# Vulnerabilities published in 2025


- [MAL-2025-43571](https://insights.sbomify.com/MAL-2025-43571/): Malicious code in bambang-tomat29-breki (npm) (malicious package)
- [MAL-2025-43570](https://insights.sbomify.com/MAL-2025-43570/): Malicious code in bambang-tomat13-breki (npm) (malicious package)
- [MAL-2025-4357](https://insights.sbomify.com/MAL-2025-4357/): Malicious code in gunbazaar (npm) (malicious package)
- [MAL-2025-43569](https://insights.sbomify.com/MAL-2025-43569/): Malicious code in bambang-soto80-breki (npm) (malicious package)
- [MAL-2025-43568](https://insights.sbomify.com/MAL-2025-43568/): Malicious code in bambang-ronde71-breki (npm) (malicious package)
- [MAL-2025-43567](https://insights.sbomify.com/MAL-2025-43567/): Malicious code in bambang-nasipecel55-breki (npm) (malicious package)
- [MAL-2025-43566](https://insights.sbomify.com/MAL-2025-43566/): Malicious code in bambang-mangut87-kyuki (npm) (malicious package)
- [MAL-2025-43565](https://insights.sbomify.com/MAL-2025-43565/): Malicious code in bambang-lutis48-breki (npm) (malicious package)
- [MAL-2025-43564](https://insights.sbomify.com/MAL-2025-43564/): Malicious code in bambang-lupis1-breki (npm) (malicious package)
- [MAL-2025-43563](https://insights.sbomify.com/MAL-2025-43563/): Malicious code in bambang-jus70-breki (npm) (malicious package)
- [MAL-2025-43562](https://insights.sbomify.com/MAL-2025-43562/): Malicious code in bambang-bubur2-kyuki (npm) (malicious package)
- [MAL-2025-43561](https://insights.sbomify.com/MAL-2025-43561/): Malicious code in bambang-botok2-breki (npm) (malicious package)
- [MAL-2025-43560](https://insights.sbomify.com/MAL-2025-43560/): Malicious code in bambang-bakwan3-breki (npm) (malicious package)
- [MAL-2025-4356](https://insights.sbomify.com/MAL-2025-4356/): Malicious code in greetpk (npm) (malicious package)
- [MAL-2025-43559](https://insights.sbomify.com/MAL-2025-43559/): Malicious code in baitian-yuehui-baodian (npm) (malicious package)
- [MAL-2025-43558](https://insights.sbomify.com/MAL-2025-43558/): Malicious code in baguwen-wiki (npm) (malicious package)
- [MAL-2025-43557](https://insights.sbomify.com/MAL-2025-43557/): Malicious code in backend-hermes-tailwindcss-iota (npm) (malicious package)
- [MAL-2025-43556](https://insights.sbomify.com/MAL-2025-43556/): Malicious code in babel-ceres-sedna-titan (npm) (malicious package)
- [MAL-2025-43555](https://insights.sbomify.com/MAL-2025-43555/): Malicious code in azure-open-ai-accelerator (npm) (malicious package)
- [MAL-2025-43554](https://insights.sbomify.com/MAL-2025-43554/): Malicious code in azure-iot-stresstests (npm) (malicious package)
- [MAL-2025-43553](https://insights.sbomify.com/MAL-2025-43553/): Malicious code in axios-npm-cosmiconfig-io (npm) (malicious package)
- [MAL-2025-43552](https://insights.sbomify.com/MAL-2025-43552/): Malicious code in avatar2-watch-now-online-2023-edldz (npm) (malicious package)
- [MAL-2025-43551](https://insights.sbomify.com/MAL-2025-43551/): Malicious code in avatar2-full-april-2023-movie-gregerz (npm) (malicious package)
- [MAL-2025-43550](https://insights.sbomify.com/MAL-2025-43550/): Malicious code in avatar2-full-2023-movie-dkzldz (npm) (malicious package)
- [MAL-2025-4355](https://insights.sbomify.com/MAL-2025-4355/): Malicious code in gop_status_frontend (npm) (malicious package)
- [MAL-2025-43549](https://insights.sbomify.com/MAL-2025-43549/): Malicious code in avatar-the-way-of-water-online-dkeldez (npm) (malicious package)
- [MAL-2025-43548](https://insights.sbomify.com/MAL-2025-43548/): Malicious code in avatar-the-way-of-water-movie-streaming-edjezkd (npm) (malicious package)
- [MAL-2025-43547](https://insights.sbomify.com/MAL-2025-43547/): Malicious code in avatar-the-way-of-water-free-streaming-djzdk (npm) (malicious package)
- [MAL-2025-43546](https://insights.sbomify.com/MAL-2025-43546/): Malicious code in auth0-draco-quantumfoam-galaxy (npm) (malicious package)
- [MAL-2025-43545](https://insights.sbomify.com/MAL-2025-43545/): Malicious code in auth0-chalk-redis-command (npm) (malicious package)
- [MAL-2025-43544](https://insights.sbomify.com/MAL-2025-43544/): Malicious code in auth-pulsar-local-transform (npm) (malicious package)
- [MAL-2025-43543](https://insights.sbomify.com/MAL-2025-43543/): Malicious code in auth-polaris-rate-limiter-optimize-css-assets-webpack-plugin (npm) (malicious package)
- [MAL-2025-43542](https://insights.sbomify.com/MAL-2025-43542/): Malicious code in auth-dotenv-halley-prettier-stylelint (npm) (malicious package)
- [MAL-2025-43541](https://insights.sbomify.com/MAL-2025-43541/): Malicious code in australis-neptunology-eslint-init (npm) (malicious package)
- [MAL-2025-43540](https://insights.sbomify.com/MAL-2025-43540/): Malicious code in aurora_5miaf_gx3gz_xenon (npm) (malicious package)
- [MAL-2025-4354](https://insights.sbomify.com/MAL-2025-4354/): Malicious code in giftcards (npm) (malicious package)
- [MAL-2025-43539](https://insights.sbomify.com/MAL-2025-43539/): Malicious code in auriga-spectron-webdriver-nuxtjs-native (npm) (malicious package)
- [MAL-2025-43538](https://insights.sbomify.com/MAL-2025-43538/): Malicious code in augmentedreality-europa-blueshift-prosthetics (npm) (malicious package)
- [MAL-2025-43537](https://insights.sbomify.com/MAL-2025-43537/): Malicious code in augmentedreality-cz-conventional-changelog-elektra-bellatrix (npm) (malicious package)
- [MAL-2025-43536](https://insights.sbomify.com/MAL-2025-43536/): Malicious code in atlas_1ayin_7vei7_ocean (npm) (malicious package)
- [MAL-2025-43535](https://insights.sbomify.com/MAL-2025-43535/): Malicious code in atlas-multiverse-higgs-webdriver-manager (npm) (malicious package)
- [MAL-2025-43534](https://insights.sbomify.com/MAL-2025-43534/): Malicious code in async-xerxes-standard-tethys (npm) (malicious package)
- [MAL-2025-43533](https://insights.sbomify.com/MAL-2025-43533/): Malicious code in async-parallax-publish-nightwatch (npm) (malicious package)
- [MAL-2025-43532](https://insights.sbomify.com/MAL-2025-43532/): Malicious code in astrophysics-commitlint-config-angular-unuk-luna (npm) (malicious package)
- [MAL-2025-43531](https://insights.sbomify.com/MAL-2025-43531/): Malicious code in astrochemistry-robotics-sass-loader-polaris (npm) (malicious package)
- [MAL-2025-43530](https://insights.sbomify.com/MAL-2025-43530/): Malicious code in astrobiology-spawn-development-typeorm (npm) (malicious package)
- [MAL-2025-4353](https://insights.sbomify.com/MAL-2025-4353/): Malicious code in gcfront (npm) (malicious package)
- [MAL-2025-43529](https://insights.sbomify.com/MAL-2025-43529/): Malicious code in astrobiology-repository-materialize-pulsar (npm) (malicious package)
- [MAL-2025-43528](https://insights.sbomify.com/MAL-2025-43528/): Malicious code in astrobiology-less-loader-plutology-nightwatch (npm) (malicious package)
- [MAL-2025-43527](https://insights.sbomify.com/MAL-2025-43527/): Malicious code in astrobiology-got-meteor-transport (npm) (malicious package)
- [MAL-2025-43526](https://insights.sbomify.com/MAL-2025-43526/): Malicious code in astrobiology-gatsby-accretion-sails (npm) (malicious package)
- [MAL-2025-43525](https://insights.sbomify.com/MAL-2025-43525/): Malicious code in astrobiology-config-ablation-astro (npm) (malicious package)
- [MAL-2025-43524](https://insights.sbomify.com/MAL-2025-43524/): Malicious code in astro-sagitta-exobiology-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-43523](https://insights.sbomify.com/MAL-2025-43523/): Malicious code in astro-postcss-loader-grunt-selenium (npm) (malicious package)
- [MAL-2025-43522](https://insights.sbomify.com/MAL-2025-43522/): Malicious code in astro-mantle-accretion-deimos (npm) (malicious package)
- [MAL-2025-43521](https://insights.sbomify.com/MAL-2025-43521/): Malicious code in asteroid-quito-child-process-rest (npm) (malicious package)
- [MAL-2025-43520](https://insights.sbomify.com/MAL-2025-43520/): Malicious code in asteroid-everglow-kpe343-project (npm) (malicious package)
- [MAL-2025-4352](https://insights.sbomify.com/MAL-2025-4352/): Malicious code in gatsby-plugin-source-map (npm) (malicious package)
- [MAL-2025-43519](https://insights.sbomify.com/MAL-2025-43519/): Malicious code in asteroid-bamboo-gxv109-project (npm) (malicious package)
- [MAL-2025-43518](https://insights.sbomify.com/MAL-2025-43518/): Malicious code in aspen_0bwc2_2g6av_cascade (npm) (malicious package)
- [MAL-2025-43517](https://insights.sbomify.com/MAL-2025-43517/): Malicious code in aspen-lagoon-jlo437-project (npm) (malicious package)
- [MAL-2025-43516](https://insights.sbomify.com/MAL-2025-43516/): Malicious code in artillery-engine-spark (npm) (malicious package)
- [MAL-2025-43515](https://insights.sbomify.com/MAL-2025-43515/): Malicious code in aroma_cnqff_npir4_bloom (npm) (malicious package)
- [MAL-2025-43514](https://insights.sbomify.com/MAL-2025-43514/): Malicious code in aroma-zebra-orw045-project (npm) (malicious package)
- [MAL-2025-43513](https://insights.sbomify.com/MAL-2025-43513/): Malicious code in aroma-yacht-mub678-project (npm) (malicious package)
- [MAL-2025-43512](https://insights.sbomify.com/MAL-2025-43512/): Malicious code in arif-toge96-breki (npm) (malicious package)
- [MAL-2025-43511](https://insights.sbomify.com/MAL-2025-43511/): Malicious code in arif-tahu47-kyuki (npm) (malicious package)
- [MAL-2025-43510](https://insights.sbomify.com/MAL-2025-43510/): Malicious code in arif-oncom16-breki (npm) (malicious package)
- [MAL-2025-4351](https://insights.sbomify.com/MAL-2025-4351/): Malicious code in garena-react-template-redux (npm) (malicious package)
- [MAL-2025-43509](https://insights.sbomify.com/MAL-2025-43509/): Malicious code in arif-nasicampur18-breki (npm) (malicious package)
- [MAL-2025-43508](https://insights.sbomify.com/MAL-2025-43508/): Malicious code in arif-mieaceh56-breki (npm) (malicious package)
- [MAL-2025-43507](https://insights.sbomify.com/MAL-2025-43507/): Malicious code in arif-mendut76-kyuki (npm) (malicious package)
- [MAL-2025-43506](https://insights.sbomify.com/MAL-2025-43506/): Malicious code in arif-lodeh60-kyuki (npm) (malicious package)
- [MAL-2025-43505](https://insights.sbomify.com/MAL-2025-43505/): Malicious code in arif-liwet6-breki (npm) (malicious package)
- [MAL-2025-43504](https://insights.sbomify.com/MAL-2025-43504/): Malicious code in arif-kolak82-breki (npm) (malicious package)
- [MAL-2025-43503](https://insights.sbomify.com/MAL-2025-43503/): Malicious code in arif-gado-gado13-breki (npm) (malicious package)
- [MAL-2025-43502](https://insights.sbomify.com/MAL-2025-43502/): Malicious code in arif-donat52-kyuki (npm) (malicious package)
- [MAL-2025-43501](https://insights.sbomify.com/MAL-2025-43501/): Malicious code in arif-dodol28-kyuki (npm) (malicious package)
- [MAL-2025-43500](https://insights.sbomify.com/MAL-2025-43500/): Malicious code in arif-bubursumsum35-breki (npm) (malicious package)
- [MAL-2025-4350](https://insights.sbomify.com/MAL-2025-4350/): Malicious code in garena-admin (npm) (malicious package)
- [MAL-2025-435](https://insights.sbomify.com/MAL-2025-435/): Malicious code in dropbox-connect (npm) (malicious package)
- [MAL-2025-43499](https://insights.sbomify.com/MAL-2025-43499/): Malicious code in arif-brengkes6-breki (npm) (malicious package)
- [MAL-2025-43498](https://insights.sbomify.com/MAL-2025-43498/): Malicious code in arif-bika19-kyuki (npm) (malicious package)
- [MAL-2025-43497](https://insights.sbomify.com/MAL-2025-43497/): Malicious code in ariel-flare-mdx-paleoclimatology (npm) (malicious package)
- [MAL-2025-43496](https://insights.sbomify.com/MAL-2025-43496/): Malicious code in arctic-topaz-edq076-project (npm) (malicious package)
- [MAL-2025-43495](https://insights.sbomify.com/MAL-2025-43495/): Malicious code in arctic-jewel-qgf950-project (npm) (malicious package)
- [MAL-2025-43494](https://insights.sbomify.com/MAL-2025-43494/): Malicious code in archaeometry-parallax-polaris-glaciology (npm) (malicious package)
- [MAL-2025-43493](https://insights.sbomify.com/MAL-2025-43493/): Malicious code in archaeometry-hercules-singularitarianism-style-loader (npm) (malicious package)
- [MAL-2025-43492](https://insights.sbomify.com/MAL-2025-43492/): Malicious code in archaeogenetics-solis-coronalmassejection-chromedriver (npm) (malicious package)
- [MAL-2025-43491](https://insights.sbomify.com/MAL-2025-43491/): Malicious code in archaeoastronomy-panspermia-figures-centauri (npm) (malicious package)
- [MAL-2025-43490](https://insights.sbomify.com/MAL-2025-43490/): Malicious code in arcade_jzyj5_4qzl3_aurora (npm) (malicious package)
- [MAL-2025-4349](https://insights.sbomify.com/MAL-2025-4349/): Malicious code in gacha-box (npm) (malicious package)
- [MAL-2025-43489](https://insights.sbomify.com/MAL-2025-43489/): Malicious code in arcade_c1hbm_1smwt_zodiac (npm) (malicious package)
- [MAL-2025-43488](https://insights.sbomify.com/MAL-2025-43488/): Malicious code in arcade_bbvz7_wtp12_echo (npm) (malicious package)
- [MAL-2025-43487](https://insights.sbomify.com/MAL-2025-43487/): Malicious code in arbutus-docs (npm) (malicious package)
- [MAL-2025-43486](https://insights.sbomify.com/MAL-2025-43486/): Malicious code in aragearage (npm) (malicious package)
- [MAL-2025-43485](https://insights.sbomify.com/MAL-2025-43485/): Malicious code in april-free-coin-master-spins-2023-dzkdz (npm) (malicious package)
- [MAL-2025-43484](https://insights.sbomify.com/MAL-2025-43484/): Malicious code in apple-xray-zucchini-hlpxe (npm) (malicious package)
- [MAL-2025-43483](https://insights.sbomify.com/MAL-2025-43483/): Malicious code in apple-papaya-vanilla-cchox (npm) (malicious package)
- [MAL-2025-43482](https://insights.sbomify.com/MAL-2025-43482/): Malicious code in apollo-palynology-hydrogeology-relay (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/630/