# Vulnerabilities published in 2025


- [MAL-2025-60509](https://insights.sbomify.com/MAL-2025-60509/): Malicious code in frail_ostrich_z3n (npm) (malicious package)
- [MAL-2025-60508](https://insights.sbomify.com/MAL-2025-60508/): Malicious code in frail_marlin_z3n (npm) (malicious package)
- [MAL-2025-60507](https://insights.sbomify.com/MAL-2025-60507/): Malicious code in frail_grasshopper_z3n (npm) (malicious package)
- [MAL-2025-60506](https://insights.sbomify.com/MAL-2025-60506/): Malicious code in frail_duck_z3n (npm) (malicious package)
- [MAL-2025-60505](https://insights.sbomify.com/MAL-2025-60505/): Malicious code in fragile_quelea_z3n (npm) (malicious package)
- [MAL-2025-60504](https://insights.sbomify.com/MAL-2025-60504/): Malicious code in fragile_gazelle_z3n (npm) (malicious package)
- [MAL-2025-60503](https://insights.sbomify.com/MAL-2025-60503/): Malicious code in forward_mite_z3n (npm) (malicious package)
- [MAL-2025-60502](https://insights.sbomify.com/MAL-2025-60502/): Malicious code in forward_hippopotamus_z3n (npm) (malicious package)
- [MAL-2025-60501](https://insights.sbomify.com/MAL-2025-60501/): Malicious code in forthcoming_woodpecker_z3n (npm) (malicious package)
- [MAL-2025-60500](https://insights.sbomify.com/MAL-2025-60500/): Malicious code in formidable_trout_z3n (npm) (malicious package)
- [MAL-2025-6050](https://insights.sbomify.com/MAL-2025-6050/): Malicious code in @toptal/picasso-icons (npm) (malicious package)
- [MAL-2025-605](https://insights.sbomify.com/MAL-2025-605/): Malicious code in monaco-npm (npm) (malicious package)
- [MAL-2025-60499](https://insights.sbomify.com/MAL-2025-60499/): Malicious code in formidable_lemming_z3n (npm) (malicious package)
- [MAL-2025-60498](https://insights.sbomify.com/MAL-2025-60498/): Malicious code in foreign_mammal_z3n (npm) (malicious package)
- [MAL-2025-60497](https://insights.sbomify.com/MAL-2025-60497/): Malicious code in foolish_anglerfish_z3n (npm) (malicious package)
- [MAL-2025-60496](https://insights.sbomify.com/MAL-2025-60496/): Malicious code in fond_rattlesnake_z3n (npm) (malicious package)
- [MAL-2025-60495](https://insights.sbomify.com/MAL-2025-60495/): Malicious code in following_felidae_z3n (npm) (malicious package)
- [MAL-2025-60494](https://insights.sbomify.com/MAL-2025-60494/): Malicious code in flying_marsupial_z3n (npm) (malicious package)
- [MAL-2025-60493](https://insights.sbomify.com/MAL-2025-60493/): Malicious code in flying_anglerfish_z3n (npm) (malicious package)
- [MAL-2025-60492](https://insights.sbomify.com/MAL-2025-60492/): Malicious code in fluffy_wasp_z3n (npm) (malicious package)
- [MAL-2025-60491](https://insights.sbomify.com/MAL-2025-60491/): Malicious code in fluffy_lemur_z3n (npm) (malicious package)
- [MAL-2025-60490](https://insights.sbomify.com/MAL-2025-60490/): Malicious code in fluffy_lemming_z3n (npm) (malicious package)
- [MAL-2025-6049](https://insights.sbomify.com/MAL-2025-6049/): Malicious code in @toptal/picasso-grid (npm) (malicious package)
- [MAL-2025-60489](https://insights.sbomify.com/MAL-2025-60489/): Malicious code in fluffy_hamster_z3n (npm) (malicious package)
- [MAL-2025-60488](https://insights.sbomify.com/MAL-2025-60488/): Malicious code in fluffy_canid_z3n (npm) (malicious package)
- [MAL-2025-60487](https://insights.sbomify.com/MAL-2025-60487/): Malicious code in flexible_nightingale_z3n (npm) (malicious package)
- [MAL-2025-60486](https://insights.sbomify.com/MAL-2025-60486/): Malicious code in flexible_landfowl_z3n (npm) (malicious package)
- [MAL-2025-60485](https://insights.sbomify.com/MAL-2025-60485/): Malicious code in flexible_giraffe_z3n (npm) (malicious package)
- [MAL-2025-60484](https://insights.sbomify.com/MAL-2025-60484/): Malicious code in flexible_felidae_z3n (npm) (malicious package)
- [MAL-2025-60483](https://insights.sbomify.com/MAL-2025-60483/): Malicious code in flexible_alligator_z3n (npm) (malicious package)
- [MAL-2025-60482](https://insights.sbomify.com/MAL-2025-60482/): Malicious code in flat_kingfisher_z3n (npm) (malicious package)
- [MAL-2025-60481](https://insights.sbomify.com/MAL-2025-60481/): Malicious code in flaky_tahr_z3n (npm) (malicious package)
- [MAL-2025-60480](https://insights.sbomify.com/MAL-2025-60480/): Malicious code in fixed_buzzard_z3n (npm) (malicious package)
- [MAL-2025-6048](https://insights.sbomify.com/MAL-2025-6048/): Malicious code in @toptal/picasso-forms (npm) (malicious package)
- [MAL-2025-60479](https://insights.sbomify.com/MAL-2025-60479/): Malicious code in fit_horse_z3n (npm) (malicious package)
- [MAL-2025-60478](https://insights.sbomify.com/MAL-2025-60478/): Malicious code in fit_alligator_z3n (npm) (malicious package)
- [MAL-2025-60477](https://insights.sbomify.com/MAL-2025-60477/): Malicious code in fiscal_marten_z3n (npm) (malicious package)
- [MAL-2025-60476](https://insights.sbomify.com/MAL-2025-60476/): Malicious code in fiscal_earthworm_z3n (npm) (malicious package)
- [MAL-2025-60475](https://insights.sbomify.com/MAL-2025-60475/): Malicious code in firm_skunk_z3n (npm) (malicious package)
- [MAL-2025-60474](https://insights.sbomify.com/MAL-2025-60474/): Malicious code in final_squirrel_z3n (npm) (malicious package)
- [MAL-2025-60473](https://insights.sbomify.com/MAL-2025-60473/): Malicious code in final_planarian_z3n (npm) (malicious package)
- [MAL-2025-60472](https://insights.sbomify.com/MAL-2025-60472/): Malicious code in filthy_firefly_z3n (npm) (malicious package)
- [MAL-2025-60471](https://insights.sbomify.com/MAL-2025-60471/): Malicious code in fierce_orca_z3n (npm) (malicious package)
- [MAL-2025-60470](https://insights.sbomify.com/MAL-2025-60470/): Malicious code in few_tiglon_z3n (npm) (malicious package)
- [MAL-2025-6047](https://insights.sbomify.com/MAL-2025-6047/): Malicious code in @toptal/picasso-form (npm) (malicious package)
- [MAL-2025-60469](https://insights.sbomify.com/MAL-2025-60469/): Malicious code in few_bee_z3n (npm) (malicious package)
- [MAL-2025-60468](https://insights.sbomify.com/MAL-2025-60468/): Malicious code in feminist_tyrannosaurus_z3n (npm) (malicious package)
- [MAL-2025-60467](https://insights.sbomify.com/MAL-2025-60467/): Malicious code in feminist_salamander_z3n (npm) (malicious package)
- [MAL-2025-60466](https://insights.sbomify.com/MAL-2025-60466/): Malicious code in feminist_mackerel_z3n (npm) (malicious package)
- [MAL-2025-60465](https://insights.sbomify.com/MAL-2025-60465/): Malicious code in female_unicorn_z3n (npm) (malicious package)
- [MAL-2025-60464](https://insights.sbomify.com/MAL-2025-60464/): Malicious code in female_pony_z3n (npm) (malicious package)
- [MAL-2025-60463](https://insights.sbomify.com/MAL-2025-60463/): Malicious code in fellow_bass_z3n (npm) (malicious package)
- [MAL-2025-60462](https://insights.sbomify.com/MAL-2025-60462/): Malicious code in favourite_perch_z3n (npm) (malicious package)
- [MAL-2025-60461](https://insights.sbomify.com/MAL-2025-60461/): Malicious code in favourable_silkworm_z3n (npm) (malicious package)
- [MAL-2025-60460](https://insights.sbomify.com/MAL-2025-60460/): Malicious code in favourable_crab_z3n (npm) (malicious package)
- [MAL-2025-6046](https://insights.sbomify.com/MAL-2025-6046/): Malicious code in @toptal/picasso-dropzone (npm) (malicious package)
- [MAL-2025-60459](https://insights.sbomify.com/MAL-2025-60459/): Malicious code in fat_ostrich_z3n (npm) (malicious package)
- [MAL-2025-60458](https://insights.sbomify.com/MAL-2025-60458/): Malicious code in fat_manatee_z3n (npm) (malicious package)
- [MAL-2025-60457](https://insights.sbomify.com/MAL-2025-60457/): Malicious code in fashionable_parakeet_z3n (npm) (malicious package)
- [MAL-2025-60456](https://insights.sbomify.com/MAL-2025-60456/): Malicious code in fascinating_herring_z3n (npm) (malicious package)
- [MAL-2025-60455](https://insights.sbomify.com/MAL-2025-60455/): Malicious code in fascinating_goose_z3n (npm) (malicious package)
- [MAL-2025-60454](https://insights.sbomify.com/MAL-2025-60454/): Malicious code in fascinating_bear_z3n (npm) (malicious package)
- [MAL-2025-60453](https://insights.sbomify.com/MAL-2025-60453/): Malicious code in fascinating_armadillo_z3n (npm) (malicious package)
- [MAL-2025-60452](https://insights.sbomify.com/MAL-2025-60452/): Malicious code in fantastic_parrotfish_z3n (npm) (malicious package)
- [MAL-2025-60451](https://insights.sbomify.com/MAL-2025-60451/): Malicious code in fantastic_lion_z3n (npm) (malicious package)
- [MAL-2025-60450](https://insights.sbomify.com/MAL-2025-60450/): Malicious code in fancy_roadrunner_z3n (npm) (malicious package)
- [MAL-2025-6045](https://insights.sbomify.com/MAL-2025-6045/): Malicious code in @toptal/picasso-dropdown (npm) (malicious package)
- [MAL-2025-60449](https://insights.sbomify.com/MAL-2025-60449/): Malicious code in famous_swordtail_z3n (npm) (malicious package)
- [MAL-2025-60448](https://insights.sbomify.com/MAL-2025-60448/): Malicious code in famous_hippopotamus_z3n (npm) (malicious package)
- [MAL-2025-60447](https://insights.sbomify.com/MAL-2025-60447/): Malicious code in familiar_scorpion_z3n (npm) (malicious package)
- [MAL-2025-60446](https://insights.sbomify.com/MAL-2025-60446/): Malicious code in faithful_unicorn_z3n (npm) (malicious package)
- [MAL-2025-60445](https://insights.sbomify.com/MAL-2025-60445/): Malicious code in fair_stork_z3n (npm) (malicious package)
- [MAL-2025-60444](https://insights.sbomify.com/MAL-2025-60444/): Malicious code in faint_guppy_z3n (npm) (malicious package)
- [MAL-2025-60443](https://insights.sbomify.com/MAL-2025-60443/): Malicious code in faint_egret_z3n (npm) (malicious package)
- [MAL-2025-60442](https://insights.sbomify.com/MAL-2025-60442/): Malicious code in exuberant_spider_z3n (npm) (malicious package)
- [MAL-2025-60441](https://insights.sbomify.com/MAL-2025-60441/): Malicious code in exuberant_iguana_z3n (npm) (malicious package)
- [MAL-2025-60440](https://insights.sbomify.com/MAL-2025-60440/): Malicious code in extreme_roadrunner_z3n (npm) (malicious package)
- [MAL-2025-6044](https://insights.sbomify.com/MAL-2025-6044/): Malicious code in @toptal/picasso-container (npm) (malicious package)
- [MAL-2025-60439](https://insights.sbomify.com/MAL-2025-60439/): Malicious code in extreme_fly_z3n (npm) (malicious package)
- [MAL-2025-60438](https://insights.sbomify.com/MAL-2025-60438/): Malicious code in extraordinary_parrot_z3n (npm) (malicious package)
- [MAL-2025-60437](https://insights.sbomify.com/MAL-2025-60437/): Malicious code in extra_bobcat_z3n (npm) (malicious package)
- [MAL-2025-60436](https://insights.sbomify.com/MAL-2025-60436/): Malicious code in external_bee_z3n (npm) (malicious package)
- [MAL-2025-60435](https://insights.sbomify.com/MAL-2025-60435/): Malicious code in extensive_smelt_z3n (npm) (malicious package)
- [MAL-2025-60434](https://insights.sbomify.com/MAL-2025-60434/): Malicious code in extensive_coral_z3n (npm) (malicious package)
- [MAL-2025-60433](https://insights.sbomify.com/MAL-2025-60433/): Malicious code in extensive_angelfish_z3n (npm) (malicious package)
- [MAL-2025-60432](https://insights.sbomify.com/MAL-2025-60432/): Malicious code in extended_rodent_z3n (npm) (malicious package)
- [MAL-2025-60431](https://insights.sbomify.com/MAL-2025-60431/): Malicious code in extended_marsupial_z3n (npm) (malicious package)
- [MAL-2025-60430](https://insights.sbomify.com/MAL-2025-60430/): Malicious code in extended_hippopotamus_z3n (npm) (malicious package)
- [MAL-2025-6043](https://insights.sbomify.com/MAL-2025-6043/): Malicious code in @toptal/picasso-charts (npm) (malicious package)
- [MAL-2025-60429](https://insights.sbomify.com/MAL-2025-60429/): Malicious code in extended_elk_z3n (npm) (malicious package)
- [MAL-2025-60428](https://insights.sbomify.com/MAL-2025-60428/): Malicious code in explicit_woodpecker_z3n (npm) (malicious package)
- [MAL-2025-60427](https://insights.sbomify.com/MAL-2025-60427/): Malicious code in explicit_roadrunner_z3n (npm) (malicious package)
- [MAL-2025-60426](https://insights.sbomify.com/MAL-2025-60426/): Malicious code in explicit_dolphin_z3n (npm) (malicious package)
- [MAL-2025-60425](https://insights.sbomify.com/MAL-2025-60425/): Malicious code in explicit_blackbird_z3n (npm) (malicious package)
- [MAL-2025-60424](https://insights.sbomify.com/MAL-2025-60424/): Malicious code in experienced_felidae_z3n (npm) (malicious package)
- [MAL-2025-60423](https://insights.sbomify.com/MAL-2025-60423/): Malicious code in experienced_bird_z3n (npm) (malicious package)
- [MAL-2025-60422](https://insights.sbomify.com/MAL-2025-60422/): Malicious code in expensive_eagle_z3n (npm) (malicious package)
- [MAL-2025-60421](https://insights.sbomify.com/MAL-2025-60421/): Malicious code in exotic_octopus_z3n (npm) (malicious package)
- [MAL-2025-60420](https://insights.sbomify.com/MAL-2025-60420/): Malicious code in existing_vicuna_z3n (npm) (malicious package)
- [MAL-2025-6042](https://insights.sbomify.com/MAL-2025-6042/): Malicious code in @toptal/picasso-calendar (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/442/