# Vulnerabilities published in 2025


- [MAL-2025-67280](https://insights.sbomify.com/MAL-2025-67280/): Malicious code in colonial-indigo-tuna (npm) (malicious package)
- [MAL-2025-6728](https://insights.sbomify.com/MAL-2025-6728/): Malicious code in ifood-docusaurus-theme (npm) (malicious package)
- [MAL-2025-67279](https://insights.sbomify.com/MAL-2025-67279/): Malicious code in colonial-fuchsia-crocodile (npm) (malicious package)
- [MAL-2025-67278](https://insights.sbomify.com/MAL-2025-67278/): Malicious code in colonial-chocolate-gopher (npm) (malicious package)
- [MAL-2025-67277](https://insights.sbomify.com/MAL-2025-67277/): Malicious code in colonial-aquamarine-zebra (npm) (malicious package)
- [MAL-2025-67276](https://insights.sbomify.com/MAL-2025-67276/): Malicious code in colonial-aqua-emu (npm) (malicious package)
- [MAL-2025-67275](https://insights.sbomify.com/MAL-2025-67275/): Malicious code in colonial-amethyst-galliform (npm) (malicious package)
- [MAL-2025-67274](https://insights.sbomify.com/MAL-2025-67274/): Malicious code in collective-lime-finch (npm) (malicious package)
- [MAL-2025-67273](https://insights.sbomify.com/MAL-2025-67273/): Malicious code in collective-gray-minnow (npm) (malicious package)
- [MAL-2025-67272](https://insights.sbomify.com/MAL-2025-67272/): Malicious code in collective-black-camel (npm) (malicious package)
- [MAL-2025-67271](https://insights.sbomify.com/MAL-2025-67271/): Malicious code in collective-amethyst-pinniped (npm) (malicious package)
- [MAL-2025-67270](https://insights.sbomify.com/MAL-2025-67270/): Malicious code in cold-yellow-crab (npm) (malicious package)
- [MAL-2025-6727](https://insights.sbomify.com/MAL-2025-6727/): Malicious code in hyperion-react-native-testapp (npm) (malicious package)
- [MAL-2025-67269](https://insights.sbomify.com/MAL-2025-67269/): Malicious code in cold-salmon-zebra (npm) (malicious package)
- [MAL-2025-67268](https://insights.sbomify.com/MAL-2025-67268/): Malicious code in cold-olive-pony (npm) (malicious package)
- [MAL-2025-67267](https://insights.sbomify.com/MAL-2025-67267/): Malicious code in cold-olive-beetle (npm) (malicious package)
- [MAL-2025-67266](https://insights.sbomify.com/MAL-2025-67266/): Malicious code in cold-gray-xerinae (npm) (malicious package)
- [MAL-2025-67265](https://insights.sbomify.com/MAL-2025-67265/): Malicious code in cold-gold-lamprey (npm) (malicious package)
- [MAL-2025-67264](https://insights.sbomify.com/MAL-2025-67264/): Malicious code in cold-fuchsia-tyrannosaurus (npm) (malicious package)
- [MAL-2025-67263](https://insights.sbomify.com/MAL-2025-67263/): Malicious code in cold-aquamarine-reindeer (npm) (malicious package)
- [MAL-2025-67262](https://insights.sbomify.com/MAL-2025-67262/): Malicious code in cold-aqua-ferret (npm) (malicious package)
- [MAL-2025-67261](https://insights.sbomify.com/MAL-2025-67261/): Malicious code in coherent-peach-turtle (npm) (malicious package)
- [MAL-2025-67260](https://insights.sbomify.com/MAL-2025-67260/): Malicious code in coherent-olive-mandrill (npm) (malicious package)
- [MAL-2025-6726](https://insights.sbomify.com/MAL-2025-6726/): Malicious code in hw-transport-node-hid (npm) (malicious package)
- [MAL-2025-67259](https://insights.sbomify.com/MAL-2025-67259/): Malicious code in coherent-emerald-haddock (npm) (malicious package)
- [MAL-2025-67258](https://insights.sbomify.com/MAL-2025-67258/): Malicious code in coherent-chocolate-hoverfly (npm) (malicious package)
- [MAL-2025-67257](https://insights.sbomify.com/MAL-2025-67257/): Malicious code in coastal-tan-dog (npm) (malicious package)
- [MAL-2025-67256](https://insights.sbomify.com/MAL-2025-67256/): Malicious code in coastal-salmon-armadillo (npm) (malicious package)
- [MAL-2025-67255](https://insights.sbomify.com/MAL-2025-67255/): Malicious code in coastal-cyan-seahorse (npm) (malicious package)
- [MAL-2025-67254](https://insights.sbomify.com/MAL-2025-67254/): Malicious code in coastal-blush-fowl (npm) (malicious package)
- [MAL-2025-67253](https://insights.sbomify.com/MAL-2025-67253/): Malicious code in coastal-amethyst-snake (npm) (malicious package)
- [MAL-2025-67252](https://insights.sbomify.com/MAL-2025-67252/): Malicious code in coastal-amethyst-iguana (npm) (malicious package)
- [MAL-2025-67251](https://insights.sbomify.com/MAL-2025-67251/): Malicious code in clumsy-white-amphibian (npm) (malicious package)
- [MAL-2025-67250](https://insights.sbomify.com/MAL-2025-67250/): Malicious code in clumsy-maroon-dormouse (npm) (malicious package)
- [MAL-2025-6725](https://insights.sbomify.com/MAL-2025-6725/): Malicious code in hubot-currencies (npm) (malicious package)
- [MAL-2025-67249](https://insights.sbomify.com/MAL-2025-67249/): Malicious code in clumsy-jade-boa (npm) (malicious package)
- [MAL-2025-67248](https://insights.sbomify.com/MAL-2025-67248/): Malicious code in clumsy-coffee-alpaca (npm) (malicious package)
- [MAL-2025-67247](https://insights.sbomify.com/MAL-2025-67247/): Malicious code in clumsy-blush-slug (npm) (malicious package)
- [MAL-2025-67246](https://insights.sbomify.com/MAL-2025-67246/): Malicious code in clumsy-blue-meerkat (npm) (malicious package)
- [MAL-2025-67245](https://insights.sbomify.com/MAL-2025-67245/): Malicious code in clumsy-amaranth-grouse (npm) (malicious package)
- [MAL-2025-67244](https://insights.sbomify.com/MAL-2025-67244/): Malicious code in cloudy-yellow-harrier (npm) (malicious package)
- [MAL-2025-67243](https://insights.sbomify.com/MAL-2025-67243/): Malicious code in cloudy-maroon-pelican (npm) (malicious package)
- [MAL-2025-67242](https://insights.sbomify.com/MAL-2025-67242/): Malicious code in cloudy-ivory-wombat (npm) (malicious package)
- [MAL-2025-67241](https://insights.sbomify.com/MAL-2025-67241/): Malicious code in cloudy-amber-beetle (npm) (malicious package)
- [MAL-2025-67240](https://insights.sbomify.com/MAL-2025-67240/): Malicious code in closed-sapphire-smelt (npm) (malicious package)
- [MAL-2025-6724](https://insights.sbomify.com/MAL-2025-6724/): Malicious code in goals-summary-widget (npm) (malicious package)
- [MAL-2025-67239](https://insights.sbomify.com/MAL-2025-67239/): Malicious code in closed-purple-chinchilla (npm) (malicious package)
- [MAL-2025-67238](https://insights.sbomify.com/MAL-2025-67238/): Malicious code in closed-lavender-herring (npm) (malicious package)
- [MAL-2025-67237](https://insights.sbomify.com/MAL-2025-67237/): Malicious code in closed-lavender-baboon (npm) (malicious package)
- [MAL-2025-67236](https://insights.sbomify.com/MAL-2025-67236/): Malicious code in closed-lavender-alpaca (npm) (malicious package)
- [MAL-2025-67235](https://insights.sbomify.com/MAL-2025-67235/): Malicious code in closed-blush-parrot (npm) (malicious package)
- [MAL-2025-67234](https://insights.sbomify.com/MAL-2025-67234/): Malicious code in close-sapphire-bee (npm) (malicious package)
- [MAL-2025-67233](https://insights.sbomify.com/MAL-2025-67233/): Malicious code in close-red-barracuda (npm) (malicious package)
- [MAL-2025-67232](https://insights.sbomify.com/MAL-2025-67232/): Malicious code in close-maroon-grouse (npm) (malicious package)
- [MAL-2025-67231](https://insights.sbomify.com/MAL-2025-67231/): Malicious code in close-aqua-impala (npm) (malicious package)
- [MAL-2025-67230](https://insights.sbomify.com/MAL-2025-67230/): Malicious code in close-apricot-flamingo (npm) (malicious package)
- [MAL-2025-6723](https://insights.sbomify.com/MAL-2025-6723/): Malicious code in fulfillment-auth-widget (npm) (malicious package)
- [MAL-2025-67229](https://insights.sbomify.com/MAL-2025-67229/): Malicious code in clinical-yellow-pig (npm) (malicious package)
- [MAL-2025-67228](https://insights.sbomify.com/MAL-2025-67228/): Malicious code in clinical-rose-canidae (npm) (malicious package)
- [MAL-2025-67227](https://insights.sbomify.com/MAL-2025-67227/): Malicious code in clinical-purple-anglerfish (npm) (malicious package)
- [MAL-2025-67226](https://insights.sbomify.com/MAL-2025-67226/): Malicious code in clinical-amethyst-egret (npm) (malicious package)
- [MAL-2025-67225](https://insights.sbomify.com/MAL-2025-67225/): Malicious code in clever-orange-chinchilla (npm) (malicious package)
- [MAL-2025-67224](https://insights.sbomify.com/MAL-2025-67224/): Malicious code in clever-crimson-iguana (npm) (malicious package)
- [MAL-2025-67223](https://insights.sbomify.com/MAL-2025-67223/): Malicious code in clever-coral-guan (npm) (malicious package)
- [MAL-2025-67222](https://insights.sbomify.com/MAL-2025-67222/): Malicious code in cleitczx (npm) (malicious package)
- [MAL-2025-67221](https://insights.sbomify.com/MAL-2025-67221/): Malicious code in clear-turquoise-partridge (npm) (malicious package)
- [MAL-2025-67220](https://insights.sbomify.com/MAL-2025-67220/): Malicious code in clear-green-catshark (npm) (malicious package)
- [MAL-2025-6722](https://insights.sbomify.com/MAL-2025-6722/): Malicious code in external-pkg (npm) (malicious package)
- [MAL-2025-67219](https://insights.sbomify.com/MAL-2025-67219/): Malicious code in clear-crimson-leech (npm) (malicious package)
- [MAL-2025-67218](https://insights.sbomify.com/MAL-2025-67218/): Malicious code in clear-amethyst-kite (npm) (malicious package)
- [MAL-2025-67217](https://insights.sbomify.com/MAL-2025-67217/): Malicious code in clean-plum-canid (npm) (malicious package)
- [MAL-2025-67216](https://insights.sbomify.com/MAL-2025-67216/): Malicious code in clean-ivory-chicken (npm) (malicious package)
- [MAL-2025-67215](https://insights.sbomify.com/MAL-2025-67215/): Malicious code in clean-coral-egret (npm) (malicious package)
- [MAL-2025-67214](https://insights.sbomify.com/MAL-2025-67214/): Malicious code in clean-beige-rabbit (npm) (malicious package)
- [MAL-2025-67213](https://insights.sbomify.com/MAL-2025-67213/): Malicious code in clean-apricot-sole (npm) (malicious package)
- [MAL-2025-67212](https://insights.sbomify.com/MAL-2025-67212/): Malicious code in clean-apricot-bee (npm) (malicious package)
- [MAL-2025-67211](https://insights.sbomify.com/MAL-2025-67211/): Malicious code in classical-teal-porpoise (npm) (malicious package)
- [MAL-2025-67210](https://insights.sbomify.com/MAL-2025-67210/): Malicious code in classical-blush-flyingfish (npm) (malicious package)
- [MAL-2025-6721](https://insights.sbomify.com/MAL-2025-6721/): Malicious code in events-web1 (npm) (malicious package)
- [MAL-2025-67209](https://insights.sbomify.com/MAL-2025-67209/): Malicious code in classical-aquamarine-whitefish (npm) (malicious package)
- [MAL-2025-67208](https://insights.sbomify.com/MAL-2025-67208/): Malicious code in civilian-sapphire-leech (npm) (malicious package)
- [MAL-2025-67207](https://insights.sbomify.com/MAL-2025-67207/): Malicious code in civilian-chocolate-takin (npm) (malicious package)
- [MAL-2025-67206](https://insights.sbomify.com/MAL-2025-67206/): Malicious code in civilian-bronze-kangaroo (npm) (malicious package)
- [MAL-2025-67205](https://insights.sbomify.com/MAL-2025-67205/): Malicious code in civilian-amaranth-heron (npm) (malicious package)
- [MAL-2025-67204](https://insights.sbomify.com/MAL-2025-67204/): Malicious code in civil-moccasin-bandicoot (npm) (malicious package)
- [MAL-2025-67203](https://insights.sbomify.com/MAL-2025-67203/): Malicious code in civil-cyan-porcupine (npm) (malicious package)
- [MAL-2025-67202](https://insights.sbomify.com/MAL-2025-67202/): Malicious code in civil-copper-earwig (npm) (malicious package)
- [MAL-2025-67201](https://insights.sbomify.com/MAL-2025-67201/): Malicious code in civil-apricot-possum (npm) (malicious package)
- [MAL-2025-67200](https://insights.sbomify.com/MAL-2025-67200/): Malicious code in civil-apricot-marmot (npm) (malicious package)
- [MAL-2025-6720](https://insights.sbomify.com/MAL-2025-6720/): Malicious code in ethical-ping-example (npm) (malicious package)
- [MAL-2025-672](https://insights.sbomify.com/MAL-2025-672/): Malicious code in media_kit_native_event_loop (npm) (malicious package)
- [MAL-2025-67199](https://insights.sbomify.com/MAL-2025-67199/): Malicious code in civic-brown-wasp (npm) (malicious package)
- [MAL-2025-67198](https://insights.sbomify.com/MAL-2025-67198/): Malicious code in circular-yellow-marmot (npm) (malicious package)
- [MAL-2025-67197](https://insights.sbomify.com/MAL-2025-67197/): Malicious code in circular-silver-cockroach (npm) (malicious package)
- [MAL-2025-67196](https://insights.sbomify.com/MAL-2025-67196/): Malicious code in circular-orange-butterfly (npm) (malicious package)
- [MAL-2025-67195](https://insights.sbomify.com/MAL-2025-67195/): Malicious code in circular-coral-urial (npm) (malicious package)
- [MAL-2025-67194](https://insights.sbomify.com/MAL-2025-67194/): Malicious code in circular-copper-clam (npm) (malicious package)
- [MAL-2025-67193](https://insights.sbomify.com/MAL-2025-67193/): Malicious code in ciphersage (npm) (malicious package)
- [MAL-2025-67192](https://insights.sbomify.com/MAL-2025-67192/): Malicious code in chubby-moccasin-clam (npm) (malicious package)
- [MAL-2025-67191](https://insights.sbomify.com/MAL-2025-67191/): Malicious code in chubby-indigo-hoverfly (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/367/