# Vulnerabilities published in 2025


- [MAL-2025-99748](https://insights.sbomify.com/MAL-2025-99748/): Malicious code in baffcon-notthedevs (npm) (malicious package)
- [MAL-2025-99747](https://insights.sbomify.com/MAL-2025-99747/): Malicious code in baertho-notthedevs (npm) (malicious package)
- [MAL-2025-99746](https://insights.sbomify.com/MAL-2025-99746/): Malicious code in bad_thrush_z3n (npm) (malicious package)
- [MAL-2025-99745](https://insights.sbomify.com/MAL-2025-99745/): Malicious code in bad_sheep_z3n (npm) (malicious package)
- [MAL-2025-99744](https://insights.sbomify.com/MAL-2025-99744/): Malicious code in bad_rook_dumbs (npm) (malicious package)
- [MAL-2025-99743](https://insights.sbomify.com/MAL-2025-99743/): Malicious code in bad_pigeon_replicate_automation (npm) (malicious package)
- [MAL-2025-99742](https://insights.sbomify.com/MAL-2025-99742/): Malicious code in bad_parrot_z3n (npm) (malicious package)
- [MAL-2025-99741](https://insights.sbomify.com/MAL-2025-99741/): Malicious code in bad_mite_0xrequest (npm) (malicious package)
- [MAL-2025-99740](https://insights.sbomify.com/MAL-2025-99740/): Malicious code in bad_lion_z3n (npm) (malicious package)
- [MAL-2025-9974](https://insights.sbomify.com/MAL-2025-9974/): Malicious code in @zalastax/nolb-_enk (npm) (malicious package)
- [MAL-2025-99739](https://insights.sbomify.com/MAL-2025-99739/): Malicious code in bad_cardinal_dumbs (npm) (malicious package)
- [MAL-2025-99738](https://insights.sbomify.com/MAL-2025-99738/): Malicious code in bad_canid_0xrequest (npm) (malicious package)
- [MAL-2025-99737](https://insights.sbomify.com/MAL-2025-99737/): Malicious code in bacon-notthedevs (npm) (malicious package)
- [MAL-2025-99736](https://insights.sbomify.com/MAL-2025-99736/): Malicious code in back_vicuna_dumbs (npm) (malicious package)
- [MAL-2025-99735](https://insights.sbomify.com/MAL-2025-99735/): Malicious code in back_smelt_0xrequest (npm) (malicious package)
- [MAL-2025-99734](https://insights.sbomify.com/MAL-2025-99734/): Malicious code in back_porpoise-silentdev (npm) (malicious package)
- [MAL-2025-99733](https://insights.sbomify.com/MAL-2025-99733/): Malicious code in back_marmot-notthedev (npm) (malicious package)
- [MAL-2025-99732](https://insights.sbomify.com/MAL-2025-99732/): Malicious code in back_macaw_z3n (npm) (malicious package)
- [MAL-2025-99731](https://insights.sbomify.com/MAL-2025-99731/): Malicious code in back_lark_0xrequest (npm) (malicious package)
- [MAL-2025-99730](https://insights.sbomify.com/MAL-2025-99730/): Malicious code in back_krill_0xrequest (npm) (malicious package)
- [MAL-2025-9973](https://insights.sbomify.com/MAL-2025-9973/): Malicious code in @zalastax/nolb-_elk (npm) (malicious package)
- [MAL-2025-99729](https://insights.sbomify.com/MAL-2025-99729/): Malicious code in back_crow_0xrequest (npm) (malicious package)
- [MAL-2025-99728](https://insights.sbomify.com/MAL-2025-99728/): Malicious code in back_cod_z3n (npm) (malicious package)
- [MAL-2025-99727](https://insights.sbomify.com/MAL-2025-99727/): Malicious code in azgxqa-devapptea (npm) (malicious package)
- [MAL-2025-99726](https://insights.sbomify.com/MAL-2025-99726/): Malicious code in aylessa-notthedevs (npm) (malicious package)
- [MAL-2025-99725](https://insights.sbomify.com/MAL-2025-99725/): Malicious code in ayala-tea-archive (npm) (malicious package)
- [MAL-2025-99724](https://insights.sbomify.com/MAL-2025-99724/): Malicious code in ayala-soluble-pot (npm) (malicious package)
- [MAL-2025-99723](https://insights.sbomify.com/MAL-2025-99723/): Malicious code in awrence-notthedevs (npm) (malicious package)
- [MAL-2025-99722](https://insights.sbomify.com/MAL-2025-99722/): Malicious code in awkward_tern_z3n (npm) (malicious package)
- [MAL-2025-99721](https://insights.sbomify.com/MAL-2025-99721/): Malicious code in awkward_roundworm_z3n (npm) (malicious package)
- [MAL-2025-99720](https://insights.sbomify.com/MAL-2025-99720/): Malicious code in awkward_nightingale-notthedev (npm) (malicious package)
- [MAL-2025-9972](https://insights.sbomify.com/MAL-2025-9972/): Malicious code in @zalastax/nolb-_elj (npm) (malicious package)
- [MAL-2025-99719](https://insights.sbomify.com/MAL-2025-99719/): Malicious code in awkward_kangaroo_z3n (npm) (malicious package)
- [MAL-2025-99718](https://insights.sbomify.com/MAL-2025-99718/): Malicious code in awkward_jackal_z3n (npm) (malicious package)
- [MAL-2025-99717](https://insights.sbomify.com/MAL-2025-99717/): Malicious code in awkward_finch_dumbs (npm) (malicious package)
- [MAL-2025-99716](https://insights.sbomify.com/MAL-2025-99716/): Malicious code in awkward_alligator_z3n (npm) (malicious package)
- [MAL-2025-99715](https://insights.sbomify.com/MAL-2025-99715/): Malicious code in awful_spoonbill-smiletea (npm) (malicious package)
- [MAL-2025-99714](https://insights.sbomify.com/MAL-2025-99714/): Malicious code in awful_roundworm_0xrequest (npm) (malicious package)
- [MAL-2025-99713](https://insights.sbomify.com/MAL-2025-99713/): Malicious code in awful_gorilla_0xrequest (npm) (malicious package)
- [MAL-2025-99712](https://insights.sbomify.com/MAL-2025-99712/): Malicious code in awful_echidna_z3n (npm) (malicious package)
- [MAL-2025-99711](https://insights.sbomify.com/MAL-2025-99711/): Malicious code in awful_cricket_z3n (npm) (malicious package)
- [MAL-2025-99710](https://insights.sbomify.com/MAL-2025-99710/): Malicious code in awful_bass_z3n (npm) (malicious package)
- [MAL-2025-9971](https://insights.sbomify.com/MAL-2025-9971/): Malicious code in @zalastax/nolb-_eli (npm) (malicious package)
- [MAL-2025-99709](https://insights.sbomify.com/MAL-2025-99709/): Malicious code in awful_armadillo_0xrequest (npm) (malicious package)
- [MAL-2025-99708](https://insights.sbomify.com/MAL-2025-99708/): Malicious code in aware_worm_0xrequest (npm) (malicious package)
- [MAL-2025-99707](https://insights.sbomify.com/MAL-2025-99707/): Malicious code in aware_whitefish_0xrequest (npm) (malicious package)
- [MAL-2025-99706](https://insights.sbomify.com/MAL-2025-99706/): Malicious code in aware_vole-notthedevs (npm) (malicious package)
- [MAL-2025-99705](https://insights.sbomify.com/MAL-2025-99705/): Malicious code in aware_quokka-silentdev (npm) (malicious package)
- [MAL-2025-99704](https://insights.sbomify.com/MAL-2025-99704/): Malicious code in aware_minnow-gooddev (npm) (malicious package)
- [MAL-2025-99703](https://insights.sbomify.com/MAL-2025-99703/): Malicious code in aware_mink-tool (npm) (malicious package)
- [MAL-2025-99702](https://insights.sbomify.com/MAL-2025-99702/): Malicious code in aware_impala_z3n (npm) (malicious package)
- [MAL-2025-99701](https://insights.sbomify.com/MAL-2025-99701/): Malicious code in aware_donkey-smiletea (npm) (malicious package)
- [MAL-2025-99700](https://insights.sbomify.com/MAL-2025-99700/): Malicious code in aware_cicada_z3n (npm) (malicious package)
- [MAL-2025-9970](https://insights.sbomify.com/MAL-2025-9970/): Malicious code in @zalastax/nolb-_elh (npm) (malicious package)
- [MAL-2025-997](https://insights.sbomify.com/MAL-2025-997/): Malicious code in tonvia (PyPI) (malicious package)
- [MAL-2025-99699](https://insights.sbomify.com/MAL-2025-99699/): Malicious code in aware_catfish_z3n (npm) (malicious package)
- [MAL-2025-99698](https://insights.sbomify.com/MAL-2025-99698/): Malicious code in aware_bass_0xrequest (npm) (malicious package)
- [MAL-2025-99697](https://insights.sbomify.com/MAL-2025-99697/): Malicious code in awake_skunk_z3n (npm) (malicious package)
- [MAL-2025-99696](https://insights.sbomify.com/MAL-2025-99696/): Malicious code in awake_skink_z3n (npm) (malicious package)
- [MAL-2025-99695](https://insights.sbomify.com/MAL-2025-99695/): Malicious code in awake_parrotfish_z3n (npm) (malicious package)
- [MAL-2025-99694](https://insights.sbomify.com/MAL-2025-99694/): Malicious code in awake_jaguar_z3n (npm) (malicious package)
- [MAL-2025-99693](https://insights.sbomify.com/MAL-2025-99693/): Malicious code in awake_finch-strongdev (npm) (malicious package)
- [MAL-2025-99692](https://insights.sbomify.com/MAL-2025-99692/): Malicious code in awake_dog_0xrequest (npm) (malicious package)
- [MAL-2025-99691](https://insights.sbomify.com/MAL-2025-99691/): Malicious code in awake_cicada-appteadev (npm) (malicious package)
- [MAL-2025-99690](https://insights.sbomify.com/MAL-2025-99690/): Malicious code in awake_catshark_0xrequest (npm) (malicious package)
- [MAL-2025-9969](https://insights.sbomify.com/MAL-2025-9969/): Malicious code in @zalastax/nolb-_edc (npm) (malicious package)
- [MAL-2025-99689](https://insights.sbomify.com/MAL-2025-99689/): Malicious code in awake_aardvark-appteadev (npm) (malicious package)
- [MAL-2025-99688](https://insights.sbomify.com/MAL-2025-99688/): Malicious code in avocado-notthedevs (npm) (malicious package)
- [MAL-2025-99687](https://insights.sbomify.com/MAL-2025-99687/): Malicious code in average_wildcat_z3n (npm) (malicious package)
- [MAL-2025-99686](https://insights.sbomify.com/MAL-2025-99686/): Malicious code in average_sheep_z3n (npm) (malicious package)
- [MAL-2025-99685](https://insights.sbomify.com/MAL-2025-99685/): Malicious code in average_pheasant_z3n (npm) (malicious package)
- [MAL-2025-99684](https://insights.sbomify.com/MAL-2025-99684/): Malicious code in average_locust_z3n (npm) (malicious package)
- [MAL-2025-99683](https://insights.sbomify.com/MAL-2025-99683/): Malicious code in average_guanaco_z3n (npm) (malicious package)
- [MAL-2025-99682](https://insights.sbomify.com/MAL-2025-99682/): Malicious code in average_dove-gooddev (npm) (malicious package)
- [MAL-2025-99681](https://insights.sbomify.com/MAL-2025-99681/): Malicious code in average_constrictor_z3n (npm) (malicious package)
- [MAL-2025-99680](https://insights.sbomify.com/MAL-2025-99680/): Malicious code in average_butterfly_z3n (npm) (malicious package)
- [MAL-2025-9968](https://insights.sbomify.com/MAL-2025-9968/): Malicious code in @zalastax/nolb-_edb (npm) (malicious package)
- [MAL-2025-99679](https://insights.sbomify.com/MAL-2025-99679/): Malicious code in available_tarsier-appteadev (npm) (malicious package)
- [MAL-2025-99678](https://insights.sbomify.com/MAL-2025-99678/): Malicious code in available_porcupine_replicate_automation (npm) (malicious package)
- [MAL-2025-99677](https://insights.sbomify.com/MAL-2025-99677/): Malicious code in available_pike-appteadev (npm) (malicious package)
- [MAL-2025-99676](https://insights.sbomify.com/MAL-2025-99676/): Malicious code in available_koi_dumbs (npm) (malicious package)
- [MAL-2025-99675](https://insights.sbomify.com/MAL-2025-99675/): Malicious code in available_horse_0xrequest (npm) (malicious package)
- [MAL-2025-99674](https://insights.sbomify.com/MAL-2025-99674/): Malicious code in available_anteater_0xrequest (npm) (malicious package)
- [MAL-2025-99673](https://insights.sbomify.com/MAL-2025-99673/): Malicious code in autonomous_wildfowl_dumbs (npm) (malicious package)
- [MAL-2025-99672](https://insights.sbomify.com/MAL-2025-99672/): Malicious code in autonomous_whale_silver-17 (npm) (malicious package)
- [MAL-2025-99671](https://insights.sbomify.com/MAL-2025-99671/): Malicious code in autonomous_starfish_0xrequest (npm) (malicious package)
- [MAL-2025-99670](https://insights.sbomify.com/MAL-2025-99670/): Malicious code in autonomous_parrot_dumbs (npm) (malicious package)
- [MAL-2025-9967](https://insights.sbomify.com/MAL-2025-9967/): Malicious code in @zalastax/nolb-_ecr (npm) (malicious package)
- [MAL-2025-99669](https://insights.sbomify.com/MAL-2025-99669/): Malicious code in autonomous_mink_z3n (npm) (malicious package)
- [MAL-2025-99668](https://insights.sbomify.com/MAL-2025-99668/): Malicious code in autonomous_antlion_z3n (npm) (malicious package)
- [MAL-2025-99667](https://insights.sbomify.com/MAL-2025-99667/): Malicious code in automatic_worm_z3n (npm) (malicious package)
- [MAL-2025-99666](https://insights.sbomify.com/MAL-2025-99666/): Malicious code in automatic_wildcat_z3n (npm) (malicious package)
- [MAL-2025-99665](https://insights.sbomify.com/MAL-2025-99665/): Malicious code in automatic_panther_z3n (npm) (malicious package)
- [MAL-2025-99664](https://insights.sbomify.com/MAL-2025-99664/): Malicious code in automatic_lamprey-appteadev (npm) (malicious package)
- [MAL-2025-99663](https://insights.sbomify.com/MAL-2025-99663/): Malicious code in automatic_antelope_replicate_automation (npm) (malicious package)
- [MAL-2025-99662](https://insights.sbomify.com/MAL-2025-99662/): Malicious code in attractive_whale_z3n (npm) (malicious package)
- [MAL-2025-99661](https://insights.sbomify.com/MAL-2025-99661/): Malicious code in attractive_silverfish-appteadev (npm) (malicious package)
- [MAL-2025-99660](https://insights.sbomify.com/MAL-2025-99660/): Malicious code in attractive_sawfish_z3n (npm) (malicious package)
- [MAL-2025-9966](https://insights.sbomify.com/MAL-2025-9966/): Malicious code in @zalastax/nolb-_ecq (npm) (malicious package)
- [MAL-2025-99659](https://insights.sbomify.com/MAL-2025-99659/): Malicious code in attractive_quelea_magenta-95 (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/8/