# Vulnerabilities published in 2025


- [MAL-2025-67370](https://insights.sbomify.com/MAL-2025-67370/): Malicious code in complex-bronze-rat (npm) (malicious package)
- [MAL-2025-6737](https://insights.sbomify.com/MAL-2025-6737/): Malicious code in newrelic-scheduler (npm) (malicious package)
- [MAL-2025-67369](https://insights.sbomify.com/MAL-2025-67369/): Malicious code in complex-blue-angelfish (npm) (malicious package)
- [MAL-2025-67368](https://insights.sbomify.com/MAL-2025-67368/): Malicious code in complex-black-impala (npm) (malicious package)
- [MAL-2025-67367](https://insights.sbomify.com/MAL-2025-67367/): Malicious code in complete-tomato-tiger (npm) (malicious package)
- [MAL-2025-67366](https://insights.sbomify.com/MAL-2025-67366/): Malicious code in complete-pink-snake (npm) (malicious package)
- [MAL-2025-67365](https://insights.sbomify.com/MAL-2025-67365/): Malicious code in complete-moccasin-xerinae (npm) (malicious package)
- [MAL-2025-67364](https://insights.sbomify.com/MAL-2025-67364/): Malicious code in complete-blush-python (npm) (malicious package)
- [MAL-2025-67363](https://insights.sbomify.com/MAL-2025-67363/): Malicious code in complete-amethyst-parrotfish (npm) (malicious package)
- [MAL-2025-67362](https://insights.sbomify.com/MAL-2025-67362/): Malicious code in competitive-white-crawdad (npm) (malicious package)
- [MAL-2025-67361](https://insights.sbomify.com/MAL-2025-67361/): Malicious code in competitive-salmon-smelt (npm) (malicious package)
- [MAL-2025-67360](https://insights.sbomify.com/MAL-2025-67360/): Malicious code in competitive-red-ptarmigan (npm) (malicious package)
- [MAL-2025-6736](https://insights.sbomify.com/MAL-2025-6736/): Malicious code in mpesa-ui-components (npm) (malicious package)
- [MAL-2025-67359](https://insights.sbomify.com/MAL-2025-67359/): Malicious code in competent-rose-pheasant (npm) (malicious package)
- [MAL-2025-67358](https://insights.sbomify.com/MAL-2025-67358/): Malicious code in competent-moccasin-penguin (npm) (malicious package)
- [MAL-2025-67357](https://insights.sbomify.com/MAL-2025-67357/): Malicious code in competent-indigo-swallow (npm) (malicious package)
- [MAL-2025-67356](https://insights.sbomify.com/MAL-2025-67356/): Malicious code in compatible-maroon-toucan (npm) (malicious package)
- [MAL-2025-67355](https://insights.sbomify.com/MAL-2025-67355/): Malicious code in compatible-coffee-hamster (npm) (malicious package)
- [MAL-2025-67354](https://insights.sbomify.com/MAL-2025-67354/): Malicious code in compatible-black-deer (npm) (malicious package)
- [MAL-2025-67353](https://insights.sbomify.com/MAL-2025-67353/): Malicious code in compatible-aqua-heron (npm) (malicious package)
- [MAL-2025-67352](https://insights.sbomify.com/MAL-2025-67352/): Malicious code in comparative-moccasin-tarsier (npm) (malicious package)
- [MAL-2025-67351](https://insights.sbomify.com/MAL-2025-67351/): Malicious code in comparative-bronze-toucan (npm) (malicious package)
- [MAL-2025-67350](https://insights.sbomify.com/MAL-2025-67350/): Malicious code in comparable-tan-snake (npm) (malicious package)
- [MAL-2025-6735](https://insights.sbomify.com/MAL-2025-6735/): Malicious code in library-with-exports (npm) (malicious package)
- [MAL-2025-67349](https://insights.sbomify.com/MAL-2025-67349/): Malicious code in comparable-purple-hamster (npm) (malicious package)
- [MAL-2025-67348](https://insights.sbomify.com/MAL-2025-67348/): Malicious code in comparable-gray-aardwolf (npm) (malicious package)
- [MAL-2025-67347](https://insights.sbomify.com/MAL-2025-67347/): Malicious code in comparable-gold-hedgehog (npm) (malicious package)
- [MAL-2025-67346](https://insights.sbomify.com/MAL-2025-67346/): Malicious code in comparable-apricot-perch (npm) (malicious package)
- [MAL-2025-67345](https://insights.sbomify.com/MAL-2025-67345/): Malicious code in compact-tan-goldfish (npm) (malicious package)
- [MAL-2025-67344](https://insights.sbomify.com/MAL-2025-67344/): Malicious code in compact-tan-fowl (npm) (malicious package)
- [MAL-2025-67343](https://insights.sbomify.com/MAL-2025-67343/): Malicious code in compact-maroon-rook (npm) (malicious package)
- [MAL-2025-67342](https://insights.sbomify.com/MAL-2025-67342/): Malicious code in compact-maroon-guppy (npm) (malicious package)
- [MAL-2025-67341](https://insights.sbomify.com/MAL-2025-67341/): Malicious code in compact-indigo-alpaca (npm) (malicious package)
- [MAL-2025-67340](https://insights.sbomify.com/MAL-2025-67340/): Malicious code in compact-green-silkworm (npm) (malicious package)
- [MAL-2025-6734](https://insights.sbomify.com/MAL-2025-6734/): Malicious code in jcr-hopper (npm) (malicious package)
- [MAL-2025-67339](https://insights.sbomify.com/MAL-2025-67339/): Malicious code in compact-green-shrimp (npm) (malicious package)
- [MAL-2025-67338](https://insights.sbomify.com/MAL-2025-67338/): Malicious code in compact-blue-sturgeon (npm) (malicious package)
- [MAL-2025-67337](https://insights.sbomify.com/MAL-2025-67337/): Malicious code in compact-beige-crocodile (npm) (malicious package)
- [MAL-2025-67336](https://insights.sbomify.com/MAL-2025-67336/): Malicious code in compact-amaranth-pheasant (npm) (malicious package)
- [MAL-2025-67335](https://insights.sbomify.com/MAL-2025-67335/): Malicious code in communist-violet-constrictor (npm) (malicious package)
- [MAL-2025-67334](https://insights.sbomify.com/MAL-2025-67334/): Malicious code in communist-jade-coyote (npm) (malicious package)
- [MAL-2025-67333](https://insights.sbomify.com/MAL-2025-67333/): Malicious code in communist-emerald-barnacle (npm) (malicious package)
- [MAL-2025-67332](https://insights.sbomify.com/MAL-2025-67332/): Malicious code in common-turquoise-bat (npm) (malicious package)
- [MAL-2025-67331](https://insights.sbomify.com/MAL-2025-67331/): Malicious code in common-scarlet-gull (npm) (malicious package)
- [MAL-2025-67330](https://insights.sbomify.com/MAL-2025-67330/): Malicious code in common-red-sparrow (npm) (malicious package)
- [MAL-2025-6733](https://insights.sbomify.com/MAL-2025-6733/): Malicious code in isl-server (npm) (malicious package)
- [MAL-2025-67329](https://insights.sbomify.com/MAL-2025-67329/): Malicious code in common-plum-barracuda (npm) (malicious package)
- [MAL-2025-67328](https://insights.sbomify.com/MAL-2025-67328/): Malicious code in common-crimson-booby (npm) (malicious package)
- [MAL-2025-67327](https://insights.sbomify.com/MAL-2025-67327/): Malicious code in commercial-white-toucan (npm) (malicious package)
- [MAL-2025-67326](https://insights.sbomify.com/MAL-2025-67326/): Malicious code in commercial-silver-planarian (npm) (malicious package)
- [MAL-2025-67325](https://insights.sbomify.com/MAL-2025-67325/): Malicious code in commercial-jade-alpaca (npm) (malicious package)
- [MAL-2025-67324](https://insights.sbomify.com/MAL-2025-67324/): Malicious code in commercial-emerald-sole (npm) (malicious package)
- [MAL-2025-67323](https://insights.sbomify.com/MAL-2025-67323/): Malicious code in commercial-blush-earwig (npm) (malicious package)
- [MAL-2025-67322](https://insights.sbomify.com/MAL-2025-67322/): Malicious code in commercial-blue-tarantula (npm) (malicious package)
- [MAL-2025-67321](https://insights.sbomify.com/MAL-2025-67321/): Malicious code in commercial-black-sheep (npm) (malicious package)
- [MAL-2025-67320](https://insights.sbomify.com/MAL-2025-67320/): Malicious code in commercial-apricot-squid (npm) (malicious package)
- [MAL-2025-6732](https://insights.sbomify.com/MAL-2025-6732/): Malicious code in internal-random (npm) (malicious package)
- [MAL-2025-67319](https://insights.sbomify.com/MAL-2025-67319/): Malicious code in coming-turquoise-ape (npm) (malicious package)
- [MAL-2025-67318](https://insights.sbomify.com/MAL-2025-67318/): Malicious code in coming-indigo-swift (npm) (malicious package)
- [MAL-2025-67317](https://insights.sbomify.com/MAL-2025-67317/): Malicious code in coming-black-zebra (npm) (malicious package)
- [MAL-2025-67316](https://insights.sbomify.com/MAL-2025-67316/): Malicious code in comfortable-lime-flamingo (npm) (malicious package)
- [MAL-2025-67315](https://insights.sbomify.com/MAL-2025-67315/): Malicious code in comfortable-crimson-aardvark (npm) (malicious package)
- [MAL-2025-67314](https://insights.sbomify.com/MAL-2025-67314/): Malicious code in comfortable-blush-herring (npm) (malicious package)
- [MAL-2025-67313](https://insights.sbomify.com/MAL-2025-67313/): Malicious code in combined-yellow-dingo (npm) (malicious package)
- [MAL-2025-67312](https://insights.sbomify.com/MAL-2025-67312/): Malicious code in combined-silver-cockroach (npm) (malicious package)
- [MAL-2025-67311](https://insights.sbomify.com/MAL-2025-67311/): Malicious code in combative-sapphire-spider (npm) (malicious package)
- [MAL-2025-67310](https://insights.sbomify.com/MAL-2025-67310/): Malicious code in combative-jade-llama (npm) (malicious package)
- [MAL-2025-6731](https://insights.sbomify.com/MAL-2025-6731/): Malicious code in internal-pkg (npm) (malicious package)
- [MAL-2025-67309](https://insights.sbomify.com/MAL-2025-67309/): Malicious code in combative-coffee-tiglon (npm) (malicious package)
- [MAL-2025-67308](https://insights.sbomify.com/MAL-2025-67308/): Malicious code in colourful-white-amphibian (npm) (malicious package)
- [MAL-2025-67307](https://insights.sbomify.com/MAL-2025-67307/): Malicious code in colourful-tan-whitefish (npm) (malicious package)
- [MAL-2025-67306](https://insights.sbomify.com/MAL-2025-67306/): Malicious code in colourful-purple-ptarmigan (npm) (malicious package)
- [MAL-2025-67305](https://insights.sbomify.com/MAL-2025-67305/): Malicious code in colourful-peach-mackerel (npm) (malicious package)
- [MAL-2025-67304](https://insights.sbomify.com/MAL-2025-67304/): Malicious code in colourful-olive-lemur (npm) (malicious package)
- [MAL-2025-67303](https://insights.sbomify.com/MAL-2025-67303/): Malicious code in colourful-black-python (npm) (malicious package)
- [MAL-2025-67302](https://insights.sbomify.com/MAL-2025-67302/): Malicious code in colourful-aquamarine-leopard (npm) (malicious package)
- [MAL-2025-67301](https://insights.sbomify.com/MAL-2025-67301/): Malicious code in colourful-aquamarine-hare (npm) (malicious package)
- [MAL-2025-67300](https://insights.sbomify.com/MAL-2025-67300/): Malicious code in colourful-amber-skink (npm) (malicious package)
- [MAL-2025-6730](https://insights.sbomify.com/MAL-2025-6730/): Malicious code in internal-newrelic-config (npm) (malicious package)
- [MAL-2025-673](https://insights.sbomify.com/MAL-2025-673/): Malicious code in money-market (npm) (malicious package)
- [MAL-2025-67299](https://insights.sbomify.com/MAL-2025-67299/): Malicious code in coloured-moccasin-grasshopper (npm) (malicious package)
- [MAL-2025-67298](https://insights.sbomify.com/MAL-2025-67298/): Malicious code in coloured-jade-heron (npm) (malicious package)
- [MAL-2025-67297](https://insights.sbomify.com/MAL-2025-67297/): Malicious code in colossal-silver-squid (npm) (malicious package)
- [MAL-2025-67296](https://insights.sbomify.com/MAL-2025-67296/): Malicious code in colossal-purple-nightingale (npm) (malicious package)
- [MAL-2025-67295](https://insights.sbomify.com/MAL-2025-67295/): Malicious code in colossal-orange-coyote (npm) (malicious package)
- [MAL-2025-67294](https://insights.sbomify.com/MAL-2025-67294/): Malicious code in colossal-jade-swallow (npm) (malicious package)
- [MAL-2025-67293](https://insights.sbomify.com/MAL-2025-67293/): Malicious code in colossal-ivory-warbler (npm) (malicious package)
- [MAL-2025-67292](https://insights.sbomify.com/MAL-2025-67292/): Malicious code in colossal-indigo-mite (npm) (malicious package)
- [MAL-2025-67291](https://insights.sbomify.com/MAL-2025-67291/): Malicious code in colossal-green-ferret (npm) (malicious package)
- [MAL-2025-67290](https://insights.sbomify.com/MAL-2025-67290/): Malicious code in colossal-blue-coral (npm) (malicious package)
- [MAL-2025-6729](https://insights.sbomify.com/MAL-2025-6729/): Malicious code in internal-logger-embaby (npm) (malicious package)
- [MAL-2025-67289](https://insights.sbomify.com/MAL-2025-67289/): Malicious code in colossal-amethyst-salamander (npm) (malicious package)
- [MAL-2025-67288](https://insights.sbomify.com/MAL-2025-67288/): Malicious code in colorful-salmon-bass (npm) (malicious package)
- [MAL-2025-67287](https://insights.sbomify.com/MAL-2025-67287/): Malicious code in colorful-pink-muskox (npm) (malicious package)
- [MAL-2025-67286](https://insights.sbomify.com/MAL-2025-67286/): Malicious code in colorful-jade-limpet (npm) (malicious package)
- [MAL-2025-67285](https://insights.sbomify.com/MAL-2025-67285/): Malicious code in colorful-crimson-hare (npm) (malicious package)
- [MAL-2025-67284](https://insights.sbomify.com/MAL-2025-67284/): Malicious code in colorful-black-squirrel (npm) (malicious package)
- [MAL-2025-67283](https://insights.sbomify.com/MAL-2025-67283/): Malicious code in colonial-red-minnow (npm) (malicious package)
- [MAL-2025-67282](https://insights.sbomify.com/MAL-2025-67282/): Malicious code in colonial-plum-tortoise (npm) (malicious package)
- [MAL-2025-67281](https://insights.sbomify.com/MAL-2025-67281/): Malicious code in colonial-lime-tarsier (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/366/