# Vulnerabilities published in 2025


- [MAL-2025-156026](https://insights.sbomify.com/MAL-2025-156026/): Malicious code in icha-46 (npm) (malicious package)
- [MAL-2025-156025](https://insights.sbomify.com/MAL-2025-156025/): Malicious code in icha-45 (npm) (malicious package)
- [MAL-2025-156024](https://insights.sbomify.com/MAL-2025-156024/): Malicious code in icha-44 (npm) (malicious package)
- [MAL-2025-156023](https://insights.sbomify.com/MAL-2025-156023/): Malicious code in icha-43 (npm) (malicious package)
- [MAL-2025-156022](https://insights.sbomify.com/MAL-2025-156022/): Malicious code in icha-42 (npm) (malicious package)
- [MAL-2025-156021](https://insights.sbomify.com/MAL-2025-156021/): Malicious code in icha-41 (npm) (malicious package)
- [MAL-2025-156020](https://insights.sbomify.com/MAL-2025-156020/): Malicious code in icha-40 (npm) (malicious package)
- [MAL-2025-15602](https://insights.sbomify.com/MAL-2025-15602/): Malicious code in bereket (npm) (malicious package)
- [MAL-2025-156019](https://insights.sbomify.com/MAL-2025-156019/): Malicious code in icha-4 (npm) (malicious package)
- [MAL-2025-156018](https://insights.sbomify.com/MAL-2025-156018/): Malicious code in icha-39 (npm) (malicious package)
- [MAL-2025-156017](https://insights.sbomify.com/MAL-2025-156017/): Malicious code in icha-38 (npm) (malicious package)
- [MAL-2025-156016](https://insights.sbomify.com/MAL-2025-156016/): Malicious code in icha-37 (npm) (malicious package)
- [MAL-2025-156015](https://insights.sbomify.com/MAL-2025-156015/): Malicious code in icha-36 (npm) (malicious package)
- [MAL-2025-156014](https://insights.sbomify.com/MAL-2025-156014/): Malicious code in icha-35 (npm) (malicious package)
- [MAL-2025-156013](https://insights.sbomify.com/MAL-2025-156013/): Malicious code in icha-34 (npm) (malicious package)
- [MAL-2025-156012](https://insights.sbomify.com/MAL-2025-156012/): Malicious code in icha-33 (npm) (malicious package)
- [MAL-2025-156011](https://insights.sbomify.com/MAL-2025-156011/): Malicious code in icha-32 (npm) (malicious package)
- [MAL-2025-156010](https://insights.sbomify.com/MAL-2025-156010/): Malicious code in icha-31 (npm) (malicious package)
- [MAL-2025-15601](https://insights.sbomify.com/MAL-2025-15601/): Malicious code in ber3 (npm) (malicious package)
- [MAL-2025-156009](https://insights.sbomify.com/MAL-2025-156009/): Malicious code in icha-30 (npm) (malicious package)
- [MAL-2025-156008](https://insights.sbomify.com/MAL-2025-156008/): Malicious code in icha-3 (npm) (malicious package)
- [MAL-2025-156007](https://insights.sbomify.com/MAL-2025-156007/): Malicious code in icha-29 (npm) (malicious package)
- [MAL-2025-156006](https://insights.sbomify.com/MAL-2025-156006/): Malicious code in icha-28 (npm) (malicious package)
- [MAL-2025-156005](https://insights.sbomify.com/MAL-2025-156005/): Malicious code in icha-27 (npm) (malicious package)
- [MAL-2025-156004](https://insights.sbomify.com/MAL-2025-156004/): Malicious code in icha-26 (npm) (malicious package)
- [MAL-2025-156003](https://insights.sbomify.com/MAL-2025-156003/): Malicious code in icha-25 (npm) (malicious package)
- [MAL-2025-156002](https://insights.sbomify.com/MAL-2025-156002/): Malicious code in icha-24 (npm) (malicious package)
- [MAL-2025-156001](https://insights.sbomify.com/MAL-2025-156001/): Malicious code in icha-23 (npm) (malicious package)
- [MAL-2025-156000](https://insights.sbomify.com/MAL-2025-156000/): Malicious code in icha-22 (npm) (malicious package)
- [MAL-2025-15600](https://insights.sbomify.com/MAL-2025-15600/): Malicious code in bephztivxlwmgksk (npm) (malicious package)
- [MAL-2025-1560](https://insights.sbomify.com/MAL-2025-1560/): Malicious code in huma-contracts-v2 (npm) (malicious package)
- [MAL-2025-156](https://insights.sbomify.com/MAL-2025-156/): Malicious code in ai-playground (npm) (malicious package)
- [MAL-2025-155999](https://insights.sbomify.com/MAL-2025-155999/): Malicious code in icha-21 (npm) (malicious package)
- [MAL-2025-155998](https://insights.sbomify.com/MAL-2025-155998/): Malicious code in icha-20 (npm) (malicious package)
- [MAL-2025-155997](https://insights.sbomify.com/MAL-2025-155997/): Malicious code in icha-2 (npm) (malicious package)
- [MAL-2025-155996](https://insights.sbomify.com/MAL-2025-155996/): Malicious code in icha-19 (npm) (malicious package)
- [MAL-2025-155995](https://insights.sbomify.com/MAL-2025-155995/): Malicious code in icha-18 (npm) (malicious package)
- [MAL-2025-155994](https://insights.sbomify.com/MAL-2025-155994/): Malicious code in icha-17 (npm) (malicious package)
- [MAL-2025-155993](https://insights.sbomify.com/MAL-2025-155993/): Malicious code in icha-16 (npm) (malicious package)
- [MAL-2025-155992](https://insights.sbomify.com/MAL-2025-155992/): Malicious code in icha-15 (npm) (malicious package)
- [MAL-2025-155991](https://insights.sbomify.com/MAL-2025-155991/): Malicious code in icha-14 (npm) (malicious package)
- [MAL-2025-155990](https://insights.sbomify.com/MAL-2025-155990/): Malicious code in icha-13 (npm) (malicious package)
- [MAL-2025-15599](https://insights.sbomify.com/MAL-2025-15599/): Malicious code in benjiql (npm) (malicious package)
- [MAL-2025-155989](https://insights.sbomify.com/MAL-2025-155989/): Malicious code in icha-12 (npm) (malicious package)
- [MAL-2025-155988](https://insights.sbomify.com/MAL-2025-155988/): Malicious code in icha-11 (npm) (malicious package)
- [MAL-2025-155987](https://insights.sbomify.com/MAL-2025-155987/): Malicious code in icha-101 (npm) (malicious package)
- [MAL-2025-155986](https://insights.sbomify.com/MAL-2025-155986/): Malicious code in icha-100 (npm) (malicious package)
- [MAL-2025-155985](https://insights.sbomify.com/MAL-2025-155985/): Malicious code in icha-10 (npm) (malicious package)
- [MAL-2025-155984](https://insights.sbomify.com/MAL-2025-155984/): Malicious code in icha-1 (npm) (malicious package)
- [MAL-2025-155983](https://insights.sbomify.com/MAL-2025-155983/): Malicious code in ican-poke99 (npm) (malicious package)
- [MAL-2025-155982](https://insights.sbomify.com/MAL-2025-155982/): Malicious code in ican-poke98 (npm) (malicious package)
- [MAL-2025-155981](https://insights.sbomify.com/MAL-2025-155981/): Malicious code in ican-poke97 (npm) (malicious package)
- [MAL-2025-155980](https://insights.sbomify.com/MAL-2025-155980/): Malicious code in ican-poke96 (npm) (malicious package)
- [MAL-2025-15598](https://insights.sbomify.com/MAL-2025-15598/): Malicious code in benguigui (npm) (malicious package)
- [MAL-2025-155979](https://insights.sbomify.com/MAL-2025-155979/): Malicious code in ican-poke95 (npm) (malicious package)
- [MAL-2025-155978](https://insights.sbomify.com/MAL-2025-155978/): Malicious code in ican-poke94 (npm) (malicious package)
- [MAL-2025-155977](https://insights.sbomify.com/MAL-2025-155977/): Malicious code in ican-poke93 (npm) (malicious package)
- [MAL-2025-155976](https://insights.sbomify.com/MAL-2025-155976/): Malicious code in ican-poke92 (npm) (malicious package)
- [MAL-2025-155975](https://insights.sbomify.com/MAL-2025-155975/): Malicious code in ican-poke91 (npm) (malicious package)
- [MAL-2025-155974](https://insights.sbomify.com/MAL-2025-155974/): Malicious code in ican-poke90 (npm) (malicious package)
- [MAL-2025-155973](https://insights.sbomify.com/MAL-2025-155973/): Malicious code in ican-poke9 (npm) (malicious package)
- [MAL-2025-155972](https://insights.sbomify.com/MAL-2025-155972/): Malicious code in ican-poke89 (npm) (malicious package)
- [MAL-2025-155971](https://insights.sbomify.com/MAL-2025-155971/): Malicious code in ican-poke88 (npm) (malicious package)
- [MAL-2025-155970](https://insights.sbomify.com/MAL-2025-155970/): Malicious code in ican-poke87 (npm) (malicious package)
- [MAL-2025-15597](https://insights.sbomify.com/MAL-2025-15597/): Malicious code in benelist (npm) (malicious package)
- [MAL-2025-155969](https://insights.sbomify.com/MAL-2025-155969/): Malicious code in ican-poke86 (npm) (malicious package)
- [MAL-2025-155968](https://insights.sbomify.com/MAL-2025-155968/): Malicious code in ican-poke85 (npm) (malicious package)
- [MAL-2025-155967](https://insights.sbomify.com/MAL-2025-155967/): Malicious code in ican-poke84 (npm) (malicious package)
- [MAL-2025-155966](https://insights.sbomify.com/MAL-2025-155966/): Malicious code in ican-poke83 (npm) (malicious package)
- [MAL-2025-155965](https://insights.sbomify.com/MAL-2025-155965/): Malicious code in ican-poke82 (npm) (malicious package)
- [MAL-2025-155964](https://insights.sbomify.com/MAL-2025-155964/): Malicious code in ican-poke81 (npm) (malicious package)
- [MAL-2025-155963](https://insights.sbomify.com/MAL-2025-155963/): Malicious code in ican-poke80 (npm) (malicious package)
- [MAL-2025-155962](https://insights.sbomify.com/MAL-2025-155962/): Malicious code in ican-poke8 (npm) (malicious package)
- [MAL-2025-155961](https://insights.sbomify.com/MAL-2025-155961/): Malicious code in ican-poke79 (npm) (malicious package)
- [MAL-2025-155960](https://insights.sbomify.com/MAL-2025-155960/): Malicious code in ican-poke78 (npm) (malicious package)
- [MAL-2025-15596](https://insights.sbomify.com/MAL-2025-15596/): Malicious code in benchmark-epsilon-runtime-authenticate-slow (npm) (malicious package)
- [MAL-2025-155959](https://insights.sbomify.com/MAL-2025-155959/): Malicious code in ican-poke77 (npm) (malicious package)
- [MAL-2025-155958](https://insights.sbomify.com/MAL-2025-155958/): Malicious code in ican-poke76 (npm) (malicious package)
- [MAL-2025-155957](https://insights.sbomify.com/MAL-2025-155957/): Malicious code in ican-poke75 (npm) (malicious package)
- [MAL-2025-155956](https://insights.sbomify.com/MAL-2025-155956/): Malicious code in ican-poke74 (npm) (malicious package)
- [MAL-2025-155955](https://insights.sbomify.com/MAL-2025-155955/): Malicious code in ican-poke73 (npm) (malicious package)
- [MAL-2025-155954](https://insights.sbomify.com/MAL-2025-155954/): Malicious code in ican-poke72 (npm) (malicious package)
- [MAL-2025-155953](https://insights.sbomify.com/MAL-2025-155953/): Malicious code in ican-poke71 (npm) (malicious package)
- [MAL-2025-155952](https://insights.sbomify.com/MAL-2025-155952/): Malicious code in ican-poke70 (npm) (malicious package)
- [MAL-2025-155951](https://insights.sbomify.com/MAL-2025-155951/): Malicious code in ican-poke7 (npm) (malicious package)
- [MAL-2025-155950](https://insights.sbomify.com/MAL-2025-155950/): Malicious code in ican-poke69 (npm) (malicious package)
- [MAL-2025-15595](https://insights.sbomify.com/MAL-2025-15595/): Malicious code in benchmark-deserialize-mu-epsilon-shell (npm) (malicious package)
- [MAL-2025-155949](https://insights.sbomify.com/MAL-2025-155949/): Malicious code in ican-poke68 (npm) (malicious package)
- [MAL-2025-155948](https://insights.sbomify.com/MAL-2025-155948/): Malicious code in ican-poke67 (npm) (malicious package)
- [MAL-2025-155947](https://insights.sbomify.com/MAL-2025-155947/): Malicious code in ican-poke66 (npm) (malicious package)
- [MAL-2025-155946](https://insights.sbomify.com/MAL-2025-155946/): Malicious code in ican-poke65 (npm) (malicious package)
- [MAL-2025-155945](https://insights.sbomify.com/MAL-2025-155945/): Malicious code in ican-poke64 (npm) (malicious package)
- [MAL-2025-155944](https://insights.sbomify.com/MAL-2025-155944/): Malicious code in ican-poke63 (npm) (malicious package)
- [MAL-2025-155943](https://insights.sbomify.com/MAL-2025-155943/): Malicious code in ican-poke62 (npm) (malicious package)
- [MAL-2025-155942](https://insights.sbomify.com/MAL-2025-155942/): Malicious code in ican-poke61 (npm) (malicious package)
- [MAL-2025-155941](https://insights.sbomify.com/MAL-2025-155941/): Malicious code in ican-poke60 (npm) (malicious package)
- [MAL-2025-155940](https://insights.sbomify.com/MAL-2025-155940/): Malicious code in ican-poke6 (npm) (malicious package)
- [MAL-2025-15594](https://insights.sbomify.com/MAL-2025-15594/): Malicious code in bemutato (npm) (malicious package)
- [MAL-2025-155939](https://insights.sbomify.com/MAL-2025-155939/): Malicious code in ican-poke59 (npm) (malicious package)
- [MAL-2025-155938](https://insights.sbomify.com/MAL-2025-155938/): Malicious code in ican-poke58 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1310/