# Vulnerabilities published in 2025 - [MAL-2025-70995](https://insights.sbomify.com/MAL-2025-70995/): Malicious code in surprising-salmon-penguin (npm) (malicious package) - [MAL-2025-70994](https://insights.sbomify.com/MAL-2025-70994/): Malicious code in surprising-pink-koala (npm) (malicious package) - [MAL-2025-70993](https://insights.sbomify.com/MAL-2025-70993/): Malicious code in surprising-orange-cougar (npm) (malicious package) - [MAL-2025-70992](https://insights.sbomify.com/MAL-2025-70992/): Malicious code in surprising-olive-kite (npm) (malicious package) - [MAL-2025-70991](https://insights.sbomify.com/MAL-2025-70991/): Malicious code in surprising-moccasin-termite (npm) (malicious package) - [MAL-2025-70990](https://insights.sbomify.com/MAL-2025-70990/): Malicious code in surprising-moccasin-clownfish (npm) (malicious package) - [MAL-2025-7099](https://insights.sbomify.com/MAL-2025-7099/): Malicious code in @avoc-analytics-skeleton-monorepo/auth (npm) (malicious package) - [MAL-2025-70989](https://insights.sbomify.com/MAL-2025-70989/): Malicious code in surprised-white-nightingale (npm) (malicious package) - [MAL-2025-70988](https://insights.sbomify.com/MAL-2025-70988/): Malicious code in surprised-indigo-mollusk (npm) (malicious package) - [MAL-2025-70987](https://insights.sbomify.com/MAL-2025-70987/): Malicious code in surprised-gray-chimpanzee (npm) (malicious package) - [MAL-2025-70986](https://insights.sbomify.com/MAL-2025-70986/): Malicious code in surprised-aquamarine-falcon (npm) (malicious package) - [MAL-2025-70985](https://insights.sbomify.com/MAL-2025-70985/): Malicious code in sure-scarlet-vicuna (npm) (malicious package) - [MAL-2025-70984](https://insights.sbomify.com/MAL-2025-70984/): Malicious code in sure-rose-buzzard (npm) (malicious package) - [MAL-2025-70983](https://insights.sbomify.com/MAL-2025-70983/): Malicious code in sure-orange-aphid (npm) (malicious package) - [MAL-2025-70982](https://insights.sbomify.com/MAL-2025-70982/): Malicious code in sure-lavender-platypus (npm) (malicious package) - [MAL-2025-70981](https://insights.sbomify.com/MAL-2025-70981/): Malicious code in sure-emerald-cat (npm) (malicious package) - [MAL-2025-70980](https://insights.sbomify.com/MAL-2025-70980/): Malicious code in sure-copper-bear (npm) (malicious package) - [MAL-2025-7098](https://insights.sbomify.com/MAL-2025-7098/): Malicious code in @aviationpast/niotest (npm) (malicious package) - [MAL-2025-70979](https://insights.sbomify.com/MAL-2025-70979/): Malicious code in sure-blue-mite (npm) (malicious package) - [MAL-2025-70978](https://insights.sbomify.com/MAL-2025-70978/): Malicious code in sure-beige-viper (npm) (malicious package) - [MAL-2025-70977](https://insights.sbomify.com/MAL-2025-70977/): Malicious code in supreme-tan-whippet (npm) (malicious package) - [MAL-2025-70976](https://insights.sbomify.com/MAL-2025-70976/): Malicious code in supreme-copper-seahorse (npm) (malicious package) - [MAL-2025-70975](https://insights.sbomify.com/MAL-2025-70975/): Malicious code in supreme-amethyst-eel (npm) (malicious package) - [MAL-2025-70974](https://insights.sbomify.com/MAL-2025-70974/): Malicious code in supposed-violet-asp (npm) (malicious package) - [MAL-2025-70973](https://insights.sbomify.com/MAL-2025-70973/): Malicious code in supposed-scarlet-cricket (npm) (malicious package) - [MAL-2025-70972](https://insights.sbomify.com/MAL-2025-70972/): Malicious code in supposed-lime-slug (npm) (malicious package) - [MAL-2025-70971](https://insights.sbomify.com/MAL-2025-70971/): Malicious code in supposed-harlequin-parakeet (npm) (malicious package) - [MAL-2025-70970](https://insights.sbomify.com/MAL-2025-70970/): Malicious code in supposed-gray-salamander (npm) (malicious package) - [MAL-2025-7097](https://insights.sbomify.com/MAL-2025-7097/): Malicious code in @augloop/types-core (npm) (malicious package) - [MAL-2025-70969](https://insights.sbomify.com/MAL-2025-70969/): Malicious code in supposed-black-locust (npm) (malicious package) - [MAL-2025-70968](https://insights.sbomify.com/MAL-2025-70968/): Malicious code in supposed-amber-silkworm (npm) (malicious package) - [MAL-2025-70967](https://insights.sbomify.com/MAL-2025-70967/): Malicious code in supporting-teal-basilisk (npm) (malicious package) - [MAL-2025-70966](https://insights.sbomify.com/MAL-2025-70966/): Malicious code in supporting-sapphire-leech (npm) (malicious package) - [MAL-2025-70965](https://insights.sbomify.com/MAL-2025-70965/): Malicious code in supporting-moccasin-thrush (npm) (malicious package) - [MAL-2025-70964](https://insights.sbomify.com/MAL-2025-70964/): Malicious code in supporting-jade-leopard (npm) (malicious package) - [MAL-2025-70963](https://insights.sbomify.com/MAL-2025-70963/): Malicious code in supporting-gold-mockingbird (npm) (malicious package) - [MAL-2025-70962](https://insights.sbomify.com/MAL-2025-70962/): Malicious code in superior-jade-ape (npm) (malicious package) - [MAL-2025-70961](https://insights.sbomify.com/MAL-2025-70961/): Malicious code in superior-emerald-iguana (npm) (malicious package) - [MAL-2025-70960](https://insights.sbomify.com/MAL-2025-70960/): Malicious code in superb-scarlet-vicuna (npm) (malicious package) - [MAL-2025-7096](https://insights.sbomify.com/MAL-2025-7096/): Malicious code in @augloop/session-protocol (npm) (malicious package) - [MAL-2025-70959](https://insights.sbomify.com/MAL-2025-70959/): Malicious code in superb-cyan-fowl (npm) (malicious package) - [MAL-2025-70958](https://insights.sbomify.com/MAL-2025-70958/): Malicious code in superb-blue-tyrannosaurus (npm) (malicious package) - [MAL-2025-70957](https://insights.sbomify.com/MAL-2025-70957/): Malicious code in super-violet-anglerfish (npm) (malicious package) - [MAL-2025-70956](https://insights.sbomify.com/MAL-2025-70956/): Malicious code in super-scarlet-clam (npm) (malicious package) - [MAL-2025-70955](https://insights.sbomify.com/MAL-2025-70955/): Malicious code in super-peach-marten (npm) (malicious package) - [MAL-2025-70954](https://insights.sbomify.com/MAL-2025-70954/): Malicious code in super-green-jaguar (npm) (malicious package) - [MAL-2025-70953](https://insights.sbomify.com/MAL-2025-70953/): Malicious code in sunny-peach-kiwi (npm) (malicious package) - [MAL-2025-70952](https://insights.sbomify.com/MAL-2025-70952/): Malicious code in sunny-ivory-krill (npm) (malicious package) - [MAL-2025-70951](https://insights.sbomify.com/MAL-2025-70951/): Malicious code in sunny-brown-rook (npm) (malicious package) - [MAL-2025-70950](https://insights.sbomify.com/MAL-2025-70950/): Malicious code in sunny-black-pigeon (npm) (malicious package) - [MAL-2025-7095](https://insights.sbomify.com/MAL-2025-7095/): Malicious code in @augloop/logging (npm) (malicious package) - [MAL-2025-70949](https://insights.sbomify.com/MAL-2025-70949/): Malicious code in sunny-azure-chipmunk (npm) (malicious package) - [MAL-2025-70948](https://insights.sbomify.com/MAL-2025-70948/): Malicious code in sunny-aquamarine-echidna (npm) (malicious package) - [MAL-2025-70947](https://insights.sbomify.com/MAL-2025-70947/): Malicious code in suitable-gray-ladybug (npm) (malicious package) - [MAL-2025-70946](https://insights.sbomify.com/MAL-2025-70946/): Malicious code in suitable-amethyst-peafowl (npm) (malicious package) - [MAL-2025-70945](https://insights.sbomify.com/MAL-2025-70945/): Malicious code in sufficient-olive-mastodon (npm) (malicious package) - [MAL-2025-70944](https://insights.sbomify.com/MAL-2025-70944/): Malicious code in sufficient-maroon-boar (npm) (malicious package) - [MAL-2025-70943](https://insights.sbomify.com/MAL-2025-70943/): Malicious code in sufficient-gray-roadrunner (npm) (malicious package) - [MAL-2025-70942](https://insights.sbomify.com/MAL-2025-70942/): Malicious code in sufficient-cyan-amphibian (npm) (malicious package) - [MAL-2025-70941](https://insights.sbomify.com/MAL-2025-70941/): Malicious code in sufficient-crimson-roadrunner (npm) (malicious package) - [MAL-2025-70940](https://insights.sbomify.com/MAL-2025-70940/): Malicious code in sudden-yellow-firefly (npm) (malicious package) - [MAL-2025-7094](https://insights.sbomify.com/MAL-2025-7094/): Malicious code in @augloop/interfaces (npm) (malicious package) - [MAL-2025-70939](https://insights.sbomify.com/MAL-2025-70939/): Malicious code in sudden-violet-penguin (npm) (malicious package) - [MAL-2025-70938](https://insights.sbomify.com/MAL-2025-70938/): Malicious code in sudden-tomato-baboon (npm) (malicious package) - [MAL-2025-70937](https://insights.sbomify.com/MAL-2025-70937/): Malicious code in sudden-teal-hummingbird (npm) (malicious package) - [MAL-2025-70936](https://insights.sbomify.com/MAL-2025-70936/): Malicious code in sudden-maroon-jaguar (npm) (malicious package) - [MAL-2025-70935](https://insights.sbomify.com/MAL-2025-70935/): Malicious code in successive-purple-smelt (npm) (malicious package) - [MAL-2025-70934](https://insights.sbomify.com/MAL-2025-70934/): Malicious code in successive-pink-felidae (npm) (malicious package) - [MAL-2025-70933](https://insights.sbomify.com/MAL-2025-70933/): Malicious code in successive-blue-barnacle (npm) (malicious package) - [MAL-2025-70932](https://insights.sbomify.com/MAL-2025-70932/): Malicious code in successive-amber-wolverine (npm) (malicious package) - [MAL-2025-70931](https://insights.sbomify.com/MAL-2025-70931/): Malicious code in successful-violet-bear (npm) (malicious package) - [MAL-2025-70930](https://insights.sbomify.com/MAL-2025-70930/): Malicious code in successful-red-nightingale (npm) (malicious package) - [MAL-2025-7093](https://insights.sbomify.com/MAL-2025-7093/): Malicious code in @async-mutex/mutex (npm) (malicious package) - [MAL-2025-70929](https://insights.sbomify.com/MAL-2025-70929/): Malicious code in successful-magenta-panther (npm) (malicious package) - [MAL-2025-70928](https://insights.sbomify.com/MAL-2025-70928/): Malicious code in successful-jade-krill (npm) (malicious package) - [MAL-2025-70927](https://insights.sbomify.com/MAL-2025-70927/): Malicious code in successful-fuchsia-catfish (npm) (malicious package) - [MAL-2025-70926](https://insights.sbomify.com/MAL-2025-70926/): Malicious code in successful-chocolate-cuckoo (npm) (malicious package) - [MAL-2025-70925](https://insights.sbomify.com/MAL-2025-70925/): Malicious code in successful-black-xerinae (npm) (malicious package) - [MAL-2025-70924](https://insights.sbomify.com/MAL-2025-70924/): Malicious code in successful-azure-snake (npm) (malicious package) - [MAL-2025-70923](https://insights.sbomify.com/MAL-2025-70923/): Malicious code in successful-amaranth-snail (npm) (malicious package) - [MAL-2025-70922](https://insights.sbomify.com/MAL-2025-70922/): Malicious code in subtle-white-muskox (npm) (malicious package) - [MAL-2025-70921](https://insights.sbomify.com/MAL-2025-70921/): Malicious code in subtle-teal-cuckoo (npm) (malicious package) - [MAL-2025-70920](https://insights.sbomify.com/MAL-2025-70920/): Malicious code in subtle-scarlet-felidae (npm) (malicious package) - [MAL-2025-7092](https://insights.sbomify.com/MAL-2025-7092/): Malicious code in @antwiib001/ullam-atque-sequi (npm) (malicious package) - [MAL-2025-70919](https://insights.sbomify.com/MAL-2025-70919/): Malicious code in subtle-salmon-pigeon (npm) (malicious package) - [MAL-2025-70918](https://insights.sbomify.com/MAL-2025-70918/): Malicious code in subtle-emerald-grouse (npm) (malicious package) - [MAL-2025-70917](https://insights.sbomify.com/MAL-2025-70917/): Malicious code in substantial-silver-vulture (npm) (malicious package) - [MAL-2025-70916](https://insights.sbomify.com/MAL-2025-70916/): Malicious code in substantial-maroon-sloth (npm) (malicious package) - [MAL-2025-70915](https://insights.sbomify.com/MAL-2025-70915/): Malicious code in substantial-copper-marlin (npm) (malicious package) - [MAL-2025-70914](https://insights.sbomify.com/MAL-2025-70914/): Malicious code in subsequent-red-leopard (npm) (malicious package) - [MAL-2025-70913](https://insights.sbomify.com/MAL-2025-70913/): Malicious code in subsequent-pink-meerkat (npm) (malicious package) - [MAL-2025-70912](https://insights.sbomify.com/MAL-2025-70912/): Malicious code in subsequent-copper-python (npm) (malicious package) - [MAL-2025-70911](https://insights.sbomify.com/MAL-2025-70911/): Malicious code in subsequent-chocolate-lizard (npm) (malicious package) - [MAL-2025-70910](https://insights.sbomify.com/MAL-2025-70910/): Malicious code in subsequent-beige-sawfish (npm) (malicious package) - [MAL-2025-7091](https://insights.sbomify.com/MAL-2025-7091/): Malicious code in @antwiib001/quae-dolores-maxime (npm) (malicious package) - [MAL-2025-70909](https://insights.sbomify.com/MAL-2025-70909/): Malicious code in subsequent-amaranth-ptarmigan (npm) (malicious package) - [MAL-2025-70908](https://insights.sbomify.com/MAL-2025-70908/): Malicious code in subjective-turquoise-ferret (npm) (malicious package) - [MAL-2025-70907](https://insights.sbomify.com/MAL-2025-70907/): Malicious code in subjective-sapphire-pigeon (npm) (malicious package) - [MAL-2025-70906](https://insights.sbomify.com/MAL-2025-70906/): Malicious code in subjective-sapphire-lemming (npm) (malicious package) - [MAL-2025-70905](https://insights.sbomify.com/MAL-2025-70905/): Malicious code in subjective-gray-dragonfly (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/326/