# Vulnerabilities published in 2025 - [MAL-2025-45191](https://insights.sbomify.com/MAL-2025-45191/): Malicious code in mimi-ruhe-gaibianle-wode-shenghuo (npm) (malicious package) - [MAL-2025-45190](https://insights.sbomify.com/MAL-2025-45190/): Malicious code in mimi-quanji (npm) (malicious package) - [MAL-2025-4519](https://insights.sbomify.com/MAL-2025-4519/): Malicious code in vite-tsconfig-pretty (npm) (malicious package) - [MAL-2025-45189](https://insights.sbomify.com/MAL-2025-45189/): Malicious code in mimi-qingshaonianban (npm) (malicious package) - [MAL-2025-45188](https://insights.sbomify.com/MAL-2025-45188/): Malicious code in mile-take-along (npm) (malicious package) - [MAL-2025-45187](https://insights.sbomify.com/MAL-2025-45187/): Malicious code in mike-grape-elderberry-tlucf (npm) (malicious package) - [MAL-2025-45186](https://insights.sbomify.com/MAL-2025-45186/): Malicious code in mike-bravo-alpha-ywklp (npm) (malicious package) - [MAL-2025-45185](https://insights.sbomify.com/MAL-2025-45185/): Malicious code in mighty-sum-river (npm) (malicious package) - [MAL-2025-45184](https://insights.sbomify.com/MAL-2025-45184/): Malicious code in middleware-markdown-pdf-entanglement-relay (npm) (malicious package) - [MAL-2025-45183](https://insights.sbomify.com/MAL-2025-45183/): Malicious code in middleware-indus-membrane-yonder (npm) (malicious package) - [MAL-2025-45182](https://insights.sbomify.com/MAL-2025-45182/): Malicious code in meteor-envconfig-update-lightyear (npm) (malicious package) - [MAL-2025-45181](https://insights.sbomify.com/MAL-2025-45181/): Malicious code in meteor-dotenv-parse-variables-callback-kaus (npm) (malicious package) - [MAL-2025-45180](https://insights.sbomify.com/MAL-2025-45180/): Malicious code in metalsmith-node-config-dotenv-safe-bellatrix (npm) (malicious package) - [MAL-2025-4518](https://insights.sbomify.com/MAL-2025-4518/): Malicious code in vite-plugin-style-svg (npm) (malicious package) - [MAL-2025-45179](https://insights.sbomify.com/MAL-2025-45179/): Malicious code in met-continued-sand (npm) (malicious package) - [MAL-2025-45178](https://insights.sbomify.com/MAL-2025-45178/): Malicious code in mesosphere-metabolomics-transport-uranology (npm) (malicious package) - [MAL-2025-45177](https://insights.sbomify.com/MAL-2025-45177/): Malicious code in mesosphere-foundation-callback-uranology (npm) (malicious package) - [MAL-2025-45176](https://insights.sbomify.com/MAL-2025-45176/): Malicious code in mengyu-youming-shijie (npm) (malicious package) - [MAL-2025-45175](https://insights.sbomify.com/MAL-2025-45175/): Malicious code in mengyu-yishi-toushe (npm) (malicious package) - [MAL-2025-45174](https://insights.sbomify.com/MAL-2025-45174/): Malicious code in mengkongshi (npm) (malicious package) - [MAL-2025-45173](https://insights.sbomify.com/MAL-2025-45173/): Malicious code in meng-jinhua-yujiazhi-wancheng-vol2 (npm) (malicious package) - [MAL-2025-45172](https://insights.sbomify.com/MAL-2025-45172/): Malicious code in meng-jinhua-yujiazhi-wancheng-vol1 (npm) (malicious package) - [MAL-2025-45171](https://insights.sbomify.com/MAL-2025-45171/): Malicious code in meng-chenshuide-liaoyuli (npm) (malicious package) - [MAL-2025-45170](https://insights.sbomify.com/MAL-2025-45170/): Malicious code in membrane-optimize-css-assets-webpack-plugin-plutology-gatsby (npm) (malicious package) - [MAL-2025-4517](https://insights.sbomify.com/MAL-2025-4517/): Malicious code in vite-config-pretty-js (npm) (malicious package) - [MAL-2025-45169](https://insights.sbomify.com/MAL-2025-45169/): Malicious code in membrane-firebase-centaurus-quantumfoam (npm) (malicious package) - [MAL-2025-45168](https://insights.sbomify.com/MAL-2025-45168/): Malicious code in meiyou-gaishanbuliaode-shili (npm) (malicious package) - [MAL-2025-45167](https://insights.sbomify.com/MAL-2025-45167/): Malicious code in meissa-node-sass-markdownlint-spectron-webdriver (npm) (malicious package) - [MAL-2025-45166](https://insights.sbomify.com/MAL-2025-45166/): Malicious code in meissa-jest-elara-transport (npm) (malicious package) - [MAL-2025-45165](https://insights.sbomify.com/MAL-2025-45165/): Malicious code in meissa-gridsome-zooarchaeology-configstore (npm) (malicious package) - [MAL-2025-45164](https://insights.sbomify.com/MAL-2025-45164/): Malicious code in meissa-bioinformatics-event-module (npm) (malicious package) - [MAL-2025-45163](https://insights.sbomify.com/MAL-2025-45163/): Malicious code in meissa-aurora-despina-chariklo (npm) (malicious package) - [MAL-2025-45162](https://insights.sbomify.com/MAL-2025-45162/): Malicious code in meihua-yishu-rumen (npm) (malicious package) - [MAL-2025-45161](https://insights.sbomify.com/MAL-2025-45161/): Malicious code in meihua-yishu-jiangyi (npm) (malicious package) - [MAL-2025-45160](https://insights.sbomify.com/MAL-2025-45160/): Malicious code in meihua-yishu-chanwei (npm) (malicious package) - [MAL-2025-4516](https://insights.sbomify.com/MAL-2025-4516/): Malicious code in trip-plugins (npm) (malicious package) - [MAL-2025-45159](https://insights.sbomify.com/MAL-2025-45159/): Malicious code in meihua-xinyi (npm) (malicious package) - [MAL-2025-45158](https://insights.sbomify.com/MAL-2025-45158/): Malicious code in meigu-guxi-chengzhang-touzishu (npm) (malicious package) - [MAL-2025-45157](https://insights.sbomify.com/MAL-2025-45157/): Malicious code in mechatronics-procyon-nestjs-async (npm) (malicious package) - [MAL-2025-45156](https://insights.sbomify.com/MAL-2025-45156/): Malicious code in meant-surface-knowledge (npm) (malicious package) - [MAL-2025-45155](https://insights.sbomify.com/MAL-2025-45155/): Malicious code in meadow-xerox-laz792-project (npm) (malicious package) - [MAL-2025-45154](https://insights.sbomify.com/MAL-2025-45154/): Malicious code in meadow-octopus-aka637-project (npm) (malicious package) - [MAL-2025-45153](https://insights.sbomify.com/MAL-2025-45153/): Malicious code in meadow-labyrinth-pdm508-project (npm) (malicious package) - [MAL-2025-45152](https://insights.sbomify.com/MAL-2025-45152/): Malicious code in meadow-kelp-vwt735-project (npm) (malicious package) - [MAL-2025-45151](https://insights.sbomify.com/MAL-2025-45151/): Malicious code in mdx-readable-passport-betelgeuse (npm) (malicious package) - [MAL-2025-45150](https://insights.sbomify.com/MAL-2025-45150/): Malicious code in mdx-changelog-io-elara (npm) (malicious package) - [MAL-2025-4515](https://insights.sbomify.com/MAL-2025-4515/): Malicious code in thira (npm) (malicious package) - [MAL-2025-45149](https://insights.sbomify.com/MAL-2025-45149/): Malicious code in maya-tek65-breki (npm) (malicious package) - [MAL-2025-45148](https://insights.sbomify.com/MAL-2025-45148/): Malicious code in maya-sambel67-breki (npm) (malicious package) - [MAL-2025-45147](https://insights.sbomify.com/MAL-2025-45147/): Malicious code in maya-pecel99-breki (npm) (malicious package) - [MAL-2025-45146](https://insights.sbomify.com/MAL-2025-45146/): Malicious code in maya-nasi63-breki (npm) (malicious package) - [MAL-2025-45145](https://insights.sbomify.com/MAL-2025-45145/): Malicious code in maya-menjes45-breki (npm) (malicious package) - [MAL-2025-45144](https://insights.sbomify.com/MAL-2025-45144/): Malicious code in maya-lutis63-kyuki (npm) (malicious package) - [MAL-2025-45143](https://insights.sbomify.com/MAL-2025-45143/): Malicious code in maya-lupis99-breki (npm) (malicious package) - [MAL-2025-45142](https://insights.sbomify.com/MAL-2025-45142/): Malicious code in maya-lapis2-kyuki (npm) (malicious package) - [MAL-2025-45141](https://insights.sbomify.com/MAL-2025-45141/): Malicious code in maya-ketan49-breki (npm) (malicious package) - [MAL-2025-45140](https://insights.sbomify.com/MAL-2025-45140/): Malicious code in maya-enting28-breki (npm) (malicious package) - [MAL-2025-4514](https://insights.sbomify.com/MAL-2025-4514/): Malicious code in telegraf-mysql2-session (npm) (malicious package) - [MAL-2025-45139](https://insights.sbomify.com/MAL-2025-45139/): Malicious code in maya-bubursumsum30-breki (npm) (malicious package) - [MAL-2025-45138](https://insights.sbomify.com/MAL-2025-45138/): Malicious code in maya-buburayam91-breki (npm) (malicious package) - [MAL-2025-45137](https://insights.sbomify.com/MAL-2025-45137/): Malicious code in maxujun-xinzhi-baogao-erlingyijiulinger-lingwu (npm) (malicious package) - [MAL-2025-45136](https://insights.sbomify.com/MAL-2025-45136/): Malicious code in maxujun-xinzhi-baogao-erlingyibayiyi-erlingyijiulingyi (npm) (malicious package) - [MAL-2025-45135](https://insights.sbomify.com/MAL-2025-45135/): Malicious code in maxujun-xinzhi-baogao-erlingyibalingwu-lingqi (npm) (malicious package) - [MAL-2025-45134](https://insights.sbomify.com/MAL-2025-45134/): Malicious code in maxujun-xinzhi-baogao-erlingyibalingba-yiling (npm) (malicious package) - [MAL-2025-45133](https://insights.sbomify.com/MAL-2025-45133/): Malicious code in maxujun-shijie-mingkan-sudu-erlingyibalingsi-lingqi (npm) (malicious package) - [MAL-2025-45132](https://insights.sbomify.com/MAL-2025-45132/): Malicious code in maxujun-shijie-mingkan-sudu-erlingyibalingba-yiyi (npm) (malicious package) - [MAL-2025-45131](https://insights.sbomify.com/MAL-2025-45131/): Malicious code in materialize-void-neptune-mesosphere (npm) (malicious package) - [MAL-2025-45130](https://insights.sbomify.com/MAL-2025-45130/): Malicious code in materialize-superflare-altair-comet (npm) (malicious package) - [MAL-2025-4513](https://insights.sbomify.com/MAL-2025-4513/): Malicious code in support-plugins (npm) (malicious package) - [MAL-2025-45129](https://insights.sbomify.com/MAL-2025-45129/): Malicious code in married-seen-easily (npm) (malicious package) - [MAL-2025-45128](https://insights.sbomify.com/MAL-2025-45128/): Malicious code in markdownlint-tardigrade-cosmogenic-forever (npm) (malicious package) - [MAL-2025-45127](https://insights.sbomify.com/MAL-2025-45127/): Malicious code in markdownlint-achernar-mysql-jovian (npm) (malicious package) - [MAL-2025-45126](https://insights.sbomify.com/MAL-2025-45126/): Malicious code in markdown-perseus-betelgeuse-chakra-ui (npm) (malicious package) - [MAL-2025-45125](https://insights.sbomify.com/MAL-2025-45125/): Malicious code in map-frequently-forward (npm) (malicious package) - [MAL-2025-45124](https://insights.sbomify.com/MAL-2025-45124/): Malicious code in manufacturing-salmon-slipped (npm) (malicious package) - [MAL-2025-45123](https://insights.sbomify.com/MAL-2025-45123/): Malicious code in mantrimall_app (npm) (malicious package) - [MAL-2025-45122](https://insights.sbomify.com/MAL-2025-45122/): Malicious code in mangrove-dove-ktf049-project (npm) (malicious package) - [MAL-2025-45121](https://insights.sbomify.com/MAL-2025-45121/): Malicious code in mango-zucchini-romeo-xuonu (npm) (malicious package) - [MAL-2025-45120](https://insights.sbomify.com/MAL-2025-45120/): Malicious code in mango-papa-yam-mxdqs (npm) (malicious package) - [MAL-2025-4512](https://insights.sbomify.com/MAL-2025-4512/): Malicious code in super-randomizer (npm) (malicious package) - [MAL-2025-45119](https://insights.sbomify.com/MAL-2025-45119/): Malicious code in mango-lemon-papa-llsja (npm) (malicious package) - [MAL-2025-45118](https://insights.sbomify.com/MAL-2025-45118/): Malicious code in managed-baby-climb (npm) (malicious package) - [MAL-2025-45117](https://insights.sbomify.com/MAL-2025-45117/): Malicious code in maman-wajit62-kyuki (npm) (malicious package) - [MAL-2025-45116](https://insights.sbomify.com/MAL-2025-45116/): Malicious code in maman-tahu28-breki (npm) (malicious package) - [MAL-2025-45115](https://insights.sbomify.com/MAL-2025-45115/): Malicious code in maman-rojak64-kyuki (npm) (malicious package) - [MAL-2025-45114](https://insights.sbomify.com/MAL-2025-45114/): Malicious code in maman-rangginang75-breki (npm) (malicious package) - [MAL-2025-45113](https://insights.sbomify.com/MAL-2025-45113/): Malicious code in maman-ongol-ongol39-breki (npm) (malicious package) - [MAL-2025-45112](https://insights.sbomify.com/MAL-2025-45112/): Malicious code in maman-mieayam90-kyuki (npm) (malicious package) - [MAL-2025-45111](https://insights.sbomify.com/MAL-2025-45111/): Malicious code in maman-mie35-kyuki (npm) (malicious package) - [MAL-2025-45110](https://insights.sbomify.com/MAL-2025-45110/): Malicious code in maman-klentik48-kyuki (npm) (malicious package) - [MAL-2025-4511](https://insights.sbomify.com/MAL-2025-4511/): Malicious code in stylelist-plugins (npm) (malicious package) - [MAL-2025-45109](https://insights.sbomify.com/MAL-2025-45109/): Malicious code in maman-kembang94-breki (npm) (malicious package) - [MAL-2025-45108](https://insights.sbomify.com/MAL-2025-45108/): Malicious code in maman-dradag100-breki (npm) (malicious package) - [MAL-2025-45107](https://insights.sbomify.com/MAL-2025-45107/): Malicious code in mamaklo (npm) (malicious package) - [MAL-2025-45106](https://insights.sbomify.com/MAL-2025-45106/): Malicious code in makonini (npm) (malicious package) - [MAL-2025-45105](https://insights.sbomify.com/MAL-2025-45105/): Malicious code in mail-lesson-tank (npm) (malicious package) - [MAL-2025-45104](https://insights.sbomify.com/MAL-2025-45104/): Malicious code in maigu-zhifu (npm) (malicious package) - [MAL-2025-45103](https://insights.sbomify.com/MAL-2025-45103/): Malicious code in mahesa-tek24-breki (npm) (malicious package) - [MAL-2025-45102](https://insights.sbomify.com/MAL-2025-45102/): Malicious code in mahesa-sroto24-breki (npm) (malicious package) - [MAL-2025-45101](https://insights.sbomify.com/MAL-2025-45101/): Malicious code in mahesa-sambel77-breki (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/612/