# Vulnerabilities published in 2025


- [MAL-2025-138204](https://insights.sbomify.com/MAL-2025-138204/): Malicious code in yanti-gepuk75-sluey (npm) (malicious package)
- [MAL-2025-138203](https://insights.sbomify.com/MAL-2025-138203/): Malicious code in yanti-gembus76-sluey (npm) (malicious package)
- [MAL-2025-138202](https://insights.sbomify.com/MAL-2025-138202/): Malicious code in yanti-gembus73-sluey (npm) (malicious package)
- [MAL-2025-138201](https://insights.sbomify.com/MAL-2025-138201/): Malicious code in yanti-gandul71-sluey (npm) (malicious package)
- [MAL-2025-138200](https://insights.sbomify.com/MAL-2025-138200/): Malicious code in yanti-gandul60-sluey (npm) (malicious package)
- [MAL-2025-13820](https://insights.sbomify.com/MAL-2025-13820/): Malicious code in @zalastax/nolb-react-ty (npm) (malicious package)
- [MAL-2025-1382](https://insights.sbomify.com/MAL-2025-1382/): Malicious code in vidio-kmm (npm) (malicious package)
- [MAL-2025-138199](https://insights.sbomify.com/MAL-2025-138199/): Malicious code in yanti-gado-gado78-sluey (npm) (malicious package)
- [MAL-2025-138198](https://insights.sbomify.com/MAL-2025-138198/): Malicious code in yanti-gado-gado73-sluey (npm) (malicious package)
- [MAL-2025-138197](https://insights.sbomify.com/MAL-2025-138197/): Malicious code in yanti-gado-gado6-sluey (npm) (malicious package)
- [MAL-2025-138196](https://insights.sbomify.com/MAL-2025-138196/): Malicious code in yanti-esdoger100-sluey (npm) (malicious package)
- [MAL-2025-138195](https://insights.sbomify.com/MAL-2025-138195/): Malicious code in yanti-empal87-sluey (npm) (malicious package)
- [MAL-2025-138194](https://insights.sbomify.com/MAL-2025-138194/): Malicious code in yanti-empal86-sluey (npm) (malicious package)
- [MAL-2025-138193](https://insights.sbomify.com/MAL-2025-138193/): Malicious code in yanti-empal68-sluey (npm) (malicious package)
- [MAL-2025-138192](https://insights.sbomify.com/MAL-2025-138192/): Malicious code in yanti-empal56-sluey (npm) (malicious package)
- [MAL-2025-138191](https://insights.sbomify.com/MAL-2025-138191/): Malicious code in yanti-empal10-sluey (npm) (malicious package)
- [MAL-2025-138190](https://insights.sbomify.com/MAL-2025-138190/): Malicious code in yanti-dradag74-sluey (npm) (malicious package)
- [MAL-2025-13819](https://insights.sbomify.com/MAL-2025-13819/): Malicious code in @zalastax/nolb-react-tx (npm) (malicious package)
- [MAL-2025-138189](https://insights.sbomify.com/MAL-2025-138189/): Malicious code in yanti-dradag17-sluey (npm) (malicious package)
- [MAL-2025-138188](https://insights.sbomify.com/MAL-2025-138188/): Malicious code in yanti-dodol52-sluey (npm) (malicious package)
- [MAL-2025-138187](https://insights.sbomify.com/MAL-2025-138187/): Malicious code in yanti-brongkos49-sluey (npm) (malicious package)
- [MAL-2025-138186](https://insights.sbomify.com/MAL-2025-138186/): Malicious code in yanti-brengkes71-sluey (npm) (malicious package)
- [MAL-2025-138185](https://insights.sbomify.com/MAL-2025-138185/): Malicious code in yanti-botok38-sluey (npm) (malicious package)
- [MAL-2025-138184](https://insights.sbomify.com/MAL-2025-138184/): Malicious code in yanti-botok23-sluey (npm) (malicious package)
- [MAL-2025-138183](https://insights.sbomify.com/MAL-2025-138183/): Malicious code in yanti-bika2-sluey (npm) (malicious package)
- [MAL-2025-138182](https://insights.sbomify.com/MAL-2025-138182/): Malicious code in yanti-bakwan92-sluey (npm) (malicious package)
- [MAL-2025-138181](https://insights.sbomify.com/MAL-2025-138181/): Malicious code in yanti-bakwan75-sluey (npm) (malicious package)
- [MAL-2025-138180](https://insights.sbomify.com/MAL-2025-138180/): Malicious code in yanti-bakwan73-sluey (npm) (malicious package)
- [MAL-2025-13818](https://insights.sbomify.com/MAL-2025-13818/): Malicious code in @zalastax/nolb-react-tw (npm) (malicious package)
- [MAL-2025-138179](https://insights.sbomify.com/MAL-2025-138179/): Malicious code in yanti-bakwan49-sluey (npm) (malicious package)
- [MAL-2025-138178](https://insights.sbomify.com/MAL-2025-138178/): Malicious code in yanti-bakso24-sluey (npm) (malicious package)
- [MAL-2025-138177](https://insights.sbomify.com/MAL-2025-138177/): Malicious code in yanti-asinan31-sluey (npm) (malicious package)
- [MAL-2025-138176](https://insights.sbomify.com/MAL-2025-138176/): Malicious code in yammering_fowl_z3n (npm) (malicious package)
- [MAL-2025-138175](https://insights.sbomify.com/MAL-2025-138175/): Malicious code in yabbering_scallop_z3n (npm) (malicious package)
- [MAL-2025-138174](https://insights.sbomify.com/MAL-2025-138174/): Malicious code in yabbering_armadillo_z3n (npm) (malicious package)
- [MAL-2025-138173](https://insights.sbomify.com/MAL-2025-138173/): Malicious code in xerothermic_monkey_z3n (npm) (malicious package)
- [MAL-2025-138172](https://insights.sbomify.com/MAL-2025-138172/): Malicious code in xerothermic_flea_z3n (npm) (malicious package)
- [MAL-2025-138171](https://insights.sbomify.com/MAL-2025-138171/): Malicious code in xeric_cuckoo_z3n (npm) (malicious package)
- [MAL-2025-138170](https://insights.sbomify.com/MAL-2025-138170/): Malicious code in xenophobic_chicken_z3n (npm) (malicious package)
- [MAL-2025-13817](https://insights.sbomify.com/MAL-2025-13817/): Malicious code in @zalastax/nolb-react-tv (npm) (malicious package)
- [MAL-2025-138169](https://insights.sbomify.com/MAL-2025-138169/): Malicious code in xenial_nightingale_z3n (npm) (malicious package)
- [MAL-2025-138168](https://insights.sbomify.com/MAL-2025-138168/): Malicious code in xenial_lark_z3n (npm) (malicious package)
- [MAL-2025-138167](https://insights.sbomify.com/MAL-2025-138167/): Malicious code in xenial_gibbon_z3n (npm) (malicious package)
- [MAL-2025-138166](https://insights.sbomify.com/MAL-2025-138166/): Malicious code in xenacious_penguin_z3n (npm) (malicious package)
- [MAL-2025-138165](https://insights.sbomify.com/MAL-2025-138165/): Malicious code in xenacious_flyingfish_z3n (npm) (malicious package)
- [MAL-2025-138164](https://insights.sbomify.com/MAL-2025-138164/): Malicious code in xaver-tomat12-sluey (npm) (malicious package)
- [MAL-2025-138163](https://insights.sbomify.com/MAL-2025-138163/): Malicious code in xaver-telurtahu87-sluey (npm) (malicious package)
- [MAL-2025-138162](https://insights.sbomify.com/MAL-2025-138162/): Malicious code in xaver-telurtahu43-sluey (npm) (malicious package)
- [MAL-2025-138161](https://insights.sbomify.com/MAL-2025-138161/): Malicious code in xaver-tapai89-sluey (npm) (malicious package)
- [MAL-2025-138160](https://insights.sbomify.com/MAL-2025-138160/): Malicious code in xaver-tahu26-sluey (npm) (malicious package)
- [MAL-2025-13816](https://insights.sbomify.com/MAL-2025-13816/): Malicious code in @zalastax/nolb-react-tu (npm) (malicious package)
- [MAL-2025-138159](https://insights.sbomify.com/MAL-2025-138159/): Malicious code in xaver-soto22-sluey (npm) (malicious package)
- [MAL-2025-138158](https://insights.sbomify.com/MAL-2025-138158/): Malicious code in xaver-soto13-sluey (npm) (malicious package)
- [MAL-2025-138157](https://insights.sbomify.com/MAL-2025-138157/): Malicious code in xaver-soto11-sluey (npm) (malicious package)
- [MAL-2025-138156](https://insights.sbomify.com/MAL-2025-138156/): Malicious code in xaver-serabi45-sluey (npm) (malicious package)
- [MAL-2025-138155](https://insights.sbomify.com/MAL-2025-138155/): Malicious code in xaver-semur58-sluey (npm) (malicious package)
- [MAL-2025-138154](https://insights.sbomify.com/MAL-2025-138154/): Malicious code in xaver-sate24-sumpek (npm) (malicious package)
- [MAL-2025-138153](https://insights.sbomify.com/MAL-2025-138153/): Malicious code in xaver-sasag9-sluey (npm) (malicious package)
- [MAL-2025-138152](https://insights.sbomify.com/MAL-2025-138152/): Malicious code in xaver-sasag42-sluey (npm) (malicious package)
- [MAL-2025-138151](https://insights.sbomify.com/MAL-2025-138151/): Malicious code in xaver-sambel55-sluey (npm) (malicious package)
- [MAL-2025-138150](https://insights.sbomify.com/MAL-2025-138150/): Malicious code in xaver-sambel36-sluey (npm) (malicious package)
- [MAL-2025-13815](https://insights.sbomify.com/MAL-2025-13815/): Malicious code in @zalastax/nolb-react-tt (npm) (malicious package)
- [MAL-2025-138149](https://insights.sbomify.com/MAL-2025-138149/): Malicious code in xaver-sambel23-sluey (npm) (malicious package)
- [MAL-2025-138148](https://insights.sbomify.com/MAL-2025-138148/): Malicious code in xaver-sambalado51-sluey (npm) (malicious package)
- [MAL-2025-138147](https://insights.sbomify.com/MAL-2025-138147/): Malicious code in xaver-ruwet96-sluey (npm) (malicious package)
- [MAL-2025-138146](https://insights.sbomify.com/MAL-2025-138146/): Malicious code in xaver-rujaksoto99-sluey (npm) (malicious package)
- [MAL-2025-138145](https://insights.sbomify.com/MAL-2025-138145/): Malicious code in xaver-rendang15-sluey (npm) (malicious package)
- [MAL-2025-138144](https://insights.sbomify.com/MAL-2025-138144/): Malicious code in xaver-rangi86-sluey (npm) (malicious package)
- [MAL-2025-138143](https://insights.sbomify.com/MAL-2025-138143/): Malicious code in xaver-ongol-ongol33-sluey (npm) (malicious package)
- [MAL-2025-138142](https://insights.sbomify.com/MAL-2025-138142/): Malicious code in xaver-oncom27-sluey (npm) (malicious package)
- [MAL-2025-138141](https://insights.sbomify.com/MAL-2025-138141/): Malicious code in xaver-oblok12-sluey (npm) (malicious package)
- [MAL-2025-138140](https://insights.sbomify.com/MAL-2025-138140/): Malicious code in xaver-nasiuduk66-sluey (npm) (malicious package)
- [MAL-2025-13814](https://insights.sbomify.com/MAL-2025-13814/): Malicious code in @zalastax/nolb-react-ts (npm) (malicious package)
- [MAL-2025-138139](https://insights.sbomify.com/MAL-2025-138139/): Malicious code in xaver-nasicampur75-sluey (npm) (malicious package)
- [MAL-2025-138138](https://insights.sbomify.com/MAL-2025-138138/): Malicious code in xaver-nasicampur42-sluey (npm) (malicious package)
- [MAL-2025-138137](https://insights.sbomify.com/MAL-2025-138137/): Malicious code in xaver-nasicampur24-sluey (npm) (malicious package)
- [MAL-2025-138136](https://insights.sbomify.com/MAL-2025-138136/): Malicious code in xaver-nasi2-sluey (npm) (malicious package)
- [MAL-2025-138135](https://insights.sbomify.com/MAL-2025-138135/): Malicious code in xaver-naget57-sluey (npm) (malicious package)
- [MAL-2025-138134](https://insights.sbomify.com/MAL-2025-138134/): Malicious code in xaver-menjes81-sluey (npm) (malicious package)
- [MAL-2025-138133](https://insights.sbomify.com/MAL-2025-138133/): Malicious code in xaver-mendut93-sluey (npm) (malicious package)
- [MAL-2025-138132](https://insights.sbomify.com/MAL-2025-138132/): Malicious code in xaver-mendoan89-sluey (npm) (malicious package)
- [MAL-2025-138131](https://insights.sbomify.com/MAL-2025-138131/): Malicious code in xaver-martabak65-sluey (npm) (malicious package)
- [MAL-2025-138130](https://insights.sbomify.com/MAL-2025-138130/): Malicious code in xaver-mangut35-sluey (npm) (malicious package)
- [MAL-2025-13813](https://insights.sbomify.com/MAL-2025-13813/): Malicious code in @zalastax/nolb-react-tr (npm) (malicious package)
- [MAL-2025-138129](https://insights.sbomify.com/MAL-2025-138129/): Malicious code in xaver-mangut24-sluey (npm) (malicious package)
- [MAL-2025-138128](https://insights.sbomify.com/MAL-2025-138128/): Malicious code in xaver-mangga2-sluey (npm) (malicious package)
- [MAL-2025-138127](https://insights.sbomify.com/MAL-2025-138127/): Malicious code in xaver-lutis82-sluey (npm) (malicious package)
- [MAL-2025-138126](https://insights.sbomify.com/MAL-2025-138126/): Malicious code in xaver-lodeh6-sluey (npm) (malicious package)
- [MAL-2025-138125](https://insights.sbomify.com/MAL-2025-138125/): Malicious code in xaver-lengko13-sluey (npm) (malicious package)
- [MAL-2025-138124](https://insights.sbomify.com/MAL-2025-138124/): Malicious code in xaver-kupat63-sluey (npm) (malicious package)
- [MAL-2025-138123](https://insights.sbomify.com/MAL-2025-138123/): Malicious code in xaver-kupang31-sluey (npm) (malicious package)
- [MAL-2025-138122](https://insights.sbomify.com/MAL-2025-138122/): Malicious code in xaver-kue67-sluey (npm) (malicious package)
- [MAL-2025-138121](https://insights.sbomify.com/MAL-2025-138121/): Malicious code in xaver-kue16-sluey (npm) (malicious package)
- [MAL-2025-138120](https://insights.sbomify.com/MAL-2025-138120/): Malicious code in xaver-kue14-sluey (npm) (malicious package)
- [MAL-2025-13812](https://insights.sbomify.com/MAL-2025-13812/): Malicious code in @zalastax/nolb-react-tq (npm) (malicious package)
- [MAL-2025-138119](https://insights.sbomify.com/MAL-2025-138119/): Malicious code in xaver-kripik35-sluey (npm) (malicious package)
- [MAL-2025-138118](https://insights.sbomify.com/MAL-2025-138118/): Malicious code in xaver-keripik53-sluey (npm) (malicious package)
- [MAL-2025-138117](https://insights.sbomify.com/MAL-2025-138117/): Malicious code in xaver-kembang63-sluey (npm) (malicious package)
- [MAL-2025-138116](https://insights.sbomify.com/MAL-2025-138116/): Malicious code in xaver-gulai92-sluey (npm) (malicious package)
- [MAL-2025-138115](https://insights.sbomify.com/MAL-2025-138115/): Malicious code in xaver-getuk41-sluey (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1508/