# Vulnerabilities published in 2025


- [MAL-2025-46361](https://insights.sbomify.com/MAL-2025-46361/): Malicious code in tomi-tumis19-breki (npm) (malicious package)
- [MAL-2025-46360](https://insights.sbomify.com/MAL-2025-46360/): Malicious code in tomi-tiwul37-kyuki (npm) (malicious package)
- [MAL-2025-4636](https://insights.sbomify.com/MAL-2025-4636/): Malicious code in @balajih4kr/postcss (npm) (malicious package)
- [MAL-2025-46359](https://insights.sbomify.com/MAL-2025-46359/): Malicious code in tomi-telur79-kyuki (npm) (malicious package)
- [MAL-2025-46358](https://insights.sbomify.com/MAL-2025-46358/): Malicious code in tomi-soto92-kyuki (npm) (malicious package)
- [MAL-2025-46357](https://insights.sbomify.com/MAL-2025-46357/): Malicious code in tomi-sambel40-breki (npm) (malicious package)
- [MAL-2025-46356](https://insights.sbomify.com/MAL-2025-46356/): Malicious code in tomi-ragi75-kyuki (npm) (malicious package)
- [MAL-2025-46355](https://insights.sbomify.com/MAL-2025-46355/): Malicious code in tomi-nasisayur85-breki (npm) (malicious package)
- [MAL-2025-46354](https://insights.sbomify.com/MAL-2025-46354/): Malicious code in tomi-mangut50-breki (npm) (malicious package)
- [MAL-2025-46353](https://insights.sbomify.com/MAL-2025-46353/): Malicious code in tomi-lontong11-breki (npm) (malicious package)
- [MAL-2025-46352](https://insights.sbomify.com/MAL-2025-46352/): Malicious code in tomi-lapis41-kyuki (npm) (malicious package)
- [MAL-2025-46351](https://insights.sbomify.com/MAL-2025-46351/): Malicious code in tomi-kembang100-breki (npm) (malicious package)
- [MAL-2025-46350](https://insights.sbomify.com/MAL-2025-46350/): Malicious code in tomi-jus12-breki (npm) (malicious package)
- [MAL-2025-4635](https://insights.sbomify.com/MAL-2025-4635/): Malicious code in yaml-mcp-wrapper (npm) (malicious package)
- [MAL-2025-46349](https://insights.sbomify.com/MAL-2025-46349/): Malicious code in tomi-gulai71-kyuki (npm) (malicious package)
- [MAL-2025-46348](https://insights.sbomify.com/MAL-2025-46348/): Malicious code in tomi-buburayam5-kyuki (npm) (malicious package)
- [MAL-2025-46347](https://insights.sbomify.com/MAL-2025-46347/): Malicious code in today-only-free-coin-master-spins-working-dzdkzs (npm) (malicious package)
- [MAL-2025-46346](https://insights.sbomify.com/MAL-2025-46346/): Malicious code in tob-shichang-pinpai-shizhanke (npm) (malicious package)
- [MAL-2025-46345](https://insights.sbomify.com/MAL-2025-46345/): Malicious code in tju-proj-mgt-raoguozheng (npm) (malicious package)
- [MAL-2025-46344](https://insights.sbomify.com/MAL-2025-46344/): Malicious code in tju-os-wu (npm) (malicious package)
- [MAL-2025-46343](https://insights.sbomify.com/MAL-2025-46343/): Malicious code in tju-os-sun (npm) (malicious package)
- [MAL-2025-46342](https://insights.sbomify.com/MAL-2025-46342/): Malicious code in tju-java-zhaozheng (npm) (malicious package)
- [MAL-2025-46341](https://insights.sbomify.com/MAL-2025-46341/): Malicious code in tju-graph-xuqing (npm) (malicious package)
- [MAL-2025-46340](https://insights.sbomify.com/MAL-2025-46340/): Malicious code in tju-db (npm) (malicious package)
- [MAL-2025-4634](https://insights.sbomify.com/MAL-2025-4634/): Malicious code in vite-logging-patchers (npm) (malicious package)
- [MAL-2025-46339](https://insights.sbomify.com/MAL-2025-46339/): Malicious code in tju-dast-lixiaohong (npm) (malicious package)
- [MAL-2025-46338](https://insights.sbomify.com/MAL-2025-46338/): Malicious code in tju-cpp-luokai (npm) (malicious package)
- [MAL-2025-46337](https://insights.sbomify.com/MAL-2025-46337/): Malicious code in tju-comp-arch-lixuewei (npm) (malicious package)
- [MAL-2025-46336](https://insights.sbomify.com/MAL-2025-46336/): Malicious code in tju-algo-gongxiujun (npm) (malicious package)
- [MAL-2025-46335](https://insights.sbomify.com/MAL-2025-46335/): Malicious code in tju-ai (npm) (malicious package)
- [MAL-2025-46334](https://insights.sbomify.com/MAL-2025-46334/): Malicious code in tiyan-sheji-anlike (npm) (malicious package)
- [MAL-2025-46333](https://insights.sbomify.com/MAL-2025-46333/): Malicious code in titan-triton-publish-selenium (npm) (malicious package)
- [MAL-2025-46332](https://insights.sbomify.com/MAL-2025-46332/): Malicious code in titan-rehype-solis-celeste (npm) (malicious package)
- [MAL-2025-46331](https://insights.sbomify.com/MAL-2025-46331/): Malicious code in tirangaclubb (npm) (malicious package)
- [MAL-2025-46330](https://insights.sbomify.com/MAL-2025-46330/): Malicious code in tiger-peony-imq263-project (npm) (malicious package)
- [MAL-2025-4633](https://insights.sbomify.com/MAL-2025-4633/): Malicious code in staking-eth (npm) (malicious package)
- [MAL-2025-46329](https://insights.sbomify.com/MAL-2025-46329/): Malicious code in tide-penguin-bpu550-project (npm) (malicious package)
- [MAL-2025-46328](https://insights.sbomify.com/MAL-2025-46328/): Malicious code in tiara-wajit9-breki (npm) (malicious package)
- [MAL-2025-46327](https://insights.sbomify.com/MAL-2025-46327/): Malicious code in tiara-semur60-breki (npm) (malicious package)
- [MAL-2025-46326](https://insights.sbomify.com/MAL-2025-46326/): Malicious code in tiara-sate59-breki (npm) (malicious package)
- [MAL-2025-46325](https://insights.sbomify.com/MAL-2025-46325/): Malicious code in tiara-sate40-breki (npm) (malicious package)
- [MAL-2025-46324](https://insights.sbomify.com/MAL-2025-46324/): Malicious code in tiara-saguer17-breki (npm) (malicious package)
- [MAL-2025-46323](https://insights.sbomify.com/MAL-2025-46323/): Malicious code in tiara-ruwet10-breki (npm) (malicious package)
- [MAL-2025-46322](https://insights.sbomify.com/MAL-2025-46322/): Malicious code in tiara-rangi11-breki (npm) (malicious package)
- [MAL-2025-46321](https://insights.sbomify.com/MAL-2025-46321/): Malicious code in tiara-mieaceh67-breki (npm) (malicious package)
- [MAL-2025-46320](https://insights.sbomify.com/MAL-2025-46320/): Malicious code in tiara-keripik56-breki (npm) (malicious package)
- [MAL-2025-4632](https://insights.sbomify.com/MAL-2025-4632/): Malicious code in rose-web3-utils (npm) (malicious package)
- [MAL-2025-46319](https://insights.sbomify.com/MAL-2025-46319/): Malicious code in tiara-gudeg98-breki (npm) (malicious package)
- [MAL-2025-46318](https://insights.sbomify.com/MAL-2025-46318/): Malicious code in tiara-empal83-breki (npm) (malicious package)
- [MAL-2025-46317](https://insights.sbomify.com/MAL-2025-46317/): Malicious code in tiara-brengkes59-kyuki (npm) (malicious package)
- [MAL-2025-46316](https://insights.sbomify.com/MAL-2025-46316/): Malicious code in tiara-bakwan18-breki (npm) (malicious package)
- [MAL-2025-46315](https://insights.sbomify.com/MAL-2025-46315/): Malicious code in tianshi-shuzi (npm) (malicious package)
- [MAL-2025-46314](https://insights.sbomify.com/MAL-2025-46314/): Malicious code in tianshi-nengliang-paidufa (npm) (malicious package)
- [MAL-2025-46313](https://insights.sbomify.com/MAL-2025-46313/): Malicious code in thuban-restart-heka-mdx (npm) (malicious package)
- [MAL-2025-46312](https://insights.sbomify.com/MAL-2025-46312/): Malicious code in thistle-opal-jdf042-project (npm) (malicious package)
- [MAL-2025-46311](https://insights.sbomify.com/MAL-2025-46311/): Malicious code in thistle-everest-clw016-project (npm) (malicious package)
- [MAL-2025-46310](https://insights.sbomify.com/MAL-2025-46310/): Malicious code in thermochronology-castor-celeste-odin (npm) (malicious package)
- [MAL-2025-4631](https://insights.sbomify.com/MAL-2025-4631/): Malicious code in rose-bsc-utils (npm) (malicious package)
- [MAL-2025-46309](https://insights.sbomify.com/MAL-2025-46309/): Malicious code in the-only-working-coin-master-generator-fkeld (npm) (malicious package)
- [MAL-2025-46308](https://insights.sbomify.com/MAL-2025-46308/): Malicious code in text-openai-embedding-js (npm) (malicious package)
- [MAL-2025-46307](https://insights.sbomify.com/MAL-2025-46307/): Malicious code in testcafe-io-phenomic-halley (npm) (malicious package)
- [MAL-2025-46306](https://insights.sbomify.com/MAL-2025-46306/): Malicious code in test-mlw2-zeist-guana-clefs-kaama (npm) (malicious package)
- [MAL-2025-46305](https://insights.sbomify.com/MAL-2025-46305/): Malicious code in test-mlw2-trump-skart-fibro-saves (npm) (malicious package)
- [MAL-2025-46304](https://insights.sbomify.com/MAL-2025-46304/): Malicious code in test-mlw2-terse-oomph-reman-mohrs (npm) (malicious package)
- [MAL-2025-46303](https://insights.sbomify.com/MAL-2025-46303/): Malicious code in test-mlw2-sprod-label (npm) (malicious package)
- [MAL-2025-46302](https://insights.sbomify.com/MAL-2025-46302/): Malicious code in test-mlw2-sored-novel-afear-neves (npm) (malicious package)
- [MAL-2025-46301](https://insights.sbomify.com/MAL-2025-46301/): Malicious code in test-mlw2-scaud-reach-sored-quipo (npm) (malicious package)
- [MAL-2025-46300](https://insights.sbomify.com/MAL-2025-46300/): Malicious code in test-mlw2-rurps-terek-grave-buffi (npm) (malicious package)
- [MAL-2025-4630](https://insights.sbomify.com/MAL-2025-4630/): Malicious code in messages-hub-realestates-lib (npm) (malicious package)
- [MAL-2025-463](https://insights.sbomify.com/MAL-2025-463/): Malicious code in godaddy-db (npm) (malicious package)
- [MAL-2025-46299](https://insights.sbomify.com/MAL-2025-46299/): Malicious code in test-mlw2-rugby-miasm-weest-halva (npm) (malicious package)
- [MAL-2025-46298](https://insights.sbomify.com/MAL-2025-46298/): Malicious code in test-mlw2-routs-tasty-grain-plods (npm) (malicious package)
- [MAL-2025-46297](https://insights.sbomify.com/MAL-2025-46297/): Malicious code in test-mlw2-rotas-bairn-peeps-hokey (npm) (malicious package)
- [MAL-2025-46296](https://insights.sbomify.com/MAL-2025-46296/): Malicious code in test-mlw2-paven-yetts-prunt-wanes (npm) (malicious package)
- [MAL-2025-46295](https://insights.sbomify.com/MAL-2025-46295/): Malicious code in test-mlw2-paven-drant (npm) (malicious package)
- [MAL-2025-46294](https://insights.sbomify.com/MAL-2025-46294/): Malicious code in test-mlw2-orgic-carol-swank-paeon (npm) (malicious package)
- [MAL-2025-46293](https://insights.sbomify.com/MAL-2025-46293/): Malicious code in test-mlw2-ngwee-greys (npm) (malicious package)
- [MAL-2025-46292](https://insights.sbomify.com/MAL-2025-46292/): Malicious code in test-mlw2-merle-pesto-wames-grisy (npm) (malicious package)
- [MAL-2025-46291](https://insights.sbomify.com/MAL-2025-46291/): Malicious code in test-mlw2-mauds-hared (npm) (malicious package)
- [MAL-2025-46290](https://insights.sbomify.com/MAL-2025-46290/): Malicious code in test-mlw2-lazar-bales-avows-inkle (npm) (malicious package)
- [MAL-2025-4629](https://insights.sbomify.com/MAL-2025-4629/): Malicious code in logs-conf (npm) (malicious package)
- [MAL-2025-46289](https://insights.sbomify.com/MAL-2025-46289/): Malicious code in test-mlw2-judas-nyala-spean-softa (npm) (malicious package)
- [MAL-2025-46288](https://insights.sbomify.com/MAL-2025-46288/): Malicious code in test-mlw2-intil-hules-totem-blabs (npm) (malicious package)
- [MAL-2025-46287](https://insights.sbomify.com/MAL-2025-46287/): Malicious code in test-mlw2-hazer-stich-octad-phews (npm) (malicious package)
- [MAL-2025-46286](https://insights.sbomify.com/MAL-2025-46286/): Malicious code in test-mlw2-haunt-carex-stirp-plash (npm) (malicious package)
- [MAL-2025-46285](https://insights.sbomify.com/MAL-2025-46285/): Malicious code in test-mlw2-flung-gaped-pheon-relay (npm) (malicious package)
- [MAL-2025-46284](https://insights.sbomify.com/MAL-2025-46284/): Malicious code in test-mlw2-fayed-kheda-sneds-wants (npm) (malicious package)
- [MAL-2025-46283](https://insights.sbomify.com/MAL-2025-46283/): Malicious code in test-mlw2-ditty-gavel-pikas-roups (npm) (malicious package)
- [MAL-2025-46282](https://insights.sbomify.com/MAL-2025-46282/): Malicious code in test-mlw2-desex-runed-noter-loave (npm) (malicious package)
- [MAL-2025-46281](https://insights.sbomify.com/MAL-2025-46281/): Malicious code in test-mlw2-corns-anise-mbira-atimy (npm) (malicious package)
- [MAL-2025-46280](https://insights.sbomify.com/MAL-2025-46280/): Malicious code in test-mlw2-chiao-tikka-kicks-betel (npm) (malicious package)
- [MAL-2025-4628](https://insights.sbomify.com/MAL-2025-4628/): Malicious code in logs-bind (npm) (malicious package)
- [MAL-2025-46279](https://insights.sbomify.com/MAL-2025-46279/): Malicious code in test-mlw2-caret-aptly-gulas-sprad (npm) (malicious package)
- [MAL-2025-46278](https://insights.sbomify.com/MAL-2025-46278/): Malicious code in test-mlw2-borde-reest-lazed-cocas (npm) (malicious package)
- [MAL-2025-46277](https://insights.sbomify.com/MAL-2025-46277/): Malicious code in test-mlw2-bocks-pagod (npm) (malicious package)
- [MAL-2025-46276](https://insights.sbomify.com/MAL-2025-46276/): Malicious code in test-mlw2-apayd-juked-adays-duped (npm) (malicious package)
- [MAL-2025-46275](https://insights.sbomify.com/MAL-2025-46275/): Malicious code in test-mlw1-zeist-guana-clefs-kaama (npm) (malicious package)
- [MAL-2025-46274](https://insights.sbomify.com/MAL-2025-46274/): Malicious code in test-mlw1-sored-novel-afear-neves (npm) (malicious package)
- [MAL-2025-46273](https://insights.sbomify.com/MAL-2025-46273/): Malicious code in test-mlw1-scaud-reach-sored-quipo (npm) (malicious package)
- [MAL-2025-46272](https://insights.sbomify.com/MAL-2025-46272/): Malicious code in test-mlw1-rurps-terek-grave-buffi (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/599/