# Vulnerabilities published in 2025 - [MAL-2025-99658](https://insights.sbomify.com/MAL-2025-99658/): Malicious code in attractive_penguin-appteadev (npm) (malicious package) - [MAL-2025-99657](https://insights.sbomify.com/MAL-2025-99657/): Malicious code in attractive_lark-biggestdev (npm) (malicious package) - [MAL-2025-99656](https://insights.sbomify.com/MAL-2025-99656/): Malicious code in attractive_landfowl_0xrequest (npm) (malicious package) - [MAL-2025-99655](https://insights.sbomify.com/MAL-2025-99655/): Malicious code in attractive_hornet_z3n (npm) (malicious package) - [MAL-2025-99654](https://insights.sbomify.com/MAL-2025-99654/): Malicious code in attractive_heron-appteadev (npm) (malicious package) - [MAL-2025-99653](https://insights.sbomify.com/MAL-2025-99653/): Malicious code in attractive_guanaco_z3n (npm) (malicious package) - [MAL-2025-99652](https://insights.sbomify.com/MAL-2025-99652/): Malicious code in atomic_pinniped_z3n (npm) (malicious package) - [MAL-2025-99651](https://insights.sbomify.com/MAL-2025-99651/): Malicious code in atomic_mongoose_0xrequest (npm) (malicious package) - [MAL-2025-99650](https://insights.sbomify.com/MAL-2025-99650/): Malicious code in atomic_lion_0xrequest (npm) (malicious package) - [MAL-2025-9965](https://insights.sbomify.com/MAL-2025-9965/): Malicious code in @zalastax/nolb-_ecp (npm) (malicious package) - [MAL-2025-99649](https://insights.sbomify.com/MAL-2025-99649/): Malicious code in atomic_earwig_z3n (npm) (malicious package) - [MAL-2025-99648](https://insights.sbomify.com/MAL-2025-99648/): Malicious code in atomic_cephalopod_z3n (npm) (malicious package) - [MAL-2025-99647](https://insights.sbomify.com/MAL-2025-99647/): Malicious code in associated_wildfowl_0xrequest (npm) (malicious package) - [MAL-2025-99646](https://insights.sbomify.com/MAL-2025-99646/): Malicious code in associated_sheep_z3n (npm) (malicious package) - [MAL-2025-99645](https://insights.sbomify.com/MAL-2025-99645/): Malicious code in associated_seahorse-tool (npm) (malicious package) - [MAL-2025-99644](https://insights.sbomify.com/MAL-2025-99644/): Malicious code in associated_loon_z3n (npm) (malicious package) - [MAL-2025-99643](https://insights.sbomify.com/MAL-2025-99643/): Malicious code in associated_crane_z3n (npm) (malicious package) - [MAL-2025-99642](https://insights.sbomify.com/MAL-2025-99642/): Malicious code in assistant_wolverine_z3n (npm) (malicious package) - [MAL-2025-99641](https://insights.sbomify.com/MAL-2025-99641/): Malicious code in assistant_pig_z3n (npm) (malicious package) - [MAL-2025-99640](https://insights.sbomify.com/MAL-2025-99640/): Malicious code in assistant_goat_0xrequest (npm) (malicious package) - [MAL-2025-9964](https://insights.sbomify.com/MAL-2025-9964/): Malicious code in @zalastax/nolb-_e9 (npm) (malicious package) - [MAL-2025-99639](https://insights.sbomify.com/MAL-2025-99639/): Malicious code in assistant_catshark_azure-62 (npm) (malicious package) - [MAL-2025-99638](https://insights.sbomify.com/MAL-2025-99638/): Malicious code in assistant_bug_green-2 (npm) (malicious package) - [MAL-2025-99637](https://insights.sbomify.com/MAL-2025-99637/): Malicious code in assistant_ape_z3n (npm) (malicious package) - [MAL-2025-99636](https://insights.sbomify.com/MAL-2025-99636/): Malicious code in asleep_reptile-appteadev (npm) (malicious package) - [MAL-2025-99635](https://insights.sbomify.com/MAL-2025-99635/): Malicious code in asleep_python_black-91 (npm) (malicious package) - [MAL-2025-99634](https://insights.sbomify.com/MAL-2025-99634/): Malicious code in asleep_grouse_replicate_automation (npm) (malicious package) - [MAL-2025-99633](https://insights.sbomify.com/MAL-2025-99633/): Malicious code in asleep_ferret_blue-6 (npm) (malicious package) - [MAL-2025-99632](https://insights.sbomify.com/MAL-2025-99632/): Malicious code in asleep_barracuda-toolteadev (npm) (malicious package) - [MAL-2025-99631](https://insights.sbomify.com/MAL-2025-99631/): Malicious code in ashamed_thrush_z3n (npm) (malicious package) - [MAL-2025-99630](https://insights.sbomify.com/MAL-2025-99630/): Malicious code in ashamed_peacock_z3n (npm) (malicious package) - [MAL-2025-9963](https://insights.sbomify.com/MAL-2025-9963/): Malicious code in @zalastax/nolb-_e8 (npm) (malicious package) - [MAL-2025-99629](https://insights.sbomify.com/MAL-2025-99629/): Malicious code in ashamed_mammal-excellentdev (npm) (malicious package) - [MAL-2025-99628](https://insights.sbomify.com/MAL-2025-99628/): Malicious code in ashamed_krill_z3n (npm) (malicious package) - [MAL-2025-99627](https://insights.sbomify.com/MAL-2025-99627/): Malicious code in ashamed_dolphin_z3n (npm) (malicious package) - [MAL-2025-99626](https://insights.sbomify.com/MAL-2025-99626/): Malicious code in ashamed_coyote_0xrequest (npm) (malicious package) - [MAL-2025-99625](https://insights.sbomify.com/MAL-2025-99625/): Malicious code in ashamed_cow_replicate_automation (npm) (malicious package) - [MAL-2025-99624](https://insights.sbomify.com/MAL-2025-99624/): Malicious code in ashamed_bovid_replicate_automation (npm) (malicious package) - [MAL-2025-99623](https://insights.sbomify.com/MAL-2025-99623/): Malicious code in arts-dao (npm) (malicious package) - [MAL-2025-99622](https://insights.sbomify.com/MAL-2025-99622/): Malicious code in artistic_warbler_z3n (npm) (malicious package) - [MAL-2025-99621](https://insights.sbomify.com/MAL-2025-99621/): Malicious code in artistic_turtle_z3n (npm) (malicious package) - [MAL-2025-99620](https://insights.sbomify.com/MAL-2025-99620/): Malicious code in artistic_panda_0xrequest (npm) (malicious package) - [MAL-2025-9962](https://insights.sbomify.com/MAL-2025-9962/): Malicious code in @zalastax/nolb-_e7 (npm) (malicious package) - [MAL-2025-99619](https://insights.sbomify.com/MAL-2025-99619/): Malicious code in artistic_newt-silentdev (npm) (malicious package) - [MAL-2025-99618](https://insights.sbomify.com/MAL-2025-99618/): Malicious code in artistic_camel_z3n (npm) (malicious package) - [MAL-2025-99617](https://insights.sbomify.com/MAL-2025-99617/): Malicious code in artificial_perch_z3n (npm) (malicious package) - [MAL-2025-99616](https://insights.sbomify.com/MAL-2025-99616/): Malicious code in artificial_marmot_z3n (npm) (malicious package) - [MAL-2025-99615](https://insights.sbomify.com/MAL-2025-99615/): Malicious code in artificial_lungfish_z3n (npm) (malicious package) - [MAL-2025-99614](https://insights.sbomify.com/MAL-2025-99614/): Malicious code in artificial_goose-appteadev (npm) (malicious package) - [MAL-2025-99613](https://insights.sbomify.com/MAL-2025-99613/): Malicious code in artificial_cow_z3n (npm) (malicious package) - [MAL-2025-99612](https://insights.sbomify.com/MAL-2025-99612/): Malicious code in artificial_armadillo_green-12 (npm) (malicious package) - [MAL-2025-99611](https://insights.sbomify.com/MAL-2025-99611/): Malicious code in arrogant_wildcat-silentdev (npm) (malicious package) - [MAL-2025-99610](https://insights.sbomify.com/MAL-2025-99610/): Malicious code in arrogant_turkey_z3n (npm) (malicious package) - [MAL-2025-9961](https://insights.sbomify.com/MAL-2025-9961/): Malicious code in @zalastax/nolb-_e6 (npm) (malicious package) - [MAL-2025-99609](https://insights.sbomify.com/MAL-2025-99609/): Malicious code in arrogant_pony_dumbs (npm) (malicious package) - [MAL-2025-99608](https://insights.sbomify.com/MAL-2025-99608/): Malicious code in arrogant_platypus-appteadev (npm) (malicious package) - [MAL-2025-99607](https://insights.sbomify.com/MAL-2025-99607/): Malicious code in arrogant_mouse_z3n (npm) (malicious package) - [MAL-2025-99606](https://insights.sbomify.com/MAL-2025-99606/): Malicious code in arrogant_deer_z3n (npm) (malicious package) - [MAL-2025-99605](https://insights.sbomify.com/MAL-2025-99605/): Malicious code in arrogant_camel_0xrequest (npm) (malicious package) - [MAL-2025-99604](https://insights.sbomify.com/MAL-2025-99604/): Malicious code in armed_ocelot_z3n (npm) (malicious package) - [MAL-2025-99603](https://insights.sbomify.com/MAL-2025-99603/): Malicious code in armed_mackerel-smiletea (npm) (malicious package) - [MAL-2025-99602](https://insights.sbomify.com/MAL-2025-99602/): Malicious code in armed_goose_z3n (npm) (malicious package) - [MAL-2025-99601](https://insights.sbomify.com/MAL-2025-99601/): Malicious code in arif-tongseng8-remi (npm) (malicious package) - [MAL-2025-99600](https://insights.sbomify.com/MAL-2025-99600/): Malicious code in arif-telurtahu39-ruro (npm) (malicious package) - [MAL-2025-9960](https://insights.sbomify.com/MAL-2025-9960/): Malicious code in @zalastax/nolb-_e5 (npm) (malicious package) - [MAL-2025-996](https://insights.sbomify.com/MAL-2025-996/): Malicious code in tonki (PyPI) (malicious package) - [MAL-2025-99599](https://insights.sbomify.com/MAL-2025-99599/): Malicious code in arif-telur35-ruro (npm) (malicious package) - [MAL-2025-99598](https://insights.sbomify.com/MAL-2025-99598/): Malicious code in arif-teh95-ruro (npm) (malicious package) - [MAL-2025-99597](https://insights.sbomify.com/MAL-2025-99597/): Malicious code in arif-tahutek34-ruro (npm) (malicious package) - [MAL-2025-99596](https://insights.sbomify.com/MAL-2025-99596/): Malicious code in arif-tahu39-ruro (npm) (malicious package) - [MAL-2025-99595](https://insights.sbomify.com/MAL-2025-99595/): Malicious code in arif-soto28-ruro (npm) (malicious package) - [MAL-2025-99594](https://insights.sbomify.com/MAL-2025-99594/): Malicious code in arif-soto17-ruro (npm) (malicious package) - [MAL-2025-99593](https://insights.sbomify.com/MAL-2025-99593/): Malicious code in arif-serabi70-ruro (npm) (malicious package) - [MAL-2025-99592](https://insights.sbomify.com/MAL-2025-99592/): Malicious code in arif-serabi43-ruro (npm) (malicious package) - [MAL-2025-99591](https://insights.sbomify.com/MAL-2025-99591/): Malicious code in arif-semur35-ruro (npm) (malicious package) - [MAL-2025-99590](https://insights.sbomify.com/MAL-2025-99590/): Malicious code in arif-sego85-ruro (npm) (malicious package) - [MAL-2025-9959](https://insights.sbomify.com/MAL-2025-9959/): Malicious code in @zalastax/nolb-_e4 (npm) (malicious package) - [MAL-2025-99589](https://insights.sbomify.com/MAL-2025-99589/): Malicious code in arif-sate52-ruro (npm) (malicious package) - [MAL-2025-99588](https://insights.sbomify.com/MAL-2025-99588/): Malicious code in arif-sate46-remi (npm) (malicious package) - [MAL-2025-99587](https://insights.sbomify.com/MAL-2025-99587/): Malicious code in arif-sambel35-remi (npm) (malicious package) - [MAL-2025-99586](https://insights.sbomify.com/MAL-2025-99586/): Malicious code in arif-sambalado24-ruro (npm) (malicious package) - [MAL-2025-99585](https://insights.sbomify.com/MAL-2025-99585/): Malicious code in arif-saguer59-ruro (npm) (malicious package) - [MAL-2025-99584](https://insights.sbomify.com/MAL-2025-99584/): Malicious code in arif-rendang67-ruro (npm) (malicious package) - [MAL-2025-99583](https://insights.sbomify.com/MAL-2025-99583/): Malicious code in arif-rawon13-ruro (npm) (malicious package) - [MAL-2025-99582](https://insights.sbomify.com/MAL-2025-99582/): Malicious code in arif-rangi95-ruro (npm) (malicious package) - [MAL-2025-99581](https://insights.sbomify.com/MAL-2025-99581/): Malicious code in arif-peyek7-ruro (npm) (malicious package) - [MAL-2025-99580](https://insights.sbomify.com/MAL-2025-99580/): Malicious code in arif-pecel33-ruro (npm) (malicious package) - [MAL-2025-9958](https://insights.sbomify.com/MAL-2025-9958/): Malicious code in @zalastax/nolb-_e3 (npm) (malicious package) - [MAL-2025-99579](https://insights.sbomify.com/MAL-2025-99579/): Malicious code in arif-oblok34-ruro (npm) (malicious package) - [MAL-2025-99578](https://insights.sbomify.com/MAL-2025-99578/): Malicious code in arif-naget89-ruro (npm) (malicious package) - [MAL-2025-99577](https://insights.sbomify.com/MAL-2025-99577/): Malicious code in arif-moci85-ruro (npm) (malicious package) - [MAL-2025-99576](https://insights.sbomify.com/MAL-2025-99576/): Malicious code in arif-moci68-ruro (npm) (malicious package) - [MAL-2025-99575](https://insights.sbomify.com/MAL-2025-99575/): Malicious code in arif-miemee51-ruro (npm) (malicious package) - [MAL-2025-99574](https://insights.sbomify.com/MAL-2025-99574/): Malicious code in arif-miebogor27-ruro (npm) (malicious package) - [MAL-2025-99573](https://insights.sbomify.com/MAL-2025-99573/): Malicious code in arif-mendoan31-ruro (npm) (malicious package) - [MAL-2025-99572](https://insights.sbomify.com/MAL-2025-99572/): Malicious code in arif-martabak32-ruro (npm) (malicious package) - [MAL-2025-99571](https://insights.sbomify.com/MAL-2025-99571/): Malicious code in arif-mangga68-ruro (npm) (malicious package) - [MAL-2025-99570](https://insights.sbomify.com/MAL-2025-99570/): Malicious code in arif-lutis31-ruro (npm) (malicious package) - [MAL-2025-9957](https://insights.sbomify.com/MAL-2025-9957/): Malicious code in @zalastax/nolb-_e2 (npm) (malicious package) - [MAL-2025-99569](https://insights.sbomify.com/MAL-2025-99569/): Malicious code in arif-liwet98-ruro (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/9/