# Vulnerabilities published in 2025


- [MAL-2025-97034](https://insights.sbomify.com/MAL-2025-97034/): Malicious code in tory_stingray_z3n (npm) (malicious package)
- [MAL-2025-97033](https://insights.sbomify.com/MAL-2025-97033/): Malicious code in tory_mosquito_z3n (npm) (malicious package)
- [MAL-2025-97032](https://insights.sbomify.com/MAL-2025-97032/): Malicious code in tory_louse_z3n (npm) (malicious package)
- [MAL-2025-97031](https://insights.sbomify.com/MAL-2025-97031/): Malicious code in tory_eagle_z3n (npm) (malicious package)
- [MAL-2025-97030](https://insights.sbomify.com/MAL-2025-97030/): Malicious code in tory_buzzard_z3n (npm) (malicious package)
- [MAL-2025-9703](https://insights.sbomify.com/MAL-2025-9703/): Malicious code in @womorg/repudiandae-maiores-quis (npm) (malicious package)
- [MAL-2025-97029](https://insights.sbomify.com/MAL-2025-97029/): Malicious code in top_unicorn_z3n (npm) (malicious package)
- [MAL-2025-97028](https://insights.sbomify.com/MAL-2025-97028/): Malicious code in top_hummingbird_z3n (npm) (malicious package)
- [MAL-2025-97027](https://insights.sbomify.com/MAL-2025-97027/): Malicious code in tired_worm_z3n (npm) (malicious package)
- [MAL-2025-97026](https://insights.sbomify.com/MAL-2025-97026/): Malicious code in tired_viper_z3n (npm) (malicious package)
- [MAL-2025-97025](https://insights.sbomify.com/MAL-2025-97025/): Malicious code in tired_parrotfish_z3n (npm) (malicious package)
- [MAL-2025-97024](https://insights.sbomify.com/MAL-2025-97024/): Malicious code in tired_mollusk_z3n (npm) (malicious package)
- [MAL-2025-97023](https://insights.sbomify.com/MAL-2025-97023/): Malicious code in tired_hoverfly_z3n (npm) (malicious package)
- [MAL-2025-97022](https://insights.sbomify.com/MAL-2025-97022/): Malicious code in tired_fish_z3n (npm) (malicious package)
- [MAL-2025-97021](https://insights.sbomify.com/MAL-2025-97021/): Malicious code in tired_emu_z3n (npm) (malicious package)
- [MAL-2025-97020](https://insights.sbomify.com/MAL-2025-97020/): Malicious code in tiny_sailfish_z3n (npm) (malicious package)
- [MAL-2025-9702](https://insights.sbomify.com/MAL-2025-9702/): Malicious code in @womorg/repudiandae-dolorum-unde (npm) (malicious package)
- [MAL-2025-97019](https://insights.sbomify.com/MAL-2025-97019/): Malicious code in tiny_blackbird_z3n (npm) (malicious package)
- [MAL-2025-97018](https://insights.sbomify.com/MAL-2025-97018/): Malicious code in tight_sole_z3n (npm) (malicious package)
- [MAL-2025-97017](https://insights.sbomify.com/MAL-2025-97017/): Malicious code in tight_snail_z3n (npm) (malicious package)
- [MAL-2025-97016](https://insights.sbomify.com/MAL-2025-97016/): Malicious code in tight_puma_requirement (npm) (malicious package)
- [MAL-2025-97015](https://insights.sbomify.com/MAL-2025-97015/): Malicious code in tight_kite_z3n (npm) (malicious package)
- [MAL-2025-97014](https://insights.sbomify.com/MAL-2025-97014/): Malicious code in tight_gazelle_requirement (npm) (malicious package)
- [MAL-2025-97013](https://insights.sbomify.com/MAL-2025-97013/): Malicious code in tight_bobcat_z3n (npm) (malicious package)
- [MAL-2025-97012](https://insights.sbomify.com/MAL-2025-97012/): Malicious code in thundering_seahorse_requirement (npm) (malicious package)
- [MAL-2025-97011](https://insights.sbomify.com/MAL-2025-97011/): Malicious code in thundering_nightingale_z3n (npm) (malicious package)
- [MAL-2025-97010](https://insights.sbomify.com/MAL-2025-97010/): Malicious code in thundering_mite_z3n (npm) (malicious package)
- [MAL-2025-9701](https://insights.sbomify.com/MAL-2025-9701/): Malicious code in @womorg/recusandae-eveniet-quos (npm) (malicious package)
- [MAL-2025-97009](https://insights.sbomify.com/MAL-2025-97009/): Malicious code in thundering_firefly_z3n (npm) (malicious package)
- [MAL-2025-97008](https://insights.sbomify.com/MAL-2025-97008/): Malicious code in thundering_constrictor_requirement (npm) (malicious package)
- [MAL-2025-97007](https://insights.sbomify.com/MAL-2025-97007/): Malicious code in thundering_caterpillar_z3n (npm) (malicious package)
- [MAL-2025-97006](https://insights.sbomify.com/MAL-2025-97006/): Malicious code in thoughtless_stoat_z3n (npm) (malicious package)
- [MAL-2025-97005](https://insights.sbomify.com/MAL-2025-97005/): Malicious code in thoughtless_rat_z3n (npm) (malicious package)
- [MAL-2025-97004](https://insights.sbomify.com/MAL-2025-97004/): Malicious code in thoughtless_ptarmigan_z3n (npm) (malicious package)
- [MAL-2025-97003](https://insights.sbomify.com/MAL-2025-97003/): Malicious code in thoughtless_fish_z3n (npm) (malicious package)
- [MAL-2025-97002](https://insights.sbomify.com/MAL-2025-97002/): Malicious code in thoughtless_catshark_z3n (npm) (malicious package)
- [MAL-2025-97001](https://insights.sbomify.com/MAL-2025-97001/): Malicious code in thoughtless_bovid_z3n (npm) (malicious package)
- [MAL-2025-97000](https://insights.sbomify.com/MAL-2025-97000/): Malicious code in thoughtful_ox_z3n (npm) (malicious package)
- [MAL-2025-9700](https://insights.sbomify.com/MAL-2025-9700/): Malicious code in @womorg/quod-odit-assumenda (npm) (malicious package)
- [MAL-2025-97](https://insights.sbomify.com/MAL-2025-97/): Malicious code in prettier-s (npm) (malicious package)
- [MAL-2025-96999](https://insights.sbomify.com/MAL-2025-96999/): Malicious code in thoughtful_hoverfly_z3n (npm) (malicious package)
- [MAL-2025-96998](https://insights.sbomify.com/MAL-2025-96998/): Malicious code in thorough_wildfowl_z3n (npm) (malicious package)
- [MAL-2025-96997](https://insights.sbomify.com/MAL-2025-96997/): Malicious code in thorough_grouse_z3n (npm) (malicious package)
- [MAL-2025-96996](https://insights.sbomify.com/MAL-2025-96996/): Malicious code in thorough_crocodile_z3n (npm) (malicious package)
- [MAL-2025-96995](https://insights.sbomify.com/MAL-2025-96995/): Malicious code in thorough_camel_z3n (npm) (malicious package)
- [MAL-2025-96994](https://insights.sbomify.com/MAL-2025-96994/): Malicious code in thorough_buzzard_z3n (npm) (malicious package)
- [MAL-2025-96993](https://insights.sbomify.com/MAL-2025-96993/): Malicious code in thirsty_panda_z3n (npm) (malicious package)
- [MAL-2025-96992](https://insights.sbomify.com/MAL-2025-96992/): Malicious code in thirsty_leopard_z3n (npm) (malicious package)
- [MAL-2025-96991](https://insights.sbomify.com/MAL-2025-96991/): Malicious code in thirsty_beaver_z3n (npm) (malicious package)
- [MAL-2025-96990](https://insights.sbomify.com/MAL-2025-96990/): Malicious code in thin_quelea_requirement (npm) (malicious package)
- [MAL-2025-9699](https://insights.sbomify.com/MAL-2025-9699/): Malicious code in @womorg/quis-doloribus-maxime (npm) (malicious package)
- [MAL-2025-96989](https://insights.sbomify.com/MAL-2025-96989/): Malicious code in thick_porcupine_z3n (npm) (malicious package)
- [MAL-2025-96988](https://insights.sbomify.com/MAL-2025-96988/): Malicious code in thick_mite_z3n (npm) (malicious package)
- [MAL-2025-96987](https://insights.sbomify.com/MAL-2025-96987/): Malicious code in theoretical_finch_z3n (npm) (malicious package)
- [MAL-2025-96986](https://insights.sbomify.com/MAL-2025-96986/): Malicious code in theoretical_donkey_z3n (npm) (malicious package)
- [MAL-2025-96985](https://insights.sbomify.com/MAL-2025-96985/): Malicious code in theoretical_bandicoot_z3n (npm) (malicious package)
- [MAL-2025-96984](https://insights.sbomify.com/MAL-2025-96984/): Malicious code in theoretical_aardvark_z3n (npm) (malicious package)
- [MAL-2025-96983](https://insights.sbomify.com/MAL-2025-96983/): Malicious code in then_ocelot_z3n (npm) (malicious package)
- [MAL-2025-96982](https://insights.sbomify.com/MAL-2025-96982/): Malicious code in then_gibbon_z3n (npm) (malicious package)
- [MAL-2025-96981](https://insights.sbomify.com/MAL-2025-96981/): Malicious code in then_fly_z3n (npm) (malicious package)
- [MAL-2025-96980](https://insights.sbomify.com/MAL-2025-96980/): Malicious code in then_cattle_requirement (npm) (malicious package)
- [MAL-2025-9698](https://insights.sbomify.com/MAL-2025-9698/): Malicious code in @womorg/quasi-eius-optio (npm) (malicious package)
- [MAL-2025-96979](https://insights.sbomify.com/MAL-2025-96979/): Malicious code in testy_mammal_z3n (npm) (malicious package)
- [MAL-2025-96978](https://insights.sbomify.com/MAL-2025-96978/): Malicious code in testy_limpet_z3n (npm) (malicious package)
- [MAL-2025-96977](https://insights.sbomify.com/MAL-2025-96977/): Malicious code in testy_lemur_z3n (npm) (malicious package)
- [MAL-2025-96976](https://insights.sbomify.com/MAL-2025-96976/): Malicious code in testy_hamster_z3n (npm) (malicious package)
- [MAL-2025-96975](https://insights.sbomify.com/MAL-2025-96975/): Malicious code in testy_ferret_z3n (npm) (malicious package)
- [MAL-2025-96974](https://insights.sbomify.com/MAL-2025-96974/): Malicious code in testy_dolphin_z3n (npm) (malicious package)
- [MAL-2025-96973](https://insights.sbomify.com/MAL-2025-96973/): Malicious code in testy_capybara_z3n (npm) (malicious package)
- [MAL-2025-96972](https://insights.sbomify.com/MAL-2025-96972/): Malicious code in testy_aphid_z3n (npm) (malicious package)
- [MAL-2025-96971](https://insights.sbomify.com/MAL-2025-96971/): Malicious code in testy_alpaca_z3n (npm) (malicious package)
- [MAL-2025-96970](https://insights.sbomify.com/MAL-2025-96970/): Malicious code in testy-tan-donkey (npm) (malicious package)
- [MAL-2025-9697](https://insights.sbomify.com/MAL-2025-9697/): Malicious code in @womorg/psychic-potato (npm) (malicious package)
- [MAL-2025-96969](https://insights.sbomify.com/MAL-2025-96969/): Malicious code in territorial_warbler_z3n (npm) (malicious package)
- [MAL-2025-96968](https://insights.sbomify.com/MAL-2025-96968/): Malicious code in territorial_sole_z3n (npm) (malicious package)
- [MAL-2025-96967](https://insights.sbomify.com/MAL-2025-96967/): Malicious code in territorial_planarian_z3n (npm) (malicious package)
- [MAL-2025-96966](https://insights.sbomify.com/MAL-2025-96966/): Malicious code in territorial_limpet_z3n (npm) (malicious package)
- [MAL-2025-96965](https://insights.sbomify.com/MAL-2025-96965/): Malicious code in territorial_eagle_requirement (npm) (malicious package)
- [MAL-2025-96964](https://insights.sbomify.com/MAL-2025-96964/): Malicious code in territorial_dog_z3n (npm) (malicious package)
- [MAL-2025-96963](https://insights.sbomify.com/MAL-2025-96963/): Malicious code in territorial_catshark_z3n (npm) (malicious package)
- [MAL-2025-96962](https://insights.sbomify.com/MAL-2025-96962/): Malicious code in terrible_mosquito_z3n (npm) (malicious package)
- [MAL-2025-96961](https://insights.sbomify.com/MAL-2025-96961/): Malicious code in terrible_mackerel_z3n (npm) (malicious package)
- [MAL-2025-96960](https://insights.sbomify.com/MAL-2025-96960/): Malicious code in terrible_echidna_z3n (npm) (malicious package)
- [MAL-2025-9696](https://insights.sbomify.com/MAL-2025-9696/): Malicious code in @womorg/porro-laboriosam-quod (npm) (malicious package)
- [MAL-2025-96959](https://insights.sbomify.com/MAL-2025-96959/): Malicious code in tense_cardinal_z3n (npm) (malicious package)
- [MAL-2025-96958](https://insights.sbomify.com/MAL-2025-96958/): Malicious code in tense_bass_z3n (npm) (malicious package)
- [MAL-2025-96957](https://insights.sbomify.com/MAL-2025-96957/): Malicious code in tense_albatross_z3n (npm) (malicious package)
- [MAL-2025-96956](https://insights.sbomify.com/MAL-2025-96956/): Malicious code in tender_pheasant_z3n (npm) (malicious package)
- [MAL-2025-96955](https://insights.sbomify.com/MAL-2025-96955/): Malicious code in tender_partridge_z3n (npm) (malicious package)
- [MAL-2025-96954](https://insights.sbomify.com/MAL-2025-96954/): Malicious code in tender_parrot_z3n (npm) (malicious package)
- [MAL-2025-96953](https://insights.sbomify.com/MAL-2025-96953/): Malicious code in tender_loon_z3n (npm) (malicious package)
- [MAL-2025-96952](https://insights.sbomify.com/MAL-2025-96952/): Malicious code in tender_chimpanzee_z3n (npm) (malicious package)
- [MAL-2025-96951](https://insights.sbomify.com/MAL-2025-96951/): Malicious code in temporary_rattlesnake_z3n (npm) (malicious package)
- [MAL-2025-96950](https://insights.sbomify.com/MAL-2025-96950/): Malicious code in temporary_panda_z3n (npm) (malicious package)
- [MAL-2025-9695](https://insights.sbomify.com/MAL-2025-9695/): Malicious code in @womorg/optio-quia-vero (npm) (malicious package)
- [MAL-2025-96949](https://insights.sbomify.com/MAL-2025-96949/): Malicious code in temporary_dolphin_z3n (npm) (malicious package)
- [MAL-2025-96948](https://insights.sbomify.com/MAL-2025-96948/): Malicious code in temporary_bobolink_z3n (npm) (malicious package)
- [MAL-2025-96947](https://insights.sbomify.com/MAL-2025-96947/): Malicious code in temporary_antelope_z3n (npm) (malicious package)
- [MAL-2025-96946](https://insights.sbomify.com/MAL-2025-96946/): Malicious code in teenage_trout_requirement (npm) (malicious package)
- [MAL-2025-96945](https://insights.sbomify.com/MAL-2025-96945/): Malicious code in teenage_sparrow_z3n (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/38/