# Vulnerabilities published in 2025


- [MAL-2025-93225](https://insights.sbomify.com/MAL-2025-93225/): Malicious code in amused_goldfish_z3n (npm) (malicious package)
- [MAL-2025-93224](https://insights.sbomify.com/MAL-2025-93224/): Malicious code in amused_galliform_requirement (npm) (malicious package)
- [MAL-2025-93223](https://insights.sbomify.com/MAL-2025-93223/): Malicious code in ambitious_takin_z3n (npm) (malicious package)
- [MAL-2025-93222](https://insights.sbomify.com/MAL-2025-93222/): Malicious code in ambitious_parrotfish_z3n (npm) (malicious package)
- [MAL-2025-93221](https://insights.sbomify.com/MAL-2025-93221/): Malicious code in ambitious_gibbon_z3n (npm) (malicious package)
- [MAL-2025-93220](https://insights.sbomify.com/MAL-2025-93220/): Malicious code in amazing_urial_z3n (npm) (malicious package)
- [MAL-2025-93219](https://insights.sbomify.com/MAL-2025-93219/): Malicious code in amazing_impala_z3n (npm) (malicious package)
- [MAL-2025-93218](https://insights.sbomify.com/MAL-2025-93218/): Malicious code in amazing_hippopotamus_z3n (npm) (malicious package)
- [MAL-2025-93217](https://insights.sbomify.com/MAL-2025-93217/): Malicious code in amazing_cougar_z3n (npm) (malicious package)
- [MAL-2025-93216](https://insights.sbomify.com/MAL-2025-93216/): Malicious code in amazing_booby_z3n (npm) (malicious package)
- [MAL-2025-93215](https://insights.sbomify.com/MAL-2025-93215/): Malicious code in amateur_viper_z3n (npm) (malicious package)
- [MAL-2025-93214](https://insights.sbomify.com/MAL-2025-93214/): Malicious code in amateur_cuckoo_z3n (npm) (malicious package)
- [MAL-2025-93213](https://insights.sbomify.com/MAL-2025-93213/): Malicious code in amateur_carp_z3n (npm) (malicious package)
- [MAL-2025-93212](https://insights.sbomify.com/MAL-2025-93212/): Malicious code in amateur_asp_z3n (npm) (malicious package)
- [MAL-2025-93211](https://insights.sbomify.com/MAL-2025-93211/): Malicious code in amateur_albatross_z3n (npm) (malicious package)
- [MAL-2025-93210](https://insights.sbomify.com/MAL-2025-93210/): Malicious code in alternative_wildfowl_z3n (npm) (malicious package)
- [MAL-2025-93209](https://insights.sbomify.com/MAL-2025-93209/): Malicious code in alternative_scorpion_z3n (npm) (malicious package)
- [MAL-2025-93208](https://insights.sbomify.com/MAL-2025-93208/): Malicious code in alternative_rattlesnake_z3n (npm) (malicious package)
- [MAL-2025-93207](https://insights.sbomify.com/MAL-2025-93207/): Malicious code in alternative_ox_z3n (npm) (malicious package)
- [MAL-2025-93206](https://insights.sbomify.com/MAL-2025-93206/): Malicious code in alternative_grouse_z3n (npm) (malicious package)
- [MAL-2025-93205](https://insights.sbomify.com/MAL-2025-93205/): Malicious code in alright_primate_z3n (npm) (malicious package)
- [MAL-2025-93204](https://insights.sbomify.com/MAL-2025-93204/): Malicious code in alright_crocodile_z3n (npm) (malicious package)
- [MAL-2025-93203](https://insights.sbomify.com/MAL-2025-93203/): Malicious code in alright_baboon_z3n (npm) (malicious package)
- [MAL-2025-93202](https://insights.sbomify.com/MAL-2025-93202/): Malicious code in alone_wren_requirement (npm) (malicious package)
- [MAL-2025-93201](https://insights.sbomify.com/MAL-2025-93201/): Malicious code in alone_trout_z3n (npm) (malicious package)
- [MAL-2025-93200](https://insights.sbomify.com/MAL-2025-93200/): Malicious code in alone_llama_z3n (npm) (malicious package)
- [MAL-2025-932](https://insights.sbomify.com/MAL-2025-932/): Malicious code in hhxy (PyPI) (malicious package)
- [MAL-2025-93199](https://insights.sbomify.com/MAL-2025-93199/): Malicious code in alone_antelope_requirement (npm) (malicious package)
- [MAL-2025-93198](https://insights.sbomify.com/MAL-2025-93198/): Malicious code in allied_wombat_z3n (npm) (malicious package)
- [MAL-2025-93197](https://insights.sbomify.com/MAL-2025-93197/): Malicious code in alleged_primate_z3n (npm) (malicious package)
- [MAL-2025-93196](https://insights.sbomify.com/MAL-2025-93196/): Malicious code in alleged_primate_requirement (npm) (malicious package)
- [MAL-2025-93195](https://insights.sbomify.com/MAL-2025-93195/): Malicious code in alleged_penguin_z3n (npm) (malicious package)
- [MAL-2025-93194](https://insights.sbomify.com/MAL-2025-93194/): Malicious code in alleged_peacock_z3n (npm) (malicious package)
- [MAL-2025-93193](https://insights.sbomify.com/MAL-2025-93193/): Malicious code in alleged_chickadee_z3n (npm) (malicious package)
- [MAL-2025-93192](https://insights.sbomify.com/MAL-2025-93192/): Malicious code in alleged_capybara_requirement (npm) (malicious package)
- [MAL-2025-93191](https://insights.sbomify.com/MAL-2025-93191/): Malicious code in alive_grasshopper_z3n (npm) (malicious package)
- [MAL-2025-93190](https://insights.sbomify.com/MAL-2025-93190/): Malicious code in alive_firefly_z3n (npm) (malicious package)
- [MAL-2025-9319](https://insights.sbomify.com/MAL-2025-9319/): Malicious code in @semdash-kit/test (npm) (malicious package)
- [MAL-2025-93189](https://insights.sbomify.com/MAL-2025-93189/): Malicious code in alive_cobra_z3n (npm) (malicious package)
- [MAL-2025-93188](https://insights.sbomify.com/MAL-2025-93188/): Malicious code in alive_ape_requirement (npm) (malicious package)
- [MAL-2025-93187](https://insights.sbomify.com/MAL-2025-93187/): Malicious code in alert_tortoise_z3n (npm) (malicious package)
- [MAL-2025-93186](https://insights.sbomify.com/MAL-2025-93186/): Malicious code in alert_smelt_z3n (npm) (malicious package)
- [MAL-2025-93185](https://insights.sbomify.com/MAL-2025-93185/): Malicious code in alert_eagle_z3n (npm) (malicious package)
- [MAL-2025-93184](https://insights.sbomify.com/MAL-2025-93184/): Malicious code in agricultural_sawfish_z3n (npm) (malicious package)
- [MAL-2025-93183](https://insights.sbomify.com/MAL-2025-93183/): Malicious code in agricultural_clownfish_z3n (npm) (malicious package)
- [MAL-2025-93182](https://insights.sbomify.com/MAL-2025-93182/): Malicious code in agricultural-gray-aardvark (npm) (malicious package)
- [MAL-2025-93181](https://insights.sbomify.com/MAL-2025-93181/): Malicious code in agreed_elk_z3n (npm) (malicious package)
- [MAL-2025-93180](https://insights.sbomify.com/MAL-2025-93180/): Malicious code in agreeable_zebra_z3n (npm) (malicious package)
- [MAL-2025-9318](https://insights.sbomify.com/MAL-2025-9318/): Malicious code in @semdash-kit/responsive (npm) (malicious package)
- [MAL-2025-93179](https://insights.sbomify.com/MAL-2025-93179/): Malicious code in agreeable_primate_z3n (npm) (malicious package)
- [MAL-2025-93178](https://insights.sbomify.com/MAL-2025-93178/): Malicious code in agreeable_mastodon_z3n (npm) (malicious package)
- [MAL-2025-93177](https://insights.sbomify.com/MAL-2025-93177/): Malicious code in agreeable_dragonfly_z3n (npm) (malicious package)
- [MAL-2025-93176](https://insights.sbomify.com/MAL-2025-93176/): Malicious code in agreeable_ant_z3n (npm) (malicious package)
- [MAL-2025-93175](https://insights.sbomify.com/MAL-2025-93175/): Malicious code in aggressive_sole_z3n (npm) (malicious package)
- [MAL-2025-93174](https://insights.sbomify.com/MAL-2025-93174/): Malicious code in aggressive_reindeer_z3n (npm) (malicious package)
- [MAL-2025-93173](https://insights.sbomify.com/MAL-2025-93173/): Malicious code in aggressive_lamprey_z3n (npm) (malicious package)
- [MAL-2025-93172](https://insights.sbomify.com/MAL-2025-93172/): Malicious code in aggressive_angelfish_z3n (npm) (malicious package)
- [MAL-2025-93171](https://insights.sbomify.com/MAL-2025-93171/): Malicious code in aggressive_aardwolf_z3n (npm) (malicious package)
- [MAL-2025-93170](https://insights.sbomify.com/MAL-2025-93170/): Malicious code in aggregate_weasel_z3n (npm) (malicious package)
- [MAL-2025-9317](https://insights.sbomify.com/MAL-2025-9317/): Malicious code in @semdash-kit/grid (npm) (malicious package)
- [MAL-2025-93169](https://insights.sbomify.com/MAL-2025-93169/): Malicious code in aggregate_sailfish_z3n (npm) (malicious package)
- [MAL-2025-93168](https://insights.sbomify.com/MAL-2025-93168/): Malicious code in aggregate_minnow_z3n (npm) (malicious package)
- [MAL-2025-93167](https://insights.sbomify.com/MAL-2025-93167/): Malicious code in afraid_wildfowl_z3n (npm) (malicious package)
- [MAL-2025-93166](https://insights.sbomify.com/MAL-2025-93166/): Malicious code in afraid_silverfish_z3n (npm) (malicious package)
- [MAL-2025-93165](https://insights.sbomify.com/MAL-2025-93165/): Malicious code in afraid_rook_z3n (npm) (malicious package)
- [MAL-2025-93164](https://insights.sbomify.com/MAL-2025-93164/): Malicious code in afraid_quelea_z3n (npm) (malicious package)
- [MAL-2025-93163](https://insights.sbomify.com/MAL-2025-93163/): Malicious code in afraid_krill_z3n (npm) (malicious package)
- [MAL-2025-93162](https://insights.sbomify.com/MAL-2025-93162/): Malicious code in afraid_crane_z3n (npm) (malicious package)
- [MAL-2025-93161](https://insights.sbomify.com/MAL-2025-93161/): Malicious code in afraid_condor_requirement (npm) (malicious package)
- [MAL-2025-93160](https://insights.sbomify.com/MAL-2025-93160/): Malicious code in afraid_aardwolf_z3n (npm) (malicious package)
- [MAL-2025-9316](https://insights.sbomify.com/MAL-2025-9316/): Malicious code in @semdash-kit/config (npm) (malicious package)
- [MAL-2025-93159](https://insights.sbomify.com/MAL-2025-93159/): Malicious code in aesthetic_vole_z3n (npm) (malicious package)
- [MAL-2025-93158](https://insights.sbomify.com/MAL-2025-93158/): Malicious code in aesthetic_snipe_z3n (npm) (malicious package)
- [MAL-2025-93157](https://insights.sbomify.com/MAL-2025-93157/): Malicious code in aesthetic_mastodon_z3n (npm) (malicious package)
- [MAL-2025-93156](https://insights.sbomify.com/MAL-2025-93156/): Malicious code in aesthetic_horse_z3n (npm) (malicious package)
- [MAL-2025-93155](https://insights.sbomify.com/MAL-2025-93155/): Malicious code in aesthetic_hamster_z3n (npm) (malicious package)
- [MAL-2025-93154](https://insights.sbomify.com/MAL-2025-93154/): Malicious code in advisory_spoonbill_z3n (npm) (malicious package)
- [MAL-2025-93153](https://insights.sbomify.com/MAL-2025-93153/): Malicious code in advisory_pony_z3n (npm) (malicious package)
- [MAL-2025-93152](https://insights.sbomify.com/MAL-2025-93152/): Malicious code in adverse_tapir_z3n (npm) (malicious package)
- [MAL-2025-93151](https://insights.sbomify.com/MAL-2025-93151/): Malicious code in adverse_ferret_z3n (npm) (malicious package)
- [MAL-2025-93150](https://insights.sbomify.com/MAL-2025-93150/): Malicious code in adverse_cow_z3n (npm) (malicious package)
- [MAL-2025-9315](https://insights.sbomify.com/MAL-2025-9315/): Malicious code in @sellerly-kit/tooltip (npm) (malicious package)
- [MAL-2025-93149](https://insights.sbomify.com/MAL-2025-93149/): Malicious code in advanced_pinniped_z3n (npm) (malicious package)
- [MAL-2025-93148](https://insights.sbomify.com/MAL-2025-93148/): Malicious code in advanced_octopus_z3n (npm) (malicious package)
- [MAL-2025-93147](https://insights.sbomify.com/MAL-2025-93147/): Malicious code in advanced_newt_z3n (npm) (malicious package)
- [MAL-2025-93146](https://insights.sbomify.com/MAL-2025-93146/): Malicious code in advanced_llama_z3n (npm) (malicious package)
- [MAL-2025-93145](https://insights.sbomify.com/MAL-2025-93145/): Malicious code in advanced_caterpillar_z3n (npm) (malicious package)
- [MAL-2025-93144](https://insights.sbomify.com/MAL-2025-93144/): Malicious code in advanced_asp_z3n (npm) (malicious package)
- [MAL-2025-93143](https://insights.sbomify.com/MAL-2025-93143/): Malicious code in advanced_alpaca_z3n (npm) (malicious package)
- [MAL-2025-93142](https://insights.sbomify.com/MAL-2025-93142/): Malicious code in adorable_shrew_z3n (npm) (malicious package)
- [MAL-2025-93141](https://insights.sbomify.com/MAL-2025-93141/): Malicious code in adorable_manatee_requirement (npm) (malicious package)
- [MAL-2025-93140](https://insights.sbomify.com/MAL-2025-93140/): Malicious code in administrative_tarantula_z3n (npm) (malicious package)
- [MAL-2025-93139](https://insights.sbomify.com/MAL-2025-93139/): Malicious code in administrative_stork_z3n (npm) (malicious package)
- [MAL-2025-93138](https://insights.sbomify.com/MAL-2025-93138/): Malicious code in administrative_jellyfish_z3n (npm) (malicious package)
- [MAL-2025-93137](https://insights.sbomify.com/MAL-2025-93137/): Malicious code in administrative_constrictor_z3n (npm) (malicious package)
- [MAL-2025-93136](https://insights.sbomify.com/MAL-2025-93136/): Malicious code in administrative_caterpillar_z3n (npm) (malicious package)
- [MAL-2025-93135](https://insights.sbomify.com/MAL-2025-93135/): Malicious code in administrative_canid_z3n (npm) (malicious package)
- [MAL-2025-93134](https://insights.sbomify.com/MAL-2025-93134/): Malicious code in administrative_amphibian_z3n (npm) (malicious package)
- [MAL-2025-93133](https://insights.sbomify.com/MAL-2025-93133/): Malicious code in adjacent_warbler_z3n (npm) (malicious package)
- [MAL-2025-93132](https://insights.sbomify.com/MAL-2025-93132/): Malicious code in adjacent_turkey_z3n (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/80/
