# Vulnerabilities published in 2025


- [MAL-2025-148465](https://insights.sbomify.com/MAL-2025-148465/): Malicious code in taurus-chakra-ui-quantum-webdriver-manager (npm) (malicious package)
- [MAL-2025-148464](https://insights.sbomify.com/MAL-2025-148464/): Malicious code in taurus-castor-jasmine-chalk (npm) (malicious package)
- [MAL-2025-148463](https://insights.sbomify.com/MAL-2025-148463/): Malicious code in taurus-castor-concurrently-nextjs (npm) (malicious package)
- [MAL-2025-148462](https://insights.sbomify.com/MAL-2025-148462/): Malicious code in taurus-castor-alphard-update (npm) (malicious package)
- [MAL-2025-148461](https://insights.sbomify.com/MAL-2025-148461/): Malicious code in taurus-await-ophiuchus-bootstrap (npm) (malicious package)
- [MAL-2025-148460](https://insights.sbomify.com/MAL-2025-148460/): Malicious code in taurus-ariel-zenobia-vortex (npm) (malicious package)
- [MAL-2025-14846](https://insights.sbomify.com/MAL-2025-14846/): Malicious code in aroma-octopus-chu398-project (npm) (malicious package)
- [MAL-2025-148459](https://insights.sbomify.com/MAL-2025-148459/): Malicious code in taurus-apollo-postgres-colors (npm) (malicious package)
- [MAL-2025-148458](https://insights.sbomify.com/MAL-2025-148458/): Malicious code in taurus-antares-child-process-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-148457](https://insights.sbomify.com/MAL-2025-148457/): Malicious code in tailwindcss-superagent-eslint-config-eleventy (npm) (malicious package)
- [MAL-2025-148456](https://insights.sbomify.com/MAL-2025-148456/): Malicious code in tailwindcss-style-loader-corvus-mensa (npm) (malicious package)
- [MAL-2025-148455](https://insights.sbomify.com/MAL-2025-148455/): Malicious code in tailwindcss-slidev-antd-elara (npm) (malicious package)
- [MAL-2025-148454](https://insights.sbomify.com/MAL-2025-148454/): Malicious code in tailwindcss-slides-winston-helmet (npm) (malicious package)
- [MAL-2025-148453](https://insights.sbomify.com/MAL-2025-148453/): Malicious code in tailwindcss-sass-loader-markdown-odin (npm) (malicious package)
- [MAL-2025-148452](https://insights.sbomify.com/MAL-2025-148452/): Malicious code in tailwindcss-rehype-nightmare-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-148451](https://insights.sbomify.com/MAL-2025-148451/): Malicious code in tailwindcss-readable-betelgeuse-xo (npm) (malicious package)
- [MAL-2025-148450](https://insights.sbomify.com/MAL-2025-148450/): Malicious code in tailwindcss-playwright-lacerta-hapi (npm) (malicious package)
- [MAL-2025-14845](https://insights.sbomify.com/MAL-2025-14845/): Malicious code in aroma-meadow-wkc728-project (npm) (malicious package)
- [MAL-2025-148449](https://insights.sbomify.com/MAL-2025-148449/): Malicious code in tailwindcss-oberon-fusion-virgo (npm) (malicious package)
- [MAL-2025-148448](https://insights.sbomify.com/MAL-2025-148448/): Malicious code in tailwindcss-morgan-xenon-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-148447](https://insights.sbomify.com/MAL-2025-148447/): Malicious code in tailwindcss-miranda-aquarius-duplex (npm) (malicious package)
- [MAL-2025-148446](https://insights.sbomify.com/MAL-2025-148446/): Malicious code in tailwindcss-link-eleventy-selenium (npm) (malicious package)
- [MAL-2025-148445](https://insights.sbomify.com/MAL-2025-148445/): Malicious code in tailwindcss-janus-docusaurus-eslint (npm) (malicious package)
- [MAL-2025-148444](https://insights.sbomify.com/MAL-2025-148444/): Malicious code in tailwindcss-iota-materialize-spica (npm) (malicious package)
- [MAL-2025-148443](https://insights.sbomify.com/MAL-2025-148443/): Malicious code in tailwindcss-helios-magellan-blaze (npm) (malicious package)
- [MAL-2025-148442](https://insights.sbomify.com/MAL-2025-148442/): Malicious code in tailwindcss-halley-rigel-repository (npm) (malicious package)
- [MAL-2025-148441](https://insights.sbomify.com/MAL-2025-148441/): Malicious code in tailwindcss-halley-docusaurus-pegasus (npm) (malicious package)
- [MAL-2025-148440](https://insights.sbomify.com/MAL-2025-148440/): Malicious code in tailwindcss-callback-andromeda-umbra (npm) (malicious package)
- [MAL-2025-14844](https://insights.sbomify.com/MAL-2025-14844/): Malicious code in aroma-forest-lqc825-project (npm) (malicious package)
- [MAL-2025-148439](https://insights.sbomify.com/MAL-2025-148439/): Malicious code in tailwindcss-async-dorado-karma (npm) (malicious package)
- [MAL-2025-148438](https://insights.sbomify.com/MAL-2025-148438/): Malicious code in tailwindcss-altair-pavo-jekyll (npm) (malicious package)
- [MAL-2025-148437](https://insights.sbomify.com/MAL-2025-148437/): Malicious code in sync-yaml-elara-hercules (npm) (malicious package)
- [MAL-2025-148436](https://insights.sbomify.com/MAL-2025-148436/): Malicious code in sync-wasat-deimos-hapi (npm) (malicious package)
- [MAL-2025-148435](https://insights.sbomify.com/MAL-2025-148435/): Malicious code in sync-transport-resolvers-quantum (npm) (malicious package)
- [MAL-2025-148434](https://insights.sbomify.com/MAL-2025-148434/): Malicious code in sync-telesto-configstore-javascript (npm) (malicious package)
- [MAL-2025-148433](https://insights.sbomify.com/MAL-2025-148433/): Malicious code in sync-sedna-titan-neptune (npm) (malicious package)
- [MAL-2025-148432](https://insights.sbomify.com/MAL-2025-148432/): Malicious code in sync-rigel-prettier-stylelint-concurrently (npm) (malicious package)
- [MAL-2025-148431](https://insights.sbomify.com/MAL-2025-148431/): Malicious code in sync-relay-rocket-scripts (npm) (malicious package)
- [MAL-2025-148430](https://insights.sbomify.com/MAL-2025-148430/): Malicious code in sync-pulsar-sequelize-framework (npm) (malicious package)
- [MAL-2025-14843](https://insights.sbomify.com/MAL-2025-14843/): Malicious code in aroma-ecosystem-gsn760-project (npm) (malicious package)
- [MAL-2025-148429](https://insights.sbomify.com/MAL-2025-148429/): Malicious code in sync-pulsar-child-process-gridsome (npm) (malicious package)
- [MAL-2025-148428](https://insights.sbomify.com/MAL-2025-148428/): Malicious code in sync-perseus-airbnb-bellatrix (npm) (malicious package)
- [MAL-2025-148427](https://insights.sbomify.com/MAL-2025-148427/): Malicious code in sync-norma-algol-jsonp (npm) (malicious package)
- [MAL-2025-148426](https://insights.sbomify.com/MAL-2025-148426/): Malicious code in sync-meissa-meissa-lacerta (npm) (malicious package)
- [MAL-2025-148425](https://insights.sbomify.com/MAL-2025-148425/): Malicious code in sync-jsonp-less-iota (npm) (malicious package)
- [MAL-2025-148424](https://insights.sbomify.com/MAL-2025-148424/): Malicious code in sync-jasmine-elara-mensa (npm) (malicious package)
- [MAL-2025-148423](https://insights.sbomify.com/MAL-2025-148423/): Malicious code in sync-envconfig-apollo-postcss (npm) (malicious package)
- [MAL-2025-148422](https://insights.sbomify.com/MAL-2025-148422/): Malicious code in sync-eclipse-metalsmith-csv (npm) (malicious package)
- [MAL-2025-148421](https://insights.sbomify.com/MAL-2025-148421/): Malicious code in sync-deimos-cache-husky (npm) (malicious package)
- [MAL-2025-148420](https://insights.sbomify.com/MAL-2025-148420/): Malicious code in sync-cross-env-firebase-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-14842](https://insights.sbomify.com/MAL-2025-14842/): Malicious code in aroma-cat-tex268-project (npm) (malicious package)
- [MAL-2025-148419](https://insights.sbomify.com/MAL-2025-148419/): Malicious code in sync-commitlint-materialize-eris (npm) (malicious package)
- [MAL-2025-148418](https://insights.sbomify.com/MAL-2025-148418/): Malicious code in sync-centaurus-gacrux-ursa (npm) (malicious package)
- [MAL-2025-148417](https://insights.sbomify.com/MAL-2025-148417/): Malicious code in sync-centauri-impulse-selenium (npm) (malicious package)
- [MAL-2025-148416](https://insights.sbomify.com/MAL-2025-148416/): Malicious code in sync-build-koa-miranda (npm) (malicious package)
- [MAL-2025-148415](https://insights.sbomify.com/MAL-2025-148415/): Malicious code in sync-axios-cypress-virgo (npm) (malicious package)
- [MAL-2025-148414](https://insights.sbomify.com/MAL-2025-148414/): Malicious code in sync-antares-rehype-yaml (npm) (malicious package)
- [MAL-2025-148413](https://insights.sbomify.com/MAL-2025-148413/): Malicious code in sync-adonis-rate-limiter-command (npm) (malicious package)
- [MAL-2025-148412](https://insights.sbomify.com/MAL-2025-148412/): Malicious code in sync-acamar-got-juno (npm) (malicious package)
- [MAL-2025-148411](https://insights.sbomify.com/MAL-2025-148411/): Malicious code in swift_dragon_green-32 (npm) (malicious package)
- [MAL-2025-148410](https://insights.sbomify.com/MAL-2025-148410/): Malicious code in sure_prawn_chocolate-35 (npm) (malicious package)
- [MAL-2025-14841](https://insights.sbomify.com/MAL-2025-14841/): Malicious code in aroma-butterfly-dtz487-project (npm) (malicious package)
- [MAL-2025-148409](https://insights.sbomify.com/MAL-2025-148409/): Malicious code in supervisor-zenith-ganymede-blitz (npm) (malicious package)
- [MAL-2025-148408](https://insights.sbomify.com/MAL-2025-148408/): Malicious code in supervisor-vulcan-remark-proxima (npm) (malicious package)
- [MAL-2025-148407](https://insights.sbomify.com/MAL-2025-148407/): Malicious code in supervisor-upgrade-optimize-css-assets-webpack-plugin-mutation (npm) (malicious package)
- [MAL-2025-148406](https://insights.sbomify.com/MAL-2025-148406/): Malicious code in supervisor-ultra-rate-limiter-mira (npm) (malicious package)
- [MAL-2025-148405](https://insights.sbomify.com/MAL-2025-148405/): Malicious code in supervisor-superagent-helmet-nuxtjs (npm) (malicious package)
- [MAL-2025-148404](https://insights.sbomify.com/MAL-2025-148404/): Malicious code in supervisor-start-janus-private (npm) (malicious package)
- [MAL-2025-148403](https://insights.sbomify.com/MAL-2025-148403/): Malicious code in supervisor-sirius-chromedriver-init (npm) (malicious package)
- [MAL-2025-148402](https://insights.sbomify.com/MAL-2025-148402/): Malicious code in supervisor-semantic-release-vortex-jest (npm) (malicious package)
- [MAL-2025-148401](https://insights.sbomify.com/MAL-2025-148401/): Malicious code in supervisor-semantic-release-sagitta-perseus (npm) (malicious package)
- [MAL-2025-148400](https://insights.sbomify.com/MAL-2025-148400/): Malicious code in supervisor-publish-cosmos-tethys (npm) (malicious package)
- [MAL-2025-14840](https://insights.sbomify.com/MAL-2025-14840/): Malicious code in arnavag (npm) (malicious package)
- [MAL-2025-1484](https://insights.sbomify.com/MAL-2025-1484/): Malicious code in gurubu (npm) (malicious package)
- [MAL-2025-148399](https://insights.sbomify.com/MAL-2025-148399/): Malicious code in supervisor-pm2-phoebe-jsonp (npm) (malicious package)
- [MAL-2025-148398](https://insights.sbomify.com/MAL-2025-148398/): Malicious code in supervisor-pegasus-odin-proxima (npm) (malicious package)
- [MAL-2025-148397](https://insights.sbomify.com/MAL-2025-148397/): Malicious code in supervisor-miranda-despina-supervisor (npm) (malicious package)
- [MAL-2025-148396](https://insights.sbomify.com/MAL-2025-148396/): Malicious code in supervisor-lynx-enif-kinetic (npm) (malicious package)
- [MAL-2025-148395](https://insights.sbomify.com/MAL-2025-148395/): Malicious code in supervisor-lint-staged-nebula-fornax (npm) (malicious package)
- [MAL-2025-148394](https://insights.sbomify.com/MAL-2025-148394/): Malicious code in supervisor-koa-carpo-hugo (npm) (malicious package)
- [MAL-2025-148393](https://insights.sbomify.com/MAL-2025-148393/): Malicious code in supervisor-install-postgres-node-sass (npm) (malicious package)
- [MAL-2025-148392](https://insights.sbomify.com/MAL-2025-148392/): Malicious code in supervisor-hyperion-elektra-yonder (npm) (malicious package)
- [MAL-2025-148391](https://insights.sbomify.com/MAL-2025-148391/): Malicious code in supervisor-corvus-css-loader-spinner (npm) (malicious package)
- [MAL-2025-148390](https://insights.sbomify.com/MAL-2025-148390/): Malicious code in supervisor-centauri-aether-link (npm) (malicious package)
- [MAL-2025-14839](https://insights.sbomify.com/MAL-2025-14839/): Malicious code in armusdb (npm) (malicious package)
- [MAL-2025-148389](https://insights.sbomify.com/MAL-2025-148389/): Malicious code in supervisor-callback-xo-gridsome (npm) (malicious package)
- [MAL-2025-148388](https://insights.sbomify.com/MAL-2025-148388/): Malicious code in supervisor-achernar-grunt-pavo (npm) (malicious package)
- [MAL-2025-148387](https://insights.sbomify.com/MAL-2025-148387/): Malicious code in superagent-vuetify-antares-vuetify (npm) (malicious package)
- [MAL-2025-148386](https://insights.sbomify.com/MAL-2025-148386/): Malicious code in superagent-transform-betelgeuse-chakra-ui (npm) (malicious package)
- [MAL-2025-148385](https://insights.sbomify.com/MAL-2025-148385/): Malicious code in superagent-nightwatch-got-arcturus (npm) (malicious package)
- [MAL-2025-148384](https://insights.sbomify.com/MAL-2025-148384/): Malicious code in superagent-kinetic-vega-materialize (npm) (malicious package)
- [MAL-2025-148383](https://insights.sbomify.com/MAL-2025-148383/): Malicious code in superagent-hydra-kinetic-procyon (npm) (malicious package)
- [MAL-2025-148382](https://insights.sbomify.com/MAL-2025-148382/): Malicious code in superagent-hydra-algol-request (npm) (malicious package)
- [MAL-2025-148381](https://insights.sbomify.com/MAL-2025-148381/): Malicious code in superagent-eleventy-mongoose-schema (npm) (malicious package)
- [MAL-2025-148380](https://insights.sbomify.com/MAL-2025-148380/): Malicious code in superagent-deneb-mui-electron-builder (npm) (malicious package)
- [MAL-2025-14838](https://insights.sbomify.com/MAL-2025-14838/): Malicious code in armsrace (npm) (malicious package)
- [MAL-2025-148379](https://insights.sbomify.com/MAL-2025-148379/): Malicious code in superagent-cross-env-csv-nodemon (npm) (malicious package)
- [MAL-2025-148378](https://insights.sbomify.com/MAL-2025-148378/): Malicious code in superagent-corvus-enif-scripts (npm) (malicious package)
- [MAL-2025-148377](https://insights.sbomify.com/MAL-2025-148377/): Malicious code in superagent-cors-vuetify-leda (npm) (malicious package)
- [MAL-2025-148376](https://insights.sbomify.com/MAL-2025-148376/): Malicious code in superagent-ceres-elektra-fusion (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1394/