# Vulnerabilities published in 2025


- [MAL-2025-5970](https://insights.sbomify.com/MAL-2025-5970/): Malicious code in vitejs-plugin-refresh (npm) (malicious package)
- [MAL-2025-597](https://insights.sbomify.com/MAL-2025-597/): Malicious code in compound-protocol (npm) (malicious package)
- [MAL-2025-59699](https://insights.sbomify.com/MAL-2025-59699/): Malicious code in yuni-esdoger64-sukiwir (npm) (malicious package)
- [MAL-2025-59698](https://insights.sbomify.com/MAL-2025-59698/): Malicious code in yuni-enting49-sukiwir (npm) (malicious package)
- [MAL-2025-59697](https://insights.sbomify.com/MAL-2025-59697/): Malicious code in yuni-empal28-sukiwir (npm) (malicious package)
- [MAL-2025-59696](https://insights.sbomify.com/MAL-2025-59696/): Malicious code in yuni-dodol96-sukiwir (npm) (malicious package)
- [MAL-2025-59695](https://insights.sbomify.com/MAL-2025-59695/): Malicious code in yuni-botok77-sukiwir (npm) (malicious package)
- [MAL-2025-59694](https://insights.sbomify.com/MAL-2025-59694/): Malicious code in yuni-bakwan46-sukiwir (npm) (malicious package)
- [MAL-2025-59693](https://insights.sbomify.com/MAL-2025-59693/): Malicious code in yummy_scallop_z3n (npm) (malicious package)
- [MAL-2025-59692](https://insights.sbomify.com/MAL-2025-59692/): Malicious code in yummy_rook_z3n (npm) (malicious package)
- [MAL-2025-59691](https://insights.sbomify.com/MAL-2025-59691/): Malicious code in yucky_jellyfish_z3n (npm) (malicious package)
- [MAL-2025-59690](https://insights.sbomify.com/MAL-2025-59690/): Malicious code in ytterbic_clownfish_z3n (npm) (malicious package)
- [MAL-2025-5969](https://insights.sbomify.com/MAL-2025-5969/): Malicious code in vite-usageit (npm) (malicious package)
- [MAL-2025-59689](https://insights.sbomify.com/MAL-2025-59689/): Malicious code in youthful_opossum_z3n (npm) (malicious package)
- [MAL-2025-59688](https://insights.sbomify.com/MAL-2025-59688/): Malicious code in yodelling_wasp_z3n (npm) (malicious package)
- [MAL-2025-59687](https://insights.sbomify.com/MAL-2025-59687/): Malicious code in yodelling_vole_z3n (npm) (malicious package)
- [MAL-2025-59686](https://insights.sbomify.com/MAL-2025-59686/): Malicious code in yodelling_pigeon_z3n (npm) (malicious package)
- [MAL-2025-59685](https://insights.sbomify.com/MAL-2025-59685/): Malicious code in yielding_lobster_z3n (npm) (malicious package)
- [MAL-2025-59684](https://insights.sbomify.com/MAL-2025-59684/): Malicious code in yelping_firefly_z3n (npm) (malicious package)
- [MAL-2025-59683](https://insights.sbomify.com/MAL-2025-59683/): Malicious code in yearling_shrimp_z3n (npm) (malicious package)
- [MAL-2025-59682](https://insights.sbomify.com/MAL-2025-59682/): Malicious code in yearling_rat_z3n (npm) (malicious package)
- [MAL-2025-59681](https://insights.sbomify.com/MAL-2025-59681/): Malicious code in yearling_parrot_z3n (npm) (malicious package)
- [MAL-2025-59680](https://insights.sbomify.com/MAL-2025-59680/): Malicious code in yappiest_llama_z3n (npm) (malicious package)
- [MAL-2025-5968](https://insights.sbomify.com/MAL-2025-5968/): Malicious code in vite-proc-log (npm) (malicious package)
- [MAL-2025-59679](https://insights.sbomify.com/MAL-2025-59679/): Malicious code in yanti-wajit55-sukiwir (npm) (malicious package)
- [MAL-2025-59678](https://insights.sbomify.com/MAL-2025-59678/): Malicious code in yanti-ubi76-sukiwir (npm) (malicious package)
- [MAL-2025-59677](https://insights.sbomify.com/MAL-2025-59677/): Malicious code in yanti-ubi61-sukiwir (npm) (malicious package)
- [MAL-2025-59676](https://insights.sbomify.com/MAL-2025-59676/): Malicious code in yanti-tumis62-sukiwir (npm) (malicious package)
- [MAL-2025-59675](https://insights.sbomify.com/MAL-2025-59675/): Malicious code in yanti-toge85-sukiwir (npm) (malicious package)
- [MAL-2025-59674](https://insights.sbomify.com/MAL-2025-59674/): Malicious code in yanti-toge50-sukiwir (npm) (malicious package)
- [MAL-2025-59673](https://insights.sbomify.com/MAL-2025-59673/): Malicious code in yanti-tempe95-sukiwir (npm) (malicious package)
- [MAL-2025-59672](https://insights.sbomify.com/MAL-2025-59672/): Malicious code in yanti-telur54-sukiwir (npm) (malicious package)
- [MAL-2025-59671](https://insights.sbomify.com/MAL-2025-59671/): Malicious code in yanti-telur50-sukiwir (npm) (malicious package)
- [MAL-2025-59670](https://insights.sbomify.com/MAL-2025-59670/): Malicious code in yanti-tek7-sukiwir (npm) (malicious package)
- [MAL-2025-5967](https://insights.sbomify.com/MAL-2025-5967/): Malicious code in vite-postcss-tools (npm) (malicious package)
- [MAL-2025-59669](https://insights.sbomify.com/MAL-2025-59669/): Malicious code in yanti-takokak11-sukiwir (npm) (malicious package)
- [MAL-2025-59668](https://insights.sbomify.com/MAL-2025-59668/): Malicious code in yanti-tahutek89-sukiwir (npm) (malicious package)
- [MAL-2025-59667](https://insights.sbomify.com/MAL-2025-59667/): Malicious code in yanti-sroto34-sukiwir (npm) (malicious package)
- [MAL-2025-59666](https://insights.sbomify.com/MAL-2025-59666/): Malicious code in yanti-soto69-sukiwir (npm) (malicious package)
- [MAL-2025-59665](https://insights.sbomify.com/MAL-2025-59665/): Malicious code in yanti-serimuka2-sukiwir (npm) (malicious package)
- [MAL-2025-59664](https://insights.sbomify.com/MAL-2025-59664/): Malicious code in yanti-semur8-sukiwir (npm) (malicious package)
- [MAL-2025-59663](https://insights.sbomify.com/MAL-2025-59663/): Malicious code in yanti-sate94-sukiwir (npm) (malicious package)
- [MAL-2025-59662](https://insights.sbomify.com/MAL-2025-59662/): Malicious code in yanti-sambel12-sukiwir (npm) (malicious package)
- [MAL-2025-59661](https://insights.sbomify.com/MAL-2025-59661/): Malicious code in yanti-saguer40-sukiwir (npm) (malicious package)
- [MAL-2025-59660](https://insights.sbomify.com/MAL-2025-59660/): Malicious code in yanti-ruwet96-sukiwir (npm) (malicious package)
- [MAL-2025-5966](https://insights.sbomify.com/MAL-2025-5966/): Malicious code in vite-log-handler (npm) (malicious package)
- [MAL-2025-59659](https://insights.sbomify.com/MAL-2025-59659/): Malicious code in yanti-rujaksoto46-sukiwir (npm) (malicious package)
- [MAL-2025-59658](https://insights.sbomify.com/MAL-2025-59658/): Malicious code in yanti-ronde11-sukiwir (npm) (malicious package)
- [MAL-2025-59657](https://insights.sbomify.com/MAL-2025-59657/): Malicious code in yanti-rendang91-sukiwir (npm) (malicious package)
- [MAL-2025-59656](https://insights.sbomify.com/MAL-2025-59656/): Malicious code in yanti-rawon9-sukiwir (npm) (malicious package)
- [MAL-2025-59655](https://insights.sbomify.com/MAL-2025-59655/): Malicious code in yanti-rawon12-sukiwir (npm) (malicious package)
- [MAL-2025-59654](https://insights.sbomify.com/MAL-2025-59654/): Malicious code in yanti-ragi11-sukiwir (npm) (malicious package)
- [MAL-2025-59653](https://insights.sbomify.com/MAL-2025-59653/): Malicious code in yanti-ragi1-sukiwir (npm) (malicious package)
- [MAL-2025-59652](https://insights.sbomify.com/MAL-2025-59652/): Malicious code in yanti-pecel30-sukiwir (npm) (malicious package)
- [MAL-2025-59651](https://insights.sbomify.com/MAL-2025-59651/): Malicious code in yanti-ongol-ongol95-sukiwir (npm) (malicious package)
- [MAL-2025-59650](https://insights.sbomify.com/MAL-2025-59650/): Malicious code in yanti-oblok75-sukiwir (npm) (malicious package)
- [MAL-2025-5965](https://insights.sbomify.com/MAL-2025-5965/): Malicious code in vite-lightparse (npm) (malicious package)
- [MAL-2025-59649](https://insights.sbomify.com/MAL-2025-59649/): Malicious code in yanti-nasisayur79-sukiwir (npm) (malicious package)
- [MAL-2025-59648](https://insights.sbomify.com/MAL-2025-59648/): Malicious code in yanti-nasicampur61-sukiwir (npm) (malicious package)
- [MAL-2025-59647](https://insights.sbomify.com/MAL-2025-59647/): Malicious code in yanti-nasi35-sukiwir (npm) (malicious package)
- [MAL-2025-59646](https://insights.sbomify.com/MAL-2025-59646/): Malicious code in yanti-nasi32-sukiwir (npm) (malicious package)
- [MAL-2025-59645](https://insights.sbomify.com/MAL-2025-59645/): Malicious code in yanti-naget9-sukiwir (npm) (malicious package)
- [MAL-2025-59644](https://insights.sbomify.com/MAL-2025-59644/): Malicious code in yanti-naget70-sukiwir (npm) (malicious package)
- [MAL-2025-59643](https://insights.sbomify.com/MAL-2025-59643/): Malicious code in yanti-miebogor67-sukiwir (npm) (malicious package)
- [MAL-2025-59642](https://insights.sbomify.com/MAL-2025-59642/): Malicious code in yanti-mie30-sukiwir (npm) (malicious package)
- [MAL-2025-59641](https://insights.sbomify.com/MAL-2025-59641/): Malicious code in yanti-mie14-sukiwir (npm) (malicious package)
- [MAL-2025-59640](https://insights.sbomify.com/MAL-2025-59640/): Malicious code in yanti-menjes19-sukiwir (npm) (malicious package)
- [MAL-2025-5964](https://insights.sbomify.com/MAL-2025-5964/): Malicious code in ui-router-cool-plugin (npm) (malicious package)
- [MAL-2025-59639](https://insights.sbomify.com/MAL-2025-59639/): Malicious code in yanti-mendut89-sukiwir (npm) (malicious package)
- [MAL-2025-59638](https://insights.sbomify.com/MAL-2025-59638/): Malicious code in yanti-martabak100-sukiwir (npm) (malicious package)
- [MAL-2025-59637](https://insights.sbomify.com/MAL-2025-59637/): Malicious code in yanti-mangut43-sukiwir (npm) (malicious package)
- [MAL-2025-59636](https://insights.sbomify.com/MAL-2025-59636/): Malicious code in yanti-mangga7-sukiwir (npm) (malicious package)
- [MAL-2025-59635](https://insights.sbomify.com/MAL-2025-59635/): Malicious code in yanti-lutis90-sukiwir (npm) (malicious package)
- [MAL-2025-59634](https://insights.sbomify.com/MAL-2025-59634/): Malicious code in yanti-lupis78-sukiwir (npm) (malicious package)
- [MAL-2025-59633](https://insights.sbomify.com/MAL-2025-59633/): Malicious code in yanti-lontong52-sukiwir (npm) (malicious package)
- [MAL-2025-59632](https://insights.sbomify.com/MAL-2025-59632/): Malicious code in yanti-liwet47-sukiwir (npm) (malicious package)
- [MAL-2025-59631](https://insights.sbomify.com/MAL-2025-59631/): Malicious code in yanti-lapis50-sukiwir (npm) (malicious package)
- [MAL-2025-59630](https://insights.sbomify.com/MAL-2025-59630/): Malicious code in yanti-lapis11-sukiwir (npm) (malicious package)
- [MAL-2025-5963](https://insights.sbomify.com/MAL-2025-5963/): Malicious code in ts-immutable-sdk (npm) (malicious package)
- [MAL-2025-59629](https://insights.sbomify.com/MAL-2025-59629/): Malicious code in yanti-kupang77-sukiwir (npm) (malicious package)
- [MAL-2025-59628](https://insights.sbomify.com/MAL-2025-59628/): Malicious code in yanti-kupang66-sukiwir (npm) (malicious package)
- [MAL-2025-59627](https://insights.sbomify.com/MAL-2025-59627/): Malicious code in yanti-kue96-sukiwir (npm) (malicious package)
- [MAL-2025-59626](https://insights.sbomify.com/MAL-2025-59626/): Malicious code in yanti-kue95-sukiwir (npm) (malicious package)
- [MAL-2025-59625](https://insights.sbomify.com/MAL-2025-59625/): Malicious code in yanti-kue88-sukiwir (npm) (malicious package)
- [MAL-2025-59624](https://insights.sbomify.com/MAL-2025-59624/): Malicious code in yanti-kue7-sukiwir (npm) (malicious package)
- [MAL-2025-59623](https://insights.sbomify.com/MAL-2025-59623/): Malicious code in yanti-kue47-sukiwir (npm) (malicious package)
- [MAL-2025-59622](https://insights.sbomify.com/MAL-2025-59622/): Malicious code in yanti-kue25-sukiwir (npm) (malicious package)
- [MAL-2025-59621](https://insights.sbomify.com/MAL-2025-59621/): Malicious code in yanti-kue22-sukiwir (npm) (malicious package)
- [MAL-2025-59620](https://insights.sbomify.com/MAL-2025-59620/): Malicious code in yanti-kripik22-sukiwir (npm) (malicious package)
- [MAL-2025-5962](https://insights.sbomify.com/MAL-2025-5962/): Malicious code in themeone-utils (npm) (malicious package)
- [MAL-2025-59619](https://insights.sbomify.com/MAL-2025-59619/): Malicious code in yanti-klipo77-sukiwir (npm) (malicious package)
- [MAL-2025-59618](https://insights.sbomify.com/MAL-2025-59618/): Malicious code in yanti-klipo50-sukiwir (npm) (malicious package)
- [MAL-2025-59617](https://insights.sbomify.com/MAL-2025-59617/): Malicious code in yanti-klipo17-sukiwir (npm) (malicious package)
- [MAL-2025-59616](https://insights.sbomify.com/MAL-2025-59616/): Malicious code in yanti-klanting35-sukiwir (npm) (malicious package)
- [MAL-2025-59615](https://insights.sbomify.com/MAL-2025-59615/): Malicious code in yanti-ketoprak24-sukiwir (npm) (malicious package)
- [MAL-2025-59614](https://insights.sbomify.com/MAL-2025-59614/): Malicious code in yanti-keraktelor44-sukiwir (npm) (malicious package)
- [MAL-2025-59613](https://insights.sbomify.com/MAL-2025-59613/): Malicious code in yanti-kepok88-sukiwir (npm) (malicious package)
- [MAL-2025-59612](https://insights.sbomify.com/MAL-2025-59612/): Malicious code in yanti-kentang11-sukiwir (npm) (malicious package)
- [MAL-2025-59611](https://insights.sbomify.com/MAL-2025-59611/): Malicious code in yanti-kemplang83-sukiwir (npm) (malicious package)
- [MAL-2025-59610](https://insights.sbomify.com/MAL-2025-59610/): Malicious code in yanti-jengkol78-sukiwir (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/451/