# Vulnerabilities published in 2025


- [MAL-2025-50235](https://insights.sbomify.com/MAL-2025-50235/): Malicious code in dian-kue33-ruro (npm) (malicious package)
- [MAL-2025-50234](https://insights.sbomify.com/MAL-2025-50234/): Malicious code in dian-keripik69-ruro (npm) (malicious package)
- [MAL-2025-50233](https://insights.sbomify.com/MAL-2025-50233/): Malicious code in dian-kemplang84-miaww (npm) (malicious package)
- [MAL-2025-50232](https://insights.sbomify.com/MAL-2025-50232/): Malicious code in dian-gandul30-sluey (npm) (malicious package)
- [MAL-2025-50231](https://insights.sbomify.com/MAL-2025-50231/): Malicious code in dian-esdoger2-breki (npm) (malicious package)
- [MAL-2025-50230](https://insights.sbomify.com/MAL-2025-50230/): Malicious code in dian-esdoger12-breki (npm) (malicious package)
- [MAL-2025-5023](https://insights.sbomify.com/MAL-2025-5023/): Malicious code in aristotle-fetcher (npm) (malicious package)
- [MAL-2025-50229](https://insights.sbomify.com/MAL-2025-50229/): Malicious code in dewi-tapai4-riris (npm) (malicious package)
- [MAL-2025-50228](https://insights.sbomify.com/MAL-2025-50228/): Malicious code in dewi-soto99-miaww (npm) (malicious package)
- [MAL-2025-50227](https://insights.sbomify.com/MAL-2025-50227/): Malicious code in dewi-semur18-ruro (npm) (malicious package)
- [MAL-2025-50226](https://insights.sbomify.com/MAL-2025-50226/): Malicious code in dewi-ruwet39-riris (npm) (malicious package)
- [MAL-2025-50225](https://insights.sbomify.com/MAL-2025-50225/): Malicious code in dewi-pecel55-sluey (npm) (malicious package)
- [MAL-2025-50224](https://insights.sbomify.com/MAL-2025-50224/): Malicious code in dewi-papeda69-breki (npm) (malicious package)
- [MAL-2025-50223](https://insights.sbomify.com/MAL-2025-50223/): Malicious code in dewi-nasipecel30-breki (npm) (malicious package)
- [MAL-2025-50222](https://insights.sbomify.com/MAL-2025-50222/): Malicious code in dewi-naget12-miaww (npm) (malicious package)
- [MAL-2025-50221](https://insights.sbomify.com/MAL-2025-50221/): Malicious code in dewi-moci77-ruro (npm) (malicious package)
- [MAL-2025-50220](https://insights.sbomify.com/MAL-2025-50220/): Malicious code in dewi-martabak94-sluey (npm) (malicious package)
- [MAL-2025-5022](https://insights.sbomify.com/MAL-2025-5022/): Malicious code in @jito-lab/provider (npm) (malicious package)
- [MAL-2025-50219](https://insights.sbomify.com/MAL-2025-50219/): Malicious code in dewi-martabak16-riris (npm) (malicious package)
- [MAL-2025-50218](https://insights.sbomify.com/MAL-2025-50218/): Malicious code in dewi-mangga49-ruro (npm) (malicious package)
- [MAL-2025-50217](https://insights.sbomify.com/MAL-2025-50217/): Malicious code in dewi-lengko79-sluey (npm) (malicious package)
- [MAL-2025-50216](https://insights.sbomify.com/MAL-2025-50216/): Malicious code in dewi-kue98-riris (npm) (malicious package)
- [MAL-2025-50215](https://insights.sbomify.com/MAL-2025-50215/): Malicious code in dewi-kolak89-wekto (npm) (malicious package)
- [MAL-2025-50214](https://insights.sbomify.com/MAL-2025-50214/): Malicious code in dewi-klentik98-sluey (npm) (malicious package)
- [MAL-2025-50213](https://insights.sbomify.com/MAL-2025-50213/): Malicious code in dewi-kembang44-miaww (npm) (malicious package)
- [MAL-2025-50212](https://insights.sbomify.com/MAL-2025-50212/): Malicious code in dewi-jengkol57-ruro (npm) (malicious package)
- [MAL-2025-50211](https://insights.sbomify.com/MAL-2025-50211/): Malicious code in dewi-jamblang51-breki (npm) (malicious package)
- [MAL-2025-50210](https://insights.sbomify.com/MAL-2025-50210/): Malicious code in dewi-gulai93-ruro (npm) (malicious package)
- [MAL-2025-5021](https://insights.sbomify.com/MAL-2025-5021/): Malicious code in @ftapi/secuauth (npm) (malicious package)
- [MAL-2025-50209](https://insights.sbomify.com/MAL-2025-50209/): Malicious code in dewi-gembus95-apidev (npm) (malicious package)
- [MAL-2025-50208](https://insights.sbomify.com/MAL-2025-50208/): Malicious code in dewi-esdoger72-sukiwir (npm) (malicious package)
- [MAL-2025-50207](https://insights.sbomify.com/MAL-2025-50207/): Malicious code in dewi-brongkos81-sluey (npm) (malicious package)
- [MAL-2025-50206](https://insights.sbomify.com/MAL-2025-50206/): Malicious code in dewi-bika3-riris (npm) (malicious package)
- [MAL-2025-50205](https://insights.sbomify.com/MAL-2025-50205/): Malicious code in dewi-bakwan87-sluey (npm) (malicious package)
- [MAL-2025-50204](https://insights.sbomify.com/MAL-2025-50204/): Malicious code in dewanto-tumis75-breki (npm) (malicious package)
- [MAL-2025-50203](https://insights.sbomify.com/MAL-2025-50203/): Malicious code in dewanto-toge21-ruro (npm) (malicious package)
- [MAL-2025-50202](https://insights.sbomify.com/MAL-2025-50202/): Malicious code in dewanto-takokak81-miaww (npm) (malicious package)
- [MAL-2025-50201](https://insights.sbomify.com/MAL-2025-50201/): Malicious code in dewanto-tahutek76-breki (npm) (malicious package)
- [MAL-2025-50200](https://insights.sbomify.com/MAL-2025-50200/): Malicious code in dewanto-tahutek40-ruro (npm) (malicious package)
- [MAL-2025-5020](https://insights.sbomify.com/MAL-2025-5020/): Malicious code in @evoplay-spinential/test-module (npm) (malicious package)
- [MAL-2025-502](https://insights.sbomify.com/MAL-2025-502/): Malicious code in instacart-model (npm) (malicious package)
- [MAL-2025-50199](https://insights.sbomify.com/MAL-2025-50199/): Malicious code in dewanto-sroto69-riris (npm) (malicious package)
- [MAL-2025-50198](https://insights.sbomify.com/MAL-2025-50198/): Malicious code in dewanto-serabi29-breki (npm) (malicious package)
- [MAL-2025-50197](https://insights.sbomify.com/MAL-2025-50197/): Malicious code in dewanto-semur68-sukiwir (npm) (malicious package)
- [MAL-2025-50196](https://insights.sbomify.com/MAL-2025-50196/): Malicious code in dewanto-rawon37-sumpek (npm) (malicious package)
- [MAL-2025-50195](https://insights.sbomify.com/MAL-2025-50195/): Malicious code in dewanto-pisang53-sukiwir (npm) (malicious package)
- [MAL-2025-50194](https://insights.sbomify.com/MAL-2025-50194/): Malicious code in dewanto-peyek29-breki (npm) (malicious package)
- [MAL-2025-50193](https://insights.sbomify.com/MAL-2025-50193/): Malicious code in dewanto-pecel49-breki (npm) (malicious package)
- [MAL-2025-50192](https://insights.sbomify.com/MAL-2025-50192/): Malicious code in dewanto-nasipecel10-sukiwir (npm) (malicious package)
- [MAL-2025-50191](https://insights.sbomify.com/MAL-2025-50191/): Malicious code in dewanto-miemee46-breki (npm) (malicious package)
- [MAL-2025-50190](https://insights.sbomify.com/MAL-2025-50190/): Malicious code in dewanto-miebogor71-miaww (npm) (malicious package)
- [MAL-2025-5019](https://insights.sbomify.com/MAL-2025-5019/): Malicious code in @evoplay-spinential/poc-rce (npm) (malicious package)
- [MAL-2025-50189](https://insights.sbomify.com/MAL-2025-50189/): Malicious code in dewanto-mendut36-miaww (npm) (malicious package)
- [MAL-2025-50188](https://insights.sbomify.com/MAL-2025-50188/): Malicious code in dewanto-mendut23-sukiwir (npm) (malicious package)
- [MAL-2025-50187](https://insights.sbomify.com/MAL-2025-50187/): Malicious code in dewanto-lontong73-sukiwir (npm) (malicious package)
- [MAL-2025-50186](https://insights.sbomify.com/MAL-2025-50186/): Malicious code in dewanto-lepet37-crottsekebon (npm) (malicious package)
- [MAL-2025-50185](https://insights.sbomify.com/MAL-2025-50185/): Malicious code in dewanto-kentang14-breki (npm) (malicious package)
- [MAL-2025-50184](https://insights.sbomify.com/MAL-2025-50184/): Malicious code in dewanto-kemplang8-sukiwir (npm) (malicious package)
- [MAL-2025-50183](https://insights.sbomify.com/MAL-2025-50183/): Malicious code in dewanto-gudeg1-riris (npm) (malicious package)
- [MAL-2025-50182](https://insights.sbomify.com/MAL-2025-50182/): Malicious code in dewanto-getas44-sluey (npm) (malicious package)
- [MAL-2025-50181](https://insights.sbomify.com/MAL-2025-50181/): Malicious code in dewanto-gaplek49-rudi0x (npm) (malicious package)
- [MAL-2025-50180](https://insights.sbomify.com/MAL-2025-50180/): Malicious code in dewanto-enting100-sukiwir (npm) (malicious package)
- [MAL-2025-5018](https://insights.sbomify.com/MAL-2025-5018/): Malicious code in @dm3-org/dm3-lib-crypto (npm) (malicious package)
- [MAL-2025-50179](https://insights.sbomify.com/MAL-2025-50179/): Malicious code in dewanto-donat6-pore (npm) (malicious package)
- [MAL-2025-50178](https://insights.sbomify.com/MAL-2025-50178/): Malicious code in dewanto-buburayam97-breki (npm) (malicious package)
- [MAL-2025-50177](https://insights.sbomify.com/MAL-2025-50177/): Malicious code in dewanto-bubur29-breki (npm) (malicious package)
- [MAL-2025-50176](https://insights.sbomify.com/MAL-2025-50176/): Malicious code in citra-wajit12-ruro (npm) (malicious package)
- [MAL-2025-50175](https://insights.sbomify.com/MAL-2025-50175/): Malicious code in citra-tumis6-sluey (npm) (malicious package)
- [MAL-2025-50174](https://insights.sbomify.com/MAL-2025-50174/): Malicious code in citra-tumis56-breki (npm) (malicious package)
- [MAL-2025-50173](https://insights.sbomify.com/MAL-2025-50173/): Malicious code in citra-tempe45-miaww (npm) (malicious package)
- [MAL-2025-50172](https://insights.sbomify.com/MAL-2025-50172/): Malicious code in citra-tempe43-breki (npm) (malicious package)
- [MAL-2025-50171](https://insights.sbomify.com/MAL-2025-50171/): Malicious code in citra-telurtahu53-sluey (npm) (malicious package)
- [MAL-2025-50170](https://insights.sbomify.com/MAL-2025-50170/): Malicious code in citra-telur85-remi (npm) (malicious package)
- [MAL-2025-5017](https://insights.sbomify.com/MAL-2025-5017/): Malicious code in @biovia/amd-loader (npm) (malicious package)
- [MAL-2025-50169](https://insights.sbomify.com/MAL-2025-50169/): Malicious code in citra-tek81-ruro (npm) (malicious package)
- [MAL-2025-50168](https://insights.sbomify.com/MAL-2025-50168/): Malicious code in citra-taiwan6-ruro (npm) (malicious package)
- [MAL-2025-50167](https://insights.sbomify.com/MAL-2025-50167/): Malicious code in citra-soto63-riris (npm) (malicious package)
- [MAL-2025-50166](https://insights.sbomify.com/MAL-2025-50166/): Malicious code in citra-serimuka98-sukiwir (npm) (malicious package)
- [MAL-2025-50165](https://insights.sbomify.com/MAL-2025-50165/): Malicious code in citra-serabi90-breki (npm) (malicious package)
- [MAL-2025-50164](https://insights.sbomify.com/MAL-2025-50164/): Malicious code in citra-rujak8-ruro (npm) (malicious package)
- [MAL-2025-50163](https://insights.sbomify.com/MAL-2025-50163/): Malicious code in citra-rojak59-ruro (npm) (malicious package)
- [MAL-2025-50162](https://insights.sbomify.com/MAL-2025-50162/): Malicious code in citra-rangi90-tititugel (npm) (malicious package)
- [MAL-2025-50161](https://insights.sbomify.com/MAL-2025-50161/): Malicious code in citra-rangi61-sukiwir (npm) (malicious package)
- [MAL-2025-50160](https://insights.sbomify.com/MAL-2025-50160/): Malicious code in citra-rangginang99-breki (npm) (malicious package)
- [MAL-2025-5016](https://insights.sbomify.com/MAL-2025-5016/): Malicious code in 0vulns-dependency-confusion-poc (npm) (malicious package)
- [MAL-2025-50159](https://insights.sbomify.com/MAL-2025-50159/): Malicious code in citra-ragi93-pore (npm) (malicious package)
- [MAL-2025-50158](https://insights.sbomify.com/MAL-2025-50158/): Malicious code in citra-pecel66-miaww (npm) (malicious package)
- [MAL-2025-50157](https://insights.sbomify.com/MAL-2025-50157/): Malicious code in citra-oncom78-sluey (npm) (malicious package)
- [MAL-2025-50156](https://insights.sbomify.com/MAL-2025-50156/): Malicious code in citra-nasiuduk54-ruro (npm) (malicious package)
- [MAL-2025-50155](https://insights.sbomify.com/MAL-2025-50155/): Malicious code in citra-nasisayur94-riris (npm) (malicious package)
- [MAL-2025-50154](https://insights.sbomify.com/MAL-2025-50154/): Malicious code in citra-nasipecel12-sluey (npm) (malicious package)
- [MAL-2025-50153](https://insights.sbomify.com/MAL-2025-50153/): Malicious code in citra-miemee49-apidev (npm) (malicious package)
- [MAL-2025-50152](https://insights.sbomify.com/MAL-2025-50152/): Malicious code in citra-mieaceh32-riris (npm) (malicious package)
- [MAL-2025-50151](https://insights.sbomify.com/MAL-2025-50151/): Malicious code in citra-mieaceh100-sluey (npm) (malicious package)
- [MAL-2025-50150](https://insights.sbomify.com/MAL-2025-50150/): Malicious code in citra-mie96-riris (npm) (malicious package)
- [MAL-2025-5015](https://insights.sbomify.com/MAL-2025-5015/): Malicious code in test.relativity.package (npm) (malicious package)
- [MAL-2025-50149](https://insights.sbomify.com/MAL-2025-50149/): Malicious code in citra-menjes81-ruro (npm) (malicious package)
- [MAL-2025-50148](https://insights.sbomify.com/MAL-2025-50148/): Malicious code in citra-martabak75-sluey (npm) (malicious package)
- [MAL-2025-50147](https://insights.sbomify.com/MAL-2025-50147/): Malicious code in citra-lodeh15-riris (npm) (malicious package)
- [MAL-2025-50146](https://insights.sbomify.com/MAL-2025-50146/): Malicious code in citra-liwet91-sluey (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/556/
