# Vulnerabilities published in 2025


- [MAL-2025-46541](https://insights.sbomify.com/MAL-2025-46541/): Malicious code in vina-tongseng51-kyuki (npm) (malicious package)
- [MAL-2025-46540](https://insights.sbomify.com/MAL-2025-46540/): Malicious code in vina-tempe82-kyuki (npm) (malicious package)
- [MAL-2025-4654](https://insights.sbomify.com/MAL-2025-4654/): Malicious code in plugin-svg-icons (npm) (malicious package)
- [MAL-2025-46539](https://insights.sbomify.com/MAL-2025-46539/): Malicious code in vina-tek50-breki (npm) (malicious package)
- [MAL-2025-46538](https://insights.sbomify.com/MAL-2025-46538/): Malicious code in vina-teh86-breki (npm) (malicious package)
- [MAL-2025-46537](https://insights.sbomify.com/MAL-2025-46537/): Malicious code in vina-rujaksoto11-kyuki (npm) (malicious package)
- [MAL-2025-46536](https://insights.sbomify.com/MAL-2025-46536/): Malicious code in vina-rujak85-kyuki (npm) (malicious package)
- [MAL-2025-46535](https://insights.sbomify.com/MAL-2025-46535/): Malicious code in vina-rawon20-breki (npm) (malicious package)
- [MAL-2025-46534](https://insights.sbomify.com/MAL-2025-46534/): Malicious code in vina-rangi35-kyuki (npm) (malicious package)
- [MAL-2025-46533](https://insights.sbomify.com/MAL-2025-46533/): Malicious code in vina-rangginang59-kyuki (npm) (malicious package)
- [MAL-2025-46532](https://insights.sbomify.com/MAL-2025-46532/): Malicious code in vina-mangut79-breki (npm) (malicious package)
- [MAL-2025-46531](https://insights.sbomify.com/MAL-2025-46531/): Malicious code in vina-lupis94-breki (npm) (malicious package)
- [MAL-2025-46530](https://insights.sbomify.com/MAL-2025-46530/): Malicious code in vina-lupis67-breki (npm) (malicious package)
- [MAL-2025-4653](https://insights.sbomify.com/MAL-2025-4653/): Malicious code in pkurbatsky-uni-kit (npm) (malicious package)
- [MAL-2025-46529](https://insights.sbomify.com/MAL-2025-46529/): Malicious code in vina-kue31-breki (npm) (malicious package)
- [MAL-2025-46528](https://insights.sbomify.com/MAL-2025-46528/): Malicious code in vina-keripik85-breki (npm) (malicious package)
- [MAL-2025-46527](https://insights.sbomify.com/MAL-2025-46527/): Malicious code in vina-keraktelor6-breki (npm) (malicious package)
- [MAL-2025-46526](https://insights.sbomify.com/MAL-2025-46526/): Malicious code in vina-donat55-breki (npm) (malicious package)
- [MAL-2025-46525](https://insights.sbomify.com/MAL-2025-46525/): Malicious code in vida-rangi21-breki (npm) (malicious package)
- [MAL-2025-46524](https://insights.sbomify.com/MAL-2025-46524/): Malicious code in vida-oblok4-kyuki (npm) (malicious package)
- [MAL-2025-46523](https://insights.sbomify.com/MAL-2025-46523/): Malicious code in vida-menjes27-breki (npm) (malicious package)
- [MAL-2025-46522](https://insights.sbomify.com/MAL-2025-46522/): Malicious code in vida-menjes16-breki (npm) (malicious package)
- [MAL-2025-46521](https://insights.sbomify.com/MAL-2025-46521/): Malicious code in vida-lapis63-breki (npm) (malicious package)
- [MAL-2025-46520](https://insights.sbomify.com/MAL-2025-46520/): Malicious code in vida-kue62-kyuki (npm) (malicious package)
- [MAL-2025-4652](https://insights.sbomify.com/MAL-2025-4652/): Malicious code in phlib-config (npm) (malicious package)
- [MAL-2025-46519](https://insights.sbomify.com/MAL-2025-46519/): Malicious code in vida-klipo87-kyuki (npm) (malicious package)
- [MAL-2025-46518](https://insights.sbomify.com/MAL-2025-46518/): Malicious code in vida-jengkol92-breki (npm) (malicious package)
- [MAL-2025-46517](https://insights.sbomify.com/MAL-2025-46517/): Malicious code in vida-ikan73-breki (npm) (malicious package)
- [MAL-2025-46516](https://insights.sbomify.com/MAL-2025-46516/): Malicious code in vida-gandul3-breki (npm) (malicious package)
- [MAL-2025-46515](https://insights.sbomify.com/MAL-2025-46515/): Malicious code in vida-esdoger69-kyuki (npm) (malicious package)
- [MAL-2025-46514](https://insights.sbomify.com/MAL-2025-46514/): Malicious code in vida-empal40-kyuki (npm) (malicious package)
- [MAL-2025-46513](https://insights.sbomify.com/MAL-2025-46513/): Malicious code in vida-buburayam92-breki (npm) (malicious package)
- [MAL-2025-46512](https://insights.sbomify.com/MAL-2025-46512/): Malicious code in vida-buburayam62-breki (npm) (malicious package)
- [MAL-2025-46511](https://insights.sbomify.com/MAL-2025-46511/): Malicious code in version-fusion-forever-paleomagnetism (npm) (malicious package)
- [MAL-2025-46510](https://insights.sbomify.com/MAL-2025-46510/): Malicious code in version-dependencies-link-cressida (npm) (malicious package)
- [MAL-2025-4651](https://insights.sbomify.com/MAL-2025-4651/): Malicious code in parabol-action (npm) (malicious package)
- [MAL-2025-46509](https://insights.sbomify.com/MAL-2025-46509/): Malicious code in vera-telur1-breki (npm) (malicious package)
- [MAL-2025-46508](https://insights.sbomify.com/MAL-2025-46508/): Malicious code in vera-rojak80-breki (npm) (malicious package)
- [MAL-2025-46507](https://insights.sbomify.com/MAL-2025-46507/): Malicious code in vera-lutis72-kyuki (npm) (malicious package)
- [MAL-2025-46506](https://insights.sbomify.com/MAL-2025-46506/): Malicious code in vera-lutis72-breki (npm) (malicious package)
- [MAL-2025-46505](https://insights.sbomify.com/MAL-2025-46505/): Malicious code in vera-lontong48-breki (npm) (malicious package)
- [MAL-2025-46504](https://insights.sbomify.com/MAL-2025-46504/): Malicious code in vera-lontong40-breki (npm) (malicious package)
- [MAL-2025-46503](https://insights.sbomify.com/MAL-2025-46503/): Malicious code in vera-ketan59-breki (npm) (malicious package)
- [MAL-2025-46502](https://insights.sbomify.com/MAL-2025-46502/): Malicious code in vera-gembus14-kyuki (npm) (malicious package)
- [MAL-2025-46501](https://insights.sbomify.com/MAL-2025-46501/): Malicious code in vera-gaplek51-kyuki (npm) (malicious package)
- [MAL-2025-46500](https://insights.sbomify.com/MAL-2025-46500/): Malicious code in vera-bakwan57-breki (npm) (malicious package)
- [MAL-2025-4650](https://insights.sbomify.com/MAL-2025-4650/): Malicious code in omise-woocommerce (npm) (malicious package)
- [MAL-2025-465](https://insights.sbomify.com/MAL-2025-465/): Malicious code in godaddy-gateway (npm) (malicious package)
- [MAL-2025-46499](https://insights.sbomify.com/MAL-2025-46499/): Malicious code in venus-winston-docusaurus-aquarius (npm) (malicious package)
- [MAL-2025-46498](https://insights.sbomify.com/MAL-2025-46498/): Malicious code in vega-tailwindcss-hydrogeology-cordelia (npm) (malicious package)
- [MAL-2025-46497](https://insights.sbomify.com/MAL-2025-46497/): Malicious code in vega-areology-perseus-style-loader (npm) (malicious package)
- [MAL-2025-46496](https://insights.sbomify.com/MAL-2025-46496/): Malicious code in vdepen (npm) (malicious package)
- [MAL-2025-46495](https://insights.sbomify.com/MAL-2025-46495/): Malicious code in v-bucks-generator-2023-dkzldzd (npm) (malicious package)
- [MAL-2025-46494](https://insights.sbomify.com/MAL-2025-46494/): Malicious code in ux_websitereads (npm) (malicious package)
- [MAL-2025-46493](https://insights.sbomify.com/MAL-2025-46493/): Malicious code in utomo-telurtahu98-kyuki (npm) (malicious package)
- [MAL-2025-46492](https://insights.sbomify.com/MAL-2025-46492/): Malicious code in utomo-tek42-kyuki (npm) (malicious package)
- [MAL-2025-46491](https://insights.sbomify.com/MAL-2025-46491/): Malicious code in utomo-takokak12-breki (npm) (malicious package)
- [MAL-2025-46490](https://insights.sbomify.com/MAL-2025-46490/): Malicious code in utomo-taiwan55-breki (npm) (malicious package)
- [MAL-2025-4649](https://insights.sbomify.com/MAL-2025-4649/): Malicious code in nodyne (npm) (malicious package)
- [MAL-2025-46489](https://insights.sbomify.com/MAL-2025-46489/): Malicious code in utomo-serabi73-breki (npm) (malicious package)
- [MAL-2025-46488](https://insights.sbomify.com/MAL-2025-46488/): Malicious code in utomo-ruwet39-kyuki (npm) (malicious package)
- [MAL-2025-46487](https://insights.sbomify.com/MAL-2025-46487/): Malicious code in utomo-ragi78-kyuki (npm) (malicious package)
- [MAL-2025-46486](https://insights.sbomify.com/MAL-2025-46486/): Malicious code in utomo-naget49-kyuki (npm) (malicious package)
- [MAL-2025-46485](https://insights.sbomify.com/MAL-2025-46485/): Malicious code in utomo-miemee99-kyuki (npm) (malicious package)
- [MAL-2025-46484](https://insights.sbomify.com/MAL-2025-46484/): Malicious code in utomo-menjes72-breki (npm) (malicious package)
- [MAL-2025-46483](https://insights.sbomify.com/MAL-2025-46483/): Malicious code in utomo-ketoprak9-breki (npm) (malicious package)
- [MAL-2025-46482](https://insights.sbomify.com/MAL-2025-46482/): Malicious code in utomo-ketan46-breki (npm) (malicious package)
- [MAL-2025-46481](https://insights.sbomify.com/MAL-2025-46481/): Malicious code in utomo-gulai55-breki (npm) (malicious package)
- [MAL-2025-46480](https://insights.sbomify.com/MAL-2025-46480/): Malicious code in ursa-phoenix-hadron-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-4648](https://insights.sbomify.com/MAL-2025-4648/): Malicious code in node-prettier (npm) (malicious package)
- [MAL-2025-46479](https://insights.sbomify.com/MAL-2025-46479/): Malicious code in ursa-palynology-schema-pegasus (npm) (malicious package)
- [MAL-2025-46478](https://insights.sbomify.com/MAL-2025-46478/): Malicious code in ursa-nestjs-less-loader-sails (npm) (malicious package)
- [MAL-2025-46477](https://insights.sbomify.com/MAL-2025-46477/): Malicious code in uranology-hermes-polaris-orogeny (npm) (malicious package)
- [MAL-2025-46476](https://insights.sbomify.com/MAL-2025-46476/): Malicious code in uranology-cosmochemistry-castor-ursa (npm) (malicious package)
- [MAL-2025-46475](https://insights.sbomify.com/MAL-2025-46475/): Malicious code in upgrade-repository-dione-ora (npm) (malicious package)
- [MAL-2025-46474](https://insights.sbomify.com/MAL-2025-46474/): Malicious code in upgrade-react-bootstrap-antares-airbnb (npm) (malicious package)
- [MAL-2025-46473](https://insights.sbomify.com/MAL-2025-46473/): Malicious code in upgrade-grus-publish-aether (npm) (malicious package)
- [MAL-2025-46472](https://insights.sbomify.com/MAL-2025-46472/): Malicious code in upgrade-firebase-event-telesto (npm) (malicious package)
- [MAL-2025-46471](https://insights.sbomify.com/MAL-2025-46471/): Malicious code in updated-tricks-roblox-robux-generator-dkzskzk (npm) (malicious package)
- [MAL-2025-46470](https://insights.sbomify.com/MAL-2025-46470/): Malicious code in update-local-deneb-spawn (npm) (malicious package)
- [MAL-2025-4647](https://insights.sbomify.com/MAL-2025-4647/): Malicious code in node-pkg-state (npm) (malicious package)
- [MAL-2025-46469](https://insights.sbomify.com/MAL-2025-46469/): Malicious code in unuk-bioinformatics-wezen-webdriver-mocha (npm) (malicious package)
- [MAL-2025-46468](https://insights.sbomify.com/MAL-2025-46468/): Malicious code in unlimiteed-coin-master-free-spins-links-yikhtr (npm) (malicious package)
- [MAL-2025-46467](https://insights.sbomify.com/MAL-2025-46467/): Malicious code in unlimiteed-coin-master-free-spins-link-sfkzele (npm) (malicious package)
- [MAL-2025-46466](https://insights.sbomify.com/MAL-2025-46466/): Malicious code in unlimited-free-coin-master-spins-march-2023-efkefr (npm) (malicious package)
- [MAL-2025-46465](https://insights.sbomify.com/MAL-2025-46465/): Malicious code in unlimited-free-coin-master-spins-link-fkelf (npm) (malicious package)
- [MAL-2025-46464](https://insights.sbomify.com/MAL-2025-46464/): Malicious code in unlimited-free-coin-master-spins-link-ergrr (npm) (malicious package)
- [MAL-2025-46463](https://insights.sbomify.com/MAL-2025-46463/): Malicious code in unlimited-free-coin-master-spins-link-eggjzre (npm) (malicious package)
- [MAL-2025-46462](https://insights.sbomify.com/MAL-2025-46462/): Malicious code in unlimited-fortnite-v-bucks-and-skins-dlzldzl (npm) (malicious package)
- [MAL-2025-46461](https://insights.sbomify.com/MAL-2025-46461/): Malicious code in unlimited-coin-master-free-spins-links-ytge (npm) (malicious package)
- [MAL-2025-46460](https://insights.sbomify.com/MAL-2025-46460/): Malicious code in universal-airdrop-checker-ai (npm) (malicious package)
- [MAL-2025-4646](https://insights.sbomify.com/MAL-2025-4646/): Malicious code in modsys-cloud (npm) (malicious package)
- [MAL-2025-46459](https://insights.sbomify.com/MAL-2025-46459/): Malicious code in uninstall-enceladus-luna-testcafe (npm) (malicious package)
- [MAL-2025-46458](https://insights.sbomify.com/MAL-2025-46458/): Malicious code in umi-soto29-breki (npm) (malicious package)
- [MAL-2025-46457](https://insights.sbomify.com/MAL-2025-46457/): Malicious code in umi-semur60-breki (npm) (malicious package)
- [MAL-2025-46456](https://insights.sbomify.com/MAL-2025-46456/): Malicious code in umi-sambalado83-breki (npm) (malicious package)
- [MAL-2025-46455](https://insights.sbomify.com/MAL-2025-46455/): Malicious code in umi-rujaksoto35-breki (npm) (malicious package)
- [MAL-2025-46454](https://insights.sbomify.com/MAL-2025-46454/): Malicious code in umi-ronde82-breki (npm) (malicious package)
- [MAL-2025-46453](https://insights.sbomify.com/MAL-2025-46453/): Malicious code in umi-pisang85-breki (npm) (malicious package)
- [MAL-2025-46452](https://insights.sbomify.com/MAL-2025-46452/): Malicious code in umi-papeda96-breki (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/597/
