# Vulnerabilities published in 2025


- [MAL-2025-6168](https://insights.sbomify.com/MAL-2025-6168/): Malicious code in internallib_v730 (npm) (malicious package)
- [MAL-2025-61679](https://insights.sbomify.com/MAL-2025-61679/): Malicious code in xeric_shark_z3n (npm) (malicious package)
- [MAL-2025-61678](https://insights.sbomify.com/MAL-2025-61678/): Malicious code in xeric_horse_z3n (npm) (malicious package)
- [MAL-2025-61677](https://insights.sbomify.com/MAL-2025-61677/): Malicious code in xenophobic_chinchilla_z3n (npm) (malicious package)
- [MAL-2025-61676](https://insights.sbomify.com/MAL-2025-61676/): Malicious code in xenogeneic_snail_z3n (npm) (malicious package)
- [MAL-2025-61675](https://insights.sbomify.com/MAL-2025-61675/): Malicious code in xenacious_tiger_z3n (npm) (malicious package)
- [MAL-2025-61674](https://insights.sbomify.com/MAL-2025-61674/): Malicious code in xenacious_tern_z3n (npm) (malicious package)
- [MAL-2025-61673](https://insights.sbomify.com/MAL-2025-61673/): Malicious code in written_harrier_z3n (npm) (malicious package)
- [MAL-2025-61672](https://insights.sbomify.com/MAL-2025-61672/): Malicious code in worthy_toad_z3n (npm) (malicious package)
- [MAL-2025-61671](https://insights.sbomify.com/MAL-2025-61671/): Malicious code in worthy_tiger_z3n (npm) (malicious package)
- [MAL-2025-61670](https://insights.sbomify.com/MAL-2025-61670/): Malicious code in worthy_swallow_z3n (npm) (malicious package)
- [MAL-2025-6167](https://insights.sbomify.com/MAL-2025-6167/): Malicious code in internallib_v687 (npm) (malicious package)
- [MAL-2025-61669](https://insights.sbomify.com/MAL-2025-61669/): Malicious code in worthy_fowl_z3n (npm) (malicious package)
- [MAL-2025-61668](https://insights.sbomify.com/MAL-2025-61668/): Malicious code in worthy_clam_z3n (npm) (malicious package)
- [MAL-2025-61667](https://insights.sbomify.com/MAL-2025-61667/): Malicious code in worrying_takin_z3n (npm) (malicious package)
- [MAL-2025-61666](https://insights.sbomify.com/MAL-2025-61666/): Malicious code in worrying_primate_z3n (npm) (malicious package)
- [MAL-2025-61665](https://insights.sbomify.com/MAL-2025-61665/): Malicious code in worrying_mongoose_z3n (npm) (malicious package)
- [MAL-2025-61664](https://insights.sbomify.com/MAL-2025-61664/): Malicious code in worrying_haddock_z3n (npm) (malicious package)
- [MAL-2025-61663](https://insights.sbomify.com/MAL-2025-61663/): Malicious code in worrying_bovid_z3n (npm) (malicious package)
- [MAL-2025-61662](https://insights.sbomify.com/MAL-2025-61662/): Malicious code in worried_nightingale_z3n (npm) (malicious package)
- [MAL-2025-61661](https://insights.sbomify.com/MAL-2025-61661/): Malicious code in worried_cheetah_z3n (npm) (malicious package)
- [MAL-2025-61660](https://insights.sbomify.com/MAL-2025-61660/): Malicious code in worldwide_roundworm_z3n (npm) (malicious package)
- [MAL-2025-6166](https://insights.sbomify.com/MAL-2025-6166/): Malicious code in internal-plugin-telemetry-backend (npm) (malicious package)
- [MAL-2025-61659](https://insights.sbomify.com/MAL-2025-61659/): Malicious code in worldwide_octopus_z3n (npm) (malicious package)
- [MAL-2025-61658](https://insights.sbomify.com/MAL-2025-61658/): Malicious code in worldwide_clownfish_z3n (npm) (malicious package)
- [MAL-2025-61657](https://insights.sbomify.com/MAL-2025-61657/): Malicious code in worldwide_aphid_z3n (npm) (malicious package)
- [MAL-2025-61656](https://insights.sbomify.com/MAL-2025-61656/): Malicious code in working_thrush_z3n (npm) (malicious package)
- [MAL-2025-61655](https://insights.sbomify.com/MAL-2025-61655/): Malicious code in working_herring_z3n (npm) (malicious package)
- [MAL-2025-61654](https://insights.sbomify.com/MAL-2025-61654/): Malicious code in working_centipede_z3n (npm) (malicious package)
- [MAL-2025-61653](https://insights.sbomify.com/MAL-2025-61653/): Malicious code in wooden_hedgehog_z3n (npm) (malicious package)
- [MAL-2025-61652](https://insights.sbomify.com/MAL-2025-61652/): Malicious code in wooden_crayfish_z3n (npm) (malicious package)
- [MAL-2025-61651](https://insights.sbomify.com/MAL-2025-61651/): Malicious code in wooden_bee_z3n (npm) (malicious package)
- [MAL-2025-61650](https://insights.sbomify.com/MAL-2025-61650/): Malicious code in wonderful_starfish_z3n (npm) (malicious package)
- [MAL-2025-6165](https://insights.sbomify.com/MAL-2025-6165/): Malicious code in grafana-scenes-ml (npm) (malicious package)
- [MAL-2025-61649](https://insights.sbomify.com/MAL-2025-61649/): Malicious code in wonderful_cobra_z3n (npm) (malicious package)
- [MAL-2025-61648](https://insights.sbomify.com/MAL-2025-61648/): Malicious code in wonderful_bird_z3n (npm) (malicious package)
- [MAL-2025-61647](https://insights.sbomify.com/MAL-2025-61647/): Malicious code in witty_tiger_z3n (npm) (malicious package)
- [MAL-2025-61646](https://insights.sbomify.com/MAL-2025-61646/): Malicious code in witty_mollusk_z3n (npm) (malicious package)
- [MAL-2025-61645](https://insights.sbomify.com/MAL-2025-61645/): Malicious code in wise_ostrich_z3n (npm) (malicious package)
- [MAL-2025-61644](https://insights.sbomify.com/MAL-2025-61644/): Malicious code in wise_flea_z3n (npm) (malicious package)
- [MAL-2025-61643](https://insights.sbomify.com/MAL-2025-61643/): Malicious code in willowy_hummingbird_z3n (npm) (malicious package)
- [MAL-2025-61642](https://insights.sbomify.com/MAL-2025-61642/): Malicious code in willowy_aardwolf_z3n (npm) (malicious package)
- [MAL-2025-61641](https://insights.sbomify.com/MAL-2025-61641/): Malicious code in willing_basilisk_z3n (npm) (malicious package)
- [MAL-2025-61640](https://insights.sbomify.com/MAL-2025-61640/): Malicious code in wilful_starfish_z3n (npm) (malicious package)
- [MAL-2025-6164](https://insights.sbomify.com/MAL-2025-6164/): Malicious code in googleapis-node (npm) (malicious package)
- [MAL-2025-61639](https://insights.sbomify.com/MAL-2025-61639/): Malicious code in wild_planarian_z3n (npm) (malicious package)
- [MAL-2025-61638](https://insights.sbomify.com/MAL-2025-61638/): Malicious code in wild_dragon_z3n (npm) (malicious package)
- [MAL-2025-61637](https://insights.sbomify.com/MAL-2025-61637/): Malicious code in widespread_catshark_z3n (npm) (malicious package)
- [MAL-2025-61636](https://insights.sbomify.com/MAL-2025-61636/): Malicious code in wide_narwhal_z3n (npm) (malicious package)
- [MAL-2025-61635](https://insights.sbomify.com/MAL-2025-61635/): Malicious code in wicked_bird_z3n (npm) (malicious package)
- [MAL-2025-61634](https://insights.sbomify.com/MAL-2025-61634/): Malicious code in whispering_mosquito_z3n (npm) (malicious package)
- [MAL-2025-61633](https://insights.sbomify.com/MAL-2025-61633/): Malicious code in whispering_dove_z3n (npm) (malicious package)
- [MAL-2025-61632](https://insights.sbomify.com/MAL-2025-61632/): Malicious code in whispering_crocodile_z3n (npm) (malicious package)
- [MAL-2025-61631](https://insights.sbomify.com/MAL-2025-61631/): Malicious code in whispering_aphid_z3n (npm) (malicious package)
- [MAL-2025-61630](https://insights.sbomify.com/MAL-2025-61630/): Malicious code in wet_tern_z3n (npm) (malicious package)
- [MAL-2025-6163](https://insights.sbomify.com/MAL-2025-6163/): Malicious code in get-latest-workflow-artifact (npm) (malicious package)
- [MAL-2025-61629](https://insights.sbomify.com/MAL-2025-61629/): Malicious code in wet_crane_z3n (npm) (malicious package)
- [MAL-2025-61628](https://insights.sbomify.com/MAL-2025-61628/): Malicious code in western_toucan_z3n (npm) (malicious package)
- [MAL-2025-61627](https://insights.sbomify.com/MAL-2025-61627/): Malicious code in western_manatee_z3n (npm) (malicious package)
- [MAL-2025-61626](https://insights.sbomify.com/MAL-2025-61626/): Malicious code in well_owl_z3n (npm) (malicious package)
- [MAL-2025-61625](https://insights.sbomify.com/MAL-2025-61625/): Malicious code in well_cougar_z3n (npm) (malicious package)
- [MAL-2025-61624](https://insights.sbomify.com/MAL-2025-61624/): Malicious code in welcome_roadrunner_z3n (npm) (malicious package)
- [MAL-2025-61623](https://insights.sbomify.com/MAL-2025-61623/): Malicious code in weird_halibut_z3n (npm) (malicious package)
- [MAL-2025-61622](https://insights.sbomify.com/MAL-2025-61622/): Malicious code in weird_badger_z3n (npm) (malicious package)
- [MAL-2025-61621](https://insights.sbomify.com/MAL-2025-61621/): Malicious code in weekly_spider_z3n (npm) (malicious package)
- [MAL-2025-61620](https://insights.sbomify.com/MAL-2025-61620/): Malicious code in weekly_centipede_z3n (npm) (malicious package)
- [MAL-2025-6162](https://insights.sbomify.com/MAL-2025-6162/): Malicious code in fxa-setting (npm) (malicious package)
- [MAL-2025-61619](https://insights.sbomify.com/MAL-2025-61619/): Malicious code in wee_parrot_z3n (npm) (malicious package)
- [MAL-2025-61618](https://insights.sbomify.com/MAL-2025-61618/): Malicious code in weary_wren_z3n (npm) (malicious package)
- [MAL-2025-61617](https://insights.sbomify.com/MAL-2025-61617/): Malicious code in weary_prawn_z3n (npm) (malicious package)
- [MAL-2025-61616](https://insights.sbomify.com/MAL-2025-61616/): Malicious code in weary_chickadee_z3n (npm) (malicious package)
- [MAL-2025-61615](https://insights.sbomify.com/MAL-2025-61615/): Malicious code in wealthy_thrush_z3n (npm) (malicious package)
- [MAL-2025-61614](https://insights.sbomify.com/MAL-2025-61614/): Malicious code in wealthy_seahorse_z3n (npm) (malicious package)
- [MAL-2025-61613](https://insights.sbomify.com/MAL-2025-61613/): Malicious code in wealthy_pigeon_z3n (npm) (malicious package)
- [MAL-2025-61612](https://insights.sbomify.com/MAL-2025-61612/): Malicious code in wealthy_bug_z3n (npm) (malicious package)
- [MAL-2025-61611](https://insights.sbomify.com/MAL-2025-61611/): Malicious code in weak_echidna_z3n (npm) (malicious package)
- [MAL-2025-61610](https://insights.sbomify.com/MAL-2025-61610/): Malicious code in weak_damselfly_z3n (npm) (malicious package)
- [MAL-2025-6161](https://insights.sbomify.com/MAL-2025-6161/): Malicious code in firefox-puppeteer (npm) (malicious package)
- [MAL-2025-61609](https://insights.sbomify.com/MAL-2025-61609/): Malicious code in weak_cobra_z3n (npm) (malicious package)
- [MAL-2025-61608](https://insights.sbomify.com/MAL-2025-61608/): Malicious code in watery_harrier_z3n (npm) (malicious package)
- [MAL-2025-61607](https://insights.sbomify.com/MAL-2025-61607/): Malicious code in vulnerable_ox_z3n (npm) (malicious package)
- [MAL-2025-61606](https://insights.sbomify.com/MAL-2025-61606/): Malicious code in vulnerable_ermine_z3n (npm) (malicious package)
- [MAL-2025-61605](https://insights.sbomify.com/MAL-2025-61605/): Malicious code in voluntary_hare_z3n (npm) (malicious package)
- [MAL-2025-61604](https://insights.sbomify.com/MAL-2025-61604/): Malicious code in voluminous_worm_z3n (npm) (malicious package)
- [MAL-2025-61603](https://insights.sbomify.com/MAL-2025-61603/): Malicious code in vocal_hamster_z3n (npm) (malicious package)
- [MAL-2025-61602](https://insights.sbomify.com/MAL-2025-61602/): Malicious code in vocal_halibut_z3n (npm) (malicious package)
- [MAL-2025-61601](https://insights.sbomify.com/MAL-2025-61601/): Malicious code in vocal_anglerfish_z3n (npm) (malicious package)
- [MAL-2025-61600](https://insights.sbomify.com/MAL-2025-61600/): Malicious code in vivid_elk_z3n (npm) (malicious package)
- [MAL-2025-6160](https://insights.sbomify.com/MAL-2025-6160/): Malicious code in firefox-profiler (npm) (malicious package)
- [MAL-2025-616](https://insights.sbomify.com/MAL-2025-616/): Malicious code in marked-at (npm) (malicious package)
- [MAL-2025-61599](https://insights.sbomify.com/MAL-2025-61599/): Malicious code in vivid_boar_z3n (npm) (malicious package)
- [MAL-2025-61598](https://insights.sbomify.com/MAL-2025-61598/): Malicious code in vivacious_opossum_z3n (npm) (malicious package)
- [MAL-2025-61597](https://insights.sbomify.com/MAL-2025-61597/): Malicious code in vitreous_cuckoo_z3n (npm) (malicious package)
- [MAL-2025-61596](https://insights.sbomify.com/MAL-2025-61596/): Malicious code in visual_python_z3n (npm) (malicious package)
- [MAL-2025-61595](https://insights.sbomify.com/MAL-2025-61595/): Malicious code in visiting_narwhal_z3n (npm) (malicious package)
- [MAL-2025-61594](https://insights.sbomify.com/MAL-2025-61594/): Malicious code in visiting_jaguar_z3n (npm) (malicious package)
- [MAL-2025-61593](https://insights.sbomify.com/MAL-2025-61593/): Malicious code in visiting_gerbil_z3n (npm) (malicious package)
- [MAL-2025-61592](https://insights.sbomify.com/MAL-2025-61592/): Malicious code in visiting_gayal_z3n (npm) (malicious package)
- [MAL-2025-61591](https://insights.sbomify.com/MAL-2025-61591/): Malicious code in visiting_coral_z3n (npm) (malicious package)
- [MAL-2025-61590](https://insights.sbomify.com/MAL-2025-61590/): Malicious code in visible_tarantula_z3n (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/429/