# Vulnerabilities published in 2025


- [MAL-2025-137665](https://insights.sbomify.com/MAL-2025-137665/): Malicious code in utomo-ronde30-sluey (npm) (malicious package)
- [MAL-2025-137664](https://insights.sbomify.com/MAL-2025-137664/): Malicious code in utomo-rangi39-sluey (npm) (malicious package)
- [MAL-2025-137663](https://insights.sbomify.com/MAL-2025-137663/): Malicious code in utomo-rangi27-sluey (npm) (malicious package)
- [MAL-2025-137662](https://insights.sbomify.com/MAL-2025-137662/): Malicious code in utomo-ragi21-sluey (npm) (malicious package)
- [MAL-2025-137661](https://insights.sbomify.com/MAL-2025-137661/): Malicious code in utomo-peyek86-sluey (npm) (malicious package)
- [MAL-2025-137660](https://insights.sbomify.com/MAL-2025-137660/): Malicious code in utomo-peyek71-sluey (npm) (malicious package)
- [MAL-2025-13766](https://insights.sbomify.com/MAL-2025-13766/): Malicious code in @zalastax/nolb-react-sk (npm) (malicious package)
- [MAL-2025-137659](https://insights.sbomify.com/MAL-2025-137659/): Malicious code in utomo-pecel15-sluey (npm) (malicious package)
- [MAL-2025-137658](https://insights.sbomify.com/MAL-2025-137658/): Malicious code in utomo-otak-otak29-sluey (npm) (malicious package)
- [MAL-2025-137657](https://insights.sbomify.com/MAL-2025-137657/): Malicious code in utomo-oncom39-sluey (npm) (malicious package)
- [MAL-2025-137656](https://insights.sbomify.com/MAL-2025-137656/): Malicious code in utomo-nasiuduk1-sluey (npm) (malicious package)
- [MAL-2025-137655](https://insights.sbomify.com/MAL-2025-137655/): Malicious code in utomo-nasisayur75-sluey (npm) (malicious package)
- [MAL-2025-137654](https://insights.sbomify.com/MAL-2025-137654/): Malicious code in utomo-nasipecel49-sluey (npm) (malicious package)
- [MAL-2025-137653](https://insights.sbomify.com/MAL-2025-137653/): Malicious code in utomo-naget80-sluey (npm) (malicious package)
- [MAL-2025-137652](https://insights.sbomify.com/MAL-2025-137652/): Malicious code in utomo-miebogor57-sumpek (npm) (malicious package)
- [MAL-2025-137651](https://insights.sbomify.com/MAL-2025-137651/): Malicious code in utomo-mieayam88-sluey (npm) (malicious package)
- [MAL-2025-137650](https://insights.sbomify.com/MAL-2025-137650/): Malicious code in utomo-mendoan32-sluey (npm) (malicious package)
- [MAL-2025-13765](https://insights.sbomify.com/MAL-2025-13765/): Malicious code in @zalastax/nolb-react-sj (npm) (malicious package)
- [MAL-2025-137649](https://insights.sbomify.com/MAL-2025-137649/): Malicious code in utomo-martabak24-sluey (npm) (malicious package)
- [MAL-2025-137648](https://insights.sbomify.com/MAL-2025-137648/): Malicious code in utomo-mangga78-sumpek (npm) (malicious package)
- [MAL-2025-137647](https://insights.sbomify.com/MAL-2025-137647/): Malicious code in utomo-lapis75-sluey (npm) (malicious package)
- [MAL-2025-137646](https://insights.sbomify.com/MAL-2025-137646/): Malicious code in utomo-kupang26-sluey (npm) (malicious package)
- [MAL-2025-137645](https://insights.sbomify.com/MAL-2025-137645/): Malicious code in utomo-kue63-sumpek (npm) (malicious package)
- [MAL-2025-137644](https://insights.sbomify.com/MAL-2025-137644/): Malicious code in utomo-kue5-sluey (npm) (malicious package)
- [MAL-2025-137643](https://insights.sbomify.com/MAL-2025-137643/): Malicious code in utomo-kripik28-sluey (npm) (malicious package)
- [MAL-2025-137642](https://insights.sbomify.com/MAL-2025-137642/): Malicious code in utomo-klipo39-sluey (npm) (malicious package)
- [MAL-2025-137641](https://insights.sbomify.com/MAL-2025-137641/): Malicious code in utomo-klipo31-sluey (npm) (malicious package)
- [MAL-2025-137640](https://insights.sbomify.com/MAL-2025-137640/): Malicious code in utomo-klanting72-sluey (npm) (malicious package)
- [MAL-2025-13764](https://insights.sbomify.com/MAL-2025-13764/): Malicious code in @zalastax/nolb-react-si (npm) (malicious package)
- [MAL-2025-137639](https://insights.sbomify.com/MAL-2025-137639/): Malicious code in utomo-klanting56-sluey (npm) (malicious package)
- [MAL-2025-137638](https://insights.sbomify.com/MAL-2025-137638/): Malicious code in utomo-ketoprak78-sluey (npm) (malicious package)
- [MAL-2025-137637](https://insights.sbomify.com/MAL-2025-137637/): Malicious code in utomo-ketan12-sluey (npm) (malicious package)
- [MAL-2025-137636](https://insights.sbomify.com/MAL-2025-137636/): Malicious code in utomo-keripik66-sluey (npm) (malicious package)
- [MAL-2025-137635](https://insights.sbomify.com/MAL-2025-137635/): Malicious code in utomo-kacang60-sluey (npm) (malicious package)
- [MAL-2025-137634](https://insights.sbomify.com/MAL-2025-137634/): Malicious code in utomo-kacang45-sluey (npm) (malicious package)
- [MAL-2025-137633](https://insights.sbomify.com/MAL-2025-137633/): Malicious code in utomo-jus80-sluey (npm) (malicious package)
- [MAL-2025-137632](https://insights.sbomify.com/MAL-2025-137632/): Malicious code in utomo-jengkol25-sluey (npm) (malicious package)
- [MAL-2025-137631](https://insights.sbomify.com/MAL-2025-137631/): Malicious code in utomo-jamblang2-sluey (npm) (malicious package)
- [MAL-2025-137630](https://insights.sbomify.com/MAL-2025-137630/): Malicious code in utomo-ikan24-sluey (npm) (malicious package)
- [MAL-2025-13763](https://insights.sbomify.com/MAL-2025-13763/): Malicious code in @zalastax/nolb-react-sh (npm) (malicious package)
- [MAL-2025-137629](https://insights.sbomify.com/MAL-2025-137629/): Malicious code in utomo-gudeg16-sluey (npm) (malicious package)
- [MAL-2025-137628](https://insights.sbomify.com/MAL-2025-137628/): Malicious code in utomo-getuk80-sluey (npm) (malicious package)
- [MAL-2025-137627](https://insights.sbomify.com/MAL-2025-137627/): Malicious code in utomo-getas33-sluey (npm) (malicious package)
- [MAL-2025-137626](https://insights.sbomify.com/MAL-2025-137626/): Malicious code in utomo-gepuk69-sluey (npm) (malicious package)
- [MAL-2025-137625](https://insights.sbomify.com/MAL-2025-137625/): Malicious code in utomo-dradag84-sluey (npm) (malicious package)
- [MAL-2025-137624](https://insights.sbomify.com/MAL-2025-137624/): Malicious code in utomo-dodol72-sluey (npm) (malicious package)
- [MAL-2025-137623](https://insights.sbomify.com/MAL-2025-137623/): Malicious code in utomo-bubur88-sluey (npm) (malicious package)
- [MAL-2025-137622](https://insights.sbomify.com/MAL-2025-137622/): Malicious code in utomo-bika94-sluey (npm) (malicious package)
- [MAL-2025-137621](https://insights.sbomify.com/MAL-2025-137621/): Malicious code in utomo-bika12-sluey (npm) (malicious package)
- [MAL-2025-137620](https://insights.sbomify.com/MAL-2025-137620/): Malicious code in utomo-bakwan96-sluey (npm) (malicious package)
- [MAL-2025-13762](https://insights.sbomify.com/MAL-2025-13762/): Malicious code in @zalastax/nolb-react-sg (npm) (malicious package)
- [MAL-2025-137619](https://insights.sbomify.com/MAL-2025-137619/): Malicious code in usual_cricket_z3n (npm) (malicious package)
- [MAL-2025-137618](https://insights.sbomify.com/MAL-2025-137618/): Malicious code in useful_limpet_z3n (npm) (malicious package)
- [MAL-2025-137617](https://insights.sbomify.com/MAL-2025-137617/): Malicious code in useful_kangaroo_z3n (npm) (malicious package)
- [MAL-2025-137616](https://insights.sbomify.com/MAL-2025-137616/): Malicious code in used_angelfish_z3n (npm) (malicious package)
- [MAL-2025-137615](https://insights.sbomify.com/MAL-2025-137615/): Malicious code in urban_shark_z3n (npm) (malicious package)
- [MAL-2025-137614](https://insights.sbomify.com/MAL-2025-137614/): Malicious code in urban_coyote_z3n (npm) (malicious package)
- [MAL-2025-137613](https://insights.sbomify.com/MAL-2025-137613/): Malicious code in uptight_turkey_z3n (npm) (malicious package)
- [MAL-2025-137612](https://insights.sbomify.com/MAL-2025-137612/): Malicious code in upset_stoat_z3n (npm) (malicious package)
- [MAL-2025-137611](https://insights.sbomify.com/MAL-2025-137611/): Malicious code in upset_hawk_z3n (npm) (malicious package)
- [MAL-2025-137610](https://insights.sbomify.com/MAL-2025-137610/): Malicious code in upset_dragon_z3n (npm) (malicious package)
- [MAL-2025-13761](https://insights.sbomify.com/MAL-2025-13761/): Malicious code in @zalastax/nolb-react-sf (npm) (malicious package)
- [MAL-2025-137609](https://insights.sbomify.com/MAL-2025-137609/): Malicious code in upset_dolphin_z3n (npm) (malicious package)
- [MAL-2025-137608](https://insights.sbomify.com/MAL-2025-137608/): Malicious code in unusual_rooster_z3n (npm) (malicious package)
- [MAL-2025-137607](https://insights.sbomify.com/MAL-2025-137607/): Malicious code in unusual_porpoise_z3n (npm) (malicious package)
- [MAL-2025-137606](https://insights.sbomify.com/MAL-2025-137606/): Malicious code in unsightly_sparrow_z3n (npm) (malicious package)
- [MAL-2025-137605](https://insights.sbomify.com/MAL-2025-137605/): Malicious code in unnecessary_guineafowl_z3n (npm) (malicious package)
- [MAL-2025-137604](https://insights.sbomify.com/MAL-2025-137604/): Malicious code in unnecessary_dove_z3n (npm) (malicious package)
- [MAL-2025-137603](https://insights.sbomify.com/MAL-2025-137603/): Malicious code in unnecessary_dormouse_z3n (npm) (malicious package)
- [MAL-2025-137602](https://insights.sbomify.com/MAL-2025-137602/): Malicious code in unlikely_manatee_z3n (npm) (malicious package)
- [MAL-2025-137601](https://insights.sbomify.com/MAL-2025-137601/): Malicious code in unlikely_bovid_z3n (npm) (malicious package)
- [MAL-2025-137600](https://insights.sbomify.com/MAL-2025-137600/): Malicious code in universal_sawfish_z3n (npm) (malicious package)
- [MAL-2025-13760](https://insights.sbomify.com/MAL-2025-13760/): Malicious code in @zalastax/nolb-react-se (npm) (malicious package)
- [MAL-2025-1376](https://insights.sbomify.com/MAL-2025-1376/): Malicious code in prettyphoto (npm) (malicious package)
- [MAL-2025-137599](https://insights.sbomify.com/MAL-2025-137599/): Malicious code in united_parrotfish_z3n (npm) (malicious package)
- [MAL-2025-137598](https://insights.sbomify.com/MAL-2025-137598/): Malicious code in uninterested_hamster_z3n (npm) (malicious package)
- [MAL-2025-137597](https://insights.sbomify.com/MAL-2025-137597/): Malicious code in uniform_damselfly_z3n (npm) (malicious package)
- [MAL-2025-137596](https://insights.sbomify.com/MAL-2025-137596/): Malicious code in unhappy_ladybug_z3n (npm) (malicious package)
- [MAL-2025-137595](https://insights.sbomify.com/MAL-2025-137595/): Malicious code in unhappy_asp_z3n (npm) (malicious package)
- [MAL-2025-137594](https://insights.sbomify.com/MAL-2025-137594/): Malicious code in unfortunate_wolf_z3n (npm) (malicious package)
- [MAL-2025-137593](https://insights.sbomify.com/MAL-2025-137593/): Malicious code in unfortunate_ox_z3n (npm) (malicious package)
- [MAL-2025-137592](https://insights.sbomify.com/MAL-2025-137592/): Malicious code in unexpected_crawdad_z3n (npm) (malicious package)
- [MAL-2025-137591](https://insights.sbomify.com/MAL-2025-137591/): Malicious code in unemployed_shark_z3n (npm) (malicious package)
- [MAL-2025-137590](https://insights.sbomify.com/MAL-2025-137590/): Malicious code in unemployed_flamingo_z3n (npm) (malicious package)
- [MAL-2025-13759](https://insights.sbomify.com/MAL-2025-13759/): Malicious code in @zalastax/nolb-react-sd (npm) (malicious package)
- [MAL-2025-137589](https://insights.sbomify.com/MAL-2025-137589/): Malicious code in unemployed_ermine_z3n (npm) (malicious package)
- [MAL-2025-137588](https://insights.sbomify.com/MAL-2025-137588/): Malicious code in underlying_chameleon_z3n (npm) (malicious package)
- [MAL-2025-137587](https://insights.sbomify.com/MAL-2025-137587/): Malicious code in unconscious_roadrunner_z3n (npm) (malicious package)
- [MAL-2025-137586](https://insights.sbomify.com/MAL-2025-137586/): Malicious code in unconscious_kingfisher_z3n (npm) (malicious package)
- [MAL-2025-137585](https://insights.sbomify.com/MAL-2025-137585/): Malicious code in unconscious_cobra_z3n (npm) (malicious package)
- [MAL-2025-137584](https://insights.sbomify.com/MAL-2025-137584/): Malicious code in uncomfortable_landfowl_z3n (npm) (malicious package)
- [MAL-2025-137583](https://insights.sbomify.com/MAL-2025-137583/): Malicious code in uncomfortable_coyote_z3n (npm) (malicious package)
- [MAL-2025-137582](https://insights.sbomify.com/MAL-2025-137582/): Malicious code in uncertain_newt_z3n (npm) (malicious package)
- [MAL-2025-137581](https://insights.sbomify.com/MAL-2025-137581/): Malicious code in unaware_octopus_z3n (npm) (malicious package)
- [MAL-2025-137580](https://insights.sbomify.com/MAL-2025-137580/): Malicious code in unacceptable_rooster_z3n (npm) (malicious package)
- [MAL-2025-13758](https://insights.sbomify.com/MAL-2025-13758/): Malicious code in @zalastax/nolb-react-sc (npm) (malicious package)
- [MAL-2025-137579](https://insights.sbomify.com/MAL-2025-137579/): Malicious code in umi-wajit68-sluey (npm) (malicious package)
- [MAL-2025-137578](https://insights.sbomify.com/MAL-2025-137578/): Malicious code in umi-tahutek61-sluey (npm) (malicious package)
- [MAL-2025-137577](https://insights.sbomify.com/MAL-2025-137577/): Malicious code in umi-sroto75-sluey (npm) (malicious package)
- [MAL-2025-137576](https://insights.sbomify.com/MAL-2025-137576/): Malicious code in umi-soto24-sluey (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1514/