# Vulnerabilities published in 2025


- [MAL-2025-65474](https://insights.sbomify.com/MAL-2025-65474/): Malicious code in surya-mendoan34-sluey (npm) (malicious package)
- [MAL-2025-65473](https://insights.sbomify.com/MAL-2025-65473/): Malicious code in surya-lengko59-sluey (npm) (malicious package)
- [MAL-2025-65472](https://insights.sbomify.com/MAL-2025-65472/): Malicious code in surya-lapis57-sluey (npm) (malicious package)
- [MAL-2025-65471](https://insights.sbomify.com/MAL-2025-65471/): Malicious code in surya-kupat31-sluey (npm) (malicious package)
- [MAL-2025-65470](https://insights.sbomify.com/MAL-2025-65470/): Malicious code in surya-kue72-sluey (npm) (malicious package)
- [MAL-2025-6547](https://insights.sbomify.com/MAL-2025-6547/): Malicious code in memlib (PyPI) (malicious package)
- [MAL-2025-65469](https://insights.sbomify.com/MAL-2025-65469/): Malicious code in surya-kue4-sluey (npm) (malicious package)
- [MAL-2025-65468](https://insights.sbomify.com/MAL-2025-65468/): Malicious code in surya-kue12-sluey (npm) (malicious package)
- [MAL-2025-65467](https://insights.sbomify.com/MAL-2025-65467/): Malicious code in surya-kolak67-sluey (npm) (malicious package)
- [MAL-2025-65466](https://insights.sbomify.com/MAL-2025-65466/): Malicious code in surya-ketoprak98-sluey (npm) (malicious package)
- [MAL-2025-65465](https://insights.sbomify.com/MAL-2025-65465/): Malicious code in surya-kembang24-sluey (npm) (malicious package)
- [MAL-2025-65464](https://insights.sbomify.com/MAL-2025-65464/): Malicious code in surya-kembang11-sluey (npm) (malicious package)
- [MAL-2025-65463](https://insights.sbomify.com/MAL-2025-65463/): Malicious code in surya-enting72-sluey (npm) (malicious package)
- [MAL-2025-65462](https://insights.sbomify.com/MAL-2025-65462/): Malicious code in surya-empal46-sluey (npm) (malicious package)
- [MAL-2025-65461](https://insights.sbomify.com/MAL-2025-65461/): Malicious code in surya-dradag100-sumpek (npm) (malicious package)
- [MAL-2025-65460](https://insights.sbomify.com/MAL-2025-65460/): Malicious code in surya-donat43-sluey (npm) (malicious package)
- [MAL-2025-6546](https://insights.sbomify.com/MAL-2025-6546/): Malicious code in mb-commons (PyPI) (malicious package)
- [MAL-2025-65459](https://insights.sbomify.com/MAL-2025-65459/): Malicious code in surya-brongkos86-sluey (npm) (malicious package)
- [MAL-2025-65458](https://insights.sbomify.com/MAL-2025-65458/): Malicious code in surya-bika98-sluey (npm) (malicious package)
- [MAL-2025-65457](https://insights.sbomify.com/MAL-2025-65457/): Malicious code in surya-bakwan71-sluey (npm) (malicious package)
- [MAL-2025-65456](https://insights.sbomify.com/MAL-2025-65456/): Malicious code in surya-bakso61-sluey (npm) (malicious package)
- [MAL-2025-65455](https://insights.sbomify.com/MAL-2025-65455/): Malicious code in surviving_gamefowl_z3n (npm) (malicious package)
- [MAL-2025-65454](https://insights.sbomify.com/MAL-2025-65454/): Malicious code in surviving_frog_z3n (npm) (malicious package)
- [MAL-2025-65453](https://insights.sbomify.com/MAL-2025-65453/): Malicious code in surrounding_antelope_z3n (npm) (malicious package)
- [MAL-2025-65452](https://insights.sbomify.com/MAL-2025-65452/): Malicious code in superior_finch_z3n (npm) (malicious package)
- [MAL-2025-65451](https://insights.sbomify.com/MAL-2025-65451/): Malicious code in superb_chickadee_z3n (npm) (malicious package)
- [MAL-2025-65450](https://insights.sbomify.com/MAL-2025-65450/): Malicious code in sudden_gopher_z3n (npm) (malicious package)
- [MAL-2025-6545](https://insights.sbomify.com/MAL-2025-6545/): Malicious code in managment (PyPI) (malicious package)
- [MAL-2025-65449](https://insights.sbomify.com/MAL-2025-65449/): Malicious code in successful_unicorn_z3n (npm) (malicious package)
- [MAL-2025-65448](https://insights.sbomify.com/MAL-2025-65448/): Malicious code in successful_octopus_z3n (npm) (malicious package)
- [MAL-2025-65447](https://insights.sbomify.com/MAL-2025-65447/): Malicious code in successful_halibut_z3n (npm) (malicious package)
- [MAL-2025-65446](https://insights.sbomify.com/MAL-2025-65446/): Malicious code in substantial_ocelot_z3n (npm) (malicious package)
- [MAL-2025-65445](https://insights.sbomify.com/MAL-2025-65445/): Malicious code in subsequent_wren_z3n (npm) (malicious package)
- [MAL-2025-65444](https://insights.sbomify.com/MAL-2025-65444/): Malicious code in subsequent_roundworm_z3n (npm) (malicious package)
- [MAL-2025-65443](https://insights.sbomify.com/MAL-2025-65443/): Malicious code in subjective_catshark_z3n (npm) (malicious package)
- [MAL-2025-65442](https://insights.sbomify.com/MAL-2025-65442/): Malicious code in stupid_earthworm_z3n (npm) (malicious package)
- [MAL-2025-65441](https://insights.sbomify.com/MAL-2025-65441/): Malicious code in stuck_thrush_z3n (npm) (malicious package)
- [MAL-2025-65440](https://insights.sbomify.com/MAL-2025-65440/): Malicious code in stuck_puma_z3n (npm) (malicious package)
- [MAL-2025-6544](https://insights.sbomify.com/MAL-2025-6544/): Malicious code in malipkghehe (PyPI) (malicious package)
- [MAL-2025-65439](https://insights.sbomify.com/MAL-2025-65439/): Malicious code in striped_moth_z3n (npm) (malicious package)
- [MAL-2025-65438](https://insights.sbomify.com/MAL-2025-65438/): Malicious code in striped_bedbug_z3n (npm) (malicious package)
- [MAL-2025-65437](https://insights.sbomify.com/MAL-2025-65437/): Malicious code in striking_mosquito_z3n (npm) (malicious package)
- [MAL-2025-65436](https://insights.sbomify.com/MAL-2025-65436/): Malicious code in strict_woodpecker_z3n (npm) (malicious package)
- [MAL-2025-65435](https://insights.sbomify.com/MAL-2025-65435/): Malicious code in strategic_stoat_z3n (npm) (malicious package)
- [MAL-2025-65434](https://insights.sbomify.com/MAL-2025-65434/): Malicious code in strange_wildfowl_z3n (npm) (malicious package)
- [MAL-2025-65433](https://insights.sbomify.com/MAL-2025-65433/): Malicious code in straight_bobcat_z3n (npm) (malicious package)
- [MAL-2025-65432](https://insights.sbomify.com/MAL-2025-65432/): Malicious code in still_shark_z3n (npm) (malicious package)
- [MAL-2025-65431](https://insights.sbomify.com/MAL-2025-65431/): Malicious code in stiff_hawk_z3n (npm) (malicious package)
- [MAL-2025-65430](https://insights.sbomify.com/MAL-2025-65430/): Malicious code in sticky_owl_z3n (npm) (malicious package)
- [MAL-2025-6543](https://insights.sbomify.com/MAL-2025-6543/): Malicious code in malimalooo (PyPI) (malicious package)
- [MAL-2025-65429](https://insights.sbomify.com/MAL-2025-65429/): Malicious code in static_fox_z3n (npm) (malicious package)
- [MAL-2025-65428](https://insights.sbomify.com/MAL-2025-65428/): Malicious code in standard_crab_z3n (npm) (malicious package)
- [MAL-2025-65427](https://insights.sbomify.com/MAL-2025-65427/): Malicious code in stable_seahorse_z3n (npm) (malicious package)
- [MAL-2025-65426](https://insights.sbomify.com/MAL-2025-65426/): Malicious code in squealing_bobcat_z3n (npm) (malicious package)
- [MAL-2025-65425](https://insights.sbomify.com/MAL-2025-65425/): Malicious code in square_whippet_z3n (npm) (malicious package)
- [MAL-2025-65424](https://insights.sbomify.com/MAL-2025-65424/): Malicious code in square_halibut_z3n (npm) (malicious package)
- [MAL-2025-65423](https://insights.sbomify.com/MAL-2025-65423/): Malicious code in sporting_grouse_z3n (npm) (malicious package)
- [MAL-2025-65422](https://insights.sbomify.com/MAL-2025-65422/): Malicious code in sporting_gecko_z3n (npm) (malicious package)
- [MAL-2025-65421](https://insights.sbomify.com/MAL-2025-65421/): Malicious code in splendid_pinniped_z3n (npm) (malicious package)
- [MAL-2025-65420](https://insights.sbomify.com/MAL-2025-65420/): Malicious code in splendid_monkey_z3n (npm) (malicious package)
- [MAL-2025-6542](https://insights.sbomify.com/MAL-2025-6542/): Malicious code in malimaloo (PyPI) (malicious package)
- [MAL-2025-65419](https://insights.sbomify.com/MAL-2025-65419/): Malicious code in spicy_skink_z3n (npm) (malicious package)
- [MAL-2025-65418](https://insights.sbomify.com/MAL-2025-65418/): Malicious code in spectacular_silverfish_z3n (npm) (malicious package)
- [MAL-2025-65417](https://insights.sbomify.com/MAL-2025-65417/): Malicious code in specific_tick_z3n (npm) (malicious package)
- [MAL-2025-65416](https://insights.sbomify.com/MAL-2025-65416/): Malicious code in special_xerinae_z3n (npm) (malicious package)
- [MAL-2025-65415](https://insights.sbomify.com/MAL-2025-65415/): Malicious code in sparkling_goat_z3n (npm) (malicious package)
- [MAL-2025-65414](https://insights.sbomify.com/MAL-2025-65414/): Malicious code in sparkling_cockroach_z3n (npm) (malicious package)
- [MAL-2025-65413](https://insights.sbomify.com/MAL-2025-65413/): Malicious code in spare_galliform_z3n (npm) (malicious package)
- [MAL-2025-65412](https://insights.sbomify.com/MAL-2025-65412/): Malicious code in southern_flea_z3n (npm) (malicious package)
- [MAL-2025-65411](https://insights.sbomify.com/MAL-2025-65411/): Malicious code in sound_swordtail_z3n (npm) (malicious package)
- [MAL-2025-65410](https://insights.sbomify.com/MAL-2025-65410/): Malicious code in sore_earthworm_z3n (npm) (malicious package)
- [MAL-2025-6541](https://insights.sbomify.com/MAL-2025-6541/): Malicious code in malimalo (PyPI) (malicious package)
- [MAL-2025-65409](https://insights.sbomify.com/MAL-2025-65409/): Malicious code in sophisticated_marsupial_z3n (npm) (malicious package)
- [MAL-2025-65408](https://insights.sbomify.com/MAL-2025-65408/): Malicious code in sophisticated_leopard_z3n (npm) (malicious package)
- [MAL-2025-65407](https://insights.sbomify.com/MAL-2025-65407/): Malicious code in sole_echidna_z3n (npm) (malicious package)
- [MAL-2025-65406](https://insights.sbomify.com/MAL-2025-65406/): Malicious code in soft_gazelle_z3n (npm) (malicious package)
- [MAL-2025-65405](https://insights.sbomify.com/MAL-2025-65405/): Malicious code in socialist_newt_z3n (npm) (malicious package)
- [MAL-2025-65404](https://insights.sbomify.com/MAL-2025-65404/): Malicious code in socialist_falcon_z3n (npm) (malicious package)
- [MAL-2025-65403](https://insights.sbomify.com/MAL-2025-65403/): Malicious code in smiling_otter_z3n (npm) (malicious package)
- [MAL-2025-65402](https://insights.sbomify.com/MAL-2025-65402/): Malicious code in smiling_magpie_z3n (npm) (malicious package)
- [MAL-2025-65401](https://insights.sbomify.com/MAL-2025-65401/): Malicious code in smart_firefly_z3n (npm) (malicious package)
- [MAL-2025-65400](https://insights.sbomify.com/MAL-2025-65400/): Malicious code in small_jay_z3n (npm) (malicious package)
- [MAL-2025-6540](https://insights.sbomify.com/MAL-2025-6540/): Malicious code in mainx (PyPI) (malicious package)
- [MAL-2025-654](https://insights.sbomify.com/MAL-2025-654/): Malicious code in example-app-node (npm) (malicious package)
- [MAL-2025-65399](https://insights.sbomify.com/MAL-2025-65399/): Malicious code in small_cockroach_z3n (npm) (malicious package)
- [MAL-2025-65398](https://insights.sbomify.com/MAL-2025-65398/): Malicious code in slow_koala_z3n (npm) (malicious package)
- [MAL-2025-65397](https://insights.sbomify.com/MAL-2025-65397/): Malicious code in slippery_peacock_z3n (npm) (malicious package)
- [MAL-2025-65396](https://insights.sbomify.com/MAL-2025-65396/): Malicious code in slimy_leopard_z3n (npm) (malicious package)
- [MAL-2025-65395](https://insights.sbomify.com/MAL-2025-65395/): Malicious code in slimy_canid_z3n (npm) (malicious package)
- [MAL-2025-65394](https://insights.sbomify.com/MAL-2025-65394/): Malicious code in slim_chickadee_z3n (npm) (malicious package)
- [MAL-2025-65393](https://insights.sbomify.com/MAL-2025-65393/): Malicious code in slim_cardinal_z3n (npm) (malicious package)
- [MAL-2025-65392](https://insights.sbomify.com/MAL-2025-65392/): Malicious code in sleepy_partridge_z3n (npm) (malicious package)
- [MAL-2025-65391](https://insights.sbomify.com/MAL-2025-65391/): Malicious code in sleepy_condor_z3n (npm) (malicious package)
- [MAL-2025-65390](https://insights.sbomify.com/MAL-2025-65390/): Malicious code in skinny_meadowlark_z3n (npm) (malicious package)
- [MAL-2025-6539](https://insights.sbomify.com/MAL-2025-6539/): Malicious code in loggutils (PyPI) (malicious package)
- [MAL-2025-65389](https://insights.sbomify.com/MAL-2025-65389/): Malicious code in skinny_hornet_z3n (npm) (malicious package)
- [MAL-2025-65388](https://insights.sbomify.com/MAL-2025-65388/): Malicious code in skilled_hedgehog_z3n (npm) (malicious package)
- [MAL-2025-65387](https://insights.sbomify.com/MAL-2025-65387/): Malicious code in skilled_barnacle_z3n (npm) (malicious package)
- [MAL-2025-65386](https://insights.sbomify.com/MAL-2025-65386/): Malicious code in siska-wajit59-sluey (npm) (malicious package)
- [MAL-2025-65385](https://insights.sbomify.com/MAL-2025-65385/): Malicious code in siska-tongseng14-sluey (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/387/