# Vulnerabilities published in 2025 - [MAL-2025-97125](https://insights.sbomify.com/MAL-2025-97125/): Malicious code in unexpected_catshark_z3n (npm) (malicious package) - [MAL-2025-97124](https://insights.sbomify.com/MAL-2025-97124/): Malicious code in unexpected_bandicoot_z3n (npm) (malicious package) - [MAL-2025-97123](https://insights.sbomify.com/MAL-2025-97123/): Malicious code in uneven_leopard_z3n (npm) (malicious package) - [MAL-2025-97122](https://insights.sbomify.com/MAL-2025-97122/): Malicious code in uneven_gull_z3n (npm) (malicious package) - [MAL-2025-97121](https://insights.sbomify.com/MAL-2025-97121/): Malicious code in uneven_guan_z3n (npm) (malicious package) - [MAL-2025-97120](https://insights.sbomify.com/MAL-2025-97120/): Malicious code in uneven_echidna_z3n (npm) (malicious package) - [MAL-2025-9712](https://insights.sbomify.com/MAL-2025-9712/): Malicious code in @zalastax/nolb-_- (npm) (malicious package) - [MAL-2025-97119](https://insights.sbomify.com/MAL-2025-97119/): Malicious code in unemployed_planarian_z3n (npm) (malicious package) - [MAL-2025-97118](https://insights.sbomify.com/MAL-2025-97118/): Malicious code in unemployed_octopus_z3n (npm) (malicious package) - [MAL-2025-97117](https://insights.sbomify.com/MAL-2025-97117/): Malicious code in unemployed_macaw_z3n (npm) (malicious package) - [MAL-2025-97116](https://insights.sbomify.com/MAL-2025-97116/): Malicious code in underlying_unicorn_z3n (npm) (malicious package) - [MAL-2025-97115](https://insights.sbomify.com/MAL-2025-97115/): Malicious code in underlying_turtle_z3n (npm) (malicious package) - [MAL-2025-97114](https://insights.sbomify.com/MAL-2025-97114/): Malicious code in underlying_stingray_z3n (npm) (malicious package) - [MAL-2025-97113](https://insights.sbomify.com/MAL-2025-97113/): Malicious code in underlying_piranha_z3n (npm) (malicious package) - [MAL-2025-97112](https://insights.sbomify.com/MAL-2025-97112/): Malicious code in underlying_lemur_z3n (npm) (malicious package) - [MAL-2025-97111](https://insights.sbomify.com/MAL-2025-97111/): Malicious code in underlying_koi_z3n (npm) (malicious package) - [MAL-2025-97110](https://insights.sbomify.com/MAL-2025-97110/): Malicious code in underground_wildebeest_z3n (npm) (malicious package) - [MAL-2025-9711](https://insights.sbomify.com/MAL-2025-9711/): Malicious code in @youla-web/im (npm) (malicious package) - [MAL-2025-97109](https://insights.sbomify.com/MAL-2025-97109/): Malicious code in underground_snail_z3n (npm) (malicious package) - [MAL-2025-97108](https://insights.sbomify.com/MAL-2025-97108/): Malicious code in underground_pony_requirement (npm) (malicious package) - [MAL-2025-97107](https://insights.sbomify.com/MAL-2025-97107/): Malicious code in underground_mammal_z3n (npm) (malicious package) - [MAL-2025-97106](https://insights.sbomify.com/MAL-2025-97106/): Malicious code in underground_eagle_z3n (npm) (malicious package) - [MAL-2025-97105](https://insights.sbomify.com/MAL-2025-97105/): Malicious code in unconscious_wren_z3n (npm) (malicious package) - [MAL-2025-97104](https://insights.sbomify.com/MAL-2025-97104/): Malicious code in unconscious_whitefish_z3n (npm) (malicious package) - [MAL-2025-97103](https://insights.sbomify.com/MAL-2025-97103/): Malicious code in unconscious_turtle_z3n (npm) (malicious package) - [MAL-2025-97102](https://insights.sbomify.com/MAL-2025-97102/): Malicious code in unconscious_moose_z3n (npm) (malicious package) - [MAL-2025-97101](https://insights.sbomify.com/MAL-2025-97101/): Malicious code in unconscious_goat_z3n (npm) (malicious package) - [MAL-2025-97100](https://insights.sbomify.com/MAL-2025-97100/): Malicious code in unconscious_earthworm_z3n (npm) (malicious package) - [MAL-2025-9710](https://insights.sbomify.com/MAL-2025-9710/): Malicious code in @yotpo-platform-packages/platform-bridge (npm) (malicious package) - [MAL-2025-97099](https://insights.sbomify.com/MAL-2025-97099/): Malicious code in unconscious_crab_z3n (npm) (malicious package) - [MAL-2025-97098](https://insights.sbomify.com/MAL-2025-97098/): Malicious code in uncomfortable_vicuna_z3n (npm) (malicious package) - [MAL-2025-97097](https://insights.sbomify.com/MAL-2025-97097/): Malicious code in uncomfortable_tarsier_z3n (npm) (malicious package) - [MAL-2025-97096](https://insights.sbomify.com/MAL-2025-97096/): Malicious code in uncomfortable_meadowlark_z3n (npm) (malicious package) - [MAL-2025-97095](https://insights.sbomify.com/MAL-2025-97095/): Malicious code in uncertain_wildfowl_z3n (npm) (malicious package) - [MAL-2025-97094](https://insights.sbomify.com/MAL-2025-97094/): Malicious code in uncertain_marten_z3n (npm) (malicious package) - [MAL-2025-97093](https://insights.sbomify.com/MAL-2025-97093/): Malicious code in uncertain_chicken_z3n (npm) (malicious package) - [MAL-2025-97092](https://insights.sbomify.com/MAL-2025-97092/): Malicious code in unaware_ostrich_requirement (npm) (malicious package) - [MAL-2025-97091](https://insights.sbomify.com/MAL-2025-97091/): Malicious code in unaware_loon_z3n (npm) (malicious package) - [MAL-2025-97090](https://insights.sbomify.com/MAL-2025-97090/): Malicious code in unaware_bedbug_z3n (npm) (malicious package) - [MAL-2025-9709](https://insights.sbomify.com/MAL-2025-9709/): Malicious code in @womorg/totam-eum-ipsum (npm) (malicious package) - [MAL-2025-97089](https://insights.sbomify.com/MAL-2025-97089/): Malicious code in unacceptable_snake_z3n (npm) (malicious package) - [MAL-2025-97088](https://insights.sbomify.com/MAL-2025-97088/): Malicious code in unacceptable_planarian_z3n (npm) (malicious package) - [MAL-2025-97087](https://insights.sbomify.com/MAL-2025-97087/): Malicious code in unable_penguin_requirement (npm) (malicious package) - [MAL-2025-97086](https://insights.sbomify.com/MAL-2025-97086/): Malicious code in unable_meadowlark_z3n (npm) (malicious package) - [MAL-2025-97085](https://insights.sbomify.com/MAL-2025-97085/): Malicious code in unable_fly_z3n (npm) (malicious package) - [MAL-2025-97084](https://insights.sbomify.com/MAL-2025-97084/): Malicious code in unable_bee_z3n (npm) (malicious package) - [MAL-2025-97083](https://insights.sbomify.com/MAL-2025-97083/): Malicious code in unable_aardwolf_z3n (npm) (malicious package) - [MAL-2025-97082](https://insights.sbomify.com/MAL-2025-97082/): Malicious code in unable-copper-ocelot (npm) (malicious package) - [MAL-2025-97081](https://insights.sbomify.com/MAL-2025-97081/): Malicious code in ultimate_stingray_z3n (npm) (malicious package) - [MAL-2025-97080](https://insights.sbomify.com/MAL-2025-97080/): Malicious code in ultimate_orca_z3n (npm) (malicious package) - [MAL-2025-9708](https://insights.sbomify.com/MAL-2025-9708/): Malicious code in @womorg/temporibus-corporis-omnis (npm) (malicious package) - [MAL-2025-97079](https://insights.sbomify.com/MAL-2025-97079/): Malicious code in ultimate_chickadee_z3n (npm) (malicious package) - [MAL-2025-97078](https://insights.sbomify.com/MAL-2025-97078/): Malicious code in ultimate_bobcat_z3n (npm) (malicious package) - [MAL-2025-97077](https://insights.sbomify.com/MAL-2025-97077/): Malicious code in ugly_mosquito_z3n (npm) (malicious package) - [MAL-2025-97076](https://insights.sbomify.com/MAL-2025-97076/): Malicious code in ugly_magpie_z3n (npm) (malicious package) - [MAL-2025-97075](https://insights.sbomify.com/MAL-2025-97075/): Malicious code in ugly_locust_z3n (npm) (malicious package) - [MAL-2025-97074](https://insights.sbomify.com/MAL-2025-97074/): Malicious code in ugly_lark_z3n (npm) (malicious package) - [MAL-2025-97073](https://insights.sbomify.com/MAL-2025-97073/): Malicious code in ugly_jellyfish_z3n (npm) (malicious package) - [MAL-2025-97072](https://insights.sbomify.com/MAL-2025-97072/): Malicious code in ugly_bee_z3n (npm) (malicious package) - [MAL-2025-97071](https://insights.sbomify.com/MAL-2025-97071/): Malicious code in ugliest_takin_requirement (npm) (malicious package) - [MAL-2025-97070](https://insights.sbomify.com/MAL-2025-97070/): Malicious code in ugliest_peafowl_z3n (npm) (malicious package) - [MAL-2025-9707](https://insights.sbomify.com/MAL-2025-9707/): Malicious code in @womorg/studiou (npm) (malicious package) - [MAL-2025-97069](https://insights.sbomify.com/MAL-2025-97069/): Malicious code in ugliest_constrictor_z3n (npm) (malicious package) - [MAL-2025-97068](https://insights.sbomify.com/MAL-2025-97068/): Malicious code in ugliest_bonobo_z3n (npm) (malicious package) - [MAL-2025-97067](https://insights.sbomify.com/MAL-2025-97067/): Malicious code in typical_rabbit_z3n (npm) (malicious package) - [MAL-2025-97066](https://insights.sbomify.com/MAL-2025-97066/): Malicious code in typical_flyingfish_z3n (npm) (malicious package) - [MAL-2025-97065](https://insights.sbomify.com/MAL-2025-97065/): Malicious code in typical_deer_z3n (npm) (malicious package) - [MAL-2025-97064](https://insights.sbomify.com/MAL-2025-97064/): Malicious code in troubled_xerinae_z3n (npm) (malicious package) - [MAL-2025-97063](https://insights.sbomify.com/MAL-2025-97063/): Malicious code in troubled_squid_z3n (npm) (malicious package) - [MAL-2025-97062](https://insights.sbomify.com/MAL-2025-97062/): Malicious code in troubled_seahorse_z3n (npm) (malicious package) - [MAL-2025-97061](https://insights.sbomify.com/MAL-2025-97061/): Malicious code in troubled_hippopotamus_z3n (npm) (malicious package) - [MAL-2025-97060](https://insights.sbomify.com/MAL-2025-97060/): Malicious code in troubled_crawdad_z3n (npm) (malicious package) - [MAL-2025-9706](https://insights.sbomify.com/MAL-2025-9706/): Malicious code in @womorg/similique-illo-dolorem (npm) (malicious package) - [MAL-2025-97059](https://insights.sbomify.com/MAL-2025-97059/): Malicious code in troubled_bandicoot_z3n (npm) (malicious package) - [MAL-2025-97058](https://insights.sbomify.com/MAL-2025-97058/): Malicious code in tropical_roundworm_z3n (npm) (malicious package) - [MAL-2025-97057](https://insights.sbomify.com/MAL-2025-97057/): Malicious code in tropical_mandrill_z3n (npm) (malicious package) - [MAL-2025-97056](https://insights.sbomify.com/MAL-2025-97056/): Malicious code in tropical_bass_z3n (npm) (malicious package) - [MAL-2025-97055](https://insights.sbomify.com/MAL-2025-97055/): Malicious code in tropical_baboon_z3n (npm) (malicious package) - [MAL-2025-97054](https://insights.sbomify.com/MAL-2025-97054/): Malicious code in tricky_crayfish_z3n (npm) (malicious package) - [MAL-2025-97053](https://insights.sbomify.com/MAL-2025-97053/): Malicious code in tremendous_rook_z3n (npm) (malicious package) - [MAL-2025-97052](https://insights.sbomify.com/MAL-2025-97052/): Malicious code in tremendous_lemur_z3n (npm) (malicious package) - [MAL-2025-97051](https://insights.sbomify.com/MAL-2025-97051/): Malicious code in tragic_unicorn_z3n (npm) (malicious package) - [MAL-2025-97050](https://insights.sbomify.com/MAL-2025-97050/): Malicious code in tragic_cobra_z3n (npm) (malicious package) - [MAL-2025-9705](https://insights.sbomify.com/MAL-2025-9705/): Malicious code in @womorg/shiny-engine (npm) (malicious package) - [MAL-2025-97049](https://insights.sbomify.com/MAL-2025-97049/): Malicious code in traditional_vicuna_z3n (npm) (malicious package) - [MAL-2025-97048](https://insights.sbomify.com/MAL-2025-97048/): Malicious code in traditional_muskox_z3n (npm) (malicious package) - [MAL-2025-97047](https://insights.sbomify.com/MAL-2025-97047/): Malicious code in traditional_lizard_z3n (npm) (malicious package) - [MAL-2025-97046](https://insights.sbomify.com/MAL-2025-97046/): Malicious code in traditional_finch_z3n (npm) (malicious package) - [MAL-2025-97045](https://insights.sbomify.com/MAL-2025-97045/): Malicious code in toxic_whitefish_requirement (npm) (malicious package) - [MAL-2025-97044](https://insights.sbomify.com/MAL-2025-97044/): Malicious code in toxic_trout_z3n (npm) (malicious package) - [MAL-2025-97043](https://insights.sbomify.com/MAL-2025-97043/): Malicious code in toxic_sailfish_z3n (npm) (malicious package) - [MAL-2025-97042](https://insights.sbomify.com/MAL-2025-97042/): Malicious code in toxic_duck_z3n (npm) (malicious package) - [MAL-2025-97041](https://insights.sbomify.com/MAL-2025-97041/): Malicious code in toxic_cuckoo_z3n (npm) (malicious package) - [MAL-2025-97040](https://insights.sbomify.com/MAL-2025-97040/): Malicious code in tough_wombat_z3n (npm) (malicious package) - [MAL-2025-9704](https://insights.sbomify.com/MAL-2025-9704/): Malicious code in @womorg/sed-nihil-quos (npm) (malicious package) - [MAL-2025-97039](https://insights.sbomify.com/MAL-2025-97039/): Malicious code in tough_toucan_z3n (npm) (malicious package) - [MAL-2025-97038](https://insights.sbomify.com/MAL-2025-97038/): Malicious code in tough_tarsier_z3n (npm) (malicious package) - [MAL-2025-97037](https://insights.sbomify.com/MAL-2025-97037/): Malicious code in tough_louse_z3n (npm) (malicious package) - [MAL-2025-97036](https://insights.sbomify.com/MAL-2025-97036/): Malicious code in tough_krill_z3n (npm) (malicious package) - [MAL-2025-97035](https://insights.sbomify.com/MAL-2025-97035/): Malicious code in total_seahorse_z3n (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/37/