# Vulnerabilities published in 2025


- [MAL-2025-5538](https://insights.sbomify.com/MAL-2025-5538/): Malicious code in k6-studio (npm) (malicious package)
- [MAL-2025-55379](https://insights.sbomify.com/MAL-2025-55379/): Malicious code in bella-nasi4-sukiwir (npm) (malicious package)
- [MAL-2025-55378](https://insights.sbomify.com/MAL-2025-55378/): Malicious code in bella-mangga85-sukiwir (npm) (malicious package)
- [MAL-2025-55377](https://insights.sbomify.com/MAL-2025-55377/): Malicious code in bella-lupis98-sukiwir (npm) (malicious package)
- [MAL-2025-55376](https://insights.sbomify.com/MAL-2025-55376/): Malicious code in bella-lontong8-sukiwir (npm) (malicious package)
- [MAL-2025-55375](https://insights.sbomify.com/MAL-2025-55375/): Malicious code in bella-lodeh11-sukiwir (npm) (malicious package)
- [MAL-2025-55374](https://insights.sbomify.com/MAL-2025-55374/): Malicious code in bella-liwet33-sukiwir (npm) (malicious package)
- [MAL-2025-55373](https://insights.sbomify.com/MAL-2025-55373/): Malicious code in bella-lapis27-sukiwir (npm) (malicious package)
- [MAL-2025-55372](https://insights.sbomify.com/MAL-2025-55372/): Malicious code in bella-kupang31-sukiwir (npm) (malicious package)
- [MAL-2025-55371](https://insights.sbomify.com/MAL-2025-55371/): Malicious code in bella-kue85-sukiwir (npm) (malicious package)
- [MAL-2025-55370](https://insights.sbomify.com/MAL-2025-55370/): Malicious code in bella-kue72-sukiwir (npm) (malicious package)
- [MAL-2025-5537](https://insights.sbomify.com/MAL-2025-5537/): Malicious code in @frontend-clients/design-system (npm) (malicious package)
- [MAL-2025-55369](https://insights.sbomify.com/MAL-2025-55369/): Malicious code in bella-kue25-sukiwir (npm) (malicious package)
- [MAL-2025-55368](https://insights.sbomify.com/MAL-2025-55368/): Malicious code in bella-klanting19-sukiwir (npm) (malicious package)
- [MAL-2025-55367](https://insights.sbomify.com/MAL-2025-55367/): Malicious code in bella-keripik41-sukiwir (npm) (malicious package)
- [MAL-2025-55366](https://insights.sbomify.com/MAL-2025-55366/): Malicious code in bella-kentang86-sukiwir (npm) (malicious package)
- [MAL-2025-55365](https://insights.sbomify.com/MAL-2025-55365/): Malicious code in bella-kentang72-sukiwir (npm) (malicious package)
- [MAL-2025-55364](https://insights.sbomify.com/MAL-2025-55364/): Malicious code in bella-kentang44-sukiwir (npm) (malicious package)
- [MAL-2025-55363](https://insights.sbomify.com/MAL-2025-55363/): Malicious code in bella-gulai61-sukiwir (npm) (malicious package)
- [MAL-2025-55362](https://insights.sbomify.com/MAL-2025-55362/): Malicious code in bella-gulai4-sukiwir (npm) (malicious package)
- [MAL-2025-55361](https://insights.sbomify.com/MAL-2025-55361/): Malicious code in bella-gulai100-sukiwir (npm) (malicious package)
- [MAL-2025-55360](https://insights.sbomify.com/MAL-2025-55360/): Malicious code in bella-gandul34-sukiwir (npm) (malicious package)
- [MAL-2025-5536](https://insights.sbomify.com/MAL-2025-5536/): Malicious code in @frontend-clients/core (npm) (malicious package)
- [MAL-2025-55359](https://insights.sbomify.com/MAL-2025-55359/): Malicious code in bella-enting10-sukiwir (npm) (malicious package)
- [MAL-2025-55358](https://insights.sbomify.com/MAL-2025-55358/): Malicious code in bella-dradag10-sukiwir (npm) (malicious package)
- [MAL-2025-55357](https://insights.sbomify.com/MAL-2025-55357/): Malicious code in bella-donat2-sukiwir (npm) (malicious package)
- [MAL-2025-55356](https://insights.sbomify.com/MAL-2025-55356/): Malicious code in bella-dodol89-sukiwir (npm) (malicious package)
- [MAL-2025-55355](https://insights.sbomify.com/MAL-2025-55355/): Malicious code in bella-bubur91-sukiwir (npm) (malicious package)
- [MAL-2025-55354](https://insights.sbomify.com/MAL-2025-55354/): Malicious code in bella-botok63-sukiwir (npm) (malicious package)
- [MAL-2025-55353](https://insights.sbomify.com/MAL-2025-55353/): Malicious code in bella-bika60-sukiwir (npm) (malicious package)
- [MAL-2025-55352](https://insights.sbomify.com/MAL-2025-55352/): Malicious code in beautiful_macaw_z3n (npm) (malicious package)
- [MAL-2025-55351](https://insights.sbomify.com/MAL-2025-55351/): Malicious code in bayu-teh15-sukiwir (npm) (malicious package)
- [MAL-2025-55350](https://insights.sbomify.com/MAL-2025-55350/): Malicious code in bayu-takokak39-sukiwir (npm) (malicious package)
- [MAL-2025-5535](https://insights.sbomify.com/MAL-2025-5535/): Malicious code in pyroscope-nodejs (npm) (malicious package)
- [MAL-2025-55349](https://insights.sbomify.com/MAL-2025-55349/): Malicious code in bayu-tahu99-sukiwir (npm) (malicious package)
- [MAL-2025-55348](https://insights.sbomify.com/MAL-2025-55348/): Malicious code in bayu-soto31-sukiwir (npm) (malicious package)
- [MAL-2025-55347](https://insights.sbomify.com/MAL-2025-55347/): Malicious code in bayu-serabi76-sukiwir (npm) (malicious package)
- [MAL-2025-55346](https://insights.sbomify.com/MAL-2025-55346/): Malicious code in bayu-semur58-sukiwir (npm) (malicious package)
- [MAL-2025-55345](https://insights.sbomify.com/MAL-2025-55345/): Malicious code in bayu-sate43-sukiwir (npm) (malicious package)
- [MAL-2025-55344](https://insights.sbomify.com/MAL-2025-55344/): Malicious code in bayu-sasag67-sukiwir (npm) (malicious package)
- [MAL-2025-55343](https://insights.sbomify.com/MAL-2025-55343/): Malicious code in bayu-sasag24-sukiwir (npm) (malicious package)
- [MAL-2025-55342](https://insights.sbomify.com/MAL-2025-55342/): Malicious code in bayu-sambalado97-sukiwir (npm) (malicious package)
- [MAL-2025-55341](https://insights.sbomify.com/MAL-2025-55341/): Malicious code in bayu-rangi52-sukiwir (npm) (malicious package)
- [MAL-2025-55340](https://insights.sbomify.com/MAL-2025-55340/): Malicious code in bayu-rangginang79-sukiwir (npm) (malicious package)
- [MAL-2025-5534](https://insights.sbomify.com/MAL-2025-5534/): Malicious code in grafana-pyroscope (npm) (malicious package)
- [MAL-2025-55339](https://insights.sbomify.com/MAL-2025-55339/): Malicious code in bayu-papeda63-sukiwir (npm) (malicious package)
- [MAL-2025-55338](https://insights.sbomify.com/MAL-2025-55338/): Malicious code in bayu-oncom53-sukiwir (npm) (malicious package)
- [MAL-2025-55337](https://insights.sbomify.com/MAL-2025-55337/): Malicious code in bayu-oblok55-sukiwir (npm) (malicious package)
- [MAL-2025-55336](https://insights.sbomify.com/MAL-2025-55336/): Malicious code in bayu-nasipecel65-sukiwir (npm) (malicious package)
- [MAL-2025-55335](https://insights.sbomify.com/MAL-2025-55335/): Malicious code in bayu-moci29-sukiwir (npm) (malicious package)
- [MAL-2025-55334](https://insights.sbomify.com/MAL-2025-55334/): Malicious code in bayu-mie85-sukiwir (npm) (malicious package)
- [MAL-2025-55333](https://insights.sbomify.com/MAL-2025-55333/): Malicious code in bayu-mendut97-sukiwir (npm) (malicious package)
- [MAL-2025-55332](https://insights.sbomify.com/MAL-2025-55332/): Malicious code in bayu-mendut71-sukiwir (npm) (malicious package)
- [MAL-2025-55331](https://insights.sbomify.com/MAL-2025-55331/): Malicious code in bayu-lumpur69-sukiwir (npm) (malicious package)
- [MAL-2025-55330](https://insights.sbomify.com/MAL-2025-55330/): Malicious code in bayu-liwet66-sukiwir (npm) (malicious package)
- [MAL-2025-5533](https://insights.sbomify.com/MAL-2025-5533/): Malicious code in cmr-stac (npm) (malicious package)
- [MAL-2025-55329](https://insights.sbomify.com/MAL-2025-55329/): Malicious code in bayu-kue98-sukiwir (npm) (malicious package)
- [MAL-2025-55328](https://insights.sbomify.com/MAL-2025-55328/): Malicious code in bayu-keripik84-sukiwir (npm) (malicious package)
- [MAL-2025-55327](https://insights.sbomify.com/MAL-2025-55327/): Malicious code in bayu-keripik8-sukiwir (npm) (malicious package)
- [MAL-2025-55326](https://insights.sbomify.com/MAL-2025-55326/): Malicious code in bayu-keraktelor97-sukiwir (npm) (malicious package)
- [MAL-2025-55325](https://insights.sbomify.com/MAL-2025-55325/): Malicious code in bayu-ikan99-sukiwir (npm) (malicious package)
- [MAL-2025-55324](https://insights.sbomify.com/MAL-2025-55324/): Malicious code in bayu-gulai21-sukiwir (npm) (malicious package)
- [MAL-2025-55323](https://insights.sbomify.com/MAL-2025-55323/): Malicious code in bayu-esdoger93-sukiwir (npm) (malicious package)
- [MAL-2025-55322](https://insights.sbomify.com/MAL-2025-55322/): Malicious code in bayu-bubursumsum49-sukiwir (npm) (malicious package)
- [MAL-2025-55321](https://insights.sbomify.com/MAL-2025-55321/): Malicious code in bayu-buburayam1-sukiwir (npm) (malicious package)
- [MAL-2025-55320](https://insights.sbomify.com/MAL-2025-55320/): Malicious code in bayu-bika43-sukiwir (npm) (malicious package)
- [MAL-2025-5532](https://insights.sbomify.com/MAL-2025-5532/): Malicious code in grafana-github-datasource (npm) (malicious package)
- [MAL-2025-55319](https://insights.sbomify.com/MAL-2025-55319/): Malicious code in bayu-bika23-sukiwir (npm) (malicious package)
- [MAL-2025-55318](https://insights.sbomify.com/MAL-2025-55318/): Malicious code in bambang-wajit31-sukiwir (npm) (malicious package)
- [MAL-2025-55317](https://insights.sbomify.com/MAL-2025-55317/): Malicious code in bambang-tempe19-sukiwir (npm) (malicious package)
- [MAL-2025-55316](https://insights.sbomify.com/MAL-2025-55316/): Malicious code in bambang-soto62-sukiwir (npm) (malicious package)
- [MAL-2025-55315](https://insights.sbomify.com/MAL-2025-55315/): Malicious code in bambang-serabi99-sukiwir (npm) (malicious package)
- [MAL-2025-55314](https://insights.sbomify.com/MAL-2025-55314/): Malicious code in bambang-sego77-sukiwir (npm) (malicious package)
- [MAL-2025-55313](https://insights.sbomify.com/MAL-2025-55313/): Malicious code in bambang-sasag85-sukiwir (npm) (malicious package)
- [MAL-2025-55312](https://insights.sbomify.com/MAL-2025-55312/): Malicious code in bambang-sasag72-sukiwir (npm) (malicious package)
- [MAL-2025-55311](https://insights.sbomify.com/MAL-2025-55311/): Malicious code in bambang-rujaksoto3-sukiwir (npm) (malicious package)
- [MAL-2025-55310](https://insights.sbomify.com/MAL-2025-55310/): Malicious code in bambang-rujak34-sukiwir (npm) (malicious package)
- [MAL-2025-5531](https://insights.sbomify.com/MAL-2025-5531/): Malicious code in zaranian (npm) (malicious package)
- [MAL-2025-55309](https://insights.sbomify.com/MAL-2025-55309/): Malicious code in bambang-rendang69-sukiwir (npm) (malicious package)
- [MAL-2025-55308](https://insights.sbomify.com/MAL-2025-55308/): Malicious code in bambang-rendang6-sukiwir (npm) (malicious package)
- [MAL-2025-55307](https://insights.sbomify.com/MAL-2025-55307/): Malicious code in bambang-rawon20-sukiwir (npm) (malicious package)
- [MAL-2025-55306](https://insights.sbomify.com/MAL-2025-55306/): Malicious code in bambang-nasiuduk70-sukiwir (npm) (malicious package)
- [MAL-2025-55305](https://insights.sbomify.com/MAL-2025-55305/): Malicious code in bambang-nasicampur10-sukiwir (npm) (malicious package)
- [MAL-2025-55304](https://insights.sbomify.com/MAL-2025-55304/): Malicious code in bambang-nasi82-sukiwir (npm) (malicious package)
- [MAL-2025-55303](https://insights.sbomify.com/MAL-2025-55303/): Malicious code in bambang-nasi27-sukiwir (npm) (malicious package)
- [MAL-2025-55302](https://insights.sbomify.com/MAL-2025-55302/): Malicious code in bambang-menjes35-sukiwir (npm) (malicious package)
- [MAL-2025-55301](https://insights.sbomify.com/MAL-2025-55301/): Malicious code in bambang-mangut95-sukiwir (npm) (malicious package)
- [MAL-2025-55300](https://insights.sbomify.com/MAL-2025-55300/): Malicious code in bambang-liwet1-sukiwir (npm) (malicious package)
- [MAL-2025-5530](https://insights.sbomify.com/MAL-2025-5530/): Malicious code in youku-search (npm) (malicious package)
- [MAL-2025-553](https://insights.sbomify.com/MAL-2025-553/): Malicious code in meli-event (npm) (malicious package)
- [MAL-2025-55299](https://insights.sbomify.com/MAL-2025-55299/): Malicious code in bambang-kupat44-sukiwir (npm) (malicious package)
- [MAL-2025-55298](https://insights.sbomify.com/MAL-2025-55298/): Malicious code in bambang-kue58-sukiwir (npm) (malicious package)
- [MAL-2025-55297](https://insights.sbomify.com/MAL-2025-55297/): Malicious code in bambang-kue54-sukiwir (npm) (malicious package)
- [MAL-2025-55296](https://insights.sbomify.com/MAL-2025-55296/): Malicious code in bambang-kue31-sukiwir (npm) (malicious package)
- [MAL-2025-55295](https://insights.sbomify.com/MAL-2025-55295/): Malicious code in bambang-kue25-sukiwir (npm) (malicious package)
- [MAL-2025-55294](https://insights.sbomify.com/MAL-2025-55294/): Malicious code in bambang-klipo97-sukiwir (npm) (malicious package)
- [MAL-2025-55293](https://insights.sbomify.com/MAL-2025-55293/): Malicious code in bambang-klanting15-sukiwir (npm) (malicious package)
- [MAL-2025-55292](https://insights.sbomify.com/MAL-2025-55292/): Malicious code in bambang-keraktelor77-sukiwir (npm) (malicious package)
- [MAL-2025-55291](https://insights.sbomify.com/MAL-2025-55291/): Malicious code in bambang-keraktelor41-sukiwir (npm) (malicious package)
- [MAL-2025-55290](https://insights.sbomify.com/MAL-2025-55290/): Malicious code in bambang-kembang8-sukiwir (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/499/
