# Vulnerabilities published in 2025


- [MAL-2025-61229](https://insights.sbomify.com/MAL-2025-61229/): Malicious code in sad_zebra_z3n (npm) (malicious package)
- [MAL-2025-61228](https://insights.sbomify.com/MAL-2025-61228/): Malicious code in sacred_kiwi_z3n (npm) (malicious package)
- [MAL-2025-61227](https://insights.sbomify.com/MAL-2025-61227/): Malicious code in rude_junglefowl_z3n (npm) (malicious package)
- [MAL-2025-61226](https://insights.sbomify.com/MAL-2025-61226/): Malicious code in round_marsupial_z3n (npm) (malicious package)
- [MAL-2025-61225](https://insights.sbomify.com/MAL-2025-61225/): Malicious code in rotten_galliform_z3n (npm) (malicious package)
- [MAL-2025-61224](https://insights.sbomify.com/MAL-2025-61224/): Malicious code in romantic_partridge_z3n (npm) (malicious package)
- [MAL-2025-61223](https://insights.sbomify.com/MAL-2025-61223/): Malicious code in romantic_bedbug_z3n (npm) (malicious package)
- [MAL-2025-61222](https://insights.sbomify.com/MAL-2025-61222/): Malicious code in rolling_dog_z3n (npm) (malicious package)
- [MAL-2025-61221](https://insights.sbomify.com/MAL-2025-61221/): Malicious code in robust_zebra_z3n (npm) (malicious package)
- [MAL-2025-61220](https://insights.sbomify.com/MAL-2025-61220/): Malicious code in robust_pheasant_z3n (npm) (malicious package)
- [MAL-2025-6122](https://insights.sbomify.com/MAL-2025-6122/): Malicious code in realtime-examples-2w (npm) (malicious package)
- [MAL-2025-61219](https://insights.sbomify.com/MAL-2025-61219/): Malicious code in rival_zebra_z3n (npm) (malicious package)
- [MAL-2025-61218](https://insights.sbomify.com/MAL-2025-61218/): Malicious code in rival_pony_z3n (npm) (malicious package)
- [MAL-2025-61217](https://insights.sbomify.com/MAL-2025-61217/): Malicious code in rival_haddock_z3n (npm) (malicious package)
- [MAL-2025-61216](https://insights.sbomify.com/MAL-2025-61216/): Malicious code in rival_bobolink_z3n (npm) (malicious package)
- [MAL-2025-61215](https://insights.sbomify.com/MAL-2025-61215/): Malicious code in rising_raccoon_z3n (npm) (malicious package)
- [MAL-2025-61214](https://insights.sbomify.com/MAL-2025-61214/): Malicious code in rising_python_z3n (npm) (malicious package)
- [MAL-2025-61213](https://insights.sbomify.com/MAL-2025-61213/): Malicious code in rising_gayal_z3n (npm) (malicious package)
- [MAL-2025-61212](https://insights.sbomify.com/MAL-2025-61212/): Malicious code in ripe_toucan_z3n (npm) (malicious package)
- [MAL-2025-61211](https://insights.sbomify.com/MAL-2025-61211/): Malicious code in right_limpet_z3n (npm) (malicious package)
- [MAL-2025-61210](https://insights.sbomify.com/MAL-2025-61210/): Malicious code in right_hyena_z3n (npm) (malicious package)
- [MAL-2025-6121](https://insights.sbomify.com/MAL-2025-6121/): Malicious code in realtime-demo (npm) (malicious package)
- [MAL-2025-61209](https://insights.sbomify.com/MAL-2025-61209/): Malicious code in ridiculous_tortoise_z3n (npm) (malicious package)
- [MAL-2025-61208](https://insights.sbomify.com/MAL-2025-61208/): Malicious code in ridiculous_mastodon_z3n (npm) (malicious package)
- [MAL-2025-61207](https://insights.sbomify.com/MAL-2025-61207/): Malicious code in ridiculous_catshark_z3n (npm) (malicious package)
- [MAL-2025-61206](https://insights.sbomify.com/MAL-2025-61206/): Malicious code in rich_dormouse_z3n (npm) (malicious package)
- [MAL-2025-61205](https://insights.sbomify.com/MAL-2025-61205/): Malicious code in rich_cuckoo_z3n (npm) (malicious package)
- [MAL-2025-61204](https://insights.sbomify.com/MAL-2025-61204/): Malicious code in revolutionary_wren_z3n (npm) (malicious package)
- [MAL-2025-61203](https://insights.sbomify.com/MAL-2025-61203/): Malicious code in revolutionary_kingfisher_z3n (npm) (malicious package)
- [MAL-2025-61202](https://insights.sbomify.com/MAL-2025-61202/): Malicious code in retired_skunk_z3n (npm) (malicious package)
- [MAL-2025-61201](https://insights.sbomify.com/MAL-2025-61201/): Malicious code in retired_shark_z3n (npm) (malicious package)
- [MAL-2025-61200](https://insights.sbomify.com/MAL-2025-61200/): Malicious code in retail_silkworm_z3n (npm) (malicious package)
- [MAL-2025-6120](https://insights.sbomify.com/MAL-2025-6120/): Malicious code in pro-stocks-widget (npm) (malicious package)
- [MAL-2025-612](https://insights.sbomify.com/MAL-2025-612/): Malicious code in cschalk-next (npm) (malicious package)
- [MAL-2025-61199](https://insights.sbomify.com/MAL-2025-61199/): Malicious code in retail_sailfish_z3n (npm) (malicious package)
- [MAL-2025-61198](https://insights.sbomify.com/MAL-2025-61198/): Malicious code in retail_cougar_z3n (npm) (malicious package)
- [MAL-2025-61197](https://insights.sbomify.com/MAL-2025-61197/): Malicious code in resulting_wildfowl_z3n (npm) (malicious package)
- [MAL-2025-61196](https://insights.sbomify.com/MAL-2025-61196/): Malicious code in resulting_sheep_z3n (npm) (malicious package)
- [MAL-2025-61195](https://insights.sbomify.com/MAL-2025-61195/): Malicious code in resulting_emu_z3n (npm) (malicious package)
- [MAL-2025-61194](https://insights.sbomify.com/MAL-2025-61194/): Malicious code in responsible_spoonbill_z3n (npm) (malicious package)
- [MAL-2025-61193](https://insights.sbomify.com/MAL-2025-61193/): Malicious code in responsible_planarian_z3n (npm) (malicious package)
- [MAL-2025-61192](https://insights.sbomify.com/MAL-2025-61192/): Malicious code in responsible_crocodile_z3n (npm) (malicious package)
- [MAL-2025-61191](https://insights.sbomify.com/MAL-2025-61191/): Malicious code in respective_termite_z3n (npm) (malicious package)
- [MAL-2025-61190](https://insights.sbomify.com/MAL-2025-61190/): Malicious code in respective_fish_z3n (npm) (malicious package)
- [MAL-2025-6119](https://insights.sbomify.com/MAL-2025-6119/): Malicious code in pro-rhr-container (npm) (malicious package)
- [MAL-2025-61189](https://insights.sbomify.com/MAL-2025-61189/): Malicious code in respectable_boa_z3n (npm) (malicious package)
- [MAL-2025-61188](https://insights.sbomify.com/MAL-2025-61188/): Malicious code in resonant_cockroach_z3n (npm) (malicious package)
- [MAL-2025-61187](https://insights.sbomify.com/MAL-2025-61187/): Malicious code in resonant_chameleon_z3n (npm) (malicious package)
- [MAL-2025-61186](https://insights.sbomify.com/MAL-2025-61186/): Malicious code in residential_silverfish_z3n (npm) (malicious package)
- [MAL-2025-61185](https://insights.sbomify.com/MAL-2025-61185/): Malicious code in residential_quokka_z3n (npm) (malicious package)
- [MAL-2025-61184](https://insights.sbomify.com/MAL-2025-61184/): Malicious code in residential_otter_z3n (npm) (malicious package)
- [MAL-2025-61183](https://insights.sbomify.com/MAL-2025-61183/): Malicious code in residential_coyote_z3n (npm) (malicious package)
- [MAL-2025-61182](https://insights.sbomify.com/MAL-2025-61182/): Malicious code in required_gazelle_z3n (npm) (malicious package)
- [MAL-2025-61181](https://insights.sbomify.com/MAL-2025-61181/): Malicious code in repulsive_parrotfish_z3n (npm) (malicious package)
- [MAL-2025-61180](https://insights.sbomify.com/MAL-2025-61180/): Malicious code in renewed_salmon_z3n (npm) (malicious package)
- [MAL-2025-6118](https://insights.sbomify.com/MAL-2025-6118/): Malicious code in privmx-crypto (npm) (malicious package)
- [MAL-2025-61179](https://insights.sbomify.com/MAL-2025-61179/): Malicious code in renewed_lungfish_z3n (npm) (malicious package)
- [MAL-2025-61178](https://insights.sbomify.com/MAL-2025-61178/): Malicious code in renewed_cardinal_z3n (npm) (malicious package)
- [MAL-2025-61177](https://insights.sbomify.com/MAL-2025-61177/): Malicious code in remarkable_macaw_z3n (npm) (malicious package)
- [MAL-2025-61176](https://insights.sbomify.com/MAL-2025-61176/): Malicious code in remarkable_elephant_z3n (npm) (malicious package)
- [MAL-2025-61175](https://insights.sbomify.com/MAL-2025-61175/): Malicious code in remaining_hawk_z3n (npm) (malicious package)
- [MAL-2025-61174](https://insights.sbomify.com/MAL-2025-61174/): Malicious code in remaining_albatross_z3n (npm) (malicious package)
- [MAL-2025-61173](https://insights.sbomify.com/MAL-2025-61173/): Malicious code in reluctant_sloth_z3n (npm) (malicious package)
- [MAL-2025-61172](https://insights.sbomify.com/MAL-2025-61172/): Malicious code in reluctant_sailfish_z3n (npm) (malicious package)
- [MAL-2025-61171](https://insights.sbomify.com/MAL-2025-61171/): Malicious code in religious_tapir_z3n (npm) (malicious package)
- [MAL-2025-61170](https://insights.sbomify.com/MAL-2025-61170/): Malicious code in religious_rabbit_z3n (npm) (malicious package)
- [MAL-2025-6117](https://insights.sbomify.com/MAL-2025-6117/): Malicious code in preview-server-auth-bounty (npm) (malicious package)
- [MAL-2025-61169](https://insights.sbomify.com/MAL-2025-61169/): Malicious code in religious_magpie_z3n (npm) (malicious package)
- [MAL-2025-61168](https://insights.sbomify.com/MAL-2025-61168/): Malicious code in relieved_skunk_z3n (npm) (malicious package)
- [MAL-2025-61167](https://insights.sbomify.com/MAL-2025-61167/): Malicious code in reliable_shark_z3n (npm) (malicious package)
- [MAL-2025-61166](https://insights.sbomify.com/MAL-2025-61166/): Malicious code in relevant_snail_z3n (npm) (malicious package)
- [MAL-2025-61165](https://insights.sbomify.com/MAL-2025-61165/): Malicious code in relative_fowl_z3n (npm) (malicious package)
- [MAL-2025-61164](https://insights.sbomify.com/MAL-2025-61164/): Malicious code in relative_caterpillar_z3n (npm) (malicious package)
- [MAL-2025-61163](https://insights.sbomify.com/MAL-2025-61163/): Malicious code in relative_ape_z3n (npm) (malicious package)
- [MAL-2025-61162](https://insights.sbomify.com/MAL-2025-61162/): Malicious code in related_sturgeon_z3n (npm) (malicious package)
- [MAL-2025-61161](https://insights.sbomify.com/MAL-2025-61161/): Malicious code in related_rat_z3n (npm) (malicious package)
- [MAL-2025-61160](https://insights.sbomify.com/MAL-2025-61160/): Malicious code in regulatory_tarantula_z3n (npm) (malicious package)
- [MAL-2025-6116](https://insights.sbomify.com/MAL-2025-6116/): Malicious code in pre-and-postinstall-scripts-example (npm) (malicious package)
- [MAL-2025-61159](https://insights.sbomify.com/MAL-2025-61159/): Malicious code in regular_narwhal_z3n (npm) (malicious package)
- [MAL-2025-61158](https://insights.sbomify.com/MAL-2025-61158/): Malicious code in registered_hornet_z3n (npm) (malicious package)
- [MAL-2025-61157](https://insights.sbomify.com/MAL-2025-61157/): Malicious code in regional_meerkat_z3n (npm) (malicious package)
- [MAL-2025-61156](https://insights.sbomify.com/MAL-2025-61156/): Malicious code in redundant_beetle_z3n (npm) (malicious package)
- [MAL-2025-61155](https://insights.sbomify.com/MAL-2025-61155/): Malicious code in reduced_ostrich_z3n (npm) (malicious package)
- [MAL-2025-61154](https://insights.sbomify.com/MAL-2025-61154/): Malicious code in recent_egret_z3n (npm) (malicious package)
- [MAL-2025-61153](https://insights.sbomify.com/MAL-2025-61153/): Malicious code in reasonable_quail_z3n (npm) (malicious package)
- [MAL-2025-61152](https://insights.sbomify.com/MAL-2025-61152/): Malicious code in reasonable_dragonfly_z3n (npm) (malicious package)
- [MAL-2025-61151](https://insights.sbomify.com/MAL-2025-61151/): Malicious code in rear_silverfish_z3n (npm) (malicious package)
- [MAL-2025-61150](https://insights.sbomify.com/MAL-2025-61150/): Malicious code in rear_catshark_z3n (npm) (malicious package)
- [MAL-2025-6115](https://insights.sbomify.com/MAL-2025-6115/): Malicious code in paypal-examples-langchain (npm) (malicious package)
- [MAL-2025-61149](https://insights.sbomify.com/MAL-2025-61149/): Malicious code in rear_cardinal_z3n (npm) (malicious package)
- [MAL-2025-61148](https://insights.sbomify.com/MAL-2025-61148/): Malicious code in rear_asp_z3n (npm) (malicious package)
- [MAL-2025-61147](https://insights.sbomify.com/MAL-2025-61147/): Malicious code in real_raccoon_z3n (npm) (malicious package)
- [MAL-2025-61146](https://insights.sbomify.com/MAL-2025-61146/): Malicious code in ready_hippopotamus_z3n (npm) (malicious package)
- [MAL-2025-61145](https://insights.sbomify.com/MAL-2025-61145/): Malicious code in raw_marsupial_z3n (npm) (malicious package)
- [MAL-2025-61144](https://insights.sbomify.com/MAL-2025-61144/): Malicious code in rational_roadrunner_z3n (npm) (malicious package)
- [MAL-2025-61143](https://insights.sbomify.com/MAL-2025-61143/): Malicious code in rational_hamster_z3n (npm) (malicious package)
- [MAL-2025-61142](https://insights.sbomify.com/MAL-2025-61142/): Malicious code in raspy_grasshopper_z3n (npm) (malicious package)
- [MAL-2025-61141](https://insights.sbomify.com/MAL-2025-61141/): Malicious code in rare_chinchilla_z3n (npm) (malicious package)
- [MAL-2025-61140](https://insights.sbomify.com/MAL-2025-61140/): Malicious code in rapid_zebra_z3n (npm) (malicious package)
- [MAL-2025-6114](https://insights.sbomify.com/MAL-2025-6114/): Malicious code in openai-voice-agent-sdk-sample (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/434/