# Vulnerabilities published in 2025


- [MAL-2025-58890](https://insights.sbomify.com/MAL-2025-58890/): Malicious code in tania-toge4-sukiwir (npm) (malicious package)
- [MAL-2025-5889](https://insights.sbomify.com/MAL-2025-5889/): Malicious code in ai-gallery (npm) (malicious package)
- [MAL-2025-58889](https://insights.sbomify.com/MAL-2025-58889/): Malicious code in tania-telurtahu42-sukiwir (npm) (malicious package)
- [MAL-2025-58888](https://insights.sbomify.com/MAL-2025-58888/): Malicious code in tania-telurtahu19-sukiwir (npm) (malicious package)
- [MAL-2025-58887](https://insights.sbomify.com/MAL-2025-58887/): Malicious code in tania-teh65-sukiwir (npm) (malicious package)
- [MAL-2025-58886](https://insights.sbomify.com/MAL-2025-58886/): Malicious code in tania-tapai52-sukiwir (npm) (malicious package)
- [MAL-2025-58885](https://insights.sbomify.com/MAL-2025-58885/): Malicious code in tania-tahu9-sukiwir (npm) (malicious package)
- [MAL-2025-58884](https://insights.sbomify.com/MAL-2025-58884/): Malicious code in tania-tahu40-sukiwir (npm) (malicious package)
- [MAL-2025-58883](https://insights.sbomify.com/MAL-2025-58883/): Malicious code in tania-semur47-sukiwir (npm) (malicious package)
- [MAL-2025-58882](https://insights.sbomify.com/MAL-2025-58882/): Malicious code in tania-semur15-sukiwir (npm) (malicious package)
- [MAL-2025-58881](https://insights.sbomify.com/MAL-2025-58881/): Malicious code in tania-sambalado37-sukiwir (npm) (malicious package)
- [MAL-2025-58880](https://insights.sbomify.com/MAL-2025-58880/): Malicious code in tania-ronde46-sukiwir (npm) (malicious package)
- [MAL-2025-5888](https://insights.sbomify.com/MAL-2025-5888/): Malicious code in ai-audio-descriptions (npm) (malicious package)
- [MAL-2025-58879](https://insights.sbomify.com/MAL-2025-58879/): Malicious code in tania-rangi86-sukiwir (npm) (malicious package)
- [MAL-2025-58878](https://insights.sbomify.com/MAL-2025-58878/): Malicious code in tania-rangginang10-sukiwir (npm) (malicious package)
- [MAL-2025-58877](https://insights.sbomify.com/MAL-2025-58877/): Malicious code in tania-nasisayur57-sukiwir (npm) (malicious package)
- [MAL-2025-58876](https://insights.sbomify.com/MAL-2025-58876/): Malicious code in tania-nasisayur4-sukiwir (npm) (malicious package)
- [MAL-2025-58875](https://insights.sbomify.com/MAL-2025-58875/): Malicious code in tania-nasipecel51-sukiwir (npm) (malicious package)
- [MAL-2025-58874](https://insights.sbomify.com/MAL-2025-58874/): Malicious code in tania-mieayam40-sukiwir (npm) (malicious package)
- [MAL-2025-58873](https://insights.sbomify.com/MAL-2025-58873/): Malicious code in tania-mieaceh21-sukiwir (npm) (malicious package)
- [MAL-2025-58872](https://insights.sbomify.com/MAL-2025-58872/): Malicious code in tania-mendut85-sukiwir (npm) (malicious package)
- [MAL-2025-58871](https://insights.sbomify.com/MAL-2025-58871/): Malicious code in tania-mendoan70-sukiwir (npm) (malicious package)
- [MAL-2025-58870](https://insights.sbomify.com/MAL-2025-58870/): Malicious code in tania-mangut58-sukiwir (npm) (malicious package)
- [MAL-2025-5887](https://insights.sbomify.com/MAL-2025-5887/): Malicious code in agent-configurator (npm) (malicious package)
- [MAL-2025-58869](https://insights.sbomify.com/MAL-2025-58869/): Malicious code in tania-lapis64-sukiwir (npm) (malicious package)
- [MAL-2025-58868](https://insights.sbomify.com/MAL-2025-58868/): Malicious code in tania-lapis4-sukiwir (npm) (malicious package)
- [MAL-2025-58867](https://insights.sbomify.com/MAL-2025-58867/): Malicious code in tania-lapis32-sukiwir (npm) (malicious package)
- [MAL-2025-58866](https://insights.sbomify.com/MAL-2025-58866/): Malicious code in tania-kue76-sukiwir (npm) (malicious package)
- [MAL-2025-58865](https://insights.sbomify.com/MAL-2025-58865/): Malicious code in tania-jus48-sukiwir (npm) (malicious package)
- [MAL-2025-58864](https://insights.sbomify.com/MAL-2025-58864/): Malicious code in tania-jus33-sukiwir (npm) (malicious package)
- [MAL-2025-58863](https://insights.sbomify.com/MAL-2025-58863/): Malicious code in tania-gudeg87-sukiwir (npm) (malicious package)
- [MAL-2025-58862](https://insights.sbomify.com/MAL-2025-58862/): Malicious code in tania-gorengan87-sukiwir (npm) (malicious package)
- [MAL-2025-58861](https://insights.sbomify.com/MAL-2025-58861/): Malicious code in tania-esdoger35-sukiwir (npm) (malicious package)
- [MAL-2025-58860](https://insights.sbomify.com/MAL-2025-58860/): Malicious code in tania-dodol56-sukiwir (npm) (malicious package)
- [MAL-2025-5886](https://insights.sbomify.com/MAL-2025-5886/): Malicious code in affirm-stories (npm) (malicious package)
- [MAL-2025-58859](https://insights.sbomify.com/MAL-2025-58859/): Malicious code in tania-bubursumsum72-sukiwir (npm) (malicious package)
- [MAL-2025-58858](https://insights.sbomify.com/MAL-2025-58858/): Malicious code in tania-bubur70-sukiwir (npm) (malicious package)
- [MAL-2025-58857](https://insights.sbomify.com/MAL-2025-58857/): Malicious code in tania-brengkes9-sukiwir (npm) (malicious package)
- [MAL-2025-58856](https://insights.sbomify.com/MAL-2025-58856/): Malicious code in tania-brengkes20-sukiwir (npm) (malicious package)
- [MAL-2025-58855](https://insights.sbomify.com/MAL-2025-58855/): Malicious code in tania-botok64-sukiwir (npm) (malicious package)
- [MAL-2025-58854](https://insights.sbomify.com/MAL-2025-58854/): Malicious code in tania-asinan36-sukiwir (npm) (malicious package)
- [MAL-2025-58853](https://insights.sbomify.com/MAL-2025-58853/): Malicious code in tall_possum_z3n (npm) (malicious package)
- [MAL-2025-58852](https://insights.sbomify.com/MAL-2025-58852/): Malicious code in systematic_tyrannosaurus_z3n (npm) (malicious package)
- [MAL-2025-58851](https://insights.sbomify.com/MAL-2025-58851/): Malicious code in systematic_bass_z3n (npm) (malicious package)
- [MAL-2025-58850](https://insights.sbomify.com/MAL-2025-58850/): Malicious code in systematic_anaconda_z3n (npm) (malicious package)
- [MAL-2025-5885](https://insights.sbomify.com/MAL-2025-5885/): Malicious code in ado-codespaces-auth (npm) (malicious package)
- [MAL-2025-58849](https://insights.sbomify.com/MAL-2025-58849/): Malicious code in symbolic_crawdad_z3n (npm) (malicious package)
- [MAL-2025-58848](https://insights.sbomify.com/MAL-2025-58848/): Malicious code in symbolic_bug_z3n (npm) (malicious package)
- [MAL-2025-58847](https://insights.sbomify.com/MAL-2025-58847/): Malicious code in symbolic_antelope_z3n (npm) (malicious package)
- [MAL-2025-58846](https://insights.sbomify.com/MAL-2025-58846/): Malicious code in swift_otter_z3n (npm) (malicious package)
- [MAL-2025-58845](https://insights.sbomify.com/MAL-2025-58845/): Malicious code in swift_horse_z3n (npm) (malicious package)
- [MAL-2025-58844](https://insights.sbomify.com/MAL-2025-58844/): Malicious code in sweet_chicken_z3n (npm) (malicious package)
- [MAL-2025-58843](https://insights.sbomify.com/MAL-2025-58843/): Malicious code in surya-tempe53-sukiwir (npm) (malicious package)
- [MAL-2025-58842](https://insights.sbomify.com/MAL-2025-58842/): Malicious code in surya-telurtahu52-sukiwir (npm) (malicious package)
- [MAL-2025-58841](https://insights.sbomify.com/MAL-2025-58841/): Malicious code in surya-tek40-sukiwir (npm) (malicious package)
- [MAL-2025-58840](https://insights.sbomify.com/MAL-2025-58840/): Malicious code in surya-teh32-sukiwir (npm) (malicious package)
- [MAL-2025-5884](https://insights.sbomify.com/MAL-2025-5884/): Malicious code in acios.js (npm) (malicious package)
- [MAL-2025-58839](https://insights.sbomify.com/MAL-2025-58839/): Malicious code in surya-teh3-sukiwir (npm) (malicious package)
- [MAL-2025-58838](https://insights.sbomify.com/MAL-2025-58838/): Malicious code in surya-teh25-sukiwir (npm) (malicious package)
- [MAL-2025-58837](https://insights.sbomify.com/MAL-2025-58837/): Malicious code in surya-tapai53-sukiwir (npm) (malicious package)
- [MAL-2025-58836](https://insights.sbomify.com/MAL-2025-58836/): Malicious code in surya-sambel51-sukiwir (npm) (malicious package)
- [MAL-2025-58835](https://insights.sbomify.com/MAL-2025-58835/): Malicious code in surya-rujak86-sukiwir (npm) (malicious package)
- [MAL-2025-58834](https://insights.sbomify.com/MAL-2025-58834/): Malicious code in surya-rujak63-sukiwir (npm) (malicious package)
- [MAL-2025-58833](https://insights.sbomify.com/MAL-2025-58833/): Malicious code in surya-rangi26-sukiwir (npm) (malicious package)
- [MAL-2025-58832](https://insights.sbomify.com/MAL-2025-58832/): Malicious code in surya-rangginang82-sukiwir (npm) (malicious package)
- [MAL-2025-58831](https://insights.sbomify.com/MAL-2025-58831/): Malicious code in surya-rangginang25-sukiwir (npm) (malicious package)
- [MAL-2025-58830](https://insights.sbomify.com/MAL-2025-58830/): Malicious code in surya-rangginang23-sukiwir (npm) (malicious package)
- [MAL-2025-5883](https://insights.sbomify.com/MAL-2025-5883/): Malicious code in @web-kit-package/grab-login (npm) (malicious package)
- [MAL-2025-58829](https://insights.sbomify.com/MAL-2025-58829/): Malicious code in surya-oncom19-sukiwir (npm) (malicious package)
- [MAL-2025-58828](https://insights.sbomify.com/MAL-2025-58828/): Malicious code in surya-oblok6-sukiwir (npm) (malicious package)
- [MAL-2025-58827](https://insights.sbomify.com/MAL-2025-58827/): Malicious code in surya-nasicampur91-sukiwir (npm) (malicious package)
- [MAL-2025-58826](https://insights.sbomify.com/MAL-2025-58826/): Malicious code in surya-martabak40-sukiwir (npm) (malicious package)
- [MAL-2025-58825](https://insights.sbomify.com/MAL-2025-58825/): Malicious code in surya-lapis93-sukiwir (npm) (malicious package)
- [MAL-2025-58824](https://insights.sbomify.com/MAL-2025-58824/): Malicious code in surya-lapis92-sukiwir (npm) (malicious package)
- [MAL-2025-58823](https://insights.sbomify.com/MAL-2025-58823/): Malicious code in surya-lapis75-sukiwir (npm) (malicious package)
- [MAL-2025-58822](https://insights.sbomify.com/MAL-2025-58822/): Malicious code in surya-lapis47-sukiwir (npm) (malicious package)
- [MAL-2025-58821](https://insights.sbomify.com/MAL-2025-58821/): Malicious code in surya-kupang85-sukiwir (npm) (malicious package)
- [MAL-2025-58820](https://insights.sbomify.com/MAL-2025-58820/): Malicious code in surya-kue6-sukiwir (npm) (malicious package)
- [MAL-2025-5882](https://insights.sbomify.com/MAL-2025-5882/): Malicious code in @vapc-ui/search-box (npm) (malicious package)
- [MAL-2025-58819](https://insights.sbomify.com/MAL-2025-58819/): Malicious code in surya-kolak45-sukiwir (npm) (malicious package)
- [MAL-2025-58818](https://insights.sbomify.com/MAL-2025-58818/): Malicious code in surya-klentik10-sukiwir (npm) (malicious package)
- [MAL-2025-58817](https://insights.sbomify.com/MAL-2025-58817/): Malicious code in surya-ketan7-sukiwir (npm) (malicious package)
- [MAL-2025-58816](https://insights.sbomify.com/MAL-2025-58816/): Malicious code in surya-keripik87-sukiwir (npm) (malicious package)
- [MAL-2025-58815](https://insights.sbomify.com/MAL-2025-58815/): Malicious code in surya-kepok30-sukiwir (npm) (malicious package)
- [MAL-2025-58814](https://insights.sbomify.com/MAL-2025-58814/): Malicious code in surya-gepuk25-sukiwir (npm) (malicious package)
- [MAL-2025-58813](https://insights.sbomify.com/MAL-2025-58813/): Malicious code in surya-esdoger76-sukiwir (npm) (malicious package)
- [MAL-2025-58812](https://insights.sbomify.com/MAL-2025-58812/): Malicious code in surya-dradag69-sukiwir (npm) (malicious package)
- [MAL-2025-58811](https://insights.sbomify.com/MAL-2025-58811/): Malicious code in surya-dodol23-sukiwir (npm) (malicious package)
- [MAL-2025-58810](https://insights.sbomify.com/MAL-2025-58810/): Malicious code in surya-bika85-sukiwir (npm) (malicious package)
- [MAL-2025-5881](https://insights.sbomify.com/MAL-2025-5881/): Malicious code in @vapc-ui/font-icon (npm) (malicious package)
- [MAL-2025-58809](https://insights.sbomify.com/MAL-2025-58809/): Malicious code in surya-bakso39-sukiwir (npm) (malicious package)
- [MAL-2025-58808](https://insights.sbomify.com/MAL-2025-58808/): Malicious code in surprised_frog_z3n (npm) (malicious package)
- [MAL-2025-58807](https://insights.sbomify.com/MAL-2025-58807/): Malicious code in sure_lizard_z3n (npm) (malicious package)
- [MAL-2025-58806](https://insights.sbomify.com/MAL-2025-58806/): Malicious code in sure_cow_z3n (npm) (malicious package)
- [MAL-2025-58805](https://insights.sbomify.com/MAL-2025-58805/): Malicious code in supreme_tarantula_z3n (npm) (malicious package)
- [MAL-2025-58804](https://insights.sbomify.com/MAL-2025-58804/): Malicious code in supposed_guan_z3n (npm) (malicious package)
- [MAL-2025-58803](https://insights.sbomify.com/MAL-2025-58803/): Malicious code in supposed_elk_z3n (npm) (malicious package)
- [MAL-2025-58802](https://insights.sbomify.com/MAL-2025-58802/): Malicious code in supposed_cod_z3n (npm) (malicious package)
- [MAL-2025-58801](https://insights.sbomify.com/MAL-2025-58801/): Malicious code in superb_manatee_z3n (npm) (malicious package)
- [MAL-2025-58800](https://insights.sbomify.com/MAL-2025-58800/): Malicious code in suitable_yak_z3n (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/460/