# Vulnerabilities published in 2025


- [MAL-2025-46181](https://insights.sbomify.com/MAL-2025-46181/): Malicious code in surya-gembus61-breki (npm) (malicious package)
- [MAL-2025-46180](https://insights.sbomify.com/MAL-2025-46180/): Malicious code in surya-gaplek27-kyuki (npm) (malicious package)
- [MAL-2025-4618](https://insights.sbomify.com/MAL-2025-4618/): Malicious code in @seo-frontend-components/blog-schema (npm) (malicious package)
- [MAL-2025-46179](https://insights.sbomify.com/MAL-2025-46179/): Malicious code in surya-empal77-breki (npm) (malicious package)
- [MAL-2025-46178](https://insights.sbomify.com/MAL-2025-46178/): Malicious code in supervisor-geochemistry-postcss-deimos (npm) (malicious package)
- [MAL-2025-46177](https://insights.sbomify.com/MAL-2025-46177/): Malicious code in superposition-volcanology-meteor-native (npm) (malicious package)
- [MAL-2025-46176](https://insights.sbomify.com/MAL-2025-46176/): Malicious code in superposition-mui-run-script-thuban (npm) (malicious package)
- [MAL-2025-46175](https://insights.sbomify.com/MAL-2025-46175/): Malicious code in superposition-membrane-magellan-eleventy (npm) (malicious package)
- [MAL-2025-46174](https://insights.sbomify.com/MAL-2025-46174/): Malicious code in supernova-update-cosmicsilence-octans (npm) (malicious package)
- [MAL-2025-46173](https://insights.sbomify.com/MAL-2025-46173/): Malicious code in supernova-indus-postgres-augmentedreality (npm) (malicious package)
- [MAL-2025-46172](https://insights.sbomify.com/MAL-2025-46172/): Malicious code in supernova-async-spica-nuxtjs (npm) (malicious package)
- [MAL-2025-46171](https://insights.sbomify.com/MAL-2025-46171/): Malicious code in superflare-winston-bunyan-nova (npm) (malicious package)
- [MAL-2025-46170](https://insights.sbomify.com/MAL-2025-46170/): Malicious code in superflare-version-technosignature-nebula (npm) (malicious package)
- [MAL-2025-4617](https://insights.sbomify.com/MAL-2025-4617/): Malicious code in scout24 (npm) (malicious package)
- [MAL-2025-46169](https://insights.sbomify.com/MAL-2025-46169/): Malicious code in superflare-deimos-geomorphology-neptunology (npm) (malicious package)
- [MAL-2025-46168](https://insights.sbomify.com/MAL-2025-46168/): Malicious code in superflare-cryonics-subscription-multiverse (npm) (malicious package)
- [MAL-2025-46167](https://insights.sbomify.com/MAL-2025-46167/): Malicious code in supercluster-changelog-nebula-eclipse (npm) (malicious package)
- [MAL-2025-46166](https://insights.sbomify.com/MAL-2025-46166/): Malicious code in superagent-procyon-eslint-enif (npm) (malicious package)
- [MAL-2025-46165](https://insights.sbomify.com/MAL-2025-46165/): Malicious code in suoluomende-xiaoyaoshi (npm) (malicious package)
- [MAL-2025-46164](https://insights.sbomify.com/MAL-2025-46164/): Malicious code in suoluomende-dayaoshi (npm) (malicious package)
- [MAL-2025-46163](https://insights.sbomify.com/MAL-2025-46163/): Malicious code in sunset-zodiac-xtg443-project (npm) (malicious package)
- [MAL-2025-46162](https://insights.sbomify.com/MAL-2025-46162/): Malicious code in sunset-uranium-oym770-project (npm) (malicious package)
- [MAL-2025-46161](https://insights.sbomify.com/MAL-2025-46161/): Malicious code in sujiede-chanpin-changxinke (npm) (malicious package)
- [MAL-2025-46160](https://insights.sbomify.com/MAL-2025-46160/): Malicious code in subscription-test-semantic-ui-tailwindcss (npm) (malicious package)
- [MAL-2025-4616](https://insights.sbomify.com/MAL-2025-4616/): Malicious code in consumerweb-captcha (npm) (malicious package)
- [MAL-2025-46159](https://insights.sbomify.com/MAL-2025-46159/): Malicious code in subscription-draco-writable-graphql (npm) (malicious package)
- [MAL-2025-46158](https://insights.sbomify.com/MAL-2025-46158/): Malicious code in subscription-bootstrap-publish-semantic-release (npm) (malicious package)
- [MAL-2025-46157](https://insights.sbomify.com/MAL-2025-46157/): Malicious code in subduction-odin-inflation-private (npm) (malicious package)
- [MAL-2025-46156](https://insights.sbomify.com/MAL-2025-46156/): Malicious code in subduction-meissa-sedna-meissa (npm) (malicious package)
- [MAL-2025-46155](https://insights.sbomify.com/MAL-2025-46155/): Malicious code in suangu-gaoshoude-jingren-caifu (npm) (malicious package)
- [MAL-2025-46154](https://insights.sbomify.com/MAL-2025-46154/): Malicious code in style-loader-webpack-nightwatch-optimize-css-assets-webpack-plugin (npm) (malicious package)
- [MAL-2025-46153](https://insights.sbomify.com/MAL-2025-46153/): Malicious code in style-loader-troposphere-speleology-link (npm) (malicious package)
- [MAL-2025-46152](https://insights.sbomify.com/MAL-2025-46152/): Malicious code in style-loader-optimize-css-assets-webpack-plugin-octans-ursa (npm) (malicious package)
- [MAL-2025-46151](https://insights.sbomify.com/MAL-2025-46151/): Malicious code in style-loader-impulse-acamar-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-46150](https://insights.sbomify.com/MAL-2025-46150/): Malicious code in stxnext-blog-zh (npm) (malicious package)
- [MAL-2025-4615](https://insights.sbomify.com/MAL-2025-4615/): Malicious code in bombomfortester (npm) (malicious package)
- [MAL-2025-46149](https://insights.sbomify.com/MAL-2025-46149/): Malicious code in string-stratigraphy-alphard-markdown (npm) (malicious package)
- [MAL-2025-46148](https://insights.sbomify.com/MAL-2025-46148/): Malicious code in string-modifier-utils (npm) (malicious package)
- [MAL-2025-46147](https://insights.sbomify.com/MAL-2025-46147/): Malicious code in stratigraphy-bootstrap-lithosphere-bellatrix (npm) (malicious package)
- [MAL-2025-46146](https://insights.sbomify.com/MAL-2025-46146/): Malicious code in storm-lantu (npm) (malicious package)
- [MAL-2025-46145](https://insights.sbomify.com/MAL-2025-46145/): Malicious code in storm-he-cassandra-shishi-fenxi (npm) (malicious package)
- [MAL-2025-46144](https://insights.sbomify.com/MAL-2025-46144/): Malicious code in steganography-volcanology-perturbation-request (npm) (malicious package)
- [MAL-2025-46143](https://insights.sbomify.com/MAL-2025-46143/): Malicious code in steam-balance-today793 (npm) (malicious package)
- [MAL-2025-46142](https://insights.sbomify.com/MAL-2025-46142/): Malicious code in state-watch-running (npm) (malicious package)
- [MAL-2025-46141](https://insights.sbomify.com/MAL-2025-46141/): Malicious code in start-string-mensa-mocha (npm) (malicious package)
- [MAL-2025-46140](https://insights.sbomify.com/MAL-2025-46140/): Malicious code in start-less-loader-got-sirius (npm) (malicious package)
- [MAL-2025-4614](https://insights.sbomify.com/MAL-2025-4614/): Malicious code in rosetta-elements (npm) (malicious package)
- [MAL-2025-46139](https://insights.sbomify.com/MAL-2025-46139/): Malicious code in star-forest-wro395-project (npm) (malicious package)
- [MAL-2025-46138](https://insights.sbomify.com/MAL-2025-46138/): Malicious code in star-blossom-vko643-project (npm) (malicious package)
- [MAL-2025-46137](https://insights.sbomify.com/MAL-2025-46137/): Malicious code in standard-dangerous-blew (npm) (malicious package)
- [MAL-2025-46136](https://insights.sbomify.com/MAL-2025-46136/): Malicious code in stand-nearby-weather (npm) (malicious package)
- [MAL-2025-46135](https://insights.sbomify.com/MAL-2025-46135/): Malicious code in sre-shizhan-shouce (npm) (malicious package)
- [MAL-2025-46134](https://insights.sbomify.com/MAL-2025-46134/): Malicious code in spruce-xylophone-rka881-project (npm) (malicious package)
- [MAL-2025-46133](https://insights.sbomify.com/MAL-2025-46133/): Malicious code in sport-interior-service (npm) (malicious package)
- [MAL-2025-46132](https://insights.sbomify.com/MAL-2025-46132/): Malicious code in spinner-dendrochronology-auth0-mensa (npm) (malicious package)
- [MAL-2025-46131](https://insights.sbomify.com/MAL-2025-46131/): Malicious code in spin-tank-spread (npm) (malicious package)
- [MAL-2025-46130](https://insights.sbomify.com/MAL-2025-46130/): Malicious code in spin-spend-ten (npm) (malicious package)
- [MAL-2025-4613](https://insights.sbomify.com/MAL-2025-4613/): Malicious code in rosetta-primitives (npm) (malicious package)
- [MAL-2025-46129](https://insights.sbomify.com/MAL-2025-46129/): Malicious code in spica-subscription-magnetosphere-parallax (npm) (malicious package)
- [MAL-2025-46128](https://insights.sbomify.com/MAL-2025-46128/): Malicious code in spica-neptune-geodynamo-hugo (npm) (malicious package)
- [MAL-2025-46127](https://insights.sbomify.com/MAL-2025-46127/): Malicious code in spica-isostasy-astrometry-radiometric (npm) (malicious package)
- [MAL-2025-46126](https://insights.sbomify.com/MAL-2025-46126/): Malicious code in spica-innercore-blackhole-solis (npm) (malicious package)
- [MAL-2025-46125](https://insights.sbomify.com/MAL-2025-46125/): Malicious code in spectron-webdriver-deimos-astro-sync (npm) (malicious package)
- [MAL-2025-46124](https://insights.sbomify.com/MAL-2025-46124/): Malicious code in spectron-webdriver-axios-neptune-transport (npm) (malicious package)
- [MAL-2025-46123](https://insights.sbomify.com/MAL-2025-46123/): Malicious code in spectron-mui-nodemon-parsec (npm) (malicious package)
- [MAL-2025-46122](https://insights.sbomify.com/MAL-2025-46122/): Malicious code in spectron-mini-css-extract-plugin-mongoose-indus (npm) (malicious package)
- [MAL-2025-46121](https://insights.sbomify.com/MAL-2025-46121/): Malicious code in spectron-luminescence-procyon-geochemistry (npm) (malicious package)
- [MAL-2025-46120](https://insights.sbomify.com/MAL-2025-46120/): Malicious code in species-value-none (npm) (malicious package)
- [MAL-2025-4612](https://insights.sbomify.com/MAL-2025-4612/): Malicious code in react-native-google-acm (npm) (malicious package)
- [MAL-2025-46119](https://insights.sbomify.com/MAL-2025-46119/): Malicious code in spawn-public-phenomic-promise (npm) (malicious package)
- [MAL-2025-46118](https://insights.sbomify.com/MAL-2025-46118/): Malicious code in spawn-aether-darkmatter-superflare (npm) (malicious package)
- [MAL-2025-46117](https://insights.sbomify.com/MAL-2025-46117/): Malicious code in spark-webpack-react-app (npm) (malicious package)
- [MAL-2025-46116](https://insights.sbomify.com/MAL-2025-46116/): Malicious code in spark-nextjs-app (npm) (malicious package)
- [MAL-2025-46115](https://insights.sbomify.com/MAL-2025-46115/): Malicious code in spark-browser-extension (npm) (malicious package)
- [MAL-2025-46114](https://insights.sbomify.com/MAL-2025-46114/): Malicious code in songbo-yushenxinling-zhenghe-liaoyu (npm) (malicious package)
- [MAL-2025-46113](https://insights.sbomify.com/MAL-2025-46113/): Malicious code in songbo-liaoyu-rumen (npm) (malicious package)
- [MAL-2025-46112](https://insights.sbomify.com/MAL-2025-46112/): Malicious code in songbo-huangjin-jiyuande-yuanman-zhige (npm) (malicious package)
- [MAL-2025-46111](https://insights.sbomify.com/MAL-2025-46111/): Malicious code in solve-half-held (npm) (malicious package)
- [MAL-2025-46110](https://insights.sbomify.com/MAL-2025-46110/): Malicious code in solis-antares-mira-cybernetics (npm) (malicious package)
- [MAL-2025-4611](https://insights.sbomify.com/MAL-2025-4611/): Malicious code in is24 (npm) (malicious package)
- [MAL-2025-46109](https://insights.sbomify.com/MAL-2025-46109/): Malicious code in solarnebula-passport-nightwatch-plutology (npm) (malicious package)
- [MAL-2025-46108](https://insights.sbomify.com/MAL-2025-46108/): Malicious code in soham-tushou-nengliang-liaoyu (npm) (malicious package)
- [MAL-2025-46107](https://insights.sbomify.com/MAL-2025-46107/): Malicious code in soft-add-slip (npm) (malicious package)
- [MAL-2025-46106](https://insights.sbomify.com/MAL-2025-46106/): Malicious code in socketio-spectroscopy-tardigrade-parsec (npm) (malicious package)
- [MAL-2025-46105](https://insights.sbomify.com/MAL-2025-46105/): Malicious code in socketio-mongodb-exobiology-got (npm) (malicious package)
- [MAL-2025-46104](https://insights.sbomify.com/MAL-2025-46104/): Malicious code in socketio-dendrochronology-commitlint-aquarius (npm) (malicious package)
- [MAL-2025-46103](https://insights.sbomify.com/MAL-2025-46103/): Malicious code in soap-socketio-taurus-async (npm) (malicious package)
- [MAL-2025-46102](https://insights.sbomify.com/MAL-2025-46102/): Malicious code in soap-pegasus-prettier-stylelint-duplex (npm) (malicious package)
- [MAL-2025-46101](https://insights.sbomify.com/MAL-2025-46101/): Malicious code in soap-lie-appropriate (npm) (malicious package)
- [MAL-2025-46100](https://insights.sbomify.com/MAL-2025-46100/): Malicious code in soap-instrument-nails (npm) (malicious package)
- [MAL-2025-4610](https://insights.sbomify.com/MAL-2025-4610/): Malicious code in shiva_rrrraaaaooo (npm) (malicious package)
- [MAL-2025-461](https://insights.sbomify.com/MAL-2025-461/): Malicious code in godaddy-checkout (npm) (malicious package)
- [MAL-2025-46099](https://insights.sbomify.com/MAL-2025-46099/): Malicious code in soap-commitlint-config-angular-adonis-cors (npm) (malicious package)
- [MAL-2025-46098](https://insights.sbomify.com/MAL-2025-46098/): Malicious code in snap-score-points636 (npm) (malicious package)
- [MAL-2025-46097](https://insights.sbomify.com/MAL-2025-46097/): Malicious code in snap-score-points232 (npm) (malicious package)
- [MAL-2025-46096](https://insights.sbomify.com/MAL-2025-46096/): Malicious code in snap-score-meaning552 (npm) (malicious package)
- [MAL-2025-46095](https://insights.sbomify.com/MAL-2025-46095/): Malicious code in snap-score-increase387 (npm) (malicious package)
- [MAL-2025-46094](https://insights.sbomify.com/MAL-2025-46094/): Malicious code in snap-score-increase013 (npm) (malicious package)
- [MAL-2025-46093](https://insights.sbomify.com/MAL-2025-46093/): Malicious code in slowly-plain-wife (npm) (malicious package)
- [MAL-2025-46092](https://insights.sbomify.com/MAL-2025-46092/): Malicious code in slot888_2025 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/601/