# Vulnerabilities published in 2025


- [MAL-2025-24175](https://insights.sbomify.com/MAL-2025-24175/): Malicious code in kale-sierra-e61y (npm) (malicious package)
- [MAL-2025-24174](https://insights.sbomify.com/MAL-2025-24174/): Malicious code in kale-s6pxe-583sx-valley-project (npm) (malicious package)
- [MAL-2025-24173](https://insights.sbomify.com/MAL-2025-24173/): Malicious code in kale-ocean-qah232-project (npm) (malicious package)
- [MAL-2025-24172](https://insights.sbomify.com/MAL-2025-24172/): Malicious code in kale-ll0bm-ehsrg-horizon-project (npm) (malicious package)
- [MAL-2025-24171](https://insights.sbomify.com/MAL-2025-24171/): Malicious code in kale-jetty-sz12 (npm) (malicious package)
- [MAL-2025-24170](https://insights.sbomify.com/MAL-2025-24170/): Malicious code in kale-jacket-cqr350-project (npm) (malicious package)
- [MAL-2025-2417](https://insights.sbomify.com/MAL-2025-2417/): Malicious code in spark-botkit-servicenow (npm) (malicious package)
- [MAL-2025-24169](https://insights.sbomify.com/MAL-2025-24169/): Malicious code in kale-hazel-bkno (npm) (malicious package)
- [MAL-2025-24168](https://insights.sbomify.com/MAL-2025-24168/): Malicious code in kale-gxbmo-xx6ds-fjord-project (npm) (malicious package)
- [MAL-2025-24167](https://insights.sbomify.com/MAL-2025-24167/): Malicious code in kale-dock-e3yd (npm) (malicious package)
- [MAL-2025-24166](https://insights.sbomify.com/MAL-2025-24166/): Malicious code in kale-albatross-crn680-project (npm) (malicious package)
- [MAL-2025-24165](https://insights.sbomify.com/MAL-2025-24165/): Malicious code in kale-9xedz-4lgzx-unity-project (npm) (malicious package)
- [MAL-2025-24164](https://insights.sbomify.com/MAL-2025-24164/): Malicious code in kakurea (npm) (malicious package)
- [MAL-2025-24163](https://insights.sbomify.com/MAL-2025-24163/): Malicious code in kakfa-service-interface-sample (npm) (malicious package)
- [MAL-2025-24162](https://insights.sbomify.com/MAL-2025-24162/): Malicious code in kajgps (npm) (malicious package)
- [MAL-2025-24161](https://insights.sbomify.com/MAL-2025-24161/): Malicious code in kaiyu-webdatarocks (npm) (malicious package)
- [MAL-2025-24160](https://insights.sbomify.com/MAL-2025-24160/): Malicious code in kahanmpi (npm) (malicious package)
- [MAL-2025-2416](https://insights.sbomify.com/MAL-2025-2416/): Malicious code in snore-log (npm) (malicious package)
- [MAL-2025-24159](https://insights.sbomify.com/MAL-2025-24159/): Malicious code in kafka-shopify (npm) (malicious package)
- [MAL-2025-24158](https://insights.sbomify.com/MAL-2025-24158/): Malicious code in kafka-client-ruby (npm) (malicious package)
- [MAL-2025-24157](https://insights.sbomify.com/MAL-2025-24157/): Malicious code in kaerwzyhlkngvxic (npm) (malicious package)
- [MAL-2025-24156](https://insights.sbomify.com/MAL-2025-24156/): Malicious code in kadummy (npm) (malicious package)
- [MAL-2025-24155](https://insights.sbomify.com/MAL-2025-24155/): Malicious code in kachbis (npm) (malicious package)
- [MAL-2025-24154](https://insights.sbomify.com/MAL-2025-24154/): Malicious code in kabusaku (npm) (malicious package)
- [MAL-2025-24153](https://insights.sbomify.com/MAL-2025-24153/): Malicious code in kaascript (npm) (malicious package)
- [MAL-2025-24152](https://insights.sbomify.com/MAL-2025-24152/): Malicious code in kaargo (npm) (malicious package)
- [MAL-2025-24151](https://insights.sbomify.com/MAL-2025-24151/): Malicious code in k8s_ci (npm) (malicious package)
- [MAL-2025-24150](https://insights.sbomify.com/MAL-2025-24150/): Malicious code in k8s-template-validator (npm) (malicious package)
- [MAL-2025-2415](https://insights.sbomify.com/MAL-2025-2415/): Malicious code in smart-power-strip (npm) (malicious package)
- [MAL-2025-24149](https://insights.sbomify.com/MAL-2025-24149/): Malicious code in k8s-ssdeployer (npm) (malicious package)
- [MAL-2025-24148](https://insights.sbomify.com/MAL-2025-24148/): Malicious code in k8s-image-extractor (npm) (malicious package)
- [MAL-2025-24147](https://insights.sbomify.com/MAL-2025-24147/): Malicious code in k3npj1 (npm) (malicious package)
- [MAL-2025-24146](https://insights.sbomify.com/MAL-2025-24146/): Malicious code in k0a_multer (npm) (malicious package)
- [MAL-2025-24145](https://insights.sbomify.com/MAL-2025-24145/): Malicious code in jzltdokrbsnxpvmi (npm) (malicious package)
- [MAL-2025-24144](https://insights.sbomify.com/MAL-2025-24144/): Malicious code in jyuaxotnvldismzc (npm) (malicious package)
- [MAL-2025-24143](https://insights.sbomify.com/MAL-2025-24143/): Malicious code in jylcutigknzmdbhf (npm) (malicious package)
- [MAL-2025-24142](https://insights.sbomify.com/MAL-2025-24142/): Malicious code in jyhmpldxkbvgruia (npm) (malicious package)
- [MAL-2025-24141](https://insights.sbomify.com/MAL-2025-24141/): Malicious code in jygsaw (npm) (malicious package)
- [MAL-2025-24140](https://insights.sbomify.com/MAL-2025-24140/): Malicious code in jyblog (npm) (malicious package)
- [MAL-2025-2414](https://insights.sbomify.com/MAL-2025-2414/): Malicious code in small-ct (npm) (malicious package)
- [MAL-2025-24139](https://insights.sbomify.com/MAL-2025-24139/): Malicious code in jwt-webpack-procyon-thuban (npm) (malicious package)
- [MAL-2025-24138](https://insights.sbomify.com/MAL-2025-24138/): Malicious code in jwt-toml-leda-despina (npm) (malicious package)
- [MAL-2025-24137](https://insights.sbomify.com/MAL-2025-24137/): Malicious code in jwt-technocracy-envconfig-venus (npm) (malicious package)
- [MAL-2025-24136](https://insights.sbomify.com/MAL-2025-24136/): Malicious code in jwt-on-superagent-ora (npm) (malicious package)
- [MAL-2025-24135](https://insights.sbomify.com/MAL-2025-24135/): Malicious code in jwt-mongodb-nestjs-gacrux (npm) (malicious package)
- [MAL-2025-24134](https://insights.sbomify.com/MAL-2025-24134/): Malicious code in jwt-module-pipe-chalk (npm) (malicious package)
- [MAL-2025-24133](https://insights.sbomify.com/MAL-2025-24133/): Malicious code in jwt-convict-dependencies-resolvers (npm) (malicious package)
- [MAL-2025-24132](https://insights.sbomify.com/MAL-2025-24132/): Malicious code in jwt-andromeda-eridanus-bellatrix (npm) (malicious package)
- [MAL-2025-24131](https://insights.sbomify.com/MAL-2025-24131/): Malicious code in jwnkqtsfmkbxvrge (npm) (malicious package)
- [MAL-2025-24130](https://insights.sbomify.com/MAL-2025-24130/): Malicious code in jwaves (npm) (malicious package)
- [MAL-2025-2413](https://insights.sbomify.com/MAL-2025-2413/): Malicious code in secureshield1 (npm) (malicious package)
- [MAL-2025-24129](https://insights.sbomify.com/MAL-2025-24129/): Malicious code in jw2s1s (npm) (malicious package)
- [MAL-2025-24128](https://insights.sbomify.com/MAL-2025-24128/): Malicious code in jw-sha3 (npm) (malicious package)
- [MAL-2025-24127](https://insights.sbomify.com/MAL-2025-24127/): Malicious code in jvxizlbedrwafkos (npm) (malicious package)
- [MAL-2025-24126](https://insights.sbomify.com/MAL-2025-24126/): Malicious code in jvkwhguyilsdpntq (npm) (malicious package)
- [MAL-2025-24125](https://insights.sbomify.com/MAL-2025-24125/): Malicious code in juvoft (npm) (malicious package)
- [MAL-2025-24124](https://insights.sbomify.com/MAL-2025-24124/): Malicious code in justtestasa (npm) (malicious package)
- [MAL-2025-24123](https://insights.sbomify.com/MAL-2025-24123/): Malicious code in justsite (npm) (malicious package)
- [MAL-2025-24122](https://insights.sbomify.com/MAL-2025-24122/): Malicious code in justingia (npm) (malicious package)
- [MAL-2025-24121](https://insights.sbomify.com/MAL-2025-24121/): Malicious code in justaexpformyself (npm) (malicious package)
- [MAL-2025-24120](https://insights.sbomify.com/MAL-2025-24120/): Malicious code in just-the-docs (npm) (malicious package)
- [MAL-2025-2412](https://insights.sbomify.com/MAL-2025-2412/): Malicious code in scriptconfig (npm) (malicious package)
- [MAL-2025-24119](https://insights.sbomify.com/MAL-2025-24119/): Malicious code in just-next-tick (npm) (malicious package)
- [MAL-2025-24118](https://insights.sbomify.com/MAL-2025-24118/): Malicious code in just-function-partial (npm) (malicious package)
- [MAL-2025-24117](https://insights.sbomify.com/MAL-2025-24117/): Malicious code in just-function-curry (npm) (malicious package)
- [MAL-2025-24116](https://insights.sbomify.com/MAL-2025-24116/): Malicious code in just-function-compose (npm) (malicious package)
- [MAL-2025-24115](https://insights.sbomify.com/MAL-2025-24115/): Malicious code in just-array-unique (npm) (malicious package)
- [MAL-2025-24114](https://insights.sbomify.com/MAL-2025-24114/): Malicious code in just-array-union (npm) (malicious package)
- [MAL-2025-24113](https://insights.sbomify.com/MAL-2025-24113/): Malicious code in just-array-remove (npm) (malicious package)
- [MAL-2025-24112](https://insights.sbomify.com/MAL-2025-24112/): Malicious code in just-array-last (npm) (malicious package)
- [MAL-2025-24111](https://insights.sbomify.com/MAL-2025-24111/): Malicious code in just-array-intersect (npm) (malicious package)
- [MAL-2025-24110](https://insights.sbomify.com/MAL-2025-24110/): Malicious code in just-array-flatten (npm) (malicious package)
- [MAL-2025-2411](https://insights.sbomify.com/MAL-2025-2411/): Malicious code in resolve-configuration (npm) (malicious package)
- [MAL-2025-24109](https://insights.sbomify.com/MAL-2025-24109/): Malicious code in just-a-server (npm) (malicious package)
- [MAL-2025-24108](https://insights.sbomify.com/MAL-2025-24108/): Malicious code in just-a-browserify-server (npm) (malicious package)
- [MAL-2025-24107](https://insights.sbomify.com/MAL-2025-24107/): Malicious code in juqbot (npm) (malicious package)
- [MAL-2025-24106](https://insights.sbomify.com/MAL-2025-24106/): Malicious code in jupiter-whiskey-274n (npm) (malicious package)
- [MAL-2025-24105](https://insights.sbomify.com/MAL-2025-24105/): Malicious code in jupiter-ugli-rmwp (npm) (malicious package)
- [MAL-2025-24104](https://insights.sbomify.com/MAL-2025-24104/): Malicious code in jupiter-teak-lsdh (npm) (malicious package)
- [MAL-2025-24103](https://insights.sbomify.com/MAL-2025-24103/): Malicious code in jupiter-rainbow-9ldu (npm) (malicious package)
- [MAL-2025-24102](https://insights.sbomify.com/MAL-2025-24102/): Malicious code in jupiter-pine-7smw (npm) (malicious package)
- [MAL-2025-24101](https://insights.sbomify.com/MAL-2025-24101/): Malicious code in jupiter-larch-zajd (npm) (malicious package)
- [MAL-2025-24100](https://insights.sbomify.com/MAL-2025-24100/): Malicious code in jupiter-kangaroo-39yk (npm) (malicious package)
- [MAL-2025-2410](https://insights.sbomify.com/MAL-2025-2410/): Malicious code in request-draft-ui (npm) (malicious package)
- [MAL-2025-241](https://insights.sbomify.com/MAL-2025-241/): Malicious code in smaato-shared-ui-audience-targeting (npm) (malicious package)
- [MAL-2025-24099](https://insights.sbomify.com/MAL-2025-24099/): Malicious code in jupiter-javascript-corvus-dendrochronology (npm) (malicious package)
- [MAL-2025-24098](https://insights.sbomify.com/MAL-2025-24098/): Malicious code in jupiter-deneb-galaxy-greatfilter (npm) (malicious package)
- [MAL-2025-24097](https://insights.sbomify.com/MAL-2025-24097/): Malicious code in jupiter-charlie-dzri (npm) (malicious package)
- [MAL-2025-24096](https://insights.sbomify.com/MAL-2025-24096/): Malicious code in jupiter-asthenosphere-loop-janus (npm) (malicious package)
- [MAL-2025-24095](https://insights.sbomify.com/MAL-2025-24095/): Malicious code in juno-venus-rate-limiter-tectonophysics (npm) (malicious package)
- [MAL-2025-24094](https://insights.sbomify.com/MAL-2025-24094/): Malicious code in juno-venus-figures-hugo (npm) (malicious package)
- [MAL-2025-24093](https://insights.sbomify.com/MAL-2025-24093/): Malicious code in juno-seismology-socketio-electron (npm) (malicious package)
- [MAL-2025-24092](https://insights.sbomify.com/MAL-2025-24092/): Malicious code in juno-photon-nebula-sublimation (npm) (malicious package)
- [MAL-2025-24091](https://insights.sbomify.com/MAL-2025-24091/): Malicious code in juno-package-ursa-less-loader (npm) (malicious package)
- [MAL-2025-24090](https://insights.sbomify.com/MAL-2025-24090/): Malicious code in juno-outercore-bootes-chariklo (npm) (malicious package)
- [MAL-2025-2409](https://insights.sbomify.com/MAL-2025-2409/): Malicious code in remix-run-route (npm) (malicious package)
- [MAL-2025-24089](https://insights.sbomify.com/MAL-2025-24089/): Malicious code in juno-eclipse-pegasus-cygnus (npm) (malicious package)
- [MAL-2025-24088](https://insights.sbomify.com/MAL-2025-24088/): Malicious code in juno-commitizen-singularity-xanadu (npm) (malicious package)
- [MAL-2025-24087](https://insights.sbomify.com/MAL-2025-24087/): Malicious code in junk-test-foobar (npm) (malicious package)
- [MAL-2025-24086](https://insights.sbomify.com/MAL-2025-24086/): Malicious code in juniper-yurt-ntnn (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/845/