# Vulnerabilities published in 2025 - [MAL-2025-624](https://insights.sbomify.com/MAL-2025-624/): Malicious code in grammy-utils (npm) (malicious package) - [MAL-2025-62399](https://insights.sbomify.com/MAL-2025-62399/): Malicious code in continuing_leopard_z3n (npm) (malicious package) - [MAL-2025-62398](https://insights.sbomify.com/MAL-2025-62398/): Malicious code in continental_alpaca_z3n (npm) (malicious package) - [MAL-2025-62397](https://insights.sbomify.com/MAL-2025-62397/): Malicious code in content_nightingale_z3n (npm) (malicious package) - [MAL-2025-62396](https://insights.sbomify.com/MAL-2025-62396/): Malicious code in content_jaguar_z3n (npm) (malicious package) - [MAL-2025-62395](https://insights.sbomify.com/MAL-2025-62395/): Malicious code in contemporary_lemur_z3n (npm) (malicious package) - [MAL-2025-62394](https://insights.sbomify.com/MAL-2025-62394/): Malicious code in contemporary_dog_z3n (npm) (malicious package) - [MAL-2025-62393](https://insights.sbomify.com/MAL-2025-62393/): Malicious code in consistent_swordfish_z3n (npm) (malicious package) - [MAL-2025-62392](https://insights.sbomify.com/MAL-2025-62392/): Malicious code in consistent_otter_z3n (npm) (malicious package) - [MAL-2025-62391](https://insights.sbomify.com/MAL-2025-62391/): Malicious code in consistent_baboon_z3n (npm) (malicious package) - [MAL-2025-62390](https://insights.sbomify.com/MAL-2025-62390/): Malicious code in considerable_whitefish_z3n (npm) (malicious package) - [MAL-2025-6239](https://insights.sbomify.com/MAL-2025-6239/): Malicious code in scheduler-builtin (npm) (malicious package) - [MAL-2025-62389](https://insights.sbomify.com/MAL-2025-62389/): Malicious code in considerable_toucan_z3n (npm) (malicious package) - [MAL-2025-62388](https://insights.sbomify.com/MAL-2025-62388/): Malicious code in conservative_whale_z3n (npm) (malicious package) - [MAL-2025-62387](https://insights.sbomify.com/MAL-2025-62387/): Malicious code in conservative_mole_z3n (npm) (malicious package) - [MAL-2025-62386](https://insights.sbomify.com/MAL-2025-62386/): Malicious code in conservative_heron_z3n (npm) (malicious package) - [MAL-2025-62385](https://insights.sbomify.com/MAL-2025-62385/): Malicious code in conservation_shrimp_z3n (npm) (malicious package) - [MAL-2025-62384](https://insights.sbomify.com/MAL-2025-62384/): Malicious code in conservation_eagle_z3n (npm) (malicious package) - [MAL-2025-62383](https://insights.sbomify.com/MAL-2025-62383/): Malicious code in confidential_worm_z3n (npm) (malicious package) - [MAL-2025-62382](https://insights.sbomify.com/MAL-2025-62382/): Malicious code in confidential_fowl_z3n (npm) (malicious package) - [MAL-2025-62381](https://insights.sbomify.com/MAL-2025-62381/): Malicious code in confident_leopon_z3n (npm) (malicious package) - [MAL-2025-62380](https://insights.sbomify.com/MAL-2025-62380/): Malicious code in concrete_thrush_z3n (npm) (malicious package) - [MAL-2025-6238](https://insights.sbomify.com/MAL-2025-6238/): Malicious code in @googlesitekit/assets (npm) (malicious package) - [MAL-2025-62379](https://insights.sbomify.com/MAL-2025-62379/): Malicious code in comprehensive_squirrel_z3n (npm) (malicious package) - [MAL-2025-62378](https://insights.sbomify.com/MAL-2025-62378/): Malicious code in comprehensive_pike_z3n (npm) (malicious package) - [MAL-2025-62377](https://insights.sbomify.com/MAL-2025-62377/): Malicious code in complicated_tiglon_z3n (npm) (malicious package) - [MAL-2025-62376](https://insights.sbomify.com/MAL-2025-62376/): Malicious code in complicated_baboon_z3n (npm) (malicious package) - [MAL-2025-62375](https://insights.sbomify.com/MAL-2025-62375/): Malicious code in competitive_jay_z3n (npm) (malicious package) - [MAL-2025-62374](https://insights.sbomify.com/MAL-2025-62374/): Malicious code in competent_tapir_z3n (npm) (malicious package) - [MAL-2025-62373](https://insights.sbomify.com/MAL-2025-62373/): Malicious code in compatible_cobra_z3n (npm) (malicious package) - [MAL-2025-62372](https://insights.sbomify.com/MAL-2025-62372/): Malicious code in common_kangaroo_z3n (npm) (malicious package) - [MAL-2025-62371](https://insights.sbomify.com/MAL-2025-62371/): Malicious code in common_donkey_z3n (npm) (malicious package) - [MAL-2025-62370](https://insights.sbomify.com/MAL-2025-62370/): Malicious code in common_chickadee_z3n (npm) (malicious package) - [MAL-2025-6237](https://insights.sbomify.com/MAL-2025-6237/): Malicious code in gafana-test-utils (npm) (malicious package) - [MAL-2025-62369](https://insights.sbomify.com/MAL-2025-62369/): Malicious code in colossal_perch_z3n (npm) (malicious package) - [MAL-2025-62368](https://insights.sbomify.com/MAL-2025-62368/): Malicious code in colossal_butterfly_z3n (npm) (malicious package) - [MAL-2025-62367](https://insights.sbomify.com/MAL-2025-62367/): Malicious code in colorful_vicuna_z3n (npm) (malicious package) - [MAL-2025-62366](https://insights.sbomify.com/MAL-2025-62366/): Malicious code in collective_swordtail_z3n (npm) (malicious package) - [MAL-2025-62365](https://insights.sbomify.com/MAL-2025-62365/): Malicious code in cognitive_walrus_z3n (npm) (malicious package) - [MAL-2025-62364](https://insights.sbomify.com/MAL-2025-62364/): Malicious code in cognitive_sheep_z3n (npm) (malicious package) - [MAL-2025-62363](https://insights.sbomify.com/MAL-2025-62363/): Malicious code in clumsy_opossum_z3n (npm) (malicious package) - [MAL-2025-62362](https://insights.sbomify.com/MAL-2025-62362/): Malicious code in clumsy_jay_z3n (npm) (malicious package) - [MAL-2025-62361](https://insights.sbomify.com/MAL-2025-62361/): Malicious code in cloudy_monkey_z3n (npm) (malicious package) - [MAL-2025-62360](https://insights.sbomify.com/MAL-2025-62360/): Malicious code in clean_coral_z3n (npm) (malicious package) - [MAL-2025-6236](https://insights.sbomify.com/MAL-2025-6236/): Malicious code in grafana-config-pipeline (npm) (malicious package) - [MAL-2025-62359](https://insights.sbomify.com/MAL-2025-62359/): Malicious code in clean_beetle_z3n (npm) (malicious package) - [MAL-2025-62358](https://insights.sbomify.com/MAL-2025-62358/): Malicious code in classical_lemur_z3n (npm) (malicious package) - [MAL-2025-62357](https://insights.sbomify.com/MAL-2025-62357/): Malicious code in classic_constrictor_z3n (npm) (malicious package) - [MAL-2025-62356](https://insights.sbomify.com/MAL-2025-62356/): Malicious code in civilian_seahorse_z3n (npm) (malicious package) - [MAL-2025-62355](https://insights.sbomify.com/MAL-2025-62355/): Malicious code in civilian_puffin_z3n (npm) (malicious package) - [MAL-2025-62354](https://insights.sbomify.com/MAL-2025-62354/): Malicious code in citra-wajit99-sluey (npm) (malicious package) - [MAL-2025-62353](https://insights.sbomify.com/MAL-2025-62353/): Malicious code in citra-tumis62-sluey (npm) (malicious package) - [MAL-2025-62352](https://insights.sbomify.com/MAL-2025-62352/): Malicious code in citra-tomat98-sluey (npm) (malicious package) - [MAL-2025-62351](https://insights.sbomify.com/MAL-2025-62351/): Malicious code in citra-telurtahu87-sluey (npm) (malicious package) - [MAL-2025-62350](https://insights.sbomify.com/MAL-2025-62350/): Malicious code in citra-telurtahu33-sluey (npm) (malicious package) - [MAL-2025-6235](https://insights.sbomify.com/MAL-2025-6235/): Malicious code in tnet-dps (npm) (malicious package) - [MAL-2025-62349](https://insights.sbomify.com/MAL-2025-62349/): Malicious code in citra-telur23-sluey (npm) (malicious package) - [MAL-2025-62348](https://insights.sbomify.com/MAL-2025-62348/): Malicious code in citra-teh88-sluey (npm) (malicious package) - [MAL-2025-62347](https://insights.sbomify.com/MAL-2025-62347/): Malicious code in citra-takokak21-sluey (npm) (malicious package) - [MAL-2025-62346](https://insights.sbomify.com/MAL-2025-62346/): Malicious code in citra-tahu55-sluey (npm) (malicious package) - [MAL-2025-62345](https://insights.sbomify.com/MAL-2025-62345/): Malicious code in citra-serimuka86-sluey (npm) (malicious package) - [MAL-2025-62344](https://insights.sbomify.com/MAL-2025-62344/): Malicious code in citra-serimuka79-sluey (npm) (malicious package) - [MAL-2025-62343](https://insights.sbomify.com/MAL-2025-62343/): Malicious code in citra-serimuka47-sluey (npm) (malicious package) - [MAL-2025-62342](https://insights.sbomify.com/MAL-2025-62342/): Malicious code in citra-semur34-sluey (npm) (malicious package) - [MAL-2025-62341](https://insights.sbomify.com/MAL-2025-62341/): Malicious code in citra-sambel92-sluey (npm) (malicious package) - [MAL-2025-62340](https://insights.sbomify.com/MAL-2025-62340/): Malicious code in citra-ruwet11-sluey (npm) (malicious package) - [MAL-2025-6234](https://insights.sbomify.com/MAL-2025-6234/): Malicious code in nodejs-backpack (npm) (malicious package) - [MAL-2025-62339](https://insights.sbomify.com/MAL-2025-62339/): Malicious code in citra-ronde98-sluey (npm) (malicious package) - [MAL-2025-62338](https://insights.sbomify.com/MAL-2025-62338/): Malicious code in citra-rojak78-sluey (npm) (malicious package) - [MAL-2025-62337](https://insights.sbomify.com/MAL-2025-62337/): Malicious code in citra-pisang97-sluey (npm) (malicious package) - [MAL-2025-62336](https://insights.sbomify.com/MAL-2025-62336/): Malicious code in citra-pisang92-sluey (npm) (malicious package) - [MAL-2025-62335](https://insights.sbomify.com/MAL-2025-62335/): Malicious code in citra-peyek56-sluey (npm) (malicious package) - [MAL-2025-62334](https://insights.sbomify.com/MAL-2025-62334/): Malicious code in citra-pecel66-sluey (npm) (malicious package) - [MAL-2025-62333](https://insights.sbomify.com/MAL-2025-62333/): Malicious code in citra-ongol-ongol5-sluey (npm) (malicious package) - [MAL-2025-62332](https://insights.sbomify.com/MAL-2025-62332/): Malicious code in citra-oncom68-sluey (npm) (malicious package) - [MAL-2025-62331](https://insights.sbomify.com/MAL-2025-62331/): Malicious code in citra-miemee33-sluey (npm) (malicious package) - [MAL-2025-62330](https://insights.sbomify.com/MAL-2025-62330/): Malicious code in citra-miebogor33-sluey (npm) (malicious package) - [MAL-2025-6233](https://insights.sbomify.com/MAL-2025-6233/): Malicious code in dpsdatahub (npm) (malicious package) - [MAL-2025-62329](https://insights.sbomify.com/MAL-2025-62329/): Malicious code in citra-mie99-sluey (npm) (malicious package) - [MAL-2025-62328](https://insights.sbomify.com/MAL-2025-62328/): Malicious code in citra-menjes51-sluey (npm) (malicious package) - [MAL-2025-62327](https://insights.sbomify.com/MAL-2025-62327/): Malicious code in citra-lumpur72-sluey (npm) (malicious package) - [MAL-2025-62326](https://insights.sbomify.com/MAL-2025-62326/): Malicious code in citra-kupang64-sluey (npm) (malicious package) - [MAL-2025-62325](https://insights.sbomify.com/MAL-2025-62325/): Malicious code in citra-kripik98-sluey (npm) (malicious package) - [MAL-2025-62324](https://insights.sbomify.com/MAL-2025-62324/): Malicious code in citra-klanting94-sluey (npm) (malicious package) - [MAL-2025-62323](https://insights.sbomify.com/MAL-2025-62323/): Malicious code in citra-kentang94-sluey (npm) (malicious package) - [MAL-2025-62322](https://insights.sbomify.com/MAL-2025-62322/): Malicious code in citra-kembang31-sluey (npm) (malicious package) - [MAL-2025-62321](https://insights.sbomify.com/MAL-2025-62321/): Malicious code in citra-jamblang100-sluey (npm) (malicious package) - [MAL-2025-62320](https://insights.sbomify.com/MAL-2025-62320/): Malicious code in citra-gembus65-sluey (npm) (malicious package) - [MAL-2025-6232](https://insights.sbomify.com/MAL-2025-6232/): Malicious code in plugin-basic-ssl (npm) (malicious package) - [MAL-2025-62319](https://insights.sbomify.com/MAL-2025-62319/): Malicious code in citra-gaplek78-sluey (npm) (malicious package) - [MAL-2025-62318](https://insights.sbomify.com/MAL-2025-62318/): Malicious code in citra-gandul95-sluey (npm) (malicious package) - [MAL-2025-62317](https://insights.sbomify.com/MAL-2025-62317/): Malicious code in citra-empal60-sluey (npm) (malicious package) - [MAL-2025-62316](https://insights.sbomify.com/MAL-2025-62316/): Malicious code in citra-bubursumsum40-sluey (npm) (malicious package) - [MAL-2025-62315](https://insights.sbomify.com/MAL-2025-62315/): Malicious code in citra-bubursumsum3-sluey (npm) (malicious package) - [MAL-2025-62314](https://insights.sbomify.com/MAL-2025-62314/): Malicious code in citra-buburayam59-sluey (npm) (malicious package) - [MAL-2025-62313](https://insights.sbomify.com/MAL-2025-62313/): Malicious code in citra-bubur94-sluey (npm) (malicious package) - [MAL-2025-62312](https://insights.sbomify.com/MAL-2025-62312/): Malicious code in citra-bakwan80-sumpek (npm) (malicious package) - [MAL-2025-62311](https://insights.sbomify.com/MAL-2025-62311/): Malicious code in citra-bakwan19-sluey (npm) (malicious package) - [MAL-2025-62310](https://insights.sbomify.com/MAL-2025-62310/): Malicious code in circular_slug_z3n (npm) (malicious package) - [MAL-2025-6231](https://insights.sbomify.com/MAL-2025-6231/): Malicious code in bufbuild-core (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/421/