# Vulnerabilities published in 2025 - [MAL-2025-40947](https://insights.sbomify.com/MAL-2025-40947/): Malicious code in zeppelin-zenith-zsx845-project (npm) (malicious package) - [MAL-2025-40946](https://insights.sbomify.com/MAL-2025-40946/): Malicious code in zeppelin-zenith-apn318-project (npm) (malicious package) - [MAL-2025-40945](https://insights.sbomify.com/MAL-2025-40945/): Malicious code in zeppelin-xylophone-i2vr (npm) (malicious package) - [MAL-2025-40944](https://insights.sbomify.com/MAL-2025-40944/): Malicious code in zeppelin-xerophyte-8cxj (npm) (malicious package) - [MAL-2025-40943](https://insights.sbomify.com/MAL-2025-40943/): Malicious code in zeppelin-xenon-jix079-project (npm) (malicious package) - [MAL-2025-40942](https://insights.sbomify.com/MAL-2025-40942/): Malicious code in zeppelin-xenon-ewss (npm) (malicious package) - [MAL-2025-40941](https://insights.sbomify.com/MAL-2025-40941/): Malicious code in zeppelin-volcano-mhe157-project (npm) (malicious package) - [MAL-2025-40940](https://insights.sbomify.com/MAL-2025-40940/): Malicious code in zeppelin-underpass-dzsc (npm) (malicious package) - [MAL-2025-4094](https://insights.sbomify.com/MAL-2025-4094/): Malicious code in lock-api (npm) (malicious package) - [MAL-2025-40939](https://insights.sbomify.com/MAL-2025-40939/): Malicious code in zeppelin-quill-gho636-project (npm) (malicious package) - [MAL-2025-40938](https://insights.sbomify.com/MAL-2025-40938/): Malicious code in zeppelin-pebble-tfb084-project (npm) (malicious package) - [MAL-2025-40937](https://insights.sbomify.com/MAL-2025-40937/): Malicious code in zeppelin-nymph-wpa677-project (npm) (malicious package) - [MAL-2025-40936](https://insights.sbomify.com/MAL-2025-40936/): Malicious code in zeppelin-nymph-bfy220-project (npm) (malicious package) - [MAL-2025-40935](https://insights.sbomify.com/MAL-2025-40935/): Malicious code in zeppelin-kiwi-wnn800-project (npm) (malicious package) - [MAL-2025-40934](https://insights.sbomify.com/MAL-2025-40934/): Malicious code in zeppelin-juniper-1e1m (npm) (malicious package) - [MAL-2025-40933](https://insights.sbomify.com/MAL-2025-40933/): Malicious code in zeppelin-jacket-pci332-project (npm) (malicious package) - [MAL-2025-40932](https://insights.sbomify.com/MAL-2025-40932/): Malicious code in zeppelin-jacket-kel322-project (npm) (malicious package) - [MAL-2025-40931](https://insights.sbomify.com/MAL-2025-40931/): Malicious code in zeppelin-island-cob464-project (npm) (malicious package) - [MAL-2025-40930](https://insights.sbomify.com/MAL-2025-40930/): Malicious code in zeppelin-igloo-yzl984-project (npm) (malicious package) - [MAL-2025-4093](https://insights.sbomify.com/MAL-2025-4093/): Malicious code in keypair-utilsee (npm) (malicious package) - [MAL-2025-40929](https://insights.sbomify.com/MAL-2025-40929/): Malicious code in zeppelin-dragon-iuz288-project (npm) (malicious package) - [MAL-2025-40928](https://insights.sbomify.com/MAL-2025-40928/): Malicious code in zephyr_zwow1_yb60a_driftwood (npm) (malicious package) - [MAL-2025-40927](https://insights.sbomify.com/MAL-2025-40927/): Malicious code in zephyr_up67l_u4nhw_thunder (npm) (malicious package) - [MAL-2025-40926](https://insights.sbomify.com/MAL-2025-40926/): Malicious code in zephyr_rujq7_bgmxt_pulse (npm) (malicious package) - [MAL-2025-40925](https://insights.sbomify.com/MAL-2025-40925/): Malicious code in zephyr_rkaut_vp3da_pulse (npm) (malicious package) - [MAL-2025-40924](https://insights.sbomify.com/MAL-2025-40924/): Malicious code in zephyr_rcyzt_m1htq_solstice (npm) (malicious package) - [MAL-2025-40923](https://insights.sbomify.com/MAL-2025-40923/): Malicious code in zephyr_rcdso_g3joj_glow (npm) (malicious package) - [MAL-2025-40922](https://insights.sbomify.com/MAL-2025-40922/): Malicious code in zephyr_7bmed_08dgj_bramble (npm) (malicious package) - [MAL-2025-40921](https://insights.sbomify.com/MAL-2025-40921/): Malicious code in zephyr_5m9t9_qyzkf_plume (npm) (malicious package) - [MAL-2025-40920](https://insights.sbomify.com/MAL-2025-40920/): Malicious code in zephyr_2jlfx_jkovr_pinnacle (npm) (malicious package) - [MAL-2025-4092](https://insights.sbomify.com/MAL-2025-4092/): Malicious code in keypair-encrypt-utils (npm) (malicious package) - [MAL-2025-40919](https://insights.sbomify.com/MAL-2025-40919/): Malicious code in zephyr-zodiac-naq263-project (npm) (malicious package) - [MAL-2025-40918](https://insights.sbomify.com/MAL-2025-40918/): Malicious code in zephyr-zji9o-budor-star-project (npm) (malicious package) - [MAL-2025-40917](https://insights.sbomify.com/MAL-2025-40917/): Malicious code in zephyr-yeti-lmg157-project (npm) (malicious package) - [MAL-2025-40916](https://insights.sbomify.com/MAL-2025-40916/): Malicious code in zephyr-xwxn6-jklof-wave-project (npm) (malicious package) - [MAL-2025-40915](https://insights.sbomify.com/MAL-2025-40915/): Malicious code in zephyr-xenon-fvf058-project (npm) (malicious package) - [MAL-2025-40914](https://insights.sbomify.com/MAL-2025-40914/): Malicious code in zephyr-xatnk-4f8lp-terra-project (npm) (malicious package) - [MAL-2025-40913](https://insights.sbomify.com/MAL-2025-40913/): Malicious code in zephyr-violet-jfd724-project (npm) (malicious package) - [MAL-2025-40912](https://insights.sbomify.com/MAL-2025-40912/): Malicious code in zephyr-uranium-pyn249-project (npm) (malicious package) - [MAL-2025-40911](https://insights.sbomify.com/MAL-2025-40911/): Malicious code in zephyr-tender-tnj719-project (npm) (malicious package) - [MAL-2025-40910](https://insights.sbomify.com/MAL-2025-40910/): Malicious code in zephyr-t3btm-1dwyw-drift-project (npm) (malicious package) - [MAL-2025-4091](https://insights.sbomify.com/MAL-2025-4091/): Malicious code in karansinghshergill (npm) (malicious package) - [MAL-2025-40909](https://insights.sbomify.com/MAL-2025-40909/): Malicious code in zephyr-pb360-2vood-celestial-project (npm) (malicious package) - [MAL-2025-40908](https://insights.sbomify.com/MAL-2025-40908/): Malicious code in zephyr-nodemon-comet-lepton (npm) (malicious package) - [MAL-2025-40907](https://insights.sbomify.com/MAL-2025-40907/): Malicious code in zephyr-nebula-cbi154-project (npm) (malicious package) - [MAL-2025-40906](https://insights.sbomify.com/MAL-2025-40906/): Malicious code in zephyr-lw4kt-z5two-boulder-project (npm) (malicious package) - [MAL-2025-40905](https://insights.sbomify.com/MAL-2025-40905/): Malicious code in zephyr-kb35p-rjg59-yeti-project (npm) (malicious package) - [MAL-2025-40904](https://insights.sbomify.com/MAL-2025-40904/): Malicious code in zephyr-infinity-vya854-project (npm) (malicious package) - [MAL-2025-40903](https://insights.sbomify.com/MAL-2025-40903/): Malicious code in zephyr-grrtu-x7yy8-blossom-project (npm) (malicious package) - [MAL-2025-40902](https://insights.sbomify.com/MAL-2025-40902/): Malicious code in zephyr-graviton-csv-bootstrap (npm) (malicious package) - [MAL-2025-40901](https://insights.sbomify.com/MAL-2025-40901/): Malicious code in zephyr-fox-oya896-project (npm) (malicious package) - [MAL-2025-40900](https://insights.sbomify.com/MAL-2025-40900/): Malicious code in zephyr-evergreen-fnh566-project (npm) (malicious package) - [MAL-2025-4090](https://insights.sbomify.com/MAL-2025-4090/): Malicious code in iterationplan (npm) (malicious package) - [MAL-2025-409](https://insights.sbomify.com/MAL-2025-409/): Malicious code in bookingcom-tests (npm) (malicious package) - [MAL-2025-40899](https://insights.sbomify.com/MAL-2025-40899/): Malicious code in zephyr-epigenetics-kuiperbelt-pulsar (npm) (malicious package) - [MAL-2025-40898](https://insights.sbomify.com/MAL-2025-40898/): Malicious code in zephyr-doa40-h7phj-harp-project (npm) (malicious package) - [MAL-2025-40897](https://insights.sbomify.com/MAL-2025-40897/): Malicious code in zephyr-db4io-afhh2-zenith-project (npm) (malicious package) - [MAL-2025-40896](https://insights.sbomify.com/MAL-2025-40896/): Malicious code in zephyr-cascade-ytv880-project (npm) (malicious package) - [MAL-2025-40895](https://insights.sbomify.com/MAL-2025-40895/): Malicious code in zephyr-brook-ftc500-project (npm) (malicious package) - [MAL-2025-40894](https://insights.sbomify.com/MAL-2025-40894/): Malicious code in zephyr-blossom-iia181-project (npm) (malicious package) - [MAL-2025-40893](https://insights.sbomify.com/MAL-2025-40893/): Malicious code in zephyr-9s2tr-65tu8-spark-project (npm) (malicious package) - [MAL-2025-40892](https://insights.sbomify.com/MAL-2025-40892/): Malicious code in zephyr-65vvz-2wfda-comet-project (npm) (malicious package) - [MAL-2025-40891](https://insights.sbomify.com/MAL-2025-40891/): Malicious code in zephyr-1rbqy-a0b5d-indigo-project (npm) (malicious package) - [MAL-2025-40890](https://insights.sbomify.com/MAL-2025-40890/): Malicious code in zephyr-0fin7-q1jhw-twilight-project (npm) (malicious package) - [MAL-2025-4089](https://insights.sbomify.com/MAL-2025-4089/): Malicious code in human-readable-time-formatter (npm) (malicious package) - [MAL-2025-40889](https://insights.sbomify.com/MAL-2025-40889/): Malicious code in zephcms (npm) (malicious package) - [MAL-2025-40888](https://insights.sbomify.com/MAL-2025-40888/): Malicious code in zenzies (npm) (malicious package) - [MAL-2025-40887](https://insights.sbomify.com/MAL-2025-40887/): Malicious code in zenvjs (npm) (malicious package) - [MAL-2025-40886](https://insights.sbomify.com/MAL-2025-40886/): Malicious code in zensharp (npm) (malicious package) - [MAL-2025-40885](https://insights.sbomify.com/MAL-2025-40885/): Malicious code in zenobia-vortex-uranology-outercore (npm) (malicious package) - [MAL-2025-40884](https://insights.sbomify.com/MAL-2025-40884/): Malicious code in zenobia-terraforming-glaciology-parallax (npm) (malicious package) - [MAL-2025-40883](https://insights.sbomify.com/MAL-2025-40883/): Malicious code in zenobia-solis-aurora-gatsby (npm) (malicious package) - [MAL-2025-40882](https://insights.sbomify.com/MAL-2025-40882/): Malicious code in zenobia-saturnology-antares-apex (npm) (malicious package) - [MAL-2025-40881](https://insights.sbomify.com/MAL-2025-40881/): Malicious code in zenobia-regulus-non-blocking-start (npm) (malicious package) - [MAL-2025-40880](https://insights.sbomify.com/MAL-2025-40880/): Malicious code in zenobia-panspermia-koa-standard (npm) (malicious package) - [MAL-2025-4088](https://insights.sbomify.com/MAL-2025-4088/): Malicious code in heaveho (npm) (malicious package) - [MAL-2025-40879](https://insights.sbomify.com/MAL-2025-40879/): Malicious code in zenith_ui3nw_r4z69_nectar (npm) (malicious package) - [MAL-2025-40878](https://insights.sbomify.com/MAL-2025-40878/): Malicious code in zenith_tznpw_xixa7_zinnia (npm) (malicious package) - [MAL-2025-40877](https://insights.sbomify.com/MAL-2025-40877/): Malicious code in zenith_t6n7e_pbumu_aroma (npm) (malicious package) - [MAL-2025-40876](https://insights.sbomify.com/MAL-2025-40876/): Malicious code in zenith_ph9bc_e4zjs_zinnia (npm) (malicious package) - [MAL-2025-40875](https://insights.sbomify.com/MAL-2025-40875/): Malicious code in zenith_jjpqq_93lmi_utopia (npm) (malicious package) - [MAL-2025-40874](https://insights.sbomify.com/MAL-2025-40874/): Malicious code in zenith_b19cx_fhua2_fountain (npm) (malicious package) - [MAL-2025-40873](https://insights.sbomify.com/MAL-2025-40873/): Malicious code in zenith_awgv0_1uzru_sapphire (npm) (malicious package) - [MAL-2025-40872](https://insights.sbomify.com/MAL-2025-40872/): Malicious code in zenith_5bvxn_ug96c_lake (npm) (malicious package) - [MAL-2025-40871](https://insights.sbomify.com/MAL-2025-40871/): Malicious code in zenith-zucchini-0q7p (npm) (malicious package) - [MAL-2025-40870](https://insights.sbomify.com/MAL-2025-40870/): Malicious code in zenith-zeppelin-ctv487-project (npm) (malicious package) - [MAL-2025-4087](https://insights.sbomify.com/MAL-2025-4087/): Malicious code in happy-dl (npm) (malicious package) - [MAL-2025-40869](https://insights.sbomify.com/MAL-2025-40869/): Malicious code in zenith-zeppelin-aavz (npm) (malicious package) - [MAL-2025-40868](https://insights.sbomify.com/MAL-2025-40868/): Malicious code in zenith-zebra-eqp064-project (npm) (malicious package) - [MAL-2025-40867](https://insights.sbomify.com/MAL-2025-40867/): Malicious code in zenith-yacht-mtz798-project (npm) (malicious package) - [MAL-2025-40866](https://insights.sbomify.com/MAL-2025-40866/): Malicious code in zenith-whale-tfr763-project (npm) (malicious package) - [MAL-2025-40865](https://insights.sbomify.com/MAL-2025-40865/): Malicious code in zenith-victor-x49y (npm) (malicious package) - [MAL-2025-40864](https://insights.sbomify.com/MAL-2025-40864/): Malicious code in zenith-uranium-thw374-project (npm) (malicious package) - [MAL-2025-40863](https://insights.sbomify.com/MAL-2025-40863/): Malicious code in zenith-uranium-thm243-project (npm) (malicious package) - [MAL-2025-40862](https://insights.sbomify.com/MAL-2025-40862/): Malicious code in zenith-unicorn-xnd295-project (npm) (malicious package) - [MAL-2025-40861](https://insights.sbomify.com/MAL-2025-40861/): Malicious code in zenith-umbrella-fbo692-project (npm) (malicious package) - [MAL-2025-40860](https://insights.sbomify.com/MAL-2025-40860/): Malicious code in zenith-umbrella-2bt2 (npm) (malicious package) - [MAL-2025-4086](https://insights.sbomify.com/MAL-2025-4086/): Malicious code in graphorithm (npm) (malicious package) - [MAL-2025-40859](https://insights.sbomify.com/MAL-2025-40859/): Malicious code in zenith-tundra-wto221-project (npm) (malicious package) - [MAL-2025-40858](https://insights.sbomify.com/MAL-2025-40858/): Malicious code in zenith-teak-j8f2 (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/659/