# Vulnerabilities published in 2025


- [MAL-2025-91579](https://insights.sbomify.com/MAL-2025-91579/): Malicious code in utomo-kolak3-miaww (npm) (malicious package)
- [MAL-2025-91578](https://insights.sbomify.com/MAL-2025-91578/): Malicious code in utomo-keripik96-riris (npm) (malicious package)
- [MAL-2025-91577](https://insights.sbomify.com/MAL-2025-91577/): Malicious code in utomo-keripik89-miaww (npm) (malicious package)
- [MAL-2025-91576](https://insights.sbomify.com/MAL-2025-91576/): Malicious code in utomo-kepok32-riris (npm) (malicious package)
- [MAL-2025-91575](https://insights.sbomify.com/MAL-2025-91575/): Malicious code in utomo-kentang32-kyuki (npm) (malicious package)
- [MAL-2025-91574](https://insights.sbomify.com/MAL-2025-91574/): Malicious code in utomo-kacang91-riris (npm) (malicious package)
- [MAL-2025-91573](https://insights.sbomify.com/MAL-2025-91573/): Malicious code in utomo-jus19-miaww (npm) (malicious package)
- [MAL-2025-91572](https://insights.sbomify.com/MAL-2025-91572/): Malicious code in utomo-jamblang18-riris (npm) (malicious package)
- [MAL-2025-91571](https://insights.sbomify.com/MAL-2025-91571/): Malicious code in utomo-gudeg59-riris (npm) (malicious package)
- [MAL-2025-91570](https://insights.sbomify.com/MAL-2025-91570/): Malicious code in utomo-gorengan80-sluey (npm) (malicious package)
- [MAL-2025-9157](https://insights.sbomify.com/MAL-2025-9157/): Malicious code in @patrten/aliquam-maxime (npm) (malicious package)
- [MAL-2025-91569](https://insights.sbomify.com/MAL-2025-91569/): Malicious code in utomo-gorengan20-riris (npm) (malicious package)
- [MAL-2025-91568](https://insights.sbomify.com/MAL-2025-91568/): Malicious code in utomo-getuk89-miaww (npm) (malicious package)
- [MAL-2025-91567](https://insights.sbomify.com/MAL-2025-91567/): Malicious code in utomo-getuk87-riris (npm) (malicious package)
- [MAL-2025-91566](https://insights.sbomify.com/MAL-2025-91566/): Malicious code in utomo-getas69-miaww (npm) (malicious package)
- [MAL-2025-91565](https://insights.sbomify.com/MAL-2025-91565/): Malicious code in utomo-gembus36-miaww (npm) (malicious package)
- [MAL-2025-91564](https://insights.sbomify.com/MAL-2025-91564/): Malicious code in utomo-enting74-miaww (npm) (malicious package)
- [MAL-2025-91563](https://insights.sbomify.com/MAL-2025-91563/): Malicious code in utomo-empal9-riris (npm) (malicious package)
- [MAL-2025-91562](https://insights.sbomify.com/MAL-2025-91562/): Malicious code in utomo-donat18-riris (npm) (malicious package)
- [MAL-2025-91561](https://insights.sbomify.com/MAL-2025-91561/): Malicious code in utomo-bubursumsum31-riris (npm) (malicious package)
- [MAL-2025-91560](https://insights.sbomify.com/MAL-2025-91560/): Malicious code in utomo-buburayam45-riris (npm) (malicious package)
- [MAL-2025-9156](https://insights.sbomify.com/MAL-2025-9156/): Malicious code in @patrten/alias-eligendi-ex (npm) (malicious package)
- [MAL-2025-91559](https://insights.sbomify.com/MAL-2025-91559/): Malicious code in utomo-bika43-riris (npm) (malicious package)
- [MAL-2025-91558](https://insights.sbomify.com/MAL-2025-91558/): Malicious code in utomo-bakwan86-riris (npm) (malicious package)
- [MAL-2025-91557](https://insights.sbomify.com/MAL-2025-91557/): Malicious code in utomo-bakso23-riris (npm) (malicious package)
- [MAL-2025-91556](https://insights.sbomify.com/MAL-2025-91556/): Malicious code in utomo-asinan71-kyuki (npm) (malicious package)
- [MAL-2025-91555](https://insights.sbomify.com/MAL-2025-91555/): Malicious code in usual_mollusk_z3n (npm) (malicious package)
- [MAL-2025-91554](https://insights.sbomify.com/MAL-2025-91554/): Malicious code in usual_limpet_z3n (npm) (malicious package)
- [MAL-2025-91553](https://insights.sbomify.com/MAL-2025-91553/): Malicious code in useful_heron_z3n (npm) (malicious package)
- [MAL-2025-91552](https://insights.sbomify.com/MAL-2025-91552/): Malicious code in used_lobster_z3n (npm) (malicious package)
- [MAL-2025-91551](https://insights.sbomify.com/MAL-2025-91551/): Malicious code in used_butterfly_z3n (npm) (malicious package)
- [MAL-2025-91550](https://insights.sbomify.com/MAL-2025-91550/): Malicious code in urban_peafowl_z3n (npm) (malicious package)
- [MAL-2025-9155](https://insights.sbomify.com/MAL-2025-9155/): Malicious code in @patrten/ad-id-id (npm) (malicious package)
- [MAL-2025-91549](https://insights.sbomify.com/MAL-2025-91549/): Malicious code in urban_minnow_z3n (npm) (malicious package)
- [MAL-2025-91548](https://insights.sbomify.com/MAL-2025-91548/): Malicious code in uptight_pheasant_z3n (npm) (malicious package)
- [MAL-2025-91547](https://insights.sbomify.com/MAL-2025-91547/): Malicious code in uptight_horse_z3n (npm) (malicious package)
- [MAL-2025-91546](https://insights.sbomify.com/MAL-2025-91546/): Malicious code in upset_gorilla_z3n (npm) (malicious package)
- [MAL-2025-91545](https://insights.sbomify.com/MAL-2025-91545/): Malicious code in upper_donkey_z3n (npm) (malicious package)
- [MAL-2025-91544](https://insights.sbomify.com/MAL-2025-91544/): Malicious code in unwilling_thrush_z3n (npm) (malicious package)
- [MAL-2025-91543](https://insights.sbomify.com/MAL-2025-91543/): Malicious code in unwilling_leopon_z3n (npm) (malicious package)
- [MAL-2025-91542](https://insights.sbomify.com/MAL-2025-91542/): Malicious code in unwilling_antlion_z3n (npm) (malicious package)
- [MAL-2025-91541](https://insights.sbomify.com/MAL-2025-91541/): Malicious code in unusual_catshark_z3n (npm) (malicious package)
- [MAL-2025-91540](https://insights.sbomify.com/MAL-2025-91540/): Malicious code in unsightly_squid_z3n (npm) (malicious package)
- [MAL-2025-9154](https://insights.sbomify.com/MAL-2025-9154/): Malicious code in @patrten/accusantium-libero-velit-aspernatur (npm) (malicious package)
- [MAL-2025-91539](https://insights.sbomify.com/MAL-2025-91539/): Malicious code in unlikely_zebra_z3n (npm) (malicious package)
- [MAL-2025-91538](https://insights.sbomify.com/MAL-2025-91538/): Malicious code in unlikely_iguana_z3n (npm) (malicious package)
- [MAL-2025-91537](https://insights.sbomify.com/MAL-2025-91537/): Malicious code in unlikely_horse_z3n (npm) (malicious package)
- [MAL-2025-91536](https://insights.sbomify.com/MAL-2025-91536/): Malicious code in unknown_ocelot_z3n (npm) (malicious package)
- [MAL-2025-91535](https://insights.sbomify.com/MAL-2025-91535/): Malicious code in unknown_gerbil_z3n (npm) (malicious package)
- [MAL-2025-91534](https://insights.sbomify.com/MAL-2025-91534/): Malicious code in unknown_donkey_z3n (npm) (malicious package)
- [MAL-2025-91533](https://insights.sbomify.com/MAL-2025-91533/): Malicious code in unknown_chipmunk_z3n (npm) (malicious package)
- [MAL-2025-91532](https://insights.sbomify.com/MAL-2025-91532/): Malicious code in universal_barnacle_z3n (npm) (malicious package)
- [MAL-2025-91531](https://insights.sbomify.com/MAL-2025-91531/): Malicious code in united_quelea_z3n (npm) (malicious package)
- [MAL-2025-91530](https://insights.sbomify.com/MAL-2025-91530/): Malicious code in united_peafowl_z3n (npm) (malicious package)
- [MAL-2025-9153](https://insights.sbomify.com/MAL-2025-9153/): Malicious code in @patrten/accusamus-aspernatur (npm) (malicious package)
- [MAL-2025-91529](https://insights.sbomify.com/MAL-2025-91529/): Malicious code in united_leopon_z3n (npm) (malicious package)
- [MAL-2025-91528](https://insights.sbomify.com/MAL-2025-91528/): Malicious code in united_dolphin_z3n (npm) (malicious package)
- [MAL-2025-91527](https://insights.sbomify.com/MAL-2025-91527/): Malicious code in uniform_sparrow_z3n (npm) (malicious package)
- [MAL-2025-91526](https://insights.sbomify.com/MAL-2025-91526/): Malicious code in unhappy_leopard_z3n (npm) (malicious package)
- [MAL-2025-91525](https://insights.sbomify.com/MAL-2025-91525/): Malicious code in unhappy_cockroach_z3n (npm) (malicious package)
- [MAL-2025-91524](https://insights.sbomify.com/MAL-2025-91524/): Malicious code in unhappy_chinchilla_z3n (npm) (malicious package)
- [MAL-2025-91523](https://insights.sbomify.com/MAL-2025-91523/): Malicious code in unfair_turkey_z3n (npm) (malicious package)
- [MAL-2025-91522](https://insights.sbomify.com/MAL-2025-91522/): Malicious code in unfair_alpaca_z3n (npm) (malicious package)
- [MAL-2025-91521](https://insights.sbomify.com/MAL-2025-91521/): Malicious code in unexpected_bird_z3n (npm) (malicious package)
- [MAL-2025-91520](https://insights.sbomify.com/MAL-2025-91520/): Malicious code in uneven_dingo_z3n (npm) (malicious package)
- [MAL-2025-9152](https://insights.sbomify.com/MAL-2025-9152/): Malicious code in @patrten/ab-omnis-tenetur (npm) (malicious package)
- [MAL-2025-91519](https://insights.sbomify.com/MAL-2025-91519/): Malicious code in uneven_carp_z3n (npm) (malicious package)
- [MAL-2025-91518](https://insights.sbomify.com/MAL-2025-91518/): Malicious code in uneven_bonobo_z3n (npm) (malicious package)
- [MAL-2025-91517](https://insights.sbomify.com/MAL-2025-91517/): Malicious code in uncomfortable_snail_z3n (npm) (malicious package)
- [MAL-2025-91516](https://insights.sbomify.com/MAL-2025-91516/): Malicious code in uncomfortable_halibut_z3n (npm) (malicious package)
- [MAL-2025-91515](https://insights.sbomify.com/MAL-2025-91515/): Malicious code in unchanged_leech_z3n (npm) (malicious package)
- [MAL-2025-91514](https://insights.sbomify.com/MAL-2025-91514/): Malicious code in unchanged_cicada_z3n (npm) (malicious package)
- [MAL-2025-91513](https://insights.sbomify.com/MAL-2025-91513/): Malicious code in uncertain_mackerel_z3n (npm) (malicious package)
- [MAL-2025-91512](https://insights.sbomify.com/MAL-2025-91512/): Malicious code in unaware_goldfish_z3n (npm) (malicious package)
- [MAL-2025-91511](https://insights.sbomify.com/MAL-2025-91511/): Malicious code in unacceptable_stingray_z3n (npm) (malicious package)
- [MAL-2025-91510](https://insights.sbomify.com/MAL-2025-91510/): Malicious code in unacceptable_squid_z3n (npm) (malicious package)
- [MAL-2025-9151](https://insights.sbomify.com/MAL-2025-9151/): Malicious code in @patrten/a-voluptatibus-voluptate (npm) (malicious package)
- [MAL-2025-91509](https://insights.sbomify.com/MAL-2025-91509/): Malicious code in umi-tongseng69-riris (npm) (malicious package)
- [MAL-2025-91508](https://insights.sbomify.com/MAL-2025-91508/): Malicious code in umi-tomat69-miaww (npm) (malicious package)
- [MAL-2025-91507](https://insights.sbomify.com/MAL-2025-91507/): Malicious code in umi-tomat100-miaww (npm) (malicious package)
- [MAL-2025-91506](https://insights.sbomify.com/MAL-2025-91506/): Malicious code in umi-tiwul40-kyuki (npm) (malicious package)
- [MAL-2025-91505](https://insights.sbomify.com/MAL-2025-91505/): Malicious code in umi-teh63-riris (npm) (malicious package)
- [MAL-2025-91504](https://insights.sbomify.com/MAL-2025-91504/): Malicious code in umi-tapai86-miaww (npm) (malicious package)
- [MAL-2025-91503](https://insights.sbomify.com/MAL-2025-91503/): Malicious code in umi-takokak35-riris (npm) (malicious package)
- [MAL-2025-91502](https://insights.sbomify.com/MAL-2025-91502/): Malicious code in umi-takokak32-miaww (npm) (malicious package)
- [MAL-2025-91501](https://insights.sbomify.com/MAL-2025-91501/): Malicious code in umi-tahutek96-riris (npm) (malicious package)
- [MAL-2025-91500](https://insights.sbomify.com/MAL-2025-91500/): Malicious code in umi-tahutek61-miaww (npm) (malicious package)
- [MAL-2025-9150](https://insights.sbomify.com/MAL-2025-9150/): Malicious code in @partnercenter-react/ui-webcore (npm) (malicious package)
- [MAL-2025-91499](https://insights.sbomify.com/MAL-2025-91499/): Malicious code in umi-tahu7-miaww (npm) (malicious package)
- [MAL-2025-91498](https://insights.sbomify.com/MAL-2025-91498/): Malicious code in umi-tahu56-riris (npm) (malicious package)
- [MAL-2025-91497](https://insights.sbomify.com/MAL-2025-91497/): Malicious code in umi-tahu29-riris (npm) (malicious package)
- [MAL-2025-91496](https://insights.sbomify.com/MAL-2025-91496/): Malicious code in umi-tahu2-miaww (npm) (malicious package)
- [MAL-2025-91495](https://insights.sbomify.com/MAL-2025-91495/): Malicious code in umi-sroto35-miaww (npm) (malicious package)
- [MAL-2025-91494](https://insights.sbomify.com/MAL-2025-91494/): Malicious code in umi-soto75-riris (npm) (malicious package)
- [MAL-2025-91493](https://insights.sbomify.com/MAL-2025-91493/): Malicious code in umi-soto29-miaww (npm) (malicious package)
- [MAL-2025-91492](https://insights.sbomify.com/MAL-2025-91492/): Malicious code in umi-serimuka36-riris (npm) (malicious package)
- [MAL-2025-91491](https://insights.sbomify.com/MAL-2025-91491/): Malicious code in umi-semur65-riris (npm) (malicious package)
- [MAL-2025-91490](https://insights.sbomify.com/MAL-2025-91490/): Malicious code in umi-sego43-miaww (npm) (malicious package)
- [MAL-2025-9149](https://insights.sbomify.com/MAL-2025-9149/): Malicious code in @oss-ui/capsig-legacy (npm) (malicious package)
- [MAL-2025-91489](https://insights.sbomify.com/MAL-2025-91489/): Malicious code in umi-sasag96-riris (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/98/
