# Vulnerabilities published in 2025


- [MAL-2025-67460](https://insights.sbomify.com/MAL-2025-67460/): Malicious code in continuous-gold-hamster (npm) (malicious package)
- [MAL-2025-6746](https://insights.sbomify.com/MAL-2025-6746/): Malicious code in nubank-www-latam-commons (npm) (malicious package)
- [MAL-2025-67459](https://insights.sbomify.com/MAL-2025-67459/): Malicious code in continuous-copper-angelfish (npm) (malicious package)
- [MAL-2025-67458](https://insights.sbomify.com/MAL-2025-67458/): Malicious code in continuing-turquoise-anglerfish (npm) (malicious package)
- [MAL-2025-67457](https://insights.sbomify.com/MAL-2025-67457/): Malicious code in continuing-silver-heron (npm) (malicious package)
- [MAL-2025-67456](https://insights.sbomify.com/MAL-2025-67456/): Malicious code in continuing-rose-spider (npm) (malicious package)
- [MAL-2025-67455](https://insights.sbomify.com/MAL-2025-67455/): Malicious code in continuing-magenta-whippet (npm) (malicious package)
- [MAL-2025-67454](https://insights.sbomify.com/MAL-2025-67454/): Malicious code in continuing-ivory-flea (npm) (malicious package)
- [MAL-2025-67453](https://insights.sbomify.com/MAL-2025-67453/): Malicious code in continuing-gold-minnow (npm) (malicious package)
- [MAL-2025-67452](https://insights.sbomify.com/MAL-2025-67452/): Malicious code in continuing-cyan-tahr (npm) (malicious package)
- [MAL-2025-67451](https://insights.sbomify.com/MAL-2025-67451/): Malicious code in continuing-coffee-tiger (npm) (malicious package)
- [MAL-2025-67450](https://insights.sbomify.com/MAL-2025-67450/): Malicious code in continuing-apricot-dolphin (npm) (malicious package)
- [MAL-2025-6745](https://insights.sbomify.com/MAL-2025-6745/): Malicious code in nr1-github (npm) (malicious package)
- [MAL-2025-67449](https://insights.sbomify.com/MAL-2025-67449/): Malicious code in continued-yellow-quail (npm) (malicious package)
- [MAL-2025-67448](https://insights.sbomify.com/MAL-2025-67448/): Malicious code in continued-scarlet-clam (npm) (malicious package)
- [MAL-2025-67447](https://insights.sbomify.com/MAL-2025-67447/): Malicious code in continued-rose-smelt (npm) (malicious package)
- [MAL-2025-67446](https://insights.sbomify.com/MAL-2025-67446/): Malicious code in continued-peach-mouse (npm) (malicious package)
- [MAL-2025-67445](https://insights.sbomify.com/MAL-2025-67445/): Malicious code in continued-chocolate-rook (npm) (malicious package)
- [MAL-2025-67444](https://insights.sbomify.com/MAL-2025-67444/): Malicious code in continued-black-meerkat (npm) (malicious package)
- [MAL-2025-67443](https://insights.sbomify.com/MAL-2025-67443/): Malicious code in continental-silver-bedbug (npm) (malicious package)
- [MAL-2025-67442](https://insights.sbomify.com/MAL-2025-67442/): Malicious code in continental-coral-wildcat (npm) (malicious package)
- [MAL-2025-67441](https://insights.sbomify.com/MAL-2025-67441/): Malicious code in continental-chocolate-emu (npm) (malicious package)
- [MAL-2025-67440](https://insights.sbomify.com/MAL-2025-67440/): Malicious code in continental-amaranth-jackal (npm) (malicious package)
- [MAL-2025-6744](https://insights.sbomify.com/MAL-2025-6744/): Malicious code in nova-ssr-utils (npm) (malicious package)
- [MAL-2025-67439](https://insights.sbomify.com/MAL-2025-67439/): Malicious code in content-magenta-ostrich (npm) (malicious package)
- [MAL-2025-67438](https://insights.sbomify.com/MAL-2025-67438/): Malicious code in content-ivory-jackal (npm) (malicious package)
- [MAL-2025-67437](https://insights.sbomify.com/MAL-2025-67437/): Malicious code in contemporary-purple-fox (npm) (malicious package)
- [MAL-2025-67436](https://insights.sbomify.com/MAL-2025-67436/): Malicious code in constant-orange-tortoise (npm) (malicious package)
- [MAL-2025-67435](https://insights.sbomify.com/MAL-2025-67435/): Malicious code in constant-lime-alpaca (npm) (malicious package)
- [MAL-2025-67434](https://insights.sbomify.com/MAL-2025-67434/): Malicious code in constant-chocolate-firefly (npm) (malicious package)
- [MAL-2025-67433](https://insights.sbomify.com/MAL-2025-67433/): Malicious code in consistent-magenta-cricket (npm) (malicious package)
- [MAL-2025-67432](https://insights.sbomify.com/MAL-2025-67432/): Malicious code in consistent-indigo-iguana (npm) (malicious package)
- [MAL-2025-67431](https://insights.sbomify.com/MAL-2025-67431/): Malicious code in consistent-black-penguin (npm) (malicious package)
- [MAL-2025-67430](https://insights.sbomify.com/MAL-2025-67430/): Malicious code in consistent-apricot-dragonfly (npm) (malicious package)
- [MAL-2025-6743](https://insights.sbomify.com/MAL-2025-6743/): Malicious code in nova-node-utils (npm) (malicious package)
- [MAL-2025-67429](https://insights.sbomify.com/MAL-2025-67429/): Malicious code in consistent-amethyst-donkey (npm) (malicious package)
- [MAL-2025-67428](https://insights.sbomify.com/MAL-2025-67428/): Malicious code in considerable-gray-crow (npm) (malicious package)
- [MAL-2025-67427](https://insights.sbomify.com/MAL-2025-67427/): Malicious code in considerable-gold-albatross (npm) (malicious package)
- [MAL-2025-67426](https://insights.sbomify.com/MAL-2025-67426/): Malicious code in conservative-salmon-elk (npm) (malicious package)
- [MAL-2025-67425](https://insights.sbomify.com/MAL-2025-67425/): Malicious code in conservative-pink-cuckoo (npm) (malicious package)
- [MAL-2025-67424](https://insights.sbomify.com/MAL-2025-67424/): Malicious code in conservative-lime-meadowlark (npm) (malicious package)
- [MAL-2025-67423](https://insights.sbomify.com/MAL-2025-67423/): Malicious code in conservation-sapphire-clam (npm) (malicious package)
- [MAL-2025-67422](https://insights.sbomify.com/MAL-2025-67422/): Malicious code in conservation-orange-meadowlark (npm) (malicious package)
- [MAL-2025-67421](https://insights.sbomify.com/MAL-2025-67421/): Malicious code in conservation-olive-spider (npm) (malicious package)
- [MAL-2025-67420](https://insights.sbomify.com/MAL-2025-67420/): Malicious code in conscious-yellow-centipede (npm) (malicious package)
- [MAL-2025-6742](https://insights.sbomify.com/MAL-2025-6742/): Malicious code in node-sqlite-fly-tutorial (npm) (malicious package)
- [MAL-2025-67419](https://insights.sbomify.com/MAL-2025-67419/): Malicious code in conscious-peach-finch (npm) (malicious package)
- [MAL-2025-67418](https://insights.sbomify.com/MAL-2025-67418/): Malicious code in conscious-crimson-flea (npm) (malicious package)
- [MAL-2025-67417](https://insights.sbomify.com/MAL-2025-67417/): Malicious code in conscious-amaranth-caribou (npm) (malicious package)
- [MAL-2025-67416](https://insights.sbomify.com/MAL-2025-67416/): Malicious code in connietalbots (npm) (malicious package)
- [MAL-2025-67415](https://insights.sbomify.com/MAL-2025-67415/): Malicious code in confused-red-sparrow (npm) (malicious package)
- [MAL-2025-67414](https://insights.sbomify.com/MAL-2025-67414/): Malicious code in confused-harlequin-badger (npm) (malicious package)
- [MAL-2025-67413](https://insights.sbomify.com/MAL-2025-67413/): Malicious code in confidential-olive-ape (npm) (malicious package)
- [MAL-2025-67412](https://insights.sbomify.com/MAL-2025-67412/): Malicious code in confidential-green-lizard (npm) (malicious package)
- [MAL-2025-67411](https://insights.sbomify.com/MAL-2025-67411/): Malicious code in confidential-fuchsia-cephalopod (npm) (malicious package)
- [MAL-2025-67410](https://insights.sbomify.com/MAL-2025-67410/): Malicious code in confidential-black-elephant (npm) (malicious package)
- [MAL-2025-6741](https://insights.sbomify.com/MAL-2025-6741/): Malicious code in node-calculator-yqhi (npm) (malicious package)
- [MAL-2025-67409](https://insights.sbomify.com/MAL-2025-67409/): Malicious code in confidential-amaranth-parakeet (npm) (malicious package)
- [MAL-2025-67408](https://insights.sbomify.com/MAL-2025-67408/): Malicious code in confident-white-mackerel (npm) (malicious package)
- [MAL-2025-67407](https://insights.sbomify.com/MAL-2025-67407/): Malicious code in confident-scarlet-woodpecker (npm) (malicious package)
- [MAL-2025-67406](https://insights.sbomify.com/MAL-2025-67406/): Malicious code in confident-brown-gorilla (npm) (malicious package)
- [MAL-2025-67405](https://insights.sbomify.com/MAL-2025-67405/): Malicious code in confident-blush-porcupine (npm) (malicious package)
- [MAL-2025-67404](https://insights.sbomify.com/MAL-2025-67404/): Malicious code in confident-blush-mackerel (npm) (malicious package)
- [MAL-2025-67403](https://insights.sbomify.com/MAL-2025-67403/): Malicious code in confident-black-quelea (npm) (malicious package)
- [MAL-2025-67402](https://insights.sbomify.com/MAL-2025-67402/): Malicious code in confident-azure-locust (npm) (malicious package)
- [MAL-2025-67401](https://insights.sbomify.com/MAL-2025-67401/): Malicious code in confident-apricot-goat (npm) (malicious package)
- [MAL-2025-67400](https://insights.sbomify.com/MAL-2025-67400/): Malicious code in condemned-turquoise-jaguar (npm) (malicious package)
- [MAL-2025-6740](https://insights.sbomify.com/MAL-2025-6740/): Malicious code in node-calculator-splo (npm) (malicious package)
- [MAL-2025-674](https://insights.sbomify.com/MAL-2025-674/): Malicious code in move-binary-format-wasm (npm) (malicious package)
- [MAL-2025-67399](https://insights.sbomify.com/MAL-2025-67399/): Malicious code in condemned-silver-wasp (npm) (malicious package)
- [MAL-2025-67398](https://insights.sbomify.com/MAL-2025-67398/): Malicious code in condemned-scarlet-pigeon (npm) (malicious package)
- [MAL-2025-67397](https://insights.sbomify.com/MAL-2025-67397/): Malicious code in condemned-moccasin-grasshopper (npm) (malicious package)
- [MAL-2025-67396](https://insights.sbomify.com/MAL-2025-67396/): Malicious code in condemned-gray-cod (npm) (malicious package)
- [MAL-2025-67395](https://insights.sbomify.com/MAL-2025-67395/): Malicious code in condemned-aqua-snake (npm) (malicious package)
- [MAL-2025-67394](https://insights.sbomify.com/MAL-2025-67394/): Malicious code in concrete-peach-donkey (npm) (malicious package)
- [MAL-2025-67393](https://insights.sbomify.com/MAL-2025-67393/): Malicious code in concrete-lavender-pigeon (npm) (malicious package)
- [MAL-2025-67392](https://insights.sbomify.com/MAL-2025-67392/): Malicious code in concrete-ivory-carp (npm) (malicious package)
- [MAL-2025-67391](https://insights.sbomify.com/MAL-2025-67391/): Malicious code in concrete-bronze-chinchilla (npm) (malicious package)
- [MAL-2025-67390](https://insights.sbomify.com/MAL-2025-67390/): Malicious code in concerned-silver-spoonbill (npm) (malicious package)
- [MAL-2025-6739](https://insights.sbomify.com/MAL-2025-6739/): Malicious code in node-calculator-fahw (npm) (malicious package)
- [MAL-2025-67389](https://insights.sbomify.com/MAL-2025-67389/): Malicious code in concerned-harlequin-ladybug (npm) (malicious package)
- [MAL-2025-67388](https://insights.sbomify.com/MAL-2025-67388/): Malicious code in concerned-coffee-parakeet (npm) (malicious package)
- [MAL-2025-67387](https://insights.sbomify.com/MAL-2025-67387/): Malicious code in concerned-aquamarine-goose (npm) (malicious package)
- [MAL-2025-67386](https://insights.sbomify.com/MAL-2025-67386/): Malicious code in conceptual-jade-rooster (npm) (malicious package)
- [MAL-2025-67385](https://insights.sbomify.com/MAL-2025-67385/): Malicious code in conceptual-coffee-constrictor (npm) (malicious package)
- [MAL-2025-67384](https://insights.sbomify.com/MAL-2025-67384/): Malicious code in compulsory-silver-snake (npm) (malicious package)
- [MAL-2025-67383](https://insights.sbomify.com/MAL-2025-67383/): Malicious code in compulsory-sapphire-whitefish (npm) (malicious package)
- [MAL-2025-67382](https://insights.sbomify.com/MAL-2025-67382/): Malicious code in compulsory-peach-puma (npm) (malicious package)
- [MAL-2025-67381](https://insights.sbomify.com/MAL-2025-67381/): Malicious code in compulsory-maroon-pinniped (npm) (malicious package)
- [MAL-2025-67380](https://insights.sbomify.com/MAL-2025-67380/): Malicious code in comprehensive-peach-lemur (npm) (malicious package)
- [MAL-2025-6738](https://insights.sbomify.com/MAL-2025-6738/): Malicious code in nio4r (npm) (malicious package)
- [MAL-2025-67379](https://insights.sbomify.com/MAL-2025-67379/): Malicious code in comprehensive-indigo-egret (npm) (malicious package)
- [MAL-2025-67378](https://insights.sbomify.com/MAL-2025-67378/): Malicious code in comprehensive-cyan-elk (npm) (malicious package)
- [MAL-2025-67377](https://insights.sbomify.com/MAL-2025-67377/): Malicious code in comprehensive-copper-dingo (npm) (malicious package)
- [MAL-2025-67376](https://insights.sbomify.com/MAL-2025-67376/): Malicious code in complicated-sapphire-parakeet (npm) (malicious package)
- [MAL-2025-67375](https://insights.sbomify.com/MAL-2025-67375/): Malicious code in complicated-azure-hamster (npm) (malicious package)
- [MAL-2025-67374](https://insights.sbomify.com/MAL-2025-67374/): Malicious code in complex-violet-ermine (npm) (malicious package)
- [MAL-2025-67373](https://insights.sbomify.com/MAL-2025-67373/): Malicious code in complex-peach-monkey (npm) (malicious package)
- [MAL-2025-67372](https://insights.sbomify.com/MAL-2025-67372/): Malicious code in complex-jade-tern (npm) (malicious package)
- [MAL-2025-67371](https://insights.sbomify.com/MAL-2025-67371/): Malicious code in complex-gray-owl (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/365/