://insights.sbomify.com/MAL-2025-89106/): Malicious code in ogi-oncom18-riris (npm) (malicious package)
- [MAL-2025-89105](https://insights.sbomify.com/MAL-2025-89105/): Malicious code in ogi-nasisayur98-riris (npm) (malicious package)
- [MAL-2025-89104](https://insights.sbomify.com/MAL-2025-89104/): Malicious code in ogi-nasisayur90-riris (npm) (malicious package)
- [MAL-2025-89103](https://insights.sbomify.com/MAL-2025-89103/): Malicious code in ogi-nasi57-miaww (npm) (malicious package)
- [MAL-2025-89102](https://insights.sbomify.com/MAL-2025-89102/): Malicious code in ogi-nasi43-riris (npm) (malicious package)
- [MAL-2025-89101](https://insights.sbomify.com/MAL-2025-89101/): Malicious code in ogi-miemee82-riris (npm) (malicious package)
- [MAL-2025-89100](https://insights.sbomify.com/MAL-2025-89100/): Malicious code in ogi-miemee15-miaww (npm) (malicious package)
- [MAL-2025-8910](https://insights.sbomify.com/MAL-2025-8910/): Malicious code in @malware-test-serve-mutch-uncut-mothy/test-mlw3-serve-mutch-uncut-mothy (npm) (malicious package)
- [MAL-2025-891](https://insights.sbomify.com/MAL-2025-891/): Malicious code in yandex-music-int (npm) (malicious package)
- [MAL-2025-89099](https://insights.sbomify.com/MAL-2025-89099/): Malicious code in ogi-miebogor37-kyuki (npm) (malicious package)
- [MAL-2025-89098](https://insights.sbomify.com/MAL-2025-89098/): Malicious code in ogi-mieaceh14-kyuki (npm) (malicious package)
- [MAL-2025-89097](https://insights.sbomify.com/MAL-2025-89097/): Malicious code in ogi-menjes31-miaww (npm) (malicious package)
- [MAL-2025-89096](https://insights.sbomify.com/MAL-2025-89096/): Malicious code in ogi-mendut36-riris (npm) (malicious package)
- [MAL-2025-89095](https://insights.sbomify.com/MAL-2025-89095/): Malicious code in ogi-mendut21-miaww (npm) (malicious package)
- [MAL-2025-89094](https://insights.sbomify.com/MAL-2025-89094/): Malicious code in ogi-martabak95-riris (npm) (malicious package)
- [MAL-2025-89093](https://insights.sbomify.com/MAL-2025-89093/): Malicious code in ogi-martabak84-riris (npm) (malicious package)
- [MAL-2025-89092](https://insights.sbomify.com/MAL-2025-89092/): Malicious code in ogi-martabak65-miaww (npm) (malicious package)
- [MAL-2025-89091](https://insights.sbomify.com/MAL-2025-89091/): Malicious code in ogi-mangga44-riris (npm) (malicious package)
- [MAL-2025-89090](https://insights.sbomify.com/MAL-2025-89090/): Malicious code in ogi-lutis32-miaww (npm) (malicious package)
- [MAL-2025-8909](https://insights.sbomify.com/MAL-2025-8909/): Malicious code in @malware-test-serum-tidal-bloop-laths/test-mlw3-serum-tidal-bloop-laths (npm) (malicious package)
- [MAL-2025-89089](https://insights.sbomify.com/MAL-2025-89089/): Malicious code in ogi-lontong54-riris (npm) (malicious package)
- [MAL-2025-89088](https://insights.sbomify.com/MAL-2025-89088/): Malicious code in ogi-lontong42-miaww (npm) (malicious package)
- [MAL-2025-89087](https://insights.sbomify.com/MAL-2025-89087/): Malicious code in ogi-lontong29-riris (npm) (malicious package)
- [MAL-2025-89086](https://insights.sbomify.com/MAL-2025-89086/): Malicious code in ogi-liwet6-riris (npm) (malicious package)
- [MAL-2025-89085](https://insights.sbomify.com/MAL-2025-89085/): Malicious code in ogi-lepet67-apidev (npm) (malicious package)
- [MAL-2025-89084](https://insights.sbomify.com/MAL-2025-89084/): Malicious code in ogi-lengko64-riris (npm) (malicious package)
- [MAL-2025-89083](https://insights.sbomify.com/MAL-2025-89083/): Malicious code in ogi-lengko16-wekto (npm) (malicious package)
- [MAL-2025-89082](https://insights.sbomify.com/MAL-2025-89082/): Malicious code in ogi-kue97-miaww (npm) (malicious package)
- [MAL-2025-89081](https://insights.sbomify.com/MAL-2025-89081/): Malicious code in ogi-kue56-riris (npm) (malicious package)
- [MAL-2025-89080](https://insights.sbomify.com/MAL-2025-89080/): Malicious code in ogi-kue3-miaww (npm) (malicious package)
- [MAL-2025-8908](https://insights.sbomify.com/MAL-2025-8908/): Malicious code in @malware-test-sepal-reify-trets-reeds/test-mlw3-sepal-reify-trets-reeds (npm) (malicious package)
- [MAL-2025-89079](https://insights.sbomify.com/MAL-2025-89079/): Malicious code in ogi-kue18-miaww (npm) (malicious package)
- [MAL-2025-89078](https://insights.sbomify.com/MAL-2025-89078/): Malicious code in ogi-kue13-riris (npm) (malicious package)
- [MAL-2025-89077](https://insights.sbomify.com/MAL-2025-89077/): Malicious code in ogi-kripik65-miaww (npm) (malicious package)
- [MAL-2025-89076](https://insights.sbomify.com/MAL-2025-89076/): Malicious code in ogi-kripik30-miaww (npm) (malicious package)
- [MAL-2025-89075](https://insights.sbomify.com/MAL-2025-89075/): Malicious code in ogi-klipo63-riris (npm) (malicious package)
- [MAL-2025-89074](https://insights.sbomify.com/MAL-2025-89074/): Malicious code in ogi-klentik99-miaww (npm) (malicious package)
- [MAL-2025-89073](https://insights.sbomify.com/MAL-2025-89073/): Malicious code in ogi-klentik30-miaww (npm) (malicious package)
- [MAL-2025-89072](https://insights.sbomify.com/MAL-2025-89072/): Malicious code in ogi-ketoprak27-riris (npm) (malicious package)
- [MAL-2025-89071](https://insights.sbomify.com/MAL-2025-89071/): Malicious code in ogi-ketan94-miaww (npm) (malicious package)
- [MAL-2025-89070](https://insights.sbomify.com/MAL-2025-89070/): Malicious code in ogi-ketan54-miaww (npm) (malicious package)
- [MAL-2025-8907](https://insights.sbomify.com/MAL-2025-8907/): Malicious code in @malware-test-seifs-impot-basso-koban/test-mlw3-seifs-impot-basso-koban (npm) (malicious package)
- [MAL-2025-89069](https://insights.sbomify.com/MAL-2025-89069/): Malicious code in ogi-keripik60-riris (npm) (malicious package)
- [MAL-2025-89068](https://insights.sbomify.com/MAL-2025-89068/): Malicious code in ogi-keripik60-miaww (npm) (malicious package)
- [MAL-2025-89067](https://insights.sbomify.com/MAL-2025-89067/): Malicious code in ogi-keripik14-riris (npm) (malicious package)
- [MAL-2025-89066](https://insights.sbomify.com/MAL-2025-89066/): Malicious code in ogi-keripik12-miaww (npm) (malicious package)
- [MAL-2025-89065](https://insights.sbomify.com/MAL-2025-89065/): Malicious code in ogi-kentang60-miaww (npm) (malicious package)
- [MAL-2025-89064](https://insights.sbomify.com/MAL-2025-89064/): Malicious code in ogi-kemplang42-riris (npm) (malicious package)
- [MAL-2025-89063](https://insights.sbomify.com/MAL-2025-89063/): Malicious code in ogi-jus69-miaww (npm) (malicious package)
- [MAL-2025-89062](https://insights.sbomify.com/MAL-2025-89062/): Malicious code in ogi-gorengan29-miaww (npm) (malicious package)
- [MAL-2025-89061](https://insights.sbomify.com/MAL-2025-89061/): Malicious code in ogi-gorengan12-riris (npm) (malicious package)
- [MAL-2025-89060](https://insights.sbomify.com/MAL-2025-89060/): Malicious code in ogi-gepuk16-riris (npm) (malicious package)
- [MAL-2025-8906](https://insights.sbomify.com/MAL-2025-8906/): Malicious code in @malware-test-segos-idols-twyer-spiks/test-mlw3-segos-idols-twyer-spiks (npm) (malicious package)
- [MAL-2025-89059](https://insights.sbomify.com/MAL-2025-89059/): Malicious code in ogi-gembus1-apidev (npm) (malicious package)
- [MAL-2025-89058](https://insights.sbomify.com/MAL-2025-89058/): Malicious code in ogi-gandul44-riris (npm) (malicious package)
- [MAL-2025-89057](https://insights.sbomify.com/MAL-2025-89057/): Malicious code in ogi-gado-gado26-miaww (npm) (malicious package)
- [MAL-2025-89056](https://insights.sbomify.com/MAL-2025-89056/): Malicious code in ogi-empal95-miaww (npm) (malicious package)
- [MAL-2025-89055](https://insights.sbomify.com/MAL-2025-89055/): Malicious code in ogi-dradag17-miaww (npm) (malicious package)
- [MAL-2025-89054](https://insights.sbomify.com/MAL-2025-89054/): Malicious code in ogi-buburayam31-riris (npm) (malicious package)
- [MAL-2025-89053](https://insights.sbomify.com/MAL-2025-89053/): Malicious code in ogi-buburayam26-miaww (npm) (malicious package)
- [MAL-2025-89052](https://insights.sbomify.com/MAL-2025-89052/): Malicious code in ogi-bubur96-riris (npm) (malicious package)
- [MAL-2025-89051](https://insights.sbomify.com/MAL-2025-89051/): Malicious code in ogi-brengkes5-miaww (npm) (malicious package)
- [MAL-2025-89050](https://insights.sbomify.com/MAL-2025-89050/): Malicious code in ogi-brengkes42-wekto (npm) (malicious package)
- [MAL-2025-8905](https://insights.sbomify.com/MAL-2025-8905/): Malicious code in @malware-test-secco-mouls-jiaos-adown/test-mlw3-secco-mouls-jiaos-adown (npm) (malicious package)
- [MAL-2025-89049](https://insights.sbomify.com/MAL-2025-89049/): Malicious code in ogi-bakwan99-miaww (npm) (malicious package)
- [MAL-2025-89048](https://insights.sbomify.com/MAL-2025-89048/): Malicious code in ogi-bakso89-miaww (npm) (malicious package)
- [MAL-2025-89047](https://insights.sbomify.com/MAL-2025-89047/): Malicious code in official_woodpecker_z3n (npm) (malicious package)
- [MAL-2025-89046](https://insights.sbomify.com/MAL-2025-89046/): Malicious code in official_dingo_z3n (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/125/