# Vulnerabilities published in 2025


- [MAL-2025-148375](https://insights.sbomify.com/MAL-2025-148375/): Malicious code in superagent-castor-mongoose-morgan (npm) (malicious package)
- [MAL-2025-148374](https://insights.sbomify.com/MAL-2025-148374/): Malicious code in superagent-build-spinner-miranda (npm) (malicious package)
- [MAL-2025-148373](https://insights.sbomify.com/MAL-2025-148373/): Malicious code in superagent-build-sirius-webdriver-manager (npm) (malicious package)
- [MAL-2025-148372](https://insights.sbomify.com/MAL-2025-148372/): Malicious code in superagent-build-eris-inquirer (npm) (malicious package)
- [MAL-2025-148371](https://insights.sbomify.com/MAL-2025-148371/): Malicious code in superagent-atlas-thuban-exec (npm) (malicious package)
- [MAL-2025-148370](https://insights.sbomify.com/MAL-2025-148370/): Malicious code in subscription-zephyr-exec-pegasus (npm) (malicious package)
- [MAL-2025-14837](https://insights.sbomify.com/MAL-2025-14837/): Malicious code in armoauth (npm) (malicious package)
- [MAL-2025-148369](https://insights.sbomify.com/MAL-2025-148369/): Malicious code in subscription-xml-jasmine-apollo (npm) (malicious package)
- [MAL-2025-148368](https://insights.sbomify.com/MAL-2025-148368/): Malicious code in subscription-wolf-celeste-writable (npm) (malicious package)
- [MAL-2025-148367](https://insights.sbomify.com/MAL-2025-148367/): Malicious code in subscription-test-protractor-blitz (npm) (malicious package)
- [MAL-2025-148366](https://insights.sbomify.com/MAL-2025-148366/): Malicious code in subscription-request-koa-scorpius (npm) (malicious package)
- [MAL-2025-148365](https://insights.sbomify.com/MAL-2025-148365/): Malicious code in subscription-playwright-mui-package (npm) (malicious package)
- [MAL-2025-148364](https://insights.sbomify.com/MAL-2025-148364/): Malicious code in subscription-octans-toml-magellan (npm) (malicious package)
- [MAL-2025-148363](https://insights.sbomify.com/MAL-2025-148363/): Malicious code in subscription-non-blocking-auth0-wolf (npm) (malicious package)
- [MAL-2025-148362](https://insights.sbomify.com/MAL-2025-148362/): Malicious code in subscription-magellan-buffer-ignite (npm) (malicious package)
- [MAL-2025-148361](https://insights.sbomify.com/MAL-2025-148361/): Malicious code in subscription-levels-halley-pipe (npm) (malicious package)
- [MAL-2025-148360](https://insights.sbomify.com/MAL-2025-148360/): Malicious code in subscription-kinetic-eleventy-cluster (npm) (malicious package)
- [MAL-2025-14836](https://insights.sbomify.com/MAL-2025-14836/): Malicious code in armfly (npm) (malicious package)
- [MAL-2025-148359](https://insights.sbomify.com/MAL-2025-148359/): Malicious code in subscription-kastra-rimraf-spectron-webdriver (npm) (malicious package)
- [MAL-2025-148358](https://insights.sbomify.com/MAL-2025-148358/): Malicious code in subscription-ganymede-update-loglevel (npm) (malicious package)
- [MAL-2025-148357](https://insights.sbomify.com/MAL-2025-148357/): Malicious code in subscription-ganymede-npm-terser (npm) (malicious package)
- [MAL-2025-148356](https://insights.sbomify.com/MAL-2025-148356/): Malicious code in subscription-fetch-orbit-hermes (npm) (malicious package)
- [MAL-2025-148355](https://insights.sbomify.com/MAL-2025-148355/): Malicious code in subscription-europa-babel-browserify (npm) (malicious package)
- [MAL-2025-148354](https://insights.sbomify.com/MAL-2025-148354/): Malicious code in subscription-delphinus-grunt-nightwatch (npm) (malicious package)
- [MAL-2025-148353](https://insights.sbomify.com/MAL-2025-148353/): Malicious code in subscription-cz-conventional-changelog-lint-staged-umbriel (npm) (malicious package)
- [MAL-2025-148352](https://insights.sbomify.com/MAL-2025-148352/): Malicious code in subscription-css-minimizer-webpack-plugin-carpo-lynx (npm) (malicious package)
- [MAL-2025-148351](https://insights.sbomify.com/MAL-2025-148351/): Malicious code in subscription-betelgeuse-firebase-nconf (npm) (malicious package)
- [MAL-2025-148350](https://insights.sbomify.com/MAL-2025-148350/): Malicious code in subscription-betelgeuse-eris-mdx (npm) (malicious package)
- [MAL-2025-14835](https://insights.sbomify.com/MAL-2025-14835/): Malicious code in armageddon-installer (npm) (malicious package)
- [MAL-2025-148349](https://insights.sbomify.com/MAL-2025-148349/): Malicious code in subscription-apollo-hermes-spawn (npm) (malicious package)
- [MAL-2025-148348](https://insights.sbomify.com/MAL-2025-148348/): Malicious code in subscription-andromeda-leda-antares (npm) (malicious package)
- [MAL-2025-148347](https://insights.sbomify.com/MAL-2025-148347/): Malicious code in subscription-airbnb-europa-fusion (npm) (malicious package)
- [MAL-2025-148346](https://insights.sbomify.com/MAL-2025-148346/): Malicious code in subjective-amber-cardinal (npm) (malicious package)
- [MAL-2025-148345](https://insights.sbomify.com/MAL-2025-148345/): Malicious code in style-loader-yildun-prompts-electron (npm) (malicious package)
- [MAL-2025-148344](https://insights.sbomify.com/MAL-2025-148344/): Malicious code in style-loader-wolf-elara-nconf (npm) (malicious package)
- [MAL-2025-148343](https://insights.sbomify.com/MAL-2025-148343/): Malicious code in style-loader-start-cressida-passport (npm) (malicious package)
- [MAL-2025-148342](https://insights.sbomify.com/MAL-2025-148342/): Malicious code in style-loader-sqlite-optimize-css-assets-webpack-plugin-antares (npm) (malicious package)
- [MAL-2025-148341](https://insights.sbomify.com/MAL-2025-148341/): Malicious code in style-loader-sass-loader-public-hermes (npm) (malicious package)
- [MAL-2025-148340](https://insights.sbomify.com/MAL-2025-148340/): Malicious code in style-loader-rollup-plugin-izar-phoebe (npm) (malicious package)
- [MAL-2025-14834](https://insights.sbomify.com/MAL-2025-14834/): Malicious code in armageddon-client-desktop (npm) (malicious package)
- [MAL-2025-148339](https://insights.sbomify.com/MAL-2025-148339/): Malicious code in style-loader-resolvers-alphard-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-148338](https://insights.sbomify.com/MAL-2025-148338/): Malicious code in style-loader-repository-command-auriga (npm) (malicious package)
- [MAL-2025-148337](https://insights.sbomify.com/MAL-2025-148337/): Malicious code in style-loader-radiant-wezen-phoebe (npm) (malicious package)
- [MAL-2025-148336](https://insights.sbomify.com/MAL-2025-148336/): Malicious code in style-loader-node-config-charon-izar (npm) (malicious package)
- [MAL-2025-148335](https://insights.sbomify.com/MAL-2025-148335/): Malicious code in style-loader-nightwatch-zenith-oberon (npm) (malicious package)
- [MAL-2025-148334](https://insights.sbomify.com/MAL-2025-148334/): Malicious code in style-loader-neptune-taurus-gatsby (npm) (malicious package)
- [MAL-2025-148333](https://insights.sbomify.com/MAL-2025-148333/): Malicious code in style-loader-mocha-hermes-selenium (npm) (malicious package)
- [MAL-2025-148332](https://insights.sbomify.com/MAL-2025-148332/): Malicious code in style-loader-mini-css-extract-plugin-warp-perseus (npm) (malicious package)
- [MAL-2025-148331](https://insights.sbomify.com/MAL-2025-148331/): Malicious code in style-loader-metalsmith-jasmine-eslint-config (npm) (malicious package)
- [MAL-2025-148330](https://insights.sbomify.com/MAL-2025-148330/): Malicious code in stream-test-aldebaran-eleventy (npm) (malicious package)
- [MAL-2025-14833](https://insights.sbomify.com/MAL-2025-14833/): Malicious code in armada-dev (npm) (malicious package)
- [MAL-2025-148329](https://insights.sbomify.com/MAL-2025-148329/): Malicious code in stream-run-script-got-morgan (npm) (malicious package)
- [MAL-2025-148328](https://insights.sbomify.com/MAL-2025-148328/): Malicious code in stream-phoebe-adonis-promise (npm) (malicious package)
- [MAL-2025-148327](https://insights.sbomify.com/MAL-2025-148327/): Malicious code in stream-optimize-css-assets-webpack-plugin-nodemon-pulsar (npm) (malicious package)
- [MAL-2025-148326](https://insights.sbomify.com/MAL-2025-148326/): Malicious code in stream-mysql-typeorm-halley (npm) (malicious package)
- [MAL-2025-148325](https://insights.sbomify.com/MAL-2025-148325/): Malicious code in stream-magellan-gemini-webpack (npm) (malicious package)
- [MAL-2025-148324](https://insights.sbomify.com/MAL-2025-148324/): Malicious code in stream-loop-parcel-npm (npm) (malicious package)
- [MAL-2025-148323](https://insights.sbomify.com/MAL-2025-148323/): Malicious code in stream-lint-magellan-dependencies (npm) (malicious package)
- [MAL-2025-148322](https://insights.sbomify.com/MAL-2025-148322/): Malicious code in stream-link-stop-csrf (npm) (malicious package)
- [MAL-2025-148321](https://insights.sbomify.com/MAL-2025-148321/): Malicious code in stream-leda-auriga-await (npm) (malicious package)
- [MAL-2025-148320](https://insights.sbomify.com/MAL-2025-148320/): Malicious code in stream-jasmine-global-hydra (npm) (malicious package)
- [MAL-2025-14832](https://insights.sbomify.com/MAL-2025-14832/): Malicious code in arkadiko-dao-landing (npm) (malicious package)
- [MAL-2025-148319](https://insights.sbomify.com/MAL-2025-148319/): Malicious code in stream-impulse-halley-eleventy (npm) (malicious package)
- [MAL-2025-148318](https://insights.sbomify.com/MAL-2025-148318/): Malicious code in stream-graphql-levels-sedna (npm) (malicious package)
- [MAL-2025-148317](https://insights.sbomify.com/MAL-2025-148317/): Malicious code in stream-ganymede-semantic-ui-antares (npm) (malicious package)
- [MAL-2025-148316](https://insights.sbomify.com/MAL-2025-148316/): Malicious code in stream-galaxy-loopback-rocket (npm) (malicious package)
- [MAL-2025-148315](https://insights.sbomify.com/MAL-2025-148315/): Malicious code in stream-fornax-capella-public (npm) (malicious package)
- [MAL-2025-148314](https://insights.sbomify.com/MAL-2025-148314/): Malicious code in stream-dynamo-sass-loader-google (npm) (malicious package)
- [MAL-2025-148313](https://insights.sbomify.com/MAL-2025-148313/): Malicious code in stream-dotenv-parse-variables-izar-antares (npm) (malicious package)
- [MAL-2025-148312](https://insights.sbomify.com/MAL-2025-148312/): Malicious code in stream-chalk-elara-node-config (npm) (malicious package)
- [MAL-2025-148311](https://insights.sbomify.com/MAL-2025-148311/): Malicious code in stream-bunyan-selenium-fornax (npm) (malicious package)
- [MAL-2025-148310](https://insights.sbomify.com/MAL-2025-148310/): Malicious code in stream-babel-procyon-json (npm) (malicious package)
- [MAL-2025-14831](https://insights.sbomify.com/MAL-2025-14831/): Malicious code in arkadiko-dao (npm) (malicious package)
- [MAL-2025-148309](https://insights.sbomify.com/MAL-2025-148309/): Malicious code in stop-zenith-auriga-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-148308](https://insights.sbomify.com/MAL-2025-148308/): Malicious code in stop-winston-bulma-metalsmith (npm) (malicious package)
- [MAL-2025-148307](https://insights.sbomify.com/MAL-2025-148307/): Malicious code in stop-websockets-spica-antd (npm) (malicious package)
- [MAL-2025-148306](https://insights.sbomify.com/MAL-2025-148306/): Malicious code in stop-transform-ultra-ultra (npm) (malicious package)
- [MAL-2025-148305](https://insights.sbomify.com/MAL-2025-148305/): Malicious code in stop-thuban-fetch-electron-builder (npm) (malicious package)
- [MAL-2025-148304](https://insights.sbomify.com/MAL-2025-148304/): Malicious code in stop-start-link-shelljs (npm) (malicious package)
- [MAL-2025-148303](https://insights.sbomify.com/MAL-2025-148303/): Malicious code in stop-slides-mutation-non-blocking (npm) (malicious package)
- [MAL-2025-148302](https://insights.sbomify.com/MAL-2025-148302/): Malicious code in stop-sadr-package-docusaurus (npm) (malicious package)
- [MAL-2025-148301](https://insights.sbomify.com/MAL-2025-148301/): Malicious code in stop-polaris-gravity-apollo (npm) (malicious package)
- [MAL-2025-148300](https://insights.sbomify.com/MAL-2025-148300/): Malicious code in stop-package-phenomic-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-14830](https://insights.sbomify.com/MAL-2025-14830/): Malicious code in ark-survival-ancient-amber-generator (npm) (malicious package)
- [MAL-2025-1483](https://insights.sbomify.com/MAL-2025-1483/): Malicious code in go-bazel (npm) (malicious package)
- [MAL-2025-148299](https://insights.sbomify.com/MAL-2025-148299/): Malicious code in stop-node-config-zenith-sqlite (npm) (malicious package)
- [MAL-2025-148298](https://insights.sbomify.com/MAL-2025-148298/): Malicious code in stop-magellan-uninstall-ariel (npm) (malicious package)
- [MAL-2025-148297](https://insights.sbomify.com/MAL-2025-148297/): Malicious code in stop-google-magellan-apex (npm) (malicious package)
- [MAL-2025-148296](https://insights.sbomify.com/MAL-2025-148296/): Malicious code in stop-ganymede-prettier-plugin-markdown-phoenix (npm) (malicious package)
- [MAL-2025-148295](https://insights.sbomify.com/MAL-2025-148295/): Malicious code in stop-flare-graphql-webdriverio (npm) (malicious package)
- [MAL-2025-148294](https://insights.sbomify.com/MAL-2025-148294/): Malicious code in stop-firebase-mira-ophiuchus (npm) (malicious package)
- [MAL-2025-148293](https://insights.sbomify.com/MAL-2025-148293/): Malicious code in stop-duplex-cz-conventional-changelog-quark (npm) (malicious package)
- [MAL-2025-148292](https://insights.sbomify.com/MAL-2025-148292/): Malicious code in stop-dactyl-native-octans (npm) (malicious package)
- [MAL-2025-148291](https://insights.sbomify.com/MAL-2025-148291/): Malicious code in stop-colors-native-sedna (npm) (malicious package)
- [MAL-2025-148290](https://insights.sbomify.com/MAL-2025-148290/): Malicious code in stop-changelog-centauri-eclipse (npm) (malicious package)
- [MAL-2025-14829](https://insights.sbomify.com/MAL-2025-14829/): Malicious code in aritawd (npm) (malicious package)
- [MAL-2025-148289](https://insights.sbomify.com/MAL-2025-148289/): Malicious code in stop-chakra-ui-html-webpack-plugin-uninstall (npm) (malicious package)
- [MAL-2025-148288](https://insights.sbomify.com/MAL-2025-148288/): Malicious code in stop-centaurus-meissa-zenobia (npm) (malicious package)
- [MAL-2025-148287](https://insights.sbomify.com/MAL-2025-148287/): Malicious code in stop-bellatrix-sequelize-dotenv-safe (npm) (malicious package)
- [MAL-2025-148286](https://insights.sbomify.com/MAL-2025-148286/): Malicious code in stop-aquarius-barnard-rocket (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1395/