# Vulnerabilities published in 2025


- [MAL-2025-149095](https://insights.sbomify.com/MAL-2025-149095/): Malicious code in vega-nebula-gacrux-sqlite (npm) (malicious package)
- [MAL-2025-149094](https://insights.sbomify.com/MAL-2025-149094/): Malicious code in vega-mongodb-electron-scripts (npm) (malicious package)
- [MAL-2025-149093](https://insights.sbomify.com/MAL-2025-149093/): Malicious code in vega-library-schema-parcel (npm) (malicious package)
- [MAL-2025-149092](https://insights.sbomify.com/MAL-2025-149092/): Malicious code in vega-jest-leda-kinetic (npm) (malicious package)
- [MAL-2025-149091](https://insights.sbomify.com/MAL-2025-149091/): Malicious code in vega-io-prettier-stylelint-development (npm) (malicious package)
- [MAL-2025-149090](https://insights.sbomify.com/MAL-2025-149090/): Malicious code in vega-gatsby-backend-standard (npm) (malicious package)
- [MAL-2025-14909](https://insights.sbomify.com/MAL-2025-14909/): Malicious code in asnc (npm) (malicious package)
- [MAL-2025-149089](https://insights.sbomify.com/MAL-2025-149089/): Malicious code in vega-draco-yaml-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-149088](https://insights.sbomify.com/MAL-2025-149088/): Malicious code in vega-despina-fornax-rigel (npm) (malicious package)
- [MAL-2025-149087](https://insights.sbomify.com/MAL-2025-149087/): Malicious code in vega-css-loader-json-mensa (npm) (malicious package)
- [MAL-2025-149086](https://insights.sbomify.com/MAL-2025-149086/): Malicious code in vega-chariklo-oberon-scripts (npm) (malicious package)
- [MAL-2025-149085](https://insights.sbomify.com/MAL-2025-149085/): Malicious code in vega-callisto-apex-cygnus (npm) (malicious package)
- [MAL-2025-149084](https://insights.sbomify.com/MAL-2025-149084/): Malicious code in vega-bootstrap-barnard-hermes (npm) (malicious package)
- [MAL-2025-149083](https://insights.sbomify.com/MAL-2025-149083/): Malicious code in vega-bellatrix-rate-limiter-xenos (npm) (malicious package)
- [MAL-2025-149082](https://insights.sbomify.com/MAL-2025-149082/): Malicious code in vega-auriga-envconfig-phoebe (npm) (malicious package)
- [MAL-2025-149081](https://insights.sbomify.com/MAL-2025-149081/): Malicious code in ursa-xerxes-betelgeuse-semantic-ui (npm) (malicious package)
- [MAL-2025-149080](https://insights.sbomify.com/MAL-2025-149080/): Malicious code in ursa-winston-slides-neptune (npm) (malicious package)
- [MAL-2025-14908](https://insights.sbomify.com/MAL-2025-14908/): Malicious code in asmcrypto (npm) (malicious package)
- [MAL-2025-149079](https://insights.sbomify.com/MAL-2025-149079/): Malicious code in ursa-virgo-less-taurus (npm) (malicious package)
- [MAL-2025-149078](https://insights.sbomify.com/MAL-2025-149078/): Malicious code in ursa-venus-terser-luna (npm) (malicious package)
- [MAL-2025-149077](https://insights.sbomify.com/MAL-2025-149077/): Malicious code in ursa-transport-slides-corvus (npm) (malicious package)
- [MAL-2025-149076](https://insights.sbomify.com/MAL-2025-149076/): Malicious code in ursa-spawn-writable-acamar (npm) (malicious package)
- [MAL-2025-149075](https://insights.sbomify.com/MAL-2025-149075/): Malicious code in ursa-shelljs-buffer-rimraf (npm) (malicious package)
- [MAL-2025-149074](https://insights.sbomify.com/MAL-2025-149074/): Malicious code in ursa-schema-norma-subscription (npm) (malicious package)
- [MAL-2025-149073](https://insights.sbomify.com/MAL-2025-149073/): Malicious code in ursa-sass-loader-orbit-async (npm) (malicious package)
- [MAL-2025-149072](https://insights.sbomify.com/MAL-2025-149072/): Malicious code in ursa-rocket-postcss-janus (npm) (malicious package)
- [MAL-2025-149071](https://insights.sbomify.com/MAL-2025-149071/): Malicious code in ursa-reveal-md-antares-markdownlint (npm) (malicious package)
- [MAL-2025-149070](https://insights.sbomify.com/MAL-2025-149070/): Malicious code in ursa-rehype-charon-eslint-plugin (npm) (malicious package)
- [MAL-2025-14907](https://insights.sbomify.com/MAL-2025-14907/): Malicious code in aslodocs (npm) (malicious package)
- [MAL-2025-149069](https://insights.sbomify.com/MAL-2025-149069/): Malicious code in ursa-protractor-eleventy-antares (npm) (malicious package)
- [MAL-2025-149068](https://insights.sbomify.com/MAL-2025-149068/): Malicious code in ursa-phoenix-webpack-zephyr (npm) (malicious package)
- [MAL-2025-149067](https://insights.sbomify.com/MAL-2025-149067/): Malicious code in ursa-phoebe-kaus-cosmos (npm) (malicious package)
- [MAL-2025-149066](https://insights.sbomify.com/MAL-2025-149066/): Malicious code in ursa-phoebe-capella-changelog (npm) (malicious package)
- [MAL-2025-149065](https://insights.sbomify.com/MAL-2025-149065/): Malicious code in ursa-oberon-antares-warp (npm) (malicious package)
- [MAL-2025-149064](https://insights.sbomify.com/MAL-2025-149064/): Malicious code in ursa-middleware-express-europa (npm) (malicious package)
- [MAL-2025-149063](https://insights.sbomify.com/MAL-2025-149063/): Malicious code in ursa-meteor-hydra-oberon (npm) (malicious package)
- [MAL-2025-149062](https://insights.sbomify.com/MAL-2025-149062/): Malicious code in ursa-loopback-start-wolf (npm) (malicious package)
- [MAL-2025-149061](https://insights.sbomify.com/MAL-2025-149061/): Malicious code in ursa-jwt-lacerta-terser (npm) (malicious package)
- [MAL-2025-149060](https://insights.sbomify.com/MAL-2025-149060/): Malicious code in ursa-jupiter-antares-hyperion (npm) (malicious package)
- [MAL-2025-14906](https://insights.sbomify.com/MAL-2025-14906/): Malicious code in asinc (npm) (malicious package)
- [MAL-2025-149059](https://insights.sbomify.com/MAL-2025-149059/): Malicious code in ursa-juno-nodejs-exec (npm) (malicious package)
- [MAL-2025-149058](https://insights.sbomify.com/MAL-2025-149058/): Malicious code in ursa-iota-ini-jupiter (npm) (malicious package)
- [MAL-2025-149057](https://insights.sbomify.com/MAL-2025-149057/): Malicious code in ursa-hapi-nextjs-epimetheus (npm) (malicious package)
- [MAL-2025-149056](https://insights.sbomify.com/MAL-2025-149056/): Malicious code in ursa-express-buffer-commitizen (npm) (malicious package)
- [MAL-2025-149055](https://insights.sbomify.com/MAL-2025-149055/): Malicious code in ursa-electron-builder-helmet-foundation (npm) (malicious package)
- [MAL-2025-149054](https://insights.sbomify.com/MAL-2025-149054/): Malicious code in ursa-dotenv-safe-nconf-pm2 (npm) (malicious package)
- [MAL-2025-149053](https://insights.sbomify.com/MAL-2025-149053/): Malicious code in ursa-cypress-perseus-spinner (npm) (malicious package)
- [MAL-2025-149052](https://insights.sbomify.com/MAL-2025-149052/): Malicious code in ursa-corvus-aether-quark (npm) (malicious package)
- [MAL-2025-149051](https://insights.sbomify.com/MAL-2025-149051/): Malicious code in ursa-convict-nestjs-lynx (npm) (malicious package)
- [MAL-2025-149050](https://insights.sbomify.com/MAL-2025-149050/): Malicious code in ursa-commitlint-transform-mongoose (npm) (malicious package)
- [MAL-2025-14905](https://insights.sbomify.com/MAL-2025-14905/): Malicious code in asign-user-front-end (npm) (malicious package)
- [MAL-2025-149049](https://insights.sbomify.com/MAL-2025-149049/): Malicious code in ursa-charon-server-markdown-pdf (npm) (malicious package)
- [MAL-2025-149048](https://insights.sbomify.com/MAL-2025-149048/): Malicious code in ursa-changelog-prompts-public (npm) (malicious package)
- [MAL-2025-149047](https://insights.sbomify.com/MAL-2025-149047/): Malicious code in ursa-centaurus-writable-jupiter (npm) (malicious package)
- [MAL-2025-149046](https://insights.sbomify.com/MAL-2025-149046/): Malicious code in ursa-celeste-local-wasat (npm) (malicious package)
- [MAL-2025-149045](https://insights.sbomify.com/MAL-2025-149045/): Malicious code in ursa-callisto-cypress-meteor (npm) (malicious package)
- [MAL-2025-149044](https://insights.sbomify.com/MAL-2025-149044/): Malicious code in ursa-bootes-fornax-norma (npm) (malicious package)
- [MAL-2025-149043](https://insights.sbomify.com/MAL-2025-149043/): Malicious code in ursa-auth-bunyan-taurus (npm) (malicious package)
- [MAL-2025-149042](https://insights.sbomify.com/MAL-2025-149042/): Malicious code in ursa-apollo-xenon-europa (npm) (malicious package)
- [MAL-2025-149041](https://insights.sbomify.com/MAL-2025-149041/): Malicious code in ursa-apollo-version-readable (npm) (malicious package)
- [MAL-2025-149040](https://insights.sbomify.com/MAL-2025-149040/): Malicious code in ursa-apollo-mutation-blaze (npm) (malicious package)
- [MAL-2025-14904](https://insights.sbomify.com/MAL-2025-14904/): Malicious code in asianhallinta-secret (npm) (malicious package)
- [MAL-2025-149039](https://insights.sbomify.com/MAL-2025-149039/): Malicious code in ursa-andromeda-avior-nestjs (npm) (malicious package)
- [MAL-2025-149038](https://insights.sbomify.com/MAL-2025-149038/): Malicious code in ursa-algol-ganymede-framework (npm) (malicious package)
- [MAL-2025-149037](https://insights.sbomify.com/MAL-2025-149037/): Malicious code in ursa-aldebaran-phenomic-socketio (npm) (malicious package)
- [MAL-2025-149036](https://insights.sbomify.com/MAL-2025-149036/): Malicious code in upgrade-vuepress-pm2-apex (npm) (malicious package)
- [MAL-2025-149035](https://insights.sbomify.com/MAL-2025-149035/): Malicious code in upgrade-telesto-forever-webdriver-mocha (npm) (malicious package)
- [MAL-2025-149034](https://insights.sbomify.com/MAL-2025-149034/): Malicious code in upgrade-standard-prettier-async (npm) (malicious package)
- [MAL-2025-149033](https://insights.sbomify.com/MAL-2025-149033/): Malicious code in upgrade-spawn-server-inquirer (npm) (malicious package)
- [MAL-2025-149032](https://insights.sbomify.com/MAL-2025-149032/): Malicious code in upgrade-slidev-mdx-cosmos (npm) (malicious package)
- [MAL-2025-149031](https://insights.sbomify.com/MAL-2025-149031/): Malicious code in upgrade-sequelize-mensa-alphard (npm) (malicious package)
- [MAL-2025-149030](https://insights.sbomify.com/MAL-2025-149030/): Malicious code in upgrade-selenium-nodejs-lyra (npm) (malicious package)
- [MAL-2025-14903](https://insights.sbomify.com/MAL-2025-14903/): Malicious code in ashore (npm) (malicious package)
- [MAL-2025-149029](https://insights.sbomify.com/MAL-2025-149029/): Malicious code in upgrade-release-it-delphinus-colors (npm) (malicious package)
- [MAL-2025-149028](https://insights.sbomify.com/MAL-2025-149028/): Malicious code in upgrade-publish-helios-nashira (npm) (malicious package)
- [MAL-2025-149027](https://insights.sbomify.com/MAL-2025-149027/): Malicious code in upgrade-prettier-plugin-markdown-capella-pulsar (npm) (malicious package)
- [MAL-2025-149026](https://insights.sbomify.com/MAL-2025-149026/): Malicious code in upgrade-pegasus-chalk-fomalhaut (npm) (malicious package)
- [MAL-2025-149025](https://insights.sbomify.com/MAL-2025-149025/): Malicious code in upgrade-nuxtjs-express-magellan (npm) (malicious package)
- [MAL-2025-149024](https://insights.sbomify.com/MAL-2025-149024/): Malicious code in upgrade-nextjs-phoebe-node-sass (npm) (malicious package)
- [MAL-2025-149023](https://insights.sbomify.com/MAL-2025-149023/): Malicious code in upgrade-nextjs-lint-buffer (npm) (malicious package)
- [MAL-2025-149022](https://insights.sbomify.com/MAL-2025-149022/): Malicious code in upgrade-neptune-arcturus-wolf (npm) (malicious package)
- [MAL-2025-149021](https://insights.sbomify.com/MAL-2025-149021/): Malicious code in upgrade-mysql-publish-google (npm) (malicious package)
- [MAL-2025-149020](https://insights.sbomify.com/MAL-2025-149020/): Malicious code in upgrade-miranda-protractor-galaxy (npm) (malicious package)
- [MAL-2025-14902](https://insights.sbomify.com/MAL-2025-14902/): Malicious code in ashok-angular2-login (npm) (malicious package)
- [MAL-2025-149019](https://insights.sbomify.com/MAL-2025-149019/): Malicious code in upgrade-meissa-async-json (npm) (malicious package)
- [MAL-2025-149018](https://insights.sbomify.com/MAL-2025-149018/): Malicious code in upgrade-jovian-yakutsk-jupiter (npm) (malicious package)
- [MAL-2025-149017](https://insights.sbomify.com/MAL-2025-149017/): Malicious code in upgrade-hydra-pipe-sadr (npm) (malicious package)
- [MAL-2025-149016](https://insights.sbomify.com/MAL-2025-149016/): Malicious code in upgrade-hermes-jovian-lint (npm) (malicious package)
- [MAL-2025-149015](https://insights.sbomify.com/MAL-2025-149015/): Malicious code in upgrade-helmet-zenith-geckodriver (npm) (malicious package)
- [MAL-2025-149014](https://insights.sbomify.com/MAL-2025-149014/): Malicious code in upgrade-halley-hercules-mira (npm) (malicious package)
- [MAL-2025-149013](https://insights.sbomify.com/MAL-2025-149013/): Malicious code in upgrade-geckodriver-semantic-release-superagent (npm) (malicious package)
- [MAL-2025-149012](https://insights.sbomify.com/MAL-2025-149012/): Malicious code in upgrade-flare-delphinus-nodemon (npm) (malicious package)
- [MAL-2025-149011](https://insights.sbomify.com/MAL-2025-149011/): Malicious code in upgrade-enceladus-hermes-convict (npm) (malicious package)
- [MAL-2025-149010](https://insights.sbomify.com/MAL-2025-149010/): Malicious code in upgrade-electron-builder-pipe-mocha (npm) (malicious package)
- [MAL-2025-14901](https://insights.sbomify.com/MAL-2025-14901/): Malicious code in ash-q3gt7-hrboq-whisper-project (npm) (malicious package)
- [MAL-2025-149009](https://insights.sbomify.com/MAL-2025-149009/): Malicious code in upgrade-csv-gulp-browserify (npm) (malicious package)
- [MAL-2025-149008](https://insights.sbomify.com/MAL-2025-149008/): Malicious code in upgrade-chromedriver-typeorm-flare (npm) (malicious package)
- [MAL-2025-149007](https://insights.sbomify.com/MAL-2025-149007/): Malicious code in upgrade-charon-terser-luna (npm) (malicious package)
- [MAL-2025-149006](https://insights.sbomify.com/MAL-2025-149006/): Malicious code in upgrade-centauri-query-rigel (npm) (malicious package)
- [MAL-2025-149005](https://insights.sbomify.com/MAL-2025-149005/): Malicious code in upgrade-celeste-subscription-avior (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1387/