# Vulnerabilities published in 2025


- [MAL-2025-99116](https://insights.sbomify.com/MAL-2025-99116/): Malicious code in added_falcon_0xrequest (npm) (malicious package)
- [MAL-2025-99115](https://insights.sbomify.com/MAL-2025-99115/): Malicious code in added_bass-silentdev (npm) (malicious package)
- [MAL-2025-99114](https://insights.sbomify.com/MAL-2025-99114/): Malicious code in acute_quail_z3n (npm) (malicious package)
- [MAL-2025-99113](https://insights.sbomify.com/MAL-2025-99113/): Malicious code in acute_mammal-appteadev (npm) (malicious package)
- [MAL-2025-99112](https://insights.sbomify.com/MAL-2025-99112/): Malicious code in acute_hornet_0xrequest (npm) (malicious package)
- [MAL-2025-99111](https://insights.sbomify.com/MAL-2025-99111/): Malicious code in acute_galliform_z3n (npm) (malicious package)
- [MAL-2025-99110](https://insights.sbomify.com/MAL-2025-99110/): Malicious code in acute_flea_z3n (npm) (malicious package)
- [MAL-2025-9911](https://insights.sbomify.com/MAL-2025-9911/): Malicious code in @zalastax/nolb-_datau (npm) (malicious package)
- [MAL-2025-99109](https://insights.sbomify.com/MAL-2025-99109/): Malicious code in acute_ferret_z3n (npm) (malicious package)
- [MAL-2025-99108](https://insights.sbomify.com/MAL-2025-99108/): Malicious code in acute_caterpillar_z3n (npm) (malicious package)
- [MAL-2025-99107](https://insights.sbomify.com/MAL-2025-99107/): Malicious code in acute_angelfish_z3n (npm) (malicious package)
- [MAL-2025-99106](https://insights.sbomify.com/MAL-2025-99106/): Malicious code in actual_termite_z3n (npm) (malicious package)
- [MAL-2025-99105](https://insights.sbomify.com/MAL-2025-99105/): Malicious code in actual_swallow-strongdev (npm) (malicious package)
- [MAL-2025-99104](https://insights.sbomify.com/MAL-2025-99104/): Malicious code in actual_sole_z3n (npm) (malicious package)
- [MAL-2025-99103](https://insights.sbomify.com/MAL-2025-99103/): Malicious code in actual_koi-appteadev (npm) (malicious package)
- [MAL-2025-99102](https://insights.sbomify.com/MAL-2025-99102/): Malicious code in actual_iguana-appteadev (npm) (malicious package)
- [MAL-2025-99101](https://insights.sbomify.com/MAL-2025-99101/): Malicious code in actual_haddock_dumbs (npm) (malicious package)
- [MAL-2025-99100](https://insights.sbomify.com/MAL-2025-99100/): Malicious code in active_urial_z3n (npm) (malicious package)
- [MAL-2025-9910](https://insights.sbomify.com/MAL-2025-9910/): Malicious code in @zalastax/nolb-_datat (npm) (malicious package)
- [MAL-2025-99099](https://insights.sbomify.com/MAL-2025-99099/): Malicious code in active_snake_white-91 (npm) (malicious package)
- [MAL-2025-99098](https://insights.sbomify.com/MAL-2025-99098/): Malicious code in active_iguana_z3n (npm) (malicious package)
- [MAL-2025-99097](https://insights.sbomify.com/MAL-2025-99097/): Malicious code in accused_urial_z3n (npm) (malicious package)
- [MAL-2025-99096](https://insights.sbomify.com/MAL-2025-99096/): Malicious code in accused_haddock-notthedevs (npm) (malicious package)
- [MAL-2025-99095](https://insights.sbomify.com/MAL-2025-99095/): Malicious code in accused_grasshopper_dumbs (npm) (malicious package)
- [MAL-2025-99094](https://insights.sbomify.com/MAL-2025-99094/): Malicious code in accused_boa_z3n (npm) (malicious package)
- [MAL-2025-99093](https://insights.sbomify.com/MAL-2025-99093/): Malicious code in accused_barracuda_z3n (npm) (malicious package)
- [MAL-2025-99092](https://insights.sbomify.com/MAL-2025-99092/): Malicious code in accurate_vulture_z3n (npm) (malicious package)
- [MAL-2025-99091](https://insights.sbomify.com/MAL-2025-99091/): Malicious code in accurate_sole_replicate_automation (npm) (malicious package)
- [MAL-2025-99090](https://insights.sbomify.com/MAL-2025-99090/): Malicious code in accurate_scallop_0xrequest (npm) (malicious package)
- [MAL-2025-9909](https://insights.sbomify.com/MAL-2025-9909/): Malicious code in @zalastax/nolb-_datas (npm) (malicious package)
- [MAL-2025-99089](https://insights.sbomify.com/MAL-2025-99089/): Malicious code in accurate_piranha-smiletea (npm) (malicious package)
- [MAL-2025-99088](https://insights.sbomify.com/MAL-2025-99088/): Malicious code in accurate_mollusk-appteadev (npm) (malicious package)
- [MAL-2025-99087](https://insights.sbomify.com/MAL-2025-99087/): Malicious code in accurate_mammal_0xrequest (npm) (malicious package)
- [MAL-2025-99086](https://insights.sbomify.com/MAL-2025-99086/): Malicious code in accurate_barnacle_z3n (npm) (malicious package)
- [MAL-2025-99085](https://insights.sbomify.com/MAL-2025-99085/): Malicious code in accessible_silkworm-tool (npm) (malicious package)
- [MAL-2025-99084](https://insights.sbomify.com/MAL-2025-99084/): Malicious code in accessible_rodent_z3n (npm) (malicious package)
- [MAL-2025-99083](https://insights.sbomify.com/MAL-2025-99083/): Malicious code in accessible_mole_replicate_automation (npm) (malicious package)
- [MAL-2025-99082](https://insights.sbomify.com/MAL-2025-99082/): Malicious code in accessible_landfowl_z3n (npm) (malicious package)
- [MAL-2025-99081](https://insights.sbomify.com/MAL-2025-99081/): Malicious code in accessible_junglefowl-smiletea (npm) (malicious package)
- [MAL-2025-99080](https://insights.sbomify.com/MAL-2025-99080/): Malicious code in accepted_rabbit-appteadev (npm) (malicious package)
- [MAL-2025-9908](https://insights.sbomify.com/MAL-2025-9908/): Malicious code in @zalastax/nolb-_datar (npm) (malicious package)
- [MAL-2025-99079](https://insights.sbomify.com/MAL-2025-99079/): Malicious code in accepted_peafowl_0xrequest (npm) (malicious package)
- [MAL-2025-99078](https://insights.sbomify.com/MAL-2025-99078/): Malicious code in accepted_owl_0xrequest (npm) (malicious package)
- [MAL-2025-99077](https://insights.sbomify.com/MAL-2025-99077/): Malicious code in accepted_otter_z3n (npm) (malicious package)
- [MAL-2025-99076](https://insights.sbomify.com/MAL-2025-99076/): Malicious code in accepted_marlin_0xrequest (npm) (malicious package)
- [MAL-2025-99075](https://insights.sbomify.com/MAL-2025-99075/): Malicious code in accepted_macaw_dumbs (npm) (malicious package)
- [MAL-2025-99074](https://insights.sbomify.com/MAL-2025-99074/): Malicious code in accepted_jaguar-appteadev (npm) (malicious package)
- [MAL-2025-99073](https://insights.sbomify.com/MAL-2025-99073/): Malicious code in accepted_horse_0xrequest (npm) (malicious package)
- [MAL-2025-99072](https://insights.sbomify.com/MAL-2025-99072/): Malicious code in accepted_felidae_0xrequest (npm) (malicious package)
- [MAL-2025-99071](https://insights.sbomify.com/MAL-2025-99071/): Malicious code in acceptable_wolf_0xrequest (npm) (malicious package)
- [MAL-2025-99070](https://insights.sbomify.com/MAL-2025-99070/): Malicious code in acceptable_quokka-appteadev (npm) (malicious package)
- [MAL-2025-9907](https://insights.sbomify.com/MAL-2025-9907/): Malicious code in @zalastax/nolb-_danl (npm) (malicious package)
- [MAL-2025-99069](https://insights.sbomify.com/MAL-2025-99069/): Malicious code in acceptable_mole_dumbs (npm) (malicious package)
- [MAL-2025-99068](https://insights.sbomify.com/MAL-2025-99068/): Malicious code in acceptable_iguana_z3n (npm) (malicious package)
- [MAL-2025-99067](https://insights.sbomify.com/MAL-2025-99067/): Malicious code in acceptable_gazelle-smiletea (npm) (malicious package)
- [MAL-2025-99066](https://insights.sbomify.com/MAL-2025-99066/): Malicious code in acceptable_fowl_0xrequest (npm) (malicious package)
- [MAL-2025-99065](https://insights.sbomify.com/MAL-2025-99065/): Malicious code in acceptable_fish_dumbs (npm) (malicious package)
- [MAL-2025-99064](https://insights.sbomify.com/MAL-2025-99064/): Malicious code in acceptable_blackbird_z3n (npm) (malicious package)
- [MAL-2025-99063](https://insights.sbomify.com/MAL-2025-99063/): Malicious code in academic_sailfish_z3n (npm) (malicious package)
- [MAL-2025-99062](https://insights.sbomify.com/MAL-2025-99062/): Malicious code in academic_mollusk_dumbs (npm) (malicious package)
- [MAL-2025-99061](https://insights.sbomify.com/MAL-2025-99061/): Malicious code in academic_mandrill-appteadev (npm) (malicious package)
- [MAL-2025-99060](https://insights.sbomify.com/MAL-2025-99060/): Malicious code in academic_lamprey_z3n (npm) (malicious package)
- [MAL-2025-9906](https://insights.sbomify.com/MAL-2025-9906/): Malicious code in @zalastax/nolb-_dank (npm) (malicious package)
- [MAL-2025-99059](https://insights.sbomify.com/MAL-2025-99059/): Malicious code in academic_hippopotamus_0xrequest (npm) (malicious package)
- [MAL-2025-99058](https://insights.sbomify.com/MAL-2025-99058/): Malicious code in academic_eel_dumbs (npm) (malicious package)
- [MAL-2025-99057](https://insights.sbomify.com/MAL-2025-99057/): Malicious code in academic_bear-apptea (npm) (malicious package)
- [MAL-2025-99056](https://insights.sbomify.com/MAL-2025-99056/): Malicious code in abundant_vicuna-smiletea (npm) (malicious package)
- [MAL-2025-99055](https://insights.sbomify.com/MAL-2025-99055/): Malicious code in abundant_tick_maroon-44 (npm) (malicious package)
- [MAL-2025-99054](https://insights.sbomify.com/MAL-2025-99054/): Malicious code in abundant_jaguar_z3n (npm) (malicious package)
- [MAL-2025-99053](https://insights.sbomify.com/MAL-2025-99053/): Malicious code in abundant_earwig_0xrequest (npm) (malicious package)
- [MAL-2025-99052](https://insights.sbomify.com/MAL-2025-99052/): Malicious code in abundant_buzzard_0xrequest (npm) (malicious package)
- [MAL-2025-99051](https://insights.sbomify.com/MAL-2025-99051/): Malicious code in abstract_tern-appteadev (npm) (malicious package)
- [MAL-2025-99050](https://insights.sbomify.com/MAL-2025-99050/): Malicious code in abstract_silkworm-tool (npm) (malicious package)
- [MAL-2025-9905](https://insights.sbomify.com/MAL-2025-9905/): Malicious code in @zalastax/nolb-_danj (npm) (malicious package)
- [MAL-2025-99049](https://insights.sbomify.com/MAL-2025-99049/): Malicious code in abstract_ostrich_z3n (npm) (malicious package)
- [MAL-2025-99048](https://insights.sbomify.com/MAL-2025-99048/): Malicious code in abstract_monkey_0xrequest (npm) (malicious package)
- [MAL-2025-99047](https://insights.sbomify.com/MAL-2025-99047/): Malicious code in abstract_limpet_0xrequest (npm) (malicious package)
- [MAL-2025-99046](https://insights.sbomify.com/MAL-2025-99046/): Malicious code in abstract_chimpanzee_z3n (npm) (malicious package)
- [MAL-2025-99045](https://insights.sbomify.com/MAL-2025-99045/): Malicious code in absolute_woodpecker_dumbs (npm) (malicious package)
- [MAL-2025-99044](https://insights.sbomify.com/MAL-2025-99044/): Malicious code in absolute_ptarmigan-biggestdev (npm) (malicious package)
- [MAL-2025-99043](https://insights.sbomify.com/MAL-2025-99043/): Malicious code in absolute_earwig_0xrequest (npm) (malicious package)
- [MAL-2025-99042](https://insights.sbomify.com/MAL-2025-99042/): Malicious code in absent_smelt_0xrequest (npm) (malicious package)
- [MAL-2025-99041](https://insights.sbomify.com/MAL-2025-99041/): Malicious code in absent_quokka_0xrequest (npm) (malicious package)
- [MAL-2025-99040](https://insights.sbomify.com/MAL-2025-99040/): Malicious code in absent_hawk_z3n (npm) (malicious package)
- [MAL-2025-9904](https://insights.sbomify.com/MAL-2025-9904/): Malicious code in @zalastax/nolb-_dani (npm) (malicious package)
- [MAL-2025-99039](https://insights.sbomify.com/MAL-2025-99039/): Malicious code in absent_crab-silentdev (npm) (malicious package)
- [MAL-2025-99038](https://insights.sbomify.com/MAL-2025-99038/): Malicious code in abrione-notthedevs (npm) (malicious package)
- [MAL-2025-99037](https://insights.sbomify.com/MAL-2025-99037/): Malicious code in above_skink_0xrequest (npm) (malicious package)
- [MAL-2025-99036](https://insights.sbomify.com/MAL-2025-99036/): Malicious code in above_angelfish_peach-86 (npm) (malicious package)
- [MAL-2025-99035](https://insights.sbomify.com/MAL-2025-99035/): Malicious code in able_unicorn_z3n (npm) (malicious package)
- [MAL-2025-99034](https://insights.sbomify.com/MAL-2025-99034/): Malicious code in able_tarsier_z3n (npm) (malicious package)
- [MAL-2025-99033](https://insights.sbomify.com/MAL-2025-99033/): Malicious code in able_quail_z3n (npm) (malicious package)
- [MAL-2025-99032](https://insights.sbomify.com/MAL-2025-99032/): Malicious code in able_harrier_0xrequest (npm) (malicious package)
- [MAL-2025-99031](https://insights.sbomify.com/MAL-2025-99031/): Malicious code in able_giraffe-strongdev (npm) (malicious package)
- [MAL-2025-99030](https://insights.sbomify.com/MAL-2025-99030/): Malicious code in able_flea-smiletea (npm) (malicious package)
- [MAL-2025-9903](https://insights.sbomify.com/MAL-2025-9903/): Malicious code in @zalastax/nolb-_danh (npm) (malicious package)
- [MAL-2025-99029](https://insights.sbomify.com/MAL-2025-99029/): Malicious code in able_crocodile-notthedevs (npm) (malicious package)
- [MAL-2025-99028](https://insights.sbomify.com/MAL-2025-99028/): Malicious code in aadvuo-devapptea (npm) (malicious package)
- [MAL-2025-99027](https://insights.sbomify.com/MAL-2025-99027/): Malicious code in @seblakkuah/seblakkuah (npm) (malicious package)
- [MAL-2025-99026](https://insights.sbomify.com/MAL-2025-99026/): Malicious code in @dokja/dokja (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/15/