# Vulnerabilities published in 2025


- [MAL-2025-45641](https://insights.sbomify.com/MAL-2025-45641/): Malicious code in putri-kentang5-breki (npm) (malicious package)
- [MAL-2025-45640](https://insights.sbomify.com/MAL-2025-45640/): Malicious code in putri-jus80-breki (npm) (malicious package)
- [MAL-2025-4564](https://insights.sbomify.com/MAL-2025-4564/): Malicious code in iot-sdk-device-client-rest-api (npm) (malicious package)
- [MAL-2025-45639](https://insights.sbomify.com/MAL-2025-45639/): Malicious code in putri-jamblang67-breki (npm) (malicious package)
- [MAL-2025-45638](https://insights.sbomify.com/MAL-2025-45638/): Malicious code in putri-gembus71-breki (npm) (malicious package)
- [MAL-2025-45637](https://insights.sbomify.com/MAL-2025-45637/): Malicious code in putri-gembus12-breki (npm) (malicious package)
- [MAL-2025-45636](https://insights.sbomify.com/MAL-2025-45636/): Malicious code in putri-gado-gado28-breki (npm) (malicious package)
- [MAL-2025-45635](https://insights.sbomify.com/MAL-2025-45635/): Malicious code in putri-asinan21-kyuki (npm) (malicious package)
- [MAL-2025-45634](https://insights.sbomify.com/MAL-2025-45634/): Malicious code in putra-ubi17-breki (npm) (malicious package)
- [MAL-2025-45633](https://insights.sbomify.com/MAL-2025-45633/): Malicious code in putra-soto2-kyuki (npm) (malicious package)
- [MAL-2025-45632](https://insights.sbomify.com/MAL-2025-45632/): Malicious code in putra-saguer17-breki (npm) (malicious package)
- [MAL-2025-45631](https://insights.sbomify.com/MAL-2025-45631/): Malicious code in putra-ragi15-breki (npm) (malicious package)
- [MAL-2025-45630](https://insights.sbomify.com/MAL-2025-45630/): Malicious code in putra-mieaceh37-breki (npm) (malicious package)
- [MAL-2025-4563](https://insights.sbomify.com/MAL-2025-4563/): Malicious code in inter-dc-lib (npm) (malicious package)
- [MAL-2025-45629](https://insights.sbomify.com/MAL-2025-45629/): Malicious code in putra-menjes64-breki (npm) (malicious package)
- [MAL-2025-45628](https://insights.sbomify.com/MAL-2025-45628/): Malicious code in putra-mendut34-kyuki (npm) (malicious package)
- [MAL-2025-45627](https://insights.sbomify.com/MAL-2025-45627/): Malicious code in putra-lontong28-breki (npm) (malicious package)
- [MAL-2025-45626](https://insights.sbomify.com/MAL-2025-45626/): Malicious code in putra-kue42-breki (npm) (malicious package)
- [MAL-2025-45625](https://insights.sbomify.com/MAL-2025-45625/): Malicious code in putra-jengkol86-kyuki (npm) (malicious package)
- [MAL-2025-45624](https://insights.sbomify.com/MAL-2025-45624/): Malicious code in putra-jamblang69-breki (npm) (malicious package)
- [MAL-2025-45623](https://insights.sbomify.com/MAL-2025-45623/): Malicious code in putra-ikan33-breki (npm) (malicious package)
- [MAL-2025-45622](https://insights.sbomify.com/MAL-2025-45622/): Malicious code in putra-gepuk61-kyuki (npm) (malicious package)
- [MAL-2025-45621](https://insights.sbomify.com/MAL-2025-45621/): Malicious code in putra-gepuk60-breki (npm) (malicious package)
- [MAL-2025-45620](https://insights.sbomify.com/MAL-2025-45620/): Malicious code in putra-gembus10-breki (npm) (malicious package)
- [MAL-2025-4562](https://insights.sbomify.com/MAL-2025-4562/): Malicious code in html-report (npm) (malicious package)
- [MAL-2025-45619](https://insights.sbomify.com/MAL-2025-45619/): Malicious code in putra-brongkos78-breki (npm) (malicious package)
- [MAL-2025-45618](https://insights.sbomify.com/MAL-2025-45618/): Malicious code in puppeteer-saturnology-baryon-jekyll (npm) (malicious package)
- [MAL-2025-45617](https://insights.sbomify.com/MAL-2025-45617/): Malicious code in pulsar-quito-cosmiconfig-triton (npm) (malicious package)
- [MAL-2025-45616](https://insights.sbomify.com/MAL-2025-45616/): Malicious code in publish-spectron-webdriver-kinetic-lint-staged (npm) (malicious package)
- [MAL-2025-45615](https://insights.sbomify.com/MAL-2025-45615/): Malicious code in publish-exec-quasar-puppeteer (npm) (malicious package)
- [MAL-2025-45614](https://insights.sbomify.com/MAL-2025-45614/): Malicious code in proxima-ignite-astro-protoplanetarydisk (npm) (malicious package)
- [MAL-2025-45613](https://insights.sbomify.com/MAL-2025-45613/): Malicious code in proxima-csrf-farout-despina (npm) (malicious package)
- [MAL-2025-45612](https://insights.sbomify.com/MAL-2025-45612/): Malicious code in proxima-bunyan-got-morgan (npm) (malicious package)
- [MAL-2025-45611](https://insights.sbomify.com/MAL-2025-45611/): Malicious code in protractor-phoebe-antares-csv (npm) (malicious package)
- [MAL-2025-45610](https://insights.sbomify.com/MAL-2025-45610/): Malicious code in protoplanetarydisk-europa-orbit-phylogenetics (npm) (malicious package)
- [MAL-2025-4561](https://insights.sbomify.com/MAL-2025-4561/): Malicious code in halodoc (npm) (malicious package)
- [MAL-2025-45609](https://insights.sbomify.com/MAL-2025-45609/): Malicious code in proteomics-despina-mysql-epigenetics (npm) (malicious package)
- [MAL-2025-45608](https://insights.sbomify.com/MAL-2025-45608/): Malicious code in prosthetics-petrology-markdownlint-command (npm) (malicious package)
- [MAL-2025-45607](https://insights.sbomify.com/MAL-2025-45607/): Malicious code in prompts-hermes-electron-altair (npm) (malicious package)
- [MAL-2025-45606](https://insights.sbomify.com/MAL-2025-45606/): Malicious code in prompts-gravity-schema-mensa (npm) (malicious package)
- [MAL-2025-45605](https://insights.sbomify.com/MAL-2025-45605/): Malicious code in promise-with-resolvers-polyfill (npm) (malicious package)
- [MAL-2025-45604](https://insights.sbomify.com/MAL-2025-45604/): Malicious code in promise-with-resolvers-polyfil (npm) (malicious package)
- [MAL-2025-45603](https://insights.sbomify.com/MAL-2025-45603/): Malicious code in promise-lightyear-chariklo-joviology (npm) (malicious package)
- [MAL-2025-45602](https://insights.sbomify.com/MAL-2025-45602/): Malicious code in promise-dendrochronology-await-library (npm) (malicious package)
- [MAL-2025-45601](https://insights.sbomify.com/MAL-2025-45601/): Malicious code in programiz-zh (npm) (malicious package)
- [MAL-2025-45600](https://insights.sbomify.com/MAL-2025-45600/): Malicious code in procyon-xo-meteor-jupiter (npm) (malicious package)
- [MAL-2025-4560](https://insights.sbomify.com/MAL-2025-4560/): Malicious code in gateway-v2 (npm) (malicious package)
- [MAL-2025-456](https://insights.sbomify.com/MAL-2025-456/): Malicious code in godaddy-admin (npm) (malicious package)
- [MAL-2025-45599](https://insights.sbomify.com/MAL-2025-45599/): Malicious code in procyon-typeorm-pegasus-backend (npm) (malicious package)
- [MAL-2025-45598](https://insights.sbomify.com/MAL-2025-45598/): Malicious code in procyon-cz-conventional-changelog-lynx-fetch (npm) (malicious package)
- [MAL-2025-45597](https://insights.sbomify.com/MAL-2025-45597/): Malicious code in procyon-andromeda-nebula-epimetheus (npm) (malicious package)
- [MAL-2025-45596](https://insights.sbomify.com/MAL-2025-45596/): Malicious code in private-stop-draco-relay (npm) (malicious package)
- [MAL-2025-45595](https://insights.sbomify.com/MAL-2025-45595/): Malicious code in private-sails-grus-slidev (npm) (malicious package)
- [MAL-2025-45594](https://insights.sbomify.com/MAL-2025-45594/): Malicious code in private-oauth-jsonp-geomorphology (npm) (malicious package)
- [MAL-2025-45593](https://insights.sbomify.com/MAL-2025-45593/): Malicious code in private-geochronology-cosmicweb-paleoceanography (npm) (malicious package)
- [MAL-2025-45592](https://insights.sbomify.com/MAL-2025-45592/): Malicious code in private-dep-with-frontend-plugin-index-path (npm) (malicious package)
- [MAL-2025-45591](https://insights.sbomify.com/MAL-2025-45591/): Malicious code in principles-zh (npm) (malicious package)
- [MAL-2025-45590](https://insights.sbomify.com/MAL-2025-45590/): Malicious code in primitive-affect-turn (npm) (malicious package)
- [MAL-2025-4559](https://insights.sbomify.com/MAL-2025-4559/): Malicious code in fxa-shared-110n (npm) (malicious package)
- [MAL-2025-45589](https://insights.sbomify.com/MAL-2025-45589/): Malicious code in prettier-stylelint-event-sadr-init (npm) (malicious package)
- [MAL-2025-45588](https://insights.sbomify.com/MAL-2025-45588/): Malicious code in prettier-plugin-markdown-sadr-loop-decoherence (npm) (malicious package)
- [MAL-2025-45587](https://insights.sbomify.com/MAL-2025-45587/): Malicious code in prettier-plugin-markdown-regulus-halley-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-45586](https://insights.sbomify.com/MAL-2025-45586/): Malicious code in prettier-plugin-markdown-global-algol-taphonomy (npm) (malicious package)
- [MAL-2025-45585](https://insights.sbomify.com/MAL-2025-45585/): Malicious code in prettier-plugin-markdown-europa-spawn-csv (npm) (malicious package)
- [MAL-2025-45584](https://insights.sbomify.com/MAL-2025-45584/): Malicious code in prairie-spruce-xqs241-project (npm) (malicious package)
- [MAL-2025-45583](https://insights.sbomify.com/MAL-2025-45583/): Malicious code in pp-react-theme (npm) (malicious package)
- [MAL-2025-45582](https://insights.sbomify.com/MAL-2025-45582/): Malicious code in pp-react-country-input (npm) (malicious package)
- [MAL-2025-45581](https://insights.sbomify.com/MAL-2025-45581/): Malicious code in pp-com-components (npm) (malicious package)
- [MAL-2025-45580](https://insights.sbomify.com/MAL-2025-45580/): Malicious code in postgres-stratosphere-draco-wolf (npm) (malicious package)
- [MAL-2025-4558](https://insights.sbomify.com/MAL-2025-4558/): Malicious code in fatfingers-mybigpackage (npm) (malicious package)
- [MAL-2025-45579](https://insights.sbomify.com/MAL-2025-45579/): Malicious code in postgres-futurology-standard-postcss (npm) (malicious package)
- [MAL-2025-45578](https://insights.sbomify.com/MAL-2025-45578/): Malicious code in postcss-sedna-perturbation-cordelia (npm) (malicious package)
- [MAL-2025-45577](https://insights.sbomify.com/MAL-2025-45577/): Malicious code in post-five-become (npm) (malicious package)
- [MAL-2025-45576](https://insights.sbomify.com/MAL-2025-45576/): Malicious code in position-mostly-bad (npm) (malicious package)
- [MAL-2025-45575](https://insights.sbomify.com/MAL-2025-45575/): Malicious code in polaris-node-config-graphql-xml (npm) (malicious package)
- [MAL-2025-45574](https://insights.sbomify.com/MAL-2025-45574/): Malicious code in polaris-io-react-bootstrap-polaris (npm) (malicious package)
- [MAL-2025-45573](https://insights.sbomify.com/MAL-2025-45573/): Malicious code in polaris-gravity-nightwatch-spinner (npm) (malicious package)
- [MAL-2025-45572](https://insights.sbomify.com/MAL-2025-45572/): Malicious code in pojie-bupobuni (npm) (malicious package)
- [MAL-2025-45571](https://insights.sbomify.com/MAL-2025-45571/): Malicious code in pm2-wezen-filament-seismology (npm) (malicious package)
- [MAL-2025-45570](https://insights.sbomify.com/MAL-2025-45570/): Malicious code in pm2-passport-cosmicsilence-quark (npm) (malicious package)
- [MAL-2025-4557](https://insights.sbomify.com/MAL-2025-4557/): Malicious code in eu.netherlands3d.address-search (npm) (malicious package)
- [MAL-2025-45569](https://insights.sbomify.com/MAL-2025-45569/): Malicious code in please-powder-read (npm) (malicious package)
- [MAL-2025-45568](https://insights.sbomify.com/MAL-2025-45568/): Malicious code in playwright-lithosphere-antares-iota (npm) (malicious package)
- [MAL-2025-45567](https://insights.sbomify.com/MAL-2025-45567/): Malicious code in playwright-config-titan-greatfilter (npm) (malicious package)
- [MAL-2025-45566](https://insights.sbomify.com/MAL-2025-45566/): Malicious code in plastic-task-note (npm) (malicious package)
- [MAL-2025-45565](https://insights.sbomify.com/MAL-2025-45565/): Malicious code in planetology-pavo-blackhole-celeste (npm) (malicious package)
- [MAL-2025-45564](https://insights.sbomify.com/MAL-2025-45564/): Malicious code in pipe-less-loader-fornax-regulus (npm) (malicious package)
- [MAL-2025-45563](https://insights.sbomify.com/MAL-2025-45563/): Malicious code in pino-tectonophysics-neptunology-reveal-md (npm) (malicious package)
- [MAL-2025-45562](https://insights.sbomify.com/MAL-2025-45562/): Malicious code in pino-style-loader-uninstall-hyperion (npm) (malicious package)
- [MAL-2025-45561](https://insights.sbomify.com/MAL-2025-45561/): Malicious code in pino-pretty-carpo-css-minimizer-webpack-plugin-mini-css-extract-plugin (npm) (malicious package)
- [MAL-2025-45560](https://insights.sbomify.com/MAL-2025-45560/): Malicious code in pino-pretty-antares-koa-carpo (npm) (malicious package)
- [MAL-2025-4556](https://insights.sbomify.com/MAL-2025-4556/): Malicious code in eshops-components-library (npm) (malicious package)
- [MAL-2025-45559](https://insights.sbomify.com/MAL-2025-45559/): Malicious code in pino-firebase-indus-kronos (npm) (malicious package)
- [MAL-2025-45558](https://insights.sbomify.com/MAL-2025-45558/): Malicious code in pinnacle-sapphire-xff252-project (npm) (malicious package)
- [MAL-2025-45557](https://insights.sbomify.com/MAL-2025-45557/): Malicious code in pinnacle-fjord-okz371-project (npm) (malicious package)
- [MAL-2025-45556](https://insights.sbomify.com/MAL-2025-45556/): Malicious code in pictured-several-frame (npm) (malicious package)
- [MAL-2025-45555](https://insights.sbomify.com/MAL-2025-45555/): Malicious code in piano-reef-kgm960-project (npm) (malicious package)
- [MAL-2025-45554](https://insights.sbomify.com/MAL-2025-45554/): Malicious code in piano-nugget-mck174-project (npm) (malicious package)
- [MAL-2025-45553](https://insights.sbomify.com/MAL-2025-45553/): Malicious code in piano-kelp-dor234-project (npm) (malicious package)
- [MAL-2025-45552](https://insights.sbomify.com/MAL-2025-45552/): Malicious code in phylogenetics-adonis-postcss-loader-frontend (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/607/