# Vulnerabilities published in 2025


- [MAL-2025-34179](https://insights.sbomify.com/MAL-2025-34179/): Malicious code in sunruse-influx-libraries (npm) (malicious package)
- [MAL-2025-34178](https://insights.sbomify.com/MAL-2025-34178/): Malicious code in sunruse-influx-grunt (npm) (malicious package)
- [MAL-2025-34177](https://insights.sbomify.com/MAL-2025-34177/): Malicious code in sunruse-influx-cli (npm) (malicious package)
- [MAL-2025-34176](https://insights.sbomify.com/MAL-2025-34176/): Malicious code in sunmoon (npm) (malicious package)
- [MAL-2025-34175](https://insights.sbomify.com/MAL-2025-34175/): Malicious code in sunjaydut (npm) (malicious package)
- [MAL-2025-34174](https://insights.sbomify.com/MAL-2025-34174/): Malicious code in sunarp (npm) (malicious package)
- [MAL-2025-34173](https://insights.sbomify.com/MAL-2025-34173/): Malicious code in sun-cloud-sudo-array-benchmark (npm) (malicious package)
- [MAL-2025-34172](https://insights.sbomify.com/MAL-2025-34172/): Malicious code in summoners (npm) (malicious package)
- [MAL-2025-34171](https://insights.sbomify.com/MAL-2025-34171/): Malicious code in summaryze (npm) (malicious package)
- [MAL-2025-34170](https://insights.sbomify.com/MAL-2025-34170/): Malicious code in sujycqmzpahrvbft (npm) (malicious package)
- [MAL-2025-3417](https://insights.sbomify.com/MAL-2025-3417/): Malicious code in sticos.oppslag.web (npm) (malicious package)
- [MAL-2025-34169](https://insights.sbomify.com/MAL-2025-34169/): Malicious code in suite-level-tags (npm) (malicious package)
- [MAL-2025-34168](https://insights.sbomify.com/MAL-2025-34168/): Malicious code in suimello (npm) (malicious package)
- [MAL-2025-34167](https://insights.sbomify.com/MAL-2025-34167/): Malicious code in suharno (npm) (malicious package)
- [MAL-2025-34166](https://insights.sbomify.com/MAL-2025-34166/): Malicious code in sugr (npm) (malicious package)
- [MAL-2025-34165](https://insights.sbomify.com/MAL-2025-34165/): Malicious code in sugarftp (npm) (malicious package)
- [MAL-2025-34164](https://insights.sbomify.com/MAL-2025-34164/): Malicious code in sugar-test-core-separation (npm) (malicious package)
- [MAL-2025-34163](https://insights.sbomify.com/MAL-2025-34163/): Malicious code in sugar-es7 (npm) (malicious package)
- [MAL-2025-34162](https://insights.sbomify.com/MAL-2025-34162/): Malicious code in sugar-core-test (npm) (malicious package)
- [MAL-2025-34161](https://insights.sbomify.com/MAL-2025-34161/): Malicious code in suerpeng (npm) (malicious package)
- [MAL-2025-34160](https://insights.sbomify.com/MAL-2025-34160/): Malicious code in suepluxie (npm) (malicious package)
- [MAL-2025-3416](https://insights.sbomify.com/MAL-2025-3416/): Malicious code in startpeople-website (npm) (malicious package)
- [MAL-2025-34159](https://insights.sbomify.com/MAL-2025-34159/): Malicious code in sudoesiee (npm) (malicious package)
- [MAL-2025-34158](https://insights.sbomify.com/MAL-2025-34158/): Malicious code in sudo-resolve-deserialize-file-cloud (npm) (malicious package)
- [MAL-2025-34157](https://insights.sbomify.com/MAL-2025-34157/): Malicious code in sudo-hash-hash-public-void (npm) (malicious package)
- [MAL-2025-34156](https://insights.sbomify.com/MAL-2025-34156/): Malicious code in sudo-compile-visualize-rho-fast (npm) (malicious package)
- [MAL-2025-34155](https://insights.sbomify.com/MAL-2025-34155/): Malicious code in suddenly-tin-proud (npm) (malicious package)
- [MAL-2025-34154](https://insights.sbomify.com/MAL-2025-34154/): Malicious code in sucscss (npm) (malicious package)
- [MAL-2025-34153](https://insights.sbomify.com/MAL-2025-34153/): Malicious code in subverse (npm) (malicious package)
- [MAL-2025-34152](https://insights.sbomify.com/MAL-2025-34152/): Malicious code in subtitles-cli (npm) (malicious package)
- [MAL-2025-34151](https://insights.sbomify.com/MAL-2025-34151/): Malicious code in substuff (npm) (malicious package)
- [MAL-2025-34150](https://insights.sbomify.com/MAL-2025-34150/): Malicious code in substance-thrown-pair (npm) (malicious package)
- [MAL-2025-3415](https://insights.sbomify.com/MAL-2025-3415/): Malicious code in snyk-malware-poc (npm) (malicious package)
- [MAL-2025-34149](https://insights.sbomify.com/MAL-2025-34149/): Malicious code in subscription-void-sirius-kardashevscale (npm) (malicious package)
- [MAL-2025-34148](https://insights.sbomify.com/MAL-2025-34148/): Malicious code in subscription-virgo-cosmiconfig-nodemon (npm) (malicious package)
- [MAL-2025-34147](https://insights.sbomify.com/MAL-2025-34147/): Malicious code in subscription-futurology-transform-parcel (npm) (malicious package)
- [MAL-2025-34146](https://insights.sbomify.com/MAL-2025-34146/): Malicious code in subscription-cross-env-dione-protractor (npm) (malicious package)
- [MAL-2025-34145](https://insights.sbomify.com/MAL-2025-34145/): Malicious code in submarino (npm) (malicious package)
- [MAL-2025-34144](https://insights.sbomify.com/MAL-2025-34144/): Malicious code in sublimation-toml-cluster-gridsome (npm) (malicious package)
- [MAL-2025-34143](https://insights.sbomify.com/MAL-2025-34143/): Malicious code in sublimation-semantic-ui-enif-react-bootstrap (npm) (malicious package)
- [MAL-2025-34142](https://insights.sbomify.com/MAL-2025-34142/): Malicious code in sublimation-radiant-less-loader-ablation (npm) (malicious package)
- [MAL-2025-34141](https://insights.sbomify.com/MAL-2025-34141/): Malicious code in sublimation-ionosphere-quasar-darkmatter (npm) (malicious package)
- [MAL-2025-34140](https://insights.sbomify.com/MAL-2025-34140/): Malicious code in sublimation-docusaurus-hermes-avior (npm) (malicious package)
- [MAL-2025-3414](https://insights.sbomify.com/MAL-2025-3414/): Malicious code in sas-pseudol10n4js (npm) (malicious package)
- [MAL-2025-34139](https://insights.sbomify.com/MAL-2025-34139/): Malicious code in sublimation-astroinformatics-mineralogy-rimraf (npm) (malicious package)
- [MAL-2025-34138](https://insights.sbomify.com/MAL-2025-34138/): Malicious code in subliime (npm) (malicious package)
- [MAL-2025-34137](https://insights.sbomify.com/MAL-2025-34137/): Malicious code in subduction-pulsar-markdownlint-pino-pretty (npm) (malicious package)
- [MAL-2025-34136](https://insights.sbomify.com/MAL-2025-34136/): Malicious code in subduction-node-config-event-browserify (npm) (malicious package)
- [MAL-2025-34135](https://insights.sbomify.com/MAL-2025-34135/): Malicious code in subduction-nestjs-supercluster-norma (npm) (malicious package)
- [MAL-2025-34134](https://insights.sbomify.com/MAL-2025-34134/): Malicious code in subduction-nconf-prosthetics-nebula (npm) (malicious package)
- [MAL-2025-34133](https://insights.sbomify.com/MAL-2025-34133/): Malicious code in subduction-mira-scripts-mongoose (npm) (malicious package)
- [MAL-2025-34132](https://insights.sbomify.com/MAL-2025-34132/): Malicious code in subduction-exec-mutation-betelgeuse (npm) (malicious package)
- [MAL-2025-34131](https://insights.sbomify.com/MAL-2025-34131/): Malicious code in subcrunch (npm) (malicious package)
- [MAL-2025-34130](https://insights.sbomify.com/MAL-2025-34130/): Malicious code in suanfas (npm) (malicious package)
- [MAL-2025-3413](https://insights.sbomify.com/MAL-2025-3413/): Malicious code in ruba-clearpass-api (npm) (malicious package)
- [MAL-2025-34129](https://insights.sbomify.com/MAL-2025-34129/): Malicious code in suaneotvrcpqjyxk (npm) (malicious package)
- [MAL-2025-34128](https://insights.sbomify.com/MAL-2025-34128/): Malicious code in stynbb (npm) (malicious package)
- [MAL-2025-34127](https://insights.sbomify.com/MAL-2025-34127/): Malicious code in stylelint-polaris (npm) (malicious package)
- [MAL-2025-34126](https://insights.sbomify.com/MAL-2025-34126/): Malicious code in stylelint-function-url-no-domain (npm) (malicious package)
- [MAL-2025-34125](https://insights.sbomify.com/MAL-2025-34125/): Malicious code in stylelint-config-toolbox (npm) (malicious package)
- [MAL-2025-34124](https://insights.sbomify.com/MAL-2025-34124/): Malicious code in stylelint-config-edx (npm) (malicious package)
- [MAL-2025-34123](https://insights.sbomify.com/MAL-2025-34123/): Malicious code in stylelint-config-data-ui (npm) (malicious package)
- [MAL-2025-34122](https://insights.sbomify.com/MAL-2025-34122/): Malicious code in styled-jsx-plugin-sass-2 (npm) (malicious package)
- [MAL-2025-34121](https://insights.sbomify.com/MAL-2025-34121/): Malicious code in style-loader-spectroscopy-nova-browserify (npm) (malicious package)
- [MAL-2025-34120](https://insights.sbomify.com/MAL-2025-34120/): Malicious code in style-loader-server-epimetheus-dotenv-safe (npm) (malicious package)
- [MAL-2025-3412](https://insights.sbomify.com/MAL-2025-3412/): Malicious code in pdf-to-office (npm) (malicious package)
- [MAL-2025-34119](https://insights.sbomify.com/MAL-2025-34119/): Malicious code in style-loader-nextjs-css-loader-gemini (npm) (malicious package)
- [MAL-2025-34118](https://insights.sbomify.com/MAL-2025-34118/): Malicious code in style-loader-link-umbriel-wasat (npm) (malicious package)
- [MAL-2025-34117](https://insights.sbomify.com/MAL-2025-34117/): Malicious code in style-loader-elara-protractor-csrf (npm) (malicious package)
- [MAL-2025-34116](https://insights.sbomify.com/MAL-2025-34116/): Malicious code in style-loader-bellatrix-registry-alphard (npm) (malicious package)
- [MAL-2025-34115](https://insights.sbomify.com/MAL-2025-34115/): Malicious code in style-format (npm) (malicious package)
- [MAL-2025-34114](https://insights.sbomify.com/MAL-2025-34114/): Malicious code in style-dom (npm) (malicious package)
- [MAL-2025-34113](https://insights.sbomify.com/MAL-2025-34113/): Malicious code in style-console (npm) (malicious package)
- [MAL-2025-34112](https://insights.sbomify.com/MAL-2025-34112/): Malicious code in stuxnet (npm) (malicious package)
- [MAL-2025-34111](https://insights.sbomify.com/MAL-2025-34111/): Malicious code in stutters (npm) (malicious package)
- [MAL-2025-34110](https://insights.sbomify.com/MAL-2025-34110/): Malicious code in stukdonew (npm) (malicious package)
- [MAL-2025-3411](https://insights.sbomify.com/MAL-2025-3411/): Malicious code in packageblueimp-file-upload (npm) (malicious package)
- [MAL-2025-34109](https://insights.sbomify.com/MAL-2025-34109/): Malicious code in studyflip (npm) (malicious package)
- [MAL-2025-34108](https://insights.sbomify.com/MAL-2025-34108/): Malicious code in studo-services (npm) (malicious package)
- [MAL-2025-34107](https://insights.sbomify.com/MAL-2025-34107/): Malicious code in studgod (npm) (malicious package)
- [MAL-2025-34106](https://insights.sbomify.com/MAL-2025-34106/): Malicious code in student-competition (npm) (malicious package)
- [MAL-2025-34105](https://insights.sbomify.com/MAL-2025-34105/): Malicious code in stub-cat-good-quick-sigma (npm) (malicious package)
- [MAL-2025-34104](https://insights.sbomify.com/MAL-2025-34104/): Malicious code in stub-alpha-sed-transpile-cold (npm) (malicious package)
- [MAL-2025-34103](https://insights.sbomify.com/MAL-2025-34103/): Malicious code in struktor (npm) (malicious package)
- [MAL-2025-34102](https://insights.sbomify.com/MAL-2025-34102/): Malicious code in structured-event-logger (npm) (malicious package)
- [MAL-2025-34101](https://insights.sbomify.com/MAL-2025-34101/): Malicious code in structure-page-kitchen (npm) (malicious package)
- [MAL-2025-34100](https://insights.sbomify.com/MAL-2025-34100/): Malicious code in strssapp (npm) (malicious package)
- [MAL-2025-3410](https://insights.sbomify.com/MAL-2025-3410/): Malicious code in onemoretest9 (npm) (malicious package)
- [MAL-2025-341](https://insights.sbomify.com/MAL-2025-341/): Malicious code in octuple (npm) (malicious package)
- [MAL-2025-34099](https://insights.sbomify.com/MAL-2025-34099/): Malicious code in stringsx (npm) (malicious package)
- [MAL-2025-34098](https://insights.sbomify.com/MAL-2025-34098/): Malicious code in string-tethys-eleventy-astroinformatics (npm) (malicious package)
- [MAL-2025-34097](https://insights.sbomify.com/MAL-2025-34097/): Malicious code in string-template-extractor (npm) (malicious package)
- [MAL-2025-34096](https://insights.sbomify.com/MAL-2025-34096/): Malicious code in string-neuromorphic-ursa-alphard (npm) (malicious package)
- [MAL-2025-34095](https://insights.sbomify.com/MAL-2025-34095/): Malicious code in string-magnetosphere-webdriver-mocha-uglify-js (npm) (malicious package)
- [MAL-2025-34094](https://insights.sbomify.com/MAL-2025-34094/): Malicious code in string-letter-bee (npm) (malicious package)
- [MAL-2025-34093](https://insights.sbomify.com/MAL-2025-34093/): Malicious code in string-book-char-protected-deploy (npm) (malicious package)
- [MAL-2025-34092](https://insights.sbomify.com/MAL-2025-34092/): Malicious code in string-await-bad-uglify-small (npm) (malicious package)
- [MAL-2025-34091](https://insights.sbomify.com/MAL-2025-34091/): Malicious code in strictor (npm) (malicious package)
- [MAL-2025-34090](https://insights.sbomify.com/MAL-2025-34090/): Malicious code in stricto-helper (npm) (malicious package)
- [MAL-2025-3409](https://insights.sbomify.com/MAL-2025-3409/): Malicious code in o2_console_front (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/734/