# Vulnerabilities published in 2025


- [MAL-2025-154857](https://insights.sbomify.com/MAL-2025-154857/): Malicious code in fadila-poke123 (npm) (malicious package)
- [MAL-2025-154856](https://insights.sbomify.com/MAL-2025-154856/): Malicious code in fadila-poke122 (npm) (malicious package)
- [MAL-2025-154855](https://insights.sbomify.com/MAL-2025-154855/): Malicious code in fadila-poke121 (npm) (malicious package)
- [MAL-2025-154854](https://insights.sbomify.com/MAL-2025-154854/): Malicious code in fadila-poke120 (npm) (malicious package)
- [MAL-2025-154853](https://insights.sbomify.com/MAL-2025-154853/): Malicious code in fadila-poke12 (npm) (malicious package)
- [MAL-2025-154852](https://insights.sbomify.com/MAL-2025-154852/): Malicious code in fadila-poke119 (npm) (malicious package)
- [MAL-2025-154851](https://insights.sbomify.com/MAL-2025-154851/): Malicious code in fadila-poke118 (npm) (malicious package)
- [MAL-2025-154850](https://insights.sbomify.com/MAL-2025-154850/): Malicious code in fadila-poke117 (npm) (malicious package)
- [MAL-2025-15485](https://insights.sbomify.com/MAL-2025-15485/): Malicious code in bartok-common (npm) (malicious package)
- [MAL-2025-154849](https://insights.sbomify.com/MAL-2025-154849/): Malicious code in fadila-poke116 (npm) (malicious package)
- [MAL-2025-154848](https://insights.sbomify.com/MAL-2025-154848/): Malicious code in fadila-poke115 (npm) (malicious package)
- [MAL-2025-154847](https://insights.sbomify.com/MAL-2025-154847/): Malicious code in fadila-poke114 (npm) (malicious package)
- [MAL-2025-154846](https://insights.sbomify.com/MAL-2025-154846/): Malicious code in fadila-poke113 (npm) (malicious package)
- [MAL-2025-154845](https://insights.sbomify.com/MAL-2025-154845/): Malicious code in fadila-poke112 (npm) (malicious package)
- [MAL-2025-154844](https://insights.sbomify.com/MAL-2025-154844/): Malicious code in fadila-poke111 (npm) (malicious package)
- [MAL-2025-154843](https://insights.sbomify.com/MAL-2025-154843/): Malicious code in fadila-poke110 (npm) (malicious package)
- [MAL-2025-154842](https://insights.sbomify.com/MAL-2025-154842/): Malicious code in fadila-poke11 (npm) (malicious package)
- [MAL-2025-154841](https://insights.sbomify.com/MAL-2025-154841/): Malicious code in fadila-poke109 (npm) (malicious package)
- [MAL-2025-154840](https://insights.sbomify.com/MAL-2025-154840/): Malicious code in fadila-poke108 (npm) (malicious package)
- [MAL-2025-15484](https://insights.sbomify.com/MAL-2025-15484/): Malicious code in bartok-cli (npm) (malicious package)
- [MAL-2025-154839](https://insights.sbomify.com/MAL-2025-154839/): Malicious code in fadila-poke107 (npm) (malicious package)
- [MAL-2025-154838](https://insights.sbomify.com/MAL-2025-154838/): Malicious code in fadila-poke106 (npm) (malicious package)
- [MAL-2025-154837](https://insights.sbomify.com/MAL-2025-154837/): Malicious code in fadila-poke105 (npm) (malicious package)
- [MAL-2025-154836](https://insights.sbomify.com/MAL-2025-154836/): Malicious code in fadila-poke104 (npm) (malicious package)
- [MAL-2025-154835](https://insights.sbomify.com/MAL-2025-154835/): Malicious code in fadila-poke103 (npm) (malicious package)
- [MAL-2025-154834](https://insights.sbomify.com/MAL-2025-154834/): Malicious code in fadila-poke102 (npm) (malicious package)
- [MAL-2025-154833](https://insights.sbomify.com/MAL-2025-154833/): Malicious code in fadila-poke101 (npm) (malicious package)
- [MAL-2025-154832](https://insights.sbomify.com/MAL-2025-154832/): Malicious code in fadila-poke100 (npm) (malicious package)
- [MAL-2025-154831](https://insights.sbomify.com/MAL-2025-154831/): Malicious code in fadila-poke10 (npm) (malicious package)
- [MAL-2025-154830](https://insights.sbomify.com/MAL-2025-154830/): Malicious code in fadila-poke1 (npm) (malicious package)
- [MAL-2025-15483](https://insights.sbomify.com/MAL-2025-15483/): Malicious code in barreno (npm) (malicious package)
- [MAL-2025-154829](https://insights.sbomify.com/MAL-2025-154829/): Malicious code in fa-gootda-ayah (npm) (malicious package)
- [MAL-2025-154828](https://insights.sbomify.com/MAL-2025-154828/): Malicious code in f-bendera-lisa (npm) (malicious package)
- [MAL-2025-154827](https://insights.sbomify.com/MAL-2025-154827/): Malicious code in ewa-poke9 (npm) (malicious package)
- [MAL-2025-154826](https://insights.sbomify.com/MAL-2025-154826/): Malicious code in ewa-poke8 (npm) (malicious package)
- [MAL-2025-154825](https://insights.sbomify.com/MAL-2025-154825/): Malicious code in ewa-poke7 (npm) (malicious package)
- [MAL-2025-154824](https://insights.sbomify.com/MAL-2025-154824/): Malicious code in ewa-poke6 (npm) (malicious package)
- [MAL-2025-154823](https://insights.sbomify.com/MAL-2025-154823/): Malicious code in ewa-poke5 (npm) (malicious package)
- [MAL-2025-154822](https://insights.sbomify.com/MAL-2025-154822/): Malicious code in ewa-poke49 (npm) (malicious package)
- [MAL-2025-154821](https://insights.sbomify.com/MAL-2025-154821/): Malicious code in ewa-poke48 (npm) (malicious package)
- [MAL-2025-154820](https://insights.sbomify.com/MAL-2025-154820/): Malicious code in ewa-poke47 (npm) (malicious package)
- [MAL-2025-15482](https://insights.sbomify.com/MAL-2025-15482/): Malicious code in barnard-vuetify-passport-antares (npm) (malicious package)
- [MAL-2025-154819](https://insights.sbomify.com/MAL-2025-154819/): Malicious code in ewa-poke46 (npm) (malicious package)
- [MAL-2025-154818](https://insights.sbomify.com/MAL-2025-154818/): Malicious code in ewa-poke45 (npm) (malicious package)
- [MAL-2025-154817](https://insights.sbomify.com/MAL-2025-154817/): Malicious code in ewa-poke44 (npm) (malicious package)
- [MAL-2025-154816](https://insights.sbomify.com/MAL-2025-154816/): Malicious code in ewa-poke43 (npm) (malicious package)
- [MAL-2025-154815](https://insights.sbomify.com/MAL-2025-154815/): Malicious code in ewa-poke42 (npm) (malicious package)
- [MAL-2025-154814](https://insights.sbomify.com/MAL-2025-154814/): Malicious code in ewa-poke41 (npm) (malicious package)
- [MAL-2025-154813](https://insights.sbomify.com/MAL-2025-154813/): Malicious code in ewa-poke40 (npm) (malicious package)
- [MAL-2025-154812](https://insights.sbomify.com/MAL-2025-154812/): Malicious code in ewa-poke4 (npm) (malicious package)
- [MAL-2025-154811](https://insights.sbomify.com/MAL-2025-154811/): Malicious code in ewa-poke39 (npm) (malicious package)
- [MAL-2025-154810](https://insights.sbomify.com/MAL-2025-154810/): Malicious code in ewa-poke38 (npm) (malicious package)
- [MAL-2025-15481](https://insights.sbomify.com/MAL-2025-15481/): Malicious code in barnard-ini-cryovolcano-build (npm) (malicious package)
- [MAL-2025-154809](https://insights.sbomify.com/MAL-2025-154809/): Malicious code in ewa-poke37 (npm) (malicious package)
- [MAL-2025-154808](https://insights.sbomify.com/MAL-2025-154808/): Malicious code in ewa-poke36 (npm) (malicious package)
- [MAL-2025-154807](https://insights.sbomify.com/MAL-2025-154807/): Malicious code in ewa-poke35 (npm) (malicious package)
- [MAL-2025-154806](https://insights.sbomify.com/MAL-2025-154806/): Malicious code in ewa-poke34 (npm) (malicious package)
- [MAL-2025-154805](https://insights.sbomify.com/MAL-2025-154805/): Malicious code in ewa-poke33 (npm) (malicious package)
- [MAL-2025-154804](https://insights.sbomify.com/MAL-2025-154804/): Malicious code in ewa-poke32 (npm) (malicious package)
- [MAL-2025-154803](https://insights.sbomify.com/MAL-2025-154803/): Malicious code in ewa-poke31 (npm) (malicious package)
- [MAL-2025-154802](https://insights.sbomify.com/MAL-2025-154802/): Malicious code in ewa-poke30 (npm) (malicious package)
- [MAL-2025-154801](https://insights.sbomify.com/MAL-2025-154801/): Malicious code in ewa-poke3 (npm) (malicious package)
- [MAL-2025-154800](https://insights.sbomify.com/MAL-2025-154800/): Malicious code in ewa-poke29 (npm) (malicious package)
- [MAL-2025-15480](https://insights.sbomify.com/MAL-2025-15480/): Malicious code in barnard-bootstrap-aquarius-selenology (npm) (malicious package)
- [MAL-2025-1548](https://insights.sbomify.com/MAL-2025-1548/): Malicious code in zztest82 (npm) (malicious package)
- [MAL-2025-154799](https://insights.sbomify.com/MAL-2025-154799/): Malicious code in ewa-poke28 (npm) (malicious package)
- [MAL-2025-154798](https://insights.sbomify.com/MAL-2025-154798/): Malicious code in ewa-poke27 (npm) (malicious package)
- [MAL-2025-154797](https://insights.sbomify.com/MAL-2025-154797/): Malicious code in ewa-poke26 (npm) (malicious package)
- [MAL-2025-154796](https://insights.sbomify.com/MAL-2025-154796/): Malicious code in ewa-poke25 (npm) (malicious package)
- [MAL-2025-154795](https://insights.sbomify.com/MAL-2025-154795/): Malicious code in ewa-poke24 (npm) (malicious package)
- [MAL-2025-154794](https://insights.sbomify.com/MAL-2025-154794/): Malicious code in ewa-poke23 (npm) (malicious package)
- [MAL-2025-154793](https://insights.sbomify.com/MAL-2025-154793/): Malicious code in ewa-poke22 (npm) (malicious package)
- [MAL-2025-154792](https://insights.sbomify.com/MAL-2025-154792/): Malicious code in ewa-poke21 (npm) (malicious package)
- [MAL-2025-154791](https://insights.sbomify.com/MAL-2025-154791/): Malicious code in ewa-poke20 (npm) (malicious package)
- [MAL-2025-154790](https://insights.sbomify.com/MAL-2025-154790/): Malicious code in ewa-poke2 (npm) (malicious package)
- [MAL-2025-15479](https://insights.sbomify.com/MAL-2025-15479/): Malicious code in bark-quinoa-6fli (npm) (malicious package)
- [MAL-2025-154789](https://insights.sbomify.com/MAL-2025-154789/): Malicious code in ewa-poke19 (npm) (malicious package)
- [MAL-2025-154788](https://insights.sbomify.com/MAL-2025-154788/): Malicious code in ewa-poke18 (npm) (malicious package)
- [MAL-2025-154787](https://insights.sbomify.com/MAL-2025-154787/): Malicious code in ewa-poke17 (npm) (malicious package)
- [MAL-2025-154786](https://insights.sbomify.com/MAL-2025-154786/): Malicious code in ewa-poke16 (npm) (malicious package)
- [MAL-2025-154785](https://insights.sbomify.com/MAL-2025-154785/): Malicious code in ewa-poke15 (npm) (malicious package)
- [MAL-2025-154784](https://insights.sbomify.com/MAL-2025-154784/): Malicious code in ewa-poke14 (npm) (malicious package)
- [MAL-2025-154783](https://insights.sbomify.com/MAL-2025-154783/): Malicious code in ewa-poke13 (npm) (malicious package)
- [MAL-2025-154782](https://insights.sbomify.com/MAL-2025-154782/): Malicious code in ewa-poke12 (npm) (malicious package)
- [MAL-2025-154781](https://insights.sbomify.com/MAL-2025-154781/): Malicious code in ewa-poke11 (npm) (malicious package)
- [MAL-2025-154780](https://insights.sbomify.com/MAL-2025-154780/): Malicious code in ewa-poke10 (npm) (malicious package)
- [MAL-2025-15478](https://insights.sbomify.com/MAL-2025-15478/): Malicious code in bark-hazel-xwh5 (npm) (malicious package)
- [MAL-2025-154779](https://insights.sbomify.com/MAL-2025-154779/): Malicious code in ewa-poke1 (npm) (malicious package)
- [MAL-2025-154778](https://insights.sbomify.com/MAL-2025-154778/): Malicious code in ertu-janjmi-raimu (npm) (malicious package)
- [MAL-2025-154777](https://insights.sbomify.com/MAL-2025-154777/): Malicious code in ertu-janjmai-rassismu (npm) (malicious package)
- [MAL-2025-154776](https://insights.sbomify.com/MAL-2025-154776/): Malicious code in ertu-janjmai-rasismu (npm) (malicious package)
- [MAL-2025-154775](https://insights.sbomify.com/MAL-2025-154775/): Malicious code in ertu-janjmai-raismu (npm) (malicious package)
- [MAL-2025-154774](https://insights.sbomify.com/MAL-2025-154774/): Malicious code in ertu-janjmai-raimu (npm) (malicious package)
- [MAL-2025-154773](https://insights.sbomify.com/MAL-2025-154773/): Malicious code in ertu-janji-raimu (npm) (malicious package)
- [MAL-2025-154772](https://insights.sbomify.com/MAL-2025-154772/): Malicious code in ertu-jagnjmai-rassismu (npm) (malicious package)
- [MAL-2025-154771](https://insights.sbomify.com/MAL-2025-154771/): Malicious code in ertsu-jagnjmai-rassismu (npm) (malicious package)
- [MAL-2025-154770](https://insights.sbomify.com/MAL-2025-154770/): Malicious code in ertcsu-jagnjmai-rassismu (npm) (malicious package)
- [MAL-2025-15477](https://insights.sbomify.com/MAL-2025-15477/): Malicious code in bark-dwarf-1xym (npm) (malicious package)
- [MAL-2025-154769](https://insights.sbomify.com/MAL-2025-154769/): Malicious code in ertcsau-jagnjmai-rassismu (npm) (malicious package)
- [MAL-2025-154768](https://insights.sbomify.com/MAL-2025-154768/): Malicious code in ertacssau-vs-munchen (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1323/