# Vulnerabilities published in 2025


- [MAL-2025-149275](https://insights.sbomify.com/MAL-2025-149275/): Malicious code in warp-rigel-corvus-jovian (npm) (malicious package)
- [MAL-2025-149274](https://insights.sbomify.com/MAL-2025-149274/): Malicious code in warp-protractor-jsonp-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-149273](https://insights.sbomify.com/MAL-2025-149273/): Malicious code in warp-nodemon-spectron-rest (npm) (malicious package)
- [MAL-2025-149272](https://insights.sbomify.com/MAL-2025-149272/): Malicious code in warp-miranda-dotenv-safe-duplex (npm) (malicious package)
- [MAL-2025-149271](https://insights.sbomify.com/MAL-2025-149271/): Malicious code in warp-kastra-upgrade-iota (npm) (malicious package)
- [MAL-2025-149270](https://insights.sbomify.com/MAL-2025-149270/): Malicious code in warp-jwt-postcss-local (npm) (malicious package)
- [MAL-2025-14927](https://insights.sbomify.com/MAL-2025-14927/): Malicious code in aspen-xerox-hrj009-project (npm) (malicious package)
- [MAL-2025-149269](https://insights.sbomify.com/MAL-2025-149269/): Malicious code in warp-inquirer-perseus-canopus (npm) (malicious package)
- [MAL-2025-149268](https://insights.sbomify.com/MAL-2025-149268/): Malicious code in warp-dotenv-safe-rehype-hermes (npm) (malicious package)
- [MAL-2025-149267](https://insights.sbomify.com/MAL-2025-149267/): Malicious code in warp-dagda-antd-scripts (npm) (malicious package)
- [MAL-2025-149266](https://insights.sbomify.com/MAL-2025-149266/): Malicious code in warp-comet-csrf-slidev (npm) (malicious package)
- [MAL-2025-149265](https://insights.sbomify.com/MAL-2025-149265/): Malicious code in warp-charon-ariel-pegasus (npm) (malicious package)
- [MAL-2025-149264](https://insights.sbomify.com/MAL-2025-149264/): Malicious code in warp-cassini-bellatrix-lint-staged (npm) (malicious package)
- [MAL-2025-149263](https://insights.sbomify.com/MAL-2025-149263/): Malicious code in warp-callisto-library-phoebe (npm) (malicious package)
- [MAL-2025-149262](https://insights.sbomify.com/MAL-2025-149262/): Malicious code in warp-build-postcss-loader-semantic-release (npm) (malicious package)
- [MAL-2025-149261](https://insights.sbomify.com/MAL-2025-149261/): Malicious code in warp-avior-html-webpack-plugin-webpack (npm) (malicious package)
- [MAL-2025-149260](https://insights.sbomify.com/MAL-2025-149260/): Malicious code in warp-aldebaran-eslint-version (npm) (malicious package)
- [MAL-2025-14926](https://insights.sbomify.com/MAL-2025-14926/): Malicious code in aspen-whale-ygr161-project (npm) (malicious package)
- [MAL-2025-149259](https://insights.sbomify.com/MAL-2025-149259/): Malicious code in vulcan-vortex-soap-xanadu (npm) (malicious package)
- [MAL-2025-149258](https://insights.sbomify.com/MAL-2025-149258/): Malicious code in vulcan-umbriel-jovian-radiant (npm) (malicious package)
- [MAL-2025-149257](https://insights.sbomify.com/MAL-2025-149257/): Malicious code in vulcan-triton-procyon-vulcan (npm) (malicious package)
- [MAL-2025-149256](https://insights.sbomify.com/MAL-2025-149256/): Malicious code in vulcan-sqlite-delphinus-arcturus (npm) (malicious package)
- [MAL-2025-149255](https://insights.sbomify.com/MAL-2025-149255/): Malicious code in vulcan-solis-browserify-vuepress (npm) (malicious package)
- [MAL-2025-149254](https://insights.sbomify.com/MAL-2025-149254/): Malicious code in vulcan-sirius-thuban-koa (npm) (malicious package)
- [MAL-2025-149253](https://insights.sbomify.com/MAL-2025-149253/): Malicious code in vulcan-scripts-leda-websockets (npm) (malicious package)
- [MAL-2025-149252](https://insights.sbomify.com/MAL-2025-149252/): Malicious code in vulcan-reveal-md-ora-sedna (npm) (malicious package)
- [MAL-2025-149251](https://insights.sbomify.com/MAL-2025-149251/): Malicious code in vulcan-rate-limiter-library-tailwindcss (npm) (malicious package)
- [MAL-2025-149250](https://insights.sbomify.com/MAL-2025-149250/): Malicious code in vulcan-query-vulcan-venus (npm) (malicious package)
- [MAL-2025-14925](https://insights.sbomify.com/MAL-2025-14925/): Malicious code in aspen-spruce-sfr848-project (npm) (malicious package)
- [MAL-2025-149249](https://insights.sbomify.com/MAL-2025-149249/): Malicious code in vulcan-node-sass-commitlint-config-angular-puppeteer (npm) (malicious package)
- [MAL-2025-149248](https://insights.sbomify.com/MAL-2025-149248/): Malicious code in vulcan-nestjs-nodemon-magellan (npm) (malicious package)
- [MAL-2025-149247](https://insights.sbomify.com/MAL-2025-149247/): Malicious code in vulcan-neptune-rate-limiter-virgo (npm) (malicious package)
- [MAL-2025-149246](https://insights.sbomify.com/MAL-2025-149246/): Malicious code in vulcan-nconf-quark-child-process (npm) (malicious package)
- [MAL-2025-149245](https://insights.sbomify.com/MAL-2025-149245/): Malicious code in vulcan-mini-css-extract-plugin-commitlint-wasat (npm) (malicious package)
- [MAL-2025-149244](https://insights.sbomify.com/MAL-2025-149244/): Malicious code in vulcan-lyra-cassini-local (npm) (malicious package)
- [MAL-2025-149243](https://insights.sbomify.com/MAL-2025-149243/): Malicious code in vulcan-leda-auriga-antares (npm) (malicious package)
- [MAL-2025-149242](https://insights.sbomify.com/MAL-2025-149242/): Malicious code in vulcan-kaus-deimos-nashira (npm) (malicious package)
- [MAL-2025-149241](https://insights.sbomify.com/MAL-2025-149241/): Malicious code in vulcan-janus-winston-geckodriver (npm) (malicious package)
- [MAL-2025-149240](https://insights.sbomify.com/MAL-2025-149240/): Malicious code in vulcan-init-pino-pretty-geckodriver (npm) (malicious package)
- [MAL-2025-14924](https://insights.sbomify.com/MAL-2025-14924/): Malicious code in aspen-river-maz094-project (npm) (malicious package)
- [MAL-2025-149239](https://insights.sbomify.com/MAL-2025-149239/): Malicious code in vulcan-hyperion-wezen-europa (npm) (malicious package)
- [MAL-2025-149238](https://insights.sbomify.com/MAL-2025-149238/): Malicious code in vulcan-helios-carpo-local (npm) (malicious package)
- [MAL-2025-149237](https://insights.sbomify.com/MAL-2025-149237/): Malicious code in vulcan-gulp-ora-browserify (npm) (malicious package)
- [MAL-2025-149236](https://insights.sbomify.com/MAL-2025-149236/): Malicious code in vulcan-gravity-carina-centauri (npm) (malicious package)
- [MAL-2025-149235](https://insights.sbomify.com/MAL-2025-149235/): Malicious code in vulcan-graphql-sadr-leda (npm) (malicious package)
- [MAL-2025-149234](https://insights.sbomify.com/MAL-2025-149234/): Malicious code in vulcan-fork-colors-neptune (npm) (malicious package)
- [MAL-2025-149233](https://insights.sbomify.com/MAL-2025-149233/): Malicious code in vulcan-express-phenomic-meteor (npm) (malicious package)
- [MAL-2025-149232](https://insights.sbomify.com/MAL-2025-149232/): Malicious code in vulcan-exec-foundation-gridsome (npm) (malicious package)
- [MAL-2025-149231](https://insights.sbomify.com/MAL-2025-149231/): Malicious code in vulcan-eslint-plugin-aurora-deneb (npm) (malicious package)
- [MAL-2025-149230](https://insights.sbomify.com/MAL-2025-149230/): Malicious code in vulcan-eris-ophiuchus-gridsome (npm) (malicious package)
- [MAL-2025-14923](https://insights.sbomify.com/MAL-2025-14923/): Malicious code in aspen-paradise-kst547-project (npm) (malicious package)
- [MAL-2025-149229](https://insights.sbomify.com/MAL-2025-149229/): Malicious code in vulcan-eleventy-nextjs-aether (npm) (malicious package)
- [MAL-2025-149228](https://insights.sbomify.com/MAL-2025-149228/): Malicious code in vulcan-css-loader-command-nconf (npm) (malicious package)
- [MAL-2025-149227](https://insights.sbomify.com/MAL-2025-149227/): Malicious code in vulcan-concurrently-webdriver-mocha-grunt (npm) (malicious package)
- [MAL-2025-149226](https://insights.sbomify.com/MAL-2025-149226/): Malicious code in vulcan-commitlint-taurus-uninstall (npm) (malicious package)
- [MAL-2025-149225](https://insights.sbomify.com/MAL-2025-149225/): Malicious code in vulcan-browserify-non-blocking-relay (npm) (malicious package)
- [MAL-2025-149224](https://insights.sbomify.com/MAL-2025-149224/): Malicious code in vulcan-blitz-got-configstore (npm) (malicious package)
- [MAL-2025-149223](https://insights.sbomify.com/MAL-2025-149223/): Malicious code in vulcan-adonis-pino-zenobia (npm) (malicious package)
- [MAL-2025-149222](https://insights.sbomify.com/MAL-2025-149222/): Malicious code in vuetify-tool-markdown-apollo (npm) (malicious package)
- [MAL-2025-149221](https://insights.sbomify.com/MAL-2025-149221/): Malicious code in vuetify-puppeteer-stream-phoebe (npm) (malicious package)
- [MAL-2025-149220](https://insights.sbomify.com/MAL-2025-149220/): Malicious code in vuetify-protractor-dagda-kronos (npm) (malicious package)
- [MAL-2025-14922](https://insights.sbomify.com/MAL-2025-14922/): Malicious code in aspen-octopus-iaj797-project (npm) (malicious package)
- [MAL-2025-149219](https://insights.sbomify.com/MAL-2025-149219/): Malicious code in vuetify-postcss-loader-mongodb-less (npm) (malicious package)
- [MAL-2025-149218](https://insights.sbomify.com/MAL-2025-149218/): Malicious code in vuetify-polaris-jovian-norma (npm) (malicious package)
- [MAL-2025-149217](https://insights.sbomify.com/MAL-2025-149217/): Malicious code in vuetify-node-config-cressida-slidev (npm) (malicious package)
- [MAL-2025-149216](https://insights.sbomify.com/MAL-2025-149216/): Malicious code in vuetify-nconf-playwright-luna (npm) (malicious package)
- [MAL-2025-149215](https://insights.sbomify.com/MAL-2025-149215/): Malicious code in vuetify-mysql-lint-hermes (npm) (malicious package)
- [MAL-2025-149214](https://insights.sbomify.com/MAL-2025-149214/): Malicious code in vuetify-mongoose-ganymede-sails (npm) (malicious package)
- [MAL-2025-149213](https://insights.sbomify.com/MAL-2025-149213/): Malicious code in vuetify-loop-convict-run-script (npm) (malicious package)
- [MAL-2025-149212](https://insights.sbomify.com/MAL-2025-149212/): Malicious code in vuetify-lacerta-registry-mysql (npm) (malicious package)
- [MAL-2025-149211](https://insights.sbomify.com/MAL-2025-149211/): Malicious code in vuetify-ini-framework-commitizen (npm) (malicious package)
- [MAL-2025-149210](https://insights.sbomify.com/MAL-2025-149210/): Malicious code in vuetify-fornax-equinox-test (npm) (malicious package)
- [MAL-2025-14921](https://insights.sbomify.com/MAL-2025-14921/): Malicious code in aspen-kiwi-zry149-project (npm) (malicious package)
- [MAL-2025-149209](https://insights.sbomify.com/MAL-2025-149209/): Malicious code in vuetify-fork-xml-cache (npm) (malicious package)
- [MAL-2025-149208](https://insights.sbomify.com/MAL-2025-149208/): Malicious code in vuetify-europa-rollup-cygnus (npm) (malicious package)
- [MAL-2025-149207](https://insights.sbomify.com/MAL-2025-149207/): Malicious code in vuetify-dotenv-safe-spectron-docusaurus (npm) (malicious package)
- [MAL-2025-149206](https://insights.sbomify.com/MAL-2025-149206/): Malicious code in vuetify-delphinus-rigel-helmet (npm) (malicious package)
- [MAL-2025-149205](https://insights.sbomify.com/MAL-2025-149205/): Malicious code in vuetify-corvus-style-loader-dagda (npm) (malicious package)
- [MAL-2025-149204](https://insights.sbomify.com/MAL-2025-149204/): Malicious code in vuetify-chromedriver-tool-reveal-md (npm) (malicious package)
- [MAL-2025-149203](https://insights.sbomify.com/MAL-2025-149203/): Malicious code in vuetify-blaze-wezen-winston (npm) (malicious package)
- [MAL-2025-149202](https://insights.sbomify.com/MAL-2025-149202/): Malicious code in vuetify-alphard-dynamo-module (npm) (malicious package)
- [MAL-2025-149201](https://insights.sbomify.com/MAL-2025-149201/): Malicious code in vuepress-winston-middleware-sass-loader (npm) (malicious package)
- [MAL-2025-149200](https://insights.sbomify.com/MAL-2025-149200/): Malicious code in vuepress-rollup-plugin-bootes-polaris (npm) (malicious package)
- [MAL-2025-14920](https://insights.sbomify.com/MAL-2025-14920/): Malicious code in aspen-kiwi-map642-project (npm) (malicious package)
- [MAL-2025-1492](https://insights.sbomify.com/MAL-2025-1492/): Malicious code in opensource.razorpay.dev (npm) (malicious package)
- [MAL-2025-149199](https://insights.sbomify.com/MAL-2025-149199/): Malicious code in vuepress-rest-firebase-despina (npm) (malicious package)
- [MAL-2025-149198](https://insights.sbomify.com/MAL-2025-149198/): Malicious code in vuepress-query-private-antares (npm) (malicious package)
- [MAL-2025-149197](https://insights.sbomify.com/MAL-2025-149197/): Malicious code in vuepress-pegasus-gravity-betelgeuse (npm) (malicious package)
- [MAL-2025-149196](https://insights.sbomify.com/MAL-2025-149196/): Malicious code in vuepress-miranda-restart-cypress (npm) (malicious package)
- [MAL-2025-149195](https://insights.sbomify.com/MAL-2025-149195/): Malicious code in vuepress-aquarius-fornax-duplex (npm) (malicious package)
- [MAL-2025-149194](https://insights.sbomify.com/MAL-2025-149194/): Malicious code in vortex-zenobia-dactyl-express (npm) (malicious package)
- [MAL-2025-149193](https://insights.sbomify.com/MAL-2025-149193/): Malicious code in vortex-vulcan-commitlint-config-angular-shelljs (npm) (malicious package)
- [MAL-2025-149192](https://insights.sbomify.com/MAL-2025-149192/): Malicious code in vortex-taurus-less-enceladus (npm) (malicious package)
- [MAL-2025-149191](https://insights.sbomify.com/MAL-2025-149191/): Malicious code in vortex-scripts-scripts-webdriver-mocha (npm) (malicious package)
- [MAL-2025-149190](https://insights.sbomify.com/MAL-2025-149190/): Malicious code in vortex-request-websockets-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-14919](https://insights.sbomify.com/MAL-2025-14919/): Malicious code in aspen-kale-cig976-project (npm) (malicious package)
- [MAL-2025-149189](https://insights.sbomify.com/MAL-2025-149189/): Malicious code in vortex-postcss-loader-auriga-webpack (npm) (malicious package)
- [MAL-2025-149188](https://insights.sbomify.com/MAL-2025-149188/): Malicious code in vortex-pino-pretty-gacrux-gravity (npm) (malicious package)
- [MAL-2025-149187](https://insights.sbomify.com/MAL-2025-149187/): Malicious code in vortex-phenomic-schema-blitz (npm) (malicious package)
- [MAL-2025-149186](https://insights.sbomify.com/MAL-2025-149186/): Malicious code in vortex-octans-adonis-sirius (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1385/