# Vulnerabilities published in 2025


- [MAL-2025-6078](https://insights.sbomify.com/MAL-2025-6078/): Malicious code in chime-core-utils (npm) (malicious package)
- [MAL-2025-60779](https://insights.sbomify.com/MAL-2025-60779/): Malicious code in lonely_possum_z3n (npm) (malicious package)
- [MAL-2025-60778](https://insights.sbomify.com/MAL-2025-60778/): Malicious code in lonely_junglefowl_z3n (npm) (malicious package)
- [MAL-2025-60777](https://insights.sbomify.com/MAL-2025-60777/): Malicious code in logical_tyrannosaurus_z3n (npm) (malicious package)
- [MAL-2025-60776](https://insights.sbomify.com/MAL-2025-60776/): Malicious code in logical_lemur_z3n (npm) (malicious package)
- [MAL-2025-60775](https://insights.sbomify.com/MAL-2025-60775/): Malicious code in logical_jaguar_z3n (npm) (malicious package)
- [MAL-2025-60774](https://insights.sbomify.com/MAL-2025-60774/): Malicious code in logical_cow_z3n (npm) (malicious package)
- [MAL-2025-60773](https://insights.sbomify.com/MAL-2025-60773/): Malicious code in local_parrot_z3n (npm) (malicious package)
- [MAL-2025-60772](https://insights.sbomify.com/MAL-2025-60772/): Malicious code in lively_mongoose_z3n (npm) (malicious package)
- [MAL-2025-60771](https://insights.sbomify.com/MAL-2025-60771/): Malicious code in live_vole_z3n (npm) (malicious package)
- [MAL-2025-60770](https://insights.sbomify.com/MAL-2025-60770/): Malicious code in live_condor_z3n (npm) (malicious package)
- [MAL-2025-6077](https://insights.sbomify.com/MAL-2025-6077/): Malicious code in chime-config (npm) (malicious package)
- [MAL-2025-60769](https://insights.sbomify.com/MAL-2025-60769/): Malicious code in little_sole_z3n (npm) (malicious package)
- [MAL-2025-60768](https://insights.sbomify.com/MAL-2025-60768/): Malicious code in literary_stork_z3n (npm) (malicious package)
- [MAL-2025-60767](https://insights.sbomify.com/MAL-2025-60767/): Malicious code in literary_lion_z3n (npm) (malicious package)
- [MAL-2025-60766](https://insights.sbomify.com/MAL-2025-60766/): Malicious code in linguistic_mule_z3n (npm) (malicious package)
- [MAL-2025-60765](https://insights.sbomify.com/MAL-2025-60765/): Malicious code in linear_cricket_z3n (npm) (malicious package)
- [MAL-2025-60764](https://insights.sbomify.com/MAL-2025-60764/): Malicious code in linear_chickadee_z3n (npm) (malicious package)
- [MAL-2025-60763](https://insights.sbomify.com/MAL-2025-60763/): Malicious code in linear_centipede_z3n (npm) (malicious package)
- [MAL-2025-60762](https://insights.sbomify.com/MAL-2025-60762/): Malicious code in limited_caribou_z3n (npm) (malicious package)
- [MAL-2025-60761](https://insights.sbomify.com/MAL-2025-60761/): Malicious code in likely_pinniped_z3n (npm) (malicious package)
- [MAL-2025-60760](https://insights.sbomify.com/MAL-2025-60760/): Malicious code in likely_lungfish_z3n (npm) (malicious package)
- [MAL-2025-6076](https://insights.sbomify.com/MAL-2025-6076/): Malicious code in chime-ci-helper (npm) (malicious package)
- [MAL-2025-60759](https://insights.sbomify.com/MAL-2025-60759/): Malicious code in likely_hookworm_z3n (npm) (malicious package)
- [MAL-2025-60758](https://insights.sbomify.com/MAL-2025-60758/): Malicious code in likely_crocodile_z3n (npm) (malicious package)
- [MAL-2025-60757](https://insights.sbomify.com/MAL-2025-60757/): Malicious code in like_amphibian_z3n (npm) (malicious package)
- [MAL-2025-60756](https://insights.sbomify.com/MAL-2025-60756/): Malicious code in light_reptile_z3n (npm) (malicious package)
- [MAL-2025-60755](https://insights.sbomify.com/MAL-2025-60755/): Malicious code in liberal_sparrow_z3n (npm) (malicious package)
- [MAL-2025-60754](https://insights.sbomify.com/MAL-2025-60754/): Malicious code in liberal_felidae_z3n (npm) (malicious package)
- [MAL-2025-60753](https://insights.sbomify.com/MAL-2025-60753/): Malicious code in liable_peacock_z3n (npm) (malicious package)
- [MAL-2025-60752](https://insights.sbomify.com/MAL-2025-60752/): Malicious code in liable_gerbil_z3n (npm) (malicious package)
- [MAL-2025-60751](https://insights.sbomify.com/MAL-2025-60751/): Malicious code in lexical_kiwi_z3n (npm) (malicious package)
- [MAL-2025-60750](https://insights.sbomify.com/MAL-2025-60750/): Malicious code in level_ferret_z3n (npm) (malicious package)
- [MAL-2025-6075](https://insights.sbomify.com/MAL-2025-6075/): Malicious code in cbd2.1 (npm) (malicious package)
- [MAL-2025-60749](https://insights.sbomify.com/MAL-2025-60749/): Malicious code in lesser_zebra_z3n (npm) (malicious package)
- [MAL-2025-60748](https://insights.sbomify.com/MAL-2025-60748/): Malicious code in lesser_dog_z3n (npm) (malicious package)
- [MAL-2025-60747](https://insights.sbomify.com/MAL-2025-60747/): Malicious code in lengthy_tarsier_z3n (npm) (malicious package)
- [MAL-2025-60746](https://insights.sbomify.com/MAL-2025-60746/): Malicious code in lengthy_gopher_z3n (npm) (malicious package)
- [MAL-2025-60745](https://insights.sbomify.com/MAL-2025-60745/): Malicious code in legitimate_minnow_z3n (npm) (malicious package)
- [MAL-2025-60744](https://insights.sbomify.com/MAL-2025-60744/): Malicious code in legislative_tiglon_z3n (npm) (malicious package)
- [MAL-2025-60743](https://insights.sbomify.com/MAL-2025-60743/): Malicious code in legal_rooster_z3n (npm) (malicious package)
- [MAL-2025-60742](https://insights.sbomify.com/MAL-2025-60742/): Malicious code in legal_heron_z3n (npm) (malicious package)
- [MAL-2025-60741](https://insights.sbomify.com/MAL-2025-60741/): Malicious code in left_planarian_z3n (npm) (malicious package)
- [MAL-2025-60740](https://insights.sbomify.com/MAL-2025-60740/): Malicious code in leading_falcon_z3n (npm) (malicious package)
- [MAL-2025-6074](https://insights.sbomify.com/MAL-2025-6074/): Malicious code in blocknote-editor (npm) (malicious package)
- [MAL-2025-60739](https://insights.sbomify.com/MAL-2025-60739/): Malicious code in lazy_silverfish_z3n (npm) (malicious package)
- [MAL-2025-60738](https://insights.sbomify.com/MAL-2025-60738/): Malicious code in lazy_harrier_z3n (npm) (malicious package)
- [MAL-2025-60737](https://insights.sbomify.com/MAL-2025-60737/): Malicious code in lazy_chicken_z3n (npm) (malicious package)
- [MAL-2025-60736](https://insights.sbomify.com/MAL-2025-60736/): Malicious code in late_manatee_z3n (npm) (malicious package)
- [MAL-2025-60735](https://insights.sbomify.com/MAL-2025-60735/): Malicious code in labour_rooster_z3n (npm) (malicious package)
- [MAL-2025-60734](https://insights.sbomify.com/MAL-2025-60734/): Malicious code in labour_basilisk_z3n (npm) (malicious package)
- [MAL-2025-60733](https://insights.sbomify.com/MAL-2025-60733/): Malicious code in known_narwhal_z3n (npm) (malicious package)
- [MAL-2025-60732](https://insights.sbomify.com/MAL-2025-60732/): Malicious code in known_finch_z3n (npm) (malicious package)
- [MAL-2025-60731](https://insights.sbomify.com/MAL-2025-60731/): Malicious code in kind_rooster_z3n (npm) (malicious package)
- [MAL-2025-60730](https://insights.sbomify.com/MAL-2025-60730/): Malicious code in key_tyrannosaurus_z3n (npm) (malicious package)
- [MAL-2025-6073](https://insights.sbomify.com/MAL-2025-6073/): Malicious code in axr-smart-contracts (npm) (malicious package)
- [MAL-2025-60729](https://insights.sbomify.com/MAL-2025-60729/): Malicious code in key_leopard_z3n (npm) (malicious package)
- [MAL-2025-60728](https://insights.sbomify.com/MAL-2025-60728/): Malicious code in keen_cricket_z3n (npm) (malicious package)
- [MAL-2025-60727](https://insights.sbomify.com/MAL-2025-60727/): Malicious code in keen_crane_z3n (npm) (malicious package)
- [MAL-2025-60726](https://insights.sbomify.com/MAL-2025-60726/): Malicious code in just_minnow_z3n (npm) (malicious package)
- [MAL-2025-60725](https://insights.sbomify.com/MAL-2025-60725/): Malicious code in junior_carp_z3n (npm) (malicious package)
- [MAL-2025-60724](https://insights.sbomify.com/MAL-2025-60724/): Malicious code in juicy_gerbil_z3n (npm) (malicious package)
- [MAL-2025-60723](https://insights.sbomify.com/MAL-2025-60723/): Malicious code in judicial_mosquito_z3n (npm) (malicious package)
- [MAL-2025-60722](https://insights.sbomify.com/MAL-2025-60722/): Malicious code in judicial_elk_z3n (npm) (malicious package)
- [MAL-2025-60721](https://insights.sbomify.com/MAL-2025-60721/): Malicious code in jealous_flea_z3n (npm) (malicious package)
- [MAL-2025-60720](https://insights.sbomify.com/MAL-2025-60720/): Malicious code in jealous_clownfish_z3n (npm) (malicious package)
- [MAL-2025-6072](https://insights.sbomify.com/MAL-2025-6072/): Malicious code in anchor5 (npm) (malicious package)
- [MAL-2025-60719](https://insights.sbomify.com/MAL-2025-60719/): Malicious code in jarwohokyah (npm) (malicious package)
- [MAL-2025-60718](https://insights.sbomify.com/MAL-2025-60718/): Malicious code in jarwohoktea (npm) (malicious package)
- [MAL-2025-60717](https://insights.sbomify.com/MAL-2025-60717/): Malicious code in isolated_salamander_z3n (npm) (malicious package)
- [MAL-2025-60716](https://insights.sbomify.com/MAL-2025-60716/): Malicious code in irrelevant_harrier_z3n (npm) (malicious package)
- [MAL-2025-60715](https://insights.sbomify.com/MAL-2025-60715/): Malicious code in invisible_gibbon_z3n (npm) (malicious package)
- [MAL-2025-60714](https://insights.sbomify.com/MAL-2025-60714/): Malicious code in international_louse_z3n (npm) (malicious package)
- [MAL-2025-60713](https://insights.sbomify.com/MAL-2025-60713/): Malicious code in international_leopard_z3n (npm) (malicious package)
- [MAL-2025-60712](https://insights.sbomify.com/MAL-2025-60712/): Malicious code in internal_panther_z3n (npm) (malicious package)
- [MAL-2025-60711](https://insights.sbomify.com/MAL-2025-60711/): Malicious code in internal_crawdad_z3n (npm) (malicious package)
- [MAL-2025-60710](https://insights.sbomify.com/MAL-2025-60710/): Malicious code in internal_coral_z3n (npm) (malicious package)
- [MAL-2025-6071](https://insights.sbomify.com/MAL-2025-6071/): Malicious code in agent-patterns (npm) (malicious package)
- [MAL-2025-60709](https://insights.sbomify.com/MAL-2025-60709/): Malicious code in intermediate_partridge_z3n (npm) (malicious package)
- [MAL-2025-60708](https://insights.sbomify.com/MAL-2025-60708/): Malicious code in interior_cuckoo_z3n (npm) (malicious package)
- [MAL-2025-60707](https://insights.sbomify.com/MAL-2025-60707/): Malicious code in interior_armadillo_z3n (npm) (malicious package)
- [MAL-2025-60706](https://insights.sbomify.com/MAL-2025-60706/): Malicious code in interim_owl_z3n (npm) (malicious package)
- [MAL-2025-60705](https://insights.sbomify.com/MAL-2025-60705/): Malicious code in interesting_fish_z3n (npm) (malicious package)
- [MAL-2025-60704](https://insights.sbomify.com/MAL-2025-60704/): Malicious code in interesting_caterpillar_z3n (npm) (malicious package)
- [MAL-2025-60703](https://insights.sbomify.com/MAL-2025-60703/): Malicious code in interested_louse_z3n (npm) (malicious package)
- [MAL-2025-60702](https://insights.sbomify.com/MAL-2025-60702/): Malicious code in interested_cat_z3n (npm) (malicious package)
- [MAL-2025-60701](https://insights.sbomify.com/MAL-2025-60701/): Malicious code in intensive_parrotfish_z3n (npm) (malicious package)
- [MAL-2025-60700](https://insights.sbomify.com/MAL-2025-60700/): Malicious code in intensive_canid_z3n (npm) (malicious package)
- [MAL-2025-6070](https://insights.sbomify.com/MAL-2025-6070/): Malicious code in ably-realtime (npm) (malicious package)
- [MAL-2025-607](https://insights.sbomify.com/MAL-2025-607/): Malicious code in tomcrypt (npm) (malicious package)
- [MAL-2025-60699](https://insights.sbomify.com/MAL-2025-60699/): Malicious code in intellectual_tuna_z3n (npm) (malicious package)
- [MAL-2025-60698](https://insights.sbomify.com/MAL-2025-60698/): Malicious code in intellectual_guan_z3n (npm) (malicious package)
- [MAL-2025-60697](https://insights.sbomify.com/MAL-2025-60697/): Malicious code in integrated_giraffe_z3n (npm) (malicious package)
- [MAL-2025-60696](https://insights.sbomify.com/MAL-2025-60696/): Malicious code in integrated_cobra_z3n (npm) (malicious package)
- [MAL-2025-60695](https://insights.sbomify.com/MAL-2025-60695/): Malicious code in integral_basilisk_z3n (npm) (malicious package)
- [MAL-2025-60694](https://insights.sbomify.com/MAL-2025-60694/): Malicious code in intact_weasel_z3n (npm) (malicious package)
- [MAL-2025-60693](https://insights.sbomify.com/MAL-2025-60693/): Malicious code in intact_sparrow_z3n (npm) (malicious package)
- [MAL-2025-60692](https://insights.sbomify.com/MAL-2025-60692/): Malicious code in intact_mollusk_z3n (npm) (malicious package)
- [MAL-2025-60691](https://insights.sbomify.com/MAL-2025-60691/): Malicious code in insufficient_worm_z3n (npm) (malicious package)
- [MAL-2025-60690](https://insights.sbomify.com/MAL-2025-60690/): Malicious code in insufficient_fox_z3n (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/439/