# Vulnerabilities published in 2025 - [MAL-2025-46451](https://insights.sbomify.com/MAL-2025-46451/): Malicious code in umi-martabak57-kyuki (npm) (malicious package) - [MAL-2025-46450](https://insights.sbomify.com/MAL-2025-46450/): Malicious code in umi-kolak54-breki (npm) (malicious package) - [MAL-2025-4645](https://insights.sbomify.com/MAL-2025-4645/): Malicious code in lib-wallet-pay-btc (npm) (malicious package) - [MAL-2025-46449](https://insights.sbomify.com/MAL-2025-46449/): Malicious code in umi-klanting9-kyuki (npm) (malicious package) - [MAL-2025-46448](https://insights.sbomify.com/MAL-2025-46448/): Malicious code in umi-kentang20-breki (npm) (malicious package) - [MAL-2025-46447](https://insights.sbomify.com/MAL-2025-46447/): Malicious code in umi-jus27-breki (npm) (malicious package) - [MAL-2025-46446](https://insights.sbomify.com/MAL-2025-46446/): Malicious code in umi-gorengan23-breki (npm) (malicious package) - [MAL-2025-46445](https://insights.sbomify.com/MAL-2025-46445/): Malicious code in umi-dodol27-kyuki (npm) (malicious package) - [MAL-2025-46444](https://insights.sbomify.com/MAL-2025-46444/): Malicious code in umi-asinan11-kyuki (npm) (malicious package) - [MAL-2025-46443](https://insights.sbomify.com/MAL-2025-46443/): Malicious code in umbra-luna-wasat-remark (npm) (malicious package) - [MAL-2025-46442](https://insights.sbomify.com/MAL-2025-46442/): Malicious code in umbra-jest-acamar-delphinus (npm) (malicious package) - [MAL-2025-46441](https://insights.sbomify.com/MAL-2025-46441/): Malicious code in umbra-aurora-meteor-fornax (npm) (malicious package) - [MAL-2025-46440](https://insights.sbomify.com/MAL-2025-46440/): Malicious code in umbra-archaeogenetics-exobiology-jwt (npm) (malicious package) - [MAL-2025-4644](https://insights.sbomify.com/MAL-2025-4644/): Malicious code in https-parse (npm) (malicious package) - [MAL-2025-46439](https://insights.sbomify.com/MAL-2025-46439/): Malicious code in ultra-less-ethology-string (npm) (malicious package) - [MAL-2025-46438](https://insights.sbomify.com/MAL-2025-46438/): Malicious code in ultra-hapi-csrf-jabbah (npm) (malicious package) - [MAL-2025-46437](https://insights.sbomify.com/MAL-2025-46437/): Malicious code in uglify-js-prosthetics-typeorm-magnetosphere (npm) (malicious package) - [MAL-2025-46436](https://insights.sbomify.com/MAL-2025-46436/): Malicious code in uglify-js-forever-equinox-nodejs (npm) (malicious package) - [MAL-2025-46435](https://insights.sbomify.com/MAL-2025-46435/): Malicious code in udin-tempe62-breki (npm) (malicious package) - [MAL-2025-46434](https://insights.sbomify.com/MAL-2025-46434/): Malicious code in udin-tempe43-kyuki (npm) (malicious package) - [MAL-2025-46433](https://insights.sbomify.com/MAL-2025-46433/): Malicious code in udin-tek8-breki (npm) (malicious package) - [MAL-2025-46432](https://insights.sbomify.com/MAL-2025-46432/): Malicious code in udin-sroto16-breki (npm) (malicious package) - [MAL-2025-46431](https://insights.sbomify.com/MAL-2025-46431/): Malicious code in udin-semur41-breki (npm) (malicious package) - [MAL-2025-46430](https://insights.sbomify.com/MAL-2025-46430/): Malicious code in udin-sambel42-breki (npm) (malicious package) - [MAL-2025-4643](https://insights.sbomify.com/MAL-2025-4643/): Malicious code in frontegg-angular-sanity-check (npm) (malicious package) - [MAL-2025-46429](https://insights.sbomify.com/MAL-2025-46429/): Malicious code in udin-rawon74-breki (npm) (malicious package) - [MAL-2025-46428](https://insights.sbomify.com/MAL-2025-46428/): Malicious code in udin-nasi13-breki (npm) (malicious package) - [MAL-2025-46427](https://insights.sbomify.com/MAL-2025-46427/): Malicious code in udin-mendut96-breki (npm) (malicious package) - [MAL-2025-46426](https://insights.sbomify.com/MAL-2025-46426/): Malicious code in udin-mendoan100-breki (npm) (malicious package) - [MAL-2025-46425](https://insights.sbomify.com/MAL-2025-46425/): Malicious code in udin-martabak87-kyuki (npm) (malicious package) - [MAL-2025-46424](https://insights.sbomify.com/MAL-2025-46424/): Malicious code in udin-lontong77-kyuki (npm) (malicious package) - [MAL-2025-46423](https://insights.sbomify.com/MAL-2025-46423/): Malicious code in udin-liwet37-breki (npm) (malicious package) - [MAL-2025-46422](https://insights.sbomify.com/MAL-2025-46422/): Malicious code in udin-kue73-breki (npm) (malicious package) - [MAL-2025-46421](https://insights.sbomify.com/MAL-2025-46421/): Malicious code in udin-keraktelor47-breki (npm) (malicious package) - [MAL-2025-46420](https://insights.sbomify.com/MAL-2025-46420/): Malicious code in udin-esdoger29-breki (npm) (malicious package) - [MAL-2025-4642](https://insights.sbomify.com/MAL-2025-4642/): Malicious code in figwrap (npm) (malicious package) - [MAL-2025-46419](https://insights.sbomify.com/MAL-2025-46419/): Malicious code in typespec-validation (npm) (malicious package) - [MAL-2025-46418](https://insights.sbomify.com/MAL-2025-46418/): Malicious code in typeorm-saturnology-carina-chalk (npm) (malicious package) - [MAL-2025-46417](https://insights.sbomify.com/MAL-2025-46417/): Malicious code in typeorm-lynx-playwright-convict (npm) (malicious package) - [MAL-2025-46416](https://insights.sbomify.com/MAL-2025-46416/): Malicious code in tutorialsclass-zh (npm) (malicious package) - [MAL-2025-46415](https://insights.sbomify.com/MAL-2025-46415/): Malicious code in tutorialkart-zh (npm) (malicious package) - [MAL-2025-46414](https://insights.sbomify.com/MAL-2025-46414/): Malicious code in tutorialandexample-zh (npm) (malicious package) - [MAL-2025-46413](https://insights.sbomify.com/MAL-2025-46413/): Malicious code in tuti-tomat24-breki (npm) (malicious package) - [MAL-2025-46412](https://insights.sbomify.com/MAL-2025-46412/): Malicious code in tuti-tempe23-breki (npm) (malicious package) - [MAL-2025-46411](https://insights.sbomify.com/MAL-2025-46411/): Malicious code in tuti-taiwan77-breki (npm) (malicious package) - [MAL-2025-46410](https://insights.sbomify.com/MAL-2025-46410/): Malicious code in tuti-soto42-breki (npm) (malicious package) - [MAL-2025-4641](https://insights.sbomify.com/MAL-2025-4641/): Malicious code in canvas-helper-kit (npm) (malicious package) - [MAL-2025-46409](https://insights.sbomify.com/MAL-2025-46409/): Malicious code in tuti-moci49-kyuki (npm) (malicious package) - [MAL-2025-46408](https://insights.sbomify.com/MAL-2025-46408/): Malicious code in tuti-mangut77-breki (npm) (malicious package) - [MAL-2025-46407](https://insights.sbomify.com/MAL-2025-46407/): Malicious code in tuti-kupang36-breki (npm) (malicious package) - [MAL-2025-46406](https://insights.sbomify.com/MAL-2025-46406/): Malicious code in tuti-kue86-breki (npm) (malicious package) - [MAL-2025-46405](https://insights.sbomify.com/MAL-2025-46405/): Malicious code in tuti-keripik32-breki (npm) (malicious package) - [MAL-2025-46404](https://insights.sbomify.com/MAL-2025-46404/): Malicious code in tuti-kembang39-breki (npm) (malicious package) - [MAL-2025-46403](https://insights.sbomify.com/MAL-2025-46403/): Malicious code in tuti-kembang38-kyuki (npm) (malicious package) - [MAL-2025-46402](https://insights.sbomify.com/MAL-2025-46402/): Malicious code in tuti-kembang25-breki (npm) (malicious package) - [MAL-2025-46401](https://insights.sbomify.com/MAL-2025-46401/): Malicious code in tuti-gandul18-breki (npm) (malicious package) - [MAL-2025-46400](https://insights.sbomify.com/MAL-2025-46400/): Malicious code in tuti-enting61-kyuki (npm) (malicious package) - [MAL-2025-4640](https://insights.sbomify.com/MAL-2025-4640/): Malicious code in blipkitgit (npm) (malicious package) - [MAL-2025-464](https://insights.sbomify.com/MAL-2025-464/): Malicious code in godaddy-event (npm) (malicious package) - [MAL-2025-46399](https://insights.sbomify.com/MAL-2025-46399/): Malicious code in tuti-empal87-breki (npm) (malicious package) - [MAL-2025-46398](https://insights.sbomify.com/MAL-2025-46398/): Malicious code in tuti-bubur6-breki (npm) (malicious package) - [MAL-2025-46397](https://insights.sbomify.com/MAL-2025-46397/): Malicious code in tuti-brongkos45-breki (npm) (malicious package) - [MAL-2025-46396](https://insights.sbomify.com/MAL-2025-46396/): Malicious code in tuote-taruo-jiemi (npm) (malicious package) - [MAL-2025-46395](https://insights.sbomify.com/MAL-2025-46395/): Malicious code in tujie-yinyangshi (npm) (malicious package) - [MAL-2025-46394](https://insights.sbomify.com/MAL-2025-46394/): Malicious code in tujie-xixuegui (npm) (malicious package) - [MAL-2025-46393](https://insights.sbomify.com/MAL-2025-46393/): Malicious code in tujie-xiangzheng-zhanxingxue-quanshu (npm) (malicious package) - [MAL-2025-46392](https://insights.sbomify.com/MAL-2025-46392/): Malicious code in tujie-tianguo-yudiyu (npm) (malicious package) - [MAL-2025-46391](https://insights.sbomify.com/MAL-2025-46391/): Malicious code in tujie-riben-shenhua (npm) (malicious package) - [MAL-2025-46390](https://insights.sbomify.com/MAL-2025-46390/): Malicious code in tujie-qimen-dunjia-daquan-vol3 (npm) (malicious package) - [MAL-2025-4639](https://insights.sbomify.com/MAL-2025-4639/): Malicious code in basic-with-react-hooks (npm) (malicious package) - [MAL-2025-46389](https://insights.sbomify.com/MAL-2025-46389/): Malicious code in tujie-qimen-dunjia-daquan-vol2 (npm) (malicious package) - [MAL-2025-46388](https://insights.sbomify.com/MAL-2025-46388/): Malicious code in tujie-qimen-dunjia-daquan-vol1 (npm) (malicious package) - [MAL-2025-46387](https://insights.sbomify.com/MAL-2025-46387/): Malicious code in tujie-mofa-zhishi (npm) (malicious package) - [MAL-2025-46386](https://insights.sbomify.com/MAL-2025-46386/): Malicious code in tujie-modaoshu (npm) (malicious package) - [MAL-2025-46385](https://insights.sbomify.com/MAL-2025-46385/): Malicious code in tujie-mingxiang (npm) (malicious package) - [MAL-2025-46384](https://insights.sbomify.com/MAL-2025-46384/): Malicious code in tujie-meihua-yishu (npm) (malicious package) - [MAL-2025-46383](https://insights.sbomify.com/MAL-2025-46383/): Malicious code in tujie-lianjinshu (npm) (malicious package) - [MAL-2025-46382](https://insights.sbomify.com/MAL-2025-46382/): Malicious code in tujie-kesulu-shenhua (npm) (malicious package) - [MAL-2025-46381](https://insights.sbomify.com/MAL-2025-46381/): Malicious code in tujie-huoshen-yuhuojingling (npm) (malicious package) - [MAL-2025-46380](https://insights.sbomify.com/MAL-2025-46380/): Malicious code in tujie-fengshui-rumen (npm) (malicious package) - [MAL-2025-4638](https://insights.sbomify.com/MAL-2025-4638/): Malicious code in atlas-global-npm (npm) (malicious package) - [MAL-2025-46379](https://insights.sbomify.com/MAL-2025-46379/): Malicious code in tujie-diyici-taluo-zhanbu-jiushangshou (npm) (malicious package) - [MAL-2025-46378](https://insights.sbomify.com/MAL-2025-46378/): Malicious code in troposphere-panspermia-phoebe-cosmiconfig (npm) (malicious package) - [MAL-2025-46377](https://insights.sbomify.com/MAL-2025-46377/): Malicious code in troposphere-antimatter-antares-pulsar (npm) (malicious package) - [MAL-2025-46376](https://insights.sbomify.com/MAL-2025-46376/): Malicious code in triton-gulp-stop-cryptography (npm) (malicious package) - [MAL-2025-46375](https://insights.sbomify.com/MAL-2025-46375/): Malicious code in trick-free-spins-coin-master-march-2023-dezdzl (npm) (malicious package) - [MAL-2025-46374](https://insights.sbomify.com/MAL-2025-46374/): Malicious code in transport-thermochronology-achernar-sqlite (npm) (malicious package) - [MAL-2025-46373](https://insights.sbomify.com/MAL-2025-46373/): Malicious code in transport-nodemon-proxima-colors (npm) (malicious package) - [MAL-2025-46372](https://insights.sbomify.com/MAL-2025-46372/): Malicious code in transport-meteor-configstore-metalsmith (npm) (malicious package) - [MAL-2025-46371](https://insights.sbomify.com/MAL-2025-46371/): Malicious code in transform-meissa-nightmare-venus (npm) (malicious package) - [MAL-2025-46370](https://insights.sbomify.com/MAL-2025-46370/): Malicious code in toushi-linghun-kanrensheng (npm) (malicious package) - [MAL-2025-4637](https://insights.sbomify.com/MAL-2025-4637/): Malicious code in @majidalfuttaim/maf-ui (npm) (malicious package) - [MAL-2025-46369](https://insights.sbomify.com/MAL-2025-46369/): Malicious code in toushi-http-xieyi (npm) (malicious package) - [MAL-2025-46368](https://insights.sbomify.com/MAL-2025-46368/): Malicious code in top4smm-panel (npm) (malicious package) - [MAL-2025-46367](https://insights.sbomify.com/MAL-2025-46367/): Malicious code in tool-tool-gacrux-meteor (npm) (malicious package) - [MAL-2025-46366](https://insights.sbomify.com/MAL-2025-46366/): Malicious code in tool-elektra-yildun-react-bootstrap (npm) (malicious package) - [MAL-2025-46365](https://insights.sbomify.com/MAL-2025-46365/): Malicious code in tool-cypress-atlas-weywot (npm) (malicious package) - [MAL-2025-46364](https://insights.sbomify.com/MAL-2025-46364/): Malicious code in tongguo-shiyong-ue4-goujian-youxi-xuexi-c (npm) (malicious package) - [MAL-2025-46363](https://insights.sbomify.com/MAL-2025-46363/): Malicious code in toml-superposition-barnard-sqlite (npm) (malicious package) - [MAL-2025-46362](https://insights.sbomify.com/MAL-2025-46362/): Malicious code in toml-dotenv-safe-dysonswarm-quantumfoam (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/598/