# Vulnerabilities published in 2025


- [MAL-2025-5817](https://insights.sbomify.com/MAL-2025-5817/): Malicious code in os-apps-ui-portal (npm) (malicious package)
- [MAL-2025-58169](https://insights.sbomify.com/MAL-2025-58169/): Malicious code in precise_frog_z3n (npm) (malicious package)
- [MAL-2025-58168](https://insights.sbomify.com/MAL-2025-58168/): Malicious code in precise_cockroach_z3n (npm) (malicious package)
- [MAL-2025-58167](https://insights.sbomify.com/MAL-2025-58167/): Malicious code in precious_salmon_z3n (npm) (malicious package)
- [MAL-2025-58166](https://insights.sbomify.com/MAL-2025-58166/): Malicious code in practical_rooster_z3n (npm) (malicious package)
- [MAL-2025-58165](https://insights.sbomify.com/MAL-2025-58165/): Malicious code in possible_locust_z3n (npm) (malicious package)
- [MAL-2025-58164](https://insights.sbomify.com/MAL-2025-58164/): Malicious code in possible_bass_z3n (npm) (malicious package)
- [MAL-2025-58163](https://insights.sbomify.com/MAL-2025-58163/): Malicious code in popular_wolf_z3n (npm) (malicious package)
- [MAL-2025-58162](https://insights.sbomify.com/MAL-2025-58162/): Malicious code in popular_haddock_z3n (npm) (malicious package)
- [MAL-2025-58161](https://insights.sbomify.com/MAL-2025-58161/): Malicious code in poor_mite_z3n (npm) (malicious package)
- [MAL-2025-58160](https://insights.sbomify.com/MAL-2025-58160/): Malicious code in poor_carp_z3n (npm) (malicious package)
- [MAL-2025-5816](https://insights.sbomify.com/MAL-2025-5816/): Malicious code in os-apps-ui-placement-manager (npm) (malicious package)
- [MAL-2025-58159](https://insights.sbomify.com/MAL-2025-58159/): Malicious code in political_opossum_z3n (npm) (malicious package)
- [MAL-2025-58158](https://insights.sbomify.com/MAL-2025-58158/): Malicious code in political_gecko_z3n (npm) (malicious package)
- [MAL-2025-58157](https://insights.sbomify.com/MAL-2025-58157/): Malicious code in pleasant_marmoset_z3n (npm) (malicious package)
- [MAL-2025-58156](https://insights.sbomify.com/MAL-2025-58156/): Malicious code in pleasant_goldfish_z3n (npm) (malicious package)
- [MAL-2025-58155](https://insights.sbomify.com/MAL-2025-58155/): Malicious code in plastic_swordtail_z3n (npm) (malicious package)
- [MAL-2025-58154](https://insights.sbomify.com/MAL-2025-58154/): Malicious code in plain_toad_z3n (npm) (malicious package)
- [MAL-2025-58153](https://insights.sbomify.com/MAL-2025-58153/): Malicious code in plain_newt_z3n (npm) (malicious package)
- [MAL-2025-58152](https://insights.sbomify.com/MAL-2025-58152/): Malicious code in persistent_firefly_z3n (npm) (malicious package)
- [MAL-2025-58151](https://insights.sbomify.com/MAL-2025-58151/): Malicious code in permanent_manatee_z3n (npm) (malicious package)
- [MAL-2025-58150](https://insights.sbomify.com/MAL-2025-58150/): Malicious code in perfect_koi_z3n (npm) (malicious package)
- [MAL-2025-5815](https://insights.sbomify.com/MAL-2025-5815/): Malicious code in laredoute (npm) (malicious package)
- [MAL-2025-58149](https://insights.sbomify.com/MAL-2025-58149/): Malicious code in peculiar_wallaby_z3n (npm) (malicious package)
- [MAL-2025-58148](https://insights.sbomify.com/MAL-2025-58148/): Malicious code in peculiar_quail_z3n (npm) (malicious package)
- [MAL-2025-58147](https://insights.sbomify.com/MAL-2025-58147/): Malicious code in patria-toge18-sukiwir (npm) (malicious package)
- [MAL-2025-58146](https://insights.sbomify.com/MAL-2025-58146/): Malicious code in patria-tempe65-sukiwir (npm) (malicious package)
- [MAL-2025-58145](https://insights.sbomify.com/MAL-2025-58145/): Malicious code in patria-taiwan17-sukiwir (npm) (malicious package)
- [MAL-2025-58144](https://insights.sbomify.com/MAL-2025-58144/): Malicious code in patria-tahu21-sukiwir (npm) (malicious package)
- [MAL-2025-58143](https://insights.sbomify.com/MAL-2025-58143/): Malicious code in patria-soto30-sukiwir (npm) (malicious package)
- [MAL-2025-58142](https://insights.sbomify.com/MAL-2025-58142/): Malicious code in patria-soto3-sukiwir (npm) (malicious package)
- [MAL-2025-58141](https://insights.sbomify.com/MAL-2025-58141/): Malicious code in patria-serabi3-sukiwir (npm) (malicious package)
- [MAL-2025-58140](https://insights.sbomify.com/MAL-2025-58140/): Malicious code in patria-sasag67-sukiwir (npm) (malicious package)
- [MAL-2025-5814](https://insights.sbomify.com/MAL-2025-5814/): Malicious code in graphprotocol-tools-monorepo (npm) (malicious package)
- [MAL-2025-58139](https://insights.sbomify.com/MAL-2025-58139/): Malicious code in patria-ruwet38-sukiwir (npm) (malicious package)
- [MAL-2025-58138](https://insights.sbomify.com/MAL-2025-58138/): Malicious code in patria-ruwet33-sukiwir (npm) (malicious package)
- [MAL-2025-58137](https://insights.sbomify.com/MAL-2025-58137/): Malicious code in patria-rojak36-sukiwir (npm) (malicious package)
- [MAL-2025-58136](https://insights.sbomify.com/MAL-2025-58136/): Malicious code in patria-peyek58-sukiwir (npm) (malicious package)
- [MAL-2025-58135](https://insights.sbomify.com/MAL-2025-58135/): Malicious code in patria-otak-otak18-sukiwir (npm) (malicious package)
- [MAL-2025-58134](https://insights.sbomify.com/MAL-2025-58134/): Malicious code in patria-nasi33-sukiwir (npm) (malicious package)
- [MAL-2025-58133](https://insights.sbomify.com/MAL-2025-58133/): Malicious code in patria-miemee25-sukiwir (npm) (malicious package)
- [MAL-2025-58132](https://insights.sbomify.com/MAL-2025-58132/): Malicious code in patria-mieayam99-sukiwir (npm) (malicious package)
- [MAL-2025-58131](https://insights.sbomify.com/MAL-2025-58131/): Malicious code in patria-mieayam59-sukiwir (npm) (malicious package)
- [MAL-2025-58130](https://insights.sbomify.com/MAL-2025-58130/): Malicious code in patria-mieayam48-sukiwir (npm) (malicious package)
- [MAL-2025-5813](https://insights.sbomify.com/MAL-2025-5813/): Malicious code in glean-mcp-server (npm) (malicious package)
- [MAL-2025-58129](https://insights.sbomify.com/MAL-2025-58129/): Malicious code in patria-martabak75-sukiwir (npm) (malicious package)
- [MAL-2025-58128](https://insights.sbomify.com/MAL-2025-58128/): Malicious code in patria-martabak6-sukiwir (npm) (malicious package)
- [MAL-2025-58127](https://insights.sbomify.com/MAL-2025-58127/): Malicious code in patria-mangga1-sukiwir (npm) (malicious package)
- [MAL-2025-58126](https://insights.sbomify.com/MAL-2025-58126/): Malicious code in patria-lengko51-sukiwir (npm) (malicious package)
- [MAL-2025-58125](https://insights.sbomify.com/MAL-2025-58125/): Malicious code in patria-lapis73-sukiwir (npm) (malicious package)
- [MAL-2025-58124](https://insights.sbomify.com/MAL-2025-58124/): Malicious code in patria-kupang3-sukiwir (npm) (malicious package)
- [MAL-2025-58123](https://insights.sbomify.com/MAL-2025-58123/): Malicious code in patria-kue67-sukiwir (npm) (malicious package)
- [MAL-2025-58122](https://insights.sbomify.com/MAL-2025-58122/): Malicious code in patria-kue16-sukiwir (npm) (malicious package)
- [MAL-2025-58121](https://insights.sbomify.com/MAL-2025-58121/): Malicious code in patria-kripik19-sukiwir (npm) (malicious package)
- [MAL-2025-58120](https://insights.sbomify.com/MAL-2025-58120/): Malicious code in patria-keripik97-sukiwir (npm) (malicious package)
- [MAL-2025-5812](https://insights.sbomify.com/MAL-2025-5812/): Malicious code in fxa-admin-panel (npm) (malicious package)
- [MAL-2025-58119](https://insights.sbomify.com/MAL-2025-58119/): Malicious code in patria-keripik34-sukiwir (npm) (malicious package)
- [MAL-2025-58118](https://insights.sbomify.com/MAL-2025-58118/): Malicious code in patria-keripik20-sukiwir (npm) (malicious package)
- [MAL-2025-58117](https://insights.sbomify.com/MAL-2025-58117/): Malicious code in patria-kentang73-sukiwir (npm) (malicious package)
- [MAL-2025-58116](https://insights.sbomify.com/MAL-2025-58116/): Malicious code in patria-kemplang57-sukiwir (npm) (malicious package)
- [MAL-2025-58115](https://insights.sbomify.com/MAL-2025-58115/): Malicious code in patria-jus25-sukiwir (npm) (malicious package)
- [MAL-2025-58114](https://insights.sbomify.com/MAL-2025-58114/): Malicious code in patria-ikan33-sukiwir (npm) (malicious package)
- [MAL-2025-58113](https://insights.sbomify.com/MAL-2025-58113/): Malicious code in patria-getas46-sukiwir (npm) (malicious package)
- [MAL-2025-58112](https://insights.sbomify.com/MAL-2025-58112/): Malicious code in patria-gandul35-sukiwir (npm) (malicious package)
- [MAL-2025-58111](https://insights.sbomify.com/MAL-2025-58111/): Malicious code in patria-gado-gado2-sukiwir (npm) (malicious package)
- [MAL-2025-58110](https://insights.sbomify.com/MAL-2025-58110/): Malicious code in patria-gado-gado15-sukiwir (npm) (malicious package)
- [MAL-2025-5811](https://insights.sbomify.com/MAL-2025-5811/): Malicious code in dot-net-interactive-kernels (npm) (malicious package)
- [MAL-2025-58109](https://insights.sbomify.com/MAL-2025-58109/): Malicious code in patria-dradag82-sukiwir (npm) (malicious package)
- [MAL-2025-58108](https://insights.sbomify.com/MAL-2025-58108/): Malicious code in patria-dradag31-sukiwir (npm) (malicious package)
- [MAL-2025-58107](https://insights.sbomify.com/MAL-2025-58107/): Malicious code in patria-donat94-sukiwir (npm) (malicious package)
- [MAL-2025-58106](https://insights.sbomify.com/MAL-2025-58106/): Malicious code in patria-bakwan67-sukiwir (npm) (malicious package)
- [MAL-2025-58105](https://insights.sbomify.com/MAL-2025-58105/): Malicious code in passive_camel_z3n (npm) (malicious package)
- [MAL-2025-58104](https://insights.sbomify.com/MAL-2025-58104/): Malicious code in passing_sailfish_z3n (npm) (malicious package)
- [MAL-2025-58103](https://insights.sbomify.com/MAL-2025-58103/): Malicious code in parental_earwig_z3n (npm) (malicious package)
- [MAL-2025-58102](https://insights.sbomify.com/MAL-2025-58102/): Malicious code in overwhelming_hoverfly_z3n (npm) (malicious package)
- [MAL-2025-58101](https://insights.sbomify.com/MAL-2025-58101/): Malicious code in overseas_vole_z3n (npm) (malicious package)
- [MAL-2025-58100](https://insights.sbomify.com/MAL-2025-58100/): Malicious code in overall_parrot_z3n (npm) (malicious package)
- [MAL-2025-5810](https://insights.sbomify.com/MAL-2025-5810/): Malicious code in dns-exfil-poc (npm) (malicious package)
- [MAL-2025-581](https://insights.sbomify.com/MAL-2025-581/): Malicious code in upm-npm (npm) (malicious package)
- [MAL-2025-58099](https://insights.sbomify.com/MAL-2025-58099/): Malicious code in overall_marlin_z3n (npm) (malicious package)
- [MAL-2025-58098](https://insights.sbomify.com/MAL-2025-58098/): Malicious code in outside_sparrow_z3n (npm) (malicious package)
- [MAL-2025-58097](https://insights.sbomify.com/MAL-2025-58097/): Malicious code in outrageous_quokka_z3n (npm) (malicious package)
- [MAL-2025-58096](https://insights.sbomify.com/MAL-2025-58096/): Malicious code in outdoor_vole_z3n (npm) (malicious package)
- [MAL-2025-58095](https://insights.sbomify.com/MAL-2025-58095/): Malicious code in other_roadrunner_z3n (npm) (malicious package)
- [MAL-2025-58094](https://insights.sbomify.com/MAL-2025-58094/): Malicious code in orthodox_pike_z3n (npm) (malicious package)
- [MAL-2025-58093](https://insights.sbomify.com/MAL-2025-58093/): Malicious code in orthodox_clownfish_z3n (npm) (malicious package)
- [MAL-2025-58092](https://insights.sbomify.com/MAL-2025-58092/): Malicious code in ordinary_gopher_z3n (npm) (malicious package)
- [MAL-2025-58091](https://insights.sbomify.com/MAL-2025-58091/): Malicious code in ordinary_goose_z3n (npm) (malicious package)
- [MAL-2025-58090](https://insights.sbomify.com/MAL-2025-58090/): Malicious code in olympic_beaver_z3n (npm) (malicious package)
- [MAL-2025-5809](https://insights.sbomify.com/MAL-2025-5809/): Malicious code in dep-confusion-poc-monke (npm) (malicious package)
- [MAL-2025-58089](https://insights.sbomify.com/MAL-2025-58089/): Malicious code in old_earwig_z3n (npm) (malicious package)
- [MAL-2025-58088](https://insights.sbomify.com/MAL-2025-58088/): Malicious code in oktafian-tumis41-sukiwir (npm) (malicious package)
- [MAL-2025-58087](https://insights.sbomify.com/MAL-2025-58087/): Malicious code in oktafian-tempe32-sukiwir (npm) (malicious package)
- [MAL-2025-58086](https://insights.sbomify.com/MAL-2025-58086/): Malicious code in oktafian-teh75-sukiwir (npm) (malicious package)
- [MAL-2025-58085](https://insights.sbomify.com/MAL-2025-58085/): Malicious code in oktafian-tapai30-sukiwir (npm) (malicious package)
- [MAL-2025-58084](https://insights.sbomify.com/MAL-2025-58084/): Malicious code in oktafian-takokak95-sukiwir (npm) (malicious package)
- [MAL-2025-58083](https://insights.sbomify.com/MAL-2025-58083/): Malicious code in oktafian-takokak8-sukiwir (npm) (malicious package)
- [MAL-2025-58082](https://insights.sbomify.com/MAL-2025-58082/): Malicious code in oktafian-soto98-sukiwir (npm) (malicious package)
- [MAL-2025-58081](https://insights.sbomify.com/MAL-2025-58081/): Malicious code in oktafian-soto72-sukiwir (npm) (malicious package)
- [MAL-2025-58080](https://insights.sbomify.com/MAL-2025-58080/): Malicious code in oktafian-semur84-sukiwir (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/468/