# Vulnerabilities published in 2025 - [MAL-2025-156477](https://insights.sbomify.com/MAL-2025-156477/): Malicious code in inal-poke86 (npm) (malicious package) - [MAL-2025-156476](https://insights.sbomify.com/MAL-2025-156476/): Malicious code in inal-poke85 (npm) (malicious package) - [MAL-2025-156475](https://insights.sbomify.com/MAL-2025-156475/): Malicious code in inal-poke84 (npm) (malicious package) - [MAL-2025-156474](https://insights.sbomify.com/MAL-2025-156474/): Malicious code in inal-poke83 (npm) (malicious package) - [MAL-2025-156473](https://insights.sbomify.com/MAL-2025-156473/): Malicious code in inal-poke82 (npm) (malicious package) - [MAL-2025-156472](https://insights.sbomify.com/MAL-2025-156472/): Malicious code in inal-poke81 (npm) (malicious package) - [MAL-2025-156471](https://insights.sbomify.com/MAL-2025-156471/): Malicious code in inal-poke80 (npm) (malicious package) - [MAL-2025-156470](https://insights.sbomify.com/MAL-2025-156470/): Malicious code in inal-poke8 (npm) (malicious package) - [MAL-2025-15647](https://insights.sbomify.com/MAL-2025-15647/): Malicious code in bg524 (npm) (malicious package) - [MAL-2025-156469](https://insights.sbomify.com/MAL-2025-156469/): Malicious code in inal-poke79 (npm) (malicious package) - [MAL-2025-156468](https://insights.sbomify.com/MAL-2025-156468/): Malicious code in inal-poke78 (npm) (malicious package) - [MAL-2025-156467](https://insights.sbomify.com/MAL-2025-156467/): Malicious code in inal-poke77 (npm) (malicious package) - [MAL-2025-156466](https://insights.sbomify.com/MAL-2025-156466/): Malicious code in inal-poke76 (npm) (malicious package) - [MAL-2025-156465](https://insights.sbomify.com/MAL-2025-156465/): Malicious code in inal-poke75 (npm) (malicious package) - [MAL-2025-156464](https://insights.sbomify.com/MAL-2025-156464/): Malicious code in inal-poke74 (npm) (malicious package) - [MAL-2025-156463](https://insights.sbomify.com/MAL-2025-156463/): Malicious code in inal-poke73 (npm) (malicious package) - [MAL-2025-156462](https://insights.sbomify.com/MAL-2025-156462/): Malicious code in inal-poke72 (npm) (malicious package) - [MAL-2025-156461](https://insights.sbomify.com/MAL-2025-156461/): Malicious code in inal-poke71 (npm) (malicious package) - [MAL-2025-156460](https://insights.sbomify.com/MAL-2025-156460/): Malicious code in inal-poke70 (npm) (malicious package) - [MAL-2025-15646](https://insights.sbomify.com/MAL-2025-15646/): Malicious code in bg-react-redux (npm) (malicious package) - [MAL-2025-156459](https://insights.sbomify.com/MAL-2025-156459/): Malicious code in inal-poke7 (npm) (malicious package) - [MAL-2025-156458](https://insights.sbomify.com/MAL-2025-156458/): Malicious code in inal-poke69 (npm) (malicious package) - [MAL-2025-156457](https://insights.sbomify.com/MAL-2025-156457/): Malicious code in inal-poke68 (npm) (malicious package) - [MAL-2025-156456](https://insights.sbomify.com/MAL-2025-156456/): Malicious code in inal-poke67 (npm) (malicious package) - [MAL-2025-156455](https://insights.sbomify.com/MAL-2025-156455/): Malicious code in inal-poke66 (npm) (malicious package) - [MAL-2025-156454](https://insights.sbomify.com/MAL-2025-156454/): Malicious code in inal-poke65 (npm) (malicious package) - [MAL-2025-156453](https://insights.sbomify.com/MAL-2025-156453/): Malicious code in inal-poke64 (npm) (malicious package) - [MAL-2025-156452](https://insights.sbomify.com/MAL-2025-156452/): Malicious code in inal-poke63 (npm) (malicious package) - [MAL-2025-156451](https://insights.sbomify.com/MAL-2025-156451/): Malicious code in inal-poke62 (npm) (malicious package) - [MAL-2025-156450](https://insights.sbomify.com/MAL-2025-156450/): Malicious code in inal-poke61 (npm) (malicious package) - [MAL-2025-15645](https://insights.sbomify.com/MAL-2025-15645/): Malicious code in bfyr3 (npm) (malicious package) - [MAL-2025-156449](https://insights.sbomify.com/MAL-2025-156449/): Malicious code in inal-poke60 (npm) (malicious package) - [MAL-2025-156448](https://insights.sbomify.com/MAL-2025-156448/): Malicious code in inal-poke6 (npm) (malicious package) - [MAL-2025-156447](https://insights.sbomify.com/MAL-2025-156447/): Malicious code in inal-poke59 (npm) (malicious package) - [MAL-2025-156446](https://insights.sbomify.com/MAL-2025-156446/): Malicious code in inal-poke58 (npm) (malicious package) - [MAL-2025-156445](https://insights.sbomify.com/MAL-2025-156445/): Malicious code in inal-poke57 (npm) (malicious package) - [MAL-2025-156444](https://insights.sbomify.com/MAL-2025-156444/): Malicious code in inal-poke56 (npm) (malicious package) - [MAL-2025-156443](https://insights.sbomify.com/MAL-2025-156443/): Malicious code in inal-poke55 (npm) (malicious package) - [MAL-2025-156442](https://insights.sbomify.com/MAL-2025-156442/): Malicious code in inal-poke54 (npm) (malicious package) - [MAL-2025-156441](https://insights.sbomify.com/MAL-2025-156441/): Malicious code in inal-poke53 (npm) (malicious package) - [MAL-2025-156440](https://insights.sbomify.com/MAL-2025-156440/): Malicious code in inal-poke52 (npm) (malicious package) - [MAL-2025-15644](https://insights.sbomify.com/MAL-2025-15644/): Malicious code in bfy32 (npm) (malicious package) - [MAL-2025-156439](https://insights.sbomify.com/MAL-2025-156439/): Malicious code in inal-poke51 (npm) (malicious package) - [MAL-2025-156438](https://insights.sbomify.com/MAL-2025-156438/): Malicious code in inal-poke50 (npm) (malicious package) - [MAL-2025-156437](https://insights.sbomify.com/MAL-2025-156437/): Malicious code in inal-poke5 (npm) (malicious package) - [MAL-2025-156436](https://insights.sbomify.com/MAL-2025-156436/): Malicious code in inal-poke49 (npm) (malicious package) - [MAL-2025-156435](https://insights.sbomify.com/MAL-2025-156435/): Malicious code in inal-poke48 (npm) (malicious package) - [MAL-2025-156434](https://insights.sbomify.com/MAL-2025-156434/): Malicious code in inal-poke47 (npm) (malicious package) - [MAL-2025-156433](https://insights.sbomify.com/MAL-2025-156433/): Malicious code in inal-poke46 (npm) (malicious package) - [MAL-2025-156432](https://insights.sbomify.com/MAL-2025-156432/): Malicious code in inal-poke45 (npm) (malicious package) - [MAL-2025-156431](https://insights.sbomify.com/MAL-2025-156431/): Malicious code in inal-poke44 (npm) (malicious package) - [MAL-2025-156430](https://insights.sbomify.com/MAL-2025-156430/): Malicious code in inal-poke43 (npm) (malicious package) - [MAL-2025-15643](https://insights.sbomify.com/MAL-2025-15643/): Malicious code in bftry4 (npm) (malicious package) - [MAL-2025-156429](https://insights.sbomify.com/MAL-2025-156429/): Malicious code in inal-poke42 (npm) (malicious package) - [MAL-2025-156428](https://insights.sbomify.com/MAL-2025-156428/): Malicious code in inal-poke41 (npm) (malicious package) - [MAL-2025-156427](https://insights.sbomify.com/MAL-2025-156427/): Malicious code in inal-poke40 (npm) (malicious package) - [MAL-2025-156426](https://insights.sbomify.com/MAL-2025-156426/): Malicious code in inal-poke4 (npm) (malicious package) - [MAL-2025-156425](https://insights.sbomify.com/MAL-2025-156425/): Malicious code in inal-poke39 (npm) (malicious package) - [MAL-2025-156424](https://insights.sbomify.com/MAL-2025-156424/): Malicious code in inal-poke38 (npm) (malicious package) - [MAL-2025-156423](https://insights.sbomify.com/MAL-2025-156423/): Malicious code in inal-poke37 (npm) (malicious package) - [MAL-2025-156422](https://insights.sbomify.com/MAL-2025-156422/): Malicious code in inal-poke36 (npm) (malicious package) - [MAL-2025-156421](https://insights.sbomify.com/MAL-2025-156421/): Malicious code in inal-poke35 (npm) (malicious package) - [MAL-2025-156420](https://insights.sbomify.com/MAL-2025-156420/): Malicious code in inal-poke34 (npm) (malicious package) - [MAL-2025-15642](https://insights.sbomify.com/MAL-2025-15642/): Malicious code in bfrd344 (npm) (malicious package) - [MAL-2025-156419](https://insights.sbomify.com/MAL-2025-156419/): Malicious code in inal-poke33 (npm) (malicious package) - [MAL-2025-156418](https://insights.sbomify.com/MAL-2025-156418/): Malicious code in inal-poke32 (npm) (malicious package) - [MAL-2025-156417](https://insights.sbomify.com/MAL-2025-156417/): Malicious code in inal-poke31 (npm) (malicious package) - [MAL-2025-156416](https://insights.sbomify.com/MAL-2025-156416/): Malicious code in inal-poke30 (npm) (malicious package) - [MAL-2025-156415](https://insights.sbomify.com/MAL-2025-156415/): Malicious code in inal-poke3 (npm) (malicious package) - [MAL-2025-156414](https://insights.sbomify.com/MAL-2025-156414/): Malicious code in inal-poke29 (npm) (malicious package) - [MAL-2025-156413](https://insights.sbomify.com/MAL-2025-156413/): Malicious code in inal-poke28 (npm) (malicious package) - [MAL-2025-156412](https://insights.sbomify.com/MAL-2025-156412/): Malicious code in inal-poke27 (npm) (malicious package) - [MAL-2025-156411](https://insights.sbomify.com/MAL-2025-156411/): Malicious code in inal-poke26 (npm) (malicious package) - [MAL-2025-156410](https://insights.sbomify.com/MAL-2025-156410/): Malicious code in inal-poke25 (npm) (malicious package) - [MAL-2025-15641](https://insights.sbomify.com/MAL-2025-15641/): Malicious code in bfr44 (npm) (malicious package) - [MAL-2025-156409](https://insights.sbomify.com/MAL-2025-156409/): Malicious code in inal-poke24 (npm) (malicious package) - [MAL-2025-156408](https://insights.sbomify.com/MAL-2025-156408/): Malicious code in inal-poke23 (npm) (malicious package) - [MAL-2025-156407](https://insights.sbomify.com/MAL-2025-156407/): Malicious code in inal-poke22 (npm) (malicious package) - [MAL-2025-156406](https://insights.sbomify.com/MAL-2025-156406/): Malicious code in inal-poke21 (npm) (malicious package) - [MAL-2025-156405](https://insights.sbomify.com/MAL-2025-156405/): Malicious code in inal-poke20 (npm) (malicious package) - [MAL-2025-156404](https://insights.sbomify.com/MAL-2025-156404/): Malicious code in inal-poke2 (npm) (malicious package) - [MAL-2025-156403](https://insights.sbomify.com/MAL-2025-156403/): Malicious code in inal-poke19 (npm) (malicious package) - [MAL-2025-156402](https://insights.sbomify.com/MAL-2025-156402/): Malicious code in inal-poke18 (npm) (malicious package) - [MAL-2025-156401](https://insights.sbomify.com/MAL-2025-156401/): Malicious code in inal-poke17 (npm) (malicious package) - [MAL-2025-156400](https://insights.sbomify.com/MAL-2025-156400/): Malicious code in inal-poke16 (npm) (malicious package) - [MAL-2025-15640](https://insights.sbomify.com/MAL-2025-15640/): Malicious code in bflist (npm) (malicious package) - [MAL-2025-1564](https://insights.sbomify.com/MAL-2025-1564/): Malicious code in synapse-contracts (npm) (malicious package) - [MAL-2025-156399](https://insights.sbomify.com/MAL-2025-156399/): Malicious code in inal-poke15 (npm) (malicious package) - [MAL-2025-156398](https://insights.sbomify.com/MAL-2025-156398/): Malicious code in inal-poke14 (npm) (malicious package) - [MAL-2025-156397](https://insights.sbomify.com/MAL-2025-156397/): Malicious code in inal-poke13 (npm) (malicious package) - [MAL-2025-156396](https://insights.sbomify.com/MAL-2025-156396/): Malicious code in inal-poke121 (npm) (malicious package) - [MAL-2025-156395](https://insights.sbomify.com/MAL-2025-156395/): Malicious code in inal-poke120 (npm) (malicious package) - [MAL-2025-156394](https://insights.sbomify.com/MAL-2025-156394/): Malicious code in inal-poke12 (npm) (malicious package) - [MAL-2025-156393](https://insights.sbomify.com/MAL-2025-156393/): Malicious code in inal-poke119 (npm) (malicious package) - [MAL-2025-156392](https://insights.sbomify.com/MAL-2025-156392/): Malicious code in inal-poke118 (npm) (malicious package) - [MAL-2025-156391](https://insights.sbomify.com/MAL-2025-156391/): Malicious code in inal-poke117 (npm) (malicious package) - [MAL-2025-156390](https://insights.sbomify.com/MAL-2025-156390/): Malicious code in inal-poke116 (npm) (malicious package) - [MAL-2025-15639](https://insights.sbomify.com/MAL-2025-15639/): Malicious code in bfingers (npm) (malicious package) - [MAL-2025-156389](https://insights.sbomify.com/MAL-2025-156389/): Malicious code in inal-poke115 (npm) (malicious package) - [MAL-2025-156388](https://insights.sbomify.com/MAL-2025-156388/): Malicious code in inal-poke114 (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1305/