# Vulnerabilities published in 2025 - [MAL-2025-49516](https://insights.sbomify.com/MAL-2025-49516/): Malicious code in zaki-miebogor87-riris (npm) (malicious package) - [MAL-2025-49515](https://insights.sbomify.com/MAL-2025-49515/): Malicious code in zaki-mendut2-sluey (npm) (malicious package) - [MAL-2025-49514](https://insights.sbomify.com/MAL-2025-49514/): Malicious code in zaki-mendoan80-sluey (npm) (malicious package) - [MAL-2025-49513](https://insights.sbomify.com/MAL-2025-49513/): Malicious code in zaki-martabak61-breki (npm) (malicious package) - [MAL-2025-49512](https://insights.sbomify.com/MAL-2025-49512/): Malicious code in zaki-martabak38-sluey (npm) (malicious package) - [MAL-2025-49511](https://insights.sbomify.com/MAL-2025-49511/): Malicious code in zaki-lutis90-ruro (npm) (malicious package) - [MAL-2025-49510](https://insights.sbomify.com/MAL-2025-49510/): Malicious code in zaki-lontong46-sluey (npm) (malicious package) - [MAL-2025-4951](https://insights.sbomify.com/MAL-2025-4951/): Malicious code in soufianewldnass (npm) (malicious package) - [MAL-2025-49509](https://insights.sbomify.com/MAL-2025-49509/): Malicious code in zaki-liwet92-sluey (npm) (malicious package) - [MAL-2025-49508](https://insights.sbomify.com/MAL-2025-49508/): Malicious code in zaki-kupat2-sluey (npm) (malicious package) - [MAL-2025-49507](https://insights.sbomify.com/MAL-2025-49507/): Malicious code in zaki-kue68-sluey (npm) (malicious package) - [MAL-2025-49506](https://insights.sbomify.com/MAL-2025-49506/): Malicious code in zaki-ketan68-miaww (npm) (malicious package) - [MAL-2025-49505](https://insights.sbomify.com/MAL-2025-49505/): Malicious code in zaki-kacang98-riris (npm) (malicious package) - [MAL-2025-49504](https://insights.sbomify.com/MAL-2025-49504/): Malicious code in zaki-jengkol75-ruro (npm) (malicious package) - [MAL-2025-49503](https://insights.sbomify.com/MAL-2025-49503/): Malicious code in zaki-jengkol64-sluey (npm) (malicious package) - [MAL-2025-49502](https://insights.sbomify.com/MAL-2025-49502/): Malicious code in zaki-gandul85-sluey (npm) (malicious package) - [MAL-2025-49501](https://insights.sbomify.com/MAL-2025-49501/): Malicious code in zaki-dradag90-sluey (npm) (malicious package) - [MAL-2025-49500](https://insights.sbomify.com/MAL-2025-49500/): Malicious code in zaki-bakwan95-breki (npm) (malicious package) - [MAL-2025-4950](https://insights.sbomify.com/MAL-2025-4950/): Malicious code in maxdome-compute (npm) (malicious package) - [MAL-2025-495](https://insights.sbomify.com/MAL-2025-495/): Malicious code in iberia-sync (npm) (malicious package) - [MAL-2025-49499](https://insights.sbomify.com/MAL-2025-49499/): Malicious code in zaki-bakwan2-miaww (npm) (malicious package) - [MAL-2025-49498](https://insights.sbomify.com/MAL-2025-49498/): Malicious code in zain-tongseng31-breki (npm) (malicious package) - [MAL-2025-49497](https://insights.sbomify.com/MAL-2025-49497/): Malicious code in zain-tempe2-miaww (npm) (malicious package) - [MAL-2025-49496](https://insights.sbomify.com/MAL-2025-49496/): Malicious code in zain-tempe12-breki (npm) (malicious package) - [MAL-2025-49495](https://insights.sbomify.com/MAL-2025-49495/): Malicious code in zain-tempe11-sluey (npm) (malicious package) - [MAL-2025-49494](https://insights.sbomify.com/MAL-2025-49494/): Malicious code in zain-tek22-riris (npm) (malicious package) - [MAL-2025-49493](https://insights.sbomify.com/MAL-2025-49493/): Malicious code in zain-tapai80-riris (npm) (malicious package) - [MAL-2025-49492](https://insights.sbomify.com/MAL-2025-49492/): Malicious code in zain-tapai1-sluey (npm) (malicious package) - [MAL-2025-49491](https://insights.sbomify.com/MAL-2025-49491/): Malicious code in zain-serabi3-sukiwir (npm) (malicious package) - [MAL-2025-49490](https://insights.sbomify.com/MAL-2025-49490/): Malicious code in zain-rujak7-sukiwir (npm) (malicious package) - [MAL-2025-4949](https://insights.sbomify.com/MAL-2025-4949/): Malicious code in ls-onboarding-frontend (npm) (malicious package) - [MAL-2025-49489](https://insights.sbomify.com/MAL-2025-49489/): Malicious code in zain-rojak61-sluey (npm) (malicious package) - [MAL-2025-49488](https://insights.sbomify.com/MAL-2025-49488/): Malicious code in zain-rendang18-sluey (npm) (malicious package) - [MAL-2025-49487](https://insights.sbomify.com/MAL-2025-49487/): Malicious code in zain-rangi72-riris (npm) (malicious package) - [MAL-2025-49486](https://insights.sbomify.com/MAL-2025-49486/): Malicious code in zain-ragi55-riris (npm) (malicious package) - [MAL-2025-49485](https://insights.sbomify.com/MAL-2025-49485/): Malicious code in zain-papeda12-breki (npm) (malicious package) - [MAL-2025-49484](https://insights.sbomify.com/MAL-2025-49484/): Malicious code in zain-ongol-ongol96-breki (npm) (malicious package) - [MAL-2025-49483](https://insights.sbomify.com/MAL-2025-49483/): Malicious code in zain-naget37-sukiwir (npm) (malicious package) - [MAL-2025-49482](https://insights.sbomify.com/MAL-2025-49482/): Malicious code in zain-moci47-miaww (npm) (malicious package) - [MAL-2025-49481](https://insights.sbomify.com/MAL-2025-49481/): Malicious code in zain-mieayam69-miaww (npm) (malicious package) - [MAL-2025-49480](https://insights.sbomify.com/MAL-2025-49480/): Malicious code in zain-lutis65-breki (npm) (malicious package) - [MAL-2025-4948](https://insights.sbomify.com/MAL-2025-4948/): Malicious code in zora-wallet-core (npm) (malicious package) - [MAL-2025-49479](https://insights.sbomify.com/MAL-2025-49479/): Malicious code in zain-lutis44-sukiwir (npm) (malicious package) - [MAL-2025-49478](https://insights.sbomify.com/MAL-2025-49478/): Malicious code in zain-lumpur27-wekto (npm) (malicious package) - [MAL-2025-49477](https://insights.sbomify.com/MAL-2025-49477/): Malicious code in zain-lontong37-riris (npm) (malicious package) - [MAL-2025-49476](https://insights.sbomify.com/MAL-2025-49476/): Malicious code in zain-lodeh99-riris (npm) (malicious package) - [MAL-2025-49475](https://insights.sbomify.com/MAL-2025-49475/): Malicious code in zain-lepet76-ruro (npm) (malicious package) - [MAL-2025-49474](https://insights.sbomify.com/MAL-2025-49474/): Malicious code in zain-lepet73-miaww (npm) (malicious package) - [MAL-2025-49473](https://insights.sbomify.com/MAL-2025-49473/): Malicious code in zain-lepet61-sluey (npm) (malicious package) - [MAL-2025-49472](https://insights.sbomify.com/MAL-2025-49472/): Malicious code in zain-kue29-riris (npm) (malicious package) - [MAL-2025-49471](https://insights.sbomify.com/MAL-2025-49471/): Malicious code in zain-kripik40-riris (npm) (malicious package) - [MAL-2025-49470](https://insights.sbomify.com/MAL-2025-49470/): Malicious code in zain-klanting31-riris (npm) (malicious package) - [MAL-2025-4947](https://insights.sbomify.com/MAL-2025-4947/): Malicious code in zora-wallet (npm) (malicious package) - [MAL-2025-49469](https://insights.sbomify.com/MAL-2025-49469/): Malicious code in zain-ketan51-sukiwir (npm) (malicious package) - [MAL-2025-49468](https://insights.sbomify.com/MAL-2025-49468/): Malicious code in zain-ketan1-sukiwir (npm) (malicious package) - [MAL-2025-49467](https://insights.sbomify.com/MAL-2025-49467/): Malicious code in zain-gaplek52-ruro (npm) (malicious package) - [MAL-2025-49466](https://insights.sbomify.com/MAL-2025-49466/): Malicious code in zain-dradag28-miaww (npm) (malicious package) - [MAL-2025-49465](https://insights.sbomify.com/MAL-2025-49465/): Malicious code in zain-dradag100-breki (npm) (malicious package) - [MAL-2025-49464](https://insights.sbomify.com/MAL-2025-49464/): Malicious code in zain-bubursumsum56-riris (npm) (malicious package) - [MAL-2025-49463](https://insights.sbomify.com/MAL-2025-49463/): Malicious code in zain-bubur27-breki (npm) (malicious package) - [MAL-2025-49462](https://insights.sbomify.com/MAL-2025-49462/): Malicious code in zain-brongkos64-riris (npm) (malicious package) - [MAL-2025-49461](https://insights.sbomify.com/MAL-2025-49461/): Malicious code in zain-bakso24-breki (npm) (malicious package) - [MAL-2025-49460](https://insights.sbomify.com/MAL-2025-49460/): Malicious code in elf-stats-whimsical-train-322 (npm) (malicious package) - [MAL-2025-4946](https://insights.sbomify.com/MAL-2025-4946/): Malicious code in zora-hooks (npm) (malicious package) - [MAL-2025-49459](https://insights.sbomify.com/MAL-2025-49459/): Malicious code in elf-stats-storybook-cookiejar-880 (npm) (malicious package) - [MAL-2025-49458](https://insights.sbomify.com/MAL-2025-49458/): Malicious code in elf-stats-cranberry-workbench-671 (npm) (malicious package) - [MAL-2025-49457](https://insights.sbomify.com/MAL-2025-49457/): Malicious code in @secretcollect/identity-core (npm) (malicious package) - [MAL-2025-49456](https://insights.sbomify.com/MAL-2025-49456/): Malicious code in 0e (npm) (malicious package) - [MAL-2025-49455](https://insights.sbomify.com/MAL-2025-49455/): Malicious code in startupkit-umbraco-webpack (npm) (malicious package) - [MAL-2025-49454](https://insights.sbomify.com/MAL-2025-49454/): Malicious code in telstraprogrammablenetworkapilib (npm) (malicious package) - [MAL-2025-49453](https://insights.sbomify.com/MAL-2025-49453/): Malicious code in karemv1 (npm) (malicious package) - [MAL-2025-49452](https://insights.sbomify.com/MAL-2025-49452/): Malicious code in xmlparserruntime (npm) (malicious package) - [MAL-2025-49451](https://insights.sbomify.com/MAL-2025-49451/): Malicious code in xmlparserattack (npm) (malicious package) - [MAL-2025-49450](https://insights.sbomify.com/MAL-2025-49450/): Malicious code in xmljs2bank (npm) (malicious package) - [MAL-2025-4945](https://insights.sbomify.com/MAL-2025-4945/): Malicious code in zora-auth (npm) (malicious package) - [MAL-2025-49449](https://insights.sbomify.com/MAL-2025-49449/): Malicious code in workspacestealer (npm) (malicious package) - [MAL-2025-49448](https://insights.sbomify.com/MAL-2025-49448/): Malicious code in testsender (npm) (malicious package) - [MAL-2025-49447](https://insights.sbomify.com/MAL-2025-49447/): Malicious code in test552 (npm) (malicious package) - [MAL-2025-49446](https://insights.sbomify.com/MAL-2025-49446/): Malicious code in supxmlparser (npm) (malicious package) - [MAL-2025-49445](https://insights.sbomify.com/MAL-2025-49445/): Malicious code in supervot5 (npm) (malicious package) - [MAL-2025-49444](https://insights.sbomify.com/MAL-2025-49444/): Malicious code in supervot4 (npm) (malicious package) - [MAL-2025-49443](https://insights.sbomify.com/MAL-2025-49443/): Malicious code in supervot2 (npm) (malicious package) - [MAL-2025-49442](https://insights.sbomify.com/MAL-2025-49442/): Malicious code in supermoy1 (npm) (malicious package) - [MAL-2025-49441](https://insights.sbomify.com/MAL-2025-49441/): Malicious code in superbankxmlparser (npm) (malicious package) - [MAL-2025-49440](https://insights.sbomify.com/MAL-2025-49440/): Malicious code in superbankbackdoor (npm) (malicious package) - [MAL-2025-4944](https://insights.sbomify.com/MAL-2025-4944/): Malicious code in zora-analytics (npm) (malicious package) - [MAL-2025-49439](https://insights.sbomify.com/MAL-2025-49439/): Malicious code in study-lab-npm-test (npm) (malicious package) - [MAL-2025-49438](https://insights.sbomify.com/MAL-2025-49438/): Malicious code in study-lab-e53 (npm) (malicious package) - [MAL-2025-49437](https://insights.sbomify.com/MAL-2025-49437/): Malicious code in study-lab-e52 (npm) (malicious package) - [MAL-2025-49436](https://insights.sbomify.com/MAL-2025-49436/): Malicious code in study-lab-e51 (npm) (malicious package) - [MAL-2025-49435](https://insights.sbomify.com/MAL-2025-49435/): Malicious code in something-not-in-cache (npm) (malicious package) - [MAL-2025-49434](https://insights.sbomify.com/MAL-2025-49434/): Malicious code in servicecore-logger (npm) (malicious package) - [MAL-2025-49433](https://insights.sbomify.com/MAL-2025-49433/): Malicious code in runtimexploit (npm) (malicious package) - [MAL-2025-49432](https://insights.sbomify.com/MAL-2025-49432/): Malicious code in runtimemoyv2 (npm) (malicious package) - [MAL-2025-49431](https://insights.sbomify.com/MAL-2025-49431/): Malicious code in runtimemoy2 (npm) (malicious package) - [MAL-2025-49430](https://insights.sbomify.com/MAL-2025-49430/): Malicious code in runtimemoy (npm) (malicious package) - [MAL-2025-4943](https://insights.sbomify.com/MAL-2025-4943/): Malicious code in web3-socketio (npm) (malicious package) - [MAL-2025-49429](https://insights.sbomify.com/MAL-2025-49429/): Malicious code in runtime-only-exploit (npm) (malicious package) - [MAL-2025-49428](https://insights.sbomify.com/MAL-2025-49428/): Malicious code in otetotvot (npm) (malicious package) - [MAL-2025-49427](https://insights.sbomify.com/MAL-2025-49427/): Malicious code in otetoparserlparser (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/564/