# Vulnerabilities published in 2025


- [MAL-2025-60239](https://insights.sbomify.com/MAL-2025-60239/): Malicious code in dear_vulture_z3n (npm) (malicious package)
- [MAL-2025-60238](https://insights.sbomify.com/MAL-2025-60238/): Malicious code in deafening_jackal_z3n (npm) (malicious package)
- [MAL-2025-60237](https://insights.sbomify.com/MAL-2025-60237/): Malicious code in deaf_tahr_z3n (npm) (malicious package)
- [MAL-2025-60236](https://insights.sbomify.com/MAL-2025-60236/): Malicious code in dead_clam_z3n (npm) (malicious package)
- [MAL-2025-60235](https://insights.sbomify.com/MAL-2025-60235/): Malicious code in dark_mole_z3n (npm) (malicious package)
- [MAL-2025-60234](https://insights.sbomify.com/MAL-2025-60234/): Malicious code in dark_goose_z3n (npm) (malicious package)
- [MAL-2025-60233](https://insights.sbomify.com/MAL-2025-60233/): Malicious code in dangerous_snipe_z3n (npm) (malicious package)
- [MAL-2025-60232](https://insights.sbomify.com/MAL-2025-60232/): Malicious code in dangerous_cow_z3n (npm) (malicious package)
- [MAL-2025-60231](https://insights.sbomify.com/MAL-2025-60231/): Malicious code in damp_tuna_z3n (npm) (malicious package)
- [MAL-2025-60230](https://insights.sbomify.com/MAL-2025-60230/): Malicious code in damaged_cicada_z3n (npm) (malicious package)
- [MAL-2025-6023](https://insights.sbomify.com/MAL-2025-6023/): Malicious code in eslint-plugin-prettier (npm) (malicious package)
- [MAL-2025-60229](https://insights.sbomify.com/MAL-2025-60229/): Malicious code in damaged_cat_z3n (npm) (malicious package)
- [MAL-2025-60228](https://insights.sbomify.com/MAL-2025-60228/): Malicious code in daily_piranha_z3n (npm) (malicious package)
- [MAL-2025-60227](https://insights.sbomify.com/MAL-2025-60227/): Malicious code in daily_hornet_z3n (npm) (malicious package)
- [MAL-2025-60226](https://insights.sbomify.com/MAL-2025-60226/): Malicious code in cute_swift_z3n (npm) (malicious package)
- [MAL-2025-60225](https://insights.sbomify.com/MAL-2025-60225/): Malicious code in cute_constrictor_z3n (npm) (malicious package)
- [MAL-2025-60224](https://insights.sbomify.com/MAL-2025-60224/): Malicious code in cute_booby_z3n (npm) (malicious package)
- [MAL-2025-60223](https://insights.sbomify.com/MAL-2025-60223/): Malicious code in curved_rodent_z3n (npm) (malicious package)
- [MAL-2025-60222](https://insights.sbomify.com/MAL-2025-60222/): Malicious code in curved_mammal_z3n (npm) (malicious package)
- [MAL-2025-60221](https://insights.sbomify.com/MAL-2025-60221/): Malicious code in curved_giraffe_z3n (npm) (malicious package)
- [MAL-2025-60220](https://insights.sbomify.com/MAL-2025-60220/): Malicious code in current_albatross_z3n (npm) (malicious package)
- [MAL-2025-6022](https://insights.sbomify.com/MAL-2025-6022/): Malicious code in eslint-config-prettier (npm) (malicious package)
- [MAL-2025-60219](https://insights.sbomify.com/MAL-2025-60219/): Malicious code in curly_koi_z3n (npm) (malicious package)
- [MAL-2025-60218](https://insights.sbomify.com/MAL-2025-60218/): Malicious code in curly_earthworm_z3n (npm) (malicious package)
- [MAL-2025-60217](https://insights.sbomify.com/MAL-2025-60217/): Malicious code in curious_manatee_z3n (npm) (malicious package)
- [MAL-2025-60216](https://insights.sbomify.com/MAL-2025-60216/): Malicious code in cultural_galliform_z3n (npm) (malicious package)
- [MAL-2025-60215](https://insights.sbomify.com/MAL-2025-60215/): Malicious code in cultural_dog_z3n (npm) (malicious package)
- [MAL-2025-60214](https://insights.sbomify.com/MAL-2025-60214/): Malicious code in cultural_caribou_z3n (npm) (malicious package)
- [MAL-2025-60213](https://insights.sbomify.com/MAL-2025-60213/): Malicious code in cultural_boar_z3n (npm) (malicious package)
- [MAL-2025-60212](https://insights.sbomify.com/MAL-2025-60212/): Malicious code in cuddly_bear_z3n (npm) (malicious package)
- [MAL-2025-60211](https://insights.sbomify.com/MAL-2025-60211/): Malicious code in cruel_ladybug_z3n (npm) (malicious package)
- [MAL-2025-60210](https://insights.sbomify.com/MAL-2025-60210/): Malicious code in crude_eagle_z3n (npm) (malicious package)
- [MAL-2025-6021](https://insights.sbomify.com/MAL-2025-6021/): Malicious code in @pkgr/core (npm) (malicious package)
- [MAL-2025-60209](https://insights.sbomify.com/MAL-2025-60209/): Malicious code in crude_cow_z3n (npm) (malicious package)
- [MAL-2025-60208](https://insights.sbomify.com/MAL-2025-60208/): Malicious code in crude_angelfish_z3n (npm) (malicious package)
- [MAL-2025-60207](https://insights.sbomify.com/MAL-2025-60207/): Malicious code in crucial_alpaca_z3n (npm) (malicious package)
- [MAL-2025-60206](https://insights.sbomify.com/MAL-2025-60206/): Malicious code in crowded_boa_z3n (npm) (malicious package)
- [MAL-2025-60205](https://insights.sbomify.com/MAL-2025-60205/): Malicious code in crooked_stingray_z3n (npm) (malicious package)
- [MAL-2025-60204](https://insights.sbomify.com/MAL-2025-60204/): Malicious code in crooked_cockroach_z3n (npm) (malicious package)
- [MAL-2025-60203](https://insights.sbomify.com/MAL-2025-60203/): Malicious code in crooked_bedbug_z3n (npm) (malicious package)
- [MAL-2025-60202](https://insights.sbomify.com/MAL-2025-60202/): Malicious code in critical_rooster_z3n (npm) (malicious package)
- [MAL-2025-60201](https://insights.sbomify.com/MAL-2025-60201/): Malicious code in critical_cephalopod_z3n (npm) (malicious package)
- [MAL-2025-60200](https://insights.sbomify.com/MAL-2025-60200/): Malicious code in criminal_rhinoceros_z3n (npm) (malicious package)
- [MAL-2025-6020](https://insights.sbomify.com/MAL-2025-6020/): Malicious code in is (npm) (malicious package)
- [MAL-2025-602](https://insights.sbomify.com/MAL-2025-602/): Malicious code in openbet-access-controller (npm) (malicious package)
- [MAL-2025-60199](https://insights.sbomify.com/MAL-2025-60199/): Malicious code in creepy_chipmunk_z3n (npm) (malicious package)
- [MAL-2025-60198](https://insights.sbomify.com/MAL-2025-60198/): Malicious code in creative_caterpillar_z3n (npm) (malicious package)
- [MAL-2025-60197](https://insights.sbomify.com/MAL-2025-60197/): Malicious code in costly_sheep_z3n (npm) (malicious package)
- [MAL-2025-60196](https://insights.sbomify.com/MAL-2025-60196/): Malicious code in costly_salmon_z3n (npm) (malicious package)
- [MAL-2025-60195](https://insights.sbomify.com/MAL-2025-60195/): Malicious code in costly_planarian_z3n (npm) (malicious package)
- [MAL-2025-60194](https://insights.sbomify.com/MAL-2025-60194/): Malicious code in corresponding_pheasant_z3n (npm) (malicious package)
- [MAL-2025-60193](https://insights.sbomify.com/MAL-2025-60193/): Malicious code in corresponding_cheetah_z3n (npm) (malicious package)
- [MAL-2025-60192](https://insights.sbomify.com/MAL-2025-60192/): Malicious code in corresponding_albatross_z3n (npm) (malicious package)
- [MAL-2025-60191](https://insights.sbomify.com/MAL-2025-60191/): Malicious code in cool_snail_z3n (npm) (malicious package)
- [MAL-2025-60190](https://insights.sbomify.com/MAL-2025-60190/): Malicious code in cool_smelt_z3n (npm) (malicious package)
- [MAL-2025-6019](https://insights.sbomify.com/MAL-2025-6019/): Malicious code in websyncer (npm) (malicious package)
- [MAL-2025-60189](https://insights.sbomify.com/MAL-2025-60189/): Malicious code in cool_rhinoceros_z3n (npm) (malicious package)
- [MAL-2025-60188](https://insights.sbomify.com/MAL-2025-60188/): Malicious code in cool_raven_z3n (npm) (malicious package)
- [MAL-2025-60187](https://insights.sbomify.com/MAL-2025-60187/): Malicious code in cooing_aphid_z3n (npm) (malicious package)
- [MAL-2025-60186](https://insights.sbomify.com/MAL-2025-60186/): Malicious code in convinced_felidae_z3n (npm) (malicious package)
- [MAL-2025-60185](https://insights.sbomify.com/MAL-2025-60185/): Malicious code in conventional_snake_z3n (npm) (malicious package)
- [MAL-2025-60184](https://insights.sbomify.com/MAL-2025-60184/): Malicious code in convenient_python_z3n (npm) (malicious package)
- [MAL-2025-60183](https://insights.sbomify.com/MAL-2025-60183/): Malicious code in convenient_antlion_z3n (npm) (malicious package)
- [MAL-2025-60182](https://insights.sbomify.com/MAL-2025-60182/): Malicious code in convenient_aardvark_z3n (npm) (malicious package)
- [MAL-2025-60181](https://insights.sbomify.com/MAL-2025-60181/): Malicious code in controversial_goldfish_z3n (npm) (malicious package)
- [MAL-2025-60180](https://insights.sbomify.com/MAL-2025-60180/): Malicious code in controversial_camel_z3n (npm) (malicious package)
- [MAL-2025-6018](https://insights.sbomify.com/MAL-2025-6018/): Malicious code in vite-lightsparse (npm) (malicious package)
- [MAL-2025-60179](https://insights.sbomify.com/MAL-2025-60179/): Malicious code in controlled_stoat_z3n (npm) (malicious package)
- [MAL-2025-60178](https://insights.sbomify.com/MAL-2025-60178/): Malicious code in continuous_beaver_z3n (npm) (malicious package)
- [MAL-2025-60177](https://insights.sbomify.com/MAL-2025-60177/): Malicious code in continuing_mite_z3n (npm) (malicious package)
- [MAL-2025-60176](https://insights.sbomify.com/MAL-2025-60176/): Malicious code in continued_macaw_z3n (npm) (malicious package)
- [MAL-2025-60175](https://insights.sbomify.com/MAL-2025-60175/): Malicious code in continued_flea_z3n (npm) (malicious package)
- [MAL-2025-60174](https://insights.sbomify.com/MAL-2025-60174/): Malicious code in content_warbler_z3n (npm) (malicious package)
- [MAL-2025-60173](https://insights.sbomify.com/MAL-2025-60173/): Malicious code in contemporary_roadrunner_z3n (npm) (malicious package)
- [MAL-2025-60172](https://insights.sbomify.com/MAL-2025-60172/): Malicious code in constitutional_silkworm_z3n (npm) (malicious package)
- [MAL-2025-60171](https://insights.sbomify.com/MAL-2025-60171/): Malicious code in constitutional_quail_z3n (npm) (malicious package)
- [MAL-2025-60170](https://insights.sbomify.com/MAL-2025-60170/): Malicious code in constitutional_piranha_z3n (npm) (malicious package)
- [MAL-2025-6017](https://insights.sbomify.com/MAL-2025-6017/): Malicious code in evmlogger (npm) (malicious package)
- [MAL-2025-60169](https://insights.sbomify.com/MAL-2025-60169/): Malicious code in constant_spider_z3n (npm) (malicious package)
- [MAL-2025-60168](https://insights.sbomify.com/MAL-2025-60168/): Malicious code in constant_skink_z3n (npm) (malicious package)
- [MAL-2025-60167](https://insights.sbomify.com/MAL-2025-60167/): Malicious code in constant_koala_z3n (npm) (malicious package)
- [MAL-2025-60166](https://insights.sbomify.com/MAL-2025-60166/): Malicious code in constant_chickadee_z3n (npm) (malicious package)
- [MAL-2025-60165](https://insights.sbomify.com/MAL-2025-60165/): Malicious code in consistent_ocelot_z3n (npm) (malicious package)
- [MAL-2025-60164](https://insights.sbomify.com/MAL-2025-60164/): Malicious code in consistent_aphid_z3n (npm) (malicious package)
- [MAL-2025-60163](https://insights.sbomify.com/MAL-2025-60163/): Malicious code in considerable_swift_z3n (npm) (malicious package)
- [MAL-2025-60162](https://insights.sbomify.com/MAL-2025-60162/): Malicious code in considerable_horse_z3n (npm) (malicious package)
- [MAL-2025-60161](https://insights.sbomify.com/MAL-2025-60161/): Malicious code in conservative_squirrel_z3n (npm) (malicious package)
- [MAL-2025-60160](https://insights.sbomify.com/MAL-2025-60160/): Malicious code in conservative_sparrow_z3n (npm) (malicious package)
- [MAL-2025-6016](https://insights.sbomify.com/MAL-2025-6016/): Malicious code in vite-postcss-helper (npm) (malicious package)
- [MAL-2025-60159](https://insights.sbomify.com/MAL-2025-60159/): Malicious code in conservation_parrot_z3n (npm) (malicious package)
- [MAL-2025-60158](https://insights.sbomify.com/MAL-2025-60158/): Malicious code in conscious_salamander_z3n (npm) (malicious package)
- [MAL-2025-60157](https://insights.sbomify.com/MAL-2025-60157/): Malicious code in confused_rooster_z3n (npm) (malicious package)
- [MAL-2025-60156](https://insights.sbomify.com/MAL-2025-60156/): Malicious code in confused_quail_z3n (npm) (malicious package)
- [MAL-2025-60155](https://insights.sbomify.com/MAL-2025-60155/): Malicious code in confused_crocodile_z3n (npm) (malicious package)
- [MAL-2025-60154](https://insights.sbomify.com/MAL-2025-60154/): Malicious code in confused_booby_z3n (npm) (malicious package)
- [MAL-2025-60153](https://insights.sbomify.com/MAL-2025-60153/): Malicious code in confidential_lark_z3n (npm) (malicious package)
- [MAL-2025-60152](https://insights.sbomify.com/MAL-2025-60152/): Malicious code in confident_snail_z3n (npm) (malicious package)
- [MAL-2025-60151](https://insights.sbomify.com/MAL-2025-60151/): Malicious code in confident_pigeon_z3n (npm) (malicious package)
- [MAL-2025-60150](https://insights.sbomify.com/MAL-2025-60150/): Malicious code in confident_cow_z3n (npm) (malicious package)
- [MAL-2025-6015](https://insights.sbomify.com/MAL-2025-6015/): Malicious code in rc-logger (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/445/