# Vulnerabilities published in 2025


- [MAL-2025-139104](https://insights.sbomify.com/MAL-2025-139104/): Malicious code in vital-peach-chimpanzee (npm) (malicious package)
- [MAL-2025-139103](https://insights.sbomify.com/MAL-2025-139103/): Malicious code in visual-turquoise-vicuna (npm) (malicious package)
- [MAL-2025-139102](https://insights.sbomify.com/MAL-2025-139102/): Malicious code in visiting-black-caterpillar (npm) (malicious package)
- [MAL-2025-139101](https://insights.sbomify.com/MAL-2025-139101/): Malicious code in vishalgo (npm) (malicious package)
- [MAL-2025-139100](https://insights.sbomify.com/MAL-2025-139100/): Malicious code in victorious-indigo-chinchilla (npm) (malicious package)
- [MAL-2025-13910](https://insights.sbomify.com/MAL-2025-13910/): Malicious code in a-lbum-do-wnload-avai-lable-file-363039-de-doorn-lu0q1-tqebeu (npm) (malicious package)
- [MAL-2025-1391](https://insights.sbomify.com/MAL-2025-1391/): Malicious code in voiceedgelite (npm) (malicious package)
- [MAL-2025-139099](https://insights.sbomify.com/MAL-2025-139099/): Malicious code in victorious-gray-stingray (npm) (malicious package)
- [MAL-2025-139098](https://insights.sbomify.com/MAL-2025-139098/): Malicious code in very-bronze-swan (npm) (malicious package)
- [MAL-2025-139097](https://insights.sbomify.com/MAL-2025-139097/): Malicious code in vertical-crimson-firefly (npm) (malicious package)
- [MAL-2025-139096](https://insights.sbomify.com/MAL-2025-139096/): Malicious code in vast-red-aardvark (npm) (malicious package)
- [MAL-2025-139095](https://insights.sbomify.com/MAL-2025-139095/): Malicious code in varying-maroon-blackbird (npm) (malicious package)
- [MAL-2025-139094](https://insights.sbomify.com/MAL-2025-139094/): Malicious code in varying-harlequin-pig (npm) (malicious package)
- [MAL-2025-139093](https://insights.sbomify.com/MAL-2025-139093/): Malicious code in various-plum-echidna (npm) (malicious package)
- [MAL-2025-139092](https://insights.sbomify.com/MAL-2025-139092/): Malicious code in valid-crimson-hippopotamus (npm) (malicious package)
- [MAL-2025-139091](https://insights.sbomify.com/MAL-2025-139091/): Malicious code in upset-teal-basilisk (npm) (malicious package)
- [MAL-2025-139090](https://insights.sbomify.com/MAL-2025-139090/): Malicious code in unusual-fuchsia-pelican (npm) (malicious package)
- [MAL-2025-13909](https://insights.sbomify.com/MAL-2025-13909/): Malicious code in a-lbum-do-wnload-avai-lable-file-209382-ricky-music-5n2qv-tclmfr (npm) (malicious package)
- [MAL-2025-139089](https://insights.sbomify.com/MAL-2025-139089/): Malicious code in unknown-white-cricket (npm) (malicious package)
- [MAL-2025-139088](https://insights.sbomify.com/MAL-2025-139088/): Malicious code in uniform-emerald-dove (npm) (malicious package)
- [MAL-2025-139087](https://insights.sbomify.com/MAL-2025-139087/): Malicious code in unexpected-tomato-frog (npm) (malicious package)
- [MAL-2025-139086](https://insights.sbomify.com/MAL-2025-139086/): Malicious code in unchanged-tomato-parakeet (npm) (malicious package)
- [MAL-2025-139085](https://insights.sbomify.com/MAL-2025-139085/): Malicious code in unaware-black-possum (npm) (malicious package)
- [MAL-2025-139084](https://insights.sbomify.com/MAL-2025-139084/): Malicious code in ugliest-gray-wallaby (npm) (malicious package)
- [MAL-2025-139083](https://insights.sbomify.com/MAL-2025-139083/): Malicious code in tremendous-chocolate-snake (npm) (malicious package)
- [MAL-2025-139082](https://insights.sbomify.com/MAL-2025-139082/): Malicious code in tory-maroon-bandicoot (npm) (malicious package)
- [MAL-2025-139081](https://insights.sbomify.com/MAL-2025-139081/): Malicious code in top-violet-hummingbird (npm) (malicious package)
- [MAL-2025-139080](https://insights.sbomify.com/MAL-2025-139080/): Malicious code in tired-pink-puma (npm) (malicious package)
- [MAL-2025-13908](https://insights.sbomify.com/MAL-2025-13908/): Malicious code in a-lbum-do-wnload-avai-lable-file-2016-55282-the-exodus-suite-74hog-yqunjy (npm) (malicious package)
- [MAL-2025-139079](https://insights.sbomify.com/MAL-2025-139079/): Malicious code in tired-olive-tahr (npm) (malicious package)
- [MAL-2025-139078](https://insights.sbomify.com/MAL-2025-139078/): Malicious code in tight-apricot-dog (npm) (malicious package)
- [MAL-2025-139077](https://insights.sbomify.com/MAL-2025-139077/): Malicious code in thoughtful-sapphire-llama (npm) (malicious package)
- [MAL-2025-139076](https://insights.sbomify.com/MAL-2025-139076/): Malicious code in thoughtful-crimson-yak (npm) (malicious package)
- [MAL-2025-139075](https://insights.sbomify.com/MAL-2025-139075/): Malicious code in thirsty-apricot-echidna (npm) (malicious package)
- [MAL-2025-139074](https://insights.sbomify.com/MAL-2025-139074/): Malicious code in thin-teal-lion (npm) (malicious package)
- [MAL-2025-139073](https://insights.sbomify.com/MAL-2025-139073/): Malicious code in thin-copper-leopard (npm) (malicious package)
- [MAL-2025-139072](https://insights.sbomify.com/MAL-2025-139072/): Malicious code in thin-blue-guan (npm) (malicious package)
- [MAL-2025-139071](https://insights.sbomify.com/MAL-2025-139071/): Malicious code in then-gray-smelt (npm) (malicious package)
- [MAL-2025-139070](https://insights.sbomify.com/MAL-2025-139070/): Malicious code in tharkunad (npm) (malicious package)
- [MAL-2025-13907](https://insights.sbomify.com/MAL-2025-13907/): Malicious code in a-lbum-do-wnload-avai-lable-file-2015-35030-woman-oeh1w-xjgwws (npm) (malicious package)
- [MAL-2025-139069](https://insights.sbomify.com/MAL-2025-139069/): Malicious code in testy-bronze-eagle (npm) (malicious package)
- [MAL-2025-139068](https://insights.sbomify.com/MAL-2025-139068/): Malicious code in temporary-indigo-cardinal (npm) (malicious package)
- [MAL-2025-139067](https://insights.sbomify.com/MAL-2025-139067/): Malicious code in teenage-gold-sheep (npm) (malicious package)
- [MAL-2025-139066](https://insights.sbomify.com/MAL-2025-139066/): Malicious code in technological-brown-rabbit (npm) (malicious package)
- [MAL-2025-139065](https://insights.sbomify.com/MAL-2025-139065/): Malicious code in technical-rose-anglerfish (npm) (malicious package)
- [MAL-2025-139064](https://insights.sbomify.com/MAL-2025-139064/): Malicious code in tasteless-ivory-pigeon (npm) (malicious package)
- [MAL-2025-139063](https://insights.sbomify.com/MAL-2025-139063/): Malicious code in tart-rose-crow (npm) (malicious package)
- [MAL-2025-139062](https://insights.sbomify.com/MAL-2025-139062/): Malicious code in tart-moccasin-sheep (npm) (malicious package)
- [MAL-2025-139061](https://insights.sbomify.com/MAL-2025-139061/): Malicious code in t4mp0p0 (npm) (malicious package)
- [MAL-2025-139060](https://insights.sbomify.com/MAL-2025-139060/): Malicious code in systematic-chocolate-swift (npm) (malicious package)
- [MAL-2025-13906](https://insights.sbomify.com/MAL-2025-13906/): Malicious code in a-lbum-do-wnload-avai-lable-file-2013-32830-consumer-complaints-m7j8s-pdrsca (npm) (malicious package)
- [MAL-2025-139059](https://insights.sbomify.com/MAL-2025-139059/): Malicious code in surviving-moccasin-galliform (npm) (malicious package)
- [MAL-2025-139058](https://insights.sbomify.com/MAL-2025-139058/): Malicious code in surrounding-plum-squid (npm) (malicious package)
- [MAL-2025-139057](https://insights.sbomify.com/MAL-2025-139057/): Malicious code in surrounding-olive-caribou (npm) (malicious package)
- [MAL-2025-139056](https://insights.sbomify.com/MAL-2025-139056/): Malicious code in sure-sapphire-aardvark (npm) (malicious package)
- [MAL-2025-139055](https://insights.sbomify.com/MAL-2025-139055/): Malicious code in supreme-coral-mandrill (npm) (malicious package)
- [MAL-2025-139054](https://insights.sbomify.com/MAL-2025-139054/): Malicious code in superb-aqua-dormouse (npm) (malicious package)
- [MAL-2025-139053](https://insights.sbomify.com/MAL-2025-139053/): Malicious code in sunny-green-tahr (npm) (malicious package)
- [MAL-2025-139052](https://insights.sbomify.com/MAL-2025-139052/): Malicious code in successive-black-crocodile (npm) (malicious package)
- [MAL-2025-139051](https://insights.sbomify.com/MAL-2025-139051/): Malicious code in subsequent-fuchsia-mongoose (npm) (malicious package)
- [MAL-2025-139050](https://insights.sbomify.com/MAL-2025-139050/): Malicious code in strong-moccasin-canidae (npm) (malicious package)
- [MAL-2025-13905](https://insights.sbomify.com/MAL-2025-13905/): The package a-lbum-do-wnload-avai-lable-file-168311-grits-beans-and-greens-the-lost-fontana-studio-sessions-1969-hotvj-ounwwp was found to c (malicious package)
- [MAL-2025-139049](https://insights.sbomify.com/MAL-2025-139049/): Malicious code in striking-tan-baboon (npm) (malicious package)
- [MAL-2025-139048](https://insights.sbomify.com/MAL-2025-139048/): Malicious code in strict-jade-muskox (npm) (malicious package)
- [MAL-2025-139047](https://insights.sbomify.com/MAL-2025-139047/): Malicious code in strategic-red-goose (npm) (malicious package)
- [MAL-2025-139046](https://insights.sbomify.com/MAL-2025-139046/): Malicious code in straightforward-teal-krill (npm) (malicious package)
- [MAL-2025-139045](https://insights.sbomify.com/MAL-2025-139045/): Malicious code in straight-maroon-mite (npm) (malicious package)
- [MAL-2025-139044](https://insights.sbomify.com/MAL-2025-139044/): Malicious code in straight-blush-duck (npm) (malicious package)
- [MAL-2025-139043](https://insights.sbomify.com/MAL-2025-139043/): Malicious code in stiff-brown-tuna (npm) (malicious package)
- [MAL-2025-139042](https://insights.sbomify.com/MAL-2025-139042/): Malicious code in sticky-blush-cardinal (npm) (malicious package)
- [MAL-2025-139041](https://insights.sbomify.com/MAL-2025-139041/): Malicious code in sticky-black-possum (npm) (malicious package)
- [MAL-2025-139040](https://insights.sbomify.com/MAL-2025-139040/): Malicious code in steep-harlequin-octopus (npm) (malicious package)
- [MAL-2025-13904](https://insights.sbomify.com/MAL-2025-13904/): Malicious code in a-lbum-do-wnload-avai-lable-file-12058-selling-live-water-a3lks-kuffcc (npm) (malicious package)
- [MAL-2025-139039](https://insights.sbomify.com/MAL-2025-139039/): Malicious code in steep-brown-pike (npm) (malicious package)
- [MAL-2025-139038](https://insights.sbomify.com/MAL-2025-139038/): Malicious code in static-red-wasp (npm) (malicious package)
- [MAL-2025-139037](https://insights.sbomify.com/MAL-2025-139037/): Malicious code in standard-peach-cockroach (npm) (malicious package)
- [MAL-2025-139036](https://insights.sbomify.com/MAL-2025-139036/): Malicious code in standard-beige-porcupine (npm) (malicious package)
- [MAL-2025-139035](https://insights.sbomify.com/MAL-2025-139035/): Malicious code in spotty-peach-trout (npm) (malicious package)
- [MAL-2025-139034](https://insights.sbomify.com/MAL-2025-139034/): Malicious code in spotty-green-mouse (npm) (malicious package)
- [MAL-2025-139033](https://insights.sbomify.com/MAL-2025-139033/): Malicious code in spotless-white-stoat (npm) (malicious package)
- [MAL-2025-139032](https://insights.sbomify.com/MAL-2025-139032/): Malicious code in spotless-chocolate-dog (npm) (malicious package)
- [MAL-2025-139031](https://insights.sbomify.com/MAL-2025-139031/): Malicious code in sporting-purple-python (npm) (malicious package)
- [MAL-2025-139030](https://insights.sbomify.com/MAL-2025-139030/): Malicious code in spontaneous-blush-yak (npm) (malicious package)
- [MAL-2025-13903](https://insights.sbomify.com/MAL-2025-13903/): Malicious code in a-lbum-do-wnload-avai-lable-file-105412-gilberto-gil-yhd80-ckwsmo (npm) (malicious package)
- [MAL-2025-139029](https://insights.sbomify.com/MAL-2025-139029/): Malicious code in splendid-maroon-clam (npm) (malicious package)
- [MAL-2025-139028](https://insights.sbomify.com/MAL-2025-139028/): Malicious code in spectacular-azure-antlion (npm) (malicious package)
- [MAL-2025-139027](https://insights.sbomify.com/MAL-2025-139027/): Malicious code in specific-harlequin-guan (npm) (malicious package)
- [MAL-2025-139026](https://insights.sbomify.com/MAL-2025-139026/): Malicious code in special-brown-bobcat (npm) (malicious package)
- [MAL-2025-139025](https://insights.sbomify.com/MAL-2025-139025/): Malicious code in special-blush-firefly (npm) (malicious package)
- [MAL-2025-139024](https://insights.sbomify.com/MAL-2025-139024/): Malicious code in sparkling-scarlet-cobra (npm) (malicious package)
- [MAL-2025-139023](https://insights.sbomify.com/MAL-2025-139023/): Malicious code in spare-yellow-cow (npm) (malicious package)
- [MAL-2025-139022](https://insights.sbomify.com/MAL-2025-139022/): Malicious code in spare-chocolate-gull (npm) (malicious package)
- [MAL-2025-139021](https://insights.sbomify.com/MAL-2025-139021/): Malicious code in sour-cyan-horse (npm) (malicious package)
- [MAL-2025-139020](https://insights.sbomify.com/MAL-2025-139020/): Malicious code in solid-rose-mole (npm) (malicious package)
- [MAL-2025-13902](https://insights.sbomify.com/MAL-2025-13902/): Malicious code in @zyro-inc/eslint-config-zyro (npm) (malicious package)
- [MAL-2025-139019](https://insights.sbomify.com/MAL-2025-139019/): Malicious code in solid-coral-vole (npm) (malicious package)
- [MAL-2025-139018](https://insights.sbomify.com/MAL-2025-139018/): Malicious code in sole-white-chinchilla (npm) (malicious package)
- [MAL-2025-139017](https://insights.sbomify.com/MAL-2025-139017/): Malicious code in social-ivory-perch (npm) (malicious package)
- [MAL-2025-139016](https://insights.sbomify.com/MAL-2025-139016/): Malicious code in smoggy-lime-trout (npm) (malicious package)
- [MAL-2025-139015](https://insights.sbomify.com/MAL-2025-139015/): Malicious code in smart-tan-jackal (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1498/