# Vulnerabilities published in 2025


- [MAL-2025-158097](https://insights.sbomify.com/MAL-2025-158097/): Malicious code in lina-poke16 (npm) (malicious package)
- [MAL-2025-158096](https://insights.sbomify.com/MAL-2025-158096/): Malicious code in lina-poke15 (npm) (malicious package)
- [MAL-2025-158095](https://insights.sbomify.com/MAL-2025-158095/): Malicious code in lina-poke14 (npm) (malicious package)
- [MAL-2025-158094](https://insights.sbomify.com/MAL-2025-158094/): Malicious code in lina-poke13 (npm) (malicious package)
- [MAL-2025-158093](https://insights.sbomify.com/MAL-2025-158093/): Malicious code in lina-poke12 (npm) (malicious package)
- [MAL-2025-158092](https://insights.sbomify.com/MAL-2025-158092/): Malicious code in lina-poke11 (npm) (malicious package)
- [MAL-2025-158091](https://insights.sbomify.com/MAL-2025-158091/): Malicious code in lina-poke10 (npm) (malicious package)
- [MAL-2025-158090](https://insights.sbomify.com/MAL-2025-158090/): Malicious code in lina-poke1 (npm) (malicious package)
- [MAL-2025-15809](https://insights.sbomify.com/MAL-2025-15809/): Malicious code in blaze-dotenv-parse-variables-spawn-foundation (npm) (malicious package)
- [MAL-2025-158089](https://insights.sbomify.com/MAL-2025-158089/): Malicious code in layla-poke99 (npm) (malicious package)
- [MAL-2025-158088](https://insights.sbomify.com/MAL-2025-158088/): Malicious code in layla-poke98 (npm) (malicious package)
- [MAL-2025-158087](https://insights.sbomify.com/MAL-2025-158087/): Malicious code in layla-poke97 (npm) (malicious package)
- [MAL-2025-158086](https://insights.sbomify.com/MAL-2025-158086/): Malicious code in layla-poke96 (npm) (malicious package)
- [MAL-2025-158085](https://insights.sbomify.com/MAL-2025-158085/): Malicious code in layla-poke95 (npm) (malicious package)
- [MAL-2025-158084](https://insights.sbomify.com/MAL-2025-158084/): Malicious code in layla-poke94 (npm) (malicious package)
- [MAL-2025-158083](https://insights.sbomify.com/MAL-2025-158083/): Malicious code in layla-poke93 (npm) (malicious package)
- [MAL-2025-158082](https://insights.sbomify.com/MAL-2025-158082/): Malicious code in layla-poke92 (npm) (malicious package)
- [MAL-2025-158081](https://insights.sbomify.com/MAL-2025-158081/): Malicious code in layla-poke91 (npm) (malicious package)
- [MAL-2025-158080](https://insights.sbomify.com/MAL-2025-158080/): Malicious code in layla-poke90 (npm) (malicious package)
- [MAL-2025-15808](https://insights.sbomify.com/MAL-2025-15808/): Malicious code in blazar-vuepress-exoplanet-meissa (npm) (malicious package)
- [MAL-2025-158079](https://insights.sbomify.com/MAL-2025-158079/): Malicious code in layla-poke9 (npm) (malicious package)
- [MAL-2025-158078](https://insights.sbomify.com/MAL-2025-158078/): Malicious code in layla-poke89 (npm) (malicious package)
- [MAL-2025-158077](https://insights.sbomify.com/MAL-2025-158077/): Malicious code in layla-poke88 (npm) (malicious package)
- [MAL-2025-158076](https://insights.sbomify.com/MAL-2025-158076/): Malicious code in layla-poke87 (npm) (malicious package)
- [MAL-2025-158075](https://insights.sbomify.com/MAL-2025-158075/): Malicious code in layla-poke86 (npm) (malicious package)
- [MAL-2025-158074](https://insights.sbomify.com/MAL-2025-158074/): Malicious code in layla-poke85 (npm) (malicious package)
- [MAL-2025-158073](https://insights.sbomify.com/MAL-2025-158073/): Malicious code in layla-poke84 (npm) (malicious package)
- [MAL-2025-158072](https://insights.sbomify.com/MAL-2025-158072/): Malicious code in layla-poke83 (npm) (malicious package)
- [MAL-2025-158071](https://insights.sbomify.com/MAL-2025-158071/): Malicious code in layla-poke82 (npm) (malicious package)
- [MAL-2025-158070](https://insights.sbomify.com/MAL-2025-158070/): Malicious code in layla-poke81 (npm) (malicious package)
- [MAL-2025-15807](https://insights.sbomify.com/MAL-2025-15807/): Malicious code in blazar-transport-webdriver-manager-dependencies (npm) (malicious package)
- [MAL-2025-158069](https://insights.sbomify.com/MAL-2025-158069/): Malicious code in layla-poke80 (npm) (malicious package)
- [MAL-2025-158068](https://insights.sbomify.com/MAL-2025-158068/): Malicious code in layla-poke8 (npm) (malicious package)
- [MAL-2025-158067](https://insights.sbomify.com/MAL-2025-158067/): Malicious code in layla-poke79 (npm) (malicious package)
- [MAL-2025-158066](https://insights.sbomify.com/MAL-2025-158066/): Malicious code in layla-poke78 (npm) (malicious package)
- [MAL-2025-158065](https://insights.sbomify.com/MAL-2025-158065/): Malicious code in layla-poke77 (npm) (malicious package)
- [MAL-2025-158064](https://insights.sbomify.com/MAL-2025-158064/): Malicious code in layla-poke76 (npm) (malicious package)
- [MAL-2025-158063](https://insights.sbomify.com/MAL-2025-158063/): Malicious code in layla-poke75 (npm) (malicious package)
- [MAL-2025-158062](https://insights.sbomify.com/MAL-2025-158062/): Malicious code in layla-poke74 (npm) (malicious package)
- [MAL-2025-158061](https://insights.sbomify.com/MAL-2025-158061/): Malicious code in layla-poke73 (npm) (malicious package)
- [MAL-2025-158060](https://insights.sbomify.com/MAL-2025-158060/): Malicious code in layla-poke72 (npm) (malicious package)
- [MAL-2025-15806](https://insights.sbomify.com/MAL-2025-15806/): Malicious code in blazar-non-blocking-dotenv-parse-variables-test (npm) (malicious package)
- [MAL-2025-158059](https://insights.sbomify.com/MAL-2025-158059/): Malicious code in layla-poke71 (npm) (malicious package)
- [MAL-2025-158058](https://insights.sbomify.com/MAL-2025-158058/): Malicious code in layla-poke70 (npm) (malicious package)
- [MAL-2025-158057](https://insights.sbomify.com/MAL-2025-158057/): Malicious code in layla-poke7 (npm) (malicious package)
- [MAL-2025-158056](https://insights.sbomify.com/MAL-2025-158056/): Malicious code in layla-poke69 (npm) (malicious package)
- [MAL-2025-158055](https://insights.sbomify.com/MAL-2025-158055/): Malicious code in layla-poke68 (npm) (malicious package)
- [MAL-2025-158054](https://insights.sbomify.com/MAL-2025-158054/): Malicious code in layla-poke67 (npm) (malicious package)
- [MAL-2025-158053](https://insights.sbomify.com/MAL-2025-158053/): Malicious code in layla-poke66 (npm) (malicious package)
- [MAL-2025-158052](https://insights.sbomify.com/MAL-2025-158052/): Malicious code in layla-poke65 (npm) (malicious package)
- [MAL-2025-158051](https://insights.sbomify.com/MAL-2025-158051/): Malicious code in layla-poke64 (npm) (malicious package)
- [MAL-2025-158050](https://insights.sbomify.com/MAL-2025-158050/): Malicious code in layla-poke63 (npm) (malicious package)
- [MAL-2025-15805](https://insights.sbomify.com/MAL-2025-15805/): Malicious code in blazar-comet-toml-resolvers (npm) (malicious package)
- [MAL-2025-158049](https://insights.sbomify.com/MAL-2025-158049/): Malicious code in layla-poke62 (npm) (malicious package)
- [MAL-2025-158048](https://insights.sbomify.com/MAL-2025-158048/): Malicious code in layla-poke61 (npm) (malicious package)
- [MAL-2025-158047](https://insights.sbomify.com/MAL-2025-158047/): Malicious code in layla-poke60 (npm) (malicious package)
- [MAL-2025-158046](https://insights.sbomify.com/MAL-2025-158046/): Malicious code in layla-poke6 (npm) (malicious package)
- [MAL-2025-158045](https://insights.sbomify.com/MAL-2025-158045/): Malicious code in layla-poke59 (npm) (malicious package)
- [MAL-2025-158044](https://insights.sbomify.com/MAL-2025-158044/): Malicious code in layla-poke58 (npm) (malicious package)
- [MAL-2025-158043](https://insights.sbomify.com/MAL-2025-158043/): Malicious code in layla-poke57 (npm) (malicious package)
- [MAL-2025-158042](https://insights.sbomify.com/MAL-2025-158042/): Malicious code in layla-poke56 (npm) (malicious package)
- [MAL-2025-158041](https://insights.sbomify.com/MAL-2025-158041/): Malicious code in layla-poke55 (npm) (malicious package)
- [MAL-2025-158040](https://insights.sbomify.com/MAL-2025-158040/): Malicious code in layla-poke54 (npm) (malicious package)
- [MAL-2025-15804](https://insights.sbomify.com/MAL-2025-15804/): Malicious code in blauen (npm) (malicious package)
- [MAL-2025-158039](https://insights.sbomify.com/MAL-2025-158039/): Malicious code in layla-poke53 (npm) (malicious package)
- [MAL-2025-158038](https://insights.sbomify.com/MAL-2025-158038/): Malicious code in layla-poke52 (npm) (malicious package)
- [MAL-2025-158037](https://insights.sbomify.com/MAL-2025-158037/): Malicious code in layla-poke51 (npm) (malicious package)
- [MAL-2025-158036](https://insights.sbomify.com/MAL-2025-158036/): Malicious code in layla-poke50 (npm) (malicious package)
- [MAL-2025-158035](https://insights.sbomify.com/MAL-2025-158035/): Malicious code in layla-poke5 (npm) (malicious package)
- [MAL-2025-158034](https://insights.sbomify.com/MAL-2025-158034/): Malicious code in layla-poke49 (npm) (malicious package)
- [MAL-2025-158033](https://insights.sbomify.com/MAL-2025-158033/): Malicious code in layla-poke48 (npm) (malicious package)
- [MAL-2025-158032](https://insights.sbomify.com/MAL-2025-158032/): Malicious code in layla-poke47 (npm) (malicious package)
- [MAL-2025-158031](https://insights.sbomify.com/MAL-2025-158031/): Malicious code in layla-poke46 (npm) (malicious package)
- [MAL-2025-158030](https://insights.sbomify.com/MAL-2025-158030/): Malicious code in layla-poke45 (npm) (malicious package)
- [MAL-2025-15803](https://insights.sbomify.com/MAL-2025-15803/): Malicious code in blank-ts-monorepo-common (npm) (malicious package)
- [MAL-2025-158029](https://insights.sbomify.com/MAL-2025-158029/): Malicious code in layla-poke44 (npm) (malicious package)
- [MAL-2025-158028](https://insights.sbomify.com/MAL-2025-158028/): Malicious code in layla-poke43 (npm) (malicious package)
- [MAL-2025-158027](https://insights.sbomify.com/MAL-2025-158027/): Malicious code in layla-poke42 (npm) (malicious package)
- [MAL-2025-158026](https://insights.sbomify.com/MAL-2025-158026/): Malicious code in layla-poke41 (npm) (malicious package)
- [MAL-2025-158025](https://insights.sbomify.com/MAL-2025-158025/): Malicious code in layla-poke40 (npm) (malicious package)
- [MAL-2025-158024](https://insights.sbomify.com/MAL-2025-158024/): Malicious code in layla-poke4 (npm) (malicious package)
- [MAL-2025-158023](https://insights.sbomify.com/MAL-2025-158023/): Malicious code in layla-poke39 (npm) (malicious package)
- [MAL-2025-158022](https://insights.sbomify.com/MAL-2025-158022/): Malicious code in layla-poke38 (npm) (malicious package)
- [MAL-2025-158021](https://insights.sbomify.com/MAL-2025-158021/): Malicious code in layla-poke37 (npm) (malicious package)
- [MAL-2025-158020](https://insights.sbomify.com/MAL-2025-158020/): Malicious code in layla-poke36 (npm) (malicious package)
- [MAL-2025-15802](https://insights.sbomify.com/MAL-2025-15802/): Malicious code in blank-slate (npm) (malicious package)
- [MAL-2025-158019](https://insights.sbomify.com/MAL-2025-158019/): Malicious code in layla-poke35 (npm) (malicious package)
- [MAL-2025-158018](https://insights.sbomify.com/MAL-2025-158018/): Malicious code in layla-poke34 (npm) (malicious package)
- [MAL-2025-158017](https://insights.sbomify.com/MAL-2025-158017/): Malicious code in layla-poke33 (npm) (malicious package)
- [MAL-2025-158016](https://insights.sbomify.com/MAL-2025-158016/): Malicious code in layla-poke32 (npm) (malicious package)
- [MAL-2025-158015](https://insights.sbomify.com/MAL-2025-158015/): Malicious code in layla-poke31 (npm) (malicious package)
- [MAL-2025-158014](https://insights.sbomify.com/MAL-2025-158014/): Malicious code in layla-poke30 (npm) (malicious package)
- [MAL-2025-158013](https://insights.sbomify.com/MAL-2025-158013/): Malicious code in layla-poke3 (npm) (malicious package)
- [MAL-2025-158012](https://insights.sbomify.com/MAL-2025-158012/): Malicious code in layla-poke29 (npm) (malicious package)
- [MAL-2025-158011](https://insights.sbomify.com/MAL-2025-158011/): Malicious code in layla-poke28 (npm) (malicious package)
- [MAL-2025-158010](https://insights.sbomify.com/MAL-2025-158010/): Malicious code in layla-poke27 (npm) (malicious package)
- [MAL-2025-15801](https://insights.sbomify.com/MAL-2025-15801/): Malicious code in blanchea (npm) (malicious package)
- [MAL-2025-158009](https://insights.sbomify.com/MAL-2025-158009/): Malicious code in layla-poke26 (npm) (malicious package)
- [MAL-2025-158008](https://insights.sbomify.com/MAL-2025-158008/): Malicious code in layla-poke25 (npm) (malicious package)
- [MAL-2025-158007](https://insights.sbomify.com/MAL-2025-158007/): Malicious code in layla-poke24 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1287/