# Vulnerabilities published in 2025


- [MAL-2025-96125](https://insights.sbomify.com/MAL-2025-96125/): Malicious code in puzzled_eagle_z3n (npm) (malicious package)
- [MAL-2025-96124](https://insights.sbomify.com/MAL-2025-96124/): Malicious code in puzzled_coyote_z3n (npm) (malicious package)
- [MAL-2025-96123](https://insights.sbomify.com/MAL-2025-96123/): Malicious code in purring_wildcat_z3n (npm) (malicious package)
- [MAL-2025-96122](https://insights.sbomify.com/MAL-2025-96122/): Malicious code in purring_silverfish_requirement (npm) (malicious package)
- [MAL-2025-96121](https://insights.sbomify.com/MAL-2025-96121/): Malicious code in pure_turtle_z3n (npm) (malicious package)
- [MAL-2025-96120](https://insights.sbomify.com/MAL-2025-96120/): Malicious code in pure_newt_z3n (npm) (malicious package)
- [MAL-2025-9612](https://insights.sbomify.com/MAL-2025-9612/): Malicious code in @waitfortea2024/corrupti-laudantium-consectetur (npm) (malicious package)
- [MAL-2025-96119](https://insights.sbomify.com/MAL-2025-96119/): Malicious code in pure_badger_z3n (npm) (malicious package)
- [MAL-2025-96118](https://insights.sbomify.com/MAL-2025-96118/): Malicious code in puny_raven_z3n (npm) (malicious package)
- [MAL-2025-96117](https://insights.sbomify.com/MAL-2025-96117/): Malicious code in puny_puffin_z3n (npm) (malicious package)
- [MAL-2025-96116](https://insights.sbomify.com/MAL-2025-96116/): Malicious code in puny_pinniped_z3n (npm) (malicious package)
- [MAL-2025-96115](https://insights.sbomify.com/MAL-2025-96115/): Malicious code in puny_pelican_z3n (npm) (malicious package)
- [MAL-2025-96114](https://insights.sbomify.com/MAL-2025-96114/): Malicious code in puny_mosquito_requirement (npm) (malicious package)
- [MAL-2025-96113](https://insights.sbomify.com/MAL-2025-96113/): Malicious code in puny_fish_z3n (npm) (malicious package)
- [MAL-2025-96112](https://insights.sbomify.com/MAL-2025-96112/): Malicious code in pulseforgeasdehr (npm) (malicious package)
- [MAL-2025-96111](https://insights.sbomify.com/MAL-2025-96111/): Malicious code in pulseforgeasdehq (npm) (malicious package)
- [MAL-2025-96110](https://insights.sbomify.com/MAL-2025-96110/): Malicious code in pulseforgeasdehp (npm) (malicious package)
- [MAL-2025-9611](https://insights.sbomify.com/MAL-2025-9611/): Malicious code in @waitfortea2024/corrupti-iusto-aut (npm) (malicious package)
- [MAL-2025-96109](https://insights.sbomify.com/MAL-2025-96109/): Malicious code in pulseforgeasdeho (npm) (malicious package)
- [MAL-2025-96108](https://insights.sbomify.com/MAL-2025-96108/): Malicious code in pulseforgeasdehn (npm) (malicious package)
- [MAL-2025-96107](https://insights.sbomify.com/MAL-2025-96107/): Malicious code in pulseforgeasdehm (npm) (malicious package)
- [MAL-2025-96106](https://insights.sbomify.com/MAL-2025-96106/): Malicious code in pulseforgeasdehl (npm) (malicious package)
- [MAL-2025-96105](https://insights.sbomify.com/MAL-2025-96105/): Malicious code in pulseforgeasdehk (npm) (malicious package)
- [MAL-2025-96104](https://insights.sbomify.com/MAL-2025-96104/): Malicious code in pulseforgeasdehj (npm) (malicious package)
- [MAL-2025-96103](https://insights.sbomify.com/MAL-2025-96103/): Malicious code in pulseforgeasdehi (npm) (malicious package)
- [MAL-2025-96102](https://insights.sbomify.com/MAL-2025-96102/): Malicious code in public_slug_z3n (npm) (malicious package)
- [MAL-2025-96101](https://insights.sbomify.com/MAL-2025-96101/): Malicious code in public_skunk_z3n (npm) (malicious package)
- [MAL-2025-96100](https://insights.sbomify.com/MAL-2025-96100/): Malicious code in public_cicada_requirement (npm) (malicious package)
- [MAL-2025-9610](https://insights.sbomify.com/MAL-2025-9610/): Malicious code in @waitfortea2024/consequatur-maxime-velit (npm) (malicious package)
- [MAL-2025-96099](https://insights.sbomify.com/MAL-2025-96099/): Malicious code in public_blackbird_requirement (npm) (malicious package)
- [MAL-2025-96098](https://insights.sbomify.com/MAL-2025-96098/): Malicious code in public_alligator_z3n (npm) (malicious package)
- [MAL-2025-96097](https://insights.sbomify.com/MAL-2025-96097/): Malicious code in public_aardwolf_z3n (npm) (malicious package)
- [MAL-2025-96096](https://insights.sbomify.com/MAL-2025-96096/): Malicious code in psychological_salmon_z3n (npm) (malicious package)
- [MAL-2025-96095](https://insights.sbomify.com/MAL-2025-96095/): Malicious code in psychological_mastodon_z3n (npm) (malicious package)
- [MAL-2025-96094](https://insights.sbomify.com/MAL-2025-96094/): Malicious code in psychological_carp_z3n (npm) (malicious package)
- [MAL-2025-96093](https://insights.sbomify.com/MAL-2025-96093/): Malicious code in psychiatric_sheep_z3n (npm) (malicious package)
- [MAL-2025-96092](https://insights.sbomify.com/MAL-2025-96092/): Malicious code in provincial_smelt_z3n (npm) (malicious package)
- [MAL-2025-96091](https://insights.sbomify.com/MAL-2025-96091/): Malicious code in provincial_rhinoceros_z3n (npm) (malicious package)
- [MAL-2025-96090](https://insights.sbomify.com/MAL-2025-96090/): Malicious code in proud_slug_z3n (npm) (malicious package)
- [MAL-2025-9609](https://insights.sbomify.com/MAL-2025-9609/): Malicious code in @waitfortea2024/consectetur-voluptatem-quae (npm) (malicious package)
- [MAL-2025-96089](https://insights.sbomify.com/MAL-2025-96089/): Malicious code in proud_puffin_z3n (npm) (malicious package)
- [MAL-2025-96088](https://insights.sbomify.com/MAL-2025-96088/): Malicious code in proud_lobster_z3n (npm) (malicious package)
- [MAL-2025-96087](https://insights.sbomify.com/MAL-2025-96087/): Malicious code in proud_iguana_z3n (npm) (malicious package)
- [MAL-2025-96086](https://insights.sbomify.com/MAL-2025-96086/): Malicious code in proud_cat_z3n (npm) (malicious package)
- [MAL-2025-96085](https://insights.sbomify.com/MAL-2025-96085/): Malicious code in protestant_whale_z3n (npm) (malicious package)
- [MAL-2025-96084](https://insights.sbomify.com/MAL-2025-96084/): Malicious code in protestant_raccoon_z3n (npm) (malicious package)
- [MAL-2025-96083](https://insights.sbomify.com/MAL-2025-96083/): Malicious code in protestant_falcon_z3n (npm) (malicious package)
- [MAL-2025-96082](https://insights.sbomify.com/MAL-2025-96082/): Malicious code in protestant_falcon_requirement (npm) (malicious package)
- [MAL-2025-96081](https://insights.sbomify.com/MAL-2025-96081/): Malicious code in protestant_cobra_z3n (npm) (malicious package)
- [MAL-2025-96080](https://insights.sbomify.com/MAL-2025-96080/): Malicious code in protestant_canid_z3n (npm) (malicious package)
- [MAL-2025-9608](https://insights.sbomify.com/MAL-2025-9608/): Malicious code in @waitfortea2024/consectetur-quas-cumque (npm) (malicious package)
- [MAL-2025-96079](https://insights.sbomify.com/MAL-2025-96079/): Malicious code in protective_starfish_requirement (npm) (malicious package)
- [MAL-2025-96078](https://insights.sbomify.com/MAL-2025-96078/): Malicious code in protective_smelt_requirement (npm) (malicious package)
- [MAL-2025-96077](https://insights.sbomify.com/MAL-2025-96077/): Malicious code in protective_silverfish_z3n (npm) (malicious package)
- [MAL-2025-96076](https://insights.sbomify.com/MAL-2025-96076/): Malicious code in protective_rattlesnake_z3n (npm) (malicious package)
- [MAL-2025-96075](https://insights.sbomify.com/MAL-2025-96075/): Malicious code in protective_fowl_z3n (npm) (malicious package)
- [MAL-2025-96074](https://insights.sbomify.com/MAL-2025-96074/): Malicious code in protective_cod_z3n (npm) (malicious package)
- [MAL-2025-96073](https://insights.sbomify.com/MAL-2025-96073/): Malicious code in protective_catfish_z3n (npm) (malicious package)
- [MAL-2025-96072](https://insights.sbomify.com/MAL-2025-96072/): Malicious code in protective_camel_z3n (npm) (malicious package)
- [MAL-2025-96071](https://insights.sbomify.com/MAL-2025-96071/): Malicious code in prospective_wren_z3n (npm) (malicious package)
- [MAL-2025-96070](https://insights.sbomify.com/MAL-2025-96070/): Malicious code in prospective_vulture_z3n (npm) (malicious package)
- [MAL-2025-9607](https://insights.sbomify.com/MAL-2025-9607/): Malicious code in @waitfortea2024/atque-ducimus-expedita (npm) (malicious package)
- [MAL-2025-96069](https://insights.sbomify.com/MAL-2025-96069/): Malicious code in prospective_cobra_z3n (npm) (malicious package)
- [MAL-2025-96068](https://insights.sbomify.com/MAL-2025-96068/): Malicious code in prospective_armadillo_z3n (npm) (malicious package)
- [MAL-2025-96067](https://insights.sbomify.com/MAL-2025-96067/): Malicious code in proposed_magpie_z3n (npm) (malicious package)
- [MAL-2025-96066](https://insights.sbomify.com/MAL-2025-96066/): Malicious code in proposed_kite_z3n (npm) (malicious package)
- [MAL-2025-96065](https://insights.sbomify.com/MAL-2025-96065/): Malicious code in promising_whitefish_z3n (npm) (malicious package)
- [MAL-2025-96064](https://insights.sbomify.com/MAL-2025-96064/): Malicious code in promising_falcon_requirement (npm) (malicious package)
- [MAL-2025-96063](https://insights.sbomify.com/MAL-2025-96063/): Malicious code in promising_clownfish_z3n (npm) (malicious package)
- [MAL-2025-96062](https://insights.sbomify.com/MAL-2025-96062/): Malicious code in promising_clam_z3n (npm) (malicious package)
- [MAL-2025-96061](https://insights.sbomify.com/MAL-2025-96061/): Malicious code in promising_catfish_z3n (npm) (malicious package)
- [MAL-2025-96060](https://insights.sbomify.com/MAL-2025-96060/): Malicious code in prominent_tyrannosaurus_z3n (npm) (malicious package)
- [MAL-2025-9606](https://insights.sbomify.com/MAL-2025-9606/): Malicious code in @waitfortea2024/at-soluta-sapiente (npm) (malicious package)
- [MAL-2025-96059](https://insights.sbomify.com/MAL-2025-96059/): Malicious code in prominent_tortoise_z3n (npm) (malicious package)
- [MAL-2025-96058](https://insights.sbomify.com/MAL-2025-96058/): Malicious code in prominent_peacock_z3n (npm) (malicious package)
- [MAL-2025-96057](https://insights.sbomify.com/MAL-2025-96057/): Malicious code in prominent_partridge_z3n (npm) (malicious package)
- [MAL-2025-96056](https://insights.sbomify.com/MAL-2025-96056/): Malicious code in prominent_kangaroo_z3n (npm) (malicious package)
- [MAL-2025-96055](https://insights.sbomify.com/MAL-2025-96055/): Malicious code in prominent_jellyfish_z3n (npm) (malicious package)
- [MAL-2025-96054](https://insights.sbomify.com/MAL-2025-96054/): Malicious code in prominent_aphid_z3n (npm) (malicious package)
- [MAL-2025-96053](https://insights.sbomify.com/MAL-2025-96053/): Malicious code in progressive_octopus_z3n (npm) (malicious package)
- [MAL-2025-96052](https://insights.sbomify.com/MAL-2025-96052/): Malicious code in progressive_barnacle_z3n (npm) (malicious package)
- [MAL-2025-96051](https://insights.sbomify.com/MAL-2025-96051/): Malicious code in profound_panther_z3n (npm) (malicious package)
- [MAL-2025-96050](https://insights.sbomify.com/MAL-2025-96050/): Malicious code in profound_ostrich_z3n (npm) (malicious package)
- [MAL-2025-9605](https://insights.sbomify.com/MAL-2025-9605/): Malicious code in @waitfortea2024/at-nostrum-soluta (npm) (malicious package)
- [MAL-2025-96049](https://insights.sbomify.com/MAL-2025-96049/): Malicious code in profound_junglefowl_z3n (npm) (malicious package)
- [MAL-2025-96048](https://insights.sbomify.com/MAL-2025-96048/): Malicious code in profound_bedbug_z3n (npm) (malicious package)
- [MAL-2025-96047](https://insights.sbomify.com/MAL-2025-96047/): Malicious code in profitable_orangutan_requirement (npm) (malicious package)
- [MAL-2025-96046](https://insights.sbomify.com/MAL-2025-96046/): Malicious code in profitable_hookworm_requirement (npm) (malicious package)
- [MAL-2025-96045](https://insights.sbomify.com/MAL-2025-96045/): Malicious code in profitable_ape_z3n (npm) (malicious package)
- [MAL-2025-96044](https://insights.sbomify.com/MAL-2025-96044/): Malicious code in professional_perch_z3n (npm) (malicious package)
- [MAL-2025-96043](https://insights.sbomify.com/MAL-2025-96043/): Malicious code in productive_wasp_z3n (npm) (malicious package)
- [MAL-2025-96042](https://insights.sbomify.com/MAL-2025-96042/): Malicious code in productive_silkworm_z3n (npm) (malicious package)
- [MAL-2025-96041](https://insights.sbomify.com/MAL-2025-96041/): Malicious code in productive_goldfish_z3n (npm) (malicious package)
- [MAL-2025-96040](https://insights.sbomify.com/MAL-2025-96040/): Malicious code in productive_giraffe_z3n (npm) (malicious package)
- [MAL-2025-9604](https://insights.sbomify.com/MAL-2025-9604/): Malicious code in @waitfortea2024/assumenda-unde-labore (npm) (malicious package)
- [MAL-2025-96039](https://insights.sbomify.com/MAL-2025-96039/): Malicious code in productive_falcon_z3n (npm) (malicious package)
- [MAL-2025-96038](https://insights.sbomify.com/MAL-2025-96038/): Malicious code in productive_cicada_z3n (npm) (malicious package)
- [MAL-2025-96037](https://insights.sbomify.com/MAL-2025-96037/): Malicious code in probable_ox_z3n (npm) (malicious package)
- [MAL-2025-96036](https://insights.sbomify.com/MAL-2025-96036/): Malicious code in probable_hummingbird_z3n (npm) (malicious package)
- [MAL-2025-96035](https://insights.sbomify.com/MAL-2025-96035/): Malicious code in probable_crow_z3n (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/48/