# Vulnerabilities published in 2025 - [MAL-2025-149815](https://insights.sbomify.com/MAL-2025-149815/): Malicious code in yildun-ganymede-puppeteer-sedna (npm) (malicious package) - [MAL-2025-149814](https://insights.sbomify.com/MAL-2025-149814/): Malicious code in yildun-event-test-rate-limiter (npm) (malicious package) - [MAL-2025-149813](https://insights.sbomify.com/MAL-2025-149813/): Malicious code in yildun-elektra-test-taurus (npm) (malicious package) - [MAL-2025-149812](https://insights.sbomify.com/MAL-2025-149812/): Malicious code in yildun-dynamo-halley-mira (npm) (malicious package) - [MAL-2025-149811](https://insights.sbomify.com/MAL-2025-149811/): Malicious code in yildun-configstore-fetch-iota (npm) (malicious package) - [MAL-2025-149810](https://insights.sbomify.com/MAL-2025-149810/): Malicious code in yildun-config-electron-ophiuchus (npm) (malicious package) - [MAL-2025-14981](https://insights.sbomify.com/MAL-2025-14981/): Malicious code in asycn (npm) (malicious package) - [MAL-2025-149809](https://insights.sbomify.com/MAL-2025-149809/): Malicious code in yildun-command-chai-airbnb (npm) (malicious package) - [MAL-2025-149808](https://insights.sbomify.com/MAL-2025-149808/): Malicious code in yildun-changelog-slides-terser (npm) (malicious package) - [MAL-2025-149807](https://insights.sbomify.com/MAL-2025-149807/): Malicious code in yildun-build-install-socketio (npm) (malicious package) - [MAL-2025-149806](https://insights.sbomify.com/MAL-2025-149806/): Malicious code in yildun-antares-mui-impulse (npm) (malicious package) - [MAL-2025-149805](https://insights.sbomify.com/MAL-2025-149805/): Malicious code in yielding-tan-aardwolf (npm) (malicious package) - [MAL-2025-149804](https://insights.sbomify.com/MAL-2025-149804/): Malicious code in yaml-tailwindcss-hyperion-public (npm) (malicious package) - [MAL-2025-149803](https://insights.sbomify.com/MAL-2025-149803/): Malicious code in yaml-publish-dependencies-eslint-plugin (npm) (malicious package) - [MAL-2025-149802](https://insights.sbomify.com/MAL-2025-149802/): Malicious code in yaml-prettier-css-minimizer-webpack-plugin-cosmiconfig (npm) (malicious package) - [MAL-2025-149801](https://insights.sbomify.com/MAL-2025-149801/): Malicious code in yaml-polaris-loop-vuetify (npm) (malicious package) - [MAL-2025-149800](https://insights.sbomify.com/MAL-2025-149800/): Malicious code in yaml-perseus-lyra-weywot (npm) (malicious package) - [MAL-2025-14980](https://insights.sbomify.com/MAL-2025-14980/): Malicious code in astrotitania (npm) (malicious package) - [MAL-2025-1498](https://insights.sbomify.com/MAL-2025-1498/): Malicious code in simulateur-de-don (npm) (malicious package) - [MAL-2025-149799](https://insights.sbomify.com/MAL-2025-149799/): Malicious code in yaml-ophiuchus-hyperion-style-loader (npm) (malicious package) - [MAL-2025-149798](https://insights.sbomify.com/MAL-2025-149798/): Malicious code in yaml-nodemon-spectron-pino (npm) (malicious package) - [MAL-2025-149797](https://insights.sbomify.com/MAL-2025-149797/): Malicious code in yaml-nightmare-command-start (npm) (malicious package) - [MAL-2025-149796](https://insights.sbomify.com/MAL-2025-149796/): Malicious code in yaml-neptune-pino-barnard (npm) (malicious package) - [MAL-2025-149795](https://insights.sbomify.com/MAL-2025-149795/): Malicious code in yaml-meissa-metalsmith-hermes (npm) (malicious package) - [MAL-2025-149794](https://insights.sbomify.com/MAL-2025-149794/): Malicious code in yaml-loopback-cors-postcss (npm) (malicious package) - [MAL-2025-149793](https://insights.sbomify.com/MAL-2025-149793/): Malicious code in yaml-leda-farout-kinetic (npm) (malicious package) - [MAL-2025-149792](https://insights.sbomify.com/MAL-2025-149792/): Malicious code in yaml-kaus-polaris-dotenv (npm) (malicious package) - [MAL-2025-149791](https://insights.sbomify.com/MAL-2025-149791/): Malicious code in yaml-html-webpack-plugin-galaxy-babel (npm) (malicious package) - [MAL-2025-149790](https://insights.sbomify.com/MAL-2025-149790/): Malicious code in yaml-gatsby-yildun-less (npm) (malicious package) - [MAL-2025-14979](https://insights.sbomify.com/MAL-2025-14979/): Malicious code in astrophysics-less-loader-archaeogenetics-chalk (npm) (malicious package) - [MAL-2025-149789](https://insights.sbomify.com/MAL-2025-149789/): Malicious code in yaml-foundation-antares-zenith (npm) (malicious package) - [MAL-2025-149788](https://insights.sbomify.com/MAL-2025-149788/): Malicious code in yaml-express-cors-gridsome (npm) (malicious package) - [MAL-2025-149787](https://insights.sbomify.com/MAL-2025-149787/): Malicious code in yaml-eslint-eslint-style-loader (npm) (malicious package) - [MAL-2025-149786](https://insights.sbomify.com/MAL-2025-149786/): Malicious code in yaml-draco-magellan-warp (npm) (malicious package) - [MAL-2025-149785](https://insights.sbomify.com/MAL-2025-149785/): Malicious code in yaml-buffer-nova-slides (npm) (malicious package) - [MAL-2025-149784](https://insights.sbomify.com/MAL-2025-149784/): Malicious code in yaml-avior-scorpius-mutation (npm) (malicious package) - [MAL-2025-149783](https://insights.sbomify.com/MAL-2025-149783/): Malicious code in yaml-arcturus-postgres-jabbah (npm) (malicious package) - [MAL-2025-149782](https://insights.sbomify.com/MAL-2025-149782/): Malicious code in yaml-aquarius-xenos-neptune (npm) (malicious package) - [MAL-2025-149781](https://insights.sbomify.com/MAL-2025-149781/): Malicious code in yakutsk-wasat-astro-auth (npm) (malicious package) - [MAL-2025-149780](https://insights.sbomify.com/MAL-2025-149780/): Malicious code in yakutsk-titan-lyra-impulse (npm) (malicious package) - [MAL-2025-14978](https://insights.sbomify.com/MAL-2025-14978/): Malicious code in astrochemistry-warp-non-blocking-thermochronology (npm) (malicious package) - [MAL-2025-149779](https://insights.sbomify.com/MAL-2025-149779/): Malicious code in yakutsk-resolvers-phoebe-achernar (npm) (malicious package) - [MAL-2025-149778](https://insights.sbomify.com/MAL-2025-149778/): Malicious code in yakutsk-registry-phenomic-node-sass (npm) (malicious package) - [MAL-2025-149777](https://insights.sbomify.com/MAL-2025-149777/): Malicious code in yakutsk-procyon-eclipse-update (npm) (malicious package) - [MAL-2025-149776](https://insights.sbomify.com/MAL-2025-149776/): Malicious code in yakutsk-postgres-tool-node-config (npm) (malicious package) - [MAL-2025-149775](https://insights.sbomify.com/MAL-2025-149775/): Malicious code in yakutsk-polaris-dotenv-safe-izar (npm) (malicious package) - [MAL-2025-149774](https://insights.sbomify.com/MAL-2025-149774/): Malicious code in yakutsk-luna-sadr-rest (npm) (malicious package) - [MAL-2025-149773](https://insights.sbomify.com/MAL-2025-149773/): Malicious code in yakutsk-kastra-webpack-release-it (npm) (malicious package) - [MAL-2025-149772](https://insights.sbomify.com/MAL-2025-149772/): Malicious code in yakutsk-jest-sequelize-helios (npm) (malicious package) - [MAL-2025-149771](https://insights.sbomify.com/MAL-2025-149771/): Malicious code in yakutsk-init-neptune-fomalhaut (npm) (malicious package) - [MAL-2025-149770](https://insights.sbomify.com/MAL-2025-149770/): Malicious code in yakutsk-html-webpack-plugin-koa-mutation (npm) (malicious package) - [MAL-2025-14977](https://insights.sbomify.com/MAL-2025-14977/): Malicious code in astrochemistry-interstellarmedium-speleology-blueshift (npm) (malicious package) - [MAL-2025-149769](https://insights.sbomify.com/MAL-2025-149769/): Malicious code in yakutsk-got-antares-enif (npm) (malicious package) - [MAL-2025-149768](https://insights.sbomify.com/MAL-2025-149768/): Malicious code in yakutsk-fornax-corvus-jest (npm) (malicious package) - [MAL-2025-149767](https://insights.sbomify.com/MAL-2025-149767/): Malicious code in yakutsk-electron-request-dotenv-safe (npm) (malicious package) - [MAL-2025-149766](https://insights.sbomify.com/MAL-2025-149766/): Malicious code in yakutsk-dotenv-kaus-capella (npm) (malicious package) - [MAL-2025-149765](https://insights.sbomify.com/MAL-2025-149765/): Malicious code in yakutsk-dactyl-ini-astro (npm) (malicious package) - [MAL-2025-149764](https://insights.sbomify.com/MAL-2025-149764/): Malicious code in yakutsk-cordelia-toml-child-process (npm) (malicious package) - [MAL-2025-149763](https://insights.sbomify.com/MAL-2025-149763/): Malicious code in yakutsk-config-mutation-ursa (npm) (malicious package) - [MAL-2025-149762](https://insights.sbomify.com/MAL-2025-149762/): Malicious code in yakutsk-chai-css-minimizer-webpack-plugin-mutation (npm) (malicious package) - [MAL-2025-149761](https://insights.sbomify.com/MAL-2025-149761/): Malicious code in yakutsk-airbnb-hexo-elektra (npm) (malicious package) - [MAL-2025-149760](https://insights.sbomify.com/MAL-2025-149760/): Malicious code in xo-xo-dorado-despina (npm) (malicious package) - [MAL-2025-14976](https://insights.sbomify.com/MAL-2025-14976/): Malicious code in astrochemistry-element-ui-darkenergy-blaze (npm) (malicious package) - [MAL-2025-149759](https://insights.sbomify.com/MAL-2025-149759/): Malicious code in xo-wolf-perseus-local (npm) (malicious package) - [MAL-2025-149758](https://insights.sbomify.com/MAL-2025-149758/): Malicious code in xo-unuk-europa-eris (npm) (malicious package) - [MAL-2025-149757](https://insights.sbomify.com/MAL-2025-149757/): Malicious code in xo-sirius-cors-canopus (npm) (malicious package) - [MAL-2025-149756](https://insights.sbomify.com/MAL-2025-149756/): Malicious code in xo-reveal-md-halley-nashira (npm) (malicious package) - [MAL-2025-149755](https://insights.sbomify.com/MAL-2025-149755/): Malicious code in xo-repository-package-europa (npm) (malicious package) - [MAL-2025-149754](https://insights.sbomify.com/MAL-2025-149754/): Malicious code in xo-repository-chai-subscription (npm) (malicious package) - [MAL-2025-149753](https://insights.sbomify.com/MAL-2025-149753/): Malicious code in xo-rehype-phoebe-callisto (npm) (malicious package) - [MAL-2025-149752](https://insights.sbomify.com/MAL-2025-149752/): Malicious code in xo-nova-thuban-eslint-plugin (npm) (malicious package) - [MAL-2025-149751](https://insights.sbomify.com/MAL-2025-149751/): Malicious code in xo-metalsmith-soap-yakutsk (npm) (malicious package) - [MAL-2025-149750](https://insights.sbomify.com/MAL-2025-149750/): Malicious code in xo-ignite-canopus-dagda (npm) (malicious package) - [MAL-2025-14975](https://insights.sbomify.com/MAL-2025-14975/): Malicious code in astrochemistry-cosmicsilence-hologram-zephyr (npm) (malicious package) - [MAL-2025-149749](https://insights.sbomify.com/MAL-2025-149749/): Malicious code in xo-hermes-csv-jekyll (npm) (malicious package) - [MAL-2025-149748](https://insights.sbomify.com/MAL-2025-149748/): Malicious code in xo-electron-builder-passport-dynamo (npm) (malicious package) - [MAL-2025-149747](https://insights.sbomify.com/MAL-2025-149747/): Malicious code in xo-dione-sedna-xenos (npm) (malicious package) - [MAL-2025-149746](https://insights.sbomify.com/MAL-2025-149746/): Malicious code in xo-despina-uglify-js-neptune (npm) (malicious package) - [MAL-2025-149745](https://insights.sbomify.com/MAL-2025-149745/): Malicious code in xo-colors-helmet-apollo (npm) (malicious package) - [MAL-2025-149744](https://insights.sbomify.com/MAL-2025-149744/): Malicious code in xo-auth0-sedna-node-sass (npm) (malicious package) - [MAL-2025-149743](https://insights.sbomify.com/MAL-2025-149743/): Malicious code in xo-async-less-dorado (npm) (malicious package) - [MAL-2025-149742](https://insights.sbomify.com/MAL-2025-149742/): Malicious code in xo-adonis-callisto-spinner (npm) (malicious package) - [MAL-2025-149741](https://insights.sbomify.com/MAL-2025-149741/): Malicious code in xo-achernar-prettier-stylelint-kastra (npm) (malicious package) - [MAL-2025-149740](https://insights.sbomify.com/MAL-2025-149740/): Malicious code in xml-version-rimraf-transport (npm) (malicious package) - [MAL-2025-14974](https://insights.sbomify.com/MAL-2025-14974/): Malicious code in astrochemistry-axios-venus-sirius (npm) (malicious package) - [MAL-2025-149739](https://insights.sbomify.com/MAL-2025-149739/): Malicious code in xml-ursa-uglify-js-zenobia (npm) (malicious package) - [MAL-2025-149738](https://insights.sbomify.com/MAL-2025-149738/): Malicious code in xml-umbra-pavo-pm2 (npm) (malicious package) - [MAL-2025-149737](https://insights.sbomify.com/MAL-2025-149737/): Malicious code in xml-triton-flare-auth0 (npm) (malicious package) - [MAL-2025-149736](https://insights.sbomify.com/MAL-2025-149736/): Malicious code in xml-tool-spectron-webdriver-antares (npm) (malicious package) - [MAL-2025-149735](https://insights.sbomify.com/MAL-2025-149735/): Malicious code in xml-start-cosmiconfig-cypress (npm) (malicious package) - [MAL-2025-149734](https://insights.sbomify.com/MAL-2025-149734/): Malicious code in xml-relay-jupiter-ultra (npm) (malicious package) - [MAL-2025-149733](https://insights.sbomify.com/MAL-2025-149733/): Malicious code in xml-phoebe-cosmos-sadr (npm) (malicious package) - [MAL-2025-149732](https://insights.sbomify.com/MAL-2025-149732/): Malicious code in xml-perseus-hugo-eslint-config (npm) (malicious package) - [MAL-2025-149731](https://insights.sbomify.com/MAL-2025-149731/): Malicious code in xml-non-blocking-unuk-sirius (npm) (malicious package) - [MAL-2025-149730](https://insights.sbomify.com/MAL-2025-149730/): Malicious code in xml-mocha-restart-semantic-release (npm) (malicious package) - [MAL-2025-14973](https://insights.sbomify.com/MAL-2025-14973/): Malicious code in astrobiology-singularity-phoebe-venus (npm) (malicious package) - [MAL-2025-149729](https://insights.sbomify.com/MAL-2025-149729/): Malicious code in xml-ganymede-apex-json (npm) (malicious package) - [MAL-2025-149728](https://insights.sbomify.com/MAL-2025-149728/): Malicious code in xml-bootstrap-dorado-writable (npm) (malicious package) - [MAL-2025-149727](https://insights.sbomify.com/MAL-2025-149727/): Malicious code in xml-aether-eleventy-apollo (npm) (malicious package) - [MAL-2025-149726](https://insights.sbomify.com/MAL-2025-149726/): Malicious code in xerxes-yaml-ini-redis (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1379/