# Vulnerabilities published in 2025


- [MAL-2025-138925](https://insights.sbomify.com/MAL-2025-138925/): Malicious code in parental-orange-lion (npm) (malicious package)
- [MAL-2025-138924](https://insights.sbomify.com/MAL-2025-138924/): Malicious code in pale-ivory-swift (npm) (malicious package)
- [MAL-2025-138923](https://insights.sbomify.com/MAL-2025-138923/): Malicious code in pale-apricot-hookworm (npm) (malicious package)
- [MAL-2025-138922](https://insights.sbomify.com/MAL-2025-138922/): Malicious code in painful-emerald-snipe (npm) (malicious package)
- [MAL-2025-138921](https://insights.sbomify.com/MAL-2025-138921/): Malicious code in overwhelming-lime-spider (npm) (malicious package)
- [MAL-2025-138920](https://insights.sbomify.com/MAL-2025-138920/): Malicious code in outside-blue-narwhal (npm) (malicious package)
- [MAL-2025-13892](https://insights.sbomify.com/MAL-2025-13892/): Malicious code in @zittertea/quod-quis-earum (npm) (malicious package)
- [MAL-2025-138919](https://insights.sbomify.com/MAL-2025-138919/): Malicious code in other-plum-booby (npm) (malicious package)
- [MAL-2025-138918](https://insights.sbomify.com/MAL-2025-138918/): Malicious code in otang1150 (npm) (malicious package)
- [MAL-2025-138917](https://insights.sbomify.com/MAL-2025-138917/): Malicious code in orthodox-blue-mastodon (npm) (malicious package)
- [MAL-2025-138916](https://insights.sbomify.com/MAL-2025-138916/): Malicious code in original-lavender-hoverfly (npm) (malicious package)
- [MAL-2025-138915](https://insights.sbomify.com/MAL-2025-138915/): Malicious code in opposite-sapphire-platypus (npm) (malicious package)
- [MAL-2025-138914](https://insights.sbomify.com/MAL-2025-138914/): Malicious code in opposite-brown-bobolink (npm) (malicious package)
- [MAL-2025-138913](https://insights.sbomify.com/MAL-2025-138913/): Malicious code in opposite-beige-ptarmigan (npm) (malicious package)
- [MAL-2025-138912](https://insights.sbomify.com/MAL-2025-138912/): Malicious code in open-scarlet-albatross (npm) (malicious package)
- [MAL-2025-138911](https://insights.sbomify.com/MAL-2025-138911/): Malicious code in only-tomato-slug (npm) (malicious package)
- [MAL-2025-138910](https://insights.sbomify.com/MAL-2025-138910/): Malicious code in only-blush-snipe (npm) (malicious package)
- [MAL-2025-13891](https://insights.sbomify.com/MAL-2025-13891/): Malicious code in @zittertea/quam-corrupti-neque (npm) (malicious package)
- [MAL-2025-138909](https://insights.sbomify.com/MAL-2025-138909/): Malicious code in old-bronze-bass (npm) (malicious package)
- [MAL-2025-138908](https://insights.sbomify.com/MAL-2025-138908/): Malicious code in odd-salmon-mastodon (npm) (malicious package)
- [MAL-2025-138907](https://insights.sbomify.com/MAL-2025-138907/): Malicious code in occupational-turquoise-snake (npm) (malicious package)
- [MAL-2025-138906](https://insights.sbomify.com/MAL-2025-138906/): Malicious code in occupational-amaranth-buzzard (npm) (malicious package)
- [MAL-2025-138905](https://insights.sbomify.com/MAL-2025-138905/): Malicious code in obliged-ivory-cockroach (npm) (malicious package)
- [MAL-2025-138904](https://insights.sbomify.com/MAL-2025-138904/): Malicious code in obliged-gray-donkey (npm) (malicious package)
- [MAL-2025-138903](https://insights.sbomify.com/MAL-2025-138903/): Malicious code in nutty-emerald-bison (npm) (malicious package)
- [MAL-2025-138902](https://insights.sbomify.com/MAL-2025-138902/): Malicious code in nutty-beige-rattlesnake (npm) (malicious package)
- [MAL-2025-138901](https://insights.sbomify.com/MAL-2025-138901/): Malicious code in nursing-amaranth-kiwi (npm) (malicious package)
- [MAL-2025-138900](https://insights.sbomify.com/MAL-2025-138900/): Malicious code in northern-copper-hookworm (npm) (malicious package)
- [MAL-2025-13890](https://insights.sbomify.com/MAL-2025-13890/): Malicious code in @zittertea/quae-doloremque-expedita-quas (npm) (malicious package)
- [MAL-2025-1389](https://insights.sbomify.com/MAL-2025-1389/): Malicious code in linter-coffee-variables (npm) (malicious package)
- [MAL-2025-138899](https://insights.sbomify.com/MAL-2025-138899/): Malicious code in noble-purple-flyingfish (npm) (malicious package)
- [MAL-2025-138898](https://insights.sbomify.com/MAL-2025-138898/): Malicious code in nice-silver-shrew (npm) (malicious package)
- [MAL-2025-138897](https://insights.sbomify.com/MAL-2025-138897/): Malicious code in nezzyz (npm) (malicious package)
- [MAL-2025-138896](https://insights.sbomify.com/MAL-2025-138896/): Malicious code in new-salmon-gamefowl (npm) (malicious package)
- [MAL-2025-138895](https://insights.sbomify.com/MAL-2025-138895/): Malicious code in new-azure-grouse (npm) (malicious package)
- [MAL-2025-138894](https://insights.sbomify.com/MAL-2025-138894/): Malicious code in net-salmon-stingray (npm) (malicious package)
- [MAL-2025-138893](https://insights.sbomify.com/MAL-2025-138893/): Malicious code in net-aqua-antelope (npm) (malicious package)
- [MAL-2025-138892](https://insights.sbomify.com/MAL-2025-138892/): Malicious code in negative-blue-orangutan (npm) (malicious package)
- [MAL-2025-138891](https://insights.sbomify.com/MAL-2025-138891/): Malicious code in neat-yellow-flyingfish (npm) (malicious package)
- [MAL-2025-138890](https://insights.sbomify.com/MAL-2025-138890/): Malicious code in naval-fuchsia-bovid (npm) (malicious package)
- [MAL-2025-13889](https://insights.sbomify.com/MAL-2025-13889/): Malicious code in @zittertea/praesentium-suscipit-nihil-esse (npm) (malicious package)
- [MAL-2025-138889](https://insights.sbomify.com/MAL-2025-138889/): Malicious code in naval-apricot-ox (npm) (malicious package)
- [MAL-2025-138888](https://insights.sbomify.com/MAL-2025-138888/): Malicious code in naughty-fuchsia-sailfish (npm) (malicious package)
- [MAL-2025-138887](https://insights.sbomify.com/MAL-2025-138887/): Malicious code in naughty-azure-mink (npm) (malicious package)
- [MAL-2025-138886](https://insights.sbomify.com/MAL-2025-138886/): Malicious code in nasty-orange-frog (npm) (malicious package)
- [MAL-2025-138885](https://insights.sbomify.com/MAL-2025-138885/): Malicious code in nasty-coffee-lemming (npm) (malicious package)
- [MAL-2025-138884](https://insights.sbomify.com/MAL-2025-138884/): Malicious code in mysterious-white-roundworm (npm) (malicious package)
- [MAL-2025-138883](https://insights.sbomify.com/MAL-2025-138883/): Malicious code in mutual-tomato-impala (npm) (malicious package)
- [MAL-2025-138882](https://insights.sbomify.com/MAL-2025-138882/): Malicious code in mutual-black-roundworm (npm) (malicious package)
- [MAL-2025-138881](https://insights.sbomify.com/MAL-2025-138881/): Malicious code in musical-ivory-condor (npm) (malicious package)
- [MAL-2025-138880](https://insights.sbomify.com/MAL-2025-138880/): Malicious code in moral-beige-ape (npm) (malicious package)
- [MAL-2025-13888](https://insights.sbomify.com/MAL-2025-13888/): Malicious code in @zittertea/possimus-eos-architecto (npm) (malicious package)
- [MAL-2025-138879](https://insights.sbomify.com/MAL-2025-138879/): Malicious code in monthly-crimson-whippet (npm) (malicious package)
- [MAL-2025-138878](https://insights.sbomify.com/MAL-2025-138878/): Malicious code in modern-cyan-condor (npm) (malicious package)
- [MAL-2025-138877](https://insights.sbomify.com/MAL-2025-138877/): Malicious code in misleading-red-bear (npm) (malicious package)
- [MAL-2025-138876](https://insights.sbomify.com/MAL-2025-138876/): Malicious code in minor-ivory-grasshopper (npm) (malicious package)
- [MAL-2025-138875](https://insights.sbomify.com/MAL-2025-138875/): Malicious code in minor-fuchsia-crane (npm) (malicious package)
- [MAL-2025-138874](https://insights.sbomify.com/MAL-2025-138874/): Malicious code in ministerial-bronze-mule (npm) (malicious package)
- [MAL-2025-138873](https://insights.sbomify.com/MAL-2025-138873/): Malicious code in military-moccasin-canidae (npm) (malicious package)
- [MAL-2025-138872](https://insights.sbomify.com/MAL-2025-138872/): Malicious code in middle-gold-zebra (npm) (malicious package)
- [MAL-2025-138871](https://insights.sbomify.com/MAL-2025-138871/): Malicious code in mid-beige-crow (npm) (malicious package)
- [MAL-2025-138870](https://insights.sbomify.com/MAL-2025-138870/): Malicious code in mental-coral-lemur (npm) (malicious package)
- [MAL-2025-13887](https://insights.sbomify.com/MAL-2025-13887/): Malicious code in @zittertea/pariatur-quis-doloribus-non (npm) (malicious package)
- [MAL-2025-138869](https://insights.sbomify.com/MAL-2025-138869/): Malicious code in medical-tan-koala (npm) (malicious package)
- [MAL-2025-138868](https://insights.sbomify.com/MAL-2025-138868/): Malicious code in mechanical-blue-kangaroo (npm) (malicious package)
- [MAL-2025-138867](https://insights.sbomify.com/MAL-2025-138867/): Malicious code in mechanical-amber-panther (npm) (malicious package)
- [MAL-2025-138866](https://insights.sbomify.com/MAL-2025-138866/): Malicious code in mean-salmon-canidae (npm) (malicious package)
- [MAL-2025-138865](https://insights.sbomify.com/MAL-2025-138865/): Malicious code in mean-peach-porpoise (npm) (malicious package)
- [MAL-2025-138864](https://insights.sbomify.com/MAL-2025-138864/): Malicious code in mature-tan-porcupine (npm) (malicious package)
- [MAL-2025-138863](https://insights.sbomify.com/MAL-2025-138863/): Malicious code in mature-olive-pigeon (npm) (malicious package)
- [MAL-2025-138862](https://insights.sbomify.com/MAL-2025-138862/): Malicious code in mature-magenta-impala (npm) (malicious package)
- [MAL-2025-138861](https://insights.sbomify.com/MAL-2025-138861/): Malicious code in mature-beige-turtle (npm) (malicious package)
- [MAL-2025-138860](https://insights.sbomify.com/MAL-2025-138860/): Malicious code in massive-yellow-marten (npm) (malicious package)
- [MAL-2025-13886](https://insights.sbomify.com/MAL-2025-13886/): Malicious code in @zittertea/optio-recusandae-aspernatur (npm) (malicious package)
- [MAL-2025-138859](https://insights.sbomify.com/MAL-2025-138859/): Malicious code in mass-white-rodent (npm) (malicious package)
- [MAL-2025-138858](https://insights.sbomify.com/MAL-2025-138858/): Malicious code in mass-lavender-pigeon (npm) (malicious package)
- [MAL-2025-138857](https://insights.sbomify.com/MAL-2025-138857/): Malicious code in marked-moccasin-thrush (npm) (malicious package)
- [MAL-2025-138856](https://insights.sbomify.com/MAL-2025-138856/): Malicious code in mammoth-harlequin-lungfish (npm) (malicious package)
- [MAL-2025-138855](https://insights.sbomify.com/MAL-2025-138855/): Malicious code in mammoth-brown-mink (npm) (malicious package)
- [MAL-2025-138854](https://insights.sbomify.com/MAL-2025-138854/): Malicious code in magnetic-harlequin-amphibian (npm) (malicious package)
- [MAL-2025-138853](https://insights.sbomify.com/MAL-2025-138853/): Malicious code in magnetic-cyan-parrotfish (npm) (malicious package)
- [MAL-2025-138852](https://insights.sbomify.com/MAL-2025-138852/): Malicious code in magnetic-coral-mule (npm) (malicious package)
- [MAL-2025-138851](https://insights.sbomify.com/MAL-2025-138851/): Malicious code in lucky7776329 (npm) (malicious package)
- [MAL-2025-138850](https://insights.sbomify.com/MAL-2025-138850/): Malicious code in lucky-jade-clownfish (npm) (malicious package)
- [MAL-2025-13885](https://insights.sbomify.com/MAL-2025-13885/): Malicious code in @zittertea/optio-magnam-exercitationem (npm) (malicious package)
- [MAL-2025-138849](https://insights.sbomify.com/MAL-2025-138849/): Malicious code in ltd-sapphire-cat (npm) (malicious package)
- [MAL-2025-138848](https://insights.sbomify.com/MAL-2025-138848/): Malicious code in ltd-blush-mockingbird (npm) (malicious package)
- [MAL-2025-138847](https://insights.sbomify.com/MAL-2025-138847/): Malicious code in lost-harlequin-canid (npm) (malicious package)
- [MAL-2025-138846](https://insights.sbomify.com/MAL-2025-138846/): Malicious code in loose-tan-bee (npm) (malicious package)
- [MAL-2025-138845](https://insights.sbomify.com/MAL-2025-138845/): Malicious code in long-jade-tern (npm) (malicious package)
- [MAL-2025-138844](https://insights.sbomify.com/MAL-2025-138844/): Malicious code in lonely-emerald-mongoose (npm) (malicious package)
- [MAL-2025-138843](https://insights.sbomify.com/MAL-2025-138843/): Malicious code in lonely-apricot-hare (npm) (malicious package)
- [MAL-2025-138842](https://insights.sbomify.com/MAL-2025-138842/): Malicious code in local-aqua-sloth (npm) (malicious package)
- [MAL-2025-138841](https://insights.sbomify.com/MAL-2025-138841/): Malicious code in living-amethyst-otter (npm) (malicious package)
- [MAL-2025-138840](https://insights.sbomify.com/MAL-2025-138840/): Malicious code in live-emerald-centipede (npm) (malicious package)
- [MAL-2025-13884](https://insights.sbomify.com/MAL-2025-13884/): Malicious code in @zittertea/natus-aliquam-eius-consectetur (npm) (malicious package)
- [MAL-2025-138839](https://insights.sbomify.com/MAL-2025-138839/): Malicious code in linear-sapphire-wildcat (npm) (malicious package)
- [MAL-2025-138838](https://insights.sbomify.com/MAL-2025-138838/): Malicious code in linear-blush-boar (npm) (malicious package)
- [MAL-2025-138837](https://insights.sbomify.com/MAL-2025-138837/): Malicious code in liloyst (npm) (malicious package)
- [MAL-2025-138836](https://insights.sbomify.com/MAL-2025-138836/): Malicious code in likely-brown-donkey (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1500/