# Vulnerabilities published in 2025


- [MAL-2025-6339](https://insights.sbomify.com/MAL-2025-6339/): Malicious code in query-logger (npm) (malicious package)
- [MAL-2025-63389](https://insights.sbomify.com/MAL-2025-63389/): Malicious code in hendra-semur26-sumpek (npm) (malicious package)
- [MAL-2025-63388](https://insights.sbomify.com/MAL-2025-63388/): Malicious code in hendra-sego9-sluey (npm) (malicious package)
- [MAL-2025-63387](https://insights.sbomify.com/MAL-2025-63387/): Malicious code in hendra-sate41-sluey (npm) (malicious package)
- [MAL-2025-63386](https://insights.sbomify.com/MAL-2025-63386/): Malicious code in hendra-sate34-sluey (npm) (malicious package)
- [MAL-2025-63385](https://insights.sbomify.com/MAL-2025-63385/): Malicious code in hendra-sasag93-sluey (npm) (malicious package)
- [MAL-2025-63384](https://insights.sbomify.com/MAL-2025-63384/): Malicious code in hendra-sasag48-sluey (npm) (malicious package)
- [MAL-2025-63383](https://insights.sbomify.com/MAL-2025-63383/): Malicious code in hendra-sambel80-sluey (npm) (malicious package)
- [MAL-2025-63382](https://insights.sbomify.com/MAL-2025-63382/): Malicious code in hendra-saguer50-sluey (npm) (malicious package)
- [MAL-2025-63381](https://insights.sbomify.com/MAL-2025-63381/): Malicious code in hendra-ruwet91-sluey (npm) (malicious package)
- [MAL-2025-63380](https://insights.sbomify.com/MAL-2025-63380/): Malicious code in hendra-ruwet52-sluey (npm) (malicious package)
- [MAL-2025-6338](https://insights.sbomify.com/MAL-2025-6338/): Malicious code in @sys711/my-npx-tool (npm) (malicious package)
- [MAL-2025-63379](https://insights.sbomify.com/MAL-2025-63379/): Malicious code in hendra-ruwet12-sluey (npm) (malicious package)
- [MAL-2025-63378](https://insights.sbomify.com/MAL-2025-63378/): Malicious code in hendra-rangginang76-sluey (npm) (malicious package)
- [MAL-2025-63377](https://insights.sbomify.com/MAL-2025-63377/): Malicious code in hendra-papeda72-sluey (npm) (malicious package)
- [MAL-2025-63376](https://insights.sbomify.com/MAL-2025-63376/): Malicious code in hendra-otak-otak56-sluey (npm) (malicious package)
- [MAL-2025-63375](https://insights.sbomify.com/MAL-2025-63375/): Malicious code in hendra-oblok15-sluey (npm) (malicious package)
- [MAL-2025-63374](https://insights.sbomify.com/MAL-2025-63374/): Malicious code in hendra-nasi93-sluey (npm) (malicious package)
- [MAL-2025-63373](https://insights.sbomify.com/MAL-2025-63373/): Malicious code in hendra-nasi83-sluey (npm) (malicious package)
- [MAL-2025-63372](https://insights.sbomify.com/MAL-2025-63372/): Malicious code in hendra-miemee63-sluey (npm) (malicious package)
- [MAL-2025-63371](https://insights.sbomify.com/MAL-2025-63371/): Malicious code in hendra-mieayam40-sluey (npm) (malicious package)
- [MAL-2025-63370](https://insights.sbomify.com/MAL-2025-63370/): Malicious code in hendra-mieaceh70-sluey (npm) (malicious package)
- [MAL-2025-6337](https://insights.sbomify.com/MAL-2025-6337/): Malicious code in @xcxcxxx/gsap3 (npm) (malicious package)
- [MAL-2025-63369](https://insights.sbomify.com/MAL-2025-63369/): Malicious code in hendra-mie35-sluey (npm) (malicious package)
- [MAL-2025-63368](https://insights.sbomify.com/MAL-2025-63368/): Malicious code in hendra-mendut76-sluey (npm) (malicious package)
- [MAL-2025-63367](https://insights.sbomify.com/MAL-2025-63367/): Malicious code in hendra-mendoan98-sluey (npm) (malicious package)
- [MAL-2025-63366](https://insights.sbomify.com/MAL-2025-63366/): Malicious code in hendra-mangut71-sluey (npm) (malicious package)
- [MAL-2025-63365](https://insights.sbomify.com/MAL-2025-63365/): Malicious code in hendra-mangut64-sluey (npm) (malicious package)
- [MAL-2025-63364](https://insights.sbomify.com/MAL-2025-63364/): Malicious code in hendra-mangut55-sluey (npm) (malicious package)
- [MAL-2025-63363](https://insights.sbomify.com/MAL-2025-63363/): Malicious code in hendra-lodeh35-sluey (npm) (malicious package)
- [MAL-2025-63362](https://insights.sbomify.com/MAL-2025-63362/): Malicious code in hendra-lepet52-sluey (npm) (malicious package)
- [MAL-2025-63361](https://insights.sbomify.com/MAL-2025-63361/): Malicious code in hendra-lengko11-sluey (npm) (malicious package)
- [MAL-2025-63360](https://insights.sbomify.com/MAL-2025-63360/): Malicious code in hendra-lapis72-sluey (npm) (malicious package)
- [MAL-2025-6336](https://insights.sbomify.com/MAL-2025-6336/): Malicious code in testing123kk (PyPI) (malicious package)
- [MAL-2025-63359](https://insights.sbomify.com/MAL-2025-63359/): Malicious code in hendra-kue81-sumpek (npm) (malicious package)
- [MAL-2025-63358](https://insights.sbomify.com/MAL-2025-63358/): Malicious code in hendra-klipo80-sluey (npm) (malicious package)
- [MAL-2025-63357](https://insights.sbomify.com/MAL-2025-63357/): Malicious code in hendra-klanting6-sluey (npm) (malicious package)
- [MAL-2025-63356](https://insights.sbomify.com/MAL-2025-63356/): Malicious code in hendra-kentang48-sluey (npm) (malicious package)
- [MAL-2025-63355](https://insights.sbomify.com/MAL-2025-63355/): Malicious code in hendra-kemplang59-sluey (npm) (malicious package)
- [MAL-2025-63354](https://insights.sbomify.com/MAL-2025-63354/): Malicious code in hendra-jengkol75-sluey (npm) (malicious package)
- [MAL-2025-63353](https://insights.sbomify.com/MAL-2025-63353/): Malicious code in hendra-gepuk36-sluey (npm) (malicious package)
- [MAL-2025-63352](https://insights.sbomify.com/MAL-2025-63352/): Malicious code in hendra-empal90-sluey (npm) (malicious package)
- [MAL-2025-63351](https://insights.sbomify.com/MAL-2025-63351/): Malicious code in hendra-empal62-sluey (npm) (malicious package)
- [MAL-2025-63350](https://insights.sbomify.com/MAL-2025-63350/): Malicious code in hendra-donat81-sluey (npm) (malicious package)
- [MAL-2025-6335](https://insights.sbomify.com/MAL-2025-6335/): Malicious code in uidraftism (npm) (malicious package)
- [MAL-2025-63349](https://insights.sbomify.com/MAL-2025-63349/): Malicious code in hendra-bubursumsum92-sluey (npm) (malicious package)
- [MAL-2025-63348](https://insights.sbomify.com/MAL-2025-63348/): Malicious code in hendra-bubursumsum63-sluey (npm) (malicious package)
- [MAL-2025-63347](https://insights.sbomify.com/MAL-2025-63347/): Malicious code in hendra-brongkos61-sluey (npm) (malicious package)
- [MAL-2025-63346](https://insights.sbomify.com/MAL-2025-63346/): Malicious code in hendra-brongkos49-sluey (npm) (malicious package)
- [MAL-2025-63345](https://insights.sbomify.com/MAL-2025-63345/): Malicious code in hendra-bika8-sluey (npm) (malicious package)
- [MAL-2025-63344](https://insights.sbomify.com/MAL-2025-63344/): Malicious code in hendra-bakso72-sluey (npm) (malicious package)
- [MAL-2025-63343](https://insights.sbomify.com/MAL-2025-63343/): Malicious code in helpless_stingray_z3n (npm) (malicious package)
- [MAL-2025-63342](https://insights.sbomify.com/MAL-2025-63342/): Malicious code in helpless_firefly_z3n (npm) (malicious package)
- [MAL-2025-63341](https://insights.sbomify.com/MAL-2025-63341/): Malicious code in heavy_gibbon_z3n (npm) (malicious package)
- [MAL-2025-63340](https://insights.sbomify.com/MAL-2025-63340/): Malicious code in healthy_basilisk_z3n (npm) (malicious package)
- [MAL-2025-6334](https://insights.sbomify.com/MAL-2025-6334/): Malicious code in style-postprocessor (npm) (malicious package)
- [MAL-2025-63339](https://insights.sbomify.com/MAL-2025-63339/): Malicious code in hard_crawdad_z3n (npm) (malicious package)
- [MAL-2025-63338](https://insights.sbomify.com/MAL-2025-63338/): Malicious code in happy_tarantula_z3n (npm) (malicious package)
- [MAL-2025-63337](https://insights.sbomify.com/MAL-2025-63337/): Malicious code in handsome_anaconda_z3n (npm) (malicious package)
- [MAL-2025-63336](https://insights.sbomify.com/MAL-2025-63336/): Malicious code in hanafi-ubi79-sluey (npm) (malicious package)
- [MAL-2025-63335](https://insights.sbomify.com/MAL-2025-63335/): Malicious code in hanafi-ubi51-sluey (npm) (malicious package)
- [MAL-2025-63334](https://insights.sbomify.com/MAL-2025-63334/): Malicious code in hanafi-tumis3-sluey (npm) (malicious package)
- [MAL-2025-63333](https://insights.sbomify.com/MAL-2025-63333/): Malicious code in hanafi-tongseng15-sluey (npm) (malicious package)
- [MAL-2025-63332](https://insights.sbomify.com/MAL-2025-63332/): Malicious code in hanafi-toge98-sluey (npm) (malicious package)
- [MAL-2025-63331](https://insights.sbomify.com/MAL-2025-63331/): Malicious code in hanafi-tiwul94-sluey (npm) (malicious package)
- [MAL-2025-63330](https://insights.sbomify.com/MAL-2025-63330/): Malicious code in hanafi-telurtahu72-sluey (npm) (malicious package)
- [MAL-2025-6333](https://insights.sbomify.com/MAL-2025-6333/): Malicious code in solhint-plugin-lido-csm (npm) (malicious package)
- [MAL-2025-63329](https://insights.sbomify.com/MAL-2025-63329/): Malicious code in hanafi-teh99-sluey (npm) (malicious package)
- [MAL-2025-63328](https://insights.sbomify.com/MAL-2025-63328/): Malicious code in hanafi-tapai1-sluey (npm) (malicious package)
- [MAL-2025-63327](https://insights.sbomify.com/MAL-2025-63327/): Malicious code in hanafi-taiwan15-sumpek (npm) (malicious package)
- [MAL-2025-63326](https://insights.sbomify.com/MAL-2025-63326/): Malicious code in hanafi-tahutek59-sluey (npm) (malicious package)
- [MAL-2025-63325](https://insights.sbomify.com/MAL-2025-63325/): Malicious code in hanafi-tahutek57-sluey (npm) (malicious package)
- [MAL-2025-63324](https://insights.sbomify.com/MAL-2025-63324/): Malicious code in hanafi-semur23-sluey (npm) (malicious package)
- [MAL-2025-63323](https://insights.sbomify.com/MAL-2025-63323/): Malicious code in hanafi-pisang36-sluey (npm) (malicious package)
- [MAL-2025-63322](https://insights.sbomify.com/MAL-2025-63322/): Malicious code in hanafi-otak-otak87-sluey (npm) (malicious package)
- [MAL-2025-63321](https://insights.sbomify.com/MAL-2025-63321/): Malicious code in hanafi-oblok84-sluey (npm) (malicious package)
- [MAL-2025-63320](https://insights.sbomify.com/MAL-2025-63320/): Malicious code in hanafi-nasisayur92-sluey (npm) (malicious package)
- [MAL-2025-6332](https://insights.sbomify.com/MAL-2025-6332/): Malicious code in fast-todo-app (npm) (malicious package)
- [MAL-2025-63319](https://insights.sbomify.com/MAL-2025-63319/): Malicious code in hanafi-mie40-sluey (npm) (malicious package)
- [MAL-2025-63318](https://insights.sbomify.com/MAL-2025-63318/): Malicious code in hanafi-martabak79-sumpek (npm) (malicious package)
- [MAL-2025-63317](https://insights.sbomify.com/MAL-2025-63317/): Malicious code in hanafi-lupis3-sluey (npm) (malicious package)
- [MAL-2025-63316](https://insights.sbomify.com/MAL-2025-63316/): Malicious code in hanafi-lodeh63-sluey (npm) (malicious package)
- [MAL-2025-63315](https://insights.sbomify.com/MAL-2025-63315/): Malicious code in hanafi-lapis89-sluey (npm) (malicious package)
- [MAL-2025-63314](https://insights.sbomify.com/MAL-2025-63314/): Malicious code in hanafi-lapis54-sluey (npm) (malicious package)
- [MAL-2025-63313](https://insights.sbomify.com/MAL-2025-63313/): Malicious code in hanafi-kue95-sluey (npm) (malicious package)
- [MAL-2025-63312](https://insights.sbomify.com/MAL-2025-63312/): Malicious code in hanafi-kue62-sluey (npm) (malicious package)
- [MAL-2025-63311](https://insights.sbomify.com/MAL-2025-63311/): Malicious code in hanafi-klentik32-sluey (npm) (malicious package)
- [MAL-2025-63310](https://insights.sbomify.com/MAL-2025-63310/): Malicious code in hanafi-ketan58-sluey (npm) (malicious package)
- [MAL-2025-6331](https://insights.sbomify.com/MAL-2025-6331/): Malicious code in bfiweb (npm) (malicious package)
- [MAL-2025-63309](https://insights.sbomify.com/MAL-2025-63309/): Malicious code in hanafi-keripik92-sluey (npm) (malicious package)
- [MAL-2025-63308](https://insights.sbomify.com/MAL-2025-63308/): Malicious code in hanafi-kentang34-sumpek (npm) (malicious package)
- [MAL-2025-63307](https://insights.sbomify.com/MAL-2025-63307/): Malicious code in hanafi-jus14-sluey (npm) (malicious package)
- [MAL-2025-63306](https://insights.sbomify.com/MAL-2025-63306/): Malicious code in hanafi-gulai49-sluey (npm) (malicious package)
- [MAL-2025-63305](https://insights.sbomify.com/MAL-2025-63305/): Malicious code in hanafi-gulai14-sluey (npm) (malicious package)
- [MAL-2025-63304](https://insights.sbomify.com/MAL-2025-63304/): Malicious code in hanafi-gudeg14-sluey (npm) (malicious package)
- [MAL-2025-63303](https://insights.sbomify.com/MAL-2025-63303/): Malicious code in hanafi-gorengan59-sluey (npm) (malicious package)
- [MAL-2025-63302](https://insights.sbomify.com/MAL-2025-63302/): Malicious code in hanafi-gaplek67-sluey (npm) (malicious package)
- [MAL-2025-63301](https://insights.sbomify.com/MAL-2025-63301/): Malicious code in hanafi-gado-gado42-sluey (npm) (malicious package)
- [MAL-2025-63300](https://insights.sbomify.com/MAL-2025-63300/): Malicious code in hanafi-dradag59-sluey (npm) (malicious package)
- [MAL-2025-6330](https://insights.sbomify.com/MAL-2025-6330/): Malicious code in @ai0x1337/budoux-extension (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/410/