# Vulnerabilities published in 2025


- [MAL-2025-95853](https://insights.sbomify.com/MAL-2025-95853/): Malicious code in passive_locust_z3n (npm) (malicious package)
- [MAL-2025-95852](https://insights.sbomify.com/MAL-2025-95852/): Malicious code in passing_viper_z3n (npm) (malicious package)
- [MAL-2025-95851](https://insights.sbomify.com/MAL-2025-95851/): Malicious code in passing_platypus_z3n (npm) (malicious package)
- [MAL-2025-95850](https://insights.sbomify.com/MAL-2025-95850/): Malicious code in passing_pigeon_z3n (npm) (malicious package)
- [MAL-2025-9585](https://insights.sbomify.com/MAL-2025-9585/): Malicious code in @universal-search/search-proxy-api-client (npm) (malicious package)
- [MAL-2025-95849](https://insights.sbomify.com/MAL-2025-95849/): Malicious code in passing_frog_z3n (npm) (malicious package)
- [MAL-2025-95848](https://insights.sbomify.com/MAL-2025-95848/): Malicious code in particular_deer_z3n (npm) (malicious package)
- [MAL-2025-95847](https://insights.sbomify.com/MAL-2025-95847/): Malicious code in partial_warbler_z3n (npm) (malicious package)
- [MAL-2025-95846](https://insights.sbomify.com/MAL-2025-95846/): Malicious code in partial_muskox_z3n (npm) (malicious package)
- [MAL-2025-95845](https://insights.sbomify.com/MAL-2025-95845/): Malicious code in partial_bobolink_z3n (npm) (malicious package)
- [MAL-2025-95844](https://insights.sbomify.com/MAL-2025-95844/): Malicious code in partial_anglerfish_z3n (npm) (malicious package)
- [MAL-2025-95843](https://insights.sbomify.com/MAL-2025-95843/): Malicious code in parliamentary_swallow_z3n (npm) (malicious package)
- [MAL-2025-95842](https://insights.sbomify.com/MAL-2025-95842/): Malicious code in parliamentary_dragonfly_z3n (npm) (malicious package)
- [MAL-2025-95841](https://insights.sbomify.com/MAL-2025-95841/): Malicious code in parliamentary_butterfly_z3n (npm) (malicious package)
- [MAL-2025-95840](https://insights.sbomify.com/MAL-2025-95840/): Malicious code in parental_leopard_z3n (npm) (malicious package)
- [MAL-2025-9584](https://insights.sbomify.com/MAL-2025-9584/): Malicious code in @typescript_eslinter/prettier (npm) (malicious package)
- [MAL-2025-95839](https://insights.sbomify.com/MAL-2025-95839/): Malicious code in parental_hippopotamus_requirement (npm) (malicious package)
- [MAL-2025-95838](https://insights.sbomify.com/MAL-2025-95838/): Malicious code in parental_gecko_z3n (npm) (malicious package)
- [MAL-2025-95837](https://insights.sbomify.com/MAL-2025-95837/): Malicious code in parental_flea_z3n (npm) (malicious package)
- [MAL-2025-95836](https://insights.sbomify.com/MAL-2025-95836/): Malicious code in parental_elephant_z3n (npm) (malicious package)
- [MAL-2025-95835](https://insights.sbomify.com/MAL-2025-95835/): Malicious code in parental_condor_z3n (npm) (malicious package)
- [MAL-2025-95834](https://insights.sbomify.com/MAL-2025-95834/): Malicious code in parental_cobra_z3n (npm) (malicious package)
- [MAL-2025-95833](https://insights.sbomify.com/MAL-2025-95833/): Malicious code in parallel_finch_z3n (npm) (malicious package)
- [MAL-2025-95832](https://insights.sbomify.com/MAL-2025-95832/): Malicious code in panicky_rattlesnake_z3n (npm) (malicious package)
- [MAL-2025-95831](https://insights.sbomify.com/MAL-2025-95831/): Malicious code in panicky_rabbit_z3n (npm) (malicious package)
- [MAL-2025-95830](https://insights.sbomify.com/MAL-2025-95830/): Malicious code in panicky_jay_z3n (npm) (malicious package)
- [MAL-2025-9583](https://insights.sbomify.com/MAL-2025-9583/): Malicious code in @typescript_eslinter/eslint (npm) (malicious package)
- [MAL-2025-95829](https://insights.sbomify.com/MAL-2025-95829/): Malicious code in panicky_echidna_z3n (npm) (malicious package)
- [MAL-2025-95828](https://insights.sbomify.com/MAL-2025-95828/): Malicious code in pale_penguin_z3n (npm) (malicious package)
- [MAL-2025-95827](https://insights.sbomify.com/MAL-2025-95827/): Malicious code in pale_beetle_z3n (npm) (malicious package)
- [MAL-2025-95826](https://insights.sbomify.com/MAL-2025-95826/): Malicious code in painful_butterfly_z3n (npm) (malicious package)
- [MAL-2025-95825](https://insights.sbomify.com/MAL-2025-95825/): Malicious code in overwhelming_dragonfly_z3n (npm) (malicious package)
- [MAL-2025-95824](https://insights.sbomify.com/MAL-2025-95824/): Malicious code in overwhelming_centipede_z3n (npm) (malicious package)
- [MAL-2025-95823](https://insights.sbomify.com/MAL-2025-95823/): Malicious code in overwhelming_canid_z3n (npm) (malicious package)
- [MAL-2025-95822](https://insights.sbomify.com/MAL-2025-95822/): Malicious code in overwhelming_buzzard_z3n (npm) (malicious package)
- [MAL-2025-95821](https://insights.sbomify.com/MAL-2025-95821/): Malicious code in overseas_moose_z3n (npm) (malicious package)
- [MAL-2025-95820](https://insights.sbomify.com/MAL-2025-95820/): Malicious code in overseas_mink_z3n (npm) (malicious package)
- [MAL-2025-9582](https://insights.sbomify.com/MAL-2025-9582/): Malicious code in @tuan149/api-wind (npm) (malicious package)
- [MAL-2025-95819](https://insights.sbomify.com/MAL-2025-95819/): Malicious code in overall_swordfish_requirement (npm) (malicious package)
- [MAL-2025-95818](https://insights.sbomify.com/MAL-2025-95818/): Malicious code in overall_puffin_z3n (npm) (malicious package)
- [MAL-2025-95817](https://insights.sbomify.com/MAL-2025-95817/): Malicious code in overall_lion_z3n (npm) (malicious package)
- [MAL-2025-95816](https://insights.sbomify.com/MAL-2025-95816/): Malicious code in outstanding_unicorn_requirement (npm) (malicious package)
- [MAL-2025-95815](https://insights.sbomify.com/MAL-2025-95815/): Malicious code in outstanding_starfish_z3n (npm) (malicious package)
- [MAL-2025-95814](https://insights.sbomify.com/MAL-2025-95814/): Malicious code in outstanding_lemur_z3n (npm) (malicious package)
- [MAL-2025-95813](https://insights.sbomify.com/MAL-2025-95813/): Malicious code in outstanding_gibbon_z3n (npm) (malicious package)
- [MAL-2025-95812](https://insights.sbomify.com/MAL-2025-95812/): Malicious code in outside_trout_z3n (npm) (malicious package)
- [MAL-2025-95811](https://insights.sbomify.com/MAL-2025-95811/): Malicious code in outside_ladybug_z3n (npm) (malicious package)
- [MAL-2025-95810](https://insights.sbomify.com/MAL-2025-95810/): Malicious code in outside_boar_z3n (npm) (malicious package)
- [MAL-2025-9581](https://insights.sbomify.com/MAL-2025-9581/): Malicious code in @tuan149/api-sunny (npm) (malicious package)
- [MAL-2025-95809](https://insights.sbomify.com/MAL-2025-95809/): Malicious code in outrageous_wasp_z3n (npm) (malicious package)
- [MAL-2025-95808](https://insights.sbomify.com/MAL-2025-95808/): Malicious code in outrageous_echidna_z3n (npm) (malicious package)
- [MAL-2025-95807](https://insights.sbomify.com/MAL-2025-95807/): Malicious code in outrageous_dolphin_z3n (npm) (malicious package)
- [MAL-2025-95806](https://insights.sbomify.com/MAL-2025-95806/): Malicious code in outrageous_coyote_z3n (npm) (malicious package)
- [MAL-2025-95805](https://insights.sbomify.com/MAL-2025-95805/): Malicious code in outer_gamefowl_z3n (npm) (malicious package)
- [MAL-2025-95804](https://insights.sbomify.com/MAL-2025-95804/): Malicious code in outer_bird_z3n (npm) (malicious package)
- [MAL-2025-95803](https://insights.sbomify.com/MAL-2025-95803/): Malicious code in outdoor_sailfish_z3n (npm) (malicious package)
- [MAL-2025-95802](https://insights.sbomify.com/MAL-2025-95802/): Malicious code in outdoor_guppy_z3n (npm) (malicious package)
- [MAL-2025-95801](https://insights.sbomify.com/MAL-2025-95801/): Malicious code in outdoor_beetle_z3n (npm) (malicious package)
- [MAL-2025-95800](https://insights.sbomify.com/MAL-2025-95800/): Malicious code in other_puma_z3n (npm) (malicious package)
- [MAL-2025-9580](https://insights.sbomify.com/MAL-2025-9580/): Malicious code in @tuan149/api-snowy (npm) (malicious package)
- [MAL-2025-958](https://insights.sbomify.com/MAL-2025-958/): Malicious code in pylint-redis (PyPI) (malicious package)
- [MAL-2025-95799](https://insights.sbomify.com/MAL-2025-95799/): Malicious code in other_dormouse_z3n (npm) (malicious package)
- [MAL-2025-95798](https://insights.sbomify.com/MAL-2025-95798/): Malicious code in other_dingo_z3n (npm) (malicious package)
- [MAL-2025-95797](https://insights.sbomify.com/MAL-2025-95797/): Malicious code in other_caribou_z3n (npm) (malicious package)
- [MAL-2025-95796](https://insights.sbomify.com/MAL-2025-95796/): Malicious code in orthodox_weasel_z3n (npm) (malicious package)
- [MAL-2025-95795](https://insights.sbomify.com/MAL-2025-95795/): Malicious code in orthodox_tapir_z3n (npm) (malicious package)
- [MAL-2025-95794](https://insights.sbomify.com/MAL-2025-95794/): Malicious code in orthodox_salamander_z3n (npm) (malicious package)
- [MAL-2025-95793](https://insights.sbomify.com/MAL-2025-95793/): Malicious code in orthodox_otter_z3n (npm) (malicious package)
- [MAL-2025-95792](https://insights.sbomify.com/MAL-2025-95792/): Malicious code in orthodox_dormouse_z3n (npm) (malicious package)
- [MAL-2025-95791](https://insights.sbomify.com/MAL-2025-95791/): Malicious code in original_wasp_z3n (npm) (malicious package)
- [MAL-2025-95790](https://insights.sbomify.com/MAL-2025-95790/): Malicious code in original_bass_z3n (npm) (malicious package)
- [MAL-2025-9579](https://insights.sbomify.com/MAL-2025-9579/): Malicious code in @tuan149/api-rainny (npm) (malicious package)
- [MAL-2025-95789](https://insights.sbomify.com/MAL-2025-95789/): Malicious code in organisational_tick_z3n (npm) (malicious package)
- [MAL-2025-95788](https://insights.sbomify.com/MAL-2025-95788/): Malicious code in organisational_pinniped_z3n (npm) (malicious package)
- [MAL-2025-95787](https://insights.sbomify.com/MAL-2025-95787/): Malicious code in organisational_mollusk_z3n (npm) (malicious package)
- [MAL-2025-95786](https://insights.sbomify.com/MAL-2025-95786/): Malicious code in organisational_fox_z3n (npm) (malicious package)
- [MAL-2025-95785](https://insights.sbomify.com/MAL-2025-95785/): Malicious code in organisational_angelfish_z3n (npm) (malicious package)
- [MAL-2025-95784](https://insights.sbomify.com/MAL-2025-95784/): Malicious code in organic_starfish_z3n (npm) (malicious package)
- [MAL-2025-95783](https://insights.sbomify.com/MAL-2025-95783/): Malicious code in organic_eel_z3n (npm) (malicious package)
- [MAL-2025-95782](https://insights.sbomify.com/MAL-2025-95782/): Malicious code in organic_canid_z3n (npm) (malicious package)
- [MAL-2025-95781](https://insights.sbomify.com/MAL-2025-95781/): Malicious code in organic_blackbird_z3n (npm) (malicious package)
- [MAL-2025-95780](https://insights.sbomify.com/MAL-2025-95780/): Malicious code in ordinary_guineafowl_z3n (npm) (malicious package)
- [MAL-2025-9578](https://insights.sbomify.com/MAL-2025-9578/): Malicious code in @tuan149/api-rain (npm) (malicious package)
- [MAL-2025-95779](https://insights.sbomify.com/MAL-2025-95779/): Malicious code in ordinary_gamefowl_requirement (npm) (malicious package)
- [MAL-2025-95778](https://insights.sbomify.com/MAL-2025-95778/): Malicious code in ordinary_coyote_z3n (npm) (malicious package)
- [MAL-2025-95777](https://insights.sbomify.com/MAL-2025-95777/): Malicious code in ordinary_booby_z3n (npm) (malicious package)
- [MAL-2025-95776](https://insights.sbomify.com/MAL-2025-95776/): Malicious code in ordinary_bedbug_z3n (npm) (malicious package)
- [MAL-2025-95775](https://insights.sbomify.com/MAL-2025-95775/): Malicious code in oral_shrimp_z3n (npm) (malicious package)
- [MAL-2025-95774](https://insights.sbomify.com/MAL-2025-95774/): Malicious code in oral_pig_z3n (npm) (malicious package)
- [MAL-2025-95773](https://insights.sbomify.com/MAL-2025-95773/): Malicious code in oral_mollusk_z3n (npm) (malicious package)
- [MAL-2025-95772](https://insights.sbomify.com/MAL-2025-95772/): Malicious code in oral_kangaroo_z3n (npm) (malicious package)
- [MAL-2025-95771](https://insights.sbomify.com/MAL-2025-95771/): Malicious code in oral_gamefowl_z3n (npm) (malicious package)
- [MAL-2025-95770](https://insights.sbomify.com/MAL-2025-95770/): Malicious code in oral_canidae_z3n (npm) (malicious package)
- [MAL-2025-9577](https://insights.sbomify.com/MAL-2025-9577/): Malicious code in @tuan149/api-lightning (npm) (malicious package)
- [MAL-2025-95769](https://insights.sbomify.com/MAL-2025-95769/): Malicious code in optimistic_galliform_z3n (npm) (malicious package)
- [MAL-2025-95768](https://insights.sbomify.com/MAL-2025-95768/): Malicious code in optimistic_flamingo_z3n (npm) (malicious package)
- [MAL-2025-95767](https://insights.sbomify.com/MAL-2025-95767/): Malicious code in optimistic_amphibian_z3n (npm) (malicious package)
- [MAL-2025-95766](https://insights.sbomify.com/MAL-2025-95766/): Malicious code in opposite_whale_z3n (npm) (malicious package)
- [MAL-2025-95765](https://insights.sbomify.com/MAL-2025-95765/): Malicious code in opposite_slug_requirement (npm) (malicious package)
- [MAL-2025-95764](https://insights.sbomify.com/MAL-2025-95764/): Malicious code in opposite_rodent_z3n (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/51/