# Vulnerabilities published in 2025


- [MAL-2025-139014](https://insights.sbomify.com/MAL-2025-139014/): Malicious code in small-aqua-alligator (npm) (malicious package)
- [MAL-2025-139013](https://insights.sbomify.com/MAL-2025-139013/): Malicious code in slimy-magenta-trout (npm) (malicious package)
- [MAL-2025-139012](https://insights.sbomify.com/MAL-2025-139012/): Malicious code in slight-jade-owl (npm) (malicious package)
- [MAL-2025-139011](https://insights.sbomify.com/MAL-2025-139011/): Malicious code in sleepy-coral-gecko (npm) (malicious package)
- [MAL-2025-139010](https://insights.sbomify.com/MAL-2025-139010/): Malicious code in simple-black-peacock (npm) (malicious package)
- [MAL-2025-13901](https://insights.sbomify.com/MAL-2025-13901/): Malicious code in @zittertea/voluptatum-atque-similique-quidem (npm) (malicious package)
- [MAL-2025-139009](https://insights.sbomify.com/MAL-2025-139009/): Malicious code in similar-lime-halibut (npm) (malicious package)
- [MAL-2025-139008](https://insights.sbomify.com/MAL-2025-139008/): Malicious code in silly-yellow-mammal (npm) (malicious package)
- [MAL-2025-139007](https://insights.sbomify.com/MAL-2025-139007/): Malicious code in silly-ivory-sailfish (npm) (malicious package)
- [MAL-2025-139006](https://insights.sbomify.com/MAL-2025-139006/): Malicious code in silent-maroon-seahorse (npm) (malicious package)
- [MAL-2025-139005](https://insights.sbomify.com/MAL-2025-139005/): Malicious code in shy-red-snake (npm) (malicious package)
- [MAL-2025-139004](https://insights.sbomify.com/MAL-2025-139004/): Malicious code in sheer-apricot-cardinal (npm) (malicious package)
- [MAL-2025-139003](https://insights.sbomify.com/MAL-2025-139003/): Malicious code in shaky-coral-catfish (npm) (malicious package)
- [MAL-2025-139002](https://insights.sbomify.com/MAL-2025-139002/): Malicious code in shaky-coffee-centipede (npm) (malicious package)
- [MAL-2025-139001](https://insights.sbomify.com/MAL-2025-139001/): Malicious code in serious-plum-mosquito (npm) (malicious package)
- [MAL-2025-139000](https://insights.sbomify.com/MAL-2025-139000/): Malicious code in serious-lime-rook (npm) (malicious package)
- [MAL-2025-13900](https://insights.sbomify.com/MAL-2025-13900/): Malicious code in @zittertea/vero-ut-perspiciatis (npm) (malicious package)
- [MAL-2025-1390](https://insights.sbomify.com/MAL-2025-1390/): Malicious code in suvauxlib (npm) (malicious package)
- [MAL-2025-139](https://insights.sbomify.com/MAL-2025-139/): Malicious code in snapon-imageviewer-lw (npm) (malicious package)
- [MAL-2025-138999](https://insights.sbomify.com/MAL-2025-138999/): Malicious code in sensible-lime-antlion (npm) (malicious package)
- [MAL-2025-138998](https://insights.sbomify.com/MAL-2025-138998/): Malicious code in selected-scarlet-bison (npm) (malicious package)
- [MAL-2025-138997](https://insights.sbomify.com/MAL-2025-138997/): Malicious code in secure-teal-cricket (npm) (malicious package)
- [MAL-2025-138996](https://insights.sbomify.com/MAL-2025-138996/): Malicious code in scornful-white-squirrel (npm) (malicious package)
- [MAL-2025-138995](https://insights.sbomify.com/MAL-2025-138995/): Malicious code in scornful-red-cattle (npm) (malicious package)
- [MAL-2025-138994](https://insights.sbomify.com/MAL-2025-138994/): Malicious code in scornful-lime-goldfish (npm) (malicious package)
- [MAL-2025-138993](https://insights.sbomify.com/MAL-2025-138993/): Malicious code in scornful-jade-shrew (npm) (malicious package)
- [MAL-2025-138992](https://insights.sbomify.com/MAL-2025-138992/): Malicious code in scientific-crimson-bison (npm) (malicious package)
- [MAL-2025-138991](https://insights.sbomify.com/MAL-2025-138991/): Malicious code in santuyz (npm) (malicious package)
- [MAL-2025-138990](https://insights.sbomify.com/MAL-2025-138990/): Malicious code in running-silver-peacock (npm) (malicious package)
- [MAL-2025-13899](https://insights.sbomify.com/MAL-2025-13899/): Malicious code in @zittertea/tenetur-blanditiis-quam-error (npm) (malicious package)
- [MAL-2025-138989](https://insights.sbomify.com/MAL-2025-138989/): Malicious code in running-chocolate-lynx (npm) (malicious package)
- [MAL-2025-138988](https://insights.sbomify.com/MAL-2025-138988/): Malicious code in rude-lavender-condor (npm) (malicious package)
- [MAL-2025-138987](https://insights.sbomify.com/MAL-2025-138987/): Malicious code in royal-turquoise-crocodile (npm) (malicious package)
- [MAL-2025-138986](https://insights.sbomify.com/MAL-2025-138986/): Malicious code in royal-beige-dingo (npm) (malicious package)
- [MAL-2025-138985](https://insights.sbomify.com/MAL-2025-138985/): Malicious code in romantic-silver-bobcat (npm) (malicious package)
- [MAL-2025-138984](https://insights.sbomify.com/MAL-2025-138984/): Malicious code in roasted-maroon-reindeer (npm) (malicious package)
- [MAL-2025-138983](https://insights.sbomify.com/MAL-2025-138983/): Malicious code in rival-violet-junglefowl (npm) (malicious package)
- [MAL-2025-138982](https://insights.sbomify.com/MAL-2025-138982/): Malicious code in rich-ivory-viper (npm) (malicious package)
- [MAL-2025-138981](https://insights.sbomify.com/MAL-2025-138981/): Malicious code in revolutionary-cyan-tahr (npm) (malicious package)
- [MAL-2025-138980](https://insights.sbomify.com/MAL-2025-138980/): Malicious code in responsible-harlequin-beaver (npm) (malicious package)
- [MAL-2025-13898](https://insights.sbomify.com/MAL-2025-13898/): Malicious code in @zittertea/similique-harum-minima (npm) (malicious package)
- [MAL-2025-138979](https://insights.sbomify.com/MAL-2025-138979/): Malicious code in responsible-bronze-sole (npm) (malicious package)
- [MAL-2025-138978](https://insights.sbomify.com/MAL-2025-138978/): Malicious code in respectable-olive-porcupine (npm) (malicious package)
- [MAL-2025-138977](https://insights.sbomify.com/MAL-2025-138977/): Malicious code in respectable-green-hare (npm) (malicious package)
- [MAL-2025-138976](https://insights.sbomify.com/MAL-2025-138976/): Malicious code in resonant-bronze-tuna (npm) (malicious package)
- [MAL-2025-138975](https://insights.sbomify.com/MAL-2025-138975/): Malicious code in remyd7fh (npm) (malicious package)
- [MAL-2025-138974](https://insights.sbomify.com/MAL-2025-138974/): Malicious code in religious-amethyst-peafowl (npm) (malicious package)
- [MAL-2025-138973](https://insights.sbomify.com/MAL-2025-138973/): Malicious code in reliable-sapphire-pigeon (npm) (malicious package)
- [MAL-2025-138972](https://insights.sbomify.com/MAL-2025-138972/): Malicious code in relative-lime-dingo (npm) (malicious package)
- [MAL-2025-138971](https://insights.sbomify.com/MAL-2025-138971/): Malicious code in regional-sapphire-ferret (npm) (malicious package)
- [MAL-2025-138970](https://insights.sbomify.com/MAL-2025-138970/): Malicious code in redundant-coral-whale (npm) (malicious package)
- [MAL-2025-13897](https://insights.sbomify.com/MAL-2025-13897/): Malicious code in @zittertea/sequi-amet-at (npm) (malicious package)
- [MAL-2025-138969](https://insights.sbomify.com/MAL-2025-138969/): Malicious code in reduced-gray-chickadee (npm) (malicious package)
- [MAL-2025-138968](https://insights.sbomify.com/MAL-2025-138968/): Malicious code in rear-plum-parakeet (npm) (malicious package)
- [MAL-2025-138967](https://insights.sbomify.com/MAL-2025-138967/): Malicious code in rear-jade-tuna (npm) (malicious package)
- [MAL-2025-138966](https://insights.sbomify.com/MAL-2025-138966/): Malicious code in realistic-cyan-primate (npm) (malicious package)
- [MAL-2025-138965](https://insights.sbomify.com/MAL-2025-138965/): Malicious code in rare-scarlet-tapir (npm) (malicious package)
- [MAL-2025-138964](https://insights.sbomify.com/MAL-2025-138964/): Malicious code in rapid-turquoise-mule (npm) (malicious package)
- [MAL-2025-138963](https://insights.sbomify.com/MAL-2025-138963/): Malicious code in racial-chocolate-ladybug (npm) (malicious package)
- [MAL-2025-138962](https://insights.sbomify.com/MAL-2025-138962/): Malicious code in racial-black-buzzard (npm) (malicious package)
- [MAL-2025-138961](https://insights.sbomify.com/MAL-2025-138961/): Malicious code in quickest-lime-baboon (npm) (malicious package)
- [MAL-2025-138960](https://insights.sbomify.com/MAL-2025-138960/): Malicious code in querulous-tomato-rook (npm) (malicious package)
- [MAL-2025-13896](https://insights.sbomify.com/MAL-2025-13896/): Malicious code in @zittertea/sapiente-earum-ducimus (npm) (malicious package)
- [MAL-2025-138959](https://insights.sbomify.com/MAL-2025-138959/): Malicious code in querulous-sapphire-mouse (npm) (malicious package)
- [MAL-2025-138958](https://insights.sbomify.com/MAL-2025-138958/): Malicious code in quaint-chocolate-baboon (npm) (malicious package)
- [MAL-2025-138957](https://insights.sbomify.com/MAL-2025-138957/): Malicious code in pyonga (npm) (malicious package)
- [MAL-2025-138956](https://insights.sbomify.com/MAL-2025-138956/): Malicious code in puzzled-yellow-sole (npm) (malicious package)
- [MAL-2025-138955](https://insights.sbomify.com/MAL-2025-138955/): Malicious code in puzzled-olive-deer (npm) (malicious package)
- [MAL-2025-138954](https://insights.sbomify.com/MAL-2025-138954/): Malicious code in purring-coral-walrus (npm) (malicious package)
- [MAL-2025-138953](https://insights.sbomify.com/MAL-2025-138953/): Malicious code in puny-orange-baboon (npm) (malicious package)
- [MAL-2025-138952](https://insights.sbomify.com/MAL-2025-138952/): Malicious code in psychological-tan-whale (npm) (malicious package)
- [MAL-2025-138951](https://insights.sbomify.com/MAL-2025-138951/): Malicious code in proud-crimson-amphibian (npm) (malicious package)
- [MAL-2025-138950](https://insights.sbomify.com/MAL-2025-138950/): Malicious code in protestant-jade-penguin (npm) (malicious package)
- [MAL-2025-13895](https://insights.sbomify.com/MAL-2025-13895/): Malicious code in @zittertea/saepe-tempore-possimus-hic (npm) (malicious package)
- [MAL-2025-138949](https://insights.sbomify.com/MAL-2025-138949/): Malicious code in protective-beige-falcon (npm) (malicious package)
- [MAL-2025-138948](https://insights.sbomify.com/MAL-2025-138948/): Malicious code in prospective-olive-hawk (npm) (malicious package)
- [MAL-2025-138947](https://insights.sbomify.com/MAL-2025-138947/): Malicious code in prospective-indigo-guanaco (npm) (malicious package)
- [MAL-2025-138946](https://insights.sbomify.com/MAL-2025-138946/): Malicious code in prominent-peach-donkey (npm) (malicious package)
- [MAL-2025-138945](https://insights.sbomify.com/MAL-2025-138945/): Malicious code in progressive-pink-pheasant (npm) (malicious package)
- [MAL-2025-138944](https://insights.sbomify.com/MAL-2025-138944/): Malicious code in profound-lime-mammal (npm) (malicious package)
- [MAL-2025-138943](https://insights.sbomify.com/MAL-2025-138943/): Malicious code in profound-amethyst-clam (npm) (malicious package)
- [MAL-2025-138942](https://insights.sbomify.com/MAL-2025-138942/): Malicious code in profitable-aqua-clownfish (npm) (malicious package)
- [MAL-2025-138941](https://insights.sbomify.com/MAL-2025-138941/): Malicious code in private-violet-alpaca (npm) (malicious package)
- [MAL-2025-138940](https://insights.sbomify.com/MAL-2025-138940/): Malicious code in prepared-red-llama (npm) (malicious package)
- [MAL-2025-13894](https://insights.sbomify.com/MAL-2025-13894/): Malicious code in @zittertea/rerum-totam-officia-laudantium (npm) (malicious package)
- [MAL-2025-138939](https://insights.sbomify.com/MAL-2025-138939/): Malicious code in prepared-beige-prawn (npm) (malicious package)
- [MAL-2025-138938](https://insights.sbomify.com/MAL-2025-138938/): Malicious code in precise-lime-cougar (npm) (malicious package)
- [MAL-2025-138937](https://insights.sbomify.com/MAL-2025-138937/): Malicious code in potential-salmon-snake (npm) (malicious package)
- [MAL-2025-138936](https://insights.sbomify.com/MAL-2025-138936/): Malicious code in poor-sapphire-damselfly (npm) (malicious package)
- [MAL-2025-138935](https://insights.sbomify.com/MAL-2025-138935/): Malicious code in pleased-chocolate-gamefowl (npm) (malicious package)
- [MAL-2025-138934](https://insights.sbomify.com/MAL-2025-138934/): Malicious code in planned-turquoise-fish (npm) (malicious package)
- [MAL-2025-138933](https://insights.sbomify.com/MAL-2025-138933/): Malicious code in personal-jade-parrotfish (npm) (malicious package)
- [MAL-2025-138932](https://insights.sbomify.com/MAL-2025-138932/): Malicious code in persistent-green-tiger (npm) (malicious package)
- [MAL-2025-138931](https://insights.sbomify.com/MAL-2025-138931/): Malicious code in permanent-sapphire-panda (npm) (malicious package)
- [MAL-2025-138930](https://insights.sbomify.com/MAL-2025-138930/): Malicious code in permanent-bronze-tiger (npm) (malicious package)
- [MAL-2025-13893](https://insights.sbomify.com/MAL-2025-13893/): Malicious code in @zittertea/reprehenderit-modi-suscipit (npm) (malicious package)
- [MAL-2025-138929](https://insights.sbomify.com/MAL-2025-138929/): Malicious code in particular-amethyst-bison (npm) (malicious package)
- [MAL-2025-138928](https://insights.sbomify.com/MAL-2025-138928/): Malicious code in partial-violet-shark (npm) (malicious package)
- [MAL-2025-138927](https://insights.sbomify.com/MAL-2025-138927/): Malicious code in partial-amber-raccoon (npm) (malicious package)
- [MAL-2025-138926](https://insights.sbomify.com/MAL-2025-138926/): Malicious code in parliamentary-coral-caribou (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1499/