# Vulnerabilities published in 2025


- [MAL-2025-148825](https://insights.sbomify.com/MAL-2025-148825/): Malicious code in triton-publish-pm2-auriga (npm) (malicious package)
- [MAL-2025-148824](https://insights.sbomify.com/MAL-2025-148824/): Malicious code in triton-public-duplex-await (npm) (malicious package)
- [MAL-2025-148823](https://insights.sbomify.com/MAL-2025-148823/): Malicious code in triton-phoebe-lint-staged-postcss (npm) (malicious package)
- [MAL-2025-148822](https://insights.sbomify.com/MAL-2025-148822/): Malicious code in triton-phenomic-halley-sagitta (npm) (malicious package)
- [MAL-2025-148821](https://insights.sbomify.com/MAL-2025-148821/): Malicious code in triton-pegasus-less-loader-antares (npm) (malicious package)
- [MAL-2025-148820](https://insights.sbomify.com/MAL-2025-148820/): Malicious code in triton-mira-regulus-betelgeuse (npm) (malicious package)
- [MAL-2025-14882](https://insights.sbomify.com/MAL-2025-14882/): Malicious code in artyom (npm) (malicious package)
- [MAL-2025-148819](https://insights.sbomify.com/MAL-2025-148819/): Malicious code in triton-html-webpack-plugin-semantic-ui-cygnus (npm) (malicious package)
- [MAL-2025-148818](https://insights.sbomify.com/MAL-2025-148818/): Malicious code in triton-global-unuk-inquirer (npm) (malicious package)
- [MAL-2025-148817](https://insights.sbomify.com/MAL-2025-148817/): Malicious code in triton-ganymede-janus-miranda (npm) (malicious package)
- [MAL-2025-148816](https://insights.sbomify.com/MAL-2025-148816/): Malicious code in triton-enif-rimraf-pino-pretty (npm) (malicious package)
- [MAL-2025-148815](https://insights.sbomify.com/MAL-2025-148815/): Malicious code in triton-dynamo-draco-subscription (npm) (malicious package)
- [MAL-2025-148814](https://insights.sbomify.com/MAL-2025-148814/): Malicious code in triton-duplex-jsonp-native (npm) (malicious package)
- [MAL-2025-148813](https://insights.sbomify.com/MAL-2025-148813/): Malicious code in triton-dotenv-safe-typeorm-vulcan (npm) (malicious package)
- [MAL-2025-148812](https://insights.sbomify.com/MAL-2025-148812/): Malicious code in triton-cosmos-await-element-ui (npm) (malicious package)
- [MAL-2025-148811](https://insights.sbomify.com/MAL-2025-148811/): Malicious code in triton-convict-yakutsk-gulp (npm) (malicious package)
- [MAL-2025-148810](https://insights.sbomify.com/MAL-2025-148810/): Malicious code in triton-child-process-apollo-loop (npm) (malicious package)
- [MAL-2025-14881](https://insights.sbomify.com/MAL-2025-14881/): Malicious code in artycok (npm) (malicious package)
- [MAL-2025-148809](https://insights.sbomify.com/MAL-2025-148809/): Malicious code in triton-changelog-xenos-chakra-ui (npm) (malicious package)
- [MAL-2025-148808](https://insights.sbomify.com/MAL-2025-148808/): Malicious code in triton-build-cli-react-bootstrap (npm) (malicious package)
- [MAL-2025-148807](https://insights.sbomify.com/MAL-2025-148807/): Malicious code in triton-bellatrix-dactyl-cressida (npm) (malicious package)
- [MAL-2025-148806](https://insights.sbomify.com/MAL-2025-148806/): Malicious code in triton-antares-less-loader-gulp (npm) (malicious package)
- [MAL-2025-148805](https://insights.sbomify.com/MAL-2025-148805/): Malicious code in transport-ursa-lyra-yakutsk (npm) (malicious package)
- [MAL-2025-148804](https://insights.sbomify.com/MAL-2025-148804/): Malicious code in transport-upgrade-google-package (npm) (malicious package)
- [MAL-2025-148803](https://insights.sbomify.com/MAL-2025-148803/): Malicious code in transport-stream-nebula-phoebe (npm) (malicious package)
- [MAL-2025-148802](https://insights.sbomify.com/MAL-2025-148802/): Malicious code in transport-sedna-reveal-md-vuetify (npm) (malicious package)
- [MAL-2025-148801](https://insights.sbomify.com/MAL-2025-148801/): Malicious code in transport-sass-loader-csv-kaus (npm) (malicious package)
- [MAL-2025-148800](https://insights.sbomify.com/MAL-2025-148800/): Malicious code in transport-remark-dorado-ignite (npm) (malicious package)
- [MAL-2025-14880](https://insights.sbomify.com/MAL-2025-14880/): Malicious code in artschool (npm) (malicious package)
- [MAL-2025-1488](https://insights.sbomify.com/MAL-2025-1488/): Malicious code in jquery.validate.additional-methods-br (npm) (malicious package)
- [MAL-2025-148799](https://insights.sbomify.com/MAL-2025-148799/): Malicious code in transport-promise-proxima-spectron-webdriver (npm) (malicious package)
- [MAL-2025-148798](https://insights.sbomify.com/MAL-2025-148798/): Malicious code in transport-procyon-enceladus-perseus (npm) (malicious package)
- [MAL-2025-148797](https://insights.sbomify.com/MAL-2025-148797/): Malicious code in transport-postgres-slidev-install (npm) (malicious package)
- [MAL-2025-148796](https://insights.sbomify.com/MAL-2025-148796/): Malicious code in transport-playwright-zenobia-orbit (npm) (malicious package)
- [MAL-2025-148795](https://insights.sbomify.com/MAL-2025-148795/): Malicious code in transport-phoenix-sagitta-andromeda (npm) (malicious package)
- [MAL-2025-148794](https://insights.sbomify.com/MAL-2025-148794/): Malicious code in transport-nextjs-antares-yaml (npm) (malicious package)
- [MAL-2025-148793](https://insights.sbomify.com/MAL-2025-148793/): Malicious code in transport-mensa-tool-yakutsk (npm) (malicious package)
- [MAL-2025-148792](https://insights.sbomify.com/MAL-2025-148792/): Malicious code in transport-lynx-transform-webdriver-mocha (npm) (malicious package)
- [MAL-2025-148791](https://insights.sbomify.com/MAL-2025-148791/): Malicious code in transport-izar-antares-typeorm (npm) (malicious package)
- [MAL-2025-148790](https://insights.sbomify.com/MAL-2025-148790/): Malicious code in transport-install-unuk-deimos (npm) (malicious package)
- [MAL-2025-14879](https://insights.sbomify.com/MAL-2025-14879/): Malicious code in artmatch (npm) (malicious package)
- [MAL-2025-148789](https://insights.sbomify.com/MAL-2025-148789/): Malicious code in transport-indus-orbit-forever (npm) (malicious package)
- [MAL-2025-148788](https://insights.sbomify.com/MAL-2025-148788/): Malicious code in transport-hyperion-luna-loglevel (npm) (malicious package)
- [MAL-2025-148787](https://insights.sbomify.com/MAL-2025-148787/): Malicious code in transport-dynamo-hyperion-babel (npm) (malicious package)
- [MAL-2025-148786](https://insights.sbomify.com/MAL-2025-148786/): Malicious code in transport-draco-blaze-solis (npm) (malicious package)
- [MAL-2025-148785](https://insights.sbomify.com/MAL-2025-148785/): Malicious code in transport-dotenv-safe-kinetic-deimos (npm) (malicious package)
- [MAL-2025-148784](https://insights.sbomify.com/MAL-2025-148784/): Malicious code in transport-docusaurus-markdown-stream (npm) (malicious package)
- [MAL-2025-148783](https://insights.sbomify.com/MAL-2025-148783/): Malicious code in transport-cypress-delphinus-rimraf (npm) (malicious package)
- [MAL-2025-148782](https://insights.sbomify.com/MAL-2025-148782/): Malicious code in transport-cressida-sadr-sadr (npm) (malicious package)
- [MAL-2025-148781](https://insights.sbomify.com/MAL-2025-148781/): Malicious code in transport-commitlint-callback-andromeda (npm) (malicious package)
- [MAL-2025-148780](https://insights.sbomify.com/MAL-2025-148780/): Malicious code in transport-canopus-ganymede-config (npm) (malicious package)
- [MAL-2025-14878](https://insights.sbomify.com/MAL-2025-14878/): Malicious code in artmaster (npm) (malicious package)
- [MAL-2025-148779](https://insights.sbomify.com/MAL-2025-148779/): Malicious code in transform-xo-eridanus-express (npm) (malicious package)
- [MAL-2025-148778](https://insights.sbomify.com/MAL-2025-148778/): Malicious code in transform-writable-farout-publish (npm) (malicious package)
- [MAL-2025-148777](https://insights.sbomify.com/MAL-2025-148777/): Malicious code in transform-webdriver-mocha-webdriver-mocha-telesto (npm) (malicious package)
- [MAL-2025-148776](https://insights.sbomify.com/MAL-2025-148776/): Malicious code in transform-uninstall-octans-mui (npm) (malicious package)
- [MAL-2025-148775](https://insights.sbomify.com/MAL-2025-148775/): Malicious code in transform-terser-webpack-plugin-centauri-radiant (npm) (malicious package)
- [MAL-2025-148774](https://insights.sbomify.com/MAL-2025-148774/): Malicious code in transform-start-halley-cassini (npm) (malicious package)
- [MAL-2025-148773](https://insights.sbomify.com/MAL-2025-148773/): Malicious code in transform-sass-loader-polaris-relay (npm) (malicious package)
- [MAL-2025-148772](https://insights.sbomify.com/MAL-2025-148772/): Malicious code in transform-publish-sedna-cressida (npm) (malicious package)
- [MAL-2025-148771](https://insights.sbomify.com/MAL-2025-148771/): Malicious code in transform-pegasus-browserify-docusaurus (npm) (malicious package)
- [MAL-2025-148770](https://insights.sbomify.com/MAL-2025-148770/): Malicious code in transform-norma-flare-carpo (npm) (malicious package)
- [MAL-2025-14877](https://insights.sbomify.com/MAL-2025-14877/): Malicious code in artless (npm) (malicious package)
- [MAL-2025-148769](https://insights.sbomify.com/MAL-2025-148769/): Malicious code in transform-node-sass-jwt-mutation (npm) (malicious package)
- [MAL-2025-148768](https://insights.sbomify.com/MAL-2025-148768/): Malicious code in transform-morgan-frontend-epimetheus (npm) (malicious package)
- [MAL-2025-148767](https://insights.sbomify.com/MAL-2025-148767/): Malicious code in transform-lyra-run-script-cosmiconfig (npm) (malicious package)
- [MAL-2025-148766](https://insights.sbomify.com/MAL-2025-148766/): Malicious code in transform-jwt-vulcan-dione (npm) (malicious package)
- [MAL-2025-148765](https://insights.sbomify.com/MAL-2025-148765/): Malicious code in transform-json-react-bootstrap-telesto (npm) (malicious package)
- [MAL-2025-148764](https://insights.sbomify.com/MAL-2025-148764/): Malicious code in transform-helios-jekyll-spawn (npm) (malicious package)
- [MAL-2025-148763](https://insights.sbomify.com/MAL-2025-148763/): Malicious code in transform-exec-sedna-sagitta (npm) (malicious package)
- [MAL-2025-148762](https://insights.sbomify.com/MAL-2025-148762/): Malicious code in transform-dorado-phoenix-mensa (npm) (malicious package)
- [MAL-2025-148761](https://insights.sbomify.com/MAL-2025-148761/): Malicious code in transform-delphinus-umbriel-pm2 (npm) (malicious package)
- [MAL-2025-148760](https://insights.sbomify.com/MAL-2025-148760/): Malicious code in transform-cz-conventional-changelog-electron-builder-tethys (npm) (malicious package)
- [MAL-2025-14876](https://insights.sbomify.com/MAL-2025-14876/): Malicious code in artistmap (npm) (malicious package)
- [MAL-2025-148759](https://insights.sbomify.com/MAL-2025-148759/): Malicious code in transform-commitlint-config-angular-procyon-canopus (npm) (malicious package)
- [MAL-2025-148758](https://insights.sbomify.com/MAL-2025-148758/): Malicious code in transform-apollo-electron-despina (npm) (malicious package)
- [MAL-2025-148757](https://insights.sbomify.com/MAL-2025-148757/): Malicious code in transform-apex-sadr-standard (npm) (malicious package)
- [MAL-2025-148756](https://insights.sbomify.com/MAL-2025-148756/): Malicious code in tool-terser-avior-less (npm) (malicious package)
- [MAL-2025-148755](https://insights.sbomify.com/MAL-2025-148755/): Malicious code in tool-stop-magellan-jekyll (npm) (malicious package)
- [MAL-2025-148754](https://insights.sbomify.com/MAL-2025-148754/): Malicious code in tool-spectron-flare-repository (npm) (malicious package)
- [MAL-2025-148753](https://insights.sbomify.com/MAL-2025-148753/): Malicious code in tool-semantic-ui-loop-eslint-config (npm) (malicious package)
- [MAL-2025-148752](https://insights.sbomify.com/MAL-2025-148752/): Malicious code in tool-sails-nodejs-resolvers (npm) (malicious package)
- [MAL-2025-148751](https://insights.sbomify.com/MAL-2025-148751/): Malicious code in tool-rocket-impulse-dotenv (npm) (malicious package)
- [MAL-2025-148750](https://insights.sbomify.com/MAL-2025-148750/): Malicious code in tool-quark-andromeda-schema (npm) (malicious package)
- [MAL-2025-14875](https://insights.sbomify.com/MAL-2025-14875/): Malicious code in artisone (npm) (malicious package)
- [MAL-2025-148749](https://insights.sbomify.com/MAL-2025-148749/): Malicious code in tool-proxima-shelljs-corvus (npm) (malicious package)
- [MAL-2025-148748](https://insights.sbomify.com/MAL-2025-148748/): Malicious code in tool-passport-sqlite-triton (npm) (malicious package)
- [MAL-2025-148747](https://insights.sbomify.com/MAL-2025-148747/): Malicious code in tool-ophiuchus-titan-rigel (npm) (malicious package)
- [MAL-2025-148746](https://insights.sbomify.com/MAL-2025-148746/): Malicious code in tool-nodemon-hexo-restart (npm) (malicious package)
- [MAL-2025-148745](https://insights.sbomify.com/MAL-2025-148745/): Malicious code in tool-nightmare-geckodriver-juno (npm) (malicious package)
- [MAL-2025-148744](https://insights.sbomify.com/MAL-2025-148744/): Malicious code in tool-nconf-uninstall-upgrade (npm) (malicious package)
- [MAL-2025-148743](https://insights.sbomify.com/MAL-2025-148743/): Malicious code in tool-magellan-weywot-superagent (npm) (malicious package)
- [MAL-2025-148742](https://insights.sbomify.com/MAL-2025-148742/): Malicious code in tool-magellan-procyon-eleventy (npm) (malicious package)
- [MAL-2025-148741](https://insights.sbomify.com/MAL-2025-148741/): Malicious code in tool-loopback-jovian-google (npm) (malicious package)
- [MAL-2025-148740](https://insights.sbomify.com/MAL-2025-148740/): Malicious code in tool-link-hexo-aether (npm) (malicious package)
- [MAL-2025-14874](https://insights.sbomify.com/MAL-2025-14874/): Malicious code in article-curation (npm) (malicious package)
- [MAL-2025-148739](https://insights.sbomify.com/MAL-2025-148739/): Malicious code in tool-leda-mensa-halley (npm) (malicious package)
- [MAL-2025-148738](https://insights.sbomify.com/MAL-2025-148738/): Malicious code in tool-kronos-cosmos-sass-loader (npm) (malicious package)
- [MAL-2025-148737](https://insights.sbomify.com/MAL-2025-148737/): Malicious code in tool-jabbah-promise-charon (npm) (malicious package)
- [MAL-2025-148736](https://insights.sbomify.com/MAL-2025-148736/): Malicious code in tool-jabbah-inquirer-materialize (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1390/