# Vulnerabilities published in 2025


- [MAL-2025-71449](https://insights.sbomify.com/MAL-2025-71449/): Malicious code in victorious-aquamarine-dog (npm) (malicious package)
- [MAL-2025-71448](https://insights.sbomify.com/MAL-2025-71448/): Malicious code in vicious-rose-jellyfish (npm) (malicious package)
- [MAL-2025-71447](https://insights.sbomify.com/MAL-2025-71447/): Malicious code in vicious-azure-raccoon (npm) (malicious package)
- [MAL-2025-71446](https://insights.sbomify.com/MAL-2025-71446/): Malicious code in vicious-amethyst-cat (npm) (malicious package)
- [MAL-2025-71445](https://insights.sbomify.com/MAL-2025-71445/): Malicious code in vicarious-silver-spoonbill (npm) (malicious package)
- [MAL-2025-71444](https://insights.sbomify.com/MAL-2025-71444/): Malicious code in vicarious-pink-peafowl (npm) (malicious package)
- [MAL-2025-71443](https://insights.sbomify.com/MAL-2025-71443/): Malicious code in vicarious-magenta-fowl (npm) (malicious package)
- [MAL-2025-71442](https://insights.sbomify.com/MAL-2025-71442/): Malicious code in vicarious-chocolate-crane (npm) (malicious package)
- [MAL-2025-71441](https://insights.sbomify.com/MAL-2025-71441/): Malicious code in vicarious-black-bear (npm) (malicious package)
- [MAL-2025-71440](https://insights.sbomify.com/MAL-2025-71440/): Malicious code in very-salmon-shark (npm) (malicious package)
- [MAL-2025-7144](https://insights.sbomify.com/MAL-2025-7144/): Malicious code in @crabas0npm/ab-non-mollitia (npm) (malicious package)
- [MAL-2025-71439](https://insights.sbomify.com/MAL-2025-71439/): Malicious code in very-peach-termite (npm) (malicious package)
- [MAL-2025-71438](https://insights.sbomify.com/MAL-2025-71438/): Malicious code in very-magenta-newt (npm) (malicious package)
- [MAL-2025-71437](https://insights.sbomify.com/MAL-2025-71437/): Malicious code in very-indigo-skunk (npm) (malicious package)
- [MAL-2025-71436](https://insights.sbomify.com/MAL-2025-71436/): Malicious code in very-gold-weasel (npm) (malicious package)
- [MAL-2025-71435](https://insights.sbomify.com/MAL-2025-71435/): Malicious code in very-fuchsia-squirrel (npm) (malicious package)
- [MAL-2025-71434](https://insights.sbomify.com/MAL-2025-71434/): Malicious code in very-copper-marmot (npm) (malicious package)
- [MAL-2025-71433](https://insights.sbomify.com/MAL-2025-71433/): Malicious code in vertical-white-donkey (npm) (malicious package)
- [MAL-2025-71432](https://insights.sbomify.com/MAL-2025-71432/): Malicious code in vertical-turquoise-python (npm) (malicious package)
- [MAL-2025-71431](https://insights.sbomify.com/MAL-2025-71431/): Malicious code in vertical-tan-canidae (npm) (malicious package)
- [MAL-2025-71430](https://insights.sbomify.com/MAL-2025-71430/): Malicious code in verbal-purple-skink (npm) (malicious package)
- [MAL-2025-7143](https://insights.sbomify.com/MAL-2025-7143/): Malicious code in @crabas0npm/ab-minima-optio (npm) (malicious package)
- [MAL-2025-71429](https://insights.sbomify.com/MAL-2025-71429/): Malicious code in verbal-plum-mite (npm) (malicious package)
- [MAL-2025-71428](https://insights.sbomify.com/MAL-2025-71428/): Malicious code in verbal-coffee-swan (npm) (malicious package)
- [MAL-2025-71427](https://insights.sbomify.com/MAL-2025-71427/): Malicious code in verbal-blush-thrush (npm) (malicious package)
- [MAL-2025-71426](https://insights.sbomify.com/MAL-2025-71426/): Malicious code in veli5631 (npm) (malicious package)
- [MAL-2025-71425](https://insights.sbomify.com/MAL-2025-71425/): Malicious code in vast-violet-hoverfly (npm) (malicious package)
- [MAL-2025-71424](https://insights.sbomify.com/MAL-2025-71424/): Malicious code in vast-scarlet-elk (npm) (malicious package)
- [MAL-2025-71423](https://insights.sbomify.com/MAL-2025-71423/): Malicious code in vast-orange-tiglon (npm) (malicious package)
- [MAL-2025-71422](https://insights.sbomify.com/MAL-2025-71422/): Malicious code in vast-magenta-marsupial (npm) (malicious package)
- [MAL-2025-71421](https://insights.sbomify.com/MAL-2025-71421/): Malicious code in vast-lime-horse (npm) (malicious package)
- [MAL-2025-71420](https://insights.sbomify.com/MAL-2025-71420/): Malicious code in vast-azure-lizard (npm) (malicious package)
- [MAL-2025-7142](https://insights.sbomify.com/MAL-2025-7142/): Malicious code in @crabas0npm/ab-excepturi-pariatur (npm) (malicious package)
- [MAL-2025-71419](https://insights.sbomify.com/MAL-2025-71419/): Malicious code in vast-aqua-hamster (npm) (malicious package)
- [MAL-2025-71418](https://insights.sbomify.com/MAL-2025-71418/): Malicious code in vast-amaranth-sturgeon (npm) (malicious package)
- [MAL-2025-71417](https://insights.sbomify.com/MAL-2025-71417/): Malicious code in varying-violet-salmon (npm) (malicious package)
- [MAL-2025-71416](https://insights.sbomify.com/MAL-2025-71416/): Malicious code in varying-silver-heron (npm) (malicious package)
- [MAL-2025-71415](https://insights.sbomify.com/MAL-2025-71415/): Malicious code in varying-moccasin-newt (npm) (malicious package)
- [MAL-2025-71414](https://insights.sbomify.com/MAL-2025-71414/): Malicious code in varying-bronze-firefly (npm) (malicious package)
- [MAL-2025-71413](https://insights.sbomify.com/MAL-2025-71413/): Malicious code in varying-black-mollusk (npm) (malicious package)
- [MAL-2025-71412](https://insights.sbomify.com/MAL-2025-71412/): Malicious code in various-purple-coyote (npm) (malicious package)
- [MAL-2025-71411](https://insights.sbomify.com/MAL-2025-71411/): Malicious code in various-gray-sawfish (npm) (malicious package)
- [MAL-2025-71410](https://insights.sbomify.com/MAL-2025-71410/): Malicious code in various-fuchsia-cheetah (npm) (malicious package)
- [MAL-2025-7141](https://insights.sbomify.com/MAL-2025-7141/): Malicious code in @crabas0npm/ab-animi-vitae (npm) (malicious package)
- [MAL-2025-71409](https://insights.sbomify.com/MAL-2025-71409/): Malicious code in various-cyan-chimpanzee (npm) (malicious package)
- [MAL-2025-71408](https://insights.sbomify.com/MAL-2025-71408/): Malicious code in various-brown-stoat (npm) (malicious package)
- [MAL-2025-71407](https://insights.sbomify.com/MAL-2025-71407/): Malicious code in varied-red-yak (npm) (malicious package)
- [MAL-2025-71406](https://insights.sbomify.com/MAL-2025-71406/): Malicious code in varied-copper-lemur (npm) (malicious package)
- [MAL-2025-71405](https://insights.sbomify.com/MAL-2025-71405/): Malicious code in variable-rose-gopher (npm) (malicious package)
- [MAL-2025-71404](https://insights.sbomify.com/MAL-2025-71404/): Malicious code in variable-chocolate-puma (npm) (malicious package)
- [MAL-2025-71403](https://insights.sbomify.com/MAL-2025-71403/): Malicious code in variable-chocolate-cat (npm) (malicious package)
- [MAL-2025-71402](https://insights.sbomify.com/MAL-2025-71402/): Malicious code in variable-blush-trout (npm) (malicious package)
- [MAL-2025-71401](https://insights.sbomify.com/MAL-2025-71401/): Malicious code in variable-aquamarine-ptarmigan (npm) (malicious package)
- [MAL-2025-71400](https://insights.sbomify.com/MAL-2025-71400/): Malicious code in valzey (npm) (malicious package)
- [MAL-2025-7140](https://insights.sbomify.com/MAL-2025-7140/): Malicious code in @crabas0npm/a-qui-ullam-possimus (npm) (malicious package)
- [MAL-2025-714](https://insights.sbomify.com/MAL-2025-714/): Malicious code in qiot (npm) (malicious package)
- [MAL-2025-71399](https://insights.sbomify.com/MAL-2025-71399/): Malicious code in valuable-plum-canid (npm) (malicious package)
- [MAL-2025-71398](https://insights.sbomify.com/MAL-2025-71398/): Malicious code in valuable-pink-orangutan (npm) (malicious package)
- [MAL-2025-71397](https://insights.sbomify.com/MAL-2025-71397/): Malicious code in valuable-lime-ape (npm) (malicious package)
- [MAL-2025-71396](https://insights.sbomify.com/MAL-2025-71396/): Malicious code in valuable-beige-mollusk (npm) (malicious package)
- [MAL-2025-71395](https://insights.sbomify.com/MAL-2025-71395/): Malicious code in valuable-beige-marsupial (npm) (malicious package)
- [MAL-2025-71394](https://insights.sbomify.com/MAL-2025-71394/): Malicious code in valid-turquoise-emu (npm) (malicious package)
- [MAL-2025-71393](https://insights.sbomify.com/MAL-2025-71393/): Malicious code in valid-salmon-leech (npm) (malicious package)
- [MAL-2025-71392](https://insights.sbomify.com/MAL-2025-71392/): Malicious code in vague-teal-meadowlark (npm) (malicious package)
- [MAL-2025-71391](https://insights.sbomify.com/MAL-2025-71391/): Malicious code in vague-scarlet-clam (npm) (malicious package)
- [MAL-2025-71390](https://insights.sbomify.com/MAL-2025-71390/): Malicious code in vague-salmon-mole (npm) (malicious package)
- [MAL-2025-7139](https://insights.sbomify.com/MAL-2025-7139/): Malicious code in @crabas0npm/a-amet-molestiae-earum (npm) (malicious package)
- [MAL-2025-71389](https://insights.sbomify.com/MAL-2025-71389/): Malicious code in vague-ivory-swan (npm) (malicious package)
- [MAL-2025-71388](https://insights.sbomify.com/MAL-2025-71388/): Malicious code in vaguard (npm) (malicious package)
- [MAL-2025-71387](https://insights.sbomify.com/MAL-2025-71387/): Malicious code in usual-yellow-leopard (npm) (malicious package)
- [MAL-2025-71386](https://insights.sbomify.com/MAL-2025-71386/): Malicious code in usual-tan-deer (npm) (malicious package)
- [MAL-2025-71385](https://insights.sbomify.com/MAL-2025-71385/): Malicious code in usual-bronze-bass (npm) (malicious package)
- [MAL-2025-71384](https://insights.sbomify.com/MAL-2025-71384/): Malicious code in usual-bronze-anaconda (npm) (malicious package)
- [MAL-2025-71383](https://insights.sbomify.com/MAL-2025-71383/): Malicious code in useless-turquoise-ladybug (npm) (malicious package)
- [MAL-2025-71382](https://insights.sbomify.com/MAL-2025-71382/): Malicious code in useless-tan-sole (npm) (malicious package)
- [MAL-2025-71381](https://insights.sbomify.com/MAL-2025-71381/): Malicious code in useless-ivory-baboon (npm) (malicious package)
- [MAL-2025-71380](https://insights.sbomify.com/MAL-2025-71380/): Malicious code in useless-gold-bird (npm) (malicious package)
- [MAL-2025-7138](https://insights.sbomify.com/MAL-2025-7138/): Malicious code in @crabas0npm/a-aliquid-ducimus-non (npm) (malicious package)
- [MAL-2025-71379](https://insights.sbomify.com/MAL-2025-71379/): Malicious code in useless-bronze-cougar (npm) (malicious package)
- [MAL-2025-71378](https://insights.sbomify.com/MAL-2025-71378/): Malicious code in useless-amethyst-worm (npm) (malicious package)
- [MAL-2025-71377](https://insights.sbomify.com/MAL-2025-71377/): Malicious code in useful-silver-earthworm (npm) (malicious package)
- [MAL-2025-71376](https://insights.sbomify.com/MAL-2025-71376/): Malicious code in useful-sapphire-primate (npm) (malicious package)
- [MAL-2025-71375](https://insights.sbomify.com/MAL-2025-71375/): Malicious code in useful-moccasin-grasshopper (npm) (malicious package)
- [MAL-2025-71374](https://insights.sbomify.com/MAL-2025-71374/): Malicious code in useful-cyan-ferret (npm) (malicious package)
- [MAL-2025-71373](https://insights.sbomify.com/MAL-2025-71373/): Malicious code in useful-azure-pinniped (npm) (malicious package)
- [MAL-2025-71372](https://insights.sbomify.com/MAL-2025-71372/): Malicious code in useful-amethyst-peafowl (npm) (malicious package)
- [MAL-2025-71371](https://insights.sbomify.com/MAL-2025-71371/): Malicious code in used-red-loon (npm) (malicious package)
- [MAL-2025-71370](https://insights.sbomify.com/MAL-2025-71370/): Malicious code in used-lavender-porcupine (npm) (malicious package)
- [MAL-2025-7137](https://insights.sbomify.com/MAL-2025-7137/): Malicious code in @corptools-frontend/northwestregisteredagent.com (npm) (malicious package)
- [MAL-2025-71369](https://insights.sbomify.com/MAL-2025-71369/): Malicious code in used-crimson-mouse (npm) (malicious package)
- [MAL-2025-71368](https://insights.sbomify.com/MAL-2025-71368/): Malicious code in used-azure-krill (npm) (malicious package)
- [MAL-2025-71367](https://insights.sbomify.com/MAL-2025-71367/): Malicious code in used-amethyst-skunk (npm) (malicious package)
- [MAL-2025-71366](https://insights.sbomify.com/MAL-2025-71366/): Malicious code in urgent-yellow-hedgehog (npm) (malicious package)
- [MAL-2025-71365](https://insights.sbomify.com/MAL-2025-71365/): Malicious code in urgent-silver-canid (npm) (malicious package)
- [MAL-2025-71364](https://insights.sbomify.com/MAL-2025-71364/): Malicious code in urgent-peach-pigeon (npm) (malicious package)
- [MAL-2025-71363](https://insights.sbomify.com/MAL-2025-71363/): Malicious code in urgent-copper-leech (npm) (malicious package)
- [MAL-2025-71362](https://insights.sbomify.com/MAL-2025-71362/): Malicious code in urgent-chocolate-raccoon (npm) (malicious package)
- [MAL-2025-71361](https://insights.sbomify.com/MAL-2025-71361/): Malicious code in urban-pink-rooster (npm) (malicious package)
- [MAL-2025-71360](https://insights.sbomify.com/MAL-2025-71360/): Malicious code in urban-indigo-mockingbird (npm) (malicious package)
- [MAL-2025-7136](https://insights.sbomify.com/MAL-2025-7136/): Malicious code in @core-pas/cyb-core (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/321/