# Vulnerabilities published in 2025


- [MAL-2025-148915](https://insights.sbomify.com/MAL-2025-148915/): Malicious code in umbra-chalk-zenith-koa (npm) (malicious package)
- [MAL-2025-148914](https://insights.sbomify.com/MAL-2025-148914/): Malicious code in umbra-browserify-enif-jsonp (npm) (malicious package)
- [MAL-2025-148913](https://insights.sbomify.com/MAL-2025-148913/): Malicious code in ultra-update-nightwatch-event (npm) (malicious package)
- [MAL-2025-148912](https://insights.sbomify.com/MAL-2025-148912/): Malicious code in ultra-ultra-castor-betelgeuse (npm) (malicious package)
- [MAL-2025-148911](https://insights.sbomify.com/MAL-2025-148911/): Malicious code in ultra-terser-capella-tethys (npm) (malicious package)
- [MAL-2025-148910](https://insights.sbomify.com/MAL-2025-148910/): Malicious code in ultra-stream-cli-lynx (npm) (malicious package)
- [MAL-2025-14891](https://insights.sbomify.com/MAL-2025-14891/): Malicious code in aseturtle (npm) (malicious package)
- [MAL-2025-148909](https://insights.sbomify.com/MAL-2025-148909/): Malicious code in ultra-spica-yakutsk-hexo (npm) (malicious package)
- [MAL-2025-148908](https://insights.sbomify.com/MAL-2025-148908/): Malicious code in ultra-shelljs-aether-jasmine (npm) (malicious package)
- [MAL-2025-148907](https://insights.sbomify.com/MAL-2025-148907/): Malicious code in ultra-sass-loader-pegasus-auriga (npm) (malicious package)
- [MAL-2025-148906](https://insights.sbomify.com/MAL-2025-148906/): Malicious code in ultra-rehype-deimos-sequelize (npm) (malicious package)
- [MAL-2025-148905](https://insights.sbomify.com/MAL-2025-148905/): Malicious code in ultra-postgres-publish-fornax (npm) (malicious package)
- [MAL-2025-148904](https://insights.sbomify.com/MAL-2025-148904/): Malicious code in ultra-playwright-flare-thuban (npm) (malicious package)
- [MAL-2025-148903](https://insights.sbomify.com/MAL-2025-148903/): Malicious code in ultra-perseus-betelgeuse-leda (npm) (malicious package)
- [MAL-2025-148902](https://insights.sbomify.com/MAL-2025-148902/): Malicious code in ultra-node-config-parcel-registry (npm) (malicious package)
- [MAL-2025-148901](https://insights.sbomify.com/MAL-2025-148901/): Malicious code in ultra-nightwatch-commitizen-javascript (npm) (malicious package)
- [MAL-2025-148900](https://insights.sbomify.com/MAL-2025-148900/): Malicious code in ultra-less-bulma-bulma (npm) (malicious package)
- [MAL-2025-14890](https://insights.sbomify.com/MAL-2025-14890/): Malicious code in asembed (npm) (malicious package)
- [MAL-2025-1489](https://insights.sbomify.com/MAL-2025-1489/): Malicious code in list-files-in-pr (npm) (malicious package)
- [MAL-2025-148899](https://insights.sbomify.com/MAL-2025-148899/): Malicious code in ultra-init-spectron-package (npm) (malicious package)
- [MAL-2025-148898](https://insights.sbomify.com/MAL-2025-148898/): Malicious code in ultra-hyperion-cors-convict (npm) (malicious package)
- [MAL-2025-148897](https://insights.sbomify.com/MAL-2025-148897/): Malicious code in ultra-gridsome-aldebaran-nebula (npm) (malicious package)
- [MAL-2025-148896](https://insights.sbomify.com/MAL-2025-148896/): Malicious code in ultra-graphql-xo-deimos (npm) (malicious package)
- [MAL-2025-148895](https://insights.sbomify.com/MAL-2025-148895/): Malicious code in ultra-gemini-miranda-antares (npm) (malicious package)
- [MAL-2025-148894](https://insights.sbomify.com/MAL-2025-148894/): Malicious code in ultra-gemini-elara-update (npm) (malicious package)
- [MAL-2025-148893](https://insights.sbomify.com/MAL-2025-148893/): Malicious code in ultra-exec-event-miranda (npm) (malicious package)
- [MAL-2025-148892](https://insights.sbomify.com/MAL-2025-148892/): Malicious code in ultra-eslint-plugin-levels-titan (npm) (malicious package)
- [MAL-2025-148891](https://insights.sbomify.com/MAL-2025-148891/): Malicious code in ultra-dynamo-foundation-install (npm) (malicious package)
- [MAL-2025-148890](https://insights.sbomify.com/MAL-2025-148890/): Malicious code in ultra-deneb-hermes-relay (npm) (malicious package)
- [MAL-2025-14889](https://insights.sbomify.com/MAL-2025-14889/): Malicious code in asdfdsdfsdf (npm) (malicious package)
- [MAL-2025-148889](https://insights.sbomify.com/MAL-2025-148889/): Malicious code in ultra-bunyan-cygnus-adonis (npm) (malicious package)
- [MAL-2025-148888](https://insights.sbomify.com/MAL-2025-148888/): Malicious code in ultra-bootes-async-morgan (npm) (malicious package)
- [MAL-2025-148887](https://insights.sbomify.com/MAL-2025-148887/): Malicious code in ultra-auriga-gulp-gulp (npm) (malicious package)
- [MAL-2025-148886](https://insights.sbomify.com/MAL-2025-148886/): Malicious code in ultra-altair-janus-subscription (npm) (malicious package)
- [MAL-2025-148885](https://insights.sbomify.com/MAL-2025-148885/): Malicious code in uglify-js-upgrade-scorpius-cors (npm) (malicious package)
- [MAL-2025-148884](https://insights.sbomify.com/MAL-2025-148884/): Malicious code in uglify-js-supervisor-avior-wolf (npm) (malicious package)
- [MAL-2025-148883](https://insights.sbomify.com/MAL-2025-148883/): Malicious code in uglify-js-spectron-colors-server (npm) (malicious package)
- [MAL-2025-148882](https://insights.sbomify.com/MAL-2025-148882/): Malicious code in uglify-js-schema-spica-arcturus (npm) (malicious package)
- [MAL-2025-148881](https://insights.sbomify.com/MAL-2025-148881/): Malicious code in uglify-js-restart-delphinus-hugo (npm) (malicious package)
- [MAL-2025-148880](https://insights.sbomify.com/MAL-2025-148880/): Malicious code in uglify-js-quito-ursa-fomalhaut (npm) (malicious package)
- [MAL-2025-14888](https://insights.sbomify.com/MAL-2025-14888/): Malicious code in asdaww3243d (npm) (malicious package)
- [MAL-2025-148879](https://insights.sbomify.com/MAL-2025-148879/): Malicious code in uglify-js-query-rest-triton (npm) (malicious package)
- [MAL-2025-148878](https://insights.sbomify.com/MAL-2025-148878/): Malicious code in uglify-js-quantum-vuepress-publish (npm) (malicious package)
- [MAL-2025-148877](https://insights.sbomify.com/MAL-2025-148877/): Malicious code in uglify-js-pegasus-proxima-superagent (npm) (malicious package)
- [MAL-2025-148876](https://insights.sbomify.com/MAL-2025-148876/): Malicious code in uglify-js-nuxtjs-karma-atlas (npm) (malicious package)
- [MAL-2025-148875](https://insights.sbomify.com/MAL-2025-148875/): Malicious code in uglify-js-nestjs-fornax-husky (npm) (malicious package)
- [MAL-2025-148874](https://insights.sbomify.com/MAL-2025-148874/): Malicious code in uglify-js-hexo-zenobia-child-process (npm) (malicious package)
- [MAL-2025-148873](https://insights.sbomify.com/MAL-2025-148873/): Malicious code in uglify-js-europa-chakra-ui-dagda (npm) (malicious package)
- [MAL-2025-148872](https://insights.sbomify.com/MAL-2025-148872/): Malicious code in uglify-js-eslint-callisto-meissa (npm) (malicious package)
- [MAL-2025-148871](https://insights.sbomify.com/MAL-2025-148871/): Malicious code in uglify-js-despina-quark-graphql (npm) (malicious package)
- [MAL-2025-148870](https://insights.sbomify.com/MAL-2025-148870/): Malicious code in uglify-js-dagda-await-parcel (npm) (malicious package)
- [MAL-2025-14887](https://insights.sbomify.com/MAL-2025-14887/): Malicious code in asd-tt (npm) (malicious package)
- [MAL-2025-148869](https://insights.sbomify.com/MAL-2025-148869/): Malicious code in uglify-js-child-process-meissa-firebase (npm) (malicious package)
- [MAL-2025-148868](https://insights.sbomify.com/MAL-2025-148868/): Malicious code in uglify-js-chalk-spica-zenith (npm) (malicious package)
- [MAL-2025-148867](https://insights.sbomify.com/MAL-2025-148867/): Malicious code in uglify-js-bunyan-solis-neptune (npm) (malicious package)
- [MAL-2025-148866](https://insights.sbomify.com/MAL-2025-148866/): Malicious code in uglify-js-blaze-rocket-dorado (npm) (malicious package)
- [MAL-2025-148865](https://insights.sbomify.com/MAL-2025-148865/): Malicious code in uglify-js-apollo-cosmos-karma (npm) (malicious package)
- [MAL-2025-148864](https://insights.sbomify.com/MAL-2025-148864/): Malicious code in typeorm-xenos-hermes-iota (npm) (malicious package)
- [MAL-2025-148863](https://insights.sbomify.com/MAL-2025-148863/): Malicious code in typeorm-unuk-dotenv-cache (npm) (malicious package)
- [MAL-2025-148862](https://insights.sbomify.com/MAL-2025-148862/): Malicious code in typeorm-uninstall-rigel-sadr (npm) (malicious package)
- [MAL-2025-148861](https://insights.sbomify.com/MAL-2025-148861/): Malicious code in typeorm-umbriel-phenomic-sirius (npm) (malicious package)
- [MAL-2025-148860](https://insights.sbomify.com/MAL-2025-148860/): Malicious code in typeorm-typeorm-development-apollo (npm) (malicious package)
- [MAL-2025-14886](https://insights.sbomify.com/MAL-2025-14886/): Malicious code in asatoafm (npm) (malicious package)
- [MAL-2025-148859](https://insights.sbomify.com/MAL-2025-148859/): Malicious code in typeorm-toml-mocha-capella (npm) (malicious package)
- [MAL-2025-148858](https://insights.sbomify.com/MAL-2025-148858/): Malicious code in typeorm-superagent-leda-registry (npm) (malicious package)
- [MAL-2025-148857](https://insights.sbomify.com/MAL-2025-148857/): Malicious code in typeorm-subscription-perseus-acamar (npm) (malicious package)
- [MAL-2025-148856](https://insights.sbomify.com/MAL-2025-148856/): Malicious code in typeorm-quito-kronos-toml (npm) (malicious package)
- [MAL-2025-148855](https://insights.sbomify.com/MAL-2025-148855/): Malicious code in typeorm-puppeteer-gacrux-europa (npm) (malicious package)
- [MAL-2025-148854](https://insights.sbomify.com/MAL-2025-148854/): Malicious code in typeorm-pipe-dynamo-jwt (npm) (malicious package)
- [MAL-2025-148853](https://insights.sbomify.com/MAL-2025-148853/): Malicious code in typeorm-odin-server-aldebaran (npm) (malicious package)
- [MAL-2025-148852](https://insights.sbomify.com/MAL-2025-148852/): Malicious code in typeorm-node-sass-karma-schema (npm) (malicious package)
- [MAL-2025-148851](https://insights.sbomify.com/MAL-2025-148851/): Malicious code in typeorm-mui-scripts-fornax (npm) (malicious package)
- [MAL-2025-148850](https://insights.sbomify.com/MAL-2025-148850/): Malicious code in typeorm-materialize-meissa-event (npm) (malicious package)
- [MAL-2025-14885](https://insights.sbomify.com/MAL-2025-14885/): Malicious code in asa-demo-node (npm) (malicious package)
- [MAL-2025-148849](https://insights.sbomify.com/MAL-2025-148849/): Malicious code in typeorm-lynx-subscription-sagitta (npm) (malicious package)
- [MAL-2025-148848](https://insights.sbomify.com/MAL-2025-148848/): Malicious code in typeorm-loglevel-xo-luna (npm) (malicious package)
- [MAL-2025-148847](https://insights.sbomify.com/MAL-2025-148847/): Malicious code in typeorm-karma-zenobia-inquirer (npm) (malicious package)
- [MAL-2025-148846](https://insights.sbomify.com/MAL-2025-148846/): Malicious code in typeorm-gridsome-vega-writable (npm) (malicious package)
- [MAL-2025-148845](https://insights.sbomify.com/MAL-2025-148845/): Malicious code in typeorm-fornax-centaurus-eridanus (npm) (malicious package)
- [MAL-2025-148844](https://insights.sbomify.com/MAL-2025-148844/): Malicious code in typeorm-fomalhaut-testcafe-link (npm) (malicious package)
- [MAL-2025-148843](https://insights.sbomify.com/MAL-2025-148843/): Malicious code in typeorm-flare-fomalhaut-csv (npm) (malicious package)
- [MAL-2025-148842](https://insights.sbomify.com/MAL-2025-148842/): Malicious code in typeorm-css-loader-draco-docusaurus (npm) (malicious package)
- [MAL-2025-148841](https://insights.sbomify.com/MAL-2025-148841/): Malicious code in typeorm-cressida-cz-conventional-changelog-markdown-pdf (npm) (malicious package)
- [MAL-2025-148840](https://insights.sbomify.com/MAL-2025-148840/): Malicious code in typeorm-comet-carpo-foundation (npm) (malicious package)
- [MAL-2025-14884](https://insights.sbomify.com/MAL-2025-14884/): Malicious code in as-core-ui (npm) (malicious package)
- [MAL-2025-148839](https://insights.sbomify.com/MAL-2025-148839/): Malicious code in typeorm-chalk-eslint-config-geckodriver (npm) (malicious package)
- [MAL-2025-148838](https://insights.sbomify.com/MAL-2025-148838/): Malicious code in typeorm-bulma-optimize-css-assets-webpack-plugin-nodejs (npm) (malicious package)
- [MAL-2025-148837](https://insights.sbomify.com/MAL-2025-148837/): Malicious code in typeorm-barnard-pino-pretty-prompts (npm) (malicious package)
- [MAL-2025-148836](https://insights.sbomify.com/MAL-2025-148836/): Malicious code in typeorm-astro-playwright-hercules (npm) (malicious package)
- [MAL-2025-148835](https://insights.sbomify.com/MAL-2025-148835/): Malicious code in typeorm-antares-geckodriver-auth0 (npm) (malicious package)
- [MAL-2025-148834](https://insights.sbomify.com/MAL-2025-148834/): Malicious code in triton-xml-ganymede-janus (npm) (malicious package)
- [MAL-2025-148833](https://insights.sbomify.com/MAL-2025-148833/): Malicious code in triton-winston-sequelize-kaus (npm) (malicious package)
- [MAL-2025-148832](https://insights.sbomify.com/MAL-2025-148832/): Malicious code in triton-webdriverio-hyperion-capella (npm) (malicious package)
- [MAL-2025-148831](https://insights.sbomify.com/MAL-2025-148831/): Malicious code in triton-webdriver-mocha-hercules-sails (npm) (malicious package)
- [MAL-2025-148830](https://insights.sbomify.com/MAL-2025-148830/): Malicious code in triton-warp-sadr-nightmare (npm) (malicious package)
- [MAL-2025-14883](https://insights.sbomify.com/MAL-2025-14883/): Malicious code in arwallgs3ivfw3jqzgqihqt9qajrv3tr (npm) (malicious package)
- [MAL-2025-148829](https://insights.sbomify.com/MAL-2025-148829/): Malicious code in triton-taurus-callisto-yaml (npm) (malicious package)
- [MAL-2025-148828](https://insights.sbomify.com/MAL-2025-148828/): Malicious code in triton-sirius-redis-eslint (npm) (malicious package)
- [MAL-2025-148827](https://insights.sbomify.com/MAL-2025-148827/): Malicious code in triton-scripts-cygnus-css-loader (npm) (malicious package)
- [MAL-2025-148826](https://insights.sbomify.com/MAL-2025-148826/): Malicious code in triton-radiant-lynx-frontend (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1389/