# Vulnerabilities published in 2025


- [MAL-2025-99478](https://insights.sbomify.com/MAL-2025-99478/): Malicious code in annual_jay_yellow-85 (npm) (malicious package)
- [MAL-2025-99477](https://insights.sbomify.com/MAL-2025-99477/): Malicious code in annual_goose_z3n (npm) (malicious package)
- [MAL-2025-99476](https://insights.sbomify.com/MAL-2025-99476/): Malicious code in annual_chipmunk_0xrequest (npm) (malicious package)
- [MAL-2025-99475](https://insights.sbomify.com/MAL-2025-99475/): Malicious code in annoyed_sparrow_0xrequest (npm) (malicious package)
- [MAL-2025-99474](https://insights.sbomify.com/MAL-2025-99474/): Malicious code in annoyed_porpoise_z3n (npm) (malicious package)
- [MAL-2025-99473](https://insights.sbomify.com/MAL-2025-99473/): Malicious code in annoyed_pelican-appteadev (npm) (malicious package)
- [MAL-2025-99472](https://insights.sbomify.com/MAL-2025-99472/): Malicious code in annoyed_monkey_0xrequest (npm) (malicious package)
- [MAL-2025-99471](https://insights.sbomify.com/MAL-2025-99471/): Malicious code in annoyed_bug_z3n (npm) (malicious package)
- [MAL-2025-99470](https://insights.sbomify.com/MAL-2025-99470/): Malicious code in angry_seahorse-appteadev (npm) (malicious package)
- [MAL-2025-9947](https://insights.sbomify.com/MAL-2025-9947/): Malicious code in @zalastax/nolb-_dsr-rollback-org-o (npm) (malicious package)
- [MAL-2025-99469](https://insights.sbomify.com/MAL-2025-99469/): Malicious code in angry_grouse-strongdev (npm) (malicious package)
- [MAL-2025-99468](https://insights.sbomify.com/MAL-2025-99468/): Malicious code in angry_aardvark_z3n (npm) (malicious package)
- [MAL-2025-99467](https://insights.sbomify.com/MAL-2025-99467/): Malicious code in andi-wajit95-ruro (npm) (malicious package)
- [MAL-2025-99466](https://insights.sbomify.com/MAL-2025-99466/): Malicious code in andi-wajit56-ruro (npm) (malicious package)
- [MAL-2025-99465](https://insights.sbomify.com/MAL-2025-99465/): Malicious code in andi-ubi11-ruro (npm) (malicious package)
- [MAL-2025-99464](https://insights.sbomify.com/MAL-2025-99464/): Malicious code in andi-tomat70-ruro (npm) (malicious package)
- [MAL-2025-99463](https://insights.sbomify.com/MAL-2025-99463/): Malicious code in andi-tek58-ruro (npm) (malicious package)
- [MAL-2025-99462](https://insights.sbomify.com/MAL-2025-99462/): Malicious code in andi-takokak11-ruro (npm) (malicious package)
- [MAL-2025-99461](https://insights.sbomify.com/MAL-2025-99461/): Malicious code in andi-tahu92-ruro (npm) (malicious package)
- [MAL-2025-99460](https://insights.sbomify.com/MAL-2025-99460/): Malicious code in andi-semur44-ruro (npm) (malicious package)
- [MAL-2025-9946](https://insights.sbomify.com/MAL-2025-9946/): Malicious code in @zalastax/nolb-_dsr-rollback-org-n (npm) (malicious package)
- [MAL-2025-99459](https://insights.sbomify.com/MAL-2025-99459/): Malicious code in andi-sego83-ruro (npm) (malicious package)
- [MAL-2025-99458](https://insights.sbomify.com/MAL-2025-99458/): Malicious code in andi-sambel9-ruro (npm) (malicious package)
- [MAL-2025-99457](https://insights.sbomify.com/MAL-2025-99457/): Malicious code in andi-sambalado29-ruro (npm) (malicious package)
- [MAL-2025-99456](https://insights.sbomify.com/MAL-2025-99456/): Malicious code in andi-sambalado27-ruro (npm) (malicious package)
- [MAL-2025-99455](https://insights.sbomify.com/MAL-2025-99455/): Malicious code in andi-rangginang36-ruro (npm) (malicious package)
- [MAL-2025-99454](https://insights.sbomify.com/MAL-2025-99454/): Malicious code in andi-pisang6-ruro (npm) (malicious package)
- [MAL-2025-99453](https://insights.sbomify.com/MAL-2025-99453/): Malicious code in andi-nasiuduk41-ruro (npm) (malicious package)
- [MAL-2025-99452](https://insights.sbomify.com/MAL-2025-99452/): Malicious code in andi-nasipecel88-ruro (npm) (malicious package)
- [MAL-2025-99451](https://insights.sbomify.com/MAL-2025-99451/): Malicious code in andi-nasicampur65-ruro (npm) (malicious package)
- [MAL-2025-99450](https://insights.sbomify.com/MAL-2025-99450/): Malicious code in andi-naget29-ruro (npm) (malicious package)
- [MAL-2025-9945](https://insights.sbomify.com/MAL-2025-9945/): Malicious code in @zalastax/nolb-_dov (npm) (malicious package)
- [MAL-2025-99449](https://insights.sbomify.com/MAL-2025-99449/): Malicious code in andi-miebogor44-ruro (npm) (malicious package)
- [MAL-2025-99448](https://insights.sbomify.com/MAL-2025-99448/): Malicious code in andi-menjes37-ruro (npm) (malicious package)
- [MAL-2025-99447](https://insights.sbomify.com/MAL-2025-99447/): Malicious code in andi-mendut99-ruro (npm) (malicious package)
- [MAL-2025-99446](https://insights.sbomify.com/MAL-2025-99446/): Malicious code in andi-mendoan35-ruro (npm) (malicious package)
- [MAL-2025-99445](https://insights.sbomify.com/MAL-2025-99445/): Malicious code in andi-martabak75-ruro (npm) (malicious package)
- [MAL-2025-99444](https://insights.sbomify.com/MAL-2025-99444/): Malicious code in andi-martabak50-ruro (npm) (malicious package)
- [MAL-2025-99443](https://insights.sbomify.com/MAL-2025-99443/): Malicious code in andi-mangut20-ruro (npm) (malicious package)
- [MAL-2025-99442](https://insights.sbomify.com/MAL-2025-99442/): Malicious code in andi-lutis8-ruro (npm) (malicious package)
- [MAL-2025-99441](https://insights.sbomify.com/MAL-2025-99441/): Malicious code in andi-lengko43-ruro (npm) (malicious package)
- [MAL-2025-99440](https://insights.sbomify.com/MAL-2025-99440/): Malicious code in andi-lapis53-ruro (npm) (malicious package)
- [MAL-2025-9944](https://insights.sbomify.com/MAL-2025-9944/): Malicious code in @zalastax/nolb-_dou (npm) (malicious package)
- [MAL-2025-99439](https://insights.sbomify.com/MAL-2025-99439/): Malicious code in andi-kue98-ruro (npm) (malicious package)
- [MAL-2025-99438](https://insights.sbomify.com/MAL-2025-99438/): Malicious code in andi-kue87-ruro (npm) (malicious package)
- [MAL-2025-99437](https://insights.sbomify.com/MAL-2025-99437/): Malicious code in andi-kripik43-ruro (npm) (malicious package)
- [MAL-2025-99436](https://insights.sbomify.com/MAL-2025-99436/): Malicious code in andi-kolak62-remi (npm) (malicious package)
- [MAL-2025-99435](https://insights.sbomify.com/MAL-2025-99435/): Malicious code in andi-klipo84-ruro (npm) (malicious package)
- [MAL-2025-99434](https://insights.sbomify.com/MAL-2025-99434/): Malicious code in andi-ketan68-ruro (npm) (malicious package)
- [MAL-2025-99433](https://insights.sbomify.com/MAL-2025-99433/): Malicious code in andi-ketan32-remi (npm) (malicious package)
- [MAL-2025-99432](https://insights.sbomify.com/MAL-2025-99432/): Malicious code in andi-keripik34-ruro (npm) (malicious package)
- [MAL-2025-99431](https://insights.sbomify.com/MAL-2025-99431/): Malicious code in andi-keraktelor5-ruro (npm) (malicious package)
- [MAL-2025-99430](https://insights.sbomify.com/MAL-2025-99430/): Malicious code in andi-kembang99-ruro (npm) (malicious package)
- [MAL-2025-9943](https://insights.sbomify.com/MAL-2025-9943/): Malicious code in @zalastax/nolb-_dot (npm) (malicious package)
- [MAL-2025-99429](https://insights.sbomify.com/MAL-2025-99429/): Malicious code in andi-kacang82-remi (npm) (malicious package)
- [MAL-2025-99428](https://insights.sbomify.com/MAL-2025-99428/): Malicious code in andi-jengkol38-ruro (npm) (malicious package)
- [MAL-2025-99427](https://insights.sbomify.com/MAL-2025-99427/): Malicious code in andi-ikan43-ruro (npm) (malicious package)
- [MAL-2025-99426](https://insights.sbomify.com/MAL-2025-99426/): Malicious code in andi-getuk82-ruro (npm) (malicious package)
- [MAL-2025-99425](https://insights.sbomify.com/MAL-2025-99425/): Malicious code in andi-gembus17-remi (npm) (malicious package)
- [MAL-2025-99424](https://insights.sbomify.com/MAL-2025-99424/): Malicious code in andi-gaplek41-ruro (npm) (malicious package)
- [MAL-2025-99423](https://insights.sbomify.com/MAL-2025-99423/): Malicious code in andi-enting6-ruro (npm) (malicious package)
- [MAL-2025-99422](https://insights.sbomify.com/MAL-2025-99422/): Malicious code in andi-enting27-ruro (npm) (malicious package)
- [MAL-2025-99421](https://insights.sbomify.com/MAL-2025-99421/): Malicious code in andi-empal38-ruro (npm) (malicious package)
- [MAL-2025-99420](https://insights.sbomify.com/MAL-2025-99420/): Malicious code in andi-dradag26-ruro (npm) (malicious package)
- [MAL-2025-9942](https://insights.sbomify.com/MAL-2025-9942/): Malicious code in @zalastax/nolb-_dos (npm) (malicious package)
- [MAL-2025-99419](https://insights.sbomify.com/MAL-2025-99419/): Malicious code in andi-donat64-ruro (npm) (malicious package)
- [MAL-2025-99418](https://insights.sbomify.com/MAL-2025-99418/): Malicious code in andi-brengkes28-ruro (npm) (malicious package)
- [MAL-2025-99417](https://insights.sbomify.com/MAL-2025-99417/): Malicious code in andi-bakwan76-ruro (npm) (malicious package)
- [MAL-2025-99416](https://insights.sbomify.com/MAL-2025-99416/): Malicious code in ancient_wren_0xrequest (npm) (malicious package)
- [MAL-2025-99415](https://insights.sbomify.com/MAL-2025-99415/): Malicious code in ancient_porcupine_z3n (npm) (malicious package)
- [MAL-2025-99414](https://insights.sbomify.com/MAL-2025-99414/): Malicious code in ancient_panther_0xrequest (npm) (malicious package)
- [MAL-2025-99413](https://insights.sbomify.com/MAL-2025-99413/): Malicious code in ancient_flamingo_z3n (npm) (malicious package)
- [MAL-2025-99412](https://insights.sbomify.com/MAL-2025-99412/): Malicious code in ancient_aardwolf_z3n (npm) (malicious package)
- [MAL-2025-99411](https://insights.sbomify.com/MAL-2025-99411/): Malicious code in anastasia-wallet-store (npm) (malicious package)
- [MAL-2025-99410](https://insights.sbomify.com/MAL-2025-99410/): Malicious code in anastasia-soluble-pot (npm) (malicious package)
- [MAL-2025-9941](https://insights.sbomify.com/MAL-2025-9941/): Malicious code in @zalastax/nolb-_dor (npm) (malicious package)
- [MAL-2025-99409](https://insights.sbomify.com/MAL-2025-99409/): Malicious code in anarzee-notthedevs (npm) (malicious package)
- [MAL-2025-99408](https://insights.sbomify.com/MAL-2025-99408/): Malicious code in amused_wallaby_0xrequest (npm) (malicious package)
- [MAL-2025-99407](https://insights.sbomify.com/MAL-2025-99407/): Malicious code in amused_mule_z3n (npm) (malicious package)
- [MAL-2025-99406](https://insights.sbomify.com/MAL-2025-99406/): Malicious code in amused_marten_0xrequest (npm) (malicious package)
- [MAL-2025-99405](https://insights.sbomify.com/MAL-2025-99405/): Malicious code in amused_koi_dumbs (npm) (malicious package)
- [MAL-2025-99404](https://insights.sbomify.com/MAL-2025-99404/): Malicious code in amused_fox_z3n (npm) (malicious package)
- [MAL-2025-99403](https://insights.sbomify.com/MAL-2025-99403/): Malicious code in amused_fly-appteadev (npm) (malicious package)
- [MAL-2025-99402](https://insights.sbomify.com/MAL-2025-99402/): Malicious code in amused_armadillo_0xrequest (npm) (malicious package)
- [MAL-2025-99401](https://insights.sbomify.com/MAL-2025-99401/): Malicious code in amnestria-notthedevs (npm) (malicious package)
- [MAL-2025-99400](https://insights.sbomify.com/MAL-2025-99400/): Malicious code in amie-wallet-store (npm) (malicious package)
- [MAL-2025-9940](https://insights.sbomify.com/MAL-2025-9940/): Malicious code in @zalastax/nolb-_dop (npm) (malicious package)
- [MAL-2025-99399](https://insights.sbomify.com/MAL-2025-99399/): Malicious code in amie-validator-catalyst (npm) (malicious package)
- [MAL-2025-99398](https://insights.sbomify.com/MAL-2025-99398/): Malicious code in amie-soluble-pot (npm) (malicious package)
- [MAL-2025-99397](https://insights.sbomify.com/MAL-2025-99397/): Malicious code in ambitious_vulture_0xrequest (npm) (malicious package)
- [MAL-2025-99396](https://insights.sbomify.com/MAL-2025-99396/): Malicious code in ambitious_buzzard_0xrequest (npm) (malicious package)
- [MAL-2025-99395](https://insights.sbomify.com/MAL-2025-99395/): Malicious code in amazing_viper_0xrequest (npm) (malicious package)
- [MAL-2025-99394](https://insights.sbomify.com/MAL-2025-99394/): Malicious code in amazing_rodent-appteadev (npm) (malicious package)
- [MAL-2025-99393](https://insights.sbomify.com/MAL-2025-99393/): Malicious code in amazing_roadrunner_z3n (npm) (malicious package)
- [MAL-2025-99392](https://insights.sbomify.com/MAL-2025-99392/): Malicious code in amazing_kangaroo_z3n (npm) (malicious package)
- [MAL-2025-99391](https://insights.sbomify.com/MAL-2025-99391/): Malicious code in amazing_crab_z3n (npm) (malicious package)
- [MAL-2025-99390](https://insights.sbomify.com/MAL-2025-99390/): Malicious code in amazing_bison_z3n (npm) (malicious package)
- [MAL-2025-9939](https://insights.sbomify.com/MAL-2025-9939/): Malicious code in @zalastax/nolb-_doh (npm) (malicious package)
- [MAL-2025-99389](https://insights.sbomify.com/MAL-2025-99389/): Malicious code in amazing_albatross-appteadev (npm) (malicious package)
- [MAL-2025-99388](https://insights.sbomify.com/MAL-2025-99388/): Malicious code in amateur_silverfish_replicate_automation (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/11/