# Vulnerabilities published in 2025


- [MAL-2025-40767](https://insights.sbomify.com/MAL-2025-40767/): Malicious code in zebra-cloud-chw719-project (npm) (malicious package)
- [MAL-2025-40766](https://insights.sbomify.com/MAL-2025-40766/): Malicious code in zebra-aroma-nrb995-project (npm) (malicious package)
- [MAL-2025-40765](https://insights.sbomify.com/MAL-2025-40765/): Malicious code in zeblok (npm) (malicious package)
- [MAL-2025-40764](https://insights.sbomify.com/MAL-2025-40764/): Malicious code in zdwifqjchrknyoux (npm) (malicious package)
- [MAL-2025-40763](https://insights.sbomify.com/MAL-2025-40763/): Malicious code in zdulmnbjsrwxckqt (npm) (malicious package)
- [MAL-2025-40762](https://insights.sbomify.com/MAL-2025-40762/): Malicious code in zdirstehkxkvjbny (npm) (malicious package)
- [MAL-2025-40761](https://insights.sbomify.com/MAL-2025-40761/): Malicious code in zdc-icons (npm) (malicious package)
- [MAL-2025-40760](https://insights.sbomify.com/MAL-2025-40760/): Malicious code in zdachboost (npm) (malicious package)
- [MAL-2025-4076](https://insights.sbomify.com/MAL-2025-4076/): Malicious code in dexfile.js (npm) (malicious package)
- [MAL-2025-40759](https://insights.sbomify.com/MAL-2025-40759/): Malicious code in zczzxxzc (npm) (malicious package)
- [MAL-2025-40758](https://insights.sbomify.com/MAL-2025-40758/): Malicious code in zczyrt (npm) (malicious package)
- [MAL-2025-40757](https://insights.sbomify.com/MAL-2025-40757/): Malicious code in zcgqveyhdkljitak (npm) (malicious package)
- [MAL-2025-40756](https://insights.sbomify.com/MAL-2025-40756/): Malicious code in zbaconpdx (npm) (malicious package)
- [MAL-2025-40755](https://insights.sbomify.com/MAL-2025-40755/): Malicious code in zbackup (npm) (malicious package)
- [MAL-2025-40754](https://insights.sbomify.com/MAL-2025-40754/): Malicious code in zaxis (npm) (malicious package)
- [MAL-2025-40753](https://insights.sbomify.com/MAL-2025-40753/): Malicious code in zaudio (npm) (malicious package)
- [MAL-2025-40752](https://insights.sbomify.com/MAL-2025-40752/): Malicious code in zarfxwlgbjmknvtd (npm) (malicious package)
- [MAL-2025-40751](https://insights.sbomify.com/MAL-2025-40751/): Malicious code in zapi (npm) (malicious package)
- [MAL-2025-40750](https://insights.sbomify.com/MAL-2025-40750/): Malicious code in zapfiles (npm) (malicious package)
- [MAL-2025-4075](https://insights.sbomify.com/MAL-2025-4075/): Malicious code in db-cleaner (npm) (malicious package)
- [MAL-2025-40749](https://insights.sbomify.com/MAL-2025-40749/): Malicious code in zap-ninja (npm) (malicious package)
- [MAL-2025-40748](https://insights.sbomify.com/MAL-2025-40748/): Malicious code in zany-drift-qov382-project (npm) (malicious package)
- [MAL-2025-40747](https://insights.sbomify.com/MAL-2025-40747/): Malicious code in zangoose (npm) (malicious package)
- [MAL-2025-40746](https://insights.sbomify.com/MAL-2025-40746/): Malicious code in zampara (npm) (malicious package)
- [MAL-2025-40745](https://insights.sbomify.com/MAL-2025-40745/): Malicious code in zamia-yearling-5tct (npm) (malicious package)
- [MAL-2025-40744](https://insights.sbomify.com/MAL-2025-40744/): Malicious code in zamia-volcano-hlxo (npm) (malicious package)
- [MAL-2025-40743](https://insights.sbomify.com/MAL-2025-40743/): Malicious code in zamia-quasar-iblz (npm) (malicious package)
- [MAL-2025-40742](https://insights.sbomify.com/MAL-2025-40742/): Malicious code in zamia-oscar-xvio (npm) (malicious package)
- [MAL-2025-40741](https://insights.sbomify.com/MAL-2025-40741/): Malicious code in zamia-helicopter-8hoz (npm) (malicious package)
- [MAL-2025-40740](https://insights.sbomify.com/MAL-2025-40740/): Malicious code in zamia-ginkgo-8f9e (npm) (malicious package)
- [MAL-2025-4074](https://insights.sbomify.com/MAL-2025-4074/): Malicious code in csat-client (npm) (malicious package)
- [MAL-2025-40739](https://insights.sbomify.com/MAL-2025-40739/): Malicious code in zamia-evergreen-c245 (npm) (malicious package)
- [MAL-2025-40738](https://insights.sbomify.com/MAL-2025-40738/): Malicious code in zamia-drone-ccj7 (npm) (malicious package)
- [MAL-2025-40737](https://insights.sbomify.com/MAL-2025-40737/): Malicious code in zamia-deciduous-3juh (npm) (malicious package)
- [MAL-2025-40736](https://insights.sbomify.com/MAL-2025-40736/): Malicious code in zaki-taiwan23-kyuki (npm) (malicious package)
- [MAL-2025-40735](https://insights.sbomify.com/MAL-2025-40735/): Malicious code in zaki-tahu20-breki (npm) (malicious package)
- [MAL-2025-40734](https://insights.sbomify.com/MAL-2025-40734/): Malicious code in zaki-tahu2-breki (npm) (malicious package)
- [MAL-2025-40733](https://insights.sbomify.com/MAL-2025-40733/): Malicious code in zaki-pisang24-kyuki (npm) (malicious package)
- [MAL-2025-40732](https://insights.sbomify.com/MAL-2025-40732/): Malicious code in zaki-pecel26-breki (npm) (malicious package)
- [MAL-2025-40731](https://insights.sbomify.com/MAL-2025-40731/): Malicious code in zaki-nasipecel33-sukiwir (npm) (malicious package)
- [MAL-2025-40730](https://insights.sbomify.com/MAL-2025-40730/): Malicious code in zaki-naget16-kuki (npm) (malicious package)
- [MAL-2025-4073](https://insights.sbomify.com/MAL-2025-4073/): Malicious code in create-qr-core (npm) (malicious package)
- [MAL-2025-40729](https://insights.sbomify.com/MAL-2025-40729/): Malicious code in zaki-lapis15-breki (npm) (malicious package)
- [MAL-2025-40728](https://insights.sbomify.com/MAL-2025-40728/): Malicious code in zaki-klipo32-kuki (npm) (malicious package)
- [MAL-2025-40727](https://insights.sbomify.com/MAL-2025-40727/): Malicious code in zaki-kembang5-kyuki (npm) (malicious package)
- [MAL-2025-40726](https://insights.sbomify.com/MAL-2025-40726/): Malicious code in zaki-gudeg81-breki (npm) (malicious package)
- [MAL-2025-40725](https://insights.sbomify.com/MAL-2025-40725/): Malicious code in zaki-gaplek33-sukiwir (npm) (malicious package)
- [MAL-2025-40724](https://insights.sbomify.com/MAL-2025-40724/): Malicious code in zaki-gandul13-kyuki (npm) (malicious package)
- [MAL-2025-40723](https://insights.sbomify.com/MAL-2025-40723/): Malicious code in zaki-dradag1-sukiwir (npm) (malicious package)
- [MAL-2025-40722](https://insights.sbomify.com/MAL-2025-40722/): Malicious code in zaki-bakwan62-sukiwir (npm) (malicious package)
- [MAL-2025-40721](https://insights.sbomify.com/MAL-2025-40721/): Malicious code in zajith (npm) (malicious package)
- [MAL-2025-40720](https://insights.sbomify.com/MAL-2025-40720/): Malicious code in zain-wajit36-sukiwir (npm) (malicious package)
- [MAL-2025-4072](https://insights.sbomify.com/MAL-2025-4072/): Malicious code in core_plugin_route_timeouts (npm) (malicious package)
- [MAL-2025-40719](https://insights.sbomify.com/MAL-2025-40719/): Malicious code in zain-toge68-sukiwir (npm) (malicious package)
- [MAL-2025-40718](https://insights.sbomify.com/MAL-2025-40718/): Malicious code in zain-toge3-kyuki (npm) (malicious package)
- [MAL-2025-40717](https://insights.sbomify.com/MAL-2025-40717/): Malicious code in zain-tahu10-breki (npm) (malicious package)
- [MAL-2025-40716](https://insights.sbomify.com/MAL-2025-40716/): Malicious code in zain-semur84-kyuki (npm) (malicious package)
- [MAL-2025-40715](https://insights.sbomify.com/MAL-2025-40715/): Malicious code in zain-mangga18-kyuki (npm) (malicious package)
- [MAL-2025-40714](https://insights.sbomify.com/MAL-2025-40714/): Malicious code in zain-kemplang76-breki (npm) (malicious package)
- [MAL-2025-40713](https://insights.sbomify.com/MAL-2025-40713/): Malicious code in zain-empal74-breki (npm) (malicious package)
- [MAL-2025-40712](https://insights.sbomify.com/MAL-2025-40712/): Malicious code in zaidxjkcyqnmvkgr (npm) (malicious package)
- [MAL-2025-40711](https://insights.sbomify.com/MAL-2025-40711/): Malicious code in zahirra (npm) (malicious package)
- [MAL-2025-40710](https://insights.sbomify.com/MAL-2025-40710/): Malicious code in zafkuvtdqnjixlpw (npm) (malicious package)
- [MAL-2025-4071](https://insights.sbomify.com/MAL-2025-4071/): Malicious code in core_plugin_b (npm) (malicious package)
- [MAL-2025-40709](https://insights.sbomify.com/MAL-2025-40709/): Malicious code in zab-server (npm) (malicious package)
- [MAL-2025-40708](https://insights.sbomify.com/MAL-2025-40708/): Malicious code in z..z (npm) (malicious package)
- [MAL-2025-40707](https://insights.sbomify.com/MAL-2025-40707/): Malicious code in yzrmahlocdwgsjep (npm) (malicious package)
- [MAL-2025-40706](https://insights.sbomify.com/MAL-2025-40706/): Malicious code in yzqdapjomkexkhbr (npm) (malicious package)
- [MAL-2025-40705](https://insights.sbomify.com/MAL-2025-40705/): Malicious code in yzmenu (npm) (malicious package)
- [MAL-2025-40704](https://insights.sbomify.com/MAL-2025-40704/): Malicious code in yyx.js (npm) (malicious package)
- [MAL-2025-40703](https://insights.sbomify.com/MAL-2025-40703/): Malicious code in yyipdt (npm) (malicious package)
- [MAL-2025-40702](https://insights.sbomify.com/MAL-2025-40702/): Malicious code in yyf-validate (npm) (malicious package)
- [MAL-2025-40701](https://insights.sbomify.com/MAL-2025-40701/): Malicious code in yyf-url (npm) (malicious package)
- [MAL-2025-40700](https://insights.sbomify.com/MAL-2025-40700/): Malicious code in yyf-reflection (npm) (malicious package)
- [MAL-2025-4070](https://insights.sbomify.com/MAL-2025-4070/): Malicious code in company-utils (npm) (malicious package)
- [MAL-2025-407](https://insights.sbomify.com/MAL-2025-407/): Malicious code in bookingcom-sync (npm) (malicious package)
- [MAL-2025-40699](https://insights.sbomify.com/MAL-2025-40699/): Malicious code in yyf-random (npm) (malicious package)
- [MAL-2025-40698](https://insights.sbomify.com/MAL-2025-40698/): Malicious code in yyf-private (npm) (malicious package)
- [MAL-2025-40697](https://insights.sbomify.com/MAL-2025-40697/): Malicious code in yyf-pool (npm) (malicious package)
- [MAL-2025-40696](https://insights.sbomify.com/MAL-2025-40696/): Malicious code in yyf-pipe (npm) (malicious package)
- [MAL-2025-40695](https://insights.sbomify.com/MAL-2025-40695/): Malicious code in yyf-log (npm) (malicious package)
- [MAL-2025-40694](https://insights.sbomify.com/MAL-2025-40694/): Malicious code in yyf-iterate (npm) (malicious package)
- [MAL-2025-40693](https://insights.sbomify.com/MAL-2025-40693/): Malicious code in yyf-http (npm) (malicious package)
- [MAL-2025-40692](https://insights.sbomify.com/MAL-2025-40692/): Malicious code in yyf-event (npm) (malicious package)
- [MAL-2025-40691](https://insights.sbomify.com/MAL-2025-40691/): Malicious code in yyf-di (npm) (malicious package)
- [MAL-2025-40690](https://insights.sbomify.com/MAL-2025-40690/): Malicious code in yyf-csv (npm) (malicious package)
- [MAL-2025-4069](https://insights.sbomify.com/MAL-2025-4069/): Malicious code in com.meta.xr.sdk.avatars.sample.assets (npm) (malicious package)
- [MAL-2025-40689](https://insights.sbomify.com/MAL-2025-40689/): Malicious code in yyf-convert (npm) (malicious package)
- [MAL-2025-40688](https://insights.sbomify.com/MAL-2025-40688/): Malicious code in yyf-config (npm) (malicious package)
- [MAL-2025-40687](https://insights.sbomify.com/MAL-2025-40687/): Malicious code in yyf-components (npm) (malicious package)
- [MAL-2025-40686](https://insights.sbomify.com/MAL-2025-40686/): Malicious code in yyf-async (npm) (malicious package)
- [MAL-2025-40685](https://insights.sbomify.com/MAL-2025-40685/): Malicious code in yycting (npm) (malicious package)
- [MAL-2025-40684](https://insights.sbomify.com/MAL-2025-40684/): Malicious code in yyb-pangu (npm) (malicious package)
- [MAL-2025-40683](https://insights.sbomify.com/MAL-2025-40683/): Malicious code in yy-igwutil (npm) (malicious package)
- [MAL-2025-40682](https://insights.sbomify.com/MAL-2025-40682/): Malicious code in yxdvksjmpunoarit (npm) (malicious package)
- [MAL-2025-40681](https://insights.sbomify.com/MAL-2025-40681/): Malicious code in ywqnbpxrdazhkjme (npm) (malicious package)
- [MAL-2025-40680](https://insights.sbomify.com/MAL-2025-40680/): Malicious code in ywpltavzimnrhcfd (npm) (malicious package)
- [MAL-2025-4068](https://insights.sbomify.com/MAL-2025-4068/): Malicious code in citiycar8 (npm) (malicious package)
- [MAL-2025-40679](https://insights.sbomify.com/MAL-2025-40679/): Malicious code in yuzhidaoling-goutong (npm) (malicious package)
- [MAL-2025-40678](https://insights.sbomify.com/MAL-2025-40678/): Malicious code in yuzeming (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/661/