# Vulnerabilities published in 2025


- [MAL-2025-5871](https://insights.sbomify.com/MAL-2025-5871/): Malicious code in @gdcorp-commerce/cx-orders (npm) (malicious package)
- [MAL-2025-58709](https://insights.sbomify.com/MAL-2025-58709/): Malicious code in siska-kacang69-sukiwir (npm) (malicious package)
- [MAL-2025-58708](https://insights.sbomify.com/MAL-2025-58708/): Malicious code in siska-jengkol22-sukiwir (npm) (malicious package)
- [MAL-2025-58707](https://insights.sbomify.com/MAL-2025-58707/): Malicious code in siska-gulai60-sukiwir (npm) (malicious package)
- [MAL-2025-58706](https://insights.sbomify.com/MAL-2025-58706/): Malicious code in siska-empal89-sukiwir (npm) (malicious package)
- [MAL-2025-58705](https://insights.sbomify.com/MAL-2025-58705/): Malicious code in siska-dodol3-sukiwir (npm) (malicious package)
- [MAL-2025-58704](https://insights.sbomify.com/MAL-2025-58704/): Malicious code in siska-bakwan32-sukiwir (npm) (malicious package)
- [MAL-2025-58703](https://insights.sbomify.com/MAL-2025-58703/): Malicious code in sinta-tomat67-sukiwir (npm) (malicious package)
- [MAL-2025-58702](https://insights.sbomify.com/MAL-2025-58702/): Malicious code in sinta-tek5-sukiwir (npm) (malicious package)
- [MAL-2025-58701](https://insights.sbomify.com/MAL-2025-58701/): Malicious code in sinta-soto64-sukiwir (npm) (malicious package)
- [MAL-2025-58700](https://insights.sbomify.com/MAL-2025-58700/): Malicious code in sinta-soto20-sukiwir (npm) (malicious package)
- [MAL-2025-5870](https://insights.sbomify.com/MAL-2025-5870/): Malicious code in @gdcorp-commerce/cx-event-tracker (npm) (malicious package)
- [MAL-2025-587](https://insights.sbomify.com/MAL-2025-587/): Malicious code in swift-login-api (npm) (malicious package)
- [MAL-2025-58699](https://insights.sbomify.com/MAL-2025-58699/): Malicious code in sinta-soto18-sukiwir (npm) (malicious package)
- [MAL-2025-58698](https://insights.sbomify.com/MAL-2025-58698/): Malicious code in sinta-sate12-sukiwir (npm) (malicious package)
- [MAL-2025-58697](https://insights.sbomify.com/MAL-2025-58697/): Malicious code in sinta-rangi99-sukiwir (npm) (malicious package)
- [MAL-2025-58696](https://insights.sbomify.com/MAL-2025-58696/): Malicious code in sinta-rangginang18-sukiwir (npm) (malicious package)
- [MAL-2025-58695](https://insights.sbomify.com/MAL-2025-58695/): Malicious code in sinta-pisang72-sukiwir (npm) (malicious package)
- [MAL-2025-58694](https://insights.sbomify.com/MAL-2025-58694/): Malicious code in sinta-pecel81-sukiwir (npm) (malicious package)
- [MAL-2025-58693](https://insights.sbomify.com/MAL-2025-58693/): Malicious code in sinta-nasicampur28-sukiwir (npm) (malicious package)
- [MAL-2025-58692](https://insights.sbomify.com/MAL-2025-58692/): Malicious code in sinta-naget60-sukiwir (npm) (malicious package)
- [MAL-2025-58691](https://insights.sbomify.com/MAL-2025-58691/): Malicious code in sinta-naget50-sukiwir (npm) (malicious package)
- [MAL-2025-58690](https://insights.sbomify.com/MAL-2025-58690/): Malicious code in sinta-moci3-sukiwir (npm) (malicious package)
- [MAL-2025-5869](https://insights.sbomify.com/MAL-2025-5869/): Malicious code in @gdcorp-commerce/cx-api-connect (npm) (malicious package)
- [MAL-2025-58689](https://insights.sbomify.com/MAL-2025-58689/): Malicious code in sinta-moci12-sukiwir (npm) (malicious package)
- [MAL-2025-58688](https://insights.sbomify.com/MAL-2025-58688/): Malicious code in sinta-miemee99-sukiwir (npm) (malicious package)
- [MAL-2025-58687](https://insights.sbomify.com/MAL-2025-58687/): Malicious code in sinta-miebogor86-sukiwir (npm) (malicious package)
- [MAL-2025-58686](https://insights.sbomify.com/MAL-2025-58686/): Malicious code in sinta-mie85-sukiwir (npm) (malicious package)
- [MAL-2025-58685](https://insights.sbomify.com/MAL-2025-58685/): Malicious code in sinta-mendoan95-sukiwir (npm) (malicious package)
- [MAL-2025-58684](https://insights.sbomify.com/MAL-2025-58684/): Malicious code in sinta-mangut74-sukiwir (npm) (malicious package)
- [MAL-2025-58683](https://insights.sbomify.com/MAL-2025-58683/): Malicious code in sinta-lutis2-sukiwir (npm) (malicious package)
- [MAL-2025-58682](https://insights.sbomify.com/MAL-2025-58682/): Malicious code in sinta-lontong24-sukiwir (npm) (malicious package)
- [MAL-2025-58681](https://insights.sbomify.com/MAL-2025-58681/): Malicious code in sinta-lepet71-sukiwir (npm) (malicious package)
- [MAL-2025-58680](https://insights.sbomify.com/MAL-2025-58680/): Malicious code in sinta-lapis45-sukiwir (npm) (malicious package)
- [MAL-2025-5868](https://insights.sbomify.com/MAL-2025-5868/): Malicious code in @forge-ui-components/media-player (npm) (malicious package)
- [MAL-2025-58679](https://insights.sbomify.com/MAL-2025-58679/): Malicious code in sinta-lapis26-sukiwir (npm) (malicious package)
- [MAL-2025-58678](https://insights.sbomify.com/MAL-2025-58678/): Malicious code in sinta-kupat39-sukiwir (npm) (malicious package)
- [MAL-2025-58677](https://insights.sbomify.com/MAL-2025-58677/): Malicious code in sinta-kupat15-sukiwir (npm) (malicious package)
- [MAL-2025-58676](https://insights.sbomify.com/MAL-2025-58676/): Malicious code in sinta-kue38-sukiwir (npm) (malicious package)
- [MAL-2025-58675](https://insights.sbomify.com/MAL-2025-58675/): Malicious code in sinta-klanting56-sukiwir (npm) (malicious package)
- [MAL-2025-58674](https://insights.sbomify.com/MAL-2025-58674/): Malicious code in sinta-ketoprak71-sukiwir (npm) (malicious package)
- [MAL-2025-58673](https://insights.sbomify.com/MAL-2025-58673/): Malicious code in sinta-ketan85-sukiwir (npm) (malicious package)
- [MAL-2025-58672](https://insights.sbomify.com/MAL-2025-58672/): Malicious code in sinta-ikan66-sukiwir (npm) (malicious package)
- [MAL-2025-58671](https://insights.sbomify.com/MAL-2025-58671/): Malicious code in sinta-getas7-sukiwir (npm) (malicious package)
- [MAL-2025-58670](https://insights.sbomify.com/MAL-2025-58670/): Malicious code in sinta-gaplek35-sukiwir (npm) (malicious package)
- [MAL-2025-5867](https://insights.sbomify.com/MAL-2025-5867/): Malicious code in @ecommerce-cart-ui/client (npm) (malicious package)
- [MAL-2025-58669](https://insights.sbomify.com/MAL-2025-58669/): Malicious code in sinta-empal66-sukiwir (npm) (malicious package)
- [MAL-2025-58668](https://insights.sbomify.com/MAL-2025-58668/): Malicious code in sinta-empal15-sukiwir (npm) (malicious package)
- [MAL-2025-58667](https://insights.sbomify.com/MAL-2025-58667/): Malicious code in sinta-bubursumsum70-sukiwir (npm) (malicious package)
- [MAL-2025-58666](https://insights.sbomify.com/MAL-2025-58666/): Malicious code in sinta-bubursumsum26-sukiwir (npm) (malicious package)
- [MAL-2025-58665](https://insights.sbomify.com/MAL-2025-58665/): Malicious code in sinta-bubur77-sukiwir (npm) (malicious package)
- [MAL-2025-58664](https://insights.sbomify.com/MAL-2025-58664/): Malicious code in sinta-bubur16-sukiwir (npm) (malicious package)
- [MAL-2025-58663](https://insights.sbomify.com/MAL-2025-58663/): Malicious code in sinta-asinan40-sukiwir (npm) (malicious package)
- [MAL-2025-58662](https://insights.sbomify.com/MAL-2025-58662/): Malicious code in single_vicuna_z3n (npm) (malicious package)
- [MAL-2025-58661](https://insights.sbomify.com/MAL-2025-58661/): Malicious code in similar_harrier_z3n (npm) (malicious package)
- [MAL-2025-58660](https://insights.sbomify.com/MAL-2025-58660/): Malicious code in similar_cat_z3n (npm) (malicious package)
- [MAL-2025-5866](https://insights.sbomify.com/MAL-2025-5866/): Malicious code in @cpce/console-sub-app (npm) (malicious package)
- [MAL-2025-58659](https://insights.sbomify.com/MAL-2025-58659/): Malicious code in silly_finch_z3n (npm) (malicious package)
- [MAL-2025-58658](https://insights.sbomify.com/MAL-2025-58658/): Malicious code in silly_chimpanzee_z3n (npm) (malicious package)
- [MAL-2025-58657](https://insights.sbomify.com/MAL-2025-58657/): Malicious code in silly_ant_z3n (npm) (malicious package)
- [MAL-2025-58656](https://insights.sbomify.com/MAL-2025-58656/): Malicious code in shy_lemming_z3n (npm) (malicious package)
- [MAL-2025-58655](https://insights.sbomify.com/MAL-2025-58655/): Malicious code in shy_hare_z3n (npm) (malicious package)
- [MAL-2025-58654](https://insights.sbomify.com/MAL-2025-58654/): Malicious code in shrill_locust_z3n (npm) (malicious package)
- [MAL-2025-58653](https://insights.sbomify.com/MAL-2025-58653/): Malicious code in shocked_fowl_z3n (npm) (malicious package)
- [MAL-2025-58652](https://insights.sbomify.com/MAL-2025-58652/): Malicious code in shocked_falcon_z3n (npm) (malicious package)
- [MAL-2025-58651](https://insights.sbomify.com/MAL-2025-58651/): Malicious code in shivering_ocelot_z3n (npm) (malicious package)
- [MAL-2025-58650](https://insights.sbomify.com/MAL-2025-58650/): Malicious code in shivering_earwig_z3n (npm) (malicious package)
- [MAL-2025-5865](https://insights.sbomify.com/MAL-2025-5865/): Malicious code in ultraconvert (npm) (malicious package)
- [MAL-2025-58649](https://insights.sbomify.com/MAL-2025-58649/): Malicious code in shiny_skink_z3n (npm) (malicious package)
- [MAL-2025-58648](https://insights.sbomify.com/MAL-2025-58648/): Malicious code in sharp_puma_z3n (npm) (malicious package)
- [MAL-2025-58647](https://insights.sbomify.com/MAL-2025-58647/): Malicious code in sharp_hyena_z3n (npm) (malicious package)
- [MAL-2025-58646](https://insights.sbomify.com/MAL-2025-58646/): Malicious code in shaky_loon_z3n (npm) (malicious package)
- [MAL-2025-58645](https://insights.sbomify.com/MAL-2025-58645/): Malicious code in shaggy_muskox_z3n (npm) (malicious package)
- [MAL-2025-58644](https://insights.sbomify.com/MAL-2025-58644/): Malicious code in sexual_lion_z3n (npm) (malicious package)
- [MAL-2025-58643](https://insights.sbomify.com/MAL-2025-58643/): Malicious code in severe_tick_z3n (npm) (malicious package)
- [MAL-2025-58642](https://insights.sbomify.com/MAL-2025-58642/): Malicious code in severe_rooster_z3n (npm) (malicious package)
- [MAL-2025-58641](https://insights.sbomify.com/MAL-2025-58641/): Malicious code in severe_gamefowl_z3n (npm) (malicious package)
- [MAL-2025-58640](https://insights.sbomify.com/MAL-2025-58640/): Malicious code in severe_booby_z3n (npm) (malicious package)
- [MAL-2025-5864](https://insights.sbomify.com/MAL-2025-5864/): Malicious code in symphony-cryptolib (npm) (malicious package)
- [MAL-2025-58639](https://insights.sbomify.com/MAL-2025-58639/): Malicious code in serious_meadowlark_z3n (npm) (malicious package)
- [MAL-2025-58638](https://insights.sbomify.com/MAL-2025-58638/): Malicious code in separate_ape_z3n (npm) (malicious package)
- [MAL-2025-58637](https://insights.sbomify.com/MAL-2025-58637/): Malicious code in sensible_lemming_z3n (npm) (malicious package)
- [MAL-2025-58636](https://insights.sbomify.com/MAL-2025-58636/): Malicious code in senior_vulture_z3n (npm) (malicious package)
- [MAL-2025-58635](https://insights.sbomify.com/MAL-2025-58635/): Malicious code in semantic_fly_z3n (npm) (malicious package)
- [MAL-2025-58634](https://insights.sbomify.com/MAL-2025-58634/): Malicious code in semantic_boar_z3n (npm) (malicious package)
- [MAL-2025-58633](https://insights.sbomify.com/MAL-2025-58633/): Malicious code in selective_raven_z3n (npm) (malicious package)
- [MAL-2025-58632](https://insights.sbomify.com/MAL-2025-58632/): Malicious code in selective_peafowl_z3n (npm) (malicious package)
- [MAL-2025-58631](https://insights.sbomify.com/MAL-2025-58631/): Malicious code in selective_cicada_z3n (npm) (malicious package)
- [MAL-2025-58630](https://insights.sbomify.com/MAL-2025-58630/): Malicious code in secure_cat_z3n (npm) (malicious package)
- [MAL-2025-5863](https://insights.sbomify.com/MAL-2025-5863/): Malicious code in ltiditest2 (npm) (malicious package)
- [MAL-2025-58629](https://insights.sbomify.com/MAL-2025-58629/): Malicious code in secure_badger_z3n (npm) (malicious package)
- [MAL-2025-58628](https://insights.sbomify.com/MAL-2025-58628/): Malicious code in scornful_duck_z3n (npm) (malicious package)
- [MAL-2025-58627](https://insights.sbomify.com/MAL-2025-58627/): Malicious code in scientific_squirrel_z3n (npm) (malicious package)
- [MAL-2025-58626](https://insights.sbomify.com/MAL-2025-58626/): Malicious code in scattered_mole_z3n (npm) (malicious package)
- [MAL-2025-58625](https://insights.sbomify.com/MAL-2025-58625/): Malicious code in scattered_cephalopod_z3n (npm) (malicious package)
- [MAL-2025-58624](https://insights.sbomify.com/MAL-2025-58624/): Malicious code in scattered_capybara_z3n (npm) (malicious package)
- [MAL-2025-58623](https://insights.sbomify.com/MAL-2025-58623/): Malicious code in satisfactory_pheasant_z3n (npm) (malicious package)
- [MAL-2025-58622](https://insights.sbomify.com/MAL-2025-58622/): Malicious code in satisfactory_alligator_z3n (npm) (malicious package)
- [MAL-2025-58621](https://insights.sbomify.com/MAL-2025-58621/): Malicious code in sari-tomat93-sukiwir (npm) (malicious package)
- [MAL-2025-58620](https://insights.sbomify.com/MAL-2025-58620/): Malicious code in sari-tempe9-sukiwir (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/462/