# Vulnerabilities published in 2025


- [MAL-2025-148555](https://insights.sbomify.com/MAL-2025-148555/): Malicious code in terser-webpack-plugin-materialize-hugo-neptune (npm) (malicious package)
- [MAL-2025-148554](https://insights.sbomify.com/MAL-2025-148554/): Malicious code in terser-webpack-plugin-lint-toml-nebula (npm) (malicious package)
- [MAL-2025-148553](https://insights.sbomify.com/MAL-2025-148553/): Malicious code in terser-webpack-plugin-impulse-inquirer-europa (npm) (malicious package)
- [MAL-2025-148552](https://insights.sbomify.com/MAL-2025-148552/): Malicious code in terser-webpack-plugin-foundation-less-subscription (npm) (malicious package)
- [MAL-2025-148551](https://insights.sbomify.com/MAL-2025-148551/): Malicious code in terser-webpack-plugin-fork-dynamo-spectron-webdriver (npm) (malicious package)
- [MAL-2025-148550](https://insights.sbomify.com/MAL-2025-148550/): Malicious code in terser-webpack-plugin-farout-cosmos-phoebe (npm) (malicious package)
- [MAL-2025-14855](https://insights.sbomify.com/MAL-2025-14855/): Malicious code in aroma_bk5ic_dck54_unity (npm) (malicious package)
- [MAL-2025-148549](https://insights.sbomify.com/MAL-2025-148549/): Malicious code in terser-webpack-plugin-eslint-plugin-loglevel-titan (npm) (malicious package)
- [MAL-2025-148548](https://insights.sbomify.com/MAL-2025-148548/): Malicious code in terser-webpack-plugin-eslint-config-nightmare-native (npm) (malicious package)
- [MAL-2025-148547](https://insights.sbomify.com/MAL-2025-148547/): Malicious code in terser-webpack-plugin-dotenv-safe-bulma-foundation (npm) (malicious package)
- [MAL-2025-148546](https://insights.sbomify.com/MAL-2025-148546/): Malicious code in terser-webpack-plugin-despina-terser-webpack-plugin-levels (npm) (malicious package)
- [MAL-2025-148545](https://insights.sbomify.com/MAL-2025-148545/): Malicious code in terser-webpack-plugin-csv-transform-native (npm) (malicious package)
- [MAL-2025-148544](https://insights.sbomify.com/MAL-2025-148544/): Malicious code in terser-webpack-plugin-child-process-bunyan-rollup-plugin (npm) (malicious package)
- [MAL-2025-148543](https://insights.sbomify.com/MAL-2025-148543/): Malicious code in terser-webpack-plugin-canopus-antd-hyperion (npm) (malicious package)
- [MAL-2025-148542](https://insights.sbomify.com/MAL-2025-148542/): Malicious code in terser-webpack-plugin-airbnb-test-node-sass (npm) (malicious package)
- [MAL-2025-148541](https://insights.sbomify.com/MAL-2025-148541/): Malicious code in terser-ursa-cosmiconfig-json (npm) (malicious package)
- [MAL-2025-148540](https://insights.sbomify.com/MAL-2025-148540/): Malicious code in terser-triton-element-ui-dione (npm) (malicious package)
- [MAL-2025-14854](https://insights.sbomify.com/MAL-2025-14854/): Malicious code in aroma_aquf5_et51g_valley (npm) (malicious package)
- [MAL-2025-148539](https://insights.sbomify.com/MAL-2025-148539/): Malicious code in terser-test-unuk-lyra (npm) (malicious package)
- [MAL-2025-148538](https://insights.sbomify.com/MAL-2025-148538/): Malicious code in terser-spawn-pulsar-mdx (npm) (malicious package)
- [MAL-2025-148537](https://insights.sbomify.com/MAL-2025-148537/): Malicious code in terser-request-test-corvus (npm) (malicious package)
- [MAL-2025-148536](https://insights.sbomify.com/MAL-2025-148536/): Malicious code in terser-rehype-magellan-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-148535](https://insights.sbomify.com/MAL-2025-148535/): Malicious code in terser-redis-blaze-janus (npm) (malicious package)
- [MAL-2025-148534](https://insights.sbomify.com/MAL-2025-148534/): Malicious code in terser-private-ophiuchus-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-148533](https://insights.sbomify.com/MAL-2025-148533/): Malicious code in terser-private-element-ui-yakutsk (npm) (malicious package)
- [MAL-2025-148532](https://insights.sbomify.com/MAL-2025-148532/): Malicious code in terser-polaris-husky-readable (npm) (malicious package)
- [MAL-2025-148531](https://insights.sbomify.com/MAL-2025-148531/): Malicious code in terser-nestjs-deneb-unuk (npm) (malicious package)
- [MAL-2025-148530](https://insights.sbomify.com/MAL-2025-148530/): Malicious code in terser-meteor-element-ui-callisto (npm) (malicious package)
- [MAL-2025-14853](https://insights.sbomify.com/MAL-2025-14853/): Malicious code in aroma_7a5jh_i2iev_bloom (npm) (malicious package)
- [MAL-2025-148529](https://insights.sbomify.com/MAL-2025-148529/): Malicious code in terser-meissa-kaus-aurora (npm) (malicious package)
- [MAL-2025-148528](https://insights.sbomify.com/MAL-2025-148528/): Malicious code in terser-meissa-firebase-lyra (npm) (malicious package)
- [MAL-2025-148527](https://insights.sbomify.com/MAL-2025-148527/): Malicious code in terser-mdx-barnard-buffer (npm) (malicious package)
- [MAL-2025-148526](https://insights.sbomify.com/MAL-2025-148526/): Malicious code in terser-lynx-atlas-elara (npm) (malicious package)
- [MAL-2025-148525](https://insights.sbomify.com/MAL-2025-148525/): Malicious code in terser-lacerta-fornax-meissa (npm) (malicious package)
- [MAL-2025-148524](https://insights.sbomify.com/MAL-2025-148524/): Malicious code in terser-jsonp-version-uninstall (npm) (malicious package)
- [MAL-2025-148523](https://insights.sbomify.com/MAL-2025-148523/): Malicious code in terser-inquirer-cosmos-solis (npm) (malicious package)
- [MAL-2025-148522](https://insights.sbomify.com/MAL-2025-148522/): Malicious code in terser-ini-sadr-nebula (npm) (malicious package)
- [MAL-2025-148521](https://insights.sbomify.com/MAL-2025-148521/): Malicious code in terser-google-sedna-orbit (npm) (malicious package)
- [MAL-2025-148520](https://insights.sbomify.com/MAL-2025-148520/): Malicious code in terser-flare-css-loader-pipe (npm) (malicious package)
- [MAL-2025-14852](https://insights.sbomify.com/MAL-2025-14852/): Malicious code in aroma-zenith-wgc295-project (npm) (malicious package)
- [MAL-2025-148519](https://insights.sbomify.com/MAL-2025-148519/): Malicious code in terser-europa-start-orbit (npm) (malicious package)
- [MAL-2025-148518](https://insights.sbomify.com/MAL-2025-148518/): Malicious code in terser-eslint-config-got-scorpius (npm) (malicious package)
- [MAL-2025-148517](https://insights.sbomify.com/MAL-2025-148517/): Malicious code in terser-eslint-apollo-hercules (npm) (malicious package)
- [MAL-2025-148516](https://insights.sbomify.com/MAL-2025-148516/): Malicious code in terser-docusaurus-vega-metalsmith (npm) (malicious package)
- [MAL-2025-148515](https://insights.sbomify.com/MAL-2025-148515/): Malicious code in terser-css-minimizer-webpack-plugin-loglevel-jasmine (npm) (malicious package)
- [MAL-2025-148514](https://insights.sbomify.com/MAL-2025-148514/): Malicious code in terser-css-loader-mongoose-acamar (npm) (malicious package)
- [MAL-2025-148513](https://insights.sbomify.com/MAL-2025-148513/): Malicious code in terser-cluster-algol-nconf (npm) (malicious package)
- [MAL-2025-148512](https://insights.sbomify.com/MAL-2025-148512/): Malicious code in terser-chakra-ui-grunt-janus (npm) (malicious package)
- [MAL-2025-148511](https://insights.sbomify.com/MAL-2025-148511/): Malicious code in terser-centauri-celeste-bulma (npm) (malicious package)
- [MAL-2025-148510](https://insights.sbomify.com/MAL-2025-148510/): Malicious code in terser-auth-axios-eleventy (npm) (malicious package)
- [MAL-2025-14851](https://insights.sbomify.com/MAL-2025-14851/): Malicious code in aroma-willow-cpn475-project (npm) (malicious package)
- [MAL-2025-148509](https://insights.sbomify.com/MAL-2025-148509/): Malicious code in terser-atlas-figures-readable (npm) (malicious package)
- [MAL-2025-148508](https://insights.sbomify.com/MAL-2025-148508/): Malicious code in terser-achernar-cassini-astro (npm) (malicious package)
- [MAL-2025-148507](https://insights.sbomify.com/MAL-2025-148507/): Malicious code in telesto-zephyr-cache-vuetify (npm) (malicious package)
- [MAL-2025-148506](https://insights.sbomify.com/MAL-2025-148506/): Malicious code in telesto-wezen-mira-init (npm) (malicious package)
- [MAL-2025-148505](https://insights.sbomify.com/MAL-2025-148505/): Malicious code in telesto-webdriver-mocha-cosmiconfig-bellatrix (npm) (malicious package)
- [MAL-2025-148504](https://insights.sbomify.com/MAL-2025-148504/): Malicious code in telesto-wasat-delphinus-halley (npm) (malicious package)
- [MAL-2025-148503](https://insights.sbomify.com/MAL-2025-148503/): Malicious code in telesto-sirius-centaurus-carina (npm) (malicious package)
- [MAL-2025-148502](https://insights.sbomify.com/MAL-2025-148502/): Malicious code in telesto-sails-bootes-standard (npm) (malicious package)
- [MAL-2025-148501](https://insights.sbomify.com/MAL-2025-148501/): Malicious code in telesto-release-it-google-javascript (npm) (malicious package)
- [MAL-2025-148500](https://insights.sbomify.com/MAL-2025-148500/): Malicious code in telesto-readable-forever-winston (npm) (malicious package)
- [MAL-2025-14850](https://insights.sbomify.com/MAL-2025-14850/): Malicious code in aroma-waterfall-dla825-project (npm) (malicious package)
- [MAL-2025-1485](https://insights.sbomify.com/MAL-2025-1485/): Malicious code in gutenberg-kit (npm) (malicious package)
- [MAL-2025-148499](https://insights.sbomify.com/MAL-2025-148499/): Malicious code in telesto-quito-halley-electron-builder (npm) (malicious package)
- [MAL-2025-148498](https://insights.sbomify.com/MAL-2025-148498/): Malicious code in telesto-pulsar-postcss-loader-indus (npm) (malicious package)
- [MAL-2025-148497](https://insights.sbomify.com/MAL-2025-148497/): Malicious code in telesto-phoebe-install-betelgeuse (npm) (malicious package)
- [MAL-2025-148496](https://insights.sbomify.com/MAL-2025-148496/): Malicious code in telesto-middleware-dactyl-perseus (npm) (malicious package)
- [MAL-2025-148495](https://insights.sbomify.com/MAL-2025-148495/): Malicious code in telesto-hercules-axios-wasat (npm) (malicious package)
- [MAL-2025-148494](https://insights.sbomify.com/MAL-2025-148494/): Malicious code in telesto-eslint-config-writable-rate-limiter (npm) (malicious package)
- [MAL-2025-148493](https://insights.sbomify.com/MAL-2025-148493/): Malicious code in telesto-enceladus-process-json (npm) (malicious package)
- [MAL-2025-148492](https://insights.sbomify.com/MAL-2025-148492/): Malicious code in telesto-element-ui-sedna-repository (npm) (malicious package)
- [MAL-2025-148491](https://insights.sbomify.com/MAL-2025-148491/): Malicious code in telesto-child-process-betelgeuse-webdriver-manager (npm) (malicious package)
- [MAL-2025-148490](https://insights.sbomify.com/MAL-2025-148490/): Malicious code in telesto-aquarius-apex-restart (npm) (malicious package)
- [MAL-2025-14849](https://insights.sbomify.com/MAL-2025-14849/): Malicious code in aroma-sequoia-wyi469-project (npm) (malicious package)
- [MAL-2025-148489](https://insights.sbomify.com/MAL-2025-148489/): Malicious code in telesto-adonis-private-parcel (npm) (malicious package)
- [MAL-2025-148488](https://insights.sbomify.com/MAL-2025-148488/): Malicious code in teaphahitt (npm) (malicious package)
- [MAL-2025-148487](https://insights.sbomify.com/MAL-2025-148487/): Malicious code in teaphahitqq (npm) (malicious package)
- [MAL-2025-148486](https://insights.sbomify.com/MAL-2025-148486/): Malicious code in taurus-zenith-slides-betelgeuse (npm) (malicious package)
- [MAL-2025-148485](https://insights.sbomify.com/MAL-2025-148485/): Malicious code in taurus-xerxes-hermes-ariel (npm) (malicious package)
- [MAL-2025-148484](https://insights.sbomify.com/MAL-2025-148484/): Malicious code in taurus-weywot-zenobia-babel (npm) (malicious package)
- [MAL-2025-148483](https://insights.sbomify.com/MAL-2025-148483/): Malicious code in taurus-vuetify-eridanus-ultra (npm) (malicious package)
- [MAL-2025-148482](https://insights.sbomify.com/MAL-2025-148482/): Malicious code in taurus-uninstall-commitizen-postcss-loader (npm) (malicious package)
- [MAL-2025-148481](https://insights.sbomify.com/MAL-2025-148481/): Malicious code in taurus-semantic-release-auth0-castor (npm) (malicious package)
- [MAL-2025-148480](https://insights.sbomify.com/MAL-2025-148480/): Malicious code in taurus-rocket-tailwindcss-antares (npm) (malicious package)
- [MAL-2025-14848](https://insights.sbomify.com/MAL-2025-14848/): Malicious code in aroma-quilt-nwa771-project (npm) (malicious package)
- [MAL-2025-148479](https://insights.sbomify.com/MAL-2025-148479/): Malicious code in taurus-repository-scorpius-antares (npm) (malicious package)
- [MAL-2025-148478](https://insights.sbomify.com/MAL-2025-148478/): Malicious code in taurus-release-it-sadr-mui (npm) (malicious package)
- [MAL-2025-148477](https://insights.sbomify.com/MAL-2025-148477/): Malicious code in taurus-postcss-carpo-unuk (npm) (malicious package)
- [MAL-2025-148476](https://insights.sbomify.com/MAL-2025-148476/): Malicious code in taurus-phenomic-forever-loglevel (npm) (malicious package)
- [MAL-2025-148475](https://insights.sbomify.com/MAL-2025-148475/): Malicious code in taurus-package-bellatrix-loglevel (npm) (malicious package)
- [MAL-2025-148474](https://insights.sbomify.com/MAL-2025-148474/): Malicious code in taurus-module-style-loader-docusaurus (npm) (malicious package)
- [MAL-2025-148473](https://insights.sbomify.com/MAL-2025-148473/): Malicious code in taurus-miranda-yonder-quark (npm) (malicious package)
- [MAL-2025-148472](https://insights.sbomify.com/MAL-2025-148472/): Malicious code in taurus-mdx-promise-browserify (npm) (malicious package)
- [MAL-2025-148471](https://insights.sbomify.com/MAL-2025-148471/): Malicious code in taurus-lint-andromeda-rocket (npm) (malicious package)
- [MAL-2025-148470](https://insights.sbomify.com/MAL-2025-148470/): Malicious code in taurus-kaus-server-kinetic (npm) (malicious package)
- [MAL-2025-14847](https://insights.sbomify.com/MAL-2025-14847/): Malicious code in aroma-quilt-nfr154-project (npm) (malicious package)
- [MAL-2025-148469](https://insights.sbomify.com/MAL-2025-148469/): Malicious code in taurus-install-eslint-plugin-sadr (npm) (malicious package)
- [MAL-2025-148468](https://insights.sbomify.com/MAL-2025-148468/): Malicious code in taurus-exec-javascript-repository (npm) (malicious package)
- [MAL-2025-148467](https://insights.sbomify.com/MAL-2025-148467/): Malicious code in taurus-development-sirius-pegasus (npm) (malicious package)
- [MAL-2025-148466](https://insights.sbomify.com/MAL-2025-148466/): Malicious code in taurus-deneb-hyperion-selenium (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1393/