# Vulnerabilities published in 2025


- [MAL-2025-66560](https://insights.sbomify.com/MAL-2025-66560/): Malicious code in @bipyruss/cosmicchorus (npm) (malicious package)
- [MAL-2025-6656](https://insights.sbomify.com/MAL-2025-6656/): Malicious code in simple-auth-manager-ui (npm) (malicious package)
- [MAL-2025-66559](https://insights.sbomify.com/MAL-2025-66559/): Malicious code in @bipyruss/ciphersage (npm) (malicious package)
- [MAL-2025-66558](https://insights.sbomify.com/MAL-2025-66558/): Malicious code in @bipyruss/bipy-calculator (npm) (malicious package)
- [MAL-2025-66557](https://insights.sbomify.com/MAL-2025-66557/): Malicious code in @bipyruss/astralamber (npm) (malicious package)
- [MAL-2025-66556](https://insights.sbomify.com/MAL-2025-66556/): Malicious code in 4four7 (npm) (malicious package)
- [MAL-2025-66555](https://insights.sbomify.com/MAL-2025-66555/): Malicious code in 3scnd (npm) (malicious package)
- [MAL-2025-66554](https://insights.sbomify.com/MAL-2025-66554/): Malicious code in 0xmisoke (npm) (malicious package)
- [MAL-2025-66553](https://insights.sbomify.com/MAL-2025-66553/): Malicious code in 0xenkz (npm) (malicious package)
- [MAL-2025-66552](https://insights.sbomify.com/MAL-2025-66552/): Malicious code in vite-plugin-postcss-tools (npm) (malicious package)
- [MAL-2025-66551](https://insights.sbomify.com/MAL-2025-66551/): Malicious code in tensor-fi-utils-lib (npm) (malicious package)
- [MAL-2025-66550](https://insights.sbomify.com/MAL-2025-66550/): Malicious code in szsec-infos-report (npm) (malicious package)
- [MAL-2025-6655](https://insights.sbomify.com/MAL-2025-6655/): Malicious code in shop-disclaimer (npm) (malicious package)
- [MAL-2025-66549](https://insights.sbomify.com/MAL-2025-66549/): Malicious code in swagger-express-evaluator (npm) (malicious package)
- [MAL-2025-66548](https://insights.sbomify.com/MAL-2025-66548/): Malicious code in supports-validation-checkerlib (npm) (malicious package)
- [MAL-2025-66547](https://insights.sbomify.com/MAL-2025-66547/): Malicious code in read-async (npm) (malicious package)
- [MAL-2025-66546](https://insights.sbomify.com/MAL-2025-66546/): Malicious code in npmtest_chenguang (npm) (malicious package)
- [MAL-2025-66545](https://insights.sbomify.com/MAL-2025-66545/): Malicious code in grumpy-squidward (npm) (malicious package)
- [MAL-2025-66544](https://insights.sbomify.com/MAL-2025-66544/): Malicious code in grid-settings (npm) (malicious package)
- [MAL-2025-66543](https://insights.sbomify.com/MAL-2025-66543/): Malicious code in @walletwave/ui (npm) (malicious package)
- [MAL-2025-66542](https://insights.sbomify.com/MAL-2025-66542/): Malicious code in @walletwave/core (npm) (malicious package)
- [MAL-2025-66541](https://insights.sbomify.com/MAL-2025-66541/): Malicious code in @walletwave/backend (npm) (malicious package)
- [MAL-2025-66540](https://insights.sbomify.com/MAL-2025-66540/): Malicious code in zygomorphic_starfish_z3n (npm) (malicious package)
- [MAL-2025-6654](https://insights.sbomify.com/MAL-2025-6654/): Malicious code in seller-center (npm) (malicious package)
- [MAL-2025-66539](https://insights.sbomify.com/MAL-2025-66539/): Malicious code in zul-soto65-sluey (npm) (malicious package)
- [MAL-2025-66538](https://insights.sbomify.com/MAL-2025-66538/): Malicious code in zul-soto63-sluey (npm) (malicious package)
- [MAL-2025-66537](https://insights.sbomify.com/MAL-2025-66537/): Malicious code in zul-serimuka71-sluey (npm) (malicious package)
- [MAL-2025-66536](https://insights.sbomify.com/MAL-2025-66536/): Malicious code in zul-semur31-sluey (npm) (malicious package)
- [MAL-2025-66535](https://insights.sbomify.com/MAL-2025-66535/): Malicious code in zul-sego75-sluey (npm) (malicious package)
- [MAL-2025-66534](https://insights.sbomify.com/MAL-2025-66534/): Malicious code in zul-sate63-sluey (npm) (malicious package)
- [MAL-2025-66533](https://insights.sbomify.com/MAL-2025-66533/): Malicious code in zul-sasag86-sluey (npm) (malicious package)
- [MAL-2025-66532](https://insights.sbomify.com/MAL-2025-66532/): Malicious code in zul-sambel8-sluey (npm) (malicious package)
- [MAL-2025-66531](https://insights.sbomify.com/MAL-2025-66531/): Malicious code in zul-sambalado76-sluey (npm) (malicious package)
- [MAL-2025-66530](https://insights.sbomify.com/MAL-2025-66530/): Malicious code in zul-sambalado51-sluey (npm) (malicious package)
- [MAL-2025-6653](https://insights.sbomify.com/MAL-2025-6653/): Malicious code in schematics-cli (npm) (malicious package)
- [MAL-2025-66529](https://insights.sbomify.com/MAL-2025-66529/): Malicious code in zul-rujak11-sluey (npm) (malicious package)
- [MAL-2025-66528](https://insights.sbomify.com/MAL-2025-66528/): Malicious code in zul-nasipecel45-sluey (npm) (malicious package)
- [MAL-2025-66527](https://insights.sbomify.com/MAL-2025-66527/): Malicious code in zul-nasi28-sluey (npm) (malicious package)
- [MAL-2025-66526](https://insights.sbomify.com/MAL-2025-66526/): Malicious code in zul-mieaceh89-sluey (npm) (malicious package)
- [MAL-2025-66525](https://insights.sbomify.com/MAL-2025-66525/): Malicious code in zul-lupis44-sluey (npm) (malicious package)
- [MAL-2025-66524](https://insights.sbomify.com/MAL-2025-66524/): Malicious code in zul-lontong49-sluey (npm) (malicious package)
- [MAL-2025-66523](https://insights.sbomify.com/MAL-2025-66523/): Malicious code in zul-lepet4-sluey (npm) (malicious package)
- [MAL-2025-66522](https://insights.sbomify.com/MAL-2025-66522/): Malicious code in zul-lapis63-sluey (npm) (malicious package)
- [MAL-2025-66521](https://insights.sbomify.com/MAL-2025-66521/): Malicious code in zul-kupat25-sluey (npm) (malicious package)
- [MAL-2025-66520](https://insights.sbomify.com/MAL-2025-66520/): Malicious code in zul-kue84-sluey (npm) (malicious package)
- [MAL-2025-6652](https://insights.sbomify.com/MAL-2025-6652/): Malicious code in sajarilib (npm) (malicious package)
- [MAL-2025-66519](https://insights.sbomify.com/MAL-2025-66519/): Malicious code in zul-kue83-sluey (npm) (malicious package)
- [MAL-2025-66518](https://insights.sbomify.com/MAL-2025-66518/): Malicious code in zul-kue13-sluey (npm) (malicious package)
- [MAL-2025-66517](https://insights.sbomify.com/MAL-2025-66517/): Malicious code in zul-kue100-sluey (npm) (malicious package)
- [MAL-2025-66516](https://insights.sbomify.com/MAL-2025-66516/): Malicious code in zul-kolak33-sluey (npm) (malicious package)
- [MAL-2025-66515](https://insights.sbomify.com/MAL-2025-66515/): Malicious code in zul-kolak22-sluey (npm) (malicious package)
- [MAL-2025-66514](https://insights.sbomify.com/MAL-2025-66514/): Malicious code in zul-klipo74-sluey (npm) (malicious package)
- [MAL-2025-66513](https://insights.sbomify.com/MAL-2025-66513/): Malicious code in zul-klipo51-sluey (npm) (malicious package)
- [MAL-2025-66512](https://insights.sbomify.com/MAL-2025-66512/): Malicious code in zul-ketoprak30-sluey (npm) (malicious package)
- [MAL-2025-66511](https://insights.sbomify.com/MAL-2025-66511/): Malicious code in zul-keraktelor50-sluey (npm) (malicious package)
- [MAL-2025-66510](https://insights.sbomify.com/MAL-2025-66510/): Malicious code in zul-kentang87-sluey (npm) (malicious package)
- [MAL-2025-6651](https://insights.sbomify.com/MAL-2025-6651/): Malicious code in react-is-router (npm) (malicious package)
- [MAL-2025-66509](https://insights.sbomify.com/MAL-2025-66509/): Malicious code in zul-kemplang45-sluey (npm) (malicious package)
- [MAL-2025-66508](https://insights.sbomify.com/MAL-2025-66508/): Malicious code in zul-gudeg68-sluey (npm) (malicious package)
- [MAL-2025-66507](https://insights.sbomify.com/MAL-2025-66507/): Malicious code in zul-getas85-sluey (npm) (malicious package)
- [MAL-2025-66506](https://insights.sbomify.com/MAL-2025-66506/): Malicious code in zul-gado-gado86-sluey (npm) (malicious package)
- [MAL-2025-66505](https://insights.sbomify.com/MAL-2025-66505/): Malicious code in zul-gado-gado38-sluey (npm) (malicious package)
- [MAL-2025-66504](https://insights.sbomify.com/MAL-2025-66504/): Malicious code in zul-esdoger100-sluey (npm) (malicious package)
- [MAL-2025-66503](https://insights.sbomify.com/MAL-2025-66503/): Malicious code in zul-empal62-sluey (npm) (malicious package)
- [MAL-2025-66502](https://insights.sbomify.com/MAL-2025-66502/): Malicious code in zul-brengkes23-sluey (npm) (malicious package)
- [MAL-2025-66501](https://insights.sbomify.com/MAL-2025-66501/): Malicious code in zul-bika35-sluey (npm) (malicious package)
- [MAL-2025-66500](https://insights.sbomify.com/MAL-2025-66500/): Malicious code in zul-bakso77-sluey (npm) (malicious package)
- [MAL-2025-6650](https://insights.sbomify.com/MAL-2025-6650/): Malicious code in processes-widget-fe-commons (npm) (malicious package)
- [MAL-2025-665](https://insights.sbomify.com/MAL-2025-665/): Malicious code in grabathon-5.0 (npm) (malicious package)
- [MAL-2025-66499](https://insights.sbomify.com/MAL-2025-66499/): Malicious code in zoophagous_vulture_z3n (npm) (malicious package)
- [MAL-2025-66498](https://insights.sbomify.com/MAL-2025-66498/): Malicious code in zoophagous_krill_z3n (npm) (malicious package)
- [MAL-2025-66497](https://insights.sbomify.com/MAL-2025-66497/): Malicious code in zoophagous_harrier_z3n (npm) (malicious package)
- [MAL-2025-66496](https://insights.sbomify.com/MAL-2025-66496/): Malicious code in zippy_silkworm_z3n (npm) (malicious package)
- [MAL-2025-66495](https://insights.sbomify.com/MAL-2025-66495/): Malicious code in zippy_shrimp_z3n (npm) (malicious package)
- [MAL-2025-66494](https://insights.sbomify.com/MAL-2025-66494/): Malicious code in zippy_peafowl_z3n (npm) (malicious package)
- [MAL-2025-66493](https://insights.sbomify.com/MAL-2025-66493/): Malicious code in zeroth_pike_z3n (npm) (malicious package)
- [MAL-2025-66492](https://insights.sbomify.com/MAL-2025-66492/): Malicious code in zealous_dormouse_z3n (npm) (malicious package)
- [MAL-2025-66491](https://insights.sbomify.com/MAL-2025-66491/): Malicious code in zaki-ubi68-sluey (npm) (malicious package)
- [MAL-2025-66490](https://insights.sbomify.com/MAL-2025-66490/): Malicious code in zaki-tongseng95-sluey (npm) (malicious package)
- [MAL-2025-6649](https://insights.sbomify.com/MAL-2025-6649/): Malicious code in pr0tobuff-loaders-alt (npm) (malicious package)
- [MAL-2025-66489](https://insights.sbomify.com/MAL-2025-66489/): Malicious code in zaki-tempe53-sluey (npm) (malicious package)
- [MAL-2025-66488](https://insights.sbomify.com/MAL-2025-66488/): Malicious code in zaki-takokak74-sluey (npm) (malicious package)
- [MAL-2025-66487](https://insights.sbomify.com/MAL-2025-66487/): Malicious code in zaki-soto49-sluey (npm) (malicious package)
- [MAL-2025-66486](https://insights.sbomify.com/MAL-2025-66486/): Malicious code in zaki-serimuka88-sumpek (npm) (malicious package)
- [MAL-2025-66485](https://insights.sbomify.com/MAL-2025-66485/): Malicious code in zaki-serabi46-sluey (npm) (malicious package)
- [MAL-2025-66484](https://insights.sbomify.com/MAL-2025-66484/): Malicious code in zaki-serabi21-sluey (npm) (malicious package)
- [MAL-2025-66483](https://insights.sbomify.com/MAL-2025-66483/): Malicious code in zaki-semur87-sluey (npm) (malicious package)
- [MAL-2025-66482](https://insights.sbomify.com/MAL-2025-66482/): Malicious code in zaki-sasag76-sluey (npm) (malicious package)
- [MAL-2025-66481](https://insights.sbomify.com/MAL-2025-66481/): Malicious code in zaki-sambalado38-sumpek (npm) (malicious package)
- [MAL-2025-66480](https://insights.sbomify.com/MAL-2025-66480/): Malicious code in zaki-saguer72-sluey (npm) (malicious package)
- [MAL-2025-6648](https://insights.sbomify.com/MAL-2025-6648/): Malicious code in pr0tobuff-loaders (npm) (malicious package)
- [MAL-2025-66479](https://insights.sbomify.com/MAL-2025-66479/): Malicious code in zaki-saguer56-sluey (npm) (malicious package)
- [MAL-2025-66478](https://insights.sbomify.com/MAL-2025-66478/): Malicious code in zaki-rujak81-sluey (npm) (malicious package)
- [MAL-2025-66477](https://insights.sbomify.com/MAL-2025-66477/): Malicious code in zaki-rujak13-sluey (npm) (malicious package)
- [MAL-2025-66476](https://insights.sbomify.com/MAL-2025-66476/): Malicious code in zaki-rojak99-sluey (npm) (malicious package)
- [MAL-2025-66475](https://insights.sbomify.com/MAL-2025-66475/): Malicious code in zaki-rawon78-sluey (npm) (malicious package)
- [MAL-2025-66474](https://insights.sbomify.com/MAL-2025-66474/): Malicious code in zaki-papeda5-sluey (npm) (malicious package)
- [MAL-2025-66473](https://insights.sbomify.com/MAL-2025-66473/): Malicious code in zaki-oblok10-sluey (npm) (malicious package)
- [MAL-2025-66472](https://insights.sbomify.com/MAL-2025-66472/): Malicious code in zaki-nasiuduk56-sluey (npm) (malicious package)
- [MAL-2025-66471](https://insights.sbomify.com/MAL-2025-66471/): Malicious code in zaki-nasiuduk17-sluey (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/375/
