# Vulnerabilities published in 2025 - [MAL-2025-69440](https://insights.sbomify.com/MAL-2025-69440/): Malicious code in misty-sapphire-hoverfly (npm) (malicious package) - [MAL-2025-6944](https://insights.sbomify.com/MAL-2025-6944/): Malicious code in mm-scss-utils (npm) (malicious package) - [MAL-2025-69439](https://insights.sbomify.com/MAL-2025-69439/): Malicious code in misty-purple-parrot (npm) (malicious package) - [MAL-2025-69438](https://insights.sbomify.com/MAL-2025-69438/): Malicious code in misty-brown-shrew (npm) (malicious package) - [MAL-2025-69437](https://insights.sbomify.com/MAL-2025-69437/): Malicious code in misty-blush-planarian (npm) (malicious package) - [MAL-2025-69436](https://insights.sbomify.com/MAL-2025-69436/): Malicious code in missing-plum-swan (npm) (malicious package) - [MAL-2025-69435](https://insights.sbomify.com/MAL-2025-69435/): Malicious code in missing-orange-zebra (npm) (malicious package) - [MAL-2025-69434](https://insights.sbomify.com/MAL-2025-69434/): Malicious code in missing-orange-perch (npm) (malicious package) - [MAL-2025-69433](https://insights.sbomify.com/MAL-2025-69433/): Malicious code in missing-maroon-mandrill (npm) (malicious package) - [MAL-2025-69432](https://insights.sbomify.com/MAL-2025-69432/): Malicious code in missing-lavender-hoverfly (npm) (malicious package) - [MAL-2025-69431](https://insights.sbomify.com/MAL-2025-69431/): Malicious code in missing-gold-tiglon (npm) (malicious package) - [MAL-2025-69430](https://insights.sbomify.com/MAL-2025-69430/): Malicious code in missing-aquamarine-dragon (npm) (malicious package) - [MAL-2025-6943](https://insights.sbomify.com/MAL-2025-6943/): Malicious code in mint-backend (npm) (malicious package) - [MAL-2025-69429](https://insights.sbomify.com/MAL-2025-69429/): Malicious code in missing-apricot-snail (npm) (malicious package) - [MAL-2025-69428](https://insights.sbomify.com/MAL-2025-69428/): Malicious code in misleading-yellow-falcon (npm) (malicious package) - [MAL-2025-69427](https://insights.sbomify.com/MAL-2025-69427/): Malicious code in misleading-sapphire-sparrow (npm) (malicious package) - [MAL-2025-69426](https://insights.sbomify.com/MAL-2025-69426/): Malicious code in misleading-peach-elk (npm) (malicious package) - [MAL-2025-69425](https://insights.sbomify.com/MAL-2025-69425/): Malicious code in misleading-jade-mockingbird (npm) (malicious package) - [MAL-2025-69424](https://insights.sbomify.com/MAL-2025-69424/): Malicious code in misleading-green-cephalopod (npm) (malicious package) - [MAL-2025-69423](https://insights.sbomify.com/MAL-2025-69423/): Malicious code in misleading-brown-rhinoceros (npm) (malicious package) - [MAL-2025-69422](https://insights.sbomify.com/MAL-2025-69422/): Malicious code in misleading-blue-caribou (npm) (malicious package) - [MAL-2025-69421](https://insights.sbomify.com/MAL-2025-69421/): Malicious code in misleading-aqua-ape (npm) (malicious package) - [MAL-2025-69420](https://insights.sbomify.com/MAL-2025-69420/): Malicious code in miserable-white-lamprey (npm) (malicious package) - [MAL-2025-6942](https://insights.sbomify.com/MAL-2025-6942/): Malicious code in microsoft.azure.cognitiveservices.search.visualsearch (npm) (malicious package) - [MAL-2025-69419](https://insights.sbomify.com/MAL-2025-69419/): Malicious code in miserable-plum-squirrel (npm) (malicious package) - [MAL-2025-69418](https://insights.sbomify.com/MAL-2025-69418/): Malicious code in miserable-jade-quokka (npm) (malicious package) - [MAL-2025-69417](https://insights.sbomify.com/MAL-2025-69417/): Malicious code in miserable-jade-chimpanzee (npm) (malicious package) - [MAL-2025-69416](https://insights.sbomify.com/MAL-2025-69416/): Malicious code in miserable-ivory-tuna (npm) (malicious package) - [MAL-2025-69415](https://insights.sbomify.com/MAL-2025-69415/): Malicious code in miserable-emerald-armadillo (npm) (malicious package) - [MAL-2025-69414](https://insights.sbomify.com/MAL-2025-69414/): Malicious code in miserable-black-marmot (npm) (malicious package) - [MAL-2025-69413](https://insights.sbomify.com/MAL-2025-69413/): Malicious code in minor-red-shrew (npm) (malicious package) - [MAL-2025-69412](https://insights.sbomify.com/MAL-2025-69412/): Malicious code in minor-pink-cougar (npm) (malicious package) - [MAL-2025-69411](https://insights.sbomify.com/MAL-2025-69411/): Malicious code in minor-green-rat (npm) (malicious package) - [MAL-2025-69410](https://insights.sbomify.com/MAL-2025-69410/): Malicious code in minor-amaranth-hummingbird (npm) (malicious package) - [MAL-2025-6941](https://insights.sbomify.com/MAL-2025-6941/): Malicious code in microsoft-cloud-integrations (npm) (malicious package) - [MAL-2025-69409](https://insights.sbomify.com/MAL-2025-69409/): Malicious code in ministerial-pink-spider (npm) (malicious package) - [MAL-2025-69408](https://insights.sbomify.com/MAL-2025-69408/): Malicious code in ministerial-orange-catshark (npm) (malicious package) - [MAL-2025-69407](https://insights.sbomify.com/MAL-2025-69407/): Malicious code in ministerial-blush-flyingfish (npm) (malicious package) - [MAL-2025-69406](https://insights.sbomify.com/MAL-2025-69406/): Malicious code in minimum-sapphire-moth (npm) (malicious package) - [MAL-2025-69405](https://insights.sbomify.com/MAL-2025-69405/): Malicious code in minimum-salmon-loon (npm) (malicious package) - [MAL-2025-69404](https://insights.sbomify.com/MAL-2025-69404/): Malicious code in minimum-ivory-flyingfish (npm) (malicious package) - [MAL-2025-69403](https://insights.sbomify.com/MAL-2025-69403/): Malicious code in minimum-cyan-marmoset (npm) (malicious package) - [MAL-2025-69402](https://insights.sbomify.com/MAL-2025-69402/): Malicious code in minimum-brown-asp (npm) (malicious package) - [MAL-2025-69401](https://insights.sbomify.com/MAL-2025-69401/): Malicious code in minimal-scarlet-ox (npm) (malicious package) - [MAL-2025-69400](https://insights.sbomify.com/MAL-2025-69400/): Malicious code in minimal-jade-kiwi (npm) (malicious package) - [MAL-2025-6940](https://insights.sbomify.com/MAL-2025-6940/): Malicious code in merlin-transformer (npm) (malicious package) - [MAL-2025-694](https://insights.sbomify.com/MAL-2025-694/): Malicious code in trigger-gitlab-pipeline (npm) (malicious package) - [MAL-2025-69399](https://insights.sbomify.com/MAL-2025-69399/): Malicious code in miniature-teal-aphid (npm) (malicious package) - [MAL-2025-69398](https://insights.sbomify.com/MAL-2025-69398/): Malicious code in miniature-lime-egret (npm) (malicious package) - [MAL-2025-69397](https://insights.sbomify.com/MAL-2025-69397/): Malicious code in military-scarlet-amphibian (npm) (malicious package) - [MAL-2025-69396](https://insights.sbomify.com/MAL-2025-69396/): Malicious code in military-rose-puffin (npm) (malicious package) - [MAL-2025-69395](https://insights.sbomify.com/MAL-2025-69395/): Malicious code in military-pink-puffin (npm) (malicious package) - [MAL-2025-69394](https://insights.sbomify.com/MAL-2025-69394/): Malicious code in mild-peach-canid (npm) (malicious package) - [MAL-2025-69393](https://insights.sbomify.com/MAL-2025-69393/): Malicious code in mild-lime-shark (npm) (malicious package) - [MAL-2025-69392](https://insights.sbomify.com/MAL-2025-69392/): Malicious code in mild-blue-crab (npm) (malicious package) - [MAL-2025-69391](https://insights.sbomify.com/MAL-2025-69391/): Malicious code in mighty-turquoise-walrus (npm) (malicious package) - [MAL-2025-69390](https://insights.sbomify.com/MAL-2025-69390/): Malicious code in mighty-turquoise-aardvark (npm) (malicious package) - [MAL-2025-6939](https://insights.sbomify.com/MAL-2025-6939/): Malicious code in makerjs-dev (npm) (malicious package) - [MAL-2025-69389](https://insights.sbomify.com/MAL-2025-69389/): Malicious code in mighty-tomato-louse (npm) (malicious package) - [MAL-2025-69388](https://insights.sbomify.com/MAL-2025-69388/): Malicious code in mighty-purple-cattle (npm) (malicious package) - [MAL-2025-69387](https://insights.sbomify.com/MAL-2025-69387/): Malicious code in mighty-green-wombat (npm) (malicious package) - [MAL-2025-69386](https://insights.sbomify.com/MAL-2025-69386/): Malicious code in mighty-brown-stoat (npm) (malicious package) - [MAL-2025-69385](https://insights.sbomify.com/MAL-2025-69385/): Malicious code in mighty-brown-quokka (npm) (malicious package) - [MAL-2025-69384](https://insights.sbomify.com/MAL-2025-69384/): Malicious code in middle-salmon-eel (npm) (malicious package) - [MAL-2025-69383](https://insights.sbomify.com/MAL-2025-69383/): Malicious code in middle-moccasin-tuna (npm) (malicious package) - [MAL-2025-69382](https://insights.sbomify.com/MAL-2025-69382/): Malicious code in middle-indigo-salmon (npm) (malicious package) - [MAL-2025-69381](https://insights.sbomify.com/MAL-2025-69381/): Malicious code in middle-coffee-jay (npm) (malicious package) - [MAL-2025-69380](https://insights.sbomify.com/MAL-2025-69380/): Malicious code in middle-beige-vole (npm) (malicious package) - [MAL-2025-6938](https://insights.sbomify.com/MAL-2025-6938/): Malicious code in kingsly (npm) (malicious package) - [MAL-2025-69379](https://insights.sbomify.com/MAL-2025-69379/): Malicious code in mid-yellow-wildebeest (npm) (malicious package) - [MAL-2025-69378](https://insights.sbomify.com/MAL-2025-69378/): Malicious code in mid-yellow-gayal (npm) (malicious package) - [MAL-2025-69377](https://insights.sbomify.com/MAL-2025-69377/): Malicious code in mid-scarlet-quail (npm) (malicious package) - [MAL-2025-69376](https://insights.sbomify.com/MAL-2025-69376/): Malicious code in mid-scarlet-pike (npm) (malicious package) - [MAL-2025-69375](https://insights.sbomify.com/MAL-2025-69375/): Malicious code in mid-fuchsia-turkey (npm) (malicious package) - [MAL-2025-69374](https://insights.sbomify.com/MAL-2025-69374/): Malicious code in mid-blush-python (npm) (malicious package) - [MAL-2025-69373](https://insights.sbomify.com/MAL-2025-69373/): Malicious code in mid-apricot-lark (npm) (malicious package) - [MAL-2025-69372](https://insights.sbomify.com/MAL-2025-69372/): Malicious code in metropolitan-scarlet-spider (npm) (malicious package) - [MAL-2025-69371](https://insights.sbomify.com/MAL-2025-69371/): Malicious code in metropolitan-harlequin-emu (npm) (malicious package) - [MAL-2025-69370](https://insights.sbomify.com/MAL-2025-69370/): Malicious code in metropolitan-cyan-marmot (npm) (malicious package) - [MAL-2025-6937](https://insights.sbomify.com/MAL-2025-6937/): Malicious code in jenkins-trigger-action (npm) (malicious package) - [MAL-2025-69369](https://insights.sbomify.com/MAL-2025-69369/): Malicious code in mere-moccasin-swordfish (npm) (malicious package) - [MAL-2025-69368](https://insights.sbomify.com/MAL-2025-69368/): Malicious code in mere-bronze-primate (npm) (malicious package) - [MAL-2025-69367](https://insights.sbomify.com/MAL-2025-69367/): Malicious code in mere-beige-python (npm) (malicious package) - [MAL-2025-69366](https://insights.sbomify.com/MAL-2025-69366/): Malicious code in mere-apricot-ermine (npm) (malicious package) - [MAL-2025-69365](https://insights.sbomify.com/MAL-2025-69365/): Malicious code in mere-amaranth-tahr (npm) (malicious package) - [MAL-2025-69364](https://insights.sbomify.com/MAL-2025-69364/): Malicious code in mental-turquoise-meerkat (npm) (malicious package) - [MAL-2025-69363](https://insights.sbomify.com/MAL-2025-69363/): Malicious code in mental-blush-wallaby (npm) (malicious package) - [MAL-2025-69362](https://insights.sbomify.com/MAL-2025-69362/): Malicious code in mental-amber-fowl (npm) (malicious package) - [MAL-2025-69361](https://insights.sbomify.com/MAL-2025-69361/): Malicious code in melted-emerald-bass (npm) (malicious package) - [MAL-2025-69360](https://insights.sbomify.com/MAL-2025-69360/): Malicious code in melted-blush-woodpecker (npm) (malicious package) - [MAL-2025-6936](https://insights.sbomify.com/MAL-2025-6936/): Malicious code in jenkins-trigger-actio (npm) (malicious package) - [MAL-2025-69359](https://insights.sbomify.com/MAL-2025-69359/): Malicious code in melodic-silver-roadrunner (npm) (malicious package) - [MAL-2025-69358](https://insights.sbomify.com/MAL-2025-69358/): Malicious code in melodic-plum-ape (npm) (malicious package) - [MAL-2025-69357](https://insights.sbomify.com/MAL-2025-69357/): Malicious code in melodic-gray-canid (npm) (malicious package) - [MAL-2025-69356](https://insights.sbomify.com/MAL-2025-69356/): Malicious code in melodic-gold-vole (npm) (malicious package) - [MAL-2025-69355](https://insights.sbomify.com/MAL-2025-69355/): Malicious code in melodic-crimson-koi (npm) (malicious package) - [MAL-2025-69354](https://insights.sbomify.com/MAL-2025-69354/): Malicious code in medieval-turquoise-hamster (npm) (malicious package) - [MAL-2025-69353](https://insights.sbomify.com/MAL-2025-69353/): Malicious code in medieval-moccasin-manatee (npm) (malicious package) - [MAL-2025-69352](https://insights.sbomify.com/MAL-2025-69352/): Malicious code in medieval-amethyst-bug (npm) (malicious package) - [MAL-2025-69351](https://insights.sbomify.com/MAL-2025-69351/): Malicious code in medical-olive-tuna (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/343/