# Vulnerabilities published in 2025


- [MAL-2025-6096](https://insights.sbomify.com/MAL-2025-6096/): Malicious code in hrxtable (npm) (malicious package)
- [MAL-2025-60959](https://insights.sbomify.com/MAL-2025-60959/): Malicious code in odd_antelope_z3n (npm) (malicious package)
- [MAL-2025-60958](https://insights.sbomify.com/MAL-2025-60958/): Malicious code in occupational_zebra_z3n (npm) (malicious package)
- [MAL-2025-60957](https://insights.sbomify.com/MAL-2025-60957/): Malicious code in occupational_perch_z3n (npm) (malicious package)
- [MAL-2025-60956](https://insights.sbomify.com/MAL-2025-60956/): Malicious code in occupational_lemur_z3n (npm) (malicious package)
- [MAL-2025-60955](https://insights.sbomify.com/MAL-2025-60955/): Malicious code in occupational_giraffe_z3n (npm) (malicious package)
- [MAL-2025-60954](https://insights.sbomify.com/MAL-2025-60954/): Malicious code in obvious_mollusk_z3n (npm) (malicious package)
- [MAL-2025-60953](https://insights.sbomify.com/MAL-2025-60953/): Malicious code in obnoxious_meerkat_z3n (npm) (malicious package)
- [MAL-2025-60952](https://insights.sbomify.com/MAL-2025-60952/): Malicious code in obliged_mite_z3n (npm) (malicious package)
- [MAL-2025-60951](https://insights.sbomify.com/MAL-2025-60951/): Malicious code in objective_swallow_z3n (npm) (malicious package)
- [MAL-2025-60950](https://insights.sbomify.com/MAL-2025-60950/): Malicious code in objective_gayal_z3n (npm) (malicious package)
- [MAL-2025-6095](https://insights.sbomify.com/MAL-2025-6095/): Malicious code in hg-icons-2 (npm) (malicious package)
- [MAL-2025-60949](https://insights.sbomify.com/MAL-2025-60949/): Malicious code in nutritious_asp_z3n (npm) (malicious package)
- [MAL-2025-60948](https://insights.sbomify.com/MAL-2025-60948/): Malicious code in nursing_cephalopod_z3n (npm) (malicious package)
- [MAL-2025-60947](https://insights.sbomify.com/MAL-2025-60947/): Malicious code in nuclear_tiger_z3n (npm) (malicious package)
- [MAL-2025-60946](https://insights.sbomify.com/MAL-2025-60946/): Malicious code in nuclear_lizard_z3n (npm) (malicious package)
- [MAL-2025-60945](https://insights.sbomify.com/MAL-2025-60945/): Malicious code in nosy_parrotfish_z3n (npm) (malicious package)
- [MAL-2025-60944](https://insights.sbomify.com/MAL-2025-60944/): Malicious code in nosy_junglefowl_z3n (npm) (malicious package)
- [MAL-2025-60943](https://insights.sbomify.com/MAL-2025-60943/): Malicious code in northern_raccoon_z3n (npm) (malicious package)
- [MAL-2025-60942](https://insights.sbomify.com/MAL-2025-60942/): Malicious code in normal_otter_z3n (npm) (malicious package)
- [MAL-2025-60941](https://insights.sbomify.com/MAL-2025-60941/): Malicious code in noble_boa_z3n (npm) (malicious package)
- [MAL-2025-60940](https://insights.sbomify.com/MAL-2025-60940/): Malicious code in neutral_parakeet_z3n (npm) (malicious package)
- [MAL-2025-6094](https://insights.sbomify.com/MAL-2025-6094/): Malicious code in handoffs (npm) (malicious package)
- [MAL-2025-60939](https://insights.sbomify.com/MAL-2025-60939/): Malicious code in neutral_krill_z3n (npm) (malicious package)
- [MAL-2025-60938](https://insights.sbomify.com/MAL-2025-60938/): Malicious code in neutral_kiwi_z3n (npm) (malicious package)
- [MAL-2025-60937](https://insights.sbomify.com/MAL-2025-60937/): Malicious code in net_magpie_z3n (npm) (malicious package)
- [MAL-2025-60936](https://insights.sbomify.com/MAL-2025-60936/): Malicious code in nervous_peacock_z3n (npm) (malicious package)
- [MAL-2025-60935](https://insights.sbomify.com/MAL-2025-60935/): Malicious code in nervous_gerbil_z3n (npm) (malicious package)
- [MAL-2025-60934](https://insights.sbomify.com/MAL-2025-60934/): Malicious code in nervous_firefly_z3n (npm) (malicious package)
- [MAL-2025-60933](https://insights.sbomify.com/MAL-2025-60933/): Malicious code in neighbouring_spider_z3n (npm) (malicious package)
- [MAL-2025-60932](https://insights.sbomify.com/MAL-2025-60932/): Malicious code in neighbouring_bat_z3n (npm) (malicious package)
- [MAL-2025-60931](https://insights.sbomify.com/MAL-2025-60931/): Malicious code in negative_impala_z3n (npm) (malicious package)
- [MAL-2025-60930](https://insights.sbomify.com/MAL-2025-60930/): Malicious code in necessary_minnow_z3n (npm) (malicious package)
- [MAL-2025-6093](https://insights.sbomify.com/MAL-2025-6093/): Malicious code in groq-link2 (npm) (malicious package)
- [MAL-2025-60929](https://insights.sbomify.com/MAL-2025-60929/): Malicious code in necessary_catshark_z3n (npm) (malicious package)
- [MAL-2025-60928](https://insights.sbomify.com/MAL-2025-60928/): Malicious code in near_primate_z3n (npm) (malicious package)
- [MAL-2025-60927](https://insights.sbomify.com/MAL-2025-60927/): Malicious code in naval_tortoise_z3n (npm) (malicious package)
- [MAL-2025-60926](https://insights.sbomify.com/MAL-2025-60926/): Malicious code in naval_clownfish_z3n (npm) (malicious package)
- [MAL-2025-60925](https://insights.sbomify.com/MAL-2025-60925/): Malicious code in natural_vulture_z3n (npm) (malicious package)
- [MAL-2025-60924](https://insights.sbomify.com/MAL-2025-60924/): Malicious code in natural_harrier_z3n (npm) (malicious package)
- [MAL-2025-60923](https://insights.sbomify.com/MAL-2025-60923/): Malicious code in natural_bison_z3n (npm) (malicious package)
- [MAL-2025-60922](https://insights.sbomify.com/MAL-2025-60922/): Malicious code in native_goat_z3n (npm) (malicious package)
- [MAL-2025-60921](https://insights.sbomify.com/MAL-2025-60921/): Malicious code in native_catshark_z3n (npm) (malicious package)
- [MAL-2025-60920](https://insights.sbomify.com/MAL-2025-60920/): Malicious code in native_bovid_z3n (npm) (malicious package)
- [MAL-2025-6092](https://insights.sbomify.com/MAL-2025-6092/): Malicious code in grammarly-editor-sdk (npm) (malicious package)
- [MAL-2025-60919](https://insights.sbomify.com/MAL-2025-60919/): Malicious code in national_sheep_z3n (npm) (malicious package)
- [MAL-2025-60918](https://insights.sbomify.com/MAL-2025-60918/): Malicious code in national_goat_z3n (npm) (malicious package)
- [MAL-2025-60917](https://insights.sbomify.com/MAL-2025-60917/): Malicious code in national_flea_z3n (npm) (malicious package)
- [MAL-2025-60916](https://insights.sbomify.com/MAL-2025-60916/): Malicious code in nasty_muskox_z3n (npm) (malicious package)
- [MAL-2025-60915](https://insights.sbomify.com/MAL-2025-60915/): Malicious code in nasty_gerbil_z3n (npm) (malicious package)
- [MAL-2025-60914](https://insights.sbomify.com/MAL-2025-60914/): Malicious code in nasty_bear_z3n (npm) (malicious package)
- [MAL-2025-60913](https://insights.sbomify.com/MAL-2025-60913/): Malicious code in narrow_unicorn_z3n (npm) (malicious package)
- [MAL-2025-60912](https://insights.sbomify.com/MAL-2025-60912/): Malicious code in narrow_stingray_z3n (npm) (malicious package)
- [MAL-2025-60911](https://insights.sbomify.com/MAL-2025-60911/): Malicious code in narrow_flyingfish_z3n (npm) (malicious package)
- [MAL-2025-60910](https://insights.sbomify.com/MAL-2025-60910/): Malicious code in narrow_cobra_z3n (npm) (malicious package)
- [MAL-2025-6091](https://insights.sbomify.com/MAL-2025-6091/): Malicious code in google-login-flow (npm) (malicious package)
- [MAL-2025-60909](https://insights.sbomify.com/MAL-2025-60909/): Malicious code in naked_rabbit_z3n (npm) (malicious package)
- [MAL-2025-60908](https://insights.sbomify.com/MAL-2025-60908/): Malicious code in naked_chipmunk_z3n (npm) (malicious package)
- [MAL-2025-60907](https://insights.sbomify.com/MAL-2025-60907/): Malicious code in naked_antelope_z3n (npm) (malicious package)
- [MAL-2025-60906](https://insights.sbomify.com/MAL-2025-60906/): Malicious code in mysterious_chicken_z3n (npm) (malicious package)
- [MAL-2025-60905](https://insights.sbomify.com/MAL-2025-60905/): Malicious code in mutual_swallow_z3n (npm) (malicious package)
- [MAL-2025-60904](https://insights.sbomify.com/MAL-2025-60904/): Malicious code in mute_falcon_z3n (npm) (malicious package)
- [MAL-2025-60903](https://insights.sbomify.com/MAL-2025-60903/): Malicious code in mute_cat_z3n (npm) (malicious package)
- [MAL-2025-60902](https://insights.sbomify.com/MAL-2025-60902/): Malicious code in musical_swallow_z3n (npm) (malicious package)
- [MAL-2025-60901](https://insights.sbomify.com/MAL-2025-60901/): Malicious code in mushy_constrictor_z3n (npm) (malicious package)
- [MAL-2025-60900](https://insights.sbomify.com/MAL-2025-60900/): Malicious code in multiple_spider_z3n (npm) (malicious package)
- [MAL-2025-6090](https://insights.sbomify.com/MAL-2025-6090/): Malicious code in google-fishbones-poc (npm) (malicious package)
- [MAL-2025-609](https://insights.sbomify.com/MAL-2025-609/): Malicious code in csbchalk-next (npm) (malicious package)
- [MAL-2025-60899](https://insights.sbomify.com/MAL-2025-60899/): Malicious code in multiple_marmoset_z3n (npm) (malicious package)
- [MAL-2025-60898](https://insights.sbomify.com/MAL-2025-60898/): Malicious code in multiple_crab_z3n (npm) (malicious package)
- [MAL-2025-60897](https://insights.sbomify.com/MAL-2025-60897/): Malicious code in multiple_chimpanzee_z3n (npm) (malicious package)
- [MAL-2025-60896](https://insights.sbomify.com/MAL-2025-60896/): Malicious code in muddy_meadowlark_z3n (npm) (malicious package)
- [MAL-2025-60895](https://insights.sbomify.com/MAL-2025-60895/): Malicious code in muddy_dragonfly_z3n (npm) (malicious package)
- [MAL-2025-60894](https://insights.sbomify.com/MAL-2025-60894/): Malicious code in motionless_shrimp_z3n (npm) (malicious package)
- [MAL-2025-60893](https://insights.sbomify.com/MAL-2025-60893/): Malicious code in motionless_duck_z3n (npm) (malicious package)
- [MAL-2025-60892](https://insights.sbomify.com/MAL-2025-60892/): Malicious code in monthly_earthworm_z3n (npm) (malicious package)
- [MAL-2025-60891](https://insights.sbomify.com/MAL-2025-60891/): Malicious code in monthly_aardvark_z3n (npm) (malicious package)
- [MAL-2025-60890](https://insights.sbomify.com/MAL-2025-60890/): Malicious code in monetary_toad_z3n (npm) (malicious package)
- [MAL-2025-6089](https://insights.sbomify.com/MAL-2025-6089/): Malicious code in fxa-auth-server (npm) (malicious package)
- [MAL-2025-60889](https://insights.sbomify.com/MAL-2025-60889/): Malicious code in monetary_gecko_z3n (npm) (malicious package)
- [MAL-2025-60888](https://insights.sbomify.com/MAL-2025-60888/): Malicious code in monetary_catshark_z3n (npm) (malicious package)
- [MAL-2025-60887](https://insights.sbomify.com/MAL-2025-60887/): Malicious code in monetary_bird_z3n (npm) (malicious package)
- [MAL-2025-60886](https://insights.sbomify.com/MAL-2025-60886/): Malicious code in molecular_tapir_z3n (npm) (malicious package)
- [MAL-2025-60885](https://insights.sbomify.com/MAL-2025-60885/): Malicious code in molecular_gibbon_z3n (npm) (malicious package)
- [MAL-2025-60884](https://insights.sbomify.com/MAL-2025-60884/): Malicious code in molecular_carp_z3n (npm) (malicious package)
- [MAL-2025-60883](https://insights.sbomify.com/MAL-2025-60883/): Malicious code in modest_wasp_z3n (npm) (malicious package)
- [MAL-2025-60882](https://insights.sbomify.com/MAL-2025-60882/): Malicious code in modest_shrew_z3n (npm) (malicious package)
- [MAL-2025-60881](https://insights.sbomify.com/MAL-2025-60881/): Malicious code in modern_shrew_z3n (npm) (malicious package)
- [MAL-2025-60880](https://insights.sbomify.com/MAL-2025-60880/): Malicious code in modern_leech_z3n (npm) (malicious package)
- [MAL-2025-6088](https://insights.sbomify.com/MAL-2025-6088/): Malicious code in dewiz-xyz-protego (npm) (malicious package)
- [MAL-2025-60879](https://insights.sbomify.com/MAL-2025-60879/): Malicious code in mobile_guanaco_z3n (npm) (malicious package)
- [MAL-2025-60878](https://insights.sbomify.com/MAL-2025-60878/): Malicious code in moaning_pelican_z3n (npm) (malicious package)
- [MAL-2025-60877](https://insights.sbomify.com/MAL-2025-60877/): Malicious code in moaning_grasshopper_z3n (npm) (malicious package)
- [MAL-2025-60876](https://insights.sbomify.com/MAL-2025-60876/): Malicious code in moaning_crow_z3n (npm) (malicious package)
- [MAL-2025-60875](https://insights.sbomify.com/MAL-2025-60875/): Malicious code in mixed_sparrow_z3n (npm) (malicious package)
- [MAL-2025-60874](https://insights.sbomify.com/MAL-2025-60874/): Malicious code in mixed_orca_z3n (npm) (malicious package)
- [MAL-2025-60873](https://insights.sbomify.com/MAL-2025-60873/): Malicious code in mixed_elk_z3n (npm) (malicious package)
- [MAL-2025-60872](https://insights.sbomify.com/MAL-2025-60872/): Malicious code in misty_hawk_z3n (npm) (malicious package)
- [MAL-2025-60871](https://insights.sbomify.com/MAL-2025-60871/): Malicious code in misleading_crayfish_z3n (npm) (malicious package)
- [MAL-2025-60870](https://insights.sbomify.com/MAL-2025-60870/): Malicious code in miserable_shrew_z3n (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/437/