# Vulnerabilities published in 2025


- [MAL-2025-138655](https://insights.sbomify.com/MAL-2025-138655/): Malicious code in devoted-red-raccoon (npm) (malicious package)
- [MAL-2025-138654](https://insights.sbomify.com/MAL-2025-138654/): Malicious code in determined-aqua-mackerel (npm) (malicious package)
- [MAL-2025-138653](https://insights.sbomify.com/MAL-2025-138653/): Malicious code in desperate-indigo-cephalopod (npm) (malicious package)
- [MAL-2025-138652](https://insights.sbomify.com/MAL-2025-138652/): Malicious code in depressed-ivory-albatross (npm) (malicious package)
- [MAL-2025-138651](https://insights.sbomify.com/MAL-2025-138651/): Malicious code in delighted-ivory-rooster (npm) (malicious package)
- [MAL-2025-138650](https://insights.sbomify.com/MAL-2025-138650/): Malicious code in delicious-lavender-snail (npm) (malicious package)
- [MAL-2025-13865](https://insights.sbomify.com/MAL-2025-13865/): Malicious code in @zittertea/earum-consectetur-quos-architecto (npm) (malicious package)
- [MAL-2025-138649](https://insights.sbomify.com/MAL-2025-138649/): Malicious code in delicious-bronze-reindeer (npm) (malicious package)
- [MAL-2025-138648](https://insights.sbomify.com/MAL-2025-138648/): Malicious code in defeated-lavender-rat (npm) (malicious package)
- [MAL-2025-138647](https://insights.sbomify.com/MAL-2025-138647/): Malicious code in dead-beige-heron (npm) (malicious package)
- [MAL-2025-138646](https://insights.sbomify.com/MAL-2025-138646/): Malicious code in damaged-salmon-angelfish (npm) (malicious package)
- [MAL-2025-138645](https://insights.sbomify.com/MAL-2025-138645/): Malicious code in damaged-rose-hedgehog (npm) (malicious package)
- [MAL-2025-138644](https://insights.sbomify.com/MAL-2025-138644/): Malicious code in damaged-emerald-hookworm (npm) (malicious package)
- [MAL-2025-138643](https://insights.sbomify.com/MAL-2025-138643/): Malicious code in curved-rose-limpet (npm) (malicious package)
- [MAL-2025-138642](https://insights.sbomify.com/MAL-2025-138642/): Malicious code in curved-orange-thrush (npm) (malicious package)
- [MAL-2025-138641](https://insights.sbomify.com/MAL-2025-138641/): Malicious code in cuddly-salmon-jellyfish (npm) (malicious package)
- [MAL-2025-138640](https://insights.sbomify.com/MAL-2025-138640/): Malicious code in crowded-coral-ptarmigan (npm) (malicious package)
- [MAL-2025-13864](https://insights.sbomify.com/MAL-2025-13864/): Malicious code in @zittertea/ducimus-exercitationem-autem (npm) (malicious package)
- [MAL-2025-138639](https://insights.sbomify.com/MAL-2025-138639/): Malicious code in creepy-copper-leopard (npm) (malicious package)
- [MAL-2025-138638](https://insights.sbomify.com/MAL-2025-138638/): Malicious code in costly-copper-python (npm) (malicious package)
- [MAL-2025-138637](https://insights.sbomify.com/MAL-2025-138637/): Malicious code in costly-aqua-whale (npm) (malicious package)
- [MAL-2025-138636](https://insights.sbomify.com/MAL-2025-138636/): Malicious code in cool-black-bird (npm) (malicious package)
- [MAL-2025-138635](https://insights.sbomify.com/MAL-2025-138635/): Malicious code in cooing-gray-eagle (npm) (malicious package)
- [MAL-2025-138634](https://insights.sbomify.com/MAL-2025-138634/): Malicious code in conventional-magenta-bug (npm) (malicious package)
- [MAL-2025-138633](https://insights.sbomify.com/MAL-2025-138633/): Malicious code in continuing-indigo-coral (npm) (malicious package)
- [MAL-2025-138632](https://insights.sbomify.com/MAL-2025-138632/): Malicious code in confused-sapphire-scorpion (npm) (malicious package)
- [MAL-2025-138631](https://insights.sbomify.com/MAL-2025-138631/): Malicious code in confidential-brown-monkey (npm) (malicious package)
- [MAL-2025-138630](https://insights.sbomify.com/MAL-2025-138630/): Malicious code in confident-tomato-urial (npm) (malicious package)
- [MAL-2025-13863](https://insights.sbomify.com/MAL-2025-13863/): Malicious code in @zittertea/dolores-sequi-recusandae (npm) (malicious package)
- [MAL-2025-138629](https://insights.sbomify.com/MAL-2025-138629/): Malicious code in confident-ivory-marten (npm) (malicious package)
- [MAL-2025-138628](https://insights.sbomify.com/MAL-2025-138628/): Malicious code in concerned-purple-slug (npm) (malicious package)
- [MAL-2025-138627](https://insights.sbomify.com/MAL-2025-138627/): Malicious code in comprehensive-scarlet-bear (npm) (malicious package)
- [MAL-2025-138626](https://insights.sbomify.com/MAL-2025-138626/): Malicious code in complicated-scarlet-bedbug (npm) (malicious package)
- [MAL-2025-138625](https://insights.sbomify.com/MAL-2025-138625/): Malicious code in compact-gold-mongoose (npm) (malicious package)
- [MAL-2025-138624](https://insights.sbomify.com/MAL-2025-138624/): Malicious code in communist-purple-fish (npm) (malicious package)
- [MAL-2025-138623](https://insights.sbomify.com/MAL-2025-138623/): Malicious code in common-coffee-loon (npm) (malicious package)
- [MAL-2025-138622](https://insights.sbomify.com/MAL-2025-138622/): Malicious code in combative-crimson-deer (npm) (malicious package)
- [MAL-2025-138621](https://insights.sbomify.com/MAL-2025-138621/): Malicious code in colourful-violet-mosquito (npm) (malicious package)
- [MAL-2025-138620](https://insights.sbomify.com/MAL-2025-138620/): Malicious code in colourful-lime-basilisk (npm) (malicious package)
- [MAL-2025-13862](https://insights.sbomify.com/MAL-2025-13862/): Malicious code in @zittertea/dolorem-enim-soluta-animi (npm) (malicious package)
- [MAL-2025-138619](https://insights.sbomify.com/MAL-2025-138619/): Malicious code in colonial-lavender-cougar (npm) (malicious package)
- [MAL-2025-138618](https://insights.sbomify.com/MAL-2025-138618/): Malicious code in cold-azure-thrush (npm) (malicious package)
- [MAL-2025-138617](https://insights.sbomify.com/MAL-2025-138617/): Malicious code in coherent-plum-mule (npm) (malicious package)
- [MAL-2025-138616](https://insights.sbomify.com/MAL-2025-138616/): Malicious code in cognitive-white-marmot (npm) (malicious package)
- [MAL-2025-138615](https://insights.sbomify.com/MAL-2025-138615/): Malicious code in coastal-magenta-krill (npm) (malicious package)
- [MAL-2025-138614](https://insights.sbomify.com/MAL-2025-138614/): Malicious code in clumsy-silver-reptile (npm) (malicious package)
- [MAL-2025-138613](https://insights.sbomify.com/MAL-2025-138613/): Malicious code in clumsy-coffee-roadrunner (npm) (malicious package)
- [MAL-2025-138612](https://insights.sbomify.com/MAL-2025-138612/): Malicious code in clever-gold-hare (npm) (malicious package)
- [MAL-2025-138611](https://insights.sbomify.com/MAL-2025-138611/): Malicious code in clean-brown-shark (npm) (malicious package)
- [MAL-2025-138610](https://insights.sbomify.com/MAL-2025-138610/): Malicious code in chubby-crimson-chimpanzee (npm) (malicious package)
- [MAL-2025-13861](https://insights.sbomify.com/MAL-2025-13861/): Malicious code in @zittertea/distinctio-amet-deleniti-quo (npm) (malicious package)
- [MAL-2025-138609](https://insights.sbomify.com/MAL-2025-138609/): Malicious code in chronic-coral-condor (npm) (malicious package)
- [MAL-2025-138608](https://insights.sbomify.com/MAL-2025-138608/): Malicious code in chemical-yellow-gazelle (npm) (malicious package)
- [MAL-2025-138607](https://insights.sbomify.com/MAL-2025-138607/): Malicious code in cheap-lavender-newt (npm) (malicious package)
- [MAL-2025-138606](https://insights.sbomify.com/MAL-2025-138606/): Malicious code in cheap-indigo-sawfish (npm) (malicious package)
- [MAL-2025-138605](https://insights.sbomify.com/MAL-2025-138605/): Malicious code in cheap-cyan-clam (npm) (malicious package)
- [MAL-2025-138604](https://insights.sbomify.com/MAL-2025-138604/): Malicious code in central-black-swan (npm) (malicious package)
- [MAL-2025-138603](https://insights.sbomify.com/MAL-2025-138603/): Malicious code in capitalist-amber-crab (npm) (malicious package)
- [MAL-2025-138602](https://insights.sbomify.com/MAL-2025-138602/): Malicious code in bumpy-azure-hawk (npm) (malicious package)
- [MAL-2025-138601](https://insights.sbomify.com/MAL-2025-138601/): Malicious code in brilliant-magenta-smelt (npm) (malicious package)
- [MAL-2025-138600](https://insights.sbomify.com/MAL-2025-138600/): Malicious code in brilliant-indigo-opossum (npm) (malicious package)
- [MAL-2025-13860](https://insights.sbomify.com/MAL-2025-13860/): Malicious code in @zittertea/dignissimos-harum-sint-alias (npm) (malicious package)
- [MAL-2025-1386](https://insights.sbomify.com/MAL-2025-1386/): Malicious code in keycloak-theme (npm) (malicious package)
- [MAL-2025-138599](https://insights.sbomify.com/MAL-2025-138599/): Malicious code in brilliant-cyan-aardwolf (npm) (malicious package)
- [MAL-2025-138598](https://insights.sbomify.com/MAL-2025-138598/): Malicious code in bright-yellow-ermine (npm) (malicious package)
- [MAL-2025-138597](https://insights.sbomify.com/MAL-2025-138597/): Malicious code in brave-brown-bovid (npm) (malicious package)
- [MAL-2025-138596](https://insights.sbomify.com/MAL-2025-138596/): Malicious code in bored-plum-lark (npm) (malicious package)
- [MAL-2025-138595](https://insights.sbomify.com/MAL-2025-138595/): Malicious code in blind-purple-python (npm) (malicious package)
- [MAL-2025-138594](https://insights.sbomify.com/MAL-2025-138594/): Malicious code in bitter-black-koi (npm) (malicious package)
- [MAL-2025-138593](https://insights.sbomify.com/MAL-2025-138593/): Malicious code in basic-green-mollusk (npm) (malicious package)
- [MAL-2025-138592](https://insights.sbomify.com/MAL-2025-138592/): Malicious code in awake-ivory-halibut (npm) (malicious package)
- [MAL-2025-138591](https://insights.sbomify.com/MAL-2025-138591/): Malicious code in available-pink-hare (npm) (malicious package)
- [MAL-2025-138590](https://insights.sbomify.com/MAL-2025-138590/): Malicious code in atomic-teal-deer (npm) (malicious package)
- [MAL-2025-13859](https://insights.sbomify.com/MAL-2025-13859/): Malicious code in @zittertea/deleniti-in-aspernatur-aut (npm) (malicious package)
- [MAL-2025-138589](https://insights.sbomify.com/MAL-2025-138589/): Malicious code in arrogant-aquamarine-baboon (npm) (malicious package)
- [MAL-2025-138588](https://insights.sbomify.com/MAL-2025-138588/): Malicious code in anxious-rose-egret (npm) (malicious package)
- [MAL-2025-138587](https://insights.sbomify.com/MAL-2025-138587/): Malicious code in amateur-pink-cattle (npm) (malicious package)
- [MAL-2025-138586](https://insights.sbomify.com/MAL-2025-138586/): Malicious code in alright-jade-armadillo (npm) (malicious package)
- [MAL-2025-138585](https://insights.sbomify.com/MAL-2025-138585/): Malicious code in agreeable-pink-orca (npm) (malicious package)
- [MAL-2025-138584](https://insights.sbomify.com/MAL-2025-138584/): Malicious code in aggregate-moccasin-parrot (npm) (malicious package)
- [MAL-2025-138583](https://insights.sbomify.com/MAL-2025-138583/): Malicious code in adverse-green-peacock (npm) (malicious package)
- [MAL-2025-138582](https://insights.sbomify.com/MAL-2025-138582/): Malicious code in adverse-amethyst-heron (npm) (malicious package)
- [MAL-2025-138581](https://insights.sbomify.com/MAL-2025-138581/): Malicious code in adequate-purple-lynx (npm) (malicious package)
- [MAL-2025-138580](https://insights.sbomify.com/MAL-2025-138580/): Malicious code in active-gray-dolphin (npm) (malicious package)
- [MAL-2025-13858](https://insights.sbomify.com/MAL-2025-13858/): Malicious code in @zittertea/delectus-itaque-odio (npm) (malicious package)
- [MAL-2025-138579](https://insights.sbomify.com/MAL-2025-138579/): Malicious code in warnermedia-test (npm) (malicious package)
- [MAL-2025-138578](https://insights.sbomify.com/MAL-2025-138578/): Malicious code in netflix-test (npm) (malicious package)
- [MAL-2025-138577](https://insights.sbomify.com/MAL-2025-138577/): Malicious code in ikea-test (npm) (malicious package)
- [MAL-2025-138576](https://insights.sbomify.com/MAL-2025-138576/): Malicious code in zygomorphic_clam_z3n (npm) (malicious package)
- [MAL-2025-138575](https://insights.sbomify.com/MAL-2025-138575/): Malicious code in zul-wajit2-sluey (npm) (malicious package)
- [MAL-2025-138574](https://insights.sbomify.com/MAL-2025-138574/): Malicious code in zul-toge84-sluey (npm) (malicious package)
- [MAL-2025-138573](https://insights.sbomify.com/MAL-2025-138573/): Malicious code in zul-telur10-sluey (npm) (malicious package)
- [MAL-2025-138572](https://insights.sbomify.com/MAL-2025-138572/): Malicious code in zul-tapai60-sluey (npm) (malicious package)
- [MAL-2025-138571](https://insights.sbomify.com/MAL-2025-138571/): Malicious code in zul-tapai49-sluey (npm) (malicious package)
- [MAL-2025-138570](https://insights.sbomify.com/MAL-2025-138570/): Malicious code in zul-tapai27-sluey (npm) (malicious package)
- [MAL-2025-13857](https://insights.sbomify.com/MAL-2025-13857/): Malicious code in @zittertea/cupiditate-animi-tenetur-doloribus (npm) (malicious package)
- [MAL-2025-138569](https://insights.sbomify.com/MAL-2025-138569/): Malicious code in zul-tahu71-sumpek (npm) (malicious package)
- [MAL-2025-138568](https://insights.sbomify.com/MAL-2025-138568/): Malicious code in zul-soto48-sluey (npm) (malicious package)
- [MAL-2025-138567](https://insights.sbomify.com/MAL-2025-138567/): Malicious code in zul-semur62-sluey (npm) (malicious package)
- [MAL-2025-138566](https://insights.sbomify.com/MAL-2025-138566/): Malicious code in zul-sambel7-sumpek (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1503/