# Vulnerabilities published in 2025


- [MAL-2025-95944](https://insights.sbomify.com/MAL-2025-95944/): Malicious code in positive_sailfish_z3n (npm) (malicious package)
- [MAL-2025-95943](https://insights.sbomify.com/MAL-2025-95943/): Malicious code in positive_antelope_z3n (npm) (malicious package)
- [MAL-2025-95942](https://insights.sbomify.com/MAL-2025-95942/): Malicious code in positive_anteater_z3n (npm) (malicious package)
- [MAL-2025-95941](https://insights.sbomify.com/MAL-2025-95941/): Malicious code in popular_wombat_z3n (npm) (malicious package)
- [MAL-2025-95940](https://insights.sbomify.com/MAL-2025-95940/): Malicious code in popular_whale_z3n (npm) (malicious package)
- [MAL-2025-9594](https://insights.sbomify.com/MAL-2025-9594/): Malicious code in @vikas_upadhyay0/swagger-lint (npm) (malicious package)
- [MAL-2025-95939](https://insights.sbomify.com/MAL-2025-95939/): Malicious code in popular_reptile_z3n (npm) (malicious package)
- [MAL-2025-95938](https://insights.sbomify.com/MAL-2025-95938/): Malicious code in popular_prawn_z3n (npm) (malicious package)
- [MAL-2025-95937](https://insights.sbomify.com/MAL-2025-95937/): Malicious code in popular_llama_z3n (npm) (malicious package)
- [MAL-2025-95936](https://insights.sbomify.com/MAL-2025-95936/): Malicious code in popular_elephant_requirement (npm) (malicious package)
- [MAL-2025-95935](https://insights.sbomify.com/MAL-2025-95935/): Malicious code in popular_donkey_z3n (npm) (malicious package)
- [MAL-2025-95934](https://insights.sbomify.com/MAL-2025-95934/): Malicious code in popular_cougar_z3n (npm) (malicious package)
- [MAL-2025-95933](https://insights.sbomify.com/MAL-2025-95933/): Malicious code in popular_chickadee_z3n (npm) (malicious package)
- [MAL-2025-95932](https://insights.sbomify.com/MAL-2025-95932/): Malicious code in poor_pinniped_z3n (npm) (malicious package)
- [MAL-2025-95931](https://insights.sbomify.com/MAL-2025-95931/): Malicious code in poor_mongoose_z3n (npm) (malicious package)
- [MAL-2025-95930](https://insights.sbomify.com/MAL-2025-95930/): Malicious code in political_cat_z3n (npm) (malicious package)
- [MAL-2025-9593](https://insights.sbomify.com/MAL-2025-9593/): Malicious code in @viihdeonline/react-app (npm) (malicious package)
- [MAL-2025-95929](https://insights.sbomify.com/MAL-2025-95929/): Malicious code in political_aphid_z3n (npm) (malicious package)
- [MAL-2025-95928](https://insights.sbomify.com/MAL-2025-95928/): Malicious code in political-jade-rat (npm) (malicious package)
- [MAL-2025-95927](https://insights.sbomify.com/MAL-2025-95927/): Malicious code in polite_mole_z3n (npm) (malicious package)
- [MAL-2025-95926](https://insights.sbomify.com/MAL-2025-95926/): Malicious code in polite_iguana_z3n (npm) (malicious package)
- [MAL-2025-95925](https://insights.sbomify.com/MAL-2025-95925/): Malicious code in polite_guanaco_z3n (npm) (malicious package)
- [MAL-2025-95924](https://insights.sbomify.com/MAL-2025-95924/): Malicious code in polite_dragonfly_z3n (npm) (malicious package)
- [MAL-2025-95923](https://insights.sbomify.com/MAL-2025-95923/): Malicious code in polite_boa_requirement (npm) (malicious package)
- [MAL-2025-95922](https://insights.sbomify.com/MAL-2025-95922/): Malicious code in poised_earwig_z3n (npm) (malicious package)
- [MAL-2025-95921](https://insights.sbomify.com/MAL-2025-95921/): Malicious code in poised_dinosaur_z3n (npm) (malicious package)
- [MAL-2025-95920](https://insights.sbomify.com/MAL-2025-95920/): Malicious code in poised_anaconda_z3n (npm) (malicious package)
- [MAL-2025-9592](https://insights.sbomify.com/MAL-2025-9592/): Malicious code in @veryflore/disc (npm) (malicious package)
- [MAL-2025-95919](https://insights.sbomify.com/MAL-2025-95919/): Malicious code in pleased_tortoise_z3n (npm) (malicious package)
- [MAL-2025-95918](https://insights.sbomify.com/MAL-2025-95918/): Malicious code in pleased_pony_requirement (npm) (malicious package)
- [MAL-2025-95917](https://insights.sbomify.com/MAL-2025-95917/): Malicious code in pleased_muskox_z3n (npm) (malicious package)
- [MAL-2025-95916](https://insights.sbomify.com/MAL-2025-95916/): Malicious code in pleased_ferret_requirement (npm) (malicious package)
- [MAL-2025-95915](https://insights.sbomify.com/MAL-2025-95915/): Malicious code in pleasant_pike_z3n (npm) (malicious package)
- [MAL-2025-95914](https://insights.sbomify.com/MAL-2025-95914/): Malicious code in pleasant_bison_z3n (npm) (malicious package)
- [MAL-2025-95913](https://insights.sbomify.com/MAL-2025-95913/): Malicious code in plastic_rattlesnake_z3n (npm) (malicious package)
- [MAL-2025-95912](https://insights.sbomify.com/MAL-2025-95912/): Malicious code in plastic_meerkat_z3n (npm) (malicious package)
- [MAL-2025-95911](https://insights.sbomify.com/MAL-2025-95911/): Malicious code in plastic_locust_z3n (npm) (malicious package)
- [MAL-2025-95910](https://insights.sbomify.com/MAL-2025-95910/): Malicious code in plastic_lizard_z3n (npm) (malicious package)
- [MAL-2025-9591](https://insights.sbomify.com/MAL-2025-9591/): Malicious code in @uxbrand-components/logo-widget (npm) (malicious package)
- [MAL-2025-95909](https://insights.sbomify.com/MAL-2025-95909/): Malicious code in plastic_cat_z3n (npm) (malicious package)
- [MAL-2025-95908](https://insights.sbomify.com/MAL-2025-95908/): Malicious code in plastic_asp_z3n (npm) (malicious package)
- [MAL-2025-95907](https://insights.sbomify.com/MAL-2025-95907/): Malicious code in planned_woodpecker_z3n (npm) (malicious package)
- [MAL-2025-95906](https://insights.sbomify.com/MAL-2025-95906/): Malicious code in planned_wallaby_z3n (npm) (malicious package)
- [MAL-2025-95905](https://insights.sbomify.com/MAL-2025-95905/): Malicious code in planned_marmot_z3n (npm) (malicious package)
- [MAL-2025-95904](https://insights.sbomify.com/MAL-2025-95904/): Malicious code in planned_eagle_z3n (npm) (malicious package)
- [MAL-2025-95903](https://insights.sbomify.com/MAL-2025-95903/): Malicious code in planned_crocodile_z3n (npm) (malicious package)
- [MAL-2025-95902](https://insights.sbomify.com/MAL-2025-95902/): Malicious code in planned_catfish_z3n (npm) (malicious package)
- [MAL-2025-95901](https://insights.sbomify.com/MAL-2025-95901/): Malicious code in plain_kingfisher_z3n (npm) (malicious package)
- [MAL-2025-95900](https://insights.sbomify.com/MAL-2025-95900/): Malicious code in plain_cow_z3n (npm) (malicious package)
- [MAL-2025-9590](https://insights.sbomify.com/MAL-2025-9590/): Malicious code in @uxbrand-components/illustration-widget (npm) (malicious package)
- [MAL-2025-95899](https://insights.sbomify.com/MAL-2025-95899/): Malicious code in physical_vicuna_z3n (npm) (malicious package)
- [MAL-2025-95898](https://insights.sbomify.com/MAL-2025-95898/): Malicious code in physical_meerkat_z3n (npm) (malicious package)
- [MAL-2025-95897](https://insights.sbomify.com/MAL-2025-95897/): Malicious code in physical_junglefowl_z3n (npm) (malicious package)
- [MAL-2025-95896](https://insights.sbomify.com/MAL-2025-95896/): Malicious code in physical_grasshopper_z3n (npm) (malicious package)
- [MAL-2025-95895](https://insights.sbomify.com/MAL-2025-95895/): Malicious code in physical_gecko_z3n (npm) (malicious package)
- [MAL-2025-95894](https://insights.sbomify.com/MAL-2025-95894/): Malicious code in physical_anteater_z3n (npm) (malicious package)
- [MAL-2025-95893](https://insights.sbomify.com/MAL-2025-95893/): Malicious code in philosophical_toad_z3n (npm) (malicious package)
- [MAL-2025-95892](https://insights.sbomify.com/MAL-2025-95892/): Malicious code in philosophical_squirrel_z3n (npm) (malicious package)
- [MAL-2025-95891](https://insights.sbomify.com/MAL-2025-95891/): Malicious code in philosophical_mule_z3n (npm) (malicious package)
- [MAL-2025-95890](https://insights.sbomify.com/MAL-2025-95890/): Malicious code in philosophical_lungfish_z3n (npm) (malicious package)
- [MAL-2025-9589](https://insights.sbomify.com/MAL-2025-9589/): Malicious code in @uxbrand-components/color-widget (npm) (malicious package)
- [MAL-2025-95889](https://insights.sbomify.com/MAL-2025-95889/): Malicious code in philosophical_heron_z3n (npm) (malicious package)
- [MAL-2025-95888](https://insights.sbomify.com/MAL-2025-95888/): Malicious code in philosophical_elk_z3n (npm) (malicious package)
- [MAL-2025-95887](https://insights.sbomify.com/MAL-2025-95887/): Malicious code in philosophical_cobra_requirement (npm) (malicious package)
- [MAL-2025-95886](https://insights.sbomify.com/MAL-2025-95886/): Malicious code in petite_swan_requirement (npm) (malicious package)
- [MAL-2025-95885](https://insights.sbomify.com/MAL-2025-95885/): Malicious code in petite_grouse_z3n (npm) (malicious package)
- [MAL-2025-95884](https://insights.sbomify.com/MAL-2025-95884/): Malicious code in personal_smelt_requirement (npm) (malicious package)
- [MAL-2025-95883](https://insights.sbomify.com/MAL-2025-95883/): Malicious code in personal_reptile_z3n (npm) (malicious package)
- [MAL-2025-95882](https://insights.sbomify.com/MAL-2025-95882/): Malicious code in personal_pinniped_z3n (npm) (malicious package)
- [MAL-2025-95881](https://insights.sbomify.com/MAL-2025-95881/): Malicious code in personal_elephant_z3n (npm) (malicious package)
- [MAL-2025-95880](https://insights.sbomify.com/MAL-2025-95880/): Malicious code in personal_bug_z3n (npm) (malicious package)
- [MAL-2025-9588](https://insights.sbomify.com/MAL-2025-9588/): Malicious code in @utilcode/simple-http (npm) (malicious package)
- [MAL-2025-95879](https://insights.sbomify.com/MAL-2025-95879/): Malicious code in personal_alligator_z3n (npm) (malicious package)
- [MAL-2025-95878](https://insights.sbomify.com/MAL-2025-95878/): Malicious code in persistent_newt_z3n (npm) (malicious package)
- [MAL-2025-95877](https://insights.sbomify.com/MAL-2025-95877/): Malicious code in permanent_wallaby_z3n (npm) (malicious package)
- [MAL-2025-95876](https://insights.sbomify.com/MAL-2025-95876/): Malicious code in permanent_hippopotamus_z3n (npm) (malicious package)
- [MAL-2025-95875](https://insights.sbomify.com/MAL-2025-95875/): Malicious code in permanent_fly_z3n (npm) (malicious package)
- [MAL-2025-95874](https://insights.sbomify.com/MAL-2025-95874/): Malicious code in perfect_mammal_z3n (npm) (malicious package)
- [MAL-2025-95873](https://insights.sbomify.com/MAL-2025-95873/): Malicious code in perfect_boa_z3n (npm) (malicious package)
- [MAL-2025-95872](https://insights.sbomify.com/MAL-2025-95872/): Malicious code in peculiar_peafowl_z3n (npm) (malicious package)
- [MAL-2025-95871](https://insights.sbomify.com/MAL-2025-95871/): Malicious code in peaceful_thrush_z3n (npm) (malicious package)
- [MAL-2025-95870](https://insights.sbomify.com/MAL-2025-95870/): Malicious code in peaceful_hawk_z3n (npm) (malicious package)
- [MAL-2025-9587](https://insights.sbomify.com/MAL-2025-9587/): Malicious code in @usaa-grp-conversational-search/ent-search-ui (npm) (malicious package)
- [MAL-2025-95869](https://insights.sbomify.com/MAL-2025-95869/): Malicious code in peaceful_bug_z3n (npm) (malicious package)
- [MAL-2025-95868](https://insights.sbomify.com/MAL-2025-95868/): Malicious code in peaceful_amphibian_z3n (npm) (malicious package)
- [MAL-2025-95867](https://insights.sbomify.com/MAL-2025-95867/): Malicious code in payable_salamander_z3n (npm) (malicious package)
- [MAL-2025-95866](https://insights.sbomify.com/MAL-2025-95866/): Malicious code in patient_swordtail_z3n (npm) (malicious package)
- [MAL-2025-95865](https://insights.sbomify.com/MAL-2025-95865/): Malicious code in patient_salamander_z3n (npm) (malicious package)
- [MAL-2025-95864](https://insights.sbomify.com/MAL-2025-95864/): Malicious code in patient_goose_z3n (npm) (malicious package)
- [MAL-2025-95863](https://insights.sbomify.com/MAL-2025-95863/): Malicious code in patient_bonobo_z3n (npm) (malicious package)
- [MAL-2025-95862](https://insights.sbomify.com/MAL-2025-95862/): Malicious code in patient_barracuda_z3n (npm) (malicious package)
- [MAL-2025-95861](https://insights.sbomify.com/MAL-2025-95861/): Malicious code in past_wolf_z3n (npm) (malicious package)
- [MAL-2025-95860](https://insights.sbomify.com/MAL-2025-95860/): Malicious code in past_peacock_z3n (npm) (malicious package)
- [MAL-2025-9586](https://insights.sbomify.com/MAL-2025-9586/): Malicious code in @uq-global-ec/navigation (npm) (malicious package)
- [MAL-2025-95859](https://insights.sbomify.com/MAL-2025-95859/): Malicious code in past_ocelot_z3n (npm) (malicious package)
- [MAL-2025-95858](https://insights.sbomify.com/MAL-2025-95858/): Malicious code in past_iguana_z3n (npm) (malicious package)
- [MAL-2025-95857](https://insights.sbomify.com/MAL-2025-95857/): Malicious code in past_gull_z3n (npm) (malicious package)
- [MAL-2025-95856](https://insights.sbomify.com/MAL-2025-95856/): Malicious code in passive_sole_z3n (npm) (malicious package)
- [MAL-2025-95855](https://insights.sbomify.com/MAL-2025-95855/): Malicious code in passive_parrotfish_z3n (npm) (malicious package)
- [MAL-2025-95854](https://insights.sbomify.com/MAL-2025-95854/): Malicious code in passive_mammal_z3n (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/50/