# Vulnerabilities published in 2025 - [MAL-2025-152787](https://insights.sbomify.com/MAL-2025-152787/): Malicious code in arif-poke75 (npm) (malicious package) - [MAL-2025-152786](https://insights.sbomify.com/MAL-2025-152786/): Malicious code in arif-poke74 (npm) (malicious package) - [MAL-2025-152785](https://insights.sbomify.com/MAL-2025-152785/): Malicious code in arif-poke73 (npm) (malicious package) - [MAL-2025-152784](https://insights.sbomify.com/MAL-2025-152784/): Malicious code in arif-poke72 (npm) (malicious package) - [MAL-2025-152783](https://insights.sbomify.com/MAL-2025-152783/): Malicious code in arif-poke71 (npm) (malicious package) - [MAL-2025-152782](https://insights.sbomify.com/MAL-2025-152782/): Malicious code in arif-poke70 (npm) (malicious package) - [MAL-2025-152781](https://insights.sbomify.com/MAL-2025-152781/): Malicious code in arif-poke7 (npm) (malicious package) - [MAL-2025-152780](https://insights.sbomify.com/MAL-2025-152780/): Malicious code in arif-poke69 (npm) (malicious package) - [MAL-2025-15278](https://insights.sbomify.com/MAL-2025-15278/): Malicious code in ba-test (npm) (malicious package) - [MAL-2025-152779](https://insights.sbomify.com/MAL-2025-152779/): Malicious code in arif-poke68 (npm) (malicious package) - [MAL-2025-152778](https://insights.sbomify.com/MAL-2025-152778/): Malicious code in arif-poke67 (npm) (malicious package) - [MAL-2025-152777](https://insights.sbomify.com/MAL-2025-152777/): Malicious code in arif-poke66 (npm) (malicious package) - [MAL-2025-152776](https://insights.sbomify.com/MAL-2025-152776/): Malicious code in arif-poke65 (npm) (malicious package) - [MAL-2025-152775](https://insights.sbomify.com/MAL-2025-152775/): Malicious code in arif-poke64 (npm) (malicious package) - [MAL-2025-152774](https://insights.sbomify.com/MAL-2025-152774/): Malicious code in arif-poke63 (npm) (malicious package) - [MAL-2025-152773](https://insights.sbomify.com/MAL-2025-152773/): Malicious code in arif-poke62 (npm) (malicious package) - [MAL-2025-152772](https://insights.sbomify.com/MAL-2025-152772/): Malicious code in arif-poke61 (npm) (malicious package) - [MAL-2025-152771](https://insights.sbomify.com/MAL-2025-152771/): Malicious code in arif-poke60 (npm) (malicious package) - [MAL-2025-152770](https://insights.sbomify.com/MAL-2025-152770/): Malicious code in arif-poke6 (npm) (malicious package) - [MAL-2025-15277](https://insights.sbomify.com/MAL-2025-15277/): Malicious code in b5ffer-xor (npm) (malicious package) - [MAL-2025-152769](https://insights.sbomify.com/MAL-2025-152769/): Malicious code in arif-poke59 (npm) (malicious package) - [MAL-2025-152768](https://insights.sbomify.com/MAL-2025-152768/): Malicious code in arif-poke58 (npm) (malicious package) - [MAL-2025-152767](https://insights.sbomify.com/MAL-2025-152767/): Malicious code in arif-poke57 (npm) (malicious package) - [MAL-2025-152766](https://insights.sbomify.com/MAL-2025-152766/): Malicious code in arif-poke56 (npm) (malicious package) - [MAL-2025-152765](https://insights.sbomify.com/MAL-2025-152765/): Malicious code in arif-poke55 (npm) (malicious package) - [MAL-2025-152764](https://insights.sbomify.com/MAL-2025-152764/): Malicious code in arif-poke54 (npm) (malicious package) - [MAL-2025-152763](https://insights.sbomify.com/MAL-2025-152763/): Malicious code in arif-poke53 (npm) (malicious package) - [MAL-2025-152762](https://insights.sbomify.com/MAL-2025-152762/): Malicious code in arif-poke52 (npm) (malicious package) - [MAL-2025-152761](https://insights.sbomify.com/MAL-2025-152761/): Malicious code in arif-poke51 (npm) (malicious package) - [MAL-2025-152760](https://insights.sbomify.com/MAL-2025-152760/): Malicious code in arif-poke50 (npm) (malicious package) - [MAL-2025-15276](https://insights.sbomify.com/MAL-2025-15276/): Malicious code in b2w-log (npm) (malicious package) - [MAL-2025-152759](https://insights.sbomify.com/MAL-2025-152759/): Malicious code in arif-poke5 (npm) (malicious package) - [MAL-2025-152758](https://insights.sbomify.com/MAL-2025-152758/): Malicious code in arif-poke49 (npm) (malicious package) - [MAL-2025-152757](https://insights.sbomify.com/MAL-2025-152757/): Malicious code in arif-poke48 (npm) (malicious package) - [MAL-2025-152756](https://insights.sbomify.com/MAL-2025-152756/): Malicious code in arif-poke47 (npm) (malicious package) - [MAL-2025-152755](https://insights.sbomify.com/MAL-2025-152755/): Malicious code in arif-poke46 (npm) (malicious package) - [MAL-2025-152754](https://insights.sbomify.com/MAL-2025-152754/): Malicious code in arif-poke45 (npm) (malicious package) - [MAL-2025-152753](https://insights.sbomify.com/MAL-2025-152753/): Malicious code in arif-poke44 (npm) (malicious package) - [MAL-2025-152752](https://insights.sbomify.com/MAL-2025-152752/): Malicious code in arif-poke43 (npm) (malicious package) - [MAL-2025-152751](https://insights.sbomify.com/MAL-2025-152751/): Malicious code in arif-poke42 (npm) (malicious package) - [MAL-2025-152750](https://insights.sbomify.com/MAL-2025-152750/): Malicious code in arif-poke41 (npm) (malicious package) - [MAL-2025-15275](https://insights.sbomify.com/MAL-2025-15275/): Malicious code in b04y1b (npm) (malicious package) - [MAL-2025-152749](https://insights.sbomify.com/MAL-2025-152749/): Malicious code in arif-poke40 (npm) (malicious package) - [MAL-2025-152748](https://insights.sbomify.com/MAL-2025-152748/): Malicious code in arif-poke4 (npm) (malicious package) - [MAL-2025-152747](https://insights.sbomify.com/MAL-2025-152747/): Malicious code in arif-poke39 (npm) (malicious package) - [MAL-2025-152746](https://insights.sbomify.com/MAL-2025-152746/): Malicious code in arif-poke38 (npm) (malicious package) - [MAL-2025-152745](https://insights.sbomify.com/MAL-2025-152745/): Malicious code in arif-poke37 (npm) (malicious package) - [MAL-2025-152744](https://insights.sbomify.com/MAL-2025-152744/): Malicious code in arif-poke36 (npm) (malicious package) - [MAL-2025-152743](https://insights.sbomify.com/MAL-2025-152743/): Malicious code in arif-poke35 (npm) (malicious package) - [MAL-2025-152742](https://insights.sbomify.com/MAL-2025-152742/): Malicious code in arif-poke34 (npm) (malicious package) - [MAL-2025-152741](https://insights.sbomify.com/MAL-2025-152741/): Malicious code in arif-poke33 (npm) (malicious package) - [MAL-2025-152740](https://insights.sbomify.com/MAL-2025-152740/): Malicious code in arif-poke32 (npm) (malicious package) - [MAL-2025-15274](https://insights.sbomify.com/MAL-2025-15274/): Malicious code in azurewebserverlogstosql (npm) (malicious package) - [MAL-2025-152739](https://insights.sbomify.com/MAL-2025-152739/): Malicious code in arif-poke31 (npm) (malicious package) - [MAL-2025-152738](https://insights.sbomify.com/MAL-2025-152738/): Malicious code in arif-poke30 (npm) (malicious package) - [MAL-2025-152737](https://insights.sbomify.com/MAL-2025-152737/): Malicious code in arif-poke3 (npm) (malicious package) - [MAL-2025-152736](https://insights.sbomify.com/MAL-2025-152736/): Malicious code in arif-poke29 (npm) (malicious package) - [MAL-2025-152735](https://insights.sbomify.com/MAL-2025-152735/): Malicious code in arif-poke28 (npm) (malicious package) - [MAL-2025-152734](https://insights.sbomify.com/MAL-2025-152734/): Malicious code in arif-poke27 (npm) (malicious package) - [MAL-2025-152733](https://insights.sbomify.com/MAL-2025-152733/): Malicious code in arif-poke26 (npm) (malicious package) - [MAL-2025-152732](https://insights.sbomify.com/MAL-2025-152732/): Malicious code in arif-poke25 (npm) (malicious package) - [MAL-2025-152731](https://insights.sbomify.com/MAL-2025-152731/): Malicious code in arif-poke24 (npm) (malicious package) - [MAL-2025-152730](https://insights.sbomify.com/MAL-2025-152730/): Malicious code in arif-poke23 (npm) (malicious package) - [MAL-2025-15273](https://insights.sbomify.com/MAL-2025-15273/): Malicious code in azuremono (npm) (malicious package) - [MAL-2025-152729](https://insights.sbomify.com/MAL-2025-152729/): Malicious code in arif-poke22 (npm) (malicious package) - [MAL-2025-152728](https://insights.sbomify.com/MAL-2025-152728/): Malicious code in arif-poke21 (npm) (malicious package) - [MAL-2025-152727](https://insights.sbomify.com/MAL-2025-152727/): Malicious code in arif-poke20 (npm) (malicious package) - [MAL-2025-152726](https://insights.sbomify.com/MAL-2025-152726/): Malicious code in arif-poke2 (npm) (malicious package) - [MAL-2025-152725](https://insights.sbomify.com/MAL-2025-152725/): Malicious code in arif-poke19 (npm) (malicious package) - [MAL-2025-152724](https://insights.sbomify.com/MAL-2025-152724/): Malicious code in arif-poke18 (npm) (malicious package) - [MAL-2025-152723](https://insights.sbomify.com/MAL-2025-152723/): Malicious code in arif-poke17 (npm) (malicious package) - [MAL-2025-152722](https://insights.sbomify.com/MAL-2025-152722/): Malicious code in arif-poke16 (npm) (malicious package) - [MAL-2025-152721](https://insights.sbomify.com/MAL-2025-152721/): Malicious code in arif-poke15 (npm) (malicious package) - [MAL-2025-152720](https://insights.sbomify.com/MAL-2025-152720/): Malicious code in arif-poke14 (npm) (malicious package) - [MAL-2025-15272](https://insights.sbomify.com/MAL-2025-15272/): Malicious code in azurefilter (npm) (malicious package) - [MAL-2025-152719](https://insights.sbomify.com/MAL-2025-152719/): Malicious code in arif-poke13 (npm) (malicious package) - [MAL-2025-152718](https://insights.sbomify.com/MAL-2025-152718/): Malicious code in arif-poke12 (npm) (malicious package) - [MAL-2025-152717](https://insights.sbomify.com/MAL-2025-152717/): Malicious code in arif-poke11 (npm) (malicious package) - [MAL-2025-152716](https://insights.sbomify.com/MAL-2025-152716/): Malicious code in arif-poke10 (npm) (malicious package) - [MAL-2025-152715](https://insights.sbomify.com/MAL-2025-152715/): Malicious code in arif-poke1 (npm) (malicious package) - [MAL-2025-152714](https://insights.sbomify.com/MAL-2025-152714/): Malicious code in anjing123 (npm) (malicious package) - [MAL-2025-152713](https://insights.sbomify.com/MAL-2025-152713/): Malicious code in angin-poke9 (npm) (malicious package) - [MAL-2025-152712](https://insights.sbomify.com/MAL-2025-152712/): Malicious code in angin-poke8 (npm) (malicious package) - [MAL-2025-152711](https://insights.sbomify.com/MAL-2025-152711/): Malicious code in angin-poke7 (npm) (malicious package) - [MAL-2025-152710](https://insights.sbomify.com/MAL-2025-152710/): Malicious code in angin-poke6 (npm) (malicious package) - [MAL-2025-15271](https://insights.sbomify.com/MAL-2025-15271/): Malicious code in azurea (npm) (malicious package) - [MAL-2025-152709](https://insights.sbomify.com/MAL-2025-152709/): Malicious code in angin-poke50 (npm) (malicious package) - [MAL-2025-152708](https://insights.sbomify.com/MAL-2025-152708/): Malicious code in angin-poke5 (npm) (malicious package) - [MAL-2025-152707](https://insights.sbomify.com/MAL-2025-152707/): Malicious code in angin-poke49 (npm) (malicious package) - [MAL-2025-152706](https://insights.sbomify.com/MAL-2025-152706/): Malicious code in angin-poke48 (npm) (malicious package) - [MAL-2025-152705](https://insights.sbomify.com/MAL-2025-152705/): Malicious code in angin-poke47 (npm) (malicious package) - [MAL-2025-152704](https://insights.sbomify.com/MAL-2025-152704/): Malicious code in angin-poke46 (npm) (malicious package) - [MAL-2025-152703](https://insights.sbomify.com/MAL-2025-152703/): Malicious code in angin-poke45 (npm) (malicious package) - [MAL-2025-152702](https://insights.sbomify.com/MAL-2025-152702/): Malicious code in angin-poke44 (npm) (malicious package) - [MAL-2025-152701](https://insights.sbomify.com/MAL-2025-152701/): Malicious code in angin-poke43 (npm) (malicious package) - [MAL-2025-152700](https://insights.sbomify.com/MAL-2025-152700/): Malicious code in angin-poke42 (npm) (malicious package) - [MAL-2025-15270](https://insights.sbomify.com/MAL-2025-15270/): Malicious code in azure-zmzzw-wtq35-crystal-project (npm) (malicious package) - [MAL-2025-1527](https://insights.sbomify.com/MAL-2025-1527/): Malicious code in wdpr-ra-node-mpropz (npm) (malicious package) - [MAL-2025-152699](https://insights.sbomify.com/MAL-2025-152699/): Malicious code in angin-poke41 (npm) (malicious package) - [MAL-2025-152698](https://insights.sbomify.com/MAL-2025-152698/): Malicious code in angin-poke40 (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1346/