# Vulnerabilities published in 2025


- [MAL-2025-6249](https://insights.sbomify.com/MAL-2025-6249/): Malicious code in @grafanacloud/test-utils (npm) (malicious package)
- [MAL-2025-62489](https://insights.sbomify.com/MAL-2025-62489/): Malicious code in dewi-lapis2-sluey (npm) (malicious package)
- [MAL-2025-62488](https://insights.sbomify.com/MAL-2025-62488/): Malicious code in dewi-lapis100-sluey (npm) (malicious package)
- [MAL-2025-62487](https://insights.sbomify.com/MAL-2025-62487/): Malicious code in dewi-kupat57-sluey (npm) (malicious package)
- [MAL-2025-62486](https://insights.sbomify.com/MAL-2025-62486/): Malicious code in dewi-kue92-sluey (npm) (malicious package)
- [MAL-2025-62485](https://insights.sbomify.com/MAL-2025-62485/): Malicious code in dewi-kolak9-sluey (npm) (malicious package)
- [MAL-2025-62484](https://insights.sbomify.com/MAL-2025-62484/): Malicious code in dewi-ketoprak91-sluey (npm) (malicious package)
- [MAL-2025-62483](https://insights.sbomify.com/MAL-2025-62483/): Malicious code in dewi-gulai78-sluey (npm) (malicious package)
- [MAL-2025-62482](https://insights.sbomify.com/MAL-2025-62482/): Malicious code in dewi-getuk6-sluey (npm) (malicious package)
- [MAL-2025-62481](https://insights.sbomify.com/MAL-2025-62481/): Malicious code in dewi-getas68-sluey (npm) (malicious package)
- [MAL-2025-62480](https://insights.sbomify.com/MAL-2025-62480/): Malicious code in dewi-getas41-sluey (npm) (malicious package)
- [MAL-2025-6248](https://insights.sbomify.com/MAL-2025-6248/): Malicious code in foundry-jupyter-extension (PyPI) (malicious package)
- [MAL-2025-62479](https://insights.sbomify.com/MAL-2025-62479/): Malicious code in dewi-empal1-sumpek (npm) (malicious package)
- [MAL-2025-62478](https://insights.sbomify.com/MAL-2025-62478/): Malicious code in dewi-dradag60-sluey (npm) (malicious package)
- [MAL-2025-62477](https://insights.sbomify.com/MAL-2025-62477/): Malicious code in dewi-donat45-sumpek (npm) (malicious package)
- [MAL-2025-62476](https://insights.sbomify.com/MAL-2025-62476/): Malicious code in dewi-bakwan80-sluey (npm) (malicious package)
- [MAL-2025-62475](https://insights.sbomify.com/MAL-2025-62475/): Malicious code in dewi-bakso48-sluey (npm) (malicious package)
- [MAL-2025-62474](https://insights.sbomify.com/MAL-2025-62474/): Malicious code in dewanto-wajit50-sluey (npm) (malicious package)
- [MAL-2025-62473](https://insights.sbomify.com/MAL-2025-62473/): Malicious code in dewanto-telurtahu72-sluey (npm) (malicious package)
- [MAL-2025-62472](https://insights.sbomify.com/MAL-2025-62472/): Malicious code in dewanto-telur92-sluey (npm) (malicious package)
- [MAL-2025-62471](https://insights.sbomify.com/MAL-2025-62471/): Malicious code in dewanto-tek86-sluey (npm) (malicious package)
- [MAL-2025-62470](https://insights.sbomify.com/MAL-2025-62470/): Malicious code in dewanto-soto81-sluey (npm) (malicious package)
- [MAL-2025-6247](https://insights.sbomify.com/MAL-2025-6247/): Malicious code in vitejs-plugin-react-refresh (npm) (malicious package)
- [MAL-2025-62469](https://insights.sbomify.com/MAL-2025-62469/): Malicious code in dewanto-serimuka100-sluey (npm) (malicious package)
- [MAL-2025-62468](https://insights.sbomify.com/MAL-2025-62468/): Malicious code in dewanto-serabi13-sluey (npm) (malicious package)
- [MAL-2025-62467](https://insights.sbomify.com/MAL-2025-62467/): Malicious code in dewanto-sasag84-sluey (npm) (malicious package)
- [MAL-2025-62466](https://insights.sbomify.com/MAL-2025-62466/): Malicious code in dewanto-sambel46-sluey (npm) (malicious package)
- [MAL-2025-62465](https://insights.sbomify.com/MAL-2025-62465/): Malicious code in dewanto-rujaksoto9-sluey (npm) (malicious package)
- [MAL-2025-62464](https://insights.sbomify.com/MAL-2025-62464/): Malicious code in dewanto-rujaksoto84-sluey (npm) (malicious package)
- [MAL-2025-62463](https://insights.sbomify.com/MAL-2025-62463/): Malicious code in dewanto-rangi85-sluey (npm) (malicious package)
- [MAL-2025-62462](https://insights.sbomify.com/MAL-2025-62462/): Malicious code in dewanto-rangi30-sluey (npm) (malicious package)
- [MAL-2025-62461](https://insights.sbomify.com/MAL-2025-62461/): Malicious code in dewanto-peyek62-sluey (npm) (malicious package)
- [MAL-2025-62460](https://insights.sbomify.com/MAL-2025-62460/): Malicious code in dewanto-pecel29-sluey (npm) (malicious package)
- [MAL-2025-6246](https://insights.sbomify.com/MAL-2025-6246/): Malicious code in preset-classic (npm) (malicious package)
- [MAL-2025-62459](https://insights.sbomify.com/MAL-2025-62459/): Malicious code in dewanto-nasicampur45-sluey (npm) (malicious package)
- [MAL-2025-62458](https://insights.sbomify.com/MAL-2025-62458/): Malicious code in dewanto-nasicampur37-sluey (npm) (malicious package)
- [MAL-2025-62457](https://insights.sbomify.com/MAL-2025-62457/): Malicious code in dewanto-nasi88-sluey (npm) (malicious package)
- [MAL-2025-62456](https://insights.sbomify.com/MAL-2025-62456/): Malicious code in dewanto-nasi32-sumpek (npm) (malicious package)
- [MAL-2025-62455](https://insights.sbomify.com/MAL-2025-62455/): Malicious code in dewanto-menjes79-sluey (npm) (malicious package)
- [MAL-2025-62454](https://insights.sbomify.com/MAL-2025-62454/): Malicious code in dewanto-menjes35-sluey (npm) (malicious package)
- [MAL-2025-62453](https://insights.sbomify.com/MAL-2025-62453/): Malicious code in dewanto-menjes11-sluey (npm) (malicious package)
- [MAL-2025-62452](https://insights.sbomify.com/MAL-2025-62452/): Malicious code in dewanto-martabak59-sluey (npm) (malicious package)
- [MAL-2025-62451](https://insights.sbomify.com/MAL-2025-62451/): Malicious code in dewanto-mangga63-sluey (npm) (malicious package)
- [MAL-2025-62450](https://insights.sbomify.com/MAL-2025-62450/): Malicious code in dewanto-lumpur92-sluey (npm) (malicious package)
- [MAL-2025-6245](https://insights.sbomify.com/MAL-2025-6245/): Malicious code in jsonlise-conf (npm) (malicious package)
- [MAL-2025-62449](https://insights.sbomify.com/MAL-2025-62449/): Malicious code in dewanto-kupang82-sluey (npm) (malicious package)
- [MAL-2025-62448](https://insights.sbomify.com/MAL-2025-62448/): Malicious code in dewanto-kupang36-sluey (npm) (malicious package)
- [MAL-2025-62447](https://insights.sbomify.com/MAL-2025-62447/): Malicious code in dewanto-kue47-sluey (npm) (malicious package)
- [MAL-2025-62446](https://insights.sbomify.com/MAL-2025-62446/): Malicious code in dewanto-keripik98-sluey (npm) (malicious package)
- [MAL-2025-62445](https://insights.sbomify.com/MAL-2025-62445/): Malicious code in dewanto-keraktelor86-sluey (npm) (malicious package)
- [MAL-2025-62444](https://insights.sbomify.com/MAL-2025-62444/): Malicious code in dewanto-kemplang35-sumpek (npm) (malicious package)
- [MAL-2025-62443](https://insights.sbomify.com/MAL-2025-62443/): Malicious code in dewanto-gembus44-sluey (npm) (malicious package)
- [MAL-2025-62442](https://insights.sbomify.com/MAL-2025-62442/): Malicious code in dewanto-donat31-sluey (npm) (malicious package)
- [MAL-2025-62441](https://insights.sbomify.com/MAL-2025-62441/): Malicious code in dewanto-bubur30-sluey (npm) (malicious package)
- [MAL-2025-62440](https://insights.sbomify.com/MAL-2025-62440/): Malicious code in dewanto-botok6-sluey (npm) (malicious package)
- [MAL-2025-6244](https://insights.sbomify.com/MAL-2025-6244/): Malicious code in jet-os-detection (npm) (malicious package)
- [MAL-2025-62439](https://insights.sbomify.com/MAL-2025-62439/): Malicious code in dewanto-bika82-sluey (npm) (malicious package)
- [MAL-2025-62438](https://insights.sbomify.com/MAL-2025-62438/): Malicious code in developing_rat_z3n (npm) (malicious package)
- [MAL-2025-62437](https://insights.sbomify.com/MAL-2025-62437/): Malicious code in developing_mackerel_z3n (npm) (malicious package)
- [MAL-2025-62436](https://insights.sbomify.com/MAL-2025-62436/): Malicious code in developing_clownfish_z3n (npm) (malicious package)
- [MAL-2025-62435](https://insights.sbomify.com/MAL-2025-62435/): Malicious code in developed_heron_z3n (npm) (malicious package)
- [MAL-2025-62434](https://insights.sbomify.com/MAL-2025-62434/): Malicious code in determined_wildfowl_z3n (npm) (malicious package)
- [MAL-2025-62433](https://insights.sbomify.com/MAL-2025-62433/): Malicious code in determined_turkey_z3n (npm) (malicious package)
- [MAL-2025-62432](https://insights.sbomify.com/MAL-2025-62432/): Malicious code in detailed_catshark_z3n (npm) (malicious package)
- [MAL-2025-62431](https://insights.sbomify.com/MAL-2025-62431/): Malicious code in desperate_salamander_z3n (npm) (malicious package)
- [MAL-2025-62430](https://insights.sbomify.com/MAL-2025-62430/): Malicious code in desperate_aphid_z3n (npm) (malicious package)
- [MAL-2025-6243](https://insights.sbomify.com/MAL-2025-6243/): Malicious code in grafana-internal-config-loader (npm) (malicious package)
- [MAL-2025-62429](https://insights.sbomify.com/MAL-2025-62429/): Malicious code in depressed_stingray_z3n (npm) (malicious package)
- [MAL-2025-62428](https://insights.sbomify.com/MAL-2025-62428/): Malicious code in depressed_cicada_z3n (npm) (malicious package)
- [MAL-2025-62427](https://insights.sbomify.com/MAL-2025-62427/): Malicious code in dependent_takin_z3n (npm) (malicious package)
- [MAL-2025-62426](https://insights.sbomify.com/MAL-2025-62426/): Malicious code in delicious_falcon_z3n (npm) (malicious package)
- [MAL-2025-62425](https://insights.sbomify.com/MAL-2025-62425/): Malicious code in delicate_bug_z3n (npm) (malicious package)
- [MAL-2025-62424](https://insights.sbomify.com/MAL-2025-62424/): Malicious code in defeated_aardvark_z3n (npm) (malicious package)
- [MAL-2025-62423](https://insights.sbomify.com/MAL-2025-62423/): Malicious code in deep_dormouse_z3n (npm) (malicious package)
- [MAL-2025-62422](https://insights.sbomify.com/MAL-2025-62422/): Malicious code in decent_gayal_z3n (npm) (malicious package)
- [MAL-2025-62421](https://insights.sbomify.com/MAL-2025-62421/): Malicious code in deafening_scallop_z3n (npm) (malicious package)
- [MAL-2025-62420](https://insights.sbomify.com/MAL-2025-62420/): Malicious code in dead_swallow_z3n (npm) (malicious package)
- [MAL-2025-6242](https://insights.sbomify.com/MAL-2025-6242/): Malicious code in dexa56 (npm) (malicious package)
- [MAL-2025-62419](https://insights.sbomify.com/MAL-2025-62419/): Malicious code in dark_kiwi_z3n (npm) (malicious package)
- [MAL-2025-62418](https://insights.sbomify.com/MAL-2025-62418/): Malicious code in dangerous_ox_z3n (npm) (malicious package)
- [MAL-2025-62417](https://insights.sbomify.com/MAL-2025-62417/): Malicious code in damaged_sheep_z3n (npm) (malicious package)
- [MAL-2025-62416](https://insights.sbomify.com/MAL-2025-62416/): Malicious code in damaged_bison_z3n (npm) (malicious package)
- [MAL-2025-62415](https://insights.sbomify.com/MAL-2025-62415/): Malicious code in cute_pigeon_z3n (npm) (malicious package)
- [MAL-2025-62414](https://insights.sbomify.com/MAL-2025-62414/): Malicious code in curved_jay_z3n (npm) (malicious package)
- [MAL-2025-62413](https://insights.sbomify.com/MAL-2025-62413/): Malicious code in curved_ape_z3n (npm) (malicious package)
- [MAL-2025-62412](https://insights.sbomify.com/MAL-2025-62412/): Malicious code in curly_cougar_z3n (npm) (malicious package)
- [MAL-2025-62411](https://insights.sbomify.com/MAL-2025-62411/): Malicious code in curly_antelope_z3n (npm) (malicious package)
- [MAL-2025-62410](https://insights.sbomify.com/MAL-2025-62410/): Malicious code in cuddly_reptile_z3n (npm) (malicious package)
- [MAL-2025-6241](https://insights.sbomify.com/MAL-2025-6241/): Malicious code in budoux-extension (npm) (malicious package)
- [MAL-2025-62409](https://insights.sbomify.com/MAL-2025-62409/): Malicious code in cuddly_cod_z3n (npm) (malicious package)
- [MAL-2025-62408](https://insights.sbomify.com/MAL-2025-62408/): Malicious code in crooked_aardwolf_z3n (npm) (malicious package)
- [MAL-2025-62407](https://insights.sbomify.com/MAL-2025-62407/): Malicious code in creepy_clam_z3n (npm) (malicious package)
- [MAL-2025-62406](https://insights.sbomify.com/MAL-2025-62406/): Malicious code in creative_finch_z3n (npm) (malicious package)
- [MAL-2025-62405](https://insights.sbomify.com/MAL-2025-62405/): Malicious code in crazy_fish_z3n (npm) (malicious package)
- [MAL-2025-62404](https://insights.sbomify.com/MAL-2025-62404/): Malicious code in corporate_carp_z3n (npm) (malicious package)
- [MAL-2025-62403](https://insights.sbomify.com/MAL-2025-62403/): Malicious code in cooing_alligator_z3n (npm) (malicious package)
- [MAL-2025-62402](https://insights.sbomify.com/MAL-2025-62402/): Malicious code in convincing_salamander_z3n (npm) (malicious package)
- [MAL-2025-62401](https://insights.sbomify.com/MAL-2025-62401/): Malicious code in controversial_stingray_z3n (npm) (malicious package)
- [MAL-2025-62400](https://insights.sbomify.com/MAL-2025-62400/): Malicious code in controversial_chipmunk_z3n (npm) (malicious package)
- [MAL-2025-6240](https://insights.sbomify.com/MAL-2025-6240/): Malicious code in xp-anti-fraud-js-lib (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/420/