# Vulnerabilities published in 2025


- [MAL-2025-136945](https://insights.sbomify.com/MAL-2025-136945/): Malicious code in sinta-lontong70-sluey (npm) (malicious package)
- [MAL-2025-136944](https://insights.sbomify.com/MAL-2025-136944/): Malicious code in sinta-kupat24-sumpek (npm) (malicious package)
- [MAL-2025-136943](https://insights.sbomify.com/MAL-2025-136943/): Malicious code in sinta-kue71-sluey (npm) (malicious package)
- [MAL-2025-136942](https://insights.sbomify.com/MAL-2025-136942/): Malicious code in sinta-kue30-sluey (npm) (malicious package)
- [MAL-2025-136941](https://insights.sbomify.com/MAL-2025-136941/): Malicious code in sinta-klanting38-sluey (npm) (malicious package)
- [MAL-2025-136940](https://insights.sbomify.com/MAL-2025-136940/): Malicious code in sinta-keripik98-sluey (npm) (malicious package)
- [MAL-2025-13694](https://insights.sbomify.com/MAL-2025-13694/): Malicious code in @zalastax/nolb-react-il (npm) (malicious package)
- [MAL-2025-136939](https://insights.sbomify.com/MAL-2025-136939/): Malicious code in sinta-kentang75-sluey (npm) (malicious package)
- [MAL-2025-136938](https://insights.sbomify.com/MAL-2025-136938/): Malicious code in sinta-kentang58-sluey (npm) (malicious package)
- [MAL-2025-136937](https://insights.sbomify.com/MAL-2025-136937/): Malicious code in sinta-kemplang97-sluey (npm) (malicious package)
- [MAL-2025-136936](https://insights.sbomify.com/MAL-2025-136936/): Malicious code in sinta-kemplang37-sluey (npm) (malicious package)
- [MAL-2025-136935](https://insights.sbomify.com/MAL-2025-136935/): Malicious code in sinta-kacang89-sluey (npm) (malicious package)
- [MAL-2025-136934](https://insights.sbomify.com/MAL-2025-136934/): Malicious code in sinta-jus72-sluey (npm) (malicious package)
- [MAL-2025-136933](https://insights.sbomify.com/MAL-2025-136933/): Malicious code in sinta-jamblang80-sluey (npm) (malicious package)
- [MAL-2025-136932](https://insights.sbomify.com/MAL-2025-136932/): Malicious code in sinta-getuk80-sluey (npm) (malicious package)
- [MAL-2025-136931](https://insights.sbomify.com/MAL-2025-136931/): Malicious code in sinta-getas76-sluey (npm) (malicious package)
- [MAL-2025-136930](https://insights.sbomify.com/MAL-2025-136930/): Malicious code in sinta-gandul23-sluey (npm) (malicious package)
- [MAL-2025-13693](https://insights.sbomify.com/MAL-2025-13693/): Malicious code in @zalastax/nolb-react-ik (npm) (malicious package)
- [MAL-2025-136929](https://insights.sbomify.com/MAL-2025-136929/): Malicious code in sinta-gado-gado49-sluey (npm) (malicious package)
- [MAL-2025-136928](https://insights.sbomify.com/MAL-2025-136928/): Malicious code in sinta-dradag51-sluey (npm) (malicious package)
- [MAL-2025-136927](https://insights.sbomify.com/MAL-2025-136927/): Malicious code in sinta-dodol9-sluey (npm) (malicious package)
- [MAL-2025-136926](https://insights.sbomify.com/MAL-2025-136926/): Malicious code in sinta-bubursumsum62-sluey (npm) (malicious package)
- [MAL-2025-136925](https://insights.sbomify.com/MAL-2025-136925/): Malicious code in sinta-bubursumsum25-sluey (npm) (malicious package)
- [MAL-2025-136924](https://insights.sbomify.com/MAL-2025-136924/): Malicious code in sinta-bubur18-sluey (npm) (malicious package)
- [MAL-2025-136923](https://insights.sbomify.com/MAL-2025-136923/): Malicious code in sinta-brongkos75-sluey (npm) (malicious package)
- [MAL-2025-136922](https://insights.sbomify.com/MAL-2025-136922/): Malicious code in sinta-bakso21-sumpek (npm) (malicious package)
- [MAL-2025-136921](https://insights.sbomify.com/MAL-2025-136921/): Malicious code in single_flyingfish_z3n (npm) (malicious package)
- [MAL-2025-136920](https://insights.sbomify.com/MAL-2025-136920/): Malicious code in simple_narwhal_z3n (npm) (malicious package)
- [MAL-2025-13692](https://insights.sbomify.com/MAL-2025-13692/): Malicious code in @zalastax/nolb-react-ii (npm) (malicious package)
- [MAL-2025-136919](https://insights.sbomify.com/MAL-2025-136919/): Malicious code in simple_guineafowl_z3n (npm) (malicious package)
- [MAL-2025-136918](https://insights.sbomify.com/MAL-2025-136918/): Malicious code in simple_goat_z3n (npm) (malicious package)
- [MAL-2025-136917](https://insights.sbomify.com/MAL-2025-136917/): Malicious code in similar_chimpanzee_z3n (npm) (malicious package)
- [MAL-2025-136916](https://insights.sbomify.com/MAL-2025-136916/): Malicious code in silky_snail_z3n (npm) (malicious package)
- [MAL-2025-136915](https://insights.sbomify.com/MAL-2025-136915/): Malicious code in silent_mammal_z3n (npm) (malicious package)
- [MAL-2025-136914](https://insights.sbomify.com/MAL-2025-136914/): Malicious code in silent_bat_z3n (npm) (malicious package)
- [MAL-2025-136913](https://insights.sbomify.com/MAL-2025-136913/): Malicious code in sick_hedgehog_z3n (npm) (malicious package)
- [MAL-2025-136912](https://insights.sbomify.com/MAL-2025-136912/): Malicious code in sick_flamingo_z3n (npm) (malicious package)
- [MAL-2025-136911](https://insights.sbomify.com/MAL-2025-136911/): Malicious code in short_perch_z3n (npm) (malicious package)
- [MAL-2025-136910](https://insights.sbomify.com/MAL-2025-136910/): Malicious code in short_magpie_z3n (npm) (malicious package)
- [MAL-2025-13691](https://insights.sbomify.com/MAL-2025-13691/): Malicious code in @zalastax/nolb-react-ih (npm) (malicious package)
- [MAL-2025-136909](https://insights.sbomify.com/MAL-2025-136909/): Malicious code in shivering_turkey_z3n (npm) (malicious package)
- [MAL-2025-136908](https://insights.sbomify.com/MAL-2025-136908/): Malicious code in shivering_partridge_z3n (npm) (malicious package)
- [MAL-2025-136907](https://insights.sbomify.com/MAL-2025-136907/): Malicious code in sheer_panther_z3n (npm) (malicious package)
- [MAL-2025-136906](https://insights.sbomify.com/MAL-2025-136906/): Malicious code in sheer_elephant_z3n (npm) (malicious package)
- [MAL-2025-136905](https://insights.sbomify.com/MAL-2025-136905/): Malicious code in shallow_skink_z3n (npm) (malicious package)
- [MAL-2025-136904](https://insights.sbomify.com/MAL-2025-136904/): Malicious code in shallow_quokka_z3n (npm) (malicious package)
- [MAL-2025-136903](https://insights.sbomify.com/MAL-2025-136903/): Malicious code in shaky_swift_z3n (npm) (malicious package)
- [MAL-2025-136902](https://insights.sbomify.com/MAL-2025-136902/): Malicious code in shaky_finch_z3n (npm) (malicious package)
- [MAL-2025-136901](https://insights.sbomify.com/MAL-2025-136901/): Malicious code in shaggy_spider_z3n (npm) (malicious package)
- [MAL-2025-136900](https://insights.sbomify.com/MAL-2025-136900/): Malicious code in shaggy_cow_z3n (npm) (malicious package)
- [MAL-2025-13690](https://insights.sbomify.com/MAL-2025-13690/): Malicious code in @zalastax/nolb-react-ig (npm) (malicious package)
- [MAL-2025-1369](https://insights.sbomify.com/MAL-2025-1369/): Malicious code in node-tg-bot-sdk (npm) (malicious package)
- [MAL-2025-136899](https://insights.sbomify.com/MAL-2025-136899/): Malicious code in severe_felidae_z3n (npm) (malicious package)
- [MAL-2025-136898](https://insights.sbomify.com/MAL-2025-136898/): Malicious code in severe_badger_z3n (npm) (malicious package)
- [MAL-2025-136897](https://insights.sbomify.com/MAL-2025-136897/): Malicious code in serious_gorilla_z3n (npm) (malicious package)
- [MAL-2025-136896](https://insights.sbomify.com/MAL-2025-136896/): Malicious code in separate_donkey_z3n (npm) (malicious package)
- [MAL-2025-136895](https://insights.sbomify.com/MAL-2025-136895/): Malicious code in separate_buzzard_z3n (npm) (malicious package)
- [MAL-2025-136894](https://insights.sbomify.com/MAL-2025-136894/): Malicious code in sensitive_grasshopper_z3n (npm) (malicious package)
- [MAL-2025-136893](https://insights.sbomify.com/MAL-2025-136893/): Malicious code in sensitive_aardvark_z3n (npm) (malicious package)
- [MAL-2025-136892](https://insights.sbomify.com/MAL-2025-136892/): Malicious code in senior_penguin_z3n (npm) (malicious package)
- [MAL-2025-136891](https://insights.sbomify.com/MAL-2025-136891/): Malicious code in senior_crayfish_z3n (npm) (malicious package)
- [MAL-2025-136890](https://insights.sbomify.com/MAL-2025-136890/): Malicious code in semantic_magpie_z3n (npm) (malicious package)
- [MAL-2025-13689](https://insights.sbomify.com/MAL-2025-13689/): Malicious code in @zalastax/nolb-react-if (npm) (malicious package)
- [MAL-2025-136889](https://insights.sbomify.com/MAL-2025-136889/): Malicious code in semantic_crab_z3n (npm) (malicious package)
- [MAL-2025-136888](https://insights.sbomify.com/MAL-2025-136888/): Malicious code in selfish_shark_z3n (npm) (malicious package)
- [MAL-2025-136887](https://insights.sbomify.com/MAL-2025-136887/): Malicious code in selfish_badger_z3n (npm) (malicious package)
- [MAL-2025-136886](https://insights.sbomify.com/MAL-2025-136886/): Malicious code in selective_finch_z3n (npm) (malicious package)
- [MAL-2025-136885](https://insights.sbomify.com/MAL-2025-136885/): Malicious code in selective_baboon_z3n (npm) (malicious package)
- [MAL-2025-136884](https://insights.sbomify.com/MAL-2025-136884/): Malicious code in selected_swallow_z3n (npm) (malicious package)
- [MAL-2025-136883](https://insights.sbomify.com/MAL-2025-136883/): Malicious code in selected_stork_z3n (npm) (malicious package)
- [MAL-2025-136882](https://insights.sbomify.com/MAL-2025-136882/): Malicious code in secret_condor_z3n (npm) (malicious package)
- [MAL-2025-136881](https://insights.sbomify.com/MAL-2025-136881/): Malicious code in secret_bird_z3n (npm) (malicious package)
- [MAL-2025-136880](https://insights.sbomify.com/MAL-2025-136880/): Malicious code in screeching_clownfish_z3n (npm) (malicious package)
- [MAL-2025-13688](https://insights.sbomify.com/MAL-2025-13688/): Malicious code in @zalastax/nolb-react-ie (npm) (malicious package)
- [MAL-2025-136879](https://insights.sbomify.com/MAL-2025-136879/): Malicious code in scrawny_vole_z3n (npm) (malicious package)
- [MAL-2025-136878](https://insights.sbomify.com/MAL-2025-136878/): Malicious code in scientific_newt_z3n (npm) (malicious package)
- [MAL-2025-136877](https://insights.sbomify.com/MAL-2025-136877/): Malicious code in scattered_xerinae_z3n (npm) (malicious package)
- [MAL-2025-136876](https://insights.sbomify.com/MAL-2025-136876/): Malicious code in scattered_hyena_z3n (npm) (malicious package)
- [MAL-2025-136875](https://insights.sbomify.com/MAL-2025-136875/): Malicious code in scattered_anglerfish_z3n (npm) (malicious package)
- [MAL-2025-136874](https://insights.sbomify.com/MAL-2025-136874/): Malicious code in scary_perch_z3n (npm) (malicious package)
- [MAL-2025-136873](https://insights.sbomify.com/MAL-2025-136873/): Malicious code in scared_mockingbird_z3n (npm) (malicious package)
- [MAL-2025-136872](https://insights.sbomify.com/MAL-2025-136872/): Malicious code in satisfied_earwig_z3n (npm) (malicious package)
- [MAL-2025-136871](https://insights.sbomify.com/MAL-2025-136871/): Malicious code in satisfactory_panther_z3n (npm) (malicious package)
- [MAL-2025-136870](https://insights.sbomify.com/MAL-2025-136870/): Malicious code in sari-wajit97-sluey (npm) (malicious package)
- [MAL-2025-13687](https://insights.sbomify.com/MAL-2025-13687/): Malicious code in @zalastax/nolb-react-id (npm) (malicious package)
- [MAL-2025-136869](https://insights.sbomify.com/MAL-2025-136869/): Malicious code in sari-ubi30-sluey (npm) (malicious package)
- [MAL-2025-136868](https://insights.sbomify.com/MAL-2025-136868/): Malicious code in sari-tahutek4-sluey (npm) (malicious package)
- [MAL-2025-136867](https://insights.sbomify.com/MAL-2025-136867/): Malicious code in sari-tahu82-sluey (npm) (malicious package)
- [MAL-2025-136866](https://insights.sbomify.com/MAL-2025-136866/): Malicious code in sari-tahu20-sluey (npm) (malicious package)
- [MAL-2025-136865](https://insights.sbomify.com/MAL-2025-136865/): Malicious code in sari-serimuka95-sluey (npm) (malicious package)
- [MAL-2025-136864](https://insights.sbomify.com/MAL-2025-136864/): Malicious code in sari-semur100-sluey (npm) (malicious package)
- [MAL-2025-136863](https://insights.sbomify.com/MAL-2025-136863/): Malicious code in sari-sambel72-sluey (npm) (malicious package)
- [MAL-2025-136862](https://insights.sbomify.com/MAL-2025-136862/): Malicious code in sari-saguer60-sluey (npm) (malicious package)
- [MAL-2025-136861](https://insights.sbomify.com/MAL-2025-136861/): Malicious code in sari-saguer47-sluey (npm) (malicious package)
- [MAL-2025-136860](https://insights.sbomify.com/MAL-2025-136860/): Malicious code in sari-ronde59-sluey (npm) (malicious package)
- [MAL-2025-13686](https://insights.sbomify.com/MAL-2025-13686/): Malicious code in @zalastax/nolb-react-ic (npm) (malicious package)
- [MAL-2025-136859](https://insights.sbomify.com/MAL-2025-136859/): Malicious code in sari-rangginang56-sluey (npm) (malicious package)
- [MAL-2025-136858](https://insights.sbomify.com/MAL-2025-136858/): Malicious code in sari-ragi86-sluey (npm) (malicious package)
- [MAL-2025-136857](https://insights.sbomify.com/MAL-2025-136857/): Malicious code in sari-pisang41-sluey (npm) (malicious package)
- [MAL-2025-136856](https://insights.sbomify.com/MAL-2025-136856/): Malicious code in sari-peyek21-sumpek (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1522/