# Vulnerabilities published in 2025 - [MAL-2025-6069](https://insights.sbomify.com/MAL-2025-6069/): Malicious code in @xene/core (npm) (malicious package) - [MAL-2025-60689](https://insights.sbomify.com/MAL-2025-60689/): Malicious code in institutional_swordtail_z3n (npm) (malicious package) - [MAL-2025-60688](https://insights.sbomify.com/MAL-2025-60688/): Malicious code in institutional_gull_z3n (npm) (malicious package) - [MAL-2025-60687](https://insights.sbomify.com/MAL-2025-60687/): Malicious code in instant_swordtail_z3n (npm) (malicious package) - [MAL-2025-60686](https://insights.sbomify.com/MAL-2025-60686/): Malicious code in innovative_crab_z3n (npm) (malicious package) - [MAL-2025-60685](https://insights.sbomify.com/MAL-2025-60685/): Malicious code in innocent_crayfish_z3n (npm) (malicious package) - [MAL-2025-60684](https://insights.sbomify.com/MAL-2025-60684/): Malicious code in inner_guan_z3n (npm) (malicious package) - [MAL-2025-60683](https://insights.sbomify.com/MAL-2025-60683/): Malicious code in inland_crow_z3n (npm) (malicious package) - [MAL-2025-60682](https://insights.sbomify.com/MAL-2025-60682/): Malicious code in injured_wombat_z3n (npm) (malicious package) - [MAL-2025-60681](https://insights.sbomify.com/MAL-2025-60681/): Malicious code in initial_hornet_z3n (npm) (malicious package) - [MAL-2025-60680](https://insights.sbomify.com/MAL-2025-60680/): Malicious code in inherent_whitefish_z3n (npm) (malicious package) - [MAL-2025-6068](https://insights.sbomify.com/MAL-2025-6068/): Malicious code in @wptv/components (npm) (malicious package) - [MAL-2025-60679](https://insights.sbomify.com/MAL-2025-60679/): Malicious code in inherent_harrier_z3n (npm) (malicious package) - [MAL-2025-60678](https://insights.sbomify.com/MAL-2025-60678/): Malicious code in inherent_gull_z3n (npm) (malicious package) - [MAL-2025-60677](https://insights.sbomify.com/MAL-2025-60677/): Malicious code in inherent_catfish_z3n (npm) (malicious package) - [MAL-2025-60676](https://insights.sbomify.com/MAL-2025-60676/): Malicious code in informal_parrot_z3n (npm) (malicious package) - [MAL-2025-60675](https://insights.sbomify.com/MAL-2025-60675/): Malicious code in influential_marmot_z3n (npm) (malicious package) - [MAL-2025-60674](https://insights.sbomify.com/MAL-2025-60674/): Malicious code in influential_bobolink_z3n (npm) (malicious package) - [MAL-2025-60673](https://insights.sbomify.com/MAL-2025-60673/): Malicious code in industrial_marsupial_z3n (npm) (malicious package) - [MAL-2025-60672](https://insights.sbomify.com/MAL-2025-60672/): Malicious code in industrial_hookworm_z3n (npm) (malicious package) - [MAL-2025-60671](https://insights.sbomify.com/MAL-2025-60671/): Malicious code in individual_galliform_z3n (npm) (malicious package) - [MAL-2025-60670](https://insights.sbomify.com/MAL-2025-60670/): Malicious code in indirect_yak_z3n (npm) (malicious package) - [MAL-2025-6067](https://insights.sbomify.com/MAL-2025-6067/): Malicious code in @toptal/picasso-utils (npm) (malicious package) - [MAL-2025-60669](https://insights.sbomify.com/MAL-2025-60669/): Malicious code in indirect_trout_z3n (npm) (malicious package) - [MAL-2025-60668](https://insights.sbomify.com/MAL-2025-60668/): Malicious code in indirect_mosquito_z3n (npm) (malicious package) - [MAL-2025-60667](https://insights.sbomify.com/MAL-2025-60667/): Malicious code in independent_haddock_z3n (npm) (malicious package) - [MAL-2025-60666](https://insights.sbomify.com/MAL-2025-60666/): Malicious code in incredible_nightingale_z3n (npm) (malicious package) - [MAL-2025-60665](https://insights.sbomify.com/MAL-2025-60665/): Malicious code in increased_scallop_z3n (npm) (malicious package) - [MAL-2025-60664](https://insights.sbomify.com/MAL-2025-60664/): Malicious code in inclined_tern_z3n (npm) (malicious package) - [MAL-2025-60663](https://insights.sbomify.com/MAL-2025-60663/): Malicious code in inclined_sparrow_z3n (npm) (malicious package) - [MAL-2025-60662](https://insights.sbomify.com/MAL-2025-60662/): Malicious code in inclined_puma_z3n (npm) (malicious package) - [MAL-2025-60661](https://insights.sbomify.com/MAL-2025-60661/): Malicious code in inclined_cardinal_z3n (npm) (malicious package) - [MAL-2025-60660](https://insights.sbomify.com/MAL-2025-60660/): Malicious code in inc_chickadee_z3n (npm) (malicious package) - [MAL-2025-6066](https://insights.sbomify.com/MAL-2025-6066/): Malicious code in @toptal/picasso-typography (npm) (malicious package) - [MAL-2025-60659](https://insights.sbomify.com/MAL-2025-60659/): Malicious code in inc_barracuda_z3n (npm) (malicious package) - [MAL-2025-60658](https://insights.sbomify.com/MAL-2025-60658/): Malicious code in inappropriate_wallaby_z3n (npm) (malicious package) - [MAL-2025-60657](https://insights.sbomify.com/MAL-2025-60657/): Malicious code in inadequate_tern_z3n (npm) (malicious package) - [MAL-2025-60656](https://insights.sbomify.com/MAL-2025-60656/): Malicious code in improved_dragon_z3n (npm) (malicious package) - [MAL-2025-60655](https://insights.sbomify.com/MAL-2025-60655/): Malicious code in improved_cockroach_z3n (npm) (malicious package) - [MAL-2025-60654](https://insights.sbomify.com/MAL-2025-60654/): Malicious code in impressive_mink_z3n (npm) (malicious package) - [MAL-2025-60653](https://insights.sbomify.com/MAL-2025-60653/): Malicious code in impressive_hawk_z3n (npm) (malicious package) - [MAL-2025-60652](https://insights.sbomify.com/MAL-2025-60652/): Malicious code in impressive_galliform_z3n (npm) (malicious package) - [MAL-2025-60651](https://insights.sbomify.com/MAL-2025-60651/): Malicious code in impressive_aphid_z3n (npm) (malicious package) - [MAL-2025-60650](https://insights.sbomify.com/MAL-2025-60650/): Malicious code in impressed_fish_z3n (npm) (malicious package) - [MAL-2025-6065](https://insights.sbomify.com/MAL-2025-6065/): Malicious code in @toptal/picasso-tailwind (npm) (malicious package) - [MAL-2025-60649](https://insights.sbomify.com/MAL-2025-60649/): Malicious code in impossible_gull_z3n (npm) (malicious package) - [MAL-2025-60648](https://insights.sbomify.com/MAL-2025-60648/): Malicious code in important_centipede_z3n (npm) (malicious package) - [MAL-2025-60647](https://insights.sbomify.com/MAL-2025-60647/): Malicious code in implicit_worm_z3n (npm) (malicious package) - [MAL-2025-60646](https://insights.sbomify.com/MAL-2025-60646/): Malicious code in implicit_crocodile_z3n (npm) (malicious package) - [MAL-2025-60645](https://insights.sbomify.com/MAL-2025-60645/): Malicious code in imperial_squirrel_z3n (npm) (malicious package) - [MAL-2025-60644](https://insights.sbomify.com/MAL-2025-60644/): Malicious code in immense_wolverine_z3n (npm) (malicious package) - [MAL-2025-60643](https://insights.sbomify.com/MAL-2025-60643/): Malicious code in immense_urial_z3n (npm) (malicious package) - [MAL-2025-60642](https://insights.sbomify.com/MAL-2025-60642/): Malicious code in imaginative_mackerel_z3n (npm) (malicious package) - [MAL-2025-60641](https://insights.sbomify.com/MAL-2025-60641/): Malicious code in ill_reptile_z3n (npm) (malicious package) - [MAL-2025-60640](https://insights.sbomify.com/MAL-2025-60640/): Malicious code in ill_minnow_z3n (npm) (malicious package) - [MAL-2025-6064](https://insights.sbomify.com/MAL-2025-6064/): Malicious code in @toptal/picasso-switch (npm) (malicious package) - [MAL-2025-60639](https://insights.sbomify.com/MAL-2025-60639/): Malicious code in ill_impala_z3n (npm) (malicious package) - [MAL-2025-60638](https://insights.sbomify.com/MAL-2025-60638/): Malicious code in ill_coyote_z3n (npm) (malicious package) - [MAL-2025-60637](https://insights.sbomify.com/MAL-2025-60637/): Malicious code in ideological_panther_z3n (npm) (malicious package) - [MAL-2025-60636](https://insights.sbomify.com/MAL-2025-60636/): Malicious code in ideological_chameleon_z3n (npm) (malicious package) - [MAL-2025-60635](https://insights.sbomify.com/MAL-2025-60635/): Malicious code in ideal_harrier_z3n (npm) (malicious package) - [MAL-2025-60634](https://insights.sbomify.com/MAL-2025-60634/): Malicious code in ideal_buzzard_z3n (npm) (malicious package) - [MAL-2025-60633](https://insights.sbomify.com/MAL-2025-60633/): Malicious code in icy_orca_z3n (npm) (malicious package) - [MAL-2025-60632](https://insights.sbomify.com/MAL-2025-60632/): Malicious code in hushed_ocelot_z3n (npm) (malicious package) - [MAL-2025-60631](https://insights.sbomify.com/MAL-2025-60631/): Malicious code in hushed_flyingfish_z3n (npm) (malicious package) - [MAL-2025-60630](https://insights.sbomify.com/MAL-2025-60630/): Malicious code in hushed_crayfish_z3n (npm) (malicious package) - [MAL-2025-6063](https://insights.sbomify.com/MAL-2025-6063/): Malicious code in @toptal/picasso-slider (npm) (malicious package) - [MAL-2025-60629](https://insights.sbomify.com/MAL-2025-60629/): Malicious code in human_leopard_z3n (npm) (malicious package) - [MAL-2025-60628](https://insights.sbomify.com/MAL-2025-60628/): Malicious code in huge_parrotfish_z3n (npm) (malicious package) - [MAL-2025-60627](https://insights.sbomify.com/MAL-2025-60627/): Malicious code in huge_herring_z3n (npm) (malicious package) - [MAL-2025-60626](https://insights.sbomify.com/MAL-2025-60626/): Malicious code in hot_gayal_z3n (npm) (malicious package) - [MAL-2025-60625](https://insights.sbomify.com/MAL-2025-60625/): Malicious code in hot_cod_z3n (npm) (malicious package) - [MAL-2025-60624](https://insights.sbomify.com/MAL-2025-60624/): Malicious code in hot_basilisk_z3n (npm) (malicious package) - [MAL-2025-60623](https://insights.sbomify.com/MAL-2025-60623/): Malicious code in hostile_seahorse_z3n (npm) (malicious package) - [MAL-2025-60622](https://insights.sbomify.com/MAL-2025-60622/): Malicious code in hostile_kangaroo_z3n (npm) (malicious package) - [MAL-2025-60621](https://insights.sbomify.com/MAL-2025-60621/): Malicious code in horrible_wildcat_z3n (npm) (malicious package) - [MAL-2025-60620](https://insights.sbomify.com/MAL-2025-60620/): Malicious code in horizontal_chinchilla_z3n (npm) (malicious package) - [MAL-2025-6062](https://insights.sbomify.com/MAL-2025-6062/): Malicious code in @toptal/picasso-shared (npm) (malicious package) - [MAL-2025-60619](https://insights.sbomify.com/MAL-2025-60619/): Malicious code in honest_silverfish_z3n (npm) (malicious package) - [MAL-2025-60618](https://insights.sbomify.com/MAL-2025-60618/): Malicious code in honest_cricket_z3n (npm) (malicious package) - [MAL-2025-60617](https://insights.sbomify.com/MAL-2025-60617/): Malicious code in hon_capybara_z3n (npm) (malicious package) - [MAL-2025-60616](https://insights.sbomify.com/MAL-2025-60616/): Malicious code in homely_wasp_z3n (npm) (malicious package) - [MAL-2025-60615](https://insights.sbomify.com/MAL-2025-60615/): Malicious code in homeless_guanaco_z3n (npm) (malicious package) - [MAL-2025-60614](https://insights.sbomify.com/MAL-2025-60614/): Malicious code in homeless_deer_z3n (npm) (malicious package) - [MAL-2025-60613](https://insights.sbomify.com/MAL-2025-60613/): Malicious code in homeless_bobolink_z3n (npm) (malicious package) - [MAL-2025-60612](https://insights.sbomify.com/MAL-2025-60612/): Malicious code in holy_krill_z3n (npm) (malicious package) - [MAL-2025-60611](https://insights.sbomify.com/MAL-2025-60611/): Malicious code in holy_cricket_z3n (npm) (malicious package) - [MAL-2025-60610](https://insights.sbomify.com/MAL-2025-60610/): Malicious code in hollow_catshark_z3n (npm) (malicious package) - [MAL-2025-6061](https://insights.sbomify.com/MAL-2025-6061/): Malicious code in @toptal/picasso-select (npm) (malicious package) - [MAL-2025-60609](https://insights.sbomify.com/MAL-2025-60609/): Malicious code in historical_cougar_z3n (npm) (malicious package) - [MAL-2025-60608](https://insights.sbomify.com/MAL-2025-60608/): Malicious code in historical_cardinal_z3n (npm) (malicious package) - [MAL-2025-60607](https://insights.sbomify.com/MAL-2025-60607/): Malicious code in historic_constrictor_z3n (npm) (malicious package) - [MAL-2025-60606](https://insights.sbomify.com/MAL-2025-60606/): Malicious code in historic_catshark_z3n (npm) (malicious package) - [MAL-2025-60605](https://insights.sbomify.com/MAL-2025-60605/): Malicious code in hissing_toucan_z3n (npm) (malicious package) - [MAL-2025-60604](https://insights.sbomify.com/MAL-2025-60604/): Malicious code in hissing_impala_z3n (npm) (malicious package) - [MAL-2025-60603](https://insights.sbomify.com/MAL-2025-60603/): Malicious code in hissing_barnacle_z3n (npm) (malicious package) - [MAL-2025-60602](https://insights.sbomify.com/MAL-2025-60602/): Malicious code in hilarious_squirrel_z3n (npm) (malicious package) - [MAL-2025-60601](https://insights.sbomify.com/MAL-2025-60601/): Malicious code in hilarious_pig_z3n (npm) (malicious package) - [MAL-2025-60600](https://insights.sbomify.com/MAL-2025-60600/): Malicious code in hilarious_ox_z3n (npm) (malicious package) - [MAL-2025-6060](https://insights.sbomify.com/MAL-2025-6060/): Malicious code in @toptal/picasso-rich-text-editor (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/440/