# Vulnerabilities published in 2025


- [MAL-2025-6800](https://insights.sbomify.com/MAL-2025-6800/): Malicious code in sendbird-docs-validation (npm) (malicious package)
- [MAL-2025-680](https://insights.sbomify.com/MAL-2025-680/): Malicious code in pegin-address-verificator (npm) (malicious package)
- [MAL-2025-68](https://insights.sbomify.com/MAL-2025-68/): Malicious code in kiota-typescript (npm) (malicious package)
- [MAL-2025-67999](https://insights.sbomify.com/MAL-2025-67999/): Malicious code in eligible-amethyst-unicorn (npm) (malicious package)
- [MAL-2025-67998](https://insights.sbomify.com/MAL-2025-67998/): Malicious code in elflyyz (npm) (malicious package)
- [MAL-2025-67997](https://insights.sbomify.com/MAL-2025-67997/): Malicious code in elezyrus (npm) (malicious package)
- [MAL-2025-67996](https://insights.sbomify.com/MAL-2025-67996/): Malicious code in elegant-magenta-beaver (npm) (malicious package)
- [MAL-2025-67995](https://insights.sbomify.com/MAL-2025-67995/): Malicious code in electronic-white-tiglon (npm) (malicious package)
- [MAL-2025-67994](https://insights.sbomify.com/MAL-2025-67994/): Malicious code in electronic-plum-anteater (npm) (malicious package)
- [MAL-2025-67993](https://insights.sbomify.com/MAL-2025-67993/): Malicious code in electronic-coffee-hawk (npm) (malicious package)
- [MAL-2025-67992](https://insights.sbomify.com/MAL-2025-67992/): Malicious code in electronic-chocolate-mosquito (npm) (malicious package)
- [MAL-2025-67991](https://insights.sbomify.com/MAL-2025-67991/): Malicious code in electronic-amber-crab (npm) (malicious package)
- [MAL-2025-67990](https://insights.sbomify.com/MAL-2025-67990/): Malicious code in electrical-moccasin-cockroach (npm) (malicious package)
- [MAL-2025-6799](https://insights.sbomify.com/MAL-2025-6799/): Malicious code in epiro (npm) (malicious package)
- [MAL-2025-67989](https://insights.sbomify.com/MAL-2025-67989/): Malicious code in electrical-gold-wildebeest (npm) (malicious package)
- [MAL-2025-67988](https://insights.sbomify.com/MAL-2025-67988/): Malicious code in electrical-copper-stork (npm) (malicious package)
- [MAL-2025-67987](https://insights.sbomify.com/MAL-2025-67987/): Malicious code in electrical-bronze-unicorn (npm) (malicious package)
- [MAL-2025-67986](https://insights.sbomify.com/MAL-2025-67986/): Malicious code in electrical-black-leopard (npm) (malicious package)
- [MAL-2025-67985](https://insights.sbomify.com/MAL-2025-67985/): Malicious code in electrical-aquamarine-gibbon (npm) (malicious package)
- [MAL-2025-67984](https://insights.sbomify.com/MAL-2025-67984/): Malicious code in electrical-amaranth-bee (npm) (malicious package)
- [MAL-2025-67983](https://insights.sbomify.com/MAL-2025-67983/): Malicious code in electric-orange-whippet (npm) (malicious package)
- [MAL-2025-67982](https://insights.sbomify.com/MAL-2025-67982/): Malicious code in electric-maroon-lion (npm) (malicious package)
- [MAL-2025-67981](https://insights.sbomify.com/MAL-2025-67981/): Malicious code in electric-harlequin-blackbird (npm) (malicious package)
- [MAL-2025-67980](https://insights.sbomify.com/MAL-2025-67980/): Malicious code in electric-gray-panda (npm) (malicious package)
- [MAL-2025-6798](https://insights.sbomify.com/MAL-2025-6798/): Malicious code in google-webfonts-helper (npm) (malicious package)
- [MAL-2025-67979](https://insights.sbomify.com/MAL-2025-67979/): Malicious code in electoral-jade-narwhal (npm) (malicious package)
- [MAL-2025-67978](https://insights.sbomify.com/MAL-2025-67978/): Malicious code in electoral-emerald-perch (npm) (malicious package)
- [MAL-2025-67977](https://insights.sbomify.com/MAL-2025-67977/): Malicious code in electoral-blush-anglerfish (npm) (malicious package)
- [MAL-2025-67976](https://insights.sbomify.com/MAL-2025-67976/): Malicious code in eldest-maroon-ladybug (npm) (malicious package)
- [MAL-2025-67975](https://insights.sbomify.com/MAL-2025-67975/): Malicious code in eldest-crimson-ptarmigan (npm) (malicious package)
- [MAL-2025-67974](https://insights.sbomify.com/MAL-2025-67974/): Malicious code in eldest-blue-halibut (npm) (malicious package)
- [MAL-2025-67973](https://insights.sbomify.com/MAL-2025-67973/): Malicious code in eldest-amber-gopher (npm) (malicious package)
- [MAL-2025-67972](https://insights.sbomify.com/MAL-2025-67972/): Malicious code in elderly-teal-walrus (npm) (malicious package)
- [MAL-2025-67971](https://insights.sbomify.com/MAL-2025-67971/): Malicious code in elderly-red-toad (npm) (malicious package)
- [MAL-2025-67970](https://insights.sbomify.com/MAL-2025-67970/): Malicious code in elderly-magenta-hyena (npm) (malicious package)
- [MAL-2025-6797](https://insights.sbomify.com/MAL-2025-6797/): Malicious code in criteo-video-player (npm) (malicious package)
- [MAL-2025-67969](https://insights.sbomify.com/MAL-2025-67969/): Malicious code in elated-scarlet-buzzard (npm) (malicious package)
- [MAL-2025-67968](https://insights.sbomify.com/MAL-2025-67968/): Malicious code in elated-sapphire-ptarmigan (npm) (malicious package)
- [MAL-2025-67967](https://insights.sbomify.com/MAL-2025-67967/): Malicious code in elated-purple-dingo (npm) (malicious package)
- [MAL-2025-67966](https://insights.sbomify.com/MAL-2025-67966/): Malicious code in elated-plum-snake (npm) (malicious package)
- [MAL-2025-67965](https://insights.sbomify.com/MAL-2025-67965/): Malicious code in elated-aquamarine-amphibian (npm) (malicious package)
- [MAL-2025-67964](https://insights.sbomify.com/MAL-2025-67964/): Malicious code in elaborate-turquoise-orangutan (npm) (malicious package)
- [MAL-2025-67963](https://insights.sbomify.com/MAL-2025-67963/): Malicious code in elaborate-teal-ptarmigan (npm) (malicious package)
- [MAL-2025-67962](https://insights.sbomify.com/MAL-2025-67962/): Malicious code in elaborate-rose-bedbug (npm) (malicious package)
- [MAL-2025-67961](https://insights.sbomify.com/MAL-2025-67961/): Malicious code in elaborate-red-jay (npm) (malicious package)
- [MAL-2025-67960](https://insights.sbomify.com/MAL-2025-67960/): Malicious code in elaborate-harlequin-impala (npm) (malicious package)
- [MAL-2025-6796](https://insights.sbomify.com/MAL-2025-6796/): Malicious code in lynx-libs-mono (npm) (malicious package)
- [MAL-2025-67959](https://insights.sbomify.com/MAL-2025-67959/): Malicious code in elaborate-green-tyrannosaurus (npm) (malicious package)
- [MAL-2025-67958](https://insights.sbomify.com/MAL-2025-67958/): Malicious code in elaborate-aqua-carp (npm) (malicious package)
- [MAL-2025-67957](https://insights.sbomify.com/MAL-2025-67957/): Malicious code in efficient-yellow-mole (npm) (malicious package)
- [MAL-2025-67956](https://insights.sbomify.com/MAL-2025-67956/): Malicious code in efficient-jade-mackerel (npm) (malicious package)
- [MAL-2025-67955](https://insights.sbomify.com/MAL-2025-67955/): Malicious code in effective-salmon-salmon (npm) (malicious package)
- [MAL-2025-67954](https://insights.sbomify.com/MAL-2025-67954/): Malicious code in effective-plum-frog (npm) (malicious package)
- [MAL-2025-67953](https://insights.sbomify.com/MAL-2025-67953/): Malicious code in effective-peach-gayal (npm) (malicious package)
- [MAL-2025-67952](https://insights.sbomify.com/MAL-2025-67952/): Malicious code in effective-green-mole (npm) (malicious package)
- [MAL-2025-67951](https://insights.sbomify.com/MAL-2025-67951/): Malicious code in effective-bronze-junglefowl (npm) (malicious package)
- [MAL-2025-67950](https://insights.sbomify.com/MAL-2025-67950/): Malicious code in effective-azure-alpaca (npm) (malicious package)
- [MAL-2025-6795](https://insights.sbomify.com/MAL-2025-6795/): Malicious code in productboard-freemail (npm) (malicious package)
- [MAL-2025-67949](https://insights.sbomify.com/MAL-2025-67949/): Malicious code in effective-aquamarine-boa (npm) (malicious package)
- [MAL-2025-67948](https://insights.sbomify.com/MAL-2025-67948/): Malicious code in eerie-turquoise-heron (npm) (malicious package)
- [MAL-2025-67947](https://insights.sbomify.com/MAL-2025-67947/): Malicious code in eerie-tomato-constrictor (npm) (malicious package)
- [MAL-2025-67946](https://insights.sbomify.com/MAL-2025-67946/): Malicious code in eerie-teal-flamingo (npm) (malicious package)
- [MAL-2025-67945](https://insights.sbomify.com/MAL-2025-67945/): Malicious code in eerie-orange-thrush (npm) (malicious package)
- [MAL-2025-67944](https://insights.sbomify.com/MAL-2025-67944/): Malicious code in eerie-jade-frog (npm) (malicious package)
- [MAL-2025-67943](https://insights.sbomify.com/MAL-2025-67943/): Malicious code in eerie-apricot-mole (npm) (malicious package)
- [MAL-2025-67942](https://insights.sbomify.com/MAL-2025-67942/): Malicious code in educational-white-wolf (npm) (malicious package)
- [MAL-2025-67941](https://insights.sbomify.com/MAL-2025-67941/): Malicious code in educational-magenta-mule (npm) (malicious package)
- [MAL-2025-67940](https://insights.sbomify.com/MAL-2025-67940/): Malicious code in educational-emerald-goose (npm) (malicious package)
- [MAL-2025-6794](https://insights.sbomify.com/MAL-2025-6794/): Malicious code in num2words (PyPI) (malicious package)
- [MAL-2025-67939](https://insights.sbomify.com/MAL-2025-67939/): Malicious code in educational-azure-carp (npm) (malicious package)
- [MAL-2025-67938](https://insights.sbomify.com/MAL-2025-67938/): Malicious code in economic-teal-piranha (npm) (malicious package)
- [MAL-2025-67937](https://insights.sbomify.com/MAL-2025-67937/): Malicious code in economic-teal-cod (npm) (malicious package)
- [MAL-2025-67936](https://insights.sbomify.com/MAL-2025-67936/): Malicious code in economic-moccasin-anglerfish (npm) (malicious package)
- [MAL-2025-67935](https://insights.sbomify.com/MAL-2025-67935/): Malicious code in economic-fuchsia-opossum (npm) (malicious package)
- [MAL-2025-67934](https://insights.sbomify.com/MAL-2025-67934/): Malicious code in economic-crimson-wildebeest (npm) (malicious package)
- [MAL-2025-67933](https://insights.sbomify.com/MAL-2025-67933/): Malicious code in economic-crimson-tortoise (npm) (malicious package)
- [MAL-2025-67932](https://insights.sbomify.com/MAL-2025-67932/): Malicious code in economic-blush-woodpecker (npm) (malicious package)
- [MAL-2025-67931](https://insights.sbomify.com/MAL-2025-67931/): Malicious code in economic-aquamarine-orca (npm) (malicious package)
- [MAL-2025-67930](https://insights.sbomify.com/MAL-2025-67930/): Malicious code in economic-aqua-haddock (npm) (malicious package)
- [MAL-2025-6793](https://insights.sbomify.com/MAL-2025-6793/): Malicious code in productboard-eslint-plugin-relay (npm) (malicious package)
- [MAL-2025-67929](https://insights.sbomify.com/MAL-2025-67929/): Malicious code in economic-apricot-vicuna (npm) (malicious package)
- [MAL-2025-67928](https://insights.sbomify.com/MAL-2025-67928/): Malicious code in easy-violet-swallow (npm) (malicious package)
- [MAL-2025-67927](https://insights.sbomify.com/MAL-2025-67927/): Malicious code in easy-turquoise-viper (npm) (malicious package)
- [MAL-2025-67926](https://insights.sbomify.com/MAL-2025-67926/): Malicious code in easy-cyan-iguana (npm) (malicious package)
- [MAL-2025-67925](https://insights.sbomify.com/MAL-2025-67925/): Malicious code in easy-aquamarine-shrimp (npm) (malicious package)
- [MAL-2025-67924](https://insights.sbomify.com/MAL-2025-67924/): Malicious code in eastern-aquamarine-falcon (npm) (malicious package)
- [MAL-2025-67923](https://insights.sbomify.com/MAL-2025-67923/): Malicious code in eastern-aqua-whippet (npm) (malicious package)
- [MAL-2025-67922](https://insights.sbomify.com/MAL-2025-67922/): Malicious code in early-salmon-whale (npm) (malicious package)
- [MAL-2025-67921](https://insights.sbomify.com/MAL-2025-67921/): Malicious code in early-orange-mule (npm) (malicious package)
- [MAL-2025-67920](https://insights.sbomify.com/MAL-2025-67920/): Malicious code in early-chocolate-whale (npm) (malicious package)
- [MAL-2025-6792](https://insights.sbomify.com/MAL-2025-6792/): Malicious code in htmlcontent (npm) (malicious package)
- [MAL-2025-67919](https://insights.sbomify.com/MAL-2025-67919/): Malicious code in early-chocolate-smelt (npm) (malicious package)
- [MAL-2025-67918](https://insights.sbomify.com/MAL-2025-67918/): Malicious code in eager-green-prawn (npm) (malicious package)
- [MAL-2025-67917](https://insights.sbomify.com/MAL-2025-67917/): Malicious code in eager-amaranth-pelican (npm) (malicious package)
- [MAL-2025-67916](https://insights.sbomify.com/MAL-2025-67916/): Malicious code in dzlanzsd (npm) (malicious package)
- [MAL-2025-67915](https://insights.sbomify.com/MAL-2025-67915/): Malicious code in dynamic-yellow-warbler (npm) (malicious package)
- [MAL-2025-67914](https://insights.sbomify.com/MAL-2025-67914/): Malicious code in dynamic-yellow-koala (npm) (malicious package)
- [MAL-2025-67913](https://insights.sbomify.com/MAL-2025-67913/): Malicious code in dynamic-olive-quail (npm) (malicious package)
- [MAL-2025-67912](https://insights.sbomify.com/MAL-2025-67912/): Malicious code in dynamic-coral-caribou (npm) (malicious package)
- [MAL-2025-67911](https://insights.sbomify.com/MAL-2025-67911/): Malicious code in dynamic-brown-cicada (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/359/