# Vulnerabilities published in 2025


- [MAL-2025-61139](https://insights.sbomify.com/MAL-2025-61139/): Malicious code in rapid_unicorn_z3n (npm) (malicious package)
- [MAL-2025-61138](https://insights.sbomify.com/MAL-2025-61138/): Malicious code in random_stoat_z3n (npm) (malicious package)
- [MAL-2025-61137](https://insights.sbomify.com/MAL-2025-61137/): Malicious code in random_macaw_z3n (npm) (malicious package)
- [MAL-2025-61136](https://insights.sbomify.com/MAL-2025-61136/): Malicious code in rainy_wren_z3n (npm) (malicious package)
- [MAL-2025-61135](https://insights.sbomify.com/MAL-2025-61135/): Malicious code in rainy_kiwi_z3n (npm) (malicious package)
- [MAL-2025-61134](https://insights.sbomify.com/MAL-2025-61134/): Malicious code in rainy_goldfish_z3n (npm) (malicious package)
- [MAL-2025-61133](https://insights.sbomify.com/MAL-2025-61133/): Malicious code in radical_swan_z3n (npm) (malicious package)
- [MAL-2025-61132](https://insights.sbomify.com/MAL-2025-61132/): Malicious code in radical_gorilla_z3n (npm) (malicious package)
- [MAL-2025-61131](https://insights.sbomify.com/MAL-2025-61131/): Malicious code in racial_echidna_z3n (npm) (malicious package)
- [MAL-2025-61130](https://insights.sbomify.com/MAL-2025-61130/): Malicious code in quixotic_woodpecker_z3n (npm) (malicious package)
- [MAL-2025-6113](https://insights.sbomify.com/MAL-2025-6113/): Malicious code in one-fixed-dep-bins (npm) (malicious package)
- [MAL-2025-61129](https://insights.sbomify.com/MAL-2025-61129/): Malicious code in quixotic_otter_z3n (npm) (malicious package)
- [MAL-2025-61128](https://insights.sbomify.com/MAL-2025-61128/): Malicious code in quixotic_marten_z3n (npm) (malicious package)
- [MAL-2025-61127](https://insights.sbomify.com/MAL-2025-61127/): Malicious code in quixotic_kingfisher_z3n (npm) (malicious package)
- [MAL-2025-61126](https://insights.sbomify.com/MAL-2025-61126/): Malicious code in quiet_peafowl_z3n (npm) (malicious package)
- [MAL-2025-61125](https://insights.sbomify.com/MAL-2025-61125/): Malicious code in quick_puma_z3n (npm) (malicious package)
- [MAL-2025-61124](https://insights.sbomify.com/MAL-2025-61124/): Malicious code in querulous_clownfish_z3n (npm) (malicious package)
- [MAL-2025-61123](https://insights.sbomify.com/MAL-2025-61123/): Malicious code in quarrelsome_parakeet_z3n (npm) (malicious package)
- [MAL-2025-61122](https://insights.sbomify.com/MAL-2025-61122/): Malicious code in quarrelsome_ant_z3n (npm) (malicious package)
- [MAL-2025-61121](https://insights.sbomify.com/MAL-2025-61121/): Malicious code in qualified_gecko_z3n (npm) (malicious package)
- [MAL-2025-61120](https://insights.sbomify.com/MAL-2025-61120/): Malicious code in qualified_crawdad_z3n (npm) (malicious package)
- [MAL-2025-6112](https://insights.sbomify.com/MAL-2025-6112/): Malicious code in omulamuzi (npm) (malicious package)
- [MAL-2025-61119](https://insights.sbomify.com/MAL-2025-61119/): Malicious code in qualified_chameleon_z3n (npm) (malicious package)
- [MAL-2025-61118](https://insights.sbomify.com/MAL-2025-61118/): Malicious code in qualified_aardvark_z3n (npm) (malicious package)
- [MAL-2025-61117](https://insights.sbomify.com/MAL-2025-61117/): Malicious code in quaint_whitefish_z3n (npm) (malicious package)
- [MAL-2025-61116](https://insights.sbomify.com/MAL-2025-61116/): Malicious code in quaint_mosquito_z3n (npm) (malicious package)
- [MAL-2025-61115](https://insights.sbomify.com/MAL-2025-61115/): Malicious code in puzzled_peacock_z3n (npm) (malicious package)
- [MAL-2025-61114](https://insights.sbomify.com/MAL-2025-61114/): Malicious code in puzzled_deer_z3n (npm) (malicious package)
- [MAL-2025-61113](https://insights.sbomify.com/MAL-2025-61113/): Malicious code in purring_flyingfish_z3n (npm) (malicious package)
- [MAL-2025-61112](https://insights.sbomify.com/MAL-2025-61112/): Malicious code in purring_chimpanzee_z3n (npm) (malicious package)
- [MAL-2025-61111](https://insights.sbomify.com/MAL-2025-61111/): Malicious code in puny_catshark_z3n (npm) (malicious package)
- [MAL-2025-61110](https://insights.sbomify.com/MAL-2025-61110/): Malicious code in puny_caribou_z3n (npm) (malicious package)
- [MAL-2025-6111](https://insights.sbomify.com/MAL-2025-6111/): Malicious code in okx-dex (npm) (malicious package)
- [MAL-2025-61109](https://insights.sbomify.com/MAL-2025-61109/): Malicious code in public_quail_z3n (npm) (malicious package)
- [MAL-2025-61108](https://insights.sbomify.com/MAL-2025-61108/): Malicious code in public_lizard_z3n (npm) (malicious package)
- [MAL-2025-61107](https://insights.sbomify.com/MAL-2025-61107/): Malicious code in public_dove_z3n (npm) (malicious package)
- [MAL-2025-61106](https://insights.sbomify.com/MAL-2025-61106/): Malicious code in psychological_crawdad_z3n (npm) (malicious package)
- [MAL-2025-61105](https://insights.sbomify.com/MAL-2025-61105/): Malicious code in psychiatric_hippopotamus_z3n (npm) (malicious package)
- [MAL-2025-61104](https://insights.sbomify.com/MAL-2025-61104/): Malicious code in provincial_seahorse_z3n (npm) (malicious package)
- [MAL-2025-61103](https://insights.sbomify.com/MAL-2025-61103/): Malicious code in proud_pony_z3n (npm) (malicious package)
- [MAL-2025-61102](https://insights.sbomify.com/MAL-2025-61102/): Malicious code in proud_dormouse_z3n (npm) (malicious package)
- [MAL-2025-61101](https://insights.sbomify.com/MAL-2025-61101/): Malicious code in proud_cardinal_z3n (npm) (malicious package)
- [MAL-2025-61100](https://insights.sbomify.com/MAL-2025-61100/): Malicious code in protestant_cheetah_z3n (npm) (malicious package)
- [MAL-2025-6110](https://insights.sbomify.com/MAL-2025-6110/): Malicious code in ochot-odong (npm) (malicious package)
- [MAL-2025-611](https://insights.sbomify.com/MAL-2025-611/): Malicious code in cschalk (npm) (malicious package)
- [MAL-2025-61099](https://insights.sbomify.com/MAL-2025-61099/): Malicious code in prospective_tick_z3n (npm) (malicious package)
- [MAL-2025-61098](https://insights.sbomify.com/MAL-2025-61098/): Malicious code in prospective_guanaco_z3n (npm) (malicious package)
- [MAL-2025-61097](https://insights.sbomify.com/MAL-2025-61097/): Malicious code in prospective_fish_z3n (npm) (malicious package)
- [MAL-2025-61096](https://insights.sbomify.com/MAL-2025-61096/): Malicious code in proposed_swallow_z3n (npm) (malicious package)
- [MAL-2025-61095](https://insights.sbomify.com/MAL-2025-61095/): Malicious code in proper_hedgehog_z3n (npm) (malicious package)
- [MAL-2025-61094](https://insights.sbomify.com/MAL-2025-61094/): Malicious code in proper_dog_z3n (npm) (malicious package)
- [MAL-2025-61093](https://insights.sbomify.com/MAL-2025-61093/): Malicious code in promising_wombat_z3n (npm) (malicious package)
- [MAL-2025-61092](https://insights.sbomify.com/MAL-2025-61092/): Malicious code in promising_roundworm_z3n (npm) (malicious package)
- [MAL-2025-61091](https://insights.sbomify.com/MAL-2025-61091/): Malicious code in promising_quelea_z3n (npm) (malicious package)
- [MAL-2025-61090](https://insights.sbomify.com/MAL-2025-61090/): Malicious code in prominent_shrimp_z3n (npm) (malicious package)
- [MAL-2025-6109](https://insights.sbomify.com/MAL-2025-6109/): Malicious code in ochot (npm) (malicious package)
- [MAL-2025-61089](https://insights.sbomify.com/MAL-2025-61089/): Malicious code in prominent_grasshopper_z3n (npm) (malicious package)
- [MAL-2025-61088](https://insights.sbomify.com/MAL-2025-61088/): Malicious code in prominent_egret_z3n (npm) (malicious package)
- [MAL-2025-61087](https://insights.sbomify.com/MAL-2025-61087/): Malicious code in prominent_chinchilla_z3n (npm) (malicious package)
- [MAL-2025-61086](https://insights.sbomify.com/MAL-2025-61086/): Malicious code in progressive_earthworm_z3n (npm) (malicious package)
- [MAL-2025-61085](https://insights.sbomify.com/MAL-2025-61085/): Malicious code in profound_camel_z3n (npm) (malicious package)
- [MAL-2025-61084](https://insights.sbomify.com/MAL-2025-61084/): Malicious code in professional_bug_z3n (npm) (malicious package)
- [MAL-2025-61083](https://insights.sbomify.com/MAL-2025-61083/): Malicious code in productive_perch_z3n (npm) (malicious package)
- [MAL-2025-61082](https://insights.sbomify.com/MAL-2025-61082/): Malicious code in probable_tortoise_z3n (npm) (malicious package)
- [MAL-2025-61081](https://insights.sbomify.com/MAL-2025-61081/): Malicious code in prior_sole_z3n (npm) (malicious package)
- [MAL-2025-61080](https://insights.sbomify.com/MAL-2025-61080/): Malicious code in prior_skunk_z3n (npm) (malicious package)
- [MAL-2025-6108](https://insights.sbomify.com/MAL-2025-6108/): Malicious code in node-ts-esm-auto (npm) (malicious package)
- [MAL-2025-61079](https://insights.sbomify.com/MAL-2025-61079/): Malicious code in printed_hippopotamus_z3n (npm) (malicious package)
- [MAL-2025-61078](https://insights.sbomify.com/MAL-2025-61078/): Malicious code in principal_ermine_z3n (npm) (malicious package)
- [MAL-2025-61077](https://insights.sbomify.com/MAL-2025-61077/): Malicious code in primitive_piranha_z3n (npm) (malicious package)
- [MAL-2025-61076](https://insights.sbomify.com/MAL-2025-61076/): Malicious code in prime_tiglon_z3n (npm) (malicious package)
- [MAL-2025-61075](https://insights.sbomify.com/MAL-2025-61075/): Malicious code in primary_falcon_z3n (npm) (malicious package)
- [MAL-2025-61074](https://insights.sbomify.com/MAL-2025-61074/): Malicious code in primary_dingo_z3n (npm) (malicious package)
- [MAL-2025-61073](https://insights.sbomify.com/MAL-2025-61073/): Malicious code in prickly_parrotfish_z3n (npm) (malicious package)
- [MAL-2025-61072](https://insights.sbomify.com/MAL-2025-61072/): Malicious code in previous_halibut_z3n (npm) (malicious package)
- [MAL-2025-61071](https://insights.sbomify.com/MAL-2025-61071/): Malicious code in previous_boa_z3n (npm) (malicious package)
- [MAL-2025-61070](https://insights.sbomify.com/MAL-2025-61070/): Malicious code in pretty_unicorn_z3n (npm) (malicious package)
- [MAL-2025-6107](https://insights.sbomify.com/MAL-2025-6107/): Malicious code in node-ts-cjs-auto (npm) (malicious package)
- [MAL-2025-61069](https://insights.sbomify.com/MAL-2025-61069/): Malicious code in pretty_monkey_z3n (npm) (malicious package)
- [MAL-2025-61068](https://insights.sbomify.com/MAL-2025-61068/): Malicious code in pretty_cattle_z3n (npm) (malicious package)
- [MAL-2025-61067](https://insights.sbomify.com/MAL-2025-61067/): Malicious code in presidential_silkworm_z3n (npm) (malicious package)
- [MAL-2025-61066](https://insights.sbomify.com/MAL-2025-61066/): Malicious code in presidential_reindeer_z3n (npm) (malicious package)
- [MAL-2025-61065](https://insights.sbomify.com/MAL-2025-61065/): Malicious code in presidential_alligator_z3n (npm) (malicious package)
- [MAL-2025-61064](https://insights.sbomify.com/MAL-2025-61064/): Malicious code in present_yak_z3n (npm) (malicious package)
- [MAL-2025-61063](https://insights.sbomify.com/MAL-2025-61063/): Malicious code in present_cobra_z3n (npm) (malicious package)
- [MAL-2025-61062](https://insights.sbomify.com/MAL-2025-61062/): Malicious code in prepared_orca_z3n (npm) (malicious package)
- [MAL-2025-61061](https://insights.sbomify.com/MAL-2025-61061/): Malicious code in preliminary_wasp_z3n (npm) (malicious package)
- [MAL-2025-61060](https://insights.sbomify.com/MAL-2025-61060/): Malicious code in preliminary_vulture_z3n (npm) (malicious package)
- [MAL-2025-6106](https://insights.sbomify.com/MAL-2025-6106/): Malicious code in ngf-attachments-list (npm) (malicious package)
- [MAL-2025-61059](https://insights.sbomify.com/MAL-2025-61059/): Malicious code in preliminary_cod_z3n (npm) (malicious package)
- [MAL-2025-61058](https://insights.sbomify.com/MAL-2025-61058/): Malicious code in pregnant_parrot_z3n (npm) (malicious package)
- [MAL-2025-61057](https://insights.sbomify.com/MAL-2025-61057/): Malicious code in pregnant_hoverfly_z3n (npm) (malicious package)
- [MAL-2025-61056](https://insights.sbomify.com/MAL-2025-61056/): Malicious code in pregnant_camel_z3n (npm) (malicious package)
- [MAL-2025-61055](https://insights.sbomify.com/MAL-2025-61055/): Malicious code in precise_leopon_z3n (npm) (malicious package)
- [MAL-2025-61054](https://insights.sbomify.com/MAL-2025-61054/): Malicious code in precious_louse_z3n (npm) (malicious package)
- [MAL-2025-61053](https://insights.sbomify.com/MAL-2025-61053/): Malicious code in practical_bedbug_z3n (npm) (malicious package)
- [MAL-2025-61052](https://insights.sbomify.com/MAL-2025-61052/): Malicious code in powerful_gayal_z3n (npm) (malicious package)
- [MAL-2025-61051](https://insights.sbomify.com/MAL-2025-61051/): Malicious code in powerful_chinchilla_z3n (npm) (malicious package)
- [MAL-2025-61050](https://insights.sbomify.com/MAL-2025-61050/): Malicious code in potential_blackbird_z3n (npm) (malicious package)
- [MAL-2025-6105](https://insights.sbomify.com/MAL-2025-6105/): Malicious code in model-providers (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/435/
