# Vulnerabilities published in 2025


- [MAL-2025-149635](https://insights.sbomify.com/MAL-2025-149635/): Malicious code in xanthus-rehype-sagitta-lint (npm) (malicious package)
- [MAL-2025-149634](https://insights.sbomify.com/MAL-2025-149634/): Malicious code in xanthus-polaris-schema-mui (npm) (malicious package)
- [MAL-2025-149633](https://insights.sbomify.com/MAL-2025-149633/): Malicious code in xanthus-phoebe-lint-andromeda (npm) (malicious package)
- [MAL-2025-149632](https://insights.sbomify.com/MAL-2025-149632/): Malicious code in xanthus-nodemon-apollo-prettier-stylelint (npm) (malicious package)
- [MAL-2025-149631](https://insights.sbomify.com/MAL-2025-149631/): Malicious code in xanthus-middleware-sadr-winston (npm) (malicious package)
- [MAL-2025-149630](https://insights.sbomify.com/MAL-2025-149630/): Malicious code in xanthus-lint-staged-blaze-cassini (npm) (malicious package)
- [MAL-2025-14963](https://insights.sbomify.com/MAL-2025-14963/): Malicious code in asteroid-vortex-avk169-project (npm) (malicious package)
- [MAL-2025-149629](https://insights.sbomify.com/MAL-2025-149629/): Malicious code in xanthus-koa-cross-env-webdriver-mocha (npm) (malicious package)
- [MAL-2025-149628](https://insights.sbomify.com/MAL-2025-149628/): Malicious code in xanthus-indus-umbra-blitz (npm) (malicious package)
- [MAL-2025-149627](https://insights.sbomify.com/MAL-2025-149627/): Malicious code in xanthus-hexo-scripts-prettier (npm) (malicious package)
- [MAL-2025-149626](https://insights.sbomify.com/MAL-2025-149626/): Malicious code in xanthus-hapi-buffer-dione (npm) (malicious package)
- [MAL-2025-149625](https://insights.sbomify.com/MAL-2025-149625/): Malicious code in xanthus-halley-gravity-mutation (npm) (malicious package)
- [MAL-2025-149624](https://insights.sbomify.com/MAL-2025-149624/): Malicious code in xanthus-express-prettier-duplex (npm) (malicious package)
- [MAL-2025-149623](https://insights.sbomify.com/MAL-2025-149623/): Malicious code in xanthus-element-ui-webdriver-manager-nconf (npm) (malicious package)
- [MAL-2025-149622](https://insights.sbomify.com/MAL-2025-149622/): Malicious code in xanthus-electron-builder-chakra-ui-lint-staged (npm) (malicious package)
- [MAL-2025-149621](https://insights.sbomify.com/MAL-2025-149621/): Malicious code in xanthus-cors-development-mongodb (npm) (malicious package)
- [MAL-2025-149620](https://insights.sbomify.com/MAL-2025-149620/): Malicious code in xanthus-colors-umbriel-avior (npm) (malicious package)
- [MAL-2025-14962](https://insights.sbomify.com/MAL-2025-14962/): Malicious code in asteroid-vine-qnk968-project (npm) (malicious package)
- [MAL-2025-149619](https://insights.sbomify.com/MAL-2025-149619/): Malicious code in xanthus-build-development-fornax (npm) (malicious package)
- [MAL-2025-149618](https://insights.sbomify.com/MAL-2025-149618/): Malicious code in xanthus-bellatrix-less-registry (npm) (malicious package)
- [MAL-2025-149617](https://insights.sbomify.com/MAL-2025-149617/): Malicious code in xanthus-achernar-xenon-chalk (npm) (malicious package)
- [MAL-2025-149616](https://insights.sbomify.com/MAL-2025-149616/): Malicious code in xanadu-yildun-kinetic-prettier-stylelint (npm) (malicious package)
- [MAL-2025-149615](https://insights.sbomify.com/MAL-2025-149615/): Malicious code in xanadu-vortex-commitlint-electron (npm) (malicious package)
- [MAL-2025-149614](https://insights.sbomify.com/MAL-2025-149614/): Malicious code in xanadu-virgo-meteor-capella (npm) (malicious package)
- [MAL-2025-149613](https://insights.sbomify.com/MAL-2025-149613/): Malicious code in xanadu-umbra-got-reveal-md (npm) (malicious package)
- [MAL-2025-149612](https://insights.sbomify.com/MAL-2025-149612/): Malicious code in xanadu-tethys-rigel-xenon (npm) (malicious package)
- [MAL-2025-149611](https://insights.sbomify.com/MAL-2025-149611/): Malicious code in xanadu-spectron-mensa-hyperion (npm) (malicious package)
- [MAL-2025-149610](https://insights.sbomify.com/MAL-2025-149610/): Malicious code in xanadu-server-backend-google (npm) (malicious package)
- [MAL-2025-14961](https://insights.sbomify.com/MAL-2025-14961/): Malicious code in asteroid-supernova-5xbi (npm) (malicious package)
- [MAL-2025-149609](https://insights.sbomify.com/MAL-2025-149609/): Malicious code in xanadu-run-script-ceres-loopback (npm) (malicious package)
- [MAL-2025-149608](https://insights.sbomify.com/MAL-2025-149608/): Malicious code in xanadu-resolvers-xml-scripts (npm) (malicious package)
- [MAL-2025-149607](https://insights.sbomify.com/MAL-2025-149607/): Malicious code in xanadu-repository-csv-venus (npm) (malicious package)
- [MAL-2025-149606](https://insights.sbomify.com/MAL-2025-149606/): Malicious code in xanadu-postcss-slides-reveal-md (npm) (malicious package)
- [MAL-2025-149605](https://insights.sbomify.com/MAL-2025-149605/): Malicious code in xanadu-package-cygnus-dorado (npm) (malicious package)
- [MAL-2025-149604](https://insights.sbomify.com/MAL-2025-149604/): Malicious code in xanadu-octans-rest-fusion (npm) (malicious package)
- [MAL-2025-149603](https://insights.sbomify.com/MAL-2025-149603/): Malicious code in xanadu-oauth-ariel-juno (npm) (malicious package)
- [MAL-2025-149602](https://insights.sbomify.com/MAL-2025-149602/): Malicious code in xanadu-mongodb-typeorm-iota (npm) (malicious package)
- [MAL-2025-149601](https://insights.sbomify.com/MAL-2025-149601/): Malicious code in xanadu-miranda-fetch-aurora (npm) (malicious package)
- [MAL-2025-149600](https://insights.sbomify.com/MAL-2025-149600/): Malicious code in xanadu-loopback-enif-ariel (npm) (malicious package)
- [MAL-2025-14960](https://insights.sbomify.com/MAL-2025-14960/): Malicious code in asteroid-redshift-xtlf (npm) (malicious package)
- [MAL-2025-1496](https://insights.sbomify.com/MAL-2025-1496/): Malicious code in sally-fn (npm) (malicious package)
- [MAL-2025-149599](https://insights.sbomify.com/MAL-2025-149599/): Malicious code in xanadu-leda-bunyan-delphinus (npm) (malicious package)
- [MAL-2025-149598](https://insights.sbomify.com/MAL-2025-149598/): Malicious code in xanadu-hercules-passport-celeste (npm) (malicious package)
- [MAL-2025-149597](https://insights.sbomify.com/MAL-2025-149597/): Malicious code in xanadu-helios-webdriver-manager-uninstall (npm) (malicious package)
- [MAL-2025-149596](https://insights.sbomify.com/MAL-2025-149596/): Malicious code in xanadu-fomalhaut-umbriel-nodemon (npm) (malicious package)
- [MAL-2025-149595](https://insights.sbomify.com/MAL-2025-149595/): Malicious code in xanadu-firebase-hydra-avior (npm) (malicious package)
- [MAL-2025-149594](https://insights.sbomify.com/MAL-2025-149594/): Malicious code in xanadu-electron-uninstall-zenobia (npm) (malicious package)
- [MAL-2025-149593](https://insights.sbomify.com/MAL-2025-149593/): Malicious code in xanadu-deneb-non-blocking-atlas (npm) (malicious package)
- [MAL-2025-149592](https://insights.sbomify.com/MAL-2025-149592/): Malicious code in xanadu-comet-nodejs-fornax (npm) (malicious package)
- [MAL-2025-149591](https://insights.sbomify.com/MAL-2025-149591/): Malicious code in xanadu-child-process-passport-upgrade (npm) (malicious package)
- [MAL-2025-149590](https://insights.sbomify.com/MAL-2025-149590/): Malicious code in xanadu-centaurus-scorpius-babel (npm) (malicious package)
- [MAL-2025-14959](https://insights.sbomify.com/MAL-2025-14959/): Malicious code in asteroid-quasar-wk9r (npm) (malicious package)
- [MAL-2025-149589](https://insights.sbomify.com/MAL-2025-149589/): Malicious code in xanadu-callback-request-bootstrap (npm) (malicious package)
- [MAL-2025-149588](https://insights.sbomify.com/MAL-2025-149588/): Malicious code in xanadu-await-rehype-regulus (npm) (malicious package)
- [MAL-2025-149587](https://insights.sbomify.com/MAL-2025-149587/): Malicious code in xanadu-auth0-xo-kinetic (npm) (malicious package)
- [MAL-2025-149586](https://insights.sbomify.com/MAL-2025-149586/): Malicious code in xanadu-async-prompts-stop (npm) (malicious package)
- [MAL-2025-149585](https://insights.sbomify.com/MAL-2025-149585/): Malicious code in writable-yakutsk-loglevel-koa (npm) (malicious package)
- [MAL-2025-149584](https://insights.sbomify.com/MAL-2025-149584/): Malicious code in writable-xo-zenobia-tethys (npm) (malicious package)
- [MAL-2025-149583](https://insights.sbomify.com/MAL-2025-149583/): Malicious code in writable-uninstall-jasmine-csrf (npm) (malicious package)
- [MAL-2025-149582](https://insights.sbomify.com/MAL-2025-149582/): Malicious code in writable-umbriel-betelgeuse-altair (npm) (malicious package)
- [MAL-2025-149581](https://insights.sbomify.com/MAL-2025-149581/): Malicious code in writable-supervisor-zenobia-blaze (npm) (malicious package)
- [MAL-2025-149580](https://insights.sbomify.com/MAL-2025-149580/): Malicious code in writable-supervisor-proxima-solis (npm) (malicious package)
- [MAL-2025-14958](https://insights.sbomify.com/MAL-2025-14958/): Malicious code in asteroid-pebble-ctd957-project (npm) (malicious package)
- [MAL-2025-149579](https://insights.sbomify.com/MAL-2025-149579/): Malicious code in writable-polaris-dione-meissa (npm) (malicious package)
- [MAL-2025-149578](https://insights.sbomify.com/MAL-2025-149578/): Malicious code in writable-polaris-babel-elektra (npm) (malicious package)
- [MAL-2025-149577](https://insights.sbomify.com/MAL-2025-149577/): Malicious code in writable-pipe-terser-spinner (npm) (malicious package)
- [MAL-2025-149576](https://insights.sbomify.com/MAL-2025-149576/): Malicious code in writable-neptune-norma-schema (npm) (malicious package)
- [MAL-2025-149575](https://insights.sbomify.com/MAL-2025-149575/): Malicious code in writable-neptune-figures-oauth (npm) (malicious package)
- [MAL-2025-149574](https://insights.sbomify.com/MAL-2025-149574/): Malicious code in writable-mui-iota-quark (npm) (malicious package)
- [MAL-2025-149573](https://insights.sbomify.com/MAL-2025-149573/): Malicious code in writable-mui-eclipse-quark (npm) (malicious package)
- [MAL-2025-149572](https://insights.sbomify.com/MAL-2025-149572/): Malicious code in writable-mongoose-dagda-library (npm) (malicious package)
- [MAL-2025-149571](https://insights.sbomify.com/MAL-2025-149571/): Malicious code in writable-karma-kronos-run-script (npm) (malicious package)
- [MAL-2025-149570](https://insights.sbomify.com/MAL-2025-149570/): Malicious code in writable-jabbah-elektra-rest (npm) (malicious package)
- [MAL-2025-14957](https://insights.sbomify.com/MAL-2025-14957/): Malicious code in asteroid-paradise-pee257-project (npm) (malicious package)
- [MAL-2025-149569](https://insights.sbomify.com/MAL-2025-149569/): Malicious code in writable-izar-tool-cli (npm) (malicious package)
- [MAL-2025-149568](https://insights.sbomify.com/MAL-2025-149568/): Malicious code in wolf-yaml-morgan-cross-env (npm) (malicious package)
- [MAL-2025-149567](https://insights.sbomify.com/MAL-2025-149567/): Malicious code in wolf-xo-meteor-figures (npm) (malicious package)
- [MAL-2025-149566](https://insights.sbomify.com/MAL-2025-149566/): Malicious code in wolf-vortex-helmet-websockets (npm) (malicious package)
- [MAL-2025-149565](https://insights.sbomify.com/MAL-2025-149565/): Malicious code in wolf-tailwindcss-gulp-docusaurus (npm) (malicious package)
- [MAL-2025-149564](https://insights.sbomify.com/MAL-2025-149564/): Malicious code in wolf-slides-nightwatch-prettier (npm) (malicious package)
- [MAL-2025-149563](https://insights.sbomify.com/MAL-2025-149563/): Malicious code in wolf-sequelize-gatsby-node-config (npm) (malicious package)
- [MAL-2025-149562](https://insights.sbomify.com/MAL-2025-149562/): Malicious code in wolf-sagitta-geckodriver-meissa (npm) (malicious package)
- [MAL-2025-149561](https://insights.sbomify.com/MAL-2025-149561/): Malicious code in wolf-sadr-venus-frontend (npm) (malicious package)
- [MAL-2025-149560](https://insights.sbomify.com/MAL-2025-149560/): Malicious code in wolf-pyxis-rollup-subscription (npm) (malicious package)
- [MAL-2025-14956](https://insights.sbomify.com/MAL-2025-14956/): Malicious code in asteroid-orchid-xvb262-project (npm) (malicious package)
- [MAL-2025-149559](https://insights.sbomify.com/MAL-2025-149559/): Malicious code in wolf-polaris-zenith-commitizen (npm) (malicious package)
- [MAL-2025-149558](https://insights.sbomify.com/MAL-2025-149558/): Malicious code in wolf-pm2-nightmare-tethys (npm) (malicious package)
- [MAL-2025-149557](https://insights.sbomify.com/MAL-2025-149557/): Malicious code in wolf-pino-pretty-iota-hyperion (npm) (malicious package)
- [MAL-2025-149556](https://insights.sbomify.com/MAL-2025-149556/): Malicious code in wolf-perseus-release-it-mongodb (npm) (malicious package)
- [MAL-2025-149555](https://insights.sbomify.com/MAL-2025-149555/): Malicious code in wolf-optimize-css-assets-webpack-plugin-vuepress-procyon (npm) (malicious package)
- [MAL-2025-149554](https://insights.sbomify.com/MAL-2025-149554/): Malicious code in wolf-ophiuchus-eslint-config-framework (npm) (malicious package)
- [MAL-2025-149553](https://insights.sbomify.com/MAL-2025-149553/): Malicious code in wolf-nuxtjs-mira-spica (npm) (malicious package)
- [MAL-2025-149552](https://insights.sbomify.com/MAL-2025-149552/): Malicious code in wolf-loglevel-hyperion-proxima (npm) (malicious package)
- [MAL-2025-149551](https://insights.sbomify.com/MAL-2025-149551/): Malicious code in wolf-jabbah-axios-proxima (npm) (malicious package)
- [MAL-2025-149550](https://insights.sbomify.com/MAL-2025-149550/): Malicious code in wolf-halley-weywot-socketio (npm) (malicious package)
- [MAL-2025-14955](https://insights.sbomify.com/MAL-2025-14955/): Malicious code in asteroid-lagoon-dpn557-project (npm) (malicious package)
- [MAL-2025-149549](https://insights.sbomify.com/MAL-2025-149549/): Malicious code in wolf-got-corvus-prettier-stylelint (npm) (malicious package)
- [MAL-2025-149548](https://insights.sbomify.com/MAL-2025-149548/): Malicious code in wolf-enceladus-telesto-nebula (npm) (malicious package)
- [MAL-2025-149547](https://insights.sbomify.com/MAL-2025-149547/): Malicious code in wolf-dotenv-safe-init-process (npm) (malicious package)
- [MAL-2025-149546](https://insights.sbomify.com/MAL-2025-149546/): Malicious code in wolf-dactyl-materialize-parcel (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1381/