# Vulnerabilities published in 2025


- [MAL-2025-41126](https://insights.sbomify.com/MAL-2025-41126/): Malicious code in zucchini-ugli-gwes (npm) (malicious package)
- [MAL-2025-41125](https://insights.sbomify.com/MAL-2025-41125/): Malicious code in zucchini-sierra-papaya-pcivf (npm) (malicious package)
- [MAL-2025-41124](https://insights.sbomify.com/MAL-2025-41124/): Malicious code in zucchini-romeo-papaya-hqhvp (npm) (malicious package)
- [MAL-2025-41123](https://insights.sbomify.com/MAL-2025-41123/): Malicious code in zucchini-romeo-etmr (npm) (malicious package)
- [MAL-2025-41122](https://insights.sbomify.com/MAL-2025-41122/): Malicious code in zucchini-raspberry-ujdx (npm) (malicious package)
- [MAL-2025-41121](https://insights.sbomify.com/MAL-2025-41121/): Malicious code in zucchini-raspberry-oimj (npm) (malicious package)
- [MAL-2025-41120](https://insights.sbomify.com/MAL-2025-41120/): Malicious code in zucchini-quince-grape-xpkuu (npm) (malicious package)
- [MAL-2025-4112](https://insights.sbomify.com/MAL-2025-4112/): Malicious code in pumpswap-sdk (npm) (malicious package)
- [MAL-2025-41119](https://insights.sbomify.com/MAL-2025-41119/): Malicious code in zucchini-papaya-juliet-racim (npm) (malicious package)
- [MAL-2025-41118](https://insights.sbomify.com/MAL-2025-41118/): Malicious code in zucchini-oscar-logx (npm) (malicious package)
- [MAL-2025-41117](https://insights.sbomify.com/MAL-2025-41117/): Malicious code in zucchini-orange-ugli-mhhpt (npm) (malicious package)
- [MAL-2025-41116](https://insights.sbomify.com/MAL-2025-41116/): Malicious code in zucchini-nsv-project (npm) (malicious package)
- [MAL-2025-41115](https://insights.sbomify.com/MAL-2025-41115/): Malicious code in zucchini-lemon-juev (npm) (malicious package)
- [MAL-2025-41114](https://insights.sbomify.com/MAL-2025-41114/): Malicious code in zucchini-kale-7los (npm) (malicious package)
- [MAL-2025-41113](https://insights.sbomify.com/MAL-2025-41113/): Malicious code in zucchini-juliet-xwyo (npm) (malicious package)
- [MAL-2025-41112](https://insights.sbomify.com/MAL-2025-41112/): Malicious code in zucchini-india-elderberry-feook (npm) (malicious package)
- [MAL-2025-41111](https://insights.sbomify.com/MAL-2025-41111/): Malicious code in zucchini-icj-project (npm) (malicious package)
- [MAL-2025-41110](https://insights.sbomify.com/MAL-2025-41110/): Malicious code in zucchini-hotel-yam-zdqrw (npm) (malicious package)
- [MAL-2025-4111](https://insights.sbomify.com/MAL-2025-4111/): Malicious code in pro-article-context (npm) (malicious package)
- [MAL-2025-41109](https://insights.sbomify.com/MAL-2025-41109/): Malicious code in zucchini-hotel-ugli-rhnkb (npm) (malicious package)
- [MAL-2025-41108](https://insights.sbomify.com/MAL-2025-41108/): Malicious code in zucchini-hotel-tqaz (npm) (malicious package)
- [MAL-2025-41107](https://insights.sbomify.com/MAL-2025-41107/): Malicious code in zucchini-honeydew-nqnk (npm) (malicious package)
- [MAL-2025-41106](https://insights.sbomify.com/MAL-2025-41106/): Malicious code in zucchini-gorilla-hpot (npm) (malicious package)
- [MAL-2025-41105](https://insights.sbomify.com/MAL-2025-41105/): Malicious code in zucchini-golf-ewwm (npm) (malicious package)
- [MAL-2025-41104](https://insights.sbomify.com/MAL-2025-41104/): Malicious code in zucchini-foxtrot-yam-jckve (npm) (malicious package)
- [MAL-2025-41103](https://insights.sbomify.com/MAL-2025-41103/): Malicious code in zucchini-elderberry-rmku (npm) (malicious package)
- [MAL-2025-41102](https://insights.sbomify.com/MAL-2025-41102/): Malicious code in zucchini-charlie-qgiw (npm) (malicious package)
- [MAL-2025-41101](https://insights.sbomify.com/MAL-2025-41101/): Malicious code in zucchini-bw2-project (npm) (malicious package)
- [MAL-2025-41100](https://insights.sbomify.com/MAL-2025-41100/): Malicious code in zucchini-btw-project (npm) (malicious package)
- [MAL-2025-4110](https://insights.sbomify.com/MAL-2025-4110/): Malicious code in node-wavehttp (npm) (malicious package)
- [MAL-2025-411](https://insights.sbomify.com/MAL-2025-411/): Malicious code in bookingcom-user (npm) (malicious package)
- [MAL-2025-41099](https://insights.sbomify.com/MAL-2025-41099/): Malicious code in zucchini-bravo-peaj (npm) (malicious package)
- [MAL-2025-41098](https://insights.sbomify.com/MAL-2025-41098/): Malicious code in zucchini-blk-project (npm) (malicious package)
- [MAL-2025-41097](https://insights.sbomify.com/MAL-2025-41097/): Malicious code in zucchini-banana-lspj (npm) (malicious package)
- [MAL-2025-41096](https://insights.sbomify.com/MAL-2025-41096/): Malicious code in zucchini-axi-project (npm) (malicious package)
- [MAL-2025-41095](https://insights.sbomify.com/MAL-2025-41095/): Malicious code in zucchini-apple-orange-bqpzs (npm) (malicious package)
- [MAL-2025-41094](https://insights.sbomify.com/MAL-2025-41094/): Malicious code in zucchini-alpha-jyld (npm) (malicious package)
- [MAL-2025-41093](https://insights.sbomify.com/MAL-2025-41093/): Malicious code in zucchini-5lf-project (npm) (malicious package)
- [MAL-2025-41092](https://insights.sbomify.com/MAL-2025-41092/): Malicious code in zucchini-0q1-project (npm) (malicious package)
- [MAL-2025-41091](https://insights.sbomify.com/MAL-2025-41091/): Malicious code in zucchini-0py-project (npm) (malicious package)
- [MAL-2025-41090](https://insights.sbomify.com/MAL-2025-41090/): Malicious code in ztxt47 (npm) (malicious package)
- [MAL-2025-4109](https://insights.sbomify.com/MAL-2025-4109/): Malicious code in node-express-demo (npm) (malicious package)
- [MAL-2025-41089](https://insights.sbomify.com/MAL-2025-41089/): Malicious code in ztreedev (npm) (malicious package)
- [MAL-2025-41088](https://insights.sbomify.com/MAL-2025-41088/): Malicious code in ztqbirsmukyvklce (npm) (malicious package)
- [MAL-2025-41087](https://insights.sbomify.com/MAL-2025-41087/): Malicious code in ztouch (npm) (malicious package)
- [MAL-2025-41086](https://insights.sbomify.com/MAL-2025-41086/): Malicious code in zteuifglpqjrmnyk (npm) (malicious package)
- [MAL-2025-41085](https://insights.sbomify.com/MAL-2025-41085/): Malicious code in zsyirwqjgxeopbhc (npm) (malicious package)
- [MAL-2025-41084](https://insights.sbomify.com/MAL-2025-41084/): Malicious code in zsunjxagfchbeiwr (npm) (malicious package)
- [MAL-2025-41083](https://insights.sbomify.com/MAL-2025-41083/): Malicious code in zstuxvyckfndwaop (npm) (malicious package)
- [MAL-2025-41082](https://insights.sbomify.com/MAL-2025-41082/): Malicious code in zstudio (npm) (malicious package)
- [MAL-2025-41081](https://insights.sbomify.com/MAL-2025-41081/): Malicious code in zspider (npm) (malicious package)
- [MAL-2025-41080](https://insights.sbomify.com/MAL-2025-41080/): Malicious code in zsnout (npm) (malicious package)
- [MAL-2025-4108](https://insights.sbomify.com/MAL-2025-4108/): Malicious code in node-crypto-helper (npm) (malicious package)
- [MAL-2025-41079](https://insights.sbomify.com/MAL-2025-41079/): Malicious code in zsnapmgr (npm) (malicious package)
- [MAL-2025-41078](https://insights.sbomify.com/MAL-2025-41078/): Malicious code in zsjrepo (npm) (malicious package)
- [MAL-2025-41077](https://insights.sbomify.com/MAL-2025-41077/): Malicious code in zsihdpqngexlfovw (npm) (malicious package)
- [MAL-2025-41076](https://insights.sbomify.com/MAL-2025-41076/): Malicious code in zs-sha3 (npm) (malicious package)
- [MAL-2025-41075](https://insights.sbomify.com/MAL-2025-41075/): Malicious code in zrnowkqmypfcktgs (npm) (malicious package)
- [MAL-2025-41074](https://insights.sbomify.com/MAL-2025-41074/): Malicious code in zrfinjygoeabdvqx (npm) (malicious package)
- [MAL-2025-41073](https://insights.sbomify.com/MAL-2025-41073/): Malicious code in zqxiorpluetacjws (npm) (malicious package)
- [MAL-2025-41072](https://insights.sbomify.com/MAL-2025-41072/): Malicious code in zqjncipomtlkvghk (npm) (malicious package)
- [MAL-2025-41071](https://insights.sbomify.com/MAL-2025-41071/): Malicious code in zpulse (npm) (malicious package)
- [MAL-2025-41070](https://insights.sbomify.com/MAL-2025-41070/): Malicious code in zprklugbxcivahwo (npm) (malicious package)
- [MAL-2025-4107](https://insights.sbomify.com/MAL-2025-4107/): Malicious code in neodium (npm) (malicious package)
- [MAL-2025-41069](https://insights.sbomify.com/MAL-2025-41069/): Malicious code in zpoepg (npm) (malicious package)
- [MAL-2025-41068](https://insights.sbomify.com/MAL-2025-41068/): Malicious code in zpmucxkiysjegola (npm) (malicious package)
- [MAL-2025-41067](https://insights.sbomify.com/MAL-2025-41067/): Malicious code in zpgp (npm) (malicious package)
- [MAL-2025-41066](https://insights.sbomify.com/MAL-2025-41066/): Malicious code in zounds (npm) (malicious package)
- [MAL-2025-41065](https://insights.sbomify.com/MAL-2025-41065/): Malicious code in zosntewxubykrgfh (npm) (malicious package)
- [MAL-2025-41064](https://insights.sbomify.com/MAL-2025-41064/): Malicious code in zorya-web-client (npm) (malicious package)
- [MAL-2025-41063](https://insights.sbomify.com/MAL-2025-41063/): Malicious code in zooplus-react-starter (npm) (malicious package)
- [MAL-2025-41062](https://insights.sbomify.com/MAL-2025-41062/): Malicious code in zoopark (npm) (malicious package)
- [MAL-2025-41061](https://insights.sbomify.com/MAL-2025-41061/): Malicious code in zoomdata-spa-samplemodule (npm) (malicious package)
- [MAL-2025-41060](https://insights.sbomify.com/MAL-2025-41060/): Malicious code in zoomdata-spa-core (npm) (malicious package)
- [MAL-2025-4106](https://insights.sbomify.com/MAL-2025-4106/): Malicious code in mousewhite66666 (npm) (malicious package)
- [MAL-2025-41059](https://insights.sbomify.com/MAL-2025-41059/): Malicious code in zoomdata-core (npm) (malicious package)
- [MAL-2025-41058](https://insights.sbomify.com/MAL-2025-41058/): Malicious code in zoom-app-workshop (npm) (malicious package)
- [MAL-2025-41057](https://insights.sbomify.com/MAL-2025-41057/): Malicious code in zooarchaeology-uglify-js-decoherence-bootes (npm) (malicious package)
- [MAL-2025-41056](https://insights.sbomify.com/MAL-2025-41056/): Malicious code in zooarchaeology-coronalmassejection-development-chalk (npm) (malicious package)
- [MAL-2025-41055](https://insights.sbomify.com/MAL-2025-41055/): Malicious code in zooarchaeology-chalk-apollo-proxima (npm) (malicious package)
- [MAL-2025-41054](https://insights.sbomify.com/MAL-2025-41054/): Malicious code in zoo-frontend-dependencies (npm) (malicious package)
- [MAL-2025-41053](https://insights.sbomify.com/MAL-2025-41053/): Malicious code in zonesblog (npm) (malicious package)
- [MAL-2025-41052](https://insights.sbomify.com/MAL-2025-41052/): Malicious code in zoenew (npm) (malicious package)
- [MAL-2025-41051](https://insights.sbomify.com/MAL-2025-41051/): Malicious code in zodiac_rrvqe_hnh5i_meadow (npm) (malicious package)
- [MAL-2025-41050](https://insights.sbomify.com/MAL-2025-41050/): Malicious code in zodiac_nd9mo_q8afg_jasmine (npm) (malicious package)
- [MAL-2025-4105](https://insights.sbomify.com/MAL-2025-4105/): Malicious code in modules-dmall-discord.js (npm) (malicious package)
- [MAL-2025-41049](https://insights.sbomify.com/MAL-2025-41049/): Malicious code in zodiac_mdc2b_tu3nh_lake (npm) (malicious package)
- [MAL-2025-41048](https://insights.sbomify.com/MAL-2025-41048/): Malicious code in zodiac_l64fy_olw0o_flare (npm) (malicious package)
- [MAL-2025-41047](https://insights.sbomify.com/MAL-2025-41047/): Malicious code in zodiac_hpkx5_yn4q1_dream (npm) (malicious package)
- [MAL-2025-41046](https://insights.sbomify.com/MAL-2025-41046/): Malicious code in zodiac_8yajv_pk0ul_crystal (npm) (malicious package)
- [MAL-2025-41045](https://insights.sbomify.com/MAL-2025-41045/): Malicious code in zodiac_7iwuf_wzij4_night (npm) (malicious package)
- [MAL-2025-41044](https://insights.sbomify.com/MAL-2025-41044/): Malicious code in zodiac-zephyr-joy356-project (npm) (malicious package)
- [MAL-2025-41043](https://insights.sbomify.com/MAL-2025-41043/): Malicious code in zodiac-waterfall-ghm775-project (npm) (malicious package)
- [MAL-2025-41042](https://insights.sbomify.com/MAL-2025-41042/): Malicious code in zodiac-orangutan-mby068-project (npm) (malicious package)
- [MAL-2025-41041](https://insights.sbomify.com/MAL-2025-41041/): Malicious code in zodiac-kale-cuh311-project (npm) (malicious package)
- [MAL-2025-41040](https://insights.sbomify.com/MAL-2025-41040/): Malicious code in zodiac-honeycomb-rlz363-project (npm) (malicious package)
- [MAL-2025-4104](https://insights.sbomify.com/MAL-2025-4104/): Malicious code in module-dmall-discord.js (npm) (malicious package)
- [MAL-2025-41039](https://insights.sbomify.com/MAL-2025-41039/): Malicious code in zngine (npm) (malicious package)
- [MAL-2025-41038](https://insights.sbomify.com/MAL-2025-41038/): Malicious code in zmtokrjbhqixfykn (npm) (malicious package)
- [MAL-2025-41037](https://insights.sbomify.com/MAL-2025-41037/): Malicious code in zmpviewer (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/657/