# Vulnerabilities published in 2025


- [MAL-2025-89946](https://insights.sbomify.com/MAL-2025-89946/): Malicious code in respectable_cat_z3n (npm) (malicious package)
- [MAL-2025-89945](https://insights.sbomify.com/MAL-2025-89945/): Malicious code in respectable_cardinal_z3n (npm) (malicious package)
- [MAL-2025-89944](https://insights.sbomify.com/MAL-2025-89944/): Malicious code in resonant_tuna_z3n (npm) (malicious package)
- [MAL-2025-89943](https://insights.sbomify.com/MAL-2025-89943/): Malicious code in resonant_magpie_z3n (npm) (malicious package)
- [MAL-2025-89942](https://insights.sbomify.com/MAL-2025-89942/): Malicious code in resonant_crayfish_z3n (npm) (malicious package)
- [MAL-2025-89941](https://insights.sbomify.com/MAL-2025-89941/): Malicious code in residential_pheasant_z3n (npm) (malicious package)
- [MAL-2025-89940](https://insights.sbomify.com/MAL-2025-89940/): Malicious code in residential_lizard_z3n (npm) (malicious package)
- [MAL-2025-8994](https://insights.sbomify.com/MAL-2025-8994/): Malicious code in @malware-test-taras-saist-fleam-money/test-mlw3-taras-saist-fleam-money (npm) (malicious package)
- [MAL-2025-89939](https://insights.sbomify.com/MAL-2025-89939/): Malicious code in resident_zebra_z3n (npm) (malicious package)
- [MAL-2025-89938](https://insights.sbomify.com/MAL-2025-89938/): Malicious code in resident_mosquito_z3n (npm) (malicious package)
- [MAL-2025-89937](https://insights.sbomify.com/MAL-2025-89937/): Malicious code in resident_landfowl_z3n (npm) (malicious package)
- [MAL-2025-89936](https://insights.sbomify.com/MAL-2025-89936/): Malicious code in required_lungfish_z3n (npm) (malicious package)
- [MAL-2025-89935](https://insights.sbomify.com/MAL-2025-89935/): Malicious code in required_falcon_z3n (npm) (malicious package)
- [MAL-2025-89934](https://insights.sbomify.com/MAL-2025-89934/): Malicious code in required_bovid_z3n (npm) (malicious package)
- [MAL-2025-89933](https://insights.sbomify.com/MAL-2025-89933/): Malicious code in repulsive_tick_z3n (npm) (malicious package)
- [MAL-2025-89932](https://insights.sbomify.com/MAL-2025-89932/): Malicious code in repulsive_clownfish_z3n (npm) (malicious package)
- [MAL-2025-89931](https://insights.sbomify.com/MAL-2025-89931/): Malicious code in renewed_hawk_z3n (npm) (malicious package)
- [MAL-2025-89930](https://insights.sbomify.com/MAL-2025-89930/): Malicious code in remote_hare_z3n (npm) (malicious package)
- [MAL-2025-8993](https://insights.sbomify.com/MAL-2025-8993/): Malicious code in @malware-test-taras-hewer-grief-preys/test-mlw3-taras-hewer-grief-preys (npm) (malicious package)
- [MAL-2025-89929](https://insights.sbomify.com/MAL-2025-89929/): Malicious code in remote_dragon_z3n (npm) (malicious package)
- [MAL-2025-89928](https://insights.sbomify.com/MAL-2025-89928/): Malicious code in remaining_coyote_z3n (npm) (malicious package)
- [MAL-2025-89927](https://insights.sbomify.com/MAL-2025-89927/): Malicious code in reluctant_aardwolf_z3n (npm) (malicious package)
- [MAL-2025-89926](https://insights.sbomify.com/MAL-2025-89926/): Malicious code in relieved_wombat_z3n (npm) (malicious package)
- [MAL-2025-89925](https://insights.sbomify.com/MAL-2025-89925/): Malicious code in relieved_mouse_z3n (npm) (malicious package)
- [MAL-2025-89924](https://insights.sbomify.com/MAL-2025-89924/): Malicious code in relieved_clam_z3n (npm) (malicious package)
- [MAL-2025-89923](https://insights.sbomify.com/MAL-2025-89923/): Malicious code in reliable_sturgeon_z3n (npm) (malicious package)
- [MAL-2025-89922](https://insights.sbomify.com/MAL-2025-89922/): Malicious code in reliable_baboon_z3n (npm) (malicious package)
- [MAL-2025-89921](https://insights.sbomify.com/MAL-2025-89921/): Malicious code in relaxed_tiglon_z3n (npm) (malicious package)
- [MAL-2025-89920](https://insights.sbomify.com/MAL-2025-89920/): Malicious code in relaxed_minnow_z3n (npm) (malicious package)
- [MAL-2025-8992](https://insights.sbomify.com/MAL-2025-8992/): Malicious code in @malware-test-tapus-soggy-roust-naiks/test-mlw3-tapus-soggy-roust-naiks (npm) (malicious package)
- [MAL-2025-89919](https://insights.sbomify.com/MAL-2025-89919/): Malicious code in relaxed_limpet_z3n (npm) (malicious package)
- [MAL-2025-89918](https://insights.sbomify.com/MAL-2025-89918/): Malicious code in relaxed_harrier_z3n (npm) (malicious package)
- [MAL-2025-89917](https://insights.sbomify.com/MAL-2025-89917/): Malicious code in relative_tortoise_z3n (npm) (malicious package)
- [MAL-2025-89916](https://insights.sbomify.com/MAL-2025-89916/): Malicious code in related_slug_z3n (npm) (malicious package)
- [MAL-2025-89915](https://insights.sbomify.com/MAL-2025-89915/): Malicious code in related_lobster_z3n (npm) (malicious package)
- [MAL-2025-89914](https://insights.sbomify.com/MAL-2025-89914/): Malicious code in regulatory_jaguar_z3n (npm) (malicious package)
- [MAL-2025-89913](https://insights.sbomify.com/MAL-2025-89913/): Malicious code in regular_ptarmigan_z3n (npm) (malicious package)
- [MAL-2025-89912](https://insights.sbomify.com/MAL-2025-89912/): Malicious code in regular_goldfish_z3n (npm) (malicious package)
- [MAL-2025-89911](https://insights.sbomify.com/MAL-2025-89911/): Malicious code in regular_finch_z3n (npm) (malicious package)
- [MAL-2025-89910](https://insights.sbomify.com/MAL-2025-89910/): Malicious code in regular_crab_z3n (npm) (malicious package)
- [MAL-2025-8991](https://insights.sbomify.com/MAL-2025-8991/): Malicious code in @malware-test-tapet-genus-demob-clash/test-mlw3-tapet-genus-demob-clash (npm) (malicious package)
- [MAL-2025-89909](https://insights.sbomify.com/MAL-2025-89909/): Malicious code in registered_mollusk_z3n (npm) (malicious package)
- [MAL-2025-89908](https://insights.sbomify.com/MAL-2025-89908/): Malicious code in registered_guppy_z3n (npm) (malicious package)
- [MAL-2025-89907](https://insights.sbomify.com/MAL-2025-89907/): Malicious code in redundant_tahr_z3n (npm) (malicious package)
- [MAL-2025-89906](https://insights.sbomify.com/MAL-2025-89906/): Malicious code in redundant_ptarmigan_z3n (npm) (malicious package)
- [MAL-2025-89905](https://insights.sbomify.com/MAL-2025-89905/): Malicious code in reduced_sturgeon_z3n (npm) (malicious package)
- [MAL-2025-89904](https://insights.sbomify.com/MAL-2025-89904/): Malicious code in recent_starfish_z3n (npm) (malicious package)
- [MAL-2025-89903](https://insights.sbomify.com/MAL-2025-89903/): Malicious code in reasonable_puma_z3n (npm) (malicious package)
- [MAL-2025-89902](https://insights.sbomify.com/MAL-2025-89902/): Malicious code in reasonable_leopon_z3n (npm) (malicious package)
- [MAL-2025-89901](https://insights.sbomify.com/MAL-2025-89901/): Malicious code in reasonable_barnacle_z3n (npm) (malicious package)
- [MAL-2025-89900](https://insights.sbomify.com/MAL-2025-89900/): Malicious code in rear_flyingfish_z3n (npm) (malicious package)
- [MAL-2025-8990](https://insights.sbomify.com/MAL-2025-8990/): Malicious code in @malware-test-tangs-sprit-ricks-virge/test-mlw3-tangs-sprit-ricks-virge (npm) (malicious package)
- [MAL-2025-899](https://insights.sbomify.com/MAL-2025-899/): Malicious code in alrsnlaseast (PyPI) (malicious package)
- [MAL-2025-89899](https://insights.sbomify.com/MAL-2025-89899/): Malicious code in real_starfish_z3n (npm) (malicious package)
- [MAL-2025-89898](https://insights.sbomify.com/MAL-2025-89898/): Malicious code in ready_silverfish_z3n (npm) (malicious package)
- [MAL-2025-89897](https://insights.sbomify.com/MAL-2025-89897/): Malicious code in raw_skink_z3n (npm) (malicious package)
- [MAL-2025-89896](https://insights.sbomify.com/MAL-2025-89896/): Malicious code in ratty_snake_z3n (npm) (malicious package)
- [MAL-2025-89895](https://insights.sbomify.com/MAL-2025-89895/): Malicious code in ratty_guppy_z3n (npm) (malicious package)
- [MAL-2025-89894](https://insights.sbomify.com/MAL-2025-89894/): Malicious code in rare_platypus_z3n (npm) (malicious package)
- [MAL-2025-89893](https://insights.sbomify.com/MAL-2025-89893/): Malicious code in rainy_gibbon_z3n (npm) (malicious package)
- [MAL-2025-89892](https://insights.sbomify.com/MAL-2025-89892/): Malicious code in radical_aardwolf_z3n (npm) (malicious package)
- [MAL-2025-89891](https://insights.sbomify.com/MAL-2025-89891/): Malicious code in racial_opossum_z3n (npm) (malicious package)
- [MAL-2025-89890](https://insights.sbomify.com/MAL-2025-89890/): Malicious code in quixotic_panther_z3n (npm) (malicious package)
- [MAL-2025-8989](https://insights.sbomify.com/MAL-2025-8989/): Malicious code in @malware-test-tangs-cissy-tripy-modus/test-mlw3-tangs-cissy-tripy-modus (npm) (malicious package)
- [MAL-2025-89889](https://insights.sbomify.com/MAL-2025-89889/): Malicious code in quintessential_grasshopper_z3n (npm) (malicious package)
- [MAL-2025-89888](https://insights.sbomify.com/MAL-2025-89888/): Malicious code in quiet_coral_z3n (npm) (malicious package)
- [MAL-2025-89887](https://insights.sbomify.com/MAL-2025-89887/): Malicious code in quiet_basilisk_z3n (npm) (malicious package)
- [MAL-2025-89886](https://insights.sbomify.com/MAL-2025-89886/): Malicious code in quickest_mosquito_z3n (npm) (malicious package)
- [MAL-2025-89885](https://insights.sbomify.com/MAL-2025-89885/): Malicious code in quickest_lemming_z3n (npm) (malicious package)
- [MAL-2025-89884](https://insights.sbomify.com/MAL-2025-89884/): Malicious code in querulous_wolf_z3n (npm) (malicious package)
- [MAL-2025-89883](https://insights.sbomify.com/MAL-2025-89883/): Malicious code in querulous_squirrel_z3n (npm) (malicious package)
- [MAL-2025-89882](https://insights.sbomify.com/MAL-2025-89882/): Malicious code in querulous_planarian_z3n (npm) (malicious package)
- [MAL-2025-89881](https://insights.sbomify.com/MAL-2025-89881/): Malicious code in quarrelsome_newt_z3n (npm) (malicious package)
- [MAL-2025-89880](https://insights.sbomify.com/MAL-2025-89880/): Malicious code in quarrelsome_mammal_z3n (npm) (malicious package)
- [MAL-2025-8988](https://insights.sbomify.com/MAL-2025-8988/): Malicious code in @malware-test-tajes-hafts-stray-wefts/test-mlw3-tajes-hafts-stray-wefts (npm) (malicious package)
- [MAL-2025-89879](https://insights.sbomify.com/MAL-2025-89879/): Malicious code in quarrelsome_chimpanzee_z3n (npm) (malicious package)
- [MAL-2025-89878](https://insights.sbomify.com/MAL-2025-89878/): Malicious code in qualified_clam_z3n (npm) (malicious package)
- [MAL-2025-89877](https://insights.sbomify.com/MAL-2025-89877/): Malicious code in qori-wajit26-riris (npm) (malicious package)
- [MAL-2025-89876](https://insights.sbomify.com/MAL-2025-89876/): Malicious code in qori-toge94-miaww (npm) (malicious package)
- [MAL-2025-89875](https://insights.sbomify.com/MAL-2025-89875/): Malicious code in qori-toge93-miaww (npm) (malicious package)
- [MAL-2025-89874](https://insights.sbomify.com/MAL-2025-89874/): Malicious code in qori-teh41-sluey (npm) (malicious package)
- [MAL-2025-89873](https://insights.sbomify.com/MAL-2025-89873/): Malicious code in qori-teh1-miaww (npm) (malicious package)
- [MAL-2025-89872](https://insights.sbomify.com/MAL-2025-89872/): Malicious code in qori-taiwan23-riris (npm) (malicious package)
- [MAL-2025-89871](https://insights.sbomify.com/MAL-2025-89871/): Malicious code in qori-soto69-miaww (npm) (malicious package)
- [MAL-2025-89870](https://insights.sbomify.com/MAL-2025-89870/): Malicious code in qori-soto60-miaww (npm) (malicious package)
- [MAL-2025-8987](https://insights.sbomify.com/MAL-2025-8987/): Malicious code in @malware-test-tacet-loony-spill-ulcer/test-mlw3-tacet-loony-spill-ulcer (npm) (malicious package)
- [MAL-2025-89869](https://insights.sbomify.com/MAL-2025-89869/): Malicious code in qori-serimuka3-riris (npm) (malicious package)
- [MAL-2025-89868](https://insights.sbomify.com/MAL-2025-89868/): Malicious code in qori-semur1-miaww (npm) (malicious package)
- [MAL-2025-89867](https://insights.sbomify.com/MAL-2025-89867/): Malicious code in qori-sego83-riris (npm) (malicious package)
- [MAL-2025-89866](https://insights.sbomify.com/MAL-2025-89866/): Malicious code in qori-sasag99-miaww (npm) (malicious package)
- [MAL-2025-89865](https://insights.sbomify.com/MAL-2025-89865/): Malicious code in qori-sasag92-apidev (npm) (malicious package)
- [MAL-2025-89864](https://insights.sbomify.com/MAL-2025-89864/): Malicious code in qori-sambel18-miaww (npm) (malicious package)
- [MAL-2025-89863](https://insights.sbomify.com/MAL-2025-89863/): Malicious code in qori-ragi65-miaww (npm) (malicious package)
- [MAL-2025-89862](https://insights.sbomify.com/MAL-2025-89862/): Malicious code in qori-pisang69-crottsekebon (npm) (malicious package)
- [MAL-2025-89861](https://insights.sbomify.com/MAL-2025-89861/): Malicious code in qori-pecel94-riris (npm) (malicious package)
- [MAL-2025-89860](https://insights.sbomify.com/MAL-2025-89860/): Malicious code in qori-pecel82-riris (npm) (malicious package)
- [MAL-2025-8986](https://insights.sbomify.com/MAL-2025-8986/): Malicious code in @malware-test-tabby-umiak-repos-aurum/test-mlw3-tabby-umiak-repos-aurum (npm) (malicious package)
- [MAL-2025-89859](https://insights.sbomify.com/MAL-2025-89859/): Malicious code in qori-pecel49-riris (npm) (malicious package)
- [MAL-2025-89858](https://insights.sbomify.com/MAL-2025-89858/): Malicious code in qori-nasiuduk46-miaww (npm) (malicious package)
- [MAL-2025-89857](https://insights.sbomify.com/MAL-2025-89857/): Malicious code in qori-nasisayur98-miaww (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/116/