# Vulnerabilities published in 2025 - [MAL-2025-138835](https://insights.sbomify.com/MAL-2025-138835/): Malicious code in light-amber-eel (npm) (malicious package) - [MAL-2025-138834](https://insights.sbomify.com/MAL-2025-138834/): Malicious code in liberal-maroon-wasp (npm) (malicious package) - [MAL-2025-138833](https://insights.sbomify.com/MAL-2025-138833/): Malicious code in level-lavender-hare (npm) (malicious package) - [MAL-2025-138832](https://insights.sbomify.com/MAL-2025-138832/): Malicious code in lengthy-tan-salamander (npm) (malicious package) - [MAL-2025-138831](https://insights.sbomify.com/MAL-2025-138831/): Malicious code in legitimate-sapphire-snipe (npm) (malicious package) - [MAL-2025-138830](https://insights.sbomify.com/MAL-2025-138830/): Malicious code in legitimate-magenta-mole (npm) (malicious package) - [MAL-2025-13883](https://insights.sbomify.com/MAL-2025-13883/): Malicious code in @zittertea/nam-autem-ea (npm) (malicious package) - [MAL-2025-138829](https://insights.sbomify.com/MAL-2025-138829/): Malicious code in legal-plum-goldfish (npm) (malicious package) - [MAL-2025-138828](https://insights.sbomify.com/MAL-2025-138828/): Malicious code in late-white-whale (npm) (malicious package) - [MAL-2025-138827](https://insights.sbomify.com/MAL-2025-138827/): Malicious code in large-coffee-kingfisher (npm) (malicious package) - [MAL-2025-138826](https://insights.sbomify.com/MAL-2025-138826/): Malicious code in known-green-loon (npm) (malicious package) - [MAL-2025-138825](https://insights.sbomify.com/MAL-2025-138825/): Malicious code in key-salmon-chameleon (npm) (malicious package) - [MAL-2025-138824](https://insights.sbomify.com/MAL-2025-138824/): Malicious code in keen-olive-jackal (npm) (malicious package) - [MAL-2025-138823](https://insights.sbomify.com/MAL-2025-138823/): Malicious code in keen-bronze-rhinoceros (npm) (malicious package) - [MAL-2025-138822](https://insights.sbomify.com/MAL-2025-138822/): Malicious code in just-tomato-swan (npm) (malicious package) - [MAL-2025-138821](https://insights.sbomify.com/MAL-2025-138821/): Malicious code in junior-azure-lemur (npm) (malicious package) - [MAL-2025-138820](https://insights.sbomify.com/MAL-2025-138820/): Malicious code in juicy-silver-ferret (npm) (malicious package) - [MAL-2025-13882](https://insights.sbomify.com/MAL-2025-13882/): Malicious code in @zittertea/nam-accusamus-magnam-nisi (npm) (malicious package) - [MAL-2025-138819](https://insights.sbomify.com/MAL-2025-138819/): Malicious code in juicy-peach-termite (npm) (malicious package) - [MAL-2025-138818](https://insights.sbomify.com/MAL-2025-138818/): Malicious code in juicy-aquamarine-sloth (npm) (malicious package) - [MAL-2025-138817](https://insights.sbomify.com/MAL-2025-138817/): Malicious code in jittery-emerald-albatross (npm) (malicious package) - [MAL-2025-138816](https://insights.sbomify.com/MAL-2025-138816/): Malicious code in isolated-silver-ape (npm) (malicious package) - [MAL-2025-138815](https://insights.sbomify.com/MAL-2025-138815/): Malicious code in involved-amethyst-pigeon (npm) (malicious package) - [MAL-2025-138814](https://insights.sbomify.com/MAL-2025-138814/): Malicious code in international-copper-lion (npm) (malicious package) - [MAL-2025-138813](https://insights.sbomify.com/MAL-2025-138813/): Malicious code in international-amaranth-booby (npm) (malicious package) - [MAL-2025-138812](https://insights.sbomify.com/MAL-2025-138812/): Malicious code in interim-ivory-trout (npm) (malicious package) - [MAL-2025-138811](https://insights.sbomify.com/MAL-2025-138811/): Malicious code in interesting-tan-roadrunner (npm) (malicious package) - [MAL-2025-138810](https://insights.sbomify.com/MAL-2025-138810/): Malicious code in interesting-jade-parrot (npm) (malicious package) - [MAL-2025-13881](https://insights.sbomify.com/MAL-2025-13881/): Malicious code in @zittertea/molestias-vitae-ex-accusantium (npm) (malicious package) - [MAL-2025-138809](https://insights.sbomify.com/MAL-2025-138809/): Malicious code in intensive-blush-iguana (npm) (malicious package) - [MAL-2025-138808](https://insights.sbomify.com/MAL-2025-138808/): Malicious code in intense-turquoise-pike (npm) (malicious package) - [MAL-2025-138807](https://insights.sbomify.com/MAL-2025-138807/): Malicious code in intense-teal-wasp (npm) (malicious package) - [MAL-2025-138806](https://insights.sbomify.com/MAL-2025-138806/): Malicious code in insufficient-plum-quail (npm) (malicious package) - [MAL-2025-138805](https://insights.sbomify.com/MAL-2025-138805/): Malicious code in institutional-violet-wren (npm) (malicious package) - [MAL-2025-138804](https://insights.sbomify.com/MAL-2025-138804/): Malicious code in innovative-lavender-roadrunner (npm) (malicious package) - [MAL-2025-138803](https://insights.sbomify.com/MAL-2025-138803/): Malicious code in inland-apricot-puma (npm) (malicious package) - [MAL-2025-138802](https://insights.sbomify.com/MAL-2025-138802/): Malicious code in injured-tomato-heron (npm) (malicious package) - [MAL-2025-138801](https://insights.sbomify.com/MAL-2025-138801/): Malicious code in influential-teal-cricket (npm) (malicious package) - [MAL-2025-138800](https://insights.sbomify.com/MAL-2025-138800/): Malicious code in influential-gold-owl (npm) (malicious package) - [MAL-2025-13880](https://insights.sbomify.com/MAL-2025-13880/): Malicious code in @zittertea/minus-nisi-molestias-ipsa (npm) (malicious package) - [MAL-2025-1388](https://insights.sbomify.com/MAL-2025-1388/): Malicious code in zmcrypty (npm) (malicious package) - [MAL-2025-138799](https://insights.sbomify.com/MAL-2025-138799/): Malicious code in incredible-cyan-jellyfish (npm) (malicious package) - [MAL-2025-138798](https://insights.sbomify.com/MAL-2025-138798/): Malicious code in increasing-salmon-wolf (npm) (malicious package) - [MAL-2025-138797](https://insights.sbomify.com/MAL-2025-138797/): Malicious code in increasing-beige-mongoose (npm) (malicious package) - [MAL-2025-138796](https://insights.sbomify.com/MAL-2025-138796/): Malicious code in inclined-black-shrew (npm) (malicious package) - [MAL-2025-138795](https://insights.sbomify.com/MAL-2025-138795/): Malicious code in inc-tomato-hoverfly (npm) (malicious package) - [MAL-2025-138794](https://insights.sbomify.com/MAL-2025-138794/): Malicious code in inc-aquamarine-egret (npm) (malicious package) - [MAL-2025-138793](https://insights.sbomify.com/MAL-2025-138793/): Malicious code in impossible-aquamarine-cattle (npm) (malicious package) - [MAL-2025-138792](https://insights.sbomify.com/MAL-2025-138792/): Malicious code in immense-olive-octopus (npm) (malicious package) - [MAL-2025-138791](https://insights.sbomify.com/MAL-2025-138791/): Malicious code in illegal-amber-aardwolf (npm) (malicious package) - [MAL-2025-138790](https://insights.sbomify.com/MAL-2025-138790/): Malicious code in ill-chocolate-llama (npm) (malicious package) - [MAL-2025-13879](https://insights.sbomify.com/MAL-2025-13879/): Malicious code in @zittertea/minima-nisi-placeat-cupiditate (npm) (malicious package) - [MAL-2025-138789](https://insights.sbomify.com/MAL-2025-138789/): Malicious code in identical-ivory-wolverine (npm) (malicious package) - [MAL-2025-138788](https://insights.sbomify.com/MAL-2025-138788/): Malicious code in identical-ivory-peafowl (npm) (malicious package) - [MAL-2025-138787](https://insights.sbomify.com/MAL-2025-138787/): Malicious code in icy-lavender-hoverfly (npm) (malicious package) - [MAL-2025-138786](https://insights.sbomify.com/MAL-2025-138786/): Malicious code in husky-ivory-flyingfish (npm) (malicious package) - [MAL-2025-138785](https://insights.sbomify.com/MAL-2025-138785/): Malicious code in hurt-teal-boar (npm) (malicious package) - [MAL-2025-138784](https://insights.sbomify.com/MAL-2025-138784/): Malicious code in horrible-sapphire-pelican (npm) (malicious package) - [MAL-2025-138783](https://insights.sbomify.com/MAL-2025-138783/): Malicious code in horrible-moccasin-cod (npm) (malicious package) - [MAL-2025-138782](https://insights.sbomify.com/MAL-2025-138782/): Malicious code in honest-turquoise-elk (npm) (malicious package) - [MAL-2025-138781](https://insights.sbomify.com/MAL-2025-138781/): Malicious code in honest-salmon-tiger (npm) (malicious package) - [MAL-2025-138780](https://insights.sbomify.com/MAL-2025-138780/): Malicious code in homeless-ivory-leopon (npm) (malicious package) - [MAL-2025-13878](https://insights.sbomify.com/MAL-2025-13878/): Malicious code in @zittertea/minima-distinctio-occaecati-dolorum (npm) (malicious package) - [MAL-2025-138779](https://insights.sbomify.com/MAL-2025-138779/): Malicious code in holy-orange-lynx (npm) (malicious package) - [MAL-2025-138778](https://insights.sbomify.com/MAL-2025-138778/): Malicious code in holy-jade-silverfish (npm) (malicious package) - [MAL-2025-138777](https://insights.sbomify.com/MAL-2025-138777/): Malicious code in holy-aqua-antelope (npm) (malicious package) - [MAL-2025-138776](https://insights.sbomify.com/MAL-2025-138776/): Malicious code in historical-yellow-walrus (npm) (malicious package) - [MAL-2025-138775](https://insights.sbomify.com/MAL-2025-138775/): Malicious code in historical-coffee-quelea (npm) (malicious package) - [MAL-2025-138774](https://insights.sbomify.com/MAL-2025-138774/): Malicious code in hissing-silver-gull (npm) (malicious package) - [MAL-2025-138773](https://insights.sbomify.com/MAL-2025-138773/): Malicious code in hissing-moccasin-octopus (npm) (malicious package) - [MAL-2025-138772](https://insights.sbomify.com/MAL-2025-138772/): Malicious code in heroisme (npm) (malicious package) - [MAL-2025-138771](https://insights.sbomify.com/MAL-2025-138771/): Malicious code in helpful-indigo-goose (npm) (malicious package) - [MAL-2025-138770](https://insights.sbomify.com/MAL-2025-138770/): Malicious code in heavy-magenta-snail (npm) (malicious package) - [MAL-2025-13877](https://insights.sbomify.com/MAL-2025-13877/): Malicious code in @zittertea/maiores-quis-repellat (npm) (malicious package) - [MAL-2025-138769](https://insights.sbomify.com/MAL-2025-138769/): Malicious code in hard-emerald-cardinal (npm) (malicious package) - [MAL-2025-138768](https://insights.sbomify.com/MAL-2025-138768/): Malicious code in haneulr (npm) (malicious package) - [MAL-2025-138767](https://insights.sbomify.com/MAL-2025-138767/): Malicious code in handicapped-lime-locust (npm) (malicious package) - [MAL-2025-138766](https://insights.sbomify.com/MAL-2025-138766/): Malicious code in handicapped-crimson-goldfish (npm) (malicious package) - [MAL-2025-138765](https://insights.sbomify.com/MAL-2025-138765/): Malicious code in grubby-cyan-prawn (npm) (malicious package) - [MAL-2025-138764](https://insights.sbomify.com/MAL-2025-138764/): Malicious code in growing-silver-possum (npm) (malicious package) - [MAL-2025-138763](https://insights.sbomify.com/MAL-2025-138763/): Malicious code in grotesque-orange-junglefowl (npm) (malicious package) - [MAL-2025-138762](https://insights.sbomify.com/MAL-2025-138762/): Malicious code in grotesque-maroon-dove (npm) (malicious package) - [MAL-2025-138761](https://insights.sbomify.com/MAL-2025-138761/): Malicious code in great-cyan-koi (npm) (malicious package) - [MAL-2025-138760](https://insights.sbomify.com/MAL-2025-138760/): Malicious code in grateful-purple-monkey (npm) (malicious package) - [MAL-2025-13876](https://insights.sbomify.com/MAL-2025-13876/): Malicious code in @zittertea/libero-error-ex-enim (npm) (malicious package) - [MAL-2025-138759](https://insights.sbomify.com/MAL-2025-138759/): Malicious code in grateful-aquamarine-dog (npm) (malicious package) - [MAL-2025-138758](https://insights.sbomify.com/MAL-2025-138758/): Malicious code in graceful-olive-panda (npm) (malicious package) - [MAL-2025-138757](https://insights.sbomify.com/MAL-2025-138757/): Malicious code in gothic-plum-toucan (npm) (malicious package) - [MAL-2025-138756](https://insights.sbomify.com/MAL-2025-138756/): Malicious code in gorgeous-plum-ant (npm) (malicious package) - [MAL-2025-138755](https://insights.sbomify.com/MAL-2025-138755/): Malicious code in glorious-pink-hyena (npm) (malicious package) - [MAL-2025-138754](https://insights.sbomify.com/MAL-2025-138754/): Malicious code in gleaming-chocolate-cat (npm) (malicious package) - [MAL-2025-138753](https://insights.sbomify.com/MAL-2025-138753/): Malicious code in gleaming-blush-lobster (npm) (malicious package) - [MAL-2025-138752](https://insights.sbomify.com/MAL-2025-138752/): Malicious code in gleaming-amber-takin (npm) (malicious package) - [MAL-2025-138751](https://insights.sbomify.com/MAL-2025-138751/): Malicious code in glamorous-chocolate-blackbird (npm) (malicious package) - [MAL-2025-138750](https://insights.sbomify.com/MAL-2025-138750/): Malicious code in gentle-white-armadillo (npm) (malicious package) - [MAL-2025-13875](https://insights.sbomify.com/MAL-2025-13875/): Malicious code in @zittertea/laboriosam-maxime-deserunt-quo (npm) (malicious package) - [MAL-2025-138749](https://insights.sbomify.com/MAL-2025-138749/): Malicious code in genetic-red-earthworm (npm) (malicious package) - [MAL-2025-138748](https://insights.sbomify.com/MAL-2025-138748/): Malicious code in genetic-aqua-penguin (npm) (malicious package) - [MAL-2025-138747](https://insights.sbomify.com/MAL-2025-138747/): Malicious code in gay-gold-damselfly (npm) (malicious package) - [MAL-2025-138746](https://insights.sbomify.com/MAL-2025-138746/): Malicious code in furious-coffee-weasel (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1501/