# Vulnerabilities published in 2025


- [MAL-2025-28496](https://insights.sbomify.com/MAL-2025-28496/): Malicious code in orogeny-transform-paleobotany-ursa (npm) (malicious package)
- [MAL-2025-28495](https://insights.sbomify.com/MAL-2025-28495/): Malicious code in orogeny-titan-test-xanadu (npm) (malicious package)
- [MAL-2025-28494](https://insights.sbomify.com/MAL-2025-28494/): Malicious code in ormblog (npm) (malicious package)
- [MAL-2025-28493](https://insights.sbomify.com/MAL-2025-28493/): Malicious code in orionfs (npm) (malicious package)
- [MAL-2025-28492](https://insights.sbomify.com/MAL-2025-28492/): Malicious code in origgami (npm) (malicious package)
- [MAL-2025-28491](https://insights.sbomify.com/MAL-2025-28491/): Malicious code in orgman (npm) (malicious package)
- [MAL-2025-28490](https://insights.sbomify.com/MAL-2025-28490/): Malicious code in org.eclipse.n4js.sample.utils (npm) (malicious package)
- [MAL-2025-2849](https://insights.sbomify.com/MAL-2025-2849/): Malicious code in bitrue-main (npm) (malicious package)
- [MAL-2025-28489](https://insights.sbomify.com/MAL-2025-28489/): Malicious code in oregano-umbrella-t4me (npm) (malicious package)
- [MAL-2025-28488](https://insights.sbomify.com/MAL-2025-28488/): Malicious code in oregano-penguin-qkli (npm) (malicious package)
- [MAL-2025-28487](https://insights.sbomify.com/MAL-2025-28487/): Malicious code in ords-db-mongoaws (npm) (malicious package)
- [MAL-2025-28486](https://insights.sbomify.com/MAL-2025-28486/): Malicious code in orderly-js-sdk-remix-template (npm) (malicious package)
- [MAL-2025-28485](https://insights.sbomify.com/MAL-2025-28485/): Malicious code in orderly-js-sdk-nextjs-template (npm) (malicious package)
- [MAL-2025-28484](https://insights.sbomify.com/MAL-2025-28484/): Malicious code in order-management-system (npm) (malicious package)
- [MAL-2025-28483](https://insights.sbomify.com/MAL-2025-28483/): Malicious code in orchid-xenon-cfr506-project (npm) (malicious package)
- [MAL-2025-28482](https://insights.sbomify.com/MAL-2025-28482/): Malicious code in orchid-vale-mwv292-project (npm) (malicious package)
- [MAL-2025-28481](https://insights.sbomify.com/MAL-2025-28481/): Malicious code in orchid-sapphire-ymd094-project (npm) (malicious package)
- [MAL-2025-28480](https://insights.sbomify.com/MAL-2025-28480/): Malicious code in orchid-peony-kgf706-project (npm) (malicious package)
- [MAL-2025-2848](https://insights.sbomify.com/MAL-2025-2848/): Malicious code in bitrue-internal (npm) (malicious package)
- [MAL-2025-28479](https://insights.sbomify.com/MAL-2025-28479/): Malicious code in orchid-mangrove-xft413-project (npm) (malicious package)
- [MAL-2025-28478](https://insights.sbomify.com/MAL-2025-28478/): Malicious code in orchid-falcon-hus327-project (npm) (malicious package)
- [MAL-2025-28477](https://insights.sbomify.com/MAL-2025-28477/): Malicious code in orchid-everglow-lsh735-project (npm) (malicious package)
- [MAL-2025-28476](https://insights.sbomify.com/MAL-2025-28476/): Malicious code in orchid-dragon-zwm865-project (npm) (malicious package)
- [MAL-2025-28475](https://insights.sbomify.com/MAL-2025-28475/): Malicious code in Orchestrator (npm) (malicious package)
- [MAL-2025-28474](https://insights.sbomify.com/MAL-2025-28474/): Malicious code in orchestrate-finally-static-long-cloud (npm) (malicious package)
- [MAL-2025-28473](https://insights.sbomify.com/MAL-2025-28473/): Malicious code in orbitdb (npm) (malicious package)
- [MAL-2025-28472](https://insights.sbomify.com/MAL-2025-28472/): Malicious code in orbit-zenith-57oh (npm) (malicious package)
- [MAL-2025-28471](https://insights.sbomify.com/MAL-2025-28471/): Malicious code in orbit-technosignature-playwright-abiogenesis (npm) (malicious package)
- [MAL-2025-28470](https://insights.sbomify.com/MAL-2025-28470/): Malicious code in orbit-t4hmg-n2rl2-obsidian-project (npm) (malicious package)
- [MAL-2025-2847](https://insights.sbomify.com/MAL-2025-2847/): Malicious code in bitrue-dev (npm) (malicious package)
- [MAL-2025-28469](https://insights.sbomify.com/MAL-2025-28469/): Malicious code in orbit-spruce-pfi8 (npm) (malicious package)
- [MAL-2025-28468](https://insights.sbomify.com/MAL-2025-28468/): Malicious code in orbit-sierra-wmm8 (npm) (malicious package)
- [MAL-2025-28467](https://insights.sbomify.com/MAL-2025-28467/): Malicious code in orbit-shack-b97t (npm) (malicious package)
- [MAL-2025-28466](https://insights.sbomify.com/MAL-2025-28466/): Malicious code in orbit-s6j0d-ys784-twilight-project (npm) (malicious package)
- [MAL-2025-28465](https://insights.sbomify.com/MAL-2025-28465/): Malicious code in orbit-qih17-ujnrc-whisper-project (npm) (malicious package)
- [MAL-2025-28464](https://insights.sbomify.com/MAL-2025-28464/): Malicious code in orbit-parallax-init-canopus (npm) (malicious package)
- [MAL-2025-28463](https://insights.sbomify.com/MAL-2025-28463/): Malicious code in orbit-papa-yfi5 (npm) (malicious package)
- [MAL-2025-28462](https://insights.sbomify.com/MAL-2025-28462/): Malicious code in orbit-ocean-zs01 (npm) (malicious package)
- [MAL-2025-28461](https://insights.sbomify.com/MAL-2025-28461/): Malicious code in orbit-mountain-gar6 (npm) (malicious package)
- [MAL-2025-28460](https://insights.sbomify.com/MAL-2025-28460/): Malicious code in orbit-jetty-8bzr (npm) (malicious package)
- [MAL-2025-2846](https://insights.sbomify.com/MAL-2025-2846/): Malicious code in bitrue (npm) (malicious package)
- [MAL-2025-28459](https://insights.sbomify.com/MAL-2025-28459/): Malicious code in orbit-india-u4ak (npm) (malicious package)
- [MAL-2025-28458](https://insights.sbomify.com/MAL-2025-28458/): Malicious code in orbit-equinox-hawkingradiation-quito (npm) (malicious package)
- [MAL-2025-28457](https://insights.sbomify.com/MAL-2025-28457/): Malicious code in orawork (npm) (malicious package)
- [MAL-2025-28456](https://insights.sbomify.com/MAL-2025-28456/): Malicious code in orangutan-xenon-qdp576-project (npm) (malicious package)
- [MAL-2025-28455](https://insights.sbomify.com/MAL-2025-28455/): Malicious code in orangutan-wave-yxm325-project (npm) (malicious package)
- [MAL-2025-28454](https://insights.sbomify.com/MAL-2025-28454/): Malicious code in orangutan-reef-qfs159-project (npm) (malicious package)
- [MAL-2025-28453](https://insights.sbomify.com/MAL-2025-28453/): Malicious code in orangutan-mist-lsj231-project (npm) (malicious package)
- [MAL-2025-28452](https://insights.sbomify.com/MAL-2025-28452/): Malicious code in orangutan-harbor-nbd505-project (npm) (malicious package)
- [MAL-2025-28451](https://insights.sbomify.com/MAL-2025-28451/): Malicious code in orangutan-desert-jdr695-project (npm) (malicious package)
- [MAL-2025-28450](https://insights.sbomify.com/MAL-2025-28450/): Malicious code in orangutan-cloud-xvk864-project (npm) (malicious package)
- [MAL-2025-2845](https://insights.sbomify.com/MAL-2025-2845/): Malicious code in bifinance-test (npm) (malicious package)
- [MAL-2025-28449](https://insights.sbomify.com/MAL-2025-28449/): Malicious code in orangutan-cloud-gen530-project (npm) (malicious package)
- [MAL-2025-28448](https://insights.sbomify.com/MAL-2025-28448/): Malicious code in orangutan-aspen-env983-project (npm) (malicious package)
- [MAL-2025-28447](https://insights.sbomify.com/MAL-2025-28447/): Malicious code in orangutan-aroma-cjo803-project (npm) (malicious package)
- [MAL-2025-28446](https://insights.sbomify.com/MAL-2025-28446/): Malicious code in orange-zv5-project (npm) (malicious package)
- [MAL-2025-28445](https://insights.sbomify.com/MAL-2025-28445/): Malicious code in orange-zcx-project (npm) (malicious package)
- [MAL-2025-28444](https://insights.sbomify.com/MAL-2025-28444/): Malicious code in orange-yp2-project (npm) (malicious package)
- [MAL-2025-28443](https://insights.sbomify.com/MAL-2025-28443/): Malicious code in orange-yankee-mzux (npm) (malicious package)
- [MAL-2025-28442](https://insights.sbomify.com/MAL-2025-28442/): Malicious code in orange-yam-mviu (npm) (malicious package)
- [MAL-2025-28441](https://insights.sbomify.com/MAL-2025-28441/): Malicious code in orange-xfv-project (npm) (malicious package)
- [MAL-2025-28440](https://insights.sbomify.com/MAL-2025-28440/): Malicious code in orange-victor-juliet-azolk (npm) (malicious package)
- [MAL-2025-2844](https://insights.sbomify.com/MAL-2025-2844/): Malicious code in bifinance-main (npm) (malicious package)
- [MAL-2025-28439](https://insights.sbomify.com/MAL-2025-28439/): Malicious code in orange-victor-jdxc (npm) (malicious package)
- [MAL-2025-28438](https://insights.sbomify.com/MAL-2025-28438/): Malicious code in orange-victor-bravo-lzgvu (npm) (malicious package)
- [MAL-2025-28437](https://insights.sbomify.com/MAL-2025-28437/): Malicious code in orange-vanilla-nasp (npm) (malicious package)
- [MAL-2025-28436](https://insights.sbomify.com/MAL-2025-28436/): Malicious code in orange-vanilla-fjhw (npm) (malicious package)
- [MAL-2025-28435](https://insights.sbomify.com/MAL-2025-28435/): Malicious code in orange-uniform-yuzh (npm) (malicious package)
- [MAL-2025-28434](https://insights.sbomify.com/MAL-2025-28434/): Malicious code in orange-uniform-sbtp (npm) (malicious package)
- [MAL-2025-28433](https://insights.sbomify.com/MAL-2025-28433/): Malicious code in orange-uniform-hjny (npm) (malicious package)
- [MAL-2025-28432](https://insights.sbomify.com/MAL-2025-28432/): Malicious code in orange-ugli-inar (npm) (malicious package)
- [MAL-2025-28431](https://insights.sbomify.com/MAL-2025-28431/): Malicious code in orange-ua6-project (npm) (malicious package)
- [MAL-2025-28430](https://insights.sbomify.com/MAL-2025-28430/): Malicious code in orange-u3k-project (npm) (malicious package)
- [MAL-2025-2843](https://insights.sbomify.com/MAL-2025-2843/): Malicious code in bifinance-internal (npm) (malicious package)
- [MAL-2025-28429](https://insights.sbomify.com/MAL-2025-28429/): Malicious code in orange-temple-0wtk (npm) (malicious package)
- [MAL-2025-28428](https://insights.sbomify.com/MAL-2025-28428/): Malicious code in orange-strawberry-november-akwlc (npm) (malicious package)
- [MAL-2025-28427](https://insights.sbomify.com/MAL-2025-28427/): Malicious code in orange-sierra-zulu-ltkie (npm) (malicious package)
- [MAL-2025-28426](https://insights.sbomify.com/MAL-2025-28426/): Malicious code in orange-sierra-zmkr (npm) (malicious package)
- [MAL-2025-28425](https://insights.sbomify.com/MAL-2025-28425/): Malicious code in orange-shl-project (npm) (malicious package)
- [MAL-2025-28424](https://insights.sbomify.com/MAL-2025-28424/): Malicious code in orange-rrj-project (npm) (malicious package)
- [MAL-2025-28423](https://insights.sbomify.com/MAL-2025-28423/): Malicious code in orange-quebec-india-ggjuj (npm) (malicious package)
- [MAL-2025-28422](https://insights.sbomify.com/MAL-2025-28422/): Malicious code in orange-q0a-project (npm) (malicious package)
- [MAL-2025-28421](https://insights.sbomify.com/MAL-2025-28421/): Malicious code in orange-papaya-ietx (npm) (malicious package)
- [MAL-2025-28420](https://insights.sbomify.com/MAL-2025-28420/): Malicious code in orange-oscar-fpob (npm) (malicious package)
- [MAL-2025-2842](https://insights.sbomify.com/MAL-2025-2842/): Malicious code in bifinance-dev (npm) (malicious package)
- [MAL-2025-28419](https://insights.sbomify.com/MAL-2025-28419/): Malicious code in orange-nrt-project (npm) (malicious package)
- [MAL-2025-28418](https://insights.sbomify.com/MAL-2025-28418/): Malicious code in orange-november-wssc (npm) (malicious package)
- [MAL-2025-28417](https://insights.sbomify.com/MAL-2025-28417/): Malicious code in orange-msl-project (npm) (malicious package)
- [MAL-2025-28416](https://insights.sbomify.com/MAL-2025-28416/): Malicious code in orange-mike-papa-iapwb (npm) (malicious package)
- [MAL-2025-28415](https://insights.sbomify.com/MAL-2025-28415/): Malicious code in orange-mango-mng9 (npm) (malicious package)
- [MAL-2025-28414](https://insights.sbomify.com/MAL-2025-28414/): Malicious code in orange-mango-mike-naomg (npm) (malicious package)
- [MAL-2025-28413](https://insights.sbomify.com/MAL-2025-28413/): Malicious code in orange-mango-jyrb (npm) (malicious package)
- [MAL-2025-28412](https://insights.sbomify.com/MAL-2025-28412/): Malicious code in orange-mango-izlo (npm) (malicious package)
- [MAL-2025-28411](https://insights.sbomify.com/MAL-2025-28411/): Malicious code in orange-mango-ifrk (npm) (malicious package)
- [MAL-2025-28410](https://insights.sbomify.com/MAL-2025-28410/): Malicious code in orange-kvz-project (npm) (malicious package)
- [MAL-2025-2841](https://insights.sbomify.com/MAL-2025-2841/): Malicious code in azbit-test (npm) (malicious package)
- [MAL-2025-28409](https://insights.sbomify.com/MAL-2025-28409/): Malicious code in orange-kiwi-tjta (npm) (malicious package)
- [MAL-2025-28408](https://insights.sbomify.com/MAL-2025-28408/): Malicious code in orange-kilo-hotel-hpjhr (npm) (malicious package)
- [MAL-2025-28407](https://insights.sbomify.com/MAL-2025-28407/): Malicious code in orange-kilo-bygp (npm) (malicious package)
- [MAL-2025-28406](https://insights.sbomify.com/MAL-2025-28406/): Malicious code in orange-jw2-project (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/797/