# Vulnerabilities published in 2025


- [MAL-2025-24535](https://insights.sbomify.com/MAL-2025-24535/): Malicious code in kintisheff-geo (npm) (malicious package)
- [MAL-2025-24534](https://insights.sbomify.com/MAL-2025-24534/): Malicious code in kinterval (npm) (malicious package)
- [MAL-2025-24533](https://insights.sbomify.com/MAL-2025-24533/): Malicious code in kintek (npm) (malicious package)
- [MAL-2025-24532](https://insights.sbomify.com/MAL-2025-24532/): Malicious code in kinopoisk-yav-client (npm) (malicious package)
- [MAL-2025-24531](https://insights.sbomify.com/MAL-2025-24531/): Malicious code in kinopoisk-components (npm) (malicious package)
- [MAL-2025-24530](https://insights.sbomify.com/MAL-2025-24530/): Malicious code in kingweb (npm) (malicious package)
- [MAL-2025-2453](https://insights.sbomify.com/MAL-2025-2453/): Malicious code in @financials/using-dep-conf (npm) (malicious package)
- [MAL-2025-24529](https://insights.sbomify.com/MAL-2025-24529/): Malicious code in kingofpol (npm) (malicious package)
- [MAL-2025-24528](https://insights.sbomify.com/MAL-2025-24528/): Malicious code in kingchos (npm) (malicious package)
- [MAL-2025-24527](https://insights.sbomify.com/MAL-2025-24527/): Malicious code in kinetic-release-it-perseus-ursa (npm) (malicious package)
- [MAL-2025-24526](https://insights.sbomify.com/MAL-2025-24526/): Malicious code in kinetic-mui-fornax-postcss (npm) (malicious package)
- [MAL-2025-24525](https://insights.sbomify.com/MAL-2025-24525/): Malicious code in kinetic-mongodb-lepton-rollup-plugin (npm) (malicious package)
- [MAL-2025-24524](https://insights.sbomify.com/MAL-2025-24524/): Malicious code in kinetic-inquirer-element-ui-chai (npm) (malicious package)
- [MAL-2025-24523](https://insights.sbomify.com/MAL-2025-24523/): Malicious code in kinetic-blackhole-meteor-global (npm) (malicious package)
- [MAL-2025-24522](https://insights.sbomify.com/MAL-2025-24522/): Malicious code in kinectfun (npm) (malicious package)
- [MAL-2025-24521](https://insights.sbomify.com/MAL-2025-24521/): Malicious code in kindle-fast-metrics-javascript-sdk (npm) (malicious package)
- [MAL-2025-24520](https://insights.sbomify.com/MAL-2025-24520/): Malicious code in kinabalu (npm) (malicious package)
- [MAL-2025-2452](https://insights.sbomify.com/MAL-2025-2452/): Malicious code in @financials/ui-components (npm) (malicious package)
- [MAL-2025-24519](https://insights.sbomify.com/MAL-2025-24519/): Malicious code in kiloman (npm) (malicious package)
- [MAL-2025-24518](https://insights.sbomify.com/MAL-2025-24518/): Malicious code in kilo-zulu-lemon-rdmmz (npm) (malicious package)
- [MAL-2025-24517](https://insights.sbomify.com/MAL-2025-24517/): Malicious code in kilo-y7c-project (npm) (malicious package)
- [MAL-2025-24516](https://insights.sbomify.com/MAL-2025-24516/): Malicious code in kilo-xylophone-lpne (npm) (malicious package)
- [MAL-2025-24515](https://insights.sbomify.com/MAL-2025-24515/): Malicious code in kilo-x4x-project (npm) (malicious package)
- [MAL-2025-24514](https://insights.sbomify.com/MAL-2025-24514/): Malicious code in kilo-watermelon-xray-utiot (npm) (malicious package)
- [MAL-2025-24513](https://insights.sbomify.com/MAL-2025-24513/): Malicious code in kilo-victor-yikz (npm) (malicious package)
- [MAL-2025-24512](https://insights.sbomify.com/MAL-2025-24512/): Malicious code in kilo-victor-lgal (npm) (malicious package)
- [MAL-2025-24511](https://insights.sbomify.com/MAL-2025-24511/): Malicious code in kilo-victor-flhg (npm) (malicious package)
- [MAL-2025-24510](https://insights.sbomify.com/MAL-2025-24510/): Malicious code in kilo-vanilla-eemw (npm) (malicious package)
- [MAL-2025-2451](https://insights.sbomify.com/MAL-2025-2451/): Malicious code in idme-component-utilities (npm) (malicious package)
- [MAL-2025-24509](https://insights.sbomify.com/MAL-2025-24509/): Malicious code in kilo-ugli-byot (npm) (malicious package)
- [MAL-2025-24508](https://insights.sbomify.com/MAL-2025-24508/): Malicious code in kilo-strawberry-golf-yajmo (npm) (malicious package)
- [MAL-2025-24507](https://insights.sbomify.com/MAL-2025-24507/): Malicious code in kilo-strawberry-alpha-hgule (npm) (malicious package)
- [MAL-2025-24506](https://insights.sbomify.com/MAL-2025-24506/): Malicious code in kilo-sierra-romeo-udrgn (npm) (malicious package)
- [MAL-2025-24505](https://insights.sbomify.com/MAL-2025-24505/): Malicious code in kilo-romeo-aayf (npm) (malicious package)
- [MAL-2025-24504](https://insights.sbomify.com/MAL-2025-24504/): Malicious code in kilo-quince-shqr (npm) (malicious package)
- [MAL-2025-24503](https://insights.sbomify.com/MAL-2025-24503/): Malicious code in kilo-quince-quebec-uaxlq (npm) (malicious package)
- [MAL-2025-24502](https://insights.sbomify.com/MAL-2025-24502/): Malicious code in kilo-qhp-project (npm) (malicious package)
- [MAL-2025-24501](https://insights.sbomify.com/MAL-2025-24501/): Malicious code in kilo-puw-project (npm) (malicious package)
- [MAL-2025-24500](https://insights.sbomify.com/MAL-2025-24500/): Malicious code in kilo-papaya-tango-pfsth (npm) (malicious package)
- [MAL-2025-2450](https://insights.sbomify.com/MAL-2025-2450/): Malicious code in com.unity.testtools.codecoverage (npm) (malicious package)
- [MAL-2025-245](https://insights.sbomify.com/MAL-2025-245/): Malicious code in sparo-output-test (npm) (malicious package)
- [MAL-2025-24499](https://insights.sbomify.com/MAL-2025-24499/): Malicious code in kilo-papaya-2dp8 (npm) (malicious package)
- [MAL-2025-24498](https://insights.sbomify.com/MAL-2025-24498/): Malicious code in kilo-papa-vanilla-fcghz (npm) (malicious package)
- [MAL-2025-24497](https://insights.sbomify.com/MAL-2025-24497/): Malicious code in kilo-papa-mkyi (npm) (malicious package)
- [MAL-2025-24496](https://insights.sbomify.com/MAL-2025-24496/): Malicious code in kilo-orbit-0a1b (npm) (malicious package)
- [MAL-2025-24495](https://insights.sbomify.com/MAL-2025-24495/): Malicious code in kilo-opp-project (npm) (malicious package)
- [MAL-2025-24494](https://insights.sbomify.com/MAL-2025-24494/): Malicious code in kilo-november-mango-zyghn (npm) (malicious package)
- [MAL-2025-24493](https://insights.sbomify.com/MAL-2025-24493/): Malicious code in kilo-nectarine-aatr (npm) (malicious package)
- [MAL-2025-24492](https://insights.sbomify.com/MAL-2025-24492/): Malicious code in kilo-n7n-project (npm) (malicious package)
- [MAL-2025-24491](https://insights.sbomify.com/MAL-2025-24491/): Malicious code in kilo-n3g-project (npm) (malicious package)
- [MAL-2025-24490](https://insights.sbomify.com/MAL-2025-24490/): Malicious code in kilo-mrx-project (npm) (malicious package)
- [MAL-2025-2449](https://insights.sbomify.com/MAL-2025-2449/): Malicious code in real-world1 (npm) (malicious package)
- [MAL-2025-24489](https://insights.sbomify.com/MAL-2025-24489/): Malicious code in kilo-mike-krvc (npm) (malicious package)
- [MAL-2025-24488](https://insights.sbomify.com/MAL-2025-24488/): Malicious code in kilo-mango-delta-drtjv (npm) (malicious package)
- [MAL-2025-24487](https://insights.sbomify.com/MAL-2025-24487/): Malicious code in kilo-lemon-kiwi-ipkpx (npm) (malicious package)
- [MAL-2025-24486](https://insights.sbomify.com/MAL-2025-24486/): Malicious code in kilo-kiwi-kqtn (npm) (malicious package)
- [MAL-2025-24485](https://insights.sbomify.com/MAL-2025-24485/): Malicious code in kilo-kc0-project (npm) (malicious package)
- [MAL-2025-24484](https://insights.sbomify.com/MAL-2025-24484/): Malicious code in kilo-k0f-project (npm) (malicious package)
- [MAL-2025-24483](https://insights.sbomify.com/MAL-2025-24483/): Malicious code in kilo-jzf-project (npm) (malicious package)
- [MAL-2025-24482](https://insights.sbomify.com/MAL-2025-24482/): Malicious code in kilo-juliet-izxr (npm) (malicious package)
- [MAL-2025-24481](https://insights.sbomify.com/MAL-2025-24481/): Malicious code in kilo-iw6-project (npm) (malicious package)
- [MAL-2025-24480](https://insights.sbomify.com/MAL-2025-24480/): Malicious code in kilo-india-grape-ungnb (npm) (malicious package)
- [MAL-2025-2448](https://insights.sbomify.com/MAL-2025-2448/): Malicious code in @flutterfire/source-ui-widgets (npm) (malicious package)
- [MAL-2025-24479](https://insights.sbomify.com/MAL-2025-24479/): Malicious code in kilo-honeydew-fxvu (npm) (malicious package)
- [MAL-2025-24478](https://insights.sbomify.com/MAL-2025-24478/): Malicious code in kilo-hn3-project (npm) (malicious package)
- [MAL-2025-24477](https://insights.sbomify.com/MAL-2025-24477/): Malicious code in kilo-hbh-project (npm) (malicious package)
- [MAL-2025-24476](https://insights.sbomify.com/MAL-2025-24476/): Malicious code in kilo-g0h-project (npm) (malicious package)
- [MAL-2025-24475](https://insights.sbomify.com/MAL-2025-24475/): Malicious code in kilo-fig-november-kytrn (npm) (malicious package)
- [MAL-2025-24474](https://insights.sbomify.com/MAL-2025-24474/): Malicious code in kilo-elderberry-kiwi-tkusp (npm) (malicious package)
- [MAL-2025-24473](https://insights.sbomify.com/MAL-2025-24473/): Malicious code in kilo-e96-project (npm) (malicious package)
- [MAL-2025-24472](https://insights.sbomify.com/MAL-2025-24472/): Malicious code in kilo-dez-project (npm) (malicious package)
- [MAL-2025-24471](https://insights.sbomify.com/MAL-2025-24471/): Malicious code in kilo-date-tahm (npm) (malicious package)
- [MAL-2025-24470](https://insights.sbomify.com/MAL-2025-24470/): Malicious code in kilo-charlie-vanilla-knnrn (npm) (malicious package)
- [MAL-2025-2447](https://insights.sbomify.com/MAL-2025-2447/): Malicious code in paymentread-paypal (npm) (malicious package)
- [MAL-2025-24469](https://insights.sbomify.com/MAL-2025-24469/): Malicious code in kilo-charlie-gdwh (npm) (malicious package)
- [MAL-2025-24468](https://insights.sbomify.com/MAL-2025-24468/): Malicious code in kilo-bravo-uniform-ypfwo (npm) (malicious package)
- [MAL-2025-24467](https://insights.sbomify.com/MAL-2025-24467/): Malicious code in kilo-apple-pmcv (npm) (malicious package)
- [MAL-2025-24466](https://insights.sbomify.com/MAL-2025-24466/): Malicious code in kilo-87k-project (npm) (malicious package)
- [MAL-2025-24465](https://insights.sbomify.com/MAL-2025-24465/): Malicious code in kilo-79y-project (npm) (malicious package)
- [MAL-2025-24464](https://insights.sbomify.com/MAL-2025-24464/): Malicious code in kilo-621-project (npm) (malicious package)
- [MAL-2025-24463](https://insights.sbomify.com/MAL-2025-24463/): Malicious code in kilo-5h9-project (npm) (malicious package)
- [MAL-2025-24462](https://insights.sbomify.com/MAL-2025-24462/): Malicious code in kilo-5ca-project (npm) (malicious package)
- [MAL-2025-24461](https://insights.sbomify.com/MAL-2025-24461/): Malicious code in kilo-2d8-project (npm) (malicious package)
- [MAL-2025-24460](https://insights.sbomify.com/MAL-2025-24460/): Malicious code in kilo-193-project (npm) (malicious package)
- [MAL-2025-2446](https://insights.sbomify.com/MAL-2025-2446/): Malicious code in paymentlookup-paypal (npm) (malicious package)
- [MAL-2025-24459](https://insights.sbomify.com/MAL-2025-24459/): Malicious code in killllock (npm) (malicious package)
- [MAL-2025-24458](https://insights.sbomify.com/MAL-2025-24458/): Malicious code in kikiru (npm) (malicious package)
- [MAL-2025-24457](https://insights.sbomify.com/MAL-2025-24457/): Malicious code in kiki-tempe72-sukiwir (npm) (malicious package)
- [MAL-2025-24456](https://insights.sbomify.com/MAL-2025-24456/): Malicious code in kiki-mendoan69-sukiwir (npm) (malicious package)
- [MAL-2025-24455](https://insights.sbomify.com/MAL-2025-24455/): Malicious code in kiki-kue74-breki (npm) (malicious package)
- [MAL-2025-24454](https://insights.sbomify.com/MAL-2025-24454/): Malicious code in kik-starter (npm) (malicious package)
- [MAL-2025-24453](https://insights.sbomify.com/MAL-2025-24453/): Malicious code in kifshare (npm) (malicious package)
- [MAL-2025-24452](https://insights.sbomify.com/MAL-2025-24452/): Malicious code in kievzplxrqshbgof (npm) (malicious package)
- [MAL-2025-24451](https://insights.sbomify.com/MAL-2025-24451/): Malicious code in kidsense (npm) (malicious package)
- [MAL-2025-24450](https://insights.sbomify.com/MAL-2025-24450/): Malicious code in kiddygeek (npm) (malicious package)
- [MAL-2025-2445](https://insights.sbomify.com/MAL-2025-2445/): Malicious code in malwaretesting1 (npm) (malicious package)
- [MAL-2025-24449](https://insights.sbomify.com/MAL-2025-24449/): Malicious code in kickbank (npm) (malicious package)
- [MAL-2025-24448](https://insights.sbomify.com/MAL-2025-24448/): Malicious code in kickass-component-library (npm) (malicious package)
- [MAL-2025-24447](https://insights.sbomify.com/MAL-2025-24447/): Malicious code in kickabout (npm) (malicious package)
- [MAL-2025-24446](https://insights.sbomify.com/MAL-2025-24446/): Malicious code in kiapasa (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/841/
