# Vulnerabilities published in 2025


- [MAL-2025-67550](https://insights.sbomify.com/MAL-2025-67550/): Malicious code in crooked-copper-mink (npm) (malicious package)
- [MAL-2025-6755](https://insights.sbomify.com/MAL-2025-6755/): Malicious code in react-native-gainsight-px (npm) (malicious package)
- [MAL-2025-67549](https://insights.sbomify.com/MAL-2025-67549/): Malicious code in crooked-azure-pinniped (npm) (malicious package)
- [MAL-2025-67548](https://insights.sbomify.com/MAL-2025-67548/): Malicious code in critical-tan-rat (npm) (malicious package)
- [MAL-2025-67547](https://insights.sbomify.com/MAL-2025-67547/): Malicious code in critical-moccasin-tick (npm) (malicious package)
- [MAL-2025-67546](https://insights.sbomify.com/MAL-2025-67546/): Malicious code in critical-moccasin-crawdad (npm) (malicious package)
- [MAL-2025-67545](https://insights.sbomify.com/MAL-2025-67545/): Malicious code in critical-blush-wolf (npm) (malicious package)
- [MAL-2025-67544](https://insights.sbomify.com/MAL-2025-67544/): Malicious code in critical-blush-asp (npm) (malicious package)
- [MAL-2025-67543](https://insights.sbomify.com/MAL-2025-67543/): Malicious code in critical-azure-giraffe (npm) (malicious package)
- [MAL-2025-67542](https://insights.sbomify.com/MAL-2025-67542/): Malicious code in critical-azure-butterfly (npm) (malicious package)
- [MAL-2025-67541](https://insights.sbomify.com/MAL-2025-67541/): Malicious code in criminal-green-bug (npm) (malicious package)
- [MAL-2025-67540](https://insights.sbomify.com/MAL-2025-67540/): Malicious code in criminal-fuchsia-lamprey (npm) (malicious package)
- [MAL-2025-6754](https://insights.sbomify.com/MAL-2025-6754/): Malicious code in react-native-at-internet-example (npm) (malicious package)
- [MAL-2025-67539](https://insights.sbomify.com/MAL-2025-67539/): Malicious code in criminal-aqua-guppy (npm) (malicious package)
- [MAL-2025-67538](https://insights.sbomify.com/MAL-2025-67538/): Malicious code in creepy-tomato-possum (npm) (malicious package)
- [MAL-2025-67537](https://insights.sbomify.com/MAL-2025-67537/): Malicious code in creepy-tan-raccoon (npm) (malicious package)
- [MAL-2025-67536](https://insights.sbomify.com/MAL-2025-67536/): Malicious code in creepy-plum-egret (npm) (malicious package)
- [MAL-2025-67535](https://insights.sbomify.com/MAL-2025-67535/): Malicious code in creepy-plum-anglerfish (npm) (malicious package)
- [MAL-2025-67534](https://insights.sbomify.com/MAL-2025-67534/): Malicious code in creepy-maroon-falcon (npm) (malicious package)
- [MAL-2025-67533](https://insights.sbomify.com/MAL-2025-67533/): Malicious code in creepy-gold-guppy (npm) (malicious package)
- [MAL-2025-67532](https://insights.sbomify.com/MAL-2025-67532/): Malicious code in creative-gray-mackerel (npm) (malicious package)
- [MAL-2025-67531](https://insights.sbomify.com/MAL-2025-67531/): Malicious code in creative-black-lobster (npm) (malicious package)
- [MAL-2025-67530](https://insights.sbomify.com/MAL-2025-67530/): Malicious code in creative-aqua-earwig (npm) (malicious package)
- [MAL-2025-6753](https://insights.sbomify.com/MAL-2025-6753/): Malicious code in rca-url-adaptator (npm) (malicious package)
- [MAL-2025-67529](https://insights.sbomify.com/MAL-2025-67529/): Malicious code in creative-aqua-crayfish (npm) (malicious package)
- [MAL-2025-67528](https://insights.sbomify.com/MAL-2025-67528/): Malicious code in creamycandys (npm) (malicious package)
- [MAL-2025-67527](https://insights.sbomify.com/MAL-2025-67527/): Malicious code in crazy-beige-goldfish (npm) (malicious package)
- [MAL-2025-67526](https://insights.sbomify.com/MAL-2025-67526/): Malicious code in crazy-aquamarine-anteater (npm) (malicious package)
- [MAL-2025-67525](https://insights.sbomify.com/MAL-2025-67525/): Malicious code in crazy-amaranth-frog (npm) (malicious package)
- [MAL-2025-67524](https://insights.sbomify.com/MAL-2025-67524/): Malicious code in courageous-peach-nightingale (npm) (malicious package)
- [MAL-2025-67523](https://insights.sbomify.com/MAL-2025-67523/): Malicious code in courageous-crimson-cobra (npm) (malicious package)
- [MAL-2025-67522](https://insights.sbomify.com/MAL-2025-67522/): Malicious code in courageous-apricot-octopus (npm) (malicious package)
- [MAL-2025-67521](https://insights.sbomify.com/MAL-2025-67521/): Malicious code in courageous-amaranth-meerkat (npm) (malicious package)
- [MAL-2025-67520](https://insights.sbomify.com/MAL-2025-67520/): Malicious code in costly-yellow-toucan (npm) (malicious package)
- [MAL-2025-6752](https://insights.sbomify.com/MAL-2025-6752/): Malicious code in plugin-commonjs (npm) (malicious package)
- [MAL-2025-67519](https://insights.sbomify.com/MAL-2025-67519/): Malicious code in costly-tan-bovid (npm) (malicious package)
- [MAL-2025-67518](https://insights.sbomify.com/MAL-2025-67518/): Malicious code in costly-tan-boa (npm) (malicious package)
- [MAL-2025-67517](https://insights.sbomify.com/MAL-2025-67517/): Malicious code in costly-purple-anaconda (npm) (malicious package)
- [MAL-2025-67516](https://insights.sbomify.com/MAL-2025-67516/): Malicious code in costly-coral-fox (npm) (malicious package)
- [MAL-2025-67515](https://insights.sbomify.com/MAL-2025-67515/): Malicious code in costly-chocolate-peacock (npm) (malicious package)
- [MAL-2025-67514](https://insights.sbomify.com/MAL-2025-67514/): Malicious code in costly-aquamarine-boar (npm) (malicious package)
- [MAL-2025-67513](https://insights.sbomify.com/MAL-2025-67513/): Malicious code in cosmicchorus (npm) (malicious package)
- [MAL-2025-67512](https://insights.sbomify.com/MAL-2025-67512/): Malicious code in corresponding-turquoise-rodent (npm) (malicious package)
- [MAL-2025-67511](https://insights.sbomify.com/MAL-2025-67511/): Malicious code in corresponding-tan-tortoise (npm) (malicious package)
- [MAL-2025-67510](https://insights.sbomify.com/MAL-2025-67510/): Malicious code in corresponding-lavender-gull (npm) (malicious package)
- [MAL-2025-6751](https://insights.sbomify.com/MAL-2025-6751/): Malicious code in playwright-config-pdffiller (npm) (malicious package)
- [MAL-2025-67509](https://insights.sbomify.com/MAL-2025-67509/): Malicious code in corresponding-brown-canidae (npm) (malicious package)
- [MAL-2025-67508](https://insights.sbomify.com/MAL-2025-67508/): Malicious code in corresponding-black-meadowlark (npm) (malicious package)
- [MAL-2025-67507](https://insights.sbomify.com/MAL-2025-67507/): Malicious code in corresponding-aquamarine-panther (npm) (malicious package)
- [MAL-2025-67506](https://insights.sbomify.com/MAL-2025-67506/): Malicious code in correct-tomato-crab (npm) (malicious package)
- [MAL-2025-67505](https://insights.sbomify.com/MAL-2025-67505/): Malicious code in correct-silver-landfowl (npm) (malicious package)
- [MAL-2025-67504](https://insights.sbomify.com/MAL-2025-67504/): Malicious code in correct-copper-galliform (npm) (malicious package)
- [MAL-2025-67503](https://insights.sbomify.com/MAL-2025-67503/): Malicious code in correct-brown-snipe (npm) (malicious package)
- [MAL-2025-67502](https://insights.sbomify.com/MAL-2025-67502/): Malicious code in correct-brown-jay (npm) (malicious package)
- [MAL-2025-67501](https://insights.sbomify.com/MAL-2025-67501/): Malicious code in correct-aqua-hookworm (npm) (malicious package)
- [MAL-2025-67500](https://insights.sbomify.com/MAL-2025-67500/): Malicious code in corporate-turquoise-sparrow (npm) (malicious package)
- [MAL-2025-6750](https://insights.sbomify.com/MAL-2025-6750/): Malicious code in pexels-internal (npm) (malicious package)
- [MAL-2025-675](https://insights.sbomify.com/MAL-2025-675/): Malicious code in node_package_runner (npm) (malicious package)
- [MAL-2025-67499](https://insights.sbomify.com/MAL-2025-67499/): Malicious code in corporate-scarlet-parakeet (npm) (malicious package)
- [MAL-2025-67498](https://insights.sbomify.com/MAL-2025-67498/): Malicious code in corporate-sapphire-stork (npm) (malicious package)
- [MAL-2025-67497](https://insights.sbomify.com/MAL-2025-67497/): Malicious code in corporate-moccasin-kingfisher (npm) (malicious package)
- [MAL-2025-67496](https://insights.sbomify.com/MAL-2025-67496/): Malicious code in corporate-black-panda (npm) (malicious package)
- [MAL-2025-67495](https://insights.sbomify.com/MAL-2025-67495/): Malicious code in corporate-amber-ox (npm) (malicious package)
- [MAL-2025-67494](https://insights.sbomify.com/MAL-2025-67494/): Malicious code in corporate-amaranth-roundworm (npm) (malicious package)
- [MAL-2025-67493](https://insights.sbomify.com/MAL-2025-67493/): Malicious code in cooperative-yellow-crab (npm) (malicious package)
- [MAL-2025-67492](https://insights.sbomify.com/MAL-2025-67492/): Malicious code in cooperative-white-crow (npm) (malicious package)
- [MAL-2025-67491](https://insights.sbomify.com/MAL-2025-67491/): Malicious code in cooperative-purple-platypus (npm) (malicious package)
- [MAL-2025-67490](https://insights.sbomify.com/MAL-2025-67490/): Malicious code in cooperative-brown-lark (npm) (malicious package)
- [MAL-2025-6749](https://insights.sbomify.com/MAL-2025-6749/): Malicious code in pexels-figma (npm) (malicious package)
- [MAL-2025-67489](https://insights.sbomify.com/MAL-2025-67489/): Malicious code in cooperative-blue-swordfish (npm) (malicious package)
- [MAL-2025-67488](https://insights.sbomify.com/MAL-2025-67488/): Malicious code in cool-red-zebra (npm) (malicious package)
- [MAL-2025-67487](https://insights.sbomify.com/MAL-2025-67487/): Malicious code in cool-aqua-newt (npm) (malicious package)
- [MAL-2025-67486](https://insights.sbomify.com/MAL-2025-67486/): Malicious code in cool-amber-mole (npm) (malicious package)
- [MAL-2025-67485](https://insights.sbomify.com/MAL-2025-67485/): Malicious code in cooing-rose-clownfish (npm) (malicious package)
- [MAL-2025-67484](https://insights.sbomify.com/MAL-2025-67484/): Malicious code in cooing-pink-cricket (npm) (malicious package)
- [MAL-2025-67483](https://insights.sbomify.com/MAL-2025-67483/): Malicious code in cooing-indigo-seahorse (npm) (malicious package)
- [MAL-2025-67482](https://insights.sbomify.com/MAL-2025-67482/): Malicious code in cooing-gray-mole (npm) (malicious package)
- [MAL-2025-67481](https://insights.sbomify.com/MAL-2025-67481/): Malicious code in cooing-beige-camel (npm) (malicious package)
- [MAL-2025-67480](https://insights.sbomify.com/MAL-2025-67480/): Malicious code in convinced-white-jackal (npm) (malicious package)
- [MAL-2025-6748](https://insights.sbomify.com/MAL-2025-6748/): Malicious code in pexels-core-sdk (npm) (malicious package)
- [MAL-2025-67479](https://insights.sbomify.com/MAL-2025-67479/): Malicious code in convinced-tomato-hippopotamus (npm) (malicious package)
- [MAL-2025-67478](https://insights.sbomify.com/MAL-2025-67478/): Malicious code in convinced-pink-rodent (npm) (malicious package)
- [MAL-2025-67477](https://insights.sbomify.com/MAL-2025-67477/): Malicious code in convinced-orange-fish (npm) (malicious package)
- [MAL-2025-67476](https://insights.sbomify.com/MAL-2025-67476/): Malicious code in convinced-brown-eel (npm) (malicious package)
- [MAL-2025-67475](https://insights.sbomify.com/MAL-2025-67475/): Malicious code in convinced-blush-mouse (npm) (malicious package)
- [MAL-2025-67474](https://insights.sbomify.com/MAL-2025-67474/): Malicious code in conventional-yellow-octopus (npm) (malicious package)
- [MAL-2025-67473](https://insights.sbomify.com/MAL-2025-67473/): Malicious code in conventional-red-piranha (npm) (malicious package)
- [MAL-2025-67472](https://insights.sbomify.com/MAL-2025-67472/): Malicious code in conventional-jade-pig (npm) (malicious package)
- [MAL-2025-67471](https://insights.sbomify.com/MAL-2025-67471/): Malicious code in conventional-emerald-hamster (npm) (malicious package)
- [MAL-2025-67470](https://insights.sbomify.com/MAL-2025-67470/): Malicious code in conventional-coral-piranha (npm) (malicious package)
- [MAL-2025-6747](https://insights.sbomify.com/MAL-2025-6747/): Malicious code in onboarding-lemonde (npm) (malicious package)
- [MAL-2025-67469](https://insights.sbomify.com/MAL-2025-67469/): Malicious code in convenient-orange-aphid (npm) (malicious package)
- [MAL-2025-67468](https://insights.sbomify.com/MAL-2025-67468/): Malicious code in convenient-olive-snail (npm) (malicious package)
- [MAL-2025-67467](https://insights.sbomify.com/MAL-2025-67467/): Malicious code in convenient-brown-pinniped (npm) (malicious package)
- [MAL-2025-67466](https://insights.sbomify.com/MAL-2025-67466/): Malicious code in convenient-black-chicken (npm) (malicious package)
- [MAL-2025-67465](https://insights.sbomify.com/MAL-2025-67465/): Malicious code in controversial-orange-puma (npm) (malicious package)
- [MAL-2025-67464](https://insights.sbomify.com/MAL-2025-67464/): Malicious code in controversial-blush-walrus (npm) (malicious package)
- [MAL-2025-67463](https://insights.sbomify.com/MAL-2025-67463/): Malicious code in controlled-green-crab (npm) (malicious package)
- [MAL-2025-67462](https://insights.sbomify.com/MAL-2025-67462/): Malicious code in controlled-chocolate-seahorse (npm) (malicious package)
- [MAL-2025-67461](https://insights.sbomify.com/MAL-2025-67461/): Malicious code in continuous-turquoise-sturgeon (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/364/