# Vulnerabilities published in 2025


- [MAL-2025-68270](https://insights.sbomify.com/MAL-2025-68270/): Malicious code in fat-red-koi (npm) (malicious package)
- [MAL-2025-6827](https://insights.sbomify.com/MAL-2025-6827/): Malicious code in mda-localise (npm) (malicious package)
- [MAL-2025-68269](https://insights.sbomify.com/MAL-2025-68269/): Malicious code in fat-purple-elk (npm) (malicious package)
- [MAL-2025-68268](https://insights.sbomify.com/MAL-2025-68268/): Malicious code in fat-jade-donkey (npm) (malicious package)
- [MAL-2025-68267](https://insights.sbomify.com/MAL-2025-68267/): Malicious code in fat-amber-parakeet (npm) (malicious package)
- [MAL-2025-68266](https://insights.sbomify.com/MAL-2025-68266/): Malicious code in fast-silver-bandicoot (npm) (malicious package)
- [MAL-2025-68265](https://insights.sbomify.com/MAL-2025-68265/): Malicious code in fast-sapphire-guineafowl (npm) (malicious package)
- [MAL-2025-68264](https://insights.sbomify.com/MAL-2025-68264/): Malicious code in fast-pink-lynx (npm) (malicious package)
- [MAL-2025-68263](https://insights.sbomify.com/MAL-2025-68263/): Malicious code in fast-orange-whippet (npm) (malicious package)
- [MAL-2025-68262](https://insights.sbomify.com/MAL-2025-68262/): Malicious code in fast-orange-jellyfish (npm) (malicious package)
- [MAL-2025-68261](https://insights.sbomify.com/MAL-2025-68261/): Malicious code in fast-moccasin-bug (npm) (malicious package)
- [MAL-2025-68260](https://insights.sbomify.com/MAL-2025-68260/): Malicious code in fast-gold-koi (npm) (malicious package)
- [MAL-2025-6826](https://insights.sbomify.com/MAL-2025-6826/): Malicious code in microsoft-bonsai-api (npm) (malicious package)
- [MAL-2025-68259](https://insights.sbomify.com/MAL-2025-68259/): Malicious code in fast-gold-bovid (npm) (malicious package)
- [MAL-2025-68258](https://insights.sbomify.com/MAL-2025-68258/): Malicious code in fast-emerald-moth (npm) (malicious package)
- [MAL-2025-68257](https://insights.sbomify.com/MAL-2025-68257/): Malicious code in fast-blue-kiwi (npm) (malicious package)
- [MAL-2025-68256](https://insights.sbomify.com/MAL-2025-68256/): Malicious code in fast-azure-parrotfish (npm) (malicious package)
- [MAL-2025-68255](https://insights.sbomify.com/MAL-2025-68255/): Malicious code in fashionable-teal-dormouse (npm) (malicious package)
- [MAL-2025-68254](https://insights.sbomify.com/MAL-2025-68254/): Malicious code in fashionable-crimson-scorpion (npm) (malicious package)
- [MAL-2025-68253](https://insights.sbomify.com/MAL-2025-68253/): Malicious code in fashionable-aquamarine-lion (npm) (malicious package)
- [MAL-2025-68252](https://insights.sbomify.com/MAL-2025-68252/): Malicious code in fashionable-amber-cardinal (npm) (malicious package)
- [MAL-2025-68251](https://insights.sbomify.com/MAL-2025-68251/): Malicious code in fascinating-tan-dog (npm) (malicious package)
- [MAL-2025-68250](https://insights.sbomify.com/MAL-2025-68250/): Malicious code in fascinating-blush-gecko (npm) (malicious package)
- [MAL-2025-6825](https://insights.sbomify.com/MAL-2025-6825/): Malicious code in intel-quantum-sdk (npm) (malicious package)
- [MAL-2025-68249](https://insights.sbomify.com/MAL-2025-68249/): Malicious code in far-jade-porcupine (npm) (malicious package)
- [MAL-2025-68248](https://insights.sbomify.com/MAL-2025-68248/): Malicious code in far-cyan-mite (npm) (malicious package)
- [MAL-2025-68247](https://insights.sbomify.com/MAL-2025-68247/): Malicious code in far-aquamarine-parakeet (npm) (malicious package)
- [MAL-2025-68246](https://insights.sbomify.com/MAL-2025-68246/): Malicious code in fantastic-violet-hoverfly (npm) (malicious package)
- [MAL-2025-68245](https://insights.sbomify.com/MAL-2025-68245/): Malicious code in fantastic-coffee-lynx (npm) (malicious package)
- [MAL-2025-68244](https://insights.sbomify.com/MAL-2025-68244/): Malicious code in fancy-tomato-pony (npm) (malicious package)
- [MAL-2025-68243](https://insights.sbomify.com/MAL-2025-68243/): Malicious code in fancy-blush-egret (npm) (malicious package)
- [MAL-2025-68242](https://insights.sbomify.com/MAL-2025-68242/): Malicious code in fancy-blue-sailfish (npm) (malicious package)
- [MAL-2025-68241](https://insights.sbomify.com/MAL-2025-68241/): Malicious code in fancy-beige-gamefowl (npm) (malicious package)
- [MAL-2025-68240](https://insights.sbomify.com/MAL-2025-68240/): Malicious code in fancy-apricot-whitefish (npm) (malicious package)
- [MAL-2025-6824](https://insights.sbomify.com/MAL-2025-6824/): Malicious code in facebook-for-woocommerce (npm) (malicious package)
- [MAL-2025-68239](https://insights.sbomify.com/MAL-2025-68239/): Malicious code in famous-red-stoat (npm) (malicious package)
- [MAL-2025-68238](https://insights.sbomify.com/MAL-2025-68238/): Malicious code in famous-jade-felidae (npm) (malicious package)
- [MAL-2025-68237](https://insights.sbomify.com/MAL-2025-68237/): Malicious code in famous-cyan-crayfish (npm) (malicious package)
- [MAL-2025-68236](https://insights.sbomify.com/MAL-2025-68236/): Malicious code in famous-coral-fly (npm) (malicious package)
- [MAL-2025-68235](https://insights.sbomify.com/MAL-2025-68235/): Malicious code in famous-aquamarine-unicorn (npm) (malicious package)
- [MAL-2025-68234](https://insights.sbomify.com/MAL-2025-68234/): Malicious code in famous-amethyst-coyote (npm) (malicious package)
- [MAL-2025-68233](https://insights.sbomify.com/MAL-2025-68233/): Malicious code in familiar-teal-panda (npm) (malicious package)
- [MAL-2025-68232](https://insights.sbomify.com/MAL-2025-68232/): Malicious code in familiar-plum-crayfish (npm) (malicious package)
- [MAL-2025-68231](https://insights.sbomify.com/MAL-2025-68231/): Malicious code in familiar-orange-camel (npm) (malicious package)
- [MAL-2025-68230](https://insights.sbomify.com/MAL-2025-68230/): Malicious code in familiar-olive-pelican (npm) (malicious package)
- [MAL-2025-6823](https://insights.sbomify.com/MAL-2025-6823/): Malicious code in yandex-money-bank-utils (npm) (malicious package)
- [MAL-2025-68229](https://insights.sbomify.com/MAL-2025-68229/): Malicious code in familiar-magenta-wildfowl (npm) (malicious package)
- [MAL-2025-68228](https://insights.sbomify.com/MAL-2025-68228/): Malicious code in familiar-indigo-cockroach (npm) (malicious package)
- [MAL-2025-68227](https://insights.sbomify.com/MAL-2025-68227/): Malicious code in familiar-gold-limpet (npm) (malicious package)
- [MAL-2025-68226](https://insights.sbomify.com/MAL-2025-68226/): Malicious code in familiar-copper-lark (npm) (malicious package)
- [MAL-2025-68225](https://insights.sbomify.com/MAL-2025-68225/): Malicious code in familiar-chocolate-meadowlark (npm) (malicious package)
- [MAL-2025-68224](https://insights.sbomify.com/MAL-2025-68224/): Malicious code in faithful-violet-pony (npm) (malicious package)
- [MAL-2025-68223](https://insights.sbomify.com/MAL-2025-68223/): Malicious code in faithful-plum-loon (npm) (malicious package)
- [MAL-2025-68222](https://insights.sbomify.com/MAL-2025-68222/): Malicious code in faithful-jade-galliform (npm) (malicious package)
- [MAL-2025-68221](https://insights.sbomify.com/MAL-2025-68221/): Malicious code in faithful-fuchsia-dragon (npm) (malicious package)
- [MAL-2025-68220](https://insights.sbomify.com/MAL-2025-68220/): Malicious code in faithful-cyan-guppy (npm) (malicious package)
- [MAL-2025-6822](https://insights.sbomify.com/MAL-2025-6822/): Malicious code in @sber-business-id/srp-client (npm) (malicious package)
- [MAL-2025-68219](https://insights.sbomify.com/MAL-2025-68219/): Malicious code in faithful-brown-rhinoceros (npm) (malicious package)
- [MAL-2025-68218](https://insights.sbomify.com/MAL-2025-68218/): Malicious code in fair-sapphire-squirrel (npm) (malicious package)
- [MAL-2025-68217](https://insights.sbomify.com/MAL-2025-68217/): Malicious code in fair-salmon-rattlesnake (npm) (malicious package)
- [MAL-2025-68216](https://insights.sbomify.com/MAL-2025-68216/): Malicious code in fair-lavender-earwig (npm) (malicious package)
- [MAL-2025-68215](https://insights.sbomify.com/MAL-2025-68215/): Malicious code in fair-jade-baboon (npm) (malicious package)
- [MAL-2025-68214](https://insights.sbomify.com/MAL-2025-68214/): Malicious code in fair-aqua-dove (npm) (malicious package)
- [MAL-2025-68213](https://insights.sbomify.com/MAL-2025-68213/): Malicious code in faint-maroon-coyote (npm) (malicious package)
- [MAL-2025-68212](https://insights.sbomify.com/MAL-2025-68212/): Malicious code in faint-brown-parrot (npm) (malicious package)
- [MAL-2025-68211](https://insights.sbomify.com/MAL-2025-68211/): Malicious code in faint-amber-orca (npm) (malicious package)
- [MAL-2025-68210](https://insights.sbomify.com/MAL-2025-68210/): Malicious code in fab1anz (npm) (malicious package)
- [MAL-2025-6821](https://insights.sbomify.com/MAL-2025-6821/): Malicious code in @tradair-repo/sources-react (npm) (malicious package)
- [MAL-2025-68209](https://insights.sbomify.com/MAL-2025-68209/): Malicious code in exuberant-peach-crocodile (npm) (malicious package)
- [MAL-2025-68208](https://insights.sbomify.com/MAL-2025-68208/): Malicious code in exuberant-olive-armadillo (npm) (malicious package)
- [MAL-2025-68207](https://insights.sbomify.com/MAL-2025-68207/): Malicious code in exuberant-lavender-gopher (npm) (malicious package)
- [MAL-2025-68206](https://insights.sbomify.com/MAL-2025-68206/): Malicious code in exuberant-fuchsia-dingo (npm) (malicious package)
- [MAL-2025-68205](https://insights.sbomify.com/MAL-2025-68205/): Malicious code in exuberant-copper-aphid (npm) (malicious package)
- [MAL-2025-68204](https://insights.sbomify.com/MAL-2025-68204/): Malicious code in exuberant-beige-grouse (npm) (malicious package)
- [MAL-2025-68203](https://insights.sbomify.com/MAL-2025-68203/): Malicious code in extreme-tomato-sheep (npm) (malicious package)
- [MAL-2025-68202](https://insights.sbomify.com/MAL-2025-68202/): Malicious code in extreme-sapphire-zebra (npm) (malicious package)
- [MAL-2025-68201](https://insights.sbomify.com/MAL-2025-68201/): Malicious code in extreme-olive-octopus (npm) (malicious package)
- [MAL-2025-68200](https://insights.sbomify.com/MAL-2025-68200/): Malicious code in extreme-magenta-canidae (npm) (malicious package)
- [MAL-2025-6820](https://insights.sbomify.com/MAL-2025-6820/): Malicious code in securitycontext-model-paypal (npm) (malicious package)
- [MAL-2025-682](https://insights.sbomify.com/MAL-2025-682/): Malicious code in resources.data.gov (npm) (malicious package)
- [MAL-2025-68199](https://insights.sbomify.com/MAL-2025-68199/): Malicious code in extreme-gray-mastodon (npm) (malicious package)
- [MAL-2025-68198](https://insights.sbomify.com/MAL-2025-68198/): Malicious code in extreme-blush-puma (npm) (malicious package)
- [MAL-2025-68197](https://insights.sbomify.com/MAL-2025-68197/): Malicious code in extraordinary-olive-puma (npm) (malicious package)
- [MAL-2025-68196](https://insights.sbomify.com/MAL-2025-68196/): Malicious code in extraordinary-indigo-rooster (npm) (malicious package)
- [MAL-2025-68195](https://insights.sbomify.com/MAL-2025-68195/): Malicious code in extra-magenta-manatee (npm) (malicious package)
- [MAL-2025-68194](https://insights.sbomify.com/MAL-2025-68194/): Malicious code in external-beige-dormouse (npm) (malicious package)
- [MAL-2025-68193](https://insights.sbomify.com/MAL-2025-68193/): Malicious code in extensive-yellow-weasel (npm) (malicious package)
- [MAL-2025-68192](https://insights.sbomify.com/MAL-2025-68192/): Malicious code in extensive-violet-fox (npm) (malicious package)
- [MAL-2025-68191](https://insights.sbomify.com/MAL-2025-68191/): Malicious code in extensive-sapphire-jaguar (npm) (malicious package)
- [MAL-2025-68190](https://insights.sbomify.com/MAL-2025-68190/): Malicious code in extended-tomato-ermine (npm) (malicious package)
- [MAL-2025-6819](https://insights.sbomify.com/MAL-2025-6819/): Malicious code in angular-sources (npm) (malicious package)
- [MAL-2025-68189](https://insights.sbomify.com/MAL-2025-68189/): Malicious code in extended-red-slug (npm) (malicious package)
- [MAL-2025-68188](https://insights.sbomify.com/MAL-2025-68188/): Malicious code in extended-maroon-mastodon (npm) (malicious package)
- [MAL-2025-68187](https://insights.sbomify.com/MAL-2025-68187/): Malicious code in extended-maroon-earthworm (npm) (malicious package)
- [MAL-2025-68186](https://insights.sbomify.com/MAL-2025-68186/): Malicious code in extended-coral-rooster (npm) (malicious package)
- [MAL-2025-68185](https://insights.sbomify.com/MAL-2025-68185/): Malicious code in explicit-silver-bedbug (npm) (malicious package)
- [MAL-2025-68184](https://insights.sbomify.com/MAL-2025-68184/): Malicious code in explicit-salmon-prawn (npm) (malicious package)
- [MAL-2025-68183](https://insights.sbomify.com/MAL-2025-68183/): Malicious code in explicit-rose-canid (npm) (malicious package)
- [MAL-2025-68182](https://insights.sbomify.com/MAL-2025-68182/): Malicious code in explicit-lavender-rattlesnake (npm) (malicious package)
- [MAL-2025-68181](https://insights.sbomify.com/MAL-2025-68181/): Malicious code in experimental-tomato-silkworm (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/356/
