# Vulnerabilities published in 2025


- [MAL-2025-70620](https://insights.sbomify.com/MAL-2025-70620/): Malicious code in silent-yellow-crab (npm) (malicious package)
- [MAL-2025-70619](https://insights.sbomify.com/MAL-2025-70619/): Malicious code in silent-violet-aphid (npm) (malicious package)
- [MAL-2025-70618](https://insights.sbomify.com/MAL-2025-70618/): Malicious code in silent-turquoise-hippopotamus (npm) (malicious package)
- [MAL-2025-70617](https://insights.sbomify.com/MAL-2025-70617/): Malicious code in silent-purple-trout (npm) (malicious package)
- [MAL-2025-70616](https://insights.sbomify.com/MAL-2025-70616/): Malicious code in silent-coffee-chameleon (npm) (malicious package)
- [MAL-2025-70615](https://insights.sbomify.com/MAL-2025-70615/): Malicious code in significant-tomato-swan (npm) (malicious package)
- [MAL-2025-70614](https://insights.sbomify.com/MAL-2025-70614/): Malicious code in significant-pink-platypus (npm) (malicious package)
- [MAL-2025-70613](https://insights.sbomify.com/MAL-2025-70613/): Malicious code in sick-yellow-lynx (npm) (malicious package)
- [MAL-2025-70612](https://insights.sbomify.com/MAL-2025-70612/): Malicious code in sick-moccasin-wallaby (npm) (malicious package)
- [MAL-2025-70611](https://insights.sbomify.com/MAL-2025-70611/): Malicious code in sick-azure-canid (npm) (malicious package)
- [MAL-2025-70610](https://insights.sbomify.com/MAL-2025-70610/): Malicious code in shy-tomato-cod (npm) (malicious package)
- [MAL-2025-70609](https://insights.sbomify.com/MAL-2025-70609/): Malicious code in shy-crimson-whitefish (npm) (malicious package)
- [MAL-2025-70608](https://insights.sbomify.com/MAL-2025-70608/): Malicious code in shy-brown-giraffe (npm) (malicious package)
- [MAL-2025-70607](https://insights.sbomify.com/MAL-2025-70607/): Malicious code in shrill-rose-opossum (npm) (malicious package)
- [MAL-2025-70606](https://insights.sbomify.com/MAL-2025-70606/): Malicious code in shrill-moccasin-lobster (npm) (malicious package)
- [MAL-2025-70605](https://insights.sbomify.com/MAL-2025-70605/): Malicious code in shrill-lavender-tiger (npm) (malicious package)
- [MAL-2025-70604](https://insights.sbomify.com/MAL-2025-70604/): Malicious code in shrill-apricot-rook (npm) (malicious package)
- [MAL-2025-70603](https://insights.sbomify.com/MAL-2025-70603/): Malicious code in short-gold-meerkat (npm) (malicious package)
- [MAL-2025-70602](https://insights.sbomify.com/MAL-2025-70602/): Malicious code in short-chocolate-marlin (npm) (malicious package)
- [MAL-2025-70601](https://insights.sbomify.com/MAL-2025-70601/): Malicious code in shollypeez (npm) (malicious package)
- [MAL-2025-70600](https://insights.sbomify.com/MAL-2025-70600/): Malicious code in shocked-salmon-rodent (npm) (malicious package)
- [MAL-2025-706](https://insights.sbomify.com/MAL-2025-706/): Malicious code in delete-deployments (npm) (malicious package)
- [MAL-2025-70599](https://insights.sbomify.com/MAL-2025-70599/): Malicious code in shocked-red-earwig (npm) (malicious package)
- [MAL-2025-70598](https://insights.sbomify.com/MAL-2025-70598/): Malicious code in shocked-pink-seahorse (npm) (malicious package)
- [MAL-2025-70597](https://insights.sbomify.com/MAL-2025-70597/): Malicious code in shocked-blush-crab (npm) (malicious package)
- [MAL-2025-70596](https://insights.sbomify.com/MAL-2025-70596/): Malicious code in shocked-azure-bobolink (npm) (malicious package)
- [MAL-2025-70595](https://insights.sbomify.com/MAL-2025-70595/): Malicious code in shivering-salmon-junglefowl (npm) (malicious package)
- [MAL-2025-70594](https://insights.sbomify.com/MAL-2025-70594/): Malicious code in shivering-salmon-boar (npm) (malicious package)
- [MAL-2025-70593](https://insights.sbomify.com/MAL-2025-70593/): Malicious code in shivering-indigo-tick (npm) (malicious package)
- [MAL-2025-70592](https://insights.sbomify.com/MAL-2025-70592/): Malicious code in shiny-scarlet-rooster (npm) (malicious package)
- [MAL-2025-70591](https://insights.sbomify.com/MAL-2025-70591/): Malicious code in shiny-maroon-earwig (npm) (malicious package)
- [MAL-2025-70590](https://insights.sbomify.com/MAL-2025-70590/): Malicious code in shiny-lime-cat (npm) (malicious package)
- [MAL-2025-70589](https://insights.sbomify.com/MAL-2025-70589/): Malicious code in shiny-blue-tick (npm) (malicious package)
- [MAL-2025-70588](https://insights.sbomify.com/MAL-2025-70588/): Malicious code in sheer-peach-panda (npm) (malicious package)
- [MAL-2025-70587](https://insights.sbomify.com/MAL-2025-70587/): Malicious code in sheer-green-magpie (npm) (malicious package)
- [MAL-2025-70586](https://insights.sbomify.com/MAL-2025-70586/): Malicious code in sheer-gold-shrew (npm) (malicious package)
- [MAL-2025-70585](https://insights.sbomify.com/MAL-2025-70585/): Malicious code in sharp-yellow-marmot (npm) (malicious package)
- [MAL-2025-70584](https://insights.sbomify.com/MAL-2025-70584/): Malicious code in sharp-violet-gayal (npm) (malicious package)
- [MAL-2025-70583](https://insights.sbomify.com/MAL-2025-70583/): Malicious code in sharp-violet-flea (npm) (malicious package)
- [MAL-2025-70582](https://insights.sbomify.com/MAL-2025-70582/): Malicious code in sharp-sapphire-hyena (npm) (malicious package)
- [MAL-2025-70581](https://insights.sbomify.com/MAL-2025-70581/): Malicious code in sharp-peach-wildfowl (npm) (malicious package)
- [MAL-2025-70580](https://insights.sbomify.com/MAL-2025-70580/): Malicious code in sharp-green-cat (npm) (malicious package)
- [MAL-2025-7058](https://insights.sbomify.com/MAL-2025-7058/): Malicious code in @amber-team/gatsby-plugin-semcore (npm) (malicious package)
- [MAL-2025-70579](https://insights.sbomify.com/MAL-2025-70579/): Malicious code in sharp-fuchsia-heron (npm) (malicious package)
- [MAL-2025-70578](https://insights.sbomify.com/MAL-2025-70578/): Malicious code in sharp-blue-horse (npm) (malicious package)
- [MAL-2025-70577](https://insights.sbomify.com/MAL-2025-70577/): Malicious code in sharp-amethyst-sturgeon (npm) (malicious package)
- [MAL-2025-70576](https://insights.sbomify.com/MAL-2025-70576/): Malicious code in shared-tan-urial (npm) (malicious package)
- [MAL-2025-70575](https://insights.sbomify.com/MAL-2025-70575/): Malicious code in shared-pink-viper (npm) (malicious package)
- [MAL-2025-70574](https://insights.sbomify.com/MAL-2025-70574/): Malicious code in shared-gray-cattle (npm) (malicious package)
- [MAL-2025-70573](https://insights.sbomify.com/MAL-2025-70573/): Malicious code in shared-chocolate-dog (npm) (malicious package)
- [MAL-2025-70572](https://insights.sbomify.com/MAL-2025-70572/): Malicious code in shared-chocolate-constrictor (npm) (malicious package)
- [MAL-2025-70571](https://insights.sbomify.com/MAL-2025-70571/): Malicious code in shared-amaranth-flyingfish (npm) (malicious package)
- [MAL-2025-70570](https://insights.sbomify.com/MAL-2025-70570/): Malicious code in shallow-salmon-horse (npm) (malicious package)
- [MAL-2025-7057](https://insights.sbomify.com/MAL-2025-7057/): Malicious code in @amber-team/figma-utils (npm) (malicious package)
- [MAL-2025-70569](https://insights.sbomify.com/MAL-2025-70569/): Malicious code in shallow-orange-antlion (npm) (malicious package)
- [MAL-2025-70568](https://insights.sbomify.com/MAL-2025-70568/): Malicious code in shallow-moccasin-ermine (npm) (malicious package)
- [MAL-2025-70567](https://insights.sbomify.com/MAL-2025-70567/): Malicious code in shaky-yellow-kangaroo (npm) (malicious package)
- [MAL-2025-70566](https://insights.sbomify.com/MAL-2025-70566/): Malicious code in shaky-tomato-dragonfly (npm) (malicious package)
- [MAL-2025-70565](https://insights.sbomify.com/MAL-2025-70565/): Malicious code in shaky-teal-zebra (npm) (malicious package)
- [MAL-2025-70564](https://insights.sbomify.com/MAL-2025-70564/): Malicious code in shaky-salmon-turtle (npm) (malicious package)
- [MAL-2025-70563](https://insights.sbomify.com/MAL-2025-70563/): Malicious code in shaky-salmon-snipe (npm) (malicious package)
- [MAL-2025-70562](https://insights.sbomify.com/MAL-2025-70562/): Malicious code in shaky-pink-meadowlark (npm) (malicious package)
- [MAL-2025-70561](https://insights.sbomify.com/MAL-2025-70561/): Malicious code in shaky-peach-kangaroo (npm) (malicious package)
- [MAL-2025-70560](https://insights.sbomify.com/MAL-2025-70560/): Malicious code in shaky-crimson-mouse (npm) (malicious package)
- [MAL-2025-7056](https://insights.sbomify.com/MAL-2025-7056/): Malicious code in @amber-team/export-events-to-sheet (npm) (malicious package)
- [MAL-2025-70559](https://insights.sbomify.com/MAL-2025-70559/): Malicious code in shaky-beige-giraffe (npm) (malicious package)
- [MAL-2025-70558](https://insights.sbomify.com/MAL-2025-70558/): Malicious code in shaky-azure-cephalopod (npm) (malicious package)
- [MAL-2025-70557](https://insights.sbomify.com/MAL-2025-70557/): Malicious code in shaky-aquamarine-wildebeest (npm) (malicious package)
- [MAL-2025-70556](https://insights.sbomify.com/MAL-2025-70556/): Malicious code in shaggy-white-xerinae (npm) (malicious package)
- [MAL-2025-70555](https://insights.sbomify.com/MAL-2025-70555/): Malicious code in shaggy-gold-bee (npm) (malicious package)
- [MAL-2025-70554](https://insights.sbomify.com/MAL-2025-70554/): Malicious code in shaggy-fuchsia-hummingbird (npm) (malicious package)
- [MAL-2025-70553](https://insights.sbomify.com/MAL-2025-70553/): Malicious code in shaggy-amethyst-chipmunk (npm) (malicious package)
- [MAL-2025-70552](https://insights.sbomify.com/MAL-2025-70552/): Malicious code in sexual-tomato-flyingfish (npm) (malicious package)
- [MAL-2025-70551](https://insights.sbomify.com/MAL-2025-70551/): Malicious code in sexual-rose-scallop (npm) (malicious package)
- [MAL-2025-70550](https://insights.sbomify.com/MAL-2025-70550/): Malicious code in sexual-emerald-thrush (npm) (malicious package)
- [MAL-2025-70549](https://insights.sbomify.com/MAL-2025-70549/): Malicious code in sexual-coral-sturgeon (npm) (malicious package)
- [MAL-2025-70548](https://insights.sbomify.com/MAL-2025-70548/): Malicious code in sexual-beige-barracuda (npm) (malicious package)
- [MAL-2025-70547](https://insights.sbomify.com/MAL-2025-70547/): Malicious code in severe-pink-louse (npm) (malicious package)
- [MAL-2025-70546](https://insights.sbomify.com/MAL-2025-70546/): Malicious code in severe-lavender-butterfly (npm) (malicious package)
- [MAL-2025-70545](https://insights.sbomify.com/MAL-2025-70545/): Malicious code in severe-copper-silverfish (npm) (malicious package)
- [MAL-2025-70544](https://insights.sbomify.com/MAL-2025-70544/): Malicious code in severe-blue-pony (npm) (malicious package)
- [MAL-2025-70543](https://insights.sbomify.com/MAL-2025-70543/): Malicious code in severe-black-bug (npm) (malicious package)
- [MAL-2025-70542](https://insights.sbomify.com/MAL-2025-70542/): Malicious code in serious-sapphire-gayal (npm) (malicious package)
- [MAL-2025-70541](https://insights.sbomify.com/MAL-2025-70541/): Malicious code in serious-harlequin-mongoose (npm) (malicious package)
- [MAL-2025-70540](https://insights.sbomify.com/MAL-2025-70540/): Malicious code in serious-emerald-warbler (npm) (malicious package)
- [MAL-2025-70539](https://insights.sbomify.com/MAL-2025-70539/): Malicious code in serious-chocolate-flyingfish (npm) (malicious package)
- [MAL-2025-70538](https://insights.sbomify.com/MAL-2025-70538/): Malicious code in serious-blush-raccoon (npm) (malicious package)
- [MAL-2025-70537](https://insights.sbomify.com/MAL-2025-70537/): Malicious code in separate-beige-hornet (npm) (malicious package)
- [MAL-2025-70536](https://insights.sbomify.com/MAL-2025-70536/): Malicious code in sensitive-white-xerinae (npm) (malicious package)
- [MAL-2025-70535](https://insights.sbomify.com/MAL-2025-70535/): Malicious code in sensitive-white-dragonfly (npm) (malicious package)
- [MAL-2025-70534](https://insights.sbomify.com/MAL-2025-70534/): Malicious code in sensitive-moccasin-parakeet (npm) (malicious package)
- [MAL-2025-70533](https://insights.sbomify.com/MAL-2025-70533/): Malicious code in sensitive-apricot-parrot (npm) (malicious package)
- [MAL-2025-70532](https://insights.sbomify.com/MAL-2025-70532/): Malicious code in sensible-ivory-condor (npm) (malicious package)
- [MAL-2025-70531](https://insights.sbomify.com/MAL-2025-70531/): Malicious code in senior-lime-goose (npm) (malicious package)
- [MAL-2025-70530](https://insights.sbomify.com/MAL-2025-70530/): Malicious code in senior-lavender-canidae (npm) (malicious package)
- [MAL-2025-70529](https://insights.sbomify.com/MAL-2025-70529/): Malicious code in senior-jade-dormouse (npm) (malicious package)
- [MAL-2025-70528](https://insights.sbomify.com/MAL-2025-70528/): Malicious code in senior-ivory-hawk (npm) (malicious package)
- [MAL-2025-70527](https://insights.sbomify.com/MAL-2025-70527/): Malicious code in senior-crimson-antelope (npm) (malicious package)
- [MAL-2025-70526](https://insights.sbomify.com/MAL-2025-70526/): Malicious code in senior-blue-yak (npm) (malicious package)
- [MAL-2025-70525](https://insights.sbomify.com/MAL-2025-70525/): Malicious code in semantic-cyan-damselfly (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/330/