# Vulnerabilities published in 2025 - [MAL-2025-158187](https://insights.sbomify.com/MAL-2025-158187/): Malicious code in lintang-tea29 (npm) (malicious package) - [MAL-2025-158186](https://insights.sbomify.com/MAL-2025-158186/): Malicious code in lintang-tea28 (npm) (malicious package) - [MAL-2025-158185](https://insights.sbomify.com/MAL-2025-158185/): Malicious code in lintang-tea27 (npm) (malicious package) - [MAL-2025-158184](https://insights.sbomify.com/MAL-2025-158184/): Malicious code in lintang-tea26 (npm) (malicious package) - [MAL-2025-158183](https://insights.sbomify.com/MAL-2025-158183/): Malicious code in lintang-tea25 (npm) (malicious package) - [MAL-2025-158182](https://insights.sbomify.com/MAL-2025-158182/): Malicious code in lintang-tea24 (npm) (malicious package) - [MAL-2025-158181](https://insights.sbomify.com/MAL-2025-158181/): Malicious code in lintang-tea23 (npm) (malicious package) - [MAL-2025-158180](https://insights.sbomify.com/MAL-2025-158180/): Malicious code in lintang-tea22 (npm) (malicious package) - [MAL-2025-15818](https://insights.sbomify.com/MAL-2025-15818/): Malicious code in blippress (npm) (malicious package) - [MAL-2025-158179](https://insights.sbomify.com/MAL-2025-158179/): Malicious code in lintang-tea21 (npm) (malicious package) - [MAL-2025-158178](https://insights.sbomify.com/MAL-2025-158178/): Malicious code in lintang-tea20 (npm) (malicious package) - [MAL-2025-158177](https://insights.sbomify.com/MAL-2025-158177/): Malicious code in lintang-tea2 (npm) (malicious package) - [MAL-2025-158176](https://insights.sbomify.com/MAL-2025-158176/): Malicious code in lintang-tea19 (npm) (malicious package) - [MAL-2025-158175](https://insights.sbomify.com/MAL-2025-158175/): Malicious code in lintang-tea18 (npm) (malicious package) - [MAL-2025-158174](https://insights.sbomify.com/MAL-2025-158174/): Malicious code in lintang-tea17 (npm) (malicious package) - [MAL-2025-158173](https://insights.sbomify.com/MAL-2025-158173/): Malicious code in lintang-tea16 (npm) (malicious package) - [MAL-2025-158172](https://insights.sbomify.com/MAL-2025-158172/): Malicious code in lintang-tea15 (npm) (malicious package) - [MAL-2025-158171](https://insights.sbomify.com/MAL-2025-158171/): Malicious code in lintang-tea14 (npm) (malicious package) - [MAL-2025-158170](https://insights.sbomify.com/MAL-2025-158170/): Malicious code in lintang-tea13 (npm) (malicious package) - [MAL-2025-15817](https://insights.sbomify.com/MAL-2025-15817/): Malicious code in blipbot (npm) (malicious package) - [MAL-2025-158169](https://insights.sbomify.com/MAL-2025-158169/): Malicious code in lintang-tea12 (npm) (malicious package) - [MAL-2025-158168](https://insights.sbomify.com/MAL-2025-158168/): Malicious code in lintang-tea11 (npm) (malicious package) - [MAL-2025-158167](https://insights.sbomify.com/MAL-2025-158167/): Malicious code in lintang-tea101 (npm) (malicious package) - [MAL-2025-158166](https://insights.sbomify.com/MAL-2025-158166/): Malicious code in lintang-tea100 (npm) (malicious package) - [MAL-2025-158165](https://insights.sbomify.com/MAL-2025-158165/): Malicious code in lintang-tea10 (npm) (malicious package) - [MAL-2025-158164](https://insights.sbomify.com/MAL-2025-158164/): Malicious code in lintang-korea2 (npm) (malicious package) - [MAL-2025-158163](https://insights.sbomify.com/MAL-2025-158163/): Malicious code in lintang-korea1 (npm) (malicious package) - [MAL-2025-158162](https://insights.sbomify.com/MAL-2025-158162/): Malicious code in lina-poke9 (npm) (malicious package) - [MAL-2025-158161](https://insights.sbomify.com/MAL-2025-158161/): Malicious code in lina-poke8 (npm) (malicious package) - [MAL-2025-158160](https://insights.sbomify.com/MAL-2025-158160/): Malicious code in lina-poke73 (npm) (malicious package) - [MAL-2025-15816](https://insights.sbomify.com/MAL-2025-15816/): Malicious code in blimps (npm) (malicious package) - [MAL-2025-158159](https://insights.sbomify.com/MAL-2025-158159/): Malicious code in lina-poke72 (npm) (malicious package) - [MAL-2025-158158](https://insights.sbomify.com/MAL-2025-158158/): Malicious code in lina-poke71 (npm) (malicious package) - [MAL-2025-158157](https://insights.sbomify.com/MAL-2025-158157/): Malicious code in lina-poke70 (npm) (malicious package) - [MAL-2025-158156](https://insights.sbomify.com/MAL-2025-158156/): Malicious code in lina-poke7 (npm) (malicious package) - [MAL-2025-158155](https://insights.sbomify.com/MAL-2025-158155/): Malicious code in lina-poke69 (npm) (malicious package) - [MAL-2025-158154](https://insights.sbomify.com/MAL-2025-158154/): Malicious code in lina-poke68 (npm) (malicious package) - [MAL-2025-158153](https://insights.sbomify.com/MAL-2025-158153/): Malicious code in lina-poke67 (npm) (malicious package) - [MAL-2025-158152](https://insights.sbomify.com/MAL-2025-158152/): Malicious code in lina-poke66 (npm) (malicious package) - [MAL-2025-158151](https://insights.sbomify.com/MAL-2025-158151/): Malicious code in lina-poke65 (npm) (malicious package) - [MAL-2025-158150](https://insights.sbomify.com/MAL-2025-158150/): Malicious code in lina-poke64 (npm) (malicious package) - [MAL-2025-15815](https://insights.sbomify.com/MAL-2025-15815/): Malicious code in blendish (npm) (malicious package) - [MAL-2025-158149](https://insights.sbomify.com/MAL-2025-158149/): Malicious code in lina-poke63 (npm) (malicious package) - [MAL-2025-158148](https://insights.sbomify.com/MAL-2025-158148/): Malicious code in lina-poke62 (npm) (malicious package) - [MAL-2025-158147](https://insights.sbomify.com/MAL-2025-158147/): Malicious code in lina-poke61 (npm) (malicious package) - [MAL-2025-158146](https://insights.sbomify.com/MAL-2025-158146/): Malicious code in lina-poke60 (npm) (malicious package) - [MAL-2025-158145](https://insights.sbomify.com/MAL-2025-158145/): Malicious code in lina-poke6 (npm) (malicious package) - [MAL-2025-158144](https://insights.sbomify.com/MAL-2025-158144/): Malicious code in lina-poke59 (npm) (malicious package) - [MAL-2025-158143](https://insights.sbomify.com/MAL-2025-158143/): Malicious code in lina-poke58 (npm) (malicious package) - [MAL-2025-158142](https://insights.sbomify.com/MAL-2025-158142/): Malicious code in lina-poke57 (npm) (malicious package) - [MAL-2025-158141](https://insights.sbomify.com/MAL-2025-158141/): Malicious code in lina-poke56 (npm) (malicious package) - [MAL-2025-158140](https://insights.sbomify.com/MAL-2025-158140/): Malicious code in lina-poke55 (npm) (malicious package) - [MAL-2025-15814](https://insights.sbomify.com/MAL-2025-15814/): Malicious code in blending (npm) (malicious package) - [MAL-2025-158139](https://insights.sbomify.com/MAL-2025-158139/): Malicious code in lina-poke54 (npm) (malicious package) - [MAL-2025-158138](https://insights.sbomify.com/MAL-2025-158138/): Malicious code in lina-poke53 (npm) (malicious package) - [MAL-2025-158137](https://insights.sbomify.com/MAL-2025-158137/): Malicious code in lina-poke52 (npm) (malicious package) - [MAL-2025-158136](https://insights.sbomify.com/MAL-2025-158136/): Malicious code in lina-poke51 (npm) (malicious package) - [MAL-2025-158135](https://insights.sbomify.com/MAL-2025-158135/): Malicious code in lina-poke50 (npm) (malicious package) - [MAL-2025-158134](https://insights.sbomify.com/MAL-2025-158134/): Malicious code in lina-poke5 (npm) (malicious package) - [MAL-2025-158133](https://insights.sbomify.com/MAL-2025-158133/): Malicious code in lina-poke49 (npm) (malicious package) - [MAL-2025-158132](https://insights.sbomify.com/MAL-2025-158132/): Malicious code in lina-poke48 (npm) (malicious package) - [MAL-2025-158131](https://insights.sbomify.com/MAL-2025-158131/): Malicious code in lina-poke47 (npm) (malicious package) - [MAL-2025-158130](https://insights.sbomify.com/MAL-2025-158130/): Malicious code in lina-poke46 (npm) (malicious package) - [MAL-2025-15813](https://insights.sbomify.com/MAL-2025-15813/): Malicious code in blaze-ui-components-site (npm) (malicious package) - [MAL-2025-158129](https://insights.sbomify.com/MAL-2025-158129/): Malicious code in lina-poke45 (npm) (malicious package) - [MAL-2025-158128](https://insights.sbomify.com/MAL-2025-158128/): Malicious code in lina-poke44 (npm) (malicious package) - [MAL-2025-158127](https://insights.sbomify.com/MAL-2025-158127/): Malicious code in lina-poke43 (npm) (malicious package) - [MAL-2025-158126](https://insights.sbomify.com/MAL-2025-158126/): Malicious code in lina-poke42 (npm) (malicious package) - [MAL-2025-158125](https://insights.sbomify.com/MAL-2025-158125/): Malicious code in lina-poke41 (npm) (malicious package) - [MAL-2025-158124](https://insights.sbomify.com/MAL-2025-158124/): Malicious code in lina-poke40 (npm) (malicious package) - [MAL-2025-158123](https://insights.sbomify.com/MAL-2025-158123/): Malicious code in lina-poke4 (npm) (malicious package) - [MAL-2025-158122](https://insights.sbomify.com/MAL-2025-158122/): Malicious code in lina-poke39 (npm) (malicious package) - [MAL-2025-158121](https://insights.sbomify.com/MAL-2025-158121/): Malicious code in lina-poke38 (npm) (malicious package) - [MAL-2025-158120](https://insights.sbomify.com/MAL-2025-158120/): Malicious code in lina-poke37 (npm) (malicious package) - [MAL-2025-15812](https://insights.sbomify.com/MAL-2025-15812/): Malicious code in blaze-release-it-morgan-biosignature (npm) (malicious package) - [MAL-2025-158119](https://insights.sbomify.com/MAL-2025-158119/): Malicious code in lina-poke36 (npm) (malicious package) - [MAL-2025-158118](https://insights.sbomify.com/MAL-2025-158118/): Malicious code in lina-poke35 (npm) (malicious package) - [MAL-2025-158117](https://insights.sbomify.com/MAL-2025-158117/): Malicious code in lina-poke34 (npm) (malicious package) - [MAL-2025-158116](https://insights.sbomify.com/MAL-2025-158116/): Malicious code in lina-poke33 (npm) (malicious package) - [MAL-2025-158115](https://insights.sbomify.com/MAL-2025-158115/): Malicious code in lina-poke32 (npm) (malicious package) - [MAL-2025-158114](https://insights.sbomify.com/MAL-2025-158114/): Malicious code in lina-poke31 (npm) (malicious package) - [MAL-2025-158113](https://insights.sbomify.com/MAL-2025-158113/): Malicious code in lina-poke30 (npm) (malicious package) - [MAL-2025-158112](https://insights.sbomify.com/MAL-2025-158112/): Malicious code in lina-poke3 (npm) (malicious package) - [MAL-2025-158111](https://insights.sbomify.com/MAL-2025-158111/): Malicious code in lina-poke29 (npm) (malicious package) - [MAL-2025-158110](https://insights.sbomify.com/MAL-2025-158110/): Malicious code in lina-poke28 (npm) (malicious package) - [MAL-2025-15811](https://insights.sbomify.com/MAL-2025-15811/): Malicious code in blaze-quantumfoam-nconf-global (npm) (malicious package) - [MAL-2025-158109](https://insights.sbomify.com/MAL-2025-158109/): Malicious code in lina-poke27 (npm) (malicious package) - [MAL-2025-158108](https://insights.sbomify.com/MAL-2025-158108/): Malicious code in lina-poke26 (npm) (malicious package) - [MAL-2025-158107](https://insights.sbomify.com/MAL-2025-158107/): Malicious code in lina-poke25 (npm) (malicious package) - [MAL-2025-158106](https://insights.sbomify.com/MAL-2025-158106/): Malicious code in lina-poke24 (npm) (malicious package) - [MAL-2025-158105](https://insights.sbomify.com/MAL-2025-158105/): Malicious code in lina-poke23 (npm) (malicious package) - [MAL-2025-158104](https://insights.sbomify.com/MAL-2025-158104/): Malicious code in lina-poke22 (npm) (malicious package) - [MAL-2025-158103](https://insights.sbomify.com/MAL-2025-158103/): Malicious code in lina-poke21 (npm) (malicious package) - [MAL-2025-158102](https://insights.sbomify.com/MAL-2025-158102/): Malicious code in lina-poke20 (npm) (malicious package) - [MAL-2025-158101](https://insights.sbomify.com/MAL-2025-158101/): Malicious code in lina-poke2 (npm) (malicious package) - [MAL-2025-158100](https://insights.sbomify.com/MAL-2025-158100/): Malicious code in lina-poke19 (npm) (malicious package) - [MAL-2025-15810](https://insights.sbomify.com/MAL-2025-15810/): Malicious code in blaze-optimize-css-assets-webpack-plugin-cosmogenic-joviology (npm) (malicious package) - [MAL-2025-1581](https://insights.sbomify.com/MAL-2025-1581/): Malicious code in emailconfirmationserv (npm) (malicious package) - [MAL-2025-158099](https://insights.sbomify.com/MAL-2025-158099/): Malicious code in lina-poke18 (npm) (malicious package) - [MAL-2025-158098](https://insights.sbomify.com/MAL-2025-158098/): Malicious code in lina-poke17 (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1286/