# Vulnerabilities published in 2025


- [MAL-2025-90488](https://insights.sbomify.com/MAL-2025-90488/): Malicious code in sick_platypus_z3n (npm) (malicious package)
- [MAL-2025-90487](https://insights.sbomify.com/MAL-2025-90487/): Malicious code in sick_earthworm_z3n (npm) (malicious package)
- [MAL-2025-90486](https://insights.sbomify.com/MAL-2025-90486/): Malicious code in sick_crow_z3n (npm) (malicious package)
- [MAL-2025-90485](https://insights.sbomify.com/MAL-2025-90485/): Malicious code in short_earthworm_z3n (npm) (malicious package)
- [MAL-2025-90484](https://insights.sbomify.com/MAL-2025-90484/): Malicious code in shocked_manatee_z3n (npm) (malicious package)
- [MAL-2025-90483](https://insights.sbomify.com/MAL-2025-90483/): Malicious code in shiny_kingfisher_z3n (npm) (malicious package)
- [MAL-2025-90482](https://insights.sbomify.com/MAL-2025-90482/): Malicious code in sheer_shark_z3n (npm) (malicious package)
- [MAL-2025-90481](https://insights.sbomify.com/MAL-2025-90481/): Malicious code in sheer_jellyfish_z3n (npm) (malicious package)
- [MAL-2025-90480](https://insights.sbomify.com/MAL-2025-90480/): Malicious code in sheer_beaver_z3n (npm) (malicious package)
- [MAL-2025-9048](https://insights.sbomify.com/MAL-2025-9048/): Malicious code in @malware-test-vespa-seepy-dsomo-bangs/test-mlw3-vespa-seepy-dsomo-bangs (npm) (malicious package)
- [MAL-2025-90479](https://insights.sbomify.com/MAL-2025-90479/): Malicious code in sharp_lynx_z3n (npm) (malicious package)
- [MAL-2025-90478](https://insights.sbomify.com/MAL-2025-90478/): Malicious code in sharp_heron_z3n (npm) (malicious package)
- [MAL-2025-90477](https://insights.sbomify.com/MAL-2025-90477/): Malicious code in sharp_chinchilla_z3n (npm) (malicious package)
- [MAL-2025-90476](https://insights.sbomify.com/MAL-2025-90476/): Malicious code in shared_puffin_z3n (npm) (malicious package)
- [MAL-2025-90475](https://insights.sbomify.com/MAL-2025-90475/): Malicious code in shallow_octopus_z3n (npm) (malicious package)
- [MAL-2025-90474](https://insights.sbomify.com/MAL-2025-90474/): Malicious code in shallow_gazelle_z3n (npm) (malicious package)
- [MAL-2025-90473](https://insights.sbomify.com/MAL-2025-90473/): Malicious code in shallow_earwig_z3n (npm) (malicious package)
- [MAL-2025-90472](https://insights.sbomify.com/MAL-2025-90472/): Malicious code in shaggy_marsupial_z3n (npm) (malicious package)
- [MAL-2025-90471](https://insights.sbomify.com/MAL-2025-90471/): Malicious code in shaggy_cat_z3n (npm) (malicious package)
- [MAL-2025-90470](https://insights.sbomify.com/MAL-2025-90470/): Malicious code in sexual_thrush_z3n (npm) (malicious package)
- [MAL-2025-9047](https://insights.sbomify.com/MAL-2025-9047/): Malicious code in @malware-test-vapor-masty-zeros-matte/test-mlw3-vapor-masty-zeros-matte (npm) (malicious package)
- [MAL-2025-90469](https://insights.sbomify.com/MAL-2025-90469/): Malicious code in sexual_narwhal_z3n (npm) (malicious package)
- [MAL-2025-90468](https://insights.sbomify.com/MAL-2025-90468/): Malicious code in sexual_mandrill_z3n (npm) (malicious package)
- [MAL-2025-90467](https://insights.sbomify.com/MAL-2025-90467/): Malicious code in sexual_hamster_z3n (npm) (malicious package)
- [MAL-2025-90466](https://insights.sbomify.com/MAL-2025-90466/): Malicious code in serious_tarsier_z3n (npm) (malicious package)
- [MAL-2025-90465](https://insights.sbomify.com/MAL-2025-90465/): Malicious code in serious_marmoset_z3n (npm) (malicious package)
- [MAL-2025-90464](https://insights.sbomify.com/MAL-2025-90464/): Malicious code in serious_cheetah_z3n (npm) (malicious package)
- [MAL-2025-90463](https://insights.sbomify.com/MAL-2025-90463/): Malicious code in separate_magpie_z3n (npm) (malicious package)
- [MAL-2025-90462](https://insights.sbomify.com/MAL-2025-90462/): Malicious code in sensitive_vulture_z3n (npm) (malicious package)
- [MAL-2025-90461](https://insights.sbomify.com/MAL-2025-90461/): Malicious code in sensitive_krill_z3n (npm) (malicious package)
- [MAL-2025-90460](https://insights.sbomify.com/MAL-2025-90460/): Malicious code in senior_ant_z3n (npm) (malicious package)
- [MAL-2025-9046](https://insights.sbomify.com/MAL-2025-9046/): Malicious code in @malware-test-valor-stent/test-mlw3-valor-stent (npm) (malicious package)
- [MAL-2025-90459](https://insights.sbomify.com/MAL-2025-90459/): Malicious code in semantic_warbler_z3n (npm) (malicious package)
- [MAL-2025-90458](https://insights.sbomify.com/MAL-2025-90458/): Malicious code in selfish_stork_z3n (npm) (malicious package)
- [MAL-2025-90457](https://insights.sbomify.com/MAL-2025-90457/): Malicious code in selected_flea_z3n (npm) (malicious package)
- [MAL-2025-90456](https://insights.sbomify.com/MAL-2025-90456/): Malicious code in selected_falcon_z3n (npm) (malicious package)
- [MAL-2025-90455](https://insights.sbomify.com/MAL-2025-90455/): Malicious code in select_wasp_z3n (npm) (malicious package)
- [MAL-2025-90454](https://insights.sbomify.com/MAL-2025-90454/): Malicious code in secure_ox_z3n (npm) (malicious package)
- [MAL-2025-90453](https://insights.sbomify.com/MAL-2025-90453/): Malicious code in secure_junglefowl_z3n (npm) (malicious package)
- [MAL-2025-90452](https://insights.sbomify.com/MAL-2025-90452/): Malicious code in secure_bovid_z3n (npm) (malicious package)
- [MAL-2025-90451](https://insights.sbomify.com/MAL-2025-90451/): Malicious code in secret_slug_z3n (npm) (malicious package)
- [MAL-2025-90450](https://insights.sbomify.com/MAL-2025-90450/): Malicious code in secondary_pig_z3n (npm) (malicious package)
- [MAL-2025-9045](https://insights.sbomify.com/MAL-2025-9045/): Malicious code in @malware-test-uteri-green-balms-inbye/test-mlw3-uteri-green-balms-inbye (npm) (malicious package)
- [MAL-2025-90449](https://insights.sbomify.com/MAL-2025-90449/): Malicious code in secondary_perch_z3n (npm) (malicious package)
- [MAL-2025-90448](https://insights.sbomify.com/MAL-2025-90448/): Malicious code in secondary_ox_z3n (npm) (malicious package)
- [MAL-2025-90447](https://insights.sbomify.com/MAL-2025-90447/): Malicious code in secondary_cougar_z3n (npm) (malicious package)
- [MAL-2025-90446](https://insights.sbomify.com/MAL-2025-90446/): Malicious code in screeching_tern_z3n (npm) (malicious package)
- [MAL-2025-90445](https://insights.sbomify.com/MAL-2025-90445/): Malicious code in screeching_lion_z3n (npm) (malicious package)
- [MAL-2025-90444](https://insights.sbomify.com/MAL-2025-90444/): Malicious code in scrawny_mandrill_z3n (npm) (malicious package)
- [MAL-2025-90443](https://insights.sbomify.com/MAL-2025-90443/): Malicious code in scornful_toad_z3n (npm) (malicious package)
- [MAL-2025-90442](https://insights.sbomify.com/MAL-2025-90442/): Malicious code in scornful_guanaco_z3n (npm) (malicious package)
- [MAL-2025-90441](https://insights.sbomify.com/MAL-2025-90441/): Malicious code in scornful_barracuda_z3n (npm) (malicious package)
- [MAL-2025-90440](https://insights.sbomify.com/MAL-2025-90440/): Malicious code in scientific_pinniped_z3n (npm) (malicious package)
- [MAL-2025-9044](https://insights.sbomify.com/MAL-2025-9044/): Malicious code in @malware-test-usual-keeks-sprue-bifid/test-mlw3-usual-keeks-sprue-bifid (npm) (malicious package)
- [MAL-2025-90439](https://insights.sbomify.com/MAL-2025-90439/): Malicious code in scientific_pelican_z3n (npm) (malicious package)
- [MAL-2025-90438](https://insights.sbomify.com/MAL-2025-90438/): Malicious code in scientific_anteater_z3n (npm) (malicious package)
- [MAL-2025-90437](https://insights.sbomify.com/MAL-2025-90437/): Malicious code in scattered_bird_z3n (npm) (malicious package)
- [MAL-2025-90436](https://insights.sbomify.com/MAL-2025-90436/): Malicious code in scary_nightingale_z3n (npm) (malicious package)
- [MAL-2025-90435](https://insights.sbomify.com/MAL-2025-90435/): Malicious code in scary_ladybug_z3n (npm) (malicious package)
- [MAL-2025-90434](https://insights.sbomify.com/MAL-2025-90434/): Malicious code in scared_raven_z3n (npm) (malicious package)
- [MAL-2025-90433](https://insights.sbomify.com/MAL-2025-90433/): Malicious code in scared_crayfish_z3n (npm) (malicious package)
- [MAL-2025-90432](https://insights.sbomify.com/MAL-2025-90432/): Malicious code in satisfied_sheep_z3n (npm) (malicious package)
- [MAL-2025-90431](https://insights.sbomify.com/MAL-2025-90431/): Malicious code in satisfied_orangutan_z3n (npm) (malicious package)
- [MAL-2025-90430](https://insights.sbomify.com/MAL-2025-90430/): Malicious code in satisfactory_hawk_z3n (npm) (malicious package)
- [MAL-2025-9043](https://insights.sbomify.com/MAL-2025-9043/): Malicious code in @malware-test-usage-civvy-aurum-narre/test-mlw3-usage-civvy-aurum-narre (npm) (malicious package)
- [MAL-2025-90429](https://insights.sbomify.com/MAL-2025-90429/): Malicious code in sari-ubi40-miaww (npm) (malicious package)
- [MAL-2025-90428](https://insights.sbomify.com/MAL-2025-90428/): Malicious code in sari-tongseng74-miaww (npm) (malicious package)
- [MAL-2025-90427](https://insights.sbomify.com/MAL-2025-90427/): Malicious code in sari-tomat91-riris (npm) (malicious package)
- [MAL-2025-90426](https://insights.sbomify.com/MAL-2025-90426/): Malicious code in sari-tempe58-miaww (npm) (malicious package)
- [MAL-2025-90425](https://insights.sbomify.com/MAL-2025-90425/): Malicious code in sari-tempe39-riris (npm) (malicious package)
- [MAL-2025-90424](https://insights.sbomify.com/MAL-2025-90424/): Malicious code in sari-tapai53-miaww (npm) (malicious package)
- [MAL-2025-90423](https://insights.sbomify.com/MAL-2025-90423/): Malicious code in sari-tapai100-riris (npm) (malicious package)
- [MAL-2025-90422](https://insights.sbomify.com/MAL-2025-90422/): Malicious code in sari-takokak76-miaww (npm) (malicious package)
- [MAL-2025-90421](https://insights.sbomify.com/MAL-2025-90421/): Malicious code in sari-takokak20-crottsekebon (npm) (malicious package)
- [MAL-2025-90420](https://insights.sbomify.com/MAL-2025-90420/): Malicious code in sari-takokak14-riris (npm) (malicious package)
- [MAL-2025-9042](https://insights.sbomify.com/MAL-2025-9042/): Malicious code in @malware-test-urari-saist-elegy-skids/test-mlw3-urari-saist-elegy-skids (npm) (malicious package)
- [MAL-2025-90419](https://insights.sbomify.com/MAL-2025-90419/): Malicious code in sari-tahutek19-miaww (npm) (malicious package)
- [MAL-2025-90418](https://insights.sbomify.com/MAL-2025-90418/): Malicious code in sari-tahu21-miaww (npm) (malicious package)
- [MAL-2025-90417](https://insights.sbomify.com/MAL-2025-90417/): Malicious code in sari-soto4-kyuki (npm) (malicious package)
- [MAL-2025-90416](https://insights.sbomify.com/MAL-2025-90416/): Malicious code in sari-soto23-riris (npm) (malicious package)
- [MAL-2025-90415](https://insights.sbomify.com/MAL-2025-90415/): Malicious code in sari-sego74-riris (npm) (malicious package)
- [MAL-2025-90414](https://insights.sbomify.com/MAL-2025-90414/): Malicious code in sari-sego50-wekto (npm) (malicious package)
- [MAL-2025-90413](https://insights.sbomify.com/MAL-2025-90413/): Malicious code in sari-sego3-miaww (npm) (malicious package)
- [MAL-2025-90412](https://insights.sbomify.com/MAL-2025-90412/): Malicious code in sari-sasag61-riris (npm) (malicious package)
- [MAL-2025-90411](https://insights.sbomify.com/MAL-2025-90411/): Malicious code in sari-rujaksoto41-miaww (npm) (malicious package)
- [MAL-2025-90410](https://insights.sbomify.com/MAL-2025-90410/): Malicious code in sari-ronde77-miaww (npm) (malicious package)
- [MAL-2025-9041](https://insights.sbomify.com/MAL-2025-9041/): Malicious code in @malware-test-urari-bedim-hylic-phage/test-mlw3-urari-bedim-hylic-phage (npm) (malicious package)
- [MAL-2025-90409](https://insights.sbomify.com/MAL-2025-90409/): Malicious code in sari-ronde63-miaww (npm) (malicious package)
- [MAL-2025-90408](https://insights.sbomify.com/MAL-2025-90408/): Malicious code in sari-rojak27-riris (npm) (malicious package)
- [MAL-2025-90407](https://insights.sbomify.com/MAL-2025-90407/): Malicious code in sari-rojak23-riris (npm) (malicious package)
- [MAL-2025-90406](https://insights.sbomify.com/MAL-2025-90406/): Malicious code in sari-rojak11-miaww (npm) (malicious package)
- [MAL-2025-90405](https://insights.sbomify.com/MAL-2025-90405/): Malicious code in sari-rendang97-crottsekebon (npm) (malicious package)
- [MAL-2025-90404](https://insights.sbomify.com/MAL-2025-90404/): Malicious code in sari-rawon9-riris (npm) (malicious package)
- [MAL-2025-90403](https://insights.sbomify.com/MAL-2025-90403/): Malicious code in sari-rawon40-riris (npm) (malicious package)
- [MAL-2025-90402](https://insights.sbomify.com/MAL-2025-90402/): Malicious code in sari-rawon2-riris (npm) (malicious package)
- [MAL-2025-90401](https://insights.sbomify.com/MAL-2025-90401/): Malicious code in sari-rangi66-miaww (npm) (malicious package)
- [MAL-2025-90400](https://insights.sbomify.com/MAL-2025-90400/): Malicious code in sari-ragi54-miaww (npm) (malicious package)
- [MAL-2025-9040](https://insights.sbomify.com/MAL-2025-9040/): Malicious code in @malware-test-unsew-duals-khaya-fates/test-mlw3-unsew-duals-khaya-fates (npm) (malicious package)
- [MAL-2025-904](https://insights.sbomify.com/MAL-2025-904/): Malicious code in bugscanx (PyPI) (malicious package)
- [MAL-2025-90399](https://insights.sbomify.com/MAL-2025-90399/): Malicious code in sari-ragi29-miaww (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/110/