# Vulnerabilities published in 2025 - [MAL-2025-152336](https://insights.sbomify.com/MAL-2025-152336/): Malicious code in alita-poke28 (npm) (malicious package) - [MAL-2025-152335](https://insights.sbomify.com/MAL-2025-152335/): Malicious code in alita-poke27 (npm) (malicious package) - [MAL-2025-152334](https://insights.sbomify.com/MAL-2025-152334/): Malicious code in alita-poke26 (npm) (malicious package) - [MAL-2025-152333](https://insights.sbomify.com/MAL-2025-152333/): Malicious code in alita-poke25 (npm) (malicious package) - [MAL-2025-152332](https://insights.sbomify.com/MAL-2025-152332/): Malicious code in alita-poke24 (npm) (malicious package) - [MAL-2025-152331](https://insights.sbomify.com/MAL-2025-152331/): Malicious code in alita-poke23 (npm) (malicious package) - [MAL-2025-152330](https://insights.sbomify.com/MAL-2025-152330/): Malicious code in alita-poke22 (npm) (malicious package) - [MAL-2025-15233](https://insights.sbomify.com/MAL-2025-15233/): Malicious code in awsomer (npm) (malicious package) - [MAL-2025-152329](https://insights.sbomify.com/MAL-2025-152329/): Malicious code in alita-poke21 (npm) (malicious package) - [MAL-2025-152328](https://insights.sbomify.com/MAL-2025-152328/): Malicious code in alita-poke20 (npm) (malicious package) - [MAL-2025-152327](https://insights.sbomify.com/MAL-2025-152327/): Malicious code in alita-poke2 (npm) (malicious package) - [MAL-2025-152326](https://insights.sbomify.com/MAL-2025-152326/): Malicious code in alita-poke19 (npm) (malicious package) - [MAL-2025-152325](https://insights.sbomify.com/MAL-2025-152325/): Malicious code in alita-poke18 (npm) (malicious package) - [MAL-2025-152324](https://insights.sbomify.com/MAL-2025-152324/): Malicious code in alita-poke17 (npm) (malicious package) - [MAL-2025-152323](https://insights.sbomify.com/MAL-2025-152323/): Malicious code in alita-poke16 (npm) (malicious package) - [MAL-2025-152322](https://insights.sbomify.com/MAL-2025-152322/): Malicious code in alita-poke15 (npm) (malicious package) - [MAL-2025-152321](https://insights.sbomify.com/MAL-2025-152321/): Malicious code in alita-poke14 (npm) (malicious package) - [MAL-2025-152320](https://insights.sbomify.com/MAL-2025-152320/): Malicious code in alita-poke13 (npm) (malicious package) - [MAL-2025-15232](https://insights.sbomify.com/MAL-2025-15232/): Malicious code in aws-xray-sdk-node (npm) (malicious package) - [MAL-2025-152319](https://insights.sbomify.com/MAL-2025-152319/): Malicious code in alita-poke12 (npm) (malicious package) - [MAL-2025-152318](https://insights.sbomify.com/MAL-2025-152318/): Malicious code in alita-poke11 (npm) (malicious package) - [MAL-2025-152317](https://insights.sbomify.com/MAL-2025-152317/): Malicious code in alita-poke100 (npm) (malicious package) - [MAL-2025-152316](https://insights.sbomify.com/MAL-2025-152316/): Malicious code in alita-poke10 (npm) (malicious package) - [MAL-2025-152315](https://insights.sbomify.com/MAL-2025-152315/): Malicious code in alita-poke1 (npm) (malicious package) - [MAL-2025-152314](https://insights.sbomify.com/MAL-2025-152314/): Malicious code in alfiansyah-poke99 (npm) (malicious package) - [MAL-2025-152313](https://insights.sbomify.com/MAL-2025-152313/): Malicious code in alfiansyah-poke98 (npm) (malicious package) - [MAL-2025-152312](https://insights.sbomify.com/MAL-2025-152312/): Malicious code in alfiansyah-poke97 (npm) (malicious package) - [MAL-2025-152311](https://insights.sbomify.com/MAL-2025-152311/): Malicious code in alfiansyah-poke96 (npm) (malicious package) - [MAL-2025-152310](https://insights.sbomify.com/MAL-2025-152310/): Malicious code in alfiansyah-poke95 (npm) (malicious package) - [MAL-2025-15231](https://insights.sbomify.com/MAL-2025-15231/): Malicious code in aws-ui-runtime (npm) (malicious package) - [MAL-2025-152309](https://insights.sbomify.com/MAL-2025-152309/): Malicious code in alfiansyah-poke94 (npm) (malicious package) - [MAL-2025-152308](https://insights.sbomify.com/MAL-2025-152308/): Malicious code in alfiansyah-poke93 (npm) (malicious package) - [MAL-2025-152307](https://insights.sbomify.com/MAL-2025-152307/): Malicious code in alfiansyah-poke92 (npm) (malicious package) - [MAL-2025-152306](https://insights.sbomify.com/MAL-2025-152306/): Malicious code in alfiansyah-poke91 (npm) (malicious package) - [MAL-2025-152305](https://insights.sbomify.com/MAL-2025-152305/): Malicious code in alfiansyah-poke90 (npm) (malicious package) - [MAL-2025-152304](https://insights.sbomify.com/MAL-2025-152304/): Malicious code in alfiansyah-poke9 (npm) (malicious package) - [MAL-2025-152303](https://insights.sbomify.com/MAL-2025-152303/): Malicious code in alfiansyah-poke89 (npm) (malicious package) - [MAL-2025-152302](https://insights.sbomify.com/MAL-2025-152302/): Malicious code in alfiansyah-poke88 (npm) (malicious package) - [MAL-2025-152301](https://insights.sbomify.com/MAL-2025-152301/): Malicious code in alfiansyah-poke87 (npm) (malicious package) - [MAL-2025-152300](https://insights.sbomify.com/MAL-2025-152300/): Malicious code in alfiansyah-poke86 (npm) (malicious package) - [MAL-2025-15230](https://insights.sbomify.com/MAL-2025-15230/): Malicious code in aws-toolkit-cloud9 (npm) (malicious package) - [MAL-2025-1523](https://insights.sbomify.com/MAL-2025-1523/): Malicious code in clubhouse-to-linear-exporter (npm) (malicious package) - [MAL-2025-152299](https://insights.sbomify.com/MAL-2025-152299/): Malicious code in alfiansyah-poke85 (npm) (malicious package) - [MAL-2025-152298](https://insights.sbomify.com/MAL-2025-152298/): Malicious code in alfiansyah-poke84 (npm) (malicious package) - [MAL-2025-152297](https://insights.sbomify.com/MAL-2025-152297/): Malicious code in alfiansyah-poke83 (npm) (malicious package) - [MAL-2025-152296](https://insights.sbomify.com/MAL-2025-152296/): Malicious code in alfiansyah-poke82 (npm) (malicious package) - [MAL-2025-152295](https://insights.sbomify.com/MAL-2025-152295/): Malicious code in alfiansyah-poke81 (npm) (malicious package) - [MAL-2025-152294](https://insights.sbomify.com/MAL-2025-152294/): Malicious code in alfiansyah-poke80 (npm) (malicious package) - [MAL-2025-152293](https://insights.sbomify.com/MAL-2025-152293/): Malicious code in alfiansyah-poke8 (npm) (malicious package) - [MAL-2025-152292](https://insights.sbomify.com/MAL-2025-152292/): Malicious code in alfiansyah-poke79 (npm) (malicious package) - [MAL-2025-152291](https://insights.sbomify.com/MAL-2025-152291/): Malicious code in alfiansyah-poke78 (npm) (malicious package) - [MAL-2025-152290](https://insights.sbomify.com/MAL-2025-152290/): Malicious code in alfiansyah-poke77 (npm) (malicious package) - [MAL-2025-15229](https://insights.sbomify.com/MAL-2025-15229/): Malicious code in aws-secure-zipper (npm) (malicious package) - [MAL-2025-152289](https://insights.sbomify.com/MAL-2025-152289/): Malicious code in alfiansyah-poke76 (npm) (malicious package) - [MAL-2025-152288](https://insights.sbomify.com/MAL-2025-152288/): Malicious code in alfiansyah-poke75 (npm) (malicious package) - [MAL-2025-152287](https://insights.sbomify.com/MAL-2025-152287/): Malicious code in alfiansyah-poke74 (npm) (malicious package) - [MAL-2025-152286](https://insights.sbomify.com/MAL-2025-152286/): Malicious code in alfiansyah-poke73 (npm) (malicious package) - [MAL-2025-152285](https://insights.sbomify.com/MAL-2025-152285/): Malicious code in alfiansyah-poke72 (npm) (malicious package) - [MAL-2025-152284](https://insights.sbomify.com/MAL-2025-152284/): Malicious code in alfiansyah-poke71 (npm) (malicious package) - [MAL-2025-152283](https://insights.sbomify.com/MAL-2025-152283/): Malicious code in alfiansyah-poke70 (npm) (malicious package) - [MAL-2025-152282](https://insights.sbomify.com/MAL-2025-152282/): Malicious code in alfiansyah-poke7 (npm) (malicious package) - [MAL-2025-152281](https://insights.sbomify.com/MAL-2025-152281/): Malicious code in alfiansyah-poke69 (npm) (malicious package) - [MAL-2025-152280](https://insights.sbomify.com/MAL-2025-152280/): Malicious code in alfiansyah-poke68 (npm) (malicious package) - [MAL-2025-15228](https://insights.sbomify.com/MAL-2025-15228/): Malicious code in aws-pdk (npm) (malicious package) - [MAL-2025-152279](https://insights.sbomify.com/MAL-2025-152279/): Malicious code in alfiansyah-poke67 (npm) (malicious package) - [MAL-2025-152278](https://insights.sbomify.com/MAL-2025-152278/): Malicious code in alfiansyah-poke66 (npm) (malicious package) - [MAL-2025-152277](https://insights.sbomify.com/MAL-2025-152277/): Malicious code in alfiansyah-poke65 (npm) (malicious package) - [MAL-2025-152276](https://insights.sbomify.com/MAL-2025-152276/): Malicious code in alfiansyah-poke64 (npm) (malicious package) - [MAL-2025-152275](https://insights.sbomify.com/MAL-2025-152275/): Malicious code in alfiansyah-poke63 (npm) (malicious package) - [MAL-2025-152274](https://insights.sbomify.com/MAL-2025-152274/): Malicious code in alfiansyah-poke62 (npm) (malicious package) - [MAL-2025-152273](https://insights.sbomify.com/MAL-2025-152273/): Malicious code in alfiansyah-poke61 (npm) (malicious package) - [MAL-2025-152272](https://insights.sbomify.com/MAL-2025-152272/): Malicious code in alfiansyah-poke60 (npm) (malicious package) - [MAL-2025-152271](https://insights.sbomify.com/MAL-2025-152271/): Malicious code in alfiansyah-poke6 (npm) (malicious package) - [MAL-2025-152270](https://insights.sbomify.com/MAL-2025-152270/): Malicious code in alfiansyah-poke59 (npm) (malicious package) - [MAL-2025-15227](https://insights.sbomify.com/MAL-2025-15227/): Malicious code in aws-lambda-authenticator (npm) (malicious package) - [MAL-2025-152269](https://insights.sbomify.com/MAL-2025-152269/): Malicious code in alfiansyah-poke58 (npm) (malicious package) - [MAL-2025-152268](https://insights.sbomify.com/MAL-2025-152268/): Malicious code in alfiansyah-poke57 (npm) (malicious package) - [MAL-2025-152267](https://insights.sbomify.com/MAL-2025-152267/): Malicious code in alfiansyah-poke56 (npm) (malicious package) - [MAL-2025-152266](https://insights.sbomify.com/MAL-2025-152266/): Malicious code in alfiansyah-poke55 (npm) (malicious package) - [MAL-2025-152265](https://insights.sbomify.com/MAL-2025-152265/): Malicious code in alfiansyah-poke54 (npm) (malicious package) - [MAL-2025-152264](https://insights.sbomify.com/MAL-2025-152264/): Malicious code in alfiansyah-poke53 (npm) (malicious package) - [MAL-2025-152263](https://insights.sbomify.com/MAL-2025-152263/): Malicious code in alfiansyah-poke52 (npm) (malicious package) - [MAL-2025-152262](https://insights.sbomify.com/MAL-2025-152262/): Malicious code in alfiansyah-poke51 (npm) (malicious package) - [MAL-2025-152261](https://insights.sbomify.com/MAL-2025-152261/): Malicious code in alfiansyah-poke50 (npm) (malicious package) - [MAL-2025-152260](https://insights.sbomify.com/MAL-2025-152260/): Malicious code in alfiansyah-poke5 (npm) (malicious package) - [MAL-2025-15226](https://insights.sbomify.com/MAL-2025-15226/): Malicious code in aws-gulp-tasks (npm) (malicious package) - [MAL-2025-152259](https://insights.sbomify.com/MAL-2025-152259/): Malicious code in alfiansyah-poke49 (npm) (malicious package) - [MAL-2025-152258](https://insights.sbomify.com/MAL-2025-152258/): Malicious code in alfiansyah-poke48 (npm) (malicious package) - [MAL-2025-152257](https://insights.sbomify.com/MAL-2025-152257/): Malicious code in alfiansyah-poke47 (npm) (malicious package) - [MAL-2025-152256](https://insights.sbomify.com/MAL-2025-152256/): Malicious code in alfiansyah-poke46 (npm) (malicious package) - [MAL-2025-152255](https://insights.sbomify.com/MAL-2025-152255/): Malicious code in alfiansyah-poke45 (npm) (malicious package) - [MAL-2025-152254](https://insights.sbomify.com/MAL-2025-152254/): Malicious code in alfiansyah-poke44 (npm) (malicious package) - [MAL-2025-152253](https://insights.sbomify.com/MAL-2025-152253/): Malicious code in alfiansyah-poke43 (npm) (malicious package) - [MAL-2025-152252](https://insights.sbomify.com/MAL-2025-152252/): Malicious code in alfiansyah-poke42 (npm) (malicious package) - [MAL-2025-152251](https://insights.sbomify.com/MAL-2025-152251/): Malicious code in alfiansyah-poke41 (npm) (malicious package) - [MAL-2025-152250](https://insights.sbomify.com/MAL-2025-152250/): Malicious code in alfiansyah-poke40 (npm) (malicious package) - [MAL-2025-15225](https://insights.sbomify.com/MAL-2025-15225/): Malicious code in aws-core-vscode (npm) (malicious package) - [MAL-2025-152249](https://insights.sbomify.com/MAL-2025-152249/): Malicious code in alfiansyah-poke4 (npm) (malicious package) - [MAL-2025-152248](https://insights.sbomify.com/MAL-2025-152248/): Malicious code in alfiansyah-poke39 (npm) (malicious package) - [MAL-2025-152247](https://insights.sbomify.com/MAL-2025-152247/): Malicious code in alfiansyah-poke38 (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1351/