# Vulnerabilities published in 2025


- [MAL-2025-69080](https://insights.sbomify.com/MAL-2025-69080/): Malicious code in leading-rose-heron (npm) (malicious package)
- [MAL-2025-6908](https://insights.sbomify.com/MAL-2025-6908/): Malicious code in @sber-business-id-kekw/srp (npm) (malicious package)
- [MAL-2025-69079](https://insights.sbomify.com/MAL-2025-69079/): Malicious code in leading-pink-eagle (npm) (malicious package)
- [MAL-2025-69078](https://insights.sbomify.com/MAL-2025-69078/): Malicious code in leading-ivory-mule (npm) (malicious package)
- [MAL-2025-69077](https://insights.sbomify.com/MAL-2025-69077/): Malicious code in leading-green-mink (npm) (malicious package)
- [MAL-2025-69076](https://insights.sbomify.com/MAL-2025-69076/): Malicious code in leading-chocolate-roadrunner (npm) (malicious package)
- [MAL-2025-69075](https://insights.sbomify.com/MAL-2025-69075/): Malicious code in lazy-sapphire-cattle (npm) (malicious package)
- [MAL-2025-69074](https://insights.sbomify.com/MAL-2025-69074/): Malicious code in lazy-magenta-dog (npm) (malicious package)
- [MAL-2025-69073](https://insights.sbomify.com/MAL-2025-69073/): Malicious code in lazy-fuchsia-clam (npm) (malicious package)
- [MAL-2025-69072](https://insights.sbomify.com/MAL-2025-69072/): Malicious code in lawlief (npm) (malicious package)
- [MAL-2025-69071](https://insights.sbomify.com/MAL-2025-69071/): Malicious code in lattego (npm) (malicious package)
- [MAL-2025-69070](https://insights.sbomify.com/MAL-2025-69070/): Malicious code in latin-lime-halibut (npm) (malicious package)
- [MAL-2025-6907](https://insights.sbomify.com/MAL-2025-6907/): Malicious code in @qbr-runway/tokens (npm) (malicious package)
- [MAL-2025-69069](https://insights.sbomify.com/MAL-2025-69069/): Malicious code in latin-aquamarine-partridge (npm) (malicious package)
- [MAL-2025-69068](https://insights.sbomify.com/MAL-2025-69068/): Malicious code in late-rose-bee (npm) (malicious package)
- [MAL-2025-69067](https://insights.sbomify.com/MAL-2025-69067/): Malicious code in late-maroon-anteater (npm) (malicious package)
- [MAL-2025-69066](https://insights.sbomify.com/MAL-2025-69066/): Malicious code in late-lavender-canid (npm) (malicious package)
- [MAL-2025-69065](https://insights.sbomify.com/MAL-2025-69065/): Malicious code in late-bronze-bobolink (npm) (malicious package)
- [MAL-2025-69064](https://insights.sbomify.com/MAL-2025-69064/): Malicious code in large-scarlet-tarantula (npm) (malicious package)
- [MAL-2025-69063](https://insights.sbomify.com/MAL-2025-69063/): Malicious code in large-salmon-rodent (npm) (malicious package)
- [MAL-2025-69062](https://insights.sbomify.com/MAL-2025-69062/): Malicious code in large-moccasin-egret (npm) (malicious package)
- [MAL-2025-69061](https://insights.sbomify.com/MAL-2025-69061/): Malicious code in large-fuchsia-wasp (npm) (malicious package)
- [MAL-2025-69060](https://insights.sbomify.com/MAL-2025-69060/): Malicious code in large-azure-badger (npm) (malicious package)
- [MAL-2025-6906](https://insights.sbomify.com/MAL-2025-6906/): Malicious code in @mobile-sdk/videoads-ad-video-player-html5 (npm) (malicious package)
- [MAL-2025-69059](https://insights.sbomify.com/MAL-2025-69059/): Malicious code in labour-scarlet-zebra (npm) (malicious package)
- [MAL-2025-69058](https://insights.sbomify.com/MAL-2025-69058/): Malicious code in krystianzs (npm) (malicious package)
- [MAL-2025-69057](https://insights.sbomify.com/MAL-2025-69057/): Malicious code in known-white-squirrel (npm) (malicious package)
- [MAL-2025-69056](https://insights.sbomify.com/MAL-2025-69056/): Malicious code in known-sapphire-bat (npm) (malicious package)
- [MAL-2025-69055](https://insights.sbomify.com/MAL-2025-69055/): Malicious code in known-lime-fish (npm) (malicious package)
- [MAL-2025-69054](https://insights.sbomify.com/MAL-2025-69054/): Malicious code in kloszar (npm) (malicious package)
- [MAL-2025-69053](https://insights.sbomify.com/MAL-2025-69053/): Malicious code in kind-violet-snake (npm) (malicious package)
- [MAL-2025-69052](https://insights.sbomify.com/MAL-2025-69052/): Malicious code in kind-rose-silverfish (npm) (malicious package)
- [MAL-2025-69051](https://insights.sbomify.com/MAL-2025-69051/): Malicious code in kind-plum-mongoose (npm) (malicious package)
- [MAL-2025-69050](https://insights.sbomify.com/MAL-2025-69050/): Malicious code in kind-orange-cattle (npm) (malicious package)
- [MAL-2025-6905](https://insights.sbomify.com/MAL-2025-6905/): Malicious code in @identity-authn/authn-js-sdk (npm) (malicious package)
- [MAL-2025-69049](https://insights.sbomify.com/MAL-2025-69049/): Malicious code in kind-ivory-raven (npm) (malicious package)
- [MAL-2025-69048](https://insights.sbomify.com/MAL-2025-69048/): Malicious code in kind-beige-chimpanzee (npm) (malicious package)
- [MAL-2025-69047](https://insights.sbomify.com/MAL-2025-69047/): Malicious code in kimyoonhyeok (npm) (malicious package)
- [MAL-2025-69046](https://insights.sbomify.com/MAL-2025-69046/): Malicious code in key-yellow-anteater (npm) (malicious package)
- [MAL-2025-69045](https://insights.sbomify.com/MAL-2025-69045/): Malicious code in key-gray-mosquito (npm) (malicious package)
- [MAL-2025-69044](https://insights.sbomify.com/MAL-2025-69044/): Malicious code in key-emerald-dolphin (npm) (malicious package)
- [MAL-2025-69043](https://insights.sbomify.com/MAL-2025-69043/): Malicious code in key-bronze-puma (npm) (malicious package)
- [MAL-2025-69042](https://insights.sbomify.com/MAL-2025-69042/): Malicious code in key-black-sole (npm) (malicious package)
- [MAL-2025-69041](https://insights.sbomify.com/MAL-2025-69041/): Malicious code in key-azure-unicorn (npm) (malicious package)
- [MAL-2025-69040](https://insights.sbomify.com/MAL-2025-69040/): Malicious code in keen-violet-cuckoo (npm) (malicious package)
- [MAL-2025-6904](https://insights.sbomify.com/MAL-2025-6904/): Malicious code in @hoyowave/jsapi (npm) (malicious package)
- [MAL-2025-69039](https://insights.sbomify.com/MAL-2025-69039/): Malicious code in keen-jade-koala (npm) (malicious package)
- [MAL-2025-69038](https://insights.sbomify.com/MAL-2025-69038/): Malicious code in keen-green-python (npm) (malicious package)
- [MAL-2025-69037](https://insights.sbomify.com/MAL-2025-69037/): Malicious code in keen-copper-guineafowl (npm) (malicious package)
- [MAL-2025-69036](https://insights.sbomify.com/MAL-2025-69036/): Malicious code in keen-amethyst-cattle (npm) (malicious package)
- [MAL-2025-69035](https://insights.sbomify.com/MAL-2025-69035/): Malicious code in keen-amber-possum (npm) (malicious package)
- [MAL-2025-69034](https://insights.sbomify.com/MAL-2025-69034/): Malicious code in keanasti (npm) (malicious package)
- [MAL-2025-69033](https://insights.sbomify.com/MAL-2025-69033/): Malicious code in kazimirzen (npm) (malicious package)
- [MAL-2025-69032](https://insights.sbomify.com/MAL-2025-69032/): Malicious code in kanxt (npm) (malicious package)
- [MAL-2025-69031](https://insights.sbomify.com/MAL-2025-69031/): Malicious code in kanborasd (npm) (malicious package)
- [MAL-2025-69030](https://insights.sbomify.com/MAL-2025-69030/): Malicious code in just-olive-vicuna (npm) (malicious package)
- [MAL-2025-6903](https://insights.sbomify.com/MAL-2025-6903/): Malicious code in @hornetsecurity/angular-search-box (npm) (malicious package)
- [MAL-2025-69029](https://insights.sbomify.com/MAL-2025-69029/): Malicious code in just-gray-sloth (npm) (malicious package)
- [MAL-2025-69028](https://insights.sbomify.com/MAL-2025-69028/): Malicious code in just-cyan-cockroach (npm) (malicious package)
- [MAL-2025-69027](https://insights.sbomify.com/MAL-2025-69027/): Malicious code in junior-magenta-elephant (npm) (malicious package)
- [MAL-2025-69026](https://insights.sbomify.com/MAL-2025-69026/): Malicious code in junior-aquamarine-hookworm (npm) (malicious package)
- [MAL-2025-69025](https://insights.sbomify.com/MAL-2025-69025/): Malicious code in junior-amaranth-silkworm (npm) (malicious package)
- [MAL-2025-69024](https://insights.sbomify.com/MAL-2025-69024/): Malicious code in juicy-lavender-leopon (npm) (malicious package)
- [MAL-2025-69023](https://insights.sbomify.com/MAL-2025-69023/): Malicious code in juicy-gold-rodent (npm) (malicious package)
- [MAL-2025-69022](https://insights.sbomify.com/MAL-2025-69022/): Malicious code in juicy-chocolate-loon (npm) (malicious package)
- [MAL-2025-69021](https://insights.sbomify.com/MAL-2025-69021/): Malicious code in juicy-amber-ptarmigan (npm) (malicious package)
- [MAL-2025-69020](https://insights.sbomify.com/MAL-2025-69020/): Malicious code in joyous-tan-silkworm (npm) (malicious package)
- [MAL-2025-6902](https://insights.sbomify.com/MAL-2025-6902/): Malicious code in @goes-funky/y42-vscode (npm) (malicious package)
- [MAL-2025-69019](https://insights.sbomify.com/MAL-2025-69019/): Malicious code in joyous-orange-gecko (npm) (malicious package)
- [MAL-2025-69018](https://insights.sbomify.com/MAL-2025-69018/): Malicious code in joyous-beige-gerbil (npm) (malicious package)
- [MAL-2025-69017](https://insights.sbomify.com/MAL-2025-69017/): Malicious code in jolly-tan-swan (npm) (malicious package)
- [MAL-2025-69016](https://insights.sbomify.com/MAL-2025-69016/): Malicious code in jolly-beige-marten (npm) (malicious package)
- [MAL-2025-69015](https://insights.sbomify.com/MAL-2025-69015/): Malicious code in jolly-azure-cheetah (npm) (malicious package)
- [MAL-2025-69014](https://insights.sbomify.com/MAL-2025-69014/): Malicious code in jolly-amaranth-kingfisher (npm) (malicious package)
- [MAL-2025-69013](https://insights.sbomify.com/MAL-2025-69013/): Malicious code in joint-magenta-primate (npm) (malicious package)
- [MAL-2025-69012](https://insights.sbomify.com/MAL-2025-69012/): Malicious code in joint-blue-mouse (npm) (malicious package)
- [MAL-2025-69011](https://insights.sbomify.com/MAL-2025-69011/): Malicious code in joint-amber-bovid (npm) (malicious package)
- [MAL-2025-69010](https://insights.sbomify.com/MAL-2025-69010/): Malicious code in jittery-violet-bat (npm) (malicious package)
- [MAL-2025-6901](https://insights.sbomify.com/MAL-2025-6901/): Malicious code in @angular_devkit/build_angular (npm) (malicious package)
- [MAL-2025-69009](https://insights.sbomify.com/MAL-2025-69009/): Malicious code in jittery-tan-ptarmigan (npm) (malicious package)
- [MAL-2025-69008](https://insights.sbomify.com/MAL-2025-69008/): Malicious code in jittery-magenta-rat (npm) (malicious package)
- [MAL-2025-69007](https://insights.sbomify.com/MAL-2025-69007/): Malicious code in jittery-beige-canidae (npm) (malicious package)
- [MAL-2025-69006](https://insights.sbomify.com/MAL-2025-69006/): Malicious code in jeje6131 (npm) (malicious package)
- [MAL-2025-69005](https://insights.sbomify.com/MAL-2025-69005/): Malicious code in jealous-pink-unicorn (npm) (malicious package)
- [MAL-2025-69004](https://insights.sbomify.com/MAL-2025-69004/): Malicious code in jealous-olive-cod (npm) (malicious package)
- [MAL-2025-69003](https://insights.sbomify.com/MAL-2025-69003/): Malicious code in jealous-jade-gibbon (npm) (malicious package)
- [MAL-2025-69002](https://insights.sbomify.com/MAL-2025-69002/): Malicious code in jealous-green-whale (npm) (malicious package)
- [MAL-2025-69001](https://insights.sbomify.com/MAL-2025-69001/): Malicious code in jealous-coffee-trout (npm) (malicious package)
- [MAL-2025-69000](https://insights.sbomify.com/MAL-2025-69000/): Malicious code in jealous-apricot-skunk (npm) (malicious package)
- [MAL-2025-6900](https://insights.sbomify.com/MAL-2025-6900/): Malicious code in @angular_devkit/architect (npm) (malicious package)
- [MAL-2025-690](https://insights.sbomify.com/MAL-2025-690/): Malicious code in theme-check-vscode (npm) (malicious package)
- [MAL-2025-69](https://insights.sbomify.com/MAL-2025-69/): Malicious code in marked-cs (npm) (malicious package)
- [MAL-2025-68999](https://insights.sbomify.com/MAL-2025-68999/): Malicious code in jayo555 (npm) (malicious package)
- [MAL-2025-68998](https://insights.sbomify.com/MAL-2025-68998/): Malicious code in itchy-white-fly (npm) (malicious package)
- [MAL-2025-68997](https://insights.sbomify.com/MAL-2025-68997/): Malicious code in itchy-tan-zebra (npm) (malicious package)
- [MAL-2025-68996](https://insights.sbomify.com/MAL-2025-68996/): Malicious code in itchy-silver-bandicoot (npm) (malicious package)
- [MAL-2025-68995](https://insights.sbomify.com/MAL-2025-68995/): Malicious code in itchy-magenta-opossum (npm) (malicious package)
- [MAL-2025-68994](https://insights.sbomify.com/MAL-2025-68994/): Malicious code in itchy-magenta-cicada (npm) (malicious package)
- [MAL-2025-68993](https://insights.sbomify.com/MAL-2025-68993/): Malicious code in itchy-ivory-chickadee (npm) (malicious package)
- [MAL-2025-68992](https://insights.sbomify.com/MAL-2025-68992/): Malicious code in itchy-indigo-newt (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/347/