# Vulnerabilities published in 2025


- [MAL-2025-87065](https://insights.sbomify.com/MAL-2025-87065/): Malicious code in joko-kentang83-riris (npm) (malicious package)
- [MAL-2025-87064](https://insights.sbomify.com/MAL-2025-87064/): Malicious code in joko-kentang46-miaww (npm) (malicious package)
- [MAL-2025-87063](https://insights.sbomify.com/MAL-2025-87063/): Malicious code in joko-kemplang69-sluey (npm) (malicious package)
- [MAL-2025-87062](https://insights.sbomify.com/MAL-2025-87062/): Malicious code in joko-kembang90-miaww (npm) (malicious package)
- [MAL-2025-87061](https://insights.sbomify.com/MAL-2025-87061/): Malicious code in joko-kacang87-riris (npm) (malicious package)
- [MAL-2025-87060](https://insights.sbomify.com/MAL-2025-87060/): Malicious code in joko-jengkol80-miaww (npm) (malicious package)
- [MAL-2025-8706](https://insights.sbomify.com/MAL-2025-8706/): Malicious code in @malware-test-hault-fasts-upled-pandy/test-mlw3-hault-fasts-upled-pandy (npm) (malicious package)
- [MAL-2025-87059](https://insights.sbomify.com/MAL-2025-87059/): Malicious code in joko-jengkol56-riris (npm) (malicious package)
- [MAL-2025-87058](https://insights.sbomify.com/MAL-2025-87058/): Malicious code in joko-gulai61-miaww (npm) (malicious package)
- [MAL-2025-87057](https://insights.sbomify.com/MAL-2025-87057/): Malicious code in joko-gudeg89-riris (npm) (malicious package)
- [MAL-2025-87056](https://insights.sbomify.com/MAL-2025-87056/): Malicious code in joko-gudeg66-riris (npm) (malicious package)
- [MAL-2025-87055](https://insights.sbomify.com/MAL-2025-87055/): Malicious code in joko-gorengan61-miaww (npm) (malicious package)
- [MAL-2025-87054](https://insights.sbomify.com/MAL-2025-87054/): Malicious code in joko-getuk76-wekto (npm) (malicious package)
- [MAL-2025-87053](https://insights.sbomify.com/MAL-2025-87053/): Malicious code in joko-getuk15-riris (npm) (malicious package)
- [MAL-2025-87052](https://insights.sbomify.com/MAL-2025-87052/): Malicious code in joko-getas19-miaww (npm) (malicious package)
- [MAL-2025-87051](https://insights.sbomify.com/MAL-2025-87051/): Malicious code in joko-getas17-miaww (npm) (malicious package)
- [MAL-2025-87050](https://insights.sbomify.com/MAL-2025-87050/): Malicious code in joko-gepuk29-riris (npm) (malicious package)
- [MAL-2025-8705](https://insights.sbomify.com/MAL-2025-8705/): Malicious code in @malware-test-haste-sauna-dribs-crays/test-mlw3-haste-sauna-dribs-crays (npm) (malicious package)
- [MAL-2025-87049](https://insights.sbomify.com/MAL-2025-87049/): Malicious code in joko-gembus65-apidev (npm) (malicious package)
- [MAL-2025-87048](https://insights.sbomify.com/MAL-2025-87048/): Malicious code in joko-gaplek75-riris (npm) (malicious package)
- [MAL-2025-87047](https://insights.sbomify.com/MAL-2025-87047/): Malicious code in joko-gandul43-riris (npm) (malicious package)
- [MAL-2025-87046](https://insights.sbomify.com/MAL-2025-87046/): Malicious code in joko-gandul11-miaww (npm) (malicious package)
- [MAL-2025-87045](https://insights.sbomify.com/MAL-2025-87045/): Malicious code in joko-esdoger48-riris (npm) (malicious package)
- [MAL-2025-87044](https://insights.sbomify.com/MAL-2025-87044/): Malicious code in joko-enting52-miaww (npm) (malicious package)
- [MAL-2025-87043](https://insights.sbomify.com/MAL-2025-87043/): Malicious code in joko-enting35-riris (npm) (malicious package)
- [MAL-2025-87042](https://insights.sbomify.com/MAL-2025-87042/): Malicious code in joko-empal12-miaww (npm) (malicious package)
- [MAL-2025-87041](https://insights.sbomify.com/MAL-2025-87041/): Malicious code in joko-dradag78-riris (npm) (malicious package)
- [MAL-2025-87040](https://insights.sbomify.com/MAL-2025-87040/): Malicious code in joko-donat48-riris (npm) (malicious package)
- [MAL-2025-8704](https://insights.sbomify.com/MAL-2025-8704/): Malicious code in @malware-test-hards-sixer-haars-unfed/test-mlw3-hards-sixer-haars-unfed (npm) (malicious package)
- [MAL-2025-87039](https://insights.sbomify.com/MAL-2025-87039/): Malicious code in joko-bubursumsum26-riris (npm) (malicious package)
- [MAL-2025-87038](https://insights.sbomify.com/MAL-2025-87038/): Malicious code in joko-bubur71-riris (npm) (malicious package)
- [MAL-2025-87037](https://insights.sbomify.com/MAL-2025-87037/): Malicious code in joko-brengkes98-apidev (npm) (malicious package)
- [MAL-2025-87036](https://insights.sbomify.com/MAL-2025-87036/): Malicious code in joko-bakwan85-riris (npm) (malicious package)
- [MAL-2025-87035](https://insights.sbomify.com/MAL-2025-87035/): Malicious code in joko-bakwan59-riris (npm) (malicious package)
- [MAL-2025-87034](https://insights.sbomify.com/MAL-2025-87034/): Malicious code in joko-bakwan34-riris (npm) (malicious package)
- [MAL-2025-87033](https://insights.sbomify.com/MAL-2025-87033/): Malicious code in joko-bakwan24-riris (npm) (malicious package)
- [MAL-2025-87032](https://insights.sbomify.com/MAL-2025-87032/): Malicious code in joko-bakwan12-riris (npm) (malicious package)
- [MAL-2025-87031](https://insights.sbomify.com/MAL-2025-87031/): Malicious code in joko-bakso68-riris (npm) (malicious package)
- [MAL-2025-87030](https://insights.sbomify.com/MAL-2025-87030/): Malicious code in joko-bakso55-riris (npm) (malicious package)
- [MAL-2025-8703](https://insights.sbomify.com/MAL-2025-8703/): Malicious code in @malware-test-hands-dearn/test-mlw3-hands-dearn (npm) (malicious package)
- [MAL-2025-87029](https://insights.sbomify.com/MAL-2025-87029/): Malicious code in joko-asinan44-riris (npm) (malicious package)
- [MAL-2025-87028](https://insights.sbomify.com/MAL-2025-87028/): Malicious code in joko-asinan36-riris (npm) (malicious package)
- [MAL-2025-87027](https://insights.sbomify.com/MAL-2025-87027/): Malicious code in joko-asinan36-miaww (npm) (malicious package)
- [MAL-2025-87026](https://insights.sbomify.com/MAL-2025-87026/): Malicious code in joint_crab_z3n (npm) (malicious package)
- [MAL-2025-87025](https://insights.sbomify.com/MAL-2025-87025/): Malicious code in jittery_haddock_z3n (npm) (malicious package)
- [MAL-2025-87024](https://insights.sbomify.com/MAL-2025-87024/): Malicious code in jittery_grouse_z3n (npm) (malicious package)
- [MAL-2025-87023](https://insights.sbomify.com/MAL-2025-87023/): Malicious code in jealous_mollusk_z3n (npm) (malicious package)
- [MAL-2025-87022](https://insights.sbomify.com/MAL-2025-87022/): Malicious code in jaja-wajit56-kyuki (npm) (malicious package)
- [MAL-2025-87021](https://insights.sbomify.com/MAL-2025-87021/): Malicious code in jaja-tomat77-wekto (npm) (malicious package)
- [MAL-2025-87020](https://insights.sbomify.com/MAL-2025-87020/): Malicious code in jaja-tomat52-wekto (npm) (malicious package)
- [MAL-2025-8702](https://insights.sbomify.com/MAL-2025-8702/): Malicious code in @malware-test-hammy-coaly-kilns-coifs/test-mlw3-hammy-coaly-kilns-coifs (npm) (malicious package)
- [MAL-2025-87019](https://insights.sbomify.com/MAL-2025-87019/): Malicious code in jaja-tiwul61-riris (npm) (malicious package)
- [MAL-2025-87018](https://insights.sbomify.com/MAL-2025-87018/): Malicious code in jaja-telur44-miaww (npm) (malicious package)
- [MAL-2025-87017](https://insights.sbomify.com/MAL-2025-87017/): Malicious code in jaja-telur20-miaww (npm) (malicious package)
- [MAL-2025-87016](https://insights.sbomify.com/MAL-2025-87016/): Malicious code in jaja-tek99-miaww (npm) (malicious package)
- [MAL-2025-87015](https://insights.sbomify.com/MAL-2025-87015/): Malicious code in jaja-tek38-riris (npm) (malicious package)
- [MAL-2025-87014](https://insights.sbomify.com/MAL-2025-87014/): Malicious code in jaja-teh47-riris (npm) (malicious package)
- [MAL-2025-87013](https://insights.sbomify.com/MAL-2025-87013/): Malicious code in jaja-tahutek31-riris (npm) (malicious package)
- [MAL-2025-87012](https://insights.sbomify.com/MAL-2025-87012/): Malicious code in jaja-tahu91-miaww (npm) (malicious package)
- [MAL-2025-87011](https://insights.sbomify.com/MAL-2025-87011/): Malicious code in jaja-tahu25-miaww (npm) (malicious package)
- [MAL-2025-87010](https://insights.sbomify.com/MAL-2025-87010/): Malicious code in jaja-soto68-miaww (npm) (malicious package)
- [MAL-2025-8701](https://insights.sbomify.com/MAL-2025-8701/): Malicious code in @malware-test-hakas-vouch/test-mlw3-hakas-vouch (npm) (malicious package)
- [MAL-2025-87009](https://insights.sbomify.com/MAL-2025-87009/): Malicious code in jaja-soto41-riris (npm) (malicious package)
- [MAL-2025-87008](https://insights.sbomify.com/MAL-2025-87008/): Malicious code in jaja-serabi9-miaww (npm) (malicious package)
- [MAL-2025-87007](https://insights.sbomify.com/MAL-2025-87007/): Malicious code in jaja-serabi66-miaww (npm) (malicious package)
- [MAL-2025-87006](https://insights.sbomify.com/MAL-2025-87006/): Malicious code in jaja-serabi60-riris (npm) (malicious package)
- [MAL-2025-87005](https://insights.sbomify.com/MAL-2025-87005/): Malicious code in jaja-semur35-apidev (npm) (malicious package)
- [MAL-2025-87004](https://insights.sbomify.com/MAL-2025-87004/): Malicious code in jaja-sego88-miaww (npm) (malicious package)
- [MAL-2025-87003](https://insights.sbomify.com/MAL-2025-87003/): Malicious code in jaja-sego73-miaww (npm) (malicious package)
- [MAL-2025-87002](https://insights.sbomify.com/MAL-2025-87002/): Malicious code in jaja-sego35-miaww (npm) (malicious package)
- [MAL-2025-87001](https://insights.sbomify.com/MAL-2025-87001/): Malicious code in jaja-sambel13-miaww (npm) (malicious package)
- [MAL-2025-87000](https://insights.sbomify.com/MAL-2025-87000/): Malicious code in jaja-ronde46-riris (npm) (malicious package)
- [MAL-2025-8700](https://insights.sbomify.com/MAL-2025-8700/): Malicious code in @malware-test-haith-dunts-urger-emend/test-mlw3-haith-dunts-urger-emend (npm) (malicious package)
- [MAL-2025-870](https://insights.sbomify.com/MAL-2025-870/): Malicious code in stale-action (npm) (malicious package)
- [MAL-2025-87](https://insights.sbomify.com/MAL-2025-87/): Malicious code in example-app-next (npm) (malicious package)
- [MAL-2025-86999](https://insights.sbomify.com/MAL-2025-86999/): Malicious code in jaja-ronde39-miaww (npm) (malicious package)
- [MAL-2025-86998](https://insights.sbomify.com/MAL-2025-86998/): Malicious code in jaja-rangginang27-crottsekebon (npm) (malicious package)
- [MAL-2025-86997](https://insights.sbomify.com/MAL-2025-86997/): Malicious code in jaja-ragi35-riris (npm) (malicious package)
- [MAL-2025-86996](https://insights.sbomify.com/MAL-2025-86996/): Malicious code in jaja-otak-otak4-miaww (npm) (malicious package)
- [MAL-2025-86995](https://insights.sbomify.com/MAL-2025-86995/): Malicious code in jaja-otak-otak11-miaww (npm) (malicious package)
- [MAL-2025-86994](https://insights.sbomify.com/MAL-2025-86994/): Malicious code in jaja-ongol-ongol94-riris (npm) (malicious package)
- [MAL-2025-86993](https://insights.sbomify.com/MAL-2025-86993/): Malicious code in jaja-ongol-ongol65-miaww (npm) (malicious package)
- [MAL-2025-86992](https://insights.sbomify.com/MAL-2025-86992/): Malicious code in jaja-ongol-ongol24-apidev (npm) (malicious package)
- [MAL-2025-86991](https://insights.sbomify.com/MAL-2025-86991/): Malicious code in jaja-oncom40-riris (npm) (malicious package)
- [MAL-2025-86990](https://insights.sbomify.com/MAL-2025-86990/): Malicious code in jaja-oblok44-riris (npm) (malicious package)
- [MAL-2025-8699](https://insights.sbomify.com/MAL-2025-8699/): Malicious code in @malware-test-haars-gluon-pubic-plims/test-mlw3-haars-gluon-pubic-plims (npm) (malicious package)
- [MAL-2025-86989](https://insights.sbomify.com/MAL-2025-86989/): Malicious code in jaja-nasicampur12-kyuki (npm) (malicious package)
- [MAL-2025-86988](https://insights.sbomify.com/MAL-2025-86988/): Malicious code in jaja-nasi50-miaww (npm) (malicious package)
- [MAL-2025-86987](https://insights.sbomify.com/MAL-2025-86987/): Malicious code in jaja-naget46-miaww (npm) (malicious package)
- [MAL-2025-86986](https://insights.sbomify.com/MAL-2025-86986/): Malicious code in jaja-miemee88-kyuki (npm) (malicious package)
- [MAL-2025-86985](https://insights.sbomify.com/MAL-2025-86985/): Malicious code in jaja-miebogor8-riris (npm) (malicious package)
- [MAL-2025-86984](https://insights.sbomify.com/MAL-2025-86984/): Malicious code in jaja-mieayam21-riris (npm) (malicious package)
- [MAL-2025-86983](https://insights.sbomify.com/MAL-2025-86983/): Malicious code in jaja-mieaceh73-riris (npm) (malicious package)
- [MAL-2025-86982](https://insights.sbomify.com/MAL-2025-86982/): Malicious code in jaja-mie5-riris (npm) (malicious package)
- [MAL-2025-86981](https://insights.sbomify.com/MAL-2025-86981/): Malicious code in jaja-mie30-miaww (npm) (malicious package)
- [MAL-2025-86980](https://insights.sbomify.com/MAL-2025-86980/): Malicious code in jaja-martabak14-miaww (npm) (malicious package)
- [MAL-2025-8698](https://insights.sbomify.com/MAL-2025-8698/): Malicious code in @malware-test-gybed-glaur-baggy-gadis/test-mlw3-gybed-glaur-baggy-gadis (npm) (malicious package)
- [MAL-2025-86979](https://insights.sbomify.com/MAL-2025-86979/): Malicious code in jaja-mangut29-miaww (npm) (malicious package)
- [MAL-2025-86978](https://insights.sbomify.com/MAL-2025-86978/): Malicious code in jaja-mangga19-kyuki (npm) (malicious package)
- [MAL-2025-86977](https://insights.sbomify.com/MAL-2025-86977/): Malicious code in jaja-lutis80-miaww (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/148/