# Vulnerabilities published in 2025


- [MAL-2025-8148](https://insights.sbomify.com/MAL-2025-8148/): Malicious code in @kollusietea/culpa-officiis-nulla (npm) (malicious package)
- [MAL-2025-81479](https://insights.sbomify.com/MAL-2025-81479/): Malicious code in stormy_albatross_z3n (npm) (malicious package)
- [MAL-2025-81478](https://insights.sbomify.com/MAL-2025-81478/): Malicious code in still_zebra_z3n (npm) (malicious package)
- [MAL-2025-81477](https://insights.sbomify.com/MAL-2025-81477/): Malicious code in stiff_rook_z3n (npm) (malicious package)
- [MAL-2025-81476](https://insights.sbomify.com/MAL-2025-81476/): Malicious code in stiff_antelope_z3n (npm) (malicious package)
- [MAL-2025-81475](https://insights.sbomify.com/MAL-2025-81475/): Malicious code in sticky_elephant_z3n (npm) (malicious package)
- [MAL-2025-81474](https://insights.sbomify.com/MAL-2025-81474/): Malicious code in sticky_caterpillar_z3n (npm) (malicious package)
- [MAL-2025-81473](https://insights.sbomify.com/MAL-2025-81473/): Malicious code in steady_wolf_z3n (npm) (malicious package)
- [MAL-2025-81472](https://insights.sbomify.com/MAL-2025-81472/): Malicious code in steady_kite_z3n (npm) (malicious package)
- [MAL-2025-81471](https://insights.sbomify.com/MAL-2025-81471/): Malicious code in statutory_mongoose_z3n (npm) (malicious package)
- [MAL-2025-81470](https://insights.sbomify.com/MAL-2025-81470/): Malicious code in statutory_boa_z3n (npm) (malicious package)
- [MAL-2025-8147](https://insights.sbomify.com/MAL-2025-8147/): Malicious code in @kollusietea/culpa-odit-vitae (npm) (malicious package)
- [MAL-2025-81469](https://insights.sbomify.com/MAL-2025-81469/): Malicious code in statistical_mink_z3n (npm) (malicious package)
- [MAL-2025-81468](https://insights.sbomify.com/MAL-2025-81468/): Malicious code in statistical_cicada_z3n (npm) (malicious package)
- [MAL-2025-81467](https://insights.sbomify.com/MAL-2025-81467/): Malicious code in static_vulture_z3n (npm) (malicious package)
- [MAL-2025-81466](https://insights.sbomify.com/MAL-2025-81466/): Malicious code in static_lungfish_z3n (npm) (malicious package)
- [MAL-2025-81465](https://insights.sbomify.com/MAL-2025-81465/): Malicious code in static_hawk_z3n (npm) (malicious package)
- [MAL-2025-81464](https://insights.sbomify.com/MAL-2025-81464/): Malicious code in stale_bear_z3n (npm) (malicious package)
- [MAL-2025-81463](https://insights.sbomify.com/MAL-2025-81463/): Malicious code in stable_otter_z3n (npm) (malicious package)
- [MAL-2025-81462](https://insights.sbomify.com/MAL-2025-81462/): Malicious code in stable_bird_z3n (npm) (malicious package)
- [MAL-2025-81461](https://insights.sbomify.com/MAL-2025-81461/): Malicious code in squealing_silverfish_z3n (npm) (malicious package)
- [MAL-2025-81460](https://insights.sbomify.com/MAL-2025-81460/): Malicious code in squealing_primate_z3n (npm) (malicious package)
- [MAL-2025-8146](https://insights.sbomify.com/MAL-2025-8146/): Malicious code in @kollusietea/consequuntur-necessitatibus-consectetur (npm) (malicious package)
- [MAL-2025-81459](https://insights.sbomify.com/MAL-2025-81459/): Malicious code in squealing_landfowl_z3n (npm) (malicious package)
- [MAL-2025-81458](https://insights.sbomify.com/MAL-2025-81458/): Malicious code in squealing_guineafowl_z3n (npm) (malicious package)
- [MAL-2025-81457](https://insights.sbomify.com/MAL-2025-81457/): Malicious code in squealing_firefly_z3n (npm) (malicious package)
- [MAL-2025-81456](https://insights.sbomify.com/MAL-2025-81456/): Malicious code in square_roundworm_z3n (npm) (malicious package)
- [MAL-2025-81455](https://insights.sbomify.com/MAL-2025-81455/): Malicious code in spotty_guineafowl_z3n (npm) (malicious package)
- [MAL-2025-81454](https://insights.sbomify.com/MAL-2025-81454/): Malicious code in spotless_lemming_z3n (npm) (malicious package)
- [MAL-2025-81453](https://insights.sbomify.com/MAL-2025-81453/): Malicious code in spotless_echidna_z3n (npm) (malicious package)
- [MAL-2025-81452](https://insights.sbomify.com/MAL-2025-81452/): Malicious code in sporting_yak_z3n (npm) (malicious package)
- [MAL-2025-81451](https://insights.sbomify.com/MAL-2025-81451/): Malicious code in sporting_mackerel_z3n (npm) (malicious package)
- [MAL-2025-81450](https://insights.sbomify.com/MAL-2025-81450/): Malicious code in spiritual_seahorse_z3n (npm) (malicious package)
- [MAL-2025-8145](https://insights.sbomify.com/MAL-2025-8145/): Malicious code in @kollusietea/consequuntur-nam-tempora-expedita (npm) (malicious package)
- [MAL-2025-81449](https://insights.sbomify.com/MAL-2025-81449/): Malicious code in spicy_possum_z3n (npm) (malicious package)
- [MAL-2025-81448](https://insights.sbomify.com/MAL-2025-81448/): Malicious code in spectacular_bee_z3n (npm) (malicious package)
- [MAL-2025-81447](https://insights.sbomify.com/MAL-2025-81447/): Malicious code in specified_dragon_z3n (npm) (malicious package)
- [MAL-2025-81446](https://insights.sbomify.com/MAL-2025-81446/): Malicious code in specified_barracuda_z3n (npm) (malicious package)
- [MAL-2025-81445](https://insights.sbomify.com/MAL-2025-81445/): Malicious code in specific_cicada_z3n (npm) (malicious package)
- [MAL-2025-81444](https://insights.sbomify.com/MAL-2025-81444/): Malicious code in spatial_mosquito_z3n (npm) (malicious package)
- [MAL-2025-81443](https://insights.sbomify.com/MAL-2025-81443/): Malicious code in spatial_falcon_z3n (npm) (malicious package)
- [MAL-2025-81442](https://insights.sbomify.com/MAL-2025-81442/): Malicious code in sparkling_wallaby_z3n (npm) (malicious package)
- [MAL-2025-81441](https://insights.sbomify.com/MAL-2025-81441/): Malicious code in spare_loon_z3n (npm) (malicious package)
- [MAL-2025-81440](https://insights.sbomify.com/MAL-2025-81440/): Malicious code in spare_cephalopod_z3n (npm) (malicious package)
- [MAL-2025-8144](https://insights.sbomify.com/MAL-2025-8144/): Malicious code in @kollusietea/consequatur-molestias-et-ratione (npm) (malicious package)
- [MAL-2025-81439](https://insights.sbomify.com/MAL-2025-81439/): Malicious code in soviet_landfowl_z3n (npm) (malicious package)
- [MAL-2025-81438](https://insights.sbomify.com/MAL-2025-81438/): Malicious code in southern_hedgehog_z3n (npm) (malicious package)
- [MAL-2025-81437](https://insights.sbomify.com/MAL-2025-81437/): Malicious code in sour_walrus_z3n (npm) (malicious package)
- [MAL-2025-81436](https://insights.sbomify.com/MAL-2025-81436/): Malicious code in sour_mouse_z3n (npm) (malicious package)
- [MAL-2025-81435](https://insights.sbomify.com/MAL-2025-81435/): Malicious code in sour_antelope_z3n (npm) (malicious package)
- [MAL-2025-81434](https://insights.sbomify.com/MAL-2025-81434/): Malicious code in sound_warbler_z3n (npm) (malicious package)
- [MAL-2025-81433](https://insights.sbomify.com/MAL-2025-81433/): Malicious code in sore_alpaca_z3n (npm) (malicious package)
- [MAL-2025-81432](https://insights.sbomify.com/MAL-2025-81432/): Malicious code in sole_roadrunner_z3n (npm) (malicious package)
- [MAL-2025-81431](https://insights.sbomify.com/MAL-2025-81431/): Malicious code in sole_guanaco_z3n (npm) (malicious package)
- [MAL-2025-81430](https://insights.sbomify.com/MAL-2025-81430/): Malicious code in socialist_limpet_z3n (npm) (malicious package)
- [MAL-2025-8143](https://insights.sbomify.com/MAL-2025-8143/): Malicious code in @kollusietea/aut-omnis-debitis (npm) (malicious package)
- [MAL-2025-81429](https://insights.sbomify.com/MAL-2025-81429/): Malicious code in social_fly_z3n (npm) (malicious package)
- [MAL-2025-81428](https://insights.sbomify.com/MAL-2025-81428/): Malicious code in social_crow_z3n (npm) (malicious package)
- [MAL-2025-81427](https://insights.sbomify.com/MAL-2025-81427/): Malicious code in smooth_mite_z3n (npm) (malicious package)
- [MAL-2025-81426](https://insights.sbomify.com/MAL-2025-81426/): Malicious code in smiling_lungfish_z3n (npm) (malicious package)
- [MAL-2025-81425](https://insights.sbomify.com/MAL-2025-81425/): Malicious code in smart_turkey_z3n (npm) (malicious package)
- [MAL-2025-81424](https://insights.sbomify.com/MAL-2025-81424/): Malicious code in slight_toucan_z3n (npm) (malicious package)
- [MAL-2025-81423](https://insights.sbomify.com/MAL-2025-81423/): Malicious code in slight_kiwi_z3n (npm) (malicious package)
- [MAL-2025-81422](https://insights.sbomify.com/MAL-2025-81422/): Malicious code in slight_cat_z3n (npm) (malicious package)
- [MAL-2025-81421](https://insights.sbomify.com/MAL-2025-81421/): Malicious code in sleepy_crocodile_z3n (npm) (malicious package)
- [MAL-2025-81420](https://insights.sbomify.com/MAL-2025-81420/): Malicious code in sleepy_bear_z3n (npm) (malicious package)
- [MAL-2025-8142](https://insights.sbomify.com/MAL-2025-8142/): Malicious code in @kollusietea/aspernatur-fuga-accusamus-ipsa (npm) (malicious package)
- [MAL-2025-81419](https://insights.sbomify.com/MAL-2025-81419/): Malicious code in skinny_toad_z3n (npm) (malicious package)
- [MAL-2025-81418](https://insights.sbomify.com/MAL-2025-81418/): Malicious code in skinny_galliform_z3n (npm) (malicious package)
- [MAL-2025-81417](https://insights.sbomify.com/MAL-2025-81417/): Malicious code in skinny_centipede_z3n (npm) (malicious package)
- [MAL-2025-81416](https://insights.sbomify.com/MAL-2025-81416/): Malicious code in skilled_kiwi_z3n (npm) (malicious package)
- [MAL-2025-81415](https://insights.sbomify.com/MAL-2025-81415/): Malicious code in siska-tongseng18-sukiwir (npm) (malicious package)
- [MAL-2025-81414](https://insights.sbomify.com/MAL-2025-81414/): Malicious code in siska-tempe74-sukiwir (npm) (malicious package)
- [MAL-2025-81413](https://insights.sbomify.com/MAL-2025-81413/): Malicious code in siska-tempe23-sukiwir (npm) (malicious package)
- [MAL-2025-81412](https://insights.sbomify.com/MAL-2025-81412/): Malicious code in siska-taiwan21-sukiwir (npm) (malicious package)
- [MAL-2025-81411](https://insights.sbomify.com/MAL-2025-81411/): Malicious code in siska-tahu25-sukiwir (npm) (malicious package)
- [MAL-2025-81410](https://insights.sbomify.com/MAL-2025-81410/): Malicious code in siska-serimuka40-sukiwir (npm) (malicious package)
- [MAL-2025-8141](https://insights.sbomify.com/MAL-2025-8141/): Malicious code in @kollusietea/architecto-occaecati-eaque (npm) (malicious package)
- [MAL-2025-81409](https://insights.sbomify.com/MAL-2025-81409/): Malicious code in siska-semur98-sukiwir (npm) (malicious package)
- [MAL-2025-81408](https://insights.sbomify.com/MAL-2025-81408/): Malicious code in siska-semur32-sukiwir (npm) (malicious package)
- [MAL-2025-81407](https://insights.sbomify.com/MAL-2025-81407/): Malicious code in siska-sego40-sukiwir (npm) (malicious package)
- [MAL-2025-81406](https://insights.sbomify.com/MAL-2025-81406/): Malicious code in siska-sate4-sukiwir (npm) (malicious package)
- [MAL-2025-81405](https://insights.sbomify.com/MAL-2025-81405/): Malicious code in siska-saguer81-sukiwir (npm) (malicious package)
- [MAL-2025-81404](https://insights.sbomify.com/MAL-2025-81404/): Malicious code in siska-ruwet28-sukiwir (npm) (malicious package)
- [MAL-2025-81403](https://insights.sbomify.com/MAL-2025-81403/): Malicious code in siska-rujaksoto19-sukiwir (npm) (malicious package)
- [MAL-2025-81402](https://insights.sbomify.com/MAL-2025-81402/): Malicious code in siska-rojak28-sukiwir (npm) (malicious package)
- [MAL-2025-81401](https://insights.sbomify.com/MAL-2025-81401/): Malicious code in siska-rangi29-sukiwir (npm) (malicious package)
- [MAL-2025-81400](https://insights.sbomify.com/MAL-2025-81400/): Malicious code in siska-rangi24-sukiwir (npm) (malicious package)
- [MAL-2025-8140](https://insights.sbomify.com/MAL-2025-8140/): Malicious code in @kollusietea/architecto-dolores-unde (npm) (malicious package)
- [MAL-2025-814](https://insights.sbomify.com/MAL-2025-814/): Malicious code in cdc-chatbot (npm) (malicious package)
- [MAL-2025-81399](https://insights.sbomify.com/MAL-2025-81399/): Malicious code in siska-rangginang26-sukiwir (npm) (malicious package)
- [MAL-2025-81398](https://insights.sbomify.com/MAL-2025-81398/): Malicious code in siska-pisang51-sukiwir (npm) (malicious package)
- [MAL-2025-81397](https://insights.sbomify.com/MAL-2025-81397/): Malicious code in siska-nasisayur35-sukiwir (npm) (malicious package)
- [MAL-2025-81396](https://insights.sbomify.com/MAL-2025-81396/): Malicious code in siska-mieayam4-sukiwir (npm) (malicious package)
- [MAL-2025-81395](https://insights.sbomify.com/MAL-2025-81395/): Malicious code in siska-mieayam36-sukiwir (npm) (malicious package)
- [MAL-2025-81394](https://insights.sbomify.com/MAL-2025-81394/): Malicious code in siska-mieaceh54-sukiwir (npm) (malicious package)
- [MAL-2025-81393](https://insights.sbomify.com/MAL-2025-81393/): Malicious code in siska-mie92-sukiwir (npm) (malicious package)
- [MAL-2025-81392](https://insights.sbomify.com/MAL-2025-81392/): Malicious code in siska-mie67-sukiwir (npm) (malicious package)
- [MAL-2025-81391](https://insights.sbomify.com/MAL-2025-81391/): Malicious code in siska-martabak87-sukiwir (npm) (malicious package)
- [MAL-2025-81390](https://insights.sbomify.com/MAL-2025-81390/): Malicious code in siska-mangut46-sukiwir (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/210/