# Vulnerabilities published in 2025


- [MAL-2025-45461](https://insights.sbomify.com/MAL-2025-45461/): Malicious code in opaline-aroma-dvn897-project (npm) (malicious package)
- [MAL-2025-45460](https://insights.sbomify.com/MAL-2025-45460/): Malicious code in opal-reef-ngw031-project (npm) (malicious package)
- [MAL-2025-4546](https://insights.sbomify.com/MAL-2025-4546/): Malicious code in @mse-entitlement-sdk/react (npm) (malicious package)
- [MAL-2025-45459](https://insights.sbomify.com/MAL-2025-45459/): Malicious code in opal-piano-skf940-project (npm) (malicious package)
- [MAL-2025-45458](https://insights.sbomify.com/MAL-2025-45458/): Malicious code in opal-nocturne-rgg103-project (npm) (malicious package)
- [MAL-2025-45457](https://insights.sbomify.com/MAL-2025-45457/): Malicious code in opal-jewel-xpv906-project (npm) (malicious package)
- [MAL-2025-45456](https://insights.sbomify.com/MAL-2025-45456/): Malicious code in on-uranology-meteor-galaxy (npm) (malicious package)
- [MAL-2025-45455](https://insights.sbomify.com/MAL-2025-45455/): Malicious code in old-stove-hair (npm) (malicious package)
- [MAL-2025-45454](https://insights.sbomify.com/MAL-2025-45454/): Malicious code in okwinclubb (npm) (malicious package)
- [MAL-2025-45453](https://insights.sbomify.com/MAL-2025-45453/): Malicious code in oktafian-sasag97-kyuki (npm) (malicious package)
- [MAL-2025-45452](https://insights.sbomify.com/MAL-2025-45452/): Malicious code in oktafian-naget29-kyuki (npm) (malicious package)
- [MAL-2025-45451](https://insights.sbomify.com/MAL-2025-45451/): Malicious code in oktafian-martabak2-breki (npm) (malicious package)
- [MAL-2025-45450](https://insights.sbomify.com/MAL-2025-45450/): Malicious code in oktafian-mangga53-breki (npm) (malicious package)
- [MAL-2025-4545](https://insights.sbomify.com/MAL-2025-4545/): Malicious code in @monterosa-sdk/enmasse (npm) (malicious package)
- [MAL-2025-45449](https://insights.sbomify.com/MAL-2025-45449/): Malicious code in oktafian-lontong55-breki (npm) (malicious package)
- [MAL-2025-45448](https://insights.sbomify.com/MAL-2025-45448/): Malicious code in oktafian-lengko84-kyuki (npm) (malicious package)
- [MAL-2025-45447](https://insights.sbomify.com/MAL-2025-45447/): Malicious code in oktafian-kue84-breki (npm) (malicious package)
- [MAL-2025-45446](https://insights.sbomify.com/MAL-2025-45446/): Malicious code in oktafian-klanting41-kyuki (npm) (malicious package)
- [MAL-2025-45445](https://insights.sbomify.com/MAL-2025-45445/): Malicious code in oktafian-jengkol43-breki (npm) (malicious package)
- [MAL-2025-45444](https://insights.sbomify.com/MAL-2025-45444/): Malicious code in oktafian-gembus35-breki (npm) (malicious package)
- [MAL-2025-45443](https://insights.sbomify.com/MAL-2025-45443/): Malicious code in okta-tomat83-breki (npm) (malicious package)
- [MAL-2025-45442](https://insights.sbomify.com/MAL-2025-45442/): Malicious code in okta-tempe72-breki (npm) (malicious package)
- [MAL-2025-45441](https://insights.sbomify.com/MAL-2025-45441/): Malicious code in okta-tempe29-kyuki (npm) (malicious package)
- [MAL-2025-45440](https://insights.sbomify.com/MAL-2025-45440/): Malicious code in okta-rawon19-kyuki (npm) (malicious package)
- [MAL-2025-4544](https://insights.sbomify.com/MAL-2025-4544/): Malicious code in @mc-donate/donateweb (npm) (malicious package)
- [MAL-2025-45439](https://insights.sbomify.com/MAL-2025-45439/): Malicious code in okta-mieaceh70-kyuki (npm) (malicious package)
- [MAL-2025-45438](https://insights.sbomify.com/MAL-2025-45438/): Malicious code in okta-mendut19-kyuki (npm) (malicious package)
- [MAL-2025-45437](https://insights.sbomify.com/MAL-2025-45437/): Malicious code in okta-lodeh60-breki (npm) (malicious package)
- [MAL-2025-45436](https://insights.sbomify.com/MAL-2025-45436/): Malicious code in okta-lapis27-kyuki (npm) (malicious package)
- [MAL-2025-45435](https://insights.sbomify.com/MAL-2025-45435/): Malicious code in okta-kolak95-kyuki (npm) (malicious package)
- [MAL-2025-45434](https://insights.sbomify.com/MAL-2025-45434/): Malicious code in okta-kolak78-breki (npm) (malicious package)
- [MAL-2025-45433](https://insights.sbomify.com/MAL-2025-45433/): Malicious code in okta-keripik91-breki (npm) (malicious package)
- [MAL-2025-45432](https://insights.sbomify.com/MAL-2025-45432/): Malicious code in okta-kentang95-breki (npm) (malicious package)
- [MAL-2025-45431](https://insights.sbomify.com/MAL-2025-45431/): Malicious code in ohka-yuxinling-liaoyu (npm) (malicious package)
- [MAL-2025-45430](https://insights.sbomify.com/MAL-2025-45430/): Malicious code in ogi-sasag48-breki (npm) (malicious package)
- [MAL-2025-4543](https://insights.sbomify.com/MAL-2025-4543/): Malicious code in @ing-web-es/application (npm) (malicious package)
- [MAL-2025-45429](https://insights.sbomify.com/MAL-2025-45429/): Malicious code in ogi-rawon89-breki (npm) (malicious package)
- [MAL-2025-45428](https://insights.sbomify.com/MAL-2025-45428/): Malicious code in ogi-nasiuduk80-breki (npm) (malicious package)
- [MAL-2025-45427](https://insights.sbomify.com/MAL-2025-45427/): Malicious code in ogi-nasipecel74-breki (npm) (malicious package)
- [MAL-2025-45426](https://insights.sbomify.com/MAL-2025-45426/): Malicious code in ogi-nasi69-breki (npm) (malicious package)
- [MAL-2025-45425](https://insights.sbomify.com/MAL-2025-45425/): Malicious code in ogi-naget55-kyuki (npm) (malicious package)
- [MAL-2025-45424](https://insights.sbomify.com/MAL-2025-45424/): Malicious code in ogi-miebogor22-breki (npm) (malicious package)
- [MAL-2025-45423](https://insights.sbomify.com/MAL-2025-45423/): Malicious code in ogi-mie47-breki (npm) (malicious package)
- [MAL-2025-45422](https://insights.sbomify.com/MAL-2025-45422/): Malicious code in ogi-mangga76-breki (npm) (malicious package)
- [MAL-2025-45421](https://insights.sbomify.com/MAL-2025-45421/): Malicious code in ogi-ketan15-breki (npm) (malicious package)
- [MAL-2025-45420](https://insights.sbomify.com/MAL-2025-45420/): Malicious code in offer-ocean-dead (npm) (malicious package)
- [MAL-2025-4542](https://insights.sbomify.com/MAL-2025-4542/): Malicious code in @hd-base/atoms (npm) (malicious package)
- [MAL-2025-45419](https://insights.sbomify.com/MAL-2025-45419/): Malicious code in octopus-moon-set477-project (npm) (malicious package)
- [MAL-2025-45418](https://insights.sbomify.com/MAL-2025-45418/): Malicious code in octopus-butterfly-vcy767-project (npm) (malicious package)
- [MAL-2025-45417](https://insights.sbomify.com/MAL-2025-45417/): Malicious code in ocha-sate57-breki (npm) (malicious package)
- [MAL-2025-45416](https://insights.sbomify.com/MAL-2025-45416/): Malicious code in ocha-ragi47-breki (npm) (malicious package)
- [MAL-2025-45415](https://insights.sbomify.com/MAL-2025-45415/): Malicious code in ocha-peyek42-breki (npm) (malicious package)
- [MAL-2025-45414](https://insights.sbomify.com/MAL-2025-45414/): Malicious code in ocha-menjes100-breki (npm) (malicious package)
- [MAL-2025-45413](https://insights.sbomify.com/MAL-2025-45413/): Malicious code in ocha-mangga66-kyuki (npm) (malicious package)
- [MAL-2025-45412](https://insights.sbomify.com/MAL-2025-45412/): Malicious code in ocha-lapis89-breki (npm) (malicious package)
- [MAL-2025-45411](https://insights.sbomify.com/MAL-2025-45411/): Malicious code in ocha-jengkol26-breki (npm) (malicious package)
- [MAL-2025-45410](https://insights.sbomify.com/MAL-2025-45410/): Malicious code in ocha-jamblang6-kyuki (npm) (malicious package)
- [MAL-2025-4541](https://insights.sbomify.com/MAL-2025-4541/): Malicious code in @galaxy-nft/frontend (npm) (malicious package)
- [MAL-2025-45409](https://insights.sbomify.com/MAL-2025-45409/): Malicious code in ocha-ikan100-breki (npm) (malicious package)
- [MAL-2025-45408](https://insights.sbomify.com/MAL-2025-45408/): Malicious code in ocha-gepuk51-breki (npm) (malicious package)
- [MAL-2025-45407](https://insights.sbomify.com/MAL-2025-45407/): Malicious code in ocha-empal48-kyuki (npm) (malicious package)
- [MAL-2025-45406](https://insights.sbomify.com/MAL-2025-45406/): Malicious code in ocha-dradag79-breki (npm) (malicious package)
- [MAL-2025-45405](https://insights.sbomify.com/MAL-2025-45405/): Malicious code in ocha-botok11-kyuki (npm) (malicious package)
- [MAL-2025-45404](https://insights.sbomify.com/MAL-2025-45404/): Malicious code in oberon-terser-test-pino (npm) (malicious package)
- [MAL-2025-45403](https://insights.sbomify.com/MAL-2025-45403/): Malicious code in oauth-venus-nconf-supervisor (npm) (malicious package)
- [MAL-2025-45402](https://insights.sbomify.com/MAL-2025-45402/): Malicious code in oauth-standard-umbra-antares (npm) (malicious package)
- [MAL-2025-45401](https://insights.sbomify.com/MAL-2025-45401/): Malicious code in nymph-thistle-cdu415-project (npm) (malicious package)
- [MAL-2025-45400](https://insights.sbomify.com/MAL-2025-45400/): Malicious code in nymph-dragon-gnf288-project (npm) (malicious package)
- [MAL-2025-4540](https://insights.sbomify.com/MAL-2025-4540/): Malicious code in @fms-common-biz/basic-react (npm) (malicious package)
- [MAL-2025-454](https://insights.sbomify.com/MAL-2025-454/): Malicious code in epicagames-user (npm) (malicious package)
- [MAL-2025-45399](https://insights.sbomify.com/MAL-2025-45399/): Malicious code in nvwude-shuijing-mofa (npm) (malicious package)
- [MAL-2025-45398](https://insights.sbomify.com/MAL-2025-45398/): Malicious code in nvsheng-taluo (npm) (malicious package)
- [MAL-2025-45397](https://insights.sbomify.com/MAL-2025-45397/): Malicious code in nvrende-shenxin-liaoyu-ditu (npm) (malicious package)
- [MAL-2025-45396](https://insights.sbomify.com/MAL-2025-45396/): Malicious code in nvren-nengliang-liaoyu-baodian (npm) (malicious package)
- [MAL-2025-45395](https://insights.sbomify.com/MAL-2025-45395/): Malicious code in nuxtjs-uninstall-sedimentology-crust (npm) (malicious package)
- [MAL-2025-45394](https://insights.sbomify.com/MAL-2025-45394/): Malicious code in nuxtjs-backend-whitedwarf-bootes (npm) (malicious package)
- [MAL-2025-45393](https://insights.sbomify.com/MAL-2025-45393/): Malicious code in nurul-serimuka68-breki (npm) (malicious package)
- [MAL-2025-45392](https://insights.sbomify.com/MAL-2025-45392/): Malicious code in nurul-serimuka35-breki (npm) (malicious package)
- [MAL-2025-45391](https://insights.sbomify.com/MAL-2025-45391/): Malicious code in nurul-serabi55-breki (npm) (malicious package)
- [MAL-2025-45390](https://insights.sbomify.com/MAL-2025-45390/): Malicious code in nurul-otak-otak80-breki (npm) (malicious package)
- [MAL-2025-4539](https://insights.sbomify.com/MAL-2025-4539/): Malicious code in @fff-web/fff-utilities (npm) (malicious package)
- [MAL-2025-45389](https://insights.sbomify.com/MAL-2025-45389/): Malicious code in nurul-mendoan91-breki (npm) (malicious package)
- [MAL-2025-45388](https://insights.sbomify.com/MAL-2025-45388/): Malicious code in nurul-lontong75-breki (npm) (malicious package)
- [MAL-2025-45387](https://insights.sbomify.com/MAL-2025-45387/): Malicious code in nurul-lapis87-kyuki (npm) (malicious package)
- [MAL-2025-45386](https://insights.sbomify.com/MAL-2025-45386/): Malicious code in nurul-kue15-breki (npm) (malicious package)
- [MAL-2025-45385](https://insights.sbomify.com/MAL-2025-45385/): Malicious code in nurul-kolak50-breki (npm) (malicious package)
- [MAL-2025-45384](https://insights.sbomify.com/MAL-2025-45384/): Malicious code in nurul-kacang49-breki (npm) (malicious package)
- [MAL-2025-45383](https://insights.sbomify.com/MAL-2025-45383/): Malicious code in nurul-gulai26-breki (npm) (malicious package)
- [MAL-2025-45382](https://insights.sbomify.com/MAL-2025-45382/): Malicious code in nurul-dodol21-breki (npm) (malicious package)
- [MAL-2025-45381](https://insights.sbomify.com/MAL-2025-45381/): Malicious code in nurul-buburayam60-breki (npm) (malicious package)
- [MAL-2025-45380](https://insights.sbomify.com/MAL-2025-45380/): Malicious code in nurul-bakso68-breki (npm) (malicious package)
- [MAL-2025-4538](https://insights.sbomify.com/MAL-2025-4538/): Malicious code in @dbtw/mfe-gateway (npm) (malicious package)
- [MAL-2025-45379](https://insights.sbomify.com/MAL-2025-45379/): Malicious code in numeral-metal-someone (npm) (malicious package)
- [MAL-2025-45378](https://insights.sbomify.com/MAL-2025-45378/): Malicious code in numba-doc-zh (npm) (malicious package)
- [MAL-2025-45377](https://insights.sbomify.com/MAL-2025-45377/): Malicious code in nugget-xylophone-lql297-project (npm) (malicious package)
- [MAL-2025-45376](https://insights.sbomify.com/MAL-2025-45376/): Malicious code in nudt-ptn-reco-caixuanping (npm) (malicious package)
- [MAL-2025-45375](https://insights.sbomify.com/MAL-2025-45375/): Malicious code in nudt-proj-mgt-maoxinjun (npm) (malicious package)
- [MAL-2025-45374](https://insights.sbomify.com/MAL-2025-45374/): Malicious code in nudt-oop-soft-engi-dongwei (npm) (malicious package)
- [MAL-2025-45373](https://insights.sbomify.com/MAL-2025-45373/): Malicious code in nudt-nn-daikui (npm) (malicious package)
- [MAL-2025-45372](https://insights.sbomify.com/MAL-2025-45372/): Malicious code in nudt-discrete-maoxiaoguang (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/609/