# Vulnerabilities published in 2025


- [MAL-2025-185187](https://insights.sbomify.com/MAL-2025-185187/): Malicious code in sonic-oihg-mofc (npm) (malicious package)
- [MAL-2025-185186](https://insights.sbomify.com/MAL-2025-185186/): Malicious code in sonic-oihg-moc (npm) (malicious package)
- [MAL-2025-185185](https://insights.sbomify.com/MAL-2025-185185/): Malicious code in sonic-oig-tmoerocneauaca (npm) (malicious package)
- [MAL-2025-185184](https://insights.sbomify.com/MAL-2025-185184/): Malicious code in sonic-oig-tmoerocneamuaca (npm) (malicious package)
- [MAL-2025-185183](https://insights.sbomify.com/MAL-2025-185183/): Malicious code in sonic-oig-tmoerocneaca (npm) (malicious package)
- [MAL-2025-185182](https://insights.sbomify.com/MAL-2025-185182/): Malicious code in sonic-oig-tmoerocneaaca (npm) (malicious package)
- [MAL-2025-185181](https://insights.sbomify.com/MAL-2025-185181/): Malicious code in sonic-oig-tmoerocnaca (npm) (malicious package)
- [MAL-2025-185180](https://insights.sbomify.com/MAL-2025-185180/): Malicious code in sonic-oig-tmoerocaca (npm) (malicious package)
- [MAL-2025-18518](https://insights.sbomify.com/MAL-2025-18518/): Malicious code in dk2o (npm) (malicious package)
- [MAL-2025-185179](https://insights.sbomify.com/MAL-2025-185179/): Malicious code in sonic-oig-tmoeroaca (npm) (malicious package)
- [MAL-2025-185178](https://insights.sbomify.com/MAL-2025-185178/): Malicious code in sonic-oig-tmoeraca (npm) (malicious package)
- [MAL-2025-185177](https://insights.sbomify.com/MAL-2025-185177/): Malicious code in sonic-oig-tmoeaca (npm) (malicious package)
- [MAL-2025-185176](https://insights.sbomify.com/MAL-2025-185176/): Malicious code in sonic-oig-tmoc (npm) (malicious package)
- [MAL-2025-185175](https://insights.sbomify.com/MAL-2025-185175/): Malicious code in sonic-oig-tmoaca (npm) (malicious package)
- [MAL-2025-185174](https://insights.sbomify.com/MAL-2025-185174/): Malicious code in sonic-oig-mopigfc (npm) (malicious package)
- [MAL-2025-185173](https://insights.sbomify.com/MAL-2025-185173/): Malicious code in sonic-oig-mopigafifc (npm) (malicious package)
- [MAL-2025-185172](https://insights.sbomify.com/MAL-2025-185172/): Malicious code in sonic-oig-mopigaffc (npm) (malicious package)
- [MAL-2025-185171](https://insights.sbomify.com/MAL-2025-185171/): Malicious code in sonic-oig-mopigafc (npm) (malicious package)
- [MAL-2025-185170](https://insights.sbomify.com/MAL-2025-185170/): Malicious code in sonic-oig-mopigafaifc (npm) (malicious package)
- [MAL-2025-18517](https://insights.sbomify.com/MAL-2025-18517/): Malicious code in djyskbecgotkvwuq (npm) (malicious package)
- [MAL-2025-185169](https://insights.sbomify.com/MAL-2025-185169/): Malicious code in sonic-oig-moigfc (npm) (malicious package)
- [MAL-2025-185168](https://insights.sbomify.com/MAL-2025-185168/): Malicious code in sonic-oig-moifc (npm) (malicious package)
- [MAL-2025-185167](https://insights.sbomify.com/MAL-2025-185167/): Malicious code in sonic-oig-moic (npm) (malicious package)
- [MAL-2025-185166](https://insights.sbomify.com/MAL-2025-185166/): Malicious code in sonic-oig-moc (npm) (malicious package)
- [MAL-2025-185165](https://insights.sbomify.com/MAL-2025-185165/): Malicious code in sonic-kuoig-timeseywaxa (npm) (malicious package)
- [MAL-2025-185164](https://insights.sbomify.com/MAL-2025-185164/): Malicious code in sonic-kuoig-timeseyaxa (npm) (malicious package)
- [MAL-2025-185163](https://insights.sbomify.com/MAL-2025-185163/): Malicious code in sonic-kuoig-timesexa (npm) (malicious package)
- [MAL-2025-185162](https://insights.sbomify.com/MAL-2025-185162/): Malicious code in sonic-kuloig-timeseyxa (npm) (malicious package)
- [MAL-2025-185161](https://insights.sbomify.com/MAL-2025-185161/): Malicious code in sonic-kuloig-timeseyaxa (npm) (malicious package)
- [MAL-2025-185160](https://insights.sbomify.com/MAL-2025-185160/): Malicious code in sonic-kuloig-timeseyawxa (npm) (malicious package)
- [MAL-2025-18516](https://insights.sbomify.com/MAL-2025-18516/): Malicious code in djwolf (npm) (malicious package)
- [MAL-2025-185159](https://insights.sbomify.com/MAL-2025-185159/): Malicious code in sonic-kuloig-timeseyawaxa (npm) (malicious package)
- [MAL-2025-185158](https://insights.sbomify.com/MAL-2025-185158/): Malicious code in sonic-kuloig-timesexa (npm) (malicious package)
- [MAL-2025-185157](https://insights.sbomify.com/MAL-2025-185157/): Malicious code in sonic-kuloig-timesex (npm) (malicious package)
- [MAL-2025-185156](https://insights.sbomify.com/MAL-2025-185156/): Malicious code in sonic-kuloig-timese (npm) (malicious package)
- [MAL-2025-185155](https://insights.sbomify.com/MAL-2025-185155/): Malicious code in sonic-kuloig-times (npm) (malicious package)
- [MAL-2025-185154](https://insights.sbomify.com/MAL-2025-185154/): Malicious code in sonic-kuloig-time (npm) (malicious package)
- [MAL-2025-185153](https://insights.sbomify.com/MAL-2025-185153/): Malicious code in sonic-kuloig-tim (npm) (malicious package)
- [MAL-2025-185152](https://insights.sbomify.com/MAL-2025-185152/): Malicious code in sonic-kuloig-ti (npm) (malicious package)
- [MAL-2025-185151](https://insights.sbomify.com/MAL-2025-185151/): Malicious code in sonic-kuloig-tgviavuexe (npm) (malicious package)
- [MAL-2025-185150](https://insights.sbomify.com/MAL-2025-185150/): Malicious code in sonic-kuloig-tgviavuex (npm) (malicious package)
- [MAL-2025-18515](https://insights.sbomify.com/MAL-2025-18515/): Malicious code in djurto (npm) (malicious package)
- [MAL-2025-185149](https://insights.sbomify.com/MAL-2025-185149/): Malicious code in sonic-kuloig-tgviavue (npm) (malicious package)
- [MAL-2025-185148](https://insights.sbomify.com/MAL-2025-185148/): Malicious code in sonic-kuloig-tgviavu (npm) (malicious package)
- [MAL-2025-185147](https://insights.sbomify.com/MAL-2025-185147/): Malicious code in sonic-kuloig-tgviav (npm) (malicious package)
- [MAL-2025-185146](https://insights.sbomify.com/MAL-2025-185146/): Malicious code in sonic-kuloig-tgvia (npm) (malicious package)
- [MAL-2025-185145](https://insights.sbomify.com/MAL-2025-185145/): Malicious code in sonic-kuloig-tgvi (npm) (malicious package)
- [MAL-2025-185144](https://insights.sbomify.com/MAL-2025-185144/): Malicious code in sonic-kuloig-tgv (npm) (malicious package)
- [MAL-2025-185143](https://insights.sbomify.com/MAL-2025-185143/): Malicious code in sonic-kuloig-tg (npm) (malicious package)
- [MAL-2025-185142](https://insights.sbomify.com/MAL-2025-185142/): Malicious code in sonic-kulig-tgviavuexe (npm) (malicious package)
- [MAL-2025-185141](https://insights.sbomify.com/MAL-2025-185141/): Malicious code in sonic-kulig-tgviavue (npm) (malicious package)
- [MAL-2025-185140](https://insights.sbomify.com/MAL-2025-185140/): Malicious code in sonic-kulig-tgviave (npm) (malicious package)
- [MAL-2025-18514](https://insights.sbomify.com/MAL-2025-18514/): Malicious code in djudge (npm) (malicious package)
- [MAL-2025-185139](https://insights.sbomify.com/MAL-2025-185139/): Malicious code in sonic-kulig-tgviae (npm) (malicious package)
- [MAL-2025-185138](https://insights.sbomify.com/MAL-2025-185138/): Malicious code in sonic-kulig-tgvia (npm) (malicious package)
- [MAL-2025-185137](https://insights.sbomify.com/MAL-2025-185137/): Malicious code in sonic-kulig-tgvi (npm) (malicious package)
- [MAL-2025-185136](https://insights.sbomify.com/MAL-2025-185136/): Malicious code in sonic-kulig-tgv (npm) (malicious package)
- [MAL-2025-185135](https://insights.sbomify.com/MAL-2025-185135/): Malicious code in sonic-kulig-tgav (npm) (malicious package)
- [MAL-2025-185134](https://insights.sbomify.com/MAL-2025-185134/): Malicious code in sonic-kulig-tgacv (npm) (malicious package)
- [MAL-2025-185133](https://insights.sbomify.com/MAL-2025-185133/): Malicious code in sonic-kulig-tgacov (npm) (malicious package)
- [MAL-2025-185132](https://insights.sbomify.com/MAL-2025-185132/): Malicious code in sonic-kulig-tgacoav (npm) (malicious package)
- [MAL-2025-185131](https://insights.sbomify.com/MAL-2025-185131/): Malicious code in sonic-kulig-tgacedcuadopav (npm) (malicious package)
- [MAL-2025-185130](https://insights.sbomify.com/MAL-2025-185130/): Malicious code in sonic-kulig-tgacedcuadojxaepav (npm) (malicious package)
- [MAL-2025-18513](https://insights.sbomify.com/MAL-2025-18513/): Malicious code in djsblog (npm) (malicious package)
- [MAL-2025-185129](https://insights.sbomify.com/MAL-2025-185129/): Malicious code in sonic-kulig-tgacedcuadojaepav (npm) (malicious package)
- [MAL-2025-185128](https://insights.sbomify.com/MAL-2025-185128/): Malicious code in sonic-kulig-tgacedcuadoapav (npm) (malicious package)
- [MAL-2025-185127](https://insights.sbomify.com/MAL-2025-185127/): Malicious code in sonic-kulig-tgacedcuadoaepav (npm) (malicious package)
- [MAL-2025-185126](https://insights.sbomify.com/MAL-2025-185126/): Malicious code in sonic-kulig-tgacedcadopav (npm) (malicious package)
- [MAL-2025-185125](https://insights.sbomify.com/MAL-2025-185125/): Malicious code in sonic-kulig-tgacedaoav (npm) (malicious package)
- [MAL-2025-185124](https://insights.sbomify.com/MAL-2025-185124/): Malicious code in sonic-kulig-tgacedadopav (npm) (malicious package)
- [MAL-2025-185123](https://insights.sbomify.com/MAL-2025-185123/): Malicious code in sonic-kulig-tgacedadoav (npm) (malicious package)
- [MAL-2025-185122](https://insights.sbomify.com/MAL-2025-185122/): Malicious code in sonic-kulig-tgacdoav (npm) (malicious package)
- [MAL-2025-185121](https://insights.sbomify.com/MAL-2025-185121/): Malicious code in sonic-kulig-tgacdaoav (npm) (malicious package)
- [MAL-2025-185120](https://insights.sbomify.com/MAL-2025-185120/): Malicious code in sonic-kuig-tnav (npm) (malicious package)
- [MAL-2025-18512](https://insights.sbomify.com/MAL-2025-18512/): Malicious code in djkbxyrgapemonwt (npm) (malicious package)
- [MAL-2025-185119](https://insights.sbomify.com/MAL-2025-185119/): Malicious code in sonic-kuig-tnaecav (npm) (malicious package)
- [MAL-2025-185118](https://insights.sbomify.com/MAL-2025-185118/): Malicious code in sonic-kuig-tnaeav (npm) (malicious package)
- [MAL-2025-185117](https://insights.sbomify.com/MAL-2025-185117/): Malicious code in sonic-kuig-tnadecav (npm) (malicious package)
- [MAL-2025-185116](https://insights.sbomify.com/MAL-2025-185116/): Malicious code in sonic-kuig-tnadeaxwqcav (npm) (malicious package)
- [MAL-2025-185115](https://insights.sbomify.com/MAL-2025-185115/): Malicious code in sonic-kuig-tnadeaxqcav (npm) (malicious package)
- [MAL-2025-185114](https://insights.sbomify.com/MAL-2025-185114/): Malicious code in sonic-kuig-tnadeaqcav (npm) (malicious package)
- [MAL-2025-185113](https://insights.sbomify.com/MAL-2025-185113/): Malicious code in sonic-kuig-tnaav (npm) (malicious package)
- [MAL-2025-185112](https://insights.sbomify.com/MAL-2025-185112/): Malicious code in sonic-kuig-tgav (npm) (malicious package)
- [MAL-2025-185111](https://insights.sbomify.com/MAL-2025-185111/): Malicious code in sonic-kuig-tgacedcuav (npm) (malicious package)
- [MAL-2025-185110](https://insights.sbomify.com/MAL-2025-185110/): Malicious code in sonic-kuig-tgacedcuadojxav (npm) (malicious package)
- [MAL-2025-18511](https://insights.sbomify.com/MAL-2025-18511/): Malicious code in djangoreg (npm) (malicious package)
- [MAL-2025-185109](https://insights.sbomify.com/MAL-2025-185109/): Malicious code in sonic-kuig-tgacedcuadojxaepav (npm) (malicious package)
- [MAL-2025-185108](https://insights.sbomify.com/MAL-2025-185108/): Malicious code in sonic-kuig-tgacedcuadojxaeav (npm) (malicious package)
- [MAL-2025-185107](https://insights.sbomify.com/MAL-2025-185107/): Malicious code in sonic-kuig-tgacedcuadojxaav (npm) (malicious package)
- [MAL-2025-185106](https://insights.sbomify.com/MAL-2025-185106/): Malicious code in sonic-kuig-tgacedcuadojav (npm) (malicious package)
- [MAL-2025-185105](https://insights.sbomify.com/MAL-2025-185105/): Malicious code in sonic-kuig-tgacedcuadoav (npm) (malicious package)
- [MAL-2025-185104](https://insights.sbomify.com/MAL-2025-185104/): Malicious code in sonic-kuig-tgacedcuadav (npm) (malicious package)
- [MAL-2025-185103](https://insights.sbomify.com/MAL-2025-185103/): Malicious code in sonic-kuig-tgacedcuaav (npm) (malicious package)
- [MAL-2025-185102](https://insights.sbomify.com/MAL-2025-185102/): Malicious code in sonic-kuig-tgacedcav (npm) (malicious package)
- [MAL-2025-185101](https://insights.sbomify.com/MAL-2025-185101/): Malicious code in sonic-kuig-tgacedav (npm) (malicious package)
- [MAL-2025-185100](https://insights.sbomify.com/MAL-2025-185100/): Malicious code in sonic-kuig-tgaceav (npm) (malicious package)
- [MAL-2025-18510](https://insights.sbomify.com/MAL-2025-18510/): Malicious code in djangogae (npm) (malicious package)
- [MAL-2025-1851](https://insights.sbomify.com/MAL-2025-1851/): Malicious code in instacart-admin (npm) (malicious package)
- [MAL-2025-185099](https://insights.sbomify.com/MAL-2025-185099/): Malicious code in sonic-kuig-tgacav (npm) (malicious package)
- [MAL-2025-185098](https://insights.sbomify.com/MAL-2025-185098/): Malicious code in sonic-kuig-tgaav (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/986/