# Vulnerabilities published in 2025


- [MAL-2025-86525](https://insights.sbomify.com/MAL-2025-86525/): Malicious code in ida-kembang80-riris (npm) (malicious package)
- [MAL-2025-86524](https://insights.sbomify.com/MAL-2025-86524/): Malicious code in ida-kacang93-apidev (npm) (malicious package)
- [MAL-2025-86523](https://insights.sbomify.com/MAL-2025-86523/): Malicious code in ida-jus58-riris (npm) (malicious package)
- [MAL-2025-86522](https://insights.sbomify.com/MAL-2025-86522/): Malicious code in ida-gulai85-riris (npm) (malicious package)
- [MAL-2025-86521](https://insights.sbomify.com/MAL-2025-86521/): Malicious code in ida-gulai46-wekto (npm) (malicious package)
- [MAL-2025-86520](https://insights.sbomify.com/MAL-2025-86520/): Malicious code in ida-gorengan9-riris (npm) (malicious package)
- [MAL-2025-8652](https://insights.sbomify.com/MAL-2025-8652/): Malicious code in @malware-test-forts-heles-molas-apoop/test-mlw3-forts-heles-molas-apoop (npm) (malicious package)
- [MAL-2025-86519](https://insights.sbomify.com/MAL-2025-86519/): Malicious code in ida-gembus84-riris (npm) (malicious package)
- [MAL-2025-86518](https://insights.sbomify.com/MAL-2025-86518/): Malicious code in ida-gaplek29-riris (npm) (malicious package)
- [MAL-2025-86517](https://insights.sbomify.com/MAL-2025-86517/): Malicious code in ida-gandul24-miaww (npm) (malicious package)
- [MAL-2025-86516](https://insights.sbomify.com/MAL-2025-86516/): Malicious code in ida-enting20-miaww (npm) (malicious package)
- [MAL-2025-86515](https://insights.sbomify.com/MAL-2025-86515/): Malicious code in ida-empal37-riris (npm) (malicious package)
- [MAL-2025-86514](https://insights.sbomify.com/MAL-2025-86514/): Malicious code in ida-dradag70-miaww (npm) (malicious package)
- [MAL-2025-86513](https://insights.sbomify.com/MAL-2025-86513/): Malicious code in ida-dodol92-riris (npm) (malicious package)
- [MAL-2025-86512](https://insights.sbomify.com/MAL-2025-86512/): Malicious code in ida-dodol70-crottsekebon (npm) (malicious package)
- [MAL-2025-86511](https://insights.sbomify.com/MAL-2025-86511/): Malicious code in ida-bubur42-miaww (npm) (malicious package)
- [MAL-2025-86510](https://insights.sbomify.com/MAL-2025-86510/): Malicious code in ida-bubur1-miaww (npm) (malicious package)
- [MAL-2025-8651](https://insights.sbomify.com/MAL-2025-8651/): Malicious code in @malware-test-fomes-horme-sinus-flote/test-mlw3-fomes-horme-sinus-flote (npm) (malicious package)
- [MAL-2025-86509](https://insights.sbomify.com/MAL-2025-86509/): Malicious code in ida-brongkos2-miaww (npm) (malicious package)
- [MAL-2025-86508](https://insights.sbomify.com/MAL-2025-86508/): Malicious code in ida-brengkes64-riris (npm) (malicious package)
- [MAL-2025-86507](https://insights.sbomify.com/MAL-2025-86507/): Malicious code in ida-brengkes26-riris (npm) (malicious package)
- [MAL-2025-86506](https://insights.sbomify.com/MAL-2025-86506/): Malicious code in ida-botok22-kyuki (npm) (malicious package)
- [MAL-2025-86505](https://insights.sbomify.com/MAL-2025-86505/): Malicious code in ida-bakwan96-riris (npm) (malicious package)
- [MAL-2025-86504](https://insights.sbomify.com/MAL-2025-86504/): Malicious code in ida-bakwan79-miaww (npm) (malicious package)
- [MAL-2025-86503](https://insights.sbomify.com/MAL-2025-86503/): Malicious code in ida-bakso55-miaww (npm) (malicious package)
- [MAL-2025-86502](https://insights.sbomify.com/MAL-2025-86502/): Malicious code in ida-bakso49-crottsekebon (npm) (malicious package)
- [MAL-2025-86501](https://insights.sbomify.com/MAL-2025-86501/): Malicious code in ida-bakso42-miaww (npm) (malicious package)
- [MAL-2025-86500](https://insights.sbomify.com/MAL-2025-86500/): Malicious code in ida-asinan93-miaww (npm) (malicious package)
- [MAL-2025-8650](https://insights.sbomify.com/MAL-2025-8650/): Malicious code in @malware-test-folia-right-misty-amici/test-mlw3-folia-right-misty-amici (npm) (malicious package)
- [MAL-2025-865](https://insights.sbomify.com/MAL-2025-865/): Malicious code in rtcstats-server (npm) (malicious package)
- [MAL-2025-86499](https://insights.sbomify.com/MAL-2025-86499/): Malicious code in icy_stork_z3n (npm) (malicious package)
- [MAL-2025-86498](https://insights.sbomify.com/MAL-2025-86498/): Malicious code in husky_raccoon_z3n (npm) (malicious package)
- [MAL-2025-86497](https://insights.sbomify.com/MAL-2025-86497/): Malicious code in hushed_bug_z3n (npm) (malicious package)
- [MAL-2025-86496](https://insights.sbomify.com/MAL-2025-86496/): Malicious code in hungry_smelt_z3n (npm) (malicious package)
- [MAL-2025-86495](https://insights.sbomify.com/MAL-2025-86495/): Malicious code in human_turtle_z3n (npm) (malicious package)
- [MAL-2025-86494](https://insights.sbomify.com/MAL-2025-86494/): Malicious code in human_pinniped_z3n (npm) (malicious package)
- [MAL-2025-86493](https://insights.sbomify.com/MAL-2025-86493/): Malicious code in human_earwig_z3n (npm) (malicious package)
- [MAL-2025-86492](https://insights.sbomify.com/MAL-2025-86492/): Malicious code in human_cricket_z3n (npm) (malicious package)
- [MAL-2025-86491](https://insights.sbomify.com/MAL-2025-86491/): Malicious code in hot_wildfowl_z3n (npm) (malicious package)
- [MAL-2025-86490](https://insights.sbomify.com/MAL-2025-86490/): Malicious code in hot_swordfish_z3n (npm) (malicious package)
- [MAL-2025-8649](https://insights.sbomify.com/MAL-2025-8649/): Malicious code in @malware-test-flubs-deary-doses-naeve/test-mlw3-flubs-deary-doses-naeve (npm) (malicious package)
- [MAL-2025-86489](https://insights.sbomify.com/MAL-2025-86489/): Malicious code in hot_snake_z3n (npm) (malicious package)
- [MAL-2025-86488](https://insights.sbomify.com/MAL-2025-86488/): Malicious code in hot_opossum_z3n (npm) (malicious package)
- [MAL-2025-86487](https://insights.sbomify.com/MAL-2025-86487/): Malicious code in hot_mole_z3n (npm) (malicious package)
- [MAL-2025-86486](https://insights.sbomify.com/MAL-2025-86486/): Malicious code in hot_manatee_z3n (npm) (malicious package)
- [MAL-2025-86485](https://insights.sbomify.com/MAL-2025-86485/): Malicious code in hostile_hoverfly_z3n (npm) (malicious package)
- [MAL-2025-86484](https://insights.sbomify.com/MAL-2025-86484/): Malicious code in horrible_salmon_z3n (npm) (malicious package)
- [MAL-2025-86483](https://insights.sbomify.com/MAL-2025-86483/): Malicious code in horrible_impala_z3n (npm) (malicious package)
- [MAL-2025-86482](https://insights.sbomify.com/MAL-2025-86482/): Malicious code in horizontal_rooster_z3n (npm) (malicious package)
- [MAL-2025-86481](https://insights.sbomify.com/MAL-2025-86481/): Malicious code in horizontal_pinniped_z3n (npm) (malicious package)
- [MAL-2025-86480](https://insights.sbomify.com/MAL-2025-86480/): Malicious code in honest_cuckoo_z3n (npm) (malicious package)
- [MAL-2025-8648](https://insights.sbomify.com/MAL-2025-8648/): Malicious code in @malware-test-flock-lyams-cronk-trass/test-mlw3-flock-lyams-cronk-trass (npm) (malicious package)
- [MAL-2025-86479](https://insights.sbomify.com/MAL-2025-86479/): Malicious code in homely_penguin_z3n (npm) (malicious package)
- [MAL-2025-86478](https://insights.sbomify.com/MAL-2025-86478/): Malicious code in homely_kingfisher_z3n (npm) (malicious package)
- [MAL-2025-86477](https://insights.sbomify.com/MAL-2025-86477/): Malicious code in homeless_quail_z3n (npm) (malicious package)
- [MAL-2025-86476](https://insights.sbomify.com/MAL-2025-86476/): Malicious code in holy_parrotfish_z3n (npm) (malicious package)
- [MAL-2025-86475](https://insights.sbomify.com/MAL-2025-86475/): Malicious code in holy_beaver_z3n (npm) (malicious package)
- [MAL-2025-86474](https://insights.sbomify.com/MAL-2025-86474/): Malicious code in holy_baboon_z3n (npm) (malicious package)
- [MAL-2025-86473](https://insights.sbomify.com/MAL-2025-86473/): Malicious code in hollow_hippopotamus_z3n (npm) (malicious package)
- [MAL-2025-86472](https://insights.sbomify.com/MAL-2025-86472/): Malicious code in hollow_fly_z3n (npm) (malicious package)
- [MAL-2025-86471](https://insights.sbomify.com/MAL-2025-86471/): Malicious code in historical_swallow_z3n (npm) (malicious package)
- [MAL-2025-86470](https://insights.sbomify.com/MAL-2025-86470/): Malicious code in historical_raccoon_z3n (npm) (malicious package)
- [MAL-2025-8647](https://insights.sbomify.com/MAL-2025-8647/): Malicious code in @malware-test-float-fitch-honey-saics/test-mlw3-float-fitch-honey-saics (npm) (malicious package)
- [MAL-2025-86469](https://insights.sbomify.com/MAL-2025-86469/): Malicious code in historical_parrot_z3n (npm) (malicious package)
- [MAL-2025-86468](https://insights.sbomify.com/MAL-2025-86468/): Malicious code in historic_silkworm_z3n (npm) (malicious package)
- [MAL-2025-86467](https://insights.sbomify.com/MAL-2025-86467/): Malicious code in hissing_koala_z3n (npm) (malicious package)
- [MAL-2025-86466](https://insights.sbomify.com/MAL-2025-86466/): Malicious code in hissing_hookworm_z3n (npm) (malicious package)
- [MAL-2025-86465](https://insights.sbomify.com/MAL-2025-86465/): Malicious code in hissing_anaconda_z3n (npm) (malicious package)
- [MAL-2025-86464](https://insights.sbomify.com/MAL-2025-86464/): Malicious code in hilarious_mackerel_z3n (npm) (malicious package)
- [MAL-2025-86463](https://insights.sbomify.com/MAL-2025-86463/): Malicious code in hilarious_lungfish_z3n (npm) (malicious package)
- [MAL-2025-86462](https://insights.sbomify.com/MAL-2025-86462/): Malicious code in hilarious_grasshopper_z3n (npm) (malicious package)
- [MAL-2025-86461](https://insights.sbomify.com/MAL-2025-86461/): Malicious code in hilarious_elk_z3n (npm) (malicious package)
- [MAL-2025-86460](https://insights.sbomify.com/MAL-2025-86460/): Malicious code in hilarious_crane_z3n (npm) (malicious package)
- [MAL-2025-8646](https://insights.sbomify.com/MAL-2025-8646/): Malicious code in @malware-test-fleys-jambo-vired-jinni/test-mlw3-fleys-jambo-vired-jinni (npm) (malicious package)
- [MAL-2025-86459](https://insights.sbomify.com/MAL-2025-86459/): Malicious code in high_perch_z3n (npm) (malicious package)
- [MAL-2025-86458](https://insights.sbomify.com/MAL-2025-86458/): Malicious code in hidden_ptarmigan_z3n (npm) (malicious package)
- [MAL-2025-86457](https://insights.sbomify.com/MAL-2025-86457/): Malicious code in hendra-wajit59-riris (npm) (malicious package)
- [MAL-2025-86456](https://insights.sbomify.com/MAL-2025-86456/): Malicious code in hendra-ubi43-riris (npm) (malicious package)
- [MAL-2025-86455](https://insights.sbomify.com/MAL-2025-86455/): Malicious code in hendra-tumis99-miaww (npm) (malicious package)
- [MAL-2025-86454](https://insights.sbomify.com/MAL-2025-86454/): Malicious code in hendra-tumis87-kyuki (npm) (malicious package)
- [MAL-2025-86453](https://insights.sbomify.com/MAL-2025-86453/): Malicious code in hendra-tongseng11-miaww (npm) (malicious package)
- [MAL-2025-86452](https://insights.sbomify.com/MAL-2025-86452/): Malicious code in hendra-toge60-miaww (npm) (malicious package)
- [MAL-2025-86451](https://insights.sbomify.com/MAL-2025-86451/): Malicious code in hendra-tiwul15-miaww (npm) (malicious package)
- [MAL-2025-86450](https://insights.sbomify.com/MAL-2025-86450/): Malicious code in hendra-tempe59-miaww (npm) (malicious package)
- [MAL-2025-8645](https://insights.sbomify.com/MAL-2025-8645/): Malicious code in @malware-test-flary-bahut-bobac-rents/test-mlw3-flary-bahut-bobac-rents (npm) (malicious package)
- [MAL-2025-86449](https://insights.sbomify.com/MAL-2025-86449/): Malicious code in hendra-telur58-miaww (npm) (malicious package)
- [MAL-2025-86448](https://insights.sbomify.com/MAL-2025-86448/): Malicious code in hendra-tek29-riris (npm) (malicious package)
- [MAL-2025-86447](https://insights.sbomify.com/MAL-2025-86447/): Malicious code in hendra-tapai90-riris (npm) (malicious package)
- [MAL-2025-86446](https://insights.sbomify.com/MAL-2025-86446/): Malicious code in hendra-tapai29-miaww (npm) (malicious package)
- [MAL-2025-86445](https://insights.sbomify.com/MAL-2025-86445/): Malicious code in hendra-taiwan47-riris (npm) (malicious package)
- [MAL-2025-86444](https://insights.sbomify.com/MAL-2025-86444/): Malicious code in hendra-taiwan29-kyuki (npm) (malicious package)
- [MAL-2025-86443](https://insights.sbomify.com/MAL-2025-86443/): Malicious code in hendra-tahutek83-miaww (npm) (malicious package)
- [MAL-2025-86442](https://insights.sbomify.com/MAL-2025-86442/): Malicious code in hendra-tahutek25-miaww (npm) (malicious package)
- [MAL-2025-86441](https://insights.sbomify.com/MAL-2025-86441/): Malicious code in hendra-sroto98-miaww (npm) (malicious package)
- [MAL-2025-86440](https://insights.sbomify.com/MAL-2025-86440/): Malicious code in hendra-soto36-apidev (npm) (malicious package)
- [MAL-2025-8644](https://insights.sbomify.com/MAL-2025-8644/): Malicious code in @malware-test-flaps-dunes-verge-admin/test-mlw3-flaps-dunes-verge-admin (npm) (malicious package)
- [MAL-2025-86439](https://insights.sbomify.com/MAL-2025-86439/): Malicious code in hendra-soto16-miaww (npm) (malicious package)
- [MAL-2025-86438](https://insights.sbomify.com/MAL-2025-86438/): Malicious code in hendra-semur8-riris (npm) (malicious package)
- [MAL-2025-86437](https://insights.sbomify.com/MAL-2025-86437/): Malicious code in hendra-sambel68-miaww (npm) (malicious package)
- [MAL-2025-86436](https://insights.sbomify.com/MAL-2025-86436/): Malicious code in hendra-sambel41-riris (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/154/