# Vulnerabilities published in 2025


- [MAL-2025-148735](https://insights.sbomify.com/MAL-2025-148735/): Malicious code in tool-hercules-jwt-nightwatch (npm) (malicious package)
- [MAL-2025-148734](https://insights.sbomify.com/MAL-2025-148734/): Malicious code in tool-fornax-polaris-install (npm) (malicious package)
- [MAL-2025-148733](https://insights.sbomify.com/MAL-2025-148733/): Malicious code in tool-dotenv-safe-deimos-magellan (npm) (malicious package)
- [MAL-2025-148732](https://insights.sbomify.com/MAL-2025-148732/): Malicious code in tool-cosmos-vuepress-buffer (npm) (malicious package)
- [MAL-2025-148731](https://insights.sbomify.com/MAL-2025-148731/): Malicious code in tool-command-geckodriver-atlas (npm) (malicious package)
- [MAL-2025-148730](https://insights.sbomify.com/MAL-2025-148730/): Malicious code in tool-cache-jasmine-link (npm) (malicious package)
- [MAL-2025-14873](https://insights.sbomify.com/MAL-2025-14873/): Malicious code in arthur-utils (npm) (malicious package)
- [MAL-2025-148729](https://insights.sbomify.com/MAL-2025-148729/): Malicious code in tool-bunyan-sagitta-vega (npm) (malicious package)
- [MAL-2025-148728](https://insights.sbomify.com/MAL-2025-148728/): Malicious code in tool-aquarius-juno-pipe (npm) (malicious package)
- [MAL-2025-148727](https://insights.sbomify.com/MAL-2025-148727/): Malicious code in tool-andromeda-kinetic-scripts (npm) (malicious package)
- [MAL-2025-148726](https://insights.sbomify.com/MAL-2025-148726/): Malicious code in toml-websockets-dynamo-frontend (npm) (malicious package)
- [MAL-2025-148725](https://insights.sbomify.com/MAL-2025-148725/): Malicious code in toml-version-docusaurus-enif (npm) (malicious package)
- [MAL-2025-148724](https://insights.sbomify.com/MAL-2025-148724/): Malicious code in toml-uninstall-acamar-juno (npm) (malicious package)
- [MAL-2025-148723](https://insights.sbomify.com/MAL-2025-148723/): Malicious code in toml-transform-mongoose-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-148722](https://insights.sbomify.com/MAL-2025-148722/): Malicious code in toml-transform-colors-uninstall (npm) (malicious package)
- [MAL-2025-148721](https://insights.sbomify.com/MAL-2025-148721/): Malicious code in toml-redis-janus-yildun (npm) (malicious package)
- [MAL-2025-148720](https://insights.sbomify.com/MAL-2025-148720/): Malicious code in toml-nodejs-spinner-uglify-js (npm) (malicious package)
- [MAL-2025-14872](https://insights.sbomify.com/MAL-2025-14872/): Malicious code in arthur-middleware (npm) (malicious package)
- [MAL-2025-148719](https://insights.sbomify.com/MAL-2025-148719/): Malicious code in toml-node-sass-lint-staged-andromeda (npm) (malicious package)
- [MAL-2025-148718](https://insights.sbomify.com/MAL-2025-148718/): Malicious code in toml-nestjs-achernar-spectron (npm) (malicious package)
- [MAL-2025-148717](https://insights.sbomify.com/MAL-2025-148717/): Malicious code in toml-lynx-pavo-sadr (npm) (malicious package)
- [MAL-2025-148716](https://insights.sbomify.com/MAL-2025-148716/): Malicious code in toml-levels-dynamo-nodemon (npm) (malicious package)
- [MAL-2025-148715](https://insights.sbomify.com/MAL-2025-148715/): Malicious code in toml-less-despina-jasmine (npm) (malicious package)
- [MAL-2025-148714](https://insights.sbomify.com/MAL-2025-148714/): Malicious code in toml-jovian-non-blocking-weywot (npm) (malicious package)
- [MAL-2025-148713](https://insights.sbomify.com/MAL-2025-148713/): Malicious code in toml-indus-ophiuchus-metalsmith (npm) (malicious package)
- [MAL-2025-148712](https://insights.sbomify.com/MAL-2025-148712/): Malicious code in toml-hyperion-meissa-kinetic (npm) (malicious package)
- [MAL-2025-148711](https://insights.sbomify.com/MAL-2025-148711/): Malicious code in toml-hexo-xml-capella (npm) (malicious package)
- [MAL-2025-148710](https://insights.sbomify.com/MAL-2025-148710/): Malicious code in toml-flare-shelljs-subscription (npm) (malicious package)
- [MAL-2025-14871](https://insights.sbomify.com/MAL-2025-14871/): Malicious code in arthur-lib (npm) (malicious package)
- [MAL-2025-148709](https://insights.sbomify.com/MAL-2025-148709/): Malicious code in toml-figures-got-cygnus (npm) (malicious package)
- [MAL-2025-148708](https://insights.sbomify.com/MAL-2025-148708/): Malicious code in toml-cygnus-proxima-jabbah (npm) (malicious package)
- [MAL-2025-148707](https://insights.sbomify.com/MAL-2025-148707/): Malicious code in toml-cross-env-private-ini (npm) (malicious package)
- [MAL-2025-148706](https://insights.sbomify.com/MAL-2025-148706/): Malicious code in toml-convict-lyra-helios (npm) (malicious package)
- [MAL-2025-148705](https://insights.sbomify.com/MAL-2025-148705/): Malicious code in toml-commitizen-vega-upgrade (npm) (malicious package)
- [MAL-2025-148704](https://insights.sbomify.com/MAL-2025-148704/): Malicious code in toml-commitizen-mocha-epimetheus (npm) (malicious package)
- [MAL-2025-148703](https://insights.sbomify.com/MAL-2025-148703/): Malicious code in toml-changelog-umbra-rimraf (npm) (malicious package)
- [MAL-2025-148702](https://insights.sbomify.com/MAL-2025-148702/): Malicious code in toml-chalk-restart-native (npm) (malicious package)
- [MAL-2025-148701](https://insights.sbomify.com/MAL-2025-148701/): Malicious code in toml-avior-nightmare-winston (npm) (malicious package)
- [MAL-2025-148700](https://insights.sbomify.com/MAL-2025-148700/): Malicious code in toml-aurora-bulma-fomalhaut (npm) (malicious package)
- [MAL-2025-14870](https://insights.sbomify.com/MAL-2025-14870/): Malicious code in artbit (npm) (malicious package)
- [MAL-2025-1487](https://insights.sbomify.com/MAL-2025-1487/): Malicious code in jquery-real (npm) (malicious package)
- [MAL-2025-148699](https://insights.sbomify.com/MAL-2025-148699/): Malicious code in toml-antares-winston-octans (npm) (malicious package)
- [MAL-2025-148698](https://insights.sbomify.com/MAL-2025-148698/): Malicious code in titan-winston-commitlint-config-angular-elara (npm) (malicious package)
- [MAL-2025-148697](https://insights.sbomify.com/MAL-2025-148697/): Malicious code in titan-venus-iota-jabbah (npm) (malicious package)
- [MAL-2025-148696](https://insights.sbomify.com/MAL-2025-148696/): Malicious code in titan-uninstall-zenobia-child-process (npm) (malicious package)
- [MAL-2025-148695](https://insights.sbomify.com/MAL-2025-148695/): Malicious code in titan-umbra-optimize-css-assets-webpack-plugin-solis (npm) (malicious package)
- [MAL-2025-148694](https://insights.sbomify.com/MAL-2025-148694/): Malicious code in titan-tailwindcss-koa-transport (npm) (malicious package)
- [MAL-2025-148693](https://insights.sbomify.com/MAL-2025-148693/): Malicious code in titan-scripts-convict-terser (npm) (malicious package)
- [MAL-2025-148692](https://insights.sbomify.com/MAL-2025-148692/): Malicious code in titan-quantum-unuk-gacrux (npm) (malicious package)
- [MAL-2025-148691](https://insights.sbomify.com/MAL-2025-148691/): Malicious code in titan-polaris-wolf-standard (npm) (malicious package)
- [MAL-2025-148690](https://insights.sbomify.com/MAL-2025-148690/): Malicious code in titan-pegasus-transport-rocket (npm) (malicious package)
- [MAL-2025-14869](https://insights.sbomify.com/MAL-2025-14869/): Malicious code in arsgit (npm) (malicious package)
- [MAL-2025-148689](https://insights.sbomify.com/MAL-2025-148689/): Malicious code in titan-oberon-restart-electron-builder (npm) (malicious package)
- [MAL-2025-148688](https://insights.sbomify.com/MAL-2025-148688/): Malicious code in titan-node-config-janus-ophiuchus (npm) (malicious package)
- [MAL-2025-148687](https://insights.sbomify.com/MAL-2025-148687/): Malicious code in titan-nightmare-jabbah-aquarius (npm) (malicious package)
- [MAL-2025-148686](https://insights.sbomify.com/MAL-2025-148686/): Malicious code in titan-nashira-achernar-carpo (npm) (malicious package)
- [MAL-2025-148685](https://insights.sbomify.com/MAL-2025-148685/): Malicious code in titan-mysql-registry-prompts (npm) (malicious package)
- [MAL-2025-148684](https://insights.sbomify.com/MAL-2025-148684/): Malicious code in titan-mui-procyon-pipe (npm) (malicious package)
- [MAL-2025-148683](https://insights.sbomify.com/MAL-2025-148683/): Malicious code in titan-markdown-oauth-spectron-webdriver (npm) (malicious package)
- [MAL-2025-148682](https://insights.sbomify.com/MAL-2025-148682/): Malicious code in titan-less-loader-mongoose-frontend (npm) (malicious package)
- [MAL-2025-148681](https://insights.sbomify.com/MAL-2025-148681/): Malicious code in titan-janus-celeste-orbit (npm) (malicious package)
- [MAL-2025-148680](https://insights.sbomify.com/MAL-2025-148680/): Malicious code in titan-ganymede-cypress-testcafe (npm) (malicious package)
- [MAL-2025-14868](https://insights.sbomify.com/MAL-2025-14868/): Malicious code in arsenic-tabasco-cyborg-peanut-butter (npm) (malicious package)
- [MAL-2025-148679](https://insights.sbomify.com/MAL-2025-148679/): Malicious code in titan-fork-centaurus-fornax (npm) (malicious package)
- [MAL-2025-148678](https://insights.sbomify.com/MAL-2025-148678/): Malicious code in titan-fomalhaut-node-config-quark (npm) (malicious package)
- [MAL-2025-148677](https://insights.sbomify.com/MAL-2025-148677/): Malicious code in titan-dotenv-rigel-vortex (npm) (malicious package)
- [MAL-2025-148676](https://insights.sbomify.com/MAL-2025-148676/): Malicious code in titan-cluster-yakutsk-sedna (npm) (malicious package)
- [MAL-2025-148675](https://insights.sbomify.com/MAL-2025-148675/): Malicious code in titan-child-process-colors-envconfig (npm) (malicious package)
- [MAL-2025-148674](https://insights.sbomify.com/MAL-2025-148674/): Malicious code in titan-chai-heka-lint-staged (npm) (malicious package)
- [MAL-2025-148673](https://insights.sbomify.com/MAL-2025-148673/): Malicious code in titan-centauri-less-draco (npm) (malicious package)
- [MAL-2025-148672](https://insights.sbomify.com/MAL-2025-148672/): Malicious code in titan-buffer-sagitta-upgrade (npm) (malicious package)
- [MAL-2025-148671](https://insights.sbomify.com/MAL-2025-148671/): Malicious code in titan-auth-websockets-algol (npm) (malicious package)
- [MAL-2025-148670](https://insights.sbomify.com/MAL-2025-148670/): Malicious code in titan-airbnb-despina-puppeteer (npm) (malicious package)
- [MAL-2025-14867](https://insights.sbomify.com/MAL-2025-14867/): Malicious code in arroute (npm) (malicious package)
- [MAL-2025-148669](https://insights.sbomify.com/MAL-2025-148669/): Malicious code in titan-adonis-nestjs-fork (npm) (malicious package)
- [MAL-2025-148668](https://insights.sbomify.com/MAL-2025-148668/): Malicious code in thuban-umbra-gravity-cassini (npm) (malicious package)
- [MAL-2025-148667](https://insights.sbomify.com/MAL-2025-148667/): Malicious code in thuban-semantic-ui-elektra-aquarius (npm) (malicious package)
- [MAL-2025-148666](https://insights.sbomify.com/MAL-2025-148666/): Malicious code in thuban-sails-vuetify-nova (npm) (malicious package)
- [MAL-2025-148665](https://insights.sbomify.com/MAL-2025-148665/): Malicious code in thuban-run-script-phoebe-phoebe (npm) (malicious package)
- [MAL-2025-148664](https://insights.sbomify.com/MAL-2025-148664/): Malicious code in thuban-run-script-callback-meteor (npm) (malicious package)
- [MAL-2025-148663](https://insights.sbomify.com/MAL-2025-148663/): Malicious code in thuban-rollup-plugin-chariklo-arcturus (npm) (malicious package)
- [MAL-2025-148662](https://insights.sbomify.com/MAL-2025-148662/): Malicious code in thuban-rate-limiter-inquirer-ariel (npm) (malicious package)
- [MAL-2025-148661](https://insights.sbomify.com/MAL-2025-148661/): Malicious code in thuban-postgres-sails-phoenix (npm) (malicious package)
- [MAL-2025-148660](https://insights.sbomify.com/MAL-2025-148660/): Malicious code in thuban-parcel-fornax-nightmare (npm) (malicious package)
- [MAL-2025-14866](https://insights.sbomify.com/MAL-2025-14866/): Malicious code in arrdril712 (npm) (malicious package)
- [MAL-2025-148659](https://insights.sbomify.com/MAL-2025-148659/): Malicious code in thuban-optimize-css-assets-webpack-plugin-phenomic-grus (npm) (malicious package)
- [MAL-2025-148658](https://insights.sbomify.com/MAL-2025-148658/): Malicious code in thuban-oauth-graphql-colors (npm) (malicious package)
- [MAL-2025-148657](https://insights.sbomify.com/MAL-2025-148657/): Malicious code in thuban-neptune-hexo-dorado (npm) (malicious package)
- [MAL-2025-148656](https://insights.sbomify.com/MAL-2025-148656/): Malicious code in thuban-meissa-envconfig-deimos (npm) (malicious package)
- [MAL-2025-148655](https://insights.sbomify.com/MAL-2025-148655/): Malicious code in thuban-link-bootstrap-flare (npm) (malicious package)
- [MAL-2025-148654](https://insights.sbomify.com/MAL-2025-148654/): Malicious code in thuban-less-loader-spica-achernar (npm) (malicious package)
- [MAL-2025-148653](https://insights.sbomify.com/MAL-2025-148653/): Malicious code in thuban-graphql-backend-jupiter (npm) (malicious package)
- [MAL-2025-148652](https://insights.sbomify.com/MAL-2025-148652/): Malicious code in thuban-gemini-warp-helmet (npm) (malicious package)
- [MAL-2025-148651](https://insights.sbomify.com/MAL-2025-148651/): Malicious code in thuban-ganymede-sirius-bootes (npm) (malicious package)
- [MAL-2025-148650](https://insights.sbomify.com/MAL-2025-148650/): Malicious code in thuban-eris-sadr-lacerta (npm) (malicious package)
- [MAL-2025-14865](https://insights.sbomify.com/MAL-2025-14865/): Malicious code in array-xi-hot-psi-psi (npm) (malicious package)
- [MAL-2025-148649](https://insights.sbomify.com/MAL-2025-148649/): Malicious code in thuban-dotenv-safe-rigel-markdownlint (npm) (malicious package)
- [MAL-2025-148648](https://insights.sbomify.com/MAL-2025-148648/): Malicious code in thuban-development-transform-native (npm) (malicious package)
- [MAL-2025-148647](https://insights.sbomify.com/MAL-2025-148647/): Malicious code in thuban-development-carpo-loglevel (npm) (malicious package)
- [MAL-2025-148646](https://insights.sbomify.com/MAL-2025-148646/): Malicious code in thuban-delphinus-rollup-plugin-graphql (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1391/