# Vulnerabilities published in 2025 - [MAL-2025-66920](https://insights.sbomify.com/MAL-2025-66920/): Malicious code in bad-orange-roundworm (npm) (malicious package) - [MAL-2025-6692](https://insights.sbomify.com/MAL-2025-6692/): Malicious code in aiohappyeyeballs (npm) (malicious package) - [MAL-2025-66919](https://insights.sbomify.com/MAL-2025-66919/): Malicious code in back-tomato-dog (npm) (malicious package) - [MAL-2025-66918](https://insights.sbomify.com/MAL-2025-66918/): Malicious code in back-red-rat (npm) (malicious package) - [MAL-2025-66917](https://insights.sbomify.com/MAL-2025-66917/): Malicious code in back-lavender-trout (npm) (malicious package) - [MAL-2025-66916](https://insights.sbomify.com/MAL-2025-66916/): Malicious code in back-harlequin-swan (npm) (malicious package) - [MAL-2025-66915](https://insights.sbomify.com/MAL-2025-66915/): Malicious code in back-coffee-reptile (npm) (malicious package) - [MAL-2025-66914](https://insights.sbomify.com/MAL-2025-66914/): Malicious code in az277076 (npm) (malicious package) - [MAL-2025-66913](https://insights.sbomify.com/MAL-2025-66913/): Malicious code in awkward-red-xerinae (npm) (malicious package) - [MAL-2025-66912](https://insights.sbomify.com/MAL-2025-66912/): Malicious code in awkward-olive-alpaca (npm) (malicious package) - [MAL-2025-66911](https://insights.sbomify.com/MAL-2025-66911/): Malicious code in awkward-gold-dormouse (npm) (malicious package) - [MAL-2025-66910](https://insights.sbomify.com/MAL-2025-66910/): Malicious code in awkward-cyan-booby (npm) (malicious package) - [MAL-2025-6691](https://insights.sbomify.com/MAL-2025-6691/): Malicious code in actions-set-env-vars (npm) (malicious package) - [MAL-2025-66909](https://insights.sbomify.com/MAL-2025-66909/): Malicious code in awkward-amaranth-parrot (npm) (malicious package) - [MAL-2025-66908](https://insights.sbomify.com/MAL-2025-66908/): Malicious code in awful-tomato-albatross (npm) (malicious package) - [MAL-2025-66907](https://insights.sbomify.com/MAL-2025-66907/): Malicious code in awful-ivory-chimpanzee (npm) (malicious package) - [MAL-2025-66906](https://insights.sbomify.com/MAL-2025-66906/): Malicious code in awful-cyan-mackerel (npm) (malicious package) - [MAL-2025-66905](https://insights.sbomify.com/MAL-2025-66905/): Malicious code in aware-green-wren (npm) (malicious package) - [MAL-2025-66904](https://insights.sbomify.com/MAL-2025-66904/): Malicious code in aware-coral-swift (npm) (malicious package) - [MAL-2025-66903](https://insights.sbomify.com/MAL-2025-66903/): Malicious code in aware-coffee-sparrow (npm) (malicious package) - [MAL-2025-66902](https://insights.sbomify.com/MAL-2025-66902/): Malicious code in aware-aqua-louse (npm) (malicious package) - [MAL-2025-66901](https://insights.sbomify.com/MAL-2025-66901/): Malicious code in awake-yellow-kingfisher (npm) (malicious package) - [MAL-2025-66900](https://insights.sbomify.com/MAL-2025-66900/): Malicious code in awake-violet-snipe (npm) (malicious package) - [MAL-2025-6690](https://insights.sbomify.com/MAL-2025-6690/): Malicious code in ace-widgets (npm) (malicious package) - [MAL-2025-669](https://insights.sbomify.com/MAL-2025-669/): Malicious code in kibana-release-notes (npm) (malicious package) - [MAL-2025-66899](https://insights.sbomify.com/MAL-2025-66899/): Malicious code in awake-scarlet-termite (npm) (malicious package) - [MAL-2025-66898](https://insights.sbomify.com/MAL-2025-66898/): Malicious code in awake-plum-slug (npm) (malicious package) - [MAL-2025-66897](https://insights.sbomify.com/MAL-2025-66897/): Malicious code in awake-orange-dormouse (npm) (malicious package) - [MAL-2025-66896](https://insights.sbomify.com/MAL-2025-66896/): Malicious code in awake-olive-bonobo (npm) (malicious package) - [MAL-2025-66895](https://insights.sbomify.com/MAL-2025-66895/): Malicious code in awake-moccasin-chinchilla (npm) (malicious package) - [MAL-2025-66894](https://insights.sbomify.com/MAL-2025-66894/): Malicious code in average-turquoise-pony (npm) (malicious package) - [MAL-2025-66893](https://insights.sbomify.com/MAL-2025-66893/): Malicious code in average-orange-dingo (npm) (malicious package) - [MAL-2025-66892](https://insights.sbomify.com/MAL-2025-66892/): Malicious code in average-olive-warbler (npm) (malicious package) - [MAL-2025-66891](https://insights.sbomify.com/MAL-2025-66891/): Malicious code in average-maroon-wildfowl (npm) (malicious package) - [MAL-2025-66890](https://insights.sbomify.com/MAL-2025-66890/): Malicious code in average-magenta-marmoset (npm) (malicious package) - [MAL-2025-6689](https://insights.sbomify.com/MAL-2025-6689/): Malicious code in account-feapp-commons (npm) (malicious package) - [MAL-2025-66889](https://insights.sbomify.com/MAL-2025-66889/): Malicious code in available-moccasin-gorilla (npm) (malicious package) - [MAL-2025-66888](https://insights.sbomify.com/MAL-2025-66888/): Malicious code in available-lavender-pheasant (npm) (malicious package) - [MAL-2025-66887](https://insights.sbomify.com/MAL-2025-66887/): Malicious code in available-chocolate-blackbird (npm) (malicious package) - [MAL-2025-66886](https://insights.sbomify.com/MAL-2025-66886/): Malicious code in autonomous-turquoise-otter (npm) (malicious package) - [MAL-2025-66885](https://insights.sbomify.com/MAL-2025-66885/): Malicious code in autonomous-ivory-hippopotamus (npm) (malicious package) - [MAL-2025-66884](https://insights.sbomify.com/MAL-2025-66884/): Malicious code in autonomous-copper-catfish (npm) (malicious package) - [MAL-2025-66883](https://insights.sbomify.com/MAL-2025-66883/): Malicious code in autonomous-coffee-termite (npm) (malicious package) - [MAL-2025-66882](https://insights.sbomify.com/MAL-2025-66882/): Malicious code in automatic-scarlet-narwhal (npm) (malicious package) - [MAL-2025-66881](https://insights.sbomify.com/MAL-2025-66881/): Malicious code in automatic-plum-vole (npm) (malicious package) - [MAL-2025-66880](https://insights.sbomify.com/MAL-2025-66880/): Malicious code in automatic-gray-skunk (npm) (malicious package) - [MAL-2025-6688](https://insights.sbomify.com/MAL-2025-6688/): Malicious code in @sangith/eslint-config (npm) (malicious package) - [MAL-2025-66879](https://insights.sbomify.com/MAL-2025-66879/): Malicious code in automatic-gold-tyrannosaurus (npm) (malicious package) - [MAL-2025-66878](https://insights.sbomify.com/MAL-2025-66878/): Malicious code in automatic-emerald-firefly (npm) (malicious package) - [MAL-2025-66877](https://insights.sbomify.com/MAL-2025-66877/): Malicious code in automatic-crimson-gopher (npm) (malicious package) - [MAL-2025-66876](https://insights.sbomify.com/MAL-2025-66876/): Malicious code in automatic-copper-penguin (npm) (malicious package) - [MAL-2025-66875](https://insights.sbomify.com/MAL-2025-66875/): Malicious code in automatic-brown-magpie (npm) (malicious package) - [MAL-2025-66874](https://insights.sbomify.com/MAL-2025-66874/): Malicious code in automatic-azure-python (npm) (malicious package) - [MAL-2025-66873](https://insights.sbomify.com/MAL-2025-66873/): Malicious code in attractive-violet-salamander (npm) (malicious package) - [MAL-2025-66872](https://insights.sbomify.com/MAL-2025-66872/): Malicious code in attractive-tan-landfowl (npm) (malicious package) - [MAL-2025-66871](https://insights.sbomify.com/MAL-2025-66871/): Malicious code in attractive-sapphire-vicuna (npm) (malicious package) - [MAL-2025-66870](https://insights.sbomify.com/MAL-2025-66870/): Malicious code in attractive-magenta-octopus (npm) (malicious package) - [MAL-2025-6687](https://insights.sbomify.com/MAL-2025-6687/): Malicious code in @hotandcold/classic-webview (npm) (malicious package) - [MAL-2025-66869](https://insights.sbomify.com/MAL-2025-66869/): Malicious code in atomic-scarlet-bug (npm) (malicious package) - [MAL-2025-66868](https://insights.sbomify.com/MAL-2025-66868/): Malicious code in atomic-emerald-snail (npm) (malicious package) - [MAL-2025-66867](https://insights.sbomify.com/MAL-2025-66867/): Malicious code in atomic-coral-marmot (npm) (malicious package) - [MAL-2025-66866](https://insights.sbomify.com/MAL-2025-66866/): Malicious code in astralamber (npm) (malicious package) - [MAL-2025-66865](https://insights.sbomify.com/MAL-2025-66865/): Malicious code in associated-purple-prawn (npm) (malicious package) - [MAL-2025-66864](https://insights.sbomify.com/MAL-2025-66864/): Malicious code in associated-black-mammal (npm) (malicious package) - [MAL-2025-66863](https://insights.sbomify.com/MAL-2025-66863/): Malicious code in assistant-orange-albatross (npm) (malicious package) - [MAL-2025-66862](https://insights.sbomify.com/MAL-2025-66862/): Malicious code in assistant-gold-mastodon (npm) (malicious package) - [MAL-2025-66861](https://insights.sbomify.com/MAL-2025-66861/): Malicious code in assistant-blush-wombat (npm) (malicious package) - [MAL-2025-66860](https://insights.sbomify.com/MAL-2025-66860/): Malicious code in assistant-apricot-frog (npm) (malicious package) - [MAL-2025-6686](https://insights.sbomify.com/MAL-2025-6686/): Malicious code in @cwlib/core (npm) (malicious package) - [MAL-2025-66859](https://insights.sbomify.com/MAL-2025-66859/): Malicious code in asleep-tomato-urial (npm) (malicious package) - [MAL-2025-66858](https://insights.sbomify.com/MAL-2025-66858/): Malicious code in asleep-cyan-cougar (npm) (malicious package) - [MAL-2025-66857](https://insights.sbomify.com/MAL-2025-66857/): Malicious code in asleep-amber-planarian (npm) (malicious package) - [MAL-2025-66856](https://insights.sbomify.com/MAL-2025-66856/): Malicious code in asleep-amber-fowl (npm) (malicious package) - [MAL-2025-66855](https://insights.sbomify.com/MAL-2025-66855/): Malicious code in ashamed-yellow-butterfly (npm) (malicious package) - [MAL-2025-66854](https://insights.sbomify.com/MAL-2025-66854/): Malicious code in ashamed-peach-moose (npm) (malicious package) - [MAL-2025-66853](https://insights.sbomify.com/MAL-2025-66853/): Malicious code in ashamed-jade-guppy (npm) (malicious package) - [MAL-2025-66852](https://insights.sbomify.com/MAL-2025-66852/): Malicious code in ashamed-harlequin-guan (npm) (malicious package) - [MAL-2025-66851](https://insights.sbomify.com/MAL-2025-66851/): Malicious code in ashamed-crimson-hare (npm) (malicious package) - [MAL-2025-66850](https://insights.sbomify.com/MAL-2025-66850/): Malicious code in artistic-white-vole (npm) (malicious package) - [MAL-2025-6685](https://insights.sbomify.com/MAL-2025-6685/): Malicious code in @azet/api (npm) (malicious package) - [MAL-2025-66849](https://insights.sbomify.com/MAL-2025-66849/): Malicious code in artistic-orange-harrier (npm) (malicious package) - [MAL-2025-66848](https://insights.sbomify.com/MAL-2025-66848/): Malicious code in artistic-moccasin-tarantula (npm) (malicious package) - [MAL-2025-66847](https://insights.sbomify.com/MAL-2025-66847/): Malicious code in artistic-copper-sturgeon (npm) (malicious package) - [MAL-2025-66846](https://insights.sbomify.com/MAL-2025-66846/): Malicious code in artificial-purple-puffin (npm) (malicious package) - [MAL-2025-66845](https://insights.sbomify.com/MAL-2025-66845/): Malicious code in artificial-purple-hummingbird (npm) (malicious package) - [MAL-2025-66844](https://insights.sbomify.com/MAL-2025-66844/): Malicious code in artificial-pink-lemming (npm) (malicious package) - [MAL-2025-66843](https://insights.sbomify.com/MAL-2025-66843/): Malicious code in artificial-gray-krill (npm) (malicious package) - [MAL-2025-66842](https://insights.sbomify.com/MAL-2025-66842/): Malicious code in arrogant-yellow-kangaroo (npm) (malicious package) - [MAL-2025-66841](https://insights.sbomify.com/MAL-2025-66841/): Malicious code in arrogant-yellow-bug (npm) (malicious package) - [MAL-2025-66840](https://insights.sbomify.com/MAL-2025-66840/): Malicious code in arrogant-plum-goldfish (npm) (malicious package) - [MAL-2025-6684](https://insights.sbomify.com/MAL-2025-6684/): Malicious code in @0xme5war/apicli (npm) (malicious package) - [MAL-2025-66839](https://insights.sbomify.com/MAL-2025-66839/): Malicious code in arrogant-fuchsia-smelt (npm) (malicious package) - [MAL-2025-66838](https://insights.sbomify.com/MAL-2025-66838/): Malicious code in arrogant-blush-shark (npm) (malicious package) - [MAL-2025-66837](https://insights.sbomify.com/MAL-2025-66837/): Malicious code in arnecx (npm) (malicious package) - [MAL-2025-66836](https://insights.sbomify.com/MAL-2025-66836/): Malicious code in armed-lime-silverfish (npm) (malicious package) - [MAL-2025-66835](https://insights.sbomify.com/MAL-2025-66835/): Malicious code in armed-copper-marmoset (npm) (malicious package) - [MAL-2025-66834](https://insights.sbomify.com/MAL-2025-66834/): Malicious code in armed-brown-loon (npm) (malicious package) - [MAL-2025-66833](https://insights.sbomify.com/MAL-2025-66833/): Malicious code in architectural-violet-wombat (npm) (malicious package) - [MAL-2025-66832](https://insights.sbomify.com/MAL-2025-66832/): Malicious code in architectural-lavender-coral (npm) (malicious package) - [MAL-2025-66831](https://insights.sbomify.com/MAL-2025-66831/): Malicious code in architectural-gray-starfish (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/371/