# Vulnerabilities published in 2025 - [MAL-2025-6159](https://insights.sbomify.com/MAL-2025-6159/): Malicious code in fathom-fox (npm) (malicious package) - [MAL-2025-61589](https://insights.sbomify.com/MAL-2025-61589/): Malicious code in visible_gecko_z3n (npm) (malicious package) - [MAL-2025-61588](https://insights.sbomify.com/MAL-2025-61588/): Malicious code in visible_chipmunk_z3n (npm) (malicious package) - [MAL-2025-61587](https://insights.sbomify.com/MAL-2025-61587/): Malicious code in violent_swift_z3n (npm) (malicious package) - [MAL-2025-61586](https://insights.sbomify.com/MAL-2025-61586/): Malicious code in violent_shrimp_z3n (npm) (malicious package) - [MAL-2025-61585](https://insights.sbomify.com/MAL-2025-61585/): Malicious code in victorious_ostrich_z3n (npm) (malicious package) - [MAL-2025-61584](https://insights.sbomify.com/MAL-2025-61584/): Malicious code in victorious_gerbil_z3n (npm) (malicious package) - [MAL-2025-61583](https://insights.sbomify.com/MAL-2025-61583/): Malicious code in victorious_chipmunk_z3n (npm) (malicious package) - [MAL-2025-61582](https://insights.sbomify.com/MAL-2025-61582/): Malicious code in vicious_wildcat_z3n (npm) (malicious package) - [MAL-2025-61581](https://insights.sbomify.com/MAL-2025-61581/): Malicious code in vicious_lemur_z3n (npm) (malicious package) - [MAL-2025-61580](https://insights.sbomify.com/MAL-2025-61580/): Malicious code in vicious_guan_z3n (npm) (malicious package) - [MAL-2025-6158](https://insights.sbomify.com/MAL-2025-6158/): Malicious code in dependabot-auto-triage (npm) (malicious package) - [MAL-2025-61579](https://insights.sbomify.com/MAL-2025-61579/): Malicious code in vertical_vicuna_z3n (npm) (malicious package) - [MAL-2025-61578](https://insights.sbomify.com/MAL-2025-61578/): Malicious code in vertical_tyrannosaurus_z3n (npm) (malicious package) - [MAL-2025-61577](https://insights.sbomify.com/MAL-2025-61577/): Malicious code in vertical_prawn_z3n (npm) (malicious package) - [MAL-2025-61576](https://insights.sbomify.com/MAL-2025-61576/): Malicious code in verbal_aphid_z3n (npm) (malicious package) - [MAL-2025-61575](https://insights.sbomify.com/MAL-2025-61575/): Malicious code in vast_mongoose_z3n (npm) (malicious package) - [MAL-2025-61574](https://insights.sbomify.com/MAL-2025-61574/): Malicious code in vast_junglefowl_z3n (npm) (malicious package) - [MAL-2025-61573](https://insights.sbomify.com/MAL-2025-61573/): Malicious code in vast_dove_z3n (npm) (malicious package) - [MAL-2025-61572](https://insights.sbomify.com/MAL-2025-61572/): Malicious code in varying_wolf_z3n (npm) (malicious package) - [MAL-2025-61571](https://insights.sbomify.com/MAL-2025-61571/): Malicious code in varying_whippet_z3n (npm) (malicious package) - [MAL-2025-61570](https://insights.sbomify.com/MAL-2025-61570/): Malicious code in varying_butterfly_z3n (npm) (malicious package) - [MAL-2025-6157](https://insights.sbomify.com/MAL-2025-6157/): Malicious code in dc-dependencyv (npm) (malicious package) - [MAL-2025-61569](https://insights.sbomify.com/MAL-2025-61569/): Malicious code in various_sloth_z3n (npm) (malicious package) - [MAL-2025-61568](https://insights.sbomify.com/MAL-2025-61568/): Malicious code in varied_mastodon_z3n (npm) (malicious package) - [MAL-2025-61567](https://insights.sbomify.com/MAL-2025-61567/): Malicious code in varied_cat_z3n (npm) (malicious package) - [MAL-2025-61566](https://insights.sbomify.com/MAL-2025-61566/): Malicious code in varied_anglerfish_z3n (npm) (malicious package) - [MAL-2025-61565](https://insights.sbomify.com/MAL-2025-61565/): Malicious code in variable_sole_z3n (npm) (malicious package) - [MAL-2025-61564](https://insights.sbomify.com/MAL-2025-61564/): Malicious code in variable_marmoset_z3n (npm) (malicious package) - [MAL-2025-61563](https://insights.sbomify.com/MAL-2025-61563/): Malicious code in valuable_owl_z3n (npm) (malicious package) - [MAL-2025-61562](https://insights.sbomify.com/MAL-2025-61562/): Malicious code in valid_marmoset_z3n (npm) (malicious package) - [MAL-2025-61561](https://insights.sbomify.com/MAL-2025-61561/): Malicious code in vague_dormouse_z3n (npm) (malicious package) - [MAL-2025-61560](https://insights.sbomify.com/MAL-2025-61560/): Malicious code in usual_termite_z3n (npm) (malicious package) - [MAL-2025-6156](https://insights.sbomify.com/MAL-2025-6156/): Malicious code in cookiefunctions (npm) (malicious package) - [MAL-2025-61559](https://insights.sbomify.com/MAL-2025-61559/): Malicious code in usual_squid_z3n (npm) (malicious package) - [MAL-2025-61558](https://insights.sbomify.com/MAL-2025-61558/): Malicious code in usual_roundworm_z3n (npm) (malicious package) - [MAL-2025-61557](https://insights.sbomify.com/MAL-2025-61557/): Malicious code in usual_platypus_z3n (npm) (malicious package) - [MAL-2025-61556](https://insights.sbomify.com/MAL-2025-61556/): Malicious code in usual_owl_z3n (npm) (malicious package) - [MAL-2025-61555](https://insights.sbomify.com/MAL-2025-61555/): Malicious code in usual_minnow_z3n (npm) (malicious package) - [MAL-2025-61554](https://insights.sbomify.com/MAL-2025-61554/): Malicious code in usual_gecko_z3n (npm) (malicious package) - [MAL-2025-61553](https://insights.sbomify.com/MAL-2025-61553/): Malicious code in usual_aardvark_z3n (npm) (malicious package) - [MAL-2025-61552](https://insights.sbomify.com/MAL-2025-61552/): Malicious code in useful_orangutan_z3n (npm) (malicious package) - [MAL-2025-61551](https://insights.sbomify.com/MAL-2025-61551/): Malicious code in useful_goldfish_z3n (npm) (malicious package) - [MAL-2025-61550](https://insights.sbomify.com/MAL-2025-61550/): Malicious code in useful_chinchilla_z3n (npm) (malicious package) - [MAL-2025-6155](https://insights.sbomify.com/MAL-2025-6155/): Malicious code in community-pass-react-native-wrapper (npm) (malicious package) - [MAL-2025-61549](https://insights.sbomify.com/MAL-2025-61549/): Malicious code in used_snake_z3n (npm) (malicious package) - [MAL-2025-61548](https://insights.sbomify.com/MAL-2025-61548/): Malicious code in used_gibbon_z3n (npm) (malicious package) - [MAL-2025-61547](https://insights.sbomify.com/MAL-2025-61547/): Malicious code in urgent_tuna_z3n (npm) (malicious package) - [MAL-2025-61546](https://insights.sbomify.com/MAL-2025-61546/): Malicious code in urban_cobra_z3n (npm) (malicious package) - [MAL-2025-61545](https://insights.sbomify.com/MAL-2025-61545/): Malicious code in uptight_hedgehog_z3n (npm) (malicious package) - [MAL-2025-61544](https://insights.sbomify.com/MAL-2025-61544/): Malicious code in uptight_flamingo_z3n (npm) (malicious package) - [MAL-2025-61543](https://insights.sbomify.com/MAL-2025-61543/): Malicious code in upper_koala_z3n (npm) (malicious package) - [MAL-2025-61542](https://insights.sbomify.com/MAL-2025-61542/): Malicious code in unsightly_echidna_z3n (npm) (malicious package) - [MAL-2025-61541](https://insights.sbomify.com/MAL-2025-61541/): Malicious code in unsightly_catfish_z3n (npm) (malicious package) - [MAL-2025-61540](https://insights.sbomify.com/MAL-2025-61540/): Malicious code in united_chinchilla_z3n (npm) (malicious package) - [MAL-2025-6154](https://insights.sbomify.com/MAL-2025-6154/): Malicious code in cloudmedia (npm) (malicious package) - [MAL-2025-61539](https://insights.sbomify.com/MAL-2025-61539/): Malicious code in united_armadillo_z3n (npm) (malicious package) - [MAL-2025-61538](https://insights.sbomify.com/MAL-2025-61538/): Malicious code in unique_boa_z3n (npm) (malicious package) - [MAL-2025-61537](https://insights.sbomify.com/MAL-2025-61537/): Malicious code in uninterested_deer_z3n (npm) (malicious package) - [MAL-2025-61536](https://insights.sbomify.com/MAL-2025-61536/): Malicious code in uniform_porcupine_z3n (npm) (malicious package) - [MAL-2025-61535](https://insights.sbomify.com/MAL-2025-61535/): Malicious code in uniform_bison_z3n (npm) (malicious package) - [MAL-2025-61534](https://insights.sbomify.com/MAL-2025-61534/): Malicious code in unhappy_seahorse_z3n (npm) (malicious package) - [MAL-2025-61533](https://insights.sbomify.com/MAL-2025-61533/): Malicious code in unhappy_bonobo_z3n (npm) (malicious package) - [MAL-2025-61532](https://insights.sbomify.com/MAL-2025-61532/): Malicious code in unfortunate_tortoise_z3n (npm) (malicious package) - [MAL-2025-61531](https://insights.sbomify.com/MAL-2025-61531/): Malicious code in unfortunate_scorpion_z3n (npm) (malicious package) - [MAL-2025-61530](https://insights.sbomify.com/MAL-2025-61530/): Malicious code in unfair_wildebeest_z3n (npm) (malicious package) - [MAL-2025-6153](https://insights.sbomify.com/MAL-2025-6153/): Malicious code in axios-hehe (npm) (malicious package) - [MAL-2025-61529](https://insights.sbomify.com/MAL-2025-61529/): Malicious code in uneven_thrush_z3n (npm) (malicious package) - [MAL-2025-61528](https://insights.sbomify.com/MAL-2025-61528/): Malicious code in uneven_jellyfish_z3n (npm) (malicious package) - [MAL-2025-61527](https://insights.sbomify.com/MAL-2025-61527/): Malicious code in uneven_clam_z3n (npm) (malicious package) - [MAL-2025-61526](https://insights.sbomify.com/MAL-2025-61526/): Malicious code in unemployed_vicuna_z3n (npm) (malicious package) - [MAL-2025-61525](https://insights.sbomify.com/MAL-2025-61525/): Malicious code in unemployed_hedgehog_z3n (npm) (malicious package) - [MAL-2025-61524](https://insights.sbomify.com/MAL-2025-61524/): Malicious code in underlying_pheasant_z3n (npm) (malicious package) - [MAL-2025-61523](https://insights.sbomify.com/MAL-2025-61523/): Malicious code in underlying_marmot_z3n (npm) (malicious package) - [MAL-2025-61522](https://insights.sbomify.com/MAL-2025-61522/): Malicious code in underlying_aardwolf_z3n (npm) (malicious package) - [MAL-2025-61521](https://insights.sbomify.com/MAL-2025-61521/): Malicious code in unconscious_planarian_z3n (npm) (malicious package) - [MAL-2025-61520](https://insights.sbomify.com/MAL-2025-61520/): Malicious code in unconscious_pike_z3n (npm) (malicious package) - [MAL-2025-6152](https://insights.sbomify.com/MAL-2025-6152/): Malicious code in aws-iot-twinmaker-grafana-utils (npm) (malicious package) - [MAL-2025-61519](https://insights.sbomify.com/MAL-2025-61519/): Malicious code in unconscious_fox_z3n (npm) (malicious package) - [MAL-2025-61518](https://insights.sbomify.com/MAL-2025-61518/): Malicious code in unchanged_boar_z3n (npm) (malicious package) - [MAL-2025-61517](https://insights.sbomify.com/MAL-2025-61517/): Malicious code in unaware_lizard_z3n (npm) (malicious package) - [MAL-2025-61516](https://insights.sbomify.com/MAL-2025-61516/): Malicious code in unaware_dove_z3n (npm) (malicious package) - [MAL-2025-61515](https://insights.sbomify.com/MAL-2025-61515/): Malicious code in unacceptable_wren_z3n (npm) (malicious package) - [MAL-2025-61514](https://insights.sbomify.com/MAL-2025-61514/): Malicious code in unacceptable_panther_z3n (npm) (malicious package) - [MAL-2025-61513](https://insights.sbomify.com/MAL-2025-61513/): Malicious code in unable_sturgeon_z3n (npm) (malicious package) - [MAL-2025-61512](https://insights.sbomify.com/MAL-2025-61512/): Malicious code in unable_marten_z3n (npm) (malicious package) - [MAL-2025-61511](https://insights.sbomify.com/MAL-2025-61511/): Malicious code in unable_impala_z3n (npm) (malicious package) - [MAL-2025-61510](https://insights.sbomify.com/MAL-2025-61510/): Malicious code in unable_elephant_z3n (npm) (malicious package) - [MAL-2025-6151](https://insights.sbomify.com/MAL-2025-6151/): Malicious code in aspida-lsd (npm) (malicious package) - [MAL-2025-61509](https://insights.sbomify.com/MAL-2025-61509/): Malicious code in ultimate_harrier_z3n (npm) (malicious package) - [MAL-2025-61508](https://insights.sbomify.com/MAL-2025-61508/): Malicious code in ultimate_hare_z3n (npm) (malicious package) - [MAL-2025-61507](https://insights.sbomify.com/MAL-2025-61507/): Malicious code in ultimate_flyingfish_z3n (npm) (malicious package) - [MAL-2025-61506](https://insights.sbomify.com/MAL-2025-61506/): Malicious code in ugliest_yak_z3n (npm) (malicious package) - [MAL-2025-61505](https://insights.sbomify.com/MAL-2025-61505/): Malicious code in typical_trout_z3n (npm) (malicious package) - [MAL-2025-61504](https://insights.sbomify.com/MAL-2025-61504/): Malicious code in troubled_squirrel_z3n (npm) (malicious package) - [MAL-2025-61503](https://insights.sbomify.com/MAL-2025-61503/): Malicious code in troubled_limpet_z3n (npm) (malicious package) - [MAL-2025-61502](https://insights.sbomify.com/MAL-2025-61502/): Malicious code in tropical_lobster_z3n (npm) (malicious package) - [MAL-2025-61501](https://insights.sbomify.com/MAL-2025-61501/): Malicious code in tropical_jaguar_z3n (npm) (malicious package) - [MAL-2025-61500](https://insights.sbomify.com/MAL-2025-61500/): Malicious code in tropical_crayfish_z3n (npm) (malicious package) - [MAL-2025-6150](https://insights.sbomify.com/MAL-2025-6150/): Malicious code in apple-psh (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/430/