# Vulnerabilities published in 2025


- [MAL-2025-46813](https://insights.sbomify.com/MAL-2025-46813/): Malicious code in yingyu-kouyu-xiaozhen-erlingyibayiling-erlingyibayiyi (npm) (malicious package)
- [MAL-2025-46812](https://insights.sbomify.com/MAL-2025-46812/): Malicious code in yingyu-kouyu-xiaozhen-erlingyibayier-erlingyijiulinger (npm) (malicious package)
- [MAL-2025-46811](https://insights.sbomify.com/MAL-2025-46811/): Malicious code in yingyu-kouyu-xiaozhen-erlingyibalingqi-erlingyibalingjiu (npm) (malicious package)
- [MAL-2025-46810](https://insights.sbomify.com/MAL-2025-46810/): Malicious code in yingyu-kouyu-xiaozhen-erlingeryiyiyi-erlingererlinger (npm) (malicious package)
- [MAL-2025-4681](https://insights.sbomify.com/MAL-2025-4681/): Malicious code in daenax (npm) (malicious package)
- [MAL-2025-46809](https://insights.sbomify.com/MAL-2025-46809/): Malicious code in yingyu-kouyu-xiaozhen-erlingeryilingsan-erlingeryilingliu (npm) (malicious package)
- [MAL-2025-46808](https://insights.sbomify.com/MAL-2025-46808/): Malicious code in yingyu-kouyu-xiaozhen-erlingeryilingqi-erlingeryiyiling (npm) (malicious package)
- [MAL-2025-46807](https://insights.sbomify.com/MAL-2025-46807/): Malicious code in yingyu-kouyu-xiaozhen-erlingerlingyiyi-erlingeryilinger (npm) (malicious package)
- [MAL-2025-46806](https://insights.sbomify.com/MAL-2025-46806/): Malicious code in yingyu-kouyu-xiaozhen-erlingerlinglingsan-erlingerlinglingliu (npm) (malicious package)
- [MAL-2025-46805](https://insights.sbomify.com/MAL-2025-46805/): Malicious code in yingyu-kouyu-xiaozhen-erlingerlinglingqi-erlingerlingyiling (npm) (malicious package)
- [MAL-2025-46804](https://insights.sbomify.com/MAL-2025-46804/): Malicious code in yingyu-kouyu-xiaozhen-erlingererlingsan-erlingererlingliu (npm) (malicious package)
- [MAL-2025-46803](https://insights.sbomify.com/MAL-2025-46803/): Malicious code in yingyu-kouyu-xiaozhen-erlingererlingqi-erlingereryiling (npm) (malicious package)
- [MAL-2025-46802](https://insights.sbomify.com/MAL-2025-46802/): Malicious code in yingyu-kouyu-erlingeryilingba (npm) (malicious package)
- [MAL-2025-46801](https://insights.sbomify.com/MAL-2025-46801/): Malicious code in yingyu-kouyu-erlingerlingyiyi (npm) (malicious package)
- [MAL-2025-46800](https://insights.sbomify.com/MAL-2025-46800/): Malicious code in yingyu-kouyu-erlingerlingyiling (npm) (malicious package)
- [MAL-2025-4680](https://insights.sbomify.com/MAL-2025-4680/): Malicious code in chatbox-utility (npm) (malicious package)
- [MAL-2025-468](https://insights.sbomify.com/MAL-2025-468/): Malicious code in godaddy-logger (npm) (malicious package)
- [MAL-2025-46799](https://insights.sbomify.com/MAL-2025-46799/): Malicious code in yingyu-kouyu-erlingerlingyier (npm) (malicious package)
- [MAL-2025-46798](https://insights.sbomify.com/MAL-2025-46798/): Malicious code in yingyu-dianjin-erlingeryilingba-erlingererlinger (npm) (malicious package)
- [MAL-2025-46797](https://insights.sbomify.com/MAL-2025-46797/): Malicious code in yingyu-dianjin-erlingerlinglingsan-erlingerlinglingba (npm) (malicious package)
- [MAL-2025-46796](https://insights.sbomify.com/MAL-2025-46796/): Malicious code in yingyu-dianjin-erlingerlinglingjiu-erlingerlingyier (npm) (malicious package)
- [MAL-2025-46795](https://insights.sbomify.com/MAL-2025-46795/): Malicious code in yingyu-dianjin-erlingererlingsan-erlingereryiling (npm) (malicious package)
- [MAL-2025-46794](https://insights.sbomify.com/MAL-2025-46794/): Malicious code in yingwen-yudu-erlingyijiu (npm) (malicious package)
- [MAL-2025-46793](https://insights.sbomify.com/MAL-2025-46793/): Malicious code in yimijia-erlingyijiulingjiu (npm) (malicious package)
- [MAL-2025-46792](https://insights.sbomify.com/MAL-2025-46792/): Malicious code in yildun-writable-mensa-oauth (npm) (malicious package)
- [MAL-2025-46791](https://insights.sbomify.com/MAL-2025-46791/): Malicious code in yildun-epimetheus-uglify-js-relay (npm) (malicious package)
- [MAL-2025-46790](https://insights.sbomify.com/MAL-2025-46790/): Malicious code in yildun-element-ui-phoebe-protractor (npm) (malicious package)
- [MAL-2025-4679](https://insights.sbomify.com/MAL-2025-4679/): Malicious code in chatbox-fca-remake (npm) (malicious package)
- [MAL-2025-46789](https://insights.sbomify.com/MAL-2025-46789/): Malicious code in yijia-erlingyibalingyi-erlingerlingyier (npm) (malicious package)
- [MAL-2025-46788](https://insights.sbomify.com/MAL-2025-46788/): Malicious code in yige-gushide-dansheng (npm) (malicious package)
- [MAL-2025-46787](https://insights.sbomify.com/MAL-2025-46787/): Malicious code in yibenhei-jinghua-vol1 (npm) (malicious package)
- [MAL-2025-46786](https://insights.sbomify.com/MAL-2025-46786/): Malicious code in yauken (npm) (malicious package)
- [MAL-2025-46785](https://insights.sbomify.com/MAL-2025-46785/): Malicious code in yarn-plugin-backstage (npm) (malicious package)
- [MAL-2025-46784](https://insights.sbomify.com/MAL-2025-46784/): Malicious code in yanye-riyu-erlingerlinglingliu-erlingerlingyiling (npm) (malicious package)
- [MAL-2025-46783](https://insights.sbomify.com/MAL-2025-46783/): Malicious code in yanye-riyu-erlingererlingsi-erlingererlingliu (npm) (malicious package)
- [MAL-2025-46782](https://insights.sbomify.com/MAL-2025-46782/): Malicious code in yanye-riyu-erlingererlingqi-erlingereryiling (npm) (malicious package)
- [MAL-2025-46781](https://insights.sbomify.com/MAL-2025-46781/): Malicious code in yanti-ubi4-breki (npm) (malicious package)
- [MAL-2025-46780](https://insights.sbomify.com/MAL-2025-46780/): Malicious code in yanti-telur61-breki (npm) (malicious package)
- [MAL-2025-4678](https://insights.sbomify.com/MAL-2025-4678/): Malicious code in @sasmeee/wabetainfo (npm) (malicious package)
- [MAL-2025-46779](https://insights.sbomify.com/MAL-2025-46779/): Malicious code in yanti-telur59-breki (npm) (malicious package)
- [MAL-2025-46778](https://insights.sbomify.com/MAL-2025-46778/): Malicious code in yanti-taiwan67-kyuki (npm) (malicious package)
- [MAL-2025-46777](https://insights.sbomify.com/MAL-2025-46777/): Malicious code in yanti-serabi77-breki (npm) (malicious package)
- [MAL-2025-46776](https://insights.sbomify.com/MAL-2025-46776/): Malicious code in yanti-sambel100-sukiwir (npm) (malicious package)
- [MAL-2025-46775](https://insights.sbomify.com/MAL-2025-46775/): Malicious code in yanti-sambalado42-breki (npm) (malicious package)
- [MAL-2025-46774](https://insights.sbomify.com/MAL-2025-46774/): Malicious code in yanti-ruwet14-kyuki (npm) (malicious package)
- [MAL-2025-46773](https://insights.sbomify.com/MAL-2025-46773/): Malicious code in yanti-rujaksoto79-sukiwir (npm) (malicious package)
- [MAL-2025-46772](https://insights.sbomify.com/MAL-2025-46772/): Malicious code in yanti-rangi92-sukiwir (npm) (malicious package)
- [MAL-2025-46771](https://insights.sbomify.com/MAL-2025-46771/): Malicious code in yanti-rangginang15-kyuki (npm) (malicious package)
- [MAL-2025-46770](https://insights.sbomify.com/MAL-2025-46770/): Malicious code in yanti-ragi17-breki (npm) (malicious package)
- [MAL-2025-4677](https://insights.sbomify.com/MAL-2025-4677/): Malicious code in @sasmeee/tkdl (npm) (malicious package)
- [MAL-2025-46769](https://insights.sbomify.com/MAL-2025-46769/): Malicious code in yanti-oncom88-breki (npm) (malicious package)
- [MAL-2025-46768](https://insights.sbomify.com/MAL-2025-46768/): Malicious code in yanti-miemee54-breki (npm) (malicious package)
- [MAL-2025-46767](https://insights.sbomify.com/MAL-2025-46767/): Malicious code in yanti-mendut29-kyuki (npm) (malicious package)
- [MAL-2025-46766](https://insights.sbomify.com/MAL-2025-46766/): Malicious code in yanti-mangut97-breki (npm) (malicious package)
- [MAL-2025-46765](https://insights.sbomify.com/MAL-2025-46765/): Malicious code in yanti-lumpur80-breki (npm) (malicious package)
- [MAL-2025-46764](https://insights.sbomify.com/MAL-2025-46764/): Malicious code in yanti-lapis66-breki (npm) (malicious package)
- [MAL-2025-46763](https://insights.sbomify.com/MAL-2025-46763/): Malicious code in yanti-kue84-kyuki (npm) (malicious package)
- [MAL-2025-46762](https://insights.sbomify.com/MAL-2025-46762/): Malicious code in yanti-kue25-breki (npm) (malicious package)
- [MAL-2025-46761](https://insights.sbomify.com/MAL-2025-46761/): Malicious code in yanti-kemplang48-breki (npm) (malicious package)
- [MAL-2025-46760](https://insights.sbomify.com/MAL-2025-46760/): Malicious code in yanti-getuk64-breki (npm) (malicious package)
- [MAL-2025-4676](https://insights.sbomify.com/MAL-2025-4676/): Malicious code in @sasmeee/test-theme (npm) (malicious package)
- [MAL-2025-46759](https://insights.sbomify.com/MAL-2025-46759/): Malicious code in yanti-bubur89-breki (npm) (malicious package)
- [MAL-2025-46758](https://insights.sbomify.com/MAL-2025-46758/): Malicious code in yanti-bakso38-breki (npm) (malicious package)
- [MAL-2025-46757](https://insights.sbomify.com/MAL-2025-46757/): Malicious code in yanti-bakso20-breki (npm) (malicious package)
- [MAL-2025-46756](https://insights.sbomify.com/MAL-2025-46756/): Malicious code in yanti-asinan99-breki (npm) (malicious package)
- [MAL-2025-46755](https://insights.sbomify.com/MAL-2025-46755/): Malicious code in yanti-asinan66-breki (npm) (malicious package)
- [MAL-2025-46754](https://insights.sbomify.com/MAL-2025-46754/): Malicious code in yaml-transform-rollup-plugin-dione (npm) (malicious package)
- [MAL-2025-46753](https://insights.sbomify.com/MAL-2025-46753/): Malicious code in yaml-rate-limiter-epimetheus-optimize-css-assets-webpack-plugin (npm) (malicious package)
- [MAL-2025-46752](https://insights.sbomify.com/MAL-2025-46752/): Malicious code in yaml-assert-upsilon-sudo-small (npm) (malicious package)
- [MAL-2025-46751](https://insights.sbomify.com/MAL-2025-46751/): Malicious code in yakutsk-readable-hermes-async (npm) (malicious package)
- [MAL-2025-46750](https://insights.sbomify.com/MAL-2025-46750/): Malicious code in yakutsk-borealis-publish-ionosphere (npm) (malicious package)
- [MAL-2025-4675](https://insights.sbomify.com/MAL-2025-4675/): Malicious code in @sasmeee/ip-locator (npm) (malicious package)
- [MAL-2025-46749](https://insights.sbomify.com/MAL-2025-46749/): Malicious code in yakutsk-airbnb-webpack-element-ui (npm) (malicious package)
- [MAL-2025-46748](https://insights.sbomify.com/MAL-2025-46748/): Malicious code in xwusanjiu-dangan-vol3 (npm) (malicious package)
- [MAL-2025-46747](https://insights.sbomify.com/MAL-2025-46747/): Malicious code in xwusanjiu-dangan-vol2 (npm) (malicious package)
- [MAL-2025-46746](https://insights.sbomify.com/MAL-2025-46746/): Malicious code in xwusanjiu-dangan-vol1 (npm) (malicious package)
- [MAL-2025-46745](https://insights.sbomify.com/MAL-2025-46745/): Malicious code in xuexing-shengxiao-xingzuo-quanshu (npm) (malicious package)
- [MAL-2025-46744](https://insights.sbomify.com/MAL-2025-46744/): Malicious code in xuehui-zhanxingde-diyibenshu (npm) (malicious package)
- [MAL-2025-46743](https://insights.sbomify.com/MAL-2025-46743/): Malicious code in xuanze-yu-kaishi (npm) (malicious package)
- [MAL-2025-46742](https://insights.sbomify.com/MAL-2025-46742/): Malicious code in xuanxue-zhanbu (npm) (malicious package)
- [MAL-2025-46741](https://insights.sbomify.com/MAL-2025-46741/): Malicious code in xreryi-tiezi-zhengli-zuizhongban (npm) (malicious package)
- [MAL-2025-46740](https://insights.sbomify.com/MAL-2025-46740/): Malicious code in xo-wolf-playwright-nestjs (npm) (malicious package)
- [MAL-2025-4674](https://insights.sbomify.com/MAL-2025-4674/): Malicious code in @sasmeee/igdl (npm) (malicious package)
- [MAL-2025-46739](https://insights.sbomify.com/MAL-2025-46739/): Malicious code in xo-npm-writable-farout (npm) (malicious package)
- [MAL-2025-46738](https://insights.sbomify.com/MAL-2025-46738/): Malicious code in xo-fornax-blitz-stream (npm) (malicious package)
- [MAL-2025-46737](https://insights.sbomify.com/MAL-2025-46737/): Malicious code in xml-juno-changelog-hyperion (npm) (malicious package)
- [MAL-2025-46736](https://insights.sbomify.com/MAL-2025-46736/): Malicious code in xml-epsilon-double-emulate-spy (npm) (malicious package)
- [MAL-2025-46735](https://insights.sbomify.com/MAL-2025-46735/): Malicious code in xiyuedenao (npm) (malicious package)
- [MAL-2025-46734](https://insights.sbomify.com/MAL-2025-46734/): Malicious code in xiyue-jiushiqu-yongbao-shenghuo (npm) (malicious package)
- [MAL-2025-46733](https://insights.sbomify.com/MAL-2025-46733/): Malicious code in xiyang-zhanxingxue-rumen (npm) (malicious package)
- [MAL-2025-46732](https://insights.sbomify.com/MAL-2025-46732/): Malicious code in xiyang-zhanxingxue-jinjie (npm) (malicious package)
- [MAL-2025-46731](https://insights.sbomify.com/MAL-2025-46731/): Malicious code in xiyang-zhanxing-zixue-zhinan (npm) (malicious package)
- [MAL-2025-46730](https://insights.sbomify.com/MAL-2025-46730/): Malicious code in xinxiang-shicheng-jinghuaban (npm) (malicious package)
- [MAL-2025-4673](https://insights.sbomify.com/MAL-2025-4673/): Malicious code in @sasmeee/gamble (npm) (malicious package)
- [MAL-2025-46729](https://insights.sbomify.com/MAL-2025-46729/): Malicious code in xinwen-shiyanshi-huiyuan-tongxun-volwuqiba (npm) (malicious package)
- [MAL-2025-46728](https://insights.sbomify.com/MAL-2025-46728/): Malicious code in xinwen-shiyanshi-huiyuan-tongxun-volwubaling (npm) (malicious package)
- [MAL-2025-46727](https://insights.sbomify.com/MAL-2025-46727/): Malicious code in xinwen-shiyanshi-huiyuan-tongxun-volwubaer (npm) (malicious package)
- [MAL-2025-46726](https://insights.sbomify.com/MAL-2025-46726/): Malicious code in xintu-yanjiushi-erlingererlingsan-erlingererlingqi (npm) (malicious package)
- [MAL-2025-46725](https://insights.sbomify.com/MAL-2025-46725/): Malicious code in xinshounianlai-yiye-zhijian-gaibian-nide-guanggao (npm) (malicious package)
- [MAL-2025-46724](https://insights.sbomify.com/MAL-2025-46724/): Malicious code in xinling-zixun-gean-fenxiang-vol1 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/594/