# Vulnerabilities published in 2025


- [MAL-2025-97398](https://insights.sbomify.com/MAL-2025-97398/): Malicious code in wonderful_junglefowl_z3n (npm) (malicious package)
- [MAL-2025-97397](https://insights.sbomify.com/MAL-2025-97397/): Malicious code in witty_vole_z3n (npm) (malicious package)
- [MAL-2025-97396](https://insights.sbomify.com/MAL-2025-97396/): Malicious code in witty_trout_requirement (npm) (malicious package)
- [MAL-2025-97395](https://insights.sbomify.com/MAL-2025-97395/): Malicious code in witty_leopard_z3n (npm) (malicious package)
- [MAL-2025-97394](https://insights.sbomify.com/MAL-2025-97394/): Malicious code in witty_catshark_z3n (npm) (malicious package)
- [MAL-2025-97393](https://insights.sbomify.com/MAL-2025-97393/): Malicious code in wittering_wildebeest_z3n (npm) (malicious package)
- [MAL-2025-97392](https://insights.sbomify.com/MAL-2025-97392/): Malicious code in wittering_peafowl_z3n (npm) (malicious package)
- [MAL-2025-97391](https://insights.sbomify.com/MAL-2025-97391/): Malicious code in wittering_crawdad_requirement (npm) (malicious package)
- [MAL-2025-97390](https://insights.sbomify.com/MAL-2025-97390/): Malicious code in wittering_cicada_z3n (npm) (malicious package)
- [MAL-2025-9739](https://insights.sbomify.com/MAL-2025-9739/): Malicious code in @zalastax/nolb-_ail (npm) (malicious package)
- [MAL-2025-97389](https://insights.sbomify.com/MAL-2025-97389/): Malicious code in wispy_python_z3n (npm) (malicious package)
- [MAL-2025-97388](https://insights.sbomify.com/MAL-2025-97388/): Malicious code in wispy_fish_z3n (npm) (malicious package)
- [MAL-2025-97387](https://insights.sbomify.com/MAL-2025-97387/): Malicious code in wispy_emu_z3n (npm) (malicious package)
- [MAL-2025-97386](https://insights.sbomify.com/MAL-2025-97386/): Malicious code in wise_quail_z3n (npm) (malicious package)
- [MAL-2025-97385](https://insights.sbomify.com/MAL-2025-97385/): Malicious code in wily_parrotfish_z3n (npm) (malicious package)
- [MAL-2025-97384](https://insights.sbomify.com/MAL-2025-97384/): Malicious code in wily_aardwolf_requirement (npm) (malicious package)
- [MAL-2025-97383](https://insights.sbomify.com/MAL-2025-97383/): Malicious code in willowy_swallow_z3n (npm) (malicious package)
- [MAL-2025-97382](https://insights.sbomify.com/MAL-2025-97382/): Malicious code in willowy_marten_z3n (npm) (malicious package)
- [MAL-2025-97381](https://insights.sbomify.com/MAL-2025-97381/): Malicious code in willing_urial_z3n (npm) (malicious package)
- [MAL-2025-97380](https://insights.sbomify.com/MAL-2025-97380/): Malicious code in willing_pony_z3n (npm) (malicious package)
- [MAL-2025-9738](https://insights.sbomify.com/MAL-2025-9738/): Malicious code in @zalastax/nolb-_aik (npm) (malicious package)
- [MAL-2025-97379](https://insights.sbomify.com/MAL-2025-97379/): Malicious code in willing_ferret_z3n (npm) (malicious package)
- [MAL-2025-97378](https://insights.sbomify.com/MAL-2025-97378/): Malicious code in willing_carp_z3n (npm) (malicious package)
- [MAL-2025-97377](https://insights.sbomify.com/MAL-2025-97377/): Malicious code in wilful_panda_z3n (npm) (malicious package)
- [MAL-2025-97376](https://insights.sbomify.com/MAL-2025-97376/): Malicious code in wild_primate_z3n (npm) (malicious package)
- [MAL-2025-97375](https://insights.sbomify.com/MAL-2025-97375/): Malicious code in wild_halibut_z3n (npm) (malicious package)
- [MAL-2025-97374](https://insights.sbomify.com/MAL-2025-97374/): Malicious code in wild_firefly_z3n (npm) (malicious package)
- [MAL-2025-97373](https://insights.sbomify.com/MAL-2025-97373/): Malicious code in wild_badger_z3n (npm) (malicious package)
- [MAL-2025-97372](https://insights.sbomify.com/MAL-2025-97372/): Malicious code in widespread_worm_z3n (npm) (malicious package)
- [MAL-2025-97371](https://insights.sbomify.com/MAL-2025-97371/): Malicious code in widespread_starfish_z3n (npm) (malicious package)
- [MAL-2025-97370](https://insights.sbomify.com/MAL-2025-97370/): Malicious code in widespread_antlion_z3n (npm) (malicious package)
- [MAL-2025-9737](https://insights.sbomify.com/MAL-2025-9737/): Malicious code in @zalastax/nolb-_aii (npm) (malicious package)
- [MAL-2025-97369](https://insights.sbomify.com/MAL-2025-97369/): Malicious code in wide_warbler_z3n (npm) (malicious package)
- [MAL-2025-97368](https://insights.sbomify.com/MAL-2025-97368/): Malicious code in wicked_trout_z3n (npm) (malicious package)
- [MAL-2025-97367](https://insights.sbomify.com/MAL-2025-97367/): Malicious code in wicked_marmot_requirement (npm) (malicious package)
- [MAL-2025-97366](https://insights.sbomify.com/MAL-2025-97366/): Malicious code in wicked_asp_z3n (npm) (malicious package)
- [MAL-2025-97365](https://insights.sbomify.com/MAL-2025-97365/): Malicious code in whole_thrush_z3n (npm) (malicious package)
- [MAL-2025-97364](https://insights.sbomify.com/MAL-2025-97364/): Malicious code in whole_takin_z3n (npm) (malicious package)
- [MAL-2025-97363](https://insights.sbomify.com/MAL-2025-97363/): Malicious code in whole_owl_z3n (npm) (malicious package)
- [MAL-2025-97362](https://insights.sbomify.com/MAL-2025-97362/): Malicious code in whole_mite_z3n (npm) (malicious package)
- [MAL-2025-97361](https://insights.sbomify.com/MAL-2025-97361/): Malicious code in whole_meadowlark_z3n (npm) (malicious package)
- [MAL-2025-97360](https://insights.sbomify.com/MAL-2025-97360/): Malicious code in whole_lizard_z3n (npm) (malicious package)
- [MAL-2025-9736](https://insights.sbomify.com/MAL-2025-9736/): Malicious code in @zalastax/nolb-_aih (npm) (malicious package)
- [MAL-2025-97359](https://insights.sbomify.com/MAL-2025-97359/): Malicious code in whole_bonobo_z3n (npm) (malicious package)
- [MAL-2025-97358](https://insights.sbomify.com/MAL-2025-97358/): Malicious code in whole_boa_z3n (npm) (malicious package)
- [MAL-2025-97357](https://insights.sbomify.com/MAL-2025-97357/): Malicious code in whispering_zebra_z3n (npm) (malicious package)
- [MAL-2025-97356](https://insights.sbomify.com/MAL-2025-97356/): Malicious code in whispering_tortoise_z3n (npm) (malicious package)
- [MAL-2025-97355](https://insights.sbomify.com/MAL-2025-97355/): Malicious code in whispering_roundworm_requirement (npm) (malicious package)
- [MAL-2025-97354](https://insights.sbomify.com/MAL-2025-97354/): Malicious code in whispering_pelican_z3n (npm) (malicious package)
- [MAL-2025-97353](https://insights.sbomify.com/MAL-2025-97353/): Malicious code in whispering_crawdad_z3n (npm) (malicious package)
- [MAL-2025-97352](https://insights.sbomify.com/MAL-2025-97352/): Malicious code in wet_heron_z3n (npm) (malicious package)
- [MAL-2025-97351](https://insights.sbomify.com/MAL-2025-97351/): Malicious code in wet_goat_z3n (npm) (malicious package)
- [MAL-2025-97350](https://insights.sbomify.com/MAL-2025-97350/): Malicious code in wet-amethyst-crow (npm) (malicious package)
- [MAL-2025-9735](https://insights.sbomify.com/MAL-2025-9735/): Malicious code in @zalastax/nolb-_aig (npm) (malicious package)
- [MAL-2025-97349](https://insights.sbomify.com/MAL-2025-97349/): Malicious code in western_rodent_z3n (npm) (malicious package)
- [MAL-2025-97348](https://insights.sbomify.com/MAL-2025-97348/): Malicious code in western_mackerel_z3n (npm) (malicious package)
- [MAL-2025-97347](https://insights.sbomify.com/MAL-2025-97347/): Malicious code in western_flyingfish_z3n (npm) (malicious package)
- [MAL-2025-97346](https://insights.sbomify.com/MAL-2025-97346/): Malicious code in well_nightingale_z3n (npm) (malicious package)
- [MAL-2025-97345](https://insights.sbomify.com/MAL-2025-97345/): Malicious code in well_giraffe_z3n (npm) (malicious package)
- [MAL-2025-97344](https://insights.sbomify.com/MAL-2025-97344/): Malicious code in welcome_wildfowl_z3n (npm) (malicious package)
- [MAL-2025-97343](https://insights.sbomify.com/MAL-2025-97343/): Malicious code in welcome_toad_z3n (npm) (malicious package)
- [MAL-2025-97342](https://insights.sbomify.com/MAL-2025-97342/): Malicious code in welcome_ladybug_z3n (npm) (malicious package)
- [MAL-2025-97341](https://insights.sbomify.com/MAL-2025-97341/): Malicious code in welcome_cougar_z3n (npm) (malicious package)
- [MAL-2025-97340](https://insights.sbomify.com/MAL-2025-97340/): Malicious code in weird_toucan_z3n (npm) (malicious package)
- [MAL-2025-9734](https://insights.sbomify.com/MAL-2025-9734/): Malicious code in @zalastax/nolb-_agy (npm) (malicious package)
- [MAL-2025-97339](https://insights.sbomify.com/MAL-2025-97339/): Malicious code in weird_tiglon_z3n (npm) (malicious package)
- [MAL-2025-97338](https://insights.sbomify.com/MAL-2025-97338/): Malicious code in weird_giraffe_z3n (npm) (malicious package)
- [MAL-2025-97337](https://insights.sbomify.com/MAL-2025-97337/): Malicious code in weekly_mink_z3n (npm) (malicious package)
- [MAL-2025-97336](https://insights.sbomify.com/MAL-2025-97336/): Malicious code in wee_cephalopod_z3n (npm) (malicious package)
- [MAL-2025-97335](https://insights.sbomify.com/MAL-2025-97335/): Malicious code in weary_turkey_z3n (npm) (malicious package)
- [MAL-2025-97334](https://insights.sbomify.com/MAL-2025-97334/): Malicious code in weary_sturgeon_z3n (npm) (malicious package)
- [MAL-2025-97333](https://insights.sbomify.com/MAL-2025-97333/): Malicious code in weary_hornet_z3n (npm) (malicious package)
- [MAL-2025-97332](https://insights.sbomify.com/MAL-2025-97332/): Malicious code in weary-scarlet-ape (npm) (malicious package)
- [MAL-2025-97331](https://insights.sbomify.com/MAL-2025-97331/): Malicious code in wealthy_unicorn_z3n (npm) (malicious package)
- [MAL-2025-97330](https://insights.sbomify.com/MAL-2025-97330/): Malicious code in wealthy_scallop_z3n (npm) (malicious package)
- [MAL-2025-9733](https://insights.sbomify.com/MAL-2025-9733/): Malicious code in @zalastax/nolb-_agx (npm) (malicious package)
- [MAL-2025-97329](https://insights.sbomify.com/MAL-2025-97329/): Malicious code in weak_raven_z3n (npm) (malicious package)
- [MAL-2025-97328](https://insights.sbomify.com/MAL-2025-97328/): Malicious code in weak_krill_z3n (npm) (malicious package)
- [MAL-2025-97327](https://insights.sbomify.com/MAL-2025-97327/): Malicious code in weak_dragon_z3n (npm) (malicious package)
- [MAL-2025-97326](https://insights.sbomify.com/MAL-2025-97326/): Malicious code in weak_clam_z3n (npm) (malicious package)
- [MAL-2025-97325](https://insights.sbomify.com/MAL-2025-97325/): Malicious code in weak_cheetah_z3n (npm) (malicious package)
- [MAL-2025-97324](https://insights.sbomify.com/MAL-2025-97324/): Malicious code in watery_stingray_z3n (npm) (malicious package)
- [MAL-2025-97323](https://insights.sbomify.com/MAL-2025-97323/): Malicious code in watery_seahorse_z3n (npm) (malicious package)
- [MAL-2025-97322](https://insights.sbomify.com/MAL-2025-97322/): Malicious code in watery_rooster_z3n (npm) (malicious package)
- [MAL-2025-97321](https://insights.sbomify.com/MAL-2025-97321/): Malicious code in wasteful_pike_z3n (npm) (malicious package)
- [MAL-2025-97320](https://insights.sbomify.com/MAL-2025-97320/): Malicious code in wasteful_jay_z3n (npm) (malicious package)
- [MAL-2025-9732](https://insights.sbomify.com/MAL-2025-9732/): Malicious code in @zalastax/nolb-_agw (npm) (malicious package)
- [MAL-2025-97319](https://insights.sbomify.com/MAL-2025-97319/): Malicious code in wasteful_hummingbird_z3n (npm) (malicious package)
- [MAL-2025-97318](https://insights.sbomify.com/MAL-2025-97318/): Malicious code in wasteful_hoverfly_z3n (npm) (malicious package)
- [MAL-2025-97317](https://insights.sbomify.com/MAL-2025-97317/): Malicious code in wasteful_grasshopper_requirement (npm) (malicious package)
- [MAL-2025-97316](https://insights.sbomify.com/MAL-2025-97316/): Malicious code in warm_wildebeest_z3n (npm) (malicious package)
- [MAL-2025-97315](https://insights.sbomify.com/MAL-2025-97315/): Malicious code in warm_porcupine_z3n (npm) (malicious package)
- [MAL-2025-97314](https://insights.sbomify.com/MAL-2025-97314/): Malicious code in warm_peafowl_z3n (npm) (malicious package)
- [MAL-2025-97313](https://insights.sbomify.com/MAL-2025-97313/): Malicious code in warm_monkey_z3n (npm) (malicious package)
- [MAL-2025-97312](https://insights.sbomify.com/MAL-2025-97312/): Malicious code in warm_chipmunk_z3n (npm) (malicious package)
- [MAL-2025-97311](https://insights.sbomify.com/MAL-2025-97311/): Malicious code in wandering_tahr_z3n (npm) (malicious package)
- [MAL-2025-97310](https://insights.sbomify.com/MAL-2025-97310/): Malicious code in vulnerable_shrimp_z3n (npm) (malicious package)
- [MAL-2025-9731](https://insights.sbomify.com/MAL-2025-9731/): Malicious code in @zalastax/nolb-_agu (npm) (malicious package)
- [MAL-2025-97309](https://insights.sbomify.com/MAL-2025-97309/): Malicious code in vulnerable_sheep_z3n (npm) (malicious package)
- [MAL-2025-97308](https://insights.sbomify.com/MAL-2025-97308/): Malicious code in vulnerable_earwig_z3n (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/34/