# Vulnerabilities published in 2025


- [MAL-2025-615](https://insights.sbomify.com/MAL-2025-615/): Malicious code in marked-as (npm) (malicious package)
- [MAL-2025-61499](https://insights.sbomify.com/MAL-2025-61499/): Malicious code in tricky_lion_z3n (npm) (malicious package)
- [MAL-2025-61498](https://insights.sbomify.com/MAL-2025-61498/): Malicious code in tricky_hookworm_z3n (npm) (malicious package)
- [MAL-2025-61497](https://insights.sbomify.com/MAL-2025-61497/): Malicious code in tricky_catshark_z3n (npm) (malicious package)
- [MAL-2025-61496](https://insights.sbomify.com/MAL-2025-61496/): Malicious code in tragic_junglefowl_z3n (npm) (malicious package)
- [MAL-2025-61495](https://insights.sbomify.com/MAL-2025-61495/): Malicious code in tragic_falcon_z3n (npm) (malicious package)
- [MAL-2025-61494](https://insights.sbomify.com/MAL-2025-61494/): Malicious code in traditional_stoat_z3n (npm) (malicious package)
- [MAL-2025-61493](https://insights.sbomify.com/MAL-2025-61493/): Malicious code in traditional_mackerel_z3n (npm) (malicious package)
- [MAL-2025-61492](https://insights.sbomify.com/MAL-2025-61492/): Malicious code in traditional_carp_z3n (npm) (malicious package)
- [MAL-2025-61491](https://insights.sbomify.com/MAL-2025-61491/): Malicious code in tough_owl_z3n (npm) (malicious package)
- [MAL-2025-61490](https://insights.sbomify.com/MAL-2025-61490/): Malicious code in tough_gorilla_z3n (npm) (malicious package)
- [MAL-2025-6149](https://insights.sbomify.com/MAL-2025-6149/): Malicious code in api-key-provider (npm) (malicious package)
- [MAL-2025-61489](https://insights.sbomify.com/MAL-2025-61489/): Malicious code in tough_booby_z3n (npm) (malicious package)
- [MAL-2025-61488](https://insights.sbomify.com/MAL-2025-61488/): Malicious code in total_toucan_z3n (npm) (malicious package)
- [MAL-2025-61487](https://insights.sbomify.com/MAL-2025-61487/): Malicious code in total_limpet_z3n (npm) (malicious package)
- [MAL-2025-61486](https://insights.sbomify.com/MAL-2025-61486/): Malicious code in total_blackbird_z3n (npm) (malicious package)
- [MAL-2025-61485](https://insights.sbomify.com/MAL-2025-61485/): Malicious code in tory_sailfish_z3n (npm) (malicious package)
- [MAL-2025-61484](https://insights.sbomify.com/MAL-2025-61484/): Malicious code in tory_fowl_z3n (npm) (malicious package)
- [MAL-2025-61483](https://insights.sbomify.com/MAL-2025-61483/): Malicious code in tory_fly_z3n (npm) (malicious package)
- [MAL-2025-61482](https://insights.sbomify.com/MAL-2025-61482/): Malicious code in top_wombat_z3n (npm) (malicious package)
- [MAL-2025-61481](https://insights.sbomify.com/MAL-2025-61481/): Malicious code in top_ostrich_z3n (npm) (malicious package)
- [MAL-2025-61480](https://insights.sbomify.com/MAL-2025-61480/): Malicious code in top_boa_z3n (npm) (malicious package)
- [MAL-2025-6148](https://insights.sbomify.com/MAL-2025-6148/): Malicious code in airbnb-shims (npm) (malicious package)
- [MAL-2025-61479](https://insights.sbomify.com/MAL-2025-61479/): Malicious code in tired_ostrich_z3n (npm) (malicious package)
- [MAL-2025-61478](https://insights.sbomify.com/MAL-2025-61478/): Malicious code in tired_crab_z3n (npm) (malicious package)
- [MAL-2025-61477](https://insights.sbomify.com/MAL-2025-61477/): Malicious code in tiny_beaver_z3n (npm) (malicious package)
- [MAL-2025-61476](https://insights.sbomify.com/MAL-2025-61476/): Malicious code in tight_crayfish_z3n (npm) (malicious package)
- [MAL-2025-61475](https://insights.sbomify.com/MAL-2025-61475/): Malicious code in thundering_perch_z3n (npm) (malicious package)
- [MAL-2025-61474](https://insights.sbomify.com/MAL-2025-61474/): Malicious code in thundering_bee_z3n (npm) (malicious package)
- [MAL-2025-61473](https://insights.sbomify.com/MAL-2025-61473/): Malicious code in thoughtless_piranha_z3n (npm) (malicious package)
- [MAL-2025-61472](https://insights.sbomify.com/MAL-2025-61472/): Malicious code in thoughtless_cricket_z3n (npm) (malicious package)
- [MAL-2025-61471](https://insights.sbomify.com/MAL-2025-61471/): Malicious code in thoughtful_vicuna_z3n (npm) (malicious package)
- [MAL-2025-61470](https://insights.sbomify.com/MAL-2025-61470/): Malicious code in thoughtful_marten_z3n (npm) (malicious package)
- [MAL-2025-6147](https://insights.sbomify.com/MAL-2025-6147/): Malicious code in airbnb-javascript (npm) (malicious package)
- [MAL-2025-61469](https://insights.sbomify.com/MAL-2025-61469/): Malicious code in thoughtful_gorilla_z3n (npm) (malicious package)
- [MAL-2025-61468](https://insights.sbomify.com/MAL-2025-61468/): Malicious code in thorough_skunk_z3n (npm) (malicious package)
- [MAL-2025-61467](https://insights.sbomify.com/MAL-2025-61467/): Malicious code in thirsty_turtle_z3n (npm) (malicious package)
- [MAL-2025-61466](https://insights.sbomify.com/MAL-2025-61466/): Malicious code in thirsty_mink_z3n (npm) (malicious package)
- [MAL-2025-61465](https://insights.sbomify.com/MAL-2025-61465/): Malicious code in thirsty_dove_z3n (npm) (malicious package)
- [MAL-2025-61464](https://insights.sbomify.com/MAL-2025-61464/): Malicious code in thin_mongoose_z3n (npm) (malicious package)
- [MAL-2025-61463](https://insights.sbomify.com/MAL-2025-61463/): Malicious code in thin_coyote_z3n (npm) (malicious package)
- [MAL-2025-61462](https://insights.sbomify.com/MAL-2025-61462/): Malicious code in thick_wren_z3n (npm) (malicious package)
- [MAL-2025-61461](https://insights.sbomify.com/MAL-2025-61461/): Malicious code in thick_perch_z3n (npm) (malicious package)
- [MAL-2025-61460](https://insights.sbomify.com/MAL-2025-61460/): Malicious code in theoretical_manatee_z3n (npm) (malicious package)
- [MAL-2025-6146](https://insights.sbomify.com/MAL-2025-6146/): Malicious code in airbnb-api-resource (npm) (malicious package)
- [MAL-2025-61459](https://insights.sbomify.com/MAL-2025-61459/): Malicious code in theoretical_cardinal_z3n (npm) (malicious package)
- [MAL-2025-61458](https://insights.sbomify.com/MAL-2025-61458/): Malicious code in then_partridge_z3n (npm) (malicious package)
- [MAL-2025-61457](https://insights.sbomify.com/MAL-2025-61457/): Malicious code in testy_quokka_z3n (npm) (malicious package)
- [MAL-2025-61456](https://insights.sbomify.com/MAL-2025-61456/): Malicious code in terrible_tern_z3n (npm) (malicious package)
- [MAL-2025-61455](https://insights.sbomify.com/MAL-2025-61455/): Malicious code in terrible_mole_z3n (npm) (malicious package)
- [MAL-2025-61454](https://insights.sbomify.com/MAL-2025-61454/): Malicious code in terrible_cicada_z3n (npm) (malicious package)
- [MAL-2025-61453](https://insights.sbomify.com/MAL-2025-61453/): Malicious code in tense_worm_z3n (npm) (malicious package)
- [MAL-2025-61452](https://insights.sbomify.com/MAL-2025-61452/): Malicious code in tense_tahr_z3n (npm) (malicious package)
- [MAL-2025-61451](https://insights.sbomify.com/MAL-2025-61451/): Malicious code in tender_quokka_z3n (npm) (malicious package)
- [MAL-2025-61450](https://insights.sbomify.com/MAL-2025-61450/): Malicious code in tender_jay_z3n (npm) (malicious package)
- [MAL-2025-6145](https://insights.sbomify.com/MAL-2025-6145/): Malicious code in adspaces (npm) (malicious package)
- [MAL-2025-61449](https://insights.sbomify.com/MAL-2025-61449/): Malicious code in tender_gopher_z3n (npm) (malicious package)
- [MAL-2025-61448](https://insights.sbomify.com/MAL-2025-61448/): Malicious code in tender_flyingfish_z3n (npm) (malicious package)
- [MAL-2025-61447](https://insights.sbomify.com/MAL-2025-61447/): Malicious code in technological_quelea_z3n (npm) (malicious package)
- [MAL-2025-61446](https://insights.sbomify.com/MAL-2025-61446/): Malicious code in technological_lion_z3n (npm) (malicious package)
- [MAL-2025-61445](https://insights.sbomify.com/MAL-2025-61445/): Malicious code in technological_ape_z3n (npm) (malicious package)
- [MAL-2025-61444](https://insights.sbomify.com/MAL-2025-61444/): Malicious code in technical_tiglon_z3n (npm) (malicious package)
- [MAL-2025-61443](https://insights.sbomify.com/MAL-2025-61443/): Malicious code in tasteless_canidae_z3n (npm) (malicious package)
- [MAL-2025-61442](https://insights.sbomify.com/MAL-2025-61442/): Malicious code in tart_jellyfish_z3n (npm) (malicious package)
- [MAL-2025-61441](https://insights.sbomify.com/MAL-2025-61441/): Malicious code in tart_bonobo_z3n (npm) (malicious package)
- [MAL-2025-61440](https://insights.sbomify.com/MAL-2025-61440/): Malicious code in tame_skunk_z3n (npm) (malicious package)
- [MAL-2025-6144](https://insights.sbomify.com/MAL-2025-6144/): Malicious code in adaptivecards-extras (npm) (malicious package)
- [MAL-2025-61439](https://insights.sbomify.com/MAL-2025-61439/): Malicious code in tame_landfowl_z3n (npm) (malicious package)
- [MAL-2025-61438](https://insights.sbomify.com/MAL-2025-61438/): Malicious code in tall_ostrich_z3n (npm) (malicious package)
- [MAL-2025-61437](https://insights.sbomify.com/MAL-2025-61437/): Malicious code in sympathetic_ermine_z3n (npm) (malicious package)
- [MAL-2025-61436](https://insights.sbomify.com/MAL-2025-61436/): Malicious code in symbolic_jaguar_z3n (npm) (malicious package)
- [MAL-2025-61435](https://insights.sbomify.com/MAL-2025-61435/): Malicious code in swift_felidae_z3n (npm) (malicious package)
- [MAL-2025-61434](https://insights.sbomify.com/MAL-2025-61434/): Malicious code in swift_canid_z3n (npm) (malicious package)
- [MAL-2025-61433](https://insights.sbomify.com/MAL-2025-61433/): Malicious code in sweet_flea_z3n (npm) (malicious package)
- [MAL-2025-61432](https://insights.sbomify.com/MAL-2025-61432/): Malicious code in sweet_cod_z3n (npm) (malicious package)
- [MAL-2025-61431](https://insights.sbomify.com/MAL-2025-61431/): Malicious code in surviving_unicorn_z3n (npm) (malicious package)
- [MAL-2025-61430](https://insights.sbomify.com/MAL-2025-61430/): Malicious code in surviving_canid_z3n (npm) (malicious package)
- [MAL-2025-6143](https://insights.sbomify.com/MAL-2025-6143/): Malicious code in @verge-vcl-react/empty-state (npm) (malicious package)
- [MAL-2025-61429](https://insights.sbomify.com/MAL-2025-61429/): Malicious code in surrounding_kangaroo_z3n (npm) (malicious package)
- [MAL-2025-61428](https://insights.sbomify.com/MAL-2025-61428/): Malicious code in surrounding_clam_z3n (npm) (malicious package)
- [MAL-2025-61427](https://insights.sbomify.com/MAL-2025-61427/): Malicious code in surprising_toucan_z3n (npm) (malicious package)
- [MAL-2025-61426](https://insights.sbomify.com/MAL-2025-61426/): Malicious code in surprising_hornet_z3n (npm) (malicious package)
- [MAL-2025-61425](https://insights.sbomify.com/MAL-2025-61425/): Malicious code in sure_lungfish_z3n (npm) (malicious package)
- [MAL-2025-61424](https://insights.sbomify.com/MAL-2025-61424/): Malicious code in sure_anteater_z3n (npm) (malicious package)
- [MAL-2025-61423](https://insights.sbomify.com/MAL-2025-61423/): Malicious code in sure_alpaca_z3n (npm) (malicious package)
- [MAL-2025-61422](https://insights.sbomify.com/MAL-2025-61422/): Malicious code in supposed_mockingbird_z3n (npm) (malicious package)
- [MAL-2025-61421](https://insights.sbomify.com/MAL-2025-61421/): Malicious code in supposed_lungfish_z3n (npm) (malicious package)
- [MAL-2025-61420](https://insights.sbomify.com/MAL-2025-61420/): Malicious code in supposed_goldfish_z3n (npm) (malicious package)
- [MAL-2025-6142](https://insights.sbomify.com/MAL-2025-6142/): Malicious code in @verge-vcl-react/data-grid (npm) (malicious package)
- [MAL-2025-61419](https://insights.sbomify.com/MAL-2025-61419/): Malicious code in supporting_dragonfly_z3n (npm) (malicious package)
- [MAL-2025-61418](https://insights.sbomify.com/MAL-2025-61418/): Malicious code in supporting_cockroach_z3n (npm) (malicious package)
- [MAL-2025-61417](https://insights.sbomify.com/MAL-2025-61417/): Malicious code in super_piranha_z3n (npm) (malicious package)
- [MAL-2025-61416](https://insights.sbomify.com/MAL-2025-61416/): Malicious code in super_asp_z3n (npm) (malicious package)
- [MAL-2025-61415](https://insights.sbomify.com/MAL-2025-61415/): Malicious code in sunny_viper_z3n (npm) (malicious package)
- [MAL-2025-61414](https://insights.sbomify.com/MAL-2025-61414/): Malicious code in sunny_porpoise_z3n (npm) (malicious package)
- [MAL-2025-61413](https://insights.sbomify.com/MAL-2025-61413/): Malicious code in sunny_peacock_z3n (npm) (malicious package)
- [MAL-2025-61412](https://insights.sbomify.com/MAL-2025-61412/): Malicious code in suitable_rodent_z3n (npm) (malicious package)
- [MAL-2025-61411](https://insights.sbomify.com/MAL-2025-61411/): Malicious code in suitable_gamefowl_z3n (npm) (malicious package)
- [MAL-2025-61410](https://insights.sbomify.com/MAL-2025-61410/): Malicious code in suitable_crayfish_z3n (npm) (malicious package)
- [MAL-2025-6141](https://insights.sbomify.com/MAL-2025-6141/): Malicious code in @lain-test-org/test-package2 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/431/