# Vulnerabilities published in 2025 - [MAL-2025-69530](https://insights.sbomify.com/MAL-2025-69530/): Malicious code in narrow-coral-owl (npm) (malicious package) - [MAL-2025-6953](https://insights.sbomify.com/MAL-2025-6953/): Malicious code in recoil-shared (npm) (malicious package) - [MAL-2025-69529](https://insights.sbomify.com/MAL-2025-69529/): Malicious code in narrow-coral-jackal (npm) (malicious package) - [MAL-2025-69528](https://insights.sbomify.com/MAL-2025-69528/): Malicious code in narrow-copper-lamprey (npm) (malicious package) - [MAL-2025-69527](https://insights.sbomify.com/MAL-2025-69527/): Malicious code in narrow-blue-condor (npm) (malicious package) - [MAL-2025-69526](https://insights.sbomify.com/MAL-2025-69526/): Malicious code in naked-salmon-egret (npm) (malicious package) - [MAL-2025-69525](https://insights.sbomify.com/MAL-2025-69525/): Malicious code in naked-ivory-haddock (npm) (malicious package) - [MAL-2025-69524](https://insights.sbomify.com/MAL-2025-69524/): Malicious code in naked-gold-deer (npm) (malicious package) - [MAL-2025-69523](https://insights.sbomify.com/MAL-2025-69523/): Malicious code in naked-gold-canid (npm) (malicious package) - [MAL-2025-69522](https://insights.sbomify.com/MAL-2025-69522/): Malicious code in naked-azure-bobolink (npm) (malicious package) - [MAL-2025-69521](https://insights.sbomify.com/MAL-2025-69521/): Malicious code in nakajio (npm) (malicious package) - [MAL-2025-69520](https://insights.sbomify.com/MAL-2025-69520/): Malicious code in mysterious-orange-opossum (npm) (malicious package) - [MAL-2025-6952](https://insights.sbomify.com/MAL-2025-6952/): Malicious code in react-stickynod (npm) (malicious package) - [MAL-2025-69519](https://insights.sbomify.com/MAL-2025-69519/): Malicious code in mysterious-beige-dinosaur (npm) (malicious package) - [MAL-2025-69518](https://insights.sbomify.com/MAL-2025-69518/): Malicious code in mutual-tomato-platypus (npm) (malicious package) - [MAL-2025-69517](https://insights.sbomify.com/MAL-2025-69517/): Malicious code in mutual-salmon-constrictor (npm) (malicious package) - [MAL-2025-69516](https://insights.sbomify.com/MAL-2025-69516/): Malicious code in mutual-plum-stoat (npm) (malicious package) - [MAL-2025-69515](https://insights.sbomify.com/MAL-2025-69515/): Malicious code in mutual-cyan-mackerel (npm) (malicious package) - [MAL-2025-69514](https://insights.sbomify.com/MAL-2025-69514/): Malicious code in mutual-cyan-bug (npm) (malicious package) - [MAL-2025-69513](https://insights.sbomify.com/MAL-2025-69513/): Malicious code in mutual-blush-lion (npm) (malicious package) - [MAL-2025-69512](https://insights.sbomify.com/MAL-2025-69512/): Malicious code in mute-chocolate-bison (npm) (malicious package) - [MAL-2025-69511](https://insights.sbomify.com/MAL-2025-69511/): Malicious code in mute-amethyst-slug (npm) (malicious package) - [MAL-2025-69510](https://insights.sbomify.com/MAL-2025-69510/): Malicious code in musical-silver-dove (npm) (malicious package) - [MAL-2025-6951](https://insights.sbomify.com/MAL-2025-6951/): Malicious code in pydantic-settings (npm) (malicious package) - [MAL-2025-69509](https://insights.sbomify.com/MAL-2025-69509/): Malicious code in musical-emerald-chameleon (npm) (malicious package) - [MAL-2025-69508](https://insights.sbomify.com/MAL-2025-69508/): Malicious code in musical-chocolate-dragonfly (npm) (malicious package) - [MAL-2025-69507](https://insights.sbomify.com/MAL-2025-69507/): Malicious code in musical-blue-wolf (npm) (malicious package) - [MAL-2025-69506](https://insights.sbomify.com/MAL-2025-69506/): Malicious code in musical-amethyst-mollusk (npm) (malicious package) - [MAL-2025-69505](https://insights.sbomify.com/MAL-2025-69505/): Malicious code in mushy-sapphire-bandicoot (npm) (malicious package) - [MAL-2025-69504](https://insights.sbomify.com/MAL-2025-69504/): Malicious code in mushy-chocolate-tortoise (npm) (malicious package) - [MAL-2025-69503](https://insights.sbomify.com/MAL-2025-69503/): Malicious code in mushy-chocolate-rooster (npm) (malicious package) - [MAL-2025-69502](https://insights.sbomify.com/MAL-2025-69502/): Malicious code in multiple-pink-cricket (npm) (malicious package) - [MAL-2025-69501](https://insights.sbomify.com/MAL-2025-69501/): Malicious code in multiple-moccasin-baboon (npm) (malicious package) - [MAL-2025-69500](https://insights.sbomify.com/MAL-2025-69500/): Malicious code in multiple-indigo-dingo (npm) (malicious package) - [MAL-2025-6950](https://insights.sbomify.com/MAL-2025-6950/): Malicious code in project-luck (npm) (malicious package) - [MAL-2025-695](https://insights.sbomify.com/MAL-2025-695/): Malicious code in types-safety-web (npm) (malicious package) - [MAL-2025-69499](https://insights.sbomify.com/MAL-2025-69499/): Malicious code in multiple-amber-bear (npm) (malicious package) - [MAL-2025-69498](https://insights.sbomify.com/MAL-2025-69498/): Malicious code in muhui0222 (npm) (malicious package) - [MAL-2025-69497](https://insights.sbomify.com/MAL-2025-69497/): Malicious code in muddy-tomato-lizard (npm) (malicious package) - [MAL-2025-69496](https://insights.sbomify.com/MAL-2025-69496/): Malicious code in muddy-teal-hamster (npm) (malicious package) - [MAL-2025-69495](https://insights.sbomify.com/MAL-2025-69495/): Malicious code in muddy-sapphire-wolverine (npm) (malicious package) - [MAL-2025-69494](https://insights.sbomify.com/MAL-2025-69494/): Malicious code in muddy-salmon-cuckoo (npm) (malicious package) - [MAL-2025-69493](https://insights.sbomify.com/MAL-2025-69493/): Malicious code in muddy-peach-trout (npm) (malicious package) - [MAL-2025-69492](https://insights.sbomify.com/MAL-2025-69492/): Malicious code in muddy-olive-hawk (npm) (malicious package) - [MAL-2025-69491](https://insights.sbomify.com/MAL-2025-69491/): Malicious code in muddy-magenta-ladybug (npm) (malicious package) - [MAL-2025-69490](https://insights.sbomify.com/MAL-2025-69490/): Malicious code in muddy-cyan-roundworm (npm) (malicious package) - [MAL-2025-6949](https://insights.sbomify.com/MAL-2025-6949/): Malicious code in project-bounty (npm) (malicious package) - [MAL-2025-69489](https://insights.sbomify.com/MAL-2025-69489/): Malicious code in muddy-amber-lark (npm) (malicious package) - [MAL-2025-69488](https://insights.sbomify.com/MAL-2025-69488/): Malicious code in motionless-yellow-guppy (npm) (malicious package) - [MAL-2025-69487](https://insights.sbomify.com/MAL-2025-69487/): Malicious code in motionless-purple-limpet (npm) (malicious package) - [MAL-2025-69486](https://insights.sbomify.com/MAL-2025-69486/): Malicious code in motionless-lavender-bison (npm) (malicious package) - [MAL-2025-69485](https://insights.sbomify.com/MAL-2025-69485/): Malicious code in motionless-coffee-centipede (npm) (malicious package) - [MAL-2025-69484](https://insights.sbomify.com/MAL-2025-69484/): Malicious code in moral-violet-crawdad (npm) (malicious package) - [MAL-2025-69483](https://insights.sbomify.com/MAL-2025-69483/): Malicious code in moral-magenta-meerkat (npm) (malicious package) - [MAL-2025-69482](https://insights.sbomify.com/MAL-2025-69482/): Malicious code in moral-brown-orangutan (npm) (malicious package) - [MAL-2025-69481](https://insights.sbomify.com/MAL-2025-69481/): Malicious code in moral-beige-moth (npm) (malicious package) - [MAL-2025-69480](https://insights.sbomify.com/MAL-2025-69480/): Malicious code in moonmooa (npm) (malicious package) - [MAL-2025-6948](https://insights.sbomify.com/MAL-2025-6948/): Malicious code in pngquant-bin-static (npm) (malicious package) - [MAL-2025-69479](https://insights.sbomify.com/MAL-2025-69479/): Malicious code in monthly-salmon-rhinoceros (npm) (malicious package) - [MAL-2025-69478](https://insights.sbomify.com/MAL-2025-69478/): Malicious code in monthly-moccasin-locust (npm) (malicious package) - [MAL-2025-69477](https://insights.sbomify.com/MAL-2025-69477/): Malicious code in monthly-emerald-scallop (npm) (malicious package) - [MAL-2025-69476](https://insights.sbomify.com/MAL-2025-69476/): Malicious code in monthly-aquamarine-starfish (npm) (malicious package) - [MAL-2025-69475](https://insights.sbomify.com/MAL-2025-69475/): Malicious code in monetary-jade-kangaroo (npm) (malicious package) - [MAL-2025-69474](https://insights.sbomify.com/MAL-2025-69474/): Malicious code in monetary-gold-jay (npm) (malicious package) - [MAL-2025-69473](https://insights.sbomify.com/MAL-2025-69473/): Malicious code in monetary-crimson-egret (npm) (malicious package) - [MAL-2025-69472](https://insights.sbomify.com/MAL-2025-69472/): Malicious code in monetary-blush-mastodon (npm) (malicious package) - [MAL-2025-69471](https://insights.sbomify.com/MAL-2025-69471/): Malicious code in monetary-amethyst-spoonbill (npm) (malicious package) - [MAL-2025-69470](https://insights.sbomify.com/MAL-2025-69470/): Malicious code in molecular-tomato-bee (npm) (malicious package) - [MAL-2025-6947](https://insights.sbomify.com/MAL-2025-6947/): Malicious code in personalizationtrkserv (npm) (malicious package) - [MAL-2025-69469](https://insights.sbomify.com/MAL-2025-69469/): Malicious code in molecular-jade-marlin (npm) (malicious package) - [MAL-2025-69468](https://insights.sbomify.com/MAL-2025-69468/): Malicious code in molecular-cyan-coyote (npm) (malicious package) - [MAL-2025-69467](https://insights.sbomify.com/MAL-2025-69467/): Malicious code in molecular-brown-puma (npm) (malicious package) - [MAL-2025-69466](https://insights.sbomify.com/MAL-2025-69466/): Malicious code in modest-salmon-swordfish (npm) (malicious package) - [MAL-2025-69465](https://insights.sbomify.com/MAL-2025-69465/): Malicious code in modest-peach-locust (npm) (malicious package) - [MAL-2025-69464](https://insights.sbomify.com/MAL-2025-69464/): Malicious code in modest-olive-ptarmigan (npm) (malicious package) - [MAL-2025-69463](https://insights.sbomify.com/MAL-2025-69463/): Malicious code in modest-jade-vulture (npm) (malicious package) - [MAL-2025-69462](https://insights.sbomify.com/MAL-2025-69462/): Malicious code in modest-azure-llama (npm) (malicious package) - [MAL-2025-69461](https://insights.sbomify.com/MAL-2025-69461/): Malicious code in modern-tan-chameleon (npm) (malicious package) - [MAL-2025-69460](https://insights.sbomify.com/MAL-2025-69460/): Malicious code in modern-peach-quelea (npm) (malicious package) - [MAL-2025-6946](https://insights.sbomify.com/MAL-2025-6946/): Malicious code in pentest-event-emitter (npm) (malicious package) - [MAL-2025-69459](https://insights.sbomify.com/MAL-2025-69459/): Malicious code in modern-jade-hamster (npm) (malicious package) - [MAL-2025-69458](https://insights.sbomify.com/MAL-2025-69458/): Malicious code in modern-cyan-harrier (npm) (malicious package) - [MAL-2025-69457](https://insights.sbomify.com/MAL-2025-69457/): Malicious code in modern-bronze-roadrunner (npm) (malicious package) - [MAL-2025-69456](https://insights.sbomify.com/MAL-2025-69456/): Malicious code in modern-amber-moth (npm) (malicious package) - [MAL-2025-69455](https://insights.sbomify.com/MAL-2025-69455/): Malicious code in moderate-azure-frog (npm) (malicious package) - [MAL-2025-69454](https://insights.sbomify.com/MAL-2025-69454/): Malicious code in moderate-aqua-marlin (npm) (malicious package) - [MAL-2025-69453](https://insights.sbomify.com/MAL-2025-69453/): Malicious code in moderate-apricot-lark (npm) (malicious package) - [MAL-2025-69452](https://insights.sbomify.com/MAL-2025-69452/): Malicious code in mobile-tomato-gopher (npm) (malicious package) - [MAL-2025-69451](https://insights.sbomify.com/MAL-2025-69451/): Malicious code in mobile-scarlet-krill (npm) (malicious package) - [MAL-2025-69450](https://insights.sbomify.com/MAL-2025-69450/): Malicious code in mobile-lavender-impala (npm) (malicious package) - [MAL-2025-6945](https://insights.sbomify.com/MAL-2025-6945/): Malicious code in moonskin (npm) (malicious package) - [MAL-2025-69449](https://insights.sbomify.com/MAL-2025-69449/): Malicious code in mobile-ivory-dove (npm) (malicious package) - [MAL-2025-69448](https://insights.sbomify.com/MAL-2025-69448/): Malicious code in mobile-azure-bovid (npm) (malicious package) - [MAL-2025-69447](https://insights.sbomify.com/MAL-2025-69447/): Malicious code in moaning-sapphire-silverfish (npm) (malicious package) - [MAL-2025-69446](https://insights.sbomify.com/MAL-2025-69446/): Malicious code in moaning-amethyst-junglefowl (npm) (malicious package) - [MAL-2025-69445](https://insights.sbomify.com/MAL-2025-69445/): Malicious code in miyool (npm) (malicious package) - [MAL-2025-69444](https://insights.sbomify.com/MAL-2025-69444/): Malicious code in mixed-salmon-dinosaur (npm) (malicious package) - [MAL-2025-69443](https://insights.sbomify.com/MAL-2025-69443/): Malicious code in mixed-maroon-flamingo (npm) (malicious package) - [MAL-2025-69442](https://insights.sbomify.com/MAL-2025-69442/): Malicious code in mixed-crimson-heron (npm) (malicious package) - [MAL-2025-69441](https://insights.sbomify.com/MAL-2025-69441/): Malicious code in mixed-brown-mink (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/342/