# Vulnerabilities published in 2025


- [MAL-2025-84270](https://insights.sbomify.com/MAL-2025-84270/): Malicious code in convenient_salmon_z3n (npm) (malicious package)
- [MAL-2025-8427](https://insights.sbomify.com/MAL-2025-8427/): Malicious code in @libtommy2024/deleniti-aut-velit-libero (npm) (malicious package)
- [MAL-2025-84269](https://insights.sbomify.com/MAL-2025-84269/): Malicious code in controlled_peacock_z3n (npm) (malicious package)
- [MAL-2025-84268](https://insights.sbomify.com/MAL-2025-84268/): Malicious code in controlled_goldfish_z3n (npm) (malicious package)
- [MAL-2025-84267](https://insights.sbomify.com/MAL-2025-84267/): Malicious code in continuous_cod_z3n (npm) (malicious package)
- [MAL-2025-84266](https://insights.sbomify.com/MAL-2025-84266/): Malicious code in continuous_cardinal_z3n (npm) (malicious package)
- [MAL-2025-84265](https://insights.sbomify.com/MAL-2025-84265/): Malicious code in continental_turkey_z3n (npm) (malicious package)
- [MAL-2025-84264](https://insights.sbomify.com/MAL-2025-84264/): Malicious code in continental_rhinoceros_z3n (npm) (malicious package)
- [MAL-2025-84263](https://insights.sbomify.com/MAL-2025-84263/): Malicious code in continental_muskox_z3n (npm) (malicious package)
- [MAL-2025-84262](https://insights.sbomify.com/MAL-2025-84262/): Malicious code in continental_giraffe_z3n (npm) (malicious package)
- [MAL-2025-84261](https://insights.sbomify.com/MAL-2025-84261/): Malicious code in continental_finch_z3n (npm) (malicious package)
- [MAL-2025-84260](https://insights.sbomify.com/MAL-2025-84260/): Malicious code in continental_cougar_z3n (npm) (malicious package)
- [MAL-2025-8426](https://insights.sbomify.com/MAL-2025-8426/): Malicious code in @libtommy2024/accusamus-dolorum-placeat-eum (npm) (malicious package)
- [MAL-2025-84259](https://insights.sbomify.com/MAL-2025-84259/): Malicious code in content_bonobo_z3n (npm) (malicious package)
- [MAL-2025-84258](https://insights.sbomify.com/MAL-2025-84258/): Malicious code in contemporary_dingo_z3n (npm) (malicious package)
- [MAL-2025-84257](https://insights.sbomify.com/MAL-2025-84257/): Malicious code in constitutional_mosquito_z3n (npm) (malicious package)
- [MAL-2025-84256](https://insights.sbomify.com/MAL-2025-84256/): Malicious code in constitutional_blackbird_z3n (npm) (malicious package)
- [MAL-2025-84255](https://insights.sbomify.com/MAL-2025-84255/): Malicious code in constitutional_bee_z3n (npm) (malicious package)
- [MAL-2025-84254](https://insights.sbomify.com/MAL-2025-84254/): Malicious code in constant_worm_z3n (npm) (malicious package)
- [MAL-2025-84253](https://insights.sbomify.com/MAL-2025-84253/): Malicious code in constant_slug_z3n (npm) (malicious package)
- [MAL-2025-84252](https://insights.sbomify.com/MAL-2025-84252/): Malicious code in constant_porpoise_z3n (npm) (malicious package)
- [MAL-2025-84251](https://insights.sbomify.com/MAL-2025-84251/): Malicious code in consistent_tarsier_z3n (npm) (malicious package)
- [MAL-2025-84250](https://insights.sbomify.com/MAL-2025-84250/): Malicious code in consistent_blackbird_z3n (npm) (malicious package)
- [MAL-2025-8425](https://insights.sbomify.com/MAL-2025-8425/): Malicious code in @libtommy/shiny-octo-giggle (npm) (malicious package)
- [MAL-2025-84249](https://insights.sbomify.com/MAL-2025-84249/): Malicious code in conservative_dolphin_z3n (npm) (malicious package)
- [MAL-2025-84248](https://insights.sbomify.com/MAL-2025-84248/): Malicious code in conservation_iguana_z3n (npm) (malicious package)
- [MAL-2025-84247](https://insights.sbomify.com/MAL-2025-84247/): Malicious code in conservation_barnacle_z3n (npm) (malicious package)
- [MAL-2025-84246](https://insights.sbomify.com/MAL-2025-84246/): Malicious code in conscious_loon_z3n (npm) (malicious package)
- [MAL-2025-84245](https://insights.sbomify.com/MAL-2025-84245/): Malicious code in conscious_blackbird_z3n (npm) (malicious package)
- [MAL-2025-84244](https://insights.sbomify.com/MAL-2025-84244/): Malicious code in confused_wallaby_z3n (npm) (malicious package)
- [MAL-2025-84243](https://insights.sbomify.com/MAL-2025-84243/): Malicious code in confidential_tick_z3n (npm) (malicious package)
- [MAL-2025-84242](https://insights.sbomify.com/MAL-2025-84242/): Malicious code in confidential_gull_z3n (npm) (malicious package)
- [MAL-2025-84241](https://insights.sbomify.com/MAL-2025-84241/): Malicious code in confidential_gazelle_z3n (npm) (malicious package)
- [MAL-2025-84240](https://insights.sbomify.com/MAL-2025-84240/): Malicious code in confident_quail_z3n (npm) (malicious package)
- [MAL-2025-8424](https://insights.sbomify.com/MAL-2025-8424/): Malicious code in @leofinzelik/rainbowkit (npm) (malicious package)
- [MAL-2025-84239](https://insights.sbomify.com/MAL-2025-84239/): Malicious code in confident_chameleon_z3n (npm) (malicious package)
- [MAL-2025-84238](https://insights.sbomify.com/MAL-2025-84238/): Malicious code in condemned_pig_z3n (npm) (malicious package)
- [MAL-2025-84237](https://insights.sbomify.com/MAL-2025-84237/): Malicious code in condemned_guppy_z3n (npm) (malicious package)
- [MAL-2025-84236](https://insights.sbomify.com/MAL-2025-84236/): Malicious code in concrete_impala_z3n (npm) (malicious package)
- [MAL-2025-84235](https://insights.sbomify.com/MAL-2025-84235/): Malicious code in concrete_crow_z3n (npm) (malicious package)
- [MAL-2025-84234](https://insights.sbomify.com/MAL-2025-84234/): Malicious code in concerned_ox_z3n (npm) (malicious package)
- [MAL-2025-84233](https://insights.sbomify.com/MAL-2025-84233/): Malicious code in concerned_lark_z3n (npm) (malicious package)
- [MAL-2025-84232](https://insights.sbomify.com/MAL-2025-84232/): Malicious code in conceptual_tyrannosaurus_z3n (npm) (malicious package)
- [MAL-2025-84231](https://insights.sbomify.com/MAL-2025-84231/): Malicious code in conceptual_antelope_z3n (npm) (malicious package)
- [MAL-2025-84230](https://insights.sbomify.com/MAL-2025-84230/): Malicious code in compulsory_monkey_z3n (npm) (malicious package)
- [MAL-2025-8423](https://insights.sbomify.com/MAL-2025-8423/): Malicious code in @legalzoom/auth (npm) (malicious package)
- [MAL-2025-84229](https://insights.sbomify.com/MAL-2025-84229/): Malicious code in compulsory_aphid_z3n (npm) (malicious package)
- [MAL-2025-84228](https://insights.sbomify.com/MAL-2025-84228/): Malicious code in comprehensive_vole_z3n (npm) (malicious package)
- [MAL-2025-84227](https://insights.sbomify.com/MAL-2025-84227/): Malicious code in comprehensive_silverfish_z3n (npm) (malicious package)
- [MAL-2025-84226](https://insights.sbomify.com/MAL-2025-84226/): Malicious code in comprehensive_cheetah_z3n (npm) (malicious package)
- [MAL-2025-84225](https://insights.sbomify.com/MAL-2025-84225/): Malicious code in comprehensive_bison_z3n (npm) (malicious package)
- [MAL-2025-84224](https://insights.sbomify.com/MAL-2025-84224/): Malicious code in complex_goldfish_z3n (npm) (malicious package)
- [MAL-2025-84223](https://insights.sbomify.com/MAL-2025-84223/): Malicious code in complete_swallow_z3n (npm) (malicious package)
- [MAL-2025-84222](https://insights.sbomify.com/MAL-2025-84222/): Malicious code in competent_louse_z3n (npm) (malicious package)
- [MAL-2025-84221](https://insights.sbomify.com/MAL-2025-84221/): Malicious code in competent_fox_z3n (npm) (malicious package)
- [MAL-2025-84220](https://insights.sbomify.com/MAL-2025-84220/): Malicious code in competent_cattle_z3n (npm) (malicious package)
- [MAL-2025-8422](https://insights.sbomify.com/MAL-2025-8422/): Malicious code in @legalzoom/assets-manager (npm) (malicious package)
- [MAL-2025-84219](https://insights.sbomify.com/MAL-2025-84219/): Malicious code in comparative_boa_z3n (npm) (malicious package)
- [MAL-2025-84218](https://insights.sbomify.com/MAL-2025-84218/): Malicious code in comparable_swallow_z3n (npm) (malicious package)
- [MAL-2025-84217](https://insights.sbomify.com/MAL-2025-84217/): Malicious code in comparable_silkworm_z3n (npm) (malicious package)
- [MAL-2025-84216](https://insights.sbomify.com/MAL-2025-84216/): Malicious code in comparable_parakeet_z3n (npm) (malicious package)
- [MAL-2025-84215](https://insights.sbomify.com/MAL-2025-84215/): Malicious code in comparable_mollusk_z3n (npm) (malicious package)
- [MAL-2025-84214](https://insights.sbomify.com/MAL-2025-84214/): Malicious code in comparable_mammal_z3n (npm) (malicious package)
- [MAL-2025-84213](https://insights.sbomify.com/MAL-2025-84213/): Malicious code in comparable_guppy_z3n (npm) (malicious package)
- [MAL-2025-84212](https://insights.sbomify.com/MAL-2025-84212/): Malicious code in compact_landfowl_z3n (npm) (malicious package)
- [MAL-2025-84211](https://insights.sbomify.com/MAL-2025-84211/): Malicious code in compact_flea_z3n (npm) (malicious package)
- [MAL-2025-84210](https://insights.sbomify.com/MAL-2025-84210/): Malicious code in communist_wildfowl_z3n (npm) (malicious package)
- [MAL-2025-8421](https://insights.sbomify.com/MAL-2025-8421/): Malicious code in @legalzoom/ai-assistant (npm) (malicious package)
- [MAL-2025-84209](https://insights.sbomify.com/MAL-2025-84209/): Malicious code in common_mastodon_z3n (npm) (malicious package)
- [MAL-2025-84208](https://insights.sbomify.com/MAL-2025-84208/): Malicious code in commercial_whale_z3n (npm) (malicious package)
- [MAL-2025-84207](https://insights.sbomify.com/MAL-2025-84207/): Malicious code in commercial_skunk_z3n (npm) (malicious package)
- [MAL-2025-84206](https://insights.sbomify.com/MAL-2025-84206/): Malicious code in commercial_guppy_z3n (npm) (malicious package)
- [MAL-2025-84205](https://insights.sbomify.com/MAL-2025-84205/): Malicious code in commercial_bandicoot_z3n (npm) (malicious package)
- [MAL-2025-84204](https://insights.sbomify.com/MAL-2025-84204/): Malicious code in coming_sole_z3n (npm) (malicious package)
- [MAL-2025-84203](https://insights.sbomify.com/MAL-2025-84203/): Malicious code in comfortable_toad_z3n (npm) (malicious package)
- [MAL-2025-84202](https://insights.sbomify.com/MAL-2025-84202/): Malicious code in comfortable_snake_z3n (npm) (malicious package)
- [MAL-2025-84201](https://insights.sbomify.com/MAL-2025-84201/): Malicious code in comfortable_marlin_z3n (npm) (malicious package)
- [MAL-2025-84200](https://insights.sbomify.com/MAL-2025-84200/): Malicious code in comfortable_fly_z3n (npm) (malicious package)
- [MAL-2025-8420](https://insights.sbomify.com/MAL-2025-8420/): Malicious code in @leaffm/test_faisal (npm) (malicious package)
- [MAL-2025-84199](https://insights.sbomify.com/MAL-2025-84199/): Malicious code in combined_donkey_z3n (npm) (malicious package)
- [MAL-2025-84198](https://insights.sbomify.com/MAL-2025-84198/): Malicious code in combative_quokka_z3n (npm) (malicious package)
- [MAL-2025-84197](https://insights.sbomify.com/MAL-2025-84197/): Malicious code in combative_gecko_z3n (npm) (malicious package)
- [MAL-2025-84196](https://insights.sbomify.com/MAL-2025-84196/): Malicious code in colourful_jaguar_z3n (npm) (malicious package)
- [MAL-2025-84195](https://insights.sbomify.com/MAL-2025-84195/): Malicious code in colourful_canidae_z3n (npm) (malicious package)
- [MAL-2025-84194](https://insights.sbomify.com/MAL-2025-84194/): Malicious code in coloured_walrus_z3n (npm) (malicious package)
- [MAL-2025-84193](https://insights.sbomify.com/MAL-2025-84193/): Malicious code in coloured_puma_z3n (npm) (malicious package)
- [MAL-2025-84192](https://insights.sbomify.com/MAL-2025-84192/): Malicious code in coloured_butterfly_z3n (npm) (malicious package)
- [MAL-2025-84191](https://insights.sbomify.com/MAL-2025-84191/): Malicious code in colossal_magpie_z3n (npm) (malicious package)
- [MAL-2025-84190](https://insights.sbomify.com/MAL-2025-84190/): Malicious code in colorful_snipe_z3n (npm) (malicious package)
- [MAL-2025-8419](https://insights.sbomify.com/MAL-2025-8419/): Malicious code in @leaffm/test-erlangga-profile1 (npm) (malicious package)
- [MAL-2025-84189](https://insights.sbomify.com/MAL-2025-84189/): Malicious code in colorful_bovid_z3n (npm) (malicious package)
- [MAL-2025-84188](https://insights.sbomify.com/MAL-2025-84188/): Malicious code in colonial_toucan_z3n (npm) (malicious package)
- [MAL-2025-84187](https://insights.sbomify.com/MAL-2025-84187/): Malicious code in colonial_moose_z3n (npm) (malicious package)
- [MAL-2025-84186](https://insights.sbomify.com/MAL-2025-84186/): Malicious code in colonial_gull_z3n (npm) (malicious package)
- [MAL-2025-84185](https://insights.sbomify.com/MAL-2025-84185/): Malicious code in collective_whale_z3n (npm) (malicious package)
- [MAL-2025-84184](https://insights.sbomify.com/MAL-2025-84184/): Malicious code in collective_warbler_z3n (npm) (malicious package)
- [MAL-2025-84183](https://insights.sbomify.com/MAL-2025-84183/): Malicious code in collective_parrotfish_z3n (npm) (malicious package)
- [MAL-2025-84182](https://insights.sbomify.com/MAL-2025-84182/): Malicious code in cold_monkey_z3n (npm) (malicious package)
- [MAL-2025-84181](https://insights.sbomify.com/MAL-2025-84181/): Malicious code in cold_gamefowl_z3n (npm) (malicious package)
- [MAL-2025-84180](https://insights.sbomify.com/MAL-2025-84180/): Malicious code in coherent_heron_z3n (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/179/