# Vulnerabilities published in 2025


- [MAL-2025-77486](https://insights.sbomify.com/MAL-2025-77486/): Malicious code in democratic_orca_z3n (npm) (malicious package)
- [MAL-2025-77485](https://insights.sbomify.com/MAL-2025-77485/): Malicious code in deliberate_hippopotamus_z3n (npm) (malicious package)
- [MAL-2025-77484](https://insights.sbomify.com/MAL-2025-77484/): Malicious code in deliberate_gayal_z3n (npm) (malicious package)
- [MAL-2025-77483](https://insights.sbomify.com/MAL-2025-77483/): Malicious code in defeated_earthworm_z3n (npm) (malicious package)
- [MAL-2025-77482](https://insights.sbomify.com/MAL-2025-77482/): Malicious code in decent_woodpecker_z3n (npm) (malicious package)
- [MAL-2025-77481](https://insights.sbomify.com/MAL-2025-77481/): Malicious code in dear_sailfish_z3n (npm) (malicious package)
- [MAL-2025-77480](https://insights.sbomify.com/MAL-2025-77480/): Malicious code in dear_loon_z3n (npm) (malicious package)
- [MAL-2025-7748](https://insights.sbomify.com/MAL-2025-7748/): Malicious code in @diotobtea/ad-error-accusantium (npm) (malicious package)
- [MAL-2025-77479](https://insights.sbomify.com/MAL-2025-77479/): Malicious code in dear_crawdad_z3n (npm) (malicious package)
- [MAL-2025-77478](https://insights.sbomify.com/MAL-2025-77478/): Malicious code in deafening_vicuna_z3n (npm) (malicious package)
- [MAL-2025-77477](https://insights.sbomify.com/MAL-2025-77477/): Malicious code in deafening_snipe_z3n (npm) (malicious package)
- [MAL-2025-77476](https://insights.sbomify.com/MAL-2025-77476/): Malicious code in deafening_shrew_z3n (npm) (malicious package)
- [MAL-2025-77475](https://insights.sbomify.com/MAL-2025-77475/): Malicious code in deaf_camel_z3n (npm) (malicious package)
- [MAL-2025-77474](https://insights.sbomify.com/MAL-2025-77474/): Malicious code in dead_pinniped_z3n (npm) (malicious package)
- [MAL-2025-77473](https://insights.sbomify.com/MAL-2025-77473/): Malicious code in dead_cricket_z3n (npm) (malicious package)
- [MAL-2025-77472](https://insights.sbomify.com/MAL-2025-77472/): Malicious code in dead_capybara_z3n (npm) (malicious package)
- [MAL-2025-77471](https://insights.sbomify.com/MAL-2025-77471/): Malicious code in dark_seahorse_z3n (npm) (malicious package)
- [MAL-2025-77470](https://insights.sbomify.com/MAL-2025-77470/): Malicious code in dangerous_kiwi_z3n (npm) (malicious package)
- [MAL-2025-7747](https://insights.sbomify.com/MAL-2025-7747/): Malicious code in @digital-wealth-web/cwp-service-setup (npm) (malicious package)
- [MAL-2025-77469](https://insights.sbomify.com/MAL-2025-77469/): Malicious code in damaged_spider_z3n (npm) (malicious package)
- [MAL-2025-77468](https://insights.sbomify.com/MAL-2025-77468/): Malicious code in damaged_marmot_z3n (npm) (malicious package)
- [MAL-2025-77467](https://insights.sbomify.com/MAL-2025-77467/): Malicious code in cute_sloth_z3n (npm) (malicious package)
- [MAL-2025-77466](https://insights.sbomify.com/MAL-2025-77466/): Malicious code in curved_snipe_z3n (npm) (malicious package)
- [MAL-2025-77465](https://insights.sbomify.com/MAL-2025-77465/): Malicious code in current_viper_z3n (npm) (malicious package)
- [MAL-2025-77464](https://insights.sbomify.com/MAL-2025-77464/): Malicious code in current_roundworm_z3n (npm) (malicious package)
- [MAL-2025-77463](https://insights.sbomify.com/MAL-2025-77463/): Malicious code in current_roadrunner_z3n (npm) (malicious package)
- [MAL-2025-77462](https://insights.sbomify.com/MAL-2025-77462/): Malicious code in curly_whippet_z3n (npm) (malicious package)
- [MAL-2025-77461](https://insights.sbomify.com/MAL-2025-77461/): Malicious code in curly_takin_z3n (npm) (malicious package)
- [MAL-2025-77460](https://insights.sbomify.com/MAL-2025-77460/): Malicious code in curly_scorpion_z3n (npm) (malicious package)
- [MAL-2025-7746](https://insights.sbomify.com/MAL-2025-7746/): Malicious code in @digital-wealth-web/cwp-service-setu (npm) (malicious package)
- [MAL-2025-77459](https://insights.sbomify.com/MAL-2025-77459/): Malicious code in curly_rabbit_z3n (npm) (malicious package)
- [MAL-2025-77458](https://insights.sbomify.com/MAL-2025-77458/): Malicious code in curly_lungfish_z3n (npm) (malicious package)
- [MAL-2025-77457](https://insights.sbomify.com/MAL-2025-77457/): Malicious code in curly_fox_z3n (npm) (malicious package)
- [MAL-2025-77456](https://insights.sbomify.com/MAL-2025-77456/): Malicious code in curly_dinosaur_z3n (npm) (malicious package)
- [MAL-2025-77455](https://insights.sbomify.com/MAL-2025-77455/): Malicious code in curious_clownfish_z3n (npm) (malicious package)
- [MAL-2025-77454](https://insights.sbomify.com/MAL-2025-77454/): Malicious code in cuddly_skink_z3n (npm) (malicious package)
- [MAL-2025-77453](https://insights.sbomify.com/MAL-2025-77453/): Malicious code in cuddly_marlin_z3n (npm) (malicious package)
- [MAL-2025-77452](https://insights.sbomify.com/MAL-2025-77452/): Malicious code in cuddly_junglefowl_z3n (npm) (malicious package)
- [MAL-2025-77451](https://insights.sbomify.com/MAL-2025-77451/): Malicious code in cuddly_jaguar_z3n (npm) (malicious package)
- [MAL-2025-77450](https://insights.sbomify.com/MAL-2025-77450/): Malicious code in critical_impala_z3n (npm) (malicious package)
- [MAL-2025-7745](https://insights.sbomify.com/MAL-2025-7745/): Malicious code in @dashboard-experience/react-flagr (npm) (malicious package)
- [MAL-2025-77449](https://insights.sbomify.com/MAL-2025-77449/): Malicious code in critical_coyote_z3n (npm) (malicious package)
- [MAL-2025-77448](https://insights.sbomify.com/MAL-2025-77448/): Malicious code in criminal_catshark_z3n (npm) (malicious package)
- [MAL-2025-77447](https://insights.sbomify.com/MAL-2025-77447/): Malicious code in creative_elk_z3n (npm) (malicious package)
- [MAL-2025-77446](https://insights.sbomify.com/MAL-2025-77446/): Malicious code in creative_dog_z3n (npm) (malicious package)
- [MAL-2025-77445](https://insights.sbomify.com/MAL-2025-77445/): Malicious code in crazy_spoonbill_z3n (npm) (malicious package)
- [MAL-2025-77444](https://insights.sbomify.com/MAL-2025-77444/): Malicious code in correct_pheasant_z3n (npm) (malicious package)
- [MAL-2025-77443](https://insights.sbomify.com/MAL-2025-77443/): Malicious code in cooperative_goat_z3n (npm) (malicious package)
- [MAL-2025-77442](https://insights.sbomify.com/MAL-2025-77442/): Malicious code in cooperative_ant_z3n (npm) (malicious package)
- [MAL-2025-77441](https://insights.sbomify.com/MAL-2025-77441/): Malicious code in cool_puffin_z3n (npm) (malicious package)
- [MAL-2025-77440](https://insights.sbomify.com/MAL-2025-77440/): Malicious code in cooing_felidae_z3n (npm) (malicious package)
- [MAL-2025-7744](https://insights.sbomify.com/MAL-2025-7744/): Malicious code in @ctra/utils (npm) (malicious package)
- [MAL-2025-77439](https://insights.sbomify.com/MAL-2025-77439/): Malicious code in convincing_llama_z3n (npm) (malicious package)
- [MAL-2025-77438](https://insights.sbomify.com/MAL-2025-77438/): Malicious code in convinced_wombat_z3n (npm) (malicious package)
- [MAL-2025-77437](https://insights.sbomify.com/MAL-2025-77437/): Malicious code in convinced_chameleon_z3n (npm) (malicious package)
- [MAL-2025-77436](https://insights.sbomify.com/MAL-2025-77436/): Malicious code in conventional_walrus_z3n (npm) (malicious package)
- [MAL-2025-77435](https://insights.sbomify.com/MAL-2025-77435/): Malicious code in conventional_boar_z3n (npm) (malicious package)
- [MAL-2025-77434](https://insights.sbomify.com/MAL-2025-77434/): Malicious code in conventional_aardwolf_z3n (npm) (malicious package)
- [MAL-2025-77433](https://insights.sbomify.com/MAL-2025-77433/): Malicious code in convenient_cardinal_z3n (npm) (malicious package)
- [MAL-2025-77432](https://insights.sbomify.com/MAL-2025-77432/): Malicious code in controlled_minnow_z3n (npm) (malicious package)
- [MAL-2025-77431](https://insights.sbomify.com/MAL-2025-77431/): Malicious code in continuous_tarsier_z3n (npm) (malicious package)
- [MAL-2025-77430](https://insights.sbomify.com/MAL-2025-77430/): Malicious code in continuous_kite_z3n (npm) (malicious package)
- [MAL-2025-7743](https://insights.sbomify.com/MAL-2025-7743/): Malicious code in @csid-na/imc3-components (npm) (malicious package)
- [MAL-2025-77429](https://insights.sbomify.com/MAL-2025-77429/): Malicious code in continuing_raven_z3n (npm) (malicious package)
- [MAL-2025-77428](https://insights.sbomify.com/MAL-2025-77428/): Malicious code in continued_swallow_z3n (npm) (malicious package)
- [MAL-2025-77427](https://insights.sbomify.com/MAL-2025-77427/): Malicious code in continued_mite_z3n (npm) (malicious package)
- [MAL-2025-77426](https://insights.sbomify.com/MAL-2025-77426/): Malicious code in continental_snake_z3n (npm) (malicious package)
- [MAL-2025-77425](https://insights.sbomify.com/MAL-2025-77425/): Malicious code in continental_smelt_z3n (npm) (malicious package)
- [MAL-2025-77424](https://insights.sbomify.com/MAL-2025-77424/): Malicious code in content_sawfish_z3n (npm) (malicious package)
- [MAL-2025-77423](https://insights.sbomify.com/MAL-2025-77423/): Malicious code in contemporary_tyrannosaurus_z3n (npm) (malicious package)
- [MAL-2025-77422](https://insights.sbomify.com/MAL-2025-77422/): Malicious code in contemporary_tiglon_z3n (npm) (malicious package)
- [MAL-2025-77421](https://insights.sbomify.com/MAL-2025-77421/): Malicious code in constitutional_eel_z3n (npm) (malicious package)
- [MAL-2025-77420](https://insights.sbomify.com/MAL-2025-77420/): Malicious code in constant_cougar_z3n (npm) (malicious package)
- [MAL-2025-7742](https://insights.sbomify.com/MAL-2025-7742/): Malicious code in @cseofeedback/feedback-lite (npm) (malicious package)
- [MAL-2025-77419](https://insights.sbomify.com/MAL-2025-77419/): Malicious code in consistent_boa_z3n (npm) (malicious package)
- [MAL-2025-77418](https://insights.sbomify.com/MAL-2025-77418/): Malicious code in considerable_galliform_z3n (npm) (malicious package)
- [MAL-2025-77417](https://insights.sbomify.com/MAL-2025-77417/): Malicious code in conservative_stoat_z3n (npm) (malicious package)
- [MAL-2025-77416](https://insights.sbomify.com/MAL-2025-77416/): Malicious code in conservative_chimpanzee_z3n (npm) (malicious package)
- [MAL-2025-77415](https://insights.sbomify.com/MAL-2025-77415/): Malicious code in conservation_quelea_z3n (npm) (malicious package)
- [MAL-2025-77414](https://insights.sbomify.com/MAL-2025-77414/): Malicious code in conscious_raccoon_z3n (npm) (malicious package)
- [MAL-2025-77413](https://insights.sbomify.com/MAL-2025-77413/): Malicious code in conscious_boar_z3n (npm) (malicious package)
- [MAL-2025-77412](https://insights.sbomify.com/MAL-2025-77412/): Malicious code in confused_lark_z3n (npm) (malicious package)
- [MAL-2025-77411](https://insights.sbomify.com/MAL-2025-77411/): Malicious code in confidential_bird_z3n (npm) (malicious package)
- [MAL-2025-77410](https://insights.sbomify.com/MAL-2025-77410/): Malicious code in confidential_armadillo_z3n (npm) (malicious package)
- [MAL-2025-7741](https://insights.sbomify.com/MAL-2025-7741/): Malicious code in @crypto-lib/utils (npm) (malicious package)
- [MAL-2025-77409](https://insights.sbomify.com/MAL-2025-77409/): Malicious code in confident_pig_z3n (npm) (malicious package)
- [MAL-2025-77408](https://insights.sbomify.com/MAL-2025-77408/): Malicious code in confident_egret_z3n (npm) (malicious package)
- [MAL-2025-77407](https://insights.sbomify.com/MAL-2025-77407/): Malicious code in condemned_whale_z3n (npm) (malicious package)
- [MAL-2025-77406](https://insights.sbomify.com/MAL-2025-77406/): Malicious code in condemned_hedgehog_z3n (npm) (malicious package)
- [MAL-2025-77405](https://insights.sbomify.com/MAL-2025-77405/): Malicious code in condemned_crawdad_z3n (npm) (malicious package)
- [MAL-2025-77404](https://insights.sbomify.com/MAL-2025-77404/): Malicious code in concrete_planarian_z3n (npm) (malicious package)
- [MAL-2025-77403](https://insights.sbomify.com/MAL-2025-77403/): Malicious code in concerned_harrier_z3n (npm) (malicious package)
- [MAL-2025-77402](https://insights.sbomify.com/MAL-2025-77402/): Malicious code in conceptual_lemur_z3n (npm) (malicious package)
- [MAL-2025-77401](https://insights.sbomify.com/MAL-2025-77401/): Malicious code in compulsory_kingfisher_z3n (npm) (malicious package)
- [MAL-2025-77400](https://insights.sbomify.com/MAL-2025-77400/): Malicious code in compulsory_hoverfly_z3n (npm) (malicious package)
- [MAL-2025-774](https://insights.sbomify.com/MAL-2025-774/): Malicious code in @mrpudidi/gravatar (npm) (malicious package)
- [MAL-2025-77399](https://insights.sbomify.com/MAL-2025-77399/): Malicious code in compulsory_crawdad_z3n (npm) (malicious package)
- [MAL-2025-77398](https://insights.sbomify.com/MAL-2025-77398/): Malicious code in compulsory_cat_z3n (npm) (malicious package)
- [MAL-2025-77397](https://insights.sbomify.com/MAL-2025-77397/): Malicious code in comprehensive_spider_z3n (npm) (malicious package)
- [MAL-2025-77396](https://insights.sbomify.com/MAL-2025-77396/): Malicious code in comprehensive_piranha_z3n (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/254/