# Vulnerabilities published in 2025


- [MAL-2025-71084](https://insights.sbomify.com/MAL-2025-71084/): Malicious code in territorial-azure-skunk (npm) (malicious package)
- [MAL-2025-71083](https://insights.sbomify.com/MAL-2025-71083/): Malicious code in territorial-aquamarine-carp (npm) (malicious package)
- [MAL-2025-71082](https://insights.sbomify.com/MAL-2025-71082/): Malicious code in terrible-scarlet-prawn (npm) (malicious package)
- [MAL-2025-71081](https://insights.sbomify.com/MAL-2025-71081/): Malicious code in terrible-maroon-catshark (npm) (malicious package)
- [MAL-2025-71080](https://insights.sbomify.com/MAL-2025-71080/): Malicious code in terrible-green-quelea (npm) (malicious package)
- [MAL-2025-7108](https://insights.sbomify.com/MAL-2025-7108/): Malicious code in @azl-react-components/svgs (npm) (malicious package)
- [MAL-2025-71079](https://insights.sbomify.com/MAL-2025-71079/): Malicious code in terrible-blue-reptile (npm) (malicious package)
- [MAL-2025-71078](https://insights.sbomify.com/MAL-2025-71078/): Malicious code in terrible-aquamarine-kingfisher (npm) (malicious package)
- [MAL-2025-71077](https://insights.sbomify.com/MAL-2025-71077/): Malicious code in tepsimoba (npm) (malicious package)
- [MAL-2025-71076](https://insights.sbomify.com/MAL-2025-71076/): Malicious code in tense-silver-beetle (npm) (malicious package)
- [MAL-2025-71075](https://insights.sbomify.com/MAL-2025-71075/): Malicious code in tense-pink-xerinae (npm) (malicious package)
- [MAL-2025-71074](https://insights.sbomify.com/MAL-2025-71074/): Malicious code in tense-jade-wolverine (npm) (malicious package)
- [MAL-2025-71073](https://insights.sbomify.com/MAL-2025-71073/): Malicious code in tense-jade-limpet (npm) (malicious package)
- [MAL-2025-71072](https://insights.sbomify.com/MAL-2025-71072/): Malicious code in tender-gray-guan (npm) (malicious package)
- [MAL-2025-71071](https://insights.sbomify.com/MAL-2025-71071/): Malicious code in tender-beige-mollusk (npm) (malicious package)
- [MAL-2025-71070](https://insights.sbomify.com/MAL-2025-71070/): Malicious code in temporary-harlequin-narwhal (npm) (malicious package)
- [MAL-2025-7107](https://insights.sbomify.com/MAL-2025-7107/): Malicious code in @azl-react-components/molecules (npm) (malicious package)
- [MAL-2025-71069](https://insights.sbomify.com/MAL-2025-71069/): Malicious code in temporary-fuchsia-bass (npm) (malicious package)
- [MAL-2025-71068](https://insights.sbomify.com/MAL-2025-71068/): Malicious code in teenage-beige-snail (npm) (malicious package)
- [MAL-2025-71067](https://insights.sbomify.com/MAL-2025-71067/): Malicious code in technological-purple-cockroach (npm) (malicious package)
- [MAL-2025-71066](https://insights.sbomify.com/MAL-2025-71066/): Malicious code in technological-olive-silkworm (npm) (malicious package)
- [MAL-2025-71065](https://insights.sbomify.com/MAL-2025-71065/): Malicious code in technological-lavender-gibbon (npm) (malicious package)
- [MAL-2025-71064](https://insights.sbomify.com/MAL-2025-71064/): Malicious code in technological-indigo-ostrich (npm) (malicious package)
- [MAL-2025-71063](https://insights.sbomify.com/MAL-2025-71063/): Malicious code in technological-indigo-crocodile (npm) (malicious package)
- [MAL-2025-71062](https://insights.sbomify.com/MAL-2025-71062/): Malicious code in technological-gold-eel (npm) (malicious package)
- [MAL-2025-71061](https://insights.sbomify.com/MAL-2025-71061/): Malicious code in technological-cyan-kiwi (npm) (malicious package)
- [MAL-2025-71060](https://insights.sbomify.com/MAL-2025-71060/): Malicious code in technical-tomato-tyrannosaurus (npm) (malicious package)
- [MAL-2025-7106](https://insights.sbomify.com/MAL-2025-7106/): Malicious code in @azl-react-components/atoms (npm) (malicious package)
- [MAL-2025-71059](https://insights.sbomify.com/MAL-2025-71059/): Malicious code in technical-silver-narwhal (npm) (malicious package)
- [MAL-2025-71058](https://insights.sbomify.com/MAL-2025-71058/): Malicious code in technical-rose-antelope (npm) (malicious package)
- [MAL-2025-71057](https://insights.sbomify.com/MAL-2025-71057/): Malicious code in technical-coffee-anteater (npm) (malicious package)
- [MAL-2025-71056](https://insights.sbomify.com/MAL-2025-71056/): Malicious code in technical-blush-baboon (npm) (malicious package)
- [MAL-2025-71055](https://insights.sbomify.com/MAL-2025-71055/): Malicious code in technical-black-quail (npm) (malicious package)
- [MAL-2025-71054](https://insights.sbomify.com/MAL-2025-71054/): Malicious code in technical-aquamarine-woodpecker (npm) (malicious package)
- [MAL-2025-71053](https://insights.sbomify.com/MAL-2025-71053/): Malicious code in technical-amber-moth (npm) (malicious package)
- [MAL-2025-71052](https://insights.sbomify.com/MAL-2025-71052/): Malicious code in tasty-silver-turtle (npm) (malicious package)
- [MAL-2025-71051](https://insights.sbomify.com/MAL-2025-71051/): Malicious code in tasty-moccasin-dragonfly (npm) (malicious package)
- [MAL-2025-71050](https://insights.sbomify.com/MAL-2025-71050/): Malicious code in tasty-green-earwig (npm) (malicious package)
- [MAL-2025-7105](https://insights.sbomify.com/MAL-2025-7105/): Malicious code in @aws-ee/base-services (npm) (malicious package)
- [MAL-2025-71049](https://insights.sbomify.com/MAL-2025-71049/): Malicious code in tasty-fuchsia-anteater (npm) (malicious package)
- [MAL-2025-71048](https://insights.sbomify.com/MAL-2025-71048/): Malicious code in tasteless-sapphire-wallaby (npm) (malicious package)
- [MAL-2025-71047](https://insights.sbomify.com/MAL-2025-71047/): Malicious code in tasteless-purple-hippopotamus (npm) (malicious package)
- [MAL-2025-71046](https://insights.sbomify.com/MAL-2025-71046/): Malicious code in tasteless-pink-wildebeest (npm) (malicious package)
- [MAL-2025-71045](https://insights.sbomify.com/MAL-2025-71045/): Malicious code in tasteless-coffee-orca (npm) (malicious package)
- [MAL-2025-71044](https://insights.sbomify.com/MAL-2025-71044/): Malicious code in tasteless-amber-newt (npm) (malicious package)
- [MAL-2025-71043](https://insights.sbomify.com/MAL-2025-71043/): Malicious code in tart-brown-chickadee (npm) (malicious package)
- [MAL-2025-71042](https://insights.sbomify.com/MAL-2025-71042/): Malicious code in tart-aqua-ptarmigan (npm) (malicious package)
- [MAL-2025-71041](https://insights.sbomify.com/MAL-2025-71041/): Malicious code in tame-teal-platypus (npm) (malicious package)
- [MAL-2025-71040](https://insights.sbomify.com/MAL-2025-71040/): Malicious code in tame-scarlet-leopard (npm) (malicious package)
- [MAL-2025-7104](https://insights.sbomify.com/MAL-2025-7104/): Malicious code in @avocado-team/app-center-sdk-for-white-team (npm) (malicious package)
- [MAL-2025-71039](https://insights.sbomify.com/MAL-2025-71039/): Malicious code in tame-gold-swordtail (npm) (malicious package)
- [MAL-2025-71038](https://insights.sbomify.com/MAL-2025-71038/): Malicious code in tame-chocolate-mink (npm) (malicious package)
- [MAL-2025-71037](https://insights.sbomify.com/MAL-2025-71037/): Malicious code in tall-white-tick (npm) (malicious package)
- [MAL-2025-71036](https://insights.sbomify.com/MAL-2025-71036/): Malicious code in tall-red-dove (npm) (malicious package)
- [MAL-2025-71035](https://insights.sbomify.com/MAL-2025-71035/): Malicious code in tall-plum-dolphin (npm) (malicious package)
- [MAL-2025-71034](https://insights.sbomify.com/MAL-2025-71034/): Malicious code in tall-fuchsia-jay (npm) (malicious package)
- [MAL-2025-71033](https://insights.sbomify.com/MAL-2025-71033/): Malicious code in systematic-yellow-jellyfish (npm) (malicious package)
- [MAL-2025-71032](https://insights.sbomify.com/MAL-2025-71032/): Malicious code in systematic-turquoise-quokka (npm) (malicious package)
- [MAL-2025-71031](https://insights.sbomify.com/MAL-2025-71031/): Malicious code in systematic-orange-stingray (npm) (malicious package)
- [MAL-2025-71030](https://insights.sbomify.com/MAL-2025-71030/): Malicious code in systematic-maroon-lizard (npm) (malicious package)
- [MAL-2025-7103](https://insights.sbomify.com/MAL-2025-7103/): Malicious code in @avocado-team/app-center-mini-landing (npm) (malicious package)
- [MAL-2025-71029](https://insights.sbomify.com/MAL-2025-71029/): Malicious code in systematic-ivory-peafowl (npm) (malicious package)
- [MAL-2025-71028](https://insights.sbomify.com/MAL-2025-71028/): Malicious code in systematic-fuchsia-cougar (npm) (malicious package)
- [MAL-2025-71027](https://insights.sbomify.com/MAL-2025-71027/): Malicious code in systematic-black-chickadee (npm) (malicious package)
- [MAL-2025-71026](https://insights.sbomify.com/MAL-2025-71026/): Malicious code in sympathetic-rose-peacock (npm) (malicious package)
- [MAL-2025-71025](https://insights.sbomify.com/MAL-2025-71025/): Malicious code in sympathetic-purple-guineafowl (npm) (malicious package)
- [MAL-2025-71024](https://insights.sbomify.com/MAL-2025-71024/): Malicious code in sympathetic-ivory-sloth (npm) (malicious package)
- [MAL-2025-71023](https://insights.sbomify.com/MAL-2025-71023/): Malicious code in sympathetic-aquamarine-guanaco (npm) (malicious package)
- [MAL-2025-71022](https://insights.sbomify.com/MAL-2025-71022/): Malicious code in symbolic-lime-llama (npm) (malicious package)
- [MAL-2025-71021](https://insights.sbomify.com/MAL-2025-71021/): Malicious code in symbolic-copper-egret (npm) (malicious package)
- [MAL-2025-71020](https://insights.sbomify.com/MAL-2025-71020/): Malicious code in symbolic-black-swan (npm) (malicious package)
- [MAL-2025-7102](https://insights.sbomify.com/MAL-2025-7102/): Malicious code in @avocado-team/app-center-app-widget (npm) (malicious package)
- [MAL-2025-71019](https://insights.sbomify.com/MAL-2025-71019/): Malicious code in symbolic-aquamarine-toucan (npm) (malicious package)
- [MAL-2025-71018](https://insights.sbomify.com/MAL-2025-71018/): Malicious code in symbolic-apricot-limpet (npm) (malicious package)
- [MAL-2025-71017](https://insights.sbomify.com/MAL-2025-71017/): Malicious code in swift-yellow-mastodon (npm) (malicious package)
- [MAL-2025-71016](https://insights.sbomify.com/MAL-2025-71016/): Malicious code in swift-lime-hookworm (npm) (malicious package)
- [MAL-2025-71015](https://insights.sbomify.com/MAL-2025-71015/): Malicious code in swift-fuchsia-badger (npm) (malicious package)
- [MAL-2025-71014](https://insights.sbomify.com/MAL-2025-71014/): Malicious code in sweet-sapphire-koala (npm) (malicious package)
- [MAL-2025-71013](https://insights.sbomify.com/MAL-2025-71013/): Malicious code in sweet-lime-dormouse (npm) (malicious package)
- [MAL-2025-71012](https://insights.sbomify.com/MAL-2025-71012/): Malicious code in sweet-azure-pigeon (npm) (malicious package)
- [MAL-2025-71011](https://insights.sbomify.com/MAL-2025-71011/): Malicious code in sweet-azure-finch (npm) (malicious package)
- [MAL-2025-71010](https://insights.sbomify.com/MAL-2025-71010/): Malicious code in sweet-amber-tick (npm) (malicious package)
- [MAL-2025-7101](https://insights.sbomify.com/MAL-2025-7101/): Malicious code in @avoc-analytics-skeleton-monorepo/log (npm) (malicious package)
- [MAL-2025-71009](https://insights.sbomify.com/MAL-2025-71009/): Malicious code in suspicious-turquoise-puffin (npm) (malicious package)
- [MAL-2025-71008](https://insights.sbomify.com/MAL-2025-71008/): Malicious code in suspicious-scarlet-bonobo (npm) (malicious package)
- [MAL-2025-71007](https://insights.sbomify.com/MAL-2025-71007/): Malicious code in suspicious-lime-camel (npm) (malicious package)
- [MAL-2025-71006](https://insights.sbomify.com/MAL-2025-71006/): Malicious code in suspicious-beige-crawdad (npm) (malicious package)
- [MAL-2025-71005](https://insights.sbomify.com/MAL-2025-71005/): Malicious code in suspicious-beige-albatross (npm) (malicious package)
- [MAL-2025-71004](https://insights.sbomify.com/MAL-2025-71004/): Malicious code in suspicious-amethyst-eagle (npm) (malicious package)
- [MAL-2025-71003](https://insights.sbomify.com/MAL-2025-71003/): Malicious code in surviving-tomato-octopus (npm) (malicious package)
- [MAL-2025-71002](https://insights.sbomify.com/MAL-2025-71002/): Malicious code in surviving-coral-scallop (npm) (malicious package)
- [MAL-2025-71001](https://insights.sbomify.com/MAL-2025-71001/): Malicious code in surviving-beige-pigeon (npm) (malicious package)
- [MAL-2025-71000](https://insights.sbomify.com/MAL-2025-71000/): Malicious code in surviving-apricot-rooster (npm) (malicious package)
- [MAL-2025-7100](https://insights.sbomify.com/MAL-2025-7100/): Malicious code in @avoc-analytics-skeleton-monorepo/config (npm) (malicious package)
- [MAL-2025-710](https://insights.sbomify.com/MAL-2025-710/): Malicious code in mpl-token-metadata (npm) (malicious package)
- [MAL-2025-71](https://insights.sbomify.com/MAL-2025-71/): Malicious code in secure-toolkits (npm) (malicious package)
- [MAL-2025-70999](https://insights.sbomify.com/MAL-2025-70999/): Malicious code in surrounding-gray-shrew (npm) (malicious package)
- [MAL-2025-70998](https://insights.sbomify.com/MAL-2025-70998/): Malicious code in surrounding-coral-peacock (npm) (malicious package)
- [MAL-2025-70997](https://insights.sbomify.com/MAL-2025-70997/): Malicious code in surrounding-brown-quail (npm) (malicious package)
- [MAL-2025-70996](https://insights.sbomify.com/MAL-2025-70996/): Malicious code in surprising-tan-ferret (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/325/