# Vulnerabilities published in 2025 - [MAL-2025-137124](https://insights.sbomify.com/MAL-2025-137124/): Malicious code in surya-bubursumsum5-sluey (npm) (malicious package) - [MAL-2025-137123](https://insights.sbomify.com/MAL-2025-137123/): Malicious code in surya-buburayam51-sluey (npm) (malicious package) - [MAL-2025-137122](https://insights.sbomify.com/MAL-2025-137122/): Malicious code in surya-asinan54-sluey (npm) (malicious package) - [MAL-2025-137121](https://insights.sbomify.com/MAL-2025-137121/): Malicious code in surya-asinan36-sluey (npm) (malicious package) - [MAL-2025-137120](https://insights.sbomify.com/MAL-2025-137120/): Malicious code in surprising_baboon_z3n (npm) (malicious package) - [MAL-2025-13712](https://insights.sbomify.com/MAL-2025-13712/): Malicious code in @zalastax/nolb-react-pd (npm) (malicious package) - [MAL-2025-137119](https://insights.sbomify.com/MAL-2025-137119/): Malicious code in sure_guan_z3n (npm) (malicious package) - [MAL-2025-137118](https://insights.sbomify.com/MAL-2025-137118/): Malicious code in sure_armadillo_z3n (npm) (malicious package) - [MAL-2025-137117](https://insights.sbomify.com/MAL-2025-137117/): Malicious code in supreme_guineafowl_z3n (npm) (malicious package) - [MAL-2025-137116](https://insights.sbomify.com/MAL-2025-137116/): Malicious code in supreme_bobolink_z3n (npm) (malicious package) - [MAL-2025-137115](https://insights.sbomify.com/MAL-2025-137115/): Malicious code in superior_harrier_z3n (npm) (malicious package) - [MAL-2025-137114](https://insights.sbomify.com/MAL-2025-137114/): Malicious code in superior_bobolink_z3n (npm) (malicious package) - [MAL-2025-137113](https://insights.sbomify.com/MAL-2025-137113/): Malicious code in superb_python_z3n (npm) (malicious package) - [MAL-2025-137112](https://insights.sbomify.com/MAL-2025-137112/): Malicious code in superb_albatross_z3n (npm) (malicious package) - [MAL-2025-137111](https://insights.sbomify.com/MAL-2025-137111/): Malicious code in sunny_guanaco_z3n (npm) (malicious package) - [MAL-2025-137110](https://insights.sbomify.com/MAL-2025-137110/): Malicious code in sufficient_warbler_z3n (npm) (malicious package) - [MAL-2025-13711](https://insights.sbomify.com/MAL-2025-13711/): Malicious code in @zalastax/nolb-react-pc (npm) (malicious package) - [MAL-2025-137109](https://insights.sbomify.com/MAL-2025-137109/): Malicious code in sufficient_mosquito_z3n (npm) (malicious package) - [MAL-2025-137108](https://insights.sbomify.com/MAL-2025-137108/): Malicious code in sufficient_canidae_z3n (npm) (malicious package) - [MAL-2025-137107](https://insights.sbomify.com/MAL-2025-137107/): Malicious code in successive_goose_z3n (npm) (malicious package) - [MAL-2025-137106](https://insights.sbomify.com/MAL-2025-137106/): Malicious code in subtle_raven_z3n (npm) (malicious package) - [MAL-2025-137105](https://insights.sbomify.com/MAL-2025-137105/): Malicious code in subtle_flamingo_z3n (npm) (malicious package) - [MAL-2025-137104](https://insights.sbomify.com/MAL-2025-137104/): Malicious code in substantial_rooster_z3n (npm) (malicious package) - [MAL-2025-137103](https://insights.sbomify.com/MAL-2025-137103/): Malicious code in substantial_parrot_z3n (npm) (malicious package) - [MAL-2025-137102](https://insights.sbomify.com/MAL-2025-137102/): Malicious code in substantial_damselfly_z3n (npm) (malicious package) - [MAL-2025-137101](https://insights.sbomify.com/MAL-2025-137101/): Malicious code in stupid_anaconda_z3n (npm) (malicious package) - [MAL-2025-137100](https://insights.sbomify.com/MAL-2025-137100/): Malicious code in striking_porpoise_z3n (npm) (malicious package) - [MAL-2025-13710](https://insights.sbomify.com/MAL-2025-13710/): Malicious code in @zalastax/nolb-react-pb (npm) (malicious package) - [MAL-2025-1371](https://insights.sbomify.com/MAL-2025-1371/): Malicious code in orange-meets (npm) (malicious package) - [MAL-2025-137099](https://insights.sbomify.com/MAL-2025-137099/): Malicious code in striking_fowl_z3n (npm) (malicious package) - [MAL-2025-137098](https://insights.sbomify.com/MAL-2025-137098/): Malicious code in striking_bedbug_z3n (npm) (malicious package) - [MAL-2025-137097](https://insights.sbomify.com/MAL-2025-137097/): Malicious code in strict_vulture_z3n (npm) (malicious package) - [MAL-2025-137096](https://insights.sbomify.com/MAL-2025-137096/): Malicious code in strict_tahr_z3n (npm) (malicious package) - [MAL-2025-137095](https://insights.sbomify.com/MAL-2025-137095/): Malicious code in strict_bat_z3n (npm) (malicious package) - [MAL-2025-137094](https://insights.sbomify.com/MAL-2025-137094/): Malicious code in strange_shrew_z3n (npm) (malicious package) - [MAL-2025-137093](https://insights.sbomify.com/MAL-2025-137093/): Malicious code in straightforward_eel_z3n (npm) (malicious package) - [MAL-2025-137092](https://insights.sbomify.com/MAL-2025-137092/): Malicious code in straight_snipe_z3n (npm) (malicious package) - [MAL-2025-137091](https://insights.sbomify.com/MAL-2025-137091/): Malicious code in straight_chimpanzee_z3n (npm) (malicious package) - [MAL-2025-137090](https://insights.sbomify.com/MAL-2025-137090/): Malicious code in still_walrus_z3n (npm) (malicious package) - [MAL-2025-13709](https://insights.sbomify.com/MAL-2025-13709/): Malicious code in @zalastax/nolb-react-pa (npm) (malicious package) - [MAL-2025-137089](https://insights.sbomify.com/MAL-2025-137089/): Malicious code in still_rook_z3n (npm) (malicious package) - [MAL-2025-137088](https://insights.sbomify.com/MAL-2025-137088/): Malicious code in still_condor_z3n (npm) (malicious package) - [MAL-2025-137087](https://insights.sbomify.com/MAL-2025-137087/): Malicious code in sticky_swordfish_z3n (npm) (malicious package) - [MAL-2025-137086](https://insights.sbomify.com/MAL-2025-137086/): Malicious code in sticky_alpaca_z3n (npm) (malicious package) - [MAL-2025-137085](https://insights.sbomify.com/MAL-2025-137085/): Malicious code in static_raven_z3n (npm) (malicious package) - [MAL-2025-137084](https://insights.sbomify.com/MAL-2025-137084/): Malicious code in standard_stingray_z3n (npm) (malicious package) - [MAL-2025-137083](https://insights.sbomify.com/MAL-2025-137083/): Malicious code in stale_mandrill_z3n (npm) (malicious package) - [MAL-2025-137082](https://insights.sbomify.com/MAL-2025-137082/): Malicious code in stable_mammal_z3n (npm) (malicious package) - [MAL-2025-137081](https://insights.sbomify.com/MAL-2025-137081/): Malicious code in squealing_halibut_z3n (npm) (malicious package) - [MAL-2025-137080](https://insights.sbomify.com/MAL-2025-137080/): Malicious code in square_scorpion_z3n (npm) (malicious package) - [MAL-2025-13708](https://insights.sbomify.com/MAL-2025-13708/): Malicious code in @zalastax/nolb-react-p5 (npm) (malicious package) - [MAL-2025-137079](https://insights.sbomify.com/MAL-2025-137079/): Malicious code in spotty_fowl_z3n (npm) (malicious package) - [MAL-2025-137078](https://insights.sbomify.com/MAL-2025-137078/): Malicious code in spotty_flea_z3n (npm) (malicious package) - [MAL-2025-137077](https://insights.sbomify.com/MAL-2025-137077/): Malicious code in spotless_camel_z3n (npm) (malicious package) - [MAL-2025-137076](https://insights.sbomify.com/MAL-2025-137076/): Malicious code in sporting_primate_z3n (npm) (malicious package) - [MAL-2025-137075](https://insights.sbomify.com/MAL-2025-137075/): Malicious code in sporting_elephant_z3n (npm) (malicious package) - [MAL-2025-137074](https://insights.sbomify.com/MAL-2025-137074/): Malicious code in sporting_dragon_z3n (npm) (malicious package) - [MAL-2025-137073](https://insights.sbomify.com/MAL-2025-137073/): Malicious code in splendid_marten_z3n (npm) (malicious package) - [MAL-2025-137072](https://insights.sbomify.com/MAL-2025-137072/): Malicious code in splendid_cuckoo_z3n (npm) (malicious package) - [MAL-2025-137071](https://insights.sbomify.com/MAL-2025-137071/): Malicious code in splendid_badger_z3n (npm) (malicious package) - [MAL-2025-137070](https://insights.sbomify.com/MAL-2025-137070/): Malicious code in spiritual_wallaby_z3n (npm) (malicious package) - [MAL-2025-13707](https://insights.sbomify.com/MAL-2025-13707/): Malicious code in @zalastax/nolb-react-p2 (npm) (malicious package) - [MAL-2025-137069](https://insights.sbomify.com/MAL-2025-137069/): Malicious code in specified_spoonbill_z3n (npm) (malicious package) - [MAL-2025-137068](https://insights.sbomify.com/MAL-2025-137068/): Malicious code in specified_raven_z3n (npm) (malicious package) - [MAL-2025-137067](https://insights.sbomify.com/MAL-2025-137067/): Malicious code in specified_guppy_z3n (npm) (malicious package) - [MAL-2025-137066](https://insights.sbomify.com/MAL-2025-137066/): Malicious code in specified_clam_z3n (npm) (malicious package) - [MAL-2025-137065](https://insights.sbomify.com/MAL-2025-137065/): Malicious code in specific_lizard_z3n (npm) (malicious package) - [MAL-2025-137064](https://insights.sbomify.com/MAL-2025-137064/): Malicious code in specific_impala_z3n (npm) (malicious package) - [MAL-2025-137063](https://insights.sbomify.com/MAL-2025-137063/): Malicious code in special_damselfly_z3n (npm) (malicious package) - [MAL-2025-137062](https://insights.sbomify.com/MAL-2025-137062/): Malicious code in spatial_otter_z3n (npm) (malicious package) - [MAL-2025-137061](https://insights.sbomify.com/MAL-2025-137061/): Malicious code in spare_crow_z3n (npm) (malicious package) - [MAL-2025-137060](https://insights.sbomify.com/MAL-2025-137060/): Malicious code in soviet_roadrunner_z3n (npm) (malicious package) - [MAL-2025-13706](https://insights.sbomify.com/MAL-2025-13706/): Malicious code in @zalastax/nolb-react-p (npm) (malicious package) - [MAL-2025-137059](https://insights.sbomify.com/MAL-2025-137059/): Malicious code in soviet_lamprey_z3n (npm) (malicious package) - [MAL-2025-137058](https://insights.sbomify.com/MAL-2025-137058/): Malicious code in soviet_donkey_z3n (npm) (malicious package) - [MAL-2025-137057](https://insights.sbomify.com/MAL-2025-137057/): Malicious code in sour_xerinae_z3n (npm) (malicious package) - [MAL-2025-137056](https://insights.sbomify.com/MAL-2025-137056/): Malicious code in sour_antlion_z3n (npm) (malicious package) - [MAL-2025-137055](https://insights.sbomify.com/MAL-2025-137055/): Malicious code in sound_crow_z3n (npm) (malicious package) - [MAL-2025-137054](https://insights.sbomify.com/MAL-2025-137054/): Malicious code in sophisticated_salmon_z3n (npm) (malicious package) - [MAL-2025-137053](https://insights.sbomify.com/MAL-2025-137053/): Malicious code in sole_sturgeon_z3n (npm) (malicious package) - [MAL-2025-137052](https://insights.sbomify.com/MAL-2025-137052/): Malicious code in sole_spider_z3n (npm) (malicious package) - [MAL-2025-137051](https://insights.sbomify.com/MAL-2025-137051/): Malicious code in sole_moth_z3n (npm) (malicious package) - [MAL-2025-137050](https://insights.sbomify.com/MAL-2025-137050/): Malicious code in solar_deer_z3n (npm) (malicious package) - [MAL-2025-13705](https://insights.sbomify.com/MAL-2025-13705/): Malicious code in @zalastax/nolb-react-iz (npm) (malicious package) - [MAL-2025-137049](https://insights.sbomify.com/MAL-2025-137049/): Malicious code in socialist_sloth_z3n (npm) (malicious package) - [MAL-2025-137048](https://insights.sbomify.com/MAL-2025-137048/): Malicious code in social_cougar_z3n (npm) (malicious package) - [MAL-2025-137047](https://insights.sbomify.com/MAL-2025-137047/): Malicious code in smooth_llama_z3n (npm) (malicious package) - [MAL-2025-137046](https://insights.sbomify.com/MAL-2025-137046/): Malicious code in smiling_eel_z3n (npm) (malicious package) - [MAL-2025-137045](https://insights.sbomify.com/MAL-2025-137045/): Malicious code in slow_cockroach_z3n (npm) (malicious package) - [MAL-2025-137044](https://insights.sbomify.com/MAL-2025-137044/): Malicious code in slippery_hyena_z3n (npm) (malicious package) - [MAL-2025-137043](https://insights.sbomify.com/MAL-2025-137043/): Malicious code in slippery_capybara_z3n (npm) (malicious package) - [MAL-2025-137042](https://insights.sbomify.com/MAL-2025-137042/): Malicious code in slimy_mollusk_z3n (npm) (malicious package) - [MAL-2025-137041](https://insights.sbomify.com/MAL-2025-137041/): Malicious code in slimy_donkey_z3n (npm) (malicious package) - [MAL-2025-137040](https://insights.sbomify.com/MAL-2025-137040/): Malicious code in slim_leopard_z3n (npm) (malicious package) - [MAL-2025-13704](https://insights.sbomify.com/MAL-2025-13704/): Malicious code in @zalastax/nolb-react-ix (npm) (malicious package) - [MAL-2025-137039](https://insights.sbomify.com/MAL-2025-137039/): Malicious code in sleepy_piranha_z3n (npm) (malicious package) - [MAL-2025-137038](https://insights.sbomify.com/MAL-2025-137038/): Malicious code in sleepy_duck_z3n (npm) (malicious package) - [MAL-2025-137037](https://insights.sbomify.com/MAL-2025-137037/): Malicious code in sleepy_bobcat_z3n (npm) (malicious package) - [MAL-2025-137036](https://insights.sbomify.com/MAL-2025-137036/): Malicious code in skinny_kite_z3n (npm) (malicious package) - [MAL-2025-137035](https://insights.sbomify.com/MAL-2025-137035/): Malicious code in skinny_chickadee_z3n (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1520/