# Vulnerabilities published in 2025 - [MAL-2025-8409](https://insights.sbomify.com/MAL-2025-8409/): Malicious code in @leaffm/leafconnect-b2b-simon-sinek (npm) (malicious package) - [MAL-2025-84089](https://insights.sbomify.com/MAL-2025-84089/): Malicious code in citra-kembang3-riris (npm) (malicious package) - [MAL-2025-84088](https://insights.sbomify.com/MAL-2025-84088/): Malicious code in citra-kembang1-miaww (npm) (malicious package) - [MAL-2025-84087](https://insights.sbomify.com/MAL-2025-84087/): Malicious code in citra-kacang33-miaww (npm) (malicious package) - [MAL-2025-84086](https://insights.sbomify.com/MAL-2025-84086/): Malicious code in citra-jengkol74-miaww (npm) (malicious package) - [MAL-2025-84085](https://insights.sbomify.com/MAL-2025-84085/): Malicious code in citra-jengkol69-riris (npm) (malicious package) - [MAL-2025-84084](https://insights.sbomify.com/MAL-2025-84084/): Malicious code in citra-jengkol11-miaww (npm) (malicious package) - [MAL-2025-84083](https://insights.sbomify.com/MAL-2025-84083/): Malicious code in citra-ikan8-miaww (npm) (malicious package) - [MAL-2025-84082](https://insights.sbomify.com/MAL-2025-84082/): Malicious code in citra-ikan35-riris (npm) (malicious package) - [MAL-2025-84081](https://insights.sbomify.com/MAL-2025-84081/): Malicious code in citra-ikan11-crottsekebon (npm) (malicious package) - [MAL-2025-84080](https://insights.sbomify.com/MAL-2025-84080/): Malicious code in citra-gulai35-kyuki (npm) (malicious package) - [MAL-2025-8408](https://insights.sbomify.com/MAL-2025-8408/): Malicious code in @leaffm/leaf-connect-undefined (npm) (malicious package) - [MAL-2025-84079](https://insights.sbomify.com/MAL-2025-84079/): Malicious code in citra-gudeg2-miaww (npm) (malicious package) - [MAL-2025-84078](https://insights.sbomify.com/MAL-2025-84078/): Malicious code in citra-gorengan94-apidev (npm) (malicious package) - [MAL-2025-84077](https://insights.sbomify.com/MAL-2025-84077/): Malicious code in citra-getuk85-miaww (npm) (malicious package) - [MAL-2025-84076](https://insights.sbomify.com/MAL-2025-84076/): Malicious code in citra-gado-gado16-kyuki (npm) (malicious package) - [MAL-2025-84075](https://insights.sbomify.com/MAL-2025-84075/): Malicious code in citra-esdoger19-riris (npm) (malicious package) - [MAL-2025-84074](https://insights.sbomify.com/MAL-2025-84074/): Malicious code in citra-empal34-riris (npm) (malicious package) - [MAL-2025-84073](https://insights.sbomify.com/MAL-2025-84073/): Malicious code in citra-dradag45-riris (npm) (malicious package) - [MAL-2025-84072](https://insights.sbomify.com/MAL-2025-84072/): Malicious code in citra-donat62-miaww (npm) (malicious package) - [MAL-2025-84071](https://insights.sbomify.com/MAL-2025-84071/): Malicious code in citra-bubursumsum97-miaww (npm) (malicious package) - [MAL-2025-84070](https://insights.sbomify.com/MAL-2025-84070/): Malicious code in citra-bubursumsum32-riris (npm) (malicious package) - [MAL-2025-8407](https://insights.sbomify.com/MAL-2025-8407/): Malicious code in @leaffm/leaf-connect-thrudark (npm) (malicious package) - [MAL-2025-84069](https://insights.sbomify.com/MAL-2025-84069/): Malicious code in citra-botok26-apidev (npm) (malicious package) - [MAL-2025-84068](https://insights.sbomify.com/MAL-2025-84068/): Malicious code in citra-asinan57-riris (npm) (malicious package) - [MAL-2025-84067](https://insights.sbomify.com/MAL-2025-84067/): Malicious code in citra-asinan14-miaww (npm) (malicious package) - [MAL-2025-84066](https://insights.sbomify.com/MAL-2025-84066/): Malicious code in circular_tick_z3n (npm) (malicious package) - [MAL-2025-84065](https://insights.sbomify.com/MAL-2025-84065/): Malicious code in circular_shrimp_z3n (npm) (malicious package) - [MAL-2025-84064](https://insights.sbomify.com/MAL-2025-84064/): Malicious code in circular_octopus_z3n (npm) (malicious package) - [MAL-2025-84063](https://insights.sbomify.com/MAL-2025-84063/): Malicious code in circular_damselfly_z3n (npm) (malicious package) - [MAL-2025-84062](https://insights.sbomify.com/MAL-2025-84062/): Malicious code in cindy-wajit40-miaww (npm) (malicious package) - [MAL-2025-84061](https://insights.sbomify.com/MAL-2025-84061/): Malicious code in cindy-wajit15-riris (npm) (malicious package) - [MAL-2025-84060](https://insights.sbomify.com/MAL-2025-84060/): Malicious code in cindy-tongseng42-riris (npm) (malicious package) - [MAL-2025-8406](https://insights.sbomify.com/MAL-2025-8406/): Malicious code in @leaffm/leaf-connect-the-little-green-sheep (npm) (malicious package) - [MAL-2025-84059](https://insights.sbomify.com/MAL-2025-84059/): Malicious code in cindy-tongseng20-riris (npm) (malicious package) - [MAL-2025-84058](https://insights.sbomify.com/MAL-2025-84058/): Malicious code in cindy-tomat60-wekto (npm) (malicious package) - [MAL-2025-84057](https://insights.sbomify.com/MAL-2025-84057/): Malicious code in cindy-tiwul84-riris (npm) (malicious package) - [MAL-2025-84056](https://insights.sbomify.com/MAL-2025-84056/): Malicious code in cindy-takokak47-riris (npm) (malicious package) - [MAL-2025-84055](https://insights.sbomify.com/MAL-2025-84055/): Malicious code in cindy-semur81-riris (npm) (malicious package) - [MAL-2025-84054](https://insights.sbomify.com/MAL-2025-84054/): Malicious code in cindy-semur56-miaww (npm) (malicious package) - [MAL-2025-84053](https://insights.sbomify.com/MAL-2025-84053/): Malicious code in cindy-semur38-riris (npm) (malicious package) - [MAL-2025-84052](https://insights.sbomify.com/MAL-2025-84052/): Malicious code in cindy-sego15-miaww (npm) (malicious package) - [MAL-2025-84051](https://insights.sbomify.com/MAL-2025-84051/): Malicious code in cindy-sego10-riris (npm) (malicious package) - [MAL-2025-84050](https://insights.sbomify.com/MAL-2025-84050/): Malicious code in cindy-sate85-miaww (npm) (malicious package) - [MAL-2025-8405](https://insights.sbomify.com/MAL-2025-8405/): Malicious code in @leaffm/leaf-connect-testingthis134 (npm) (malicious package) - [MAL-2025-84049](https://insights.sbomify.com/MAL-2025-84049/): Malicious code in cindy-sasag12-miaww (npm) (malicious package) - [MAL-2025-84048](https://insights.sbomify.com/MAL-2025-84048/): Malicious code in cindy-sambel50-miaww (npm) (malicious package) - [MAL-2025-84047](https://insights.sbomify.com/MAL-2025-84047/): Malicious code in cindy-sambel10-riris (npm) (malicious package) - [MAL-2025-84046](https://insights.sbomify.com/MAL-2025-84046/): Malicious code in cindy-sambalado39-miaww (npm) (malicious package) - [MAL-2025-84045](https://insights.sbomify.com/MAL-2025-84045/): Malicious code in cindy-sambalado12-riris (npm) (malicious package) - [MAL-2025-84044](https://insights.sbomify.com/MAL-2025-84044/): Malicious code in cindy-rojak12-miaww (npm) (malicious package) - [MAL-2025-84043](https://insights.sbomify.com/MAL-2025-84043/): Malicious code in cindy-rendang79-miaww (npm) (malicious package) - [MAL-2025-84042](https://insights.sbomify.com/MAL-2025-84042/): Malicious code in cindy-rangginang28-miaww (npm) (malicious package) - [MAL-2025-84041](https://insights.sbomify.com/MAL-2025-84041/): Malicious code in cindy-pecel61-miaww (npm) (malicious package) - [MAL-2025-84040](https://insights.sbomify.com/MAL-2025-84040/): Malicious code in cindy-ongol-ongol38-riris (npm) (malicious package) - [MAL-2025-8404](https://insights.sbomify.com/MAL-2025-8404/): Malicious code in @leaffm/leaf-connect-testing12345678 (npm) (malicious package) - [MAL-2025-84039](https://insights.sbomify.com/MAL-2025-84039/): Malicious code in cindy-oncom84-miaww (npm) (malicious package) - [MAL-2025-84038](https://insights.sbomify.com/MAL-2025-84038/): Malicious code in cindy-oncom76-miaww (npm) (malicious package) - [MAL-2025-84037](https://insights.sbomify.com/MAL-2025-84037/): Malicious code in cindy-nasipecel83-sluey (npm) (malicious package) - [MAL-2025-84036](https://insights.sbomify.com/MAL-2025-84036/): Malicious code in cindy-nasi91-miaww (npm) (malicious package) - [MAL-2025-84035](https://insights.sbomify.com/MAL-2025-84035/): Malicious code in cindy-naget67-miaww (npm) (malicious package) - [MAL-2025-84034](https://insights.sbomify.com/MAL-2025-84034/): Malicious code in cindy-miebogor93-riris (npm) (malicious package) - [MAL-2025-84033](https://insights.sbomify.com/MAL-2025-84033/): Malicious code in cindy-mieaceh21-miaww (npm) (malicious package) - [MAL-2025-84032](https://insights.sbomify.com/MAL-2025-84032/): Malicious code in cindy-mie60-miaww (npm) (malicious package) - [MAL-2025-84031](https://insights.sbomify.com/MAL-2025-84031/): Malicious code in cindy-menjes42-miaww (npm) (malicious package) - [MAL-2025-84030](https://insights.sbomify.com/MAL-2025-84030/): Malicious code in cindy-mendut28-crottsekebon (npm) (malicious package) - [MAL-2025-8403](https://insights.sbomify.com/MAL-2025-8403/): Malicious code in @leaffm/leaf-connect-test (npm) (malicious package) - [MAL-2025-84029](https://insights.sbomify.com/MAL-2025-84029/): Malicious code in cindy-martabak41-riris (npm) (malicious package) - [MAL-2025-84028](https://insights.sbomify.com/MAL-2025-84028/): Malicious code in cindy-martabak40-miaww (npm) (malicious package) - [MAL-2025-84027](https://insights.sbomify.com/MAL-2025-84027/): Malicious code in cindy-mangga8-crottsekebon (npm) (malicious package) - [MAL-2025-84026](https://insights.sbomify.com/MAL-2025-84026/): Malicious code in cindy-mangga27-apidev (npm) (malicious package) - [MAL-2025-84025](https://insights.sbomify.com/MAL-2025-84025/): Malicious code in cindy-lutis6-riris (npm) (malicious package) - [MAL-2025-84024](https://insights.sbomify.com/MAL-2025-84024/): Malicious code in cindy-lupis55-miaww (npm) (malicious package) - [MAL-2025-84023](https://insights.sbomify.com/MAL-2025-84023/): Malicious code in cindy-lumpur90-riris (npm) (malicious package) - [MAL-2025-84022](https://insights.sbomify.com/MAL-2025-84022/): Malicious code in cindy-lumpur34-miaww (npm) (malicious package) - [MAL-2025-84021](https://insights.sbomify.com/MAL-2025-84021/): Malicious code in cindy-lontong45-riris (npm) (malicious package) - [MAL-2025-84020](https://insights.sbomify.com/MAL-2025-84020/): Malicious code in cindy-lepet8-riris (npm) (malicious package) - [MAL-2025-8402](https://insights.sbomify.com/MAL-2025-8402/): Malicious code in @leaffm/leaf-connect-stubble-and-co (npm) (malicious package) - [MAL-2025-84019](https://insights.sbomify.com/MAL-2025-84019/): Malicious code in cindy-lepet26-riris (npm) (malicious package) - [MAL-2025-84018](https://insights.sbomify.com/MAL-2025-84018/): Malicious code in cindy-lengko44-riris (npm) (malicious package) - [MAL-2025-84017](https://insights.sbomify.com/MAL-2025-84017/): Malicious code in cindy-lapis48-riris (npm) (malicious package) - [MAL-2025-84016](https://insights.sbomify.com/MAL-2025-84016/): Malicious code in cindy-lapis37-miaww (npm) (malicious package) - [MAL-2025-84015](https://insights.sbomify.com/MAL-2025-84015/): Malicious code in cindy-lapis33-riris (npm) (malicious package) - [MAL-2025-84014](https://insights.sbomify.com/MAL-2025-84014/): Malicious code in cindy-kue97-riris (npm) (malicious package) - [MAL-2025-84013](https://insights.sbomify.com/MAL-2025-84013/): Malicious code in cindy-kue6-riris (npm) (malicious package) - [MAL-2025-84012](https://insights.sbomify.com/MAL-2025-84012/): Malicious code in cindy-kue30-riris (npm) (malicious package) - [MAL-2025-84011](https://insights.sbomify.com/MAL-2025-84011/): Malicious code in cindy-kue16-miaww (npm) (malicious package) - [MAL-2025-84010](https://insights.sbomify.com/MAL-2025-84010/): Malicious code in cindy-kolak68-miaww (npm) (malicious package) - [MAL-2025-8401](https://insights.sbomify.com/MAL-2025-8401/): Malicious code in @leaffm/leaf-connect-snuz (npm) (malicious package) - [MAL-2025-84009](https://insights.sbomify.com/MAL-2025-84009/): Malicious code in cindy-klentik86-miaww (npm) (malicious package) - [MAL-2025-84008](https://insights.sbomify.com/MAL-2025-84008/): Malicious code in cindy-klanting24-miaww (npm) (malicious package) - [MAL-2025-84007](https://insights.sbomify.com/MAL-2025-84007/): Malicious code in cindy-keraktelor23-miaww (npm) (malicious package) - [MAL-2025-84006](https://insights.sbomify.com/MAL-2025-84006/): Malicious code in cindy-kemplang99-riris (npm) (malicious package) - [MAL-2025-84005](https://insights.sbomify.com/MAL-2025-84005/): Malicious code in cindy-kembang61-miaww (npm) (malicious package) - [MAL-2025-84004](https://insights.sbomify.com/MAL-2025-84004/): Malicious code in cindy-kacang33-miaww (npm) (malicious package) - [MAL-2025-84003](https://insights.sbomify.com/MAL-2025-84003/): Malicious code in cindy-jamblang51-miaww (npm) (malicious package) - [MAL-2025-84002](https://insights.sbomify.com/MAL-2025-84002/): Malicious code in cindy-ikan40-miaww (npm) (malicious package) - [MAL-2025-84001](https://insights.sbomify.com/MAL-2025-84001/): Malicious code in cindy-ikan26-riris (npm) (malicious package) - [MAL-2025-84000](https://insights.sbomify.com/MAL-2025-84000/): Malicious code in cindy-gudeg94-miaww (npm) (malicious package) - [MAL-2025-8400](https://insights.sbomify.com/MAL-2025-8400/): Malicious code in @leaffm/leaf-connect-ringtons (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/181/