# Vulnerabilities published in 2025


- [MAL-2025-5844](https://insights.sbomify.com/MAL-2025-5844/): Malicious code in ngf-gov-hr-navbar (npm) (malicious package)
- [MAL-2025-58439](https://insights.sbomify.com/MAL-2025-58439/): Malicious code in rifqi-mangut27-sukiwir (npm) (malicious package)
- [MAL-2025-58438](https://insights.sbomify.com/MAL-2025-58438/): Malicious code in rifqi-lapis36-sukiwir (npm) (malicious package)
- [MAL-2025-58437](https://insights.sbomify.com/MAL-2025-58437/): Malicious code in rifqi-kue60-sukiwir (npm) (malicious package)
- [MAL-2025-58436](https://insights.sbomify.com/MAL-2025-58436/): Malicious code in rifqi-kripik74-sukiwir (npm) (malicious package)
- [MAL-2025-58435](https://insights.sbomify.com/MAL-2025-58435/): Malicious code in rifqi-ketan98-sukiwir (npm) (malicious package)
- [MAL-2025-58434](https://insights.sbomify.com/MAL-2025-58434/): Malicious code in rifqi-ketan75-sukiwir (npm) (malicious package)
- [MAL-2025-58433](https://insights.sbomify.com/MAL-2025-58433/): Malicious code in rifqi-keraktelor64-sukiwir (npm) (malicious package)
- [MAL-2025-58432](https://insights.sbomify.com/MAL-2025-58432/): Malicious code in rifqi-keraktelor35-sukiwir (npm) (malicious package)
- [MAL-2025-58431](https://insights.sbomify.com/MAL-2025-58431/): Malicious code in rifqi-kepok51-sukiwir (npm) (malicious package)
- [MAL-2025-58430](https://insights.sbomify.com/MAL-2025-58430/): Malicious code in rifqi-kentang36-sukiwir (npm) (malicious package)
- [MAL-2025-5843](https://insights.sbomify.com/MAL-2025-5843/): Malicious code in ngf-attachment-item-view (npm) (malicious package)
- [MAL-2025-58429](https://insights.sbomify.com/MAL-2025-58429/): Malicious code in rifqi-kacang86-sukiwir (npm) (malicious package)
- [MAL-2025-58428](https://insights.sbomify.com/MAL-2025-58428/): Malicious code in rifqi-jamblang91-sukiwir (npm) (malicious package)
- [MAL-2025-58427](https://insights.sbomify.com/MAL-2025-58427/): Malicious code in rifqi-gudeg59-sukiwir (npm) (malicious package)
- [MAL-2025-58426](https://insights.sbomify.com/MAL-2025-58426/): Malicious code in rifqi-gudeg29-sukiwir (npm) (malicious package)
- [MAL-2025-58425](https://insights.sbomify.com/MAL-2025-58425/): Malicious code in rifqi-getas96-sukiwir (npm) (malicious package)
- [MAL-2025-58424](https://insights.sbomify.com/MAL-2025-58424/): Malicious code in rifqi-empal94-sukiwir (npm) (malicious package)
- [MAL-2025-58423](https://insights.sbomify.com/MAL-2025-58423/): Malicious code in rifqi-empal17-sukiwir (npm) (malicious package)
- [MAL-2025-58422](https://insights.sbomify.com/MAL-2025-58422/): Malicious code in rifqi-dradag36-sukiwir (npm) (malicious package)
- [MAL-2025-58421](https://insights.sbomify.com/MAL-2025-58421/): Malicious code in rifqi-donat24-sukiwir (npm) (malicious package)
- [MAL-2025-58420](https://insights.sbomify.com/MAL-2025-58420/): Malicious code in rifqi-brongkos85-sukiwir (npm) (malicious package)
- [MAL-2025-5842](https://insights.sbomify.com/MAL-2025-5842/): Malicious code in colortoolsv2 (npm) (malicious package)
- [MAL-2025-58419](https://insights.sbomify.com/MAL-2025-58419/): Malicious code in rifqi-bakwan100-sukiwir (npm) (malicious package)
- [MAL-2025-58418](https://insights.sbomify.com/MAL-2025-58418/): Malicious code in ridiculous_wildfowl_z3n (npm) (malicious package)
- [MAL-2025-58417](https://insights.sbomify.com/MAL-2025-58417/): Malicious code in ridiculous_rattlesnake_z3n (npm) (malicious package)
- [MAL-2025-58416](https://insights.sbomify.com/MAL-2025-58416/): Malicious code in rich_pigeon_z3n (npm) (malicious package)
- [MAL-2025-58415](https://insights.sbomify.com/MAL-2025-58415/): Malicious code in rich_ladybug_z3n (npm) (malicious package)
- [MAL-2025-58414](https://insights.sbomify.com/MAL-2025-58414/): Malicious code in riana-tumis6-sukiwir (npm) (malicious package)
- [MAL-2025-58413](https://insights.sbomify.com/MAL-2025-58413/): Malicious code in riana-tahu43-sukiwir (npm) (malicious package)
- [MAL-2025-58412](https://insights.sbomify.com/MAL-2025-58412/): Malicious code in riana-sroto71-sukiwir (npm) (malicious package)
- [MAL-2025-58411](https://insights.sbomify.com/MAL-2025-58411/): Malicious code in riana-soto99-sukiwir (npm) (malicious package)
- [MAL-2025-58410](https://insights.sbomify.com/MAL-2025-58410/): Malicious code in riana-semur68-sukiwir (npm) (malicious package)
- [MAL-2025-5841](https://insights.sbomify.com/MAL-2025-5841/): Malicious code in xpvnsulc (npm) (malicious package)
- [MAL-2025-58409](https://insights.sbomify.com/MAL-2025-58409/): Malicious code in riana-semur60-sukiwir (npm) (malicious package)
- [MAL-2025-58408](https://insights.sbomify.com/MAL-2025-58408/): Malicious code in riana-semur37-sukiwir (npm) (malicious package)
- [MAL-2025-58407](https://insights.sbomify.com/MAL-2025-58407/): Malicious code in riana-sate4-sukiwir (npm) (malicious package)
- [MAL-2025-58406](https://insights.sbomify.com/MAL-2025-58406/): Malicious code in riana-sambel45-sukiwir (npm) (malicious package)
- [MAL-2025-58405](https://insights.sbomify.com/MAL-2025-58405/): Malicious code in riana-sambel43-sukiwir (npm) (malicious package)
- [MAL-2025-58404](https://insights.sbomify.com/MAL-2025-58404/): Malicious code in riana-ruwet98-sukiwir (npm) (malicious package)
- [MAL-2025-58403](https://insights.sbomify.com/MAL-2025-58403/): Malicious code in riana-rujaksoto88-sukiwir (npm) (malicious package)
- [MAL-2025-58402](https://insights.sbomify.com/MAL-2025-58402/): Malicious code in riana-rujak75-sukiwir (npm) (malicious package)
- [MAL-2025-58401](https://insights.sbomify.com/MAL-2025-58401/): Malicious code in riana-rangginang96-sukiwir (npm) (malicious package)
- [MAL-2025-58400](https://insights.sbomify.com/MAL-2025-58400/): Malicious code in riana-pecel12-sukiwir (npm) (malicious package)
- [MAL-2025-5840](https://insights.sbomify.com/MAL-2025-5840/): Malicious code in flow-playground (npm) (malicious package)
- [MAL-2025-584](https://insights.sbomify.com/MAL-2025-584/): Malicious code in pascoresend (npm) (malicious package)
- [MAL-2025-58399](https://insights.sbomify.com/MAL-2025-58399/): Malicious code in riana-papeda48-sukiwir (npm) (malicious package)
- [MAL-2025-58398](https://insights.sbomify.com/MAL-2025-58398/): Malicious code in riana-otak-otak14-sukiwir (npm) (malicious package)
- [MAL-2025-58397](https://insights.sbomify.com/MAL-2025-58397/): Malicious code in riana-ongol-ongol88-sukiwir (npm) (malicious package)
- [MAL-2025-58396](https://insights.sbomify.com/MAL-2025-58396/): Malicious code in riana-nasipecel11-sukiwir (npm) (malicious package)
- [MAL-2025-58395](https://insights.sbomify.com/MAL-2025-58395/): Malicious code in riana-nasipecel10-sukiwir (npm) (malicious package)
- [MAL-2025-58394](https://insights.sbomify.com/MAL-2025-58394/): Malicious code in riana-nasicampur81-sukiwir (npm) (malicious package)
- [MAL-2025-58393](https://insights.sbomify.com/MAL-2025-58393/): Malicious code in riana-mendoan54-sukiwir (npm) (malicious package)
- [MAL-2025-58392](https://insights.sbomify.com/MAL-2025-58392/): Malicious code in riana-mangut44-sukiwir (npm) (malicious package)
- [MAL-2025-58391](https://insights.sbomify.com/MAL-2025-58391/): Malicious code in riana-lutis32-sukiwir (npm) (malicious package)
- [MAL-2025-58390](https://insights.sbomify.com/MAL-2025-58390/): Malicious code in riana-kupat52-sukiwir (npm) (malicious package)
- [MAL-2025-5839](https://insights.sbomify.com/MAL-2025-5839/): Malicious code in @platform-clientextensions/rum-web (npm) (malicious package)
- [MAL-2025-58389](https://insights.sbomify.com/MAL-2025-58389/): Malicious code in riana-kue10-sukiwir (npm) (malicious package)
- [MAL-2025-58388](https://insights.sbomify.com/MAL-2025-58388/): Malicious code in riana-ketoprak23-sukiwir (npm) (malicious package)
- [MAL-2025-58387](https://insights.sbomify.com/MAL-2025-58387/): Malicious code in riana-kembang66-sukiwir (npm) (malicious package)
- [MAL-2025-58386](https://insights.sbomify.com/MAL-2025-58386/): Malicious code in riana-jus70-sukiwir (npm) (malicious package)
- [MAL-2025-58385](https://insights.sbomify.com/MAL-2025-58385/): Malicious code in riana-getuk90-sukiwir (npm) (malicious package)
- [MAL-2025-58384](https://insights.sbomify.com/MAL-2025-58384/): Malicious code in riana-getas41-sukiwir (npm) (malicious package)
- [MAL-2025-58383](https://insights.sbomify.com/MAL-2025-58383/): Malicious code in riana-gembus66-sukiwir (npm) (malicious package)
- [MAL-2025-58382](https://insights.sbomify.com/MAL-2025-58382/): Malicious code in riana-esdoger41-sukiwir (npm) (malicious package)
- [MAL-2025-58381](https://insights.sbomify.com/MAL-2025-58381/): Malicious code in riana-buburayam22-sukiwir (npm) (malicious package)
- [MAL-2025-58380](https://insights.sbomify.com/MAL-2025-58380/): Malicious code in riana-bubur76-sukiwir (npm) (malicious package)
- [MAL-2025-5838](https://insights.sbomify.com/MAL-2025-5838/): Malicious code in @0xzyo111/frontend-logger (npm) (malicious package)
- [MAL-2025-58379](https://insights.sbomify.com/MAL-2025-58379/): Malicious code in riana-bubur22-sukiwir (npm) (malicious package)
- [MAL-2025-58378](https://insights.sbomify.com/MAL-2025-58378/): Malicious code in riana-brongkos8-sukiwir (npm) (malicious package)
- [MAL-2025-58377](https://insights.sbomify.com/MAL-2025-58377/): Malicious code in riana-brengkes47-sukiwir (npm) (malicious package)
- [MAL-2025-58376](https://insights.sbomify.com/MAL-2025-58376/): Malicious code in riana-bakwan63-sukiwir (npm) (malicious package)
- [MAL-2025-58375](https://insights.sbomify.com/MAL-2025-58375/): Malicious code in riana-asinan54-sukiwir (npm) (malicious package)
- [MAL-2025-58374](https://insights.sbomify.com/MAL-2025-58374/): Malicious code in revolutionary_tuna_z3n (npm) (malicious package)
- [MAL-2025-58373](https://insights.sbomify.com/MAL-2025-58373/): Malicious code in revolutionary_pig_z3n (npm) (malicious package)
- [MAL-2025-58372](https://insights.sbomify.com/MAL-2025-58372/): Malicious code in responsible_kite_z3n (npm) (malicious package)
- [MAL-2025-58371](https://insights.sbomify.com/MAL-2025-58371/): Malicious code in respective_boa_z3n (npm) (malicious package)
- [MAL-2025-58370](https://insights.sbomify.com/MAL-2025-58370/): Malicious code in respectable_puffin_z3n (npm) (malicious package)
- [MAL-2025-5837](https://insights.sbomify.com/MAL-2025-5837/): Malicious code in test-package-avinav (PyPI) (malicious package)
- [MAL-2025-58369](https://insights.sbomify.com/MAL-2025-58369/): Malicious code in required_meerkat_z3n (npm) (malicious package)
- [MAL-2025-58368](https://insights.sbomify.com/MAL-2025-58368/): Malicious code in representative_mule_z3n (npm) (malicious package)
- [MAL-2025-58367](https://insights.sbomify.com/MAL-2025-58367/): Malicious code in renewed_pony_z3n (npm) (malicious package)
- [MAL-2025-58366](https://insights.sbomify.com/MAL-2025-58366/): Malicious code in remarkable_cow_z3n (npm) (malicious package)
- [MAL-2025-58365](https://insights.sbomify.com/MAL-2025-58365/): Malicious code in remaining_narwhal_z3n (npm) (malicious package)
- [MAL-2025-58364](https://insights.sbomify.com/MAL-2025-58364/): Malicious code in religious_fly_z3n (npm) (malicious package)
- [MAL-2025-58363](https://insights.sbomify.com/MAL-2025-58363/): Malicious code in relative_llama_z3n (npm) (malicious package)
- [MAL-2025-58362](https://insights.sbomify.com/MAL-2025-58362/): Malicious code in regulatory_bass_z3n (npm) (malicious package)
- [MAL-2025-58361](https://insights.sbomify.com/MAL-2025-58361/): Malicious code in regular_tarsier_z3n (npm) (malicious package)
- [MAL-2025-58360](https://insights.sbomify.com/MAL-2025-58360/): Malicious code in regular_raven_z3n (npm) (malicious package)
- [MAL-2025-5836](https://insights.sbomify.com/MAL-2025-5836/): Malicious code in tw-core-ui (npm) (malicious package)
- [MAL-2025-58359](https://insights.sbomify.com/MAL-2025-58359/): Malicious code in regular_chickadee_z3n (npm) (malicious package)
- [MAL-2025-58358](https://insights.sbomify.com/MAL-2025-58358/): Malicious code in registered_pheasant_z3n (npm) (malicious package)
- [MAL-2025-58357](https://insights.sbomify.com/MAL-2025-58357/): Malicious code in redundant_carp_z3n (npm) (malicious package)
- [MAL-2025-58356](https://insights.sbomify.com/MAL-2025-58356/): Malicious code in recent_panda_z3n (npm) (malicious package)
- [MAL-2025-58355](https://insights.sbomify.com/MAL-2025-58355/): Malicious code in reasonable_cockroach_z3n (npm) (malicious package)
- [MAL-2025-58354](https://insights.sbomify.com/MAL-2025-58354/): Malicious code in rear_condor_z3n (npm) (malicious package)
- [MAL-2025-58353](https://insights.sbomify.com/MAL-2025-58353/): Malicious code in realistic_rabbit_z3n (npm) (malicious package)
- [MAL-2025-58352](https://insights.sbomify.com/MAL-2025-58352/): Malicious code in realistic_guppy_z3n (npm) (malicious package)
- [MAL-2025-58351](https://insights.sbomify.com/MAL-2025-58351/): Malicious code in realistic_fowl_z3n (npm) (malicious package)
- [MAL-2025-58350](https://insights.sbomify.com/MAL-2025-58350/): Malicious code in raw_vulture_z3n (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/465/