# Vulnerabilities published in 2025


- [MAL-2025-84362](https://insights.sbomify.com/MAL-2025-84362/): Malicious code in devoted_quokka_z3n (npm) (malicious package)
- [MAL-2025-84361](https://insights.sbomify.com/MAL-2025-84361/): Malicious code in devoted_quail_z3n (npm) (malicious package)
- [MAL-2025-84360](https://insights.sbomify.com/MAL-2025-84360/): Malicious code in devoted_jackal_z3n (npm) (malicious package)
- [MAL-2025-84359](https://insights.sbomify.com/MAL-2025-84359/): Malicious code in devoted_crow_z3n (npm) (malicious package)
- [MAL-2025-84358](https://insights.sbomify.com/MAL-2025-84358/): Malicious code in devoted_cicada_z3n (npm) (malicious package)
- [MAL-2025-84357](https://insights.sbomify.com/MAL-2025-84357/): Malicious code in developed_sparrow_z3n (npm) (malicious package)
- [MAL-2025-84356](https://insights.sbomify.com/MAL-2025-84356/): Malicious code in developed_slug_z3n (npm) (malicious package)
- [MAL-2025-84355](https://insights.sbomify.com/MAL-2025-84355/): Malicious code in developed_herring_z3n (npm) (malicious package)
- [MAL-2025-84354](https://insights.sbomify.com/MAL-2025-84354/): Malicious code in determined_termite_z3n (npm) (malicious package)
- [MAL-2025-84353](https://insights.sbomify.com/MAL-2025-84353/): Malicious code in desperate_haddock_z3n (npm) (malicious package)
- [MAL-2025-84352](https://insights.sbomify.com/MAL-2025-84352/): Malicious code in desperate_donkey_z3n (npm) (malicious package)
- [MAL-2025-84351](https://insights.sbomify.com/MAL-2025-84351/): Malicious code in desperate_ant_z3n (npm) (malicious package)
- [MAL-2025-84350](https://insights.sbomify.com/MAL-2025-84350/): Malicious code in desirable_sawfish_z3n (npm) (malicious package)
- [MAL-2025-8435](https://insights.sbomify.com/MAL-2025-8435/): Malicious code in @lineman/ui (npm) (malicious package)
- [MAL-2025-84349](https://insights.sbomify.com/MAL-2025-84349/): Malicious code in desirable_quokka_z3n (npm) (malicious package)
- [MAL-2025-84348](https://insights.sbomify.com/MAL-2025-84348/): Malicious code in depressed_chimpanzee_z3n (npm) (malicious package)
- [MAL-2025-84347](https://insights.sbomify.com/MAL-2025-84347/): Malicious code in dependent_firefly_z3n (npm) (malicious package)
- [MAL-2025-84346](https://insights.sbomify.com/MAL-2025-84346/): Malicious code in dependent_earthworm_z3n (npm) (malicious package)
- [MAL-2025-84345](https://insights.sbomify.com/MAL-2025-84345/): Malicious code in delightful_goat_z3n (npm) (malicious package)
- [MAL-2025-84344](https://insights.sbomify.com/MAL-2025-84344/): Malicious code in delightful_bison_z3n (npm) (malicious package)
- [MAL-2025-84343](https://insights.sbomify.com/MAL-2025-84343/): Malicious code in delighted_cephalopod_z3n (npm) (malicious package)
- [MAL-2025-84342](https://insights.sbomify.com/MAL-2025-84342/): Malicious code in delicious_sparrow_z3n (npm) (malicious package)
- [MAL-2025-84341](https://insights.sbomify.com/MAL-2025-84341/): Malicious code in delicious_bison_z3n (npm) (malicious package)
- [MAL-2025-84340](https://insights.sbomify.com/MAL-2025-84340/): Malicious code in deliberate_rattlesnake_z3n (npm) (malicious package)
- [MAL-2025-8434](https://insights.sbomify.com/MAL-2025-8434/): Malicious code in @lineman/sdk (npm) (malicious package)
- [MAL-2025-84339](https://insights.sbomify.com/MAL-2025-84339/): Malicious code in deliberate_chameleon_z3n (npm) (malicious package)
- [MAL-2025-84338](https://insights.sbomify.com/MAL-2025-84338/): Malicious code in definite_takin_z3n (npm) (malicious package)
- [MAL-2025-84337](https://insights.sbomify.com/MAL-2025-84337/): Malicious code in defiant_hare_z3n (npm) (malicious package)
- [MAL-2025-84336](https://insights.sbomify.com/MAL-2025-84336/): Malicious code in defiant_guineafowl_z3n (npm) (malicious package)
- [MAL-2025-84335](https://insights.sbomify.com/MAL-2025-84335/): Malicious code in defiant_felidae_z3n (npm) (malicious package)
- [MAL-2025-84334](https://insights.sbomify.com/MAL-2025-84334/): Malicious code in defensive_cardinal_z3n (npm) (malicious package)
- [MAL-2025-84333](https://insights.sbomify.com/MAL-2025-84333/): Malicious code in defeated_squirrel_z3n (npm) (malicious package)
- [MAL-2025-84332](https://insights.sbomify.com/MAL-2025-84332/): Malicious code in deep_parakeet_z3n (npm) (malicious package)
- [MAL-2025-84331](https://insights.sbomify.com/MAL-2025-84331/): Malicious code in deep_moth_z3n (npm) (malicious package)
- [MAL-2025-84330](https://insights.sbomify.com/MAL-2025-84330/): Malicious code in deep_moose_z3n (npm) (malicious package)
- [MAL-2025-8433](https://insights.sbomify.com/MAL-2025-8433/): Malicious code in @lineman/liff-react (npm) (malicious package)
- [MAL-2025-84329](https://insights.sbomify.com/MAL-2025-84329/): Malicious code in deep_finch_z3n (npm) (malicious package)
- [MAL-2025-84328](https://insights.sbomify.com/MAL-2025-84328/): Malicious code in deep_cheetah_z3n (npm) (malicious package)
- [MAL-2025-84327](https://insights.sbomify.com/MAL-2025-84327/): Malicious code in decisive_goldfish_z3n (npm) (malicious package)
- [MAL-2025-84326](https://insights.sbomify.com/MAL-2025-84326/): Malicious code in dear_shrimp_z3n (npm) (malicious package)
- [MAL-2025-84325](https://insights.sbomify.com/MAL-2025-84325/): Malicious code in dear_armadillo_z3n (npm) (malicious package)
- [MAL-2025-84324](https://insights.sbomify.com/MAL-2025-84324/): Malicious code in dead_firefly_z3n (npm) (malicious package)
- [MAL-2025-84323](https://insights.sbomify.com/MAL-2025-84323/): Malicious code in dangerous_camel_z3n (npm) (malicious package)
- [MAL-2025-84322](https://insights.sbomify.com/MAL-2025-84322/): Malicious code in damp_pelican_z3n (npm) (malicious package)
- [MAL-2025-84321](https://insights.sbomify.com/MAL-2025-84321/): Malicious code in damp_ermine_z3n (npm) (malicious package)
- [MAL-2025-84320](https://insights.sbomify.com/MAL-2025-84320/): Malicious code in damaged_wasp_z3n (npm) (malicious package)
- [MAL-2025-8432](https://insights.sbomify.com/MAL-2025-8432/): Malicious code in @lightspeed-hospitality/analytics (npm) (malicious package)
- [MAL-2025-84319](https://insights.sbomify.com/MAL-2025-84319/): Malicious code in damaged_herring_z3n (npm) (malicious package)
- [MAL-2025-84318](https://insights.sbomify.com/MAL-2025-84318/): Malicious code in damaged_bobcat_z3n (npm) (malicious package)
- [MAL-2025-84317](https://insights.sbomify.com/MAL-2025-84317/): Malicious code in daily_tyrannosaurus_z3n (npm) (malicious package)
- [MAL-2025-84316](https://insights.sbomify.com/MAL-2025-84316/): Malicious code in daily_quokka_z3n (npm) (malicious package)
- [MAL-2025-84315](https://insights.sbomify.com/MAL-2025-84315/): Malicious code in daily_felidae_z3n (npm) (malicious package)
- [MAL-2025-84314](https://insights.sbomify.com/MAL-2025-84314/): Malicious code in cute_muskox_z3n (npm) (malicious package)
- [MAL-2025-84313](https://insights.sbomify.com/MAL-2025-84313/): Malicious code in cute_impala_z3n (npm) (malicious package)
- [MAL-2025-84312](https://insights.sbomify.com/MAL-2025-84312/): Malicious code in current_tyrannosaurus_z3n (npm) (malicious package)
- [MAL-2025-84311](https://insights.sbomify.com/MAL-2025-84311/): Malicious code in current_sole_z3n (npm) (malicious package)
- [MAL-2025-84310](https://insights.sbomify.com/MAL-2025-84310/): Malicious code in current_quail_z3n (npm) (malicious package)
- [MAL-2025-84309](https://insights.sbomify.com/MAL-2025-84309/): Malicious code in curly_canid_z3n (npm) (malicious package)
- [MAL-2025-84308](https://insights.sbomify.com/MAL-2025-84308/): Malicious code in curious_seahorse_z3n (npm) (malicious package)
- [MAL-2025-84307](https://insights.sbomify.com/MAL-2025-84307/): Malicious code in cuddly_roundworm_z3n (npm) (malicious package)
- [MAL-2025-84306](https://insights.sbomify.com/MAL-2025-84306/): Malicious code in crude_echidna_z3n (npm) (malicious package)
- [MAL-2025-84305](https://insights.sbomify.com/MAL-2025-84305/): Malicious code in crude_crane_z3n (npm) (malicious package)
- [MAL-2025-84304](https://insights.sbomify.com/MAL-2025-84304/): Malicious code in crude_coral_z3n (npm) (malicious package)
- [MAL-2025-84303](https://insights.sbomify.com/MAL-2025-84303/): Malicious code in crucial_swordfish_z3n (npm) (malicious package)
- [MAL-2025-84302](https://insights.sbomify.com/MAL-2025-84302/): Malicious code in crucial_iguana_z3n (npm) (malicious package)
- [MAL-2025-84301](https://insights.sbomify.com/MAL-2025-84301/): Malicious code in crucial_hippopotamus_z3n (npm) (malicious package)
- [MAL-2025-84300](https://insights.sbomify.com/MAL-2025-84300/): Malicious code in crucial_chimpanzee_z3n (npm) (malicious package)
- [MAL-2025-8430](https://insights.sbomify.com/MAL-2025-8430/): Malicious code in @libtommy2024/provident-vero-porro-repellat (npm) (malicious package)
- [MAL-2025-843](https://insights.sbomify.com/MAL-2025-843/): Malicious code in jquery.pstrength (npm) (malicious package)
- [MAL-2025-84299](https://insights.sbomify.com/MAL-2025-84299/): Malicious code in crowded_bee_z3n (npm) (malicious package)
- [MAL-2025-84298](https://insights.sbomify.com/MAL-2025-84298/): Malicious code in critical_tarantula_z3n (npm) (malicious package)
- [MAL-2025-84297](https://insights.sbomify.com/MAL-2025-84297/): Malicious code in criminal_chinchilla_z3n (npm) (malicious package)
- [MAL-2025-84296](https://insights.sbomify.com/MAL-2025-84296/): Malicious code in creepy_rodent_z3n (npm) (malicious package)
- [MAL-2025-84295](https://insights.sbomify.com/MAL-2025-84295/): Malicious code in creative_primate_z3n (npm) (malicious package)
- [MAL-2025-84294](https://insights.sbomify.com/MAL-2025-84294/): Malicious code in creative_lemming_z3n (npm) (malicious package)
- [MAL-2025-84293](https://insights.sbomify.com/MAL-2025-84293/): Malicious code in crazy_lynx_z3n (npm) (malicious package)
- [MAL-2025-84292](https://insights.sbomify.com/MAL-2025-84292/): Malicious code in crazy_hornet_z3n (npm) (malicious package)
- [MAL-2025-84291](https://insights.sbomify.com/MAL-2025-84291/): Malicious code in crazy_armadillo_z3n (npm) (malicious package)
- [MAL-2025-84290](https://insights.sbomify.com/MAL-2025-84290/): Malicious code in courageous_walrus_z3n (npm) (malicious package)
- [MAL-2025-8429](https://insights.sbomify.com/MAL-2025-8429/): Malicious code in @libtommy2024/eum-suscipit-aperiam-optio (npm) (malicious package)
- [MAL-2025-84289](https://insights.sbomify.com/MAL-2025-84289/): Malicious code in costly_sailfish_z3n (npm) (malicious package)
- [MAL-2025-84288](https://insights.sbomify.com/MAL-2025-84288/): Malicious code in costly_anteater_z3n (npm) (malicious package)
- [MAL-2025-84287](https://insights.sbomify.com/MAL-2025-84287/): Malicious code in corresponding_stingray_z3n (npm) (malicious package)
- [MAL-2025-84286](https://insights.sbomify.com/MAL-2025-84286/): Malicious code in corresponding_baboon_z3n (npm) (malicious package)
- [MAL-2025-84285](https://insights.sbomify.com/MAL-2025-84285/): Malicious code in correct_vulture_z3n (npm) (malicious package)
- [MAL-2025-84284](https://insights.sbomify.com/MAL-2025-84284/): Malicious code in correct_snake_z3n (npm) (malicious package)
- [MAL-2025-84283](https://insights.sbomify.com/MAL-2025-84283/): Malicious code in correct_catfish_z3n (npm) (malicious package)
- [MAL-2025-84282](https://insights.sbomify.com/MAL-2025-84282/): Malicious code in corporate_orangutan_z3n (npm) (malicious package)
- [MAL-2025-84281](https://insights.sbomify.com/MAL-2025-84281/): Malicious code in corporate_beetle_z3n (npm) (malicious package)
- [MAL-2025-84280](https://insights.sbomify.com/MAL-2025-84280/): Malicious code in cool_panther_z3n (npm) (malicious package)
- [MAL-2025-8428](https://insights.sbomify.com/MAL-2025-8428/): Malicious code in @libtommy2024/ducimus-nesciunt-doloremque-eligendi (npm) (malicious package)
- [MAL-2025-84279](https://insights.sbomify.com/MAL-2025-84279/): Malicious code in cool_crow_z3n (npm) (malicious package)
- [MAL-2025-84278](https://insights.sbomify.com/MAL-2025-84278/): Malicious code in cooing_partridge_z3n (npm) (malicious package)
- [MAL-2025-84277](https://insights.sbomify.com/MAL-2025-84277/): Malicious code in cooing_jay_z3n (npm) (malicious package)
- [MAL-2025-84276](https://insights.sbomify.com/MAL-2025-84276/): Malicious code in convinced_wolverine_z3n (npm) (malicious package)
- [MAL-2025-84275](https://insights.sbomify.com/MAL-2025-84275/): Malicious code in convinced_leech_z3n (npm) (malicious package)
- [MAL-2025-84274](https://insights.sbomify.com/MAL-2025-84274/): Malicious code in convinced_caribou_z3n (npm) (malicious package)
- [MAL-2025-84273](https://insights.sbomify.com/MAL-2025-84273/): Malicious code in conventional_constrictor_z3n (npm) (malicious package)
- [MAL-2025-84272](https://insights.sbomify.com/MAL-2025-84272/): Malicious code in conventional_beaver_z3n (npm) (malicious package)
- [MAL-2025-84271](https://insights.sbomify.com/MAL-2025-84271/): Malicious code in convenient_whitefish_z3n (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/178/