# Vulnerabilities published in 2025


- [MAL-2025-65015](https://insights.sbomify.com/MAL-2025-65015/): Malicious code in registered_catshark_z3n (npm) (malicious package)
- [MAL-2025-65014](https://insights.sbomify.com/MAL-2025-65014/): Malicious code in redundant_firefly_z3n (npm) (malicious package)
- [MAL-2025-65013](https://insights.sbomify.com/MAL-2025-65013/): Malicious code in redundant_emu_z3n (npm) (malicious package)
- [MAL-2025-65012](https://insights.sbomify.com/MAL-2025-65012/): Malicious code in redundant_bug_z3n (npm) (malicious package)
- [MAL-2025-65011](https://insights.sbomify.com/MAL-2025-65011/): Malicious code in reduced_tiglon_z3n (npm) (malicious package)
- [MAL-2025-65010](https://insights.sbomify.com/MAL-2025-65010/): Malicious code in reduced_kangaroo_z3n (npm) (malicious package)
- [MAL-2025-6501](https://insights.sbomify.com/MAL-2025-6501/): Malicious code in exorigsim (PyPI) (malicious package)
- [MAL-2025-65009](https://insights.sbomify.com/MAL-2025-65009/): Malicious code in reasonable_penguin_z3n (npm) (malicious package)
- [MAL-2025-65008](https://insights.sbomify.com/MAL-2025-65008/): Malicious code in rear_wildebeest_z3n (npm) (malicious package)
- [MAL-2025-65007](https://insights.sbomify.com/MAL-2025-65007/): Malicious code in rational_tuna_z3n (npm) (malicious package)
- [MAL-2025-65006](https://insights.sbomify.com/MAL-2025-65006/): Malicious code in raspy_alpaca_z3n (npm) (malicious package)
- [MAL-2025-65005](https://insights.sbomify.com/MAL-2025-65005/): Malicious code in random_cuckoo_z3n (npm) (malicious package)
- [MAL-2025-65004](https://insights.sbomify.com/MAL-2025-65004/): Malicious code in rainy_dormouse_z3n (npm) (malicious package)
- [MAL-2025-65003](https://insights.sbomify.com/MAL-2025-65003/): Malicious code in radical_shrimp_z3n (npm) (malicious package)
- [MAL-2025-65002](https://insights.sbomify.com/MAL-2025-65002/): Malicious code in radical_loon_z3n (npm) (malicious package)
- [MAL-2025-65001](https://insights.sbomify.com/MAL-2025-65001/): Malicious code in querulous_basilisk_z3n (npm) (malicious package)
- [MAL-2025-65000](https://insights.sbomify.com/MAL-2025-65000/): Malicious code in quarrelsome_panther_z3n (npm) (malicious package)
- [MAL-2025-6500](https://insights.sbomify.com/MAL-2025-6500/): Malicious code in ensmallen-graph (PyPI) (malicious package)
- [MAL-2025-650](https://insights.sbomify.com/MAL-2025-650/): Malicious code in educationpurpose (npm) (malicious package)
- [MAL-2025-65](https://insights.sbomify.com/MAL-2025-65/): Malicious code in hardhat-dotenv (npm) (malicious package)
- [MAL-2025-64999](https://insights.sbomify.com/MAL-2025-64999/): Malicious code in qualified_beetle_z3n (npm) (malicious package)
- [MAL-2025-64998](https://insights.sbomify.com/MAL-2025-64998/): Malicious code in quaint_salamander_z3n (npm) (malicious package)
- [MAL-2025-64997](https://insights.sbomify.com/MAL-2025-64997/): Malicious code in qori-wajit91-sluey (npm) (malicious package)
- [MAL-2025-64996](https://insights.sbomify.com/MAL-2025-64996/): Malicious code in qori-wajit46-sluey (npm) (malicious package)
- [MAL-2025-64995](https://insights.sbomify.com/MAL-2025-64995/): Malicious code in qori-tiwul95-sluey (npm) (malicious package)
- [MAL-2025-64994](https://insights.sbomify.com/MAL-2025-64994/): Malicious code in qori-tempe25-sluey (npm) (malicious package)
- [MAL-2025-64993](https://insights.sbomify.com/MAL-2025-64993/): Malicious code in qori-tempe15-sluey (npm) (malicious package)
- [MAL-2025-64992](https://insights.sbomify.com/MAL-2025-64992/): Malicious code in qori-telurtahu75-sluey (npm) (malicious package)
- [MAL-2025-64991](https://insights.sbomify.com/MAL-2025-64991/): Malicious code in qori-tek16-sluey (npm) (malicious package)
- [MAL-2025-64990](https://insights.sbomify.com/MAL-2025-64990/): Malicious code in qori-sroto34-sluey (npm) (malicious package)
- [MAL-2025-64989](https://insights.sbomify.com/MAL-2025-64989/): Malicious code in qori-soto44-sluey (npm) (malicious package)
- [MAL-2025-64988](https://insights.sbomify.com/MAL-2025-64988/): Malicious code in qori-serimuka22-sluey (npm) (malicious package)
- [MAL-2025-64987](https://insights.sbomify.com/MAL-2025-64987/): Malicious code in qori-semur56-sluey (npm) (malicious package)
- [MAL-2025-64986](https://insights.sbomify.com/MAL-2025-64986/): Malicious code in qori-semur51-sluey (npm) (malicious package)
- [MAL-2025-64985](https://insights.sbomify.com/MAL-2025-64985/): Malicious code in qori-semur33-sluey (npm) (malicious package)
- [MAL-2025-64984](https://insights.sbomify.com/MAL-2025-64984/): Malicious code in qori-semur10-sluey (npm) (malicious package)
- [MAL-2025-64983](https://insights.sbomify.com/MAL-2025-64983/): Malicious code in qori-sate60-sumpek (npm) (malicious package)
- [MAL-2025-64982](https://insights.sbomify.com/MAL-2025-64982/): Malicious code in qori-saguer37-sluey (npm) (malicious package)
- [MAL-2025-64981](https://insights.sbomify.com/MAL-2025-64981/): Malicious code in qori-ragi48-sluey (npm) (malicious package)
- [MAL-2025-64980](https://insights.sbomify.com/MAL-2025-64980/): Malicious code in qori-pisang89-sluey (npm) (malicious package)
- [MAL-2025-6498](https://insights.sbomify.com/MAL-2025-6498/): Malicious code in duc193 (PyPI) (malicious package)
- [MAL-2025-64979](https://insights.sbomify.com/MAL-2025-64979/): Malicious code in qori-pecel5-sluey (npm) (malicious package)
- [MAL-2025-64978](https://insights.sbomify.com/MAL-2025-64978/): Malicious code in qori-papeda89-sluey (npm) (malicious package)
- [MAL-2025-64977](https://insights.sbomify.com/MAL-2025-64977/): Malicious code in qori-nasipecel70-sluey (npm) (malicious package)
- [MAL-2025-64976](https://insights.sbomify.com/MAL-2025-64976/): Malicious code in qori-nasi36-sluey (npm) (malicious package)
- [MAL-2025-64975](https://insights.sbomify.com/MAL-2025-64975/): Malicious code in qori-moci75-sluey (npm) (malicious package)
- [MAL-2025-64974](https://insights.sbomify.com/MAL-2025-64974/): Malicious code in qori-miemee90-sluey (npm) (malicious package)
- [MAL-2025-64973](https://insights.sbomify.com/MAL-2025-64973/): Malicious code in qori-miemee1-sluey (npm) (malicious package)
- [MAL-2025-64972](https://insights.sbomify.com/MAL-2025-64972/): Malicious code in qori-mieaceh33-sluey (npm) (malicious package)
- [MAL-2025-64971](https://insights.sbomify.com/MAL-2025-64971/): Malicious code in qori-mie33-sluey (npm) (malicious package)
- [MAL-2025-64970](https://insights.sbomify.com/MAL-2025-64970/): Malicious code in qori-mie12-sluey (npm) (malicious package)
- [MAL-2025-6497](https://insights.sbomify.com/MAL-2025-6497/): Malicious code in ds-lime (PyPI) (malicious package)
- [MAL-2025-64969](https://insights.sbomify.com/MAL-2025-64969/): Malicious code in qori-martabak56-sluey (npm) (malicious package)
- [MAL-2025-64968](https://insights.sbomify.com/MAL-2025-64968/): Malicious code in qori-martabak46-sluey (npm) (malicious package)
- [MAL-2025-64967](https://insights.sbomify.com/MAL-2025-64967/): Malicious code in qori-kripik84-sumpek (npm) (malicious package)
- [MAL-2025-64966](https://insights.sbomify.com/MAL-2025-64966/): Malicious code in qori-klentik57-sluey (npm) (malicious package)
- [MAL-2025-64965](https://insights.sbomify.com/MAL-2025-64965/): Malicious code in qori-kembang30-sluey (npm) (malicious package)
- [MAL-2025-64964](https://insights.sbomify.com/MAL-2025-64964/): Malicious code in qori-gepuk82-sluey (npm) (malicious package)
- [MAL-2025-64963](https://insights.sbomify.com/MAL-2025-64963/): Malicious code in qori-gaplek31-sumpek (npm) (malicious package)
- [MAL-2025-64962](https://insights.sbomify.com/MAL-2025-64962/): Malicious code in qori-gandul68-sluey (npm) (malicious package)
- [MAL-2025-64961](https://insights.sbomify.com/MAL-2025-64961/): Malicious code in qori-gandul35-sluey (npm) (malicious package)
- [MAL-2025-64960](https://insights.sbomify.com/MAL-2025-64960/): Malicious code in qori-empal83-sluey (npm) (malicious package)
- [MAL-2025-6496](https://insights.sbomify.com/MAL-2025-6496/): Malicious code in doverius (PyPI) (malicious package)
- [MAL-2025-64959](https://insights.sbomify.com/MAL-2025-64959/): Malicious code in qori-donat91-sluey (npm) (malicious package)
- [MAL-2025-64958](https://insights.sbomify.com/MAL-2025-64958/): Malicious code in qori-donat10-sluey (npm) (malicious package)
- [MAL-2025-64957](https://insights.sbomify.com/MAL-2025-64957/): Malicious code in qori-dodol83-sluey (npm) (malicious package)
- [MAL-2025-64956](https://insights.sbomify.com/MAL-2025-64956/): Malicious code in qori-bubursumsum80-sluey (npm) (malicious package)
- [MAL-2025-64955](https://insights.sbomify.com/MAL-2025-64955/): Malicious code in qori-buburayam12-sluey (npm) (malicious package)
- [MAL-2025-64954](https://insights.sbomify.com/MAL-2025-64954/): Malicious code in qori-bubur79-sluey (npm) (malicious package)
- [MAL-2025-64953](https://insights.sbomify.com/MAL-2025-64953/): Malicious code in qori-brengkes24-sluey (npm) (malicious package)
- [MAL-2025-64952](https://insights.sbomify.com/MAL-2025-64952/): Malicious code in qori-asinan54-sluey (npm) (malicious package)
- [MAL-2025-64951](https://insights.sbomify.com/MAL-2025-64951/): Malicious code in putri-wajit84-sluey (npm) (malicious package)
- [MAL-2025-64950](https://insights.sbomify.com/MAL-2025-64950/): Malicious code in putri-wajit26-sluey (npm) (malicious package)
- [MAL-2025-6495](https://insights.sbomify.com/MAL-2025-6495/): Malicious code in discord-booster (PyPI) (malicious package)
- [MAL-2025-64949](https://insights.sbomify.com/MAL-2025-64949/): Malicious code in putri-ubi60-sluey (npm) (malicious package)
- [MAL-2025-64948](https://insights.sbomify.com/MAL-2025-64948/): Malicious code in putri-tumis97-sluey (npm) (malicious package)
- [MAL-2025-64947](https://insights.sbomify.com/MAL-2025-64947/): Malicious code in putri-tomat56-sluey (npm) (malicious package)
- [MAL-2025-64946](https://insights.sbomify.com/MAL-2025-64946/): Malicious code in putri-tiwul49-sluey (npm) (malicious package)
- [MAL-2025-64945](https://insights.sbomify.com/MAL-2025-64945/): Malicious code in putri-taiwan18-sluey (npm) (malicious package)
- [MAL-2025-64944](https://insights.sbomify.com/MAL-2025-64944/): Malicious code in putri-soto91-sluey (npm) (malicious package)
- [MAL-2025-64943](https://insights.sbomify.com/MAL-2025-64943/): Malicious code in putri-soto7-sluey (npm) (malicious package)
- [MAL-2025-64942](https://insights.sbomify.com/MAL-2025-64942/): Malicious code in putri-soto15-sluey (npm) (malicious package)
- [MAL-2025-64941](https://insights.sbomify.com/MAL-2025-64941/): Malicious code in putri-sate43-sluey (npm) (malicious package)
- [MAL-2025-64940](https://insights.sbomify.com/MAL-2025-64940/): Malicious code in putri-sambalado50-sluey (npm) (malicious package)
- [MAL-2025-6494](https://insights.sbomify.com/MAL-2025-6494/): Malicious code in dfshoesadsm (PyPI) (malicious package)
- [MAL-2025-64939](https://insights.sbomify.com/MAL-2025-64939/): Malicious code in putri-sambalado34-sluey (npm) (malicious package)
- [MAL-2025-64938](https://insights.sbomify.com/MAL-2025-64938/): Malicious code in putri-ruwet99-sluey (npm) (malicious package)
- [MAL-2025-64937](https://insights.sbomify.com/MAL-2025-64937/): Malicious code in putri-ronde86-sluey (npm) (malicious package)
- [MAL-2025-64936](https://insights.sbomify.com/MAL-2025-64936/): Malicious code in putri-rendang92-sluey (npm) (malicious package)
- [MAL-2025-64935](https://insights.sbomify.com/MAL-2025-64935/): Malicious code in putri-rangi44-sluey (npm) (malicious package)
- [MAL-2025-64934](https://insights.sbomify.com/MAL-2025-64934/): Malicious code in putri-rangi4-sluey (npm) (malicious package)
- [MAL-2025-64933](https://insights.sbomify.com/MAL-2025-64933/): Malicious code in putri-ragi92-sluey (npm) (malicious package)
- [MAL-2025-64932](https://insights.sbomify.com/MAL-2025-64932/): Malicious code in putri-ragi18-sluey (npm) (malicious package)
- [MAL-2025-64931](https://insights.sbomify.com/MAL-2025-64931/): Malicious code in putri-pisang46-sluey (npm) (malicious package)
- [MAL-2025-64930](https://insights.sbomify.com/MAL-2025-64930/): Malicious code in putri-pecel41-sluey (npm) (malicious package)
- [MAL-2025-6493](https://insights.sbomify.com/MAL-2025-6493/): Malicious code in deeprce (PyPI) (malicious package)
- [MAL-2025-64929](https://insights.sbomify.com/MAL-2025-64929/): Malicious code in putri-pecel37-sluey (npm) (malicious package)
- [MAL-2025-64928](https://insights.sbomify.com/MAL-2025-64928/): Malicious code in putri-pecel32-sluey (npm) (malicious package)
- [MAL-2025-64927](https://insights.sbomify.com/MAL-2025-64927/): Malicious code in putri-ongol-ongol21-sluey (npm) (malicious package)
- [MAL-2025-64926](https://insights.sbomify.com/MAL-2025-64926/): Malicious code in putri-oblok42-sluey (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/392/