# Vulnerabilities published in 2025 - [MAL-2025-5565](https://insights.sbomify.com/MAL-2025-5565/): Malicious code in melichat-sdk (npm) (malicious package) - [MAL-2025-55649](https://insights.sbomify.com/MAL-2025-55649/): Malicious code in citra-rojak26-sukiwir (npm) (malicious package) - [MAL-2025-55648](https://insights.sbomify.com/MAL-2025-55648/): Malicious code in citra-rendang60-sukiwir (npm) (malicious package) - [MAL-2025-55647](https://insights.sbomify.com/MAL-2025-55647/): Malicious code in citra-rawon49-sukiwir (npm) (malicious package) - [MAL-2025-55646](https://insights.sbomify.com/MAL-2025-55646/): Malicious code in citra-rawon4-sukiwir (npm) (malicious package) - [MAL-2025-55645](https://insights.sbomify.com/MAL-2025-55645/): Malicious code in citra-rawon16-sukiwir (npm) (malicious package) - [MAL-2025-55644](https://insights.sbomify.com/MAL-2025-55644/): Malicious code in citra-ragi98-sukiwir (npm) (malicious package) - [MAL-2025-55643](https://insights.sbomify.com/MAL-2025-55643/): Malicious code in citra-peyek49-sukiwir (npm) (malicious package) - [MAL-2025-55642](https://insights.sbomify.com/MAL-2025-55642/): Malicious code in citra-pecel88-sukiwir (npm) (malicious package) - [MAL-2025-55641](https://insights.sbomify.com/MAL-2025-55641/): Malicious code in citra-pecel63-sukiwir (npm) (malicious package) - [MAL-2025-55640](https://insights.sbomify.com/MAL-2025-55640/): Malicious code in citra-papeda63-sukiwir (npm) (malicious package) - [MAL-2025-5564](https://insights.sbomify.com/MAL-2025-5564/): Malicious code in karakeep (npm) (malicious package) - [MAL-2025-55639](https://insights.sbomify.com/MAL-2025-55639/): Malicious code in citra-oncom32-sukiwir (npm) (malicious package) - [MAL-2025-55638](https://insights.sbomify.com/MAL-2025-55638/): Malicious code in citra-nasisayur34-sukiwir (npm) (malicious package) - [MAL-2025-55637](https://insights.sbomify.com/MAL-2025-55637/): Malicious code in citra-miemee22-sukiwir (npm) (malicious package) - [MAL-2025-55636](https://insights.sbomify.com/MAL-2025-55636/): Malicious code in citra-lupis45-sukiwir (npm) (malicious package) - [MAL-2025-55635](https://insights.sbomify.com/MAL-2025-55635/): Malicious code in citra-lontong89-sukiwir (npm) (malicious package) - [MAL-2025-55634](https://insights.sbomify.com/MAL-2025-55634/): Malicious code in citra-lepet75-sukiwir (npm) (malicious package) - [MAL-2025-55633](https://insights.sbomify.com/MAL-2025-55633/): Malicious code in citra-lepet61-sukiwir (npm) (malicious package) - [MAL-2025-55632](https://insights.sbomify.com/MAL-2025-55632/): Malicious code in citra-kupat99-sukiwir (npm) (malicious package) - [MAL-2025-55631](https://insights.sbomify.com/MAL-2025-55631/): Malicious code in citra-kue5-sukiwir (npm) (malicious package) - [MAL-2025-55630](https://insights.sbomify.com/MAL-2025-55630/): Malicious code in citra-kue48-sukiwir (npm) (malicious package) - [MAL-2025-5563](https://insights.sbomify.com/MAL-2025-5563/): Malicious code in json-cookie-jar (npm) (malicious package) - [MAL-2025-55629](https://insights.sbomify.com/MAL-2025-55629/): Malicious code in citra-kripik71-sukiwir (npm) (malicious package) - [MAL-2025-55628](https://insights.sbomify.com/MAL-2025-55628/): Malicious code in citra-klipo45-sukiwir (npm) (malicious package) - [MAL-2025-55627](https://insights.sbomify.com/MAL-2025-55627/): Malicious code in citra-klentik21-sukiwir (npm) (malicious package) - [MAL-2025-55626](https://insights.sbomify.com/MAL-2025-55626/): Malicious code in citra-keripik45-sukiwir (npm) (malicious package) - [MAL-2025-55625](https://insights.sbomify.com/MAL-2025-55625/): Malicious code in citra-kacang52-sukiwir (npm) (malicious package) - [MAL-2025-55624](https://insights.sbomify.com/MAL-2025-55624/): Malicious code in citra-gulai62-sukiwir (npm) (malicious package) - [MAL-2025-55623](https://insights.sbomify.com/MAL-2025-55623/): Malicious code in citra-gudeg5-sukiwir (npm) (malicious package) - [MAL-2025-55622](https://insights.sbomify.com/MAL-2025-55622/): Malicious code in citra-gembus97-sukiwir (npm) (malicious package) - [MAL-2025-55621](https://insights.sbomify.com/MAL-2025-55621/): Malicious code in citra-gandul54-sukiwir (npm) (malicious package) - [MAL-2025-55620](https://insights.sbomify.com/MAL-2025-55620/): Malicious code in citra-enting98-sukiwir (npm) (malicious package) - [MAL-2025-5562](https://insights.sbomify.com/MAL-2025-5562/): Malicious code in ipmi-command (npm) (malicious package) - [MAL-2025-55619](https://insights.sbomify.com/MAL-2025-55619/): Malicious code in citra-enting88-sukiwir (npm) (malicious package) - [MAL-2025-55618](https://insights.sbomify.com/MAL-2025-55618/): Malicious code in citra-enting71-sukiwir (npm) (malicious package) - [MAL-2025-55617](https://insights.sbomify.com/MAL-2025-55617/): Malicious code in citra-buburayam73-sukiwir (npm) (malicious package) - [MAL-2025-55616](https://insights.sbomify.com/MAL-2025-55616/): Malicious code in citra-bakwan65-sukiwir (npm) (malicious package) - [MAL-2025-55615](https://insights.sbomify.com/MAL-2025-55615/): Malicious code in citra-bakso46-sukiwir (npm) (malicious package) - [MAL-2025-55614](https://insights.sbomify.com/MAL-2025-55614/): Malicious code in citra-asinan45-sukiwir (npm) (malicious package) - [MAL-2025-55613](https://insights.sbomify.com/MAL-2025-55613/): Malicious code in cindy-wajit9-sukiwir (npm) (malicious package) - [MAL-2025-55612](https://insights.sbomify.com/MAL-2025-55612/): Malicious code in cindy-ubi56-sukiwir (npm) (malicious package) - [MAL-2025-55611](https://insights.sbomify.com/MAL-2025-55611/): Malicious code in cindy-tiwul39-sukiwir (npm) (malicious package) - [MAL-2025-55610](https://insights.sbomify.com/MAL-2025-55610/): Malicious code in cindy-tempe20-sukiwir (npm) (malicious package) - [MAL-2025-5561](https://insights.sbomify.com/MAL-2025-5561/): Malicious code in identification-card-component (npm) (malicious package) - [MAL-2025-55609](https://insights.sbomify.com/MAL-2025-55609/): Malicious code in cindy-telur67-sukiwir (npm) (malicious package) - [MAL-2025-55608](https://insights.sbomify.com/MAL-2025-55608/): Malicious code in cindy-teh8-sukiwir (npm) (malicious package) - [MAL-2025-55607](https://insights.sbomify.com/MAL-2025-55607/): Malicious code in cindy-teh35-sukiwir (npm) (malicious package) - [MAL-2025-55606](https://insights.sbomify.com/MAL-2025-55606/): Malicious code in cindy-tapai94-sukiwir (npm) (malicious package) - [MAL-2025-55605](https://insights.sbomify.com/MAL-2025-55605/): Malicious code in cindy-soto59-sukiwir (npm) (malicious package) - [MAL-2025-55604](https://insights.sbomify.com/MAL-2025-55604/): Malicious code in cindy-serimuka73-sukiwir (npm) (malicious package) - [MAL-2025-55603](https://insights.sbomify.com/MAL-2025-55603/): Malicious code in cindy-sego67-sukiwir (npm) (malicious package) - [MAL-2025-55602](https://insights.sbomify.com/MAL-2025-55602/): Malicious code in cindy-sego45-sukiwir (npm) (malicious package) - [MAL-2025-55601](https://insights.sbomify.com/MAL-2025-55601/): Malicious code in cindy-sate42-sukiwir (npm) (malicious package) - [MAL-2025-55600](https://insights.sbomify.com/MAL-2025-55600/): Malicious code in cindy-sambel18-sukiwir (npm) (malicious package) - [MAL-2025-5560](https://insights.sbomify.com/MAL-2025-5560/): Malicious code in hardhat-deploy-notifier (npm) (malicious package) - [MAL-2025-556](https://insights.sbomify.com/MAL-2025-556/): Malicious code in meli-jira (npm) (malicious package) - [MAL-2025-55599](https://insights.sbomify.com/MAL-2025-55599/): Malicious code in cindy-sambalado71-sukiwir (npm) (malicious package) - [MAL-2025-55598](https://insights.sbomify.com/MAL-2025-55598/): Malicious code in cindy-saguer29-sukiwir (npm) (malicious package) - [MAL-2025-55597](https://insights.sbomify.com/MAL-2025-55597/): Malicious code in cindy-ruwet91-sukiwir (npm) (malicious package) - [MAL-2025-55596](https://insights.sbomify.com/MAL-2025-55596/): Malicious code in cindy-rendang6-sukiwir (npm) (malicious package) - [MAL-2025-55595](https://insights.sbomify.com/MAL-2025-55595/): Malicious code in cindy-rangi26-sukiwir (npm) (malicious package) - [MAL-2025-55594](https://insights.sbomify.com/MAL-2025-55594/): Malicious code in cindy-pisang10-sukiwir (npm) (malicious package) - [MAL-2025-55593](https://insights.sbomify.com/MAL-2025-55593/): Malicious code in cindy-otak-otak7-sukiwir (npm) (malicious package) - [MAL-2025-55592](https://insights.sbomify.com/MAL-2025-55592/): Malicious code in cindy-ongol-ongol53-sukiwir (npm) (malicious package) - [MAL-2025-55591](https://insights.sbomify.com/MAL-2025-55591/): Malicious code in cindy-nasiuduk73-sukiwir (npm) (malicious package) - [MAL-2025-55590](https://insights.sbomify.com/MAL-2025-55590/): Malicious code in cindy-nasisayur72-sukiwir (npm) (malicious package) - [MAL-2025-5559](https://insights.sbomify.com/MAL-2025-5559/): Malicious code in hardhat-deploy-notification (npm) (malicious package) - [MAL-2025-55589](https://insights.sbomify.com/MAL-2025-55589/): Malicious code in cindy-mieayam65-sukiwir (npm) (malicious package) - [MAL-2025-55588](https://insights.sbomify.com/MAL-2025-55588/): Malicious code in cindy-menjes19-sukiwir (npm) (malicious package) - [MAL-2025-55587](https://insights.sbomify.com/MAL-2025-55587/): Malicious code in cindy-mendut77-sukiwir (npm) (malicious package) - [MAL-2025-55586](https://insights.sbomify.com/MAL-2025-55586/): Malicious code in cindy-martabak12-sukiwir (npm) (malicious package) - [MAL-2025-55585](https://insights.sbomify.com/MAL-2025-55585/): Malicious code in cindy-lupis60-sukiwir (npm) (malicious package) - [MAL-2025-55584](https://insights.sbomify.com/MAL-2025-55584/): Malicious code in cindy-lumpur51-sukiwir (npm) (malicious package) - [MAL-2025-55583](https://insights.sbomify.com/MAL-2025-55583/): Malicious code in cindy-kue27-sukiwir (npm) (malicious package) - [MAL-2025-55582](https://insights.sbomify.com/MAL-2025-55582/): Malicious code in cindy-kue17-sukiwir (npm) (malicious package) - [MAL-2025-55581](https://insights.sbomify.com/MAL-2025-55581/): Malicious code in cindy-klentik92-sukiwir (npm) (malicious package) - [MAL-2025-55580](https://insights.sbomify.com/MAL-2025-55580/): Malicious code in cindy-ketan9-sukiwir (npm) (malicious package) - [MAL-2025-5558](https://insights.sbomify.com/MAL-2025-5558/): Malicious code in frontend-env (npm) (malicious package) - [MAL-2025-55579](https://insights.sbomify.com/MAL-2025-55579/): Malicious code in cindy-jus58-sukiwir (npm) (malicious package) - [MAL-2025-55578](https://insights.sbomify.com/MAL-2025-55578/): Malicious code in cindy-jengkol78-sukiwir (npm) (malicious package) - [MAL-2025-55577](https://insights.sbomify.com/MAL-2025-55577/): Malicious code in cindy-gudeg90-sukiwir (npm) (malicious package) - [MAL-2025-55576](https://insights.sbomify.com/MAL-2025-55576/): Malicious code in cindy-getuk31-sukiwir (npm) (malicious package) - [MAL-2025-55575](https://insights.sbomify.com/MAL-2025-55575/): Malicious code in cindy-getas71-sukiwir (npm) (malicious package) - [MAL-2025-55574](https://insights.sbomify.com/MAL-2025-55574/): Malicious code in cindy-donat96-sukiwir (npm) (malicious package) - [MAL-2025-55573](https://insights.sbomify.com/MAL-2025-55573/): Malicious code in cindy-brengkes87-sukiwir (npm) (malicious package) - [MAL-2025-55572](https://insights.sbomify.com/MAL-2025-55572/): Malicious code in cindy-botok98-sukiwir (npm) (malicious package) - [MAL-2025-55571](https://insights.sbomify.com/MAL-2025-55571/): Malicious code in cindy-bakso10-sukiwir (npm) (malicious package) - [MAL-2025-55570](https://insights.sbomify.com/MAL-2025-55570/): Malicious code in cici-wajit27-sukiwir (npm) (malicious package) - [MAL-2025-5557](https://insights.sbomify.com/MAL-2025-5557/): Malicious code in frontend-device_detection (npm) (malicious package) - [MAL-2025-55569](https://insights.sbomify.com/MAL-2025-55569/): Malicious code in cici-tumis80-sukiwir (npm) (malicious package) - [MAL-2025-55568](https://insights.sbomify.com/MAL-2025-55568/): Malicious code in cici-telur50-sukiwir (npm) (malicious package) - [MAL-2025-55567](https://insights.sbomify.com/MAL-2025-55567/): Malicious code in cici-tapai6-sukiwir (npm) (malicious package) - [MAL-2025-55566](https://insights.sbomify.com/MAL-2025-55566/): Malicious code in cici-taiwan71-sukiwir (npm) (malicious package) - [MAL-2025-55565](https://insights.sbomify.com/MAL-2025-55565/): Malicious code in cici-soto78-sukiwir (npm) (malicious package) - [MAL-2025-55564](https://insights.sbomify.com/MAL-2025-55564/): Malicious code in cici-serabi10-sukiwir (npm) (malicious package) - [MAL-2025-55563](https://insights.sbomify.com/MAL-2025-55563/): Malicious code in cici-sego22-sukiwir (npm) (malicious package) - [MAL-2025-55562](https://insights.sbomify.com/MAL-2025-55562/): Malicious code in cici-sate37-sukiwir (npm) (malicious package) - [MAL-2025-55561](https://insights.sbomify.com/MAL-2025-55561/): Malicious code in cici-saguer10-sukiwir (npm) (malicious package) - [MAL-2025-55560](https://insights.sbomify.com/MAL-2025-55560/): Malicious code in cici-ronde75-sukiwir (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/496/