# Vulnerabilities published in 2025


- [MAL-2025-89045](https://insights.sbomify.com/MAL-2025-89045/): Malicious code in ocha-tongseng62-miaww (npm) (malicious package)
- [MAL-2025-89044](https://insights.sbomify.com/MAL-2025-89044/): Malicious code in ocha-tiwul79-riris (npm) (malicious package)
- [MAL-2025-89043](https://insights.sbomify.com/MAL-2025-89043/): Malicious code in ocha-tiwul100-miaww (npm) (malicious package)
- [MAL-2025-89042](https://insights.sbomify.com/MAL-2025-89042/): Malicious code in ocha-tempe27-riris (npm) (malicious package)
- [MAL-2025-89041](https://insights.sbomify.com/MAL-2025-89041/): Malicious code in ocha-telur7-miaww (npm) (malicious package)
- [MAL-2025-89040](https://insights.sbomify.com/MAL-2025-89040/): Malicious code in ocha-telur62-apidev (npm) (malicious package)
- [MAL-2025-8904](https://insights.sbomify.com/MAL-2025-8904/): Malicious code in @malware-test-sculs-glory-lants-elder/test-mlw3-sculs-glory-lants-elder (npm) (malicious package)
- [MAL-2025-89039](https://insights.sbomify.com/MAL-2025-89039/): Malicious code in ocha-tek83-riris (npm) (malicious package)
- [MAL-2025-89038](https://insights.sbomify.com/MAL-2025-89038/): Malicious code in ocha-teh64-riris (npm) (malicious package)
- [MAL-2025-89037](https://insights.sbomify.com/MAL-2025-89037/): Malicious code in ocha-tapai94-riris (npm) (malicious package)
- [MAL-2025-89036](https://insights.sbomify.com/MAL-2025-89036/): Malicious code in ocha-tahu32-kyuki (npm) (malicious package)
- [MAL-2025-89035](https://insights.sbomify.com/MAL-2025-89035/): Malicious code in ocha-tahu19-riris (npm) (malicious package)
- [MAL-2025-89034](https://insights.sbomify.com/MAL-2025-89034/): Malicious code in ocha-semur58-riris (npm) (malicious package)
- [MAL-2025-89033](https://insights.sbomify.com/MAL-2025-89033/): Malicious code in ocha-semur38-riris (npm) (malicious package)
- [MAL-2025-89032](https://insights.sbomify.com/MAL-2025-89032/): Malicious code in ocha-semur3-riris (npm) (malicious package)
- [MAL-2025-89031](https://insights.sbomify.com/MAL-2025-89031/): Malicious code in ocha-sate89-riris (npm) (malicious package)
- [MAL-2025-89030](https://insights.sbomify.com/MAL-2025-89030/): Malicious code in ocha-sate89-miaww (npm) (malicious package)
- [MAL-2025-8903](https://insights.sbomify.com/MAL-2025-8903/): Malicious code in @malware-test-scaws-skirl-braes-enorm/test-mlw3-scaws-skirl-braes-enorm (npm) (malicious package)
- [MAL-2025-89029](https://insights.sbomify.com/MAL-2025-89029/): Malicious code in ocha-sasag75-riris (npm) (malicious package)
- [MAL-2025-89028](https://insights.sbomify.com/MAL-2025-89028/): Malicious code in ocha-sambel45-miaww (npm) (malicious package)
- [MAL-2025-89027](https://insights.sbomify.com/MAL-2025-89027/): Malicious code in ocha-sambel31-riris (npm) (malicious package)
- [MAL-2025-89026](https://insights.sbomify.com/MAL-2025-89026/): Malicious code in ocha-sambel21-apidev (npm) (malicious package)
- [MAL-2025-89025](https://insights.sbomify.com/MAL-2025-89025/): Malicious code in ocha-sambalado2-miaww (npm) (malicious package)
- [MAL-2025-89024](https://insights.sbomify.com/MAL-2025-89024/): Malicious code in ocha-saguer85-riris (npm) (malicious package)
- [MAL-2025-89023](https://insights.sbomify.com/MAL-2025-89023/): Malicious code in ocha-ruwet100-miaww (npm) (malicious package)
- [MAL-2025-89022](https://insights.sbomify.com/MAL-2025-89022/): Malicious code in ocha-rujaksoto70-miaww (npm) (malicious package)
- [MAL-2025-89021](https://insights.sbomify.com/MAL-2025-89021/): Malicious code in ocha-rujaksoto21-riris (npm) (malicious package)
- [MAL-2025-89020](https://insights.sbomify.com/MAL-2025-89020/): Malicious code in ocha-rendang69-miaww (npm) (malicious package)
- [MAL-2025-8902](https://insights.sbomify.com/MAL-2025-8902/): Malicious code in @malware-test-scaud-reach-sored-quipo/test-mlw3-scaud-reach-sored-quipo (npm) (malicious package)
- [MAL-2025-89019](https://insights.sbomify.com/MAL-2025-89019/): Malicious code in ocha-rangi36-sluey (npm) (malicious package)
- [MAL-2025-89018](https://insights.sbomify.com/MAL-2025-89018/): Malicious code in ocha-ragi61-riris (npm) (malicious package)
- [MAL-2025-89017](https://insights.sbomify.com/MAL-2025-89017/): Malicious code in ocha-pecel71-miaww (npm) (malicious package)
- [MAL-2025-89016](https://insights.sbomify.com/MAL-2025-89016/): Malicious code in ocha-papeda39-riris (npm) (malicious package)
- [MAL-2025-89015](https://insights.sbomify.com/MAL-2025-89015/): Malicious code in ocha-otak-otak39-riris (npm) (malicious package)
- [MAL-2025-89014](https://insights.sbomify.com/MAL-2025-89014/): Malicious code in ocha-oncom92-miaww (npm) (malicious package)
- [MAL-2025-89013](https://insights.sbomify.com/MAL-2025-89013/): Malicious code in ocha-oncom60-miaww (npm) (malicious package)
- [MAL-2025-89012](https://insights.sbomify.com/MAL-2025-89012/): Malicious code in ocha-nasipecel57-riris (npm) (malicious package)
- [MAL-2025-89011](https://insights.sbomify.com/MAL-2025-89011/): Malicious code in ocha-nasicampur41-wekto (npm) (malicious package)
- [MAL-2025-89010](https://insights.sbomify.com/MAL-2025-89010/): Malicious code in ocha-nasicampur18-miaww (npm) (malicious package)
- [MAL-2025-8901](https://insights.sbomify.com/MAL-2025-8901/): Malicious code in @malware-test-satis-meads-larns-skyre/test-mlw3-satis-meads-larns-skyre (npm) (malicious package)
- [MAL-2025-89009](https://insights.sbomify.com/MAL-2025-89009/): Malicious code in ocha-naget79-riris (npm) (malicious package)
- [MAL-2025-89008](https://insights.sbomify.com/MAL-2025-89008/): Malicious code in ocha-mendoan9-miaww (npm) (malicious package)
- [MAL-2025-89007](https://insights.sbomify.com/MAL-2025-89007/): Malicious code in ocha-martabak46-riris (npm) (malicious package)
- [MAL-2025-89006](https://insights.sbomify.com/MAL-2025-89006/): Malicious code in ocha-mangut36-miaww (npm) (malicious package)
- [MAL-2025-89005](https://insights.sbomify.com/MAL-2025-89005/): Malicious code in ocha-mangut20-riris (npm) (malicious package)
- [MAL-2025-89004](https://insights.sbomify.com/MAL-2025-89004/): Malicious code in ocha-mangut1-riris (npm) (malicious package)
- [MAL-2025-89003](https://insights.sbomify.com/MAL-2025-89003/): Malicious code in ocha-lupis64-riris (npm) (malicious package)
- [MAL-2025-89002](https://insights.sbomify.com/MAL-2025-89002/): Malicious code in ocha-liwet25-miaww (npm) (malicious package)
- [MAL-2025-89001](https://insights.sbomify.com/MAL-2025-89001/): Malicious code in ocha-lepet16-miaww (npm) (malicious package)
- [MAL-2025-89000](https://insights.sbomify.com/MAL-2025-89000/): Malicious code in ocha-lengko91-riris (npm) (malicious package)
- [MAL-2025-8900](https://insights.sbomify.com/MAL-2025-8900/): Malicious code in @malware-test-sates-wheat-laced-norks/test-mlw3-sates-wheat-laced-norks (npm) (malicious package)
- [MAL-2025-890](https://insights.sbomify.com/MAL-2025-890/): Malicious code in xapi_test (npm) (malicious package)
- [MAL-2025-89](https://insights.sbomify.com/MAL-2025-89/): Malicious code in gateway-paypal (npm) (malicious package)
- [MAL-2025-88999](https://insights.sbomify.com/MAL-2025-88999/): Malicious code in ocha-lapis50-riris (npm) (malicious package)
- [MAL-2025-88998](https://insights.sbomify.com/MAL-2025-88998/): Malicious code in ocha-lapis36-miaww (npm) (malicious package)
- [MAL-2025-88997](https://insights.sbomify.com/MAL-2025-88997/): Malicious code in ocha-kue78-miaww (npm) (malicious package)
- [MAL-2025-88996](https://insights.sbomify.com/MAL-2025-88996/): Malicious code in ocha-kue77-miaww (npm) (malicious package)
- [MAL-2025-88995](https://insights.sbomify.com/MAL-2025-88995/): Malicious code in ocha-kue71-riris (npm) (malicious package)
- [MAL-2025-88994](https://insights.sbomify.com/MAL-2025-88994/): Malicious code in ocha-kue66-riris (npm) (malicious package)
- [MAL-2025-88993](https://insights.sbomify.com/MAL-2025-88993/): Malicious code in ocha-kue43-kyuki (npm) (malicious package)
- [MAL-2025-88992](https://insights.sbomify.com/MAL-2025-88992/): Malicious code in ocha-kue14-riris (npm) (malicious package)
- [MAL-2025-88991](https://insights.sbomify.com/MAL-2025-88991/): Malicious code in ocha-kue12-riris (npm) (malicious package)
- [MAL-2025-88990](https://insights.sbomify.com/MAL-2025-88990/): Malicious code in ocha-kolak98-miaww (npm) (malicious package)
- [MAL-2025-8899](https://insights.sbomify.com/MAL-2025-8899/): Malicious code in @malware-test-sated-evade-colas-maneh/test-mlw3-sated-evade-colas-maneh (npm) (malicious package)
- [MAL-2025-88989](https://insights.sbomify.com/MAL-2025-88989/): Malicious code in ocha-klanting56-riris (npm) (malicious package)
- [MAL-2025-88988](https://insights.sbomify.com/MAL-2025-88988/): Malicious code in ocha-klanting100-miaww (npm) (malicious package)
- [MAL-2025-88987](https://insights.sbomify.com/MAL-2025-88987/): Malicious code in ocha-ketoprak96-miaww (npm) (malicious package)
- [MAL-2025-88986](https://insights.sbomify.com/MAL-2025-88986/): Malicious code in ocha-keraktelor84-riris (npm) (malicious package)
- [MAL-2025-88985](https://insights.sbomify.com/MAL-2025-88985/): Malicious code in ocha-kentang69-miaww (npm) (malicious package)
- [MAL-2025-88984](https://insights.sbomify.com/MAL-2025-88984/): Malicious code in ocha-jus53-kyuki (npm) (malicious package)
- [MAL-2025-88983](https://insights.sbomify.com/MAL-2025-88983/): Malicious code in ocha-jamblang51-kyuki (npm) (malicious package)
- [MAL-2025-88982](https://insights.sbomify.com/MAL-2025-88982/): Malicious code in ocha-gulai28-riris (npm) (malicious package)
- [MAL-2025-88981](https://insights.sbomify.com/MAL-2025-88981/): Malicious code in ocha-gorengan57-miaww (npm) (malicious package)
- [MAL-2025-88980](https://insights.sbomify.com/MAL-2025-88980/): Malicious code in ocha-getuk31-wekto (npm) (malicious package)
- [MAL-2025-8898](https://insights.sbomify.com/MAL-2025-8898/): Malicious code in @malware-test-sames-pomes-barmy-throw/test-mlw3-sames-pomes-barmy-throw (npm) (malicious package)
- [MAL-2025-88979](https://insights.sbomify.com/MAL-2025-88979/): Malicious code in ocha-gandul61-kyuki (npm) (malicious package)
- [MAL-2025-88978](https://insights.sbomify.com/MAL-2025-88978/): Malicious code in ocha-gandul3-miaww (npm) (malicious package)
- [MAL-2025-88977](https://insights.sbomify.com/MAL-2025-88977/): Malicious code in ocha-esdoger98-riris (npm) (malicious package)
- [MAL-2025-88976](https://insights.sbomify.com/MAL-2025-88976/): Malicious code in ocha-empal83-miaww (npm) (malicious package)
- [MAL-2025-88975](https://insights.sbomify.com/MAL-2025-88975/): Malicious code in ocha-empal25-riris (npm) (malicious package)
- [MAL-2025-88974](https://insights.sbomify.com/MAL-2025-88974/): Malicious code in ocha-dradag75-miaww (npm) (malicious package)
- [MAL-2025-88973](https://insights.sbomify.com/MAL-2025-88973/): Malicious code in ocha-buburayam49-riris (npm) (malicious package)
- [MAL-2025-88972](https://insights.sbomify.com/MAL-2025-88972/): Malicious code in ocha-bubur87-miaww (npm) (malicious package)
- [MAL-2025-88971](https://insights.sbomify.com/MAL-2025-88971/): Malicious code in ocha-bakso65-miaww (npm) (malicious package)
- [MAL-2025-88970](https://insights.sbomify.com/MAL-2025-88970/): Malicious code in ocha-bakso21-riris (npm) (malicious package)
- [MAL-2025-8897](https://insights.sbomify.com/MAL-2025-8897/): Malicious code in @malware-test-saman-riems-aecia-peery/test-mlw3-saman-riems-aecia-peery (npm) (malicious package)
- [MAL-2025-88969](https://insights.sbomify.com/MAL-2025-88969/): Malicious code in occupational_egret_z3n (npm) (malicious package)
- [MAL-2025-88968](https://insights.sbomify.com/MAL-2025-88968/): Malicious code in occasional_panther_z3n (npm) (malicious package)
- [MAL-2025-88967](https://insights.sbomify.com/MAL-2025-88967/): Malicious code in obvious_lynx_z3n (npm) (malicious package)
- [MAL-2025-88966](https://insights.sbomify.com/MAL-2025-88966/): Malicious code in obvious_loon_z3n (npm) (malicious package)
- [MAL-2025-88965](https://insights.sbomify.com/MAL-2025-88965/): Malicious code in obnoxious_tarsier_z3n (npm) (malicious package)
- [MAL-2025-88964](https://insights.sbomify.com/MAL-2025-88964/): Malicious code in obliged_wolf_z3n (npm) (malicious package)
- [MAL-2025-88963](https://insights.sbomify.com/MAL-2025-88963/): Malicious code in obliged_wildcat_z3n (npm) (malicious package)
- [MAL-2025-88962](https://insights.sbomify.com/MAL-2025-88962/): Malicious code in objective_lion_z3n (npm) (malicious package)
- [MAL-2025-88961](https://insights.sbomify.com/MAL-2025-88961/): Malicious code in nutty_elephant_z3n (npm) (malicious package)
- [MAL-2025-88960](https://insights.sbomify.com/MAL-2025-88960/): Malicious code in nutritious_raven_z3n (npm) (malicious package)
- [MAL-2025-8896](https://insights.sbomify.com/MAL-2025-8896/): Malicious code in @malware-test-salle-swarf-samps-barge/test-mlw3-salle-swarf-samps-barge (npm) (malicious package)
- [MAL-2025-88959](https://insights.sbomify.com/MAL-2025-88959/): Malicious code in nurul-tumis88-miaww (npm) (malicious package)
- [MAL-2025-88958](https://insights.sbomify.com/MAL-2025-88958/): Malicious code in nurul-tumis55-riris (npm) (malicious package)
- [MAL-2025-88957](https://insights.sbomify.com/MAL-2025-88957/): Malicious code in nurul-tongseng65-miaww (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/126/