# Vulnerabilities published in 2025


- [MAL-2025-92393](https://insights.sbomify.com/MAL-2025-92393/): Malicious code in xaver-miebogor67-miaww (npm) (malicious package)
- [MAL-2025-92392](https://insights.sbomify.com/MAL-2025-92392/): Malicious code in xaver-mie80-miaww (npm) (malicious package)
- [MAL-2025-92391](https://insights.sbomify.com/MAL-2025-92391/): Malicious code in xaver-menjes12-miaww (npm) (malicious package)
- [MAL-2025-92390](https://insights.sbomify.com/MAL-2025-92390/): Malicious code in xaver-mendut7-miaww (npm) (malicious package)
- [MAL-2025-9239](https://insights.sbomify.com/MAL-2025-9239/): Malicious code in @post-office-placement/screen-space-flags (npm) (malicious package)
- [MAL-2025-92389](https://insights.sbomify.com/MAL-2025-92389/): Malicious code in xaver-mendoan94-riris (npm) (malicious package)
- [MAL-2025-92388](https://insights.sbomify.com/MAL-2025-92388/): Malicious code in xaver-martabak66-miaww (npm) (malicious package)
- [MAL-2025-92387](https://insights.sbomify.com/MAL-2025-92387/): Malicious code in xaver-martabak5-miaww (npm) (malicious package)
- [MAL-2025-92386](https://insights.sbomify.com/MAL-2025-92386/): Malicious code in xaver-mangut90-riris (npm) (malicious package)
- [MAL-2025-92385](https://insights.sbomify.com/MAL-2025-92385/): Malicious code in xaver-mangut70-riris (npm) (malicious package)
- [MAL-2025-92384](https://insights.sbomify.com/MAL-2025-92384/): Malicious code in xaver-mangut29-apidev (npm) (malicious package)
- [MAL-2025-92383](https://insights.sbomify.com/MAL-2025-92383/): Malicious code in xaver-mangga83-riris (npm) (malicious package)
- [MAL-2025-92382](https://insights.sbomify.com/MAL-2025-92382/): Malicious code in xaver-lupis22-miaww (npm) (malicious package)
- [MAL-2025-92381](https://insights.sbomify.com/MAL-2025-92381/): Malicious code in xaver-lumpur97-riris (npm) (malicious package)
- [MAL-2025-92380](https://insights.sbomify.com/MAL-2025-92380/): Malicious code in xaver-lumpur76-miaww (npm) (malicious package)
- [MAL-2025-9238](https://insights.sbomify.com/MAL-2025-9238/): Malicious code in @pmm/keycloak-factory (npm) (malicious package)
- [MAL-2025-92379](https://insights.sbomify.com/MAL-2025-92379/): Malicious code in xaver-lumpur12-miaww (npm) (malicious package)
- [MAL-2025-92378](https://insights.sbomify.com/MAL-2025-92378/): Malicious code in xaver-liwet57-riris (npm) (malicious package)
- [MAL-2025-92377](https://insights.sbomify.com/MAL-2025-92377/): Malicious code in xaver-lepet63-riris (npm) (malicious package)
- [MAL-2025-92376](https://insights.sbomify.com/MAL-2025-92376/): Malicious code in xaver-lepet44-miaww (npm) (malicious package)
- [MAL-2025-92375](https://insights.sbomify.com/MAL-2025-92375/): Malicious code in xaver-lepet26-miaww (npm) (malicious package)
- [MAL-2025-92374](https://insights.sbomify.com/MAL-2025-92374/): Malicious code in xaver-lepet25-miaww (npm) (malicious package)
- [MAL-2025-92373](https://insights.sbomify.com/MAL-2025-92373/): Malicious code in xaver-lapis36-riris (npm) (malicious package)
- [MAL-2025-92372](https://insights.sbomify.com/MAL-2025-92372/): Malicious code in xaver-kupat90-riris (npm) (malicious package)
- [MAL-2025-92371](https://insights.sbomify.com/MAL-2025-92371/): Malicious code in xaver-kupat75-miaww (npm) (malicious package)
- [MAL-2025-92370](https://insights.sbomify.com/MAL-2025-92370/): Malicious code in xaver-kupang83-miaww (npm) (malicious package)
- [MAL-2025-9237](https://insights.sbomify.com/MAL-2025-9237/): Malicious code in @plentific/dashboard (npm) (malicious package)
- [MAL-2025-92369](https://insights.sbomify.com/MAL-2025-92369/): Malicious code in xaver-kue98-sluey (npm) (malicious package)
- [MAL-2025-92368](https://insights.sbomify.com/MAL-2025-92368/): Malicious code in xaver-kue28-riris (npm) (malicious package)
- [MAL-2025-92367](https://insights.sbomify.com/MAL-2025-92367/): Malicious code in xaver-kue12-riris (npm) (malicious package)
- [MAL-2025-92366](https://insights.sbomify.com/MAL-2025-92366/): Malicious code in xaver-kripik12-riris (npm) (malicious package)
- [MAL-2025-92365](https://insights.sbomify.com/MAL-2025-92365/): Malicious code in xaver-klipo89-kyuki (npm) (malicious package)
- [MAL-2025-92364](https://insights.sbomify.com/MAL-2025-92364/): Malicious code in xaver-klentik13-riris (npm) (malicious package)
- [MAL-2025-92363](https://insights.sbomify.com/MAL-2025-92363/): Malicious code in xaver-klanting85-riris (npm) (malicious package)
- [MAL-2025-92362](https://insights.sbomify.com/MAL-2025-92362/): Malicious code in xaver-klanting32-apidev (npm) (malicious package)
- [MAL-2025-92361](https://insights.sbomify.com/MAL-2025-92361/): Malicious code in xaver-ketoprak5-miaww (npm) (malicious package)
- [MAL-2025-92360](https://insights.sbomify.com/MAL-2025-92360/): Malicious code in xaver-ketan96-miaww (npm) (malicious package)
- [MAL-2025-9236](https://insights.sbomify.com/MAL-2025-9236/): Malicious code in @plattenbau/element-ui (npm) (malicious package)
- [MAL-2025-92359](https://insights.sbomify.com/MAL-2025-92359/): Malicious code in xaver-keripik84-kyuki (npm) (malicious package)
- [MAL-2025-92358](https://insights.sbomify.com/MAL-2025-92358/): Malicious code in xaver-kembang9-riris (npm) (malicious package)
- [MAL-2025-92357](https://insights.sbomify.com/MAL-2025-92357/): Malicious code in xaver-kembang50-miaww (npm) (malicious package)
- [MAL-2025-92356](https://insights.sbomify.com/MAL-2025-92356/): Malicious code in xaver-kembang49-riris (npm) (malicious package)
- [MAL-2025-92355](https://insights.sbomify.com/MAL-2025-92355/): Malicious code in xaver-jus51-miaww (npm) (malicious package)
- [MAL-2025-92354](https://insights.sbomify.com/MAL-2025-92354/): Malicious code in xaver-jus47-riris (npm) (malicious package)
- [MAL-2025-92353](https://insights.sbomify.com/MAL-2025-92353/): Malicious code in xaver-jamblang37-miaww (npm) (malicious package)
- [MAL-2025-92352](https://insights.sbomify.com/MAL-2025-92352/): Malicious code in xaver-jamblang2-riris (npm) (malicious package)
- [MAL-2025-92351](https://insights.sbomify.com/MAL-2025-92351/): Malicious code in xaver-gulai25-apidev (npm) (malicious package)
- [MAL-2025-92350](https://insights.sbomify.com/MAL-2025-92350/): Malicious code in xaver-gorengan45-kyuki (npm) (malicious package)
- [MAL-2025-9235](https://insights.sbomify.com/MAL-2025-9235/): Malicious code in @plattenbau/component-library (npm) (malicious package)
- [MAL-2025-92349](https://insights.sbomify.com/MAL-2025-92349/): Malicious code in xaver-getas3-miaww (npm) (malicious package)
- [MAL-2025-92348](https://insights.sbomify.com/MAL-2025-92348/): Malicious code in xaver-gepuk7-sluey (npm) (malicious package)
- [MAL-2025-92347](https://insights.sbomify.com/MAL-2025-92347/): Malicious code in xaver-gandul27-riris (npm) (malicious package)
- [MAL-2025-92346](https://insights.sbomify.com/MAL-2025-92346/): Malicious code in xaver-gado-gado65-riris (npm) (malicious package)
- [MAL-2025-92345](https://insights.sbomify.com/MAL-2025-92345/): Malicious code in xaver-esdoger45-riris (npm) (malicious package)
- [MAL-2025-92344](https://insights.sbomify.com/MAL-2025-92344/): Malicious code in xaver-enting48-miaww (npm) (malicious package)
- [MAL-2025-92343](https://insights.sbomify.com/MAL-2025-92343/): Malicious code in xaver-empal94-riris (npm) (malicious package)
- [MAL-2025-92342](https://insights.sbomify.com/MAL-2025-92342/): Malicious code in xaver-dodol1-riris (npm) (malicious package)
- [MAL-2025-92341](https://insights.sbomify.com/MAL-2025-92341/): Malicious code in xaver-brongkos59-miaww (npm) (malicious package)
- [MAL-2025-92340](https://insights.sbomify.com/MAL-2025-92340/): Malicious code in xaver-brengkes94-riris (npm) (malicious package)
- [MAL-2025-9234](https://insights.sbomify.com/MAL-2025-9234/): Malicious code in @phamton/api-chat-fanpage-facebook (npm) (malicious package)
- [MAL-2025-92339](https://insights.sbomify.com/MAL-2025-92339/): Malicious code in xaver-brengkes48-miaww (npm) (malicious package)
- [MAL-2025-92338](https://insights.sbomify.com/MAL-2025-92338/): Malicious code in xaver-botok74-apidev (npm) (malicious package)
- [MAL-2025-92337](https://insights.sbomify.com/MAL-2025-92337/): Malicious code in xaver-bakwan5-riris (npm) (malicious package)
- [MAL-2025-92336](https://insights.sbomify.com/MAL-2025-92336/): Malicious code in xaver-asinan14-miaww (npm) (malicious package)
- [MAL-2025-92335](https://insights.sbomify.com/MAL-2025-92335/): Malicious code in wrong_harrier_z3n (npm) (malicious package)
- [MAL-2025-92334](https://insights.sbomify.com/MAL-2025-92334/): Malicious code in wrong_gayal_z3n (npm) (malicious package)
- [MAL-2025-92333](https://insights.sbomify.com/MAL-2025-92333/): Malicious code in written_wombat_z3n (npm) (malicious package)
- [MAL-2025-92332](https://insights.sbomify.com/MAL-2025-92332/): Malicious code in written_trout_z3n (npm) (malicious package)
- [MAL-2025-92331](https://insights.sbomify.com/MAL-2025-92331/): Malicious code in written_pelican_z3n (npm) (malicious package)
- [MAL-2025-92330](https://insights.sbomify.com/MAL-2025-92330/): Malicious code in written_meerkat_z3n (npm) (malicious package)
- [MAL-2025-9233](https://insights.sbomify.com/MAL-2025-9233/): Malicious code in @pcid/string-utils (npm) (malicious package)
- [MAL-2025-92329](https://insights.sbomify.com/MAL-2025-92329/): Malicious code in written_anteater_z3n (npm) (malicious package)
- [MAL-2025-92328](https://insights.sbomify.com/MAL-2025-92328/): Malicious code in worthwhile_lobster_z3n (npm) (malicious package)
- [MAL-2025-92327](https://insights.sbomify.com/MAL-2025-92327/): Malicious code in worthwhile_leech_z3n (npm) (malicious package)
- [MAL-2025-92326](https://insights.sbomify.com/MAL-2025-92326/): Malicious code in worthwhile_kite_z3n (npm) (malicious package)
- [MAL-2025-92325](https://insights.sbomify.com/MAL-2025-92325/): Malicious code in worrying_kingfisher_z3n (npm) (malicious package)
- [MAL-2025-92324](https://insights.sbomify.com/MAL-2025-92324/): Malicious code in worried_raccoon_z3n (npm) (malicious package)
- [MAL-2025-92323](https://insights.sbomify.com/MAL-2025-92323/): Malicious code in worried_pig_z3n (npm) (malicious package)
- [MAL-2025-92322](https://insights.sbomify.com/MAL-2025-92322/): Malicious code in working_lobster_z3n (npm) (malicious package)
- [MAL-2025-92321](https://insights.sbomify.com/MAL-2025-92321/): Malicious code in wonderful_jaguar_z3n (npm) (malicious package)
- [MAL-2025-92320](https://insights.sbomify.com/MAL-2025-92320/): Malicious code in wonderful_gopher_z3n (npm) (malicious package)
- [MAL-2025-9232](https://insights.sbomify.com/MAL-2025-9232/): Malicious code in @pcid/storage-utils (npm) (malicious package)
- [MAL-2025-92319](https://insights.sbomify.com/MAL-2025-92319/): Malicious code in witty_limpet_z3n (npm) (malicious package)
- [MAL-2025-92318](https://insights.sbomify.com/MAL-2025-92318/): Malicious code in wittering_catfish_z3n (npm) (malicious package)
- [MAL-2025-92317](https://insights.sbomify.com/MAL-2025-92317/): Malicious code in wispy_swan_z3n (npm) (malicious package)
- [MAL-2025-92316](https://insights.sbomify.com/MAL-2025-92316/): Malicious code in wispy_porpoise_z3n (npm) (malicious package)
- [MAL-2025-92315](https://insights.sbomify.com/MAL-2025-92315/): Malicious code in wispy_haddock_z3n (npm) (malicious package)
- [MAL-2025-92314](https://insights.sbomify.com/MAL-2025-92314/): Malicious code in wispy_cow_z3n (npm) (malicious package)
- [MAL-2025-92313](https://insights.sbomify.com/MAL-2025-92313/): Malicious code in wise_lobster_z3n (npm) (malicious package)
- [MAL-2025-92312](https://insights.sbomify.com/MAL-2025-92312/): Malicious code in wise_crocodile_z3n (npm) (malicious package)
- [MAL-2025-92311](https://insights.sbomify.com/MAL-2025-92311/): Malicious code in wise_aardwolf_z3n (npm) (malicious package)
- [MAL-2025-92310](https://insights.sbomify.com/MAL-2025-92310/): Malicious code in wily_cougar_z3n (npm) (malicious package)
- [MAL-2025-9231](https://insights.sbomify.com/MAL-2025-9231/): Malicious code in @paysol-widgets/ts-client (npm) (malicious package)
- [MAL-2025-92309](https://insights.sbomify.com/MAL-2025-92309/): Malicious code in willing_dragon_z3n (npm) (malicious package)
- [MAL-2025-92308](https://insights.sbomify.com/MAL-2025-92308/): Malicious code in wilful_hamster_z3n (npm) (malicious package)
- [MAL-2025-92307](https://insights.sbomify.com/MAL-2025-92307/): Malicious code in wilful_chicken_z3n (npm) (malicious package)
- [MAL-2025-92306](https://insights.sbomify.com/MAL-2025-92306/): Malicious code in wilful_barracuda_z3n (npm) (malicious package)
- [MAL-2025-92305](https://insights.sbomify.com/MAL-2025-92305/): Malicious code in wild_sole_z3n (npm) (malicious package)
- [MAL-2025-92304](https://insights.sbomify.com/MAL-2025-92304/): Malicious code in widespread_kite_z3n (npm) (malicious package)
- [MAL-2025-92303](https://insights.sbomify.com/MAL-2025-92303/): Malicious code in wide_wasp_z3n (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/89/