# Vulnerabilities published in 2025 - [MAL-2025-68090](https://insights.sbomify.com/MAL-2025-68090/): Malicious code in ethical-bronze-minnow (npm) (malicious package) - [MAL-2025-6809](https://insights.sbomify.com/MAL-2025-6809/): Malicious code in posa-loginpage-plugin (npm) (malicious package) - [MAL-2025-68089](https://insights.sbomify.com/MAL-2025-68089/): Malicious code in estimated-turquoise-firefly (npm) (malicious package) - [MAL-2025-68088](https://insights.sbomify.com/MAL-2025-68088/): Malicious code in estimated-silver-baboon (npm) (malicious package) - [MAL-2025-68087](https://insights.sbomify.com/MAL-2025-68087/): Malicious code in estimated-silver-antelope (npm) (malicious package) - [MAL-2025-68086](https://insights.sbomify.com/MAL-2025-68086/): Malicious code in estimated-copper-pony (npm) (malicious package) - [MAL-2025-68085](https://insights.sbomify.com/MAL-2025-68085/): Malicious code in estimated-blue-bear (npm) (malicious package) - [MAL-2025-68084](https://insights.sbomify.com/MAL-2025-68084/): Malicious code in estimated-black-hawk (npm) (malicious package) - [MAL-2025-68083](https://insights.sbomify.com/MAL-2025-68083/): Malicious code in established-silver-newt (npm) (malicious package) - [MAL-2025-68082](https://insights.sbomify.com/MAL-2025-68082/): Malicious code in established-ivory-aardwolf (npm) (malicious package) - [MAL-2025-68081](https://insights.sbomify.com/MAL-2025-68081/): Malicious code in established-coral-shark (npm) (malicious package) - [MAL-2025-68080](https://insights.sbomify.com/MAL-2025-68080/): Malicious code in established-blue-ocelot (npm) (malicious package) - [MAL-2025-6808](https://insights.sbomify.com/MAL-2025-6808/): Malicious code in latam-xp-analytics-plugin-gtm (npm) (malicious package) - [MAL-2025-68079](https://insights.sbomify.com/MAL-2025-68079/): Malicious code in essential-purple-marsupial (npm) (malicious package) - [MAL-2025-68078](https://insights.sbomify.com/MAL-2025-68078/): Malicious code in essential-coral-ocelot (npm) (malicious package) - [MAL-2025-68077](https://insights.sbomify.com/MAL-2025-68077/): Malicious code in essential-copper-leopon (npm) (malicious package) - [MAL-2025-68076](https://insights.sbomify.com/MAL-2025-68076/): Malicious code in essential-azure-crocodile (npm) (malicious package) - [MAL-2025-68075](https://insights.sbomify.com/MAL-2025-68075/): Malicious code in eros4758 (npm) (malicious package) - [MAL-2025-68074](https://insights.sbomify.com/MAL-2025-68074/): Malicious code in equivalent-tan-ptarmigan (npm) (malicious package) - [MAL-2025-68073](https://insights.sbomify.com/MAL-2025-68073/): Malicious code in equivalent-rose-caterpillar (npm) (malicious package) - [MAL-2025-68072](https://insights.sbomify.com/MAL-2025-68072/): Malicious code in equivalent-harlequin-shrew (npm) (malicious package) - [MAL-2025-68071](https://insights.sbomify.com/MAL-2025-68071/): Malicious code in equal-turquoise-cicada (npm) (malicious package) - [MAL-2025-68070](https://insights.sbomify.com/MAL-2025-68070/): Malicious code in equal-olive-zebra (npm) (malicious package) - [MAL-2025-6807](https://insights.sbomify.com/MAL-2025-6807/): Malicious code in beliya-xhn1355h (npm) (malicious package) - [MAL-2025-68069](https://insights.sbomify.com/MAL-2025-68069/): Malicious code in equal-jade-damselfly (npm) (malicious package) - [MAL-2025-68068](https://insights.sbomify.com/MAL-2025-68068/): Malicious code in equal-coral-flyingfish (npm) (malicious package) - [MAL-2025-68067](https://insights.sbomify.com/MAL-2025-68067/): Malicious code in equal-chocolate-jaguar (npm) (malicious package) - [MAL-2025-68066](https://insights.sbomify.com/MAL-2025-68066/): Malicious code in equal-black-lark (npm) (malicious package) - [MAL-2025-68065](https://insights.sbomify.com/MAL-2025-68065/): Malicious code in equal-azure-tyrannosaurus (npm) (malicious package) - [MAL-2025-68064](https://insights.sbomify.com/MAL-2025-68064/): Malicious code in equal-azure-mongoose (npm) (malicious package) - [MAL-2025-68063](https://insights.sbomify.com/MAL-2025-68063/): Malicious code in enzyxy (npm) (malicious package) - [MAL-2025-68062](https://insights.sbomify.com/MAL-2025-68062/): Malicious code in environmental-jade-stoat (npm) (malicious package) - [MAL-2025-68061](https://insights.sbomify.com/MAL-2025-68061/): Malicious code in environmental-coffee-mite (npm) (malicious package) - [MAL-2025-68060](https://insights.sbomify.com/MAL-2025-68060/): Malicious code in envious-tomato-salmon (npm) (malicious package) - [MAL-2025-6806](https://insights.sbomify.com/MAL-2025-6806/): Malicious code in react-native-kraken-oauth (npm) (malicious package) - [MAL-2025-68059](https://insights.sbomify.com/MAL-2025-68059/): Malicious code in envious-tomato-python (npm) (malicious package) - [MAL-2025-68058](https://insights.sbomify.com/MAL-2025-68058/): Malicious code in envious-plum-cuckoo (npm) (malicious package) - [MAL-2025-68057](https://insights.sbomify.com/MAL-2025-68057/): Malicious code in envious-lime-ape (npm) (malicious package) - [MAL-2025-68056](https://insights.sbomify.com/MAL-2025-68056/): Malicious code in envious-crimson-vicuna (npm) (malicious package) - [MAL-2025-68055](https://insights.sbomify.com/MAL-2025-68055/): Malicious code in envious-aquamarine-dolphin (npm) (malicious package) - [MAL-2025-68054](https://insights.sbomify.com/MAL-2025-68054/): Malicious code in entitled-coffee-ox (npm) (malicious package) - [MAL-2025-68053](https://insights.sbomify.com/MAL-2025-68053/): Malicious code in entitled-apricot-donkey (npm) (malicious package) - [MAL-2025-68052](https://insights.sbomify.com/MAL-2025-68052/): Malicious code in entire-yellow-gazelle (npm) (malicious package) - [MAL-2025-68051](https://insights.sbomify.com/MAL-2025-68051/): Malicious code in entire-turquoise-rat (npm) (malicious package) - [MAL-2025-68050](https://insights.sbomify.com/MAL-2025-68050/): Malicious code in entire-tan-ermine (npm) (malicious package) - [MAL-2025-6805](https://insights.sbomify.com/MAL-2025-6805/): Malicious code in nodejs-with-singlestore-demo (npm) (malicious package) - [MAL-2025-68049](https://insights.sbomify.com/MAL-2025-68049/): Malicious code in entire-indigo-asp (npm) (malicious package) - [MAL-2025-68048](https://insights.sbomify.com/MAL-2025-68048/): Malicious code in entire-coral-koi (npm) (malicious package) - [MAL-2025-68047](https://insights.sbomify.com/MAL-2025-68047/): Malicious code in enthusiastic-tomato-fowl (npm) (malicious package) - [MAL-2025-68046](https://insights.sbomify.com/MAL-2025-68046/): Malicious code in enthusiastic-salmon-stingray (npm) (malicious package) - [MAL-2025-68045](https://insights.sbomify.com/MAL-2025-68045/): Malicious code in enthusiastic-emerald-anglerfish (npm) (malicious package) - [MAL-2025-68044](https://insights.sbomify.com/MAL-2025-68044/): Malicious code in enthusiastic-blue-lemur (npm) (malicious package) - [MAL-2025-68043](https://insights.sbomify.com/MAL-2025-68043/): Malicious code in entheog (npm) (malicious package) - [MAL-2025-68042](https://insights.sbomify.com/MAL-2025-68042/): Malicious code in enormous-copper-dog (npm) (malicious package) - [MAL-2025-68041](https://insights.sbomify.com/MAL-2025-68041/): Malicious code in energetic-chocolate-roadrunner (npm) (malicious package) - [MAL-2025-68040](https://insights.sbomify.com/MAL-2025-68040/): Malicious code in energetic-beige-sturgeon (npm) (malicious package) - [MAL-2025-6804](https://insights.sbomify.com/MAL-2025-6804/): Malicious code in sendbird-visual-test (npm) (malicious package) - [MAL-2025-68039](https://insights.sbomify.com/MAL-2025-68039/): Malicious code in energetic-apricot-lynx (npm) (malicious package) - [MAL-2025-68038](https://insights.sbomify.com/MAL-2025-68038/): Malicious code in endless-turquoise-ermine (npm) (malicious package) - [MAL-2025-68037](https://insights.sbomify.com/MAL-2025-68037/): Malicious code in endless-gold-iguana (npm) (malicious package) - [MAL-2025-68036](https://insights.sbomify.com/MAL-2025-68036/): Malicious code in endless-blue-porpoise (npm) (malicious package) - [MAL-2025-68035](https://insights.sbomify.com/MAL-2025-68035/): Malicious code in endless-amber-mockingbird (npm) (malicious package) - [MAL-2025-68034](https://insights.sbomify.com/MAL-2025-68034/): Malicious code in encouraging-violet-wombat (npm) (malicious package) - [MAL-2025-68033](https://insights.sbomify.com/MAL-2025-68033/): Malicious code in encouraging-olive-parrot (npm) (malicious package) - [MAL-2025-68032](https://insights.sbomify.com/MAL-2025-68032/): Malicious code in encouraging-maroon-wolf (npm) (malicious package) - [MAL-2025-68031](https://insights.sbomify.com/MAL-2025-68031/): Malicious code in encouraging-jade-blackbird (npm) (malicious package) - [MAL-2025-68030](https://insights.sbomify.com/MAL-2025-68030/): Malicious code in encouraging-emerald-damselfly (npm) (malicious package) - [MAL-2025-6803](https://insights.sbomify.com/MAL-2025-6803/): Malicious code in packaging-common (npm) (malicious package) - [MAL-2025-68029](https://insights.sbomify.com/MAL-2025-68029/): Malicious code in encouraging-copper-pinniped (npm) (malicious package) - [MAL-2025-68028](https://insights.sbomify.com/MAL-2025-68028/): Malicious code in encouraging-blush-cicada (npm) (malicious package) - [MAL-2025-68027](https://insights.sbomify.com/MAL-2025-68027/): Malicious code in encouraging-amaranth-crocodile (npm) (malicious package) - [MAL-2025-68026](https://insights.sbomify.com/MAL-2025-68026/): Malicious code in enchanting-turquoise-vulture (npm) (malicious package) - [MAL-2025-68025](https://insights.sbomify.com/MAL-2025-68025/): Malicious code in enchanting-lime-piranha (npm) (malicious package) - [MAL-2025-68024](https://insights.sbomify.com/MAL-2025-68024/): Malicious code in enchanting-green-rabbit (npm) (malicious package) - [MAL-2025-68023](https://insights.sbomify.com/MAL-2025-68023/): Malicious code in enchanting-black-bug (npm) (malicious package) - [MAL-2025-68022](https://insights.sbomify.com/MAL-2025-68022/): Malicious code in enchanting-aquamarine-rodent (npm) (malicious package) - [MAL-2025-68021](https://insights.sbomify.com/MAL-2025-68021/): Malicious code in enchanting-aqua-bass (npm) (malicious package) - [MAL-2025-68020](https://insights.sbomify.com/MAL-2025-68020/): Malicious code in empty-white-fly (npm) (malicious package) - [MAL-2025-6802](https://insights.sbomify.com/MAL-2025-6802/): Malicious code in sendbird-uikit-testing-tools (npm) (malicious package) - [MAL-2025-68019](https://insights.sbomify.com/MAL-2025-68019/): Malicious code in empty-lime-toad (npm) (malicious package) - [MAL-2025-68018](https://insights.sbomify.com/MAL-2025-68018/): Malicious code in empty-gold-duck (npm) (malicious package) - [MAL-2025-68017](https://insights.sbomify.com/MAL-2025-68017/): Malicious code in empty-amber-ferret (npm) (malicious package) - [MAL-2025-68016](https://insights.sbomify.com/MAL-2025-68016/): Malicious code in empirical-beige-zebra (npm) (malicious package) - [MAL-2025-68015](https://insights.sbomify.com/MAL-2025-68015/): Malicious code in empirical-aqua-anteater (npm) (malicious package) - [MAL-2025-68014](https://insights.sbomify.com/MAL-2025-68014/): Malicious code in emotional-scarlet-antelope (npm) (malicious package) - [MAL-2025-68013](https://insights.sbomify.com/MAL-2025-68013/): Malicious code in emotional-beige-eel (npm) (malicious package) - [MAL-2025-68012](https://insights.sbomify.com/MAL-2025-68012/): Malicious code in emotional-azure-dragonfly (npm) (malicious package) - [MAL-2025-68011](https://insights.sbomify.com/MAL-2025-68011/): Malicious code in embarrassed-yellow-llama (npm) (malicious package) - [MAL-2025-68010](https://insights.sbomify.com/MAL-2025-68010/): Malicious code in embarrassed-scarlet-wolverine (npm) (malicious package) - [MAL-2025-6801](https://insights.sbomify.com/MAL-2025-6801/): Malicious code in sendbird-notifications-extension-example (npm) (malicious package) - [MAL-2025-68009](https://insights.sbomify.com/MAL-2025-68009/): Malicious code in embarrassed-plum-ape (npm) (malicious package) - [MAL-2025-68008](https://insights.sbomify.com/MAL-2025-68008/): Malicious code in embarrassed-peach-booby (npm) (malicious package) - [MAL-2025-68007](https://insights.sbomify.com/MAL-2025-68007/): Malicious code in embarrassed-beige-meadowlark (npm) (malicious package) - [MAL-2025-68006](https://insights.sbomify.com/MAL-2025-68006/): Malicious code in embarrassed-apricot-squirrel (npm) (malicious package) - [MAL-2025-68005](https://insights.sbomify.com/MAL-2025-68005/): Malicious code in embarrassed-amaranth-reptile (npm) (malicious package) - [MAL-2025-68004](https://insights.sbomify.com/MAL-2025-68004/): Malicious code in eligible-peach-swan (npm) (malicious package) - [MAL-2025-68003](https://insights.sbomify.com/MAL-2025-68003/): Malicious code in eligible-peach-kiwi (npm) (malicious package) - [MAL-2025-68002](https://insights.sbomify.com/MAL-2025-68002/): Malicious code in eligible-jade-porpoise (npm) (malicious package) - [MAL-2025-68001](https://insights.sbomify.com/MAL-2025-68001/): Malicious code in eligible-emerald-wildebeest (npm) (malicious package) - [MAL-2025-68000](https://insights.sbomify.com/MAL-2025-68000/): Malicious code in eligible-bronze-quokka (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/358/