# Vulnerabilities published in 2025


- [MAL-2025-91488](https://insights.sbomify.com/MAL-2025-91488/): Malicious code in umi-sambel58-miaww (npm) (malicious package)
- [MAL-2025-91487](https://insights.sbomify.com/MAL-2025-91487/): Malicious code in umi-sambalado9-apidev (npm) (malicious package)
- [MAL-2025-91486](https://insights.sbomify.com/MAL-2025-91486/): Malicious code in umi-rujaksoto55-apidev (npm) (malicious package)
- [MAL-2025-91485](https://insights.sbomify.com/MAL-2025-91485/): Malicious code in umi-rangi63-riris (npm) (malicious package)
- [MAL-2025-91484](https://insights.sbomify.com/MAL-2025-91484/): Malicious code in umi-rangi26-riris (npm) (malicious package)
- [MAL-2025-91483](https://insights.sbomify.com/MAL-2025-91483/): Malicious code in umi-rangginang89-miaww (npm) (malicious package)
- [MAL-2025-91482](https://insights.sbomify.com/MAL-2025-91482/): Malicious code in umi-otak-otak79-riris (npm) (malicious package)
- [MAL-2025-91481](https://insights.sbomify.com/MAL-2025-91481/): Malicious code in umi-oncom16-miaww (npm) (malicious package)
- [MAL-2025-91480](https://insights.sbomify.com/MAL-2025-91480/): Malicious code in umi-nasicampur30-riris (npm) (malicious package)
- [MAL-2025-9148](https://insights.sbomify.com/MAL-2025-9148/): Malicious code in @orlserg32112/socket-test-vulndep (npm) (malicious package)
- [MAL-2025-91479](https://insights.sbomify.com/MAL-2025-91479/): Malicious code in umi-nasi74-miaww (npm) (malicious package)
- [MAL-2025-91478](https://insights.sbomify.com/MAL-2025-91478/): Malicious code in umi-moci19-miaww (npm) (malicious package)
- [MAL-2025-91477](https://insights.sbomify.com/MAL-2025-91477/): Malicious code in umi-miemee43-miaww (npm) (malicious package)
- [MAL-2025-91476](https://insights.sbomify.com/MAL-2025-91476/): Malicious code in umi-miemee29-miaww (npm) (malicious package)
- [MAL-2025-91475](https://insights.sbomify.com/MAL-2025-91475/): Malicious code in umi-mieayam95-miaww (npm) (malicious package)
- [MAL-2025-91474](https://insights.sbomify.com/MAL-2025-91474/): Malicious code in umi-menjes89-wekto (npm) (malicious package)
- [MAL-2025-91473](https://insights.sbomify.com/MAL-2025-91473/): Malicious code in umi-menjes40-riris (npm) (malicious package)
- [MAL-2025-91472](https://insights.sbomify.com/MAL-2025-91472/): Malicious code in umi-mendoan66-riris (npm) (malicious package)
- [MAL-2025-91471](https://insights.sbomify.com/MAL-2025-91471/): Malicious code in umi-mendoan5-miaww (npm) (malicious package)
- [MAL-2025-91470](https://insights.sbomify.com/MAL-2025-91470/): Malicious code in umi-martabak13-miaww (npm) (malicious package)
- [MAL-2025-9147](https://insights.sbomify.com/MAL-2025-9147/): Malicious code in @oraliepham/api-facebooknew (npm) (malicious package)
- [MAL-2025-91469](https://insights.sbomify.com/MAL-2025-91469/): Malicious code in umi-mangut80-riris (npm) (malicious package)
- [MAL-2025-91468](https://insights.sbomify.com/MAL-2025-91468/): Malicious code in umi-mangut46-riris (npm) (malicious package)
- [MAL-2025-91467](https://insights.sbomify.com/MAL-2025-91467/): Malicious code in umi-lutis28-riris (npm) (malicious package)
- [MAL-2025-91466](https://insights.sbomify.com/MAL-2025-91466/): Malicious code in umi-lupis9-miaww (npm) (malicious package)
- [MAL-2025-91465](https://insights.sbomify.com/MAL-2025-91465/): Malicious code in umi-lupis79-riris (npm) (malicious package)
- [MAL-2025-91464](https://insights.sbomify.com/MAL-2025-91464/): Malicious code in umi-lumpur6-riris (npm) (malicious package)
- [MAL-2025-91463](https://insights.sbomify.com/MAL-2025-91463/): Malicious code in umi-lumpur48-miaww (npm) (malicious package)
- [MAL-2025-91462](https://insights.sbomify.com/MAL-2025-91462/): Malicious code in umi-liwet51-miaww (npm) (malicious package)
- [MAL-2025-91461](https://insights.sbomify.com/MAL-2025-91461/): Malicious code in umi-liwet36-riris (npm) (malicious package)
- [MAL-2025-91460](https://insights.sbomify.com/MAL-2025-91460/): Malicious code in umi-liwet11-riris (npm) (malicious package)
- [MAL-2025-9146](https://insights.sbomify.com/MAL-2025-9146/): Malicious code in @oraliepham/api-chat-fanpage-facebook (npm) (malicious package)
- [MAL-2025-91459](https://insights.sbomify.com/MAL-2025-91459/): Malicious code in umi-lengko63-sluey (npm) (malicious package)
- [MAL-2025-91458](https://insights.sbomify.com/MAL-2025-91458/): Malicious code in umi-lapis95-riris (npm) (malicious package)
- [MAL-2025-91457](https://insights.sbomify.com/MAL-2025-91457/): Malicious code in umi-lapis67-riris (npm) (malicious package)
- [MAL-2025-91456](https://insights.sbomify.com/MAL-2025-91456/): Malicious code in umi-lapis11-riris (npm) (malicious package)
- [MAL-2025-91455](https://insights.sbomify.com/MAL-2025-91455/): Malicious code in umi-kue75-riris (npm) (malicious package)
- [MAL-2025-91454](https://insights.sbomify.com/MAL-2025-91454/): Malicious code in umi-kue65-miaww (npm) (malicious package)
- [MAL-2025-91453](https://insights.sbomify.com/MAL-2025-91453/): Malicious code in umi-kue59-riris (npm) (malicious package)
- [MAL-2025-91452](https://insights.sbomify.com/MAL-2025-91452/): Malicious code in umi-kue54-miaww (npm) (malicious package)
- [MAL-2025-91451](https://insights.sbomify.com/MAL-2025-91451/): Malicious code in umi-kue30-miaww (npm) (malicious package)
- [MAL-2025-91450](https://insights.sbomify.com/MAL-2025-91450/): Malicious code in umi-kue15-riris (npm) (malicious package)
- [MAL-2025-9145](https://insights.sbomify.com/MAL-2025-9145/): Malicious code in @opensearch/datemath (npm) (malicious package)
- [MAL-2025-91449](https://insights.sbomify.com/MAL-2025-91449/): Malicious code in umi-kolak81-riris (npm) (malicious package)
- [MAL-2025-91448](https://insights.sbomify.com/MAL-2025-91448/): Malicious code in umi-klanting46-miaww (npm) (malicious package)
- [MAL-2025-91447](https://insights.sbomify.com/MAL-2025-91447/): Malicious code in umi-ketoprak58-riris (npm) (malicious package)
- [MAL-2025-91446](https://insights.sbomify.com/MAL-2025-91446/): Malicious code in umi-kentang1-kyuki (npm) (malicious package)
- [MAL-2025-91445](https://insights.sbomify.com/MAL-2025-91445/): Malicious code in umi-jus33-miaww (npm) (malicious package)
- [MAL-2025-91444](https://insights.sbomify.com/MAL-2025-91444/): Malicious code in umi-gudeg39-miaww (npm) (malicious package)
- [MAL-2025-91443](https://insights.sbomify.com/MAL-2025-91443/): Malicious code in umi-gorengan27-miaww (npm) (malicious package)
- [MAL-2025-91442](https://insights.sbomify.com/MAL-2025-91442/): Malicious code in umi-empal79-riris (npm) (malicious package)
- [MAL-2025-91441](https://insights.sbomify.com/MAL-2025-91441/): Malicious code in umi-empal48-miaww (npm) (malicious package)
- [MAL-2025-91440](https://insights.sbomify.com/MAL-2025-91440/): Malicious code in umi-dradag99-riris (npm) (malicious package)
- [MAL-2025-9144](https://insights.sbomify.com/MAL-2025-9144/): Malicious code in @omisepayments/session-config (npm) (malicious package)
- [MAL-2025-91439](https://insights.sbomify.com/MAL-2025-91439/): Malicious code in umi-donat39-riris (npm) (malicious package)
- [MAL-2025-91438](https://insights.sbomify.com/MAL-2025-91438/): Malicious code in umi-bubursumsum34-miaww (npm) (malicious package)
- [MAL-2025-91437](https://insights.sbomify.com/MAL-2025-91437/): Malicious code in umi-bubur92-miaww (npm) (malicious package)
- [MAL-2025-91436](https://insights.sbomify.com/MAL-2025-91436/): Malicious code in umi-bubur14-apidev (npm) (malicious package)
- [MAL-2025-91435](https://insights.sbomify.com/MAL-2025-91435/): Malicious code in umi-brongkos42-riris (npm) (malicious package)
- [MAL-2025-91434](https://insights.sbomify.com/MAL-2025-91434/): Malicious code in umi-botok99-riris (npm) (malicious package)
- [MAL-2025-91433](https://insights.sbomify.com/MAL-2025-91433/): Malicious code in umi-bakwan74-miaww (npm) (malicious package)
- [MAL-2025-91432](https://insights.sbomify.com/MAL-2025-91432/): Malicious code in umi-bakwan68-riris (npm) (malicious package)
- [MAL-2025-91431](https://insights.sbomify.com/MAL-2025-91431/): Malicious code in ultimate_giraffe_z3n (npm) (malicious package)
- [MAL-2025-91430](https://insights.sbomify.com/MAL-2025-91430/): Malicious code in ugly_chickadee_z3n (npm) (malicious package)
- [MAL-2025-9143](https://insights.sbomify.com/MAL-2025-9143/): Malicious code in @omisepayments/keycloak-react-components (npm) (malicious package)
- [MAL-2025-91429](https://insights.sbomify.com/MAL-2025-91429/): Malicious code in ugliest_squirrel_z3n (npm) (malicious package)
- [MAL-2025-91428](https://insights.sbomify.com/MAL-2025-91428/): Malicious code in udin-tumis11-riris (npm) (malicious package)
- [MAL-2025-91427](https://insights.sbomify.com/MAL-2025-91427/): Malicious code in udin-tomat30-riris (npm) (malicious package)
- [MAL-2025-91426](https://insights.sbomify.com/MAL-2025-91426/): Malicious code in udin-toge37-riris (npm) (malicious package)
- [MAL-2025-91425](https://insights.sbomify.com/MAL-2025-91425/): Malicious code in udin-toge25-miaww (npm) (malicious package)
- [MAL-2025-91424](https://insights.sbomify.com/MAL-2025-91424/): Malicious code in udin-tiwul78-apidev (npm) (malicious package)
- [MAL-2025-91423](https://insights.sbomify.com/MAL-2025-91423/): Malicious code in udin-tempe37-riris (npm) (malicious package)
- [MAL-2025-91422](https://insights.sbomify.com/MAL-2025-91422/): Malicious code in udin-tempe28-crottsekebon (npm) (malicious package)
- [MAL-2025-91421](https://insights.sbomify.com/MAL-2025-91421/): Malicious code in udin-telurtahu4-miaww (npm) (malicious package)
- [MAL-2025-91420](https://insights.sbomify.com/MAL-2025-91420/): Malicious code in udin-tek33-riris (npm) (malicious package)
- [MAL-2025-9142](https://insights.sbomify.com/MAL-2025-9142/): Malicious code in @omisepayments/in-app-communication-graphql-sdk (npm) (malicious package)
- [MAL-2025-91419](https://insights.sbomify.com/MAL-2025-91419/): Malicious code in udin-tek29-riris (npm) (malicious package)
- [MAL-2025-91418](https://insights.sbomify.com/MAL-2025-91418/): Malicious code in udin-teh29-miaww (npm) (malicious package)
- [MAL-2025-91417](https://insights.sbomify.com/MAL-2025-91417/): Malicious code in udin-tapai75-miaww (npm) (malicious package)
- [MAL-2025-91416](https://insights.sbomify.com/MAL-2025-91416/): Malicious code in udin-takokak65-miaww (npm) (malicious package)
- [MAL-2025-91415](https://insights.sbomify.com/MAL-2025-91415/): Malicious code in udin-takokak29-riris (npm) (malicious package)
- [MAL-2025-91414](https://insights.sbomify.com/MAL-2025-91414/): Malicious code in udin-taiwan52-riris (npm) (malicious package)
- [MAL-2025-91413](https://insights.sbomify.com/MAL-2025-91413/): Malicious code in udin-taiwan5-miaww (npm) (malicious package)
- [MAL-2025-91412](https://insights.sbomify.com/MAL-2025-91412/): Malicious code in udin-taiwan26-miaww (npm) (malicious package)
- [MAL-2025-91411](https://insights.sbomify.com/MAL-2025-91411/): Malicious code in udin-tahu47-riris (npm) (malicious package)
- [MAL-2025-91410](https://insights.sbomify.com/MAL-2025-91410/): Malicious code in udin-tahu4-riris (npm) (malicious package)
- [MAL-2025-9141](https://insights.sbomify.com/MAL-2025-9141/): Malicious code in @octo-org/octo-app (npm) (malicious package)
- [MAL-2025-91409](https://insights.sbomify.com/MAL-2025-91409/): Malicious code in udin-soto27-miaww (npm) (malicious package)
- [MAL-2025-91408](https://insights.sbomify.com/MAL-2025-91408/): Malicious code in udin-soto15-riris (npm) (malicious package)
- [MAL-2025-91407](https://insights.sbomify.com/MAL-2025-91407/): Malicious code in udin-sate8-apidev (npm) (malicious package)
- [MAL-2025-91406](https://insights.sbomify.com/MAL-2025-91406/): Malicious code in udin-sate47-miaww (npm) (malicious package)
- [MAL-2025-91405](https://insights.sbomify.com/MAL-2025-91405/): Malicious code in udin-sate35-kyuki (npm) (malicious package)
- [MAL-2025-91404](https://insights.sbomify.com/MAL-2025-91404/): Malicious code in udin-rujak67-riris (npm) (malicious package)
- [MAL-2025-91403](https://insights.sbomify.com/MAL-2025-91403/): Malicious code in udin-rujak46-miaww (npm) (malicious package)
- [MAL-2025-91402](https://insights.sbomify.com/MAL-2025-91402/): Malicious code in udin-rojak25-miaww (npm) (malicious package)
- [MAL-2025-91401](https://insights.sbomify.com/MAL-2025-91401/): Malicious code in udin-rangi90-apidev (npm) (malicious package)
- [MAL-2025-91400](https://insights.sbomify.com/MAL-2025-91400/): Malicious code in udin-rangi54-kyuki (npm) (malicious package)
- [MAL-2025-9140](https://insights.sbomify.com/MAL-2025-9140/): Malicious code in @nstark/angular.js (npm) (malicious package)
- [MAL-2025-91399](https://insights.sbomify.com/MAL-2025-91399/): Malicious code in udin-rangi50-riris (npm) (malicious package)
- [MAL-2025-91398](https://insights.sbomify.com/MAL-2025-91398/): Malicious code in udin-pisang51-miaww (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/99/