# Vulnerabilities published in 2025 - [MAL-2025-61409](https://insights.sbomify.com/MAL-2025-61409/): Malicious code in suitable_cockroach_z3n (npm) (malicious package) - [MAL-2025-61408](https://insights.sbomify.com/MAL-2025-61408/): Malicious code in sufficient_loon_z3n (npm) (malicious package) - [MAL-2025-61407](https://insights.sbomify.com/MAL-2025-61407/): Malicious code in sufficient_cricket_z3n (npm) (malicious package) - [MAL-2025-61406](https://insights.sbomify.com/MAL-2025-61406/): Malicious code in successive_weasel_z3n (npm) (malicious package) - [MAL-2025-61405](https://insights.sbomify.com/MAL-2025-61405/): Malicious code in successive_hawk_z3n (npm) (malicious package) - [MAL-2025-61404](https://insights.sbomify.com/MAL-2025-61404/): Malicious code in successive_grouse_z3n (npm) (malicious package) - [MAL-2025-61403](https://insights.sbomify.com/MAL-2025-61403/): Malicious code in successive_crab_z3n (npm) (malicious package) - [MAL-2025-61402](https://insights.sbomify.com/MAL-2025-61402/): Malicious code in substantial_zebra_z3n (npm) (malicious package) - [MAL-2025-61401](https://insights.sbomify.com/MAL-2025-61401/): Malicious code in substantial_mackerel_z3n (npm) (malicious package) - [MAL-2025-61400](https://insights.sbomify.com/MAL-2025-61400/): Malicious code in subsequent_toad_z3n (npm) (malicious package) - [MAL-2025-6140](https://insights.sbomify.com/MAL-2025-6140/): Malicious code in @lain-test-org/test-package (npm) (malicious package) - [MAL-2025-614](https://insights.sbomify.com/MAL-2025-614/): Malicious code in fast-utilz (npm) (malicious package) - [MAL-2025-61399](https://insights.sbomify.com/MAL-2025-61399/): Malicious code in subsequent_alpaca_z3n (npm) (malicious package) - [MAL-2025-61398](https://insights.sbomify.com/MAL-2025-61398/): Malicious code in stuck_horse_z3n (npm) (malicious package) - [MAL-2025-61397](https://insights.sbomify.com/MAL-2025-61397/): Malicious code in structural_muskox_z3n (npm) (malicious package) - [MAL-2025-61396](https://insights.sbomify.com/MAL-2025-61396/): Malicious code in structural_anteater_z3n (npm) (malicious package) - [MAL-2025-61395](https://insights.sbomify.com/MAL-2025-61395/): Malicious code in strong_parakeet_z3n (npm) (malicious package) - [MAL-2025-61394](https://insights.sbomify.com/MAL-2025-61394/): Malicious code in strong_lemur_z3n (npm) (malicious package) - [MAL-2025-61393](https://insights.sbomify.com/MAL-2025-61393/): Malicious code in strong_lemming_z3n (npm) (malicious package) - [MAL-2025-61392](https://insights.sbomify.com/MAL-2025-61392/): Malicious code in strong_jay_z3n (npm) (malicious package) - [MAL-2025-61391](https://insights.sbomify.com/MAL-2025-61391/): Malicious code in strong_fowl_z3n (npm) (malicious package) - [MAL-2025-61390](https://insights.sbomify.com/MAL-2025-61390/): Malicious code in strong_chipmunk_z3n (npm) (malicious package) - [MAL-2025-6139](https://insights.sbomify.com/MAL-2025-6139/): Malicious code in @jaswanthlanka/mcp-proxy (npm) (malicious package) - [MAL-2025-61389](https://insights.sbomify.com/MAL-2025-61389/): Malicious code in striped_takin_z3n (npm) (malicious package) - [MAL-2025-61388](https://insights.sbomify.com/MAL-2025-61388/): Malicious code in striped_piranha_z3n (npm) (malicious package) - [MAL-2025-61387](https://insights.sbomify.com/MAL-2025-61387/): Malicious code in striped_pig_z3n (npm) (malicious package) - [MAL-2025-61386](https://insights.sbomify.com/MAL-2025-61386/): Malicious code in striped_gerbil_z3n (npm) (malicious package) - [MAL-2025-61385](https://insights.sbomify.com/MAL-2025-61385/): Malicious code in striped_fox_z3n (npm) (malicious package) - [MAL-2025-61384](https://insights.sbomify.com/MAL-2025-61384/): Malicious code in striped_crawdad_z3n (npm) (malicious package) - [MAL-2025-61383](https://insights.sbomify.com/MAL-2025-61383/): Malicious code in striped_catshark_z3n (npm) (malicious package) - [MAL-2025-61382](https://insights.sbomify.com/MAL-2025-61382/): Malicious code in strict_skunk_z3n (npm) (malicious package) - [MAL-2025-61381](https://insights.sbomify.com/MAL-2025-61381/): Malicious code in strict_llama_z3n (npm) (malicious package) - [MAL-2025-61380](https://insights.sbomify.com/MAL-2025-61380/): Malicious code in strategic_stingray_z3n (npm) (malicious package) - [MAL-2025-6138](https://insights.sbomify.com/MAL-2025-6138/): Malicious code in yxt-open-data (npm) (malicious package) - [MAL-2025-61379](https://insights.sbomify.com/MAL-2025-61379/): Malicious code in strategic_shrimp_z3n (npm) (malicious package) - [MAL-2025-61378](https://insights.sbomify.com/MAL-2025-61378/): Malicious code in strategic_flyingfish_z3n (npm) (malicious package) - [MAL-2025-61377](https://insights.sbomify.com/MAL-2025-61377/): Malicious code in strategic_dolphin_z3n (npm) (malicious package) - [MAL-2025-61376](https://insights.sbomify.com/MAL-2025-61376/): Malicious code in strange_rooster_z3n (npm) (malicious package) - [MAL-2025-61375](https://insights.sbomify.com/MAL-2025-61375/): Malicious code in strange_kite_z3n (npm) (malicious package) - [MAL-2025-61374](https://insights.sbomify.com/MAL-2025-61374/): Malicious code in straightforward_swift_z3n (npm) (malicious package) - [MAL-2025-61373](https://insights.sbomify.com/MAL-2025-61373/): Malicious code in straightforward_gerbil_z3n (npm) (malicious package) - [MAL-2025-61372](https://insights.sbomify.com/MAL-2025-61372/): Malicious code in straightforward_bonobo_z3n (npm) (malicious package) - [MAL-2025-61371](https://insights.sbomify.com/MAL-2025-61371/): Malicious code in straight_tiglon_z3n (npm) (malicious package) - [MAL-2025-61370](https://insights.sbomify.com/MAL-2025-61370/): Malicious code in straight_mongoose_z3n (npm) (malicious package) - [MAL-2025-6137](https://insights.sbomify.com/MAL-2025-6137/): Malicious code in yarn-test-git-repo (npm) (malicious package) - [MAL-2025-61369](https://insights.sbomify.com/MAL-2025-61369/): Malicious code in straight_dormouse_z3n (npm) (malicious package) - [MAL-2025-61368](https://insights.sbomify.com/MAL-2025-61368/): Malicious code in stormy_barracuda_z3n (npm) (malicious package) - [MAL-2025-61367](https://insights.sbomify.com/MAL-2025-61367/): Malicious code in stingy_koi_z3n (npm) (malicious package) - [MAL-2025-61366](https://insights.sbomify.com/MAL-2025-61366/): Malicious code in stiff_asp_z3n (npm) (malicious package) - [MAL-2025-61365](https://insights.sbomify.com/MAL-2025-61365/): Malicious code in steep_vulture_z3n (npm) (malicious package) - [MAL-2025-61364](https://insights.sbomify.com/MAL-2025-61364/): Malicious code in steep_sturgeon_z3n (npm) (malicious package) - [MAL-2025-61363](https://insights.sbomify.com/MAL-2025-61363/): Malicious code in steep_mastodon_z3n (npm) (malicious package) - [MAL-2025-61362](https://insights.sbomify.com/MAL-2025-61362/): Malicious code in steep_camel_z3n (npm) (malicious package) - [MAL-2025-61361](https://insights.sbomify.com/MAL-2025-61361/): Malicious code in steep_anglerfish_z3n (npm) (malicious package) - [MAL-2025-61360](https://insights.sbomify.com/MAL-2025-61360/): Malicious code in steady_cheetah_z3n (npm) (malicious package) - [MAL-2025-6136](https://insights.sbomify.com/MAL-2025-6136/): Malicious code in wc (npm) (malicious package) - [MAL-2025-61359](https://insights.sbomify.com/MAL-2025-61359/): Malicious code in statutory_nightingale_z3n (npm) (malicious package) - [MAL-2025-61358](https://insights.sbomify.com/MAL-2025-61358/): Malicious code in statutory_clownfish_z3n (npm) (malicious package) - [MAL-2025-61357](https://insights.sbomify.com/MAL-2025-61357/): Malicious code in statistical_toucan_z3n (npm) (malicious package) - [MAL-2025-61356](https://insights.sbomify.com/MAL-2025-61356/): Malicious code in statistical_scorpion_z3n (npm) (malicious package) - [MAL-2025-61355](https://insights.sbomify.com/MAL-2025-61355/): Malicious code in statistical_hare_z3n (npm) (malicious package) - [MAL-2025-61354](https://insights.sbomify.com/MAL-2025-61354/): Malicious code in statistical_centipede_z3n (npm) (malicious package) - [MAL-2025-61353](https://insights.sbomify.com/MAL-2025-61353/): Malicious code in static_kite_z3n (npm) (malicious package) - [MAL-2025-61352](https://insights.sbomify.com/MAL-2025-61352/): Malicious code in static_jay_z3n (npm) (malicious package) - [MAL-2025-61351](https://insights.sbomify.com/MAL-2025-61351/): Malicious code in standard_quelea_z3n (npm) (malicious package) - [MAL-2025-61350](https://insights.sbomify.com/MAL-2025-61350/): Malicious code in standard_pig_z3n (npm) (malicious package) - [MAL-2025-6135](https://insights.sbomify.com/MAL-2025-6135/): Malicious code in vue4-google-auth (npm) (malicious package) - [MAL-2025-61349](https://insights.sbomify.com/MAL-2025-61349/): Malicious code in standard_lungfish_z3n (npm) (malicious package) - [MAL-2025-61348](https://insights.sbomify.com/MAL-2025-61348/): Malicious code in stale_tyrannosaurus_z3n (npm) (malicious package) - [MAL-2025-61347](https://insights.sbomify.com/MAL-2025-61347/): Malicious code in stable_viper_z3n (npm) (malicious package) - [MAL-2025-61346](https://insights.sbomify.com/MAL-2025-61346/): Malicious code in stable_starfish_z3n (npm) (malicious package) - [MAL-2025-61345](https://insights.sbomify.com/MAL-2025-61345/): Malicious code in squealing_dinosaur_z3n (npm) (malicious package) - [MAL-2025-61344](https://insights.sbomify.com/MAL-2025-61344/): Malicious code in square_primate_z3n (npm) (malicious package) - [MAL-2025-61343](https://insights.sbomify.com/MAL-2025-61343/): Malicious code in square_guppy_z3n (npm) (malicious package) - [MAL-2025-61342](https://insights.sbomify.com/MAL-2025-61342/): Malicious code in spotty_ptarmigan_z3n (npm) (malicious package) - [MAL-2025-61341](https://insights.sbomify.com/MAL-2025-61341/): Malicious code in spotless_platypus_z3n (npm) (malicious package) - [MAL-2025-61340](https://insights.sbomify.com/MAL-2025-61340/): Malicious code in spotless_dove_z3n (npm) (malicious package) - [MAL-2025-6134](https://insights.sbomify.com/MAL-2025-6134/): Malicious code in vercel-edge (npm) (malicious package) - [MAL-2025-61339](https://insights.sbomify.com/MAL-2025-61339/): Malicious code in sporting_gull_z3n (npm) (malicious package) - [MAL-2025-61338](https://insights.sbomify.com/MAL-2025-61338/): Malicious code in spontaneous_peacock_z3n (npm) (malicious package) - [MAL-2025-61337](https://insights.sbomify.com/MAL-2025-61337/): Malicious code in spiritual_swordtail_z3n (npm) (malicious package) - [MAL-2025-61336](https://insights.sbomify.com/MAL-2025-61336/): Malicious code in spiritual_piranha_z3n (npm) (malicious package) - [MAL-2025-61335](https://insights.sbomify.com/MAL-2025-61335/): Malicious code in spiritual_opossum_z3n (npm) (malicious package) - [MAL-2025-61334](https://insights.sbomify.com/MAL-2025-61334/): Malicious code in spicy_mollusk_z3n (npm) (malicious package) - [MAL-2025-61333](https://insights.sbomify.com/MAL-2025-61333/): Malicious code in spicy_blackbird_z3n (npm) (malicious package) - [MAL-2025-61332](https://insights.sbomify.com/MAL-2025-61332/): Malicious code in specified_penguin_z3n (npm) (malicious package) - [MAL-2025-61331](https://insights.sbomify.com/MAL-2025-61331/): Malicious code in specified_newt_z3n (npm) (malicious package) - [MAL-2025-61330](https://insights.sbomify.com/MAL-2025-61330/): Malicious code in specified_bonobo_z3n (npm) (malicious package) - [MAL-2025-6133](https://insights.sbomify.com/MAL-2025-6133/): Malicious code in uid2-ssportal (npm) (malicious package) - [MAL-2025-61329](https://insights.sbomify.com/MAL-2025-61329/): Malicious code in special_toad_z3n (npm) (malicious package) - [MAL-2025-61328](https://insights.sbomify.com/MAL-2025-61328/): Malicious code in special_haddock_z3n (npm) (malicious package) - [MAL-2025-61327](https://insights.sbomify.com/MAL-2025-61327/): Malicious code in special_asp_z3n (npm) (malicious package) - [MAL-2025-61326](https://insights.sbomify.com/MAL-2025-61326/): Malicious code in spare_krill_z3n (npm) (malicious package) - [MAL-2025-61325](https://insights.sbomify.com/MAL-2025-61325/): Malicious code in spare_chimpanzee_z3n (npm) (malicious package) - [MAL-2025-61324](https://insights.sbomify.com/MAL-2025-61324/): Malicious code in soviet_koi_z3n (npm) (malicious package) - [MAL-2025-61323](https://insights.sbomify.com/MAL-2025-61323/): Malicious code in southern_yak_z3n (npm) (malicious package) - [MAL-2025-61322](https://insights.sbomify.com/MAL-2025-61322/): Malicious code in southern_impala_z3n (npm) (malicious package) - [MAL-2025-61321](https://insights.sbomify.com/MAL-2025-61321/): Malicious code in sour_newt_z3n (npm) (malicious package) - [MAL-2025-61320](https://insights.sbomify.com/MAL-2025-61320/): Malicious code in sound_cat_z3n (npm) (malicious package) - [MAL-2025-6132](https://insights.sbomify.com/MAL-2025-6132/): Malicious code in ts-browser-webpack (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/432/