# Vulnerabilities published in 2025


- [MAL-2025-71539](https://insights.sbomify.com/MAL-2025-71539/): Malicious code in weekly-teal-stingray (npm) (malicious package)
- [MAL-2025-71538](https://insights.sbomify.com/MAL-2025-71538/): Malicious code in weekly-teal-lion (npm) (malicious package)
- [MAL-2025-71537](https://insights.sbomify.com/MAL-2025-71537/): Malicious code in weekly-scarlet-hippopotamus (npm) (malicious package)
- [MAL-2025-71536](https://insights.sbomify.com/MAL-2025-71536/): Malicious code in weekly-gold-sheep (npm) (malicious package)
- [MAL-2025-71535](https://insights.sbomify.com/MAL-2025-71535/): Malicious code in weekly-copper-grouse (npm) (malicious package)
- [MAL-2025-71534](https://insights.sbomify.com/MAL-2025-71534/): Malicious code in weekly-azure-planarian (npm) (malicious package)
- [MAL-2025-71533](https://insights.sbomify.com/MAL-2025-71533/): Malicious code in weekdayy (npm) (malicious package)
- [MAL-2025-71532](https://insights.sbomify.com/MAL-2025-71532/): Malicious code in wee-tomato-marsupial (npm) (malicious package)
- [MAL-2025-71531](https://insights.sbomify.com/MAL-2025-71531/): Malicious code in wee-orange-duck (npm) (malicious package)
- [MAL-2025-71530](https://insights.sbomify.com/MAL-2025-71530/): Malicious code in wee-blush-bear (npm) (malicious package)
- [MAL-2025-7153](https://insights.sbomify.com/MAL-2025-7153/): Malicious code in @crabas0npm/ad-repellendus-doloribus (npm) (malicious package)
- [MAL-2025-71529](https://insights.sbomify.com/MAL-2025-71529/): Malicious code in wee-black-tortoise (npm) (malicious package)
- [MAL-2025-71528](https://insights.sbomify.com/MAL-2025-71528/): Malicious code in weary-white-finch (npm) (malicious package)
- [MAL-2025-71527](https://insights.sbomify.com/MAL-2025-71527/): Malicious code in weary-rose-marmot (npm) (malicious package)
- [MAL-2025-71526](https://insights.sbomify.com/MAL-2025-71526/): Malicious code in weary-magenta-snail (npm) (malicious package)
- [MAL-2025-71525](https://insights.sbomify.com/MAL-2025-71525/): Malicious code in weary-gold-reptile (npm) (malicious package)
- [MAL-2025-71524](https://insights.sbomify.com/MAL-2025-71524/): Malicious code in weary-coral-spoonbill (npm) (malicious package)
- [MAL-2025-71523](https://insights.sbomify.com/MAL-2025-71523/): Malicious code in weary-blush-ostrich (npm) (malicious package)
- [MAL-2025-71522](https://insights.sbomify.com/MAL-2025-71522/): Malicious code in wealthy-maroon-egret (npm) (malicious package)
- [MAL-2025-71521](https://insights.sbomify.com/MAL-2025-71521/): Malicious code in weak-white-bee (npm) (malicious package)
- [MAL-2025-71520](https://insights.sbomify.com/MAL-2025-71520/): Malicious code in weak-green-tahr (npm) (malicious package)
- [MAL-2025-7152](https://insights.sbomify.com/MAL-2025-7152/): Malicious code in @crabas0npm/ad-possimus-quis-sit (npm) (malicious package)
- [MAL-2025-71519](https://insights.sbomify.com/MAL-2025-71519/): Malicious code in weak-coffee-warbler (npm) (malicious package)
- [MAL-2025-71518](https://insights.sbomify.com/MAL-2025-71518/): Malicious code in watery-gold-firefly (npm) (malicious package)
- [MAL-2025-71517](https://insights.sbomify.com/MAL-2025-71517/): Malicious code in watery-amber-louse (npm) (malicious package)
- [MAL-2025-71516](https://insights.sbomify.com/MAL-2025-71516/): Malicious code in wasteful-sapphire-parrot (npm) (malicious package)
- [MAL-2025-71515](https://insights.sbomify.com/MAL-2025-71515/): Malicious code in wasteful-indigo-spider (npm) (malicious package)
- [MAL-2025-71514](https://insights.sbomify.com/MAL-2025-71514/): Malicious code in warm-pink-chipmunk (npm) (malicious package)
- [MAL-2025-71513](https://insights.sbomify.com/MAL-2025-71513/): Malicious code in wandering-crimson-chimpanzee (npm) (malicious package)
- [MAL-2025-71512](https://insights.sbomify.com/MAL-2025-71512/): Malicious code in wandering-blush-anteater (npm) (malicious package)
- [MAL-2025-71511](https://insights.sbomify.com/MAL-2025-71511/): Malicious code in vulnerable-purple-smelt (npm) (malicious package)
- [MAL-2025-71510](https://insights.sbomify.com/MAL-2025-71510/): Malicious code in vulnerable-plum-bobcat (npm) (malicious package)
- [MAL-2025-7151](https://insights.sbomify.com/MAL-2025-7151/): Malicious code in @crabas0npm/ad-harum-ex (npm) (malicious package)
- [MAL-2025-71509](https://insights.sbomify.com/MAL-2025-71509/): Malicious code in vulnerable-gold-muskox (npm) (malicious package)
- [MAL-2025-71508](https://insights.sbomify.com/MAL-2025-71508/): Malicious code in vulnerable-cyan-tarantula (npm) (malicious package)
- [MAL-2025-71507](https://insights.sbomify.com/MAL-2025-71507/): Malicious code in vulnerable-cyan-alligator (npm) (malicious package)
- [MAL-2025-71506](https://insights.sbomify.com/MAL-2025-71506/): Malicious code in vulnerable-chocolate-gazelle (npm) (malicious package)
- [MAL-2025-71505](https://insights.sbomify.com/MAL-2025-71505/): Malicious code in voluntary-silver-elk (npm) (malicious package)
- [MAL-2025-71504](https://insights.sbomify.com/MAL-2025-71504/): Malicious code in voluntary-orange-vicuna (npm) (malicious package)
- [MAL-2025-71503](https://insights.sbomify.com/MAL-2025-71503/): Malicious code in voluntary-emerald-eagle (npm) (malicious package)
- [MAL-2025-71502](https://insights.sbomify.com/MAL-2025-71502/): Malicious code in voluntary-beige-planarian (npm) (malicious package)
- [MAL-2025-71501](https://insights.sbomify.com/MAL-2025-71501/): Malicious code in voluminous-jade-scallop (npm) (malicious package)
- [MAL-2025-71500](https://insights.sbomify.com/MAL-2025-71500/): Malicious code in voluminous-blue-barracuda (npm) (malicious package)
- [MAL-2025-7150](https://insights.sbomify.com/MAL-2025-7150/): Malicious code in @crabas0npm/accusantium-molestiae-asperiores-nihil (npm) (malicious package)
- [MAL-2025-715](https://insights.sbomify.com/MAL-2025-715/): Malicious code in smartling-openapi-spec (npm) (malicious package)
- [MAL-2025-71499](https://insights.sbomify.com/MAL-2025-71499/): Malicious code in voiceless-harlequin-hawk (npm) (malicious package)
- [MAL-2025-71498](https://insights.sbomify.com/MAL-2025-71498/): Malicious code in voiceless-chocolate-catfish (npm) (malicious package)
- [MAL-2025-71497](https://insights.sbomify.com/MAL-2025-71497/): Malicious code in voiceless-beige-amphibian (npm) (malicious package)
- [MAL-2025-71496](https://insights.sbomify.com/MAL-2025-71496/): Malicious code in voiceless-aquamarine-crocodile (npm) (malicious package)
- [MAL-2025-71495](https://insights.sbomify.com/MAL-2025-71495/): Malicious code in vocational-salmon-flea (npm) (malicious package)
- [MAL-2025-71494](https://insights.sbomify.com/MAL-2025-71494/): Malicious code in vocational-maroon-marsupial (npm) (malicious package)
- [MAL-2025-71493](https://insights.sbomify.com/MAL-2025-71493/): Malicious code in vocational-maroon-bobolink (npm) (malicious package)
- [MAL-2025-71492](https://insights.sbomify.com/MAL-2025-71492/): Malicious code in vocational-harlequin-camel (npm) (malicious package)
- [MAL-2025-71491](https://insights.sbomify.com/MAL-2025-71491/): Malicious code in vocal-salmon-yak (npm) (malicious package)
- [MAL-2025-71490](https://insights.sbomify.com/MAL-2025-71490/): Malicious code in vocal-plum-leech (npm) (malicious package)
- [MAL-2025-7149](https://insights.sbomify.com/MAL-2025-7149/): Malicious code in @crabas0npm/accusamus-soluta-eveniet (npm) (malicious package)
- [MAL-2025-71489](https://insights.sbomify.com/MAL-2025-71489/): Malicious code in vocal-coffee-toucan (npm) (malicious package)
- [MAL-2025-71488](https://insights.sbomify.com/MAL-2025-71488/): Malicious code in vocal-apricot-penguin (npm) (malicious package)
- [MAL-2025-71487](https://insights.sbomify.com/MAL-2025-71487/): Malicious code in vocal-amethyst-ferret (npm) (malicious package)
- [MAL-2025-71486](https://insights.sbomify.com/MAL-2025-71486/): Malicious code in vividvortex (npm) (malicious package)
- [MAL-2025-71485](https://insights.sbomify.com/MAL-2025-71485/): Malicious code in vivid-maroon-wildebeest (npm) (malicious package)
- [MAL-2025-71484](https://insights.sbomify.com/MAL-2025-71484/): Malicious code in vivid-chocolate-lion (npm) (malicious package)
- [MAL-2025-71483](https://insights.sbomify.com/MAL-2025-71483/): Malicious code in vivid-aqua-thrush (npm) (malicious package)
- [MAL-2025-71482](https://insights.sbomify.com/MAL-2025-71482/): Malicious code in vivacious-white-constrictor (npm) (malicious package)
- [MAL-2025-71481](https://insights.sbomify.com/MAL-2025-71481/): Malicious code in vivacious-red-hoverfly (npm) (malicious package)
- [MAL-2025-71480](https://insights.sbomify.com/MAL-2025-71480/): Malicious code in vivacious-harlequin-bobolink (npm) (malicious package)
- [MAL-2025-7148](https://insights.sbomify.com/MAL-2025-7148/): Malicious code in @crabas0npm/accusamus-nesciunt-culpa (npm) (malicious package)
- [MAL-2025-71479](https://insights.sbomify.com/MAL-2025-71479/): Malicious code in vitreous-salmon-snake (npm) (malicious package)
- [MAL-2025-71478](https://insights.sbomify.com/MAL-2025-71478/): Malicious code in vitreous-salmon-ptarmigan (npm) (malicious package)
- [MAL-2025-71477](https://insights.sbomify.com/MAL-2025-71477/): Malicious code in vitreous-plum-alpaca (npm) (malicious package)
- [MAL-2025-71476](https://insights.sbomify.com/MAL-2025-71476/): Malicious code in vitreous-amber-peafowl (npm) (malicious package)
- [MAL-2025-71475](https://insights.sbomify.com/MAL-2025-71475/): Malicious code in vital-lavender-egret (npm) (malicious package)
- [MAL-2025-71474](https://insights.sbomify.com/MAL-2025-71474/): Malicious code in vital-ivory-leopon (npm) (malicious package)
- [MAL-2025-71473](https://insights.sbomify.com/MAL-2025-71473/): Malicious code in visual-sapphire-gecko (npm) (malicious package)
- [MAL-2025-71472](https://insights.sbomify.com/MAL-2025-71472/): Malicious code in visual-salmon-quail (npm) (malicious package)
- [MAL-2025-71471](https://insights.sbomify.com/MAL-2025-71471/): Malicious code in visual-rose-xerinae (npm) (malicious package)
- [MAL-2025-71470](https://insights.sbomify.com/MAL-2025-71470/): Malicious code in visual-pink-sparrow (npm) (malicious package)
- [MAL-2025-7147](https://insights.sbomify.com/MAL-2025-7147/): Malicious code in @crabas0npm/accusamus-labore-quae (npm) (malicious package)
- [MAL-2025-71469](https://insights.sbomify.com/MAL-2025-71469/): Malicious code in visual-magenta-sheep (npm) (malicious package)
- [MAL-2025-71468](https://insights.sbomify.com/MAL-2025-71468/): Malicious code in visual-green-frog (npm) (malicious package)
- [MAL-2025-71467](https://insights.sbomify.com/MAL-2025-71467/): Malicious code in visiting-tomato-cod (npm) (malicious package)
- [MAL-2025-71466](https://insights.sbomify.com/MAL-2025-71466/): Malicious code in visiting-scarlet-centipede (npm) (malicious package)
- [MAL-2025-71465](https://insights.sbomify.com/MAL-2025-71465/): Malicious code in visiting-maroon-vicuna (npm) (malicious package)
- [MAL-2025-71464](https://insights.sbomify.com/MAL-2025-71464/): Malicious code in visiting-apricot-cuckoo (npm) (malicious package)
- [MAL-2025-71463](https://insights.sbomify.com/MAL-2025-71463/): Malicious code in visible-white-bat (npm) (malicious package)
- [MAL-2025-71462](https://insights.sbomify.com/MAL-2025-71462/): Malicious code in visible-tan-beetle (npm) (malicious package)
- [MAL-2025-71461](https://insights.sbomify.com/MAL-2025-71461/): Malicious code in visible-rose-camel (npm) (malicious package)
- [MAL-2025-71460](https://insights.sbomify.com/MAL-2025-71460/): Malicious code in visible-beige-lamprey (npm) (malicious package)
- [MAL-2025-7146](https://insights.sbomify.com/MAL-2025-7146/): Malicious code in @crabas0npm/accusamus-eaque-alias-ipsa (npm) (malicious package)
- [MAL-2025-71459](https://insights.sbomify.com/MAL-2025-71459/): Malicious code in violent-tomato-nightingale (npm) (malicious package)
- [MAL-2025-71458](https://insights.sbomify.com/MAL-2025-71458/): Malicious code in violent-orange-canid (npm) (malicious package)
- [MAL-2025-71457](https://insights.sbomify.com/MAL-2025-71457/): Malicious code in violent-maroon-chimpanzee (npm) (malicious package)
- [MAL-2025-71456](https://insights.sbomify.com/MAL-2025-71456/): Malicious code in violent-gold-pigeon (npm) (malicious package)
- [MAL-2025-71455](https://insights.sbomify.com/MAL-2025-71455/): Malicious code in violent-fuchsia-gull (npm) (malicious package)
- [MAL-2025-71454](https://insights.sbomify.com/MAL-2025-71454/): Malicious code in violent-cyan-eel (npm) (malicious package)
- [MAL-2025-71453](https://insights.sbomify.com/MAL-2025-71453/): Malicious code in violent-copper-urial (npm) (malicious package)
- [MAL-2025-71452](https://insights.sbomify.com/MAL-2025-71452/): Malicious code in victorious-turquoise-falcon (npm) (malicious package)
- [MAL-2025-71451](https://insights.sbomify.com/MAL-2025-71451/): Malicious code in victorious-salmon-constrictor (npm) (malicious package)
- [MAL-2025-71450](https://insights.sbomify.com/MAL-2025-71450/): Malicious code in victorious-maroon-giraffe (npm) (malicious package)
- [MAL-2025-7145](https://insights.sbomify.com/MAL-2025-7145/): Malicious code in @crabas0npm/accusamus-aut-deleniti-adipisci (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/320/