# Vulnerabilities published in 2025


- [MAL-2025-41216](https://insights.sbomify.com/MAL-2025-41216/): Malicious code in zulu-tangerine-date-lfkvt (npm) (malicious package)
- [MAL-2025-41215](https://insights.sbomify.com/MAL-2025-41215/): Malicious code in zulu-strawberry-znlg (npm) (malicious package)
- [MAL-2025-41214](https://insights.sbomify.com/MAL-2025-41214/): Malicious code in zulu-romeo-1gss (npm) (malicious package)
- [MAL-2025-41213](https://insights.sbomify.com/MAL-2025-41213/): Malicious code in zulu-raspberry-bravo-bjgpk (npm) (malicious package)
- [MAL-2025-41212](https://insights.sbomify.com/MAL-2025-41212/): Malicious code in zulu-quince-yety (npm) (malicious package)
- [MAL-2025-41211](https://insights.sbomify.com/MAL-2025-41211/): Malicious code in zulu-qhf-project (npm) (malicious package)
- [MAL-2025-41210](https://insights.sbomify.com/MAL-2025-41210/): Malicious code in zulu-pfu-project (npm) (malicious package)
- [MAL-2025-4121](https://insights.sbomify.com/MAL-2025-4121/): Malicious code in rpc-selffbott (npm) (malicious package)
- [MAL-2025-41209](https://insights.sbomify.com/MAL-2025-41209/): Malicious code in zulu-papa-vahq (npm) (malicious package)
- [MAL-2025-41208](https://insights.sbomify.com/MAL-2025-41208/): Malicious code in zulu-papa-fyok (npm) (malicious package)
- [MAL-2025-41207](https://insights.sbomify.com/MAL-2025-41207/): Malicious code in zulu-p9j-project (npm) (malicious package)
- [MAL-2025-41206](https://insights.sbomify.com/MAL-2025-41206/): Malicious code in zulu-orbit-0xhs (npm) (malicious package)
- [MAL-2025-41205](https://insights.sbomify.com/MAL-2025-41205/): Malicious code in zulu-nsh-project (npm) (malicious package)
- [MAL-2025-41204](https://insights.sbomify.com/MAL-2025-41204/): Malicious code in zulu-november-enne (npm) (malicious package)
- [MAL-2025-41203](https://insights.sbomify.com/MAL-2025-41203/): Malicious code in zulu-ngu-project (npm) (malicious package)
- [MAL-2025-41202](https://insights.sbomify.com/MAL-2025-41202/): Malicious code in zulu-mvj-project (npm) (malicious package)
- [MAL-2025-41201](https://insights.sbomify.com/MAL-2025-41201/): Malicious code in zulu-mike-xcsf (npm) (malicious package)
- [MAL-2025-41200](https://insights.sbomify.com/MAL-2025-41200/): Malicious code in zulu-mike-vqqc (npm) (malicious package)
- [MAL-2025-4120](https://insights.sbomify.com/MAL-2025-4120/): Malicious code in rpc-selffbot (npm) (malicious package)
- [MAL-2025-412](https://insights.sbomify.com/MAL-2025-412/): Malicious code in bookingcom-utils (npm) (malicious package)
- [MAL-2025-41199](https://insights.sbomify.com/MAL-2025-41199/): Malicious code in zulu-lemon-dpbn (npm) (malicious package)
- [MAL-2025-41198](https://insights.sbomify.com/MAL-2025-41198/): Malicious code in zulu-kilo-papaya-rpzkr (npm) (malicious package)
- [MAL-2025-41197](https://insights.sbomify.com/MAL-2025-41197/): Malicious code in zulu-kcw-project (npm) (malicious package)
- [MAL-2025-41196](https://insights.sbomify.com/MAL-2025-41196/): Malicious code in zulu-juliet-vzkv (npm) (malicious package)
- [MAL-2025-41195](https://insights.sbomify.com/MAL-2025-41195/): Malicious code in zulu-india-oxkj (npm) (malicious package)
- [MAL-2025-41194](https://insights.sbomify.com/MAL-2025-41194/): Malicious code in zulu-ib4-project (npm) (malicious package)
- [MAL-2025-41193](https://insights.sbomify.com/MAL-2025-41193/): Malicious code in zulu-hzp-project (npm) (malicious package)
- [MAL-2025-41192](https://insights.sbomify.com/MAL-2025-41192/): Malicious code in zulu-hotel-lima-clmdt (npm) (malicious package)
- [MAL-2025-41191](https://insights.sbomify.com/MAL-2025-41191/): Malicious code in zulu-hio-project (npm) (malicious package)
- [MAL-2025-41190](https://insights.sbomify.com/MAL-2025-41190/): Malicious code in zulu-grape-quince-pawww (npm) (malicious package)
- [MAL-2025-4119](https://insights.sbomify.com/MAL-2025-4119/): Malicious code in rpc-selfbottt (npm) (malicious package)
- [MAL-2025-41189](https://insights.sbomify.com/MAL-2025-41189/): Malicious code in zulu-foxtrot-vtdg (npm) (malicious package)
- [MAL-2025-41188](https://insights.sbomify.com/MAL-2025-41188/): Malicious code in zulu-fig-whiskey-mnrxu (npm) (malicious package)
- [MAL-2025-41187](https://insights.sbomify.com/MAL-2025-41187/): Malicious code in zulu-fig-ugli-jyztv (npm) (malicious package)
- [MAL-2025-41186](https://insights.sbomify.com/MAL-2025-41186/): Malicious code in zulu-elderberry-ngzb (npm) (malicious package)
- [MAL-2025-41185](https://insights.sbomify.com/MAL-2025-41185/): Malicious code in zulu-elderberry-awzq (npm) (malicious package)
- [MAL-2025-41184](https://insights.sbomify.com/MAL-2025-41184/): Malicious code in zulu-delta-raspberry-fusje (npm) (malicious package)
- [MAL-2025-41183](https://insights.sbomify.com/MAL-2025-41183/): Malicious code in zulu-cyh-project (npm) (malicious package)
- [MAL-2025-41182](https://insights.sbomify.com/MAL-2025-41182/): Malicious code in zulu-cherry-tango-qyuzg (npm) (malicious package)
- [MAL-2025-41181](https://insights.sbomify.com/MAL-2025-41181/): Malicious code in zulu-beetroot-yovl (npm) (malicious package)
- [MAL-2025-41180](https://insights.sbomify.com/MAL-2025-41180/): Malicious code in zulu-banana-lemon-bhekq (npm) (malicious package)
- [MAL-2025-4118](https://insights.sbomify.com/MAL-2025-4118/): Malicious code in rpc-selfbot-v10 (npm) (malicious package)
- [MAL-2025-41179](https://insights.sbomify.com/MAL-2025-41179/): Malicious code in zulu-banana-cybl (npm) (malicious package)
- [MAL-2025-41178](https://insights.sbomify.com/MAL-2025-41178/): Malicious code in zulu-alpha-aivw (npm) (malicious package)
- [MAL-2025-41177](https://insights.sbomify.com/MAL-2025-41177/): Malicious code in zulu-a1c-project (npm) (malicious package)
- [MAL-2025-41176](https://insights.sbomify.com/MAL-2025-41176/): Malicious code in zulu-8tp-project (npm) (malicious package)
- [MAL-2025-41175](https://insights.sbomify.com/MAL-2025-41175/): Malicious code in zulu-8nd-project (npm) (malicious package)
- [MAL-2025-41174](https://insights.sbomify.com/MAL-2025-41174/): Malicious code in zulu-7zv-project (npm) (malicious package)
- [MAL-2025-41173](https://insights.sbomify.com/MAL-2025-41173/): Malicious code in zulu-6td-project (npm) (malicious package)
- [MAL-2025-41172](https://insights.sbomify.com/MAL-2025-41172/): Malicious code in zulu-493-project (npm) (malicious package)
- [MAL-2025-41171](https://insights.sbomify.com/MAL-2025-41171/): Malicious code in zulu-3vv-project (npm) (malicious package)
- [MAL-2025-41170](https://insights.sbomify.com/MAL-2025-41170/): Malicious code in zulu-3gn-project (npm) (malicious package)
- [MAL-2025-4117](https://insights.sbomify.com/MAL-2025-4117/): Malicious code in rpc-selfb0t (npm) (malicious package)
- [MAL-2025-41169](https://insights.sbomify.com/MAL-2025-41169/): Malicious code in zul-telurtahu13-breki (npm) (malicious package)
- [MAL-2025-41168](https://insights.sbomify.com/MAL-2025-41168/): Malicious code in zul-tek26-sukiwir (npm) (malicious package)
- [MAL-2025-41167](https://insights.sbomify.com/MAL-2025-41167/): Malicious code in zul-tahutek83-sukiwir (npm) (malicious package)
- [MAL-2025-41166](https://insights.sbomify.com/MAL-2025-41166/): Malicious code in zul-sroto72-kyuki (npm) (malicious package)
- [MAL-2025-41165](https://insights.sbomify.com/MAL-2025-41165/): Malicious code in zul-semur41-breki (npm) (malicious package)
- [MAL-2025-41164](https://insights.sbomify.com/MAL-2025-41164/): Malicious code in zul-sate11-sukiwir (npm) (malicious package)
- [MAL-2025-41163](https://insights.sbomify.com/MAL-2025-41163/): Malicious code in zul-sambel54-sukiwir (npm) (malicious package)
- [MAL-2025-41162](https://insights.sbomify.com/MAL-2025-41162/): Malicious code in zul-peyek60-breki (npm) (malicious package)
- [MAL-2025-41161](https://insights.sbomify.com/MAL-2025-41161/): Malicious code in zul-nasipecel48-breki (npm) (malicious package)
- [MAL-2025-41160](https://insights.sbomify.com/MAL-2025-41160/): Malicious code in zul-nasi97-breki (npm) (malicious package)
- [MAL-2025-4116](https://insights.sbomify.com/MAL-2025-4116/): Malicious code in react-youtube-dom (npm) (malicious package)
- [MAL-2025-41159](https://insights.sbomify.com/MAL-2025-41159/): Malicious code in zul-miemee47-sukiwir (npm) (malicious package)
- [MAL-2025-41158](https://insights.sbomify.com/MAL-2025-41158/): Malicious code in zul-lupis60-breki (npm) (malicious package)
- [MAL-2025-41157](https://insights.sbomify.com/MAL-2025-41157/): Malicious code in zul-lontong91-breki (npm) (malicious package)
- [MAL-2025-41156](https://insights.sbomify.com/MAL-2025-41156/): Malicious code in zul-lodeh20-breki (npm) (malicious package)
- [MAL-2025-41155](https://insights.sbomify.com/MAL-2025-41155/): Malicious code in zul-lepet77-kyuki (npm) (malicious package)
- [MAL-2025-41154](https://insights.sbomify.com/MAL-2025-41154/): Malicious code in zul-kolak35-kyuki (npm) (malicious package)
- [MAL-2025-41153](https://insights.sbomify.com/MAL-2025-41153/): Malicious code in zul-kacang89-breki (npm) (malicious package)
- [MAL-2025-41152](https://insights.sbomify.com/MAL-2025-41152/): Malicious code in zul-jengkol85-breki (npm) (malicious package)
- [MAL-2025-41151](https://insights.sbomify.com/MAL-2025-41151/): Malicious code in zul-bubursumsum59-breki (npm) (malicious package)
- [MAL-2025-41150](https://insights.sbomify.com/MAL-2025-41150/): Malicious code in zul-buburayam69-breki (npm) (malicious package)
- [MAL-2025-4115](https://insights.sbomify.com/MAL-2025-4115/): Malicious code in raydium-sdks (npm) (malicious package)
- [MAL-2025-41149](https://insights.sbomify.com/MAL-2025-41149/): Malicious code in zul-buburayam25-sukiwir (npm) (malicious package)
- [MAL-2025-41148](https://insights.sbomify.com/MAL-2025-41148/): Malicious code in zul-brengkes100-breki (npm) (malicious package)
- [MAL-2025-41147](https://insights.sbomify.com/MAL-2025-41147/): Malicious code in zucchini-zulu-golf-ybxns (npm) (malicious package)
- [MAL-2025-41146](https://insights.sbomify.com/MAL-2025-41146/): Malicious code in zucchini-yy4-project (npm) (malicious package)
- [MAL-2025-41145](https://insights.sbomify.com/MAL-2025-41145/): Malicious code in zucchini-yam-hhjg (npm) (malicious package)
- [MAL-2025-41144](https://insights.sbomify.com/MAL-2025-41144/): Malicious code in zucchini-yam-10zy (npm) (malicious package)
- [MAL-2025-41143](https://insights.sbomify.com/MAL-2025-41143/): Malicious code in zucchini-y5p-project (npm) (malicious package)
- [MAL-2025-41142](https://insights.sbomify.com/MAL-2025-41142/): Malicious code in zucchini-xigua-kxyi (npm) (malicious package)
- [MAL-2025-41141](https://insights.sbomify.com/MAL-2025-41141/): Malicious code in zucchini-xenon-b523 (npm) (malicious package)
- [MAL-2025-41140](https://insights.sbomify.com/MAL-2025-41140/): Malicious code in zucchini-wp6-project (npm) (malicious package)
- [MAL-2025-4114](https://insights.sbomify.com/MAL-2025-4114/): Malicious code in raydium-cpmm-v2 (npm) (malicious package)
- [MAL-2025-41139](https://insights.sbomify.com/MAL-2025-41139/): Malicious code in zucchini-wo3-project (npm) (malicious package)
- [MAL-2025-41138](https://insights.sbomify.com/MAL-2025-41138/): Malicious code in zucchini-whiskey-ymxh (npm) (malicious package)
- [MAL-2025-41137](https://insights.sbomify.com/MAL-2025-41137/): Malicious code in zucchini-watermelon-ooxw (npm) (malicious package)
- [MAL-2025-41136](https://insights.sbomify.com/MAL-2025-41136/): Malicious code in zucchini-watermelon-mango-hnhoo (npm) (malicious package)
- [MAL-2025-41135](https://insights.sbomify.com/MAL-2025-41135/): Malicious code in zucchini-watermelon-cherry-zmnum (npm) (malicious package)
- [MAL-2025-41134](https://insights.sbomify.com/MAL-2025-41134/): Malicious code in zucchini-vsn-project (npm) (malicious package)
- [MAL-2025-41133](https://insights.sbomify.com/MAL-2025-41133/): Malicious code in zucchini-vs3-project (npm) (malicious package)
- [MAL-2025-41132](https://insights.sbomify.com/MAL-2025-41132/): Malicious code in zucchini-victor-xigua-rajix (npm) (malicious package)
- [MAL-2025-41131](https://insights.sbomify.com/MAL-2025-41131/): Malicious code in zucchini-victor-a5ql (npm) (malicious package)
- [MAL-2025-41130](https://insights.sbomify.com/MAL-2025-41130/): Malicious code in zucchini-vanilla-jdxt (npm) (malicious package)
- [MAL-2025-4113](https://insights.sbomify.com/MAL-2025-4113/): Malicious code in raydium-cpmm-v1 (npm) (malicious package)
- [MAL-2025-41129](https://insights.sbomify.com/MAL-2025-41129/): Malicious code in zucchini-uns-project (npm) (malicious package)
- [MAL-2025-41128](https://insights.sbomify.com/MAL-2025-41128/): Malicious code in zucchini-uniform-sierra-fgaip (npm) (malicious package)
- [MAL-2025-41127](https://insights.sbomify.com/MAL-2025-41127/): Malicious code in zucchini-uniform-raspberry-nhmfa (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/656/