# Vulnerabilities published in 2025


- [MAL-2025-606](https://insights.sbomify.com/MAL-2025-606/): Malicious code in nord-security-task (npm) (malicious package)
- [MAL-2025-60599](https://insights.sbomify.com/MAL-2025-60599/): Malicious code in high_trout_z3n (npm) (malicious package)
- [MAL-2025-60598](https://insights.sbomify.com/MAL-2025-60598/): Malicious code in high_spider_z3n (npm) (malicious package)
- [MAL-2025-60597](https://insights.sbomify.com/MAL-2025-60597/): Malicious code in high_rattlesnake_z3n (npm) (malicious package)
- [MAL-2025-60596](https://insights.sbomify.com/MAL-2025-60596/): Malicious code in high_possum_z3n (npm) (malicious package)
- [MAL-2025-60595](https://insights.sbomify.com/MAL-2025-60595/): Malicious code in high_mongoose_z3n (npm) (malicious package)
- [MAL-2025-60594](https://insights.sbomify.com/MAL-2025-60594/): Malicious code in helpless_pinniped_z3n (npm) (malicious package)
- [MAL-2025-60593](https://insights.sbomify.com/MAL-2025-60593/): Malicious code in helpless_monkey_z3n (npm) (malicious package)
- [MAL-2025-60592](https://insights.sbomify.com/MAL-2025-60592/): Malicious code in heavy_fox_z3n (npm) (malicious package)
- [MAL-2025-60591](https://insights.sbomify.com/MAL-2025-60591/): Malicious code in heavy_anaconda_z3n (npm) (malicious package)
- [MAL-2025-60590](https://insights.sbomify.com/MAL-2025-60590/): Malicious code in harsh_otter_z3n (npm) (malicious package)
- [MAL-2025-6059](https://insights.sbomify.com/MAL-2025-6059/): Malicious code in @toptal/picasso-radio (npm) (malicious package)
- [MAL-2025-60589](https://insights.sbomify.com/MAL-2025-60589/): Malicious code in hard_rabbit_z3n (npm) (malicious package)
- [MAL-2025-60588](https://insights.sbomify.com/MAL-2025-60588/): Malicious code in happy_toucan_z3n (npm) (malicious package)
- [MAL-2025-60587](https://insights.sbomify.com/MAL-2025-60587/): Malicious code in handicapped_crawdad_z3n (npm) (malicious package)
- [MAL-2025-60586](https://insights.sbomify.com/MAL-2025-60586/): Malicious code in handicapped_carp_z3n (npm) (malicious package)
- [MAL-2025-60585](https://insights.sbomify.com/MAL-2025-60585/): Malicious code in handicapped_bee_z3n (npm) (malicious package)
- [MAL-2025-60584](https://insights.sbomify.com/MAL-2025-60584/): Malicious code in guilty_ox_z3n (npm) (malicious package)
- [MAL-2025-60583](https://insights.sbomify.com/MAL-2025-60583/): Malicious code in guilty_meerkat_z3n (npm) (malicious package)
- [MAL-2025-60582](https://insights.sbomify.com/MAL-2025-60582/): Malicious code in grumpy_squirrel_z3n (npm) (malicious package)
- [MAL-2025-60581](https://insights.sbomify.com/MAL-2025-60581/): Malicious code in grumpy_lungfish_z3n (npm) (malicious package)
- [MAL-2025-60580](https://insights.sbomify.com/MAL-2025-60580/): Malicious code in growing_bonobo_z3n (npm) (malicious package)
- [MAL-2025-6058](https://insights.sbomify.com/MAL-2025-6058/): Malicious code in @toptal/picasso-quote (npm) (malicious package)
- [MAL-2025-60579](https://insights.sbomify.com/MAL-2025-60579/): Malicious code in grim_swallow_z3n (npm) (malicious package)
- [MAL-2025-60578](https://insights.sbomify.com/MAL-2025-60578/): Malicious code in grim_mollusk_z3n (npm) (malicious package)
- [MAL-2025-60577](https://insights.sbomify.com/MAL-2025-60577/): Malicious code in grim_fox_z3n (npm) (malicious package)
- [MAL-2025-60576](https://insights.sbomify.com/MAL-2025-60576/): Malicious code in grieving_earthworm_z3n (npm) (malicious package)
- [MAL-2025-60575](https://insights.sbomify.com/MAL-2025-60575/): Malicious code in grieving_clownfish_z3n (npm) (malicious package)
- [MAL-2025-60574](https://insights.sbomify.com/MAL-2025-60574/): Malicious code in great_squid_z3n (npm) (malicious package)
- [MAL-2025-60573](https://insights.sbomify.com/MAL-2025-60573/): Malicious code in great_iguana_z3n (npm) (malicious package)
- [MAL-2025-60572](https://insights.sbomify.com/MAL-2025-60572/): Malicious code in greasy_barracuda_z3n (npm) (malicious package)
- [MAL-2025-60571](https://insights.sbomify.com/MAL-2025-60571/): Malicious code in grateful_ladybug_z3n (npm) (malicious package)
- [MAL-2025-60570](https://insights.sbomify.com/MAL-2025-60570/): Malicious code in grateful_fly_z3n (npm) (malicious package)
- [MAL-2025-6057](https://insights.sbomify.com/MAL-2025-6057/): Malicious code in @toptal/picasso-provider (npm) (malicious package)
- [MAL-2025-60569](https://insights.sbomify.com/MAL-2025-60569/): Malicious code in grand_sawfish_z3n (npm) (malicious package)
- [MAL-2025-60568](https://insights.sbomify.com/MAL-2025-60568/): Malicious code in grand_puffin_z3n (npm) (malicious package)
- [MAL-2025-60567](https://insights.sbomify.com/MAL-2025-60567/): Malicious code in grand_clam_z3n (npm) (malicious package)
- [MAL-2025-60566](https://insights.sbomify.com/MAL-2025-60566/): Malicious code in graceful_dolphin_z3n (npm) (malicious package)
- [MAL-2025-60565](https://insights.sbomify.com/MAL-2025-60565/): Malicious code in governing_marmoset_z3n (npm) (malicious package)
- [MAL-2025-60564](https://insights.sbomify.com/MAL-2025-60564/): Malicious code in gothic_weasel_z3n (npm) (malicious package)
- [MAL-2025-60563](https://insights.sbomify.com/MAL-2025-60563/): Malicious code in gothic_penguin_z3n (npm) (malicious package)
- [MAL-2025-60562](https://insights.sbomify.com/MAL-2025-60562/): Malicious code in gorgeous_wildebeest_z3n (npm) (malicious package)
- [MAL-2025-60561](https://insights.sbomify.com/MAL-2025-60561/): Malicious code in gorgeous_mouse_z3n (npm) (malicious package)
- [MAL-2025-60560](https://insights.sbomify.com/MAL-2025-60560/): Malicious code in good_marmot_z3n (npm) (malicious package)
- [MAL-2025-6056](https://insights.sbomify.com/MAL-2025-6056/): Malicious code in @toptal/picasso-popper (npm) (malicious package)
- [MAL-2025-60559](https://insights.sbomify.com/MAL-2025-60559/): Malicious code in glorious_marmoset_z3n (npm) (malicious package)
- [MAL-2025-60558](https://insights.sbomify.com/MAL-2025-60558/): Malicious code in glorious_eagle_z3n (npm) (malicious package)
- [MAL-2025-60557](https://insights.sbomify.com/MAL-2025-60557/): Malicious code in glorious_cockroach_z3n (npm) (malicious package)
- [MAL-2025-60556](https://insights.sbomify.com/MAL-2025-60556/): Malicious code in gleaming_skink_z3n (npm) (malicious package)
- [MAL-2025-60555](https://insights.sbomify.com/MAL-2025-60555/): Malicious code in gleaming_marlin_z3n (npm) (malicious package)
- [MAL-2025-60554](https://insights.sbomify.com/MAL-2025-60554/): Malicious code in gleaming_antlion_z3n (npm) (malicious package)
- [MAL-2025-60553](https://insights.sbomify.com/MAL-2025-60553/): Malicious code in glad_cheetah_z3n (npm) (malicious package)
- [MAL-2025-60552](https://insights.sbomify.com/MAL-2025-60552/): Malicious code in given_tahr_z3n (npm) (malicious package)
- [MAL-2025-60551](https://insights.sbomify.com/MAL-2025-60551/): Malicious code in given_quokka_z3n (npm) (malicious package)
- [MAL-2025-60550](https://insights.sbomify.com/MAL-2025-60550/): Malicious code in given_crayfish_z3n (npm) (malicious package)
- [MAL-2025-6055](https://insights.sbomify.com/MAL-2025-6055/): Malicious code in @toptal/picasso-paper (npm) (malicious package)
- [MAL-2025-60549](https://insights.sbomify.com/MAL-2025-60549/): Malicious code in gigantic_swordtail_z3n (npm) (malicious package)
- [MAL-2025-60548](https://insights.sbomify.com/MAL-2025-60548/): Malicious code in giant_bird_z3n (npm) (malicious package)
- [MAL-2025-60547](https://insights.sbomify.com/MAL-2025-60547/): Malicious code in geographical_marlin_z3n (npm) (malicious package)
- [MAL-2025-60546](https://insights.sbomify.com/MAL-2025-60546/): Malicious code in geographical_guan_z3n (npm) (malicious package)
- [MAL-2025-60545](https://insights.sbomify.com/MAL-2025-60545/): Malicious code in genuine_sparrow_z3n (npm) (malicious package)
- [MAL-2025-60544](https://insights.sbomify.com/MAL-2025-60544/): Malicious code in genuine_pig_z3n (npm) (malicious package)
- [MAL-2025-60543](https://insights.sbomify.com/MAL-2025-60543/): Malicious code in genuine_leech_z3n (npm) (malicious package)
- [MAL-2025-60542](https://insights.sbomify.com/MAL-2025-60542/): Malicious code in gentle_beaver_z3n (npm) (malicious package)
- [MAL-2025-60541](https://insights.sbomify.com/MAL-2025-60541/): Malicious code in genetic_tick_z3n (npm) (malicious package)
- [MAL-2025-60540](https://insights.sbomify.com/MAL-2025-60540/): Malicious code in genetic_quail_z3n (npm) (malicious package)
- [MAL-2025-6054](https://insights.sbomify.com/MAL-2025-6054/): Malicious code in @toptal/picasso-logo (npm) (malicious package)
- [MAL-2025-60539](https://insights.sbomify.com/MAL-2025-60539/): Malicious code in genetic_mastodon_z3n (npm) (malicious package)
- [MAL-2025-60538](https://insights.sbomify.com/MAL-2025-60538/): Malicious code in genetic_dinosaur_z3n (npm) (malicious package)
- [MAL-2025-60537](https://insights.sbomify.com/MAL-2025-60537/): Malicious code in generous_snail_z3n (npm) (malicious package)
- [MAL-2025-60536](https://insights.sbomify.com/MAL-2025-60536/): Malicious code in general_flyingfish_z3n (npm) (malicious package)
- [MAL-2025-60535](https://insights.sbomify.com/MAL-2025-60535/): Malicious code in gay_muskox_z3n (npm) (malicious package)
- [MAL-2025-60534](https://insights.sbomify.com/MAL-2025-60534/): Malicious code in gastric_worm_z3n (npm) (malicious package)
- [MAL-2025-60533](https://insights.sbomify.com/MAL-2025-60533/): Malicious code in gastric_catfish_z3n (npm) (malicious package)
- [MAL-2025-60532](https://insights.sbomify.com/MAL-2025-60532/): Malicious code in fuzzy_trout_z3n (npm) (malicious package)
- [MAL-2025-60531](https://insights.sbomify.com/MAL-2025-60531/): Malicious code in fuzzy_scallop_z3n (npm) (malicious package)
- [MAL-2025-60530](https://insights.sbomify.com/MAL-2025-60530/): Malicious code in future_vicuna_z3n (npm) (malicious package)
- [MAL-2025-6053](https://insights.sbomify.com/MAL-2025-6053/): Malicious code in @toptal/picasso-link (npm) (malicious package)
- [MAL-2025-60529](https://insights.sbomify.com/MAL-2025-60529/): Malicious code in funny_snipe_z3n (npm) (malicious package)
- [MAL-2025-60528](https://insights.sbomify.com/MAL-2025-60528/): Malicious code in funny_moose_z3n (npm) (malicious package)
- [MAL-2025-60527](https://insights.sbomify.com/MAL-2025-60527/): Malicious code in fundamental_wallaby_z3n (npm) (malicious package)
- [MAL-2025-60526](https://insights.sbomify.com/MAL-2025-60526/): Malicious code in fundamental_cod_z3n (npm) (malicious package)
- [MAL-2025-60525](https://insights.sbomify.com/MAL-2025-60525/): Malicious code in functional_damselfly_z3n (npm) (malicious package)
- [MAL-2025-60524](https://insights.sbomify.com/MAL-2025-60524/): Malicious code in fun_capybara_z3n (npm) (malicious package)
- [MAL-2025-60523](https://insights.sbomify.com/MAL-2025-60523/): Malicious code in full_canid_z3n (npm) (malicious package)
- [MAL-2025-60522](https://insights.sbomify.com/MAL-2025-60522/): Malicious code in frozen_tarantula_z3n (npm) (malicious package)
- [MAL-2025-60521](https://insights.sbomify.com/MAL-2025-60521/): Malicious code in front_sloth_z3n (npm) (malicious package)
- [MAL-2025-60520](https://insights.sbomify.com/MAL-2025-60520/): Malicious code in front_jaguar_z3n (npm) (malicious package)
- [MAL-2025-6052](https://insights.sbomify.com/MAL-2025-6052/): Malicious code in @toptal/picasso-lab (npm) (malicious package)
- [MAL-2025-60519](https://insights.sbomify.com/MAL-2025-60519/): Malicious code in friendly_mockingbird_z3n (npm) (malicious package)
- [MAL-2025-60518](https://insights.sbomify.com/MAL-2025-60518/): Malicious code in fresh_swift_z3n (npm) (malicious package)
- [MAL-2025-60517](https://insights.sbomify.com/MAL-2025-60517/): Malicious code in fresh_koi_z3n (npm) (malicious package)
- [MAL-2025-60516](https://insights.sbomify.com/MAL-2025-60516/): Malicious code in fresh_bass_z3n (npm) (malicious package)
- [MAL-2025-60515](https://insights.sbomify.com/MAL-2025-60515/): Malicious code in free_owl_z3n (npm) (malicious package)
- [MAL-2025-60514](https://insights.sbomify.com/MAL-2025-60514/): Malicious code in free_blackbird_z3n (npm) (malicious package)
- [MAL-2025-60513](https://insights.sbomify.com/MAL-2025-60513/): Malicious code in free_armadillo_z3n (npm) (malicious package)
- [MAL-2025-60512](https://insights.sbomify.com/MAL-2025-60512/): Malicious code in frantic_gamefowl_z3n (npm) (malicious package)
- [MAL-2025-60511](https://insights.sbomify.com/MAL-2025-60511/): Malicious code in frantic_amphibian_z3n (npm) (malicious package)
- [MAL-2025-60510](https://insights.sbomify.com/MAL-2025-60510/): Malicious code in frail_peacock_z3n (npm) (malicious package)
- [MAL-2025-6051](https://insights.sbomify.com/MAL-2025-6051/): Malicious code in @toptal/picasso-image (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/441/