# Vulnerabilities published in 2025


- [MAL-2025-41036](https://insights.sbomify.com/MAL-2025-41036/): Malicious code in zmobies (npm) (malicious package)
- [MAL-2025-41035](https://insights.sbomify.com/MAL-2025-41035/): Malicious code in zmemail (npm) (malicious package)
- [MAL-2025-41034](https://insights.sbomify.com/MAL-2025-41034/): Malicious code in zmarta-components (npm) (malicious package)
- [MAL-2025-41033](https://insights.sbomify.com/MAL-2025-41033/): Malicious code in zmarta-admin-components (npm) (malicious package)
- [MAL-2025-41032](https://insights.sbomify.com/MAL-2025-41032/): Malicious code in zljtest (npm) (malicious package)
- [MAL-2025-41031](https://insights.sbomify.com/MAL-2025-41031/): Malicious code in zlecenie (npm) (malicious package)
- [MAL-2025-41030](https://insights.sbomify.com/MAL-2025-41030/): Malicious code in zkoqstfknacpulbh (npm) (malicious package)
- [MAL-2025-4103](https://insights.sbomify.com/MAL-2025-4103/): Malicious code in migrate-lol-account (npm) (malicious package)
- [MAL-2025-41029](https://insights.sbomify.com/MAL-2025-41029/): Malicious code in zklkypwetaxodmbv (npm) (malicious package)
- [MAL-2025-41028](https://insights.sbomify.com/MAL-2025-41028/): Malicious code in zkcjvfnlqgbykpur (npm) (malicious package)
- [MAL-2025-41027](https://insights.sbomify.com/MAL-2025-41027/): Malicious code in zkbhxdopwgqsiatc (npm) (malicious package)
- [MAL-2025-41026](https://insights.sbomify.com/MAL-2025-41026/): Malicious code in zkatter (npm) (malicious package)
- [MAL-2025-41025](https://insights.sbomify.com/MAL-2025-41025/): Malicious code in zjfyetwamqpivrug (npm) (malicious package)
- [MAL-2025-41024](https://insights.sbomify.com/MAL-2025-41024/): Malicious code in zjclskkmenwrpodg (npm) (malicious package)
- [MAL-2025-41023](https://insights.sbomify.com/MAL-2025-41023/): Malicious code in zjcdbivmopyuawrf (npm) (malicious package)
- [MAL-2025-41022](https://insights.sbomify.com/MAL-2025-41022/): Malicious code in zippity (npm) (malicious package)
- [MAL-2025-41021](https://insights.sbomify.com/MAL-2025-41021/): Malicious code in zipmetro (npm) (malicious package)
- [MAL-2025-41020](https://insights.sbomify.com/MAL-2025-41020/): Malicious code in zipkey-dashboard (npm) (malicious package)
- [MAL-2025-4102](https://insights.sbomify.com/MAL-2025-4102/): Malicious code in loveisgood (npm) (malicious package)
- [MAL-2025-41019](https://insights.sbomify.com/MAL-2025-41019/): Malicious code in zipfor (npm) (malicious package)
- [MAL-2025-41018](https://insights.sbomify.com/MAL-2025-41018/): Malicious code in zipconv (npm) (malicious package)
- [MAL-2025-41017](https://insights.sbomify.com/MAL-2025-41017/): Malicious code in ziparama (npm) (malicious package)
- [MAL-2025-41016](https://insights.sbomify.com/MAL-2025-41016/): Malicious code in zip-mp3-a-lbum-do-wnload-new-vitalogy-1-tz46f-yhygln (npm) (malicious package)
- [MAL-2025-41015](https://insights.sbomify.com/MAL-2025-41015/): Malicious code in zip-mp3-a-lbum-do-wnload-new-blue-lines-qg6v3-wsgxhr (npm) (malicious package)
- [MAL-2025-41014](https://insights.sbomify.com/MAL-2025-41014/): Malicious code in zip-mp3-a-lbum-do-wnload-new-82651-raskit-dbljd-cwdxrm (npm) (malicious package)
- [MAL-2025-41013](https://insights.sbomify.com/MAL-2025-41013/): Malicious code in zip-mp3-a-lbum-do-wnload-new-75748-toy-love-ohdfl-whbyww (npm) (malicious package)
- [MAL-2025-41012](https://insights.sbomify.com/MAL-2025-41012/): Malicious code in zip-mp3-a-lbum-do-wnload-new-73565-silver-sun-8ybbv-wpswzn (npm) (malicious package)
- [MAL-2025-41011](https://insights.sbomify.com/MAL-2025-41011/): Malicious code in zip-mp3-a-lbum-do-wnload-new-70733-life-love-flesh-blood-txrj2-busfbz (npm) (malicious package)
- [MAL-2025-41010](https://insights.sbomify.com/MAL-2025-41010/): Malicious code in zip-mp3-a-lbum-do-wnload-new-488186-gulp-o3tds-pctzbw (npm) (malicious package)
- [MAL-2025-4101](https://insights.sbomify.com/MAL-2025-4101/): Malicious code in loveisbad (npm) (malicious package)
- [MAL-2025-41009](https://insights.sbomify.com/MAL-2025-41009/): Malicious code in zip-mp3-a-lbum-do-wnload-new-482338-deceivers-0nx6u-qtwkft (npm) (malicious package)
- [MAL-2025-41008](https://insights.sbomify.com/MAL-2025-41008/): Malicious code in zip-mp3-a-lbum-do-wnload-new-32387-the-shadow-of-an-empire-qa3z4-odvrpt (npm) (malicious package)
- [MAL-2025-41007](https://insights.sbomify.com/MAL-2025-41007/): Malicious code in zip-mp3-a-lbum-do-wnload-new-31841-my-melody-4etja-ihiwfy (npm) (malicious package)
- [MAL-2025-41006](https://insights.sbomify.com/MAL-2025-41006/): Malicious code in zip-mp3-a-lbum-do-wnload-new-30064-parable-of-arable-land-qdx68-yqscwl (npm) (malicious package)
- [MAL-2025-41005](https://insights.sbomify.com/MAL-2025-41005/): Malicious code in zip-mp3-a-lbum-do-wnload-new-261840-agita-cdf7d-jovypl (npm) (malicious package)
- [MAL-2025-41004](https://insights.sbomify.com/MAL-2025-41004/): Malicious code in zip-mp3-a-lbum-do-wnload-new-25371-a-long-hot-summer-xculb-dlmjir (npm) (malicious package)
- [MAL-2025-41003](https://insights.sbomify.com/MAL-2025-41003/): Malicious code in zip-mp3-a-lbum-do-wnload-new-24431-scorpio-rising-n2jox-rfxhqe (npm) (malicious package)
- [MAL-2025-41002](https://insights.sbomify.com/MAL-2025-41002/): Malicious code in zip-mp3-a-lbum-do-wnload-new-231192-punisher-xzwqi-aaagvn (npm) (malicious package)
- [MAL-2025-41001](https://insights.sbomify.com/MAL-2025-41001/): Malicious code in zip-mp3-a-lbum-do-wnload-new-2017-68384-music-to-draw-to-satellite-6dqyd-obztmr (npm) (malicious package)
- [MAL-2025-41000](https://insights.sbomify.com/MAL-2025-41000/): Malicious code in zip-mp3-a-lbum-do-wnload-new-196087-migration-stories-uzynv-popfmq (npm) (malicious package)
- [MAL-2025-4100](https://insights.sbomify.com/MAL-2025-4100/): Malicious code in loveisalie (npm) (malicious package)
- [MAL-2025-410](https://insights.sbomify.com/MAL-2025-410/): Malicious code in bookingcom-tools (npm) (malicious package)
- [MAL-2025-41](https://insights.sbomify.com/MAL-2025-41/): Malicious code in solana-transaction-toolkit (npm) (malicious package)
- [MAL-2025-40999](https://insights.sbomify.com/MAL-2025-40999/): Malicious code in zip-mp3-a-lbum-do-wnload-new-10692-xxxx-kh2rm-pfurnp (npm) (malicious package)
- [MAL-2025-40998](https://insights.sbomify.com/MAL-2025-40998/): Malicious code in zionapp (npm) (malicious package)
- [MAL-2025-40997](https://insights.sbomify.com/MAL-2025-40997/): Malicious code in zintutest (npm) (malicious package)
- [MAL-2025-40996](https://insights.sbomify.com/MAL-2025-40996/): Malicious code in zinnia_y1ogc_uiuw5_firefly (npm) (malicious package)
- [MAL-2025-40995](https://insights.sbomify.com/MAL-2025-40995/): Malicious code in zinnia_tsnvi_7sgw8_quasar (npm) (malicious package)
- [MAL-2025-40994](https://insights.sbomify.com/MAL-2025-40994/): Malicious code in zinnia_qxoyr_y0hwo_jasmine (npm) (malicious package)
- [MAL-2025-40993](https://insights.sbomify.com/MAL-2025-40993/): Malicious code in zinnia_hobs6_weef6_jungle (npm) (malicious package)
- [MAL-2025-40992](https://insights.sbomify.com/MAL-2025-40992/): Malicious code in zinnia_ewxcy_whjjp_illusion (npm) (malicious package)
- [MAL-2025-40991](https://insights.sbomify.com/MAL-2025-40991/): Malicious code in zinnia_9kjzk_1b9ec_raven (npm) (malicious package)
- [MAL-2025-40990](https://insights.sbomify.com/MAL-2025-40990/): Malicious code in zimtools (npm) (malicious package)
- [MAL-2025-4099](https://insights.sbomify.com/MAL-2025-4099/): Malicious code in lolnews (npm) (malicious package)
- [MAL-2025-40989](https://insights.sbomify.com/MAL-2025-40989/): Malicious code in zimclick (npm) (malicious package)
- [MAL-2025-40988](https://insights.sbomify.com/MAL-2025-40988/): Malicious code in ziggurat-whiskey-vv1n (npm) (malicious package)
- [MAL-2025-40987](https://insights.sbomify.com/MAL-2025-40987/): Malicious code in ziggurat-underpass-cefw (npm) (malicious package)
- [MAL-2025-40986](https://insights.sbomify.com/MAL-2025-40986/): Malicious code in ziggurat-juliet-pmct (npm) (malicious package)
- [MAL-2025-40985](https://insights.sbomify.com/MAL-2025-40985/): Malicious code in ziggurat-heliosphere-gjhl (npm) (malicious package)
- [MAL-2025-40984](https://insights.sbomify.com/MAL-2025-40984/): Malicious code in ziggurat-drone-stuh (npm) (malicious package)
- [MAL-2025-40983](https://insights.sbomify.com/MAL-2025-40983/): Malicious code in ziggurat-castle-zxpd (npm) (malicious package)
- [MAL-2025-40982](https://insights.sbomify.com/MAL-2025-40982/): Malicious code in ziggurat-car-sgp9 (npm) (malicious package)
- [MAL-2025-40981](https://insights.sbomify.com/MAL-2025-40981/): Malicious code in zhupeng (npm) (malicious package)
- [MAL-2025-40980](https://insights.sbomify.com/MAL-2025-40980/): Malicious code in zhujiu-lunziwei-shang (npm) (malicious package)
- [MAL-2025-4098](https://insights.sbomify.com/MAL-2025-4098/): Malicious code in lol-rp-raffle (npm) (malicious package)
- [MAL-2025-40979](https://insights.sbomify.com/MAL-2025-40979/): Malicious code in zhuanzhedian (npm) (malicious package)
- [MAL-2025-40978](https://insights.sbomify.com/MAL-2025-40978/): Malicious code in zhounayu-shiyong-yinpan-qimen (npm) (malicious package)
- [MAL-2025-40977](https://insights.sbomify.com/MAL-2025-40977/): Malicious code in zhongzhoupai-ziwei-doushu-shenzao-jiangyi-shang (npm) (malicious package)
- [MAL-2025-40976](https://insights.sbomify.com/MAL-2025-40976/): Malicious code in zhongzhoupai-ziwei-doushu-chuji-jiangyi (npm) (malicious package)
- [MAL-2025-40975](https://insights.sbomify.com/MAL-2025-40975/): Malicious code in zhizhe-leshui (npm) (malicious package)
- [MAL-2025-40974](https://insights.sbomify.com/MAL-2025-40974/): Malicious code in zhimaoyi (npm) (malicious package)
- [MAL-2025-40973](https://insights.sbomify.com/MAL-2025-40973/): Malicious code in zhihu-scaffold (npm) (malicious package)
- [MAL-2025-40972](https://insights.sbomify.com/MAL-2025-40972/): Malicious code in zhalin (npm) (malicious package)
- [MAL-2025-40971](https://insights.sbomify.com/MAL-2025-40971/): Malicious code in zgpg (npm) (malicious package)
- [MAL-2025-40970](https://insights.sbomify.com/MAL-2025-40970/): Malicious code in zgmdwnkqvlorjeuh (npm) (malicious package)
- [MAL-2025-4097](https://insights.sbomify.com/MAL-2025-4097/): Malicious code in lol-project-2017 (npm) (malicious package)
- [MAL-2025-40969](https://insights.sbomify.com/MAL-2025-40969/): Malicious code in zg-rshare (npm) (malicious package)
- [MAL-2025-40968](https://insights.sbomify.com/MAL-2025-40968/): Malicious code in zg-rentals (npm) (malicious package)
- [MAL-2025-40967](https://insights.sbomify.com/MAL-2025-40967/): Malicious code in zfsdump (npm) (malicious package)
- [MAL-2025-40966](https://insights.sbomify.com/MAL-2025-40966/): Malicious code in zeussql (npm) (malicious package)
- [MAL-2025-40965](https://insights.sbomify.com/MAL-2025-40965/): Malicious code in zeuscart (npm) (malicious package)
- [MAL-2025-40964](https://insights.sbomify.com/MAL-2025-40964/): Malicious code in zetruc (npm) (malicious package)
- [MAL-2025-40963](https://insights.sbomify.com/MAL-2025-40963/): Malicious code in zetafibo (npm) (malicious package)
- [MAL-2025-40962](https://insights.sbomify.com/MAL-2025-40962/): Malicious code in zeta-uglify-serialize-finally-gamma (npm) (malicious package)
- [MAL-2025-40961](https://insights.sbomify.com/MAL-2025-40961/): Malicious code in zeta-node-alpha-link-reject (npm) (malicious package)
- [MAL-2025-40960](https://insights.sbomify.com/MAL-2025-40960/): Malicious code in zeta-fire-throw-dog-encode (npm) (malicious package)
- [MAL-2025-4096](https://insights.sbomify.com/MAL-2025-4096/): Malicious code in lol-ninegacha (npm) (malicious package)
- [MAL-2025-40959](https://insights.sbomify.com/MAL-2025-40959/): Malicious code in zestcoin (npm) (malicious package)
- [MAL-2025-40958](https://insights.sbomify.com/MAL-2025-40958/): Malicious code in zest-yurt-v21j (npm) (malicious package)
- [MAL-2025-40957](https://insights.sbomify.com/MAL-2025-40957/): Malicious code in zest-volcano-nclk (npm) (malicious package)
- [MAL-2025-40956](https://insights.sbomify.com/MAL-2025-40956/): Malicious code in zest-gorilla-x1gi (npm) (malicious package)
- [MAL-2025-40955](https://insights.sbomify.com/MAL-2025-40955/): Malicious code in zest-carrot-sco5 (npm) (malicious package)
- [MAL-2025-40954](https://insights.sbomify.com/MAL-2025-40954/): Malicious code in zero-simulate-rain-monitor-book (npm) (malicious package)
- [MAL-2025-40953](https://insights.sbomify.com/MAL-2025-40953/): Malicious code in zero-secure-big-user-transpile (npm) (malicious package)
- [MAL-2025-40952](https://insights.sbomify.com/MAL-2025-40952/): Malicious code in zero-report-benchmark-pi-scale (npm) (malicious package)
- [MAL-2025-40951](https://insights.sbomify.com/MAL-2025-40951/): Malicious code in zero-old-static-string-daemon (npm) (malicious package)
- [MAL-2025-40950](https://insights.sbomify.com/MAL-2025-40950/): Malicious code in zero-hot-long-simple-integer (npm) (malicious package)
- [MAL-2025-4095](https://insights.sbomify.com/MAL-2025-4095/): Malicious code in lol-lux-shopping-mall (npm) (malicious package)
- [MAL-2025-40949](https://insights.sbomify.com/MAL-2025-40949/): Malicious code in zergio (npm) (malicious package)
- [MAL-2025-40948](https://insights.sbomify.com/MAL-2025-40948/): Malicious code in zerber (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/658/