# Vulnerabilities published in 2025


- [MAL-2025-138745](https://insights.sbomify.com/MAL-2025-138745/): Malicious code in funny-bronze-lizard (npm) (malicious package)
- [MAL-2025-138744](https://insights.sbomify.com/MAL-2025-138744/): Malicious code in fundamental-magenta-weasel (npm) (malicious package)
- [MAL-2025-138743](https://insights.sbomify.com/MAL-2025-138743/): Malicious code in fundamental-blush-skunk (npm) (malicious package)
- [MAL-2025-138742](https://insights.sbomify.com/MAL-2025-138742/): Malicious code in functional-white-bonobo (npm) (malicious package)
- [MAL-2025-138741](https://insights.sbomify.com/MAL-2025-138741/): Malicious code in fun-coffee-butterfly (npm) (malicious package)
- [MAL-2025-138740](https://insights.sbomify.com/MAL-2025-138740/): Malicious code in full-purple-iguana (npm) (malicious package)
- [MAL-2025-13874](https://insights.sbomify.com/MAL-2025-13874/): Malicious code in @zittertea/laboriosam-itaque-iste-aliquid (npm) (malicious package)
- [MAL-2025-138739](https://insights.sbomify.com/MAL-2025-138739/): Malicious code in full-beige-angelfish (npm) (malicious package)
- [MAL-2025-138738](https://insights.sbomify.com/MAL-2025-138738/): Malicious code in frightened-green-whippet (npm) (malicious package)
- [MAL-2025-138737](https://insights.sbomify.com/MAL-2025-138737/): Malicious code in fresh-salmon-aardwolf (npm) (malicious package)
- [MAL-2025-138736](https://insights.sbomify.com/MAL-2025-138736/): Malicious code in frequent-crimson-quokka (npm) (malicious package)
- [MAL-2025-138735](https://insights.sbomify.com/MAL-2025-138735/): Malicious code in frantic-jade-warbler (npm) (malicious package)
- [MAL-2025-138734](https://insights.sbomify.com/MAL-2025-138734/): Malicious code in frail-black-otter (npm) (malicious package)
- [MAL-2025-138733](https://insights.sbomify.com/MAL-2025-138733/): Malicious code in forward-olive-caribou (npm) (malicious package)
- [MAL-2025-138732](https://insights.sbomify.com/MAL-2025-138732/): Malicious code in fortunate-teal-hippopotamus (npm) (malicious package)
- [MAL-2025-138731](https://insights.sbomify.com/MAL-2025-138731/): Malicious code in fortunate-purple-gull (npm) (malicious package)
- [MAL-2025-138730](https://insights.sbomify.com/MAL-2025-138730/): Malicious code in formidable-maroon-dinosaur (npm) (malicious package)
- [MAL-2025-13873](https://insights.sbomify.com/MAL-2025-13873/): Malicious code in @zittertea/ipsam-possimus-repellendus (npm) (malicious package)
- [MAL-2025-138729](https://insights.sbomify.com/MAL-2025-138729/): Malicious code in foreign-apricot-cockroach (npm) (malicious package)
- [MAL-2025-138728](https://insights.sbomify.com/MAL-2025-138728/): Malicious code in fond-copper-platypus (npm) (malicious package)
- [MAL-2025-138727](https://insights.sbomify.com/MAL-2025-138727/): Malicious code in fluffy-olive-ptarmigan (npm) (malicious package)
- [MAL-2025-138726](https://insights.sbomify.com/MAL-2025-138726/): Malicious code in flexible-sapphire-spider (npm) (malicious package)
- [MAL-2025-138725](https://insights.sbomify.com/MAL-2025-138725/): Malicious code in flexible-plum-chicken (npm) (malicious package)
- [MAL-2025-138724](https://insights.sbomify.com/MAL-2025-138724/): Malicious code in flexible-blush-coyote (npm) (malicious package)
- [MAL-2025-138723](https://insights.sbomify.com/MAL-2025-138723/): Malicious code in flat-blush-loon (npm) (malicious package)
- [MAL-2025-138722](https://insights.sbomify.com/MAL-2025-138722/): Malicious code in flaky-pink-gerbil (npm) (malicious package)
- [MAL-2025-138721](https://insights.sbomify.com/MAL-2025-138721/): Malicious code in fiscal-amaranth-aphid (npm) (malicious package)
- [MAL-2025-138720](https://insights.sbomify.com/MAL-2025-138720/): Malicious code in fierce-black-hawk (npm) (malicious package)
- [MAL-2025-13872](https://insights.sbomify.com/MAL-2025-13872/): Malicious code in @zittertea/in-perferendis-voluptatum (npm) (malicious package)
- [MAL-2025-138719](https://insights.sbomify.com/MAL-2025-138719/): Malicious code in favourite-olive-kiwi (npm) (malicious package)
- [MAL-2025-138718](https://insights.sbomify.com/MAL-2025-138718/): Malicious code in fashionable-blush-gazelle (npm) (malicious package)
- [MAL-2025-138717](https://insights.sbomify.com/MAL-2025-138717/): Malicious code in fascinating-coral-marlin (npm) (malicious package)
- [MAL-2025-138716](https://insights.sbomify.com/MAL-2025-138716/): Malicious code in far-pink-anglerfish (npm) (malicious package)
- [MAL-2025-138715](https://insights.sbomify.com/MAL-2025-138715/): Malicious code in fantastic-crimson-dolphin (npm) (malicious package)
- [MAL-2025-138714](https://insights.sbomify.com/MAL-2025-138714/): Malicious code in fantastic-copper-heron (npm) (malicious package)
- [MAL-2025-138713](https://insights.sbomify.com/MAL-2025-138713/): Malicious code in fandyx (npm) (malicious package)
- [MAL-2025-138712](https://insights.sbomify.com/MAL-2025-138712/): Malicious code in famous-scarlet-dog (npm) (malicious package)
- [MAL-2025-138711](https://insights.sbomify.com/MAL-2025-138711/): Malicious code in famous-beige-tern (npm) (malicious package)
- [MAL-2025-138710](https://insights.sbomify.com/MAL-2025-138710/): Malicious code in faithful-jade-amphibian (npm) (malicious package)
- [MAL-2025-13871](https://insights.sbomify.com/MAL-2025-13871/): Malicious code in @zittertea/id-possimus-ipsa-veritatis (npm) (malicious package)
- [MAL-2025-138709](https://insights.sbomify.com/MAL-2025-138709/): Malicious code in exuberant-peach-boar (npm) (malicious package)
- [MAL-2025-138708](https://insights.sbomify.com/MAL-2025-138708/): Malicious code in exuberant-moccasin-cat (npm) (malicious package)
- [MAL-2025-138707](https://insights.sbomify.com/MAL-2025-138707/): Malicious code in exuberant-green-hyena (npm) (malicious package)
- [MAL-2025-138706](https://insights.sbomify.com/MAL-2025-138706/): Malicious code in experimental-brown-bass (npm) (malicious package)
- [MAL-2025-138705](https://insights.sbomify.com/MAL-2025-138705/): Malicious code in expensive-sapphire-marsupial (npm) (malicious package)
- [MAL-2025-138704](https://insights.sbomify.com/MAL-2025-138704/): Malicious code in expected-amaranth-cattle (npm) (malicious package)
- [MAL-2025-138703](https://insights.sbomify.com/MAL-2025-138703/): Malicious code in existing-cyan-bobcat (npm) (malicious package)
- [MAL-2025-138702](https://insights.sbomify.com/MAL-2025-138702/): Malicious code in exclusive-amaranth-leopard (npm) (malicious package)
- [MAL-2025-138701](https://insights.sbomify.com/MAL-2025-138701/): Malicious code in excited-beige-marmoset (npm) (malicious package)
- [MAL-2025-138700](https://insights.sbomify.com/MAL-2025-138700/): Malicious code in exceptional-black-krill (npm) (malicious package)
- [MAL-2025-13870](https://insights.sbomify.com/MAL-2025-13870/): Malicious code in @zittertea/expedita-ullam-modi (npm) (malicious package)
- [MAL-2025-1387](https://insights.sbomify.com/MAL-2025-1387/): Malicious code in tesdf45454t (npm) (malicious package)
- [MAL-2025-138699](https://insights.sbomify.com/MAL-2025-138699/): Malicious code in exact-salmon-minnow (npm) (malicious package)
- [MAL-2025-138698](https://insights.sbomify.com/MAL-2025-138698/): Malicious code in evolutionary-teal-leopon (npm) (malicious package)
- [MAL-2025-138697](https://insights.sbomify.com/MAL-2025-138697/): Malicious code in evolutionary-beige-owl (npm) (malicious package)
- [MAL-2025-138696](https://insights.sbomify.com/MAL-2025-138696/): Malicious code in evolutionary-amber-rhinoceros (npm) (malicious package)
- [MAL-2025-138695](https://insights.sbomify.com/MAL-2025-138695/): Malicious code in evil-gold-yak (npm) (malicious package)
- [MAL-2025-138694](https://insights.sbomify.com/MAL-2025-138694/): Malicious code in eventual-harlequin-horse (npm) (malicious package)
- [MAL-2025-138693](https://insights.sbomify.com/MAL-2025-138693/): Malicious code in ethnic-magenta-prawn (npm) (malicious package)
- [MAL-2025-138692](https://insights.sbomify.com/MAL-2025-138692/): Malicious code in ethical-amaranth-hawk (npm) (malicious package)
- [MAL-2025-138691](https://insights.sbomify.com/MAL-2025-138691/): Malicious code in equal-scarlet-owl (npm) (malicious package)
- [MAL-2025-138690](https://insights.sbomify.com/MAL-2025-138690/): Malicious code in energetic-red-porcupine (npm) (malicious package)
- [MAL-2025-13869](https://insights.sbomify.com/MAL-2025-13869/): Malicious code in @zittertea/excepturi-laboriosam-vitae-atque (npm) (malicious package)
- [MAL-2025-138689](https://insights.sbomify.com/MAL-2025-138689/): Malicious code in endless-indigo-marmoset (npm) (malicious package)
- [MAL-2025-138688](https://insights.sbomify.com/MAL-2025-138688/): Malicious code in enchanting-amber-vulture (npm) (malicious package)
- [MAL-2025-138687](https://insights.sbomify.com/MAL-2025-138687/): Malicious code in empirical-amaranth-scorpion (npm) (malicious package)
- [MAL-2025-138686](https://insights.sbomify.com/MAL-2025-138686/): Malicious code in electronic-indigo-fish (npm) (malicious package)
- [MAL-2025-138685](https://insights.sbomify.com/MAL-2025-138685/): Malicious code in electrical-orange-duck (npm) (malicious package)
- [MAL-2025-138684](https://insights.sbomify.com/MAL-2025-138684/): Malicious code in electric-apricot-dormouse (npm) (malicious package)
- [MAL-2025-138683](https://insights.sbomify.com/MAL-2025-138683/): Malicious code in elderly-gray-spoonbill (npm) (malicious package)
- [MAL-2025-138682](https://insights.sbomify.com/MAL-2025-138682/): Malicious code in elated-gray-marten (npm) (malicious package)
- [MAL-2025-138681](https://insights.sbomify.com/MAL-2025-138681/): Malicious code in efficient-brown-quail (npm) (malicious package)
- [MAL-2025-138680](https://insights.sbomify.com/MAL-2025-138680/): Malicious code in effective-rose-catshark (npm) (malicious package)
- [MAL-2025-13868](https://insights.sbomify.com/MAL-2025-13868/): Malicious code in @zittertea/ex-blanditiis-dolore (npm) (malicious package)
- [MAL-2025-138679](https://insights.sbomify.com/MAL-2025-138679/): Malicious code in eerie-cyan-koala (npm) (malicious package)
- [MAL-2025-138678](https://insights.sbomify.com/MAL-2025-138678/): Malicious code in eastern-bronze-lion (npm) (malicious package)
- [MAL-2025-138677](https://insights.sbomify.com/MAL-2025-138677/): Malicious code in eastern-amaranth-eel (npm) (malicious package)
- [MAL-2025-138676](https://insights.sbomify.com/MAL-2025-138676/): Malicious code in eager-maroon-sturgeon (npm) (malicious package)
- [MAL-2025-138675](https://insights.sbomify.com/MAL-2025-138675/): Malicious code in dynamic-turquoise-bobolink (npm) (malicious package)
- [MAL-2025-138674](https://insights.sbomify.com/MAL-2025-138674/): Malicious code in dying-fuchsia-scorpion (npm) (malicious package)
- [MAL-2025-138673](https://insights.sbomify.com/MAL-2025-138673/): Malicious code in dutch-fuchsia-kangaroo (npm) (malicious package)
- [MAL-2025-138672](https://insights.sbomify.com/MAL-2025-138672/): Malicious code in dusty-harlequin-stork (npm) (malicious package)
- [MAL-2025-138671](https://insights.sbomify.com/MAL-2025-138671/): Malicious code in due-jade-dinosaur (npm) (malicious package)
- [MAL-2025-138670](https://insights.sbomify.com/MAL-2025-138670/): Malicious code in dry-indigo-sole (npm) (malicious package)
- [MAL-2025-13867](https://insights.sbomify.com/MAL-2025-13867/): Malicious code in @zittertea/ex-autem-sequi (npm) (malicious package)
- [MAL-2025-138669](https://insights.sbomify.com/MAL-2025-138669/): Malicious code in dry-chocolate-parakeet (npm) (malicious package)
- [MAL-2025-138668](https://insights.sbomify.com/MAL-2025-138668/): Malicious code in drunk-tan-cicada (npm) (malicious package)
- [MAL-2025-138667](https://insights.sbomify.com/MAL-2025-138667/): Malicious code in driving-magenta-wasp (npm) (malicious package)
- [MAL-2025-138666](https://insights.sbomify.com/MAL-2025-138666/): Malicious code in dramatic-red-primate (npm) (malicious package)
- [MAL-2025-138665](https://insights.sbomify.com/MAL-2025-138665/): Malicious code in dramatic-amber-blackbird (npm) (malicious package)
- [MAL-2025-138664](https://insights.sbomify.com/MAL-2025-138664/): Malicious code in dominant-plum-bedbug (npm) (malicious package)
- [MAL-2025-138663](https://insights.sbomify.com/MAL-2025-138663/): Malicious code in diverse-tomato-piranha (npm) (malicious package)
- [MAL-2025-138662](https://insights.sbomify.com/MAL-2025-138662/): Malicious code in diverse-harlequin-gayal (npm) (malicious package)
- [MAL-2025-138661](https://insights.sbomify.com/MAL-2025-138661/): Malicious code in distant-fuchsia-toad (npm) (malicious package)
- [MAL-2025-138660](https://insights.sbomify.com/MAL-2025-138660/): Malicious code in disabled-apricot-dragon (npm) (malicious package)
- [MAL-2025-13866](https://insights.sbomify.com/MAL-2025-13866/): Malicious code in @zittertea/eveniet-optio-incidunt (npm) (malicious package)
- [MAL-2025-138659](https://insights.sbomify.com/MAL-2025-138659/): Malicious code in dirty-crimson-mammal (npm) (malicious package)
- [MAL-2025-138658](https://insights.sbomify.com/MAL-2025-138658/): Malicious code in difficult-orange-dove (npm) (malicious package)
- [MAL-2025-138657](https://insights.sbomify.com/MAL-2025-138657/): Malicious code in difficult-ivory-dingo (npm) (malicious package)
- [MAL-2025-138656](https://insights.sbomify.com/MAL-2025-138656/): Malicious code in different-lime-muskox (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1502/