# Vulnerabilities published in 2025


- [MAL-2025-135144](https://insights.sbomify.com/MAL-2025-135144/): Malicious code in likely_newt_z3n (npm) (malicious package)
- [MAL-2025-135143](https://insights.sbomify.com/MAL-2025-135143/): Malicious code in likely_albatross_z3n (npm) (malicious package)
- [MAL-2025-135142](https://insights.sbomify.com/MAL-2025-135142/): Malicious code in light_grouse_z3n (npm) (malicious package)
- [MAL-2025-135141](https://insights.sbomify.com/MAL-2025-135141/): Malicious code in liberal_bug_z3n (npm) (malicious package)
- [MAL-2025-135140](https://insights.sbomify.com/MAL-2025-135140/): Malicious code in liable_hookworm_z3n (npm) (malicious package)
- [MAL-2025-13514](https://insights.sbomify.com/MAL-2025-13514/): Malicious code in @zalastax/nolb-que- (npm) (malicious package)
- [MAL-2025-135139](https://insights.sbomify.com/MAL-2025-135139/): Malicious code in lexical_hawk_z3n (npm) (malicious package)
- [MAL-2025-135138](https://insights.sbomify.com/MAL-2025-135138/): Malicious code in lexical_boar_z3n (npm) (malicious package)
- [MAL-2025-135137](https://insights.sbomify.com/MAL-2025-135137/): Malicious code in level_chickadee_z3n (npm) (malicious package)
- [MAL-2025-135136](https://insights.sbomify.com/MAL-2025-135136/): Malicious code in lesser_condor_z3n (npm) (malicious package)
- [MAL-2025-135135](https://insights.sbomify.com/MAL-2025-135135/): Malicious code in legitimate_lamprey_z3n (npm) (malicious package)
- [MAL-2025-135134](https://insights.sbomify.com/MAL-2025-135134/): Malicious code in legitimate_guanaco_z3n (npm) (malicious package)
- [MAL-2025-135133](https://insights.sbomify.com/MAL-2025-135133/): Malicious code in legitimate_asp_z3n (npm) (malicious package)
- [MAL-2025-135132](https://insights.sbomify.com/MAL-2025-135132/): Malicious code in legal_mule_z3n (npm) (malicious package)
- [MAL-2025-135131](https://insights.sbomify.com/MAL-2025-135131/): Malicious code in left_tiger_z3n (npm) (malicious package)
- [MAL-2025-135130](https://insights.sbomify.com/MAL-2025-135130/): Malicious code in left_cougar_z3n (npm) (malicious package)
- [MAL-2025-13513](https://insights.sbomify.com/MAL-2025-13513/): Malicious code in @zalastax/nolb-qud (npm) (malicious package)
- [MAL-2025-135129](https://insights.sbomify.com/MAL-2025-135129/): Malicious code in latin_tiger_z3n (npm) (malicious package)
- [MAL-2025-135128](https://insights.sbomify.com/MAL-2025-135128/): Malicious code in latin_slug_z3n (npm) (malicious package)
- [MAL-2025-135127](https://insights.sbomify.com/MAL-2025-135127/): Malicious code in latin_grouse_z3n (npm) (malicious package)
- [MAL-2025-135126](https://insights.sbomify.com/MAL-2025-135126/): Malicious code in latin_gorilla_z3n (npm) (malicious package)
- [MAL-2025-135125](https://insights.sbomify.com/MAL-2025-135125/): Malicious code in large_leopon_z3n (npm) (malicious package)
- [MAL-2025-135124](https://insights.sbomify.com/MAL-2025-135124/): Malicious code in large_dolphin_z3n (npm) (malicious package)
- [MAL-2025-135123](https://insights.sbomify.com/MAL-2025-135123/): Malicious code in laila-wajit64-sluey (npm) (malicious package)
- [MAL-2025-135122](https://insights.sbomify.com/MAL-2025-135122/): Malicious code in laila-ubi95-sluey (npm) (malicious package)
- [MAL-2025-135121](https://insights.sbomify.com/MAL-2025-135121/): Malicious code in laila-toge44-sluey (npm) (malicious package)
- [MAL-2025-135120](https://insights.sbomify.com/MAL-2025-135120/): Malicious code in laila-tek41-sluey (npm) (malicious package)
- [MAL-2025-13512](https://insights.sbomify.com/MAL-2025-13512/): Malicious code in @zalastax/nolb-quc (npm) (malicious package)
- [MAL-2025-135119](https://insights.sbomify.com/MAL-2025-135119/): Malicious code in laila-taiwan38-sluey (npm) (malicious package)
- [MAL-2025-135118](https://insights.sbomify.com/MAL-2025-135118/): Malicious code in laila-ronde53-sluey (npm) (malicious package)
- [MAL-2025-135117](https://insights.sbomify.com/MAL-2025-135117/): Malicious code in laila-ronde23-sluey (npm) (malicious package)
- [MAL-2025-135116](https://insights.sbomify.com/MAL-2025-135116/): Malicious code in laila-rojak90-sluey (npm) (malicious package)
- [MAL-2025-135115](https://insights.sbomify.com/MAL-2025-135115/): Malicious code in laila-rawon87-sluey (npm) (malicious package)
- [MAL-2025-135114](https://insights.sbomify.com/MAL-2025-135114/): Malicious code in laila-rawon19-sluey (npm) (malicious package)
- [MAL-2025-135113](https://insights.sbomify.com/MAL-2025-135113/): Malicious code in laila-rangginang5-sluey (npm) (malicious package)
- [MAL-2025-135112](https://insights.sbomify.com/MAL-2025-135112/): Malicious code in laila-rangginang48-sluey (npm) (malicious package)
- [MAL-2025-135111](https://insights.sbomify.com/MAL-2025-135111/): Malicious code in laila-pisang50-sluey (npm) (malicious package)
- [MAL-2025-135110](https://insights.sbomify.com/MAL-2025-135110/): Malicious code in laila-oncom32-sluey (npm) (malicious package)
- [MAL-2025-13511](https://insights.sbomify.com/MAL-2025-13511/): Malicious code in @zalastax/nolb-qub (npm) (malicious package)
- [MAL-2025-135109](https://insights.sbomify.com/MAL-2025-135109/): Malicious code in laila-oncom3-sluey (npm) (malicious package)
- [MAL-2025-135108](https://insights.sbomify.com/MAL-2025-135108/): Malicious code in laila-nasiuduk28-sluey (npm) (malicious package)
- [MAL-2025-135107](https://insights.sbomify.com/MAL-2025-135107/): Malicious code in laila-nasisayur26-sluey (npm) (malicious package)
- [MAL-2025-135106](https://insights.sbomify.com/MAL-2025-135106/): Malicious code in laila-nasi30-sluey (npm) (malicious package)
- [MAL-2025-135105](https://insights.sbomify.com/MAL-2025-135105/): Malicious code in laila-naget8-sluey (npm) (malicious package)
- [MAL-2025-135104](https://insights.sbomify.com/MAL-2025-135104/): Malicious code in laila-moci51-sluey (npm) (malicious package)
- [MAL-2025-135103](https://insights.sbomify.com/MAL-2025-135103/): Malicious code in laila-moci15-sluey (npm) (malicious package)
- [MAL-2025-135102](https://insights.sbomify.com/MAL-2025-135102/): Malicious code in laila-mendut43-sluey (npm) (malicious package)
- [MAL-2025-135101](https://insights.sbomify.com/MAL-2025-135101/): Malicious code in laila-mendut34-sluey (npm) (malicious package)
- [MAL-2025-135100](https://insights.sbomify.com/MAL-2025-135100/): Malicious code in laila-mendoan46-sluey (npm) (malicious package)
- [MAL-2025-13510](https://insights.sbomify.com/MAL-2025-13510/): Malicious code in @zalastax/nolb-quaz (npm) (malicious package)
- [MAL-2025-1351](https://insights.sbomify.com/MAL-2025-1351/): Malicious code in biconomy (npm) (malicious package)
- [MAL-2025-135099](https://insights.sbomify.com/MAL-2025-135099/): Malicious code in laila-martabak100-sluey (npm) (malicious package)
- [MAL-2025-135098](https://insights.sbomify.com/MAL-2025-135098/): Malicious code in laila-mangut72-sluey (npm) (malicious package)
- [MAL-2025-135097](https://insights.sbomify.com/MAL-2025-135097/): Malicious code in laila-mangut61-sluey (npm) (malicious package)
- [MAL-2025-135096](https://insights.sbomify.com/MAL-2025-135096/): Malicious code in laila-mangga20-sluey (npm) (malicious package)
- [MAL-2025-135095](https://insights.sbomify.com/MAL-2025-135095/): Malicious code in laila-lumpur6-sluey (npm) (malicious package)
- [MAL-2025-135094](https://insights.sbomify.com/MAL-2025-135094/): Malicious code in laila-lontong99-sluey (npm) (malicious package)
- [MAL-2025-135093](https://insights.sbomify.com/MAL-2025-135093/): Malicious code in laila-liwet86-sluey (npm) (malicious package)
- [MAL-2025-135092](https://insights.sbomify.com/MAL-2025-135092/): Malicious code in laila-lapis60-sluey (npm) (malicious package)
- [MAL-2025-135091](https://insights.sbomify.com/MAL-2025-135091/): Malicious code in laila-lapis42-sumpek (npm) (malicious package)
- [MAL-2025-135090](https://insights.sbomify.com/MAL-2025-135090/): Malicious code in laila-lapis29-sluey (npm) (malicious package)
- [MAL-2025-13509](https://insights.sbomify.com/MAL-2025-13509/): Malicious code in @zalastax/nolb-quay (npm) (malicious package)
- [MAL-2025-135089](https://insights.sbomify.com/MAL-2025-135089/): Malicious code in laila-kupat27-sluey (npm) (malicious package)
- [MAL-2025-135088](https://insights.sbomify.com/MAL-2025-135088/): Malicious code in laila-kupat21-sluey (npm) (malicious package)
- [MAL-2025-135087](https://insights.sbomify.com/MAL-2025-135087/): Malicious code in laila-kue8-sluey (npm) (malicious package)
- [MAL-2025-135086](https://insights.sbomify.com/MAL-2025-135086/): Malicious code in laila-kue53-sluey (npm) (malicious package)
- [MAL-2025-135085](https://insights.sbomify.com/MAL-2025-135085/): Malicious code in laila-kue41-sluey (npm) (malicious package)
- [MAL-2025-135084](https://insights.sbomify.com/MAL-2025-135084/): Malicious code in laila-kue34-sluey (npm) (malicious package)
- [MAL-2025-135083](https://insights.sbomify.com/MAL-2025-135083/): Malicious code in laila-kue28-sluey (npm) (malicious package)
- [MAL-2025-135082](https://insights.sbomify.com/MAL-2025-135082/): Malicious code in laila-kue22-sluey (npm) (malicious package)
- [MAL-2025-135081](https://insights.sbomify.com/MAL-2025-135081/): Malicious code in laila-kripik40-sluey (npm) (malicious package)
- [MAL-2025-135080](https://insights.sbomify.com/MAL-2025-135080/): Malicious code in laila-klipo88-sluey (npm) (malicious package)
- [MAL-2025-13508](https://insights.sbomify.com/MAL-2025-13508/): Malicious code in @zalastax/nolb-quav (npm) (malicious package)
- [MAL-2025-135079](https://insights.sbomify.com/MAL-2025-135079/): Malicious code in laila-klentik75-sluey (npm) (malicious package)
- [MAL-2025-135078](https://insights.sbomify.com/MAL-2025-135078/): Malicious code in laila-ketan35-sluey (npm) (malicious package)
- [MAL-2025-135077](https://insights.sbomify.com/MAL-2025-135077/): Malicious code in laila-kemplang77-sluey (npm) (malicious package)
- [MAL-2025-135076](https://insights.sbomify.com/MAL-2025-135076/): Malicious code in laila-kemplang60-sluey (npm) (malicious package)
- [MAL-2025-135075](https://insights.sbomify.com/MAL-2025-135075/): Malicious code in laila-kemplang47-sluey (npm) (malicious package)
- [MAL-2025-135074](https://insights.sbomify.com/MAL-2025-135074/): Malicious code in laila-kembang36-sluey (npm) (malicious package)
- [MAL-2025-135073](https://insights.sbomify.com/MAL-2025-135073/): Malicious code in laila-jus10-sluey (npm) (malicious package)
- [MAL-2025-135072](https://insights.sbomify.com/MAL-2025-135072/): Malicious code in laila-jengkol95-sluey (npm) (malicious package)
- [MAL-2025-135071](https://insights.sbomify.com/MAL-2025-135071/): Malicious code in laila-ikan22-sluey (npm) (malicious package)
- [MAL-2025-135070](https://insights.sbomify.com/MAL-2025-135070/): Malicious code in laila-gulai29-sluey (npm) (malicious package)
- [MAL-2025-13507](https://insights.sbomify.com/MAL-2025-13507/): Malicious code in @zalastax/nolb-quat (npm) (malicious package)
- [MAL-2025-135069](https://insights.sbomify.com/MAL-2025-135069/): Malicious code in laila-gudeg42-sluey (npm) (malicious package)
- [MAL-2025-135068](https://insights.sbomify.com/MAL-2025-135068/): Malicious code in laila-gudeg37-sluey (npm) (malicious package)
- [MAL-2025-135067](https://insights.sbomify.com/MAL-2025-135067/): Malicious code in laila-gorengan35-sluey (npm) (malicious package)
- [MAL-2025-135066](https://insights.sbomify.com/MAL-2025-135066/): Malicious code in laila-gorengan13-sluey (npm) (malicious package)
- [MAL-2025-135065](https://insights.sbomify.com/MAL-2025-135065/): Malicious code in laila-gaplek96-sluey (npm) (malicious package)
- [MAL-2025-135064](https://insights.sbomify.com/MAL-2025-135064/): Malicious code in laila-gandul34-sluey (npm) (malicious package)
- [MAL-2025-135063](https://insights.sbomify.com/MAL-2025-135063/): Malicious code in laila-gandul13-sluey (npm) (malicious package)
- [MAL-2025-135062](https://insights.sbomify.com/MAL-2025-135062/): Malicious code in laila-gado-gado38-sluey (npm) (malicious package)
- [MAL-2025-135061](https://insights.sbomify.com/MAL-2025-135061/): Malicious code in laila-esdoger71-sluey (npm) (malicious package)
- [MAL-2025-135060](https://insights.sbomify.com/MAL-2025-135060/): Malicious code in laila-esdoger10-sluey (npm) (malicious package)
- [MAL-2025-13506](https://insights.sbomify.com/MAL-2025-13506/): Malicious code in @zalastax/nolb-quas (npm) (malicious package)
- [MAL-2025-135059](https://insights.sbomify.com/MAL-2025-135059/): Malicious code in laila-dodol90-sluey (npm) (malicious package)
- [MAL-2025-135058](https://insights.sbomify.com/MAL-2025-135058/): Malicious code in laila-dodol71-sluey (npm) (malicious package)
- [MAL-2025-135057](https://insights.sbomify.com/MAL-2025-135057/): Malicious code in laila-bubursumsum79-sluey (npm) (malicious package)
- [MAL-2025-135056](https://insights.sbomify.com/MAL-2025-135056/): Malicious code in laila-bubur39-sluey (npm) (malicious package)
- [MAL-2025-135055](https://insights.sbomify.com/MAL-2025-135055/): Malicious code in laila-brongkos28-sluey (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1542/