# Vulnerabilities published in 2025 - [MAL-2025-60059](https://insights.sbomify.com/MAL-2025-60059/): Malicious code in burning_beetle_z3n (npm) (malicious package) - [MAL-2025-60058](https://insights.sbomify.com/MAL-2025-60058/): Malicious code in bumpy_mastodon_z3n (npm) (malicious package) - [MAL-2025-60057](https://insights.sbomify.com/MAL-2025-60057/): Malicious code in broad_swift_z3n (npm) (malicious package) - [MAL-2025-60056](https://insights.sbomify.com/MAL-2025-60056/): Malicious code in bringiton (npm) (malicious package) - [MAL-2025-60055](https://insights.sbomify.com/MAL-2025-60055/): Malicious code in brilliant_rook_z3n (npm) (malicious package) - [MAL-2025-60054](https://insights.sbomify.com/MAL-2025-60054/): Malicious code in bright_stork_z3n (npm) (malicious package) - [MAL-2025-60053](https://insights.sbomify.com/MAL-2025-60053/): Malicious code in bright_pike_z3n (npm) (malicious package) - [MAL-2025-60052](https://insights.sbomify.com/MAL-2025-60052/): Malicious code in bright_bovid_z3n (npm) (malicious package) - [MAL-2025-60051](https://insights.sbomify.com/MAL-2025-60051/): Malicious code in breezy_snipe_z3n (npm) (malicious package) - [MAL-2025-60050](https://insights.sbomify.com/MAL-2025-60050/): Malicious code in breezy_pig_z3n (npm) (malicious package) - [MAL-2025-6005](https://insights.sbomify.com/MAL-2025-6005/): Malicious code in noya-vaults (npm) (malicious package) - [MAL-2025-60049](https://insights.sbomify.com/MAL-2025-60049/): Malicious code in breakable_snail_z3n (npm) (malicious package) - [MAL-2025-60048](https://insights.sbomify.com/MAL-2025-60048/): Malicious code in brainy_urial_z3n (npm) (malicious package) - [MAL-2025-60047](https://insights.sbomify.com/MAL-2025-60047/): Malicious code in brainy_trout_z3n (npm) (malicious package) - [MAL-2025-60046](https://insights.sbomify.com/MAL-2025-60046/): Malicious code in brainy_roundworm_z3n (npm) (malicious package) - [MAL-2025-60045](https://insights.sbomify.com/MAL-2025-60045/): Malicious code in boring_whale_z3n (npm) (malicious package) - [MAL-2025-60044](https://insights.sbomify.com/MAL-2025-60044/): Malicious code in boring_quelea_z3n (npm) (malicious package) - [MAL-2025-60043](https://insights.sbomify.com/MAL-2025-60043/): Malicious code in boring_lungfish_z3n (npm) (malicious package) - [MAL-2025-60042](https://insights.sbomify.com/MAL-2025-60042/): Malicious code in boring_junglefowl_z3n (npm) (malicious package) - [MAL-2025-60041](https://insights.sbomify.com/MAL-2025-60041/): Malicious code in boring_hawk_z3n (npm) (malicious package) - [MAL-2025-60040](https://insights.sbomify.com/MAL-2025-60040/): Malicious code in bored_sawfish_z3n (npm) (malicious package) - [MAL-2025-6004](https://insights.sbomify.com/MAL-2025-6004/): Malicious code in winston-compose (npm) (malicious package) - [MAL-2025-60039](https://insights.sbomify.com/MAL-2025-60039/): Malicious code in bored_quokka_z3n (npm) (malicious package) - [MAL-2025-60038](https://insights.sbomify.com/MAL-2025-60038/): Malicious code in bold_tarantula_z3n (npm) (malicious package) - [MAL-2025-60037](https://insights.sbomify.com/MAL-2025-60037/): Malicious code in bold_constrictor_z3n (npm) (malicious package) - [MAL-2025-60036](https://insights.sbomify.com/MAL-2025-60036/): Malicious code in boiling_dingo_z3n (npm) (malicious package) - [MAL-2025-60035](https://insights.sbomify.com/MAL-2025-60035/): Malicious code in blushing_marmot_z3n (npm) (malicious package) - [MAL-2025-60034](https://insights.sbomify.com/MAL-2025-60034/): Malicious code in blushing_egret_z3n (npm) (malicious package) - [MAL-2025-60033](https://insights.sbomify.com/MAL-2025-60033/): Malicious code in blushing_cod_z3n (npm) (malicious package) - [MAL-2025-60032](https://insights.sbomify.com/MAL-2025-60032/): Malicious code in blushing_boar_z3n (npm) (malicious package) - [MAL-2025-60031](https://insights.sbomify.com/MAL-2025-60031/): Malicious code in bloody_viper_z3n (npm) (malicious package) - [MAL-2025-60030](https://insights.sbomify.com/MAL-2025-60030/): Malicious code in bloody_landfowl_z3n (npm) (malicious package) - [MAL-2025-6003](https://insights.sbomify.com/MAL-2025-6003/): Malicious code in sol-validator (npm) (malicious package) - [MAL-2025-60029](https://insights.sbomify.com/MAL-2025-60029/): Malicious code in bloody_bug_z3n (npm) (malicious package) - [MAL-2025-60028](https://insights.sbomify.com/MAL-2025-60028/): Malicious code in blind_termite_z3n (npm) (malicious package) - [MAL-2025-60027](https://insights.sbomify.com/MAL-2025-60027/): Malicious code in blind_condor_z3n (npm) (malicious package) - [MAL-2025-60026](https://insights.sbomify.com/MAL-2025-60026/): Malicious code in blank_leopard_z3n (npm) (malicious package) - [MAL-2025-60025](https://insights.sbomify.com/MAL-2025-60025/): Malicious code in blank_jay_z3n (npm) (malicious package) - [MAL-2025-60024](https://insights.sbomify.com/MAL-2025-60024/): Malicious code in blank_cat_z3n (npm) (malicious package) - [MAL-2025-60023](https://insights.sbomify.com/MAL-2025-60023/): Malicious code in bizarre_tiglon_z3n (npm) (malicious package) - [MAL-2025-60022](https://insights.sbomify.com/MAL-2025-60022/): Malicious code in bizarre_fox_z3n (npm) (malicious package) - [MAL-2025-60021](https://insights.sbomify.com/MAL-2025-60021/): Malicious code in bitter_warbler_z3n (npm) (malicious package) - [MAL-2025-60020](https://insights.sbomify.com/MAL-2025-60020/): Malicious code in bitter_coral_z3n (npm) (malicious package) - [MAL-2025-6002](https://insights.sbomify.com/MAL-2025-6002/): Malicious code in rtp-rapyd (npm) (malicious package) - [MAL-2025-60019](https://insights.sbomify.com/MAL-2025-60019/): Malicious code in biological_wren_z3n (npm) (malicious package) - [MAL-2025-60018](https://insights.sbomify.com/MAL-2025-60018/): Malicious code in biological_roundworm_z3n (npm) (malicious package) - [MAL-2025-60017](https://insights.sbomify.com/MAL-2025-60017/): Malicious code in binding_elephant_z3n (npm) (malicious package) - [MAL-2025-60016](https://insights.sbomify.com/MAL-2025-60016/): Malicious code in big_krill_z3n (npm) (malicious package) - [MAL-2025-60015](https://insights.sbomify.com/MAL-2025-60015/): Malicious code in big_elephant_z3n (npm) (malicious package) - [MAL-2025-60014](https://insights.sbomify.com/MAL-2025-60014/): Malicious code in better_ptarmigan_z3n (npm) (malicious package) - [MAL-2025-60013](https://insights.sbomify.com/MAL-2025-60013/): Malicious code in beneficial_wildebeest_z3n (npm) (malicious package) - [MAL-2025-60012](https://insights.sbomify.com/MAL-2025-60012/): Malicious code in beneficial_mole_z3n (npm) (malicious package) - [MAL-2025-60011](https://insights.sbomify.com/MAL-2025-60011/): Malicious code in beneficial_badger_z3n (npm) (malicious package) - [MAL-2025-60010](https://insights.sbomify.com/MAL-2025-60010/): Malicious code in beautiful_pelican_z3n (npm) (malicious package) - [MAL-2025-6001](https://insights.sbomify.com/MAL-2025-6001/): Malicious code in react-hook-form-ui (npm) (malicious package) - [MAL-2025-60009](https://insights.sbomify.com/MAL-2025-60009/): Malicious code in basic_boa_z3n (npm) (malicious package) - [MAL-2025-60008](https://insights.sbomify.com/MAL-2025-60008/): Malicious code in bare_panda_z3n (npm) (malicious package) - [MAL-2025-60007](https://insights.sbomify.com/MAL-2025-60007/): Malicious code in bare_damselfly_z3n (npm) (malicious package) - [MAL-2025-60006](https://insights.sbomify.com/MAL-2025-60006/): Malicious code in balanced_primate_z3n (npm) (malicious package) - [MAL-2025-60005](https://insights.sbomify.com/MAL-2025-60005/): Malicious code in back_spoonbill_z3n (npm) (malicious package) - [MAL-2025-60004](https://insights.sbomify.com/MAL-2025-60004/): Malicious code in back_hookworm_z3n (npm) (malicious package) - [MAL-2025-60003](https://insights.sbomify.com/MAL-2025-60003/): Malicious code in awkward_piranha_z3n (npm) (malicious package) - [MAL-2025-60002](https://insights.sbomify.com/MAL-2025-60002/): Malicious code in awful_raven_z3n (npm) (malicious package) - [MAL-2025-60001](https://insights.sbomify.com/MAL-2025-60001/): Malicious code in aware_cod_z3n (npm) (malicious package) - [MAL-2025-60000](https://insights.sbomify.com/MAL-2025-60000/): Malicious code in aware_cat_z3n (npm) (malicious package) - [MAL-2025-6000](https://insights.sbomify.com/MAL-2025-6000/): Malicious code in public-tools-and-demos (npm) (malicious package) - [MAL-2025-600](https://insights.sbomify.com/MAL-2025-600/): Malicious code in digitalexp-datasource-definitions (npm) (malicious package) - [MAL-2025-60](https://insights.sbomify.com/MAL-2025-60/): Malicious code in eslint-config-proton-lint (npm) (malicious package) - [MAL-2025-6](https://insights.sbomify.com/MAL-2025-6/): Malicious code in grr-ui (npm) (malicious package) - [MAL-2025-59999](https://insights.sbomify.com/MAL-2025-59999/): Malicious code in awake_partridge_z3n (npm) (malicious package) - [MAL-2025-59998](https://insights.sbomify.com/MAL-2025-59998/): Malicious code in average_spoonbill_z3n (npm) (malicious package) - [MAL-2025-59997](https://insights.sbomify.com/MAL-2025-59997/): Malicious code in available_tarantula_z3n (npm) (malicious package) - [MAL-2025-59996](https://insights.sbomify.com/MAL-2025-59996/): Malicious code in available_buzzard_z3n (npm) (malicious package) - [MAL-2025-59995](https://insights.sbomify.com/MAL-2025-59995/): Malicious code in autonomous_thrush_z3n (npm) (malicious package) - [MAL-2025-59994](https://insights.sbomify.com/MAL-2025-59994/): Malicious code in autonomous_tarantula_z3n (npm) (malicious package) - [MAL-2025-59993](https://insights.sbomify.com/MAL-2025-59993/): Malicious code in autonomous_kite_z3n (npm) (malicious package) - [MAL-2025-59992](https://insights.sbomify.com/MAL-2025-59992/): Malicious code in attractive_worm_z3n (npm) (malicious package) - [MAL-2025-59991](https://insights.sbomify.com/MAL-2025-59991/): Malicious code in atomic_wildfowl_z3n (npm) (malicious package) - [MAL-2025-59990](https://insights.sbomify.com/MAL-2025-59990/): Malicious code in atomic_marmoset_z3n (npm) (malicious package) - [MAL-2025-5999](https://insights.sbomify.com/MAL-2025-5999/): Malicious code in nodemailer-helper (npm) (malicious package) - [MAL-2025-59989](https://insights.sbomify.com/MAL-2025-59989/): Malicious code in associated_whippet_z3n (npm) (malicious package) - [MAL-2025-59988](https://insights.sbomify.com/MAL-2025-59988/): Malicious code in associated_swordtail_z3n (npm) (malicious package) - [MAL-2025-59987](https://insights.sbomify.com/MAL-2025-59987/): Malicious code in associated_lamprey_z3n (npm) (malicious package) - [MAL-2025-59986](https://insights.sbomify.com/MAL-2025-59986/): Malicious code in assistant_scorpion_z3n (npm) (malicious package) - [MAL-2025-59985](https://insights.sbomify.com/MAL-2025-59985/): Malicious code in assistant_nightingale_z3n (npm) (malicious package) - [MAL-2025-59984](https://insights.sbomify.com/MAL-2025-59984/): Malicious code in ashamed_mole_z3n (npm) (malicious package) - [MAL-2025-59983](https://insights.sbomify.com/MAL-2025-59983/): Malicious code in ashamed_albatross_z3n (npm) (malicious package) - [MAL-2025-59982](https://insights.sbomify.com/MAL-2025-59982/): Malicious code in artistic_impala_z3n (npm) (malicious package) - [MAL-2025-59981](https://insights.sbomify.com/MAL-2025-59981/): Malicious code in arrogant_slug_z3n (npm) (malicious package) - [MAL-2025-59980](https://insights.sbomify.com/MAL-2025-59980/): Malicious code in arrogant_hookworm_z3n (npm) (malicious package) - [MAL-2025-5998](https://insights.sbomify.com/MAL-2025-5998/): Malicious code in eth-validator (npm) (malicious package) - [MAL-2025-59979](https://insights.sbomify.com/MAL-2025-59979/): Malicious code in arrogant_grouse_z3n (npm) (malicious package) - [MAL-2025-59978](https://insights.sbomify.com/MAL-2025-59978/): Malicious code in arrogant_bass_z3n (npm) (malicious package) - [MAL-2025-59977](https://insights.sbomify.com/MAL-2025-59977/): Malicious code in armed_stingray_z3n (npm) (malicious package) - [MAL-2025-59976](https://insights.sbomify.com/MAL-2025-59976/): Malicious code in armed_goat_z3n (npm) (malicious package) - [MAL-2025-59975](https://insights.sbomify.com/MAL-2025-59975/): Malicious code in architectural_cuckoo_z3n (npm) (malicious package) - [MAL-2025-59974](https://insights.sbomify.com/MAL-2025-59974/): Malicious code in arbitrary_crane_z3n (npm) (malicious package) - [MAL-2025-59973](https://insights.sbomify.com/MAL-2025-59973/): Malicious code in appropriate_eel_z3n (npm) (malicious package) - [MAL-2025-59972](https://insights.sbomify.com/MAL-2025-59972/): Malicious code in applicable_wolf_z3n (npm) (malicious package) - [MAL-2025-59971](https://insights.sbomify.com/MAL-2025-59971/): Malicious code in appalling_squirrel_z3n (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/447/