# Vulnerabilities published in 2025


- [MAL-2025-99387](https://insights.sbomify.com/MAL-2025-99387/): Malicious code in amateur_mastodon-apptea (npm) (malicious package)
- [MAL-2025-99386](https://insights.sbomify.com/MAL-2025-99386/): Malicious code in amateur_loon_z3n (npm) (malicious package)
- [MAL-2025-99385](https://insights.sbomify.com/MAL-2025-99385/): Malicious code in amateur_emu_z3n (npm) (malicious package)
- [MAL-2025-99384](https://insights.sbomify.com/MAL-2025-99384/): Malicious code in amateur_earthworm_z3n (npm) (malicious package)
- [MAL-2025-99383](https://insights.sbomify.com/MAL-2025-99383/): Malicious code in amateur_cardinal_z3n (npm) (malicious package)
- [MAL-2025-99382](https://insights.sbomify.com/MAL-2025-99382/): Malicious code in amateur_bird_z3n (npm) (malicious package)
- [MAL-2025-99381](https://insights.sbomify.com/MAL-2025-99381/): Malicious code in alternative_wren_0xrequest (npm) (malicious package)
- [MAL-2025-99380](https://insights.sbomify.com/MAL-2025-99380/): Malicious code in alternative_raccoon_0xrequest (npm) (malicious package)
- [MAL-2025-9938](https://insights.sbomify.com/MAL-2025-9938/): Malicious code in @zalastax/nolb-_do4 (npm) (malicious package)
- [MAL-2025-99379](https://insights.sbomify.com/MAL-2025-99379/): Malicious code in alternative_prawn_z3n (npm) (malicious package)
- [MAL-2025-99378](https://insights.sbomify.com/MAL-2025-99378/): Malicious code in alternative_lemur_dumbs (npm) (malicious package)
- [MAL-2025-99377](https://insights.sbomify.com/MAL-2025-99377/): Malicious code in alternative_jay-appteadev (npm) (malicious package)
- [MAL-2025-99376](https://insights.sbomify.com/MAL-2025-99376/): Malicious code in alright_wildebeest_0xrequest (npm) (malicious package)
- [MAL-2025-99375](https://insights.sbomify.com/MAL-2025-99375/): Malicious code in alright_sturgeon-appteadev (npm) (malicious package)
- [MAL-2025-99374](https://insights.sbomify.com/MAL-2025-99374/): Malicious code in alright_snake_0xrequest (npm) (malicious package)
- [MAL-2025-99373](https://insights.sbomify.com/MAL-2025-99373/): Malicious code in alright_rooster_z3n (npm) (malicious package)
- [MAL-2025-99372](https://insights.sbomify.com/MAL-2025-99372/): Malicious code in alright_kite_z3n (npm) (malicious package)
- [MAL-2025-99371](https://insights.sbomify.com/MAL-2025-99371/): Malicious code in alright_elephant_0xrequest (npm) (malicious package)
- [MAL-2025-99370](https://insights.sbomify.com/MAL-2025-99370/): Malicious code in alright_ape-appteadev (npm) (malicious package)
- [MAL-2025-9937](https://insights.sbomify.com/MAL-2025-9937/): Malicious code in @zalastax/nolb-_do- (npm) (malicious package)
- [MAL-2025-99369](https://insights.sbomify.com/MAL-2025-99369/): Malicious code in alone_wildcat-biggestdev (npm) (malicious package)
- [MAL-2025-99368](https://insights.sbomify.com/MAL-2025-99368/): Malicious code in alone_raven-smiletea (npm) (malicious package)
- [MAL-2025-99367](https://insights.sbomify.com/MAL-2025-99367/): Malicious code in alone_lynx_dumbs (npm) (malicious package)
- [MAL-2025-99366](https://insights.sbomify.com/MAL-2025-99366/): Malicious code in alone_kiwi_z3n (npm) (malicious package)
- [MAL-2025-99365](https://insights.sbomify.com/MAL-2025-99365/): Malicious code in alone_hyena_dumbs (npm) (malicious package)
- [MAL-2025-99364](https://insights.sbomify.com/MAL-2025-99364/): Malicious code in alone_donkey_dumbs (npm) (malicious package)
- [MAL-2025-99363](https://insights.sbomify.com/MAL-2025-99363/): Malicious code in alone_bonobo_z3n (npm) (malicious package)
- [MAL-2025-99362](https://insights.sbomify.com/MAL-2025-99362/): Malicious code in almon-notthedevs (npm) (malicious package)
- [MAL-2025-99361](https://insights.sbomify.com/MAL-2025-99361/): Malicious code in allied_tiger_0xrequest (npm) (malicious package)
- [MAL-2025-99360](https://insights.sbomify.com/MAL-2025-99360/): Malicious code in allied_tarsier-silentdev (npm) (malicious package)
- [MAL-2025-9936](https://insights.sbomify.com/MAL-2025-9936/): Malicious code in @zalastax/nolb-_dn (npm) (malicious package)
- [MAL-2025-99359](https://insights.sbomify.com/MAL-2025-99359/): Malicious code in allied_swordfish_0xrequest (npm) (malicious package)
- [MAL-2025-99358](https://insights.sbomify.com/MAL-2025-99358/): Malicious code in allied_python-smiletea (npm) (malicious package)
- [MAL-2025-99357](https://insights.sbomify.com/MAL-2025-99357/): Malicious code in alleged_pinniped-appteadev (npm) (malicious package)
- [MAL-2025-99356](https://insights.sbomify.com/MAL-2025-99356/): Malicious code in alleged_guppy-silentdev (npm) (malicious package)
- [MAL-2025-99355](https://insights.sbomify.com/MAL-2025-99355/): Malicious code in alleged_gull-smiletea (npm) (malicious package)
- [MAL-2025-99354](https://insights.sbomify.com/MAL-2025-99354/): Malicious code in alleged_deer_0xrequest (npm) (malicious package)
- [MAL-2025-99353](https://insights.sbomify.com/MAL-2025-99353/): Malicious code in alleged_albatross_z3n (npm) (malicious package)
- [MAL-2025-99352](https://insights.sbomify.com/MAL-2025-99352/): Malicious code in allan-teadev (npm) (malicious package)
- [MAL-2025-99351](https://insights.sbomify.com/MAL-2025-99351/): Malicious code in alive_worm_z3n (npm) (malicious package)
- [MAL-2025-99350](https://insights.sbomify.com/MAL-2025-99350/): Malicious code in alive_vole-appteadev (npm) (malicious package)
- [MAL-2025-9935](https://insights.sbomify.com/MAL-2025-9935/): Malicious code in @zalastax/nolb-_dm (npm) (malicious package)
- [MAL-2025-99349](https://insights.sbomify.com/MAL-2025-99349/): Malicious code in alive_toad-gooddev (npm) (malicious package)
- [MAL-2025-99348](https://insights.sbomify.com/MAL-2025-99348/): Malicious code in alive_tiglon-smiletea (npm) (malicious package)
- [MAL-2025-99347](https://insights.sbomify.com/MAL-2025-99347/): Malicious code in alive_thrush_z3n (npm) (malicious package)
- [MAL-2025-99346](https://insights.sbomify.com/MAL-2025-99346/): Malicious code in alive_deer_z3n (npm) (malicious package)
- [MAL-2025-99345](https://insights.sbomify.com/MAL-2025-99345/): Malicious code in alert_stork_z3n (npm) (malicious package)
- [MAL-2025-99344](https://insights.sbomify.com/MAL-2025-99344/): Malicious code in alert_stoat_z3n (npm) (malicious package)
- [MAL-2025-99343](https://insights.sbomify.com/MAL-2025-99343/): Malicious code in alert_cardinal-appteadev (npm) (malicious package)
- [MAL-2025-99342](https://insights.sbomify.com/MAL-2025-99342/): Malicious code in alert_bison_0xrequest (npm) (malicious package)
- [MAL-2025-99341](https://insights.sbomify.com/MAL-2025-99341/): Malicious code in alert_antlion_z3n (npm) (malicious package)
- [MAL-2025-99340](https://insights.sbomify.com/MAL-2025-99340/): Malicious code in alaran-notthedevs (npm) (malicious package)
- [MAL-2025-9934](https://insights.sbomify.com/MAL-2025-9934/): Malicious code in @zalastax/nolb-_digv (npm) (malicious package)
- [MAL-2025-99339](https://insights.sbomify.com/MAL-2025-99339/): Malicious code in ahyrrik-notthedevs (npm) (malicious package)
- [MAL-2025-99338](https://insights.sbomify.com/MAL-2025-99338/): Malicious code in agus-ubi24-ruro (npm) (malicious package)
- [MAL-2025-99337](https://insights.sbomify.com/MAL-2025-99337/): Malicious code in agus-tumis1-ruro (npm) (malicious package)
- [MAL-2025-99336](https://insights.sbomify.com/MAL-2025-99336/): Malicious code in agus-tempe88-ruro (npm) (malicious package)
- [MAL-2025-99335](https://insights.sbomify.com/MAL-2025-99335/): Malicious code in agus-telur61-ruro (npm) (malicious package)
- [MAL-2025-99334](https://insights.sbomify.com/MAL-2025-99334/): Malicious code in agus-telur34-ruro (npm) (malicious package)
- [MAL-2025-99333](https://insights.sbomify.com/MAL-2025-99333/): Malicious code in agus-tahutek12-ruro (npm) (malicious package)
- [MAL-2025-99332](https://insights.sbomify.com/MAL-2025-99332/): Malicious code in agus-serabi78-ruro (npm) (malicious package)
- [MAL-2025-99331](https://insights.sbomify.com/MAL-2025-99331/): Malicious code in agus-sego92-ruro (npm) (malicious package)
- [MAL-2025-99330](https://insights.sbomify.com/MAL-2025-99330/): Malicious code in agus-sate16-ruro (npm) (malicious package)
- [MAL-2025-9933](https://insights.sbomify.com/MAL-2025-9933/): Malicious code in @zalastax/nolb-_digt (npm) (malicious package)
- [MAL-2025-99329](https://insights.sbomify.com/MAL-2025-99329/): Malicious code in agus-sasag99-ruro (npm) (malicious package)
- [MAL-2025-99328](https://insights.sbomify.com/MAL-2025-99328/): Malicious code in agus-rujaksoto79-ruro (npm) (malicious package)
- [MAL-2025-99327](https://insights.sbomify.com/MAL-2025-99327/): Malicious code in agus-rojak91-ruro (npm) (malicious package)
- [MAL-2025-99326](https://insights.sbomify.com/MAL-2025-99326/): Malicious code in agus-rojak74-ruro (npm) (malicious package)
- [MAL-2025-99325](https://insights.sbomify.com/MAL-2025-99325/): Malicious code in agus-rangi96-ruro (npm) (malicious package)
- [MAL-2025-99324](https://insights.sbomify.com/MAL-2025-99324/): Malicious code in agus-rangi63-ruro (npm) (malicious package)
- [MAL-2025-99323](https://insights.sbomify.com/MAL-2025-99323/): Malicious code in agus-rangi2-ruro (npm) (malicious package)
- [MAL-2025-99322](https://insights.sbomify.com/MAL-2025-99322/): Malicious code in agus-rangginang62-ruro (npm) (malicious package)
- [MAL-2025-99321](https://insights.sbomify.com/MAL-2025-99321/): Malicious code in agus-pisang3-remi (npm) (malicious package)
- [MAL-2025-99320](https://insights.sbomify.com/MAL-2025-99320/): Malicious code in agus-peyek82-ruro (npm) (malicious package)
- [MAL-2025-9932](https://insights.sbomify.com/MAL-2025-9932/): Malicious code in @zalastax/nolb-_digs (npm) (malicious package)
- [MAL-2025-99319](https://insights.sbomify.com/MAL-2025-99319/): Malicious code in agus-peyek55-ruro (npm) (malicious package)
- [MAL-2025-99318](https://insights.sbomify.com/MAL-2025-99318/): Malicious code in agus-otak-otak36-ruro (npm) (malicious package)
- [MAL-2025-99317](https://insights.sbomify.com/MAL-2025-99317/): Malicious code in agus-nasisayur73-ruro (npm) (malicious package)
- [MAL-2025-99316](https://insights.sbomify.com/MAL-2025-99316/): Malicious code in agus-miemee9-ruro (npm) (malicious package)
- [MAL-2025-99315](https://insights.sbomify.com/MAL-2025-99315/): Malicious code in agus-miebogor89-ruro (npm) (malicious package)
- [MAL-2025-99314](https://insights.sbomify.com/MAL-2025-99314/): Malicious code in agus-miebogor79-ruro (npm) (malicious package)
- [MAL-2025-99313](https://insights.sbomify.com/MAL-2025-99313/): Malicious code in agus-miebogor13-ruro (npm) (malicious package)
- [MAL-2025-99312](https://insights.sbomify.com/MAL-2025-99312/): Malicious code in agus-mieayam27-ruro (npm) (malicious package)
- [MAL-2025-99311](https://insights.sbomify.com/MAL-2025-99311/): Malicious code in agus-mieaceh3-ruro (npm) (malicious package)
- [MAL-2025-99310](https://insights.sbomify.com/MAL-2025-99310/): Malicious code in agus-mie26-remi (npm) (malicious package)
- [MAL-2025-9931](https://insights.sbomify.com/MAL-2025-9931/): Malicious code in @zalastax/nolb-_digp (npm) (malicious package)
- [MAL-2025-99309](https://insights.sbomify.com/MAL-2025-99309/): Malicious code in agus-mendut24-ruro (npm) (malicious package)
- [MAL-2025-99308](https://insights.sbomify.com/MAL-2025-99308/): Malicious code in agus-mangut13-ruro (npm) (malicious package)
- [MAL-2025-99307](https://insights.sbomify.com/MAL-2025-99307/): Malicious code in agus-lontong21-ruro (npm) (malicious package)
- [MAL-2025-99306](https://insights.sbomify.com/MAL-2025-99306/): Malicious code in agus-lepet77-ruro (npm) (malicious package)
- [MAL-2025-99305](https://insights.sbomify.com/MAL-2025-99305/): Malicious code in agus-lengko23-ruro (npm) (malicious package)
- [MAL-2025-99304](https://insights.sbomify.com/MAL-2025-99304/): Malicious code in agus-lapis8-ruro (npm) (malicious package)
- [MAL-2025-99303](https://insights.sbomify.com/MAL-2025-99303/): Malicious code in agus-lapis56-ruro (npm) (malicious package)
- [MAL-2025-99302](https://insights.sbomify.com/MAL-2025-99302/): Malicious code in agus-kue58-ruro (npm) (malicious package)
- [MAL-2025-99301](https://insights.sbomify.com/MAL-2025-99301/): Malicious code in agus-kue23-ruro (npm) (malicious package)
- [MAL-2025-99300](https://insights.sbomify.com/MAL-2025-99300/): Malicious code in agus-kripik98-ruro (npm) (malicious package)
- [MAL-2025-9930](https://insights.sbomify.com/MAL-2025-9930/): Malicious code in @zalastax/nolb-_digip (npm) (malicious package)
- [MAL-2025-993](https://insights.sbomify.com/MAL-2025-993/): Malicious code in tan1-0 (PyPI) (malicious package)
- [MAL-2025-99299](https://insights.sbomify.com/MAL-2025-99299/): Malicious code in agus-klipo85-remi (npm) (malicious package)
- [MAL-2025-99298](https://insights.sbomify.com/MAL-2025-99298/): Malicious code in agus-klentik70-remi (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/12/