# Vulnerabilities published in 2025


- [MAL-2025-6087](https://insights.sbomify.com/MAL-2025-6087/): Malicious code in dewiz-xyz (npm) (malicious package)
- [MAL-2025-60869](https://insights.sbomify.com/MAL-2025-60869/): Malicious code in minor_unicorn_z3n (npm) (malicious package)
- [MAL-2025-60868](https://insights.sbomify.com/MAL-2025-60868/): Malicious code in minor_cheetah_z3n (npm) (malicious package)
- [MAL-2025-60867](https://insights.sbomify.com/MAL-2025-60867/): Malicious code in ministerial_yak_z3n (npm) (malicious package)
- [MAL-2025-60866](https://insights.sbomify.com/MAL-2025-60866/): Malicious code in ministerial_bat_z3n (npm) (malicious package)
- [MAL-2025-60865](https://insights.sbomify.com/MAL-2025-60865/): Malicious code in minimum_raccoon_z3n (npm) (malicious package)
- [MAL-2025-60864](https://insights.sbomify.com/MAL-2025-60864/): Malicious code in minimum_limpet_z3n (npm) (malicious package)
- [MAL-2025-60863](https://insights.sbomify.com/MAL-2025-60863/): Malicious code in minimum_gopher_z3n (npm) (malicious package)
- [MAL-2025-60862](https://insights.sbomify.com/MAL-2025-60862/): Malicious code in minimum_anglerfish_z3n (npm) (malicious package)
- [MAL-2025-60861](https://insights.sbomify.com/MAL-2025-60861/): Malicious code in minimal_yak_z3n (npm) (malicious package)
- [MAL-2025-60860](https://insights.sbomify.com/MAL-2025-60860/): Malicious code in minimal_chameleon_z3n (npm) (malicious package)
- [MAL-2025-6086](https://insights.sbomify.com/MAL-2025-6086/): Malicious code in date-fns-2 (npm) (malicious package)
- [MAL-2025-60859](https://insights.sbomify.com/MAL-2025-60859/): Malicious code in miniature_bovid_z3n (npm) (malicious package)
- [MAL-2025-60858](https://insights.sbomify.com/MAL-2025-60858/): Malicious code in military_swordtail_z3n (npm) (malicious package)
- [MAL-2025-60857](https://insights.sbomify.com/MAL-2025-60857/): Malicious code in military_kangaroo_z3n (npm) (malicious package)
- [MAL-2025-60856](https://insights.sbomify.com/MAL-2025-60856/): Malicious code in mild_snail_z3n (npm) (malicious package)
- [MAL-2025-60855](https://insights.sbomify.com/MAL-2025-60855/): Malicious code in mild_magpie_z3n (npm) (malicious package)
- [MAL-2025-60854](https://insights.sbomify.com/MAL-2025-60854/): Malicious code in mighty_anglerfish_z3n (npm) (malicious package)
- [MAL-2025-60853](https://insights.sbomify.com/MAL-2025-60853/): Malicious code in middle_kingfisher_z3n (npm) (malicious package)
- [MAL-2025-60852](https://insights.sbomify.com/MAL-2025-60852/): Malicious code in middle_bovid_z3n (npm) (malicious package)
- [MAL-2025-60851](https://insights.sbomify.com/MAL-2025-60851/): Malicious code in mid_tyrannosaurus_z3n (npm) (malicious package)
- [MAL-2025-60850](https://insights.sbomify.com/MAL-2025-60850/): Malicious code in mid_gorilla_z3n (npm) (malicious package)
- [MAL-2025-6085](https://insights.sbomify.com/MAL-2025-6085/): Malicious code in cwttools1 (npm) (malicious package)
- [MAL-2025-60849](https://insights.sbomify.com/MAL-2025-60849/): Malicious code in mid_beetle_z3n (npm) (malicious package)
- [MAL-2025-60848](https://insights.sbomify.com/MAL-2025-60848/): Malicious code in metropolitan_quail_z3n (npm) (malicious package)
- [MAL-2025-60847](https://insights.sbomify.com/MAL-2025-60847/): Malicious code in metropolitan_bovid_z3n (npm) (malicious package)
- [MAL-2025-60846](https://insights.sbomify.com/MAL-2025-60846/): Malicious code in mere_swordtail_z3n (npm) (malicious package)
- [MAL-2025-60845](https://insights.sbomify.com/MAL-2025-60845/): Malicious code in mere_starfish_z3n (npm) (malicious package)
- [MAL-2025-60844](https://insights.sbomify.com/MAL-2025-60844/): Malicious code in mere_mongoose_z3n (npm) (malicious package)
- [MAL-2025-60843](https://insights.sbomify.com/MAL-2025-60843/): Malicious code in mere_cuckoo_z3n (npm) (malicious package)
- [MAL-2025-60842](https://insights.sbomify.com/MAL-2025-60842/): Malicious code in melted_starfish_z3n (npm) (malicious package)
- [MAL-2025-60841](https://insights.sbomify.com/MAL-2025-60841/): Malicious code in melted_scorpion_z3n (npm) (malicious package)
- [MAL-2025-60840](https://insights.sbomify.com/MAL-2025-60840/): Malicious code in melodic_squid_z3n (npm) (malicious package)
- [MAL-2025-6084](https://insights.sbomify.com/MAL-2025-6084/): Malicious code in creator-portal-web (npm) (malicious package)
- [MAL-2025-60839](https://insights.sbomify.com/MAL-2025-60839/): Malicious code in melodic_silkworm_z3n (npm) (malicious package)
- [MAL-2025-60838](https://insights.sbomify.com/MAL-2025-60838/): Malicious code in melodic_jaguar_z3n (npm) (malicious package)
- [MAL-2025-60837](https://insights.sbomify.com/MAL-2025-60837/): Malicious code in medieval_stork_z3n (npm) (malicious package)
- [MAL-2025-60836](https://insights.sbomify.com/MAL-2025-60836/): Malicious code in medieval_moth_z3n (npm) (malicious package)
- [MAL-2025-60835](https://insights.sbomify.com/MAL-2025-60835/): Malicious code in medical_wolverine_z3n (npm) (malicious package)
- [MAL-2025-60834](https://insights.sbomify.com/MAL-2025-60834/): Malicious code in medical_kingfisher_z3n (npm) (malicious package)
- [MAL-2025-60833](https://insights.sbomify.com/MAL-2025-60833/): Malicious code in medical_harrier_z3n (npm) (malicious package)
- [MAL-2025-60832](https://insights.sbomify.com/MAL-2025-60832/): Malicious code in medical_flyingfish_z3n (npm) (malicious package)
- [MAL-2025-60831](https://insights.sbomify.com/MAL-2025-60831/): Malicious code in mean_wasp_z3n (npm) (malicious package)
- [MAL-2025-60830](https://insights.sbomify.com/MAL-2025-60830/): Malicious code in maximum_yak_z3n (npm) (malicious package)
- [MAL-2025-6083](https://insights.sbomify.com/MAL-2025-6083/): Malicious code in cosmjs (npm) (malicious package)
- [MAL-2025-60829](https://insights.sbomify.com/MAL-2025-60829/): Malicious code in maximum_harrier_z3n (npm) (malicious package)
- [MAL-2025-60828](https://insights.sbomify.com/MAL-2025-60828/): Malicious code in maximum_condor_z3n (npm) (malicious package)
- [MAL-2025-60827](https://insights.sbomify.com/MAL-2025-60827/): Malicious code in mature_centipede_z3n (npm) (malicious package)
- [MAL-2025-60826](https://insights.sbomify.com/MAL-2025-60826/): Malicious code in mathematical_hyena_z3n (npm) (malicious package)
- [MAL-2025-60825](https://insights.sbomify.com/MAL-2025-60825/): Malicious code in mass_snake_z3n (npm) (malicious package)
- [MAL-2025-60824](https://insights.sbomify.com/MAL-2025-60824/): Malicious code in mass_bobolink_z3n (npm) (malicious package)
- [MAL-2025-60823](https://insights.sbomify.com/MAL-2025-60823/): Malicious code in marxist_ostrich_z3n (npm) (malicious package)
- [MAL-2025-60822](https://insights.sbomify.com/MAL-2025-60822/): Malicious code in marxist_dormouse_z3n (npm) (malicious package)
- [MAL-2025-60821](https://insights.sbomify.com/MAL-2025-60821/): Malicious code in marvellous_wildcat_z3n (npm) (malicious package)
- [MAL-2025-60820](https://insights.sbomify.com/MAL-2025-60820/): Malicious code in marvellous_salmon_z3n (npm) (malicious package)
- [MAL-2025-6082](https://insights.sbomify.com/MAL-2025-6082/): Malicious code in codex-action (npm) (malicious package)
- [MAL-2025-60819](https://insights.sbomify.com/MAL-2025-60819/): Malicious code in marvellous_halibut_z3n (npm) (malicious package)
- [MAL-2025-60818](https://insights.sbomify.com/MAL-2025-60818/): Malicious code in marked_cuckoo_z3n (npm) (malicious package)
- [MAL-2025-60817](https://insights.sbomify.com/MAL-2025-60817/): Malicious code in marine_ox_z3n (npm) (malicious package)
- [MAL-2025-60816](https://insights.sbomify.com/MAL-2025-60816/): Malicious code in marginal_wildebeest_z3n (npm) (malicious package)
- [MAL-2025-60815](https://insights.sbomify.com/MAL-2025-60815/): Malicious code in many_frog_z3n (npm) (malicious package)
- [MAL-2025-60814](https://insights.sbomify.com/MAL-2025-60814/): Malicious code in many_dolphin_z3n (npm) (malicious package)
- [MAL-2025-60813](https://insights.sbomify.com/MAL-2025-60813/): Malicious code in manual_silverfish_z3n (npm) (malicious package)
- [MAL-2025-60812](https://insights.sbomify.com/MAL-2025-60812/): Malicious code in managing_weasel_z3n (npm) (malicious package)
- [MAL-2025-60811](https://insights.sbomify.com/MAL-2025-60811/): Malicious code in managing_wallaby_z3n (npm) (malicious package)
- [MAL-2025-60810](https://insights.sbomify.com/MAL-2025-60810/): Malicious code in managing_gayal_z3n (npm) (malicious package)
- [MAL-2025-6081](https://insights.sbomify.com/MAL-2025-6081/): Malicious code in cloud-inquisitor (npm) (malicious package)
- [MAL-2025-60809](https://insights.sbomify.com/MAL-2025-60809/): Malicious code in managerial_silkworm_z3n (npm) (malicious package)
- [MAL-2025-60808](https://insights.sbomify.com/MAL-2025-60808/): Malicious code in managerial_blackbird_z3n (npm) (malicious package)
- [MAL-2025-60807](https://insights.sbomify.com/MAL-2025-60807/): Malicious code in mammoth_gopher_z3n (npm) (malicious package)
- [MAL-2025-60806](https://insights.sbomify.com/MAL-2025-60806/): Malicious code in major_wildfowl_z3n (npm) (malicious package)
- [MAL-2025-60805](https://insights.sbomify.com/MAL-2025-60805/): Malicious code in major_kite_z3n (npm) (malicious package)
- [MAL-2025-60804](https://insights.sbomify.com/MAL-2025-60804/): Malicious code in main_seahorse_z3n (npm) (malicious package)
- [MAL-2025-60803](https://insights.sbomify.com/MAL-2025-60803/): Malicious code in magnificent_viper_z3n (npm) (malicious package)
- [MAL-2025-60802](https://insights.sbomify.com/MAL-2025-60802/): Malicious code in magnetic_parrot_z3n (npm) (malicious package)
- [MAL-2025-60801](https://insights.sbomify.com/MAL-2025-60801/): Malicious code in magic_toucan_z3n (npm) (malicious package)
- [MAL-2025-60800](https://insights.sbomify.com/MAL-2025-60800/): Malicious code in magic_skunk_z3n (npm) (malicious package)
- [MAL-2025-6080](https://insights.sbomify.com/MAL-2025-6080/): Malicious code in chime-utils (npm) (malicious package)
- [MAL-2025-608](https://insights.sbomify.com/MAL-2025-608/): Malicious code in achalk-next (npm) (malicious package)
- [MAL-2025-60799](https://insights.sbomify.com/MAL-2025-60799/): Malicious code in magic_shrimp_z3n (npm) (malicious package)
- [MAL-2025-60798](https://insights.sbomify.com/MAL-2025-60798/): Malicious code in mad_fly_z3n (npm) (malicious package)
- [MAL-2025-60797](https://insights.sbomify.com/MAL-2025-60797/): Malicious code in lucky_worm_z3n (npm) (malicious package)
- [MAL-2025-60796](https://insights.sbomify.com/MAL-2025-60796/): Malicious code in lucky_duck_z3n (npm) (malicious package)
- [MAL-2025-60795](https://insights.sbomify.com/MAL-2025-60795/): Malicious code in ltd_sloth_z3n (npm) (malicious package)
- [MAL-2025-60794](https://insights.sbomify.com/MAL-2025-60794/): Malicious code in ltd_asp_z3n (npm) (malicious package)
- [MAL-2025-60793](https://insights.sbomify.com/MAL-2025-60793/): Malicious code in loyal_cheetah_z3n (npm) (malicious package)
- [MAL-2025-60792](https://insights.sbomify.com/MAL-2025-60792/): Malicious code in loyal_beetle_z3n (npm) (malicious package)
- [MAL-2025-60791](https://insights.sbomify.com/MAL-2025-60791/): Malicious code in low_fowl_z3n (npm) (malicious package)
- [MAL-2025-60790](https://insights.sbomify.com/MAL-2025-60790/): Malicious code in lovely_stork_z3n (npm) (malicious package)
- [MAL-2025-6079](https://insights.sbomify.com/MAL-2025-6079/): Malicious code in chime-secrets (npm) (malicious package)
- [MAL-2025-60789](https://insights.sbomify.com/MAL-2025-60789/): Malicious code in loud_whale_z3n (npm) (malicious package)
- [MAL-2025-60788](https://insights.sbomify.com/MAL-2025-60788/): Malicious code in loud_primate_z3n (npm) (malicious package)
- [MAL-2025-60787](https://insights.sbomify.com/MAL-2025-60787/): Malicious code in loud_penguin_z3n (npm) (malicious package)
- [MAL-2025-60786](https://insights.sbomify.com/MAL-2025-60786/): Malicious code in loud_leopon_z3n (npm) (malicious package)
- [MAL-2025-60785](https://insights.sbomify.com/MAL-2025-60785/): Malicious code in lost_cougar_z3n (npm) (malicious package)
- [MAL-2025-60784](https://insights.sbomify.com/MAL-2025-60784/): Malicious code in lost_bobcat_z3n (npm) (malicious package)
- [MAL-2025-60783](https://insights.sbomify.com/MAL-2025-60783/): Malicious code in loose_tarantula_z3n (npm) (malicious package)
- [MAL-2025-60782](https://insights.sbomify.com/MAL-2025-60782/): Malicious code in loose_piranha_z3n (npm) (malicious package)
- [MAL-2025-60781](https://insights.sbomify.com/MAL-2025-60781/): Malicious code in long_skink_z3n (npm) (malicious package)
- [MAL-2025-60780](https://insights.sbomify.com/MAL-2025-60780/): Malicious code in long_cuckoo_z3n (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/438/