# Vulnerabilities published in 2025


- [MAL-2025-5349](https://insights.sbomify.com/MAL-2025-5349/): Malicious code in @hamishwhc-testing/evil (npm) (malicious package)
- [MAL-2025-53489](https://insights.sbomify.com/MAL-2025-53489/): Malicious code in nina-empal96-breki (npm) (malicious package)
- [MAL-2025-53488](https://insights.sbomify.com/MAL-2025-53488/): Malicious code in nina-dradag68-sluey (npm) (malicious package)
- [MAL-2025-53487](https://insights.sbomify.com/MAL-2025-53487/): Malicious code in nina-dodol61-sukiwir (npm) (malicious package)
- [MAL-2025-53486](https://insights.sbomify.com/MAL-2025-53486/): Malicious code in nina-dodol38-ruro (npm) (malicious package)
- [MAL-2025-53485](https://insights.sbomify.com/MAL-2025-53485/): Malicious code in nina-bubur93-miaww (npm) (malicious package)
- [MAL-2025-53484](https://insights.sbomify.com/MAL-2025-53484/): Malicious code in nina-brongkos33-ruro (npm) (malicious package)
- [MAL-2025-53483](https://insights.sbomify.com/MAL-2025-53483/): Malicious code in nina-bakwan26-sukiwir (npm) (malicious package)
- [MAL-2025-53482](https://insights.sbomify.com/MAL-2025-53482/): Malicious code in nina-asinan98-miaww (npm) (malicious package)
- [MAL-2025-53481](https://insights.sbomify.com/MAL-2025-53481/): Malicious code in nana-wajit63-riris (npm) (malicious package)
- [MAL-2025-53480](https://insights.sbomify.com/MAL-2025-53480/): Malicious code in nana-ubi4-miaww (npm) (malicious package)
- [MAL-2025-5348](https://insights.sbomify.com/MAL-2025-5348/): Malicious code in @exitman_ctf/steal (npm) (malicious package)
- [MAL-2025-53479](https://insights.sbomify.com/MAL-2025-53479/): Malicious code in nana-toge3-sukiwir (npm) (malicious package)
- [MAL-2025-53478](https://insights.sbomify.com/MAL-2025-53478/): Malicious code in nana-tempe45-miaww (npm) (malicious package)
- [MAL-2025-53477](https://insights.sbomify.com/MAL-2025-53477/): Malicious code in nana-telur46-sluey (npm) (malicious package)
- [MAL-2025-53476](https://insights.sbomify.com/MAL-2025-53476/): Malicious code in nana-taiwan68-sukiwir (npm) (malicious package)
- [MAL-2025-53475](https://insights.sbomify.com/MAL-2025-53475/): Malicious code in nana-tahu76-breki (npm) (malicious package)
- [MAL-2025-53474](https://insights.sbomify.com/MAL-2025-53474/): Malicious code in nana-semur45-breki (npm) (malicious package)
- [MAL-2025-53473](https://insights.sbomify.com/MAL-2025-53473/): Malicious code in nana-sego22-miaww (npm) (malicious package)
- [MAL-2025-53472](https://insights.sbomify.com/MAL-2025-53472/): Malicious code in nana-rangi45-sluey (npm) (malicious package)
- [MAL-2025-53471](https://insights.sbomify.com/MAL-2025-53471/): Malicious code in nana-rangginang81-sluey (npm) (malicious package)
- [MAL-2025-53470](https://insights.sbomify.com/MAL-2025-53470/): Malicious code in nana-nasisayur16-ruro (npm) (malicious package)
- [MAL-2025-5347](https://insights.sbomify.com/MAL-2025-5347/): Malicious code in @b10902118/note-xss-payload (npm) (malicious package)
- [MAL-2025-53469](https://insights.sbomify.com/MAL-2025-53469/): Malicious code in nana-nasi98-sukiwir (npm) (malicious package)
- [MAL-2025-53468](https://insights.sbomify.com/MAL-2025-53468/): Malicious code in nana-mieaceh89-miaww (npm) (malicious package)
- [MAL-2025-53467](https://insights.sbomify.com/MAL-2025-53467/): Malicious code in nana-mendut84-sluey (npm) (malicious package)
- [MAL-2025-53466](https://insights.sbomify.com/MAL-2025-53466/): Malicious code in nana-mangut46-riris (npm) (malicious package)
- [MAL-2025-53465](https://insights.sbomify.com/MAL-2025-53465/): Malicious code in nana-lontong38-miaww (npm) (malicious package)
- [MAL-2025-53464](https://insights.sbomify.com/MAL-2025-53464/): Malicious code in nana-lepet39-breki (npm) (malicious package)
- [MAL-2025-53463](https://insights.sbomify.com/MAL-2025-53463/): Malicious code in nana-kupang69-ruro (npm) (malicious package)
- [MAL-2025-53462](https://insights.sbomify.com/MAL-2025-53462/): Malicious code in nana-kue48-wekto (npm) (malicious package)
- [MAL-2025-53461](https://insights.sbomify.com/MAL-2025-53461/): Malicious code in nana-kue48-breki (npm) (malicious package)
- [MAL-2025-53460](https://insights.sbomify.com/MAL-2025-53460/): Malicious code in nana-kue21-ruro (npm) (malicious package)
- [MAL-2025-5346](https://insights.sbomify.com/MAL-2025-5346/): Malicious code in ember-routing-htmlbars (npm) (malicious package)
- [MAL-2025-53459](https://insights.sbomify.com/MAL-2025-53459/): Malicious code in nana-kripik35-sluey (npm) (malicious package)
- [MAL-2025-53458](https://insights.sbomify.com/MAL-2025-53458/): Malicious code in nana-klipo97-breki (npm) (malicious package)
- [MAL-2025-53457](https://insights.sbomify.com/MAL-2025-53457/): Malicious code in nana-klentik31-miaww (npm) (malicious package)
- [MAL-2025-53456](https://insights.sbomify.com/MAL-2025-53456/): Malicious code in nana-ketoprak92-miaww (npm) (malicious package)
- [MAL-2025-53455](https://insights.sbomify.com/MAL-2025-53455/): Malicious code in nana-ketan70-sluey (npm) (malicious package)
- [MAL-2025-53454](https://insights.sbomify.com/MAL-2025-53454/): Malicious code in nana-keripik76-wekto (npm) (malicious package)
- [MAL-2025-53453](https://insights.sbomify.com/MAL-2025-53453/): Malicious code in nana-jus90-ruro (npm) (malicious package)
- [MAL-2025-53452](https://insights.sbomify.com/MAL-2025-53452/): Malicious code in nana-jengkol58-sluey (npm) (malicious package)
- [MAL-2025-53451](https://insights.sbomify.com/MAL-2025-53451/): Malicious code in nana-getuk88-sukiwir (npm) (malicious package)
- [MAL-2025-53450](https://insights.sbomify.com/MAL-2025-53450/): Malicious code in nana-gaplek16-ruro (npm) (malicious package)
- [MAL-2025-5345](https://insights.sbomify.com/MAL-2025-5345/): Malicious code in github-datasource (npm) (malicious package)
- [MAL-2025-53449](https://insights.sbomify.com/MAL-2025-53449/): Malicious code in nana-empal61-sluey (npm) (malicious package)
- [MAL-2025-53448](https://insights.sbomify.com/MAL-2025-53448/): Malicious code in nana-bika92-breki (npm) (malicious package)
- [MAL-2025-53447](https://insights.sbomify.com/MAL-2025-53447/): Malicious code in nana-bakso24-breki (npm) (malicious package)
- [MAL-2025-53446](https://insights.sbomify.com/MAL-2025-53446/): Malicious code in nadia-wajit66-sukiwir (npm) (malicious package)
- [MAL-2025-53445](https://insights.sbomify.com/MAL-2025-53445/): Malicious code in nadia-toge70-riris (npm) (malicious package)
- [MAL-2025-53444](https://insights.sbomify.com/MAL-2025-53444/): Malicious code in nadia-toge2-breki (npm) (malicious package)
- [MAL-2025-53443](https://insights.sbomify.com/MAL-2025-53443/): Malicious code in nadia-tiwul86-sukiwir (npm) (malicious package)
- [MAL-2025-53442](https://insights.sbomify.com/MAL-2025-53442/): Malicious code in nadia-tempe44-sluey (npm) (malicious package)
- [MAL-2025-53441](https://insights.sbomify.com/MAL-2025-53441/): Malicious code in nadia-telurtahu9-miaww (npm) (malicious package)
- [MAL-2025-53440](https://insights.sbomify.com/MAL-2025-53440/): Malicious code in nadia-tapai69-sluey (npm) (malicious package)
- [MAL-2025-5344](https://insights.sbomify.com/MAL-2025-5344/): Malicious code in sdk.babeltest (npm) (malicious package)
- [MAL-2025-53439](https://insights.sbomify.com/MAL-2025-53439/): Malicious code in nadia-tapai25-breki (npm) (malicious package)
- [MAL-2025-53438](https://insights.sbomify.com/MAL-2025-53438/): Malicious code in nadia-soto88-tititugel (npm) (malicious package)
- [MAL-2025-53437](https://insights.sbomify.com/MAL-2025-53437/): Malicious code in nadia-soto28-breki (npm) (malicious package)
- [MAL-2025-53436](https://insights.sbomify.com/MAL-2025-53436/): Malicious code in nadia-sate7-breki (npm) (malicious package)
- [MAL-2025-53435](https://insights.sbomify.com/MAL-2025-53435/): Malicious code in nadia-sambel51-riris (npm) (malicious package)
- [MAL-2025-53434](https://insights.sbomify.com/MAL-2025-53434/): Malicious code in nadia-rujaksoto67-riris (npm) (malicious package)
- [MAL-2025-53433](https://insights.sbomify.com/MAL-2025-53433/): Malicious code in nadia-rujak37-riris (npm) (malicious package)
- [MAL-2025-53432](https://insights.sbomify.com/MAL-2025-53432/): Malicious code in nadia-rangi99-miaww (npm) (malicious package)
- [MAL-2025-53431](https://insights.sbomify.com/MAL-2025-53431/): Malicious code in nadia-rangi79-sukiwir (npm) (malicious package)
- [MAL-2025-53430](https://insights.sbomify.com/MAL-2025-53430/): Malicious code in nadia-rangi16-breki (npm) (malicious package)
- [MAL-2025-5343](https://insights.sbomify.com/MAL-2025-5343/): Malicious code in babel-plugin-nordic-module-resolver (npm) (malicious package)
- [MAL-2025-53429](https://insights.sbomify.com/MAL-2025-53429/): Malicious code in nadia-rangginang65-ruro (npm) (malicious package)
- [MAL-2025-53428](https://insights.sbomify.com/MAL-2025-53428/): Malicious code in nadia-ragi51-sukiwir (npm) (malicious package)
- [MAL-2025-53427](https://insights.sbomify.com/MAL-2025-53427/): Malicious code in nadia-papeda96-sukiwir (npm) (malicious package)
- [MAL-2025-53426](https://insights.sbomify.com/MAL-2025-53426/): Malicious code in nadia-papeda85-sluey (npm) (malicious package)
- [MAL-2025-53425](https://insights.sbomify.com/MAL-2025-53425/): Malicious code in nadia-otak-otak1-ruro (npm) (malicious package)
- [MAL-2025-53424](https://insights.sbomify.com/MAL-2025-53424/): Malicious code in nadia-oncom93-riris (npm) (malicious package)
- [MAL-2025-53423](https://insights.sbomify.com/MAL-2025-53423/): Malicious code in nadia-nasi89-breki (npm) (malicious package)
- [MAL-2025-53422](https://insights.sbomify.com/MAL-2025-53422/): Malicious code in nadia-nasi77-breki (npm) (malicious package)
- [MAL-2025-53421](https://insights.sbomify.com/MAL-2025-53421/): Malicious code in nadia-miebogor86-sluey (npm) (malicious package)
- [MAL-2025-53420](https://insights.sbomify.com/MAL-2025-53420/): Malicious code in nadia-mieayam18-breki (npm) (malicious package)
- [MAL-2025-5342](https://insights.sbomify.com/MAL-2025-5342/): Malicious code in videoel (npm) (malicious package)
- [MAL-2025-53419](https://insights.sbomify.com/MAL-2025-53419/): Malicious code in nadia-mie81-ruro (npm) (malicious package)
- [MAL-2025-53418](https://insights.sbomify.com/MAL-2025-53418/): Malicious code in nadia-menjes34-sluey (npm) (malicious package)
- [MAL-2025-53417](https://insights.sbomify.com/MAL-2025-53417/): Malicious code in nadia-mendut76-miaww (npm) (malicious package)
- [MAL-2025-53416](https://insights.sbomify.com/MAL-2025-53416/): Malicious code in nadia-mangut8-ruro (npm) (malicious package)
- [MAL-2025-53415](https://insights.sbomify.com/MAL-2025-53415/): Malicious code in nadia-mangga70-sukiwir (npm) (malicious package)
- [MAL-2025-53414](https://insights.sbomify.com/MAL-2025-53414/): Malicious code in nadia-lupis86-sukiwir (npm) (malicious package)
- [MAL-2025-53413](https://insights.sbomify.com/MAL-2025-53413/): Malicious code in nadia-lumpur73-breki (npm) (malicious package)
- [MAL-2025-53412](https://insights.sbomify.com/MAL-2025-53412/): Malicious code in nadia-liwet14-ruro (npm) (malicious package)
- [MAL-2025-53411](https://insights.sbomify.com/MAL-2025-53411/): Malicious code in nadia-kue89-miaww (npm) (malicious package)
- [MAL-2025-53410](https://insights.sbomify.com/MAL-2025-53410/): Malicious code in nadia-kue75-breki (npm) (malicious package)
- [MAL-2025-5341](https://insights.sbomify.com/MAL-2025-5341/): Malicious code in sdk.babelhelpz (npm) (malicious package)
- [MAL-2025-53409](https://insights.sbomify.com/MAL-2025-53409/): Malicious code in nadia-klentik97-pore (npm) (malicious package)
- [MAL-2025-53408](https://insights.sbomify.com/MAL-2025-53408/): Malicious code in nadia-kentang100-miaww (npm) (malicious package)
- [MAL-2025-53407](https://insights.sbomify.com/MAL-2025-53407/): Malicious code in nadia-jus59-sluey (npm) (malicious package)
- [MAL-2025-53406](https://insights.sbomify.com/MAL-2025-53406/): Malicious code in nadia-gulai81-sluey (npm) (malicious package)
- [MAL-2025-53405](https://insights.sbomify.com/MAL-2025-53405/): Malicious code in nadia-getas12-miaww (npm) (malicious package)
- [MAL-2025-53404](https://insights.sbomify.com/MAL-2025-53404/): Malicious code in nadia-buburayam18-sukiwir (npm) (malicious package)
- [MAL-2025-53403](https://insights.sbomify.com/MAL-2025-53403/): Malicious code in nadia-asinan34-breki (npm) (malicious package)
- [MAL-2025-53402](https://insights.sbomify.com/MAL-2025-53402/): Malicious code in mulyono-wajit55-breki (npm) (malicious package)
- [MAL-2025-53401](https://insights.sbomify.com/MAL-2025-53401/): Malicious code in mulyono-ubi49-breki (npm) (malicious package)
- [MAL-2025-53400](https://insights.sbomify.com/MAL-2025-53400/): Malicious code in mulyono-tomat62-sluey (npm) (malicious package)
- [MAL-2025-5340](https://insights.sbomify.com/MAL-2025-5340/): Malicious code in datanerd (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/520/