# Vulnerabilities published in 2025


- [MAL-2025-9076](https://insights.sbomify.com/MAL-2025-9076/): Malicious code in @malware-test-woody-waxen-panax-toffy/test-mlw3-woody-waxen-panax-toffy (npm) (malicious package)
- [MAL-2025-90759](https://insights.sbomify.com/MAL-2025-90759/): Malicious code in stiff_ocelot_z3n (npm) (malicious package)
- [MAL-2025-90758](https://insights.sbomify.com/MAL-2025-90758/): Malicious code in stiff_mite_z3n (npm) (malicious package)
- [MAL-2025-90757](https://insights.sbomify.com/MAL-2025-90757/): Malicious code in sticky_kiwi_z3n (npm) (malicious package)
- [MAL-2025-90756](https://insights.sbomify.com/MAL-2025-90756/): Malicious code in sticky_herring_z3n (npm) (malicious package)
- [MAL-2025-90755](https://insights.sbomify.com/MAL-2025-90755/): Malicious code in sticky_eagle_z3n (npm) (malicious package)
- [MAL-2025-90754](https://insights.sbomify.com/MAL-2025-90754/): Malicious code in sticky_bat_z3n (npm) (malicious package)
- [MAL-2025-90753](https://insights.sbomify.com/MAL-2025-90753/): Malicious code in steep_whitefish_z3n (npm) (malicious package)
- [MAL-2025-90752](https://insights.sbomify.com/MAL-2025-90752/): Malicious code in steep_tahr_z3n (npm) (malicious package)
- [MAL-2025-90751](https://insights.sbomify.com/MAL-2025-90751/): Malicious code in steep_hoverfly_z3n (npm) (malicious package)
- [MAL-2025-90750](https://insights.sbomify.com/MAL-2025-90750/): Malicious code in steep_aardwolf_z3n (npm) (malicious package)
- [MAL-2025-9075](https://insights.sbomify.com/MAL-2025-9075/): Malicious code in @malware-test-wises-knock-ceric-zibet/test-mlw3-wises-knock-ceric-zibet (npm) (malicious package)
- [MAL-2025-90749](https://insights.sbomify.com/MAL-2025-90749/): Malicious code in steady_piranha_z3n (npm) (malicious package)
- [MAL-2025-90748](https://insights.sbomify.com/MAL-2025-90748/): Malicious code in steady_orangutan_z3n (npm) (malicious package)
- [MAL-2025-90747](https://insights.sbomify.com/MAL-2025-90747/): Malicious code in steady_frog_z3n (npm) (malicious package)
- [MAL-2025-90746](https://insights.sbomify.com/MAL-2025-90746/): Malicious code in statutory_hummingbird_z3n (npm) (malicious package)
- [MAL-2025-90745](https://insights.sbomify.com/MAL-2025-90745/): Malicious code in statistical_elk_z3n (npm) (malicious package)
- [MAL-2025-90744](https://insights.sbomify.com/MAL-2025-90744/): Malicious code in static_rabbit_z3n (npm) (malicious package)
- [MAL-2025-90743](https://insights.sbomify.com/MAL-2025-90743/): Malicious code in static_baboon_z3n (npm) (malicious package)
- [MAL-2025-90742](https://insights.sbomify.com/MAL-2025-90742/): Malicious code in static_anaconda_z3n (npm) (malicious package)
- [MAL-2025-90741](https://insights.sbomify.com/MAL-2025-90741/): Malicious code in standard_bobcat_z3n (npm) (malicious package)
- [MAL-2025-90740](https://insights.sbomify.com/MAL-2025-90740/): Malicious code in stable_roadrunner_z3n (npm) (malicious package)
- [MAL-2025-9074](https://insights.sbomify.com/MAL-2025-9074/): Malicious code in @malware-test-wings-avian-prism-puddy/test-mlw3-wings-avian-prism-puddy (npm) (malicious package)
- [MAL-2025-90739](https://insights.sbomify.com/MAL-2025-90739/): Malicious code in stable_mandrill_z3n (npm) (malicious package)
- [MAL-2025-90738](https://insights.sbomify.com/MAL-2025-90738/): Malicious code in squealing_orca_z3n (npm) (malicious package)
- [MAL-2025-90737](https://insights.sbomify.com/MAL-2025-90737/): Malicious code in squealing_ermine_z3n (npm) (malicious package)
- [MAL-2025-90736](https://insights.sbomify.com/MAL-2025-90736/): Malicious code in square_kingfisher_z3n (npm) (malicious package)
- [MAL-2025-90735](https://insights.sbomify.com/MAL-2025-90735/): Malicious code in spotty_angelfish_z3n (npm) (malicious package)
- [MAL-2025-90734](https://insights.sbomify.com/MAL-2025-90734/): Malicious code in sporting_spider_z3n (npm) (malicious package)
- [MAL-2025-90733](https://insights.sbomify.com/MAL-2025-90733/): Malicious code in sporting_caterpillar_z3n (npm) (malicious package)
- [MAL-2025-90732](https://insights.sbomify.com/MAL-2025-90732/): Malicious code in spontaneous_skink_z3n (npm) (malicious package)
- [MAL-2025-90731](https://insights.sbomify.com/MAL-2025-90731/): Malicious code in spontaneous_fox_z3n (npm) (malicious package)
- [MAL-2025-90730](https://insights.sbomify.com/MAL-2025-90730/): Malicious code in splendid_tern_z3n (npm) (malicious package)
- [MAL-2025-9073](https://insights.sbomify.com/MAL-2025-9073/): Malicious code in @malware-test-whose-prime-bines-bales/test-mlw3-whose-prime-bines-bales (npm) (malicious package)
- [MAL-2025-90729](https://insights.sbomify.com/MAL-2025-90729/): Malicious code in splendid_felidae_z3n (npm) (malicious package)
- [MAL-2025-90728](https://insights.sbomify.com/MAL-2025-90728/): Malicious code in spiritual_stork_z3n (npm) (malicious package)
- [MAL-2025-90727](https://insights.sbomify.com/MAL-2025-90727/): Malicious code in spicy_gecko_z3n (npm) (malicious package)
- [MAL-2025-90726](https://insights.sbomify.com/MAL-2025-90726/): Malicious code in spicy_ferret_z3n (npm) (malicious package)
- [MAL-2025-90725](https://insights.sbomify.com/MAL-2025-90725/): Malicious code in spectacular_goose_z3n (npm) (malicious package)
- [MAL-2025-90724](https://insights.sbomify.com/MAL-2025-90724/): Malicious code in specified_xerinae_z3n (npm) (malicious package)
- [MAL-2025-90723](https://insights.sbomify.com/MAL-2025-90723/): Malicious code in special_roadrunner_z3n (npm) (malicious package)
- [MAL-2025-90722](https://insights.sbomify.com/MAL-2025-90722/): Malicious code in special_gorilla_z3n (npm) (malicious package)
- [MAL-2025-90721](https://insights.sbomify.com/MAL-2025-90721/): Malicious code in spatial_weasel_z3n (npm) (malicious package)
- [MAL-2025-90720](https://insights.sbomify.com/MAL-2025-90720/): Malicious code in spare_tiglon_z3n (npm) (malicious package)
- [MAL-2025-9072](https://insights.sbomify.com/MAL-2025-9072/): Malicious code in @malware-test-whops-canto/test-mlw3-whops-canto (npm) (malicious package)
- [MAL-2025-90719](https://insights.sbomify.com/MAL-2025-90719/): Malicious code in spare_meerkat_z3n (npm) (malicious package)
- [MAL-2025-90718](https://insights.sbomify.com/MAL-2025-90718/): Malicious code in soviet_wallaby_z3n (npm) (malicious package)
- [MAL-2025-90717](https://insights.sbomify.com/MAL-2025-90717/): Malicious code in soviet_tiger_z3n (npm) (malicious package)
- [MAL-2025-90716](https://insights.sbomify.com/MAL-2025-90716/): Malicious code in southern_sailfish_z3n (npm) (malicious package)
- [MAL-2025-90715](https://insights.sbomify.com/MAL-2025-90715/): Malicious code in southern_raccoon_z3n (npm) (malicious package)
- [MAL-2025-90714](https://insights.sbomify.com/MAL-2025-90714/): Malicious code in sour_sheep_z3n (npm) (malicious package)
- [MAL-2025-90713](https://insights.sbomify.com/MAL-2025-90713/): Malicious code in sour_lemur_z3n (npm) (malicious package)
- [MAL-2025-90712](https://insights.sbomify.com/MAL-2025-90712/): Malicious code in sour_dinosaur_z3n (npm) (malicious package)
- [MAL-2025-90711](https://insights.sbomify.com/MAL-2025-90711/): Malicious code in sophisticated_bovid_z3n (npm) (malicious package)
- [MAL-2025-90710](https://insights.sbomify.com/MAL-2025-90710/): Malicious code in sophisticated_bison_z3n (npm) (malicious package)
- [MAL-2025-9071](https://insights.sbomify.com/MAL-2025-9071/): Malicious code in @malware-test-white-brake-daffy-sarge/test-mlw3-white-brake-daffy-sarge (npm) (malicious package)
- [MAL-2025-90709](https://insights.sbomify.com/MAL-2025-90709/): Malicious code in sole_constrictor_z3n (npm) (malicious package)
- [MAL-2025-90708](https://insights.sbomify.com/MAL-2025-90708/): Malicious code in solar_planarian_z3n (npm) (malicious package)
- [MAL-2025-90707](https://insights.sbomify.com/MAL-2025-90707/): Malicious code in solar_muskox_z3n (npm) (malicious package)
- [MAL-2025-90706](https://insights.sbomify.com/MAL-2025-90706/): Malicious code in solar_flea_z3n (npm) (malicious package)
- [MAL-2025-90705](https://insights.sbomify.com/MAL-2025-90705/): Malicious code in soft_warbler_z3n (npm) (malicious package)
- [MAL-2025-90704](https://insights.sbomify.com/MAL-2025-90704/): Malicious code in soft_bison_z3n (npm) (malicious package)
- [MAL-2025-90703](https://insights.sbomify.com/MAL-2025-90703/): Malicious code in social_armadillo_z3n (npm) (malicious package)
- [MAL-2025-90702](https://insights.sbomify.com/MAL-2025-90702/): Malicious code in smoggy_whitefish_z3n (npm) (malicious package)
- [MAL-2025-90701](https://insights.sbomify.com/MAL-2025-90701/): Malicious code in smoggy_fowl_z3n (npm) (malicious package)
- [MAL-2025-90700](https://insights.sbomify.com/MAL-2025-90700/): Malicious code in smiling_tern_z3n (npm) (malicious package)
- [MAL-2025-9070](https://insights.sbomify.com/MAL-2025-9070/): Malicious code in @malware-test-whift-truce-tikes-livid/test-mlw3-whift-truce-tikes-livid (npm) (malicious package)
- [MAL-2025-90699](https://insights.sbomify.com/MAL-2025-90699/): Malicious code in smiling_cicada_z3n (npm) (malicious package)
- [MAL-2025-90698](https://insights.sbomify.com/MAL-2025-90698/): Malicious code in smart_lemur_z3n (npm) (malicious package)
- [MAL-2025-90697](https://insights.sbomify.com/MAL-2025-90697/): Malicious code in smart_barnacle_z3n (npm) (malicious package)
- [MAL-2025-90696](https://insights.sbomify.com/MAL-2025-90696/): Malicious code in small_mastodon_z3n (npm) (malicious package)
- [MAL-2025-90695](https://insights.sbomify.com/MAL-2025-90695/): Malicious code in small_aphid_z3n (npm) (malicious package)
- [MAL-2025-90694](https://insights.sbomify.com/MAL-2025-90694/): Malicious code in slow_turtle_z3n (npm) (malicious package)
- [MAL-2025-90693](https://insights.sbomify.com/MAL-2025-90693/): Malicious code in slow_toad_z3n (npm) (malicious package)
- [MAL-2025-90692](https://insights.sbomify.com/MAL-2025-90692/): Malicious code in slippery_catfish_z3n (npm) (malicious package)
- [MAL-2025-90691](https://insights.sbomify.com/MAL-2025-90691/): Malicious code in slippery_basilisk_z3n (npm) (malicious package)
- [MAL-2025-90690](https://insights.sbomify.com/MAL-2025-90690/): Malicious code in slippery_anteater_z3n (npm) (malicious package)
- [MAL-2025-9069](https://insights.sbomify.com/MAL-2025-9069/): Malicious code in @malware-test-wheel-yokel-alley-altar/test-mlw3-wheel-yokel-alley-altar (npm) (malicious package)
- [MAL-2025-90689](https://insights.sbomify.com/MAL-2025-90689/): Malicious code in slimy_snake_z3n (npm) (malicious package)
- [MAL-2025-90688](https://insights.sbomify.com/MAL-2025-90688/): Malicious code in slimy_ostrich_z3n (npm) (malicious package)
- [MAL-2025-90687](https://insights.sbomify.com/MAL-2025-90687/): Malicious code in slimy_cat_z3n (npm) (malicious package)
- [MAL-2025-90686](https://insights.sbomify.com/MAL-2025-90686/): Malicious code in slim_mammal_z3n (npm) (malicious package)
- [MAL-2025-90685](https://insights.sbomify.com/MAL-2025-90685/): Malicious code in slim_chinchilla_z3n (npm) (malicious package)
- [MAL-2025-90684](https://insights.sbomify.com/MAL-2025-90684/): Malicious code in slim_angelfish_z3n (npm) (malicious package)
- [MAL-2025-90683](https://insights.sbomify.com/MAL-2025-90683/): Malicious code in sleepy_smelt_z3n (npm) (malicious package)
- [MAL-2025-90682](https://insights.sbomify.com/MAL-2025-90682/): Malicious code in skilled_swordtail_z3n (npm) (malicious package)
- [MAL-2025-90681](https://insights.sbomify.com/MAL-2025-90681/): Malicious code in skilled_marlin_z3n (npm) (malicious package)
- [MAL-2025-90680](https://insights.sbomify.com/MAL-2025-90680/): Malicious code in siska-tongseng48-kyuki (npm) (malicious package)
- [MAL-2025-9068](https://insights.sbomify.com/MAL-2025-9068/): Malicious code in @malware-test-whaur-munch-wines-rifer/test-mlw3-whaur-munch-wines-rifer (npm) (malicious package)
- [MAL-2025-90679](https://insights.sbomify.com/MAL-2025-90679/): Malicious code in siska-tongseng23-riris (npm) (malicious package)
- [MAL-2025-90678](https://insights.sbomify.com/MAL-2025-90678/): Malicious code in siska-tiwul89-apidev (npm) (malicious package)
- [MAL-2025-90677](https://insights.sbomify.com/MAL-2025-90677/): Malicious code in siska-tiwul3-crottsekebon (npm) (malicious package)
- [MAL-2025-90676](https://insights.sbomify.com/MAL-2025-90676/): Malicious code in siska-telurtahu83-miaww (npm) (malicious package)
- [MAL-2025-90675](https://insights.sbomify.com/MAL-2025-90675/): Malicious code in siska-telurtahu64-riris (npm) (malicious package)
- [MAL-2025-90674](https://insights.sbomify.com/MAL-2025-90674/): Malicious code in siska-telur6-apidev (npm) (malicious package)
- [MAL-2025-90673](https://insights.sbomify.com/MAL-2025-90673/): Malicious code in siska-teh62-riris (npm) (malicious package)
- [MAL-2025-90672](https://insights.sbomify.com/MAL-2025-90672/): Malicious code in siska-teh37-miaww (npm) (malicious package)
- [MAL-2025-90671](https://insights.sbomify.com/MAL-2025-90671/): Malicious code in siska-takokak38-miaww (npm) (malicious package)
- [MAL-2025-90670](https://insights.sbomify.com/MAL-2025-90670/): Malicious code in siska-tahu91-riris (npm) (malicious package)
- [MAL-2025-9067](https://insights.sbomify.com/MAL-2025-9067/): Malicious code in @malware-test-wests-nixie-metro-niffs/test-mlw3-wests-nixie-metro-niffs (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/107/