# Vulnerabilities published in 2025 - [MAL-2025-5367](https://insights.sbomify.com/MAL-2025-5367/): Malicious code in bg-core-payments-automation (npm) (malicious package) - [MAL-2025-53669](https://insights.sbomify.com/MAL-2025-53669/): Malicious code in indah-kupang38-sukiwir (npm) (malicious package) - [MAL-2025-53668](https://insights.sbomify.com/MAL-2025-53668/): Malicious code in indah-kue52-sukiwir (npm) (malicious package) - [MAL-2025-53667](https://insights.sbomify.com/MAL-2025-53667/): Malicious code in indah-kue47-miaww (npm) (malicious package) - [MAL-2025-53666](https://insights.sbomify.com/MAL-2025-53666/): Malicious code in indah-kue36-breki (npm) (malicious package) - [MAL-2025-53665](https://insights.sbomify.com/MAL-2025-53665/): Malicious code in indah-kripik91-breki (npm) (malicious package) - [MAL-2025-53664](https://insights.sbomify.com/MAL-2025-53664/): Malicious code in indah-klentik3-miaww (npm) (malicious package) - [MAL-2025-53663](https://insights.sbomify.com/MAL-2025-53663/): Malicious code in indah-ketoprak73-riris (npm) (malicious package) - [MAL-2025-53662](https://insights.sbomify.com/MAL-2025-53662/): Malicious code in indah-ketoprak40-sluey (npm) (malicious package) - [MAL-2025-53661](https://insights.sbomify.com/MAL-2025-53661/): Malicious code in indah-ketan48-devapp (npm) (malicious package) - [MAL-2025-53660](https://insights.sbomify.com/MAL-2025-53660/): Malicious code in indah-keripik19-sukiwir (npm) (malicious package) - [MAL-2025-5366](https://insights.sbomify.com/MAL-2025-5366/): Malicious code in betsson (npm) (malicious package) - [MAL-2025-53659](https://insights.sbomify.com/MAL-2025-53659/): Malicious code in indah-kentang27-sumpek (npm) (malicious package) - [MAL-2025-53658](https://insights.sbomify.com/MAL-2025-53658/): Malicious code in indah-kembang62-sukiwir (npm) (malicious package) - [MAL-2025-53657](https://insights.sbomify.com/MAL-2025-53657/): Malicious code in indah-jus34-breki (npm) (malicious package) - [MAL-2025-53656](https://insights.sbomify.com/MAL-2025-53656/): Malicious code in indah-ikan79-breki (npm) (malicious package) - [MAL-2025-53655](https://insights.sbomify.com/MAL-2025-53655/): Malicious code in indah-ikan4-breki (npm) (malicious package) - [MAL-2025-53654](https://insights.sbomify.com/MAL-2025-53654/): Malicious code in indah-gandul60-tititugel (npm) (malicious package) - [MAL-2025-53653](https://insights.sbomify.com/MAL-2025-53653/): Malicious code in indah-empal76-sukiwir (npm) (malicious package) - [MAL-2025-53652](https://insights.sbomify.com/MAL-2025-53652/): Malicious code in indah-empal65-ruro (npm) (malicious package) - [MAL-2025-53651](https://insights.sbomify.com/MAL-2025-53651/): Malicious code in indah-dradag91-breki (npm) (malicious package) - [MAL-2025-53650](https://insights.sbomify.com/MAL-2025-53650/): Malicious code in indah-donat32-breki (npm) (malicious package) - [MAL-2025-5365](https://insights.sbomify.com/MAL-2025-5365/): Malicious code in bar.app.bar_rights (npm) (malicious package) - [MAL-2025-53649](https://insights.sbomify.com/MAL-2025-53649/): Malicious code in indah-bubur78-sluey (npm) (malicious package) - [MAL-2025-53648](https://insights.sbomify.com/MAL-2025-53648/): Malicious code in indah-bubur5-sukiwir (npm) (malicious package) - [MAL-2025-53647](https://insights.sbomify.com/MAL-2025-53647/): Malicious code in indah-bika67-riris (npm) (malicious package) - [MAL-2025-53646](https://insights.sbomify.com/MAL-2025-53646/): Malicious code in indah-bakwan61-sluey (npm) (malicious package) - [MAL-2025-53645](https://insights.sbomify.com/MAL-2025-53645/): Malicious code in indah-bakso42-ruro (npm) (malicious package) - [MAL-2025-53644](https://insights.sbomify.com/MAL-2025-53644/): Malicious code in indah-asinan47-sukiwir (npm) (malicious package) - [MAL-2025-53643](https://insights.sbomify.com/MAL-2025-53643/): Malicious code in indah-asinan11-breki (npm) (malicious package) - [MAL-2025-53642](https://insights.sbomify.com/MAL-2025-53642/): Malicious code in polycard (npm) (malicious package) - [MAL-2025-53641](https://insights.sbomify.com/MAL-2025-53641/): Malicious code in ocha-tempe84-sluey (npm) (malicious package) - [MAL-2025-53640](https://insights.sbomify.com/MAL-2025-53640/): Malicious code in ocha-teh24-sluey (npm) (malicious package) - [MAL-2025-5364](https://insights.sbomify.com/MAL-2025-5364/): Malicious code in ati-requisites-form (npm) (malicious package) - [MAL-2025-53639](https://insights.sbomify.com/MAL-2025-53639/): Malicious code in ocha-takokak39-breki (npm) (malicious package) - [MAL-2025-53638](https://insights.sbomify.com/MAL-2025-53638/): Malicious code in ocha-takokak33-ruro (npm) (malicious package) - [MAL-2025-53637](https://insights.sbomify.com/MAL-2025-53637/): Malicious code in ocha-tahu13-ruro (npm) (malicious package) - [MAL-2025-53636](https://insights.sbomify.com/MAL-2025-53636/): Malicious code in ocha-sroto40-sukiwir (npm) (malicious package) - [MAL-2025-53635](https://insights.sbomify.com/MAL-2025-53635/): Malicious code in ocha-soto29-miaww (npm) (malicious package) - [MAL-2025-53634](https://insights.sbomify.com/MAL-2025-53634/): Malicious code in ocha-serimuka33-remi (npm) (malicious package) - [MAL-2025-53633](https://insights.sbomify.com/MAL-2025-53633/): Malicious code in ocha-sate84-miaww (npm) (malicious package) - [MAL-2025-53632](https://insights.sbomify.com/MAL-2025-53632/): Malicious code in ocha-sambel51-breki (npm) (malicious package) - [MAL-2025-53631](https://insights.sbomify.com/MAL-2025-53631/): Malicious code in ocha-sambalado83-breki (npm) (malicious package) - [MAL-2025-53630](https://insights.sbomify.com/MAL-2025-53630/): Malicious code in ocha-saguer91-riris (npm) (malicious package) - [MAL-2025-5363](https://insights.sbomify.com/MAL-2025-5363/): Malicious code in astro-island (npm) (malicious package) - [MAL-2025-53629](https://insights.sbomify.com/MAL-2025-53629/): Malicious code in ocha-saguer23-ruro (npm) (malicious package) - [MAL-2025-53628](https://insights.sbomify.com/MAL-2025-53628/): Malicious code in ocha-rawon58-miaww (npm) (malicious package) - [MAL-2025-53627](https://insights.sbomify.com/MAL-2025-53627/): Malicious code in ocha-rawon40-sukiwir (npm) (malicious package) - [MAL-2025-53626](https://insights.sbomify.com/MAL-2025-53626/): Malicious code in ocha-rangi91-sluey (npm) (malicious package) - [MAL-2025-53625](https://insights.sbomify.com/MAL-2025-53625/): Malicious code in ocha-rangginang91-sukiwir (npm) (malicious package) - [MAL-2025-53624](https://insights.sbomify.com/MAL-2025-53624/): Malicious code in ocha-peyek65-sluey (npm) (malicious package) - [MAL-2025-53623](https://insights.sbomify.com/MAL-2025-53623/): Malicious code in ocha-otak-otak24-sluey (npm) (malicious package) - [MAL-2025-53622](https://insights.sbomify.com/MAL-2025-53622/): Malicious code in ocha-oncom65-kyuki (npm) (malicious package) - [MAL-2025-53621](https://insights.sbomify.com/MAL-2025-53621/): Malicious code in ocha-oblok51-sluey (npm) (malicious package) - [MAL-2025-53620](https://insights.sbomify.com/MAL-2025-53620/): Malicious code in ocha-oblok11-sluey (npm) (malicious package) - [MAL-2025-5362](https://insights.sbomify.com/MAL-2025-5362/): Malicious code in aquasec-orb-test-project (npm) (malicious package) - [MAL-2025-53619](https://insights.sbomify.com/MAL-2025-53619/): Malicious code in ocha-nasicampur92-ruro (npm) (malicious package) - [MAL-2025-53618](https://insights.sbomify.com/MAL-2025-53618/): Malicious code in ocha-nasicampur86-miaww (npm) (malicious package) - [MAL-2025-53617](https://insights.sbomify.com/MAL-2025-53617/): Malicious code in ocha-naget75-miaww (npm) (malicious package) - [MAL-2025-53616](https://insights.sbomify.com/MAL-2025-53616/): Malicious code in ocha-moci40-miaww (npm) (malicious package) - [MAL-2025-53615](https://insights.sbomify.com/MAL-2025-53615/): Malicious code in ocha-moci100-riris (npm) (malicious package) - [MAL-2025-53614](https://insights.sbomify.com/MAL-2025-53614/): Malicious code in ocha-mendut42-sukiwir (npm) (malicious package) - [MAL-2025-53613](https://insights.sbomify.com/MAL-2025-53613/): Malicious code in ocha-mangut61-ruro (npm) (malicious package) - [MAL-2025-53612](https://insights.sbomify.com/MAL-2025-53612/): Malicious code in ocha-mangga100-riris (npm) (malicious package) - [MAL-2025-53611](https://insights.sbomify.com/MAL-2025-53611/): Malicious code in ocha-lumpur72-riris (npm) (malicious package) - [MAL-2025-53610](https://insights.sbomify.com/MAL-2025-53610/): Malicious code in ocha-lumpur13-riris (npm) (malicious package) - [MAL-2025-5361](https://insights.sbomify.com/MAL-2025-5361/): Malicious code in animations.less (npm) (malicious package) - [MAL-2025-53609](https://insights.sbomify.com/MAL-2025-53609/): Malicious code in ocha-liwet99-riris (npm) (malicious package) - [MAL-2025-53608](https://insights.sbomify.com/MAL-2025-53608/): Malicious code in ocha-lepet88-riris (npm) (malicious package) - [MAL-2025-53607](https://insights.sbomify.com/MAL-2025-53607/): Malicious code in ocha-kue54-sukiwir (npm) (malicious package) - [MAL-2025-53606](https://insights.sbomify.com/MAL-2025-53606/): Malicious code in ocha-kue50-breki (npm) (malicious package) - [MAL-2025-53605](https://insights.sbomify.com/MAL-2025-53605/): Malicious code in ocha-kue49-ruro (npm) (malicious package) - [MAL-2025-53604](https://insights.sbomify.com/MAL-2025-53604/): Malicious code in ocha-kue27-sluey (npm) (malicious package) - [MAL-2025-53603](https://insights.sbomify.com/MAL-2025-53603/): Malicious code in ocha-kripik26-ruro (npm) (malicious package) - [MAL-2025-53602](https://insights.sbomify.com/MAL-2025-53602/): Malicious code in ocha-kolak42-sluey (npm) (malicious package) - [MAL-2025-53601](https://insights.sbomify.com/MAL-2025-53601/): Malicious code in ocha-ketan52-miaww (npm) (malicious package) - [MAL-2025-53600](https://insights.sbomify.com/MAL-2025-53600/): Malicious code in ocha-ketan15-miaww (npm) (malicious package) - [MAL-2025-5360](https://insights.sbomify.com/MAL-2025-5360/): Malicious code in always-target (npm) (malicious package) - [MAL-2025-536](https://insights.sbomify.com/MAL-2025-536/): Malicious code in lyft-parser (npm) (malicious package) - [MAL-2025-53599](https://insights.sbomify.com/MAL-2025-53599/): Malicious code in ocha-keripik76-apidev (npm) (malicious package) - [MAL-2025-53598](https://insights.sbomify.com/MAL-2025-53598/): Malicious code in ocha-keripik61-miaww (npm) (malicious package) - [MAL-2025-53597](https://insights.sbomify.com/MAL-2025-53597/): Malicious code in ocha-kepok93-sukiwir (npm) (malicious package) - [MAL-2025-53596](https://insights.sbomify.com/MAL-2025-53596/): Malicious code in ocha-kepok5-miaww (npm) (malicious package) - [MAL-2025-53595](https://insights.sbomify.com/MAL-2025-53595/): Malicious code in ocha-kemplang83-sluey (npm) (malicious package) - [MAL-2025-53594](https://insights.sbomify.com/MAL-2025-53594/): Malicious code in ocha-kemplang50-riris (npm) (malicious package) - [MAL-2025-53593](https://insights.sbomify.com/MAL-2025-53593/): Malicious code in ocha-kacang99-riris (npm) (malicious package) - [MAL-2025-53592](https://insights.sbomify.com/MAL-2025-53592/): Malicious code in ocha-kacang79-riris (npm) (malicious package) - [MAL-2025-53591](https://insights.sbomify.com/MAL-2025-53591/): Malicious code in ocha-jengkol47-riris (npm) (malicious package) - [MAL-2025-53590](https://insights.sbomify.com/MAL-2025-53590/): Malicious code in ocha-jamblang87-sluey (npm) (malicious package) - [MAL-2025-5359](https://insights.sbomify.com/MAL-2025-5359/): Malicious code in alicn (npm) (malicious package) - [MAL-2025-53589](https://insights.sbomify.com/MAL-2025-53589/): Malicious code in ocha-gudeg61-pore (npm) (malicious package) - [MAL-2025-53588](https://insights.sbomify.com/MAL-2025-53588/): Malicious code in ocha-gembus53-breki (npm) (malicious package) - [MAL-2025-53587](https://insights.sbomify.com/MAL-2025-53587/): Malicious code in ocha-gado-gado64-sukiwir (npm) (malicious package) - [MAL-2025-53586](https://insights.sbomify.com/MAL-2025-53586/): Malicious code in ocha-esdoger69-sluey (npm) (malicious package) - [MAL-2025-53585](https://insights.sbomify.com/MAL-2025-53585/): Malicious code in ocha-empal72-apidev (npm) (malicious package) - [MAL-2025-53584](https://insights.sbomify.com/MAL-2025-53584/): Malicious code in ocha-bubur46-sukiwir (npm) (malicious package) - [MAL-2025-53583](https://insights.sbomify.com/MAL-2025-53583/): Malicious code in ocha-brengkes94-riris (npm) (malicious package) - [MAL-2025-53582](https://insights.sbomify.com/MAL-2025-53582/): Malicious code in nurul-tumis54-miaww (npm) (malicious package) - [MAL-2025-53581](https://insights.sbomify.com/MAL-2025-53581/): Malicious code in nurul-tongseng69-ruro (npm) (malicious package) - [MAL-2025-53580](https://insights.sbomify.com/MAL-2025-53580/): Malicious code in nurul-tongseng43-ruro (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/518/