# Vulnerabilities published in 2025 - [MAL-2025-71267](https://insights.sbomify.com/MAL-2025-71267/): Malicious code in uneven-chocolate-python (npm) (malicious package) - [MAL-2025-71266](https://insights.sbomify.com/MAL-2025-71266/): Malicious code in uneven-bronze-hare (npm) (malicious package) - [MAL-2025-71265](https://insights.sbomify.com/MAL-2025-71265/): Malicious code in uneven-azure-egret (npm) (malicious package) - [MAL-2025-71264](https://insights.sbomify.com/MAL-2025-71264/): Malicious code in uneven-amethyst-bug (npm) (malicious package) - [MAL-2025-71263](https://insights.sbomify.com/MAL-2025-71263/): Malicious code in unemployed-yellow-vole (npm) (malicious package) - [MAL-2025-71262](https://insights.sbomify.com/MAL-2025-71262/): Malicious code in unemployed-gold-wombat (npm) (malicious package) - [MAL-2025-71261](https://insights.sbomify.com/MAL-2025-71261/): Malicious code in unemployed-brown-armadillo (npm) (malicious package) - [MAL-2025-71260](https://insights.sbomify.com/MAL-2025-71260/): Malicious code in unemployed-beige-pheasant (npm) (malicious package) - [MAL-2025-7126](https://insights.sbomify.com/MAL-2025-7126/): Malicious code in @citrix-dc/dc-test (npm) (malicious package) - [MAL-2025-71259](https://insights.sbomify.com/MAL-2025-71259/): Malicious code in underlying-turquoise-cobra (npm) (malicious package) - [MAL-2025-71258](https://insights.sbomify.com/MAL-2025-71258/): Malicious code in underlying-fuchsia-wren (npm) (malicious package) - [MAL-2025-71257](https://insights.sbomify.com/MAL-2025-71257/): Malicious code in underlying-emerald-hummingbird (npm) (malicious package) - [MAL-2025-71256](https://insights.sbomify.com/MAL-2025-71256/): Malicious code in underlying-bronze-camel (npm) (malicious package) - [MAL-2025-71255](https://insights.sbomify.com/MAL-2025-71255/): Malicious code in underlying-azure-cheetah (npm) (malicious package) - [MAL-2025-71254](https://insights.sbomify.com/MAL-2025-71254/): Malicious code in underlying-amethyst-weasel (npm) (malicious package) - [MAL-2025-71253](https://insights.sbomify.com/MAL-2025-71253/): Malicious code in underground-tomato-giraffe (npm) (malicious package) - [MAL-2025-71252](https://insights.sbomify.com/MAL-2025-71252/): Malicious code in underground-tan-landfowl (npm) (malicious package) - [MAL-2025-71251](https://insights.sbomify.com/MAL-2025-71251/): Malicious code in underground-ivory-mongoose (npm) (malicious package) - [MAL-2025-71250](https://insights.sbomify.com/MAL-2025-71250/): Malicious code in underground-coral-crayfish (npm) (malicious package) - [MAL-2025-7125](https://insights.sbomify.com/MAL-2025-7125/): Malicious code in @citi-gcg-167407/web-common (npm) (malicious package) - [MAL-2025-71249](https://insights.sbomify.com/MAL-2025-71249/): Malicious code in underground-black-jellyfish (npm) (malicious package) - [MAL-2025-71248](https://insights.sbomify.com/MAL-2025-71248/): Malicious code in underground-amethyst-iguana (npm) (malicious package) - [MAL-2025-71247](https://insights.sbomify.com/MAL-2025-71247/): Malicious code in unconscious-rose-egret (npm) (malicious package) - [MAL-2025-71246](https://insights.sbomify.com/MAL-2025-71246/): Malicious code in unconscious-jade-vulture (npm) (malicious package) - [MAL-2025-71245](https://insights.sbomify.com/MAL-2025-71245/): Malicious code in unconscious-cyan-thrush (npm) (malicious package) - [MAL-2025-71244](https://insights.sbomify.com/MAL-2025-71244/): Malicious code in uncomfortable-gray-kiwi (npm) (malicious package) - [MAL-2025-71243](https://insights.sbomify.com/MAL-2025-71243/): Malicious code in uncomfortable-gold-muskox (npm) (malicious package) - [MAL-2025-71242](https://insights.sbomify.com/MAL-2025-71242/): Malicious code in unchanged-coral-chickadee (npm) (malicious package) - [MAL-2025-71241](https://insights.sbomify.com/MAL-2025-71241/): Malicious code in unchanged-brown-cheetah (npm) (malicious package) - [MAL-2025-71240](https://insights.sbomify.com/MAL-2025-71240/): Malicious code in unchanged-apricot-walrus (npm) (malicious package) - [MAL-2025-7124](https://insights.sbomify.com/MAL-2025-7124/): Malicious code in @citi-gcg-167407/core-services (npm) (malicious package) - [MAL-2025-71239](https://insights.sbomify.com/MAL-2025-71239/): Malicious code in unchanged-amaranth-alpaca (npm) (malicious package) - [MAL-2025-71238](https://insights.sbomify.com/MAL-2025-71238/): Malicious code in uncertain-turquoise-cockroach (npm) (malicious package) - [MAL-2025-71237](https://insights.sbomify.com/MAL-2025-71237/): Malicious code in uncertain-sapphire-swordfish (npm) (malicious package) - [MAL-2025-71236](https://insights.sbomify.com/MAL-2025-71236/): Malicious code in uncertain-ivory-tiger (npm) (malicious package) - [MAL-2025-71235](https://insights.sbomify.com/MAL-2025-71235/): Malicious code in uncertain-black-mollusk (npm) (malicious package) - [MAL-2025-71234](https://insights.sbomify.com/MAL-2025-71234/): Malicious code in uncertain-aqua-bat (npm) (malicious package) - [MAL-2025-71233](https://insights.sbomify.com/MAL-2025-71233/): Malicious code in unaware-silver-squid (npm) (malicious package) - [MAL-2025-71232](https://insights.sbomify.com/MAL-2025-71232/): Malicious code in unaware-purple-impala (npm) (malicious package) - [MAL-2025-71231](https://insights.sbomify.com/MAL-2025-71231/): Malicious code in unaware-peach-deer (npm) (malicious package) - [MAL-2025-71230](https://insights.sbomify.com/MAL-2025-71230/): Malicious code in unaware-gold-anglerfish (npm) (malicious package) - [MAL-2025-7123](https://insights.sbomify.com/MAL-2025-7123/): Malicious code in @citi-gcg-167407/common (npm) (malicious package) - [MAL-2025-71229](https://insights.sbomify.com/MAL-2025-71229/): Malicious code in unaware-cyan-mollusk (npm) (malicious package) - [MAL-2025-71228](https://insights.sbomify.com/MAL-2025-71228/): Malicious code in unaware-chocolate-bat (npm) (malicious package) - [MAL-2025-71227](https://insights.sbomify.com/MAL-2025-71227/): Malicious code in unacceptable-scarlet-swordtail (npm) (malicious package) - [MAL-2025-71226](https://insights.sbomify.com/MAL-2025-71226/): Malicious code in unacceptable-orange-walrus (npm) (malicious package) - [MAL-2025-71225](https://insights.sbomify.com/MAL-2025-71225/): Malicious code in unacceptable-moccasin-mackerel (npm) (malicious package) - [MAL-2025-71224](https://insights.sbomify.com/MAL-2025-71224/): Malicious code in unacceptable-amaranth-spoonbill (npm) (malicious package) - [MAL-2025-71223](https://insights.sbomify.com/MAL-2025-71223/): Malicious code in unacceptable-amaranth-falcon (npm) (malicious package) - [MAL-2025-71222](https://insights.sbomify.com/MAL-2025-71222/): Malicious code in unable-silver-silkworm (npm) (malicious package) - [MAL-2025-71221](https://insights.sbomify.com/MAL-2025-71221/): Malicious code in unable-rose-whale (npm) (malicious package) - [MAL-2025-71220](https://insights.sbomify.com/MAL-2025-71220/): Malicious code in unable-indigo-lion (npm) (malicious package) - [MAL-2025-7122](https://insights.sbomify.com/MAL-2025-7122/): Malicious code in @bttr-devs/nuxt-layer-base (npm) (malicious package) - [MAL-2025-71219](https://insights.sbomify.com/MAL-2025-71219/): Malicious code in unable-emerald-mastodon (npm) (malicious package) - [MAL-2025-71218](https://insights.sbomify.com/MAL-2025-71218/): Malicious code in unable-coral-tarantula (npm) (malicious package) - [MAL-2025-71217](https://insights.sbomify.com/MAL-2025-71217/): Malicious code in unable-blue-otter (npm) (malicious package) - [MAL-2025-71216](https://insights.sbomify.com/MAL-2025-71216/): Malicious code in ultimate-ivory-gazelle (npm) (malicious package) - [MAL-2025-71215](https://insights.sbomify.com/MAL-2025-71215/): Malicious code in ultimate-green-buzzard (npm) (malicious package) - [MAL-2025-71214](https://insights.sbomify.com/MAL-2025-71214/): Malicious code in ultimate-crimson-tahr (npm) (malicious package) - [MAL-2025-71213](https://insights.sbomify.com/MAL-2025-71213/): Malicious code in ultimate-copper-quelea (npm) (malicious package) - [MAL-2025-71212](https://insights.sbomify.com/MAL-2025-71212/): Malicious code in ugly-yellow-marmot (npm) (malicious package) - [MAL-2025-71211](https://insights.sbomify.com/MAL-2025-71211/): Malicious code in ugly-fuchsia-antelope (npm) (malicious package) - [MAL-2025-71210](https://insights.sbomify.com/MAL-2025-71210/): Malicious code in ugly-cyan-lobster (npm) (malicious package) - [MAL-2025-7121](https://insights.sbomify.com/MAL-2025-7121/): Malicious code in @bmw-ds/components (npm) (malicious package) - [MAL-2025-71209](https://insights.sbomify.com/MAL-2025-71209/): Malicious code in ugly-brown-horse (npm) (malicious package) - [MAL-2025-71208](https://insights.sbomify.com/MAL-2025-71208/): Malicious code in ugliest-green-vulture (npm) (malicious package) - [MAL-2025-71207](https://insights.sbomify.com/MAL-2025-71207/): Malicious code in ugliest-apricot-guppy (npm) (malicious package) - [MAL-2025-71206](https://insights.sbomify.com/MAL-2025-71206/): Malicious code in tyuiskw (npm) (malicious package) - [MAL-2025-71205](https://insights.sbomify.com/MAL-2025-71205/): Malicious code in typical-silver-egret (npm) (malicious package) - [MAL-2025-71204](https://insights.sbomify.com/MAL-2025-71204/): Malicious code in typical-fuchsia-grouse (npm) (malicious package) - [MAL-2025-71203](https://insights.sbomify.com/MAL-2025-71203/): Malicious code in typical-chocolate-fox (npm) (malicious package) - [MAL-2025-71202](https://insights.sbomify.com/MAL-2025-71202/): Malicious code in typical-amaranth-beetle (npm) (malicious package) - [MAL-2025-71201](https://insights.sbomify.com/MAL-2025-71201/): Malicious code in troubled-plum-crocodile (npm) (malicious package) - [MAL-2025-71200](https://insights.sbomify.com/MAL-2025-71200/): Malicious code in troubled-maroon-wildcat (npm) (malicious package) - [MAL-2025-712](https://insights.sbomify.com/MAL-2025-712/): Malicious code in npm-website-example (npm) (malicious package) - [MAL-2025-71199](https://insights.sbomify.com/MAL-2025-71199/): Malicious code in troubled-magenta-newt (npm) (malicious package) - [MAL-2025-71198](https://insights.sbomify.com/MAL-2025-71198/): Malicious code in troubled-lime-partridge (npm) (malicious package) - [MAL-2025-71197](https://insights.sbomify.com/MAL-2025-71197/): Malicious code in troubled-coffee-tiger (npm) (malicious package) - [MAL-2025-71196](https://insights.sbomify.com/MAL-2025-71196/): Malicious code in troubled-black-buzzard (npm) (malicious package) - [MAL-2025-71195](https://insights.sbomify.com/MAL-2025-71195/): Malicious code in tropical-moccasin-minnow (npm) (malicious package) - [MAL-2025-71194](https://insights.sbomify.com/MAL-2025-71194/): Malicious code in tropical-maroon-raven (npm) (malicious package) - [MAL-2025-71193](https://insights.sbomify.com/MAL-2025-71193/): Malicious code in tropical-apricot-marmot (npm) (malicious package) - [MAL-2025-71192](https://insights.sbomify.com/MAL-2025-71192/): Malicious code in tropical-amaranth-cheetah (npm) (malicious package) - [MAL-2025-71191](https://insights.sbomify.com/MAL-2025-71191/): Malicious code in tricky-teal-bug (npm) (malicious package) - [MAL-2025-71190](https://insights.sbomify.com/MAL-2025-71190/): Malicious code in tricky-purple-goose (npm) (malicious package) - [MAL-2025-71189](https://insights.sbomify.com/MAL-2025-71189/): Malicious code in tricky-indigo-koi (npm) (malicious package) - [MAL-2025-71188](https://insights.sbomify.com/MAL-2025-71188/): Malicious code in tricky-indigo-crab (npm) (malicious package) - [MAL-2025-71187](https://insights.sbomify.com/MAL-2025-71187/): Malicious code in tricky-blush-mollusk (npm) (malicious package) - [MAL-2025-71186](https://insights.sbomify.com/MAL-2025-71186/): Malicious code in tremendous-tan-koi (npm) (malicious package) - [MAL-2025-71185](https://insights.sbomify.com/MAL-2025-71185/): Malicious code in tremendous-scarlet-goldfish (npm) (malicious package) - [MAL-2025-71184](https://insights.sbomify.com/MAL-2025-71184/): Malicious code in tremendous-plum-peacock (npm) (malicious package) - [MAL-2025-71183](https://insights.sbomify.com/MAL-2025-71183/): Malicious code in tremendous-jade-albatross (npm) (malicious package) - [MAL-2025-71182](https://insights.sbomify.com/MAL-2025-71182/): Malicious code in tremendous-harlequin-krill (npm) (malicious package) - [MAL-2025-71181](https://insights.sbomify.com/MAL-2025-71181/): Malicious code in tremendous-coffee-mollusk (npm) (malicious package) - [MAL-2025-71180](https://insights.sbomify.com/MAL-2025-71180/): Malicious code in tremendous-aquamarine-takin (npm) (malicious package) - [MAL-2025-7118](https://insights.sbomify.com/MAL-2025-7118/): Malicious code in @berush/tracking-pixel (npm) (malicious package) - [MAL-2025-71179](https://insights.sbomify.com/MAL-2025-71179/): Malicious code in tragic-turquoise-caterpillar (npm) (malicious package) - [MAL-2025-71178](https://insights.sbomify.com/MAL-2025-71178/): Malicious code in tragic-salmon-scallop (npm) (malicious package) - [MAL-2025-71177](https://insights.sbomify.com/MAL-2025-71177/): Malicious code in tragic-red-prawn (npm) (malicious package) - [MAL-2025-71176](https://insights.sbomify.com/MAL-2025-71176/): Malicious code in tragic-lime-toucan (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/323/