# Vulnerabilities published in 2025 - [MAL-2025-7043](https://insights.sbomify.com/MAL-2025-7043/): Malicious code in 9xkt8l (npm) (malicious package) - [MAL-2025-70429](https://insights.sbomify.com/MAL-2025-70429/): Malicious code in rubber-azure-tapir (npm) (malicious package) - [MAL-2025-70428](https://insights.sbomify.com/MAL-2025-70428/): Malicious code in royal-olive-limpet (npm) (malicious package) - [MAL-2025-70427](https://insights.sbomify.com/MAL-2025-70427/): Malicious code in royal-beige-salmon (npm) (malicious package) - [MAL-2025-70426](https://insights.sbomify.com/MAL-2025-70426/): Malicious code in rouston12 (npm) (malicious package) - [MAL-2025-70425](https://insights.sbomify.com/MAL-2025-70425/): Malicious code in round-silver-baboon (npm) (malicious package) - [MAL-2025-70424](https://insights.sbomify.com/MAL-2025-70424/): Malicious code in round-magenta-barracuda (npm) (malicious package) - [MAL-2025-70423](https://insights.sbomify.com/MAL-2025-70423/): Malicious code in round-indigo-goat (npm) (malicious package) - [MAL-2025-70422](https://insights.sbomify.com/MAL-2025-70422/): Malicious code in rough-emerald-snipe (npm) (malicious package) - [MAL-2025-70421](https://insights.sbomify.com/MAL-2025-70421/): Malicious code in rough-coffee-quail (npm) (malicious package) - [MAL-2025-70420](https://insights.sbomify.com/MAL-2025-70420/): Malicious code in rotten-yellow-aardvark (npm) (malicious package) - [MAL-2025-7042](https://insights.sbomify.com/MAL-2025-7042/): Malicious code in 9u95ou (npm) (malicious package) - [MAL-2025-70419](https://insights.sbomify.com/MAL-2025-70419/): Malicious code in rotten-sapphire-tarantula (npm) (malicious package) - [MAL-2025-70418](https://insights.sbomify.com/MAL-2025-70418/): Malicious code in rotten-sapphire-snake (npm) (malicious package) - [MAL-2025-70417](https://insights.sbomify.com/MAL-2025-70417/): Malicious code in rotten-olive-frog (npm) (malicious package) - [MAL-2025-70416](https://insights.sbomify.com/MAL-2025-70416/): Malicious code in romantic-tomato-pheasant (npm) (malicious package) - [MAL-2025-70415](https://insights.sbomify.com/MAL-2025-70415/): Malicious code in romantic-lime-junglefowl (npm) (malicious package) - [MAL-2025-70414](https://insights.sbomify.com/MAL-2025-70414/): Malicious code in romantic-emerald-grasshopper (npm) (malicious package) - [MAL-2025-70413](https://insights.sbomify.com/MAL-2025-70413/): Malicious code in romantic-apricot-ape (npm) (malicious package) - [MAL-2025-70412](https://insights.sbomify.com/MAL-2025-70412/): Malicious code in romantic-amber-monkey (npm) (malicious package) - [MAL-2025-70411](https://insights.sbomify.com/MAL-2025-70411/): Malicious code in rolling-coral-dragonfly (npm) (malicious package) - [MAL-2025-70410](https://insights.sbomify.com/MAL-2025-70410/): Malicious code in rokochisefa (npm) (malicious package) - [MAL-2025-7041](https://insights.sbomify.com/MAL-2025-7041/): Malicious code in 9mqz3t (npm) (malicious package) - [MAL-2025-70409](https://insights.sbomify.com/MAL-2025-70409/): Malicious code in robust-tomato-shrimp (npm) (malicious package) - [MAL-2025-70408](https://insights.sbomify.com/MAL-2025-70408/): Malicious code in robust-gold-crocodile (npm) (malicious package) - [MAL-2025-70407](https://insights.sbomify.com/MAL-2025-70407/): Malicious code in roasted-tomato-jellyfish (npm) (malicious package) - [MAL-2025-70406](https://insights.sbomify.com/MAL-2025-70406/): Malicious code in roasted-indigo-condor (npm) (malicious package) - [MAL-2025-70405](https://insights.sbomify.com/MAL-2025-70405/): Malicious code in roasted-amethyst-gecko (npm) (malicious package) - [MAL-2025-70404](https://insights.sbomify.com/MAL-2025-70404/): Malicious code in rival-yellow-camel (npm) (malicious package) - [MAL-2025-70403](https://insights.sbomify.com/MAL-2025-70403/): Malicious code in rival-brown-flyingfish (npm) (malicious package) - [MAL-2025-70402](https://insights.sbomify.com/MAL-2025-70402/): Malicious code in rising-turquoise-flea (npm) (malicious package) - [MAL-2025-70401](https://insights.sbomify.com/MAL-2025-70401/): Malicious code in rising-tomato-lizard (npm) (malicious package) - [MAL-2025-70400](https://insights.sbomify.com/MAL-2025-70400/): Malicious code in rising-moccasin-nightingale (npm) (malicious package) - [MAL-2025-7040](https://insights.sbomify.com/MAL-2025-7040/): Malicious code in 9c-lord-backend (npm) (malicious package) - [MAL-2025-704](https://insights.sbomify.com/MAL-2025-704/): Malicious code in compiler-version (npm) (malicious package) - [MAL-2025-70399](https://insights.sbomify.com/MAL-2025-70399/): Malicious code in rising-lime-fox (npm) (malicious package) - [MAL-2025-70398](https://insights.sbomify.com/MAL-2025-70398/): Malicious code in rising-green-otter (npm) (malicious package) - [MAL-2025-70397](https://insights.sbomify.com/MAL-2025-70397/): Malicious code in rising-gold-aardwolf (npm) (malicious package) - [MAL-2025-70396](https://insights.sbomify.com/MAL-2025-70396/): Malicious code in ripe-silver-whippet (npm) (malicious package) - [MAL-2025-70395](https://insights.sbomify.com/MAL-2025-70395/): Malicious code in ripe-peach-swordfish (npm) (malicious package) - [MAL-2025-70394](https://insights.sbomify.com/MAL-2025-70394/): Malicious code in ripe-magenta-tahr (npm) (malicious package) - [MAL-2025-70393](https://insights.sbomify.com/MAL-2025-70393/): Malicious code in ripe-gray-aardwolf (npm) (malicious package) - [MAL-2025-70392](https://insights.sbomify.com/MAL-2025-70392/): Malicious code in rigid-orange-shark (npm) (malicious package) - [MAL-2025-70391](https://insights.sbomify.com/MAL-2025-70391/): Malicious code in rigid-lavender-heron (npm) (malicious package) - [MAL-2025-70390](https://insights.sbomify.com/MAL-2025-70390/): Malicious code in rigid-harlequin-hummingbird (npm) (malicious package) - [MAL-2025-7039](https://insights.sbomify.com/MAL-2025-7039/): Malicious code in 9asghi (npm) (malicious package) - [MAL-2025-70389](https://insights.sbomify.com/MAL-2025-70389/): Malicious code in rigid-blush-lamprey (npm) (malicious package) - [MAL-2025-70388](https://insights.sbomify.com/MAL-2025-70388/): Malicious code in right-moccasin-hornet (npm) (malicious package) - [MAL-2025-70387](https://insights.sbomify.com/MAL-2025-70387/): Malicious code in right-black-tapir (npm) (malicious package) - [MAL-2025-70386](https://insights.sbomify.com/MAL-2025-70386/): Malicious code in right-azure-alligator (npm) (malicious package) - [MAL-2025-70385](https://insights.sbomify.com/MAL-2025-70385/): Malicious code in right-amethyst-tyrannosaurus (npm) (malicious package) - [MAL-2025-70384](https://insights.sbomify.com/MAL-2025-70384/): Malicious code in ridiculous-turquoise-asp (npm) (malicious package) - [MAL-2025-70383](https://insights.sbomify.com/MAL-2025-70383/): Malicious code in ridiculous-teal-grouse (npm) (malicious package) - [MAL-2025-70382](https://insights.sbomify.com/MAL-2025-70382/): Malicious code in ridiculous-sapphire-turkey (npm) (malicious package) - [MAL-2025-70381](https://insights.sbomify.com/MAL-2025-70381/): Malicious code in ridiculous-pink-dinosaur (npm) (malicious package) - [MAL-2025-70380](https://insights.sbomify.com/MAL-2025-70380/): Malicious code in ridiculous-peach-koala (npm) (malicious package) - [MAL-2025-7038](https://insights.sbomify.com/MAL-2025-7038/): Malicious code in 986reddit-free-xbox-codes (npm) (malicious package) - [MAL-2025-70379](https://insights.sbomify.com/MAL-2025-70379/): Malicious code in ridiculous-emerald-dragon (npm) (malicious package) - [MAL-2025-70378](https://insights.sbomify.com/MAL-2025-70378/): Malicious code in ridiculous-black-stoat (npm) (malicious package) - [MAL-2025-70377](https://insights.sbomify.com/MAL-2025-70377/): Malicious code in richirok (npm) (malicious package) - [MAL-2025-70376](https://insights.sbomify.com/MAL-2025-70376/): Malicious code in rich-silver-piranha (npm) (malicious package) - [MAL-2025-70375](https://insights.sbomify.com/MAL-2025-70375/): Malicious code in rich-chocolate-dog (npm) (malicious package) - [MAL-2025-70374](https://insights.sbomify.com/MAL-2025-70374/): Malicious code in revolutionary-white-lemur (npm) (malicious package) - [MAL-2025-70373](https://insights.sbomify.com/MAL-2025-70373/): Malicious code in retired-sapphire-leopard (npm) (malicious package) - [MAL-2025-70372](https://insights.sbomify.com/MAL-2025-70372/): Malicious code in retail-red-tortoise (npm) (malicious package) - [MAL-2025-70371](https://insights.sbomify.com/MAL-2025-70371/): Malicious code in retail-pink-chipmunk (npm) (malicious package) - [MAL-2025-70370](https://insights.sbomify.com/MAL-2025-70370/): Malicious code in retail-magenta-egret (npm) (malicious package) - [MAL-2025-7037](https://insights.sbomify.com/MAL-2025-7037/): Malicious code in 911-js-test-example (npm) (malicious package) - [MAL-2025-70369](https://insights.sbomify.com/MAL-2025-70369/): Malicious code in retail-fuchsia-whale (npm) (malicious package) - [MAL-2025-70368](https://insights.sbomify.com/MAL-2025-70368/): Malicious code in resulting-salmon-felidae (npm) (malicious package) - [MAL-2025-70367](https://insights.sbomify.com/MAL-2025-70367/): Malicious code in resulting-maroon-tarsier (npm) (malicious package) - [MAL-2025-70366](https://insights.sbomify.com/MAL-2025-70366/): Malicious code in resulting-copper-termite (npm) (malicious package) - [MAL-2025-70365](https://insights.sbomify.com/MAL-2025-70365/): Malicious code in responsible-azure-harrier (npm) (malicious package) - [MAL-2025-70364](https://insights.sbomify.com/MAL-2025-70364/): Malicious code in respective-silver-skink (npm) (malicious package) - [MAL-2025-70363](https://insights.sbomify.com/MAL-2025-70363/): Malicious code in respective-chocolate-emu (npm) (malicious package) - [MAL-2025-70362](https://insights.sbomify.com/MAL-2025-70362/): Malicious code in respectable-turquoise-tahr (npm) (malicious package) - [MAL-2025-70361](https://insights.sbomify.com/MAL-2025-70361/): Malicious code in respectable-teal-scallop (npm) (malicious package) - [MAL-2025-70360](https://insights.sbomify.com/MAL-2025-70360/): Malicious code in respectable-red-hippopotamus (npm) (malicious package) - [MAL-2025-7036](https://insights.sbomify.com/MAL-2025-7036/): Malicious code in 901free-xbox-ea-access-codes (npm) (malicious package) - [MAL-2025-70359](https://insights.sbomify.com/MAL-2025-70359/): Malicious code in respectable-brown-marmot (npm) (malicious package) - [MAL-2025-70358](https://insights.sbomify.com/MAL-2025-70358/): Malicious code in resonant-gold-urial (npm) (malicious package) - [MAL-2025-70357](https://insights.sbomify.com/MAL-2025-70357/): Malicious code in resonant-gold-barracuda (npm) (malicious package) - [MAL-2025-70356](https://insights.sbomify.com/MAL-2025-70356/): Malicious code in resonant-copper-mite (npm) (malicious package) - [MAL-2025-70355](https://insights.sbomify.com/MAL-2025-70355/): Malicious code in resonant-aquamarine-cheetah (npm) (malicious package) - [MAL-2025-70354](https://insights.sbomify.com/MAL-2025-70354/): Malicious code in resonant-amber-vole (npm) (malicious package) - [MAL-2025-70353](https://insights.sbomify.com/MAL-2025-70353/): Malicious code in residential-silver-panda (npm) (malicious package) - [MAL-2025-70352](https://insights.sbomify.com/MAL-2025-70352/): Malicious code in residential-magenta-ox (npm) (malicious package) - [MAL-2025-70351](https://insights.sbomify.com/MAL-2025-70351/): Malicious code in residential-gray-peacock (npm) (malicious package) - [MAL-2025-70350](https://insights.sbomify.com/MAL-2025-70350/): Malicious code in residential-gold-damselfly (npm) (malicious package) - [MAL-2025-7035](https://insights.sbomify.com/MAL-2025-7035/): Malicious code in 8chan (npm) (malicious package) - [MAL-2025-70349](https://insights.sbomify.com/MAL-2025-70349/): Malicious code in residential-emerald-penguin (npm) (malicious package) - [MAL-2025-70348](https://insights.sbomify.com/MAL-2025-70348/): Malicious code in residential-azure-cobra (npm) (malicious package) - [MAL-2025-70347](https://insights.sbomify.com/MAL-2025-70347/): Malicious code in resident-yellow-ant (npm) (malicious package) - [MAL-2025-70346](https://insights.sbomify.com/MAL-2025-70346/): Malicious code in resident-turquoise-mongoose (npm) (malicious package) - [MAL-2025-70345](https://insights.sbomify.com/MAL-2025-70345/): Malicious code in resident-teal-marmoset (npm) (malicious package) - [MAL-2025-70344](https://insights.sbomify.com/MAL-2025-70344/): Malicious code in resident-pink-impala (npm) (malicious package) - [MAL-2025-70343](https://insights.sbomify.com/MAL-2025-70343/): Malicious code in resident-maroon-owl (npm) (malicious package) - [MAL-2025-70342](https://insights.sbomify.com/MAL-2025-70342/): Malicious code in resident-aquamarine-krill (npm) (malicious package) - [MAL-2025-70341](https://insights.sbomify.com/MAL-2025-70341/): Malicious code in required-purple-quokka (npm) (malicious package) - [MAL-2025-70340](https://insights.sbomify.com/MAL-2025-70340/): Malicious code in required-harlequin-earwig (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/332/