# Vulnerabilities published in 2025


- [MAL-2025-78926](https://insights.sbomify.com/MAL-2025-78926/): Malicious code in indah-gepuk31-sukiwir (npm) (malicious package)
- [MAL-2025-78925](https://insights.sbomify.com/MAL-2025-78925/): Malicious code in indah-gaplek62-sukiwir (npm) (malicious package)
- [MAL-2025-78924](https://insights.sbomify.com/MAL-2025-78924/): Malicious code in indah-enting83-sukiwir (npm) (malicious package)
- [MAL-2025-78923](https://insights.sbomify.com/MAL-2025-78923/): Malicious code in indah-dradag51-sukiwir (npm) (malicious package)
- [MAL-2025-78922](https://insights.sbomify.com/MAL-2025-78922/): Malicious code in indah-bubursumsum82-sukiwir (npm) (malicious package)
- [MAL-2025-78921](https://insights.sbomify.com/MAL-2025-78921/): Malicious code in indah-bubur84-sukiwir (npm) (malicious package)
- [MAL-2025-78920](https://insights.sbomify.com/MAL-2025-78920/): Malicious code in increasing_wasp_z3n (npm) (malicious package)
- [MAL-2025-7892](https://insights.sbomify.com/MAL-2025-7892/): Malicious code in @erboladaiteas/mollitia-atque-magni (npm) (malicious package)
- [MAL-2025-78919](https://insights.sbomify.com/MAL-2025-78919/): Malicious code in increased_seahorse_z3n (npm) (malicious package)
- [MAL-2025-78918](https://insights.sbomify.com/MAL-2025-78918/): Malicious code in increased_cat_z3n (npm) (malicious package)
- [MAL-2025-78917](https://insights.sbomify.com/MAL-2025-78917/): Malicious code in inclined_swordtail_z3n (npm) (malicious package)
- [MAL-2025-78916](https://insights.sbomify.com/MAL-2025-78916/): Malicious code in inappropriate_dolphin_z3n (npm) (malicious package)
- [MAL-2025-78915](https://insights.sbomify.com/MAL-2025-78915/): Malicious code in inadequate_zebra_z3n (npm) (malicious package)
- [MAL-2025-78914](https://insights.sbomify.com/MAL-2025-78914/): Malicious code in inadequate_quail_z3n (npm) (malicious package)
- [MAL-2025-78913](https://insights.sbomify.com/MAL-2025-78913/): Malicious code in improved_whale_z3n (npm) (malicious package)
- [MAL-2025-78912](https://insights.sbomify.com/MAL-2025-78912/): Malicious code in improved_giraffe_z3n (npm) (malicious package)
- [MAL-2025-78911](https://insights.sbomify.com/MAL-2025-78911/): Malicious code in improved_gayal_z3n (npm) (malicious package)
- [MAL-2025-78910](https://insights.sbomify.com/MAL-2025-78910/): Malicious code in impressive_shrew_z3n (npm) (malicious package)
- [MAL-2025-7891](https://insights.sbomify.com/MAL-2025-7891/): Malicious code in @erboladaiteas/laudantium-exercitationem-cumque (npm) (malicious package)
- [MAL-2025-78909](https://insights.sbomify.com/MAL-2025-78909/): Malicious code in impressed_muskox_z3n (npm) (malicious package)
- [MAL-2025-78908](https://insights.sbomify.com/MAL-2025-78908/): Malicious code in important_turkey_z3n (npm) (malicious package)
- [MAL-2025-78907](https://insights.sbomify.com/MAL-2025-78907/): Malicious code in important_swallow_z3n (npm) (malicious package)
- [MAL-2025-78906](https://insights.sbomify.com/MAL-2025-78906/): Malicious code in important_crocodile_z3n (npm) (malicious package)
- [MAL-2025-78905](https://insights.sbomify.com/MAL-2025-78905/): Malicious code in implicit_mouse_z3n (npm) (malicious package)
- [MAL-2025-78904](https://insights.sbomify.com/MAL-2025-78904/): Malicious code in immense_yak_z3n (npm) (malicious package)
- [MAL-2025-78903](https://insights.sbomify.com/MAL-2025-78903/): Malicious code in immense_wasp_z3n (npm) (malicious package)
- [MAL-2025-78902](https://insights.sbomify.com/MAL-2025-78902/): Malicious code in imaginative_mongoose_z3n (npm) (malicious package)
- [MAL-2025-78901](https://insights.sbomify.com/MAL-2025-78901/): Malicious code in illegal_swordtail_z3n (npm) (malicious package)
- [MAL-2025-78900](https://insights.sbomify.com/MAL-2025-78900/): Malicious code in illegal_squid_z3n (npm) (malicious package)
- [MAL-2025-7890](https://insights.sbomify.com/MAL-2025-7890/): Malicious code in @erboladaiteas/itaque-quidem-inventore (npm) (malicious package)
- [MAL-2025-789](https://insights.sbomify.com/MAL-2025-789/): Malicious code in aaaa89852889 (npm) (malicious package)
- [MAL-2025-78899](https://insights.sbomify.com/MAL-2025-78899/): Malicious code in illegal_sparrow_z3n (npm) (malicious package)
- [MAL-2025-78898](https://insights.sbomify.com/MAL-2025-78898/): Malicious code in ideological_marten_z3n (npm) (malicious package)
- [MAL-2025-78897](https://insights.sbomify.com/MAL-2025-78897/): Malicious code in ideological_koi_z3n (npm) (malicious package)
- [MAL-2025-78896](https://insights.sbomify.com/MAL-2025-78896/): Malicious code in identical_mouse_z3n (npm) (malicious package)
- [MAL-2025-78895](https://insights.sbomify.com/MAL-2025-78895/): Malicious code in identical_loon_z3n (npm) (malicious package)
- [MAL-2025-78894](https://insights.sbomify.com/MAL-2025-78894/): Malicious code in ida-ubi13-sukiwir (npm) (malicious package)
- [MAL-2025-78893](https://insights.sbomify.com/MAL-2025-78893/): Malicious code in ida-tek81-sukiwir (npm) (malicious package)
- [MAL-2025-78892](https://insights.sbomify.com/MAL-2025-78892/): Malicious code in ida-takokak33-sukiwir (npm) (malicious package)
- [MAL-2025-78891](https://insights.sbomify.com/MAL-2025-78891/): Malicious code in ida-taiwan88-sukiwir (npm) (malicious package)
- [MAL-2025-78890](https://insights.sbomify.com/MAL-2025-78890/): Malicious code in ida-taiwan37-sukiwir (npm) (malicious package)
- [MAL-2025-7889](https://insights.sbomify.com/MAL-2025-7889/): Malicious code in @erboladaiteas/ipsa-officiis-eaque-provident (npm) (malicious package)
- [MAL-2025-78889](https://insights.sbomify.com/MAL-2025-78889/): Malicious code in ida-tahu23-sukiwir (npm) (malicious package)
- [MAL-2025-78888](https://insights.sbomify.com/MAL-2025-78888/): Malicious code in ida-sroto66-sukiwir (npm) (malicious package)
- [MAL-2025-78887](https://insights.sbomify.com/MAL-2025-78887/): Malicious code in ida-sroto49-sukiwir (npm) (malicious package)
- [MAL-2025-78886](https://insights.sbomify.com/MAL-2025-78886/): Malicious code in ida-soto91-sukiwir (npm) (malicious package)
- [MAL-2025-78885](https://insights.sbomify.com/MAL-2025-78885/): Malicious code in ida-soto90-sukiwir (npm) (malicious package)
- [MAL-2025-78884](https://insights.sbomify.com/MAL-2025-78884/): Malicious code in ida-soto76-sukiwir (npm) (malicious package)
- [MAL-2025-78883](https://insights.sbomify.com/MAL-2025-78883/): Malicious code in ida-soto64-sukiwir (npm) (malicious package)
- [MAL-2025-78882](https://insights.sbomify.com/MAL-2025-78882/): Malicious code in ida-serabi47-sukiwir (npm) (malicious package)
- [MAL-2025-78881](https://insights.sbomify.com/MAL-2025-78881/): Malicious code in ida-sasag25-sukiwir (npm) (malicious package)
- [MAL-2025-78880](https://insights.sbomify.com/MAL-2025-78880/): Malicious code in ida-ruwet86-sukiwir (npm) (malicious package)
- [MAL-2025-7888](https://insights.sbomify.com/MAL-2025-7888/): Malicious code in @erboladaiteas/in-cum-autem-corporis (npm) (malicious package)
- [MAL-2025-78879](https://insights.sbomify.com/MAL-2025-78879/): Malicious code in ida-rujak79-sukiwir (npm) (malicious package)
- [MAL-2025-78878](https://insights.sbomify.com/MAL-2025-78878/): Malicious code in ida-rendang4-sukiwir (npm) (malicious package)
- [MAL-2025-78877](https://insights.sbomify.com/MAL-2025-78877/): Malicious code in ida-rawon40-sukiwir (npm) (malicious package)
- [MAL-2025-78876](https://insights.sbomify.com/MAL-2025-78876/): Malicious code in ida-rangi31-sukiwir (npm) (malicious package)
- [MAL-2025-78875](https://insights.sbomify.com/MAL-2025-78875/): Malicious code in ida-ragi98-sukiwir (npm) (malicious package)
- [MAL-2025-78874](https://insights.sbomify.com/MAL-2025-78874/): Malicious code in ida-oblok3-sukiwir (npm) (malicious package)
- [MAL-2025-78873](https://insights.sbomify.com/MAL-2025-78873/): Malicious code in ida-nasiuduk4-sukiwir (npm) (malicious package)
- [MAL-2025-78872](https://insights.sbomify.com/MAL-2025-78872/): Malicious code in ida-nasisayur69-sukiwir (npm) (malicious package)
- [MAL-2025-78871](https://insights.sbomify.com/MAL-2025-78871/): Malicious code in ida-moci84-sukiwir (npm) (malicious package)
- [MAL-2025-78870](https://insights.sbomify.com/MAL-2025-78870/): Malicious code in ida-miemee22-sukiwir (npm) (malicious package)
- [MAL-2025-7887](https://insights.sbomify.com/MAL-2025-7887/): Malicious code in @erboladaiteas/illum-odio-impedit (npm) (malicious package)
- [MAL-2025-78869](https://insights.sbomify.com/MAL-2025-78869/): Malicious code in ida-mieayam37-sukiwir (npm) (malicious package)
- [MAL-2025-78868](https://insights.sbomify.com/MAL-2025-78868/): Malicious code in ida-mie66-sukiwir (npm) (malicious package)
- [MAL-2025-78867](https://insights.sbomify.com/MAL-2025-78867/): Malicious code in ida-menjes50-sukiwir (npm) (malicious package)
- [MAL-2025-78866](https://insights.sbomify.com/MAL-2025-78866/): Malicious code in ida-mendut4-sukiwir (npm) (malicious package)
- [MAL-2025-78865](https://insights.sbomify.com/MAL-2025-78865/): Malicious code in ida-martabak64-sukiwir (npm) (malicious package)
- [MAL-2025-78864](https://insights.sbomify.com/MAL-2025-78864/): Malicious code in ida-lupis84-sukiwir (npm) (malicious package)
- [MAL-2025-78863](https://insights.sbomify.com/MAL-2025-78863/): Malicious code in ida-lontong24-sukiwir (npm) (malicious package)
- [MAL-2025-78862](https://insights.sbomify.com/MAL-2025-78862/): Malicious code in ida-lepet22-sukiwir (npm) (malicious package)
- [MAL-2025-78861](https://insights.sbomify.com/MAL-2025-78861/): Malicious code in ida-lengko60-sukiwir (npm) (malicious package)
- [MAL-2025-78860](https://insights.sbomify.com/MAL-2025-78860/): Malicious code in ida-lapis45-sukiwir (npm) (malicious package)
- [MAL-2025-7886](https://insights.sbomify.com/MAL-2025-7886/): Malicious code in @erboladaiteas/id-quas-adipisci-velit (npm) (malicious package)
- [MAL-2025-78859](https://insights.sbomify.com/MAL-2025-78859/): Malicious code in ida-lapis26-sukiwir (npm) (malicious package)
- [MAL-2025-78858](https://insights.sbomify.com/MAL-2025-78858/): Malicious code in ida-kupat8-sukiwir (npm) (malicious package)
- [MAL-2025-78857](https://insights.sbomify.com/MAL-2025-78857/): Malicious code in ida-kue87-sukiwir (npm) (malicious package)
- [MAL-2025-78856](https://insights.sbomify.com/MAL-2025-78856/): Malicious code in ida-kue17-sukiwir (npm) (malicious package)
- [MAL-2025-78855](https://insights.sbomify.com/MAL-2025-78855/): Malicious code in ida-kripik3-sukiwir (npm) (malicious package)
- [MAL-2025-78854](https://insights.sbomify.com/MAL-2025-78854/): Malicious code in ida-kepok28-sukiwir (npm) (malicious package)
- [MAL-2025-78853](https://insights.sbomify.com/MAL-2025-78853/): Malicious code in ida-kembang48-sukiwir (npm) (malicious package)
- [MAL-2025-78852](https://insights.sbomify.com/MAL-2025-78852/): Malicious code in ida-getuk71-sukiwir (npm) (malicious package)
- [MAL-2025-78851](https://insights.sbomify.com/MAL-2025-78851/): Malicious code in ida-getas52-sukiwir (npm) (malicious package)
- [MAL-2025-78850](https://insights.sbomify.com/MAL-2025-78850/): Malicious code in ida-gepuk2-sukiwir (npm) (malicious package)
- [MAL-2025-7885](https://insights.sbomify.com/MAL-2025-7885/): Malicious code in @erboladaiteas/hic-unde (npm) (malicious package)
- [MAL-2025-78849](https://insights.sbomify.com/MAL-2025-78849/): Malicious code in ida-gembus51-sukiwir (npm) (malicious package)
- [MAL-2025-78848](https://insights.sbomify.com/MAL-2025-78848/): Malicious code in ida-gembus28-sukiwir (npm) (malicious package)
- [MAL-2025-78847](https://insights.sbomify.com/MAL-2025-78847/): Malicious code in ida-empal23-sukiwir (npm) (malicious package)
- [MAL-2025-78846](https://insights.sbomify.com/MAL-2025-78846/): Malicious code in ida-dradag80-sukiwir (npm) (malicious package)
- [MAL-2025-78845](https://insights.sbomify.com/MAL-2025-78845/): Malicious code in ida-dodol88-sukiwir (npm) (malicious package)
- [MAL-2025-78844](https://insights.sbomify.com/MAL-2025-78844/): Malicious code in ida-dodol83-sukiwir (npm) (malicious package)
- [MAL-2025-78843](https://insights.sbomify.com/MAL-2025-78843/): Malicious code in ida-brongkos79-sukiwir (npm) (malicious package)
- [MAL-2025-78842](https://insights.sbomify.com/MAL-2025-78842/): Malicious code in icy_marsupial_z3n (npm) (malicious package)
- [MAL-2025-78841](https://insights.sbomify.com/MAL-2025-78841/): Malicious code in husky_marmoset_z3n (npm) (malicious package)
- [MAL-2025-78840](https://insights.sbomify.com/MAL-2025-78840/): Malicious code in husky_limpet_z3n (npm) (malicious package)
- [MAL-2025-7884](https://insights.sbomify.com/MAL-2025-7884/): Malicious code in @erboladaiteas/harum-similique (npm) (malicious package)
- [MAL-2025-78839](https://insights.sbomify.com/MAL-2025-78839/): Malicious code in husky_chinchilla_z3n (npm) (malicious package)
- [MAL-2025-78838](https://insights.sbomify.com/MAL-2025-78838/): Malicious code in hushed_junglefowl_z3n (npm) (malicious package)
- [MAL-2025-78837](https://insights.sbomify.com/MAL-2025-78837/): Malicious code in hurt_swan_z3n (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/238/