# Vulnerabilities published in 2025 - [MAL-2025-5286](https://insights.sbomify.com/MAL-2025-5286/): Malicious code in rush-mcp-example-plugin (npm) (malicious package) - [MAL-2025-52859](https://insights.sbomify.com/MAL-2025-52859/): Malicious code in hanafi-ikan89-miaww (npm) (malicious package) - [MAL-2025-52858](https://insights.sbomify.com/MAL-2025-52858/): Malicious code in hanafi-gaplek6-riris (npm) (malicious package) - [MAL-2025-52857](https://insights.sbomify.com/MAL-2025-52857/): Malicious code in hanafi-gandul18-wekto (npm) (malicious package) - [MAL-2025-52856](https://insights.sbomify.com/MAL-2025-52856/): Malicious code in hanafi-dradag2-breki (npm) (malicious package) - [MAL-2025-52855](https://insights.sbomify.com/MAL-2025-52855/): Malicious code in hanafi-dodol2-sluey (npm) (malicious package) - [MAL-2025-52854](https://insights.sbomify.com/MAL-2025-52854/): Malicious code in hanafi-bakso40-ruro (npm) (malicious package) - [MAL-2025-52853](https://insights.sbomify.com/MAL-2025-52853/): Malicious code in hadianto-sroto72-breki (npm) (malicious package) - [MAL-2025-52852](https://insights.sbomify.com/MAL-2025-52852/): Malicious code in hadianto-sambel46-sukiwir (npm) (malicious package) - [MAL-2025-52851](https://insights.sbomify.com/MAL-2025-52851/): Malicious code in hadianto-rendang82-sukiwir (npm) (malicious package) - [MAL-2025-52850](https://insights.sbomify.com/MAL-2025-52850/): Malicious code in hadianto-rendang61-sluey (npm) (malicious package) - [MAL-2025-5285](https://insights.sbomify.com/MAL-2025-5285/): Malicious code in react-plaid-sdk (npm) (malicious package) - [MAL-2025-52849](https://insights.sbomify.com/MAL-2025-52849/): Malicious code in hadianto-rangi36-devapp (npm) (malicious package) - [MAL-2025-52848](https://insights.sbomify.com/MAL-2025-52848/): Malicious code in hadianto-pecel75-sluey (npm) (malicious package) - [MAL-2025-52847](https://insights.sbomify.com/MAL-2025-52847/): Malicious code in hadianto-oncom63-sukiwir (npm) (malicious package) - [MAL-2025-52846](https://insights.sbomify.com/MAL-2025-52846/): Malicious code in hadianto-nasicampur14-breki (npm) (malicious package) - [MAL-2025-52845](https://insights.sbomify.com/MAL-2025-52845/): Malicious code in hadianto-naget39-sukiwir (npm) (malicious package) - [MAL-2025-52844](https://insights.sbomify.com/MAL-2025-52844/): Malicious code in hadianto-naget39-riris (npm) (malicious package) - [MAL-2025-52843](https://insights.sbomify.com/MAL-2025-52843/): Malicious code in hadianto-mieayam10-devapp (npm) (malicious package) - [MAL-2025-52842](https://insights.sbomify.com/MAL-2025-52842/): Malicious code in hadianto-lupis51-miaww (npm) (malicious package) - [MAL-2025-52841](https://insights.sbomify.com/MAL-2025-52841/): Malicious code in hadianto-lumpur57-sukiwir (npm) (malicious package) - [MAL-2025-52840](https://insights.sbomify.com/MAL-2025-52840/): Malicious code in hadianto-lepet41-pore (npm) (malicious package) - [MAL-2025-5284](https://insights.sbomify.com/MAL-2025-5284/): Malicious code in meuhq (npm) (malicious package) - [MAL-2025-52839](https://insights.sbomify.com/MAL-2025-52839/): Malicious code in hadianto-kue35-riris (npm) (malicious package) - [MAL-2025-52838](https://insights.sbomify.com/MAL-2025-52838/): Malicious code in hadianto-kolak1-sukiwir (npm) (malicious package) - [MAL-2025-52837](https://insights.sbomify.com/MAL-2025-52837/): Malicious code in hadianto-kentang46-breki (npm) (malicious package) - [MAL-2025-52836](https://insights.sbomify.com/MAL-2025-52836/): Malicious code in hadianto-kacang44-miaww (npm) (malicious package) - [MAL-2025-52835](https://insights.sbomify.com/MAL-2025-52835/): Malicious code in hadianto-jengkol18-miaww (npm) (malicious package) - [MAL-2025-52834](https://insights.sbomify.com/MAL-2025-52834/): Malicious code in hadianto-getas24-breki (npm) (malicious package) - [MAL-2025-52833](https://insights.sbomify.com/MAL-2025-52833/): Malicious code in hadianto-gaplek64-sluey (npm) (malicious package) - [MAL-2025-52832](https://insights.sbomify.com/MAL-2025-52832/): Malicious code in hadianto-empal74-riris (npm) (malicious package) - [MAL-2025-52831](https://insights.sbomify.com/MAL-2025-52831/): Malicious code in hadianto-dradag31-sluey (npm) (malicious package) - [MAL-2025-52830](https://insights.sbomify.com/MAL-2025-52830/): Malicious code in hadianto-dodol99-miaww (npm) (malicious package) - [MAL-2025-5283](https://insights.sbomify.com/MAL-2025-5283/): Malicious code in masons-chat-ui (npm) (malicious package) - [MAL-2025-52829](https://insights.sbomify.com/MAL-2025-52829/): Malicious code in hadi-ubi65-tititugel (npm) (malicious package) - [MAL-2025-52828](https://insights.sbomify.com/MAL-2025-52828/): Malicious code in hadi-tongseng75-riris (npm) (malicious package) - [MAL-2025-52827](https://insights.sbomify.com/MAL-2025-52827/): Malicious code in hadi-tek13-riris (npm) (malicious package) - [MAL-2025-52826](https://insights.sbomify.com/MAL-2025-52826/): Malicious code in hadi-tapai96-ruro (npm) (malicious package) - [MAL-2025-52825](https://insights.sbomify.com/MAL-2025-52825/): Malicious code in hadi-tahutek97-sukiwir (npm) (malicious package) - [MAL-2025-52824](https://insights.sbomify.com/MAL-2025-52824/): Malicious code in hadi-tahutek36-breki (npm) (malicious package) - [MAL-2025-52823](https://insights.sbomify.com/MAL-2025-52823/): Malicious code in hadi-ronde91-miaww (npm) (malicious package) - [MAL-2025-52822](https://insights.sbomify.com/MAL-2025-52822/): Malicious code in hadi-rojak15-miaww (npm) (malicious package) - [MAL-2025-52821](https://insights.sbomify.com/MAL-2025-52821/): Malicious code in hadi-rendang4-sluey (npm) (malicious package) - [MAL-2025-52820](https://insights.sbomify.com/MAL-2025-52820/): Malicious code in hadi-ragi84-sluey (npm) (malicious package) - [MAL-2025-5282](https://insights.sbomify.com/MAL-2025-5282/): Malicious code in jsonspack-logger (npm) (malicious package) - [MAL-2025-52819](https://insights.sbomify.com/MAL-2025-52819/): Malicious code in hadi-pisang7-sukiwir (npm) (malicious package) - [MAL-2025-52818](https://insights.sbomify.com/MAL-2025-52818/): Malicious code in hadi-papeda5-riris (npm) (malicious package) - [MAL-2025-52817](https://insights.sbomify.com/MAL-2025-52817/): Malicious code in hadi-otak-otak82-miaww (npm) (malicious package) - [MAL-2025-52816](https://insights.sbomify.com/MAL-2025-52816/): Malicious code in hadi-otak-otak52-riris (npm) (malicious package) - [MAL-2025-52815](https://insights.sbomify.com/MAL-2025-52815/): Malicious code in hadi-oncom3-sluey (npm) (malicious package) - [MAL-2025-52814](https://insights.sbomify.com/MAL-2025-52814/): Malicious code in hadi-oncom16-miaww (npm) (malicious package) - [MAL-2025-52813](https://insights.sbomify.com/MAL-2025-52813/): Malicious code in hadi-nasipecel5-sukiwir (npm) (malicious package) - [MAL-2025-52812](https://insights.sbomify.com/MAL-2025-52812/): Malicious code in hadi-martabak15-riris (npm) (malicious package) - [MAL-2025-52811](https://insights.sbomify.com/MAL-2025-52811/): Malicious code in hadi-mangut68-sluey (npm) (malicious package) - [MAL-2025-52810](https://insights.sbomify.com/MAL-2025-52810/): Malicious code in hadi-mangut68-miaww (npm) (malicious package) - [MAL-2025-5281](https://insights.sbomify.com/MAL-2025-5281/): Malicious code in json-webhooks (npm) (malicious package) - [MAL-2025-52809](https://insights.sbomify.com/MAL-2025-52809/): Malicious code in hadi-lupis67-miaww (npm) (malicious package) - [MAL-2025-52808](https://insights.sbomify.com/MAL-2025-52808/): Malicious code in hadi-kolak40-riris (npm) (malicious package) - [MAL-2025-52807](https://insights.sbomify.com/MAL-2025-52807/): Malicious code in hadi-klipo73-breki (npm) (malicious package) - [MAL-2025-52806](https://insights.sbomify.com/MAL-2025-52806/): Malicious code in hadi-keripik99-breki (npm) (malicious package) - [MAL-2025-52805](https://insights.sbomify.com/MAL-2025-52805/): Malicious code in hadi-keripik22-riris (npm) (malicious package) - [MAL-2025-52804](https://insights.sbomify.com/MAL-2025-52804/): Malicious code in hadi-kentang71-miaww (npm) (malicious package) - [MAL-2025-52803](https://insights.sbomify.com/MAL-2025-52803/): Malicious code in hadi-jengkol41-miaww (npm) (malicious package) - [MAL-2025-52802](https://insights.sbomify.com/MAL-2025-52802/): Malicious code in hadi-jamblang29-ruro (npm) (malicious package) - [MAL-2025-52801](https://insights.sbomify.com/MAL-2025-52801/): Malicious code in hadi-gepuk42-miaww (npm) (malicious package) - [MAL-2025-52800](https://insights.sbomify.com/MAL-2025-52800/): Malicious code in hadi-gembus62-miaww (npm) (malicious package) - [MAL-2025-5280](https://insights.sbomify.com/MAL-2025-5280/): Malicious code in eslint-plugin-gpuweb-cts (npm) (malicious package) - [MAL-2025-528](https://insights.sbomify.com/MAL-2025-528/): Malicious code in lyft-connect (npm) (malicious package) - [MAL-2025-52799](https://insights.sbomify.com/MAL-2025-52799/): Malicious code in hadi-esdoger10-riris (npm) (malicious package) - [MAL-2025-52798](https://insights.sbomify.com/MAL-2025-52798/): Malicious code in hadi-bubur50-miaww (npm) (malicious package) - [MAL-2025-52797](https://insights.sbomify.com/MAL-2025-52797/): Malicious code in hadi-botok28-breki (npm) (malicious package) - [MAL-2025-52796](https://insights.sbomify.com/MAL-2025-52796/): Malicious code in hadi-bakso26-sluey (npm) (malicious package) - [MAL-2025-52795](https://insights.sbomify.com/MAL-2025-52795/): Malicious code in hadi-asinan55-riris (npm) (malicious package) - [MAL-2025-52794](https://insights.sbomify.com/MAL-2025-52794/): Malicious code in gita-ubi35-sluey (npm) (malicious package) - [MAL-2025-52793](https://insights.sbomify.com/MAL-2025-52793/): Malicious code in gita-tumis63-riris (npm) (malicious package) - [MAL-2025-52792](https://insights.sbomify.com/MAL-2025-52792/): Malicious code in gita-tumis21-miaww (npm) (malicious package) - [MAL-2025-52791](https://insights.sbomify.com/MAL-2025-52791/): Malicious code in gita-tumis15-sukiwir (npm) (malicious package) - [MAL-2025-52790](https://insights.sbomify.com/MAL-2025-52790/): Malicious code in gita-toge4-miaww (npm) (malicious package) - [MAL-2025-5279](https://insights.sbomify.com/MAL-2025-5279/): Malicious code in phantom-labs-sandbox (npm) (malicious package) - [MAL-2025-52789](https://insights.sbomify.com/MAL-2025-52789/): Malicious code in gita-tiwul91-sukiwir (npm) (malicious package) - [MAL-2025-52788](https://insights.sbomify.com/MAL-2025-52788/): Malicious code in gita-telurtahu88-breki (npm) (malicious package) - [MAL-2025-52787](https://insights.sbomify.com/MAL-2025-52787/): Malicious code in gita-telur80-sluey (npm) (malicious package) - [MAL-2025-52786](https://insights.sbomify.com/MAL-2025-52786/): Malicious code in gita-telur72-breki (npm) (malicious package) - [MAL-2025-52785](https://insights.sbomify.com/MAL-2025-52785/): Malicious code in gita-taiwan60-kyuki (npm) (malicious package) - [MAL-2025-52784](https://insights.sbomify.com/MAL-2025-52784/): Malicious code in gita-tahu30-ruro (npm) (malicious package) - [MAL-2025-52783](https://insights.sbomify.com/MAL-2025-52783/): Malicious code in gita-serabi2-sumpek (npm) (malicious package) - [MAL-2025-52782](https://insights.sbomify.com/MAL-2025-52782/): Malicious code in gita-semur35-miaww (npm) (malicious package) - [MAL-2025-52781](https://insights.sbomify.com/MAL-2025-52781/): Malicious code in gita-sate40-sluey (npm) (malicious package) - [MAL-2025-52780](https://insights.sbomify.com/MAL-2025-52780/): Malicious code in gita-sasag85-breki (npm) (malicious package) - [MAL-2025-5278](https://insights.sbomify.com/MAL-2025-5278/): Malicious code in codesandbox-deps (npm) (malicious package) - [MAL-2025-52779](https://insights.sbomify.com/MAL-2025-52779/): Malicious code in gita-rujaksoto55-sukiwir (npm) (malicious package) - [MAL-2025-52778](https://insights.sbomify.com/MAL-2025-52778/): Malicious code in gita-rujak36-riris (npm) (malicious package) - [MAL-2025-52777](https://insights.sbomify.com/MAL-2025-52777/): Malicious code in gita-ronde46-miaww (npm) (malicious package) - [MAL-2025-52776](https://insights.sbomify.com/MAL-2025-52776/): Malicious code in gita-rangi47-sukiwir (npm) (malicious package) - [MAL-2025-52775](https://insights.sbomify.com/MAL-2025-52775/): Malicious code in gita-ragi100-breki (npm) (malicious package) - [MAL-2025-52774](https://insights.sbomify.com/MAL-2025-52774/): Malicious code in gita-ongol-ongol41-miaww (npm) (malicious package) - [MAL-2025-52773](https://insights.sbomify.com/MAL-2025-52773/): Malicious code in gita-nasiuduk5-sukiwir (npm) (malicious package) - [MAL-2025-52772](https://insights.sbomify.com/MAL-2025-52772/): Malicious code in gita-nasisayur80-sukiwir (npm) (malicious package) - [MAL-2025-52771](https://insights.sbomify.com/MAL-2025-52771/): Malicious code in gita-nasipecel87-sluey (npm) (malicious package) - [MAL-2025-52770](https://insights.sbomify.com/MAL-2025-52770/): Malicious code in gita-nasi96-sukiwir (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/527/