# Vulnerabilities published in 2025 - [MAL-2025-153687](https://insights.sbomify.com/MAL-2025-153687/): Malicious code in billa-37 (npm) (malicious package) - [MAL-2025-153686](https://insights.sbomify.com/MAL-2025-153686/): Malicious code in billa-36 (npm) (malicious package) - [MAL-2025-153685](https://insights.sbomify.com/MAL-2025-153685/): Malicious code in billa-35 (npm) (malicious package) - [MAL-2025-153684](https://insights.sbomify.com/MAL-2025-153684/): Malicious code in billa-34 (npm) (malicious package) - [MAL-2025-153683](https://insights.sbomify.com/MAL-2025-153683/): Malicious code in billa-33 (npm) (malicious package) - [MAL-2025-153682](https://insights.sbomify.com/MAL-2025-153682/): Malicious code in billa-32 (npm) (malicious package) - [MAL-2025-153681](https://insights.sbomify.com/MAL-2025-153681/): Malicious code in billa-31 (npm) (malicious package) - [MAL-2025-153680](https://insights.sbomify.com/MAL-2025-153680/): Malicious code in billa-30 (npm) (malicious package) - [MAL-2025-15368](https://insights.sbomify.com/MAL-2025-15368/): Malicious code in bamboo-vortex-sug509-project (npm) (malicious package) - [MAL-2025-153679](https://insights.sbomify.com/MAL-2025-153679/): Malicious code in billa-3 (npm) (malicious package) - [MAL-2025-153678](https://insights.sbomify.com/MAL-2025-153678/): Malicious code in billa-29 (npm) (malicious package) - [MAL-2025-153677](https://insights.sbomify.com/MAL-2025-153677/): Malicious code in billa-28 (npm) (malicious package) - [MAL-2025-153676](https://insights.sbomify.com/MAL-2025-153676/): Malicious code in billa-27 (npm) (malicious package) - [MAL-2025-153675](https://insights.sbomify.com/MAL-2025-153675/): Malicious code in billa-26 (npm) (malicious package) - [MAL-2025-153674](https://insights.sbomify.com/MAL-2025-153674/): Malicious code in billa-25 (npm) (malicious package) - [MAL-2025-153673](https://insights.sbomify.com/MAL-2025-153673/): Malicious code in billa-24 (npm) (malicious package) - [MAL-2025-153672](https://insights.sbomify.com/MAL-2025-153672/): Malicious code in billa-23 (npm) (malicious package) - [MAL-2025-153671](https://insights.sbomify.com/MAL-2025-153671/): Malicious code in billa-22 (npm) (malicious package) - [MAL-2025-153670](https://insights.sbomify.com/MAL-2025-153670/): Malicious code in billa-21 (npm) (malicious package) - [MAL-2025-15367](https://insights.sbomify.com/MAL-2025-15367/): Malicious code in bamboo-volcano-qhl400-project (npm) (malicious package) - [MAL-2025-153669](https://insights.sbomify.com/MAL-2025-153669/): Malicious code in billa-20 (npm) (malicious package) - [MAL-2025-153668](https://insights.sbomify.com/MAL-2025-153668/): Malicious code in billa-2 (npm) (malicious package) - [MAL-2025-153667](https://insights.sbomify.com/MAL-2025-153667/): Malicious code in billa-19 (npm) (malicious package) - [MAL-2025-153666](https://insights.sbomify.com/MAL-2025-153666/): Malicious code in billa-18 (npm) (malicious package) - [MAL-2025-153665](https://insights.sbomify.com/MAL-2025-153665/): Malicious code in billa-17 (npm) (malicious package) - [MAL-2025-153664](https://insights.sbomify.com/MAL-2025-153664/): Malicious code in billa-16 (npm) (malicious package) - [MAL-2025-153663](https://insights.sbomify.com/MAL-2025-153663/): Malicious code in billa-15 (npm) (malicious package) - [MAL-2025-153662](https://insights.sbomify.com/MAL-2025-153662/): Malicious code in billa-14 (npm) (malicious package) - [MAL-2025-153661](https://insights.sbomify.com/MAL-2025-153661/): Malicious code in billa-13 (npm) (malicious package) - [MAL-2025-153660](https://insights.sbomify.com/MAL-2025-153660/): Malicious code in billa-12 (npm) (malicious package) - [MAL-2025-15366](https://insights.sbomify.com/MAL-2025-15366/): Malicious code in bamboo-quilt-vbx817-project (npm) (malicious package) - [MAL-2025-153659](https://insights.sbomify.com/MAL-2025-153659/): Malicious code in billa-11 (npm) (malicious package) - [MAL-2025-153658](https://insights.sbomify.com/MAL-2025-153658/): Malicious code in billa-102 (npm) (malicious package) - [MAL-2025-153657](https://insights.sbomify.com/MAL-2025-153657/): Malicious code in billa-101 (npm) (malicious package) - [MAL-2025-153656](https://insights.sbomify.com/MAL-2025-153656/): Malicious code in billa-100 (npm) (malicious package) - [MAL-2025-153655](https://insights.sbomify.com/MAL-2025-153655/): Malicious code in billa-10 (npm) (malicious package) - [MAL-2025-153654](https://insights.sbomify.com/MAL-2025-153654/): Malicious code in billa-1 (npm) (malicious package) - [MAL-2025-153653](https://insights.sbomify.com/MAL-2025-153653/): Malicious code in banuni-otaima-ufua (npm) (malicious package) - [MAL-2025-153652](https://insights.sbomify.com/MAL-2025-153652/): Malicious code in azhar-poke9 (npm) (malicious package) - [MAL-2025-153651](https://insights.sbomify.com/MAL-2025-153651/): Malicious code in azhar-poke8 (npm) (malicious package) - [MAL-2025-153650](https://insights.sbomify.com/MAL-2025-153650/): Malicious code in azhar-poke7 (npm) (malicious package) - [MAL-2025-15365](https://insights.sbomify.com/MAL-2025-15365/): Malicious code in bamboo-opaline-sbl070-project (npm) (malicious package) - [MAL-2025-153649](https://insights.sbomify.com/MAL-2025-153649/): Malicious code in azhar-poke6 (npm) (malicious package) - [MAL-2025-153648](https://insights.sbomify.com/MAL-2025-153648/): Malicious code in azhar-poke50 (npm) (malicious package) - [MAL-2025-153647](https://insights.sbomify.com/MAL-2025-153647/): Malicious code in azhar-poke5 (npm) (malicious package) - [MAL-2025-153646](https://insights.sbomify.com/MAL-2025-153646/): Malicious code in azhar-poke49 (npm) (malicious package) - [MAL-2025-153645](https://insights.sbomify.com/MAL-2025-153645/): Malicious code in azhar-poke48 (npm) (malicious package) - [MAL-2025-153644](https://insights.sbomify.com/MAL-2025-153644/): Malicious code in azhar-poke47 (npm) (malicious package) - [MAL-2025-153643](https://insights.sbomify.com/MAL-2025-153643/): Malicious code in azhar-poke46 (npm) (malicious package) - [MAL-2025-153642](https://insights.sbomify.com/MAL-2025-153642/): Malicious code in azhar-poke45 (npm) (malicious package) - [MAL-2025-153641](https://insights.sbomify.com/MAL-2025-153641/): Malicious code in azhar-poke44 (npm) (malicious package) - [MAL-2025-153640](https://insights.sbomify.com/MAL-2025-153640/): Malicious code in azhar-poke43 (npm) (malicious package) - [MAL-2025-15364](https://insights.sbomify.com/MAL-2025-15364/): Malicious code in bamboo-kiwi-shz441-project (npm) (malicious package) - [MAL-2025-153639](https://insights.sbomify.com/MAL-2025-153639/): Malicious code in azhar-poke42 (npm) (malicious package) - [MAL-2025-153638](https://insights.sbomify.com/MAL-2025-153638/): Malicious code in azhar-poke41 (npm) (malicious package) - [MAL-2025-153637](https://insights.sbomify.com/MAL-2025-153637/): Malicious code in azhar-poke40 (npm) (malicious package) - [MAL-2025-153636](https://insights.sbomify.com/MAL-2025-153636/): Malicious code in azhar-poke4 (npm) (malicious package) - [MAL-2025-153635](https://insights.sbomify.com/MAL-2025-153635/): Malicious code in azhar-poke39 (npm) (malicious package) - [MAL-2025-153634](https://insights.sbomify.com/MAL-2025-153634/): Malicious code in azhar-poke38 (npm) (malicious package) - [MAL-2025-153633](https://insights.sbomify.com/MAL-2025-153633/): Malicious code in azhar-poke37 (npm) (malicious package) - [MAL-2025-153632](https://insights.sbomify.com/MAL-2025-153632/): Malicious code in azhar-poke36 (npm) (malicious package) - [MAL-2025-153631](https://insights.sbomify.com/MAL-2025-153631/): Malicious code in azhar-poke35 (npm) (malicious package) - [MAL-2025-153630](https://insights.sbomify.com/MAL-2025-153630/): Malicious code in azhar-poke33 (npm) (malicious package) - [MAL-2025-15363](https://insights.sbomify.com/MAL-2025-15363/): Malicious code in bamboo-island-iaq641-project (npm) (malicious package) - [MAL-2025-153629](https://insights.sbomify.com/MAL-2025-153629/): Malicious code in azhar-poke32 (npm) (malicious package) - [MAL-2025-153628](https://insights.sbomify.com/MAL-2025-153628/): Malicious code in azhar-poke31 (npm) (malicious package) - [MAL-2025-153627](https://insights.sbomify.com/MAL-2025-153627/): Malicious code in azhar-poke30 (npm) (malicious package) - [MAL-2025-153626](https://insights.sbomify.com/MAL-2025-153626/): Malicious code in azhar-poke3 (npm) (malicious package) - [MAL-2025-153625](https://insights.sbomify.com/MAL-2025-153625/): Malicious code in azhar-poke29 (npm) (malicious package) - [MAL-2025-153624](https://insights.sbomify.com/MAL-2025-153624/): Malicious code in azhar-poke28 (npm) (malicious package) - [MAL-2025-153623](https://insights.sbomify.com/MAL-2025-153623/): Malicious code in azhar-poke27 (npm) (malicious package) - [MAL-2025-153622](https://insights.sbomify.com/MAL-2025-153622/): Malicious code in azhar-poke26 (npm) (malicious package) - [MAL-2025-153621](https://insights.sbomify.com/MAL-2025-153621/): Malicious code in azhar-poke25 (npm) (malicious package) - [MAL-2025-153620](https://insights.sbomify.com/MAL-2025-153620/): Malicious code in azhar-poke24 (npm) (malicious package) - [MAL-2025-15362](https://insights.sbomify.com/MAL-2025-15362/): Malicious code in bamboo-honey-rmv178-project (npm) (malicious package) - [MAL-2025-153619](https://insights.sbomify.com/MAL-2025-153619/): Malicious code in azhar-poke23 (npm) (malicious package) - [MAL-2025-153618](https://insights.sbomify.com/MAL-2025-153618/): Malicious code in azhar-poke22 (npm) (malicious package) - [MAL-2025-153617](https://insights.sbomify.com/MAL-2025-153617/): Malicious code in azhar-poke21 (npm) (malicious package) - [MAL-2025-153616](https://insights.sbomify.com/MAL-2025-153616/): Malicious code in azhar-poke20 (npm) (malicious package) - [MAL-2025-153615](https://insights.sbomify.com/MAL-2025-153615/): Malicious code in azhar-poke2 (npm) (malicious package) - [MAL-2025-153614](https://insights.sbomify.com/MAL-2025-153614/): Malicious code in azhar-poke19 (npm) (malicious package) - [MAL-2025-153613](https://insights.sbomify.com/MAL-2025-153613/): Malicious code in azhar-poke18 (npm) (malicious package) - [MAL-2025-153612](https://insights.sbomify.com/MAL-2025-153612/): Malicious code in azhar-poke17 (npm) (malicious package) - [MAL-2025-153611](https://insights.sbomify.com/MAL-2025-153611/): Malicious code in azhar-poke16 (npm) (malicious package) - [MAL-2025-153610](https://insights.sbomify.com/MAL-2025-153610/): Malicious code in azhar-poke15 (npm) (malicious package) - [MAL-2025-15361](https://insights.sbomify.com/MAL-2025-15361/): Malicious code in bamboo-hedgehog-jsu876-project (npm) (malicious package) - [MAL-2025-153609](https://insights.sbomify.com/MAL-2025-153609/): Malicious code in azhar-poke14 (npm) (malicious package) - [MAL-2025-153608](https://insights.sbomify.com/MAL-2025-153608/): Malicious code in azhar-poke13 (npm) (malicious package) - [MAL-2025-153607](https://insights.sbomify.com/MAL-2025-153607/): Malicious code in azhar-poke12 (npm) (malicious package) - [MAL-2025-153606](https://insights.sbomify.com/MAL-2025-153606/): Malicious code in azhar-poke11 (npm) (malicious package) - [MAL-2025-153605](https://insights.sbomify.com/MAL-2025-153605/): Malicious code in azhar-poke10 (npm) (malicious package) - [MAL-2025-153604](https://insights.sbomify.com/MAL-2025-153604/): Malicious code in azhar-poke1 (npm) (malicious package) - [MAL-2025-153603](https://insights.sbomify.com/MAL-2025-153603/): Malicious code in ayuyia-iaydut-daina (npm) (malicious package) - [MAL-2025-153602](https://insights.sbomify.com/MAL-2025-153602/): Malicious code in avoy-fridaatqft-fafugofada (npm) (malicious package) - [MAL-2025-153601](https://insights.sbomify.com/MAL-2025-153601/): Malicious code in avomanah-fridaatqft-fafugofada (npm) (malicious package) - [MAL-2025-153600](https://insights.sbomify.com/MAL-2025-153600/): Malicious code in avomainah-fruh-fada (npm) (malicious package) - [MAL-2025-15360](https://insights.sbomify.com/MAL-2025-15360/): Malicious code in bamboo-gorge-axr108-project (npm) (malicious package) - [MAL-2025-1536](https://insights.sbomify.com/MAL-2025-1536/): Malicious code in archon4 (npm) (malicious package) - [MAL-2025-153599](https://insights.sbomify.com/MAL-2025-153599/): Malicious code in avomainah-fru-fada (npm) (malicious package) - [MAL-2025-153598](https://insights.sbomify.com/MAL-2025-153598/): Malicious code in avomainah-fridatt-fafuada (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1336/