# Vulnerabilities published in 2025 - [MAL-2025-49606](https://insights.sbomify.com/MAL-2025-49606/): Malicious code in xaver-rangi21-sluey (npm) (malicious package) - [MAL-2025-49605](https://insights.sbomify.com/MAL-2025-49605/): Malicious code in xaver-ragi96-riris (npm) (malicious package) - [MAL-2025-49604](https://insights.sbomify.com/MAL-2025-49604/): Malicious code in xaver-papeda69-miaww (npm) (malicious package) - [MAL-2025-49603](https://insights.sbomify.com/MAL-2025-49603/): Malicious code in xaver-oblok46-breki (npm) (malicious package) - [MAL-2025-49602](https://insights.sbomify.com/MAL-2025-49602/): Malicious code in xaver-nasiuduk93-ruro (npm) (malicious package) - [MAL-2025-49601](https://insights.sbomify.com/MAL-2025-49601/): Malicious code in xaver-nasipecel98-miaww (npm) (malicious package) - [MAL-2025-49600](https://insights.sbomify.com/MAL-2025-49600/): Malicious code in xaver-nasipecel45-sluey (npm) (malicious package) - [MAL-2025-4960](https://insights.sbomify.com/MAL-2025-4960/): Malicious code in zora1abs-co1ns-sdk (npm) (malicious package) - [MAL-2025-496](https://insights.sbomify.com/MAL-2025-496/): Malicious code in iberia-test (npm) (malicious package) - [MAL-2025-49599](https://insights.sbomify.com/MAL-2025-49599/): Malicious code in xaver-nasicampur67-sluey (npm) (malicious package) - [MAL-2025-49598](https://insights.sbomify.com/MAL-2025-49598/): Malicious code in xaver-nasi55-sluey (npm) (malicious package) - [MAL-2025-49597](https://insights.sbomify.com/MAL-2025-49597/): Malicious code in xaver-mieayam43-sukiwir (npm) (malicious package) - [MAL-2025-49596](https://insights.sbomify.com/MAL-2025-49596/): Malicious code in xaver-mendut37-breki (npm) (malicious package) - [MAL-2025-49595](https://insights.sbomify.com/MAL-2025-49595/): Malicious code in xaver-mendoan15-ruro (npm) (malicious package) - [MAL-2025-49594](https://insights.sbomify.com/MAL-2025-49594/): Malicious code in xaver-lontong85-riris (npm) (malicious package) - [MAL-2025-49593](https://insights.sbomify.com/MAL-2025-49593/): Malicious code in xaver-liwet82-sluey (npm) (malicious package) - [MAL-2025-49592](https://insights.sbomify.com/MAL-2025-49592/): Malicious code in xaver-lengko72-sukiwir (npm) (malicious package) - [MAL-2025-49591](https://insights.sbomify.com/MAL-2025-49591/): Malicious code in xaver-lengko72-ruro (npm) (malicious package) - [MAL-2025-49590](https://insights.sbomify.com/MAL-2025-49590/): Malicious code in xaver-lapis39-sluey (npm) (malicious package) - [MAL-2025-4959](https://insights.sbomify.com/MAL-2025-4959/): Malicious code in zora-exploit-payload (npm) (malicious package) - [MAL-2025-49589](https://insights.sbomify.com/MAL-2025-49589/): Malicious code in xaver-kupat56-sluey (npm) (malicious package) - [MAL-2025-49588](https://insights.sbomify.com/MAL-2025-49588/): Malicious code in xaver-kue6-breki (npm) (malicious package) - [MAL-2025-49587](https://insights.sbomify.com/MAL-2025-49587/): Malicious code in xaver-kentang17-breki (npm) (malicious package) - [MAL-2025-49586](https://insights.sbomify.com/MAL-2025-49586/): Malicious code in xaver-gepuk64-miaww (npm) (malicious package) - [MAL-2025-49585](https://insights.sbomify.com/MAL-2025-49585/): Malicious code in xaver-empal38-sluey (npm) (malicious package) - [MAL-2025-49584](https://insights.sbomify.com/MAL-2025-49584/): Malicious code in xaver-donat56-sluey (npm) (malicious package) - [MAL-2025-49583](https://insights.sbomify.com/MAL-2025-49583/): Malicious code in xaver-buburayam35-riris (npm) (malicious package) - [MAL-2025-49582](https://insights.sbomify.com/MAL-2025-49582/): Malicious code in xaver-bubur82-sluey (npm) (malicious package) - [MAL-2025-49581](https://insights.sbomify.com/MAL-2025-49581/): Malicious code in xaver-bubur81-ruro (npm) (malicious package) - [MAL-2025-49580](https://insights.sbomify.com/MAL-2025-49580/): Malicious code in xaver-brongkos22-breki (npm) (malicious package) - [MAL-2025-4958](https://insights.sbomify.com/MAL-2025-4958/): Malicious code in snapshot-server (npm) (malicious package) - [MAL-2025-49579](https://insights.sbomify.com/MAL-2025-49579/): Malicious code in xaver-bika37-ruro (npm) (malicious package) - [MAL-2025-49578](https://insights.sbomify.com/MAL-2025-49578/): Malicious code in xaver-bakso10-sukiwir (npm) (malicious package) - [MAL-2025-49577](https://insights.sbomify.com/MAL-2025-49577/): Malicious code in ordinals-explorer (npm) (malicious package) - [MAL-2025-49576](https://insights.sbomify.com/MAL-2025-49576/): Malicious code in hiro-experience-map (npm) (malicious package) - [MAL-2025-49575](https://insights.sbomify.com/MAL-2025-49575/): Malicious code in bitcoin-indexer (npm) (malicious package) - [MAL-2025-49574](https://insights.sbomify.com/MAL-2025-49574/): Malicious code in @mycorp/pkg-a (npm) (malicious package) - [MAL-2025-49573](https://insights.sbomify.com/MAL-2025-49573/): Malicious code in zul-wajit78-kyuki (npm) (malicious package) - [MAL-2025-49572](https://insights.sbomify.com/MAL-2025-49572/): Malicious code in zul-tumis35-sukiwir (npm) (malicious package) - [MAL-2025-49571](https://insights.sbomify.com/MAL-2025-49571/): Malicious code in zul-tomat7-wekto (npm) (malicious package) - [MAL-2025-49570](https://insights.sbomify.com/MAL-2025-49570/): Malicious code in zul-telurtahu58-sluey (npm) (malicious package) - [MAL-2025-4957](https://insights.sbomify.com/MAL-2025-4957/): Malicious code in com.unity.dt.app-ui (npm) (malicious package) - [MAL-2025-49569](https://insights.sbomify.com/MAL-2025-49569/): Malicious code in zul-tek22-ruro (npm) (malicious package) - [MAL-2025-49568](https://insights.sbomify.com/MAL-2025-49568/): Malicious code in zul-tahutek54-sukiwir (npm) (malicious package) - [MAL-2025-49567](https://insights.sbomify.com/MAL-2025-49567/): Malicious code in zul-tahu81-sluey (npm) (malicious package) - [MAL-2025-49566](https://insights.sbomify.com/MAL-2025-49566/): Malicious code in zul-serabi13-riris (npm) (malicious package) - [MAL-2025-49565](https://insights.sbomify.com/MAL-2025-49565/): Malicious code in zul-sate35-sukiwir (npm) (malicious package) - [MAL-2025-49564](https://insights.sbomify.com/MAL-2025-49564/): Malicious code in zul-ruwet5-breki (npm) (malicious package) - [MAL-2025-49563](https://insights.sbomify.com/MAL-2025-49563/): Malicious code in zul-rujaksoto3-breki (npm) (malicious package) - [MAL-2025-49562](https://insights.sbomify.com/MAL-2025-49562/): Malicious code in zul-rujak55-miaww (npm) (malicious package) - [MAL-2025-49561](https://insights.sbomify.com/MAL-2025-49561/): Malicious code in zul-rujak51-sukiwir (npm) (malicious package) - [MAL-2025-49560](https://insights.sbomify.com/MAL-2025-49560/): Malicious code in zul-rangi40-miaww (npm) (malicious package) - [MAL-2025-4956](https://insights.sbomify.com/MAL-2025-4956/): Malicious code in owncloud-activity (npm) (malicious package) - [MAL-2025-49559](https://insights.sbomify.com/MAL-2025-49559/): Malicious code in zul-rangi4-miaww (npm) (malicious package) - [MAL-2025-49558](https://insights.sbomify.com/MAL-2025-49558/): Malicious code in zul-ragi91-sukiwir (npm) (malicious package) - [MAL-2025-49557](https://insights.sbomify.com/MAL-2025-49557/): Malicious code in zul-ongol-ongol47-miaww (npm) (malicious package) - [MAL-2025-49556](https://insights.sbomify.com/MAL-2025-49556/): Malicious code in zul-oblok39-miaww (npm) (malicious package) - [MAL-2025-49555](https://insights.sbomify.com/MAL-2025-49555/): Malicious code in zul-nasi69-sukiwir (npm) (malicious package) - [MAL-2025-49554](https://insights.sbomify.com/MAL-2025-49554/): Malicious code in zul-naget3-sluey (npm) (malicious package) - [MAL-2025-49553](https://insights.sbomify.com/MAL-2025-49553/): Malicious code in zul-miebogor37-sukiwir (npm) (malicious package) - [MAL-2025-49552](https://insights.sbomify.com/MAL-2025-49552/): Malicious code in zul-mieayam97-miaww (npm) (malicious package) - [MAL-2025-49551](https://insights.sbomify.com/MAL-2025-49551/): Malicious code in zul-mie81-sukiwir (npm) (malicious package) - [MAL-2025-49550](https://insights.sbomify.com/MAL-2025-49550/): Malicious code in zul-mie81-sluey (npm) (malicious package) - [MAL-2025-4955](https://insights.sbomify.com/MAL-2025-4955/): Malicious code in typescript-aurelia-api (npm) (malicious package) - [MAL-2025-49549](https://insights.sbomify.com/MAL-2025-49549/): Malicious code in zul-menjes100-ruro (npm) (malicious package) - [MAL-2025-49548](https://insights.sbomify.com/MAL-2025-49548/): Malicious code in zul-lumpur4-sukiwir (npm) (malicious package) - [MAL-2025-49547](https://insights.sbomify.com/MAL-2025-49547/): Malicious code in zul-lepet6-sukiwir (npm) (malicious package) - [MAL-2025-49546](https://insights.sbomify.com/MAL-2025-49546/): Malicious code in zul-kue71-miaww (npm) (malicious package) - [MAL-2025-49545](https://insights.sbomify.com/MAL-2025-49545/): Malicious code in zul-klipo99-sukiwir (npm) (malicious package) - [MAL-2025-49544](https://insights.sbomify.com/MAL-2025-49544/): Malicious code in zul-ketan5-sukiwir (npm) (malicious package) - [MAL-2025-49543](https://insights.sbomify.com/MAL-2025-49543/): Malicious code in zul-ketan40-ruro (npm) (malicious package) - [MAL-2025-49542](https://insights.sbomify.com/MAL-2025-49542/): Malicious code in zul-keripik28-crottsekebon (npm) (malicious package) - [MAL-2025-49541](https://insights.sbomify.com/MAL-2025-49541/): Malicious code in zul-keripik16-apidev (npm) (malicious package) - [MAL-2025-49540](https://insights.sbomify.com/MAL-2025-49540/): Malicious code in zul-kacang20-ruro (npm) (malicious package) - [MAL-2025-4954](https://insights.sbomify.com/MAL-2025-4954/): Malicious code in plugin-proposal-private-methods (npm) (malicious package) - [MAL-2025-49539](https://insights.sbomify.com/MAL-2025-49539/): Malicious code in zul-jus81-sluey (npm) (malicious package) - [MAL-2025-49538](https://insights.sbomify.com/MAL-2025-49538/): Malicious code in zul-jamblang35-sluey (npm) (malicious package) - [MAL-2025-49537](https://insights.sbomify.com/MAL-2025-49537/): Malicious code in zul-gulai58-miaww (npm) (malicious package) - [MAL-2025-49536](https://insights.sbomify.com/MAL-2025-49536/): Malicious code in zul-getas11-sluey (npm) (malicious package) - [MAL-2025-49535](https://insights.sbomify.com/MAL-2025-49535/): Malicious code in zul-gepuk39-riris (npm) (malicious package) - [MAL-2025-49534](https://insights.sbomify.com/MAL-2025-49534/): Malicious code in zul-gembus93-sukiwir (npm) (malicious package) - [MAL-2025-49533](https://insights.sbomify.com/MAL-2025-49533/): Malicious code in zul-buburayam15-sukiwir (npm) (malicious package) - [MAL-2025-49532](https://insights.sbomify.com/MAL-2025-49532/): Malicious code in zul-bubur89-breki (npm) (malicious package) - [MAL-2025-49531](https://insights.sbomify.com/MAL-2025-49531/): Malicious code in zul-bika40-sukiwir (npm) (malicious package) - [MAL-2025-49530](https://insights.sbomify.com/MAL-2025-49530/): Malicious code in zul-bakso29-sluey (npm) (malicious package) - [MAL-2025-4953](https://insights.sbomify.com/MAL-2025-4953/): Malicious code in mdp-client (npm) (malicious package) - [MAL-2025-49529](https://insights.sbomify.com/MAL-2025-49529/): Malicious code in zul-bakso27-sluey (npm) (malicious package) - [MAL-2025-49528](https://insights.sbomify.com/MAL-2025-49528/): Malicious code in zul-asinan14-breki (npm) (malicious package) - [MAL-2025-49527](https://insights.sbomify.com/MAL-2025-49527/): Malicious code in zaki-wajit81-breki (npm) (malicious package) - [MAL-2025-49526](https://insights.sbomify.com/MAL-2025-49526/): Malicious code in zaki-ubi9-miaww (npm) (malicious package) - [MAL-2025-49525](https://insights.sbomify.com/MAL-2025-49525/): Malicious code in zaki-telur21-ruro (npm) (malicious package) - [MAL-2025-49524](https://insights.sbomify.com/MAL-2025-49524/): Malicious code in zaki-teh39-riris (npm) (malicious package) - [MAL-2025-49523](https://insights.sbomify.com/MAL-2025-49523/): Malicious code in zaki-taiwan45-riris (npm) (malicious package) - [MAL-2025-49522](https://insights.sbomify.com/MAL-2025-49522/): Malicious code in zaki-peyek69-breki (npm) (malicious package) - [MAL-2025-49521](https://insights.sbomify.com/MAL-2025-49521/): Malicious code in zaki-ongol-ongol38-miaww (npm) (malicious package) - [MAL-2025-49520](https://insights.sbomify.com/MAL-2025-49520/): Malicious code in zaki-nasisayur62-riris (npm) (malicious package) - [MAL-2025-4952](https://insights.sbomify.com/MAL-2025-4952/): Malicious code in eyeblue1 (npm) (malicious package) - [MAL-2025-49519](https://insights.sbomify.com/MAL-2025-49519/): Malicious code in zaki-nasi46-ruro (npm) (malicious package) - [MAL-2025-49518](https://insights.sbomify.com/MAL-2025-49518/): Malicious code in zaki-nasi2-riris (npm) (malicious package) - [MAL-2025-49517](https://insights.sbomify.com/MAL-2025-49517/): Malicious code in zaki-moci51-sukiwir (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/563/