# Vulnerabilities published in 2025


- [MAL-2025-6348](https://insights.sbomify.com/MAL-2025-6348/): Malicious code in resource_registry (RubyGems) (malicious package)
- [MAL-2025-63479](https://insights.sbomify.com/MAL-2025-63479/): Malicious code in indah-kue64-sluey (npm) (malicious package)
- [MAL-2025-63478](https://insights.sbomify.com/MAL-2025-63478/): Malicious code in indah-kue36-sluey (npm) (malicious package)
- [MAL-2025-63477](https://insights.sbomify.com/MAL-2025-63477/): Malicious code in indah-kolak27-sluey (npm) (malicious package)
- [MAL-2025-63476](https://insights.sbomify.com/MAL-2025-63476/): Malicious code in indah-klanting97-sluey (npm) (malicious package)
- [MAL-2025-63475](https://insights.sbomify.com/MAL-2025-63475/): Malicious code in indah-ketoprak21-sluey (npm) (malicious package)
- [MAL-2025-63474](https://insights.sbomify.com/MAL-2025-63474/): Malicious code in indah-jus76-sluey (npm) (malicious package)
- [MAL-2025-63473](https://insights.sbomify.com/MAL-2025-63473/): Malicious code in indah-gulai56-sluey (npm) (malicious package)
- [MAL-2025-63472](https://insights.sbomify.com/MAL-2025-63472/): Malicious code in indah-gaplek36-sluey (npm) (malicious package)
- [MAL-2025-63471](https://insights.sbomify.com/MAL-2025-63471/): Malicious code in indah-gado-gado62-sluey (npm) (malicious package)
- [MAL-2025-63470](https://insights.sbomify.com/MAL-2025-63470/): Malicious code in indah-enting44-sluey (npm) (malicious package)
- [MAL-2025-6347](https://insights.sbomify.com/MAL-2025-6347/): Malicious code in yaetia (npm) (malicious package)
- [MAL-2025-63469](https://insights.sbomify.com/MAL-2025-63469/): Malicious code in indah-dodol99-sluey (npm) (malicious package)
- [MAL-2025-63468](https://insights.sbomify.com/MAL-2025-63468/): Malicious code in indah-bubursumsum58-sluey (npm) (malicious package)
- [MAL-2025-63467](https://insights.sbomify.com/MAL-2025-63467/): Malicious code in indah-bubursumsum48-sluey (npm) (malicious package)
- [MAL-2025-63466](https://insights.sbomify.com/MAL-2025-63466/): Malicious code in indah-bubur87-sluey (npm) (malicious package)
- [MAL-2025-63465](https://insights.sbomify.com/MAL-2025-63465/): Malicious code in indah-brongkos12-sluey (npm) (malicious package)
- [MAL-2025-63464](https://insights.sbomify.com/MAL-2025-63464/): Malicious code in indah-bika85-sluey (npm) (malicious package)
- [MAL-2025-63463](https://insights.sbomify.com/MAL-2025-63463/): Malicious code in indah-bika80-sluey (npm) (malicious package)
- [MAL-2025-63462](https://insights.sbomify.com/MAL-2025-63462/): Malicious code in indah-bakwan94-sluey (npm) (malicious package)
- [MAL-2025-63461](https://insights.sbomify.com/MAL-2025-63461/): Malicious code in indah-bakwan78-sluey (npm) (malicious package)
- [MAL-2025-63460](https://insights.sbomify.com/MAL-2025-63460/): Malicious code in incredible_crocodile_z3n (npm) (malicious package)
- [MAL-2025-6346](https://insights.sbomify.com/MAL-2025-6346/): Malicious code in vite-postcss-bootstrap (npm) (malicious package)
- [MAL-2025-63459](https://insights.sbomify.com/MAL-2025-63459/): Malicious code in inclined_louse_z3n (npm) (malicious package)
- [MAL-2025-63458](https://insights.sbomify.com/MAL-2025-63458/): Malicious code in inc_bandicoot_z3n (npm) (malicious package)
- [MAL-2025-63457](https://insights.sbomify.com/MAL-2025-63457/): Malicious code in immense_toucan_z3n (npm) (malicious package)
- [MAL-2025-63456](https://insights.sbomify.com/MAL-2025-63456/): Malicious code in immense_dragonfly_z3n (npm) (malicious package)
- [MAL-2025-63455](https://insights.sbomify.com/MAL-2025-63455/): Malicious code in immediate_swallow_z3n (npm) (malicious package)
- [MAL-2025-63454](https://insights.sbomify.com/MAL-2025-63454/): Malicious code in immediate_ostrich_z3n (npm) (malicious package)
- [MAL-2025-63453](https://insights.sbomify.com/MAL-2025-63453/): Malicious code in illegal_stork_z3n (npm) (malicious package)
- [MAL-2025-63452](https://insights.sbomify.com/MAL-2025-63452/): Malicious code in illegal_reindeer_z3n (npm) (malicious package)
- [MAL-2025-63451](https://insights.sbomify.com/MAL-2025-63451/): Malicious code in ill_snake_z3n (npm) (malicious package)
- [MAL-2025-63450](https://insights.sbomify.com/MAL-2025-63450/): Malicious code in identical_stork_z3n (npm) (malicious package)
- [MAL-2025-6345](https://insights.sbomify.com/MAL-2025-6345/): Malicious code in vite-plugin-js-support (npm) (malicious package)
- [MAL-2025-63449](https://insights.sbomify.com/MAL-2025-63449/): Malicious code in ida-tomat16-sluey (npm) (malicious package)
- [MAL-2025-63448](https://insights.sbomify.com/MAL-2025-63448/): Malicious code in ida-tempe96-sluey (npm) (malicious package)
- [MAL-2025-63447](https://insights.sbomify.com/MAL-2025-63447/): Malicious code in ida-tempe39-sluey (npm) (malicious package)
- [MAL-2025-63446](https://insights.sbomify.com/MAL-2025-63446/): Malicious code in ida-telurtahu64-sluey (npm) (malicious package)
- [MAL-2025-63445](https://insights.sbomify.com/MAL-2025-63445/): Malicious code in ida-tek63-sluey (npm) (malicious package)
- [MAL-2025-63444](https://insights.sbomify.com/MAL-2025-63444/): Malicious code in ida-teh71-sluey (npm) (malicious package)
- [MAL-2025-63443](https://insights.sbomify.com/MAL-2025-63443/): Malicious code in ida-tapai12-sluey (npm) (malicious package)
- [MAL-2025-63442](https://insights.sbomify.com/MAL-2025-63442/): Malicious code in ida-tahu38-sluey (npm) (malicious package)
- [MAL-2025-63441](https://insights.sbomify.com/MAL-2025-63441/): Malicious code in ida-sroto43-sluey (npm) (malicious package)
- [MAL-2025-63440](https://insights.sbomify.com/MAL-2025-63440/): Malicious code in ida-soto84-sluey (npm) (malicious package)
- [MAL-2025-6344](https://insights.sbomify.com/MAL-2025-6344/): Malicious code in tailwind-theme-colors (npm) (malicious package)
- [MAL-2025-63439](https://insights.sbomify.com/MAL-2025-63439/): Malicious code in ida-serimuka94-sluey (npm) (malicious package)
- [MAL-2025-63438](https://insights.sbomify.com/MAL-2025-63438/): Malicious code in ida-rojak83-sluey (npm) (malicious package)
- [MAL-2025-63437](https://insights.sbomify.com/MAL-2025-63437/): Malicious code in ida-rendang92-sluey (npm) (malicious package)
- [MAL-2025-63436](https://insights.sbomify.com/MAL-2025-63436/): Malicious code in ida-rendang57-sluey (npm) (malicious package)
- [MAL-2025-63435](https://insights.sbomify.com/MAL-2025-63435/): Malicious code in ida-peyek80-sluey (npm) (malicious package)
- [MAL-2025-63434](https://insights.sbomify.com/MAL-2025-63434/): Malicious code in ida-oblok36-sluey (npm) (malicious package)
- [MAL-2025-63433](https://insights.sbomify.com/MAL-2025-63433/): Malicious code in ida-nasipecel36-sumpek (npm) (malicious package)
- [MAL-2025-63432](https://insights.sbomify.com/MAL-2025-63432/): Malicious code in ida-nasicampur97-sluey (npm) (malicious package)
- [MAL-2025-63431](https://insights.sbomify.com/MAL-2025-63431/): Malicious code in ida-nasicampur90-sluey (npm) (malicious package)
- [MAL-2025-63430](https://insights.sbomify.com/MAL-2025-63430/): Malicious code in ida-mangut90-sluey (npm) (malicious package)
- [MAL-2025-6343](https://insights.sbomify.com/MAL-2025-6343/): Malicious code in storybook-core-core-server-presets-0 (npm) (malicious package)
- [MAL-2025-63429](https://insights.sbomify.com/MAL-2025-63429/): Malicious code in ida-mangut80-sluey (npm) (malicious package)
- [MAL-2025-63428](https://insights.sbomify.com/MAL-2025-63428/): Malicious code in ida-mangut22-sluey (npm) (malicious package)
- [MAL-2025-63427](https://insights.sbomify.com/MAL-2025-63427/): Malicious code in ida-mangga81-sluey (npm) (malicious package)
- [MAL-2025-63426](https://insights.sbomify.com/MAL-2025-63426/): Malicious code in ida-liwet64-sluey (npm) (malicious package)
- [MAL-2025-63425](https://insights.sbomify.com/MAL-2025-63425/): Malicious code in ida-liwet21-sluey (npm) (malicious package)
- [MAL-2025-63424](https://insights.sbomify.com/MAL-2025-63424/): Malicious code in ida-kue97-sluey (npm) (malicious package)
- [MAL-2025-63423](https://insights.sbomify.com/MAL-2025-63423/): Malicious code in ida-kue63-sluey (npm) (malicious package)
- [MAL-2025-63422](https://insights.sbomify.com/MAL-2025-63422/): Malicious code in ida-kue62-sluey (npm) (malicious package)
- [MAL-2025-63421](https://insights.sbomify.com/MAL-2025-63421/): Malicious code in ida-kolak59-sluey (npm) (malicious package)
- [MAL-2025-63420](https://insights.sbomify.com/MAL-2025-63420/): Malicious code in ida-klentik78-sluey (npm) (malicious package)
- [MAL-2025-6342](https://insights.sbomify.com/MAL-2025-6342/): Malicious code in request-helmet (npm) (malicious package)
- [MAL-2025-63419](https://insights.sbomify.com/MAL-2025-63419/): Malicious code in ida-klanting9-sluey (npm) (malicious package)
- [MAL-2025-63418](https://insights.sbomify.com/MAL-2025-63418/): Malicious code in ida-keripik5-sluey (npm) (malicious package)
- [MAL-2025-63417](https://insights.sbomify.com/MAL-2025-63417/): Malicious code in ida-keraktelor90-sluey (npm) (malicious package)
- [MAL-2025-63416](https://insights.sbomify.com/MAL-2025-63416/): Malicious code in ida-jus51-sluey (npm) (malicious package)
- [MAL-2025-63415](https://insights.sbomify.com/MAL-2025-63415/): Malicious code in ida-jamblang10-sluey (npm) (malicious package)
- [MAL-2025-63414](https://insights.sbomify.com/MAL-2025-63414/): Malicious code in ida-ikan12-sluey (npm) (malicious package)
- [MAL-2025-63413](https://insights.sbomify.com/MAL-2025-63413/): Malicious code in ida-gulai37-sluey (npm) (malicious package)
- [MAL-2025-63412](https://insights.sbomify.com/MAL-2025-63412/): Malicious code in ida-enting24-sluey (npm) (malicious package)
- [MAL-2025-63411](https://insights.sbomify.com/MAL-2025-63411/): Malicious code in ida-empal83-sluey (npm) (malicious package)
- [MAL-2025-63410](https://insights.sbomify.com/MAL-2025-63410/): Malicious code in ida-brongkos75-sluey (npm) (malicious package)
- [MAL-2025-6341](https://insights.sbomify.com/MAL-2025-6341/): Malicious code in react-stylizer (npm) (malicious package)
- [MAL-2025-63409](https://insights.sbomify.com/MAL-2025-63409/): Malicious code in ida-brengkes11-sluey (npm) (malicious package)
- [MAL-2025-63408](https://insights.sbomify.com/MAL-2025-63408/): Malicious code in ida-bika91-sluey (npm) (malicious package)
- [MAL-2025-63407](https://insights.sbomify.com/MAL-2025-63407/): Malicious code in ida-bika85-sluey (npm) (malicious package)
- [MAL-2025-63406](https://insights.sbomify.com/MAL-2025-63406/): Malicious code in ida-bakso73-sluey (npm) (malicious package)
- [MAL-2025-63405](https://insights.sbomify.com/MAL-2025-63405/): Malicious code in ida-bakso54-sluey (npm) (malicious package)
- [MAL-2025-63404](https://insights.sbomify.com/MAL-2025-63404/): Malicious code in hushed_chipmunk_z3n (npm) (malicious package)
- [MAL-2025-63403](https://insights.sbomify.com/MAL-2025-63403/): Malicious code in hot_wasp_z3n (npm) (malicious package)
- [MAL-2025-63402](https://insights.sbomify.com/MAL-2025-63402/): Malicious code in horrible_hawk_z3n (npm) (malicious package)
- [MAL-2025-63401](https://insights.sbomify.com/MAL-2025-63401/): Malicious code in horrible_gorilla_z3n (npm) (malicious package)
- [MAL-2025-63400](https://insights.sbomify.com/MAL-2025-63400/): Malicious code in horizontal_angelfish_z3n (npm) (malicious package)
- [MAL-2025-6340](https://insights.sbomify.com/MAL-2025-6340/): Malicious code in react-redux-stylizer (npm) (malicious package)
- [MAL-2025-634](https://insights.sbomify.com/MAL-2025-634/): Malicious code in alchemy-asset-transfers-benchmark (npm) (malicious package)
- [MAL-2025-63399](https://insights.sbomify.com/MAL-2025-63399/): Malicious code in honest_snake_z3n (npm) (malicious package)
- [MAL-2025-63398](https://insights.sbomify.com/MAL-2025-63398/): Malicious code in hissing_opossum_z3n (npm) (malicious package)
- [MAL-2025-63397](https://insights.sbomify.com/MAL-2025-63397/): Malicious code in high_antlion_z3n (npm) (malicious package)
- [MAL-2025-63396](https://insights.sbomify.com/MAL-2025-63396/): Malicious code in hendra-tumis42-sluey (npm) (malicious package)
- [MAL-2025-63395](https://insights.sbomify.com/MAL-2025-63395/): Malicious code in hendra-toge27-sluey (npm) (malicious package)
- [MAL-2025-63394](https://insights.sbomify.com/MAL-2025-63394/): Malicious code in hendra-tek6-sluey (npm) (malicious package)
- [MAL-2025-63393](https://insights.sbomify.com/MAL-2025-63393/): Malicious code in hendra-teh83-sumpek (npm) (malicious package)
- [MAL-2025-63392](https://insights.sbomify.com/MAL-2025-63392/): Malicious code in hendra-tahutek79-sluey (npm) (malicious package)
- [MAL-2025-63391](https://insights.sbomify.com/MAL-2025-63391/): Malicious code in hendra-tahutek11-sluey (npm) (malicious package)
- [MAL-2025-63390](https://insights.sbomify.com/MAL-2025-63390/): Malicious code in hendra-tahu94-sluey (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/409/