# Vulnerabilities published in 2025


- [MAL-2025-95673](https://insights.sbomify.com/MAL-2025-95673/): Malicious code in nosy_parakeet_z3n (npm) (malicious package)
- [MAL-2025-95672](https://insights.sbomify.com/MAL-2025-95672/): Malicious code in nosy_ladybug_requirement (npm) (malicious package)
- [MAL-2025-95671](https://insights.sbomify.com/MAL-2025-95671/): Malicious code in nosy_hookworm_z3n (npm) (malicious package)
- [MAL-2025-95670](https://insights.sbomify.com/MAL-2025-95670/): Malicious code in nosy_gull_z3n (npm) (malicious package)
- [MAL-2025-9567](https://insights.sbomify.com/MAL-2025-9567/): Malicious code in @trp-ta-nitro/auth-browser-js (npm) (malicious package)
- [MAL-2025-95669](https://insights.sbomify.com/MAL-2025-95669/): Malicious code in nosy_crab_z3n (npm) (malicious package)
- [MAL-2025-95668](https://insights.sbomify.com/MAL-2025-95668/): Malicious code in northern_hummingbird_requirement (npm) (malicious package)
- [MAL-2025-95667](https://insights.sbomify.com/MAL-2025-95667/): Malicious code in northern_cheetah_z3n (npm) (malicious package)
- [MAL-2025-95666](https://insights.sbomify.com/MAL-2025-95666/): Malicious code in normal_xerinae_z3n (npm) (malicious package)
- [MAL-2025-95665](https://insights.sbomify.com/MAL-2025-95665/): Malicious code in normal_whale_z3n (npm) (malicious package)
- [MAL-2025-95664](https://insights.sbomify.com/MAL-2025-95664/): Malicious code in normal_pony_z3n (npm) (malicious package)
- [MAL-2025-95663](https://insights.sbomify.com/MAL-2025-95663/): Malicious code in normal_orangutan_z3n (npm) (malicious package)
- [MAL-2025-95662](https://insights.sbomify.com/MAL-2025-95662/): Malicious code in normal_mule_z3n (npm) (malicious package)
- [MAL-2025-95661](https://insights.sbomify.com/MAL-2025-95661/): Malicious code in normal_kangaroo_requirement (npm) (malicious package)
- [MAL-2025-95660](https://insights.sbomify.com/MAL-2025-95660/): Malicious code in normal_flyingfish_z3n (npm) (malicious package)
- [MAL-2025-9566](https://insights.sbomify.com/MAL-2025-9566/): Malicious code in @trp-beacon-ui-kit/fonts (npm) (malicious package)
- [MAL-2025-95659](https://insights.sbomify.com/MAL-2025-95659/): Malicious code in normal_chimpanzee_z3n (npm) (malicious package)
- [MAL-2025-95658](https://insights.sbomify.com/MAL-2025-95658/): Malicious code in noisy_skunk_z3n (npm) (malicious package)
- [MAL-2025-95657](https://insights.sbomify.com/MAL-2025-95657/): Malicious code in noisy_lobster_z3n (npm) (malicious package)
- [MAL-2025-95656](https://insights.sbomify.com/MAL-2025-95656/): Malicious code in noisy_lizard_z3n (npm) (malicious package)
- [MAL-2025-95655](https://insights.sbomify.com/MAL-2025-95655/): Malicious code in noisy_grouse_z3n (npm) (malicious package)
- [MAL-2025-95654](https://insights.sbomify.com/MAL-2025-95654/): Malicious code in noisy_cricket_z3n (npm) (malicious package)
- [MAL-2025-95653](https://insights.sbomify.com/MAL-2025-95653/): Malicious code in noble_wallaby_z3n (npm) (malicious package)
- [MAL-2025-95652](https://insights.sbomify.com/MAL-2025-95652/): Malicious code in noble_swallow_z3n (npm) (malicious package)
- [MAL-2025-95651](https://insights.sbomify.com/MAL-2025-95651/): Malicious code in noble_salmon_z3n (npm) (malicious package)
- [MAL-2025-95650](https://insights.sbomify.com/MAL-2025-95650/): Malicious code in noble_parrot_z3n (npm) (malicious package)
- [MAL-2025-9565](https://insights.sbomify.com/MAL-2025-9565/): Malicious code in @trialcard/npmtakeover (npm) (malicious package)
- [MAL-2025-95649](https://insights.sbomify.com/MAL-2025-95649/): Malicious code in noble_mockingbird_z3n (npm) (malicious package)
- [MAL-2025-95648](https://insights.sbomify.com/MAL-2025-95648/): Malicious code in noble_kiwi_z3n (npm) (malicious package)
- [MAL-2025-95647](https://insights.sbomify.com/MAL-2025-95647/): Malicious code in noble_guppy_z3n (npm) (malicious package)
- [MAL-2025-95646](https://insights.sbomify.com/MAL-2025-95646/): Malicious code in noble_cobra_z3n (npm) (malicious package)
- [MAL-2025-95645](https://insights.sbomify.com/MAL-2025-95645/): Malicious code in nice_raccoon_requirement (npm) (malicious package)
- [MAL-2025-95644](https://insights.sbomify.com/MAL-2025-95644/): Malicious code in nice_angelfish_z3n (npm) (malicious package)
- [MAL-2025-95643](https://insights.sbomify.com/MAL-2025-95643/): Malicious code in new_falcon_z3n (npm) (malicious package)
- [MAL-2025-95642](https://insights.sbomify.com/MAL-2025-95642/): Malicious code in neutral_turtle_z3n (npm) (malicious package)
- [MAL-2025-95641](https://insights.sbomify.com/MAL-2025-95641/): Malicious code in neutral_primate_z3n (npm) (malicious package)
- [MAL-2025-95640](https://insights.sbomify.com/MAL-2025-95640/): Malicious code in neutral_newt_z3n (npm) (malicious package)
- [MAL-2025-9564](https://insights.sbomify.com/MAL-2025-9564/): Malicious code in @tiktok-frontend/app-center-connect (npm) (malicious package)
- [MAL-2025-95639](https://insights.sbomify.com/MAL-2025-95639/): Malicious code in neutral_elk_z3n (npm) (malicious package)
- [MAL-2025-95638](https://insights.sbomify.com/MAL-2025-95638/): Malicious code in net_weasel_z3n (npm) (malicious package)
- [MAL-2025-95637](https://insights.sbomify.com/MAL-2025-95637/): Malicious code in net_porpoise_z3n (npm) (malicious package)
- [MAL-2025-95636](https://insights.sbomify.com/MAL-2025-95636/): Malicious code in net_orca_z3n (npm) (malicious package)
- [MAL-2025-95635](https://insights.sbomify.com/MAL-2025-95635/): Malicious code in net_dinosaur_z3n (npm) (malicious package)
- [MAL-2025-95634](https://insights.sbomify.com/MAL-2025-95634/): Malicious code in net_cheetah_z3n (npm) (malicious package)
- [MAL-2025-95633](https://insights.sbomify.com/MAL-2025-95633/): Malicious code in net_canid_z3n (npm) (malicious package)
- [MAL-2025-95632](https://insights.sbomify.com/MAL-2025-95632/): Malicious code in nervous_cuckoo_z3n (npm) (malicious package)
- [MAL-2025-95631](https://insights.sbomify.com/MAL-2025-95631/): Malicious code in neighbouring_trout_z3n (npm) (malicious package)
- [MAL-2025-95630](https://insights.sbomify.com/MAL-2025-95630/): Malicious code in neighbouring_tiglon_z3n (npm) (malicious package)
- [MAL-2025-9563](https://insights.sbomify.com/MAL-2025-9563/): Malicious code in @tiktok-frontend/api-demo-sample-lib2 (npm) (malicious package)
- [MAL-2025-95629](https://insights.sbomify.com/MAL-2025-95629/): Malicious code in neighbouring_pheasant_z3n (npm) (malicious package)
- [MAL-2025-95628](https://insights.sbomify.com/MAL-2025-95628/): Malicious code in neighbouring_chickadee_z3n (npm) (malicious package)
- [MAL-2025-95627](https://insights.sbomify.com/MAL-2025-95627/): Malicious code in neighbouring_anteater_z3n (npm) (malicious package)
- [MAL-2025-95626](https://insights.sbomify.com/MAL-2025-95626/): Malicious code in negative_gull_requirement (npm) (malicious package)
- [MAL-2025-95625](https://insights.sbomify.com/MAL-2025-95625/): Malicious code in negative_gamefowl_z3n (npm) (malicious package)
- [MAL-2025-95624](https://insights.sbomify.com/MAL-2025-95624/): Malicious code in negative_coyote_z3n (npm) (malicious package)
- [MAL-2025-95623](https://insights.sbomify.com/MAL-2025-95623/): Malicious code in necessary_prawn_z3n (npm) (malicious package)
- [MAL-2025-95622](https://insights.sbomify.com/MAL-2025-95622/): Malicious code in necessary_parrotfish_z3n (npm) (malicious package)
- [MAL-2025-95621](https://insights.sbomify.com/MAL-2025-95621/): Malicious code in necessary_narwhal_z3n (npm) (malicious package)
- [MAL-2025-95620](https://insights.sbomify.com/MAL-2025-95620/): Malicious code in necessary_lobster_z3n (npm) (malicious package)
- [MAL-2025-9562](https://insights.sbomify.com/MAL-2025-9562/): Malicious code in @tiger-team/scan (npm) (malicious package)
- [MAL-2025-95619](https://insights.sbomify.com/MAL-2025-95619/): Malicious code in necessary_guineafowl_z3n (npm) (malicious package)
- [MAL-2025-95618](https://insights.sbomify.com/MAL-2025-95618/): Malicious code in necessary_clownfish_z3n (npm) (malicious package)
- [MAL-2025-95617](https://insights.sbomify.com/MAL-2025-95617/): Malicious code in necessary_antlion_z3n (npm) (malicious package)
- [MAL-2025-95616](https://insights.sbomify.com/MAL-2025-95616/): Malicious code in neat_crane_z3n (npm) (malicious package)
- [MAL-2025-95615](https://insights.sbomify.com/MAL-2025-95615/): Malicious code in neat_caribou_z3n (npm) (malicious package)
- [MAL-2025-95614](https://insights.sbomify.com/MAL-2025-95614/): Malicious code in nearby_rooster_z3n (npm) (malicious package)
- [MAL-2025-95613](https://insights.sbomify.com/MAL-2025-95613/): Malicious code in nearby_quail_z3n (npm) (malicious package)
- [MAL-2025-95612](https://insights.sbomify.com/MAL-2025-95612/): Malicious code in nearby_platypus_z3n (npm) (malicious package)
- [MAL-2025-95611](https://insights.sbomify.com/MAL-2025-95611/): Malicious code in nearby_jay_z3n (npm) (malicious package)
- [MAL-2025-95610](https://insights.sbomify.com/MAL-2025-95610/): Malicious code in nearby_flamingo_z3n (npm) (malicious package)
- [MAL-2025-9561](https://insights.sbomify.com/MAL-2025-9561/): Malicious code in @telepo/web-attendant (npm) (malicious package)
- [MAL-2025-95609](https://insights.sbomify.com/MAL-2025-95609/): Malicious code in near_vicuna_z3n (npm) (malicious package)
- [MAL-2025-95608](https://insights.sbomify.com/MAL-2025-95608/): Malicious code in near_tick_requirement (npm) (malicious package)
- [MAL-2025-95607](https://insights.sbomify.com/MAL-2025-95607/): Malicious code in near_mammal_z3n (npm) (malicious package)
- [MAL-2025-95606](https://insights.sbomify.com/MAL-2025-95606/): Malicious code in near_horse_z3n (npm) (malicious package)
- [MAL-2025-95605](https://insights.sbomify.com/MAL-2025-95605/): Malicious code in naval_wasp_z3n (npm) (malicious package)
- [MAL-2025-95604](https://insights.sbomify.com/MAL-2025-95604/): Malicious code in naval_raccoon_z3n (npm) (malicious package)
- [MAL-2025-95603](https://insights.sbomify.com/MAL-2025-95603/): Malicious code in naval_pinniped_z3n (npm) (malicious package)
- [MAL-2025-95602](https://insights.sbomify.com/MAL-2025-95602/): Malicious code in naval_minnow_z3n (npm) (malicious package)
- [MAL-2025-95601](https://insights.sbomify.com/MAL-2025-95601/): Malicious code in naughty_termite_z3n (npm) (malicious package)
- [MAL-2025-95600](https://insights.sbomify.com/MAL-2025-95600/): Malicious code in naughty_baboon_z3n (npm) (malicious package)
- [MAL-2025-9560](https://insights.sbomify.com/MAL-2025-9560/): Malicious code in @teasource/quo-architecto-sequi (npm) (malicious package)
- [MAL-2025-956](https://insights.sbomify.com/MAL-2025-956/): Malicious code in pyethereum (PyPI) (malicious package)
- [MAL-2025-95599](https://insights.sbomify.com/MAL-2025-95599/): Malicious code in natural_herring_z3n (npm) (malicious package)
- [MAL-2025-95598](https://insights.sbomify.com/MAL-2025-95598/): Malicious code in natural_grasshopper_z3n (npm) (malicious package)
- [MAL-2025-95597](https://insights.sbomify.com/MAL-2025-95597/): Malicious code in natural_cicada_z3n (npm) (malicious package)
- [MAL-2025-95596](https://insights.sbomify.com/MAL-2025-95596/): Malicious code in natural_bonobo_z3n (npm) (malicious package)
- [MAL-2025-95595](https://insights.sbomify.com/MAL-2025-95595/): Malicious code in natural_blackbird_requirement (npm) (malicious package)
- [MAL-2025-95594](https://insights.sbomify.com/MAL-2025-95594/): Malicious code in natural_anaconda_z3n (npm) (malicious package)
- [MAL-2025-95593](https://insights.sbomify.com/MAL-2025-95593/): Malicious code in natural_alligator_z3n (npm) (malicious package)
- [MAL-2025-95592](https://insights.sbomify.com/MAL-2025-95592/): Malicious code in native_pinniped_z3n (npm) (malicious package)
- [MAL-2025-95591](https://insights.sbomify.com/MAL-2025-95591/): Malicious code in national_tahr_z3n (npm) (malicious package)
- [MAL-2025-95590](https://insights.sbomify.com/MAL-2025-95590/): Malicious code in national_shrimp_z3n (npm) (malicious package)
- [MAL-2025-9559](https://insights.sbomify.com/MAL-2025-9559/): Malicious code in @teasource/aliquid-eos-delectus-quas (npm) (malicious package)
- [MAL-2025-95589](https://insights.sbomify.com/MAL-2025-95589/): Malicious code in national_otter_z3n (npm) (malicious package)
- [MAL-2025-95588](https://insights.sbomify.com/MAL-2025-95588/): Malicious code in national_ferret_z3n (npm) (malicious package)
- [MAL-2025-95587](https://insights.sbomify.com/MAL-2025-95587/): Malicious code in national_blackbird_z3n (npm) (malicious package)
- [MAL-2025-95586](https://insights.sbomify.com/MAL-2025-95586/): Malicious code in nasty_tern_z3n (npm) (malicious package)
- [MAL-2025-95585](https://insights.sbomify.com/MAL-2025-95585/): Malicious code in nasty_pelican_requirement (npm) (malicious package)
- [MAL-2025-95584](https://insights.sbomify.com/MAL-2025-95584/): Malicious code in nasty_beaver_z3n (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/53/