# Vulnerabilities published in 2025


- [MAL-2025-92483](https://insights.sbomify.com/MAL-2025-92483/): Malicious code in yanti-kepok98-miaww (npm) (malicious package)
- [MAL-2025-92482](https://insights.sbomify.com/MAL-2025-92482/): Malicious code in yanti-kepok83-miaww (npm) (malicious package)
- [MAL-2025-92481](https://insights.sbomify.com/MAL-2025-92481/): Malicious code in yanti-kentang4-sluey (npm) (malicious package)
- [MAL-2025-92480](https://insights.sbomify.com/MAL-2025-92480/): Malicious code in yanti-kemplang94-riris (npm) (malicious package)
- [MAL-2025-9248](https://insights.sbomify.com/MAL-2025-9248/): Malicious code in @povsicoenpm/illum-ex-totam-voluptatem (npm) (malicious package)
- [MAL-2025-92479](https://insights.sbomify.com/MAL-2025-92479/): Malicious code in yanti-kemplang92-wekto (npm) (malicious package)
- [MAL-2025-92478](https://insights.sbomify.com/MAL-2025-92478/): Malicious code in yanti-kemplang28-miaww (npm) (malicious package)
- [MAL-2025-92477](https://insights.sbomify.com/MAL-2025-92477/): Malicious code in yanti-kacang30-riris (npm) (malicious package)
- [MAL-2025-92476](https://insights.sbomify.com/MAL-2025-92476/): Malicious code in yanti-kacang1-miaww (npm) (malicious package)
- [MAL-2025-92475](https://insights.sbomify.com/MAL-2025-92475/): Malicious code in yanti-jus51-miaww (npm) (malicious package)
- [MAL-2025-92474](https://insights.sbomify.com/MAL-2025-92474/): Malicious code in yanti-jengkol50-crottsekebon (npm) (malicious package)
- [MAL-2025-92473](https://insights.sbomify.com/MAL-2025-92473/): Malicious code in yanti-jamblang82-riris (npm) (malicious package)
- [MAL-2025-92472](https://insights.sbomify.com/MAL-2025-92472/): Malicious code in yanti-gulai67-miaww (npm) (malicious package)
- [MAL-2025-92471](https://insights.sbomify.com/MAL-2025-92471/): Malicious code in yanti-gorengan89-riris (npm) (malicious package)
- [MAL-2025-92470](https://insights.sbomify.com/MAL-2025-92470/): Malicious code in yanti-gorengan62-riris (npm) (malicious package)
- [MAL-2025-9247](https://insights.sbomify.com/MAL-2025-9247/): Malicious code in @povsicoenpm/enim-nulla-quas-unde (npm) (malicious package)
- [MAL-2025-92469](https://insights.sbomify.com/MAL-2025-92469/): Malicious code in yanti-gorengan28-riris (npm) (malicious package)
- [MAL-2025-92468](https://insights.sbomify.com/MAL-2025-92468/): Malicious code in yanti-getas85-riris (npm) (malicious package)
- [MAL-2025-92467](https://insights.sbomify.com/MAL-2025-92467/): Malicious code in yanti-getas56-kyuki (npm) (malicious package)
- [MAL-2025-92466](https://insights.sbomify.com/MAL-2025-92466/): Malicious code in yanti-gepuk84-miaww (npm) (malicious package)
- [MAL-2025-92465](https://insights.sbomify.com/MAL-2025-92465/): Malicious code in yanti-gaplek50-riris (npm) (malicious package)
- [MAL-2025-92464](https://insights.sbomify.com/MAL-2025-92464/): Malicious code in yanti-gandul32-riris (npm) (malicious package)
- [MAL-2025-92463](https://insights.sbomify.com/MAL-2025-92463/): Malicious code in yanti-gandul21-riris (npm) (malicious package)
- [MAL-2025-92462](https://insights.sbomify.com/MAL-2025-92462/): Malicious code in yanti-gado-gado24-miaww (npm) (malicious package)
- [MAL-2025-92461](https://insights.sbomify.com/MAL-2025-92461/): Malicious code in yanti-esdoger60-miaww (npm) (malicious package)
- [MAL-2025-92460](https://insights.sbomify.com/MAL-2025-92460/): Malicious code in yanti-esdoger43-miaww (npm) (malicious package)
- [MAL-2025-9246](https://insights.sbomify.com/MAL-2025-9246/): Malicious code in @povsicoenpm/eaque-debitis-perferendis-voluptatum (npm) (malicious package)
- [MAL-2025-92459](https://insights.sbomify.com/MAL-2025-92459/): Malicious code in yanti-esdoger4-miaww (npm) (malicious package)
- [MAL-2025-92458](https://insights.sbomify.com/MAL-2025-92458/): Malicious code in yanti-esdoger31-riris (npm) (malicious package)
- [MAL-2025-92457](https://insights.sbomify.com/MAL-2025-92457/): Malicious code in yanti-empal84-miaww (npm) (malicious package)
- [MAL-2025-92456](https://insights.sbomify.com/MAL-2025-92456/): Malicious code in yanti-empal64-miaww (npm) (malicious package)
- [MAL-2025-92455](https://insights.sbomify.com/MAL-2025-92455/): Malicious code in yanti-dradag36-miaww (npm) (malicious package)
- [MAL-2025-92454](https://insights.sbomify.com/MAL-2025-92454/): Malicious code in yanti-dodol61-riris (npm) (malicious package)
- [MAL-2025-92453](https://insights.sbomify.com/MAL-2025-92453/): Malicious code in yanti-dodol22-miaww (npm) (malicious package)
- [MAL-2025-92452](https://insights.sbomify.com/MAL-2025-92452/): Malicious code in yanti-dodol15-miaww (npm) (malicious package)
- [MAL-2025-92451](https://insights.sbomify.com/MAL-2025-92451/): Malicious code in yanti-bubursumsum10-riris (npm) (malicious package)
- [MAL-2025-92450](https://insights.sbomify.com/MAL-2025-92450/): Malicious code in yanti-buburayam18-riris (npm) (malicious package)
- [MAL-2025-9245](https://insights.sbomify.com/MAL-2025-9245/): Malicious code in @povsicoenpm/dolorem-deleniti-delectus-molestiae (npm) (malicious package)
- [MAL-2025-92449](https://insights.sbomify.com/MAL-2025-92449/): Malicious code in yanti-bubur88-riris (npm) (malicious package)
- [MAL-2025-92448](https://insights.sbomify.com/MAL-2025-92448/): Malicious code in yanti-brengkes27-miaww (npm) (malicious package)
- [MAL-2025-92447](https://insights.sbomify.com/MAL-2025-92447/): Malicious code in yanti-botok45-miaww (npm) (malicious package)
- [MAL-2025-92446](https://insights.sbomify.com/MAL-2025-92446/): Malicious code in yanti-bika23-riris (npm) (malicious package)
- [MAL-2025-92445](https://insights.sbomify.com/MAL-2025-92445/): Malicious code in yanti-bakwan30-riris (npm) (malicious package)
- [MAL-2025-92444](https://insights.sbomify.com/MAL-2025-92444/): Malicious code in yanti-asinan58-miaww (npm) (malicious package)
- [MAL-2025-92443](https://insights.sbomify.com/MAL-2025-92443/): Malicious code in yanti-asinan33-riris (npm) (malicious package)
- [MAL-2025-92442](https://insights.sbomify.com/MAL-2025-92442/): Malicious code in yammering_frog_z3n (npm) (malicious package)
- [MAL-2025-92441](https://insights.sbomify.com/MAL-2025-92441/): Malicious code in yammering_beetle_z3n (npm) (malicious package)
- [MAL-2025-92440](https://insights.sbomify.com/MAL-2025-92440/): Malicious code in yabbering_carp_z3n (npm) (malicious package)
- [MAL-2025-9244](https://insights.sbomify.com/MAL-2025-9244/): Malicious code in @povsicoenpm/distinctio-nobis-animi-eos (npm) (malicious package)
- [MAL-2025-92439](https://insights.sbomify.com/MAL-2025-92439/): Malicious code in xerothermic_guppy_z3n (npm) (malicious package)
- [MAL-2025-92438](https://insights.sbomify.com/MAL-2025-92438/): Malicious code in xeric_shrimp_z3n (npm) (malicious package)
- [MAL-2025-92437](https://insights.sbomify.com/MAL-2025-92437/): Malicious code in xenogeneic_emu_z3n (npm) (malicious package)
- [MAL-2025-92436](https://insights.sbomify.com/MAL-2025-92436/): Malicious code in xenial_impala_z3n (npm) (malicious package)
- [MAL-2025-92435](https://insights.sbomify.com/MAL-2025-92435/): Malicious code in xenial_basilisk_z3n (npm) (malicious package)
- [MAL-2025-92434](https://insights.sbomify.com/MAL-2025-92434/): Malicious code in xenacious_wildcat_z3n (npm) (malicious package)
- [MAL-2025-92433](https://insights.sbomify.com/MAL-2025-92433/): Malicious code in xenacious_ostrich_z3n (npm) (malicious package)
- [MAL-2025-92432](https://insights.sbomify.com/MAL-2025-92432/): Malicious code in xaver-wajit66-riris (npm) (malicious package)
- [MAL-2025-92431](https://insights.sbomify.com/MAL-2025-92431/): Malicious code in xaver-wajit56-miaww (npm) (malicious package)
- [MAL-2025-92430](https://insights.sbomify.com/MAL-2025-92430/): Malicious code in xaver-wajit16-riris (npm) (malicious package)
- [MAL-2025-9243](https://insights.sbomify.com/MAL-2025-9243/): Malicious code in @povsicoenpm/consequatur-aut-harum-veritatis (npm) (malicious package)
- [MAL-2025-92429](https://insights.sbomify.com/MAL-2025-92429/): Malicious code in xaver-tongseng35-miaww (npm) (malicious package)
- [MAL-2025-92428](https://insights.sbomify.com/MAL-2025-92428/): Malicious code in xaver-tongseng22-riris (npm) (malicious package)
- [MAL-2025-92427](https://insights.sbomify.com/MAL-2025-92427/): Malicious code in xaver-toge59-miaww (npm) (malicious package)
- [MAL-2025-92426](https://insights.sbomify.com/MAL-2025-92426/): Malicious code in xaver-tiwul24-kyuki (npm) (malicious package)
- [MAL-2025-92425](https://insights.sbomify.com/MAL-2025-92425/): Malicious code in xaver-telurtahu60-riris (npm) (malicious package)
- [MAL-2025-92424](https://insights.sbomify.com/MAL-2025-92424/): Malicious code in xaver-telur9-kyuki (npm) (malicious package)
- [MAL-2025-92423](https://insights.sbomify.com/MAL-2025-92423/): Malicious code in xaver-tek80-riris (npm) (malicious package)
- [MAL-2025-92422](https://insights.sbomify.com/MAL-2025-92422/): Malicious code in xaver-teh65-riris (npm) (malicious package)
- [MAL-2025-92421](https://insights.sbomify.com/MAL-2025-92421/): Malicious code in xaver-tapai20-riris (npm) (malicious package)
- [MAL-2025-92420](https://insights.sbomify.com/MAL-2025-92420/): Malicious code in xaver-takokak4-miaww (npm) (malicious package)
- [MAL-2025-9242](https://insights.sbomify.com/MAL-2025-9242/): Malicious code in @povsicoenpm/animi-quae-necessitatibus-odio (npm) (malicious package)
- [MAL-2025-92419](https://insights.sbomify.com/MAL-2025-92419/): Malicious code in xaver-tahu8-miaww (npm) (malicious package)
- [MAL-2025-92418](https://insights.sbomify.com/MAL-2025-92418/): Malicious code in xaver-sroto61-riris (npm) (malicious package)
- [MAL-2025-92417](https://insights.sbomify.com/MAL-2025-92417/): Malicious code in xaver-serabi12-miaww (npm) (malicious package)
- [MAL-2025-92416](https://insights.sbomify.com/MAL-2025-92416/): Malicious code in xaver-semur84-riris (npm) (malicious package)
- [MAL-2025-92415](https://insights.sbomify.com/MAL-2025-92415/): Malicious code in xaver-semur48-kyuki (npm) (malicious package)
- [MAL-2025-92414](https://insights.sbomify.com/MAL-2025-92414/): Malicious code in xaver-semur11-riris (npm) (malicious package)
- [MAL-2025-92413](https://insights.sbomify.com/MAL-2025-92413/): Malicious code in xaver-sego84-miaww (npm) (malicious package)
- [MAL-2025-92412](https://insights.sbomify.com/MAL-2025-92412/): Malicious code in xaver-sate8-miaww (npm) (malicious package)
- [MAL-2025-92411](https://insights.sbomify.com/MAL-2025-92411/): Malicious code in xaver-sate44-riris (npm) (malicious package)
- [MAL-2025-92410](https://insights.sbomify.com/MAL-2025-92410/): Malicious code in xaver-sambel90-miaww (npm) (malicious package)
- [MAL-2025-9241](https://insights.sbomify.com/MAL-2025-9241/): Malicious code in @povsicoenpm/accusantium-officiis-sint-ullam (npm) (malicious package)
- [MAL-2025-92409](https://insights.sbomify.com/MAL-2025-92409/): Malicious code in xaver-sambel22-miaww (npm) (malicious package)
- [MAL-2025-92408](https://insights.sbomify.com/MAL-2025-92408/): Malicious code in xaver-sambalado25-apidev (npm) (malicious package)
- [MAL-2025-92407](https://insights.sbomify.com/MAL-2025-92407/): Malicious code in xaver-rujak6-apidev (npm) (malicious package)
- [MAL-2025-92406](https://insights.sbomify.com/MAL-2025-92406/): Malicious code in xaver-rendang89-miaww (npm) (malicious package)
- [MAL-2025-92405](https://insights.sbomify.com/MAL-2025-92405/): Malicious code in xaver-rendang7-wekto (npm) (malicious package)
- [MAL-2025-92404](https://insights.sbomify.com/MAL-2025-92404/): Malicious code in xaver-rawon72-miaww (npm) (malicious package)
- [MAL-2025-92403](https://insights.sbomify.com/MAL-2025-92403/): Malicious code in xaver-rangi31-riris (npm) (malicious package)
- [MAL-2025-92402](https://insights.sbomify.com/MAL-2025-92402/): Malicious code in xaver-ragi5-riris (npm) (malicious package)
- [MAL-2025-92401](https://insights.sbomify.com/MAL-2025-92401/): Malicious code in xaver-papeda94-miaww (npm) (malicious package)
- [MAL-2025-92400](https://insights.sbomify.com/MAL-2025-92400/): Malicious code in xaver-oncom93-crottsekebon (npm) (malicious package)
- [MAL-2025-9240](https://insights.sbomify.com/MAL-2025-9240/): Malicious code in @povsicoenpm/ab-voluptas-maiores-sapiente (npm) (malicious package)
- [MAL-2025-924](https://insights.sbomify.com/MAL-2025-924/): Malicious code in fgh (PyPI) (malicious package)
- [MAL-2025-92399](https://insights.sbomify.com/MAL-2025-92399/): Malicious code in xaver-nasisayur50-miaww (npm) (malicious package)
- [MAL-2025-92398](https://insights.sbomify.com/MAL-2025-92398/): Malicious code in xaver-nasisayur10-riris (npm) (malicious package)
- [MAL-2025-92397](https://insights.sbomify.com/MAL-2025-92397/): Malicious code in xaver-nasicampur41-riris (npm) (malicious package)
- [MAL-2025-92396](https://insights.sbomify.com/MAL-2025-92396/): Malicious code in xaver-nasi14-apidev (npm) (malicious package)
- [MAL-2025-92395](https://insights.sbomify.com/MAL-2025-92395/): Malicious code in xaver-moci81-miaww (npm) (malicious package)
- [MAL-2025-92394](https://insights.sbomify.com/MAL-2025-92394/): Malicious code in xaver-moci27-riris (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/88/