# Vulnerabilities published in 2025


- [MAL-2025-68180](https://insights.sbomify.com/MAL-2025-68180/): Malicious code in experimental-rose-reindeer (npm) (malicious package)
- [MAL-2025-6818](https://insights.sbomify.com/MAL-2025-6818/): Malicious code in require-turbo (npm) (malicious package)
- [MAL-2025-68179](https://insights.sbomify.com/MAL-2025-68179/): Malicious code in experimental-peach-parrotfish (npm) (malicious package)
- [MAL-2025-68178](https://insights.sbomify.com/MAL-2025-68178/): Malicious code in experimental-lavender-shark (npm) (malicious package)
- [MAL-2025-68177](https://insights.sbomify.com/MAL-2025-68177/): Malicious code in experimental-coffee-mandrill (npm) (malicious package)
- [MAL-2025-68176](https://insights.sbomify.com/MAL-2025-68176/): Malicious code in experimental-black-crocodile (npm) (malicious package)
- [MAL-2025-68175](https://insights.sbomify.com/MAL-2025-68175/): Malicious code in experienced-lavender-shark (npm) (malicious package)
- [MAL-2025-68174](https://insights.sbomify.com/MAL-2025-68174/): Malicious code in experienced-brown-swan (npm) (malicious package)
- [MAL-2025-68173](https://insights.sbomify.com/MAL-2025-68173/): Malicious code in experienced-bronze-bobcat (npm) (malicious package)
- [MAL-2025-68172](https://insights.sbomify.com/MAL-2025-68172/): Malicious code in expensive-yellow-quail (npm) (malicious package)
- [MAL-2025-68171](https://insights.sbomify.com/MAL-2025-68171/): Malicious code in expensive-white-hedgehog (npm) (malicious package)
- [MAL-2025-68170](https://insights.sbomify.com/MAL-2025-68170/): Malicious code in expensive-emerald-ferret (npm) (malicious package)
- [MAL-2025-6817](https://insights.sbomify.com/MAL-2025-6817/): Malicious code in nestjs-datadog (npm) (malicious package)
- [MAL-2025-68169](https://insights.sbomify.com/MAL-2025-68169/): Malicious code in expensive-coffee-dragon (npm) (malicious package)
- [MAL-2025-68168](https://insights.sbomify.com/MAL-2025-68168/): Malicious code in expected-silver-urial (npm) (malicious package)
- [MAL-2025-68167](https://insights.sbomify.com/MAL-2025-68167/): Malicious code in expected-fuchsia-salmon (npm) (malicious package)
- [MAL-2025-68166](https://insights.sbomify.com/MAL-2025-68166/): Malicious code in expected-coral-reptile (npm) (malicious package)
- [MAL-2025-68165](https://insights.sbomify.com/MAL-2025-68165/): Malicious code in exotic-jade-bison (npm) (malicious package)
- [MAL-2025-68164](https://insights.sbomify.com/MAL-2025-68164/): Malicious code in exotic-azure-turkey (npm) (malicious package)
- [MAL-2025-68163](https://insights.sbomify.com/MAL-2025-68163/): Malicious code in existing-purple-quail (npm) (malicious package)
- [MAL-2025-68162](https://insights.sbomify.com/MAL-2025-68162/): Malicious code in exclusive-tomato-pinniped (npm) (malicious package)
- [MAL-2025-68161](https://insights.sbomify.com/MAL-2025-68161/): Malicious code in exclusive-gold-ant (npm) (malicious package)
- [MAL-2025-68160](https://insights.sbomify.com/MAL-2025-68160/): Malicious code in exclusive-emerald-herring (npm) (malicious package)
- [MAL-2025-6816](https://insights.sbomify.com/MAL-2025-6816/): Malicious code in teste-depenconfu (npm) (malicious package)
- [MAL-2025-68159](https://insights.sbomify.com/MAL-2025-68159/): Malicious code in exclusive-black-hookworm (npm) (malicious package)
- [MAL-2025-68158](https://insights.sbomify.com/MAL-2025-68158/): Malicious code in exclusive-amaranth-bug (npm) (malicious package)
- [MAL-2025-68157](https://insights.sbomify.com/MAL-2025-68157/): Malicious code in exciting-yellow-flyingfish (npm) (malicious package)
- [MAL-2025-68156](https://insights.sbomify.com/MAL-2025-68156/): Malicious code in exciting-violet-ladybug (npm) (malicious package)
- [MAL-2025-68155](https://insights.sbomify.com/MAL-2025-68155/): Malicious code in exciting-sapphire-lizard (npm) (malicious package)
- [MAL-2025-68154](https://insights.sbomify.com/MAL-2025-68154/): Malicious code in exciting-pink-rook (npm) (malicious package)
- [MAL-2025-68153](https://insights.sbomify.com/MAL-2025-68153/): Malicious code in exciting-maroon-marlin (npm) (malicious package)
- [MAL-2025-68152](https://insights.sbomify.com/MAL-2025-68152/): Malicious code in exciting-brown-whippet (npm) (malicious package)
- [MAL-2025-68151](https://insights.sbomify.com/MAL-2025-68151/): Malicious code in exciting-amber-peafowl (npm) (malicious package)
- [MAL-2025-68150](https://insights.sbomify.com/MAL-2025-68150/): Malicious code in excited-silver-rat (npm) (malicious package)
- [MAL-2025-6815](https://insights.sbomify.com/MAL-2025-6815/): Malicious code in poloman (npm) (malicious package)
- [MAL-2025-68149](https://insights.sbomify.com/MAL-2025-68149/): Malicious code in excited-red-asp (npm) (malicious package)
- [MAL-2025-68148](https://insights.sbomify.com/MAL-2025-68148/): Malicious code in excited-gold-swift (npm) (malicious package)
- [MAL-2025-68147](https://insights.sbomify.com/MAL-2025-68147/): Malicious code in excited-blue-ermine (npm) (malicious package)
- [MAL-2025-68146](https://insights.sbomify.com/MAL-2025-68146/): Malicious code in excessive-violet-leopard (npm) (malicious package)
- [MAL-2025-68145](https://insights.sbomify.com/MAL-2025-68145/): Malicious code in excessive-red-fowl (npm) (malicious package)
- [MAL-2025-68144](https://insights.sbomify.com/MAL-2025-68144/): Malicious code in excess-turquoise-loon (npm) (malicious package)
- [MAL-2025-68143](https://insights.sbomify.com/MAL-2025-68143/): Malicious code in excess-scarlet-guineafowl (npm) (malicious package)
- [MAL-2025-68142](https://insights.sbomify.com/MAL-2025-68142/): Malicious code in exceptional-purple-crab (npm) (malicious package)
- [MAL-2025-68141](https://insights.sbomify.com/MAL-2025-68141/): Malicious code in exceptional-olive-shark (npm) (malicious package)
- [MAL-2025-68140](https://insights.sbomify.com/MAL-2025-68140/): Malicious code in exceptional-emerald-impala (npm) (malicious package)
- [MAL-2025-6814](https://insights.sbomify.com/MAL-2025-6814/): Malicious code in horizon-ui-ng (npm) (malicious package)
- [MAL-2025-68139](https://insights.sbomify.com/MAL-2025-68139/): Malicious code in exceptional-blue-cephalopod (npm) (malicious package)
- [MAL-2025-68138](https://insights.sbomify.com/MAL-2025-68138/): Malicious code in exceptional-aqua-haddock (npm) (malicious package)
- [MAL-2025-68137](https://insights.sbomify.com/MAL-2025-68137/): Malicious code in excellent-tomato-gorilla (npm) (malicious package)
- [MAL-2025-68136](https://insights.sbomify.com/MAL-2025-68136/): Malicious code in excellent-rose-weasel (npm) (malicious package)
- [MAL-2025-68135](https://insights.sbomify.com/MAL-2025-68135/): Malicious code in excellent-green-hare (npm) (malicious package)
- [MAL-2025-68134](https://insights.sbomify.com/MAL-2025-68134/): Malicious code in excellent-gold-mosquito (npm) (malicious package)
- [MAL-2025-68133](https://insights.sbomify.com/MAL-2025-68133/): Malicious code in excellent-beige-gull (npm) (malicious package)
- [MAL-2025-68132](https://insights.sbomify.com/MAL-2025-68132/): Malicious code in excalibarx (npm) (malicious package)
- [MAL-2025-68131](https://insights.sbomify.com/MAL-2025-68131/): Malicious code in exact-jade-meerkat (npm) (malicious package)
- [MAL-2025-68130](https://insights.sbomify.com/MAL-2025-68130/): Malicious code in exact-cyan-stork (npm) (malicious package)
- [MAL-2025-6813](https://insights.sbomify.com/MAL-2025-6813/): Malicious code in hcs-image-viewer (npm) (malicious package)
- [MAL-2025-68129](https://insights.sbomify.com/MAL-2025-68129/): Malicious code in exact-bronze-moth (npm) (malicious package)
- [MAL-2025-68128](https://insights.sbomify.com/MAL-2025-68128/): Malicious code in exact-aqua-xerinae (npm) (malicious package)
- [MAL-2025-68127](https://insights.sbomify.com/MAL-2025-68127/): Malicious code in evolutionary-yellow-starfish (npm) (malicious package)
- [MAL-2025-68126](https://insights.sbomify.com/MAL-2025-68126/): Malicious code in evolutionary-beige-seahorse (npm) (malicious package)
- [MAL-2025-68125](https://insights.sbomify.com/MAL-2025-68125/): Malicious code in evil-teal-gamefowl (npm) (malicious package)
- [MAL-2025-68124](https://insights.sbomify.com/MAL-2025-68124/): Malicious code in evil-tan-weasel (npm) (malicious package)
- [MAL-2025-68123](https://insights.sbomify.com/MAL-2025-68123/): Malicious code in evil-orange-lynx (npm) (malicious package)
- [MAL-2025-68122](https://insights.sbomify.com/MAL-2025-68122/): Malicious code in evil-harlequin-coyote (npm) (malicious package)
- [MAL-2025-68121](https://insights.sbomify.com/MAL-2025-68121/): Malicious code in evil-coffee-whitefish (npm) (malicious package)
- [MAL-2025-68120](https://insights.sbomify.com/MAL-2025-68120/): Malicious code in evil-coffee-dragonfly (npm) (malicious package)
- [MAL-2025-6812](https://insights.sbomify.com/MAL-2025-6812/): Malicious code in eslint-plugin-react_editor (npm) (malicious package)
- [MAL-2025-68119](https://insights.sbomify.com/MAL-2025-68119/): Malicious code in evident-red-warbler (npm) (malicious package)
- [MAL-2025-68118](https://insights.sbomify.com/MAL-2025-68118/): Malicious code in evident-bronze-leopard (npm) (malicious package)
- [MAL-2025-68117](https://insights.sbomify.com/MAL-2025-68117/): Malicious code in evident-aqua-hedgehog (npm) (malicious package)
- [MAL-2025-68116](https://insights.sbomify.com/MAL-2025-68116/): Malicious code in everyday-violet-gamefowl (npm) (malicious package)
- [MAL-2025-68115](https://insights.sbomify.com/MAL-2025-68115/): Malicious code in everyday-silver-bison (npm) (malicious package)
- [MAL-2025-68114](https://insights.sbomify.com/MAL-2025-68114/): Malicious code in everyday-scarlet-landfowl (npm) (malicious package)
- [MAL-2025-68113](https://insights.sbomify.com/MAL-2025-68113/): Malicious code in everyday-plum-cardinal (npm) (malicious package)
- [MAL-2025-68112](https://insights.sbomify.com/MAL-2025-68112/): Malicious code in everyday-jade-aphid (npm) (malicious package)
- [MAL-2025-68111](https://insights.sbomify.com/MAL-2025-68111/): Malicious code in everyday-gray-swordtail (npm) (malicious package)
- [MAL-2025-68110](https://insights.sbomify.com/MAL-2025-68110/): Malicious code in everyday-coral-donkey (npm) (malicious package)
- [MAL-2025-6811](https://insights.sbomify.com/MAL-2025-6811/): Malicious code in checkout-app (npm) (malicious package)
- [MAL-2025-68109](https://insights.sbomify.com/MAL-2025-68109/): Malicious code in everyday-brown-vicuna (npm) (malicious package)
- [MAL-2025-68108](https://insights.sbomify.com/MAL-2025-68108/): Malicious code in everyday-amethyst-fox (npm) (malicious package)
- [MAL-2025-68107](https://insights.sbomify.com/MAL-2025-68107/): Malicious code in eventual-turquoise-whale (npm) (malicious package)
- [MAL-2025-68106](https://insights.sbomify.com/MAL-2025-68106/): Malicious code in eventual-orange-flamingo (npm) (malicious package)
- [MAL-2025-68105](https://insights.sbomify.com/MAL-2025-68105/): Malicious code in eventual-olive-rodent (npm) (malicious package)
- [MAL-2025-68104](https://insights.sbomify.com/MAL-2025-68104/): Malicious code in eventual-ivory-lungfish (npm) (malicious package)
- [MAL-2025-68103](https://insights.sbomify.com/MAL-2025-68103/): Malicious code in eventual-ivory-chickadee (npm) (malicious package)
- [MAL-2025-68102](https://insights.sbomify.com/MAL-2025-68102/): Malicious code in eventual-gray-toucan (npm) (malicious package)
- [MAL-2025-68101](https://insights.sbomify.com/MAL-2025-68101/): Malicious code in eventual-chocolate-crayfish (npm) (malicious package)
- [MAL-2025-68100](https://insights.sbomify.com/MAL-2025-68100/): Malicious code in eventual-apricot-damselfly (npm) (malicious package)
- [MAL-2025-6810](https://insights.sbomify.com/MAL-2025-6810/): Malicious code in badger-doc (npm) (malicious package)
- [MAL-2025-681](https://insights.sbomify.com/MAL-2025-681/): Malicious code in realtime-from-scratch (npm) (malicious package)
- [MAL-2025-68099](https://insights.sbomify.com/MAL-2025-68099/): Malicious code in ethnic-purple-flamingo (npm) (malicious package)
- [MAL-2025-68098](https://insights.sbomify.com/MAL-2025-68098/): Malicious code in ethnic-orange-halibut (npm) (malicious package)
- [MAL-2025-68097](https://insights.sbomify.com/MAL-2025-68097/): Malicious code in ethnic-lime-basilisk (npm) (malicious package)
- [MAL-2025-68096](https://insights.sbomify.com/MAL-2025-68096/): Malicious code in ethnic-blue-swordfish (npm) (malicious package)
- [MAL-2025-68095](https://insights.sbomify.com/MAL-2025-68095/): Malicious code in ethnic-black-chipmunk (npm) (malicious package)
- [MAL-2025-68094](https://insights.sbomify.com/MAL-2025-68094/): Malicious code in ethnic-azure-raccoon (npm) (malicious package)
- [MAL-2025-68093](https://insights.sbomify.com/MAL-2025-68093/): Malicious code in ethnic-amethyst-earthworm (npm) (malicious package)
- [MAL-2025-68092](https://insights.sbomify.com/MAL-2025-68092/): Malicious code in ethical-tomato-bison (npm) (malicious package)
- [MAL-2025-68091](https://insights.sbomify.com/MAL-2025-68091/): Malicious code in ethical-cyan-hornet (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/357/