# Vulnerabilities published in 2025


- [MAL-2025-148645](https://insights.sbomify.com/MAL-2025-148645/): Malicious code in thuban-css-minimizer-webpack-plugin-parcel-dione (npm) (malicious package)
- [MAL-2025-148644](https://insights.sbomify.com/MAL-2025-148644/): Malicious code in thuban-capella-zenith-sync (npm) (malicious package)
- [MAL-2025-148643](https://insights.sbomify.com/MAL-2025-148643/): Malicious code in thuban-bunyan-sails-eclipse (npm) (malicious package)
- [MAL-2025-148642](https://insights.sbomify.com/MAL-2025-148642/): Malicious code in thuban-backend-install-wolf (npm) (malicious package)
- [MAL-2025-148641](https://insights.sbomify.com/MAL-2025-148641/): Malicious code in thuban-avior-algol-deimos (npm) (malicious package)
- [MAL-2025-148640](https://insights.sbomify.com/MAL-2025-148640/): Malicious code in thuban-apollo-sirius-yonder (npm) (malicious package)
- [MAL-2025-14864](https://insights.sbomify.com/MAL-2025-14864/): Malicious code in array-wind-user-data-rain (npm) (malicious package)
- [MAL-2025-148639](https://insights.sbomify.com/MAL-2025-148639/): Malicious code in thuban-acamar-geckodriver-aldebaran (npm) (malicious package)
- [MAL-2025-148638](https://insights.sbomify.com/MAL-2025-148638/): Malicious code in tethys-xerxes-fomalhaut-nashira (npm) (malicious package)
- [MAL-2025-148637](https://insights.sbomify.com/MAL-2025-148637/): Malicious code in tethys-xenon-husky-celeste (npm) (malicious package)
- [MAL-2025-148636](https://insights.sbomify.com/MAL-2025-148636/): Malicious code in tethys-uglify-js-optimize-css-assets-webpack-plugin-enif (npm) (malicious package)
- [MAL-2025-148635](https://insights.sbomify.com/MAL-2025-148635/): Malicious code in tethys-standard-miranda-registry (npm) (malicious package)
- [MAL-2025-148634](https://insights.sbomify.com/MAL-2025-148634/): Malicious code in tethys-spawn-selenium-wasat (npm) (malicious package)
- [MAL-2025-148633](https://insights.sbomify.com/MAL-2025-148633/): Malicious code in tethys-slides-leda-eclipse (npm) (malicious package)
- [MAL-2025-148632](https://insights.sbomify.com/MAL-2025-148632/): Malicious code in tethys-sails-perseus-gatsby (npm) (malicious package)
- [MAL-2025-148631](https://insights.sbomify.com/MAL-2025-148631/): Malicious code in tethys-proxima-json-wolf (npm) (malicious package)
- [MAL-2025-148630](https://insights.sbomify.com/MAL-2025-148630/): Malicious code in tethys-polaris-sass-loader-prettier-stylelint (npm) (malicious package)
- [MAL-2025-14863](https://insights.sbomify.com/MAL-2025-14863/): Malicious code in array-routes (npm) (malicious package)
- [MAL-2025-148629](https://insights.sbomify.com/MAL-2025-148629/): Malicious code in tethys-pino-pretty-algol-vuetify (npm) (malicious package)
- [MAL-2025-148628](https://insights.sbomify.com/MAL-2025-148628/): Malicious code in tethys-pegasus-transport-ophiuchus (npm) (malicious package)
- [MAL-2025-148627](https://insights.sbomify.com/MAL-2025-148627/): Malicious code in tethys-passport-playwright-typeorm (npm) (malicious package)
- [MAL-2025-148626](https://insights.sbomify.com/MAL-2025-148626/): Malicious code in tethys-nova-changelog-wolf (npm) (malicious package)
- [MAL-2025-148625](https://insights.sbomify.com/MAL-2025-148625/): Malicious code in tethys-non-blocking-hexo-spinner (npm) (malicious package)
- [MAL-2025-148624](https://insights.sbomify.com/MAL-2025-148624/): Malicious code in tethys-mongodb-orbit-nconf (npm) (malicious package)
- [MAL-2025-148623](https://insights.sbomify.com/MAL-2025-148623/): Malicious code in tethys-mira-csv-impulse (npm) (malicious package)
- [MAL-2025-148622](https://insights.sbomify.com/MAL-2025-148622/): Malicious code in tethys-jupiter-perseus-winston (npm) (malicious package)
- [MAL-2025-148621](https://insights.sbomify.com/MAL-2025-148621/): Malicious code in tethys-helmet-markdownlint-castor (npm) (malicious package)
- [MAL-2025-148620](https://insights.sbomify.com/MAL-2025-148620/): Malicious code in tethys-gulp-bootstrap-colors (npm) (malicious package)
- [MAL-2025-14862](https://insights.sbomify.com/MAL-2025-14862/): Malicious code in array-join-seperators (npm) (malicious package)
- [MAL-2025-148619](https://insights.sbomify.com/MAL-2025-148619/): Malicious code in tethys-ganymede-despina-zephyr (npm) (malicious package)
- [MAL-2025-148618](https://insights.sbomify.com/MAL-2025-148618/): Malicious code in tethys-fusion-wezen-commitizen (npm) (malicious package)
- [MAL-2025-148617](https://insights.sbomify.com/MAL-2025-148617/): Malicious code in tethys-enif-nconf-telesto (npm) (malicious package)
- [MAL-2025-148616](https://insights.sbomify.com/MAL-2025-148616/): Malicious code in tethys-dependencies-janus-pulsar (npm) (malicious package)
- [MAL-2025-148615](https://insights.sbomify.com/MAL-2025-148615/): Malicious code in tethys-cypress-spectron-titan (npm) (malicious package)
- [MAL-2025-148614](https://insights.sbomify.com/MAL-2025-148614/): Malicious code in tethys-cypress-optimize-css-assets-webpack-plugin-enif (npm) (malicious package)
- [MAL-2025-148613](https://insights.sbomify.com/MAL-2025-148613/): Malicious code in tethys-commitlint-galaxy-bellatrix (npm) (malicious package)
- [MAL-2025-148612](https://insights.sbomify.com/MAL-2025-148612/): Malicious code in tethys-canopus-altair-docusaurus (npm) (malicious package)
- [MAL-2025-148611](https://insights.sbomify.com/MAL-2025-148611/): Malicious code in tethys-betelgeuse-lynx-kinetic (npm) (malicious package)
- [MAL-2025-148610](https://insights.sbomify.com/MAL-2025-148610/): Malicious code in testcafe-xenon-chakra-ui-nodejs (npm) (malicious package)
- [MAL-2025-14861](https://insights.sbomify.com/MAL-2025-14861/): Malicious code in array-hash-view-balance-authenticate (npm) (malicious package)
- [MAL-2025-148609](https://insights.sbomify.com/MAL-2025-148609/): Malicious code in testcafe-winston-callisto-element-ui (npm) (malicious package)
- [MAL-2025-148608](https://insights.sbomify.com/MAL-2025-148608/): Malicious code in testcafe-webdriver-manager-pm2-radiant (npm) (malicious package)
- [MAL-2025-148607](https://insights.sbomify.com/MAL-2025-148607/): Malicious code in testcafe-unuk-weywot-lyra (npm) (malicious package)
- [MAL-2025-148606](https://insights.sbomify.com/MAL-2025-148606/): Malicious code in testcafe-spectron-transform-europa (npm) (malicious package)
- [MAL-2025-148605](https://insights.sbomify.com/MAL-2025-148605/): Malicious code in testcafe-scripts-aurora-winston (npm) (malicious package)
- [MAL-2025-148604](https://insights.sbomify.com/MAL-2025-148604/): Malicious code in testcafe-sass-loader-morgan-package (npm) (malicious package)
- [MAL-2025-148603](https://insights.sbomify.com/MAL-2025-148603/): Malicious code in testcafe-sails-venus-zenobia (npm) (malicious package)
- [MAL-2025-148602](https://insights.sbomify.com/MAL-2025-148602/): Malicious code in testcafe-rollup-plugin-corvus-europa (npm) (malicious package)
- [MAL-2025-148601](https://insights.sbomify.com/MAL-2025-148601/): Malicious code in testcafe-relay-chromedriver-webpack (npm) (malicious package)
- [MAL-2025-148600](https://insights.sbomify.com/MAL-2025-148600/): Malicious code in testcafe-promise-eslint-plugin-canopus (npm) (malicious package)
- [MAL-2025-14860](https://insights.sbomify.com/MAL-2025-14860/): Malicious code in array-compress (npm) (malicious package)
- [MAL-2025-1486](https://insights.sbomify.com/MAL-2025-1486/): Malicious code in jetpack-e2e-commons (npm) (malicious package)
- [MAL-2025-148599](https://insights.sbomify.com/MAL-2025-148599/): Malicious code in testcafe-ophiuchus-xo-yonder (npm) (malicious package)
- [MAL-2025-148598](https://insights.sbomify.com/MAL-2025-148598/): Malicious code in testcafe-kinetic-meteor-arcturus (npm) (malicious package)
- [MAL-2025-148597](https://insights.sbomify.com/MAL-2025-148597/): Malicious code in testcafe-impulse-auth-bellatrix (npm) (malicious package)
- [MAL-2025-148596](https://insights.sbomify.com/MAL-2025-148596/): Malicious code in testcafe-hyperion-envconfig-tool (npm) (malicious package)
- [MAL-2025-148595](https://insights.sbomify.com/MAL-2025-148595/): Malicious code in testcafe-husky-betelgeuse-hermes (npm) (malicious package)
- [MAL-2025-148594](https://insights.sbomify.com/MAL-2025-148594/): Malicious code in testcafe-fusion-apex-pyxis (npm) (malicious package)
- [MAL-2025-148593](https://insights.sbomify.com/MAL-2025-148593/): Malicious code in testcafe-fornax-vuetify-perseus (npm) (malicious package)
- [MAL-2025-148592](https://insights.sbomify.com/MAL-2025-148592/): Malicious code in testcafe-equinox-rate-limiter-vuepress (npm) (malicious package)
- [MAL-2025-148591](https://insights.sbomify.com/MAL-2025-148591/): Malicious code in testcafe-css-loader-uglify-js-tailwindcss (npm) (malicious package)
- [MAL-2025-148590](https://insights.sbomify.com/MAL-2025-148590/): Malicious code in testcafe-csrf-lacerta-global (npm) (malicious package)
- [MAL-2025-14859](https://insights.sbomify.com/MAL-2025-14859/): Malicious code in array-byte-code-reject-promise (npm) (malicious package)
- [MAL-2025-148589](https://insights.sbomify.com/MAL-2025-148589/): Malicious code in testcafe-centaurus-europa-parcel (npm) (malicious package)
- [MAL-2025-148588](https://insights.sbomify.com/MAL-2025-148588/): Malicious code in testcafe-callisto-levels-xml (npm) (malicious package)
- [MAL-2025-148587](https://insights.sbomify.com/MAL-2025-148587/): Malicious code in test-winston-eleventy-elara (npm) (malicious package)
- [MAL-2025-148586](https://insights.sbomify.com/MAL-2025-148586/): Malicious code in test-umbriel-postcss-proxima (npm) (malicious package)
- [MAL-2025-148585](https://insights.sbomify.com/MAL-2025-148585/): Malicious code in test-umbriel-morgan-testcafe (npm) (malicious package)
- [MAL-2025-148584](https://insights.sbomify.com/MAL-2025-148584/): Malicious code in test-taurus-triton-rollup (npm) (malicious package)
- [MAL-2025-148583](https://insights.sbomify.com/MAL-2025-148583/): Malicious code in test-sirius-gatsby-forever (npm) (malicious package)
- [MAL-2025-148582](https://insights.sbomify.com/MAL-2025-148582/): Malicious code in test-schema-dione-leda (npm) (malicious package)
- [MAL-2025-148581](https://insights.sbomify.com/MAL-2025-148581/): Malicious code in test-schema-blaze-grunt (npm) (malicious package)
- [MAL-2025-148580](https://insights.sbomify.com/MAL-2025-148580/): Malicious code in test-sagitta-development-dorado (npm) (malicious package)
- [MAL-2025-14858](https://insights.sbomify.com/MAL-2025-14858/): Malicious code in arrastar (npm) (malicious package)
- [MAL-2025-148579](https://insights.sbomify.com/MAL-2025-148579/): Malicious code in test-rest-yildun-process (npm) (malicious package)
- [MAL-2025-148578](https://insights.sbomify.com/MAL-2025-148578/): Malicious code in test-redis-pavo-version (npm) (malicious package)
- [MAL-2025-148577](https://insights.sbomify.com/MAL-2025-148577/): Malicious code in test-process-phoebe-rehype (npm) (malicious package)
- [MAL-2025-148576](https://insights.sbomify.com/MAL-2025-148576/): Malicious code in test-odin-deimos-json (npm) (malicious package)
- [MAL-2025-148575](https://insights.sbomify.com/MAL-2025-148575/): Malicious code in test-mui-fomalhaut-elara (npm) (malicious package)
- [MAL-2025-148574](https://insights.sbomify.com/MAL-2025-148574/): Malicious code in test-meissa-node-config-vega (npm) (malicious package)
- [MAL-2025-148573](https://insights.sbomify.com/MAL-2025-148573/): Malicious code in test-gulp-charon-janus (npm) (malicious package)
- [MAL-2025-148572](https://insights.sbomify.com/MAL-2025-148572/): Malicious code in test-exec-terser-figures (npm) (malicious package)
- [MAL-2025-148571](https://insights.sbomify.com/MAL-2025-148571/): Malicious code in test-eslint-plugin-proxima-cressida (npm) (malicious package)
- [MAL-2025-148570](https://insights.sbomify.com/MAL-2025-148570/): Malicious code in test-eclipse-prompts-nova (npm) (malicious package)
- [MAL-2025-14857](https://insights.sbomify.com/MAL-2025-14857/): Malicious code in arquletia (npm) (malicious package)
- [MAL-2025-148569](https://insights.sbomify.com/MAL-2025-148569/): Malicious code in test-css-minimizer-webpack-plugin-betelgeuse-rollup-plugin (npm) (malicious package)
- [MAL-2025-148568](https://insights.sbomify.com/MAL-2025-148568/): Malicious code in test-cross-env-json-iota (npm) (malicious package)
- [MAL-2025-148567](https://insights.sbomify.com/MAL-2025-148567/): Malicious code in test-cosmiconfig-solis-eleventy (npm) (malicious package)
- [MAL-2025-148566](https://insights.sbomify.com/MAL-2025-148566/): Malicious code in test-convict-jsonp-carpo (npm) (malicious package)
- [MAL-2025-148565](https://insights.sbomify.com/MAL-2025-148565/): Malicious code in test-cassini-luna-private (npm) (malicious package)
- [MAL-2025-148564](https://insights.sbomify.com/MAL-2025-148564/): Malicious code in test-callback-airbnb-wasat (npm) (malicious package)
- [MAL-2025-148563](https://insights.sbomify.com/MAL-2025-148563/): Malicious code in test-altair-postcss-update (npm) (malicious package)
- [MAL-2025-148562](https://insights.sbomify.com/MAL-2025-148562/): Malicious code in terser-xanadu-mocha-redis (npm) (malicious package)
- [MAL-2025-148561](https://insights.sbomify.com/MAL-2025-148561/): Malicious code in terser-webpack-plugin-yonder-venus-antd (npm) (malicious package)
- [MAL-2025-148560](https://insights.sbomify.com/MAL-2025-148560/): Malicious code in terser-webpack-plugin-release-it-quantum-sirius (npm) (malicious package)
- [MAL-2025-14856](https://insights.sbomify.com/MAL-2025-14856/): Malicious code in aroma_ck6a6_vhulq_molecule (npm) (malicious package)
- [MAL-2025-148559](https://insights.sbomify.com/MAL-2025-148559/): Malicious code in terser-webpack-plugin-prettier-antares-tailwindcss (npm) (malicious package)
- [MAL-2025-148558](https://insights.sbomify.com/MAL-2025-148558/): Malicious code in terser-webpack-plugin-non-blocking-gemini-colors (npm) (malicious package)
- [MAL-2025-148557](https://insights.sbomify.com/MAL-2025-148557/): Malicious code in terser-webpack-plugin-mutation-mutation-unuk (npm) (malicious package)
- [MAL-2025-148556](https://insights.sbomify.com/MAL-2025-148556/): Malicious code in terser-webpack-plugin-miranda-scripts-less-loader (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1392/