# Vulnerabilities published in 2025 - [MAL-2025-60149](https://insights.sbomify.com/MAL-2025-60149/): Malicious code in condemned_spoonbill_z3n (npm) (malicious package) - [MAL-2025-60148](https://insights.sbomify.com/MAL-2025-60148/): Malicious code in condemned_pelican_z3n (npm) (malicious package) - [MAL-2025-60147](https://insights.sbomify.com/MAL-2025-60147/): Malicious code in condemned_macaw_z3n (npm) (malicious package) - [MAL-2025-60146](https://insights.sbomify.com/MAL-2025-60146/): Malicious code in concrete_dingo_z3n (npm) (malicious package) - [MAL-2025-60145](https://insights.sbomify.com/MAL-2025-60145/): Malicious code in concerned_walrus_z3n (npm) (malicious package) - [MAL-2025-60144](https://insights.sbomify.com/MAL-2025-60144/): Malicious code in conceptual_tarsier_z3n (npm) (malicious package) - [MAL-2025-60143](https://insights.sbomify.com/MAL-2025-60143/): Malicious code in conceptual_tahr_z3n (npm) (malicious package) - [MAL-2025-60142](https://insights.sbomify.com/MAL-2025-60142/): Malicious code in conceptual_squirrel_z3n (npm) (malicious package) - [MAL-2025-60141](https://insights.sbomify.com/MAL-2025-60141/): Malicious code in conceptual_rooster_z3n (npm) (malicious package) - [MAL-2025-60140](https://insights.sbomify.com/MAL-2025-60140/): Malicious code in compulsory_swan_z3n (npm) (malicious package) - [MAL-2025-6014](https://insights.sbomify.com/MAL-2025-6014/): Malicious code in okta-core-component (npm) (malicious package) - [MAL-2025-60139](https://insights.sbomify.com/MAL-2025-60139/): Malicious code in comprehensive_landfowl_z3n (npm) (malicious package) - [MAL-2025-60138](https://insights.sbomify.com/MAL-2025-60138/): Malicious code in comprehensive_kite_z3n (npm) (malicious package) - [MAL-2025-60137](https://insights.sbomify.com/MAL-2025-60137/): Malicious code in complete_mockingbird_z3n (npm) (malicious package) - [MAL-2025-60136](https://insights.sbomify.com/MAL-2025-60136/): Malicious code in complete_crayfish_z3n (npm) (malicious package) - [MAL-2025-60135](https://insights.sbomify.com/MAL-2025-60135/): Malicious code in competitive_worm_z3n (npm) (malicious package) - [MAL-2025-60134](https://insights.sbomify.com/MAL-2025-60134/): Malicious code in competent_wombat_z3n (npm) (malicious package) - [MAL-2025-60133](https://insights.sbomify.com/MAL-2025-60133/): Malicious code in comparative_guineafowl_z3n (npm) (malicious package) - [MAL-2025-60132](https://insights.sbomify.com/MAL-2025-60132/): Malicious code in comparable_junglefowl_z3n (npm) (malicious package) - [MAL-2025-60131](https://insights.sbomify.com/MAL-2025-60131/): Malicious code in comparable_fish_z3n (npm) (malicious package) - [MAL-2025-60130](https://insights.sbomify.com/MAL-2025-60130/): Malicious code in comparable_barracuda_z3n (npm) (malicious package) - [MAL-2025-6013](https://insights.sbomify.com/MAL-2025-6013/): Malicious code in mooduliop (npm) (malicious package) - [MAL-2025-60129](https://insights.sbomify.com/MAL-2025-60129/): Malicious code in compact_shark_z3n (npm) (malicious package) - [MAL-2025-60128](https://insights.sbomify.com/MAL-2025-60128/): Malicious code in compact_caterpillar_z3n (npm) (malicious package) - [MAL-2025-60127](https://insights.sbomify.com/MAL-2025-60127/): Malicious code in communist_dragonfly_z3n (npm) (malicious package) - [MAL-2025-60126](https://insights.sbomify.com/MAL-2025-60126/): Malicious code in commercial_booby_z3n (npm) (malicious package) - [MAL-2025-60125](https://insights.sbomify.com/MAL-2025-60125/): Malicious code in comfortable_hippopotamus_z3n (npm) (malicious package) - [MAL-2025-60124](https://insights.sbomify.com/MAL-2025-60124/): Malicious code in combined_warbler_z3n (npm) (malicious package) - [MAL-2025-60123](https://insights.sbomify.com/MAL-2025-60123/): Malicious code in combined_sawfish_z3n (npm) (malicious package) - [MAL-2025-60122](https://insights.sbomify.com/MAL-2025-60122/): Malicious code in combined_jellyfish_z3n (npm) (malicious package) - [MAL-2025-60121](https://insights.sbomify.com/MAL-2025-60121/): Malicious code in colourful_smelt_z3n (npm) (malicious package) - [MAL-2025-60120](https://insights.sbomify.com/MAL-2025-60120/): Malicious code in colossal_squid_z3n (npm) (malicious package) - [MAL-2025-6012](https://insights.sbomify.com/MAL-2025-6012/): Malicious code in grayavatar (npm) (malicious package) - [MAL-2025-60119](https://insights.sbomify.com/MAL-2025-60119/): Malicious code in colossal_junglefowl_z3n (npm) (malicious package) - [MAL-2025-60118](https://insights.sbomify.com/MAL-2025-60118/): Malicious code in colorful_hornet_z3n (npm) (malicious package) - [MAL-2025-60117](https://insights.sbomify.com/MAL-2025-60117/): Malicious code in collective_eagle_z3n (npm) (malicious package) - [MAL-2025-60116](https://insights.sbomify.com/MAL-2025-60116/): Malicious code in coherent_stingray_z3n (npm) (malicious package) - [MAL-2025-60115](https://insights.sbomify.com/MAL-2025-60115/): Malicious code in cognitive_llama_z3n (npm) (malicious package) - [MAL-2025-60114](https://insights.sbomify.com/MAL-2025-60114/): Malicious code in cognitive_limpet_z3n (npm) (malicious package) - [MAL-2025-60113](https://insights.sbomify.com/MAL-2025-60113/): Malicious code in coastal_penguin_z3n (npm) (malicious package) - [MAL-2025-60112](https://insights.sbomify.com/MAL-2025-60112/): Malicious code in cloudy_hamster_z3n (npm) (malicious package) - [MAL-2025-60111](https://insights.sbomify.com/MAL-2025-60111/): Malicious code in cloudy_bovid_z3n (npm) (malicious package) - [MAL-2025-60110](https://insights.sbomify.com/MAL-2025-60110/): Malicious code in closed_pony_z3n (npm) (malicious package) - [MAL-2025-6011](https://insights.sbomify.com/MAL-2025-6011/): Malicious code in config-log (npm) (malicious package) - [MAL-2025-60109](https://insights.sbomify.com/MAL-2025-60109/): Malicious code in closed_octopus_z3n (npm) (malicious package) - [MAL-2025-60108](https://insights.sbomify.com/MAL-2025-60108/): Malicious code in clinical_hummingbird_z3n (npm) (malicious package) - [MAL-2025-60107](https://insights.sbomify.com/MAL-2025-60107/): Malicious code in clever_octopus_z3n (npm) (malicious package) - [MAL-2025-60106](https://insights.sbomify.com/MAL-2025-60106/): Malicious code in clever_canidae_z3n (npm) (malicious package) - [MAL-2025-60105](https://insights.sbomify.com/MAL-2025-60105/): Malicious code in clear_rattlesnake_z3n (npm) (malicious package) - [MAL-2025-60104](https://insights.sbomify.com/MAL-2025-60104/): Malicious code in clean_weasel_z3n (npm) (malicious package) - [MAL-2025-60103](https://insights.sbomify.com/MAL-2025-60103/): Malicious code in classical_python_z3n (npm) (malicious package) - [MAL-2025-60102](https://insights.sbomify.com/MAL-2025-60102/): Malicious code in classical_gamefowl_z3n (npm) (malicious package) - [MAL-2025-60101](https://insights.sbomify.com/MAL-2025-60101/): Malicious code in classic_mongoose_z3n (npm) (malicious package) - [MAL-2025-60100](https://insights.sbomify.com/MAL-2025-60100/): Malicious code in classic_lark_z3n (npm) (malicious package) - [MAL-2025-6010](https://insights.sbomify.com/MAL-2025-6010/): Malicious code in ruamel-poc (PyPI) (malicious package) - [MAL-2025-601](https://insights.sbomify.com/MAL-2025-601/): Malicious code in @komoot/kvstore (npm) (malicious package) - [MAL-2025-60099](https://insights.sbomify.com/MAL-2025-60099/): Malicious code in classic_jaguar_z3n (npm) (malicious package) - [MAL-2025-60098](https://insights.sbomify.com/MAL-2025-60098/): Malicious code in civilian_salamander_z3n (npm) (malicious package) - [MAL-2025-60097](https://insights.sbomify.com/MAL-2025-60097/): Malicious code in civilian_caribou_z3n (npm) (malicious package) - [MAL-2025-60096](https://insights.sbomify.com/MAL-2025-60096/): Malicious code in civil_trout_z3n (npm) (malicious package) - [MAL-2025-60095](https://insights.sbomify.com/MAL-2025-60095/): Malicious code in civic_impala_z3n (npm) (malicious package) - [MAL-2025-60094](https://insights.sbomify.com/MAL-2025-60094/): Malicious code in circular_mosquito_z3n (npm) (malicious package) - [MAL-2025-60093](https://insights.sbomify.com/MAL-2025-60093/): Malicious code in chubby_harrier_z3n (npm) (malicious package) - [MAL-2025-60092](https://insights.sbomify.com/MAL-2025-60092/): Malicious code in chronic_gorilla_z3n (npm) (malicious package) - [MAL-2025-60091](https://insights.sbomify.com/MAL-2025-60091/): Malicious code in chronic_angelfish_z3n (npm) (malicious package) - [MAL-2025-60090](https://insights.sbomify.com/MAL-2025-60090/): Malicious code in chemical_raven_z3n (npm) (malicious package) - [MAL-2025-6009](https://insights.sbomify.com/MAL-2025-6009/): Malicious code in protolab (npm) (malicious package) - [MAL-2025-60089](https://insights.sbomify.com/MAL-2025-60089/): Malicious code in cheerful_smelt_z3n (npm) (malicious package) - [MAL-2025-60088](https://insights.sbomify.com/MAL-2025-60088/): Malicious code in cheap_swordtail_z3n (npm) (malicious package) - [MAL-2025-60087](https://insights.sbomify.com/MAL-2025-60087/): Malicious code in cheap_guineafowl_z3n (npm) (malicious package) - [MAL-2025-60086](https://insights.sbomify.com/MAL-2025-60086/): Malicious code in charming_wasp_z3n (npm) (malicious package) - [MAL-2025-60085](https://insights.sbomify.com/MAL-2025-60085/): Malicious code in charming_krill_z3n (npm) (malicious package) - [MAL-2025-60084](https://insights.sbomify.com/MAL-2025-60084/): Malicious code in charming_anteater_z3n (npm) (malicious package) - [MAL-2025-60083](https://insights.sbomify.com/MAL-2025-60083/): Malicious code in characteristic_unicorn_z3n (npm) (malicious package) - [MAL-2025-60082](https://insights.sbomify.com/MAL-2025-60082/): Malicious code in characteristic_tarsier_z3n (npm) (malicious package) - [MAL-2025-60081](https://insights.sbomify.com/MAL-2025-60081/): Malicious code in characteristic_jaguar_z3n (npm) (malicious package) - [MAL-2025-60080](https://insights.sbomify.com/MAL-2025-60080/): Malicious code in characteristic_jackal_z3n (npm) (malicious package) - [MAL-2025-6008](https://insights.sbomify.com/MAL-2025-6008/): Malicious code in os-apps-ui-curvelibrary1 (npm) (malicious package) - [MAL-2025-60079](https://insights.sbomify.com/MAL-2025-60079/): Malicious code in characteristic_iguana_z3n (npm) (malicious package) - [MAL-2025-60078](https://insights.sbomify.com/MAL-2025-60078/): Malicious code in characteristic_gull_z3n (npm) (malicious package) - [MAL-2025-60077](https://insights.sbomify.com/MAL-2025-60077/): Malicious code in characteristic_blackbird_z3n (npm) (malicious package) - [MAL-2025-60076](https://insights.sbomify.com/MAL-2025-60076/): Malicious code in certain_reindeer_z3n (npm) (malicious package) - [MAL-2025-60075](https://insights.sbomify.com/MAL-2025-60075/): Malicious code in certain_butterfly_z3n (npm) (malicious package) - [MAL-2025-60074](https://insights.sbomify.com/MAL-2025-60074/): Malicious code in central_sparrow_z3n (npm) (malicious package) - [MAL-2025-60073](https://insights.sbomify.com/MAL-2025-60073/): Malicious code in central_lungfish_z3n (npm) (malicious package) - [MAL-2025-60072](https://insights.sbomify.com/MAL-2025-60072/): Malicious code in central_grasshopper_z3n (npm) (malicious package) - [MAL-2025-60071](https://insights.sbomify.com/MAL-2025-60071/): Malicious code in causal_leech_z3n (npm) (malicious package) - [MAL-2025-60070](https://insights.sbomify.com/MAL-2025-60070/): Malicious code in causal_cat_z3n (npm) (malicious package) - [MAL-2025-6007](https://insights.sbomify.com/MAL-2025-6007/): Malicious code in groq-mcp (PyPI) (malicious package) - [MAL-2025-60069](https://insights.sbomify.com/MAL-2025-60069/): Malicious code in casual_starfish_z3n (npm) (malicious package) - [MAL-2025-60068](https://insights.sbomify.com/MAL-2025-60068/): Malicious code in careful_silverfish_z3n (npm) (malicious package) - [MAL-2025-60067](https://insights.sbomify.com/MAL-2025-60067/): Malicious code in careful_mackerel_z3n (npm) (malicious package) - [MAL-2025-60066](https://insights.sbomify.com/MAL-2025-60066/): Malicious code in capitalist_wolf_z3n (npm) (malicious package) - [MAL-2025-60065](https://insights.sbomify.com/MAL-2025-60065/): Malicious code in capitalist_manatee_z3n (npm) (malicious package) - [MAL-2025-60064](https://insights.sbomify.com/MAL-2025-60064/): Malicious code in capable_chipmunk_z3n (npm) (malicious package) - [MAL-2025-60063](https://insights.sbomify.com/MAL-2025-60063/): Malicious code in capable_carp_z3n (npm) (malicious package) - [MAL-2025-60062](https://insights.sbomify.com/MAL-2025-60062/): Malicious code in busy_mule_z3n (npm) (malicious package) - [MAL-2025-60061](https://insights.sbomify.com/MAL-2025-60061/): Malicious code in burning_prawn_z3n (npm) (malicious package) - [MAL-2025-60060](https://insights.sbomify.com/MAL-2025-60060/): Malicious code in burning_mouse_z3n (npm) (malicious package) - [MAL-2025-6006](https://insights.sbomify.com/MAL-2025-6006/): Malicious code in everestsystems-content-core (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/446/