# Vulnerabilities published in 2025


- [MAL-2025-149725](https://insights.sbomify.com/MAL-2025-149725/): Malicious code in xerxes-xo-solis-dactyl (npm) (malicious package)
- [MAL-2025-149724](https://insights.sbomify.com/MAL-2025-149724/): Malicious code in xerxes-weywot-eris-postcss (npm) (malicious package)
- [MAL-2025-149723](https://insights.sbomify.com/MAL-2025-149723/): Malicious code in xerxes-webdriver-manager-ursa-registry (npm) (malicious package)
- [MAL-2025-149722](https://insights.sbomify.com/MAL-2025-149722/): Malicious code in xerxes-testcafe-sqlite-axios (npm) (malicious package)
- [MAL-2025-149721](https://insights.sbomify.com/MAL-2025-149721/): Malicious code in xerxes-taurus-prettier-stylelint-carpo (npm) (malicious package)
- [MAL-2025-149720](https://insights.sbomify.com/MAL-2025-149720/): Malicious code in xerxes-slides-semantic-release-gravity (npm) (malicious package)
- [MAL-2025-14972](https://insights.sbomify.com/MAL-2025-14972/): Malicious code in astro-xenon-restart-capella (npm) (malicious package)
- [MAL-2025-149719](https://insights.sbomify.com/MAL-2025-149719/): Malicious code in xerxes-scripts-server-wezen (npm) (malicious package)
- [MAL-2025-149718](https://insights.sbomify.com/MAL-2025-149718/): Malicious code in xerxes-sagitta-inquirer-terser (npm) (malicious package)
- [MAL-2025-149717](https://insights.sbomify.com/MAL-2025-149717/): Malicious code in xerxes-repository-transform-browserify (npm) (malicious package)
- [MAL-2025-149716](https://insights.sbomify.com/MAL-2025-149716/): Malicious code in xerxes-repository-parcel-ora (npm) (malicious package)
- [MAL-2025-149715](https://insights.sbomify.com/MAL-2025-149715/): Malicious code in xerxes-public-eslint-plugin-quantum (npm) (malicious package)
- [MAL-2025-149714](https://insights.sbomify.com/MAL-2025-149714/): Malicious code in xerxes-playwright-quito-epimetheus (npm) (malicious package)
- [MAL-2025-149713](https://insights.sbomify.com/MAL-2025-149713/): Malicious code in xerxes-pavo-postgres-redis (npm) (malicious package)
- [MAL-2025-149712](https://insights.sbomify.com/MAL-2025-149712/): Malicious code in xerxes-ora-neptune-dotenv (npm) (malicious package)
- [MAL-2025-149711](https://insights.sbomify.com/MAL-2025-149711/): Malicious code in xerxes-nodemon-test-loopback (npm) (malicious package)
- [MAL-2025-149710](https://insights.sbomify.com/MAL-2025-149710/): Malicious code in xerxes-node-sass-mira-capella (npm) (malicious package)
- [MAL-2025-14971](https://insights.sbomify.com/MAL-2025-14971/): Malicious code in astro-publish-sedna-indus (npm) (malicious package)
- [MAL-2025-149709](https://insights.sbomify.com/MAL-2025-149709/): Malicious code in xerxes-link-grunt-triton (npm) (malicious package)
- [MAL-2025-149708](https://insights.sbomify.com/MAL-2025-149708/): Malicious code in xerxes-jsonp-castor-chromedriver (npm) (malicious package)
- [MAL-2025-149707](https://insights.sbomify.com/MAL-2025-149707/): Malicious code in xerxes-gridsome-postcss-loader-google (npm) (malicious package)
- [MAL-2025-149706](https://insights.sbomify.com/MAL-2025-149706/): Malicious code in xerxes-got-gatsby-levels (npm) (malicious package)
- [MAL-2025-149705](https://insights.sbomify.com/MAL-2025-149705/): Malicious code in xerxes-foundation-postcss-loader-aquarius (npm) (malicious package)
- [MAL-2025-149704](https://insights.sbomify.com/MAL-2025-149704/): Malicious code in xerxes-fork-miranda-perseus (npm) (malicious package)
- [MAL-2025-149703](https://insights.sbomify.com/MAL-2025-149703/): Malicious code in xerxes-farout-xenos-aurora (npm) (malicious package)
- [MAL-2025-149702](https://insights.sbomify.com/MAL-2025-149702/): Malicious code in xerxes-csrf-quasar-tailwindcss (npm) (malicious package)
- [MAL-2025-149701](https://insights.sbomify.com/MAL-2025-149701/): Malicious code in xerxes-chromedriver-query-sedna (npm) (malicious package)
- [MAL-2025-149700](https://insights.sbomify.com/MAL-2025-149700/): Malicious code in xerxes-bulma-ultra-json (npm) (malicious package)
- [MAL-2025-14970](https://insights.sbomify.com/MAL-2025-14970/): Malicious code in astro-postgres-init-oauth (npm) (malicious package)
- [MAL-2025-1497](https://insights.sbomify.com/MAL-2025-1497/): Malicious code in schedulermpastakash (npm) (malicious package)
- [MAL-2025-149699](https://insights.sbomify.com/MAL-2025-149699/): Malicious code in xerxes-bellatrix-cache-axios (npm) (malicious package)
- [MAL-2025-149698](https://insights.sbomify.com/MAL-2025-149698/): Malicious code in xerxes-astro-axios-rocket (npm) (malicious package)
- [MAL-2025-149697](https://insights.sbomify.com/MAL-2025-149697/): Malicious code in xenos-zenobia-postcss-janus (npm) (malicious package)
- [MAL-2025-149696](https://insights.sbomify.com/MAL-2025-149696/): Malicious code in xenos-xenon-husky-webpack (npm) (malicious package)
- [MAL-2025-149695](https://insights.sbomify.com/MAL-2025-149695/): Malicious code in xenos-wolf-test-publish (npm) (malicious package)
- [MAL-2025-149694](https://insights.sbomify.com/MAL-2025-149694/): Malicious code in xenos-weywot-yonder-io (npm) (malicious package)
- [MAL-2025-149693](https://insights.sbomify.com/MAL-2025-149693/): Malicious code in xenos-vuepress-socketio-karma (npm) (malicious package)
- [MAL-2025-149692](https://insights.sbomify.com/MAL-2025-149692/): Malicious code in xenos-unuk-version-elektra (npm) (malicious package)
- [MAL-2025-149691](https://insights.sbomify.com/MAL-2025-149691/): Malicious code in xenos-thuban-resolvers-native (npm) (malicious package)
- [MAL-2025-149690](https://insights.sbomify.com/MAL-2025-149690/): Malicious code in xenos-style-loader-transport-electron-builder (npm) (malicious package)
- [MAL-2025-14969](https://insights.sbomify.com/MAL-2025-14969/): Malicious code in astro-neptune-ariel-antimatter (npm) (malicious package)
- [MAL-2025-149689](https://insights.sbomify.com/MAL-2025-149689/): Malicious code in xenos-run-script-weywot-exec (npm) (malicious package)
- [MAL-2025-149688](https://insights.sbomify.com/MAL-2025-149688/): Malicious code in xenos-repository-non-blocking-triton (npm) (malicious package)
- [MAL-2025-149687](https://insights.sbomify.com/MAL-2025-149687/): Malicious code in xenos-phenomic-quito-aether (npm) (malicious package)
- [MAL-2025-149686](https://insights.sbomify.com/MAL-2025-149686/): Malicious code in xenos-octans-bellatrix-vega (npm) (malicious package)
- [MAL-2025-149685](https://insights.sbomify.com/MAL-2025-149685/): Malicious code in xenos-mongoose-stream-fornax (npm) (malicious package)
- [MAL-2025-149684](https://insights.sbomify.com/MAL-2025-149684/): Malicious code in xenos-magellan-callback-dotenv (npm) (malicious package)
- [MAL-2025-149683](https://insights.sbomify.com/MAL-2025-149683/): Malicious code in xenos-link-spectron-webdriver-kastra (npm) (malicious package)
- [MAL-2025-149682](https://insights.sbomify.com/MAL-2025-149682/): Malicious code in xenos-library-virgo-weywot (npm) (malicious package)
- [MAL-2025-149681](https://insights.sbomify.com/MAL-2025-149681/): Malicious code in xenos-levels-supervisor-hapi (npm) (malicious package)
- [MAL-2025-149680](https://insights.sbomify.com/MAL-2025-149680/): Malicious code in xenos-halley-nextjs-ini (npm) (malicious package)
- [MAL-2025-14968](https://insights.sbomify.com/MAL-2025-14968/): Malicious code in astro-colors-sagitta-cors (npm) (malicious package)
- [MAL-2025-149679](https://insights.sbomify.com/MAL-2025-149679/): Malicious code in xenos-gridsome-start-titan (npm) (malicious package)
- [MAL-2025-149678](https://insights.sbomify.com/MAL-2025-149678/): Malicious code in xenos-gridsome-quito-chakra-ui (npm) (malicious package)
- [MAL-2025-149677](https://insights.sbomify.com/MAL-2025-149677/): Malicious code in xenos-fusion-terser-transform (npm) (malicious package)
- [MAL-2025-149676](https://insights.sbomify.com/MAL-2025-149676/): Malicious code in xenos-framework-semantic-release-query (npm) (malicious package)
- [MAL-2025-149675](https://insights.sbomify.com/MAL-2025-149675/): Malicious code in xenos-fetch-gulp-eslint-config (npm) (malicious package)
- [MAL-2025-149674](https://insights.sbomify.com/MAL-2025-149674/): Malicious code in xenos-cypress-ursa-callback (npm) (malicious package)
- [MAL-2025-149673](https://insights.sbomify.com/MAL-2025-149673/): Malicious code in xenos-airbnb-quito-cypress (npm) (malicious package)
- [MAL-2025-149672](https://insights.sbomify.com/MAL-2025-149672/): Malicious code in xenon-xenos-sadr-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-149671](https://insights.sbomify.com/MAL-2025-149671/): Malicious code in xenon-warp-luna-perseus (npm) (malicious package)
- [MAL-2025-149670](https://insights.sbomify.com/MAL-2025-149670/): Malicious code in xenon-virgo-dynamo-async (npm) (malicious package)
- [MAL-2025-14967](https://insights.sbomify.com/MAL-2025-14967/): Malicious code in astro-cache-ablation-css-loader (npm) (malicious package)
- [MAL-2025-149669](https://insights.sbomify.com/MAL-2025-149669/): Malicious code in xenon-version-lyra-nuxtjs (npm) (malicious package)
- [MAL-2025-149668](https://insights.sbomify.com/MAL-2025-149668/): Malicious code in xenon-ursa-semantic-ui-firebase (npm) (malicious package)
- [MAL-2025-149667](https://insights.sbomify.com/MAL-2025-149667/): Malicious code in xenon-umbriel-jest-eclipse (npm) (malicious package)
- [MAL-2025-149666](https://insights.sbomify.com/MAL-2025-149666/): Malicious code in xenon-umbriel-jekyll-rimraf (npm) (malicious package)
- [MAL-2025-149665](https://insights.sbomify.com/MAL-2025-149665/): Malicious code in xenon-tool-acamar-slides (npm) (malicious package)
- [MAL-2025-149664](https://insights.sbomify.com/MAL-2025-149664/): Malicious code in xenon-sync-despina-heka (npm) (malicious package)
- [MAL-2025-149663](https://insights.sbomify.com/MAL-2025-149663/): Malicious code in xenon-subscription-configstore-helios (npm) (malicious package)
- [MAL-2025-149662](https://insights.sbomify.com/MAL-2025-149662/): Malicious code in xenon-shelljs-chariklo-loglevel (npm) (malicious package)
- [MAL-2025-149661](https://insights.sbomify.com/MAL-2025-149661/): Malicious code in xenon-schema-orbit-sirius (npm) (malicious package)
- [MAL-2025-149660](https://insights.sbomify.com/MAL-2025-149660/): Malicious code in xenon-sails-standard-scripts (npm) (malicious package)
- [MAL-2025-14966](https://insights.sbomify.com/MAL-2025-14966/): Malicious code in asthenosphere-superposition-troposphere-carina (npm) (malicious package)
- [MAL-2025-149659](https://insights.sbomify.com/MAL-2025-149659/): Malicious code in xenon-repository-radiant-configstore (npm) (malicious package)
- [MAL-2025-149658](https://insights.sbomify.com/MAL-2025-149658/): Malicious code in xenon-quantum-miranda-markdownlint (npm) (malicious package)
- [MAL-2025-149657](https://insights.sbomify.com/MAL-2025-149657/): Malicious code in xenon-process-levels-cassini (npm) (malicious package)
- [MAL-2025-149656](https://insights.sbomify.com/MAL-2025-149656/): Malicious code in xenon-optimize-css-assets-webpack-plugin-wezen-betelgeuse (npm) (malicious package)
- [MAL-2025-149655](https://insights.sbomify.com/MAL-2025-149655/): Malicious code in xenon-oberon-semantic-release-mysql (npm) (malicious package)
- [MAL-2025-149654](https://insights.sbomify.com/MAL-2025-149654/): Malicious code in xenon-oauth-framework-stream (npm) (malicious package)
- [MAL-2025-149653](https://insights.sbomify.com/MAL-2025-149653/): Malicious code in xenon-nodejs-tethys-husky (npm) (malicious package)
- [MAL-2025-149652](https://insights.sbomify.com/MAL-2025-149652/): Malicious code in xenon-neptune-phoebe-stream (npm) (malicious package)
- [MAL-2025-149651](https://insights.sbomify.com/MAL-2025-149651/): Malicious code in xenon-mensa-wolf-csrf (npm) (malicious package)
- [MAL-2025-149650](https://insights.sbomify.com/MAL-2025-149650/): Malicious code in xenon-mensa-test-parcel (npm) (malicious package)
- [MAL-2025-14965](https://insights.sbomify.com/MAL-2025-14965/): Malicious code in asteroid-yard-rfs559-project (npm) (malicious package)
- [MAL-2025-149649](https://insights.sbomify.com/MAL-2025-149649/): Malicious code in xenon-loglevel-dependencies-request (npm) (malicious package)
- [MAL-2025-149648](https://insights.sbomify.com/MAL-2025-149648/): Malicious code in xenon-library-cors-ophiuchus (npm) (malicious package)
- [MAL-2025-149647](https://insights.sbomify.com/MAL-2025-149647/): Malicious code in xenon-jabbah-enceladus-gemini (npm) (malicious package)
- [MAL-2025-149646](https://insights.sbomify.com/MAL-2025-149646/): Malicious code in xenon-hercules-radiant-chariklo (npm) (malicious package)
- [MAL-2025-149645](https://insights.sbomify.com/MAL-2025-149645/): Malicious code in xenon-grunt-elektra-procyon (npm) (malicious package)
- [MAL-2025-149644](https://insights.sbomify.com/MAL-2025-149644/): Malicious code in xenon-fork-levels-docusaurus (npm) (malicious package)
- [MAL-2025-149643](https://insights.sbomify.com/MAL-2025-149643/): Malicious code in xenon-build-server-forever (npm) (malicious package)
- [MAL-2025-149642](https://insights.sbomify.com/MAL-2025-149642/): Malicious code in xenon-bootes-local-bulma (npm) (malicious package)
- [MAL-2025-149641](https://insights.sbomify.com/MAL-2025-149641/): Malicious code in xenon-ariel-foundation-bootstrap (npm) (malicious package)
- [MAL-2025-149640](https://insights.sbomify.com/MAL-2025-149640/): Malicious code in xanthus-zephyr-deimos-superagent (npm) (malicious package)
- [MAL-2025-14964](https://insights.sbomify.com/MAL-2025-14964/): Malicious code in asteroid-xenon-xot613-project (npm) (malicious package)
- [MAL-2025-149639](https://insights.sbomify.com/MAL-2025-149639/): Malicious code in xanthus-xerxes-zenith-semantic-ui (npm) (malicious package)
- [MAL-2025-149638](https://insights.sbomify.com/MAL-2025-149638/): Malicious code in xanthus-stop-antares-carina (npm) (malicious package)
- [MAL-2025-149637](https://insights.sbomify.com/MAL-2025-149637/): Malicious code in xanthus-solis-nextjs-iota (npm) (malicious package)
- [MAL-2025-149636](https://insights.sbomify.com/MAL-2025-149636/): Malicious code in xanthus-restart-publish-resolvers (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1380/