# Vulnerabilities published in 2025


- [MAL-2025-158006](https://insights.sbomify.com/MAL-2025-158006/): Malicious code in layla-poke23 (npm) (malicious package)
- [MAL-2025-158005](https://insights.sbomify.com/MAL-2025-158005/): Malicious code in layla-poke22 (npm) (malicious package)
- [MAL-2025-158004](https://insights.sbomify.com/MAL-2025-158004/): Malicious code in layla-poke21 (npm) (malicious package)
- [MAL-2025-158003](https://insights.sbomify.com/MAL-2025-158003/): Malicious code in layla-poke20 (npm) (malicious package)
- [MAL-2025-158002](https://insights.sbomify.com/MAL-2025-158002/): Malicious code in layla-poke2 (npm) (malicious package)
- [MAL-2025-158001](https://insights.sbomify.com/MAL-2025-158001/): Malicious code in layla-poke19 (npm) (malicious package)
- [MAL-2025-158000](https://insights.sbomify.com/MAL-2025-158000/): Malicious code in layla-poke18 (npm) (malicious package)
- [MAL-2025-15800](https://insights.sbomify.com/MAL-2025-15800/): Malicious code in blalab (npm) (malicious package)
- [MAL-2025-1580](https://insights.sbomify.com/MAL-2025-1580/): Malicious code in cosmos-web (npm) (malicious package)
- [MAL-2025-158](https://insights.sbomify.com/MAL-2025-158/): Malicious code in anotherexternal (npm) (malicious package)
- [MAL-2025-157999](https://insights.sbomify.com/MAL-2025-157999/): Malicious code in layla-poke17 (npm) (malicious package)
- [MAL-2025-157998](https://insights.sbomify.com/MAL-2025-157998/): Malicious code in layla-poke16 (npm) (malicious package)
- [MAL-2025-157997](https://insights.sbomify.com/MAL-2025-157997/): Malicious code in layla-poke15 (npm) (malicious package)
- [MAL-2025-157996](https://insights.sbomify.com/MAL-2025-157996/): Malicious code in layla-poke14 (npm) (malicious package)
- [MAL-2025-157995](https://insights.sbomify.com/MAL-2025-157995/): Malicious code in layla-poke13 (npm) (malicious package)
- [MAL-2025-157994](https://insights.sbomify.com/MAL-2025-157994/): Malicious code in layla-poke12 (npm) (malicious package)
- [MAL-2025-157993](https://insights.sbomify.com/MAL-2025-157993/): Malicious code in layla-poke11 (npm) (malicious package)
- [MAL-2025-157992](https://insights.sbomify.com/MAL-2025-157992/): Malicious code in layla-poke100 (npm) (malicious package)
- [MAL-2025-157991](https://insights.sbomify.com/MAL-2025-157991/): Malicious code in layla-poke10 (npm) (malicious package)
- [MAL-2025-157990](https://insights.sbomify.com/MAL-2025-157990/): Malicious code in layla-poke1 (npm) (malicious package)
- [MAL-2025-15799](https://insights.sbomify.com/MAL-2025-15799/): Malicious code in blagsite (npm) (malicious package)
- [MAL-2025-157989](https://insights.sbomify.com/MAL-2025-157989/): Malicious code in lala-poke9 (npm) (malicious package)
- [MAL-2025-157988](https://insights.sbomify.com/MAL-2025-157988/): Malicious code in lala-poke8 (npm) (malicious package)
- [MAL-2025-157987](https://insights.sbomify.com/MAL-2025-157987/): Malicious code in lala-poke7 (npm) (malicious package)
- [MAL-2025-157986](https://insights.sbomify.com/MAL-2025-157986/): Malicious code in lala-poke60 (npm) (malicious package)
- [MAL-2025-157985](https://insights.sbomify.com/MAL-2025-157985/): Malicious code in lala-poke6 (npm) (malicious package)
- [MAL-2025-157984](https://insights.sbomify.com/MAL-2025-157984/): Malicious code in lala-poke59 (npm) (malicious package)
- [MAL-2025-157983](https://insights.sbomify.com/MAL-2025-157983/): Malicious code in lala-poke58 (npm) (malicious package)
- [MAL-2025-157982](https://insights.sbomify.com/MAL-2025-157982/): Malicious code in lala-poke57 (npm) (malicious package)
- [MAL-2025-157981](https://insights.sbomify.com/MAL-2025-157981/): Malicious code in lala-poke56 (npm) (malicious package)
- [MAL-2025-157980](https://insights.sbomify.com/MAL-2025-157980/): Malicious code in lala-poke55 (npm) (malicious package)
- [MAL-2025-15798](https://insights.sbomify.com/MAL-2025-15798/): Malicious code in blagcast (npm) (malicious package)
- [MAL-2025-157979](https://insights.sbomify.com/MAL-2025-157979/): Malicious code in lala-poke54 (npm) (malicious package)
- [MAL-2025-157978](https://insights.sbomify.com/MAL-2025-157978/): Malicious code in lala-poke53 (npm) (malicious package)
- [MAL-2025-157977](https://insights.sbomify.com/MAL-2025-157977/): Malicious code in lala-poke52 (npm) (malicious package)
- [MAL-2025-157976](https://insights.sbomify.com/MAL-2025-157976/): Malicious code in lala-poke51 (npm) (malicious package)
- [MAL-2025-157975](https://insights.sbomify.com/MAL-2025-157975/): Malicious code in lala-poke50 (npm) (malicious package)
- [MAL-2025-157974](https://insights.sbomify.com/MAL-2025-157974/): Malicious code in lala-poke5 (npm) (malicious package)
- [MAL-2025-157973](https://insights.sbomify.com/MAL-2025-157973/): Malicious code in lala-poke49 (npm) (malicious package)
- [MAL-2025-157972](https://insights.sbomify.com/MAL-2025-157972/): Malicious code in lala-poke48 (npm) (malicious package)
- [MAL-2025-157971](https://insights.sbomify.com/MAL-2025-157971/): Malicious code in lala-poke46 (npm) (malicious package)
- [MAL-2025-157970](https://insights.sbomify.com/MAL-2025-157970/): Malicious code in lala-poke45 (npm) (malicious package)
- [MAL-2025-15797](https://insights.sbomify.com/MAL-2025-15797/): Malicious code in blackpanda (npm) (malicious package)
- [MAL-2025-157969](https://insights.sbomify.com/MAL-2025-157969/): Malicious code in lala-poke44 (npm) (malicious package)
- [MAL-2025-157968](https://insights.sbomify.com/MAL-2025-157968/): Malicious code in lala-poke43 (npm) (malicious package)
- [MAL-2025-157967](https://insights.sbomify.com/MAL-2025-157967/): Malicious code in lala-poke42 (npm) (malicious package)
- [MAL-2025-157966](https://insights.sbomify.com/MAL-2025-157966/): Malicious code in lala-poke41 (npm) (malicious package)
- [MAL-2025-157965](https://insights.sbomify.com/MAL-2025-157965/): Malicious code in lala-poke40 (npm) (malicious package)
- [MAL-2025-157964](https://insights.sbomify.com/MAL-2025-157964/): Malicious code in lala-poke4 (npm) (malicious package)
- [MAL-2025-157963](https://insights.sbomify.com/MAL-2025-157963/): Malicious code in lala-poke39 (npm) (malicious package)
- [MAL-2025-157962](https://insights.sbomify.com/MAL-2025-157962/): Malicious code in lala-poke38 (npm) (malicious package)
- [MAL-2025-157961](https://insights.sbomify.com/MAL-2025-157961/): Malicious code in lala-poke37 (npm) (malicious package)
- [MAL-2025-157960](https://insights.sbomify.com/MAL-2025-157960/): Malicious code in lala-poke36 (npm) (malicious package)
- [MAL-2025-15796](https://insights.sbomify.com/MAL-2025-15796/): Malicious code in blackme (npm) (malicious package)
- [MAL-2025-157959](https://insights.sbomify.com/MAL-2025-157959/): Malicious code in lala-poke35 (npm) (malicious package)
- [MAL-2025-157958](https://insights.sbomify.com/MAL-2025-157958/): Malicious code in lala-poke34 (npm) (malicious package)
- [MAL-2025-157957](https://insights.sbomify.com/MAL-2025-157957/): Malicious code in lala-poke33 (npm) (malicious package)
- [MAL-2025-157956](https://insights.sbomify.com/MAL-2025-157956/): Malicious code in lala-poke32 (npm) (malicious package)
- [MAL-2025-157955](https://insights.sbomify.com/MAL-2025-157955/): Malicious code in lala-poke31 (npm) (malicious package)
- [MAL-2025-157954](https://insights.sbomify.com/MAL-2025-157954/): Malicious code in lala-poke30 (npm) (malicious package)
- [MAL-2025-157953](https://insights.sbomify.com/MAL-2025-157953/): Malicious code in lala-poke3 (npm) (malicious package)
- [MAL-2025-157952](https://insights.sbomify.com/MAL-2025-157952/): Malicious code in lala-poke29 (npm) (malicious package)
- [MAL-2025-157951](https://insights.sbomify.com/MAL-2025-157951/): Malicious code in lala-poke28 (npm) (malicious package)
- [MAL-2025-157950](https://insights.sbomify.com/MAL-2025-157950/): Malicious code in lala-poke27 (npm) (malicious package)
- [MAL-2025-15795](https://insights.sbomify.com/MAL-2025-15795/): Malicious code in blacklisted_credentials_client (npm) (malicious package)
- [MAL-2025-157949](https://insights.sbomify.com/MAL-2025-157949/): Malicious code in lala-poke26 (npm) (malicious package)
- [MAL-2025-157948](https://insights.sbomify.com/MAL-2025-157948/): Malicious code in lala-poke25 (npm) (malicious package)
- [MAL-2025-157947](https://insights.sbomify.com/MAL-2025-157947/): Malicious code in lala-poke24 (npm) (malicious package)
- [MAL-2025-157946](https://insights.sbomify.com/MAL-2025-157946/): Malicious code in lala-poke23 (npm) (malicious package)
- [MAL-2025-157945](https://insights.sbomify.com/MAL-2025-157945/): Malicious code in lala-poke22 (npm) (malicious package)
- [MAL-2025-157944](https://insights.sbomify.com/MAL-2025-157944/): Malicious code in lala-poke21 (npm) (malicious package)
- [MAL-2025-157943](https://insights.sbomify.com/MAL-2025-157943/): Malicious code in lala-poke20 (npm) (malicious package)
- [MAL-2025-157942](https://insights.sbomify.com/MAL-2025-157942/): Malicious code in lala-poke2 (npm) (malicious package)
- [MAL-2025-157941](https://insights.sbomify.com/MAL-2025-157941/): Malicious code in lala-poke19 (npm) (malicious package)
- [MAL-2025-157940](https://insights.sbomify.com/MAL-2025-157940/): Malicious code in lala-poke18 (npm) (malicious package)
- [MAL-2025-15794](https://insights.sbomify.com/MAL-2025-15794/): Malicious code in blackhole-unuk-brane-semantic-release (npm) (malicious package)
- [MAL-2025-157939](https://insights.sbomify.com/MAL-2025-157939/): Malicious code in lala-poke17 (npm) (malicious package)
- [MAL-2025-157938](https://insights.sbomify.com/MAL-2025-157938/): Malicious code in lala-poke16 (npm) (malicious package)
- [MAL-2025-157937](https://insights.sbomify.com/MAL-2025-157937/): Malicious code in lala-poke15 (npm) (malicious package)
- [MAL-2025-157936](https://insights.sbomify.com/MAL-2025-157936/): Malicious code in lala-poke14 (npm) (malicious package)
- [MAL-2025-157935](https://insights.sbomify.com/MAL-2025-157935/): Malicious code in lala-poke13 (npm) (malicious package)
- [MAL-2025-157934](https://insights.sbomify.com/MAL-2025-157934/): Malicious code in lala-poke12 (npm) (malicious package)
- [MAL-2025-157933](https://insights.sbomify.com/MAL-2025-157933/): Malicious code in lala-poke11 (npm) (malicious package)
- [MAL-2025-157932](https://insights.sbomify.com/MAL-2025-157932/): Malicious code in lala-poke10 (npm) (malicious package)
- [MAL-2025-157931](https://insights.sbomify.com/MAL-2025-157931/): Malicious code in lala-poke1 (npm) (malicious package)
- [MAL-2025-157930](https://insights.sbomify.com/MAL-2025-157930/): Malicious code in kuroichi12-tower-toward (npm) (malicious package)
- [MAL-2025-15793](https://insights.sbomify.com/MAL-2025-15793/): Malicious code in blackhole-underpass-8jop (npm) (malicious package)
- [MAL-2025-157929](https://insights.sbomify.com/MAL-2025-157929/): Malicious code in kuroichi12-soldier-fog (npm) (malicious package)
- [MAL-2025-157928](https://insights.sbomify.com/MAL-2025-157928/): Malicious code in kuroichi12-slide-ten (npm) (malicious package)
- [MAL-2025-157927](https://insights.sbomify.com/MAL-2025-157927/): Malicious code in kuroichi12-silly-excited (npm) (malicious package)
- [MAL-2025-157926](https://insights.sbomify.com/MAL-2025-157926/): Malicious code in kuroichi12-scene-early (npm) (malicious package)
- [MAL-2025-157925](https://insights.sbomify.com/MAL-2025-157925/): Malicious code in kuroichi12-nails-attached (npm) (malicious package)
- [MAL-2025-157924](https://insights.sbomify.com/MAL-2025-157924/): Malicious code in kuroichi12-men-spell (npm) (malicious package)
- [MAL-2025-157923](https://insights.sbomify.com/MAL-2025-157923/): Malicious code in kuroichi12-got-constantly (npm) (malicious package)
- [MAL-2025-157922](https://insights.sbomify.com/MAL-2025-157922/): Malicious code in kuroichi12-ghgfj-dffgh (npm) (malicious package)
- [MAL-2025-157921](https://insights.sbomify.com/MAL-2025-157921/): Malicious code in kuroichi12-gdfs-fhjk (npm) (malicious package)
- [MAL-2025-157920](https://insights.sbomify.com/MAL-2025-157920/): Malicious code in kuroichi12-function-huge (npm) (malicious package)
- [MAL-2025-15792](https://insights.sbomify.com/MAL-2025-15792/): Malicious code in blackhole-quarry-oqot (npm) (malicious package)
- [MAL-2025-157919](https://insights.sbomify.com/MAL-2025-157919/): Malicious code in kuroichi12-fghgj-dfflgh (npm) (malicious package)
- [MAL-2025-157918](https://insights.sbomify.com/MAL-2025-157918/): Malicious code in kuroichi12-fghgj-dffgh (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1288/