# Vulnerabilities published in 2025


- [MAL-2025-5880](https://insights.sbomify.com/MAL-2025-5880/): Malicious code in @pmm-ux/asset-uploader (npm) (malicious package)
- [MAL-2025-588](https://insights.sbomify.com/MAL-2025-588/): Malicious code in @adsk-forks/jsonpath (npm) (malicious package)
- [MAL-2025-58799](https://insights.sbomify.com/MAL-2025-58799/): Malicious code in suitable_marten_z3n (npm) (malicious package)
- [MAL-2025-58798](https://insights.sbomify.com/MAL-2025-58798/): Malicious code in suitable_giraffe_z3n (npm) (malicious package)
- [MAL-2025-58797](https://insights.sbomify.com/MAL-2025-58797/): Malicious code in suitable_dove_z3n (npm) (malicious package)
- [MAL-2025-58796](https://insights.sbomify.com/MAL-2025-58796/): Malicious code in suitable_bobcat_z3n (npm) (malicious package)
- [MAL-2025-58795](https://insights.sbomify.com/MAL-2025-58795/): Malicious code in sufficient_guppy_z3n (npm) (malicious package)
- [MAL-2025-58794](https://insights.sbomify.com/MAL-2025-58794/): Malicious code in sudden_piranha_z3n (npm) (malicious package)
- [MAL-2025-58793](https://insights.sbomify.com/MAL-2025-58793/): Malicious code in successive_piranha_z3n (npm) (malicious package)
- [MAL-2025-58792](https://insights.sbomify.com/MAL-2025-58792/): Malicious code in substantial_cicada_z3n (npm) (malicious package)
- [MAL-2025-58791](https://insights.sbomify.com/MAL-2025-58791/): Malicious code in stupid_duck_z3n (npm) (malicious package)
- [MAL-2025-58790](https://insights.sbomify.com/MAL-2025-58790/): Malicious code in stuck_guanaco_z3n (npm) (malicious package)
- [MAL-2025-5879](https://insights.sbomify.com/MAL-2025-5879/): Malicious code in @indigo-web/material (npm) (malicious package)
- [MAL-2025-58789](https://insights.sbomify.com/MAL-2025-58789/): Malicious code in structural_dinosaur_z3n (npm) (malicious package)
- [MAL-2025-58788](https://insights.sbomify.com/MAL-2025-58788/): Malicious code in striped_tahr_z3n (npm) (malicious package)
- [MAL-2025-58787](https://insights.sbomify.com/MAL-2025-58787/): Malicious code in striped_crow_z3n (npm) (malicious package)
- [MAL-2025-58786](https://insights.sbomify.com/MAL-2025-58786/): Malicious code in striking_hawk_z3n (npm) (malicious package)
- [MAL-2025-58785](https://insights.sbomify.com/MAL-2025-58785/): Malicious code in strict_anglerfish_z3n (npm) (malicious package)
- [MAL-2025-58784](https://insights.sbomify.com/MAL-2025-58784/): Malicious code in strange_bonobo_z3n (npm) (malicious package)
- [MAL-2025-58783](https://insights.sbomify.com/MAL-2025-58783/): Malicious code in strange_barracuda_z3n (npm) (malicious package)
- [MAL-2025-58782](https://insights.sbomify.com/MAL-2025-58782/): Malicious code in straight_sailfish_z3n (npm) (malicious package)
- [MAL-2025-58781](https://insights.sbomify.com/MAL-2025-58781/): Malicious code in sticky_pig_z3n (npm) (malicious package)
- [MAL-2025-58780](https://insights.sbomify.com/MAL-2025-58780/): Malicious code in sticky_angelfish_z3n (npm) (malicious package)
- [MAL-2025-5878](https://insights.sbomify.com/MAL-2025-5878/): Malicious code in @indigo-multi/fonts (npm) (malicious package)
- [MAL-2025-58779](https://insights.sbomify.com/MAL-2025-58779/): Malicious code in statutory_vulture_z3n (npm) (malicious package)
- [MAL-2025-58778](https://insights.sbomify.com/MAL-2025-58778/): Malicious code in stale_peacock_z3n (npm) (malicious package)
- [MAL-2025-58777](https://insights.sbomify.com/MAL-2025-58777/): Malicious code in stable_hedgehog_z3n (npm) (malicious package)
- [MAL-2025-58776](https://insights.sbomify.com/MAL-2025-58776/): Malicious code in stable_grouse_z3n (npm) (malicious package)
- [MAL-2025-58775](https://insights.sbomify.com/MAL-2025-58775/): Malicious code in squealing_panther_z3n (npm) (malicious package)
- [MAL-2025-58774](https://insights.sbomify.com/MAL-2025-58774/): Malicious code in squealing_crane_z3n (npm) (malicious package)
- [MAL-2025-58773](https://insights.sbomify.com/MAL-2025-58773/): Malicious code in spotty_rabbit_z3n (npm) (malicious package)
- [MAL-2025-58772](https://insights.sbomify.com/MAL-2025-58772/): Malicious code in spotty_macaw_z3n (npm) (malicious package)
- [MAL-2025-58771](https://insights.sbomify.com/MAL-2025-58771/): Malicious code in spotless_mouse_z3n (npm) (malicious package)
- [MAL-2025-58770](https://insights.sbomify.com/MAL-2025-58770/): Malicious code in spotless_hyena_z3n (npm) (malicious package)
- [MAL-2025-5877](https://insights.sbomify.com/MAL-2025-5877/): Malicious code in @indigo-mobile/material (npm) (malicious package)
- [MAL-2025-58769](https://insights.sbomify.com/MAL-2025-58769/): Malicious code in sporting_shark_z3n (npm) (malicious package)
- [MAL-2025-58768](https://insights.sbomify.com/MAL-2025-58768/): Malicious code in spontaneous_unicorn_z3n (npm) (malicious package)
- [MAL-2025-58767](https://insights.sbomify.com/MAL-2025-58767/): Malicious code in spontaneous_damselfly_z3n (npm) (malicious package)
- [MAL-2025-58766](https://insights.sbomify.com/MAL-2025-58766/): Malicious code in spicy_swift_z3n (npm) (malicious package)
- [MAL-2025-58765](https://insights.sbomify.com/MAL-2025-58765/): Malicious code in spicy_barnacle_z3n (npm) (malicious package)
- [MAL-2025-58764](https://insights.sbomify.com/MAL-2025-58764/): Malicious code in specific_starfish_z3n (npm) (malicious package)
- [MAL-2025-58763](https://insights.sbomify.com/MAL-2025-58763/): Malicious code in special_gecko_z3n (npm) (malicious package)
- [MAL-2025-58762](https://insights.sbomify.com/MAL-2025-58762/): Malicious code in spatial_snipe_z3n (npm) (malicious package)
- [MAL-2025-58761](https://insights.sbomify.com/MAL-2025-58761/): Malicious code in spatial_carp_z3n (npm) (malicious package)
- [MAL-2025-58760](https://insights.sbomify.com/MAL-2025-58760/): Malicious code in sparkling_quail_z3n (npm) (malicious package)
- [MAL-2025-5876](https://insights.sbomify.com/MAL-2025-5876/): Malicious code in @gdstudio/web-loader (npm) (malicious package)
- [MAL-2025-58759](https://insights.sbomify.com/MAL-2025-58759/): Malicious code in soviet_tortoise_z3n (npm) (malicious package)
- [MAL-2025-58758](https://insights.sbomify.com/MAL-2025-58758/): Malicious code in soviet_beaver_z3n (npm) (malicious package)
- [MAL-2025-58757](https://insights.sbomify.com/MAL-2025-58757/): Malicious code in southern_wombat_z3n (npm) (malicious package)
- [MAL-2025-58756](https://insights.sbomify.com/MAL-2025-58756/): Malicious code in sorry_zebra_z3n (npm) (malicious package)
- [MAL-2025-58755](https://insights.sbomify.com/MAL-2025-58755/): Malicious code in sorry_skink_z3n (npm) (malicious package)
- [MAL-2025-58754](https://insights.sbomify.com/MAL-2025-58754/): Malicious code in sore_hoverfly_z3n (npm) (malicious package)
- [MAL-2025-58753](https://insights.sbomify.com/MAL-2025-58753/): Malicious code in sophisticated_mollusk_z3n (npm) (malicious package)
- [MAL-2025-58752](https://insights.sbomify.com/MAL-2025-58752/): Malicious code in solid_squid_z3n (npm) (malicious package)
- [MAL-2025-58751](https://insights.sbomify.com/MAL-2025-58751/): Malicious code in solid_puffin_z3n (npm) (malicious package)
- [MAL-2025-58750](https://insights.sbomify.com/MAL-2025-58750/): Malicious code in socialist_tyrannosaurus_z3n (npm) (malicious package)
- [MAL-2025-5875](https://insights.sbomify.com/MAL-2025-5875/): Malicious code in @gdcorp-digitalcare/ux-common (npm) (malicious package)
- [MAL-2025-58749](https://insights.sbomify.com/MAL-2025-58749/): Malicious code in socialist_tarsier_z3n (npm) (malicious package)
- [MAL-2025-58748](https://insights.sbomify.com/MAL-2025-58748/): Malicious code in social_starfish_z3n (npm) (malicious package)
- [MAL-2025-58747](https://insights.sbomify.com/MAL-2025-58747/): Malicious code in social_llama_z3n (npm) (malicious package)
- [MAL-2025-58746](https://insights.sbomify.com/MAL-2025-58746/): Malicious code in smooth_puffin_z3n (npm) (malicious package)
- [MAL-2025-58745](https://insights.sbomify.com/MAL-2025-58745/): Malicious code in smart_skink_z3n (npm) (malicious package)
- [MAL-2025-58744](https://insights.sbomify.com/MAL-2025-58744/): Malicious code in small_dormouse_z3n (npm) (malicious package)
- [MAL-2025-58743](https://insights.sbomify.com/MAL-2025-58743/): Malicious code in slight_junglefowl_z3n (npm) (malicious package)
- [MAL-2025-58742](https://insights.sbomify.com/MAL-2025-58742/): Malicious code in slight_amphibian_z3n (npm) (malicious package)
- [MAL-2025-58741](https://insights.sbomify.com/MAL-2025-58741/): Malicious code in skinny_boa_z3n (npm) (malicious package)
- [MAL-2025-58740](https://insights.sbomify.com/MAL-2025-58740/): Malicious code in siska-tomat1-sukiwir (npm) (malicious package)
- [MAL-2025-5874](https://insights.sbomify.com/MAL-2025-5874/): Malicious code in @gdcorp-digitalcare/ux (npm) (malicious package)
- [MAL-2025-58739](https://insights.sbomify.com/MAL-2025-58739/): Malicious code in siska-tiwul68-sukiwir (npm) (malicious package)
- [MAL-2025-58738](https://insights.sbomify.com/MAL-2025-58738/): Malicious code in siska-tempe54-sukiwir (npm) (malicious package)
- [MAL-2025-58737](https://insights.sbomify.com/MAL-2025-58737/): Malicious code in siska-tempe100-sukiwir (npm) (malicious package)
- [MAL-2025-58736](https://insights.sbomify.com/MAL-2025-58736/): Malicious code in siska-teh4-sukiwir (npm) (malicious package)
- [MAL-2025-58735](https://insights.sbomify.com/MAL-2025-58735/): Malicious code in siska-takokak65-sukiwir (npm) (malicious package)
- [MAL-2025-58734](https://insights.sbomify.com/MAL-2025-58734/): Malicious code in siska-sroto82-sukiwir (npm) (malicious package)
- [MAL-2025-58733](https://insights.sbomify.com/MAL-2025-58733/): Malicious code in siska-sroto41-sukiwir (npm) (malicious package)
- [MAL-2025-58732](https://insights.sbomify.com/MAL-2025-58732/): Malicious code in siska-soto17-sukiwir (npm) (malicious package)
- [MAL-2025-58731](https://insights.sbomify.com/MAL-2025-58731/): Malicious code in siska-serabi50-sukiwir (npm) (malicious package)
- [MAL-2025-58730](https://insights.sbomify.com/MAL-2025-58730/): Malicious code in siska-sambalado35-sukiwir (npm) (malicious package)
- [MAL-2025-5873](https://insights.sbomify.com/MAL-2025-5873/): Malicious code in @gdcorp-commerce/cx-router (npm) (malicious package)
- [MAL-2025-58729](https://insights.sbomify.com/MAL-2025-58729/): Malicious code in siska-ruwet21-sukiwir (npm) (malicious package)
- [MAL-2025-58728](https://insights.sbomify.com/MAL-2025-58728/): Malicious code in siska-ronde98-sukiwir (npm) (malicious package)
- [MAL-2025-58727](https://insights.sbomify.com/MAL-2025-58727/): Malicious code in siska-pisang30-sukiwir (npm) (malicious package)
- [MAL-2025-58726](https://insights.sbomify.com/MAL-2025-58726/): Malicious code in siska-peyek90-sukiwir (npm) (malicious package)
- [MAL-2025-58725](https://insights.sbomify.com/MAL-2025-58725/): Malicious code in siska-peyek82-sukiwir (npm) (malicious package)
- [MAL-2025-58724](https://insights.sbomify.com/MAL-2025-58724/): Malicious code in siska-peyek64-sukiwir (npm) (malicious package)
- [MAL-2025-58723](https://insights.sbomify.com/MAL-2025-58723/): Malicious code in siska-ongol-ongol94-sukiwir (npm) (malicious package)
- [MAL-2025-58722](https://insights.sbomify.com/MAL-2025-58722/): Malicious code in siska-nasiuduk49-sukiwir (npm) (malicious package)
- [MAL-2025-58721](https://insights.sbomify.com/MAL-2025-58721/): Malicious code in siska-naget20-sukiwir (npm) (malicious package)
- [MAL-2025-58720](https://insights.sbomify.com/MAL-2025-58720/): Malicious code in siska-miemee11-sukiwir (npm) (malicious package)
- [MAL-2025-5872](https://insights.sbomify.com/MAL-2025-5872/): Malicious code in @gdcorp-commerce/cx-page-container (npm) (malicious package)
- [MAL-2025-58719](https://insights.sbomify.com/MAL-2025-58719/): Malicious code in siska-miebogor41-sukiwir (npm) (malicious package)
- [MAL-2025-58718](https://insights.sbomify.com/MAL-2025-58718/): Malicious code in siska-mangut71-sukiwir (npm) (malicious package)
- [MAL-2025-58717](https://insights.sbomify.com/MAL-2025-58717/): Malicious code in siska-mangga91-sukiwir (npm) (malicious package)
- [MAL-2025-58716](https://insights.sbomify.com/MAL-2025-58716/): Malicious code in siska-liwet60-sukiwir (npm) (malicious package)
- [MAL-2025-58715](https://insights.sbomify.com/MAL-2025-58715/): Malicious code in siska-kue40-sukiwir (npm) (malicious package)
- [MAL-2025-58714](https://insights.sbomify.com/MAL-2025-58714/): Malicious code in siska-klentik96-sukiwir (npm) (malicious package)
- [MAL-2025-58713](https://insights.sbomify.com/MAL-2025-58713/): Malicious code in siska-keripik84-sukiwir (npm) (malicious package)
- [MAL-2025-58712](https://insights.sbomify.com/MAL-2025-58712/): Malicious code in siska-keripik21-sukiwir (npm) (malicious package)
- [MAL-2025-58711](https://insights.sbomify.com/MAL-2025-58711/): Malicious code in siska-keraktelor41-sukiwir (npm) (malicious package)
- [MAL-2025-58710](https://insights.sbomify.com/MAL-2025-58710/): Malicious code in siska-kembang12-sukiwir (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/461/