# Vulnerabilities published in 2025


- [MAL-2025-65838](https://insights.sbomify.com/MAL-2025-65838/): Malicious code in utomo-mangut22-sluey (npm) (malicious package)
- [MAL-2025-65837](https://insights.sbomify.com/MAL-2025-65837/): Malicious code in utomo-lutis27-sluey (npm) (malicious package)
- [MAL-2025-65836](https://insights.sbomify.com/MAL-2025-65836/): Malicious code in utomo-lupis43-sluey (npm) (malicious package)
- [MAL-2025-65835](https://insights.sbomify.com/MAL-2025-65835/): Malicious code in utomo-lontong8-sluey (npm) (malicious package)
- [MAL-2025-65834](https://insights.sbomify.com/MAL-2025-65834/): Malicious code in utomo-lontong24-sluey (npm) (malicious package)
- [MAL-2025-65833](https://insights.sbomify.com/MAL-2025-65833/): Malicious code in utomo-lengko89-sluey (npm) (malicious package)
- [MAL-2025-65832](https://insights.sbomify.com/MAL-2025-65832/): Malicious code in utomo-lapis72-sluey (npm) (malicious package)
- [MAL-2025-65831](https://insights.sbomify.com/MAL-2025-65831/): Malicious code in utomo-lapis68-sluey (npm) (malicious package)
- [MAL-2025-65830](https://insights.sbomify.com/MAL-2025-65830/): Malicious code in utomo-kupang59-sluey (npm) (malicious package)
- [MAL-2025-6583](https://insights.sbomify.com/MAL-2025-6583/): Malicious code in serverkeeper-verifier (PyPI) (malicious package)
- [MAL-2025-65829](https://insights.sbomify.com/MAL-2025-65829/): Malicious code in utomo-kue89-sluey (npm) (malicious package)
- [MAL-2025-65828](https://insights.sbomify.com/MAL-2025-65828/): Malicious code in utomo-kue69-sluey (npm) (malicious package)
- [MAL-2025-65827](https://insights.sbomify.com/MAL-2025-65827/): Malicious code in utomo-klipo14-sluey (npm) (malicious package)
- [MAL-2025-65826](https://insights.sbomify.com/MAL-2025-65826/): Malicious code in utomo-ketoprak25-sluey (npm) (malicious package)
- [MAL-2025-65825](https://insights.sbomify.com/MAL-2025-65825/): Malicious code in utomo-ketan25-sluey (npm) (malicious package)
- [MAL-2025-65824](https://insights.sbomify.com/MAL-2025-65824/): Malicious code in utomo-kepok81-sluey (npm) (malicious package)
- [MAL-2025-65823](https://insights.sbomify.com/MAL-2025-65823/): Malicious code in utomo-kemplang17-sluey (npm) (malicious package)
- [MAL-2025-65822](https://insights.sbomify.com/MAL-2025-65822/): Malicious code in utomo-kembang74-sluey (npm) (malicious package)
- [MAL-2025-65821](https://insights.sbomify.com/MAL-2025-65821/): Malicious code in utomo-gudeg62-sluey (npm) (malicious package)
- [MAL-2025-65820](https://insights.sbomify.com/MAL-2025-65820/): Malicious code in utomo-gorengan59-sluey (npm) (malicious package)
- [MAL-2025-65819](https://insights.sbomify.com/MAL-2025-65819/): Malicious code in utomo-empal54-sumpek (npm) (malicious package)
- [MAL-2025-65818](https://insights.sbomify.com/MAL-2025-65818/): Malicious code in utomo-bubursumsum78-sluey (npm) (malicious package)
- [MAL-2025-65817](https://insights.sbomify.com/MAL-2025-65817/): Malicious code in utomo-bubursumsum18-sluey (npm) (malicious package)
- [MAL-2025-65816](https://insights.sbomify.com/MAL-2025-65816/): Malicious code in utomo-botok37-sluey (npm) (malicious package)
- [MAL-2025-65815](https://insights.sbomify.com/MAL-2025-65815/): Malicious code in useless_hawk_z3n (npm) (malicious package)
- [MAL-2025-65814](https://insights.sbomify.com/MAL-2025-65814/): Malicious code in useful_crayfish_z3n (npm) (malicious package)
- [MAL-2025-65813](https://insights.sbomify.com/MAL-2025-65813/): Malicious code in uptight_wombat_z3n (npm) (malicious package)
- [MAL-2025-65812](https://insights.sbomify.com/MAL-2025-65812/): Malicious code in upset_opossum_z3n (npm) (malicious package)
- [MAL-2025-65811](https://insights.sbomify.com/MAL-2025-65811/): Malicious code in upper_gibbon_z3n (npm) (malicious package)
- [MAL-2025-65810](https://insights.sbomify.com/MAL-2025-65810/): Malicious code in upper_alpaca_z3n (npm) (malicious package)
- [MAL-2025-6581](https://insights.sbomify.com/MAL-2025-6581/): Malicious code in saga-python (PyPI) (malicious package)
- [MAL-2025-65809](https://insights.sbomify.com/MAL-2025-65809/): Malicious code in unwilling_barnacle_z3n (npm) (malicious package)
- [MAL-2025-65808](https://insights.sbomify.com/MAL-2025-65808/): Malicious code in unusual_dove_z3n (npm) (malicious package)
- [MAL-2025-65807](https://insights.sbomify.com/MAL-2025-65807/): Malicious code in unnecessary_gayal_z3n (npm) (malicious package)
- [MAL-2025-65806](https://insights.sbomify.com/MAL-2025-65806/): Malicious code in unlikely_butterfly_z3n (npm) (malicious package)
- [MAL-2025-65805](https://insights.sbomify.com/MAL-2025-65805/): Malicious code in universal_condor_z3n (npm) (malicious package)
- [MAL-2025-65804](https://insights.sbomify.com/MAL-2025-65804/): Malicious code in uninterested_porpoise_z3n (npm) (malicious package)
- [MAL-2025-65803](https://insights.sbomify.com/MAL-2025-65803/): Malicious code in uninterested_impala_z3n (npm) (malicious package)
- [MAL-2025-65802](https://insights.sbomify.com/MAL-2025-65802/): Malicious code in uninterested_baboon_z3n (npm) (malicious package)
- [MAL-2025-65801](https://insights.sbomify.com/MAL-2025-65801/): Malicious code in unfortunate_wren_z3n (npm) (malicious package)
- [MAL-2025-65800](https://insights.sbomify.com/MAL-2025-65800/): Malicious code in unfair_mandrill_z3n (npm) (malicious package)
- [MAL-2025-658](https://insights.sbomify.com/MAL-2025-658/): Malicious code in flashcards-sdk-converter (npm) (malicious package)
- [MAL-2025-65799](https://insights.sbomify.com/MAL-2025-65799/): Malicious code in underground_gazelle_z3n (npm) (malicious package)
- [MAL-2025-65798](https://insights.sbomify.com/MAL-2025-65798/): Malicious code in unconscious_smelt_z3n (npm) (malicious package)
- [MAL-2025-65797](https://insights.sbomify.com/MAL-2025-65797/): Malicious code in uncomfortable_tortoise_z3n (npm) (malicious package)
- [MAL-2025-65796](https://insights.sbomify.com/MAL-2025-65796/): Malicious code in unchanged_koala_z3n (npm) (malicious package)
- [MAL-2025-65795](https://insights.sbomify.com/MAL-2025-65795/): Malicious code in uncertain_hamster_z3n (npm) (malicious package)
- [MAL-2025-65794](https://insights.sbomify.com/MAL-2025-65794/): Malicious code in uncertain_badger_z3n (npm) (malicious package)
- [MAL-2025-65793](https://insights.sbomify.com/MAL-2025-65793/): Malicious code in unable_quokka_z3n (npm) (malicious package)
- [MAL-2025-65792](https://insights.sbomify.com/MAL-2025-65792/): Malicious code in umi-wajit84-sluey (npm) (malicious package)
- [MAL-2025-65791](https://insights.sbomify.com/MAL-2025-65791/): Malicious code in umi-tumis73-sluey (npm) (malicious package)
- [MAL-2025-65790](https://insights.sbomify.com/MAL-2025-65790/): Malicious code in umi-tongseng59-sluey (npm) (malicious package)
- [MAL-2025-6579](https://insights.sbomify.com/MAL-2025-6579/): Malicious code in runway-python (PyPI) (malicious package)
- [MAL-2025-65789](https://insights.sbomify.com/MAL-2025-65789/): Malicious code in umi-tempe13-sluey (npm) (malicious package)
- [MAL-2025-65788](https://insights.sbomify.com/MAL-2025-65788/): Malicious code in umi-tempe11-sluey (npm) (malicious package)
- [MAL-2025-65787](https://insights.sbomify.com/MAL-2025-65787/): Malicious code in umi-telurtahu33-sluey (npm) (malicious package)
- [MAL-2025-65786](https://insights.sbomify.com/MAL-2025-65786/): Malicious code in umi-telur81-sluey (npm) (malicious package)
- [MAL-2025-65785](https://insights.sbomify.com/MAL-2025-65785/): Malicious code in umi-telur66-sluey (npm) (malicious package)
- [MAL-2025-65784](https://insights.sbomify.com/MAL-2025-65784/): Malicious code in umi-telur17-sluey (npm) (malicious package)
- [MAL-2025-65783](https://insights.sbomify.com/MAL-2025-65783/): Malicious code in umi-teh49-sluey (npm) (malicious package)
- [MAL-2025-65782](https://insights.sbomify.com/MAL-2025-65782/): Malicious code in umi-tapai17-sluey (npm) (malicious package)
- [MAL-2025-65781](https://insights.sbomify.com/MAL-2025-65781/): Malicious code in umi-takokak64-sluey (npm) (malicious package)
- [MAL-2025-65780](https://insights.sbomify.com/MAL-2025-65780/): Malicious code in umi-serabi75-sluey (npm) (malicious package)
- [MAL-2025-6578](https://insights.sbomify.com/MAL-2025-6578/): Malicious code in robloxextra (PyPI) (malicious package)
- [MAL-2025-65779](https://insights.sbomify.com/MAL-2025-65779/): Malicious code in umi-serabi4-sluey (npm) (malicious package)
- [MAL-2025-65778](https://insights.sbomify.com/MAL-2025-65778/): Malicious code in umi-sego52-sluey (npm) (malicious package)
- [MAL-2025-65777](https://insights.sbomify.com/MAL-2025-65777/): Malicious code in umi-sego42-sluey (npm) (malicious package)
- [MAL-2025-65776](https://insights.sbomify.com/MAL-2025-65776/): Malicious code in umi-sate98-sluey (npm) (malicious package)
- [MAL-2025-65775](https://insights.sbomify.com/MAL-2025-65775/): Malicious code in umi-sate50-sluey (npm) (malicious package)
- [MAL-2025-65774](https://insights.sbomify.com/MAL-2025-65774/): Malicious code in umi-saguer14-sluey (npm) (malicious package)
- [MAL-2025-65773](https://insights.sbomify.com/MAL-2025-65773/): Malicious code in umi-ronde85-sluey (npm) (malicious package)
- [MAL-2025-65772](https://insights.sbomify.com/MAL-2025-65772/): Malicious code in umi-rojak63-sluey (npm) (malicious package)
- [MAL-2025-65771](https://insights.sbomify.com/MAL-2025-65771/): Malicious code in umi-rangi91-sluey (npm) (malicious package)
- [MAL-2025-65770](https://insights.sbomify.com/MAL-2025-65770/): Malicious code in umi-papeda91-sluey (npm) (malicious package)
- [MAL-2025-6577](https://insights.sbomify.com/MAL-2025-6577/): Malicious code in research-learn (PyPI) (malicious package)
- [MAL-2025-65769](https://insights.sbomify.com/MAL-2025-65769/): Malicious code in umi-oncom42-sluey (npm) (malicious package)
- [MAL-2025-65768](https://insights.sbomify.com/MAL-2025-65768/): Malicious code in umi-oblok9-sluey (npm) (malicious package)
- [MAL-2025-65767](https://insights.sbomify.com/MAL-2025-65767/): Malicious code in umi-miebogor91-sluey (npm) (malicious package)
- [MAL-2025-65766](https://insights.sbomify.com/MAL-2025-65766/): Malicious code in umi-menjes86-sluey (npm) (malicious package)
- [MAL-2025-65765](https://insights.sbomify.com/MAL-2025-65765/): Malicious code in umi-mendut13-sluey (npm) (malicious package)
- [MAL-2025-65764](https://insights.sbomify.com/MAL-2025-65764/): Malicious code in umi-mangut46-sluey (npm) (malicious package)
- [MAL-2025-65763](https://insights.sbomify.com/MAL-2025-65763/): Malicious code in umi-lontong44-sluey (npm) (malicious package)
- [MAL-2025-65762](https://insights.sbomify.com/MAL-2025-65762/): Malicious code in umi-lapis59-sluey (npm) (malicious package)
- [MAL-2025-65761](https://insights.sbomify.com/MAL-2025-65761/): Malicious code in umi-kue35-sluey (npm) (malicious package)
- [MAL-2025-65760](https://insights.sbomify.com/MAL-2025-65760/): Malicious code in umi-kolak93-sluey (npm) (malicious package)
- [MAL-2025-6576](https://insights.sbomify.com/MAL-2025-6576/): Malicious code in repocket (PyPI) (malicious package)
- [MAL-2025-65759](https://insights.sbomify.com/MAL-2025-65759/): Malicious code in umi-ketoprak24-sluey (npm) (malicious package)
- [MAL-2025-65758](https://insights.sbomify.com/MAL-2025-65758/): Malicious code in umi-kepok31-sluey (npm) (malicious package)
- [MAL-2025-65757](https://insights.sbomify.com/MAL-2025-65757/): Malicious code in umi-kacang16-sluey (npm) (malicious package)
- [MAL-2025-65756](https://insights.sbomify.com/MAL-2025-65756/): Malicious code in umi-jamblang6-sluey (npm) (malicious package)
- [MAL-2025-65755](https://insights.sbomify.com/MAL-2025-65755/): Malicious code in umi-ikan77-sluey (npm) (malicious package)
- [MAL-2025-65754](https://insights.sbomify.com/MAL-2025-65754/): Malicious code in umi-gudeg53-sluey (npm) (malicious package)
- [MAL-2025-65753](https://insights.sbomify.com/MAL-2025-65753/): Malicious code in umi-gudeg31-sluey (npm) (malicious package)
- [MAL-2025-65752](https://insights.sbomify.com/MAL-2025-65752/): Malicious code in umi-getas100-sluey (npm) (malicious package)
- [MAL-2025-65751](https://insights.sbomify.com/MAL-2025-65751/): Malicious code in umi-gepuk72-sluey (npm) (malicious package)
- [MAL-2025-65750](https://insights.sbomify.com/MAL-2025-65750/): Malicious code in umi-gembus60-sluey (npm) (malicious package)
- [MAL-2025-6575](https://insights.sbomify.com/MAL-2025-6575/): Malicious code in rehttps (PyPI) (malicious package)
- [MAL-2025-65749](https://insights.sbomify.com/MAL-2025-65749/): Malicious code in umi-gembus27-sluey (npm) (malicious package)
- [MAL-2025-65748](https://insights.sbomify.com/MAL-2025-65748/): Malicious code in umi-esdoger18-sluey (npm) (malicious package)
- [MAL-2025-65747](https://insights.sbomify.com/MAL-2025-65747/): Malicious code in umi-enting5-sluey (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/383/