# Vulnerabilities published in 2025


- [MAL-2025-9658](https://insights.sbomify.com/MAL-2025-9658/): Malicious code in @warnermediacode/wme-theme-gelatap (npm) (malicious package)
- [MAL-2025-96579](https://insights.sbomify.com/MAL-2025-96579/): Malicious code in sick_bandicoot_z3n (npm) (malicious package)
- [MAL-2025-96578](https://insights.sbomify.com/MAL-2025-96578/): Malicious code in shy_mosquito_z3n (npm) (malicious package)
- [MAL-2025-96577](https://insights.sbomify.com/MAL-2025-96577/): Malicious code in shrill_junglefowl_requirement (npm) (malicious package)
- [MAL-2025-96576](https://insights.sbomify.com/MAL-2025-96576/): Malicious code in short_sole_z3n (npm) (malicious package)
- [MAL-2025-96575](https://insights.sbomify.com/MAL-2025-96575/): Malicious code in short_heron_z3n (npm) (malicious package)
- [MAL-2025-96574](https://insights.sbomify.com/MAL-2025-96574/): Malicious code in shocked_toad_z3n (npm) (malicious package)
- [MAL-2025-96573](https://insights.sbomify.com/MAL-2025-96573/): Malicious code in shocked_stingray_z3n (npm) (malicious package)
- [MAL-2025-96572](https://insights.sbomify.com/MAL-2025-96572/): Malicious code in shocked_pony_z3n (npm) (malicious package)
- [MAL-2025-96571](https://insights.sbomify.com/MAL-2025-96571/): Malicious code in shocked_coral_requirement (npm) (malicious package)
- [MAL-2025-96570](https://insights.sbomify.com/MAL-2025-96570/): Malicious code in shivering_mollusk_z3n (npm) (malicious package)
- [MAL-2025-9657](https://insights.sbomify.com/MAL-2025-9657/): Malicious code in @waitfortea2024/veniam-architecto-aperiam (npm) (malicious package)
- [MAL-2025-96569](https://insights.sbomify.com/MAL-2025-96569/): Malicious code in shiny_wombat_z3n (npm) (malicious package)
- [MAL-2025-96568](https://insights.sbomify.com/MAL-2025-96568/): Malicious code in shiny_swan_z3n (npm) (malicious package)
- [MAL-2025-96567](https://insights.sbomify.com/MAL-2025-96567/): Malicious code in shiny_panda_requirement (npm) (malicious package)
- [MAL-2025-96566](https://insights.sbomify.com/MAL-2025-96566/): Malicious code in shiny_marlin_z3n (npm) (malicious package)
- [MAL-2025-96565](https://insights.sbomify.com/MAL-2025-96565/): Malicious code in shiny_dog_z3n (npm) (malicious package)
- [MAL-2025-96564](https://insights.sbomify.com/MAL-2025-96564/): Malicious code in shiny_bandicoot_z3n (npm) (malicious package)
- [MAL-2025-96563](https://insights.sbomify.com/MAL-2025-96563/): Malicious code in sheer_salamander_z3n (npm) (malicious package)
- [MAL-2025-96562](https://insights.sbomify.com/MAL-2025-96562/): Malicious code in sheer_earwig_requirement (npm) (malicious package)
- [MAL-2025-96561](https://insights.sbomify.com/MAL-2025-96561/): Malicious code in sheer_butterfly_z3n (npm) (malicious package)
- [MAL-2025-96560](https://insights.sbomify.com/MAL-2025-96560/): Malicious code in sharp_vole_z3n (npm) (malicious package)
- [MAL-2025-9656](https://insights.sbomify.com/MAL-2025-9656/): Malicious code in @waitfortea2024/ut-natus-saepe (npm) (malicious package)
- [MAL-2025-96559](https://insights.sbomify.com/MAL-2025-96559/): Malicious code in sharp_koi_requirement (npm) (malicious package)
- [MAL-2025-96558](https://insights.sbomify.com/MAL-2025-96558/): Malicious code in sharp_cephalopod_z3n (npm) (malicious package)
- [MAL-2025-96557](https://insights.sbomify.com/MAL-2025-96557/): Malicious code in shared_wallaby_z3n (npm) (malicious package)
- [MAL-2025-96556](https://insights.sbomify.com/MAL-2025-96556/): Malicious code in shared_viper_z3n (npm) (malicious package)
- [MAL-2025-96555](https://insights.sbomify.com/MAL-2025-96555/): Malicious code in shared_mosquito_z3n (npm) (malicious package)
- [MAL-2025-96554](https://insights.sbomify.com/MAL-2025-96554/): Malicious code in shared_harrier_z3n (npm) (malicious package)
- [MAL-2025-96553](https://insights.sbomify.com/MAL-2025-96553/): Malicious code in shared_elephant_z3n (npm) (malicious package)
- [MAL-2025-96552](https://insights.sbomify.com/MAL-2025-96552/): Malicious code in shared_amphibian_z3n (npm) (malicious package)
- [MAL-2025-96551](https://insights.sbomify.com/MAL-2025-96551/): Malicious code in shallow_panther_z3n (npm) (malicious package)
- [MAL-2025-96550](https://insights.sbomify.com/MAL-2025-96550/): Malicious code in shallow_mongoose_z3n (npm) (malicious package)
- [MAL-2025-9655](https://insights.sbomify.com/MAL-2025-9655/): Malicious code in @waitfortea2024/tenetur-itaque-magnam (npm) (malicious package)
- [MAL-2025-96549](https://insights.sbomify.com/MAL-2025-96549/): Malicious code in shallow_lemur_requirement (npm) (malicious package)
- [MAL-2025-96548](https://insights.sbomify.com/MAL-2025-96548/): Malicious code in shallow_herring_z3n (npm) (malicious package)
- [MAL-2025-96547](https://insights.sbomify.com/MAL-2025-96547/): Malicious code in shaky_tiger_z3n (npm) (malicious package)
- [MAL-2025-96546](https://insights.sbomify.com/MAL-2025-96546/): Malicious code in shaky_rat_z3n (npm) (malicious package)
- [MAL-2025-96545](https://insights.sbomify.com/MAL-2025-96545/): Malicious code in shaky_rabbit_z3n (npm) (malicious package)
- [MAL-2025-96544](https://insights.sbomify.com/MAL-2025-96544/): Malicious code in shaky_penguin_z3n (npm) (malicious package)
- [MAL-2025-96543](https://insights.sbomify.com/MAL-2025-96543/): Malicious code in shaky_kingfisher_z3n (npm) (malicious package)
- [MAL-2025-96542](https://insights.sbomify.com/MAL-2025-96542/): Malicious code in shaky_bedbug_requirement (npm) (malicious package)
- [MAL-2025-96541](https://insights.sbomify.com/MAL-2025-96541/): Malicious code in shaggy_goose_z3n (npm) (malicious package)
- [MAL-2025-96540](https://insights.sbomify.com/MAL-2025-96540/): Malicious code in sexual_orca_z3n (npm) (malicious package)
- [MAL-2025-9654](https://insights.sbomify.com/MAL-2025-9654/): Malicious code in @waitfortea2024/sturdy-palm-tree (npm) (malicious package)
- [MAL-2025-96539](https://insights.sbomify.com/MAL-2025-96539/): Malicious code in sexual_blackbird_z3n (npm) (malicious package)
- [MAL-2025-96538](https://insights.sbomify.com/MAL-2025-96538/): Malicious code in severe_slug_z3n (npm) (malicious package)
- [MAL-2025-96537](https://insights.sbomify.com/MAL-2025-96537/): Malicious code in severe_silverfish_z3n (npm) (malicious package)
- [MAL-2025-96536](https://insights.sbomify.com/MAL-2025-96536/): Malicious code in severe_ocelot_z3n (npm) (malicious package)
- [MAL-2025-96535](https://insights.sbomify.com/MAL-2025-96535/): Malicious code in serious_louse_z3n (npm) (malicious package)
- [MAL-2025-96534](https://insights.sbomify.com/MAL-2025-96534/): Malicious code in serious_hare_z3n (npm) (malicious package)
- [MAL-2025-96533](https://insights.sbomify.com/MAL-2025-96533/): Malicious code in serious_goat_z3n (npm) (malicious package)
- [MAL-2025-96532](https://insights.sbomify.com/MAL-2025-96532/): Malicious code in serious_gerbil_z3n (npm) (malicious package)
- [MAL-2025-96531](https://insights.sbomify.com/MAL-2025-96531/): Malicious code in serious_eagle_z3n (npm) (malicious package)
- [MAL-2025-96530](https://insights.sbomify.com/MAL-2025-96530/): Malicious code in separate_smelt_z3n (npm) (malicious package)
- [MAL-2025-9653](https://insights.sbomify.com/MAL-2025-9653/): Malicious code in @waitfortea2024/soluta-dicta-temporibus (npm) (malicious package)
- [MAL-2025-96529](https://insights.sbomify.com/MAL-2025-96529/): Malicious code in separate_platypus_z3n (npm) (malicious package)
- [MAL-2025-96528](https://insights.sbomify.com/MAL-2025-96528/): Malicious code in separate_mollusk_z3n (npm) (malicious package)
- [MAL-2025-96527](https://insights.sbomify.com/MAL-2025-96527/): Malicious code in separate_jay_requirement (npm) (malicious package)
- [MAL-2025-96526](https://insights.sbomify.com/MAL-2025-96526/): Malicious code in separate_impala_z3n (npm) (malicious package)
- [MAL-2025-96525](https://insights.sbomify.com/MAL-2025-96525/): Malicious code in separate_horse_z3n (npm) (malicious package)
- [MAL-2025-96524](https://insights.sbomify.com/MAL-2025-96524/): Malicious code in sensitive_thrush_z3n (npm) (malicious package)
- [MAL-2025-96523](https://insights.sbomify.com/MAL-2025-96523/): Malicious code in sensitive_piranha_requirement (npm) (malicious package)
- [MAL-2025-96522](https://insights.sbomify.com/MAL-2025-96522/): Malicious code in sensitive_parrotfish_z3n (npm) (malicious package)
- [MAL-2025-96521](https://insights.sbomify.com/MAL-2025-96521/): Malicious code in sensitive_damselfly_z3n (npm) (malicious package)
- [MAL-2025-96520](https://insights.sbomify.com/MAL-2025-96520/): Malicious code in sensible_dingo_z3n (npm) (malicious package)
- [MAL-2025-9652](https://insights.sbomify.com/MAL-2025-9652/): Malicious code in @waitfortea2024/sapiente-officiis-reprehenderit (npm) (malicious package)
- [MAL-2025-96519](https://insights.sbomify.com/MAL-2025-96519/): Malicious code in sensible_crawdad_z3n (npm) (malicious package)
- [MAL-2025-96518](https://insights.sbomify.com/MAL-2025-96518/): Malicious code in sensible_canidae_z3n (npm) (malicious package)
- [MAL-2025-96517](https://insights.sbomify.com/MAL-2025-96517/): Malicious code in sensible_bass_z3n (npm) (malicious package)
- [MAL-2025-96516](https://insights.sbomify.com/MAL-2025-96516/): Malicious code in sensible_asp_z3n (npm) (malicious package)
- [MAL-2025-96515](https://insights.sbomify.com/MAL-2025-96515/): Malicious code in senior_tapir_z3n (npm) (malicious package)
- [MAL-2025-96514](https://insights.sbomify.com/MAL-2025-96514/): Malicious code in senior_sloth_z3n (npm) (malicious package)
- [MAL-2025-96513](https://insights.sbomify.com/MAL-2025-96513/): Malicious code in senior_gull_z3n (npm) (malicious package)
- [MAL-2025-96512](https://insights.sbomify.com/MAL-2025-96512/): Malicious code in senior_cow_z3n (npm) (malicious package)
- [MAL-2025-96511](https://insights.sbomify.com/MAL-2025-96511/): Malicious code in senior_cobra_z3n (npm) (malicious package)
- [MAL-2025-96510](https://insights.sbomify.com/MAL-2025-96510/): Malicious code in semantic_skink_z3n (npm) (malicious package)
- [MAL-2025-9651](https://insights.sbomify.com/MAL-2025-9651/): Malicious code in @waitfortea2024/repellendus-distinctio-aliquam (npm) (malicious package)
- [MAL-2025-96509](https://insights.sbomify.com/MAL-2025-96509/): Malicious code in semantic_reindeer_z3n (npm) (malicious package)
- [MAL-2025-96508](https://insights.sbomify.com/MAL-2025-96508/): Malicious code in semantic_goat_z3n (npm) (malicious package)
- [MAL-2025-96507](https://insights.sbomify.com/MAL-2025-96507/): Malicious code in semantic_dinosaur_z3n (npm) (malicious package)
- [MAL-2025-96506](https://insights.sbomify.com/MAL-2025-96506/): Malicious code in selfish_woodpecker_z3n (npm) (malicious package)
- [MAL-2025-96505](https://insights.sbomify.com/MAL-2025-96505/): Malicious code in selfish_toad_requirement (npm) (malicious package)
- [MAL-2025-96504](https://insights.sbomify.com/MAL-2025-96504/): Malicious code in selfish_loon_z3n (npm) (malicious package)
- [MAL-2025-96503](https://insights.sbomify.com/MAL-2025-96503/): Malicious code in selfish_lemur_z3n (npm) (malicious package)
- [MAL-2025-96502](https://insights.sbomify.com/MAL-2025-96502/): Malicious code in selfish_kingfisher_z3n (npm) (malicious package)
- [MAL-2025-96501](https://insights.sbomify.com/MAL-2025-96501/): Malicious code in selective_walrus_z3n (npm) (malicious package)
- [MAL-2025-96500](https://insights.sbomify.com/MAL-2025-96500/): Malicious code in selective_magpie_z3n (npm) (malicious package)
- [MAL-2025-9650](https://insights.sbomify.com/MAL-2025-9650/): Malicious code in @waitfortea2024/qui-minima-dignissimos (npm) (malicious package)
- [MAL-2025-96499](https://insights.sbomify.com/MAL-2025-96499/): Malicious code in selective_clam_z3n (npm) (malicious package)
- [MAL-2025-96498](https://insights.sbomify.com/MAL-2025-96498/): Malicious code in selected_quokka_z3n (npm) (malicious package)
- [MAL-2025-96497](https://insights.sbomify.com/MAL-2025-96497/): Malicious code in selected_opossum_z3n (npm) (malicious package)
- [MAL-2025-96496](https://insights.sbomify.com/MAL-2025-96496/): Malicious code in select_primate_z3n (npm) (malicious package)
- [MAL-2025-96495](https://insights.sbomify.com/MAL-2025-96495/): Malicious code in select_elephant_z3n (npm) (malicious package)
- [MAL-2025-96494](https://insights.sbomify.com/MAL-2025-96494/): Malicious code in select_alligator_z3n (npm) (malicious package)
- [MAL-2025-96493](https://insights.sbomify.com/MAL-2025-96493/): Malicious code in secure_wombat_z3n (npm) (malicious package)
- [MAL-2025-96492](https://insights.sbomify.com/MAL-2025-96492/): Malicious code in secure_frog_z3n (npm) (malicious package)
- [MAL-2025-96491](https://insights.sbomify.com/MAL-2025-96491/): Malicious code in secure_flyingfish_z3n (npm) (malicious package)
- [MAL-2025-96490](https://insights.sbomify.com/MAL-2025-96490/): Malicious code in secure_elk_z3n (npm) (malicious package)
- [MAL-2025-9649](https://insights.sbomify.com/MAL-2025-9649/): Malicious code in @waitfortea2024/quas-repellendus-libero (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/43/