# Vulnerabilities published in 2025


- [MAL-2025-60329](https://insights.sbomify.com/MAL-2025-60329/): Malicious code in dying_mongoose_z3n (npm) (malicious package)
- [MAL-2025-60328](https://insights.sbomify.com/MAL-2025-60328/): Malicious code in dying_macaw_z3n (npm) (malicious package)
- [MAL-2025-60327](https://insights.sbomify.com/MAL-2025-60327/): Malicious code in dutch_chameleon_z3n (npm) (malicious package)
- [MAL-2025-60326](https://insights.sbomify.com/MAL-2025-60326/): Malicious code in dusty_crow_z3n (npm) (malicious package)
- [MAL-2025-60325](https://insights.sbomify.com/MAL-2025-60325/): Malicious code in dusty_barnacle_z3n (npm) (malicious package)
- [MAL-2025-60324](https://insights.sbomify.com/MAL-2025-60324/): Malicious code in dull_wildcat_z3n (npm) (malicious package)
- [MAL-2025-60323](https://insights.sbomify.com/MAL-2025-60323/): Malicious code in due_harrier_z3n (npm) (malicious package)
- [MAL-2025-60322](https://insights.sbomify.com/MAL-2025-60322/): Malicious code in dry_scallop_z3n (npm) (malicious package)
- [MAL-2025-60321](https://insights.sbomify.com/MAL-2025-60321/): Malicious code in dry_hookworm_z3n (npm) (malicious package)
- [MAL-2025-60320](https://insights.sbomify.com/MAL-2025-60320/): Malicious code in driving_tuna_z3n (npm) (malicious package)
- [MAL-2025-6032](https://insights.sbomify.com/MAL-2025-6032/): Malicious code in @md_nafeed/synpress-metamask (npm) (malicious package)
- [MAL-2025-60319](https://insights.sbomify.com/MAL-2025-60319/): Malicious code in dreadful_fowl_z3n (npm) (malicious package)
- [MAL-2025-60318](https://insights.sbomify.com/MAL-2025-60318/): Malicious code in dreadful_buzzard_z3n (npm) (malicious package)
- [MAL-2025-60317](https://insights.sbomify.com/MAL-2025-60317/): Malicious code in dramatic_shrew_z3n (npm) (malicious package)
- [MAL-2025-60316](https://insights.sbomify.com/MAL-2025-60316/): Malicious code in dramatic_rat_z3n (npm) (malicious package)
- [MAL-2025-60315](https://insights.sbomify.com/MAL-2025-60315/): Malicious code in doubtful_tortoise_z3n (npm) (malicious package)
- [MAL-2025-60314](https://insights.sbomify.com/MAL-2025-60314/): Malicious code in doubtful_fish_z3n (npm) (malicious package)
- [MAL-2025-60313](https://insights.sbomify.com/MAL-2025-60313/): Malicious code in doubtful_crocodile_z3n (npm) (malicious package)
- [MAL-2025-60312](https://insights.sbomify.com/MAL-2025-60312/): Malicious code in double_vicuna_z3n (npm) (malicious package)
- [MAL-2025-60311](https://insights.sbomify.com/MAL-2025-60311/): Malicious code in double_swift_z3n (npm) (malicious package)
- [MAL-2025-60310](https://insights.sbomify.com/MAL-2025-60310/): Malicious code in double_lizard_z3n (npm) (malicious package)
- [MAL-2025-6031](https://insights.sbomify.com/MAL-2025-6031/): Malicious code in @ivy-shared-components/testing (npm) (malicious package)
- [MAL-2025-60309](https://insights.sbomify.com/MAL-2025-60309/): Malicious code in dominant_jellyfish_z3n (npm) (malicious package)
- [MAL-2025-60308](https://insights.sbomify.com/MAL-2025-60308/): Malicious code in domestic_wombat_z3n (npm) (malicious package)
- [MAL-2025-60307](https://insights.sbomify.com/MAL-2025-60307/): Malicious code in domestic_earwig_z3n (npm) (malicious package)
- [MAL-2025-60306](https://insights.sbomify.com/MAL-2025-60306/): Malicious code in dizzy_elephant_z3n (npm) (malicious package)
- [MAL-2025-60305](https://insights.sbomify.com/MAL-2025-60305/): Malicious code in divine_albatross_z3n (npm) (malicious package)
- [MAL-2025-60304](https://insights.sbomify.com/MAL-2025-60304/): Malicious code in diverse_primate_z3n (npm) (malicious package)
- [MAL-2025-60303](https://insights.sbomify.com/MAL-2025-60303/): Malicious code in diverse_carp_z3n (npm) (malicious package)
- [MAL-2025-60302](https://insights.sbomify.com/MAL-2025-60302/): Malicious code in diverse_capybara_z3n (npm) (malicious package)
- [MAL-2025-60301](https://insights.sbomify.com/MAL-2025-60301/): Malicious code in disturbing_weasel_z3n (npm) (malicious package)
- [MAL-2025-60300](https://insights.sbomify.com/MAL-2025-60300/): Malicious code in disturbing_cattle_z3n (npm) (malicious package)
- [MAL-2025-6030](https://insights.sbomify.com/MAL-2025-6030/): Malicious code in @ivy-shared-components/iconslibrary (npm) (malicious package)
- [MAL-2025-603](https://insights.sbomify.com/MAL-2025-603/): Malicious code in bindbc-loader (npm) (malicious package)
- [MAL-2025-60299](https://insights.sbomify.com/MAL-2025-60299/): Malicious code in disturbing_aphid_z3n (npm) (malicious package)
- [MAL-2025-60298](https://insights.sbomify.com/MAL-2025-60298/): Malicious code in disturbed_platypus_z3n (npm) (malicious package)
- [MAL-2025-60297](https://insights.sbomify.com/MAL-2025-60297/): Malicious code in distinctive_lynx_z3n (npm) (malicious package)
- [MAL-2025-60296](https://insights.sbomify.com/MAL-2025-60296/): Malicious code in distinctive_cougar_z3n (npm) (malicious package)
- [MAL-2025-60295](https://insights.sbomify.com/MAL-2025-60295/): Malicious code in distinct_wren_z3n (npm) (malicious package)
- [MAL-2025-60294](https://insights.sbomify.com/MAL-2025-60294/): Malicious code in distinct_sawfish_z3n (npm) (malicious package)
- [MAL-2025-60293](https://insights.sbomify.com/MAL-2025-60293/): Malicious code in distant_mosquito_z3n (npm) (malicious package)
- [MAL-2025-60292](https://insights.sbomify.com/MAL-2025-60292/): Malicious code in distant_leech_z3n (npm) (malicious package)
- [MAL-2025-60291](https://insights.sbomify.com/MAL-2025-60291/): Malicious code in distant_damselfly_z3n (npm) (malicious package)
- [MAL-2025-60290](https://insights.sbomify.com/MAL-2025-60290/): Malicious code in disgusted_elk_z3n (npm) (malicious package)
- [MAL-2025-6029](https://insights.sbomify.com/MAL-2025-6029/): Malicious code in @isfront/locale (npm) (malicious package)
- [MAL-2025-60289](https://insights.sbomify.com/MAL-2025-60289/): Malicious code in disciplinary_rook_z3n (npm) (malicious package)
- [MAL-2025-60288](https://insights.sbomify.com/MAL-2025-60288/): Malicious code in disciplinary_impala_z3n (npm) (malicious package)
- [MAL-2025-60287](https://insights.sbomify.com/MAL-2025-60287/): Malicious code in disciplinary_bobcat_z3n (npm) (malicious package)
- [MAL-2025-60286](https://insights.sbomify.com/MAL-2025-60286/): Malicious code in disastrous_bee_z3n (npm) (malicious package)
- [MAL-2025-60285](https://insights.sbomify.com/MAL-2025-60285/): Malicious code in disappointed_woodpecker_z3n (npm) (malicious package)
- [MAL-2025-60284](https://insights.sbomify.com/MAL-2025-60284/): Malicious code in disappointed_dingo_z3n (npm) (malicious package)
- [MAL-2025-60283](https://insights.sbomify.com/MAL-2025-60283/): Malicious code in disappointed_caribou_z3n (npm) (malicious package)
- [MAL-2025-60282](https://insights.sbomify.com/MAL-2025-60282/): Malicious code in disabled_wildcat_z3n (npm) (malicious package)
- [MAL-2025-60281](https://insights.sbomify.com/MAL-2025-60281/): Malicious code in disabled_mule_z3n (npm) (malicious package)
- [MAL-2025-60280](https://insights.sbomify.com/MAL-2025-60280/): Malicious code in disabled_bobcat_z3n (npm) (malicious package)
- [MAL-2025-6028](https://insights.sbomify.com/MAL-2025-6028/): Malicious code in @company-internal/logger (npm) (malicious package)
- [MAL-2025-60279](https://insights.sbomify.com/MAL-2025-60279/): Malicious code in dirty_pike_z3n (npm) (malicious package)
- [MAL-2025-60278](https://insights.sbomify.com/MAL-2025-60278/): Malicious code in dirty_kangaroo_z3n (npm) (malicious package)
- [MAL-2025-60277](https://insights.sbomify.com/MAL-2025-60277/): Malicious code in dirty_hedgehog_z3n (npm) (malicious package)
- [MAL-2025-60276](https://insights.sbomify.com/MAL-2025-60276/): Malicious code in dirty_cow_z3n (npm) (malicious package)
- [MAL-2025-60275](https://insights.sbomify.com/MAL-2025-60275/): Malicious code in dirty_cheetah_z3n (npm) (malicious package)
- [MAL-2025-60274](https://insights.sbomify.com/MAL-2025-60274/): Malicious code in direct_pony_z3n (npm) (malicious package)
- [MAL-2025-60273](https://insights.sbomify.com/MAL-2025-60273/): Malicious code in diplomatic_prawn_z3n (npm) (malicious package)
- [MAL-2025-60272](https://insights.sbomify.com/MAL-2025-60272/): Malicious code in difficult_manatee_z3n (npm) (malicious package)
- [MAL-2025-60271](https://insights.sbomify.com/MAL-2025-60271/): Malicious code in difficult_bat_z3n (npm) (malicious package)
- [MAL-2025-60270](https://insights.sbomify.com/MAL-2025-60270/): Malicious code in different_nightingale_z3n (npm) (malicious package)
- [MAL-2025-6027](https://insights.sbomify.com/MAL-2025-6027/): Malicious code in @blocks-shared/desktop-title (npm) (malicious package)
- [MAL-2025-60269](https://insights.sbomify.com/MAL-2025-60269/): Malicious code in different_chickadee_z3n (npm) (malicious package)
- [MAL-2025-60268](https://insights.sbomify.com/MAL-2025-60268/): Malicious code in different_amphibian_z3n (npm) (malicious package)
- [MAL-2025-60267](https://insights.sbomify.com/MAL-2025-60267/): Malicious code in devoted_marmoset_z3n (npm) (malicious package)
- [MAL-2025-60266](https://insights.sbomify.com/MAL-2025-60266/): Malicious code in developing_ox_z3n (npm) (malicious package)
- [MAL-2025-60265](https://insights.sbomify.com/MAL-2025-60265/): Malicious code in determined_nightingale_z3n (npm) (malicious package)
- [MAL-2025-60264](https://insights.sbomify.com/MAL-2025-60264/): Malicious code in depressed_leech_z3n (npm) (malicious package)
- [MAL-2025-60263](https://insights.sbomify.com/MAL-2025-60263/): Malicious code in dependent_scallop_z3n (npm) (malicious package)
- [MAL-2025-60262](https://insights.sbomify.com/MAL-2025-60262/): Malicious code in dependent_limpet_z3n (npm) (malicious package)
- [MAL-2025-60261](https://insights.sbomify.com/MAL-2025-60261/): Malicious code in dependent_barnacle_z3n (npm) (malicious package)
- [MAL-2025-60260](https://insights.sbomify.com/MAL-2025-60260/): Malicious code in democratic_capybara_z3n (npm) (malicious package)
- [MAL-2025-6026](https://insights.sbomify.com/MAL-2025-6026/): Malicious code in synckit (npm) (malicious package)
- [MAL-2025-60259](https://insights.sbomify.com/MAL-2025-60259/): Malicious code in delightful_dog_z3n (npm) (malicious package)
- [MAL-2025-60258](https://insights.sbomify.com/MAL-2025-60258/): Malicious code in delighted_hawk_z3n (npm) (malicious package)
- [MAL-2025-60257](https://insights.sbomify.com/MAL-2025-60257/): Malicious code in delicious_gayal_z3n (npm) (malicious package)
- [MAL-2025-60256](https://insights.sbomify.com/MAL-2025-60256/): Malicious code in delicate_prawn_z3n (npm) (malicious package)
- [MAL-2025-60255](https://insights.sbomify.com/MAL-2025-60255/): Malicious code in delicate_finch_z3n (npm) (malicious package)
- [MAL-2025-60254](https://insights.sbomify.com/MAL-2025-60254/): Malicious code in delicate_catfish_z3n (npm) (malicious package)
- [MAL-2025-60253](https://insights.sbomify.com/MAL-2025-60253/): Malicious code in deliberate_wolf_z3n (npm) (malicious package)
- [MAL-2025-60252](https://insights.sbomify.com/MAL-2025-60252/): Malicious code in defiant_vulture_z3n (npm) (malicious package)
- [MAL-2025-60251](https://insights.sbomify.com/MAL-2025-60251/): Malicious code in defiant_hyena_z3n (npm) (malicious package)
- [MAL-2025-60250](https://insights.sbomify.com/MAL-2025-60250/): Malicious code in defensive_horse_z3n (npm) (malicious package)
- [MAL-2025-6025](https://insights.sbomify.com/MAL-2025-6025/): Malicious code in napi-postinstall (npm) (malicious package)
- [MAL-2025-60249](https://insights.sbomify.com/MAL-2025-60249/): Malicious code in defeated_wolverine_z3n (npm) (malicious package)
- [MAL-2025-60248](https://insights.sbomify.com/MAL-2025-60248/): Malicious code in defeated_sloth_z3n (npm) (malicious package)
- [MAL-2025-60247](https://insights.sbomify.com/MAL-2025-60247/): Malicious code in defeated_bat_z3n (npm) (malicious package)
- [MAL-2025-60246](https://insights.sbomify.com/MAL-2025-60246/): Malicious code in deep_woodpecker_z3n (npm) (malicious package)
- [MAL-2025-60245](https://insights.sbomify.com/MAL-2025-60245/): Malicious code in deep_puma_z3n (npm) (malicious package)
- [MAL-2025-60244](https://insights.sbomify.com/MAL-2025-60244/): Malicious code in deep_eel_z3n (npm) (malicious package)
- [MAL-2025-60243](https://insights.sbomify.com/MAL-2025-60243/): Malicious code in decisive_woodpecker_z3n (npm) (malicious package)
- [MAL-2025-60242](https://insights.sbomify.com/MAL-2025-60242/): Malicious code in decisive_hamster_z3n (npm) (malicious package)
- [MAL-2025-60241](https://insights.sbomify.com/MAL-2025-60241/): Malicious code in decent_tern_z3n (npm) (malicious package)
- [MAL-2025-60240](https://insights.sbomify.com/MAL-2025-60240/): Malicious code in decent_cougar_z3n (npm) (malicious package)
- [MAL-2025-6024](https://insights.sbomify.com/MAL-2025-6024/): Malicious code in got-fetch (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/444/
