# Vulnerabilities published in 2025 - [MAL-2025-61049](https://insights.sbomify.com/MAL-2025-61049/): Malicious code in possible_roadrunner_z3n (npm) (malicious package) - [MAL-2025-61048](https://insights.sbomify.com/MAL-2025-61048/): Malicious code in possible_deer_z3n (npm) (malicious package) - [MAL-2025-61047](https://insights.sbomify.com/MAL-2025-61047/): Malicious code in possible_cobra_z3n (npm) (malicious package) - [MAL-2025-61046](https://insights.sbomify.com/MAL-2025-61046/): Malicious code in popular_mule_z3n (npm) (malicious package) - [MAL-2025-61045](https://insights.sbomify.com/MAL-2025-61045/): Malicious code in popular_eagle_z3n (npm) (malicious package) - [MAL-2025-61044](https://insights.sbomify.com/MAL-2025-61044/): Malicious code in poor_leopon_z3n (npm) (malicious package) - [MAL-2025-61043](https://insights.sbomify.com/MAL-2025-61043/): Malicious code in poor_hippopotamus_z3n (npm) (malicious package) - [MAL-2025-61042](https://insights.sbomify.com/MAL-2025-61042/): Malicious code in political_finch_z3n (npm) (malicious package) - [MAL-2025-61041](https://insights.sbomify.com/MAL-2025-61041/): Malicious code in political_anaconda_z3n (npm) (malicious package) - [MAL-2025-61040](https://insights.sbomify.com/MAL-2025-61040/): Malicious code in polite_stoat_z3n (npm) (malicious package) - [MAL-2025-6104](https://insights.sbomify.com/MAL-2025-6104/): Malicious code in matka (npm) (malicious package) - [MAL-2025-61039](https://insights.sbomify.com/MAL-2025-61039/): Malicious code in poised_prawn_z3n (npm) (malicious package) - [MAL-2025-61038](https://insights.sbomify.com/MAL-2025-61038/): Malicious code in pleased_seahorse_z3n (npm) (malicious package) - [MAL-2025-61037](https://insights.sbomify.com/MAL-2025-61037/): Malicious code in pleased_ox_z3n (npm) (malicious package) - [MAL-2025-61036](https://insights.sbomify.com/MAL-2025-61036/): Malicious code in pleased_cephalopod_z3n (npm) (malicious package) - [MAL-2025-61035](https://insights.sbomify.com/MAL-2025-61035/): Malicious code in pleasant_urial_z3n (npm) (malicious package) - [MAL-2025-61034](https://insights.sbomify.com/MAL-2025-61034/): Malicious code in plastic_rat_z3n (npm) (malicious package) - [MAL-2025-61033](https://insights.sbomify.com/MAL-2025-61033/): Malicious code in plastic_monkey_z3n (npm) (malicious package) - [MAL-2025-61032](https://insights.sbomify.com/MAL-2025-61032/): Malicious code in plastic_gorilla_z3n (npm) (malicious package) - [MAL-2025-61031](https://insights.sbomify.com/MAL-2025-61031/): Malicious code in plastic_fly_z3n (npm) (malicious package) - [MAL-2025-61030](https://insights.sbomify.com/MAL-2025-61030/): Malicious code in plastic_chickadee_z3n (npm) (malicious package) - [MAL-2025-6103](https://insights.sbomify.com/MAL-2025-6103/): Malicious code in login-oauth (npm) (malicious package) - [MAL-2025-61029](https://insights.sbomify.com/MAL-2025-61029/): Malicious code in plain_emu_z3n (npm) (malicious package) - [MAL-2025-61028](https://insights.sbomify.com/MAL-2025-61028/): Malicious code in plain_beaver_z3n (npm) (malicious package) - [MAL-2025-61027](https://insights.sbomify.com/MAL-2025-61027/): Malicious code in petite_hare_z3n (npm) (malicious package) - [MAL-2025-61026](https://insights.sbomify.com/MAL-2025-61026/): Malicious code in persistent_roundworm_z3n (npm) (malicious package) - [MAL-2025-61025](https://insights.sbomify.com/MAL-2025-61025/): Malicious code in persistent_rat_z3n (npm) (malicious package) - [MAL-2025-61024](https://insights.sbomify.com/MAL-2025-61024/): Malicious code in peculiar_sailfish_z3n (npm) (malicious package) - [MAL-2025-61023](https://insights.sbomify.com/MAL-2025-61023/): Malicious code in peaceful_lion_z3n (npm) (malicious package) - [MAL-2025-61022](https://insights.sbomify.com/MAL-2025-61022/): Malicious code in patient_squirrel_z3n (npm) (malicious package) - [MAL-2025-61021](https://insights.sbomify.com/MAL-2025-61021/): Malicious code in patient_porpoise_z3n (npm) (malicious package) - [MAL-2025-61020](https://insights.sbomify.com/MAL-2025-61020/): Malicious code in patient_chipmunk_z3n (npm) (malicious package) - [MAL-2025-6102](https://insights.sbomify.com/MAL-2025-6102/): Malicious code in logback-classic (npm) (malicious package) - [MAL-2025-61019](https://insights.sbomify.com/MAL-2025-61019/): Malicious code in past_chicken_z3n (npm) (malicious package) - [MAL-2025-61018](https://insights.sbomify.com/MAL-2025-61018/): Malicious code in passive_rooster_z3n (npm) (malicious package) - [MAL-2025-61017](https://insights.sbomify.com/MAL-2025-61017/): Malicious code in passing_worm_z3n (npm) (malicious package) - [MAL-2025-61016](https://insights.sbomify.com/MAL-2025-61016/): Malicious code in passing_bobcat_z3n (npm) (malicious package) - [MAL-2025-61015](https://insights.sbomify.com/MAL-2025-61015/): Malicious code in passing_alpaca_z3n (npm) (malicious package) - [MAL-2025-61014](https://insights.sbomify.com/MAL-2025-61014/): Malicious code in particular_owl_z3n (npm) (malicious package) - [MAL-2025-61013](https://insights.sbomify.com/MAL-2025-61013/): Malicious code in partial_swan_z3n (npm) (malicious package) - [MAL-2025-61012](https://insights.sbomify.com/MAL-2025-61012/): Malicious code in partial_macaw_z3n (npm) (malicious package) - [MAL-2025-61011](https://insights.sbomify.com/MAL-2025-61011/): Malicious code in parliamentary_tiger_z3n (npm) (malicious package) - [MAL-2025-61010](https://insights.sbomify.com/MAL-2025-61010/): Malicious code in parliamentary_bobcat_z3n (npm) (malicious package) - [MAL-2025-6101](https://insights.sbomify.com/MAL-2025-6101/): Malicious code in jsr305 (npm) (malicious package) - [MAL-2025-61009](https://insights.sbomify.com/MAL-2025-61009/): Malicious code in parental_mollusk_z3n (npm) (malicious package) - [MAL-2025-61008](https://insights.sbomify.com/MAL-2025-61008/): Malicious code in parental_aardwolf_z3n (npm) (malicious package) - [MAL-2025-61007](https://insights.sbomify.com/MAL-2025-61007/): Malicious code in parallel_ox_z3n (npm) (malicious package) - [MAL-2025-61006](https://insights.sbomify.com/MAL-2025-61006/): Malicious code in painful_silkworm_z3n (npm) (malicious package) - [MAL-2025-61005](https://insights.sbomify.com/MAL-2025-61005/): Malicious code in painful_finch_z3n (npm) (malicious package) - [MAL-2025-61004](https://insights.sbomify.com/MAL-2025-61004/): Malicious code in painful_boa_z3n (npm) (malicious package) - [MAL-2025-61003](https://insights.sbomify.com/MAL-2025-61003/): Malicious code in painful_badger_z3n (npm) (malicious package) - [MAL-2025-61002](https://insights.sbomify.com/MAL-2025-61002/): Malicious code in overwhelming_beaver_z3n (npm) (malicious package) - [MAL-2025-61001](https://insights.sbomify.com/MAL-2025-61001/): Malicious code in overseas_bass_z3n (npm) (malicious package) - [MAL-2025-61000](https://insights.sbomify.com/MAL-2025-61000/): Malicious code in outstanding_mite_z3n (npm) (malicious package) - [MAL-2025-6100](https://insights.sbomify.com/MAL-2025-6100/): Malicious code in jcl-over-slf4j (npm) (malicious package) - [MAL-2025-610](https://insights.sbomify.com/MAL-2025-610/): Malicious code in cscchokidar-next (npm) (malicious package) - [MAL-2025-61](https://insights.sbomify.com/MAL-2025-61/): Malicious code in express-v4 (npm) (malicious package) - [MAL-2025-60999](https://insights.sbomify.com/MAL-2025-60999/): Malicious code in outstanding_macaw_z3n (npm) (malicious package) - [MAL-2025-60998](https://insights.sbomify.com/MAL-2025-60998/): Malicious code in outstanding_cicada_z3n (npm) (malicious package) - [MAL-2025-60997](https://insights.sbomify.com/MAL-2025-60997/): Malicious code in outside_halibut_z3n (npm) (malicious package) - [MAL-2025-60996](https://insights.sbomify.com/MAL-2025-60996/): Malicious code in outside_asp_z3n (npm) (malicious package) - [MAL-2025-60995](https://insights.sbomify.com/MAL-2025-60995/): Malicious code in outrageous_dragonfly_z3n (npm) (malicious package) - [MAL-2025-60994](https://insights.sbomify.com/MAL-2025-60994/): Malicious code in outer_panda_z3n (npm) (malicious package) - [MAL-2025-60993](https://insights.sbomify.com/MAL-2025-60993/): Malicious code in outer_asp_z3n (npm) (malicious package) - [MAL-2025-60992](https://insights.sbomify.com/MAL-2025-60992/): Malicious code in other_galliform_z3n (npm) (malicious package) - [MAL-2025-60991](https://insights.sbomify.com/MAL-2025-60991/): Malicious code in orthodox_cephalopod_z3n (npm) (malicious package) - [MAL-2025-60990](https://insights.sbomify.com/MAL-2025-60990/): Malicious code in orthodox_bee_z3n (npm) (malicious package) - [MAL-2025-6099](https://insights.sbomify.com/MAL-2025-6099/): Malicious code in ipp-auth-service-tools (npm) (malicious package) - [MAL-2025-60989](https://insights.sbomify.com/MAL-2025-60989/): Malicious code in original_reptile_z3n (npm) (malicious package) - [MAL-2025-60988](https://insights.sbomify.com/MAL-2025-60988/): Malicious code in organisational_gamefowl_z3n (npm) (malicious package) - [MAL-2025-60987](https://insights.sbomify.com/MAL-2025-60987/): Malicious code in ordinary_raccoon_z3n (npm) (malicious package) - [MAL-2025-60986](https://insights.sbomify.com/MAL-2025-60986/): Malicious code in ordinary_porcupine_z3n (npm) (malicious package) - [MAL-2025-60985](https://insights.sbomify.com/MAL-2025-60985/): Malicious code in ordinary_lungfish_z3n (npm) (malicious package) - [MAL-2025-60984](https://insights.sbomify.com/MAL-2025-60984/): Malicious code in ordinary_badger_z3n (npm) (malicious package) - [MAL-2025-60983](https://insights.sbomify.com/MAL-2025-60983/): Malicious code in oral_tahr_z3n (npm) (malicious package) - [MAL-2025-60982](https://insights.sbomify.com/MAL-2025-60982/): Malicious code in oral_orca_z3n (npm) (malicious package) - [MAL-2025-60981](https://insights.sbomify.com/MAL-2025-60981/): Malicious code in optimistic_parrot_z3n (npm) (malicious package) - [MAL-2025-60980](https://insights.sbomify.com/MAL-2025-60980/): Malicious code in optimistic_lizard_z3n (npm) (malicious package) - [MAL-2025-6098](https://insights.sbomify.com/MAL-2025-6098/): Malicious code in indexer-worker-service (npm) (malicious package) - [MAL-2025-60979](https://insights.sbomify.com/MAL-2025-60979/): Malicious code in optimistic_hoverfly_z3n (npm) (malicious package) - [MAL-2025-60978](https://insights.sbomify.com/MAL-2025-60978/): Malicious code in opposite_wolf_z3n (npm) (malicious package) - [MAL-2025-60977](https://insights.sbomify.com/MAL-2025-60977/): Malicious code in operational_penguin_z3n (npm) (malicious package) - [MAL-2025-60976](https://insights.sbomify.com/MAL-2025-60976/): Malicious code in operational_crocodile_z3n (npm) (malicious package) - [MAL-2025-60975](https://insights.sbomify.com/MAL-2025-60975/): Malicious code in open_swift_z3n (npm) (malicious package) - [MAL-2025-60974](https://insights.sbomify.com/MAL-2025-60974/): Malicious code in open_swan_z3n (npm) (malicious package) - [MAL-2025-60973](https://insights.sbomify.com/MAL-2025-60973/): Malicious code in only_sloth_z3n (npm) (malicious package) - [MAL-2025-60972](https://insights.sbomify.com/MAL-2025-60972/): Malicious code in only_jackal_z3n (npm) (malicious package) - [MAL-2025-60971](https://insights.sbomify.com/MAL-2025-60971/): Malicious code in olympic_impala_z3n (npm) (malicious package) - [MAL-2025-60970](https://insights.sbomify.com/MAL-2025-60970/): Malicious code in olympic_fox_z3n (npm) (malicious package) - [MAL-2025-6097](https://insights.sbomify.com/MAL-2025-6097/): Malicious code in ifood-companies-manager-front (npm) (malicious package) - [MAL-2025-60969](https://insights.sbomify.com/MAL-2025-60969/): Malicious code in old_termite_z3n (npm) (malicious package) - [MAL-2025-60968](https://insights.sbomify.com/MAL-2025-60968/): Malicious code in old_heron_z3n (npm) (malicious package) - [MAL-2025-60967](https://insights.sbomify.com/MAL-2025-60967/): Malicious code in okay_toad_z3n (npm) (malicious package) - [MAL-2025-60966](https://insights.sbomify.com/MAL-2025-60966/): Malicious code in okay_puma_z3n (npm) (malicious package) - [MAL-2025-60965](https://insights.sbomify.com/MAL-2025-60965/): Malicious code in okay_hare_z3n (npm) (malicious package) - [MAL-2025-60964](https://insights.sbomify.com/MAL-2025-60964/): Malicious code in okay_aardwolf_z3n (npm) (malicious package) - [MAL-2025-60963](https://insights.sbomify.com/MAL-2025-60963/): Malicious code in ok_locust_z3n (npm) (malicious package) - [MAL-2025-60962](https://insights.sbomify.com/MAL-2025-60962/): Malicious code in ok_bug_z3n (npm) (malicious package) - [MAL-2025-60961](https://insights.sbomify.com/MAL-2025-60961/): Malicious code in official_landfowl_z3n (npm) (malicious package) - [MAL-2025-60960](https://insights.sbomify.com/MAL-2025-60960/): Malicious code in official_echidna_z3n (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/436/