# Vulnerabilities published in 2025


- [MAL-2025-86435](https://insights.sbomify.com/MAL-2025-86435/): Malicious code in hendra-sambel16-riris (npm) (malicious package)
- [MAL-2025-86434](https://insights.sbomify.com/MAL-2025-86434/): Malicious code in hendra-sambel13-kyuki (npm) (malicious package)
- [MAL-2025-86433](https://insights.sbomify.com/MAL-2025-86433/): Malicious code in hendra-saguer62-miaww (npm) (malicious package)
- [MAL-2025-86432](https://insights.sbomify.com/MAL-2025-86432/): Malicious code in hendra-rujak78-miaww (npm) (malicious package)
- [MAL-2025-86431](https://insights.sbomify.com/MAL-2025-86431/): Malicious code in hendra-rujak67-riris (npm) (malicious package)
- [MAL-2025-86430](https://insights.sbomify.com/MAL-2025-86430/): Malicious code in hendra-rujak1-wekto (npm) (malicious package)
- [MAL-2025-8643](https://insights.sbomify.com/MAL-2025-8643/): Malicious code in @malware-test-flail-cuing-bubal-siroc/test-mlw3-flail-cuing-bubal-siroc (npm) (malicious package)
- [MAL-2025-86429](https://insights.sbomify.com/MAL-2025-86429/): Malicious code in hendra-rendang87-riris (npm) (malicious package)
- [MAL-2025-86428](https://insights.sbomify.com/MAL-2025-86428/): Malicious code in hendra-rawon60-riris (npm) (malicious package)
- [MAL-2025-86427](https://insights.sbomify.com/MAL-2025-86427/): Malicious code in hendra-rawon33-miaww (npm) (malicious package)
- [MAL-2025-86426](https://insights.sbomify.com/MAL-2025-86426/): Malicious code in hendra-rangi94-miaww (npm) (malicious package)
- [MAL-2025-86425](https://insights.sbomify.com/MAL-2025-86425/): Malicious code in hendra-rangi31-miaww (npm) (malicious package)
- [MAL-2025-86424](https://insights.sbomify.com/MAL-2025-86424/): Malicious code in hendra-pecel7-miaww (npm) (malicious package)
- [MAL-2025-86423](https://insights.sbomify.com/MAL-2025-86423/): Malicious code in hendra-pecel67-miaww (npm) (malicious package)
- [MAL-2025-86422](https://insights.sbomify.com/MAL-2025-86422/): Malicious code in hendra-otak-otak35-kyuki (npm) (malicious package)
- [MAL-2025-86421](https://insights.sbomify.com/MAL-2025-86421/): Malicious code in hendra-oblok34-riris (npm) (malicious package)
- [MAL-2025-86420](https://insights.sbomify.com/MAL-2025-86420/): Malicious code in hendra-nasicampur96-riris (npm) (malicious package)
- [MAL-2025-8642](https://insights.sbomify.com/MAL-2025-8642/): Malicious code in @malware-test-first-leady/test-mlw3-first-leady (npm) (malicious package)
- [MAL-2025-86419](https://insights.sbomify.com/MAL-2025-86419/): Malicious code in hendra-nasi63-miaww (npm) (malicious package)
- [MAL-2025-86418](https://insights.sbomify.com/MAL-2025-86418/): Malicious code in hendra-miemee96-miaww (npm) (malicious package)
- [MAL-2025-86417](https://insights.sbomify.com/MAL-2025-86417/): Malicious code in hendra-miemee77-miaww (npm) (malicious package)
- [MAL-2025-86416](https://insights.sbomify.com/MAL-2025-86416/): Malicious code in hendra-miemee58-riris (npm) (malicious package)
- [MAL-2025-86415](https://insights.sbomify.com/MAL-2025-86415/): Malicious code in hendra-miemee45-riris (npm) (malicious package)
- [MAL-2025-86414](https://insights.sbomify.com/MAL-2025-86414/): Malicious code in hendra-miebogor6-riris (npm) (malicious package)
- [MAL-2025-86413](https://insights.sbomify.com/MAL-2025-86413/): Malicious code in hendra-mieaceh88-miaww (npm) (malicious package)
- [MAL-2025-86412](https://insights.sbomify.com/MAL-2025-86412/): Malicious code in hendra-mieaceh82-riris (npm) (malicious package)
- [MAL-2025-86411](https://insights.sbomify.com/MAL-2025-86411/): Malicious code in hendra-mieaceh77-riris (npm) (malicious package)
- [MAL-2025-86410](https://insights.sbomify.com/MAL-2025-86410/): Malicious code in hendra-menjes97-riris (npm) (malicious package)
- [MAL-2025-8641](https://insights.sbomify.com/MAL-2025-8641/): Malicious code in @malware-test-fired-silva-nepit-tilts/test-mlw3-fired-silva-nepit-tilts (npm) (malicious package)
- [MAL-2025-86409](https://insights.sbomify.com/MAL-2025-86409/): Malicious code in hendra-menjes34-riris (npm) (malicious package)
- [MAL-2025-86408](https://insights.sbomify.com/MAL-2025-86408/): Malicious code in hendra-menjes33-riris (npm) (malicious package)
- [MAL-2025-86407](https://insights.sbomify.com/MAL-2025-86407/): Malicious code in hendra-lupis63-miaww (npm) (malicious package)
- [MAL-2025-86406](https://insights.sbomify.com/MAL-2025-86406/): Malicious code in hendra-lupis25-miaww (npm) (malicious package)
- [MAL-2025-86405](https://insights.sbomify.com/MAL-2025-86405/): Malicious code in hendra-lumpur52-miaww (npm) (malicious package)
- [MAL-2025-86404](https://insights.sbomify.com/MAL-2025-86404/): Malicious code in hendra-lepet70-riris (npm) (malicious package)
- [MAL-2025-86403](https://insights.sbomify.com/MAL-2025-86403/): Malicious code in hendra-lapis9-riris (npm) (malicious package)
- [MAL-2025-86402](https://insights.sbomify.com/MAL-2025-86402/): Malicious code in hendra-lapis39-wekto (npm) (malicious package)
- [MAL-2025-86401](https://insights.sbomify.com/MAL-2025-86401/): Malicious code in hendra-kupat19-riris (npm) (malicious package)
- [MAL-2025-86400](https://insights.sbomify.com/MAL-2025-86400/): Malicious code in hendra-kupang68-miaww (npm) (malicious package)
- [MAL-2025-8640](https://insights.sbomify.com/MAL-2025-8640/): Malicious code in @malware-test-films-norks-carts-ranks/test-mlw3-films-norks-carts-ranks (npm) (malicious package)
- [MAL-2025-864](https://insights.sbomify.com/MAL-2025-864/): Malicious code in qwant-extension (npm) (malicious package)
- [MAL-2025-86399](https://insights.sbomify.com/MAL-2025-86399/): Malicious code in hendra-kue46-miaww (npm) (malicious package)
- [MAL-2025-86398](https://insights.sbomify.com/MAL-2025-86398/): Malicious code in hendra-kue38-riris (npm) (malicious package)
- [MAL-2025-86397](https://insights.sbomify.com/MAL-2025-86397/): Malicious code in hendra-kue37-miaww (npm) (malicious package)
- [MAL-2025-86396](https://insights.sbomify.com/MAL-2025-86396/): Malicious code in hendra-kue16-apidev (npm) (malicious package)
- [MAL-2025-86395](https://insights.sbomify.com/MAL-2025-86395/): Malicious code in hendra-kripik3-riris (npm) (malicious package)
- [MAL-2025-86394](https://insights.sbomify.com/MAL-2025-86394/): Malicious code in hendra-klentik66-riris (npm) (malicious package)
- [MAL-2025-86393](https://insights.sbomify.com/MAL-2025-86393/): Malicious code in hendra-ketan73-miaww (npm) (malicious package)
- [MAL-2025-86392](https://insights.sbomify.com/MAL-2025-86392/): Malicious code in hendra-keripik65-miaww (npm) (malicious package)
- [MAL-2025-86391](https://insights.sbomify.com/MAL-2025-86391/): Malicious code in hendra-keraktelor90-miaww (npm) (malicious package)
- [MAL-2025-86390](https://insights.sbomify.com/MAL-2025-86390/): Malicious code in hendra-kentang37-miaww (npm) (malicious package)
- [MAL-2025-8639](https://insights.sbomify.com/MAL-2025-8639/): Malicious code in @malware-test-fills-fents-polls-poppy/test-mlw3-fills-fents-polls-poppy (npm) (malicious package)
- [MAL-2025-86389](https://insights.sbomify.com/MAL-2025-86389/): Malicious code in hendra-kembang54-miaww (npm) (malicious package)
- [MAL-2025-86388](https://insights.sbomify.com/MAL-2025-86388/): Malicious code in hendra-kembang24-riris (npm) (malicious package)
- [MAL-2025-86387](https://insights.sbomify.com/MAL-2025-86387/): Malicious code in hendra-kacang27-riris (npm) (malicious package)
- [MAL-2025-86386](https://insights.sbomify.com/MAL-2025-86386/): Malicious code in hendra-jus35-miaww (npm) (malicious package)
- [MAL-2025-86385](https://insights.sbomify.com/MAL-2025-86385/): Malicious code in hendra-gulai94-miaww (npm) (malicious package)
- [MAL-2025-86384](https://insights.sbomify.com/MAL-2025-86384/): Malicious code in hendra-gulai31-riris (npm) (malicious package)
- [MAL-2025-86383](https://insights.sbomify.com/MAL-2025-86383/): Malicious code in hendra-gorengan44-miaww (npm) (malicious package)
- [MAL-2025-86382](https://insights.sbomify.com/MAL-2025-86382/): Malicious code in hendra-gaplek74-miaww (npm) (malicious package)
- [MAL-2025-86381](https://insights.sbomify.com/MAL-2025-86381/): Malicious code in hendra-gandul94-riris (npm) (malicious package)
- [MAL-2025-86380](https://insights.sbomify.com/MAL-2025-86380/): Malicious code in hendra-enting13-miaww (npm) (malicious package)
- [MAL-2025-8638](https://insights.sbomify.com/MAL-2025-8638/): Malicious code in @malware-test-feods-kasha-decay-porge/test-mlw3-feods-kasha-decay-porge (npm) (malicious package)
- [MAL-2025-86379](https://insights.sbomify.com/MAL-2025-86379/): Malicious code in hendra-donat73-riris (npm) (malicious package)
- [MAL-2025-86378](https://insights.sbomify.com/MAL-2025-86378/): Malicious code in hendra-brongkos29-miaww (npm) (malicious package)
- [MAL-2025-86377](https://insights.sbomify.com/MAL-2025-86377/): Malicious code in hendra-bika74-riris (npm) (malicious package)
- [MAL-2025-86376](https://insights.sbomify.com/MAL-2025-86376/): Malicious code in hendra-bika13-riris (npm) (malicious package)
- [MAL-2025-86375](https://insights.sbomify.com/MAL-2025-86375/): Malicious code in hendra-bakwan36-riris (npm) (malicious package)
- [MAL-2025-86374](https://insights.sbomify.com/MAL-2025-86374/): Malicious code in hendra-bakso84-miaww (npm) (malicious package)
- [MAL-2025-86373](https://insights.sbomify.com/MAL-2025-86373/): Malicious code in hendra-asinan62-riris (npm) (malicious package)
- [MAL-2025-86372](https://insights.sbomify.com/MAL-2025-86372/): Malicious code in helpless_sole_z3n (npm) (malicious package)
- [MAL-2025-86371](https://insights.sbomify.com/MAL-2025-86371/): Malicious code in helpless_salamander_z3n (npm) (malicious package)
- [MAL-2025-86370](https://insights.sbomify.com/MAL-2025-86370/): Malicious code in helpful_thrush_z3n (npm) (malicious package)
- [MAL-2025-8637](https://insights.sbomify.com/MAL-2025-8637/): Malicious code in @malware-test-fenny-cesse-doums-faces/test-mlw3-fenny-cesse-doums-faces (npm) (malicious package)
- [MAL-2025-86369](https://insights.sbomify.com/MAL-2025-86369/): Malicious code in helpful_cobra_z3n (npm) (malicious package)
- [MAL-2025-86368](https://insights.sbomify.com/MAL-2025-86368/): Malicious code in heavy_tahr_z3n (npm) (malicious package)
- [MAL-2025-86367](https://insights.sbomify.com/MAL-2025-86367/): Malicious code in heavy_partridge_z3n (npm) (malicious package)
- [MAL-2025-86366](https://insights.sbomify.com/MAL-2025-86366/): Malicious code in heavy_donkey_z3n (npm) (malicious package)
- [MAL-2025-86365](https://insights.sbomify.com/MAL-2025-86365/): Malicious code in harsh_warbler_z3n (npm) (malicious package)
- [MAL-2025-86364](https://insights.sbomify.com/MAL-2025-86364/): Malicious code in harsh_smelt_z3n (npm) (malicious package)
- [MAL-2025-86363](https://insights.sbomify.com/MAL-2025-86363/): Malicious code in harsh_locust_z3n (npm) (malicious package)
- [MAL-2025-86362](https://insights.sbomify.com/MAL-2025-86362/): Malicious code in harsh_gayal_z3n (npm) (malicious package)
- [MAL-2025-86361](https://insights.sbomify.com/MAL-2025-86361/): Malicious code in harsh_dragon_z3n (npm) (malicious package)
- [MAL-2025-86360](https://insights.sbomify.com/MAL-2025-86360/): Malicious code in hard_prawn_z3n (npm) (malicious package)
- [MAL-2025-8636](https://insights.sbomify.com/MAL-2025-8636/): Malicious code in @malware-test-fenks-mowed-clepe-skyey/test-mlw3-fenks-mowed-clepe-skyey (npm) (malicious package)
- [MAL-2025-86359](https://insights.sbomify.com/MAL-2025-86359/): Malicious code in happy_earwig_z3n (npm) (malicious package)
- [MAL-2025-86358](https://insights.sbomify.com/MAL-2025-86358/): Malicious code in handicapped_salmon_z3n (npm) (malicious package)
- [MAL-2025-86357](https://insights.sbomify.com/MAL-2025-86357/): Malicious code in handicapped_crab_z3n (npm) (malicious package)
- [MAL-2025-86356](https://insights.sbomify.com/MAL-2025-86356/): Malicious code in hanafi-wajit7-riris (npm) (malicious package)
- [MAL-2025-86355](https://insights.sbomify.com/MAL-2025-86355/): Malicious code in hanafi-ubi5-riris (npm) (malicious package)
- [MAL-2025-86354](https://insights.sbomify.com/MAL-2025-86354/): Malicious code in hanafi-tumis36-wekto (npm) (malicious package)
- [MAL-2025-86353](https://insights.sbomify.com/MAL-2025-86353/): Malicious code in hanafi-toge44-riris (npm) (malicious package)
- [MAL-2025-86352](https://insights.sbomify.com/MAL-2025-86352/): Malicious code in hanafi-tempe52-kyuki (npm) (malicious package)
- [MAL-2025-86351](https://insights.sbomify.com/MAL-2025-86351/): Malicious code in hanafi-telur19-riris (npm) (malicious package)
- [MAL-2025-86350](https://insights.sbomify.com/MAL-2025-86350/): Malicious code in hanafi-tek98-miaww (npm) (malicious package)
- [MAL-2025-8635](https://insights.sbomify.com/MAL-2025-8635/): Malicious code in @malware-test-fence-nooky/test-mlw3-fence-nooky (npm) (malicious package)
- [MAL-2025-86349](https://insights.sbomify.com/MAL-2025-86349/): Malicious code in hanafi-tek64-miaww (npm) (malicious package)
- [MAL-2025-86348](https://insights.sbomify.com/MAL-2025-86348/): Malicious code in hanafi-tahutek57-kyuki (npm) (malicious package)
- [MAL-2025-86347](https://insights.sbomify.com/MAL-2025-86347/): Malicious code in hanafi-tahutek37-riris (npm) (malicious package)
- [MAL-2025-86346](https://insights.sbomify.com/MAL-2025-86346/): Malicious code in hanafi-tahu46-riris (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/155/