# Vulnerabilities published in 2025


- [MAL-2025-66740](https://insights.sbomify.com/MAL-2025-66740/): Malicious code in allied-gray-catfish (npm) (malicious package)
- [MAL-2025-6674](https://insights.sbomify.com/MAL-2025-6674/): Malicious code in undeface-test (npm) (malicious package)
- [MAL-2025-66739](https://insights.sbomify.com/MAL-2025-66739/): Malicious code in allied-gold-whitefish (npm) (malicious package)
- [MAL-2025-66738](https://insights.sbomify.com/MAL-2025-66738/): Malicious code in allied-copper-flea (npm) (malicious package)
- [MAL-2025-66737](https://insights.sbomify.com/MAL-2025-66737/): Malicious code in allied-beige-coral (npm) (malicious package)
- [MAL-2025-66736](https://insights.sbomify.com/MAL-2025-66736/): Malicious code in alleged-sapphire-beetle (npm) (malicious package)
- [MAL-2025-66735](https://insights.sbomify.com/MAL-2025-66735/): Malicious code in alleged-red-hawk (npm) (malicious package)
- [MAL-2025-66734](https://insights.sbomify.com/MAL-2025-66734/): Malicious code in alleged-gold-tarsier (npm) (malicious package)
- [MAL-2025-66733](https://insights.sbomify.com/MAL-2025-66733/): Malicious code in alleged-blue-salamander (npm) (malicious package)
- [MAL-2025-66732](https://insights.sbomify.com/MAL-2025-66732/): Malicious code in alleged-aqua-parakeet (npm) (malicious package)
- [MAL-2025-66731](https://insights.sbomify.com/MAL-2025-66731/): Malicious code in alleged-amethyst-vicuna (npm) (malicious package)
- [MAL-2025-66730](https://insights.sbomify.com/MAL-2025-66730/): Malicious code in allaboutyouu (npm) (malicious package)
- [MAL-2025-6673](https://insights.sbomify.com/MAL-2025-6673/): Malicious code in cerberux (npm) (malicious package)
- [MAL-2025-66729](https://insights.sbomify.com/MAL-2025-66729/): Malicious code in alla117 (npm) (malicious package)
- [MAL-2025-66728](https://insights.sbomify.com/MAL-2025-66728/): Malicious code in alive-scarlet-snail (npm) (malicious package)
- [MAL-2025-66727](https://insights.sbomify.com/MAL-2025-66727/): Malicious code in alive-purple-gopher (npm) (malicious package)
- [MAL-2025-66726](https://insights.sbomify.com/MAL-2025-66726/): Malicious code in alive-plum-aardvark (npm) (malicious package)
- [MAL-2025-66725](https://insights.sbomify.com/MAL-2025-66725/): Malicious code in alive-harlequin-kingfisher (npm) (malicious package)
- [MAL-2025-66724](https://insights.sbomify.com/MAL-2025-66724/): Malicious code in alive-crimson-hamster (npm) (malicious package)
- [MAL-2025-66723](https://insights.sbomify.com/MAL-2025-66723/): Malicious code in alexandaqe (npm) (malicious package)
- [MAL-2025-66722](https://insights.sbomify.com/MAL-2025-66722/): Malicious code in alert-tomato-roundworm (npm) (malicious package)
- [MAL-2025-66721](https://insights.sbomify.com/MAL-2025-66721/): Malicious code in alert-sapphire-woodpecker (npm) (malicious package)
- [MAL-2025-66720](https://insights.sbomify.com/MAL-2025-66720/): Malicious code in alert-jade-moth (npm) (malicious package)
- [MAL-2025-6672](https://insights.sbomify.com/MAL-2025-6672/): Malicious code in pwm-components (npm) (malicious package)
- [MAL-2025-66719](https://insights.sbomify.com/MAL-2025-66719/): Malicious code in alert-gray-ermine (npm) (malicious package)
- [MAL-2025-66718](https://insights.sbomify.com/MAL-2025-66718/): Malicious code in alert-gold-chinchilla (npm) (malicious package)
- [MAL-2025-66717](https://insights.sbomify.com/MAL-2025-66717/): Malicious code in alert-azure-hookworm (npm) (malicious package)
- [MAL-2025-66716](https://insights.sbomify.com/MAL-2025-66716/): Malicious code in agricultural-sapphire-swift (npm) (malicious package)
- [MAL-2025-66715](https://insights.sbomify.com/MAL-2025-66715/): Malicious code in agricultural-black-cockroach (npm) (malicious package)
- [MAL-2025-66714](https://insights.sbomify.com/MAL-2025-66714/): Malicious code in agricultural-aqua-echidna (npm) (malicious package)
- [MAL-2025-66713](https://insights.sbomify.com/MAL-2025-66713/): Malicious code in agreed-emerald-warbler (npm) (malicious package)
- [MAL-2025-66712](https://insights.sbomify.com/MAL-2025-66712/): Malicious code in agreed-coral-condor (npm) (malicious package)
- [MAL-2025-66711](https://insights.sbomify.com/MAL-2025-66711/): Malicious code in agreed-copper-bandicoot (npm) (malicious package)
- [MAL-2025-66710](https://insights.sbomify.com/MAL-2025-66710/): Malicious code in agreeable-white-lemur (npm) (malicious package)
- [MAL-2025-6671](https://insights.sbomify.com/MAL-2025-6671/): Malicious code in @usaa-grp-payments-web-experience/bk-acknowledge-module (npm) (malicious package)
- [MAL-2025-66709](https://insights.sbomify.com/MAL-2025-66709/): Malicious code in agreeable-salmon-moth (npm) (malicious package)
- [MAL-2025-66708](https://insights.sbomify.com/MAL-2025-66708/): Malicious code in agreeable-peach-vole (npm) (malicious package)
- [MAL-2025-66707](https://insights.sbomify.com/MAL-2025-66707/): Malicious code in agreeable-magenta-marten (npm) (malicious package)
- [MAL-2025-66706](https://insights.sbomify.com/MAL-2025-66706/): Malicious code in agreeable-indigo-cheetah (npm) (malicious package)
- [MAL-2025-66705](https://insights.sbomify.com/MAL-2025-66705/): Malicious code in aggressive-rose-sawfish (npm) (malicious package)
- [MAL-2025-66704](https://insights.sbomify.com/MAL-2025-66704/): Malicious code in aggressive-magenta-bass (npm) (malicious package)
- [MAL-2025-66703](https://insights.sbomify.com/MAL-2025-66703/): Malicious code in aggressive-lime-sole (npm) (malicious package)
- [MAL-2025-66702](https://insights.sbomify.com/MAL-2025-66702/): Malicious code in aggressive-coral-minnow (npm) (malicious package)
- [MAL-2025-66701](https://insights.sbomify.com/MAL-2025-66701/): Malicious code in aggressive-coffee-toucan (npm) (malicious package)
- [MAL-2025-66700](https://insights.sbomify.com/MAL-2025-66700/): Malicious code in aggressive-chocolate-louse (npm) (malicious package)
- [MAL-2025-6670](https://insights.sbomify.com/MAL-2025-6670/): Malicious code in z0rsdumbtestnonshould (npm) (malicious package)
- [MAL-2025-667](https://insights.sbomify.com/MAL-2025-667/): Malicious code in interview-code-challenge-full-stack (npm) (malicious package)
- [MAL-2025-66699](https://insights.sbomify.com/MAL-2025-66699/): Malicious code in aggregate-scarlet-reindeer (npm) (malicious package)
- [MAL-2025-66698](https://insights.sbomify.com/MAL-2025-66698/): Malicious code in aggregate-gold-koala (npm) (malicious package)
- [MAL-2025-66697](https://insights.sbomify.com/MAL-2025-66697/): Malicious code in afraid-teal-jackal (npm) (malicious package)
- [MAL-2025-66696](https://insights.sbomify.com/MAL-2025-66696/): Malicious code in afraid-rose-bobolink (npm) (malicious package)
- [MAL-2025-66695](https://insights.sbomify.com/MAL-2025-66695/): Malicious code in afraid-indigo-goldfish (npm) (malicious package)
- [MAL-2025-66694](https://insights.sbomify.com/MAL-2025-66694/): Malicious code in afraid-emerald-koala (npm) (malicious package)
- [MAL-2025-66693](https://insights.sbomify.com/MAL-2025-66693/): Malicious code in aesthetic-silver-snail (npm) (malicious package)
- [MAL-2025-66692](https://insights.sbomify.com/MAL-2025-66692/): Malicious code in aesthetic-silver-clownfish (npm) (malicious package)
- [MAL-2025-66691](https://insights.sbomify.com/MAL-2025-66691/): Malicious code in aesthetic-salmon-limpet (npm) (malicious package)
- [MAL-2025-66690](https://insights.sbomify.com/MAL-2025-66690/): Malicious code in aesthetic-orange-emu (npm) (malicious package)
- [MAL-2025-6669](https://insights.sbomify.com/MAL-2025-6669/): Malicious code in wild-pet-rest-api (npm) (malicious package)
- [MAL-2025-66689](https://insights.sbomify.com/MAL-2025-66689/): Malicious code in aesthetic-olive-wren (npm) (malicious package)
- [MAL-2025-66688](https://insights.sbomify.com/MAL-2025-66688/): Malicious code in aesthetic-maroon-ladybug (npm) (malicious package)
- [MAL-2025-66687](https://insights.sbomify.com/MAL-2025-66687/): Malicious code in aesthetic-lime-meadowlark (npm) (malicious package)
- [MAL-2025-66686](https://insights.sbomify.com/MAL-2025-66686/): Malicious code in aesthetic-indigo-rook (npm) (malicious package)
- [MAL-2025-66685](https://insights.sbomify.com/MAL-2025-66685/): Malicious code in aesthetic-crimson-cat (npm) (malicious package)
- [MAL-2025-66684](https://insights.sbomify.com/MAL-2025-66684/): Malicious code in aesthetic-crimson-bird (npm) (malicious package)
- [MAL-2025-66683](https://insights.sbomify.com/MAL-2025-66683/): Malicious code in aesthetic-apricot-gecko (npm) (malicious package)
- [MAL-2025-66682](https://insights.sbomify.com/MAL-2025-66682/): Malicious code in aesthetic-amber-salamander (npm) (malicious package)
- [MAL-2025-66681](https://insights.sbomify.com/MAL-2025-66681/): Malicious code in advisory-purple-meerkat (npm) (malicious package)
- [MAL-2025-66680](https://insights.sbomify.com/MAL-2025-66680/): Malicious code in advisory-peach-lemur (npm) (malicious package)
- [MAL-2025-6668](https://insights.sbomify.com/MAL-2025-6668/): Malicious code in walmart-ui (npm) (malicious package)
- [MAL-2025-66679](https://insights.sbomify.com/MAL-2025-66679/): Malicious code in advisory-emerald-kite (npm) (malicious package)
- [MAL-2025-66678](https://insights.sbomify.com/MAL-2025-66678/): Malicious code in adverse-violet-swordtail (npm) (malicious package)
- [MAL-2025-66677](https://insights.sbomify.com/MAL-2025-66677/): Malicious code in adverse-teal-gazelle (npm) (malicious package)
- [MAL-2025-66676](https://insights.sbomify.com/MAL-2025-66676/): Malicious code in adverse-sapphire-smelt (npm) (malicious package)
- [MAL-2025-66675](https://insights.sbomify.com/MAL-2025-66675/): Malicious code in adverse-gold-halibut (npm) (malicious package)
- [MAL-2025-66674](https://insights.sbomify.com/MAL-2025-66674/): Malicious code in adverse-cyan-peafowl (npm) (malicious package)
- [MAL-2025-66673](https://insights.sbomify.com/MAL-2025-66673/): Malicious code in adverse-azure-mosquito (npm) (malicious package)
- [MAL-2025-66672](https://insights.sbomify.com/MAL-2025-66672/): Malicious code in adverse-apricot-zebra (npm) (malicious package)
- [MAL-2025-66671](https://insights.sbomify.com/MAL-2025-66671/): Malicious code in advanced-maroon-pig (npm) (malicious package)
- [MAL-2025-66670](https://insights.sbomify.com/MAL-2025-66670/): Malicious code in advanced-magenta-gerbil (npm) (malicious package)
- [MAL-2025-6667](https://insights.sbomify.com/MAL-2025-6667/): Malicious code in varshade (npm) (malicious package)
- [MAL-2025-66669](https://insights.sbomify.com/MAL-2025-66669/): Malicious code in advanced-crimson-lobster (npm) (malicious package)
- [MAL-2025-66668](https://insights.sbomify.com/MAL-2025-66668/): Malicious code in advanced-aqua-goat (npm) (malicious package)
- [MAL-2025-66667](https://insights.sbomify.com/MAL-2025-66667/): Malicious code in advanced-aqua-buzzard (npm) (malicious package)
- [MAL-2025-66666](https://insights.sbomify.com/MAL-2025-66666/): Malicious code in adorable-salmon-partridge (npm) (malicious package)
- [MAL-2025-66665](https://insights.sbomify.com/MAL-2025-66665/): Malicious code in adorable-red-marten (npm) (malicious package)
- [MAL-2025-66664](https://insights.sbomify.com/MAL-2025-66664/): Malicious code in adorable-indigo-lungfish (npm) (malicious package)
- [MAL-2025-66663](https://insights.sbomify.com/MAL-2025-66663/): Malicious code in administrative-yellow-yak (npm) (malicious package)
- [MAL-2025-66662](https://insights.sbomify.com/MAL-2025-66662/): Malicious code in administrative-white-pony (npm) (malicious package)
- [MAL-2025-66661](https://insights.sbomify.com/MAL-2025-66661/): Malicious code in administrative-teal-kangaroo (npm) (malicious package)
- [MAL-2025-66660](https://insights.sbomify.com/MAL-2025-66660/): Malicious code in administrative-coral-bandicoot (npm) (malicious package)
- [MAL-2025-6666](https://insights.sbomify.com/MAL-2025-6666/): Malicious code in thehut (npm) (malicious package)
- [MAL-2025-66659](https://insights.sbomify.com/MAL-2025-66659/): Malicious code in administrative-bronze-lobster (npm) (malicious package)
- [MAL-2025-66658](https://insights.sbomify.com/MAL-2025-66658/): Malicious code in administrative-black-swordfish (npm) (malicious package)
- [MAL-2025-66657](https://insights.sbomify.com/MAL-2025-66657/): Malicious code in administrative-aqua-rodent (npm) (malicious package)
- [MAL-2025-66656](https://insights.sbomify.com/MAL-2025-66656/): Malicious code in adjacent-rose-smelt (npm) (malicious package)
- [MAL-2025-66655](https://insights.sbomify.com/MAL-2025-66655/): Malicious code in adjacent-plum-puma (npm) (malicious package)
- [MAL-2025-66654](https://insights.sbomify.com/MAL-2025-66654/): Malicious code in adjacent-peach-viper (npm) (malicious package)
- [MAL-2025-66653](https://insights.sbomify.com/MAL-2025-66653/): Malicious code in adjacent-magenta-python (npm) (malicious package)
- [MAL-2025-66652](https://insights.sbomify.com/MAL-2025-66652/): Malicious code in adjacent-aqua-heron (npm) (malicious package)
- [MAL-2025-66651](https://insights.sbomify.com/MAL-2025-66651/): Malicious code in adequate-yellow-chinchilla (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/373/