# Vulnerabilities published in 2025


- [MAL-2025-5682](https://insights.sbomify.com/MAL-2025-5682/): Malicious code in create-app-attachment-github-action (npm) (malicious package)
- [MAL-2025-56819](https://insights.sbomify.com/MAL-2025-56819/): Malicious code in indah-kripik61-sukiwir (npm) (malicious package)
- [MAL-2025-56818](https://insights.sbomify.com/MAL-2025-56818/): Malicious code in indah-keripik70-sukiwir (npm) (malicious package)
- [MAL-2025-56817](https://insights.sbomify.com/MAL-2025-56817/): Malicious code in indah-keripik32-sukiwir (npm) (malicious package)
- [MAL-2025-56816](https://insights.sbomify.com/MAL-2025-56816/): Malicious code in indah-ikan3-sukiwir (npm) (malicious package)
- [MAL-2025-56815](https://insights.sbomify.com/MAL-2025-56815/): Malicious code in indah-gulai7-sukiwir (npm) (malicious package)
- [MAL-2025-56814](https://insights.sbomify.com/MAL-2025-56814/): Malicious code in indah-gembus3-sukiwir (npm) (malicious package)
- [MAL-2025-56813](https://insights.sbomify.com/MAL-2025-56813/): Malicious code in indah-enting6-sukiwir (npm) (malicious package)
- [MAL-2025-56812](https://insights.sbomify.com/MAL-2025-56812/): Malicious code in indah-empal28-sukiwir (npm) (malicious package)
- [MAL-2025-56811](https://insights.sbomify.com/MAL-2025-56811/): Malicious code in indah-donat22-mmqe (npm) (malicious package)
- [MAL-2025-56810](https://insights.sbomify.com/MAL-2025-56810/): Malicious code in indah-bakso28-sukiwir (npm) (malicious package)
- [MAL-2025-5681](https://insights.sbomify.com/MAL-2025-5681/): Malicious code in cra-react-router (npm) (malicious package)
- [MAL-2025-56809](https://insights.sbomify.com/MAL-2025-56809/): Malicious code in increasing_goose_z3n (npm) (malicious package)
- [MAL-2025-56808](https://insights.sbomify.com/MAL-2025-56808/): Malicious code in inclined_sailfish_z3n (npm) (malicious package)
- [MAL-2025-56807](https://insights.sbomify.com/MAL-2025-56807/): Malicious code in inclined_kangaroo_z3n (npm) (malicious package)
- [MAL-2025-56806](https://insights.sbomify.com/MAL-2025-56806/): Malicious code in inappropriate_barracuda_z3n (npm) (malicious package)
- [MAL-2025-56805](https://insights.sbomify.com/MAL-2025-56805/): Malicious code in impressive_impala_z3n (npm) (malicious package)
- [MAL-2025-56804](https://insights.sbomify.com/MAL-2025-56804/): Malicious code in impressive_bobolink_z3n (npm) (malicious package)
- [MAL-2025-56803](https://insights.sbomify.com/MAL-2025-56803/): Malicious code in important_marsupial_z3n (npm) (malicious package)
- [MAL-2025-56802](https://insights.sbomify.com/MAL-2025-56802/): Malicious code in implicit_jackal_z3n (npm) (malicious package)
- [MAL-2025-56801](https://insights.sbomify.com/MAL-2025-56801/): Malicious code in imperial_squid_z3n (npm) (malicious package)
- [MAL-2025-56800](https://insights.sbomify.com/MAL-2025-56800/): Malicious code in immense_iguana_z3n (npm) (malicious package)
- [MAL-2025-5680](https://insights.sbomify.com/MAL-2025-5680/): Malicious code in confluence-ui-components (npm) (malicious package)
- [MAL-2025-568](https://insights.sbomify.com/MAL-2025-568/): Malicious code in com.unity.test.metadata-manager (npm) (malicious package)
- [MAL-2025-56799](https://insights.sbomify.com/MAL-2025-56799/): Malicious code in immense_harrier_z3n (npm) (malicious package)
- [MAL-2025-56798](https://insights.sbomify.com/MAL-2025-56798/): Malicious code in immediate_ermine_z3n (npm) (malicious package)
- [MAL-2025-56797](https://insights.sbomify.com/MAL-2025-56797/): Malicious code in imaginative_jay_z3n (npm) (malicious package)
- [MAL-2025-56796](https://insights.sbomify.com/MAL-2025-56796/): Malicious code in ideological_fowl_z3n (npm) (malicious package)
- [MAL-2025-56795](https://insights.sbomify.com/MAL-2025-56795/): Malicious code in ida-tongseng79-sukiwir (npm) (malicious package)
- [MAL-2025-56794](https://insights.sbomify.com/MAL-2025-56794/): Malicious code in ida-tempe52-sukiwir (npm) (malicious package)
- [MAL-2025-56793](https://insights.sbomify.com/MAL-2025-56793/): Malicious code in ida-tempe42-sukiwir (npm) (malicious package)
- [MAL-2025-56792](https://insights.sbomify.com/MAL-2025-56792/): Malicious code in ida-takokak79-sukiwir (npm) (malicious package)
- [MAL-2025-56791](https://insights.sbomify.com/MAL-2025-56791/): Malicious code in ida-tahu89-sukiwir (npm) (malicious package)
- [MAL-2025-56790](https://insights.sbomify.com/MAL-2025-56790/): Malicious code in ida-sroto92-sukiwir (npm) (malicious package)
- [MAL-2025-5679](https://insights.sbomify.com/MAL-2025-5679/): Malicious code in confluence-inline-tasks (npm) (malicious package)
- [MAL-2025-56789](https://insights.sbomify.com/MAL-2025-56789/): Malicious code in ida-serimuka27-sukiwir (npm) (malicious package)
- [MAL-2025-56788](https://insights.sbomify.com/MAL-2025-56788/): Malicious code in ida-semur7-sukiwir (npm) (malicious package)
- [MAL-2025-56787](https://insights.sbomify.com/MAL-2025-56787/): Malicious code in ida-semur48-sukiwir (npm) (malicious package)
- [MAL-2025-56786](https://insights.sbomify.com/MAL-2025-56786/): Malicious code in ida-semur27-sukiwir (npm) (malicious package)
- [MAL-2025-56785](https://insights.sbomify.com/MAL-2025-56785/): Malicious code in ida-sambel87-sukiwir (npm) (malicious package)
- [MAL-2025-56784](https://insights.sbomify.com/MAL-2025-56784/): Malicious code in ida-sambel34-sukiwir (npm) (malicious package)
- [MAL-2025-56783](https://insights.sbomify.com/MAL-2025-56783/): Malicious code in ida-rangi73-sukiwir (npm) (malicious package)
- [MAL-2025-56782](https://insights.sbomify.com/MAL-2025-56782/): Malicious code in ida-rangginang70-sukiwir (npm) (malicious package)
- [MAL-2025-56781](https://insights.sbomify.com/MAL-2025-56781/): Malicious code in ida-nasiuduk37-sukiwir (npm) (malicious package)
- [MAL-2025-56780](https://insights.sbomify.com/MAL-2025-56780/): Malicious code in ida-nasisayur57-sukiwir (npm) (malicious package)
- [MAL-2025-5678](https://insights.sbomify.com/MAL-2025-5678/): Malicious code in confluence-drag-and-drop (npm) (malicious package)
- [MAL-2025-56779](https://insights.sbomify.com/MAL-2025-56779/): Malicious code in ida-nasi66-sukiwir (npm) (malicious package)
- [MAL-2025-56778](https://insights.sbomify.com/MAL-2025-56778/): Malicious code in ida-menjes97-sukiwir (npm) (malicious package)
- [MAL-2025-56777](https://insights.sbomify.com/MAL-2025-56777/): Malicious code in ida-mendoan59-sukiwir (npm) (malicious package)
- [MAL-2025-56776](https://insights.sbomify.com/MAL-2025-56776/): Malicious code in ida-mendoan51-sukiwir (npm) (malicious package)
- [MAL-2025-56775](https://insights.sbomify.com/MAL-2025-56775/): Malicious code in ida-mangut61-sukiwir (npm) (malicious package)
- [MAL-2025-56774](https://insights.sbomify.com/MAL-2025-56774/): Malicious code in ida-lontong93-sukiwir (npm) (malicious package)
- [MAL-2025-56773](https://insights.sbomify.com/MAL-2025-56773/): Malicious code in ida-lapis74-sukiwir (npm) (malicious package)
- [MAL-2025-56772](https://insights.sbomify.com/MAL-2025-56772/): Malicious code in ida-kripik40-sukiwir (npm) (malicious package)
- [MAL-2025-56771](https://insights.sbomify.com/MAL-2025-56771/): Malicious code in ida-klanting75-sukiwir (npm) (malicious package)
- [MAL-2025-56770](https://insights.sbomify.com/MAL-2025-56770/): Malicious code in ida-ketan88-sukiwir (npm) (malicious package)
- [MAL-2025-5677](https://insights.sbomify.com/MAL-2025-5677/): Malicious code in cli-wasm (npm) (malicious package)
- [MAL-2025-56769](https://insights.sbomify.com/MAL-2025-56769/): Malicious code in ida-ketan57-sukiwir (npm) (malicious package)
- [MAL-2025-56768](https://insights.sbomify.com/MAL-2025-56768/): Malicious code in ida-ikan55-sukiwir (npm) (malicious package)
- [MAL-2025-56767](https://insights.sbomify.com/MAL-2025-56767/): Malicious code in ida-ikan24-sukiwir (npm) (malicious package)
- [MAL-2025-56766](https://insights.sbomify.com/MAL-2025-56766/): Malicious code in ida-gembus43-sukiwir (npm) (malicious package)
- [MAL-2025-56765](https://insights.sbomify.com/MAL-2025-56765/): Malicious code in ida-gado-gado74-sukiwir (npm) (malicious package)
- [MAL-2025-56764](https://insights.sbomify.com/MAL-2025-56764/): Malicious code in ida-dodol64-sukiwir (npm) (malicious package)
- [MAL-2025-56763](https://insights.sbomify.com/MAL-2025-56763/): Malicious code in ida-botok73-sukiwir (npm) (malicious package)
- [MAL-2025-56762](https://insights.sbomify.com/MAL-2025-56762/): Malicious code in husky_mouse_z3n (npm) (malicious package)
- [MAL-2025-56761](https://insights.sbomify.com/MAL-2025-56761/): Malicious code in hushed_panther_z3n (npm) (malicious package)
- [MAL-2025-56760](https://insights.sbomify.com/MAL-2025-56760/): Malicious code in horizontal_sawfish_z3n (npm) (malicious package)
- [MAL-2025-5676](https://insights.sbomify.com/MAL-2025-5676/): Malicious code in chii-aungpao-new (npm) (malicious package)
- [MAL-2025-56759](https://insights.sbomify.com/MAL-2025-56759/): Malicious code in horizontal_mandrill_z3n (npm) (malicious package)
- [MAL-2025-56758](https://insights.sbomify.com/MAL-2025-56758/): Malicious code in hon_bobolink_z3n (npm) (malicious package)
- [MAL-2025-56757](https://insights.sbomify.com/MAL-2025-56757/): Malicious code in homeless_kite_z3n (npm) (malicious package)
- [MAL-2025-56756](https://insights.sbomify.com/MAL-2025-56756/): Malicious code in holy_canid_z3n (npm) (malicious package)
- [MAL-2025-56755](https://insights.sbomify.com/MAL-2025-56755/): Malicious code in hollow_mammal_z3n (npm) (malicious package)
- [MAL-2025-56754](https://insights.sbomify.com/MAL-2025-56754/): Malicious code in historical_orangutan_z3n (npm) (malicious package)
- [MAL-2025-56753](https://insights.sbomify.com/MAL-2025-56753/): Malicious code in hissing_vulture_z3n (npm) (malicious package)
- [MAL-2025-56752](https://insights.sbomify.com/MAL-2025-56752/): Malicious code in hilarious_blackbird_z3n (npm) (malicious package)
- [MAL-2025-56751](https://insights.sbomify.com/MAL-2025-56751/): Malicious code in hilarious_armadillo_z3n (npm) (malicious package)
- [MAL-2025-56750](https://insights.sbomify.com/MAL-2025-56750/): Malicious code in hidden_tuna_z3n (npm) (malicious package)
- [MAL-2025-5675](https://insights.sbomify.com/MAL-2025-5675/): Malicious code in cdk8s-kbld (npm) (malicious package)
- [MAL-2025-56749](https://insights.sbomify.com/MAL-2025-56749/): Malicious code in hendra-toge39-sukiwir (npm) (malicious package)
- [MAL-2025-56748](https://insights.sbomify.com/MAL-2025-56748/): Malicious code in hendra-tiwul65-sukiwir (npm) (malicious package)
- [MAL-2025-56747](https://insights.sbomify.com/MAL-2025-56747/): Malicious code in hendra-telur47-sukiwir (npm) (malicious package)
- [MAL-2025-56746](https://insights.sbomify.com/MAL-2025-56746/): Malicious code in hendra-taiwan72-sukiwir (npm) (malicious package)
- [MAL-2025-56745](https://insights.sbomify.com/MAL-2025-56745/): Malicious code in hendra-taiwan65-sukiwir (npm) (malicious package)
- [MAL-2025-56744](https://insights.sbomify.com/MAL-2025-56744/): Malicious code in hendra-soto98-sukiwir (npm) (malicious package)
- [MAL-2025-56743](https://insights.sbomify.com/MAL-2025-56743/): Malicious code in hendra-soto11-sukiwir (npm) (malicious package)
- [MAL-2025-56742](https://insights.sbomify.com/MAL-2025-56742/): Malicious code in hendra-soto100-sukiwir (npm) (malicious package)
- [MAL-2025-56741](https://insights.sbomify.com/MAL-2025-56741/): Malicious code in hendra-semur71-sukiwir (npm) (malicious package)
- [MAL-2025-56740](https://insights.sbomify.com/MAL-2025-56740/): Malicious code in hendra-sate3-sukiwir (npm) (malicious package)
- [MAL-2025-5674](https://insights.sbomify.com/MAL-2025-5674/): Malicious code in caglass (npm) (malicious package)
- [MAL-2025-56739](https://insights.sbomify.com/MAL-2025-56739/): Malicious code in hendra-sambel88-sukiwir (npm) (malicious package)
- [MAL-2025-56738](https://insights.sbomify.com/MAL-2025-56738/): Malicious code in hendra-rujak77-sukiwir (npm) (malicious package)
- [MAL-2025-56737](https://insights.sbomify.com/MAL-2025-56737/): Malicious code in hendra-pisang68-sukiwir (npm) (malicious package)
- [MAL-2025-56736](https://insights.sbomify.com/MAL-2025-56736/): Malicious code in hendra-pisang21-sukiwir (npm) (malicious package)
- [MAL-2025-56735](https://insights.sbomify.com/MAL-2025-56735/): Malicious code in hendra-peyek83-sukiwir (npm) (malicious package)
- [MAL-2025-56734](https://insights.sbomify.com/MAL-2025-56734/): Malicious code in hendra-peyek6-sukiwir (npm) (malicious package)
- [MAL-2025-56733](https://insights.sbomify.com/MAL-2025-56733/): Malicious code in hendra-oblok41-sukiwir (npm) (malicious package)
- [MAL-2025-56732](https://insights.sbomify.com/MAL-2025-56732/): Malicious code in hendra-nasicampur97-sukiwir (npm) (malicious package)
- [MAL-2025-56731](https://insights.sbomify.com/MAL-2025-56731/): Malicious code in hendra-nasi73-sukiwir (npm) (malicious package)
- [MAL-2025-56730](https://insights.sbomify.com/MAL-2025-56730/): Malicious code in hendra-miebogor76-sukiwir (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/483/