# Vulnerabilities published in 2025 - [MAL-2025-40857](https://insights.sbomify.com/MAL-2025-40857/): Malicious code in zenith-swan-drg728-project (npm) (malicious package) - [MAL-2025-40856](https://insights.sbomify.com/MAL-2025-40856/): Malicious code in zenith-su1a0-lxyzf-ivy-project (npm) (malicious package) - [MAL-2025-40855](https://insights.sbomify.com/MAL-2025-40855/): Malicious code in zenith-spinach-4cbo (npm) (malicious package) - [MAL-2025-40854](https://insights.sbomify.com/MAL-2025-40854/): Malicious code in zenith-sapphire-zdq300-project (npm) (malicious package) - [MAL-2025-40853](https://insights.sbomify.com/MAL-2025-40853/): Malicious code in zenith-ripple-wvk687-project (npm) (malicious package) - [MAL-2025-40852](https://insights.sbomify.com/MAL-2025-40852/): Malicious code in zenith-reef-adn445-project (npm) (malicious package) - [MAL-2025-40851](https://insights.sbomify.com/MAL-2025-40851/): Malicious code in zenith-r068q-9ukhr-fjord-project (npm) (malicious package) - [MAL-2025-40850](https://insights.sbomify.com/MAL-2025-40850/): Malicious code in zenith-quilt-beq800-project (npm) (malicious package) - [MAL-2025-4085](https://insights.sbomify.com/MAL-2025-4085/): Malicious code in grammy-tool (npm) (malicious package) - [MAL-2025-40849](https://insights.sbomify.com/MAL-2025-40849/): Malicious code in zenith-quasar-yiz573-project (npm) (malicious package) - [MAL-2025-40848](https://insights.sbomify.com/MAL-2025-40848/): Malicious code in zenith-quasar-ewv014-project (npm) (malicious package) - [MAL-2025-40847](https://insights.sbomify.com/MAL-2025-40847/): Malicious code in zenith-quasar-ebc018-project (npm) (malicious package) - [MAL-2025-40846](https://insights.sbomify.com/MAL-2025-40846/): Malicious code in zenith-promise-jovian-solarnebula (npm) (malicious package) - [MAL-2025-40845](https://insights.sbomify.com/MAL-2025-40845/): Malicious code in zenith-peony-zkw736-project (npm) (malicious package) - [MAL-2025-40844](https://insights.sbomify.com/MAL-2025-40844/): Malicious code in zenith-orangutan-ymi707-project (npm) (malicious package) - [MAL-2025-40843](https://insights.sbomify.com/MAL-2025-40843/): Malicious code in zenith-orangutan-ipu325-project (npm) (malicious package) - [MAL-2025-40842](https://insights.sbomify.com/MAL-2025-40842/): Malicious code in zenith-opaline-nga340-project (npm) (malicious package) - [MAL-2025-40841](https://insights.sbomify.com/MAL-2025-40841/): Malicious code in zenith-oiv1a-xxwg6-iris-project (npm) (malicious package) - [MAL-2025-40840](https://insights.sbomify.com/MAL-2025-40840/): Malicious code in zenith-nymph-xju314-project (npm) (malicious package) - [MAL-2025-4084](https://insights.sbomify.com/MAL-2025-4084/): Malicious code in grammy-telegram-bot-api (npm) (malicious package) - [MAL-2025-40839](https://insights.sbomify.com/MAL-2025-40839/): Malicious code in zenith-mountain-hqc530-project (npm) (malicious package) - [MAL-2025-40838](https://insights.sbomify.com/MAL-2025-40838/): Malicious code in zenith-materialize-polaris-exobiology (npm) (malicious package) - [MAL-2025-40837](https://insights.sbomify.com/MAL-2025-40837/): Malicious code in zenith-lagoon-iin005-project (npm) (malicious package) - [MAL-2025-40836](https://insights.sbomify.com/MAL-2025-40836/): Malicious code in zenith-kale-uim168-project (npm) (malicious package) - [MAL-2025-40835](https://insights.sbomify.com/MAL-2025-40835/): Malicious code in zenith-juniper-qytn (npm) (malicious package) - [MAL-2025-40834](https://insights.sbomify.com/MAL-2025-40834/): Malicious code in zenith-jj813-ilher-wave-project (npm) (malicious package) - [MAL-2025-40833](https://insights.sbomify.com/MAL-2025-40833/): Malicious code in zenith-jacket-cvt332-project (npm) (malicious package) - [MAL-2025-40832](https://insights.sbomify.com/MAL-2025-40832/): Malicious code in zenith-icicle-diq942-project (npm) (malicious package) - [MAL-2025-40831](https://insights.sbomify.com/MAL-2025-40831/): Malicious code in zenith-gorilla-wze700-project (npm) (malicious package) - [MAL-2025-40830](https://insights.sbomify.com/MAL-2025-40830/): Malicious code in zenith-everest-mur020-project (npm) (malicious package) - [MAL-2025-4083](https://insights.sbomify.com/MAL-2025-4083/): Malicious code in grammy-sdk (npm) (malicious package) - [MAL-2025-40829](https://insights.sbomify.com/MAL-2025-40829/): Malicious code in zenith-emerald-udm493-project (npm) (malicious package) - [MAL-2025-40828](https://insights.sbomify.com/MAL-2025-40828/): Malicious code in zenith-ecosystem-sal749-project (npm) (malicious package) - [MAL-2025-40827](https://insights.sbomify.com/MAL-2025-40827/): Malicious code in zenith-ecosystem-efh656-project (npm) (malicious package) - [MAL-2025-40826](https://insights.sbomify.com/MAL-2025-40826/): Malicious code in zenith-echo-yfs0 (npm) (malicious package) - [MAL-2025-40825](https://insights.sbomify.com/MAL-2025-40825/): Malicious code in zenith-dove-vqu302-project (npm) (malicious package) - [MAL-2025-40824](https://insights.sbomify.com/MAL-2025-40824/): Malicious code in zenith-coral-hcn373-project (npm) (malicious package) - [MAL-2025-40823](https://insights.sbomify.com/MAL-2025-40823/): Malicious code in zenith-coral-dcx643-project (npm) (malicious package) - [MAL-2025-40822](https://insights.sbomify.com/MAL-2025-40822/): Malicious code in zenith-chubt-no5rh-violet-project (npm) (malicious package) - [MAL-2025-40821](https://insights.sbomify.com/MAL-2025-40821/): Malicious code in zenith-buffalo-mrw412-project (npm) (malicious package) - [MAL-2025-40820](https://insights.sbomify.com/MAL-2025-40820/): Malicious code in zenith-brook-dtp778-project (npm) (malicious package) - [MAL-2025-4082](https://insights.sbomify.com/MAL-2025-4082/): Malicious code in grammy-menu (npm) (malicious package) - [MAL-2025-40819](https://insights.sbomify.com/MAL-2025-40819/): Malicious code in zenith-boulder-plq082-project (npm) (malicious package) - [MAL-2025-40818](https://insights.sbomify.com/MAL-2025-40818/): Malicious code in zenith-aroma-thl496-project (npm) (malicious package) - [MAL-2025-40817](https://insights.sbomify.com/MAL-2025-40817/): Malicious code in zenith-acorn-eet378-project (npm) (malicious package) - [MAL-2025-40816](https://insights.sbomify.com/MAL-2025-40816/): Malicious code in zenith-9wyv8-zzzl0-quiver-project (npm) (malicious package) - [MAL-2025-40815](https://insights.sbomify.com/MAL-2025-40815/): Malicious code in zenith-8gxc3-guyzs-cascade-project (npm) (malicious package) - [MAL-2025-40814](https://insights.sbomify.com/MAL-2025-40814/): Malicious code in zenith-81evh-79y3g-frost-project (npm) (malicious package) - [MAL-2025-40813](https://insights.sbomify.com/MAL-2025-40813/): Malicious code in zenith-7a6h4-sqhne-grove-project (npm) (malicious package) - [MAL-2025-40812](https://insights.sbomify.com/MAL-2025-40812/): Malicious code in zenith-5ssvf-slvwp-silk-project (npm) (malicious package) - [MAL-2025-40811](https://insights.sbomify.com/MAL-2025-40811/): Malicious code in zenith-59euz-5khvb-xenith-project (npm) (malicious package) - [MAL-2025-40810](https://insights.sbomify.com/MAL-2025-40810/): Malicious code in zenith-4zwhx-rj45v-yonder-project (npm) (malicious package) - [MAL-2025-4081](https://insights.sbomify.com/MAL-2025-4081/): Malicious code in ggeiekkepbwedvcmerki (npm) (malicious package) - [MAL-2025-40809](https://insights.sbomify.com/MAL-2025-40809/): Malicious code in zendsite (npm) (malicious package) - [MAL-2025-40808](https://insights.sbomify.com/MAL-2025-40808/): Malicious code in zendesk-sell-for-zapier (npm) (malicious package) - [MAL-2025-40807](https://insights.sbomify.com/MAL-2025-40807/): Malicious code in zen_rsows_0pd22_mirage (npm) (malicious package) - [MAL-2025-40806](https://insights.sbomify.com/MAL-2025-40806/): Malicious code in zen_finym_m0bga_velocity (npm) (malicious package) - [MAL-2025-40805](https://insights.sbomify.com/MAL-2025-40805/): Malicious code in zen_evzyv_6ueng_obsidian (npm) (malicious package) - [MAL-2025-40804](https://insights.sbomify.com/MAL-2025-40804/): Malicious code in zen_ccdej_1ymkx_jasmine (npm) (malicious package) - [MAL-2025-40803](https://insights.sbomify.com/MAL-2025-40803/): Malicious code in zen_4u3ri_j1fqw_flare (npm) (malicious package) - [MAL-2025-40802](https://insights.sbomify.com/MAL-2025-40802/): Malicious code in zen-slse4-avqlu-fable-project (npm) (malicious package) - [MAL-2025-40801](https://insights.sbomify.com/MAL-2025-40801/): Malicious code in zen-iwqvw-m49im-opal-project (npm) (malicious package) - [MAL-2025-40800](https://insights.sbomify.com/MAL-2025-40800/): Malicious code in zen-a91l4-mqzxq-verdure-project (npm) (malicious package) - [MAL-2025-4080](https://insights.sbomify.com/MAL-2025-4080/): Malicious code in gatsby-mars-pet-parent-journey--server (npm) (malicious package) - [MAL-2025-408](https://insights.sbomify.com/MAL-2025-408/): Malicious code in bookingcom-test (npm) (malicious package) - [MAL-2025-40799](https://insights.sbomify.com/MAL-2025-40799/): Malicious code in zen-1i7nw-ivlqb-glow-project (npm) (malicious package) - [MAL-2025-40798](https://insights.sbomify.com/MAL-2025-40798/): Malicious code in zen-0jp1y-0avqf-throne-project (npm) (malicious package) - [MAL-2025-40797](https://insights.sbomify.com/MAL-2025-40797/): Malicious code in zeljkofilipin-malu (npm) (malicious package) - [MAL-2025-40796](https://insights.sbomify.com/MAL-2025-40796/): Malicious code in zebra-zenith-eho378-project (npm) (malicious package) - [MAL-2025-40795](https://insights.sbomify.com/MAL-2025-40795/): Malicious code in zebra-yellow-cry356-project (npm) (malicious package) - [MAL-2025-40794](https://insights.sbomify.com/MAL-2025-40794/): Malicious code in zebra-xylophone-phm425-project (npm) (malicious package) - [MAL-2025-40793](https://insights.sbomify.com/MAL-2025-40793/): Malicious code in zebra-xylophone-ers940-project (npm) (malicious package) - [MAL-2025-40792](https://insights.sbomify.com/MAL-2025-40792/): Malicious code in zebra-xerox-was996-project (npm) (malicious package) - [MAL-2025-40791](https://insights.sbomify.com/MAL-2025-40791/): Malicious code in zebra-whale-rch074-project (npm) (malicious package) - [MAL-2025-40790](https://insights.sbomify.com/MAL-2025-40790/): Malicious code in zebra-vulture-nzw633-project (npm) (malicious package) - [MAL-2025-4079](https://insights.sbomify.com/MAL-2025-4079/): Malicious code in frau-hoster (npm) (malicious package) - [MAL-2025-40789](https://insights.sbomify.com/MAL-2025-40789/): Malicious code in zebra-umbrella-lri877-project (npm) (malicious package) - [MAL-2025-40788](https://insights.sbomify.com/MAL-2025-40788/): Malicious code in zebra-river-scb566-project (npm) (malicious package) - [MAL-2025-40787](https://insights.sbomify.com/MAL-2025-40787/): Malicious code in zebra-quill-gkk089-project (npm) (malicious package) - [MAL-2025-40786](https://insights.sbomify.com/MAL-2025-40786/): Malicious code in zebra-quasar-kro505-project (npm) (malicious package) - [MAL-2025-40785](https://insights.sbomify.com/MAL-2025-40785/): Malicious code in zebra-quasar-etc249-project (npm) (malicious package) - [MAL-2025-40784](https://insights.sbomify.com/MAL-2025-40784/): Malicious code in zebra-quagmire-oil918-project (npm) (malicious package) - [MAL-2025-40783](https://insights.sbomify.com/MAL-2025-40783/): Malicious code in zebra-peacock-viv936-project (npm) (malicious package) - [MAL-2025-40782](https://insights.sbomify.com/MAL-2025-40782/): Malicious code in zebra-peacock-vdn684-project (npm) (malicious package) - [MAL-2025-40781](https://insights.sbomify.com/MAL-2025-40781/): Malicious code in zebra-opal-yxm957-project (npm) (malicious package) - [MAL-2025-40780](https://insights.sbomify.com/MAL-2025-40780/): Malicious code in zebra-opal-cdn571-project (npm) (malicious package) - [MAL-2025-4078](https://insights.sbomify.com/MAL-2025-4078/): Malicious code in erelaaaaa.js (npm) (malicious package) - [MAL-2025-40779](https://insights.sbomify.com/MAL-2025-40779/): Malicious code in zebra-nymph-sdp274-project (npm) (malicious package) - [MAL-2025-40778](https://insights.sbomify.com/MAL-2025-40778/): Malicious code in zebra-moose-vmh140-project (npm) (malicious package) - [MAL-2025-40777](https://insights.sbomify.com/MAL-2025-40777/): Malicious code in zebra-leopard-pkm297-project (npm) (malicious package) - [MAL-2025-40776](https://insights.sbomify.com/MAL-2025-40776/): Malicious code in zebra-leopard-gyn147-project (npm) (malicious package) - [MAL-2025-40775](https://insights.sbomify.com/MAL-2025-40775/): Malicious code in zebra-koala-ahg767-project (npm) (malicious package) - [MAL-2025-40774](https://insights.sbomify.com/MAL-2025-40774/): Malicious code in zebra-kelp-xzn716-project (npm) (malicious package) - [MAL-2025-40773](https://insights.sbomify.com/MAL-2025-40773/): Malicious code in zebra-jasmine-plr986-project (npm) (malicious package) - [MAL-2025-40772](https://insights.sbomify.com/MAL-2025-40772/): Malicious code in zebra-jacket-cww404-project (npm) (malicious package) - [MAL-2025-40771](https://insights.sbomify.com/MAL-2025-40771/): Malicious code in zebra-hedgehog-hkk369-project (npm) (malicious package) - [MAL-2025-40770](https://insights.sbomify.com/MAL-2025-40770/): Malicious code in zebra-everest-dot171-project (npm) (malicious package) - [MAL-2025-4077](https://insights.sbomify.com/MAL-2025-4077/): Malicious code in envjsc (npm) (malicious package) - [MAL-2025-40769](https://insights.sbomify.com/MAL-2025-40769/): Malicious code in zebra-dragon-hgs959-project (npm) (malicious package) - [MAL-2025-40768](https://insights.sbomify.com/MAL-2025-40768/): Malicious code in zebra-dewdrop-wtn837-project (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/660/