# Vulnerabilities published in 2025


- [MAL-2025-149905](https://insights.sbomify.com/MAL-2025-149905/): Malicious code in aes-core-valid-ipherv (npm) (malicious package)
- [MAL-2025-149904](https://insights.sbomify.com/MAL-2025-149904/): Malicious code in 4meme-readable-stream (npm) (malicious package)
- [MAL-2025-149903](https://insights.sbomify.com/MAL-2025-149903/): Malicious code in format-fns (npm) (malicious package)
- [MAL-2025-149902](https://insights.sbomify.com/MAL-2025-149902/): Malicious code in zoophagous-coffee-gull (npm) (malicious package)
- [MAL-2025-149901](https://insights.sbomify.com/MAL-2025-149901/): Malicious code in zonal-sapphire-antlion (npm) (malicious package)
- [MAL-2025-149900](https://insights.sbomify.com/MAL-2025-149900/): Malicious code in zephyr-zenith-configstore-gravity (npm) (malicious package)
- [MAL-2025-14990](https://insights.sbomify.com/MAL-2025-14990/): Malicious code in async-paleobotany-wolf-eslint-config (npm) (malicious package)
- [MAL-2025-1499](https://insights.sbomify.com/MAL-2025-1499/): Malicious code in simulateur-gas (npm) (malicious package)
- [MAL-2025-149899](https://insights.sbomify.com/MAL-2025-149899/): Malicious code in zephyr-yildun-docusaurus-slides (npm) (malicious package)
- [MAL-2025-149898](https://insights.sbomify.com/MAL-2025-149898/): Malicious code in zephyr-umbra-eleventy-rehype (npm) (malicious package)
- [MAL-2025-149897](https://insights.sbomify.com/MAL-2025-149897/): Malicious code in zephyr-standard-arcturus-selenium (npm) (malicious package)
- [MAL-2025-149896](https://insights.sbomify.com/MAL-2025-149896/): Malicious code in zephyr-sqlite-pulsar-spectron (npm) (malicious package)
- [MAL-2025-149895](https://insights.sbomify.com/MAL-2025-149895/): Malicious code in zephyr-semantic-ui-mysql-frontend (npm) (malicious package)
- [MAL-2025-149894](https://insights.sbomify.com/MAL-2025-149894/): Malicious code in zephyr-resolvers-cli-concurrently (npm) (malicious package)
- [MAL-2025-149893](https://insights.sbomify.com/MAL-2025-149893/): Malicious code in zephyr-quito-barnard-mui (npm) (malicious package)
- [MAL-2025-149892](https://insights.sbomify.com/MAL-2025-149892/): Malicious code in zephyr-npm-farout-izar (npm) (malicious package)
- [MAL-2025-149891](https://insights.sbomify.com/MAL-2025-149891/): Malicious code in zephyr-nightwatch-eridanus-commitizen (npm) (malicious package)
- [MAL-2025-149890](https://insights.sbomify.com/MAL-2025-149890/): Malicious code in zephyr-mdx-vega-reveal-md (npm) (malicious package)
- [MAL-2025-14989](https://insights.sbomify.com/MAL-2025-14989/): Malicious code in async-operation (npm) (malicious package)
- [MAL-2025-149889](https://insights.sbomify.com/MAL-2025-149889/): Malicious code in zephyr-lynx-stop-pyxis (npm) (malicious package)
- [MAL-2025-149888](https://insights.sbomify.com/MAL-2025-149888/): Malicious code in zephyr-less-io-figures (npm) (malicious package)
- [MAL-2025-149887](https://insights.sbomify.com/MAL-2025-149887/): Malicious code in zephyr-koa-materialize-phoenix (npm) (malicious package)
- [MAL-2025-149886](https://insights.sbomify.com/MAL-2025-149886/): Malicious code in zephyr-init-json-cosmiconfig (npm) (malicious package)
- [MAL-2025-149885](https://insights.sbomify.com/MAL-2025-149885/): Malicious code in zephyr-ganymede-meteor-prettier (npm) (malicious package)
- [MAL-2025-149884](https://insights.sbomify.com/MAL-2025-149884/): Malicious code in zephyr-epimetheus-leda-browserify (npm) (malicious package)
- [MAL-2025-149883](https://insights.sbomify.com/MAL-2025-149883/): Malicious code in zephyr-child-process-apollo-global (npm) (malicious package)
- [MAL-2025-149882](https://insights.sbomify.com/MAL-2025-149882/): Malicious code in zephyr-charon-draco-antd (npm) (malicious package)
- [MAL-2025-149881](https://insights.sbomify.com/MAL-2025-149881/): Malicious code in zephyr-capella-webdriverio-centaurus (npm) (malicious package)
- [MAL-2025-149880](https://insights.sbomify.com/MAL-2025-149880/): Malicious code in zephyr-arcturus-venus-markdown-pdf (npm) (malicious package)
- [MAL-2025-14988](https://insights.sbomify.com/MAL-2025-14988/): Malicious code in async-deserialize-xi-assert-shell (npm) (malicious package)
- [MAL-2025-149879](https://insights.sbomify.com/MAL-2025-149879/): Malicious code in zephyr-antares-sqlite-xenos (npm) (malicious package)
- [MAL-2025-149878](https://insights.sbomify.com/MAL-2025-149878/): Malicious code in zephyr-airbnb-procyon-shelljs (npm) (malicious package)
- [MAL-2025-149877](https://insights.sbomify.com/MAL-2025-149877/): Malicious code in zenobia-warp-markdownlint-winston (npm) (malicious package)
- [MAL-2025-149876](https://insights.sbomify.com/MAL-2025-149876/): Malicious code in zenobia-sirius-babel-cosmiconfig (npm) (malicious package)
- [MAL-2025-149875](https://insights.sbomify.com/MAL-2025-149875/): Malicious code in zenobia-semantic-release-wolf-celeste (npm) (malicious package)
- [MAL-2025-149874](https://insights.sbomify.com/MAL-2025-149874/): Malicious code in zenobia-sedna-pino-webdriver-manager (npm) (malicious package)
- [MAL-2025-149873](https://insights.sbomify.com/MAL-2025-149873/): Malicious code in zenobia-sails-chariklo-quark (npm) (malicious package)
- [MAL-2025-149872](https://insights.sbomify.com/MAL-2025-149872/): Malicious code in zenobia-repository-leda-transport (npm) (malicious package)
- [MAL-2025-149871](https://insights.sbomify.com/MAL-2025-149871/): Malicious code in zenobia-redis-inquirer-altair (npm) (malicious package)
- [MAL-2025-149870](https://insights.sbomify.com/MAL-2025-149870/): Malicious code in zenobia-nodejs-sass-loader-phoenix (npm) (malicious package)
- [MAL-2025-14987](https://insights.sbomify.com/MAL-2025-14987/): Malicious code in async-cosmology-fomalhaut-slidev (npm) (malicious package)
- [MAL-2025-149869](https://insights.sbomify.com/MAL-2025-149869/): Malicious code in zenobia-nextjs-despina-prompts (npm) (malicious package)
- [MAL-2025-149868](https://insights.sbomify.com/MAL-2025-149868/): Malicious code in zenobia-markdown-pdf-sirius-inquirer (npm) (malicious package)
- [MAL-2025-149867](https://insights.sbomify.com/MAL-2025-149867/): Malicious code in zenobia-javascript-transport-acamar (npm) (malicious package)
- [MAL-2025-149866](https://insights.sbomify.com/MAL-2025-149866/): Malicious code in zenobia-elara-mongoose-firebase (npm) (malicious package)
- [MAL-2025-149865](https://insights.sbomify.com/MAL-2025-149865/): Malicious code in zenobia-cluster-package-config (npm) (malicious package)
- [MAL-2025-149864](https://insights.sbomify.com/MAL-2025-149864/): Malicious code in zenobia-castor-mira-kinetic (npm) (malicious package)
- [MAL-2025-149863](https://insights.sbomify.com/MAL-2025-149863/): Malicious code in zenobia-bellatrix-gravity-frontend (npm) (malicious package)
- [MAL-2025-149862](https://insights.sbomify.com/MAL-2025-149862/): Malicious code in zenith-xenon-nashira-ultra (npm) (malicious package)
- [MAL-2025-149861](https://insights.sbomify.com/MAL-2025-149861/): Malicious code in zenith-tailwindcss-helmet-carina (npm) (malicious package)
- [MAL-2025-149860](https://insights.sbomify.com/MAL-2025-149860/): Malicious code in zenith-selenium-library-semantic-ui (npm) (malicious package)
- [MAL-2025-14986](https://insights.sbomify.com/MAL-2025-14986/): Malicious code in async-changelog-semantic-release-higgs (npm) (malicious package)
- [MAL-2025-149859](https://insights.sbomify.com/MAL-2025-149859/): Malicious code in zenith-polaris-warp-nodejs (npm) (malicious package)
- [MAL-2025-149858](https://insights.sbomify.com/MAL-2025-149858/): Malicious code in zenith-phoenix-hyperion-release-it (npm) (malicious package)
- [MAL-2025-149857](https://insights.sbomify.com/MAL-2025-149857/): Malicious code in zenith-npm-kaus-proxima (npm) (malicious package)
- [MAL-2025-149856](https://insights.sbomify.com/MAL-2025-149856/): Malicious code in zenith-neptune-puppeteer-nuxtjs (npm) (malicious package)
- [MAL-2025-149855](https://insights.sbomify.com/MAL-2025-149855/): Malicious code in zenith-mutation-enif-pyxis (npm) (malicious package)
- [MAL-2025-149854](https://insights.sbomify.com/MAL-2025-149854/): Malicious code in zenith-lint-local-google (npm) (malicious package)
- [MAL-2025-149853](https://insights.sbomify.com/MAL-2025-149853/): Malicious code in zenith-iota-sedna-non-blocking (npm) (malicious package)
- [MAL-2025-149852](https://insights.sbomify.com/MAL-2025-149852/): Malicious code in zenith-got-mocha-nconf (npm) (malicious package)
- [MAL-2025-149851](https://insights.sbomify.com/MAL-2025-149851/): Malicious code in zenith-gacrux-tethys-arcturus (npm) (malicious package)
- [MAL-2025-149850](https://insights.sbomify.com/MAL-2025-149850/): Malicious code in zenith-fornax-nodemon-blitz (npm) (malicious package)
- [MAL-2025-14985](https://insights.sbomify.com/MAL-2025-14985/): Malicious code in async-boolean-emulate-assert-gamma (npm) (malicious package)
- [MAL-2025-149849](https://insights.sbomify.com/MAL-2025-149849/): Malicious code in zenith-fomalhaut-acamar-node-config (npm) (malicious package)
- [MAL-2025-149848](https://insights.sbomify.com/MAL-2025-149848/): Malicious code in zenith-eridanus-terser-webpack-plugin-taurus (npm) (malicious package)
- [MAL-2025-149847](https://insights.sbomify.com/MAL-2025-149847/): Malicious code in zenith-elara-proxima-auth0 (npm) (malicious package)
- [MAL-2025-149846](https://insights.sbomify.com/MAL-2025-149846/): Malicious code in zenith-commitizen-update-proxima (npm) (malicious package)
- [MAL-2025-149845](https://insights.sbomify.com/MAL-2025-149845/): Malicious code in yonder-venus-buffer-hermes (npm) (malicious package)
- [MAL-2025-149844](https://insights.sbomify.com/MAL-2025-149844/): Malicious code in yonder-slides-hermes-link (npm) (malicious package)
- [MAL-2025-149843](https://insights.sbomify.com/MAL-2025-149843/): Malicious code in yonder-resolvers-xml-uninstall (npm) (malicious package)
- [MAL-2025-149842](https://insights.sbomify.com/MAL-2025-149842/): Malicious code in yonder-request-apex-express (npm) (malicious package)
- [MAL-2025-149841](https://insights.sbomify.com/MAL-2025-149841/): Malicious code in yonder-postgres-sirius-quantum (npm) (malicious package)
- [MAL-2025-149840](https://insights.sbomify.com/MAL-2025-149840/): Malicious code in yonder-polaris-loopback-vuetify (npm) (malicious package)
- [MAL-2025-14984](https://insights.sbomify.com/MAL-2025-14984/): Malicious code in async-authenticate-iota-cron-table (npm) (malicious package)
- [MAL-2025-149839](https://insights.sbomify.com/MAL-2025-149839/): Malicious code in yonder-node-config-spectron-webdriver-sails (npm) (malicious package)
- [MAL-2025-149838](https://insights.sbomify.com/MAL-2025-149838/): Malicious code in yonder-kinetic-unuk-sirius (npm) (malicious package)
- [MAL-2025-149837](https://insights.sbomify.com/MAL-2025-149837/): Malicious code in yonder-iota-karma-protractor (npm) (malicious package)
- [MAL-2025-149836](https://insights.sbomify.com/MAL-2025-149836/): Malicious code in yonder-docusaurus-cz-conventional-changelog-transport (npm) (malicious package)
- [MAL-2025-149835](https://insights.sbomify.com/MAL-2025-149835/): Malicious code in yonder-corvus-semantic-ui-forever (npm) (malicious package)
- [MAL-2025-149834](https://insights.sbomify.com/MAL-2025-149834/): Malicious code in yonder-commitlint-config-angular-nightmare-gemini (npm) (malicious package)
- [MAL-2025-149833](https://insights.sbomify.com/MAL-2025-149833/): Malicious code in yonder-commitizen-chromedriver-janus (npm) (malicious package)
- [MAL-2025-149832](https://insights.sbomify.com/MAL-2025-149832/): Malicious code in yonder-child-process-writable-postgres (npm) (malicious package)
- [MAL-2025-149831](https://insights.sbomify.com/MAL-2025-149831/): Malicious code in yonder-apollo-ophiuchus-titan (npm) (malicious package)
- [MAL-2025-149830](https://insights.sbomify.com/MAL-2025-149830/): Malicious code in yonder-altair-commitlint-config-angular-postcss (npm) (malicious package)
- [MAL-2025-14983](https://insights.sbomify.com/MAL-2025-14983/): Malicious code in async-apollo-standard-child-process (npm) (malicious package)
- [MAL-2025-149829](https://insights.sbomify.com/MAL-2025-149829/): Malicious code in yonder-alphard-package-kinetic (npm) (malicious package)
- [MAL-2025-149828](https://insights.sbomify.com/MAL-2025-149828/): Malicious code in yonder-acamar-terser-webpack-plugin-ariel (npm) (malicious package)
- [MAL-2025-149827](https://insights.sbomify.com/MAL-2025-149827/): Malicious code in yildun-xanadu-bootes-typeorm (npm) (malicious package)
- [MAL-2025-149826](https://insights.sbomify.com/MAL-2025-149826/): Malicious code in yildun-warp-orbit-neptune (npm) (malicious package)
- [MAL-2025-149825](https://insights.sbomify.com/MAL-2025-149825/): Malicious code in yildun-vuetify-fork-global (npm) (malicious package)
- [MAL-2025-149824](https://insights.sbomify.com/MAL-2025-149824/): Malicious code in yildun-terser-webpack-plugin-configstore-achernar (npm) (malicious package)
- [MAL-2025-149823](https://insights.sbomify.com/MAL-2025-149823/): Malicious code in yildun-spectron-webdriver-writable-cypress (npm) (malicious package)
- [MAL-2025-149822](https://insights.sbomify.com/MAL-2025-149822/): Malicious code in yildun-rehype-javascript-jovian (npm) (malicious package)
- [MAL-2025-149821](https://insights.sbomify.com/MAL-2025-149821/): Malicious code in yildun-publish-rigel-corvus (npm) (malicious package)
- [MAL-2025-149820](https://insights.sbomify.com/MAL-2025-149820/): Malicious code in yildun-procyon-impulse-electron-builder (npm) (malicious package)
- [MAL-2025-14982](https://insights.sbomify.com/MAL-2025-14982/): Malicious code in asymc (npm) (malicious package)
- [MAL-2025-149819](https://insights.sbomify.com/MAL-2025-149819/): Malicious code in yildun-postcss-meteor-unuk (npm) (malicious package)
- [MAL-2025-149818](https://insights.sbomify.com/MAL-2025-149818/): Malicious code in yildun-nova-leda-test (npm) (malicious package)
- [MAL-2025-149817](https://insights.sbomify.com/MAL-2025-149817/): Malicious code in yildun-materialize-proxima-puppeteer (npm) (malicious package)
- [MAL-2025-149816](https://insights.sbomify.com/MAL-2025-149816/): Malicious code in yildun-lint-staged-octans-phoebe (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1378/