# Vulnerabilities published in 2025


- [MAL-2025-155937](https://insights.sbomify.com/MAL-2025-155937/): Malicious code in ican-poke57 (npm) (malicious package)
- [MAL-2025-155936](https://insights.sbomify.com/MAL-2025-155936/): Malicious code in ican-poke56 (npm) (malicious package)
- [MAL-2025-155935](https://insights.sbomify.com/MAL-2025-155935/): Malicious code in ican-poke55 (npm) (malicious package)
- [MAL-2025-155934](https://insights.sbomify.com/MAL-2025-155934/): Malicious code in ican-poke54 (npm) (malicious package)
- [MAL-2025-155933](https://insights.sbomify.com/MAL-2025-155933/): Malicious code in ican-poke53 (npm) (malicious package)
- [MAL-2025-155932](https://insights.sbomify.com/MAL-2025-155932/): Malicious code in ican-poke52 (npm) (malicious package)
- [MAL-2025-155931](https://insights.sbomify.com/MAL-2025-155931/): Malicious code in ican-poke51 (npm) (malicious package)
- [MAL-2025-155930](https://insights.sbomify.com/MAL-2025-155930/): Malicious code in ican-poke50 (npm) (malicious package)
- [MAL-2025-15593](https://insights.sbomify.com/MAL-2025-15593/): Malicious code in bemjst (npm) (malicious package)
- [MAL-2025-155929](https://insights.sbomify.com/MAL-2025-155929/): Malicious code in ican-poke5 (npm) (malicious package)
- [MAL-2025-155928](https://insights.sbomify.com/MAL-2025-155928/): Malicious code in ican-poke49 (npm) (malicious package)
- [MAL-2025-155927](https://insights.sbomify.com/MAL-2025-155927/): Malicious code in ican-poke48 (npm) (malicious package)
- [MAL-2025-155926](https://insights.sbomify.com/MAL-2025-155926/): Malicious code in ican-poke47 (npm) (malicious package)
- [MAL-2025-155925](https://insights.sbomify.com/MAL-2025-155925/): Malicious code in ican-poke46 (npm) (malicious package)
- [MAL-2025-155924](https://insights.sbomify.com/MAL-2025-155924/): Malicious code in ican-poke45 (npm) (malicious package)
- [MAL-2025-155923](https://insights.sbomify.com/MAL-2025-155923/): Malicious code in ican-poke44 (npm) (malicious package)
- [MAL-2025-155922](https://insights.sbomify.com/MAL-2025-155922/): Malicious code in ican-poke43 (npm) (malicious package)
- [MAL-2025-155921](https://insights.sbomify.com/MAL-2025-155921/): Malicious code in ican-poke42 (npm) (malicious package)
- [MAL-2025-155920](https://insights.sbomify.com/MAL-2025-155920/): Malicious code in ican-poke41 (npm) (malicious package)
- [MAL-2025-15592](https://insights.sbomify.com/MAL-2025-15592/): Malicious code in bem-page-object (npm) (malicious package)
- [MAL-2025-155919](https://insights.sbomify.com/MAL-2025-155919/): Malicious code in ican-poke40 (npm) (malicious package)
- [MAL-2025-155918](https://insights.sbomify.com/MAL-2025-155918/): Malicious code in ican-poke4 (npm) (malicious package)
- [MAL-2025-155917](https://insights.sbomify.com/MAL-2025-155917/): Malicious code in ican-poke39 (npm) (malicious package)
- [MAL-2025-155916](https://insights.sbomify.com/MAL-2025-155916/): Malicious code in ican-poke38 (npm) (malicious package)
- [MAL-2025-155915](https://insights.sbomify.com/MAL-2025-155915/): Malicious code in ican-poke37 (npm) (malicious package)
- [MAL-2025-155914](https://insights.sbomify.com/MAL-2025-155914/): Malicious code in ican-poke36 (npm) (malicious package)
- [MAL-2025-155913](https://insights.sbomify.com/MAL-2025-155913/): Malicious code in ican-poke35 (npm) (malicious package)
- [MAL-2025-155912](https://insights.sbomify.com/MAL-2025-155912/): Malicious code in ican-poke34 (npm) (malicious package)
- [MAL-2025-155911](https://insights.sbomify.com/MAL-2025-155911/): Malicious code in ican-poke33 (npm) (malicious package)
- [MAL-2025-155910](https://insights.sbomify.com/MAL-2025-155910/): Malicious code in ican-poke32 (npm) (malicious package)
- [MAL-2025-15591](https://insights.sbomify.com/MAL-2025-15591/): Malicious code in beltful (npm) (malicious package)
- [MAL-2025-155909](https://insights.sbomify.com/MAL-2025-155909/): Malicious code in ican-poke31 (npm) (malicious package)
- [MAL-2025-155908](https://insights.sbomify.com/MAL-2025-155908/): Malicious code in ican-poke30 (npm) (malicious package)
- [MAL-2025-155907](https://insights.sbomify.com/MAL-2025-155907/): Malicious code in ican-poke3 (npm) (malicious package)
- [MAL-2025-155906](https://insights.sbomify.com/MAL-2025-155906/): Malicious code in ican-poke29 (npm) (malicious package)
- [MAL-2025-155905](https://insights.sbomify.com/MAL-2025-155905/): Malicious code in ican-poke28 (npm) (malicious package)
- [MAL-2025-155904](https://insights.sbomify.com/MAL-2025-155904/): Malicious code in ican-poke27 (npm) (malicious package)
- [MAL-2025-155903](https://insights.sbomify.com/MAL-2025-155903/): Malicious code in ican-poke26 (npm) (malicious package)
- [MAL-2025-155902](https://insights.sbomify.com/MAL-2025-155902/): Malicious code in ican-poke25 (npm) (malicious package)
- [MAL-2025-155901](https://insights.sbomify.com/MAL-2025-155901/): Malicious code in ican-poke24 (npm) (malicious package)
- [MAL-2025-155900](https://insights.sbomify.com/MAL-2025-155900/): Malicious code in ican-poke23 (npm) (malicious package)
- [MAL-2025-15590](https://insights.sbomify.com/MAL-2025-15590/): Malicious code in belmgr-plugins (npm) (malicious package)
- [MAL-2025-1559](https://insights.sbomify.com/MAL-2025-1559/): Malicious code in react-native-wallet-sdk-demo-app (npm) (malicious package)
- [MAL-2025-155899](https://insights.sbomify.com/MAL-2025-155899/): Malicious code in ican-poke22 (npm) (malicious package)
- [MAL-2025-155898](https://insights.sbomify.com/MAL-2025-155898/): Malicious code in ican-poke21 (npm) (malicious package)
- [MAL-2025-155897](https://insights.sbomify.com/MAL-2025-155897/): Malicious code in ican-poke20 (npm) (malicious package)
- [MAL-2025-155896](https://insights.sbomify.com/MAL-2025-155896/): Malicious code in ican-poke19 (npm) (malicious package)
- [MAL-2025-155895](https://insights.sbomify.com/MAL-2025-155895/): Malicious code in ican-poke18 (npm) (malicious package)
- [MAL-2025-155894](https://insights.sbomify.com/MAL-2025-155894/): Malicious code in ican-poke17 (npm) (malicious package)
- [MAL-2025-155893](https://insights.sbomify.com/MAL-2025-155893/): Malicious code in ican-poke16 (npm) (malicious package)
- [MAL-2025-155892](https://insights.sbomify.com/MAL-2025-155892/): Malicious code in ican-poke15 (npm) (malicious package)
- [MAL-2025-155891](https://insights.sbomify.com/MAL-2025-155891/): Malicious code in ican-poke14 (npm) (malicious package)
- [MAL-2025-155890](https://insights.sbomify.com/MAL-2025-155890/): Malicious code in ican-poke13 (npm) (malicious package)
- [MAL-2025-15589](https://insights.sbomify.com/MAL-2025-15589/): Malicious code in bellatrix-quantum-computing-non-blocking-package (npm) (malicious package)
- [MAL-2025-155889](https://insights.sbomify.com/MAL-2025-155889/): Malicious code in ican-poke12 (npm) (malicious package)
- [MAL-2025-155888](https://insights.sbomify.com/MAL-2025-155888/): Malicious code in ican-poke111 (npm) (malicious package)
- [MAL-2025-155887](https://insights.sbomify.com/MAL-2025-155887/): Malicious code in ican-poke110 (npm) (malicious package)
- [MAL-2025-155886](https://insights.sbomify.com/MAL-2025-155886/): Malicious code in ican-poke11 (npm) (malicious package)
- [MAL-2025-155885](https://insights.sbomify.com/MAL-2025-155885/): Malicious code in ican-poke109 (npm) (malicious package)
- [MAL-2025-155884](https://insights.sbomify.com/MAL-2025-155884/): Malicious code in ican-poke108 (npm) (malicious package)
- [MAL-2025-155883](https://insights.sbomify.com/MAL-2025-155883/): Malicious code in ican-poke107 (npm) (malicious package)
- [MAL-2025-155882](https://insights.sbomify.com/MAL-2025-155882/): Malicious code in ican-poke106 (npm) (malicious package)
- [MAL-2025-155881](https://insights.sbomify.com/MAL-2025-155881/): Malicious code in ican-poke105 (npm) (malicious package)
- [MAL-2025-155880](https://insights.sbomify.com/MAL-2025-155880/): Malicious code in ican-poke104 (npm) (malicious package)
- [MAL-2025-15588](https://insights.sbomify.com/MAL-2025-15588/): Malicious code in bellatrix-proxima-xenos-mantle (npm) (malicious package)
- [MAL-2025-155879](https://insights.sbomify.com/MAL-2025-155879/): Malicious code in ican-poke103 (npm) (malicious package)
- [MAL-2025-155878](https://insights.sbomify.com/MAL-2025-155878/): Malicious code in ican-poke102 (npm) (malicious package)
- [MAL-2025-155877](https://insights.sbomify.com/MAL-2025-155877/): Malicious code in ican-poke101 (npm) (malicious package)
- [MAL-2025-155876](https://insights.sbomify.com/MAL-2025-155876/): Malicious code in ican-poke100 (npm) (malicious package)
- [MAL-2025-155875](https://insights.sbomify.com/MAL-2025-155875/): Malicious code in ican-poke10 (npm) (malicious package)
- [MAL-2025-155874](https://insights.sbomify.com/MAL-2025-155874/): Malicious code in ican-poke1 (npm) (malicious package)
- [MAL-2025-155873](https://insights.sbomify.com/MAL-2025-155873/): Malicious code in ibufa-otaitu-umita (npm) (malicious package)
- [MAL-2025-155872](https://insights.sbomify.com/MAL-2025-155872/): Malicious code in ibfa-otaitu-umita (npm) (malicious package)
- [MAL-2025-155871](https://insights.sbomify.com/MAL-2025-155871/): Malicious code in ibanuni-otaima-ufua (npm) (malicious package)
- [MAL-2025-155870](https://insights.sbomify.com/MAL-2025-155870/): Malicious code in ibanuni-otai-ufua (npm) (malicious package)
- [MAL-2025-15587](https://insights.sbomify.com/MAL-2025-15587/): Malicious code in bellatrix-paleoecology-gammarayburst-orbit (npm) (malicious package)
- [MAL-2025-155869](https://insights.sbomify.com/MAL-2025-155869/): Malicious code in ibanuni-ota-umumauf (npm) (malicious package)
- [MAL-2025-155868](https://insights.sbomify.com/MAL-2025-155868/): Malicious code in ibanuni-ota-umauf (npm) (malicious package)
- [MAL-2025-155867](https://insights.sbomify.com/MAL-2025-155867/): Malicious code in ibanuni-ota-ufua (npm) (malicious package)
- [MAL-2025-155866](https://insights.sbomify.com/MAL-2025-155866/): Malicious code in ibanuni-ota-ufu (npm) (malicious package)
- [MAL-2025-155865](https://insights.sbomify.com/MAL-2025-155865/): Malicious code in ibanuni-ota-uf (npm) (malicious package)
- [MAL-2025-155864](https://insights.sbomify.com/MAL-2025-155864/): Malicious code in ibanuni-ota-uauf (npm) (malicious package)
- [MAL-2025-155863](https://insights.sbomify.com/MAL-2025-155863/): Malicious code in ibanun-otauai-umaibtu (npm) (malicious package)
- [MAL-2025-155862](https://insights.sbomify.com/MAL-2025-155862/): Malicious code in ibanun-otai-umaibtu (npm) (malicious package)
- [MAL-2025-155861](https://insights.sbomify.com/MAL-2025-155861/): Malicious code in ibanun-otabauai-umaibtu (npm) (malicious package)
- [MAL-2025-155860](https://insights.sbomify.com/MAL-2025-155860/): Malicious code in ibanun-ota-umumauf (npm) (malicious package)
- [MAL-2025-15586](https://insights.sbomify.com/MAL-2025-15586/): Malicious code in bellatrix-mocha-eridanus-gridsome (npm) (malicious package)
- [MAL-2025-155859](https://insights.sbomify.com/MAL-2025-155859/): Malicious code in ibanun-ota-umumau (npm) (malicious package)
- [MAL-2025-155858](https://insights.sbomify.com/MAL-2025-155858/): Malicious code in ibanun-ota-umuma (npm) (malicious package)
- [MAL-2025-155857](https://insights.sbomify.com/MAL-2025-155857/): Malicious code in ibanun-ota-umum (npm) (malicious package)
- [MAL-2025-155856](https://insights.sbomify.com/MAL-2025-155856/): Malicious code in ibanun-ota-umu (npm) (malicious package)
- [MAL-2025-155855](https://insights.sbomify.com/MAL-2025-155855/): Malicious code in ibanun-ota-umaibtu (npm) (malicious package)
- [MAL-2025-155854](https://insights.sbomify.com/MAL-2025-155854/): Malicious code in ibanun-ota-umabu (npm) (malicious package)
- [MAL-2025-155853](https://insights.sbomify.com/MAL-2025-155853/): Malicious code in ibanun-ota-umabtu (npm) (malicious package)
- [MAL-2025-155852](https://insights.sbomify.com/MAL-2025-155852/): Malicious code in ibanu-otabauai-umaibtu (npm) (malicious package)
- [MAL-2025-155851](https://insights.sbomify.com/MAL-2025-155851/): Malicious code in iban-otabauai-umaibtu (npm) (malicious package)
- [MAL-2025-155850](https://insights.sbomify.com/MAL-2025-155850/): Malicious code in iba-otau-umita (npm) (malicious package)
- [MAL-2025-15585](https://insights.sbomify.com/MAL-2025-15585/): Malicious code in bellatrix-middleware-update-uglify-js (npm) (malicious package)
- [MAL-2025-155849](https://insights.sbomify.com/MAL-2025-155849/): Malicious code in iba-otatu-umita (npm) (malicious package)
- [MAL-2025-155848](https://insights.sbomify.com/MAL-2025-155848/): Malicious code in iba-otanumai-umaibtu (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1311/