# Vulnerabilities published in 2025


- [MAL-2025-60419](https://insights.sbomify.com/MAL-2025-60419/): Malicious code in exclusive_perch_z3n (npm) (malicious package)
- [MAL-2025-60418](https://insights.sbomify.com/MAL-2025-60418/): Malicious code in exciting_ptarmigan_z3n (npm) (malicious package)
- [MAL-2025-60417](https://insights.sbomify.com/MAL-2025-60417/): Malicious code in excited_clownfish_z3n (npm) (malicious package)
- [MAL-2025-60416](https://insights.sbomify.com/MAL-2025-60416/): Malicious code in excessive_roadrunner_z3n (npm) (malicious package)
- [MAL-2025-60415](https://insights.sbomify.com/MAL-2025-60415/): Malicious code in excessive_marlin_z3n (npm) (malicious package)
- [MAL-2025-60414](https://insights.sbomify.com/MAL-2025-60414/): Malicious code in excessive_flyingfish_z3n (npm) (malicious package)
- [MAL-2025-60413](https://insights.sbomify.com/MAL-2025-60413/): Malicious code in excessive_condor_z3n (npm) (malicious package)
- [MAL-2025-60412](https://insights.sbomify.com/MAL-2025-60412/): Malicious code in excessive_blackbird_z3n (npm) (malicious package)
- [MAL-2025-60411](https://insights.sbomify.com/MAL-2025-60411/): Malicious code in excess_bass_z3n (npm) (malicious package)
- [MAL-2025-60410](https://insights.sbomify.com/MAL-2025-60410/): Malicious code in excellent_peafowl_z3n (npm) (malicious package)
- [MAL-2025-6041](https://insights.sbomify.com/MAL-2025-6041/): Malicious code in @toptal/picasso-button (npm) (malicious package)
- [MAL-2025-60409](https://insights.sbomify.com/MAL-2025-60409/): Malicious code in excellent_mink_z3n (npm) (malicious package)
- [MAL-2025-60408](https://insights.sbomify.com/MAL-2025-60408/): Malicious code in excellent_deer_z3n (npm) (malicious package)
- [MAL-2025-60407](https://insights.sbomify.com/MAL-2025-60407/): Malicious code in exact_mite_z3n (npm) (malicious package)
- [MAL-2025-60406](https://insights.sbomify.com/MAL-2025-60406/): Malicious code in evolutionary_mammal_z3n (npm) (malicious package)
- [MAL-2025-60405](https://insights.sbomify.com/MAL-2025-60405/): Malicious code in evil_vicuna_z3n (npm) (malicious package)
- [MAL-2025-60404](https://insights.sbomify.com/MAL-2025-60404/): Malicious code in evil_stork_z3n (npm) (malicious package)
- [MAL-2025-60403](https://insights.sbomify.com/MAL-2025-60403/): Malicious code in evident_caterpillar_z3n (npm) (malicious package)
- [MAL-2025-60402](https://insights.sbomify.com/MAL-2025-60402/): Malicious code in everyday_scallop_z3n (npm) (malicious package)
- [MAL-2025-60401](https://insights.sbomify.com/MAL-2025-60401/): Malicious code in everyday_jellyfish_z3n (npm) (malicious package)
- [MAL-2025-60400](https://insights.sbomify.com/MAL-2025-60400/): Malicious code in everyday_blackbird_z3n (npm) (malicious package)
- [MAL-2025-6040](https://insights.sbomify.com/MAL-2025-6040/): Malicious code in @toptal/picasso-alert (npm) (malicious package)
- [MAL-2025-604](https://insights.sbomify.com/MAL-2025-604/): Malicious code in intel-enterprise-rag-ui (npm) (malicious package)
- [MAL-2025-60399](https://insights.sbomify.com/MAL-2025-60399/): Malicious code in eventual_sloth_z3n (npm) (malicious package)
- [MAL-2025-60398](https://insights.sbomify.com/MAL-2025-60398/): Malicious code in eventual_jay_z3n (npm) (malicious package)
- [MAL-2025-60397](https://insights.sbomify.com/MAL-2025-60397/): Malicious code in eventual_gibbon_z3n (npm) (malicious package)
- [MAL-2025-60396](https://insights.sbomify.com/MAL-2025-60396/): Malicious code in eventual_galliform_z3n (npm) (malicious package)
- [MAL-2025-60395](https://insights.sbomify.com/MAL-2025-60395/): Malicious code in eventual_dragonfly_z3n (npm) (malicious package)
- [MAL-2025-60394](https://insights.sbomify.com/MAL-2025-60394/): Malicious code in ethnic_lion_z3n (npm) (malicious package)
- [MAL-2025-60393](https://insights.sbomify.com/MAL-2025-60393/): Malicious code in ethical_gayal_z3n (npm) (malicious package)
- [MAL-2025-60392](https://insights.sbomify.com/MAL-2025-60392/): Malicious code in ethical_cardinal_z3n (npm) (malicious package)
- [MAL-2025-60391](https://insights.sbomify.com/MAL-2025-60391/): Malicious code in estimated_raven_z3n (npm) (malicious package)
- [MAL-2025-60390](https://insights.sbomify.com/MAL-2025-60390/): Malicious code in established_grouse_z3n (npm) (malicious package)
- [MAL-2025-6039](https://insights.sbomify.com/MAL-2025-6039/): Malicious code in @toptal/picasso-accordion (npm) (malicious package)
- [MAL-2025-60389](https://insights.sbomify.com/MAL-2025-60389/): Malicious code in established_flamingo_z3n (npm) (malicious package)
- [MAL-2025-60388](https://insights.sbomify.com/MAL-2025-60388/): Malicious code in established_cricket_z3n (npm) (malicious package)
- [MAL-2025-60387](https://insights.sbomify.com/MAL-2025-60387/): Malicious code in essential_bird_z3n (npm) (malicious package)
- [MAL-2025-60386](https://insights.sbomify.com/MAL-2025-60386/): Malicious code in equivalent_limpet_z3n (npm) (malicious package)
- [MAL-2025-60385](https://insights.sbomify.com/MAL-2025-60385/): Malicious code in equivalent_blackbird_z3n (npm) (malicious package)
- [MAL-2025-60384](https://insights.sbomify.com/MAL-2025-60384/): Malicious code in equal_rabbit_z3n (npm) (malicious package)
- [MAL-2025-60383](https://insights.sbomify.com/MAL-2025-60383/): Malicious code in equal_amphibian_z3n (npm) (malicious package)
- [MAL-2025-60382](https://insights.sbomify.com/MAL-2025-60382/): Malicious code in envious_minnow_z3n (npm) (malicious package)
- [MAL-2025-60381](https://insights.sbomify.com/MAL-2025-60381/): Malicious code in envious_flamingo_z3n (npm) (malicious package)
- [MAL-2025-60380](https://insights.sbomify.com/MAL-2025-60380/): Malicious code in entitled_swift_z3n (npm) (malicious package)
- [MAL-2025-6038](https://insights.sbomify.com/MAL-2025-6038/): Malicious code in @toptal/picasso (npm) (malicious package)
- [MAL-2025-60379](https://insights.sbomify.com/MAL-2025-60379/): Malicious code in entitled_primate_z3n (npm) (malicious package)
- [MAL-2025-60378](https://insights.sbomify.com/MAL-2025-60378/): Malicious code in entitled_catfish_z3n (npm) (malicious package)
- [MAL-2025-60377](https://insights.sbomify.com/MAL-2025-60377/): Malicious code in entire_puffin_z3n (npm) (malicious package)
- [MAL-2025-60376](https://insights.sbomify.com/MAL-2025-60376/): Malicious code in enthusiastic_goat_z3n (npm) (malicious package)
- [MAL-2025-60375](https://insights.sbomify.com/MAL-2025-60375/): Malicious code in enormous_prawn_z3n (npm) (malicious package)
- [MAL-2025-60374](https://insights.sbomify.com/MAL-2025-60374/): Malicious code in energetic_eagle_z3n (npm) (malicious package)
- [MAL-2025-60373](https://insights.sbomify.com/MAL-2025-60373/): Malicious code in energetic_constrictor_z3n (npm) (malicious package)
- [MAL-2025-60372](https://insights.sbomify.com/MAL-2025-60372/): Malicious code in endless_snail_z3n (npm) (malicious package)
- [MAL-2025-60371](https://insights.sbomify.com/MAL-2025-60371/): Malicious code in endless_catfish_z3n (npm) (malicious package)
- [MAL-2025-60370](https://insights.sbomify.com/MAL-2025-60370/): Malicious code in encouraging_kite_z3n (npm) (malicious package)
- [MAL-2025-6037](https://insights.sbomify.com/MAL-2025-6037/): Malicious code in @toptal/davinci-monorepo (npm) (malicious package)
- [MAL-2025-60369](https://insights.sbomify.com/MAL-2025-60369/): Malicious code in encouraging_bird_z3n (npm) (malicious package)
- [MAL-2025-60368](https://insights.sbomify.com/MAL-2025-60368/): Malicious code in enchanting_wasp_z3n (npm) (malicious package)
- [MAL-2025-60367](https://insights.sbomify.com/MAL-2025-60367/): Malicious code in enchanting_ptarmigan_z3n (npm) (malicious package)
- [MAL-2025-60366](https://insights.sbomify.com/MAL-2025-60366/): Malicious code in empty_jaguar_z3n (npm) (malicious package)
- [MAL-2025-60365](https://insights.sbomify.com/MAL-2025-60365/): Malicious code in empty_emu_z3n (npm) (malicious package)
- [MAL-2025-60364](https://insights.sbomify.com/MAL-2025-60364/): Malicious code in emotional_harrier_z3n (npm) (malicious package)
- [MAL-2025-60363](https://insights.sbomify.com/MAL-2025-60363/): Malicious code in emotional_chinchilla_z3n (npm) (malicious package)
- [MAL-2025-60362](https://insights.sbomify.com/MAL-2025-60362/): Malicious code in embarrassing_mouse_z3n (npm) (malicious package)
- [MAL-2025-60361](https://insights.sbomify.com/MAL-2025-60361/): Malicious code in embarrassing_crawdad_z3n (npm) (malicious package)
- [MAL-2025-60360](https://insights.sbomify.com/MAL-2025-60360/): Malicious code in embarrassing_condor_z3n (npm) (malicious package)
- [MAL-2025-6036](https://insights.sbomify.com/MAL-2025-6036/): Malicious code in @toptal/davinci-graphql-codegen-extensions (npm) (malicious package)
- [MAL-2025-60359](https://insights.sbomify.com/MAL-2025-60359/): Malicious code in embarrassed_squid_z3n (npm) (malicious package)
- [MAL-2025-60358](https://insights.sbomify.com/MAL-2025-60358/): Malicious code in embarrassed_pony_z3n (npm) (malicious package)
- [MAL-2025-60357](https://insights.sbomify.com/MAL-2025-60357/): Malicious code in embarrassed_bass_z3n (npm) (malicious package)
- [MAL-2025-60356](https://insights.sbomify.com/MAL-2025-60356/): Malicious code in eligible_swift_z3n (npm) (malicious package)
- [MAL-2025-60355](https://insights.sbomify.com/MAL-2025-60355/): Malicious code in eligible_guan_z3n (npm) (malicious package)
- [MAL-2025-60354](https://insights.sbomify.com/MAL-2025-60354/): Malicious code in elegant_puma_z3n (npm) (malicious package)
- [MAL-2025-60353](https://insights.sbomify.com/MAL-2025-60353/): Malicious code in electric_hippopotamus_z3n (npm) (malicious package)
- [MAL-2025-60352](https://insights.sbomify.com/MAL-2025-60352/): Malicious code in elderly_swan_z3n (npm) (malicious package)
- [MAL-2025-60351](https://insights.sbomify.com/MAL-2025-60351/): Malicious code in elderly_sailfish_z3n (npm) (malicious package)
- [MAL-2025-60350](https://insights.sbomify.com/MAL-2025-60350/): Malicious code in elated_snake_z3n (npm) (malicious package)
- [MAL-2025-6035](https://insights.sbomify.com/MAL-2025-6035/): Malicious code in @toptal/davinci-cloudflare-requests-handler (npm) (malicious package)
- [MAL-2025-60349](https://insights.sbomify.com/MAL-2025-60349/): Malicious code in elated_peafowl_z3n (npm) (malicious package)
- [MAL-2025-60348](https://insights.sbomify.com/MAL-2025-60348/): Malicious code in elaborate_goldfish_z3n (npm) (malicious package)
- [MAL-2025-60347](https://insights.sbomify.com/MAL-2025-60347/): Malicious code in efficient_python_z3n (npm) (malicious package)
- [MAL-2025-60346](https://insights.sbomify.com/MAL-2025-60346/): Malicious code in efficient_moth_z3n (npm) (malicious package)
- [MAL-2025-60345](https://insights.sbomify.com/MAL-2025-60345/): Malicious code in effective_scallop_z3n (npm) (malicious package)
- [MAL-2025-60344](https://insights.sbomify.com/MAL-2025-60344/): Malicious code in effective_damselfly_z3n (npm) (malicious package)
- [MAL-2025-60343](https://insights.sbomify.com/MAL-2025-60343/): Malicious code in effective_armadillo_z3n (npm) (malicious package)
- [MAL-2025-60342](https://insights.sbomify.com/MAL-2025-60342/): Malicious code in eerie_tyrannosaurus_z3n (npm) (malicious package)
- [MAL-2025-60341](https://insights.sbomify.com/MAL-2025-60341/): Malicious code in eerie_cat_z3n (npm) (malicious package)
- [MAL-2025-60340](https://insights.sbomify.com/MAL-2025-60340/): Malicious code in educational_tiger_z3n (npm) (malicious package)
- [MAL-2025-6034](https://insights.sbomify.com/MAL-2025-6034/): Malicious code in @secsol5g/qlik-sense (npm) (malicious package)
- [MAL-2025-60339](https://insights.sbomify.com/MAL-2025-60339/): Malicious code in economic_tyrannosaurus_z3n (npm) (malicious package)
- [MAL-2025-60338](https://insights.sbomify.com/MAL-2025-60338/): Malicious code in economic_chipmunk_z3n (npm) (malicious package)
- [MAL-2025-60337](https://insights.sbomify.com/MAL-2025-60337/): Malicious code in easy_chimpanzee_z3n (npm) (malicious package)
- [MAL-2025-60336](https://insights.sbomify.com/MAL-2025-60336/): Malicious code in eastern_butterfly_z3n (npm) (malicious package)
- [MAL-2025-60335](https://insights.sbomify.com/MAL-2025-60335/): Malicious code in early_slug_z3n (npm) (malicious package)
- [MAL-2025-60334](https://insights.sbomify.com/MAL-2025-60334/): Malicious code in early_mollusk_z3n (npm) (malicious package)
- [MAL-2025-60333](https://insights.sbomify.com/MAL-2025-60333/): Malicious code in early_beaver_z3n (npm) (malicious package)
- [MAL-2025-60332](https://insights.sbomify.com/MAL-2025-60332/): Malicious code in eager_nightingale_z3n (npm) (malicious package)
- [MAL-2025-60331](https://insights.sbomify.com/MAL-2025-60331/): Malicious code in dying_tuna_z3n (npm) (malicious package)
- [MAL-2025-60330](https://insights.sbomify.com/MAL-2025-60330/): Malicious code in dying_tarantula_z3n (npm) (malicious package)
- [MAL-2025-6033](https://insights.sbomify.com/MAL-2025-6033/): Malicious code in @nytt/sass-utils (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/443/