# Vulnerabilities published in 2025 - [MAL-2025-99025](https://insights.sbomify.com/MAL-2025-99025/): Malicious code in zygomorphic_bat_z3n (npm) (malicious package) - [MAL-2025-99024](https://insights.sbomify.com/MAL-2025-99024/): Malicious code in zonal_newt_z3n (npm) (malicious package) - [MAL-2025-99023](https://insights.sbomify.com/MAL-2025-99023/): Malicious code in zippy_goat_z3n (npm) (malicious package) - [MAL-2025-99022](https://insights.sbomify.com/MAL-2025-99022/): Malicious code in zestful_koala_z3n (npm) (malicious package) - [MAL-2025-99021](https://insights.sbomify.com/MAL-2025-99021/): Malicious code in zestful_alligator_z3n (npm) (malicious package) - [MAL-2025-99020](https://insights.sbomify.com/MAL-2025-99020/): Malicious code in zealous_impala_z3n (npm) (malicious package) - [MAL-2025-9902](https://insights.sbomify.com/MAL-2025-9902/): Malicious code in @zalastax/nolb-_cup (npm) (malicious package) - [MAL-2025-99019](https://insights.sbomify.com/MAL-2025-99019/): Malicious code in zain-lutis6-rudi0x (npm) (malicious package) - [MAL-2025-99018](https://insights.sbomify.com/MAL-2025-99018/): Malicious code in yummy_firefly_z3n (npm) (malicious package) - [MAL-2025-99017](https://insights.sbomify.com/MAL-2025-99017/): Malicious code in yucky_planarian_z3n (npm) (malicious package) - [MAL-2025-99016](https://insights.sbomify.com/MAL-2025-99016/): Malicious code in yodelling_skink_z3n (npm) (malicious package) - [MAL-2025-99015](https://insights.sbomify.com/MAL-2025-99015/): Malicious code in yodelling_mule_z3n (npm) (malicious package) - [MAL-2025-99014](https://insights.sbomify.com/MAL-2025-99014/): Malicious code in yelping_fish_z3n (npm) (malicious package) - [MAL-2025-99013](https://insights.sbomify.com/MAL-2025-99013/): Malicious code in yeasty_cattle_z3n (npm) (malicious package) - [MAL-2025-99012](https://insights.sbomify.com/MAL-2025-99012/): Malicious code in yappiest_ox_z3n (npm) (malicious package) - [MAL-2025-99011](https://insights.sbomify.com/MAL-2025-99011/): Malicious code in yanti-serimuka55-rudi0x (npm) (malicious package) - [MAL-2025-99010](https://insights.sbomify.com/MAL-2025-99010/): Malicious code in yanti-rangginang43-rudi0x (npm) (malicious package) - [MAL-2025-9901](https://insights.sbomify.com/MAL-2025-9901/): Malicious code in @zalastax/nolb-_cuo (npm) (malicious package) - [MAL-2025-99009](https://insights.sbomify.com/MAL-2025-99009/): Malicious code in xerothermic_hawk_z3n (npm) (malicious package) - [MAL-2025-99008](https://insights.sbomify.com/MAL-2025-99008/): Malicious code in xenial_shrew_z3n (npm) (malicious package) - [MAL-2025-99007](https://insights.sbomify.com/MAL-2025-99007/): Malicious code in xenial_guan_z3n (npm) (malicious package) - [MAL-2025-99006](https://insights.sbomify.com/MAL-2025-99006/): Malicious code in written_gamefowl_z3n (npm) (malicious package) - [MAL-2025-99005](https://insights.sbomify.com/MAL-2025-99005/): Malicious code in worthy_tiglon_z3n (npm) (malicious package) - [MAL-2025-99004](https://insights.sbomify.com/MAL-2025-99004/): Malicious code in working_bat_z3n (npm) (malicious package) - [MAL-2025-99003](https://insights.sbomify.com/MAL-2025-99003/): Malicious code in witty_dinosaur_z3n (npm) (malicious package) - [MAL-2025-99002](https://insights.sbomify.com/MAL-2025-99002/): Malicious code in witty_dingo_z3n (npm) (malicious package) - [MAL-2025-99001](https://insights.sbomify.com/MAL-2025-99001/): Malicious code in wise_echidna_z3n (npm) (malicious package) - [MAL-2025-99000](https://insights.sbomify.com/MAL-2025-99000/): Malicious code in willing_trout_z3n (npm) (malicious package) - [MAL-2025-9900](https://insights.sbomify.com/MAL-2025-9900/): Malicious code in @zalastax/nolb-_cun (npm) (malicious package) - [MAL-2025-99](https://insights.sbomify.com/MAL-2025-99/): Malicious code in reactnativecreativekitdemoo (npm) (malicious package) - [MAL-2025-98999](https://insights.sbomify.com/MAL-2025-98999/): Malicious code in wild_coral_z3n (npm) (malicious package) - [MAL-2025-98998](https://insights.sbomify.com/MAL-2025-98998/): Malicious code in wide_ladybug_z3n (npm) (malicious package) - [MAL-2025-98997](https://insights.sbomify.com/MAL-2025-98997/): Malicious code in wicked_primate_z3n (npm) (malicious package) - [MAL-2025-98996](https://insights.sbomify.com/MAL-2025-98996/): Malicious code in whole_otter_z3n (npm) (malicious package) - [MAL-2025-98995](https://insights.sbomify.com/MAL-2025-98995/): Malicious code in wealthy_lizard_z3n (npm) (malicious package) - [MAL-2025-98994](https://insights.sbomify.com/MAL-2025-98994/): Malicious code in wawan-kacang54-rudi0x (npm) (malicious package) - [MAL-2025-98993](https://insights.sbomify.com/MAL-2025-98993/): Malicious code in wati-lapis74-rudi0x (npm) (malicious package) - [MAL-2025-98992](https://insights.sbomify.com/MAL-2025-98992/): Malicious code in vivacious_leopard_z3n (npm) (malicious package) - [MAL-2025-98991](https://insights.sbomify.com/MAL-2025-98991/): Malicious code in vera-tiwul72-rudi0x (npm) (malicious package) - [MAL-2025-98990](https://insights.sbomify.com/MAL-2025-98990/): Malicious code in various_heron_z3n (npm) (malicious package) - [MAL-2025-9899](https://insights.sbomify.com/MAL-2025-9899/): Malicious code in @zalastax/nolb-_cum (npm) (malicious package) - [MAL-2025-98989](https://insights.sbomify.com/MAL-2025-98989/): Malicious code in valuable_tarantula_z3n (npm) (malicious package) - [MAL-2025-98988](https://insights.sbomify.com/MAL-2025-98988/): Malicious code in valuable_chicken_z3n (npm) (malicious package) - [MAL-2025-98987](https://insights.sbomify.com/MAL-2025-98987/): Malicious code in valid_hedgehog_z3n (npm) (malicious package) - [MAL-2025-98986](https://insights.sbomify.com/MAL-2025-98986/): Malicious code in useless_lobster_z3n (npm) (malicious package) - [MAL-2025-98985](https://insights.sbomify.com/MAL-2025-98985/): Malicious code in unwilling_mastodon_z3n (npm) (malicious package) - [MAL-2025-98984](https://insights.sbomify.com/MAL-2025-98984/): Malicious code in unsightly_lemming_z3n (npm) (malicious package) - [MAL-2025-98983](https://insights.sbomify.com/MAL-2025-98983/): Malicious code in unlikely_anglerfish_z3n (npm) (malicious package) - [MAL-2025-98982](https://insights.sbomify.com/MAL-2025-98982/): Malicious code in unfair_goat_z3n (npm) (malicious package) - [MAL-2025-98981](https://insights.sbomify.com/MAL-2025-98981/): Malicious code in unexpected_hyena_z3n (npm) (malicious package) - [MAL-2025-98980](https://insights.sbomify.com/MAL-2025-98980/): Malicious code in unemployed_tyrannosaurus_z3n (npm) (malicious package) - [MAL-2025-9898](https://insights.sbomify.com/MAL-2025-9898/): Malicious code in @zalastax/nolb-_cor (npm) (malicious package) - [MAL-2025-98979](https://insights.sbomify.com/MAL-2025-98979/): Malicious code in unemployed_muskox_z3n (npm) (malicious package) - [MAL-2025-98978](https://insights.sbomify.com/MAL-2025-98978/): Malicious code in underground_ape_z3n (npm) (malicious package) - [MAL-2025-98977](https://insights.sbomify.com/MAL-2025-98977/): Malicious code in unchanged_rhinoceros_z3n (npm) (malicious package) - [MAL-2025-98976](https://insights.sbomify.com/MAL-2025-98976/): Malicious code in ugly_amphibian_z3n (npm) (malicious package) - [MAL-2025-98975](https://insights.sbomify.com/MAL-2025-98975/): Malicious code in udin-mieaceh93-rudi0x (npm) (malicious package) - [MAL-2025-98974](https://insights.sbomify.com/MAL-2025-98974/): Malicious code in typical_pike_z3n (npm) (malicious package) - [MAL-2025-98973](https://insights.sbomify.com/MAL-2025-98973/): Malicious code in troubled_toad_z3n (npm) (malicious package) - [MAL-2025-98972](https://insights.sbomify.com/MAL-2025-98972/): Malicious code in troubled_tick_z3n (npm) (malicious package) - [MAL-2025-98971](https://insights.sbomify.com/MAL-2025-98971/): Malicious code in troubled_swordtail_z3n (npm) (malicious package) - [MAL-2025-98970](https://insights.sbomify.com/MAL-2025-98970/): Malicious code in troubled_bee_z3n (npm) (malicious package) - [MAL-2025-9897](https://insights.sbomify.com/MAL-2025-9897/): Malicious code in @zalastax/nolb-_cop (npm) (malicious package) - [MAL-2025-98969](https://insights.sbomify.com/MAL-2025-98969/): Malicious code in tragic_carp_z3n (npm) (malicious package) - [MAL-2025-98968](https://insights.sbomify.com/MAL-2025-98968/): Malicious code in traditional_gull_z3n (npm) (malicious package) - [MAL-2025-98967](https://insights.sbomify.com/MAL-2025-98967/): Malicious code in tough_condor_z3n (npm) (malicious package) - [MAL-2025-98966](https://insights.sbomify.com/MAL-2025-98966/): Malicious code in tomi-liwet74-rudi0x (npm) (malicious package) - [MAL-2025-98965](https://insights.sbomify.com/MAL-2025-98965/): Malicious code in tiny_beetle_z3n (npm) (malicious package) - [MAL-2025-98964](https://insights.sbomify.com/MAL-2025-98964/): Malicious code in thin_narwhal_z3n (npm) (malicious package) - [MAL-2025-98963](https://insights.sbomify.com/MAL-2025-98963/): Malicious code in thin_blackbird_z3n (npm) (malicious package) - [MAL-2025-98962](https://insights.sbomify.com/MAL-2025-98962/): Malicious code in then_grouse_z3n (npm) (malicious package) - [MAL-2025-98961](https://insights.sbomify.com/MAL-2025-98961/): Malicious code in technological_shark_z3n (npm) (malicious package) - [MAL-2025-98960](https://insights.sbomify.com/MAL-2025-98960/): Malicious code in tasty_harrier_z3n (npm) (malicious package) - [MAL-2025-9896](https://insights.sbomify.com/MAL-2025-9896/): Malicious code in @zalastax/nolb-_cono (npm) (malicious package) - [MAL-2025-98959](https://insights.sbomify.com/MAL-2025-98959/): Malicious code in tania-martabak97-rudi0x (npm) (malicious package) - [MAL-2025-98958](https://insights.sbomify.com/MAL-2025-98958/): Malicious code in tall_nightingale_z3n (npm) (malicious package) - [MAL-2025-98957](https://insights.sbomify.com/MAL-2025-98957/): Malicious code in tall_cardinal_z3n (npm) (malicious package) - [MAL-2025-98956](https://insights.sbomify.com/MAL-2025-98956/): Malicious code in systematic_worm_z3n (npm) (malicious package) - [MAL-2025-98955](https://insights.sbomify.com/MAL-2025-98955/): Malicious code in surrounding_ptarmigan_z3n (npm) (malicious package) - [MAL-2025-98954](https://insights.sbomify.com/MAL-2025-98954/): Malicious code in supreme_stoat_z3n (npm) (malicious package) - [MAL-2025-98953](https://insights.sbomify.com/MAL-2025-98953/): Malicious code in superb_gibbon_z3n (npm) (malicious package) - [MAL-2025-98952](https://insights.sbomify.com/MAL-2025-98952/): Malicious code in successive_tyrannosaurus_z3n (npm) (malicious package) - [MAL-2025-98951](https://insights.sbomify.com/MAL-2025-98951/): Malicious code in strong_starfish_z3n (npm) (malicious package) - [MAL-2025-98950](https://insights.sbomify.com/MAL-2025-98950/): Malicious code in strong_orca_z3n (npm) (malicious package) - [MAL-2025-9895](https://insights.sbomify.com/MAL-2025-9895/): Malicious code in @zalastax/nolb-_conn (npm) (malicious package) - [MAL-2025-98949](https://insights.sbomify.com/MAL-2025-98949/): Malicious code in strange_toad_z3n (npm) (malicious package) - [MAL-2025-98948](https://insights.sbomify.com/MAL-2025-98948/): Malicious code in stiff_mule_z3n (npm) (malicious package) - [MAL-2025-98947](https://insights.sbomify.com/MAL-2025-98947/): Malicious code in stiff_damselfly_z3n (npm) (malicious package) - [MAL-2025-98946](https://insights.sbomify.com/MAL-2025-98946/): Malicious code in statutory_cuckoo_z3n (npm) (malicious package) - [MAL-2025-98945](https://insights.sbomify.com/MAL-2025-98945/): Malicious code in squealing_swordtail_z3n (npm) (malicious package) - [MAL-2025-98944](https://insights.sbomify.com/MAL-2025-98944/): Malicious code in sporting_donkey_z3n (npm) (malicious package) - [MAL-2025-98943](https://insights.sbomify.com/MAL-2025-98943/): Malicious code in spectacular_sawfish_z3n (npm) (malicious package) - [MAL-2025-98942](https://insights.sbomify.com/MAL-2025-98942/): Malicious code in spectacular_roundworm_z3n (npm) (malicious package) - [MAL-2025-98941](https://insights.sbomify.com/MAL-2025-98941/): Malicious code in specified_donkey_z3n (npm) (malicious package) - [MAL-2025-98940](https://insights.sbomify.com/MAL-2025-98940/): Malicious code in sparkling_porcupine_z3n (npm) (malicious package) - [MAL-2025-9894](https://insights.sbomify.com/MAL-2025-9894/): Malicious code in @zalastax/nolb-_conm (npm) (malicious package) - [MAL-2025-98939](https://insights.sbomify.com/MAL-2025-98939/): Malicious code in sour_alpaca_z3n (npm) (malicious package) - [MAL-2025-98938](https://insights.sbomify.com/MAL-2025-98938/): Malicious code in social_crane_z3n (npm) (malicious package) - [MAL-2025-98937](https://insights.sbomify.com/MAL-2025-98937/): Malicious code in smoggy_ferret_z3n (npm) (malicious package) - [MAL-2025-98936](https://insights.sbomify.com/MAL-2025-98936/): Malicious code in smart_perch_z3n (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/16/