# Vulnerabilities published in 2025


- [MAL-2025-84725](https://insights.sbomify.com/MAL-2025-84725/): Malicious code in dono-klanting80-miaww (npm) (malicious package)
- [MAL-2025-84724](https://insights.sbomify.com/MAL-2025-84724/): Malicious code in dono-keripik89-riris (npm) (malicious package)
- [MAL-2025-84723](https://insights.sbomify.com/MAL-2025-84723/): Malicious code in dono-kepok73-miaww (npm) (malicious package)
- [MAL-2025-84722](https://insights.sbomify.com/MAL-2025-84722/): Malicious code in dono-kembang51-miaww (npm) (malicious package)
- [MAL-2025-84721](https://insights.sbomify.com/MAL-2025-84721/): Malicious code in dono-kacang53-miaww (npm) (malicious package)
- [MAL-2025-84720](https://insights.sbomify.com/MAL-2025-84720/): Malicious code in dono-jus39-miaww (npm) (malicious package)
- [MAL-2025-8472](https://insights.sbomify.com/MAL-2025-8472/): Malicious code in @malware-test-aunts-ciggy-minae-dints/test-mlw3-aunts-ciggy-minae-dints (npm) (malicious package)
- [MAL-2025-84719](https://insights.sbomify.com/MAL-2025-84719/): Malicious code in dono-gulai36-kyuki (npm) (malicious package)
- [MAL-2025-84718](https://insights.sbomify.com/MAL-2025-84718/): Malicious code in dono-getuk35-miaww (npm) (malicious package)
- [MAL-2025-84717](https://insights.sbomify.com/MAL-2025-84717/): Malicious code in dono-gembus72-riris (npm) (malicious package)
- [MAL-2025-84716](https://insights.sbomify.com/MAL-2025-84716/): Malicious code in dono-gaplek6-crottsekebon (npm) (malicious package)
- [MAL-2025-84715](https://insights.sbomify.com/MAL-2025-84715/): Malicious code in dono-gado-gado80-riris (npm) (malicious package)
- [MAL-2025-84714](https://insights.sbomify.com/MAL-2025-84714/): Malicious code in dono-dradag60-riris (npm) (malicious package)
- [MAL-2025-84713](https://insights.sbomify.com/MAL-2025-84713/): Malicious code in dono-dradag43-riris (npm) (malicious package)
- [MAL-2025-84712](https://insights.sbomify.com/MAL-2025-84712/): Malicious code in dono-dradag31-miaww (npm) (malicious package)
- [MAL-2025-84711](https://insights.sbomify.com/MAL-2025-84711/): Malicious code in dono-donat61-miaww (npm) (malicious package)
- [MAL-2025-84710](https://insights.sbomify.com/MAL-2025-84710/): Malicious code in dono-buburayam97-riris (npm) (malicious package)
- [MAL-2025-8471](https://insights.sbomify.com/MAL-2025-8471/): Malicious code in @malware-test-aulos-reset-wiles-nodus/test-mlw3-aulos-reset-wiles-nodus (npm) (malicious package)
- [MAL-2025-84709](https://insights.sbomify.com/MAL-2025-84709/): Malicious code in dono-bubur99-miaww (npm) (malicious package)
- [MAL-2025-84708](https://insights.sbomify.com/MAL-2025-84708/): Malicious code in dono-brengkes95-riris (npm) (malicious package)
- [MAL-2025-84707](https://insights.sbomify.com/MAL-2025-84707/): Malicious code in dono-brengkes55-miaww (npm) (malicious package)
- [MAL-2025-84706](https://insights.sbomify.com/MAL-2025-84706/): Malicious code in dono-botok64-miaww (npm) (malicious package)
- [MAL-2025-84705](https://insights.sbomify.com/MAL-2025-84705/): Malicious code in dono-botok31-miaww (npm) (malicious package)
- [MAL-2025-84704](https://insights.sbomify.com/MAL-2025-84704/): Malicious code in dono-bika73-riris (npm) (malicious package)
- [MAL-2025-84703](https://insights.sbomify.com/MAL-2025-84703/): Malicious code in dono-bika11-miaww (npm) (malicious package)
- [MAL-2025-84702](https://insights.sbomify.com/MAL-2025-84702/): Malicious code in dominant_tuna_z3n (npm) (malicious package)
- [MAL-2025-84701](https://insights.sbomify.com/MAL-2025-84701/): Malicious code in dominant_sailfish_z3n (npm) (malicious package)
- [MAL-2025-84700](https://insights.sbomify.com/MAL-2025-84700/): Malicious code in dominant_cod_z3n (npm) (malicious package)
- [MAL-2025-8470](https://insights.sbomify.com/MAL-2025-8470/): Malicious code in @malware-test-atony-bajri-noyau-rider/test-mlw3-atony-bajri-noyau-rider (npm) (malicious package)
- [MAL-2025-847](https://insights.sbomify.com/MAL-2025-847/): Malicious code in llm_demo (npm) (malicious package)
- [MAL-2025-84699](https://insights.sbomify.com/MAL-2025-84699/): Malicious code in dominant_cobra_z3n (npm) (malicious package)
- [MAL-2025-84698](https://insights.sbomify.com/MAL-2025-84698/): Malicious code in dizzy_lemur_z3n (npm) (malicious package)
- [MAL-2025-84697](https://insights.sbomify.com/MAL-2025-84697/): Malicious code in divine_yak_z3n (npm) (malicious package)
- [MAL-2025-84696](https://insights.sbomify.com/MAL-2025-84696/): Malicious code in divine_grasshopper_z3n (npm) (malicious package)
- [MAL-2025-84695](https://insights.sbomify.com/MAL-2025-84695/): Malicious code in disturbing_shrew_z3n (npm) (malicious package)
- [MAL-2025-84694](https://insights.sbomify.com/MAL-2025-84694/): Malicious code in disturbing_pelican_z3n (npm) (malicious package)
- [MAL-2025-84693](https://insights.sbomify.com/MAL-2025-84693/): Malicious code in disturbing_camel_z3n (npm) (malicious package)
- [MAL-2025-84692](https://insights.sbomify.com/MAL-2025-84692/): Malicious code in disturbed_snail_z3n (npm) (malicious package)
- [MAL-2025-84691](https://insights.sbomify.com/MAL-2025-84691/): Malicious code in disturbed_jellyfish_z3n (npm) (malicious package)
- [MAL-2025-84690](https://insights.sbomify.com/MAL-2025-84690/): Malicious code in distinguished_mackerel_z3n (npm) (malicious package)
- [MAL-2025-8469](https://insights.sbomify.com/MAL-2025-8469/): Malicious code in @malware-test-artsy-gault-halon-boyar/test-mlw3-artsy-gault-halon-boyar (npm) (malicious package)
- [MAL-2025-84689](https://insights.sbomify.com/MAL-2025-84689/): Malicious code in distinguished_donkey_z3n (npm) (malicious package)
- [MAL-2025-84688](https://insights.sbomify.com/MAL-2025-84688/): Malicious code in distinguished_clownfish_z3n (npm) (malicious package)
- [MAL-2025-84687](https://insights.sbomify.com/MAL-2025-84687/): Malicious code in distinctive_parakeet_z3n (npm) (malicious package)
- [MAL-2025-84686](https://insights.sbomify.com/MAL-2025-84686/): Malicious code in distinct_tuna_z3n (npm) (malicious package)
- [MAL-2025-84685](https://insights.sbomify.com/MAL-2025-84685/): Malicious code in distinct_jay_z3n (npm) (malicious package)
- [MAL-2025-84684](https://insights.sbomify.com/MAL-2025-84684/): Malicious code in distinct_goose_z3n (npm) (malicious package)
- [MAL-2025-84683](https://insights.sbomify.com/MAL-2025-84683/): Malicious code in distinct_deer_z3n (npm) (malicious package)
- [MAL-2025-84682](https://insights.sbomify.com/MAL-2025-84682/): Malicious code in disastrous_grouse_z3n (npm) (malicious package)
- [MAL-2025-84681](https://insights.sbomify.com/MAL-2025-84681/): Malicious code in disappointed_bobolink_z3n (npm) (malicious package)
- [MAL-2025-84680](https://insights.sbomify.com/MAL-2025-84680/): Malicious code in disappointed_boar_z3n (npm) (malicious package)
- [MAL-2025-8468](https://insights.sbomify.com/MAL-2025-8468/): Malicious code in @malware-test-arris-haven-nidor-prune/test-mlw3-arris-haven-nidor-prune (npm) (malicious package)
- [MAL-2025-84679](https://insights.sbomify.com/MAL-2025-84679/): Malicious code in disappointed_basilisk_z3n (npm) (malicious package)
- [MAL-2025-84678](https://insights.sbomify.com/MAL-2025-84678/): Malicious code in disabled_whale_z3n (npm) (malicious package)
- [MAL-2025-84677](https://insights.sbomify.com/MAL-2025-84677/): Malicious code in disabled_sole_z3n (npm) (malicious package)
- [MAL-2025-84676](https://insights.sbomify.com/MAL-2025-84676/): Malicious code in disabled_parrotfish_z3n (npm) (malicious package)
- [MAL-2025-84675](https://insights.sbomify.com/MAL-2025-84675/): Malicious code in disabled_herring_z3n (npm) (malicious package)
- [MAL-2025-84674](https://insights.sbomify.com/MAL-2025-84674/): Malicious code in disabled_boa_z3n (npm) (malicious package)
- [MAL-2025-84673](https://insights.sbomify.com/MAL-2025-84673/): Malicious code in dirty_kiwi_z3n (npm) (malicious package)
- [MAL-2025-84672](https://insights.sbomify.com/MAL-2025-84672/): Malicious code in dirty_flea_z3n (npm) (malicious package)
- [MAL-2025-84671](https://insights.sbomify.com/MAL-2025-84671/): Malicious code in direct_egret_z3n (npm) (malicious package)
- [MAL-2025-84670](https://insights.sbomify.com/MAL-2025-84670/): Malicious code in diplomatic_jackal_z3n (npm) (malicious package)
- [MAL-2025-8467](https://insights.sbomify.com/MAL-2025-8467/): Malicious code in @malware-test-aredd-geans-pelts-anans/test-mlw3-aredd-geans-pelts-anans (npm) (malicious package)
- [MAL-2025-84669](https://insights.sbomify.com/MAL-2025-84669/): Malicious code in diplomatic_bobcat_z3n (npm) (malicious package)
- [MAL-2025-84668](https://insights.sbomify.com/MAL-2025-84668/): Malicious code in digital_rabbit_z3n (npm) (malicious package)
- [MAL-2025-84667](https://insights.sbomify.com/MAL-2025-84667/): Malicious code in digital_elephant_z3n (npm) (malicious package)
- [MAL-2025-84666](https://insights.sbomify.com/MAL-2025-84666/): Malicious code in difficult_wallaby_z3n (npm) (malicious package)
- [MAL-2025-84665](https://insights.sbomify.com/MAL-2025-84665/): Malicious code in difficult_seahorse_z3n (npm) (malicious package)
- [MAL-2025-84664](https://insights.sbomify.com/MAL-2025-84664/): Malicious code in difficult_partridge_z3n (npm) (malicious package)
- [MAL-2025-84663](https://insights.sbomify.com/MAL-2025-84663/): Malicious code in difficult_kite_z3n (npm) (malicious package)
- [MAL-2025-84662](https://insights.sbomify.com/MAL-2025-84662/): Malicious code in different_capybara_z3n (npm) (malicious package)
- [MAL-2025-84661](https://insights.sbomify.com/MAL-2025-84661/): Malicious code in dian-wajit67-riris (npm) (malicious package)
- [MAL-2025-84660](https://insights.sbomify.com/MAL-2025-84660/): Malicious code in dian-ubi81-miaww (npm) (malicious package)
- [MAL-2025-8466](https://insights.sbomify.com/MAL-2025-8466/): Malicious code in @malware-test-apayd-juked-adays-duped/test-mlw3-apayd-juked-adays-duped (npm) (malicious package)
- [MAL-2025-84659](https://insights.sbomify.com/MAL-2025-84659/): Malicious code in dian-ubi46-miaww (npm) (malicious package)
- [MAL-2025-84658](https://insights.sbomify.com/MAL-2025-84658/): Malicious code in dian-toge93-crottsekebon (npm) (malicious package)
- [MAL-2025-84657](https://insights.sbomify.com/MAL-2025-84657/): Malicious code in dian-toge35-riris (npm) (malicious package)
- [MAL-2025-84656](https://insights.sbomify.com/MAL-2025-84656/): Malicious code in dian-toge16-miaww (npm) (malicious package)
- [MAL-2025-84655](https://insights.sbomify.com/MAL-2025-84655/): Malicious code in dian-tempe65-miaww (npm) (malicious package)
- [MAL-2025-84654](https://insights.sbomify.com/MAL-2025-84654/): Malicious code in dian-tek5-miaww (npm) (malicious package)
- [MAL-2025-84653](https://insights.sbomify.com/MAL-2025-84653/): Malicious code in dian-takokak47-riris (npm) (malicious package)
- [MAL-2025-84652](https://insights.sbomify.com/MAL-2025-84652/): Malicious code in dian-tahutek6-miaww (npm) (malicious package)
- [MAL-2025-84651](https://insights.sbomify.com/MAL-2025-84651/): Malicious code in dian-tahutek54-miaww (npm) (malicious package)
- [MAL-2025-84650](https://insights.sbomify.com/MAL-2025-84650/): Malicious code in dian-tahu89-miaww (npm) (malicious package)
- [MAL-2025-8465](https://insights.sbomify.com/MAL-2025-8465/): Malicious code in @malware-test-aorta-laded-voulu-aides/test-mlw3-aorta-laded-voulu-aides (npm) (malicious package)
- [MAL-2025-84649](https://insights.sbomify.com/MAL-2025-84649/): Malicious code in dian-sroto96-apidev (npm) (malicious package)
- [MAL-2025-84648](https://insights.sbomify.com/MAL-2025-84648/): Malicious code in dian-soto67-miaww (npm) (malicious package)
- [MAL-2025-84647](https://insights.sbomify.com/MAL-2025-84647/): Malicious code in dian-soto23-kyuki (npm) (malicious package)
- [MAL-2025-84646](https://insights.sbomify.com/MAL-2025-84646/): Malicious code in dian-soto1-riris (npm) (malicious package)
- [MAL-2025-84645](https://insights.sbomify.com/MAL-2025-84645/): Malicious code in dian-serimuka53-kyuki (npm) (malicious package)
- [MAL-2025-84644](https://insights.sbomify.com/MAL-2025-84644/): Malicious code in dian-sego43-riris (npm) (malicious package)
- [MAL-2025-84643](https://insights.sbomify.com/MAL-2025-84643/): Malicious code in dian-sate70-miaww (npm) (malicious package)
- [MAL-2025-84642](https://insights.sbomify.com/MAL-2025-84642/): Malicious code in dian-sasag16-miaww (npm) (malicious package)
- [MAL-2025-84641](https://insights.sbomify.com/MAL-2025-84641/): Malicious code in dian-sambel4-miaww (npm) (malicious package)
- [MAL-2025-84640](https://insights.sbomify.com/MAL-2025-84640/): Malicious code in dian-sambel39-riris (npm) (malicious package)
- [MAL-2025-8464](https://insights.sbomify.com/MAL-2025-8464/): Malicious code in @malware-test-anvil-myths-copse-hying/test-mlw3-anvil-myths-copse-hying (npm) (malicious package)
- [MAL-2025-84639](https://insights.sbomify.com/MAL-2025-84639/): Malicious code in dian-saguer69-riris (npm) (malicious package)
- [MAL-2025-84638](https://insights.sbomify.com/MAL-2025-84638/): Malicious code in dian-ruwet89-riris (npm) (malicious package)
- [MAL-2025-84637](https://insights.sbomify.com/MAL-2025-84637/): Malicious code in dian-ruwet22-miaww (npm) (malicious package)
- [MAL-2025-84636](https://insights.sbomify.com/MAL-2025-84636/): Malicious code in dian-ruwet19-crottsekebon (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/174/