# Vulnerabilities published in 2025


- [MAL-2025-45010](https://insights.sbomify.com/MAL-2025-45010/): Malicious code in lina-ragi30-kyuki (npm) (malicious package)
- [MAL-2025-4501](https://insights.sbomify.com/MAL-2025-4501/): Malicious code in setting-plugins (npm) (malicious package)
- [MAL-2025-45009](https://insights.sbomify.com/MAL-2025-45009/): Malicious code in lina-oblok4-breki (npm) (malicious package)
- [MAL-2025-45008](https://insights.sbomify.com/MAL-2025-45008/): Malicious code in lina-lupis31-kyuki (npm) (malicious package)
- [MAL-2025-45007](https://insights.sbomify.com/MAL-2025-45007/): Malicious code in lina-lapis97-breki (npm) (malicious package)
- [MAL-2025-45006](https://insights.sbomify.com/MAL-2025-45006/): Malicious code in lina-lapis10-kyuki (npm) (malicious package)
- [MAL-2025-45005](https://insights.sbomify.com/MAL-2025-45005/): Malicious code in lina-kue12-breki (npm) (malicious package)
- [MAL-2025-45004](https://insights.sbomify.com/MAL-2025-45004/): Malicious code in lima-victor-lemon-epnhd (npm) (malicious package)
- [MAL-2025-45003](https://insights.sbomify.com/MAL-2025-45003/): Malicious code in lima-juliet-xray-yqlpd (npm) (malicious package)
- [MAL-2025-45002](https://insights.sbomify.com/MAL-2025-45002/): Malicious code in lima-india-fig-asvoh (npm) (malicious package)
- [MAL-2025-45001](https://insights.sbomify.com/MAL-2025-45001/): Malicious code in lilypad-violet-qoo759-project (npm) (malicious package)
- [MAL-2025-45000](https://insights.sbomify.com/MAL-2025-45000/): Malicious code in lilac-willow-jef539-project (npm) (malicious package)
- [MAL-2025-4500](https://insights.sbomify.com/MAL-2025-4500/): Malicious code in resize-plugins (npm) (malicious package)
- [MAL-2025-450](https://insights.sbomify.com/MAL-2025-450/): Malicious code in epicagames-parser (npm) (malicious package)
- [MAL-2025-45](https://insights.sbomify.com/MAL-2025-45/): Malicious code in solana-login (npm) (malicious package)
- [MAL-2025-44999](https://insights.sbomify.com/MAL-2025-44999/): Malicious code in lightning-iguana-tpf326-project (npm) (malicious package)
- [MAL-2025-44998](https://insights.sbomify.com/MAL-2025-44998/): Malicious code in library-website (npm) (malicious package)
- [MAL-2025-44997](https://insights.sbomify.com/MAL-2025-44997/): Malicious code in library-petrology-grunt-sedna (npm) (malicious package)
- [MAL-2025-44996](https://insights.sbomify.com/MAL-2025-44996/): Malicious code in liaoyu-chuliao-haojiandan (npm) (malicious package)
- [MAL-2025-44995](https://insights.sbomify.com/MAL-2025-44995/): Malicious code in liangzi-chuliao-ver2 (npm) (malicious package)
- [MAL-2025-44994](https://insights.sbomify.com/MAL-2025-44994/): Malicious code in levels-yakutsk-halley-transform (npm) (malicious package)
- [MAL-2025-44993](https://insights.sbomify.com/MAL-2025-44993/): Malicious code in levels-parallax-janus-atlas (npm) (malicious package)
- [MAL-2025-44992](https://insights.sbomify.com/MAL-2025-44992/): Malicious code in let-anybody-lesson (npm) (malicious package)
- [MAL-2025-44991](https://insights.sbomify.com/MAL-2025-44991/): Malicious code in lesson-dream-death (npm) (malicious package)
- [MAL-2025-44990](https://insights.sbomify.com/MAL-2025-44990/): Malicious code in lesson-clothing-describe (npm) (malicious package)
- [MAL-2025-4499](https://insights.sbomify.com/MAL-2025-4499/): Malicious code in recover-plugins (npm) (malicious package)
- [MAL-2025-44989](https://insights.sbomify.com/MAL-2025-44989/): Malicious code in less-loader-quasar-spectroscopy-astrobiology (npm) (malicious package)
- [MAL-2025-44988](https://insights.sbomify.com/MAL-2025-44988/): Malicious code in less-loader-ablation-frontend-transport (npm) (malicious package)
- [MAL-2025-44987](https://insights.sbomify.com/MAL-2025-44987/): Malicious code in lemon-yankee-xigua-cspgx (npm) (malicious package)
- [MAL-2025-44986](https://insights.sbomify.com/MAL-2025-44986/): Malicious code in lemon-tango-papaya-qgnyc (npm) (malicious package)
- [MAL-2025-44985](https://insights.sbomify.com/MAL-2025-44985/): Malicious code in lemon-oscar-orange-abbdh (npm) (malicious package)
- [MAL-2025-44984](https://insights.sbomify.com/MAL-2025-44984/): Malicious code in lemon-nectarine-xray-ixxxf (npm) (malicious package)
- [MAL-2025-44983](https://insights.sbomify.com/MAL-2025-44983/): Malicious code in lemon-apple-date-pffoh (npm) (malicious package)
- [MAL-2025-44982](https://insights.sbomify.com/MAL-2025-44982/): Malicious code in leimannuoka-baodian (npm) (malicious package)
- [MAL-2025-44981](https://insights.sbomify.com/MAL-2025-44981/): Malicious code in legoland-shared (npm) (malicious package)
- [MAL-2025-44980](https://insights.sbomify.com/MAL-2025-44980/): Malicious code in leda-betelgeuse-chariklo-backend (npm) (malicious package)
- [MAL-2025-4498](https://insights.sbomify.com/MAL-2025-4498/): Malicious code in react_code_format (npm) (malicious package)
- [MAL-2025-44979](https://insights.sbomify.com/MAL-2025-44979/): Malicious code in learnx-zh (npm) (malicious package)
- [MAL-2025-44978](https://insights.sbomify.com/MAL-2025-44978/): Malicious code in layers-foreign-mainly (npm) (malicious package)
- [MAL-2025-44977](https://insights.sbomify.com/MAL-2025-44977/): Malicious code in laopu-shizi-erlingyiqiyier-erlingyibalinger (npm) (malicious package)
- [MAL-2025-44976](https://insights.sbomify.com/MAL-2025-44976/): Malicious code in laopu-shizi-erlingyiqilingliu-lingba (npm) (malicious package)
- [MAL-2025-44975](https://insights.sbomify.com/MAL-2025-44975/): Malicious code in laopu-shizi-erlingyiqilingjiu-yiyi (npm) (malicious package)
- [MAL-2025-44974](https://insights.sbomify.com/MAL-2025-44974/): Malicious code in laopu-shizi-erlingyiqilinger-lingwu (npm) (malicious package)
- [MAL-2025-44973](https://insights.sbomify.com/MAL-2025-44973/): Malicious code in lanren-zhuanshuqun-zhoubao-erlingereryiyierling (npm) (malicious package)
- [MAL-2025-44972](https://insights.sbomify.com/MAL-2025-44972/): Malicious code in langda-baien-zuopinji (npm) (malicious package)
- [MAL-2025-44971](https://insights.sbomify.com/MAL-2025-44971/): Malicious code in laizi-yabolahande-mimi (npm) (malicious package)
- [MAL-2025-44970](https://insights.sbomify.com/MAL-2025-44970/): Malicious code in laila-rujak67-breki (npm) (malicious package)
- [MAL-2025-4497](https://insights.sbomify.com/MAL-2025-4497/): Malicious code in react-blockchain-checker (npm) (malicious package)
- [MAL-2025-44969](https://insights.sbomify.com/MAL-2025-44969/): Malicious code in laila-naget12-breki (npm) (malicious package)
- [MAL-2025-44968](https://insights.sbomify.com/MAL-2025-44968/): Malicious code in laila-menjes18-kyuki (npm) (malicious package)
- [MAL-2025-44967](https://insights.sbomify.com/MAL-2025-44967/): Malicious code in laila-keripik39-breki (npm) (malicious package)
- [MAL-2025-44966](https://insights.sbomify.com/MAL-2025-44966/): Malicious code in laila-esdoger69-breki (npm) (malicious package)
- [MAL-2025-44965](https://insights.sbomify.com/MAL-2025-44965/): Malicious code in laila-asinan59-breki (npm) (malicious package)
- [MAL-2025-44964](https://insights.sbomify.com/MAL-2025-44964/): Malicious code in labyrinth_nj01m_ioebj_nymph (npm) (malicious package)
- [MAL-2025-44963](https://insights.sbomify.com/MAL-2025-44963/): Malicious code in labyrinth_cuix7_3u1cb_iris (npm) (malicious package)
- [MAL-2025-44962](https://insights.sbomify.com/MAL-2025-44962/): Malicious code in labyrinth_abylg_0roo7_opal (npm) (malicious package)
- [MAL-2025-44961](https://insights.sbomify.com/MAL-2025-44961/): Malicious code in kuryaken (npm) (malicious package)
- [MAL-2025-44960](https://insights.sbomify.com/MAL-2025-44960/): Malicious code in kurniawan-sego85-breki (npm) (malicious package)
- [MAL-2025-4496](https://insights.sbomify.com/MAL-2025-4496/): Malicious code in rand-helper (npm) (malicious package)
- [MAL-2025-44959](https://insights.sbomify.com/MAL-2025-44959/): Malicious code in kurniawan-sate20-breki (npm) (malicious package)
- [MAL-2025-44958](https://insights.sbomify.com/MAL-2025-44958/): Malicious code in kurniawan-ronde89-kyuki (npm) (malicious package)
- [MAL-2025-44957](https://insights.sbomify.com/MAL-2025-44957/): Malicious code in kurniawan-nasiuduk98-breki (npm) (malicious package)
- [MAL-2025-44956](https://insights.sbomify.com/MAL-2025-44956/): Malicious code in kurniawan-nasipecel89-kyuki (npm) (malicious package)
- [MAL-2025-44955](https://insights.sbomify.com/MAL-2025-44955/): Malicious code in kurniawan-nasipecel57-kyuki (npm) (malicious package)
- [MAL-2025-44954](https://insights.sbomify.com/MAL-2025-44954/): Malicious code in kurniawan-klanting66-breki (npm) (malicious package)
- [MAL-2025-44953](https://insights.sbomify.com/MAL-2025-44953/): Malicious code in kurniawan-ketoprak24-breki (npm) (malicious package)
- [MAL-2025-44952](https://insights.sbomify.com/MAL-2025-44952/): Malicious code in kurniawan-kemplang89-kyuki (npm) (malicious package)
- [MAL-2025-44951](https://insights.sbomify.com/MAL-2025-44951/): Malicious code in kurniawan-gulai52-breki (npm) (malicious package)
- [MAL-2025-44950](https://insights.sbomify.com/MAL-2025-44950/): Malicious code in kurniawan-gorengan34-kyuki (npm) (malicious package)
- [MAL-2025-4495](https://insights.sbomify.com/MAL-2025-4495/): Malicious code in nistagram (npm) (malicious package)
- [MAL-2025-44949](https://insights.sbomify.com/MAL-2025-44949/): Malicious code in kurniawan-getuk27-breki (npm) (malicious package)
- [MAL-2025-44948](https://insights.sbomify.com/MAL-2025-44948/): Malicious code in kurniawan-bakwan38-breki (npm) (malicious package)
- [MAL-2025-44947](https://insights.sbomify.com/MAL-2025-44947/): Malicious code in kurnia-tomat80-kyuki (npm) (malicious package)
- [MAL-2025-44946](https://insights.sbomify.com/MAL-2025-44946/): Malicious code in kurnia-tahu47-kyuki (npm) (malicious package)
- [MAL-2025-44945](https://insights.sbomify.com/MAL-2025-44945/): Malicious code in kurnia-soto72-breki (npm) (malicious package)
- [MAL-2025-44944](https://insights.sbomify.com/MAL-2025-44944/): Malicious code in kurnia-semur2-kyuki (npm) (malicious package)
- [MAL-2025-44943](https://insights.sbomify.com/MAL-2025-44943/): Malicious code in kurnia-sate34-kyuki (npm) (malicious package)
- [MAL-2025-44942](https://insights.sbomify.com/MAL-2025-44942/): Malicious code in kurnia-sasag12-kyuki (npm) (malicious package)
- [MAL-2025-44941](https://insights.sbomify.com/MAL-2025-44941/): Malicious code in kurnia-sambel89-kyuki (npm) (malicious package)
- [MAL-2025-44940](https://insights.sbomify.com/MAL-2025-44940/): Malicious code in kurnia-rujaksoto31-breki (npm) (malicious package)
- [MAL-2025-4494](https://insights.sbomify.com/MAL-2025-4494/): Malicious code in newquest (npm) (malicious package)
- [MAL-2025-44939](https://insights.sbomify.com/MAL-2025-44939/): Malicious code in kurnia-pisang15-breki (npm) (malicious package)
- [MAL-2025-44938](https://insights.sbomify.com/MAL-2025-44938/): Malicious code in kurnia-papeda19-breki (npm) (malicious package)
- [MAL-2025-44937](https://insights.sbomify.com/MAL-2025-44937/): Malicious code in kurnia-nasi21-breki (npm) (malicious package)
- [MAL-2025-44936](https://insights.sbomify.com/MAL-2025-44936/): Malicious code in kurnia-mieayam59-kyuki (npm) (malicious package)
- [MAL-2025-44935](https://insights.sbomify.com/MAL-2025-44935/): Malicious code in kurnia-menjes67-kyuki (npm) (malicious package)
- [MAL-2025-44934](https://insights.sbomify.com/MAL-2025-44934/): Malicious code in kurnia-kupat46-kyuki (npm) (malicious package)
- [MAL-2025-44933](https://insights.sbomify.com/MAL-2025-44933/): Malicious code in kurnia-jus60-kyuki (npm) (malicious package)
- [MAL-2025-44932](https://insights.sbomify.com/MAL-2025-44932/): Malicious code in kurnia-gudeg50-kyuki (npm) (malicious package)
- [MAL-2025-44931](https://insights.sbomify.com/MAL-2025-44931/): Malicious code in kurnia-empal64-breki (npm) (malicious package)
- [MAL-2025-44930](https://insights.sbomify.com/MAL-2025-44930/): Malicious code in kurnia-buburayam77-breki (npm) (malicious package)
- [MAL-2025-4493](https://insights.sbomify.com/MAL-2025-4493/): Malicious code in nayan-videos-downloaders (npm) (malicious package)
- [MAL-2025-44929](https://insights.sbomify.com/MAL-2025-44929/): Malicious code in kuiperbelt-miranda-dotenv-parse-variables-radiant (npm) (malicious package)
- [MAL-2025-44928](https://insights.sbomify.com/MAL-2025-44928/): Malicious code in kuaile-xueziwei (npm) (malicious package)
- [MAL-2025-44927](https://insights.sbomify.com/MAL-2025-44927/): Malicious code in kuaciyuan-hulianwang (npm) (malicious package)
- [MAL-2025-44926](https://insights.sbomify.com/MAL-2025-44926/): Malicious code in kssd-volyiyi-web-sec (npm) (malicious package)
- [MAL-2025-44925](https://insights.sbomify.com/MAL-2025-44925/): Malicious code in kssd-volyisan-bbs (npm) (malicious package)
- [MAL-2025-44924](https://insights.sbomify.com/MAL-2025-44924/): Malicious code in kssd-volyiling-vuln (npm) (malicious package)
- [MAL-2025-44923](https://insights.sbomify.com/MAL-2025-44923/): Malicious code in kssd-volyier-etc (npm) (malicious package)
- [MAL-2025-44922](https://insights.sbomify.com/MAL-2025-44922/): Malicious code in kssd-vol9-virus (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/614/
