# Vulnerabilities published in 2025 - [MAL-2025-149545](https://insights.sbomify.com/MAL-2025-149545/): Malicious code in wolf-cross-env-markdown-postcss-loader (npm) (malicious package) - [MAL-2025-149544](https://insights.sbomify.com/MAL-2025-149544/): Malicious code in wolf-comet-fetch-aether (npm) (malicious package) - [MAL-2025-149543](https://insights.sbomify.com/MAL-2025-149543/): Malicious code in wolf-comet-dotenv-safe-element-ui (npm) (malicious package) - [MAL-2025-149542](https://insights.sbomify.com/MAL-2025-149542/): Malicious code in wolf-centaurus-link-parcel (npm) (malicious package) - [MAL-2025-149541](https://insights.sbomify.com/MAL-2025-149541/): Malicious code in wolf-castor-rimraf-phoenix (npm) (malicious package) - [MAL-2025-149540](https://insights.sbomify.com/MAL-2025-149540/): Malicious code in wolf-carina-magellan-equinox (npm) (malicious package) - [MAL-2025-14954](https://insights.sbomify.com/MAL-2025-14954/): Malicious code in asteroid-hotel-rii0 (npm) (malicious package) - [MAL-2025-149539](https://insights.sbomify.com/MAL-2025-149539/): Malicious code in wolf-antares-uninstall-impulse (npm) (malicious package) - [MAL-2025-149538](https://insights.sbomify.com/MAL-2025-149538/): Malicious code in witty-gold-lemming (npm) (malicious package) - [MAL-2025-149537](https://insights.sbomify.com/MAL-2025-149537/): Malicious code in winston-zephyr-nuxtjs-phoenix (npm) (malicious package) - [MAL-2025-149536](https://insights.sbomify.com/MAL-2025-149536/): Malicious code in winston-yildun-less-loader-dactyl (npm) (malicious package) - [MAL-2025-149535](https://insights.sbomify.com/MAL-2025-149535/): Malicious code in winston-yaml-webdriver-mocha-repository (npm) (malicious package) - [MAL-2025-149534](https://insights.sbomify.com/MAL-2025-149534/): Malicious code in winston-wasat-gacrux-non-blocking (npm) (malicious package) - [MAL-2025-149533](https://insights.sbomify.com/MAL-2025-149533/): Malicious code in winston-wasat-frontend-hyperion (npm) (malicious package) - [MAL-2025-149532](https://insights.sbomify.com/MAL-2025-149532/): Malicious code in winston-vortex-prettier-neptune (npm) (malicious package) - [MAL-2025-149531](https://insights.sbomify.com/MAL-2025-149531/): Malicious code in winston-update-aldebaran-chakra-ui (npm) (malicious package) - [MAL-2025-149530](https://insights.sbomify.com/MAL-2025-149530/): Malicious code in winston-tethys-epimetheus-enif (npm) (malicious package) - [MAL-2025-14953](https://insights.sbomify.com/MAL-2025-14953/): Malicious code in asteroid-gacrux-husky-slides (npm) (malicious package) - [MAL-2025-149529](https://insights.sbomify.com/MAL-2025-149529/): Malicious code in winston-telesto-update-exec (npm) (malicious package) - [MAL-2025-149528](https://insights.sbomify.com/MAL-2025-149528/): Malicious code in winston-sqlite-typeorm-quantum (npm) (malicious package) - [MAL-2025-149527](https://insights.sbomify.com/MAL-2025-149527/): Malicious code in winston-sirius-lynx-publish (npm) (malicious package) - [MAL-2025-149526](https://insights.sbomify.com/MAL-2025-149526/): Malicious code in winston-server-cassini-blaze (npm) (malicious package) - [MAL-2025-149525](https://insights.sbomify.com/MAL-2025-149525/): Malicious code in winston-selenium-epimetheus-proxima (npm) (malicious package) - [MAL-2025-149524](https://insights.sbomify.com/MAL-2025-149524/): Malicious code in winston-reveal-md-betelgeuse-version (npm) (malicious package) - [MAL-2025-149523](https://insights.sbomify.com/MAL-2025-149523/): Malicious code in winston-registry-miranda-husky (npm) (malicious package) - [MAL-2025-149522](https://insights.sbomify.com/MAL-2025-149522/): Malicious code in winston-procyon-norma-xerxes (npm) (malicious package) - [MAL-2025-149521](https://insights.sbomify.com/MAL-2025-149521/): Malicious code in winston-procyon-cosmos-quito (npm) (malicious package) - [MAL-2025-149520](https://insights.sbomify.com/MAL-2025-149520/): Malicious code in winston-pino-pretty-parcel-publish (npm) (malicious package) - [MAL-2025-14952](https://insights.sbomify.com/MAL-2025-14952/): Malicious code in asteroid-everest-dok969-project (npm) (malicious package) - [MAL-2025-149519](https://insights.sbomify.com/MAL-2025-149519/): Malicious code in winston-phoebe-aquarius-aurora (npm) (malicious package) - [MAL-2025-149518](https://insights.sbomify.com/MAL-2025-149518/): Malicious code in winston-ophiuchus-native-parcel (npm) (malicious package) - [MAL-2025-149517](https://insights.sbomify.com/MAL-2025-149517/): Malicious code in winston-ophiuchus-configstore-loopback (npm) (malicious package) - [MAL-2025-149516](https://insights.sbomify.com/MAL-2025-149516/): Malicious code in winston-nodemon-electron-builder-rest (npm) (malicious package) - [MAL-2025-149515](https://insights.sbomify.com/MAL-2025-149515/): Malicious code in winston-nightwatch-sagitta-aldebaran (npm) (malicious package) - [MAL-2025-149514](https://insights.sbomify.com/MAL-2025-149514/): Malicious code in winston-nestjs-style-loader-orbit (npm) (malicious package) - [MAL-2025-149513](https://insights.sbomify.com/MAL-2025-149513/): Malicious code in winston-neptune-vuepress-chakra-ui (npm) (malicious package) - [MAL-2025-149512](https://insights.sbomify.com/MAL-2025-149512/): Malicious code in winston-neptune-standard-procyon (npm) (malicious package) - [MAL-2025-149511](https://insights.sbomify.com/MAL-2025-149511/): Malicious code in winston-mui-corvus-gravity (npm) (malicious package) - [MAL-2025-149510](https://insights.sbomify.com/MAL-2025-149510/): Malicious code in winston-mongoose-izar-miranda (npm) (malicious package) - [MAL-2025-14951](https://insights.sbomify.com/MAL-2025-14951/): Malicious code in asteroid-cascade-lik762-project (npm) (malicious package) - [MAL-2025-149509](https://insights.sbomify.com/MAL-2025-149509/): Malicious code in winston-miranda-sedna-playwright (npm) (malicious package) - [MAL-2025-149508](https://insights.sbomify.com/MAL-2025-149508/): Malicious code in winston-miranda-deimos-jupiter (npm) (malicious package) - [MAL-2025-149507](https://insights.sbomify.com/MAL-2025-149507/): Malicious code in winston-magellan-miranda-terser-webpack-plugin (npm) (malicious package) - [MAL-2025-149506](https://insights.sbomify.com/MAL-2025-149506/): Malicious code in winston-loglevel-ariel-cors (npm) (malicious package) - [MAL-2025-149505](https://insights.sbomify.com/MAL-2025-149505/): Malicious code in winston-link-sedna-gatsby (npm) (malicious package) - [MAL-2025-149504](https://insights.sbomify.com/MAL-2025-149504/): Malicious code in winston-koa-wasat-celeste (npm) (malicious package) - [MAL-2025-149503](https://insights.sbomify.com/MAL-2025-149503/): Malicious code in winston-jwt-sails-polaris (npm) (malicious package) - [MAL-2025-149502](https://insights.sbomify.com/MAL-2025-149502/): Malicious code in winston-jupiter-node-config-octans (npm) (malicious package) - [MAL-2025-149501](https://insights.sbomify.com/MAL-2025-149501/): Malicious code in winston-javascript-fork-pino (npm) (malicious package) - [MAL-2025-149500](https://insights.sbomify.com/MAL-2025-149500/): Malicious code in winston-izar-winston-thuban (npm) (malicious package) - [MAL-2025-14950](https://insights.sbomify.com/MAL-2025-14950/): Malicious code in asteroid-andromeda-superagent-terser (npm) (malicious package) - [MAL-2025-1495](https://insights.sbomify.com/MAL-2025-1495/): Malicious code in react-native-android-library-simpl-sdk (npm) (malicious package) - [MAL-2025-149499](https://insights.sbomify.com/MAL-2025-149499/): Malicious code in winston-iota-pipe-chromedriver (npm) (malicious package) - [MAL-2025-149498](https://insights.sbomify.com/MAL-2025-149498/): Malicious code in winston-init-public-prompts (npm) (malicious package) - [MAL-2025-149497](https://insights.sbomify.com/MAL-2025-149497/): Malicious code in winston-heka-loglevel-altair (npm) (malicious package) - [MAL-2025-149496](https://insights.sbomify.com/MAL-2025-149496/): Malicious code in winston-gulp-test-rest (npm) (malicious package) - [MAL-2025-149495](https://insights.sbomify.com/MAL-2025-149495/): Malicious code in winston-got-sagitta-xenon (npm) (malicious package) - [MAL-2025-149494](https://insights.sbomify.com/MAL-2025-149494/): Malicious code in winston-gatsby-zenobia-eslint (npm) (malicious package) - [MAL-2025-149493](https://insights.sbomify.com/MAL-2025-149493/): Malicious code in winston-farout-heka-redis (npm) (malicious package) - [MAL-2025-149492](https://insights.sbomify.com/MAL-2025-149492/): Malicious code in winston-eslint-plugin-quark-sagitta (npm) (malicious package) - [MAL-2025-149491](https://insights.sbomify.com/MAL-2025-149491/): Malicious code in winston-eslint-config-impulse-pino-pretty (npm) (malicious package) - [MAL-2025-149490](https://insights.sbomify.com/MAL-2025-149490/): Malicious code in winston-element-ui-chakra-ui-pino-pretty (npm) (malicious package) - [MAL-2025-14949](https://insights.sbomify.com/MAL-2025-14949/): Malicious code in asteroid-alpha-ad0m (npm) (malicious package) - [MAL-2025-149489](https://insights.sbomify.com/MAL-2025-149489/): Malicious code in winston-dynamo-axios-neptune (npm) (malicious package) - [MAL-2025-149488](https://insights.sbomify.com/MAL-2025-149488/): Malicious code in winston-dione-playwright-slides (npm) (malicious package) - [MAL-2025-149487](https://insights.sbomify.com/MAL-2025-149487/): Malicious code in winston-dactyl-figures-antd (npm) (malicious package) - [MAL-2025-149486](https://insights.sbomify.com/MAL-2025-149486/): Malicious code in winston-cressida-pino-pretty-quito (npm) (malicious package) - [MAL-2025-149485](https://insights.sbomify.com/MAL-2025-149485/): Malicious code in winston-changelog-dotenv-parse-variables-parcel (npm) (malicious package) - [MAL-2025-149484](https://insights.sbomify.com/MAL-2025-149484/): Malicious code in winston-changelog-cygnus-prompts (npm) (malicious package) - [MAL-2025-149483](https://insights.sbomify.com/MAL-2025-149483/): Malicious code in winston-cassini-mutation-orbit (npm) (malicious package) - [MAL-2025-149482](https://insights.sbomify.com/MAL-2025-149482/): Malicious code in winston-cache-stop-request (npm) (malicious package) - [MAL-2025-149481](https://insights.sbomify.com/MAL-2025-149481/): Malicious code in winston-bootes-package-postgres (npm) (malicious package) - [MAL-2025-149480](https://insights.sbomify.com/MAL-2025-149480/): Malicious code in winston-blaze-convict-luna (npm) (malicious package) - [MAL-2025-14948](https://insights.sbomify.com/MAL-2025-14948/): Malicious code in assignment-2-calendar (npm) (malicious package) - [MAL-2025-149479](https://insights.sbomify.com/MAL-2025-149479/): Malicious code in winston-bellatrix-cosmiconfig-frontend (npm) (malicious package) - [MAL-2025-149478](https://insights.sbomify.com/MAL-2025-149478/): Malicious code in winston-ariel-apex-sagitta (npm) (malicious package) - [MAL-2025-149477](https://insights.sbomify.com/MAL-2025-149477/): Malicious code in winston-antd-corvus-scorpius (npm) (malicious package) - [MAL-2025-149476](https://insights.sbomify.com/MAL-2025-149476/): Malicious code in winston-antares-lyra-javascript (npm) (malicious package) - [MAL-2025-149475](https://insights.sbomify.com/MAL-2025-149475/): Malicious code in wezen-yakutsk-semantic-release-sirius (npm) (malicious package) - [MAL-2025-149474](https://insights.sbomify.com/MAL-2025-149474/): Malicious code in wezen-webdriverio-rate-limiter-electron-builder (npm) (malicious package) - [MAL-2025-149473](https://insights.sbomify.com/MAL-2025-149473/): Malicious code in wezen-webdriver-manager-eslint-plugin-changelog (npm) (malicious package) - [MAL-2025-149472](https://insights.sbomify.com/MAL-2025-149472/): Malicious code in wezen-version-procyon-miranda (npm) (malicious package) - [MAL-2025-149471](https://insights.sbomify.com/MAL-2025-149471/): Malicious code in wezen-uglify-js-stop-regulus (npm) (malicious package) - [MAL-2025-149470](https://insights.sbomify.com/MAL-2025-149470/): Malicious code in wezen-spawn-oberon-zenith (npm) (malicious package) - [MAL-2025-14947](https://insights.sbomify.com/MAL-2025-14947/): Malicious code in assignment-02 (npm) (malicious package) - [MAL-2025-149469](https://insights.sbomify.com/MAL-2025-149469/): Malicious code in wezen-soap-grus-framework (npm) (malicious package) - [MAL-2025-149468](https://insights.sbomify.com/MAL-2025-149468/): Malicious code in wezen-scripts-virgo-hexo (npm) (malicious package) - [MAL-2025-149467](https://insights.sbomify.com/MAL-2025-149467/): Malicious code in wezen-rehype-redis-dotenv-parse-variables (npm) (malicious package) - [MAL-2025-149466](https://insights.sbomify.com/MAL-2025-149466/): Malicious code in wezen-redis-protractor-blitz (npm) (malicious package) - [MAL-2025-149465](https://insights.sbomify.com/MAL-2025-149465/): Malicious code in wezen-process-webdriver-mocha-pegasus (npm) (malicious package) - [MAL-2025-149464](https://insights.sbomify.com/MAL-2025-149464/): Malicious code in wezen-nodemon-spica-lint (npm) (malicious package) - [MAL-2025-149463](https://insights.sbomify.com/MAL-2025-149463/): Malicious code in wezen-mira-pm2-fusion (npm) (malicious package) - [MAL-2025-149462](https://insights.sbomify.com/MAL-2025-149462/): Malicious code in wezen-mira-morgan-indus (npm) (malicious package) - [MAL-2025-149461](https://insights.sbomify.com/MAL-2025-149461/): Malicious code in wezen-magellan-cassini-auth (npm) (malicious package) - [MAL-2025-149460](https://insights.sbomify.com/MAL-2025-149460/): Malicious code in wezen-local-venus-graphql (npm) (malicious package) - [MAL-2025-14946](https://insights.sbomify.com/MAL-2025-14946/): Malicious code in assigment (npm) (malicious package) - [MAL-2025-149459](https://insights.sbomify.com/MAL-2025-149459/): Malicious code in wezen-lint-izar-xenon (npm) (malicious package) - [MAL-2025-149458](https://insights.sbomify.com/MAL-2025-149458/): Malicious code in wezen-kaus-hydra-astro (npm) (malicious package) - [MAL-2025-149457](https://insights.sbomify.com/MAL-2025-149457/): Malicious code in wezen-inquirer-meissa-schema (npm) (malicious package) - [MAL-2025-149456](https://insights.sbomify.com/MAL-2025-149456/): Malicious code in wezen-gridsome-odin-husky (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1382/