# Vulnerabilities published in 2025 - [MAL-2025-96489](https://insights.sbomify.com/MAL-2025-96489/): Malicious code in secure_earwig_z3n (npm) (malicious package) - [MAL-2025-96488](https://insights.sbomify.com/MAL-2025-96488/): Malicious code in secure_constrictor_z3n (npm) (malicious package) - [MAL-2025-96487](https://insights.sbomify.com/MAL-2025-96487/): Malicious code in secure_cicada_z3n (npm) (malicious package) - [MAL-2025-96486](https://insights.sbomify.com/MAL-2025-96486/): Malicious code in secure_centipede_requirement (npm) (malicious package) - [MAL-2025-96485](https://insights.sbomify.com/MAL-2025-96485/): Malicious code in secret_newt_z3n (npm) (malicious package) - [MAL-2025-96484](https://insights.sbomify.com/MAL-2025-96484/): Malicious code in secret_firefly_z3n (npm) (malicious package) - [MAL-2025-96483](https://insights.sbomify.com/MAL-2025-96483/): Malicious code in secret_bonobo_z3n (npm) (malicious package) - [MAL-2025-96482](https://insights.sbomify.com/MAL-2025-96482/): Malicious code in secret_bass_z3n (npm) (malicious package) - [MAL-2025-96481](https://insights.sbomify.com/MAL-2025-96481/): Malicious code in secret_alpaca_z3n (npm) (malicious package) - [MAL-2025-96480](https://insights.sbomify.com/MAL-2025-96480/): Malicious code in secondary_shrew_z3n (npm) (malicious package) - [MAL-2025-9648](https://insights.sbomify.com/MAL-2025-9648/): Malicious code in @waitfortea2024/possimus-consequuntur-ipsa (npm) (malicious package) - [MAL-2025-96479](https://insights.sbomify.com/MAL-2025-96479/): Malicious code in secondary_quelea_z3n (npm) (malicious package) - [MAL-2025-96478](https://insights.sbomify.com/MAL-2025-96478/): Malicious code in secondary_ermine_z3n (npm) (malicious package) - [MAL-2025-96477](https://insights.sbomify.com/MAL-2025-96477/): Malicious code in secondary_bat_requirement (npm) (malicious package) - [MAL-2025-96476](https://insights.sbomify.com/MAL-2025-96476/): Malicious code in secondary_barnacle_z3n (npm) (malicious package) - [MAL-2025-96475](https://insights.sbomify.com/MAL-2025-96475/): Malicious code in secondary_asp_z3n (npm) (malicious package) - [MAL-2025-96474](https://insights.sbomify.com/MAL-2025-96474/): Malicious code in secondary_alpaca_z3n (npm) (malicious package) - [MAL-2025-96473](https://insights.sbomify.com/MAL-2025-96473/): Malicious code in secondary_aardwolf_z3n (npm) (malicious package) - [MAL-2025-96472](https://insights.sbomify.com/MAL-2025-96472/): Malicious code in screeching_turkey_z3n (npm) (malicious package) - [MAL-2025-96471](https://insights.sbomify.com/MAL-2025-96471/): Malicious code in screeching_shark_z3n (npm) (malicious package) - [MAL-2025-96470](https://insights.sbomify.com/MAL-2025-96470/): Malicious code in screeching_quail_z3n (npm) (malicious package) - [MAL-2025-9647](https://insights.sbomify.com/MAL-2025-9647/): Malicious code in @waitfortea2024/porro-illum-voluptatibus (npm) (malicious package) - [MAL-2025-96469](https://insights.sbomify.com/MAL-2025-96469/): Malicious code in screeching_partridge_z3n (npm) (malicious package) - [MAL-2025-96468](https://insights.sbomify.com/MAL-2025-96468/): Malicious code in screeching_newt_z3n (npm) (malicious package) - [MAL-2025-96467](https://insights.sbomify.com/MAL-2025-96467/): Malicious code in screeching_cuckoo_z3n (npm) (malicious package) - [MAL-2025-96466](https://insights.sbomify.com/MAL-2025-96466/): Malicious code in scrawny_gopher_z3n (npm) (malicious package) - [MAL-2025-96465](https://insights.sbomify.com/MAL-2025-96465/): Malicious code in scrawny_deer_z3n (npm) (malicious package) - [MAL-2025-96464](https://insights.sbomify.com/MAL-2025-96464/): Malicious code in scrawny_asp_z3n (npm) (malicious package) - [MAL-2025-96463](https://insights.sbomify.com/MAL-2025-96463/): Malicious code in scornful_turkey_z3n (npm) (malicious package) - [MAL-2025-96462](https://insights.sbomify.com/MAL-2025-96462/): Malicious code in scornful_porpoise_z3n (npm) (malicious package) - [MAL-2025-96461](https://insights.sbomify.com/MAL-2025-96461/): Malicious code in scornful_finch_z3n (npm) (malicious package) - [MAL-2025-96460](https://insights.sbomify.com/MAL-2025-96460/): Malicious code in scientific_chimpanzee_z3n (npm) (malicious package) - [MAL-2025-9646](https://insights.sbomify.com/MAL-2025-9646/): Malicious code in @waitfortea2024/perferendis-vero-modi (npm) (malicious package) - [MAL-2025-96459](https://insights.sbomify.com/MAL-2025-96459/): Malicious code in scattered_wildfowl_requirement (npm) (malicious package) - [MAL-2025-96458](https://insights.sbomify.com/MAL-2025-96458/): Malicious code in scattered_vulture_z3n (npm) (malicious package) - [MAL-2025-96457](https://insights.sbomify.com/MAL-2025-96457/): Malicious code in scattered_reindeer_z3n (npm) (malicious package) - [MAL-2025-96456](https://insights.sbomify.com/MAL-2025-96456/): Malicious code in scattered_condor_z3n (npm) (malicious package) - [MAL-2025-96455](https://insights.sbomify.com/MAL-2025-96455/): Malicious code in scary_wasp_z3n (npm) (malicious package) - [MAL-2025-96454](https://insights.sbomify.com/MAL-2025-96454/): Malicious code in scary_swordfish_z3n (npm) (malicious package) - [MAL-2025-96453](https://insights.sbomify.com/MAL-2025-96453/): Malicious code in scary_rhinoceros_z3n (npm) (malicious package) - [MAL-2025-96452](https://insights.sbomify.com/MAL-2025-96452/): Malicious code in scary_gull_requirement (npm) (malicious package) - [MAL-2025-96451](https://insights.sbomify.com/MAL-2025-96451/): Malicious code in scary_guan_z3n (npm) (malicious package) - [MAL-2025-96450](https://insights.sbomify.com/MAL-2025-96450/): Malicious code in scary_beaver_z3n (npm) (malicious package) - [MAL-2025-9645](https://insights.sbomify.com/MAL-2025-9645/): Malicious code in @waitfortea2024/perferendis-dicta-qui (npm) (malicious package) - [MAL-2025-96449](https://insights.sbomify.com/MAL-2025-96449/): Malicious code in scared_tiglon_z3n (npm) (malicious package) - [MAL-2025-96448](https://insights.sbomify.com/MAL-2025-96448/): Malicious code in scared_panther_z3n (npm) (malicious package) - [MAL-2025-96447](https://insights.sbomify.com/MAL-2025-96447/): Malicious code in scared_cat_z3n (npm) (malicious package) - [MAL-2025-96446](https://insights.sbomify.com/MAL-2025-96446/): Malicious code in scared_bug_requirement (npm) (malicious package) - [MAL-2025-96445](https://insights.sbomify.com/MAL-2025-96445/): Malicious code in satisfied_pinniped_z3n (npm) (malicious package) - [MAL-2025-96444](https://insights.sbomify.com/MAL-2025-96444/): Malicious code in satisfied_krill_z3n (npm) (malicious package) - [MAL-2025-96443](https://insights.sbomify.com/MAL-2025-96443/): Malicious code in satisfactory_sparrow_z3n (npm) (malicious package) - [MAL-2025-96442](https://insights.sbomify.com/MAL-2025-96442/): Malicious code in satisfactory_crocodile_z3n (npm) (malicious package) - [MAL-2025-96441](https://insights.sbomify.com/MAL-2025-96441/): Malicious code in satisfactory_barnacle_z3n (npm) (malicious package) - [MAL-2025-96440](https://insights.sbomify.com/MAL-2025-96440/): Malicious code in satisfactory_anteater_z3n (npm) (malicious package) - [MAL-2025-9644](https://insights.sbomify.com/MAL-2025-9644/): Malicious code in @waitfortea2024/numquam-quae-natus (npm) (malicious package) - [MAL-2025-96439](https://insights.sbomify.com/MAL-2025-96439/): Malicious code in salty_shark_z3n (npm) (malicious package) - [MAL-2025-96438](https://insights.sbomify.com/MAL-2025-96438/): Malicious code in salty_booby_z3n (npm) (malicious package) - [MAL-2025-96437](https://insights.sbomify.com/MAL-2025-96437/): Malicious code in safe_wallaby_z3n (npm) (malicious package) - [MAL-2025-96436](https://insights.sbomify.com/MAL-2025-96436/): Malicious code in safe_squirrel_z3n (npm) (malicious package) - [MAL-2025-96435](https://insights.sbomify.com/MAL-2025-96435/): Malicious code in safe_mole_z3n (npm) (malicious package) - [MAL-2025-96434](https://insights.sbomify.com/MAL-2025-96434/): Malicious code in safe_iguana_z3n (npm) (malicious package) - [MAL-2025-96433](https://insights.sbomify.com/MAL-2025-96433/): Malicious code in safe_finch_z3n (npm) (malicious package) - [MAL-2025-96432](https://insights.sbomify.com/MAL-2025-96432/): Malicious code in safe_elephant_z3n (npm) (malicious package) - [MAL-2025-96431](https://insights.sbomify.com/MAL-2025-96431/): Malicious code in sad_alligator_z3n (npm) (malicious package) - [MAL-2025-96430](https://insights.sbomify.com/MAL-2025-96430/): Malicious code in sacred_hookworm_z3n (npm) (malicious package) - [MAL-2025-9643](https://insights.sbomify.com/MAL-2025-9643/): Malicious code in @waitfortea2024/numquam-odio-repudiandae (npm) (malicious package) - [MAL-2025-96429](https://insights.sbomify.com/MAL-2025-96429/): Malicious code in sacred_butterfly_requirement (npm) (malicious package) - [MAL-2025-96428](https://insights.sbomify.com/MAL-2025-96428/): Malicious code in sacred_anteater_z3n (npm) (malicious package) - [MAL-2025-96427](https://insights.sbomify.com/MAL-2025-96427/): Malicious code in rural_tahr_z3n (npm) (malicious package) - [MAL-2025-96426](https://insights.sbomify.com/MAL-2025-96426/): Malicious code in rural_hawk_z3n (npm) (malicious package) - [MAL-2025-96425](https://insights.sbomify.com/MAL-2025-96425/): Malicious code in rural_gull_z3n (npm) (malicious package) - [MAL-2025-96424](https://insights.sbomify.com/MAL-2025-96424/): Malicious code in running_zebra_z3n (npm) (malicious package) - [MAL-2025-96423](https://insights.sbomify.com/MAL-2025-96423/): Malicious code in running_leopon_z3n (npm) (malicious package) - [MAL-2025-96422](https://insights.sbomify.com/MAL-2025-96422/): Malicious code in ruling_opossum_z3n (npm) (malicious package) - [MAL-2025-96421](https://insights.sbomify.com/MAL-2025-96421/): Malicious code in ruling_narwhal_requirement (npm) (malicious package) - [MAL-2025-96420](https://insights.sbomify.com/MAL-2025-96420/): Malicious code in ruling_bear_z3n (npm) (malicious package) - [MAL-2025-9642](https://insights.sbomify.com/MAL-2025-9642/): Malicious code in @waitfortea2024/non-beatae-earum (npm) (malicious package) - [MAL-2025-96419](https://insights.sbomify.com/MAL-2025-96419/): Malicious code in rude_fox_z3n (npm) (malicious package) - [MAL-2025-96418](https://insights.sbomify.com/MAL-2025-96418/): Malicious code in rude_fowl_z3n (npm) (malicious package) - [MAL-2025-96417](https://insights.sbomify.com/MAL-2025-96417/): Malicious code in rude_clam_z3n (npm) (malicious package) - [MAL-2025-96416](https://insights.sbomify.com/MAL-2025-96416/): Malicious code in rubber_snail_requirement (npm) (malicious package) - [MAL-2025-96415](https://insights.sbomify.com/MAL-2025-96415/): Malicious code in rubber_hoverfly_z3n (npm) (malicious package) - [MAL-2025-96414](https://insights.sbomify.com/MAL-2025-96414/): Malicious code in royal_mosquito_z3n (npm) (malicious package) - [MAL-2025-96413](https://insights.sbomify.com/MAL-2025-96413/): Malicious code in round_swordtail_z3n (npm) (malicious package) - [MAL-2025-96412](https://insights.sbomify.com/MAL-2025-96412/): Malicious code in round_rhinoceros_z3n (npm) (malicious package) - [MAL-2025-96411](https://insights.sbomify.com/MAL-2025-96411/): Malicious code in round_rat_requirement (npm) (malicious package) - [MAL-2025-96410](https://insights.sbomify.com/MAL-2025-96410/): Malicious code in round_manatee_z3n (npm) (malicious package) - [MAL-2025-9641](https://insights.sbomify.com/MAL-2025-9641/): Malicious code in @waitfortea2024/nesciunt-modi-aperiam (npm) (malicious package) - [MAL-2025-96409](https://insights.sbomify.com/MAL-2025-96409/): Malicious code in round_carp_z3n (npm) (malicious package) - [MAL-2025-96408](https://insights.sbomify.com/MAL-2025-96408/): Malicious code in round_bison_z3n (npm) (malicious package) - [MAL-2025-96407](https://insights.sbomify.com/MAL-2025-96407/): Malicious code in rough_reindeer_z3n (npm) (malicious package) - [MAL-2025-96406](https://insights.sbomify.com/MAL-2025-96406/): Malicious code in rough_penguin_requirement (npm) (malicious package) - [MAL-2025-96405](https://insights.sbomify.com/MAL-2025-96405/): Malicious code in rough_opossum_z3n (npm) (malicious package) - [MAL-2025-96404](https://insights.sbomify.com/MAL-2025-96404/): Malicious code in rough_nightingale_z3n (npm) (malicious package) - [MAL-2025-96403](https://insights.sbomify.com/MAL-2025-96403/): Malicious code in rotten_whitefish_z3n (npm) (malicious package) - [MAL-2025-96402](https://insights.sbomify.com/MAL-2025-96402/): Malicious code in rotten_raven_z3n (npm) (malicious package) - [MAL-2025-96401](https://insights.sbomify.com/MAL-2025-96401/): Malicious code in rotten_narwhal_z3n (npm) (malicious package) - [MAL-2025-96400](https://insights.sbomify.com/MAL-2025-96400/): Malicious code in rotten_magpie_z3n (npm) (malicious package) - [MAL-2025-9640](https://insights.sbomify.com/MAL-2025-9640/): Malicious code in @waitfortea2024/nemo-nisi-sint (npm) (malicious package) - [MAL-2025-96399](https://insights.sbomify.com/MAL-2025-96399/): Malicious code in rotten_camel_z3n (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/44/