# Vulnerabilities published in 2025 - [MAL-2025-5358](https://insights.sbomify.com/MAL-2025-5358/): Malicious code in alexwilliam (npm) (malicious package) - [MAL-2025-53579](https://insights.sbomify.com/MAL-2025-53579/): Malicious code in nurul-tongseng30-breki (npm) (malicious package) - [MAL-2025-53578](https://insights.sbomify.com/MAL-2025-53578/): Malicious code in nurul-teh60-sukiwir (npm) (malicious package) - [MAL-2025-53577](https://insights.sbomify.com/MAL-2025-53577/): Malicious code in nurul-tapai59-riris (npm) (malicious package) - [MAL-2025-53576](https://insights.sbomify.com/MAL-2025-53576/): Malicious code in nurul-tapai4-sluey (npm) (malicious package) - [MAL-2025-53575](https://insights.sbomify.com/MAL-2025-53575/): Malicious code in nurul-sroto58-ruro (npm) (malicious package) - [MAL-2025-53574](https://insights.sbomify.com/MAL-2025-53574/): Malicious code in nurul-sroto31-sukiwir (npm) (malicious package) - [MAL-2025-53573](https://insights.sbomify.com/MAL-2025-53573/): Malicious code in nurul-serabi5-breki (npm) (malicious package) - [MAL-2025-53572](https://insights.sbomify.com/MAL-2025-53572/): Malicious code in nurul-sego2-ruro (npm) (malicious package) - [MAL-2025-53571](https://insights.sbomify.com/MAL-2025-53571/): Malicious code in nurul-sasag91-riris (npm) (malicious package) - [MAL-2025-53570](https://insights.sbomify.com/MAL-2025-53570/): Malicious code in nurul-sambel43-ruro (npm) (malicious package) - [MAL-2025-5357](https://insights.sbomify.com/MAL-2025-5357/): Malicious code in alexmssd (npm) (malicious package) - [MAL-2025-53569](https://insights.sbomify.com/MAL-2025-53569/): Malicious code in nurul-sambalado73-ruro (npm) (malicious package) - [MAL-2025-53568](https://insights.sbomify.com/MAL-2025-53568/): Malicious code in nurul-saguer68-breki (npm) (malicious package) - [MAL-2025-53567](https://insights.sbomify.com/MAL-2025-53567/): Malicious code in nurul-rujak88-ruro (npm) (malicious package) - [MAL-2025-53566](https://insights.sbomify.com/MAL-2025-53566/): Malicious code in nurul-ronde15-breki (npm) (malicious package) - [MAL-2025-53565](https://insights.sbomify.com/MAL-2025-53565/): Malicious code in nurul-rawon98-sukiwir (npm) (malicious package) - [MAL-2025-53564](https://insights.sbomify.com/MAL-2025-53564/): Malicious code in nurul-rangi95-breki (npm) (malicious package) - [MAL-2025-53563](https://insights.sbomify.com/MAL-2025-53563/): Malicious code in nurul-rangi70-miaww (npm) (malicious package) - [MAL-2025-53562](https://insights.sbomify.com/MAL-2025-53562/): Malicious code in nurul-pisang15-ruro (npm) (malicious package) - [MAL-2025-53561](https://insights.sbomify.com/MAL-2025-53561/): Malicious code in nurul-peyek91-riris (npm) (malicious package) - [MAL-2025-53560](https://insights.sbomify.com/MAL-2025-53560/): Malicious code in nurul-pecel28-sluey (npm) (malicious package) - [MAL-2025-5356](https://insights.sbomify.com/MAL-2025-5356/): Malicious code in agoda.cronos.activities.client-side (npm) (malicious package) - [MAL-2025-53559](https://insights.sbomify.com/MAL-2025-53559/): Malicious code in nurul-ongol-ongol48-breki (npm) (malicious package) - [MAL-2025-53558](https://insights.sbomify.com/MAL-2025-53558/): Malicious code in nurul-ongol-ongol47-riris (npm) (malicious package) - [MAL-2025-53557](https://insights.sbomify.com/MAL-2025-53557/): Malicious code in nurul-ongol-ongol17-sluey (npm) (malicious package) - [MAL-2025-53556](https://insights.sbomify.com/MAL-2025-53556/): Malicious code in nurul-oncom17-apidev (npm) (malicious package) - [MAL-2025-53555](https://insights.sbomify.com/MAL-2025-53555/): Malicious code in nurul-nasi64-sluey (npm) (malicious package) - [MAL-2025-53554](https://insights.sbomify.com/MAL-2025-53554/): Malicious code in nurul-nasi28-miaww (npm) (malicious package) - [MAL-2025-53553](https://insights.sbomify.com/MAL-2025-53553/): Malicious code in nurul-nasi10-sluey (npm) (malicious package) - [MAL-2025-53552](https://insights.sbomify.com/MAL-2025-53552/): Malicious code in nurul-naget99-breki (npm) (malicious package) - [MAL-2025-53551](https://insights.sbomify.com/MAL-2025-53551/): Malicious code in nurul-mieaceh82-sluey (npm) (malicious package) - [MAL-2025-53550](https://insights.sbomify.com/MAL-2025-53550/): Malicious code in nurul-mangut78-miaww (npm) (malicious package) - [MAL-2025-5355](https://insights.sbomify.com/MAL-2025-5355/): Malicious code in action_dropdown (npm) (malicious package) - [MAL-2025-53549](https://insights.sbomify.com/MAL-2025-53549/): Malicious code in nurul-lumpur53-sluey (npm) (malicious package) - [MAL-2025-53548](https://insights.sbomify.com/MAL-2025-53548/): Malicious code in nurul-lontong95-riris (npm) (malicious package) - [MAL-2025-53547](https://insights.sbomify.com/MAL-2025-53547/): Malicious code in nurul-lodeh58-riris (npm) (malicious package) - [MAL-2025-53546](https://insights.sbomify.com/MAL-2025-53546/): Malicious code in nurul-liwet85-sluey (npm) (malicious package) - [MAL-2025-53545](https://insights.sbomify.com/MAL-2025-53545/): Malicious code in nurul-lengko53-sukiwir (npm) (malicious package) - [MAL-2025-53544](https://insights.sbomify.com/MAL-2025-53544/): Malicious code in nurul-lapis48-sumpek (npm) (malicious package) - [MAL-2025-53543](https://insights.sbomify.com/MAL-2025-53543/): Malicious code in nurul-lapis41-riris (npm) (malicious package) - [MAL-2025-53542](https://insights.sbomify.com/MAL-2025-53542/): Malicious code in nurul-kupat57-breki (npm) (malicious package) - [MAL-2025-53541](https://insights.sbomify.com/MAL-2025-53541/): Malicious code in nurul-kue47-breki (npm) (malicious package) - [MAL-2025-53540](https://insights.sbomify.com/MAL-2025-53540/): Malicious code in nurul-kue10-miaww (npm) (malicious package) - [MAL-2025-5354](https://insights.sbomify.com/MAL-2025-5354/): Malicious code in @wh-components/icons (npm) (malicious package) - [MAL-2025-53539](https://insights.sbomify.com/MAL-2025-53539/): Malicious code in nurul-kepok94-miaww (npm) (malicious package) - [MAL-2025-53538](https://insights.sbomify.com/MAL-2025-53538/): Malicious code in nurul-kepok86-ruro (npm) (malicious package) - [MAL-2025-53537](https://insights.sbomify.com/MAL-2025-53537/): Malicious code in nurul-kentang89-breki (npm) (malicious package) - [MAL-2025-53536](https://insights.sbomify.com/MAL-2025-53536/): Malicious code in nurul-kentang59-miaww (npm) (malicious package) - [MAL-2025-53535](https://insights.sbomify.com/MAL-2025-53535/): Malicious code in nurul-empal63-ruro (npm) (malicious package) - [MAL-2025-53534](https://insights.sbomify.com/MAL-2025-53534/): Malicious code in nurul-buburayam17-sukiwir (npm) (malicious package) - [MAL-2025-53533](https://insights.sbomify.com/MAL-2025-53533/): Malicious code in nurul-brengkes12-breki (npm) (malicious package) - [MAL-2025-53532](https://insights.sbomify.com/MAL-2025-53532/): Malicious code in nina-ubi6-breki (npm) (malicious package) - [MAL-2025-53531](https://insights.sbomify.com/MAL-2025-53531/): Malicious code in nina-tongseng57-miaww (npm) (malicious package) - [MAL-2025-53530](https://insights.sbomify.com/MAL-2025-53530/): Malicious code in nina-telurtahu14-sukiwir (npm) (malicious package) - [MAL-2025-5353](https://insights.sbomify.com/MAL-2025-5353/): Malicious code in @wh-components/core (npm) (malicious package) - [MAL-2025-53529](https://insights.sbomify.com/MAL-2025-53529/): Malicious code in nina-tek92-sukiwir (npm) (malicious package) - [MAL-2025-53528](https://insights.sbomify.com/MAL-2025-53528/): Malicious code in nina-tek60-riris (npm) (malicious package) - [MAL-2025-53527](https://insights.sbomify.com/MAL-2025-53527/): Malicious code in nina-tek46-miaww (npm) (malicious package) - [MAL-2025-53526](https://insights.sbomify.com/MAL-2025-53526/): Malicious code in nina-tapai90-riris (npm) (malicious package) - [MAL-2025-53525](https://insights.sbomify.com/MAL-2025-53525/): Malicious code in nina-tahu11-sukiwir (npm) (malicious package) - [MAL-2025-53524](https://insights.sbomify.com/MAL-2025-53524/): Malicious code in nina-serabi18-sluey (npm) (malicious package) - [MAL-2025-53523](https://insights.sbomify.com/MAL-2025-53523/): Malicious code in nina-semur51-miaww (npm) (malicious package) - [MAL-2025-53522](https://insights.sbomify.com/MAL-2025-53522/): Malicious code in nina-sego79-riris (npm) (malicious package) - [MAL-2025-53521](https://insights.sbomify.com/MAL-2025-53521/): Malicious code in nina-sambel10-miaww (npm) (malicious package) - [MAL-2025-53520](https://insights.sbomify.com/MAL-2025-53520/): Malicious code in nina-ruwet70-sluey (npm) (malicious package) - [MAL-2025-5352](https://insights.sbomify.com/MAL-2025-5352/): Malicious code in @unkn0wnartist/h1-poc-test (npm) (malicious package) - [MAL-2025-53519](https://insights.sbomify.com/MAL-2025-53519/): Malicious code in nina-ruwet24-miaww (npm) (malicious package) - [MAL-2025-53518](https://insights.sbomify.com/MAL-2025-53518/): Malicious code in nina-rendang60-sluey (npm) (malicious package) - [MAL-2025-53517](https://insights.sbomify.com/MAL-2025-53517/): Malicious code in nina-rawon48-miaww (npm) (malicious package) - [MAL-2025-53516](https://insights.sbomify.com/MAL-2025-53516/): Malicious code in nina-papeda7-sluey (npm) (malicious package) - [MAL-2025-53515](https://insights.sbomify.com/MAL-2025-53515/): Malicious code in nina-nasicampur64-ruro (npm) (malicious package) - [MAL-2025-53514](https://insights.sbomify.com/MAL-2025-53514/): Malicious code in nina-naget100-sukiwir (npm) (malicious package) - [MAL-2025-53513](https://insights.sbomify.com/MAL-2025-53513/): Malicious code in nina-moci80-sluey (npm) (malicious package) - [MAL-2025-53512](https://insights.sbomify.com/MAL-2025-53512/): Malicious code in nina-mendoan96-crottsekebon (npm) (malicious package) - [MAL-2025-53511](https://insights.sbomify.com/MAL-2025-53511/): Malicious code in nina-martabak8-riris (npm) (malicious package) - [MAL-2025-53510](https://insights.sbomify.com/MAL-2025-53510/): Malicious code in nina-mangga52-riris (npm) (malicious package) - [MAL-2025-5351](https://insights.sbomify.com/MAL-2025-5351/): Malicious code in @saas2/utils (npm) (malicious package) - [MAL-2025-53509](https://insights.sbomify.com/MAL-2025-53509/): Malicious code in nina-lumpur60-miaww (npm) (malicious package) - [MAL-2025-53508](https://insights.sbomify.com/MAL-2025-53508/): Malicious code in nina-lapis11-sluey (npm) (malicious package) - [MAL-2025-53507](https://insights.sbomify.com/MAL-2025-53507/): Malicious code in nina-kupang16-ruro (npm) (malicious package) - [MAL-2025-53506](https://insights.sbomify.com/MAL-2025-53506/): Malicious code in nina-kue59-sluey (npm) (malicious package) - [MAL-2025-53505](https://insights.sbomify.com/MAL-2025-53505/): Malicious code in nina-kue58-sukiwir (npm) (malicious package) - [MAL-2025-53504](https://insights.sbomify.com/MAL-2025-53504/): Malicious code in nina-kue45-sukiwir (npm) (malicious package) - [MAL-2025-53503](https://insights.sbomify.com/MAL-2025-53503/): Malicious code in nina-kue14-miaww (npm) (malicious package) - [MAL-2025-53502](https://insights.sbomify.com/MAL-2025-53502/): Malicious code in nina-klipo7-sukiwir (npm) (malicious package) - [MAL-2025-53501](https://insights.sbomify.com/MAL-2025-53501/): Malicious code in nina-klipo42-miaww (npm) (malicious package) - [MAL-2025-53500](https://insights.sbomify.com/MAL-2025-53500/): Malicious code in nina-klentik64-miaww (npm) (malicious package) - [MAL-2025-5350](https://insights.sbomify.com/MAL-2025-5350/): Malicious code in @paysafe-consumer/authentication (npm) (malicious package) - [MAL-2025-535](https://insights.sbomify.com/MAL-2025-535/): Malicious code in lyft-model (npm) (malicious package) - [MAL-2025-53499](https://insights.sbomify.com/MAL-2025-53499/): Malicious code in nina-ketan38-miaww (npm) (malicious package) - [MAL-2025-53498](https://insights.sbomify.com/MAL-2025-53498/): Malicious code in nina-keraktelor49-sluey (npm) (malicious package) - [MAL-2025-53497](https://insights.sbomify.com/MAL-2025-53497/): Malicious code in nina-kentang54-sluey (npm) (malicious package) - [MAL-2025-53496](https://insights.sbomify.com/MAL-2025-53496/): Malicious code in nina-kemplang74-sukiwir (npm) (malicious package) - [MAL-2025-53495](https://insights.sbomify.com/MAL-2025-53495/): Malicious code in nina-kembang65-riris (npm) (malicious package) - [MAL-2025-53494](https://insights.sbomify.com/MAL-2025-53494/): Malicious code in nina-kacang22-riris (npm) (malicious package) - [MAL-2025-53493](https://insights.sbomify.com/MAL-2025-53493/): Malicious code in nina-getuk50-breki (npm) (malicious package) - [MAL-2025-53492](https://insights.sbomify.com/MAL-2025-53492/): Malicious code in nina-gembus47-sluey (npm) (malicious package) - [MAL-2025-53491](https://insights.sbomify.com/MAL-2025-53491/): Malicious code in nina-gembus40-riris (npm) (malicious package) - [MAL-2025-53490](https://insights.sbomify.com/MAL-2025-53490/): Malicious code in nina-esdoger61-sukiwir (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/519/