# Vulnerabilities published in 2025


- [MAL-2025-24805](https://insights.sbomify.com/MAL-2025-24805/): Malicious code in kuiper-orange-yabh (npm) (malicious package)
- [MAL-2025-24804](https://insights.sbomify.com/MAL-2025-24804/): Malicious code in kuiper-orange-m3ie (npm) (malicious package)
- [MAL-2025-24803](https://insights.sbomify.com/MAL-2025-24803/): Malicious code in kuiper-lemon-8y0t (npm) (malicious package)
- [MAL-2025-24802](https://insights.sbomify.com/MAL-2025-24802/): Malicious code in kuiper-kale-6bfm (npm) (malicious package)
- [MAL-2025-24801](https://insights.sbomify.com/MAL-2025-24801/): Malicious code in kuimwubna (npm) (malicious package)
- [MAL-2025-24800](https://insights.sbomify.com/MAL-2025-24800/): Malicious code in kue-worker (npm) (malicious package)
- [MAL-2025-2480](https://insights.sbomify.com/MAL-2025-2480/): Malicious code in you-test-vue6 (npm) (malicious package)
- [MAL-2025-248](https://insights.sbomify.com/MAL-2025-248/): Malicious code in stormapp (npm) (malicious package)
- [MAL-2025-24799](https://insights.sbomify.com/MAL-2025-24799/): Malicious code in kubernetes-deploy (npm) (malicious package)
- [MAL-2025-24798](https://insights.sbomify.com/MAL-2025-24798/): Malicious code in kube-config (npm) (malicious package)
- [MAL-2025-24797](https://insights.sbomify.com/MAL-2025-24797/): Malicious code in ktyt3 (npm) (malicious package)
- [MAL-2025-24796](https://insights.sbomify.com/MAL-2025-24796/): Malicious code in ktreehr (npm) (malicious package)
- [MAL-2025-24795](https://insights.sbomify.com/MAL-2025-24795/): Malicious code in ktimeline (npm) (malicious package)
- [MAL-2025-24794](https://insights.sbomify.com/MAL-2025-24794/): Malicious code in kte2www (npm) (malicious package)
- [MAL-2025-24793](https://insights.sbomify.com/MAL-2025-24793/): Malicious code in kstars (npm) (malicious package)
- [MAL-2025-24792](https://insights.sbomify.com/MAL-2025-24792/): Malicious code in ksmylz (npm) (malicious package)
- [MAL-2025-24791](https://insights.sbomify.com/MAL-2025-24791/): Malicious code in ksl-weather (npm) (malicious package)
- [MAL-2025-24790](https://insights.sbomify.com/MAL-2025-24790/): Malicious code in ksimzflpubgwrxhj (npm) (malicious package)
- [MAL-2025-2479](https://insights.sbomify.com/MAL-2025-2479/): Malicious code in you-test-vue5 (npm) (malicious package)
- [MAL-2025-24789](https://insights.sbomify.com/MAL-2025-24789/): Malicious code in ksekina (npm) (malicious package)
- [MAL-2025-24788](https://insights.sbomify.com/MAL-2025-24788/): Malicious code in ksachin (npm) (malicious package)
- [MAL-2025-24787](https://insights.sbomify.com/MAL-2025-24787/): Malicious code in ks-sha3 (npm) (malicious package)
- [MAL-2025-24786](https://insights.sbomify.com/MAL-2025-24786/): Malicious code in kryptor-session (npm) (malicious package)
- [MAL-2025-24785](https://insights.sbomify.com/MAL-2025-24785/): Malicious code in kryptor-csrf (npm) (malicious package)
- [MAL-2025-24784](https://insights.sbomify.com/MAL-2025-24784/): Malicious code in kryptonite_yy0w1_1u2xo_keystone (npm) (malicious package)
- [MAL-2025-24783](https://insights.sbomify.com/MAL-2025-24783/): Malicious code in kryptonite_xa6kb_wk46r_whisper (npm) (malicious package)
- [MAL-2025-24782](https://insights.sbomify.com/MAL-2025-24782/): Malicious code in kryptonite_5c0w5_iu9lc_jade (npm) (malicious package)
- [MAL-2025-24781](https://insights.sbomify.com/MAL-2025-24781/): Malicious code in kronos-rest-sedna-umbriel (npm) (malicious package)
- [MAL-2025-24780](https://insights.sbomify.com/MAL-2025-24780/): Malicious code in kronos-areology-javascript-publish (npm) (malicious package)
- [MAL-2025-2478](https://insights.sbomify.com/MAL-2025-2478/): Malicious code in you-test-test-vue (npm) (malicious package)
- [MAL-2025-24779](https://insights.sbomify.com/MAL-2025-24779/): Malicious code in kripto (npm) (malicious package)
- [MAL-2025-24778](https://insights.sbomify.com/MAL-2025-24778/): Malicious code in kresna-tomat25-breki (npm) (malicious package)
- [MAL-2025-24777](https://insights.sbomify.com/MAL-2025-24777/): Malicious code in kresna-rawon91-breki (npm) (malicious package)
- [MAL-2025-24776](https://insights.sbomify.com/MAL-2025-24776/): Malicious code in kresna-rangginang31-sukiwir (npm) (malicious package)
- [MAL-2025-24775](https://insights.sbomify.com/MAL-2025-24775/): Malicious code in kresna-oncom84-breki (npm) (malicious package)
- [MAL-2025-24774](https://insights.sbomify.com/MAL-2025-24774/): Malicious code in kresna-lontong80-kuki (npm) (malicious package)
- [MAL-2025-24773](https://insights.sbomify.com/MAL-2025-24773/): Malicious code in kresna-kue12-sukiwir (npm) (malicious package)
- [MAL-2025-24772](https://insights.sbomify.com/MAL-2025-24772/): Malicious code in krebos (npm) (malicious package)
- [MAL-2025-24771](https://insights.sbomify.com/MAL-2025-24771/): Malicious code in krdwrd (npm) (malicious package)
- [MAL-2025-24770](https://insights.sbomify.com/MAL-2025-24770/): Malicious code in kpl-ui-toolkit (npm) (malicious package)
- [MAL-2025-2477](https://insights.sbomify.com/MAL-2025-2477/): Malicious code in usedin1calculatedmember.js (npm) (malicious package)
- [MAL-2025-24769](https://insights.sbomify.com/MAL-2025-24769/): Malicious code in kpktcqlnjoimvyae (npm) (malicious package)
- [MAL-2025-24768](https://insights.sbomify.com/MAL-2025-24768/): Malicious code in kpi-panel (npm) (malicious package)
- [MAL-2025-24767](https://insights.sbomify.com/MAL-2025-24767/): Malicious code in kpfjzltsybodqnch (npm) (malicious package)
- [MAL-2025-24766](https://insights.sbomify.com/MAL-2025-24766/): Malicious code in kousik (npm) (malicious package)
- [MAL-2025-24765](https://insights.sbomify.com/MAL-2025-24765/): Malicious code in kotebr (npm) (malicious package)
- [MAL-2025-24764](https://insights.sbomify.com/MAL-2025-24764/): Malicious code in kosmobot (npm) (malicious package)
- [MAL-2025-24763](https://insights.sbomify.com/MAL-2025-24763/): Malicious code in kosmio-worker (npm) (malicious package)
- [MAL-2025-24762](https://insights.sbomify.com/MAL-2025-24762/): Malicious code in kosignbox (npm) (malicious package)
- [MAL-2025-24761](https://insights.sbomify.com/MAL-2025-24761/): Malicious code in korkort (npm) (malicious package)
- [MAL-2025-24760](https://insights.sbomify.com/MAL-2025-24760/): Malicious code in korepwx (npm) (malicious package)
- [MAL-2025-2476](https://insights.sbomify.com/MAL-2025-2476/): Malicious code in usedin1calculatedmember (npm) (malicious package)
- [MAL-2025-24759](https://insights.sbomify.com/MAL-2025-24759/): Malicious code in kopul-cli (npm) (malicious package)
- [MAL-2025-24758](https://insights.sbomify.com/MAL-2025-24758/): Malicious code in kopimia (npm) (malicious package)
- [MAL-2025-24757](https://insights.sbomify.com/MAL-2025-24757/): Malicious code in kopibot (npm) (malicious package)
- [MAL-2025-24756](https://insights.sbomify.com/MAL-2025-24756/): Malicious code in kontemp (npm) (malicious package)
- [MAL-2025-24755](https://insights.sbomify.com/MAL-2025-24755/): Malicious code in konora (npm) (malicious package)
- [MAL-2025-24754](https://insights.sbomify.com/MAL-2025-24754/): Malicious code in konflikto (npm) (malicious package)
- [MAL-2025-24753](https://insights.sbomify.com/MAL-2025-24753/): Malicious code in koncolx (npm) (malicious package)
- [MAL-2025-24752](https://insights.sbomify.com/MAL-2025-24752/): Malicious code in konani (npm) (malicious package)
- [MAL-2025-24751](https://insights.sbomify.com/MAL-2025-24751/): Malicious code in konacli (npm) (malicious package)
- [MAL-2025-24750](https://insights.sbomify.com/MAL-2025-24750/): Malicious code in komputer (npm) (malicious package)
- [MAL-2025-2475](https://insights.sbomify.com/MAL-2025-2475/): Malicious code in snap-design-system-marketing (npm) (malicious package)
- [MAL-2025-24749](https://insights.sbomify.com/MAL-2025-24749/): Malicious code in kommvahl (npm) (malicious package)
- [MAL-2025-24748](https://insights.sbomify.com/MAL-2025-24748/): Malicious code in komacorp (npm) (malicious package)
- [MAL-2025-24747](https://insights.sbomify.com/MAL-2025-24747/): Malicious code in koltron-project (npm) (malicious package)
- [MAL-2025-24746](https://insights.sbomify.com/MAL-2025-24746/): Malicious code in kolstat (npm) (malicious package)
- [MAL-2025-24745](https://insights.sbomify.com/MAL-2025-24745/): Malicious code in kolmobile (npm) (malicious package)
- [MAL-2025-24744](https://insights.sbomify.com/MAL-2025-24744/): Malicious code in kokoro-tts (npm) (malicious package)
- [MAL-2025-24743](https://insights.sbomify.com/MAL-2025-24743/): Malicious code in kokboka (npm) (malicious package)
- [MAL-2025-24742](https://insights.sbomify.com/MAL-2025-24742/): Malicious code in koelsch (npm) (malicious package)
- [MAL-2025-24741](https://insights.sbomify.com/MAL-2025-24741/): Malicious code in koedvulqjwxrmska (npm) (malicious package)
- [MAL-2025-24740](https://insights.sbomify.com/MAL-2025-24740/): Malicious code in kodsuli (npm) (malicious package)
- [MAL-2025-2474](https://insights.sbomify.com/MAL-2025-2474/): Malicious code in skinport-plus (npm) (malicious package)
- [MAL-2025-24739](https://insights.sbomify.com/MAL-2025-24739/): Malicious code in kodeks (npm) (malicious package)
- [MAL-2025-24738](https://insights.sbomify.com/MAL-2025-24738/): Malicious code in kocal-server (npm) (malicious package)
- [MAL-2025-24737](https://insights.sbomify.com/MAL-2025-24737/): Malicious code in kocal (npm) (malicious package)
- [MAL-2025-24736](https://insights.sbomify.com/MAL-2025-24736/): Malicious code in kobliha (npm) (malicious package)
- [MAL-2025-24735](https://insights.sbomify.com/MAL-2025-24735/): Malicious code in koala-zenith-ntb487-project (npm) (malicious package)
- [MAL-2025-24734](https://insights.sbomify.com/MAL-2025-24734/): Malicious code in koala-xerus-gvd334-project (npm) (malicious package)
- [MAL-2025-24733](https://insights.sbomify.com/MAL-2025-24733/): Malicious code in koala-xerox-eky245-project (npm) (malicious package)
- [MAL-2025-24732](https://insights.sbomify.com/MAL-2025-24732/): Malicious code in koala-uranium-agp734-project (npm) (malicious package)
- [MAL-2025-24731](https://insights.sbomify.com/MAL-2025-24731/): Malicious code in koala-sapphire-omn644-project (npm) (malicious package)
- [MAL-2025-24730](https://insights.sbomify.com/MAL-2025-24730/): Malicious code in koala-quasar-snk474-project (npm) (malicious package)
- [MAL-2025-2473](https://insights.sbomify.com/MAL-2025-2473/): Malicious code in shorterapp (npm) (malicious package)
- [MAL-2025-24729](https://insights.sbomify.com/MAL-2025-24729/): Malicious code in koala-nugget-rfx340-project (npm) (malicious package)
- [MAL-2025-24728](https://insights.sbomify.com/MAL-2025-24728/): Malicious code in koala-lagoon-ova095-project (npm) (malicious package)
- [MAL-2025-24727](https://insights.sbomify.com/MAL-2025-24727/): Malicious code in koala-jungle-wok275-project (npm) (malicious package)
- [MAL-2025-24726](https://insights.sbomify.com/MAL-2025-24726/): Malicious code in koala-jade-xvv523-project (npm) (malicious package)
- [MAL-2025-24725](https://insights.sbomify.com/MAL-2025-24725/): Malicious code in koala-hedgehog-dra160-project (npm) (malicious package)
- [MAL-2025-24724](https://insights.sbomify.com/MAL-2025-24724/): Malicious code in koala-frost-nfk075-project (npm) (malicious package)
- [MAL-2025-24723](https://insights.sbomify.com/MAL-2025-24723/): Malicious code in koala-crystal-lwy848-project (npm) (malicious package)
- [MAL-2025-24722](https://insights.sbomify.com/MAL-2025-24722/): Malicious code in koa-vulcan-auth-quasarjet (npm) (malicious package)
- [MAL-2025-24721](https://insights.sbomify.com/MAL-2025-24721/): Malicious code in koa-uglify-js-css-minimizer-webpack-plugin-tectonophysics (npm) (malicious package)
- [MAL-2025-24720](https://insights.sbomify.com/MAL-2025-24720/): Malicious code in koa-speleology-greatfilter-gravitationalwave (npm) (malicious package)
- [MAL-2025-2472](https://insights.sbomify.com/MAL-2025-2472/): Malicious code in ramp-tax-info-ui (npm) (malicious package)
- [MAL-2025-24719](https://insights.sbomify.com/MAL-2025-24719/): Malicious code in koa-redisy (npm) (malicious package)
- [MAL-2025-24718](https://insights.sbomify.com/MAL-2025-24718/): Malicious code in koa-react-sidecar (npm) (malicious package)
- [MAL-2025-24717](https://insights.sbomify.com/MAL-2025-24717/): Malicious code in koa-radioastronomy-cosmogenic-mongoose (npm) (malicious package)
- [MAL-2025-24716](https://insights.sbomify.com/MAL-2025-24716/): Malicious code in koa-mq (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/838/