# Vulnerabilities published in 2025


- [MAL-2025-6384](https://insights.sbomify.com/MAL-2025-6384/): Malicious code in openai-tsp (npm) (malicious package)
- [MAL-2025-63839](https://insights.sbomify.com/MAL-2025-63839/): Malicious code in kresna-enting48-sluey (npm) (malicious package)
- [MAL-2025-63838](https://insights.sbomify.com/MAL-2025-63838/): Malicious code in kresna-empal33-sluey (npm) (malicious package)
- [MAL-2025-63837](https://insights.sbomify.com/MAL-2025-63837/): Malicious code in kresna-dodol52-sluey (npm) (malicious package)
- [MAL-2025-63836](https://insights.sbomify.com/MAL-2025-63836/): Malicious code in kresna-brongkos83-sluey (npm) (malicious package)
- [MAL-2025-63835](https://insights.sbomify.com/MAL-2025-63835/): Malicious code in known_toucan_z3n (npm) (malicious package)
- [MAL-2025-63834](https://insights.sbomify.com/MAL-2025-63834/): Malicious code in kind_pike_z3n (npm) (malicious package)
- [MAL-2025-63833](https://insights.sbomify.com/MAL-2025-63833/): Malicious code in kiki-tek28-sluey (npm) (malicious package)
- [MAL-2025-63832](https://insights.sbomify.com/MAL-2025-63832/): Malicious code in kiki-teh94-sluey (npm) (malicious package)
- [MAL-2025-63831](https://insights.sbomify.com/MAL-2025-63831/): Malicious code in kiki-tahu54-sluey (npm) (malicious package)
- [MAL-2025-63830](https://insights.sbomify.com/MAL-2025-63830/): Malicious code in kiki-sroto41-sluey (npm) (malicious package)
- [MAL-2025-6383](https://insights.sbomify.com/MAL-2025-6383/): Malicious code in bullyshitty (npm) (malicious package)
- [MAL-2025-63829](https://insights.sbomify.com/MAL-2025-63829/): Malicious code in kiki-soto74-sluey (npm) (malicious package)
- [MAL-2025-63828](https://insights.sbomify.com/MAL-2025-63828/): Malicious code in kiki-serabi8-sluey (npm) (malicious package)
- [MAL-2025-63827](https://insights.sbomify.com/MAL-2025-63827/): Malicious code in kiki-semur83-sluey (npm) (malicious package)
- [MAL-2025-63826](https://insights.sbomify.com/MAL-2025-63826/): Malicious code in kiki-sego51-sluey (npm) (malicious package)
- [MAL-2025-63825](https://insights.sbomify.com/MAL-2025-63825/): Malicious code in kiki-sambel18-sumpek (npm) (malicious package)
- [MAL-2025-63824](https://insights.sbomify.com/MAL-2025-63824/): Malicious code in kiki-rujaksoto38-sluey (npm) (malicious package)
- [MAL-2025-63823](https://insights.sbomify.com/MAL-2025-63823/): Malicious code in kiki-rawon17-sluey (npm) (malicious package)
- [MAL-2025-63822](https://insights.sbomify.com/MAL-2025-63822/): Malicious code in kiki-rangi94-sluey (npm) (malicious package)
- [MAL-2025-63821](https://insights.sbomify.com/MAL-2025-63821/): Malicious code in kiki-rangi83-sluey (npm) (malicious package)
- [MAL-2025-63820](https://insights.sbomify.com/MAL-2025-63820/): Malicious code in kiki-rangi63-sluey (npm) (malicious package)
- [MAL-2025-6382](https://insights.sbomify.com/MAL-2025-6382/): Malicious code in webpack-server-config (npm) (malicious package)
- [MAL-2025-63819](https://insights.sbomify.com/MAL-2025-63819/): Malicious code in kiki-oncom46-sluey (npm) (malicious package)
- [MAL-2025-63818](https://insights.sbomify.com/MAL-2025-63818/): Malicious code in kiki-nasiuduk81-sluey (npm) (malicious package)
- [MAL-2025-63817](https://insights.sbomify.com/MAL-2025-63817/): Malicious code in kiki-nasisayur19-sluey (npm) (malicious package)
- [MAL-2025-63816](https://insights.sbomify.com/MAL-2025-63816/): Malicious code in kiki-nasi49-sluey (npm) (malicious package)
- [MAL-2025-63815](https://insights.sbomify.com/MAL-2025-63815/): Malicious code in kiki-nasi100-sluey (npm) (malicious package)
- [MAL-2025-63814](https://insights.sbomify.com/MAL-2025-63814/): Malicious code in kiki-miebogor51-sluey (npm) (malicious package)
- [MAL-2025-63813](https://insights.sbomify.com/MAL-2025-63813/): Malicious code in kiki-mangut49-sluey (npm) (malicious package)
- [MAL-2025-63812](https://insights.sbomify.com/MAL-2025-63812/): Malicious code in kiki-mangut2-sluey (npm) (malicious package)
- [MAL-2025-63811](https://insights.sbomify.com/MAL-2025-63811/): Malicious code in kiki-mangut13-sluey (npm) (malicious package)
- [MAL-2025-63810](https://insights.sbomify.com/MAL-2025-63810/): Malicious code in kiki-lutis83-sluey (npm) (malicious package)
- [MAL-2025-6381](https://insights.sbomify.com/MAL-2025-6381/): Malicious code in web3-rtc (npm) (malicious package)
- [MAL-2025-63809](https://insights.sbomify.com/MAL-2025-63809/): Malicious code in kiki-lutis18-sluey (npm) (malicious package)
- [MAL-2025-63808](https://insights.sbomify.com/MAL-2025-63808/): Malicious code in kiki-lumpur27-sluey (npm) (malicious package)
- [MAL-2025-63807](https://insights.sbomify.com/MAL-2025-63807/): Malicious code in kiki-lepet25-sluey (npm) (malicious package)
- [MAL-2025-63806](https://insights.sbomify.com/MAL-2025-63806/): Malicious code in kiki-lapis75-sluey (npm) (malicious package)
- [MAL-2025-63805](https://insights.sbomify.com/MAL-2025-63805/): Malicious code in kiki-kue14-sluey (npm) (malicious package)
- [MAL-2025-63804](https://insights.sbomify.com/MAL-2025-63804/): Malicious code in kiki-kue10-sluey (npm) (malicious package)
- [MAL-2025-63803](https://insights.sbomify.com/MAL-2025-63803/): Malicious code in kiki-keripik9-sluey (npm) (malicious package)
- [MAL-2025-63802](https://insights.sbomify.com/MAL-2025-63802/): Malicious code in kiki-keripik59-sluey (npm) (malicious package)
- [MAL-2025-63801](https://insights.sbomify.com/MAL-2025-63801/): Malicious code in kiki-keripik48-sluey (npm) (malicious package)
- [MAL-2025-63800](https://insights.sbomify.com/MAL-2025-63800/): Malicious code in kiki-kemplang15-sluey (npm) (malicious package)
- [MAL-2025-6380](https://insights.sbomify.com/MAL-2025-6380/): Malicious code in vite-simpleparse (npm) (malicious package)
- [MAL-2025-638](https://insights.sbomify.com/MAL-2025-638/): Malicious code in bootcamp-hackathon (npm) (malicious package)
- [MAL-2025-63799](https://insights.sbomify.com/MAL-2025-63799/): Malicious code in kiki-jus73-sumpek (npm) (malicious package)
- [MAL-2025-63798](https://insights.sbomify.com/MAL-2025-63798/): Malicious code in kiki-jengkol45-sluey (npm) (malicious package)
- [MAL-2025-63797](https://insights.sbomify.com/MAL-2025-63797/): Malicious code in kiki-getas91-sluey (npm) (malicious package)
- [MAL-2025-63796](https://insights.sbomify.com/MAL-2025-63796/): Malicious code in kiki-empal37-sluey (npm) (malicious package)
- [MAL-2025-63795](https://insights.sbomify.com/MAL-2025-63795/): Malicious code in kiki-donat29-sluey (npm) (malicious package)
- [MAL-2025-63794](https://insights.sbomify.com/MAL-2025-63794/): Malicious code in kiki-buburayam13-sluey (npm) (malicious package)
- [MAL-2025-63793](https://insights.sbomify.com/MAL-2025-63793/): Malicious code in kiki-brongkos79-sluey (npm) (malicious package)
- [MAL-2025-63792](https://insights.sbomify.com/MAL-2025-63792/): Malicious code in kiki-brengkes9-sluey (npm) (malicious package)
- [MAL-2025-63791](https://insights.sbomify.com/MAL-2025-63791/): Malicious code in kiki-asinan35-sluey (npm) (malicious package)
- [MAL-2025-63790](https://insights.sbomify.com/MAL-2025-63790/): Malicious code in keen_nightingale_z3n (npm) (malicious package)
- [MAL-2025-6379](https://insights.sbomify.com/MAL-2025-6379/): Malicious code in vite-postcss-nested (npm) (malicious package)
- [MAL-2025-63789](https://insights.sbomify.com/MAL-2025-63789/): Malicious code in just_parrot_z3n (npm) (malicious package)
- [MAL-2025-63788](https://insights.sbomify.com/MAL-2025-63788/): Malicious code in junior_antelope_z3n (npm) (malicious package)
- [MAL-2025-63787](https://insights.sbomify.com/MAL-2025-63787/): Malicious code in judicial_puffin_z3n (npm) (malicious package)
- [MAL-2025-63786](https://insights.sbomify.com/MAL-2025-63786/): Malicious code in judicial_mongoose_z3n (npm) (malicious package)
- [MAL-2025-63785](https://insights.sbomify.com/MAL-2025-63785/): Malicious code in joyous_vicuna_z3n (npm) (malicious package)
- [MAL-2025-63784](https://insights.sbomify.com/MAL-2025-63784/): Malicious code in joni-wajit52-sluey (npm) (malicious package)
- [MAL-2025-63783](https://insights.sbomify.com/MAL-2025-63783/): Malicious code in joni-tiwul53-sluey (npm) (malicious package)
- [MAL-2025-63782](https://insights.sbomify.com/MAL-2025-63782/): Malicious code in joni-tempe62-sluey (npm) (malicious package)
- [MAL-2025-63781](https://insights.sbomify.com/MAL-2025-63781/): Malicious code in joni-telur27-sluey (npm) (malicious package)
- [MAL-2025-63780](https://insights.sbomify.com/MAL-2025-63780/): Malicious code in joni-tek4-sluey (npm) (malicious package)
- [MAL-2025-6378](https://insights.sbomify.com/MAL-2025-6378/): Malicious code in vite-postcss-kit (npm) (malicious package)
- [MAL-2025-63779](https://insights.sbomify.com/MAL-2025-63779/): Malicious code in joni-teh87-sluey (npm) (malicious package)
- [MAL-2025-63778](https://insights.sbomify.com/MAL-2025-63778/): Malicious code in joni-teh73-sluey (npm) (malicious package)
- [MAL-2025-63777](https://insights.sbomify.com/MAL-2025-63777/): Malicious code in joni-taiwan68-sluey (npm) (malicious package)
- [MAL-2025-63776](https://insights.sbomify.com/MAL-2025-63776/): Malicious code in joni-sate65-sluey (npm) (malicious package)
- [MAL-2025-63775](https://insights.sbomify.com/MAL-2025-63775/): Malicious code in joni-sasag28-sluey (npm) (malicious package)
- [MAL-2025-63774](https://insights.sbomify.com/MAL-2025-63774/): Malicious code in joni-sambel78-sluey (npm) (malicious package)
- [MAL-2025-63773](https://insights.sbomify.com/MAL-2025-63773/): Malicious code in joni-ronde8-sluey (npm) (malicious package)
- [MAL-2025-63772](https://insights.sbomify.com/MAL-2025-63772/): Malicious code in joni-ronde76-sluey (npm) (malicious package)
- [MAL-2025-63771](https://insights.sbomify.com/MAL-2025-63771/): Malicious code in joni-rangi28-sumpek (npm) (malicious package)
- [MAL-2025-63770](https://insights.sbomify.com/MAL-2025-63770/): Malicious code in joni-pisang96-sluey (npm) (malicious package)
- [MAL-2025-6377](https://insights.sbomify.com/MAL-2025-6377/): Malicious code in vite-plugin-reactjs-refresh (npm) (malicious package)
- [MAL-2025-63769](https://insights.sbomify.com/MAL-2025-63769/): Malicious code in joni-papeda28-sluey (npm) (malicious package)
- [MAL-2025-63768](https://insights.sbomify.com/MAL-2025-63768/): Malicious code in joni-ongol-ongol7-sluey (npm) (malicious package)
- [MAL-2025-63767](https://insights.sbomify.com/MAL-2025-63767/): Malicious code in joni-nasisayur36-sluey (npm) (malicious package)
- [MAL-2025-63766](https://insights.sbomify.com/MAL-2025-63766/): Malicious code in joni-nasi49-sluey (npm) (malicious package)
- [MAL-2025-63765](https://insights.sbomify.com/MAL-2025-63765/): Malicious code in joni-miemee35-sluey (npm) (malicious package)
- [MAL-2025-63764](https://insights.sbomify.com/MAL-2025-63764/): Malicious code in joni-martabak74-sluey (npm) (malicious package)
- [MAL-2025-63763](https://insights.sbomify.com/MAL-2025-63763/): Malicious code in joni-lumpur4-sluey (npm) (malicious package)
- [MAL-2025-63762](https://insights.sbomify.com/MAL-2025-63762/): Malicious code in joni-liwet61-sluey (npm) (malicious package)
- [MAL-2025-63761](https://insights.sbomify.com/MAL-2025-63761/): Malicious code in joni-kue76-sumpek (npm) (malicious package)
- [MAL-2025-63760](https://insights.sbomify.com/MAL-2025-63760/): Malicious code in joni-kue38-sluey (npm) (malicious package)
- [MAL-2025-6376](https://insights.sbomify.com/MAL-2025-6376/): Malicious code in vite-log-plugin (npm) (malicious package)
- [MAL-2025-63759](https://insights.sbomify.com/MAL-2025-63759/): Malicious code in joni-kue33-sluey (npm) (malicious package)
- [MAL-2025-63758](https://insights.sbomify.com/MAL-2025-63758/): Malicious code in joni-kue3-sluey (npm) (malicious package)
- [MAL-2025-63757](https://insights.sbomify.com/MAL-2025-63757/): Malicious code in joni-keripik92-sluey (npm) (malicious package)
- [MAL-2025-63756](https://insights.sbomify.com/MAL-2025-63756/): Malicious code in joni-keripik45-sluey (npm) (malicious package)
- [MAL-2025-63755](https://insights.sbomify.com/MAL-2025-63755/): Malicious code in joni-keraktelor24-sluey (npm) (malicious package)
- [MAL-2025-63754](https://insights.sbomify.com/MAL-2025-63754/): Malicious code in joni-jus33-sluey (npm) (malicious package)
- [MAL-2025-63753](https://insights.sbomify.com/MAL-2025-63753/): Malicious code in joni-jus25-sluey (npm) (malicious package)
- [MAL-2025-63752](https://insights.sbomify.com/MAL-2025-63752/): Malicious code in joni-gulai37-sluey (npm) (malicious package)
- [MAL-2025-63751](https://insights.sbomify.com/MAL-2025-63751/): Malicious code in joni-gudeg27-sluey (npm) (malicious package)
- [MAL-2025-63750](https://insights.sbomify.com/MAL-2025-63750/): Malicious code in joni-gorengan69-sluey (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/405/