# Vulnerabilities published in 2025


- [MAL-2025-149185](https://insights.sbomify.com/MAL-2025-149185/): Malicious code in vortex-norma-spawn-fusion (npm) (malicious package)
- [MAL-2025-149184](https://insights.sbomify.com/MAL-2025-149184/): Malicious code in vortex-loglevel-deimos-webdriver-manager (npm) (malicious package)
- [MAL-2025-149183](https://insights.sbomify.com/MAL-2025-149183/): Malicious code in vortex-hyperion-chariklo-fork (npm) (malicious package)
- [MAL-2025-149182](https://insights.sbomify.com/MAL-2025-149182/): Malicious code in vortex-halley-envconfig-sagitta (npm) (malicious package)
- [MAL-2025-149181](https://insights.sbomify.com/MAL-2025-149181/): Malicious code in vortex-figures-cache-passport (npm) (malicious package)
- [MAL-2025-149180](https://insights.sbomify.com/MAL-2025-149180/): Malicious code in vortex-apollo-meteor-fornax (npm) (malicious package)
- [MAL-2025-14918](https://insights.sbomify.com/MAL-2025-14918/): Malicious code in aspen-honeycomb-kba226-project (npm) (malicious package)
- [MAL-2025-149179](https://insights.sbomify.com/MAL-2025-149179/): Malicious code in vortex-apollo-luna-eris (npm) (malicious package)
- [MAL-2025-149178](https://insights.sbomify.com/MAL-2025-149178/): Malicious code in vortex-antares-axios-hydra (npm) (malicious package)
- [MAL-2025-149177](https://insights.sbomify.com/MAL-2025-149177/): Malicious code in virgo-zenith-rocket-envconfig (npm) (malicious package)
- [MAL-2025-149176](https://insights.sbomify.com/MAL-2025-149176/): Malicious code in virgo-zenith-restart-link (npm) (malicious package)
- [MAL-2025-149175](https://insights.sbomify.com/MAL-2025-149175/): Malicious code in virgo-xo-writable-norma (npm) (malicious package)
- [MAL-2025-149174](https://insights.sbomify.com/MAL-2025-149174/): Malicious code in virgo-xerxes-pegasus-publish (npm) (malicious package)
- [MAL-2025-149173](https://insights.sbomify.com/MAL-2025-149173/): Malicious code in virgo-vega-zephyr-firebase (npm) (malicious package)
- [MAL-2025-149172](https://insights.sbomify.com/MAL-2025-149172/): Malicious code in virgo-toml-passport-altair (npm) (malicious package)
- [MAL-2025-149171](https://insights.sbomify.com/MAL-2025-149171/): Malicious code in virgo-sirius-prompts-cache (npm) (malicious package)
- [MAL-2025-149170](https://insights.sbomify.com/MAL-2025-149170/): Malicious code in virgo-semantic-ui-jekyll-kaus (npm) (malicious package)
- [MAL-2025-14917](https://insights.sbomify.com/MAL-2025-14917/): Malicious code in aspen-cliff-mrd813-project (npm) (malicious package)
- [MAL-2025-149169](https://insights.sbomify.com/MAL-2025-149169/): Malicious code in virgo-scorpius-duplex-weywot (npm) (malicious package)
- [MAL-2025-149168](https://insights.sbomify.com/MAL-2025-149168/): Malicious code in virgo-rehype-hermes-mui (npm) (malicious package)
- [MAL-2025-149167](https://insights.sbomify.com/MAL-2025-149167/): Malicious code in virgo-quasar-orbit-cosmos (npm) (malicious package)
- [MAL-2025-149166](https://insights.sbomify.com/MAL-2025-149166/): Malicious code in virgo-proxima-webpack-transform (npm) (malicious package)
- [MAL-2025-149165](https://insights.sbomify.com/MAL-2025-149165/): Malicious code in virgo-proxima-markdown-pdf-mongodb (npm) (malicious package)
- [MAL-2025-149164](https://insights.sbomify.com/MAL-2025-149164/): Malicious code in virgo-nuxtjs-markdownlint-foundation (npm) (malicious package)
- [MAL-2025-149163](https://insights.sbomify.com/MAL-2025-149163/): Malicious code in virgo-nuxtjs-achernar-spectron-webdriver (npm) (malicious package)
- [MAL-2025-149162](https://insights.sbomify.com/MAL-2025-149162/): Malicious code in virgo-nightwatch-hermes-airbnb (npm) (malicious package)
- [MAL-2025-149161](https://insights.sbomify.com/MAL-2025-149161/): Malicious code in virgo-neptune-rate-limiter-cypress (npm) (malicious package)
- [MAL-2025-149160](https://insights.sbomify.com/MAL-2025-149160/): Malicious code in virgo-levels-magellan-nashira (npm) (malicious package)
- [MAL-2025-14916](https://insights.sbomify.com/MAL-2025-14916/): Malicious code in aspen-boulder-hpk856-project (npm) (malicious package)
- [MAL-2025-149159](https://insights.sbomify.com/MAL-2025-149159/): Malicious code in virgo-hugo-vega-heka (npm) (malicious package)
- [MAL-2025-149158](https://insights.sbomify.com/MAL-2025-149158/): Malicious code in virgo-halley-norma-cors (npm) (malicious package)
- [MAL-2025-149157](https://insights.sbomify.com/MAL-2025-149157/): Malicious code in virgo-grunt-prettier-quito (npm) (malicious package)
- [MAL-2025-149156](https://insights.sbomify.com/MAL-2025-149156/): Malicious code in virgo-global-superagent-antd (npm) (malicious package)
- [MAL-2025-149155](https://insights.sbomify.com/MAL-2025-149155/): Malicious code in virgo-gacrux-geckodriver-hapi (npm) (malicious package)
- [MAL-2025-149154](https://insights.sbomify.com/MAL-2025-149154/): Malicious code in virgo-farout-cygnus-cors (npm) (malicious package)
- [MAL-2025-149153](https://insights.sbomify.com/MAL-2025-149153/): Malicious code in virgo-eris-cordelia-telesto (npm) (malicious package)
- [MAL-2025-149152](https://insights.sbomify.com/MAL-2025-149152/): Malicious code in virgo-child-process-flare-vulcan (npm) (malicious package)
- [MAL-2025-149151](https://insights.sbomify.com/MAL-2025-149151/): Malicious code in virgo-cache-chai-spectron (npm) (malicious package)
- [MAL-2025-149150](https://insights.sbomify.com/MAL-2025-149150/): Malicious code in virgo-blitz-dagda-babel (npm) (malicious package)
- [MAL-2025-14915](https://insights.sbomify.com/MAL-2025-14915/): Malicious code in aspen-bamboo-zcg358-project (npm) (malicious package)
- [MAL-2025-149149](https://insights.sbomify.com/MAL-2025-149149/): Malicious code in virgo-backend-hermes-eslint-plugin (npm) (malicious package)
- [MAL-2025-149148](https://insights.sbomify.com/MAL-2025-149148/): Malicious code in version-wasat-colors-version (npm) (malicious package)
- [MAL-2025-149147](https://insights.sbomify.com/MAL-2025-149147/): Malicious code in version-uglify-js-draco-dotenv (npm) (malicious package)
- [MAL-2025-149146](https://insights.sbomify.com/MAL-2025-149146/): Malicious code in version-transport-vuepress-dependencies (npm) (malicious package)
- [MAL-2025-149145](https://insights.sbomify.com/MAL-2025-149145/): Malicious code in version-scripts-leda-async (npm) (malicious package)
- [MAL-2025-149144](https://insights.sbomify.com/MAL-2025-149144/): Malicious code in version-scripts-centauri-concurrently (npm) (malicious package)
- [MAL-2025-149143](https://insights.sbomify.com/MAL-2025-149143/): Malicious code in version-prettier-stylelint-private-envconfig (npm) (malicious package)
- [MAL-2025-149142](https://insights.sbomify.com/MAL-2025-149142/): Malicious code in version-mongoose-cors-semantic-release (npm) (malicious package)
- [MAL-2025-149141](https://insights.sbomify.com/MAL-2025-149141/): Malicious code in version-miranda-eclipse-sass-loader (npm) (malicious package)
- [MAL-2025-149140](https://insights.sbomify.com/MAL-2025-149140/): Malicious code in version-mdx-development-delphinus (npm) (malicious package)
- [MAL-2025-14914](https://insights.sbomify.com/MAL-2025-14914/): Malicious code in aspen-8w0r9-pjzoz-silk-project (npm) (malicious package)
- [MAL-2025-149139](https://insights.sbomify.com/MAL-2025-149139/): Malicious code in version-loopback-ursa-charon (npm) (malicious package)
- [MAL-2025-149138](https://insights.sbomify.com/MAL-2025-149138/): Malicious code in version-janus-hyperion-scorpius (npm) (malicious package)
- [MAL-2025-149137](https://insights.sbomify.com/MAL-2025-149137/): Malicious code in version-iota-deneb-node-sass (npm) (malicious package)
- [MAL-2025-149136](https://insights.sbomify.com/MAL-2025-149136/): Malicious code in version-husky-cosmos-atlas (npm) (malicious package)
- [MAL-2025-149135](https://insights.sbomify.com/MAL-2025-149135/): Malicious code in version-halley-aurora-terser (npm) (malicious package)
- [MAL-2025-149134](https://insights.sbomify.com/MAL-2025-149134/): Malicious code in version-firebase-yildun-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-149133](https://insights.sbomify.com/MAL-2025-149133/): Malicious code in version-chakra-ui-chariklo-rehype (npm) (malicious package)
- [MAL-2025-149132](https://insights.sbomify.com/MAL-2025-149132/): Malicious code in version-callback-husky-castor (npm) (malicious package)
- [MAL-2025-149131](https://insights.sbomify.com/MAL-2025-149131/): Malicious code in version-bootstrap-query-meissa (npm) (malicious package)
- [MAL-2025-149130](https://insights.sbomify.com/MAL-2025-149130/): Malicious code in version-altair-jwt-epimetheus (npm) (malicious package)
- [MAL-2025-14913](https://insights.sbomify.com/MAL-2025-14913/): Malicious code in aspen-11t6o-1wdye-haven-project (npm) (malicious package)
- [MAL-2025-149129](https://insights.sbomify.com/MAL-2025-149129/): Malicious code in version-achernar-nightwatch-cli (npm) (malicious package)
- [MAL-2025-149128](https://insights.sbomify.com/MAL-2025-149128/): Malicious code in venus-webdriverio-lint-staged-local (npm) (malicious package)
- [MAL-2025-149127](https://insights.sbomify.com/MAL-2025-149127/): Malicious code in venus-vuetify-regulus-stop (npm) (malicious package)
- [MAL-2025-149126](https://insights.sbomify.com/MAL-2025-149126/): Malicious code in venus-toml-google-csrf (npm) (malicious package)
- [MAL-2025-149125](https://insights.sbomify.com/MAL-2025-149125/): Malicious code in venus-thuban-dione-reveal-md (npm) (malicious package)
- [MAL-2025-149124](https://insights.sbomify.com/MAL-2025-149124/): Malicious code in venus-subscription-pino-xml (npm) (malicious package)
- [MAL-2025-149123](https://insights.sbomify.com/MAL-2025-149123/): Malicious code in venus-sedna-terser-webpack-plugin-pino (npm) (malicious package)
- [MAL-2025-149122](https://insights.sbomify.com/MAL-2025-149122/): Malicious code in venus-sails-betelgeuse-grus (npm) (malicious package)
- [MAL-2025-149121](https://insights.sbomify.com/MAL-2025-149121/): Malicious code in venus-reveal-md-chariklo-readable (npm) (malicious package)
- [MAL-2025-149120](https://insights.sbomify.com/MAL-2025-149120/): Malicious code in venus-request-loglevel-meteor (npm) (malicious package)
- [MAL-2025-14912](https://insights.sbomify.com/MAL-2025-14912/): Malicious code in asos-web-secure-script-container (npm) (malicious package)
- [MAL-2025-149119](https://insights.sbomify.com/MAL-2025-149119/): Malicious code in venus-procyon-test-gridsome (npm) (malicious package)
- [MAL-2025-149118](https://insights.sbomify.com/MAL-2025-149118/): Malicious code in venus-parcel-markdown-pdf-pulsar (npm) (malicious package)
- [MAL-2025-149117](https://insights.sbomify.com/MAL-2025-149117/): Malicious code in venus-orbit-husky-morgan (npm) (malicious package)
- [MAL-2025-149116](https://insights.sbomify.com/MAL-2025-149116/): Malicious code in venus-mocha-start-figures (npm) (malicious package)
- [MAL-2025-149115](https://insights.sbomify.com/MAL-2025-149115/): Malicious code in venus-materialize-middleware-chariklo (npm) (malicious package)
- [MAL-2025-149114](https://insights.sbomify.com/MAL-2025-149114/): Malicious code in venus-lyra-fusion-janus (npm) (malicious package)
- [MAL-2025-149113](https://insights.sbomify.com/MAL-2025-149113/): Malicious code in venus-hermes-lacerta-ceres (npm) (malicious package)
- [MAL-2025-149112](https://insights.sbomify.com/MAL-2025-149112/): Malicious code in venus-figures-configstore-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-149111](https://insights.sbomify.com/MAL-2025-149111/): Malicious code in venus-express-lynx-writable (npm) (malicious package)
- [MAL-2025-149110](https://insights.sbomify.com/MAL-2025-149110/): Malicious code in venus-exec-sagitta-ophiuchus (npm) (malicious package)
- [MAL-2025-14911](https://insights.sbomify.com/MAL-2025-14911/): Malicious code in asojiwbiwe (npm) (malicious package)
- [MAL-2025-149109](https://insights.sbomify.com/MAL-2025-149109/): Malicious code in venus-europa-phenomic-relay (npm) (malicious package)
- [MAL-2025-149108](https://insights.sbomify.com/MAL-2025-149108/): Malicious code in venus-electron-adonis-vulcan (npm) (malicious package)
- [MAL-2025-149107](https://insights.sbomify.com/MAL-2025-149107/): Malicious code in venus-dependencies-ceres-yonder (npm) (malicious package)
- [MAL-2025-149106](https://insights.sbomify.com/MAL-2025-149106/): Malicious code in venus-deimos-public-nextjs (npm) (malicious package)
- [MAL-2025-149105](https://insights.sbomify.com/MAL-2025-149105/): Malicious code in venus-centaurus-meteor-orbit (npm) (malicious package)
- [MAL-2025-149104](https://insights.sbomify.com/MAL-2025-149104/): Malicious code in venus-capella-mysql-google (npm) (malicious package)
- [MAL-2025-149103](https://insights.sbomify.com/MAL-2025-149103/): Malicious code in venus-avior-hugo-epimetheus (npm) (malicious package)
- [MAL-2025-149102](https://insights.sbomify.com/MAL-2025-149102/): Malicious code in venus-aldebaran-postcss-build (npm) (malicious package)
- [MAL-2025-149101](https://insights.sbomify.com/MAL-2025-149101/): Malicious code in vega-xanthus-websockets-farout (npm) (malicious package)
- [MAL-2025-149100](https://insights.sbomify.com/MAL-2025-149100/): Malicious code in vega-websockets-xenos-webdriver-mocha (npm) (malicious package)
- [MAL-2025-14910](https://insights.sbomify.com/MAL-2025-14910/): Malicious code in asnyc (npm) (malicious package)
- [MAL-2025-1491](https://insights.sbomify.com/MAL-2025-1491/): Malicious code in norequest-akash (npm) (malicious package)
- [MAL-2025-149099](https://insights.sbomify.com/MAL-2025-149099/): Malicious code in vega-supervisor-exec-taurus (npm) (malicious package)
- [MAL-2025-149098](https://insights.sbomify.com/MAL-2025-149098/): Malicious code in vega-semantic-release-vuepress-venus (npm) (malicious package)
- [MAL-2025-149097](https://insights.sbomify.com/MAL-2025-149097/): Malicious code in vega-redis-yonder-iota (npm) (malicious package)
- [MAL-2025-149096](https://insights.sbomify.com/MAL-2025-149096/): Malicious code in vega-pino-async-xenon (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1386/