# Vulnerabilities published in 2025


- [MAL-2025-97940](https://insights.sbomify.com/MAL-2025-97940/): Malicious code in irma-tahu55-pore (npm) (malicious package)
- [MAL-2025-9794](https://insights.sbomify.com/MAL-2025-9794/): Malicious code in @zalastax/nolb-_azt (npm) (malicious package)
- [MAL-2025-97939](https://insights.sbomify.com/MAL-2025-97939/): Malicious code in irma-soto90-tititugel (npm) (malicious package)
- [MAL-2025-97938](https://insights.sbomify.com/MAL-2025-97938/): Malicious code in irma-sate46-puyeng (npm) (malicious package)
- [MAL-2025-97937](https://insights.sbomify.com/MAL-2025-97937/): Malicious code in irma-ronde56-tititugel (npm) (malicious package)
- [MAL-2025-97936](https://insights.sbomify.com/MAL-2025-97936/): Malicious code in irma-rendang56-pore (npm) (malicious package)
- [MAL-2025-97935](https://insights.sbomify.com/MAL-2025-97935/): Malicious code in irma-pisang10-tititugel (npm) (malicious package)
- [MAL-2025-97934](https://insights.sbomify.com/MAL-2025-97934/): Malicious code in irma-lapis30-tititugel (npm) (malicious package)
- [MAL-2025-97933](https://insights.sbomify.com/MAL-2025-97933/): Malicious code in irma-dodol78-riris (npm) (malicious package)
- [MAL-2025-97932](https://insights.sbomify.com/MAL-2025-97932/): Malicious code in irma-botok40-pore (npm) (malicious package)
- [MAL-2025-97931](https://insights.sbomify.com/MAL-2025-97931/): Malicious code in indah-serabi70-tititugel (npm) (malicious package)
- [MAL-2025-97930](https://insights.sbomify.com/MAL-2025-97930/): Malicious code in indah-semur31-pore (npm) (malicious package)
- [MAL-2025-9793](https://insights.sbomify.com/MAL-2025-9793/): Malicious code in @zalastax/nolb-_azs (npm) (malicious package)
- [MAL-2025-97929](https://insights.sbomify.com/MAL-2025-97929/): Malicious code in indah-sambel24-tititugel (npm) (malicious package)
- [MAL-2025-97928](https://insights.sbomify.com/MAL-2025-97928/): Malicious code in indah-rangi8-pore (npm) (malicious package)
- [MAL-2025-97927](https://insights.sbomify.com/MAL-2025-97927/): Malicious code in indah-rangginang67-pore (npm) (malicious package)
- [MAL-2025-97926](https://insights.sbomify.com/MAL-2025-97926/): Malicious code in indah-nasisayur14-tititugel (npm) (malicious package)
- [MAL-2025-97925](https://insights.sbomify.com/MAL-2025-97925/): Malicious code in indah-miemee15-pore (npm) (malicious package)
- [MAL-2025-97924](https://insights.sbomify.com/MAL-2025-97924/): Malicious code in indah-mieaceh22-tititugel (npm) (malicious package)
- [MAL-2025-97923](https://insights.sbomify.com/MAL-2025-97923/): Malicious code in indah-gudeg4-tititugel (npm) (malicious package)
- [MAL-2025-97922](https://insights.sbomify.com/MAL-2025-97922/): Malicious code in indah-gembus4-pore (npm) (malicious package)
- [MAL-2025-97921](https://insights.sbomify.com/MAL-2025-97921/): Malicious code in indah-gado-gado9-pore (npm) (malicious package)
- [MAL-2025-97920](https://insights.sbomify.com/MAL-2025-97920/): Malicious code in indah-empal18-tititugel (npm) (malicious package)
- [MAL-2025-9792](https://insights.sbomify.com/MAL-2025-9792/): Malicious code in @zalastax/nolb-_aws-e (npm) (malicious package)
- [MAL-2025-97919](https://insights.sbomify.com/MAL-2025-97919/): Malicious code in inc_magenta_shrew-47-tisubasah (npm) (malicious package)
- [MAL-2025-97918](https://insights.sbomify.com/MAL-2025-97918/): Malicious code in ida-tempe4-pore (npm) (malicious package)
- [MAL-2025-97917](https://insights.sbomify.com/MAL-2025-97917/): Malicious code in ida-saguer75-pore (npm) (malicious package)
- [MAL-2025-97916](https://insights.sbomify.com/MAL-2025-97916/): Malicious code in ida-rangi91-tititugel (npm) (malicious package)
- [MAL-2025-97915](https://insights.sbomify.com/MAL-2025-97915/): Malicious code in ida-menjes49-tititugel (npm) (malicious package)
- [MAL-2025-97914](https://insights.sbomify.com/MAL-2025-97914/): Malicious code in ida-kue35-pore (npm) (malicious package)
- [MAL-2025-97913](https://insights.sbomify.com/MAL-2025-97913/): Malicious code in ida-kemplang73-tititugel (npm) (malicious package)
- [MAL-2025-97912](https://insights.sbomify.com/MAL-2025-97912/): Malicious code in ida-gulai41-tititugel (npm) (malicious package)
- [MAL-2025-97911](https://insights.sbomify.com/MAL-2025-97911/): Malicious code in ida-gembus57-tititugel (npm) (malicious package)
- [MAL-2025-97910](https://insights.sbomify.com/MAL-2025-97910/): Malicious code in ida-gado-gado10-tititugel (npm) (malicious package)
- [MAL-2025-9791](https://insights.sbomify.com/MAL-2025-9791/): Malicious code in @zalastax/nolb-_aws-c (npm) (malicious package)
- [MAL-2025-97909](https://insights.sbomify.com/MAL-2025-97909/): Malicious code in huhu-devapp (npm) (malicious package)
- [MAL-2025-97908](https://insights.sbomify.com/MAL-2025-97908/): Malicious code in hoverfly_orange-43-tisubasah (npm) (malicious package)
- [MAL-2025-97907](https://insights.sbomify.com/MAL-2025-97907/): Malicious code in hoverfly_beige-39-tisubasah (npm) (malicious package)
- [MAL-2025-97906](https://insights.sbomify.com/MAL-2025-97906/): Malicious code in horse_tomato-67 (npm) (malicious package)
- [MAL-2025-97905](https://insights.sbomify.com/MAL-2025-97905/): Malicious code in hendra-tongseng62-tititugel (npm) (malicious package)
- [MAL-2025-97904](https://insights.sbomify.com/MAL-2025-97904/): Malicious code in hendra-tempe45-pore (npm) (malicious package)
- [MAL-2025-97903](https://insights.sbomify.com/MAL-2025-97903/): Malicious code in hendra-tahu59-pore (npm) (malicious package)
- [MAL-2025-97902](https://insights.sbomify.com/MAL-2025-97902/): Malicious code in hendra-tahu32-pore (npm) (malicious package)
- [MAL-2025-97901](https://insights.sbomify.com/MAL-2025-97901/): Malicious code in hendra-kue62-tititugel (npm) (malicious package)
- [MAL-2025-97900](https://insights.sbomify.com/MAL-2025-97900/): Malicious code in hendra-klipo89-pore (npm) (malicious package)
- [MAL-2025-9790](https://insights.sbomify.com/MAL-2025-9790/): Malicious code in @zalastax/nolb-_aws-a (npm) (malicious package)
- [MAL-2025-979](https://insights.sbomify.com/MAL-2025-979/): Malicious code in sajadninja (PyPI) (malicious package)
- [MAL-2025-97899](https://insights.sbomify.com/MAL-2025-97899/): Malicious code in hendra-gepuk74-pore (npm) (malicious package)
- [MAL-2025-97898](https://insights.sbomify.com/MAL-2025-97898/): Malicious code in hendra-gepuk3-tititugel (npm) (malicious package)
- [MAL-2025-97897](https://insights.sbomify.com/MAL-2025-97897/): Malicious code in hawk_turquoise-58 (npm) (malicious package)
- [MAL-2025-97896](https://insights.sbomify.com/MAL-2025-97896/): Malicious code in hanafi-rendang96-pore (npm) (malicious package)
- [MAL-2025-97895](https://insights.sbomify.com/MAL-2025-97895/): Malicious code in hanafi-rendang33-tititugel (npm) (malicious package)
- [MAL-2025-97894](https://insights.sbomify.com/MAL-2025-97894/): Malicious code in hanafi-pecel71-tititugel (npm) (malicious package)
- [MAL-2025-97893](https://insights.sbomify.com/MAL-2025-97893/): Malicious code in hanafi-moci25-tititugel (npm) (malicious package)
- [MAL-2025-97892](https://insights.sbomify.com/MAL-2025-97892/): Malicious code in hanafi-mieayam41-pore (npm) (malicious package)
- [MAL-2025-97891](https://insights.sbomify.com/MAL-2025-97891/): Malicious code in hanafi-mangut14-pore (npm) (malicious package)
- [MAL-2025-97890](https://insights.sbomify.com/MAL-2025-97890/): Malicious code in hanafi-lapis100-tititugel (npm) (malicious package)
- [MAL-2025-9789](https://insights.sbomify.com/MAL-2025-9789/): Malicious code in @zalastax/nolb-_awr (npm) (malicious package)
- [MAL-2025-97889](https://insights.sbomify.com/MAL-2025-97889/): Malicious code in hanafi-ketoprak31-tititugel (npm) (malicious package)
- [MAL-2025-97888](https://insights.sbomify.com/MAL-2025-97888/): Malicious code in hanafi-bakso83-tititugel (npm) (malicious package)
- [MAL-2025-97887](https://insights.sbomify.com/MAL-2025-97887/): Malicious code in hadianto-tahu89-tititugel (npm) (malicious package)
- [MAL-2025-97886](https://insights.sbomify.com/MAL-2025-97886/): Malicious code in hadianto-soto44-tititugel (npm) (malicious package)
- [MAL-2025-97885](https://insights.sbomify.com/MAL-2025-97885/): Malicious code in hadianto-sate93-tititugel (npm) (malicious package)
- [MAL-2025-97884](https://insights.sbomify.com/MAL-2025-97884/): Malicious code in hadianto-sambel45-tititugel (npm) (malicious package)
- [MAL-2025-97883](https://insights.sbomify.com/MAL-2025-97883/): Malicious code in hadianto-rujaksoto11-tititugel (npm) (malicious package)
- [MAL-2025-97882](https://insights.sbomify.com/MAL-2025-97882/): Malicious code in hadianto-peyek7-pore (npm) (malicious package)
- [MAL-2025-97881](https://insights.sbomify.com/MAL-2025-97881/): Malicious code in hadianto-nasiuduk38-pore (npm) (malicious package)
- [MAL-2025-97880](https://insights.sbomify.com/MAL-2025-97880/): Malicious code in hadianto-nasicampur43-tititugel (npm) (malicious package)
- [MAL-2025-9788](https://insights.sbomify.com/MAL-2025-9788/): Malicious code in @zalastax/nolb-_ati (npm) (malicious package)
- [MAL-2025-97879](https://insights.sbomify.com/MAL-2025-97879/): Malicious code in hadianto-mendoan100-pore (npm) (malicious package)
- [MAL-2025-97878](https://insights.sbomify.com/MAL-2025-97878/): Malicious code in hadianto-klentik29-tititugel (npm) (malicious package)
- [MAL-2025-97877](https://insights.sbomify.com/MAL-2025-97877/): Malicious code in hadianto-ketoprak90-pore (npm) (malicious package)
- [MAL-2025-97876](https://insights.sbomify.com/MAL-2025-97876/): Malicious code in hadianto-getuk67-pore (npm) (malicious package)
- [MAL-2025-97875](https://insights.sbomify.com/MAL-2025-97875/): Malicious code in hadianto-gembus13-tititugel (npm) (malicious package)
- [MAL-2025-97874](https://insights.sbomify.com/MAL-2025-97874/): Malicious code in hadi-tiwul59-tititugel (npm) (malicious package)
- [MAL-2025-97873](https://insights.sbomify.com/MAL-2025-97873/): Malicious code in hadi-sego90-tititugel (npm) (malicious package)
- [MAL-2025-97872](https://insights.sbomify.com/MAL-2025-97872/): Malicious code in hadi-ruwet54-pore (npm) (malicious package)
- [MAL-2025-97871](https://insights.sbomify.com/MAL-2025-97871/): Malicious code in hadi-ruwet49-pore (npm) (malicious package)
- [MAL-2025-97870](https://insights.sbomify.com/MAL-2025-97870/): Malicious code in hadi-rendang61-tititugel (npm) (malicious package)
- [MAL-2025-9787](https://insights.sbomify.com/MAL-2025-9787/): Malicious code in @zalastax/nolb-_asn (npm) (malicious package)
- [MAL-2025-97869](https://insights.sbomify.com/MAL-2025-97869/): Malicious code in hadi-mieayam5-tititugel (npm) (malicious package)
- [MAL-2025-97868](https://insights.sbomify.com/MAL-2025-97868/): Malicious code in hadi-gulai22-pore (npm) (malicious package)
- [MAL-2025-97867](https://insights.sbomify.com/MAL-2025-97867/): Malicious code in hadi-gorengan22-tititugel (npm) (malicious package)
- [MAL-2025-97866](https://insights.sbomify.com/MAL-2025-97866/): Malicious code in hadi-brongkos82-pore (npm) (malicious package)
- [MAL-2025-97865](https://insights.sbomify.com/MAL-2025-97865/): Malicious code in hadi-bakwan3-pore (npm) (malicious package)
- [MAL-2025-97864](https://insights.sbomify.com/MAL-2025-97864/): Malicious code in guanaco_amethyst-69-tisubasah (npm) (malicious package)
- [MAL-2025-97863](https://insights.sbomify.com/MAL-2025-97863/): Malicious code in grouse_peach-4 (npm) (malicious package)
- [MAL-2025-97862](https://insights.sbomify.com/MAL-2025-97862/): Malicious code in gopher_aqua-28-tisubasah (npm) (malicious package)
- [MAL-2025-97861](https://insights.sbomify.com/MAL-2025-97861/): Malicious code in gita-oncom49-pore (npm) (malicious package)
- [MAL-2025-97860](https://insights.sbomify.com/MAL-2025-97860/): Malicious code in gita-mendut70-tititugel (npm) (malicious package)
- [MAL-2025-9786](https://insights.sbomify.com/MAL-2025-9786/): Malicious code in @zalastax/nolb-_asm (npm) (malicious package)
- [MAL-2025-97859](https://insights.sbomify.com/MAL-2025-97859/): Malicious code in gita-mendut2-pore (npm) (malicious package)
- [MAL-2025-97858](https://insights.sbomify.com/MAL-2025-97858/): Malicious code in gita-lumpur86-tititugel (npm) (malicious package)
- [MAL-2025-97857](https://insights.sbomify.com/MAL-2025-97857/): Malicious code in gita-lapis49-pore (npm) (malicious package)
- [MAL-2025-97856](https://insights.sbomify.com/MAL-2025-97856/): Malicious code in gita-keripik61-pore (npm) (malicious package)
- [MAL-2025-97855](https://insights.sbomify.com/MAL-2025-97855/): Malicious code in gita-keripik24-tititugel (npm) (malicious package)
- [MAL-2025-97854](https://insights.sbomify.com/MAL-2025-97854/): Malicious code in gita-kepok65-pore (npm) (malicious package)
- [MAL-2025-97853](https://insights.sbomify.com/MAL-2025-97853/): Malicious code in gita-kacang57-tititugel (npm) (malicious package)
- [MAL-2025-97852](https://insights.sbomify.com/MAL-2025-97852/): Malicious code in gita-jengkol68-tititugel (npm) (malicious package)
- [MAL-2025-97851](https://insights.sbomify.com/MAL-2025-97851/): Malicious code in gita-gorengan16-tititugel (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/28/