# Vulnerabilities published in 2025 - [MAL-2025-148285](https://insights.sbomify.com/MAL-2025-148285/): Malicious code in stop-aldebaran-sedna-luna (npm) (malicious package) - [MAL-2025-148284](https://insights.sbomify.com/MAL-2025-148284/): Malicious code in start-ursa-nodejs-server (npm) (malicious package) - [MAL-2025-148283](https://insights.sbomify.com/MAL-2025-148283/): Malicious code in start-sync-foundation-init (npm) (malicious package) - [MAL-2025-148282](https://insights.sbomify.com/MAL-2025-148282/): Malicious code in start-stop-terser-hermes (npm) (malicious package) - [MAL-2025-148281](https://insights.sbomify.com/MAL-2025-148281/): Malicious code in start-sirius-commitlint-config-angular-cluster (npm) (malicious package) - [MAL-2025-148280](https://insights.sbomify.com/MAL-2025-148280/): Malicious code in start-run-script-sagitta-proxima (npm) (malicious package) - [MAL-2025-14828](https://insights.sbomify.com/MAL-2025-14828/): Malicious code in arikatoh (npm) (malicious package) - [MAL-2025-148279](https://insights.sbomify.com/MAL-2025-148279/): Malicious code in start-passport-sequelize-helios (npm) (malicious package) - [MAL-2025-148278](https://insights.sbomify.com/MAL-2025-148278/): Malicious code in start-octans-supervisor-nightwatch (npm) (malicious package) - [MAL-2025-148277](https://insights.sbomify.com/MAL-2025-148277/): Malicious code in start-norma-izar-nodemon (npm) (malicious package) - [MAL-2025-148276](https://insights.sbomify.com/MAL-2025-148276/): Malicious code in start-mongoose-scripts-sync (npm) (malicious package) - [MAL-2025-148275](https://insights.sbomify.com/MAL-2025-148275/): Malicious code in start-lint-staged-antares-css-minimizer-webpack-plugin (npm) (malicious package) - [MAL-2025-148274](https://insights.sbomify.com/MAL-2025-148274/): Malicious code in start-levels-fusion-pipe (npm) (malicious package) - [MAL-2025-148273](https://insights.sbomify.com/MAL-2025-148273/): Malicious code in start-jest-umbra-standard (npm) (malicious package) - [MAL-2025-148272](https://insights.sbomify.com/MAL-2025-148272/): Malicious code in start-izar-meteor-antares (npm) (malicious package) - [MAL-2025-148271](https://insights.sbomify.com/MAL-2025-148271/): Malicious code in start-husky-nightwatch-mira (npm) (malicious package) - [MAL-2025-148270](https://insights.sbomify.com/MAL-2025-148270/): Malicious code in start-fornax-cosmos-parcel (npm) (malicious package) - [MAL-2025-14827](https://insights.sbomify.com/MAL-2025-14827/): Malicious code in arif-empal97-breki (npm) (malicious package) - [MAL-2025-148269](https://insights.sbomify.com/MAL-2025-148269/): Malicious code in start-deneb-gacrux-ursa (npm) (malicious package) - [MAL-2025-148268](https://insights.sbomify.com/MAL-2025-148268/): Malicious code in start-cosmos-soap-style-loader (npm) (malicious package) - [MAL-2025-148267](https://insights.sbomify.com/MAL-2025-148267/): Malicious code in start-chromedriver-rehype-event (npm) (malicious package) - [MAL-2025-148266](https://insights.sbomify.com/MAL-2025-148266/): Malicious code in start-build-callback-axios (npm) (malicious package) - [MAL-2025-148265](https://insights.sbomify.com/MAL-2025-148265/): Malicious code in start-bootes-upgrade-subscription (npm) (malicious package) - [MAL-2025-148264](https://insights.sbomify.com/MAL-2025-148264/): Malicious code in start-barnard-bellatrix-elektra (npm) (malicious package) - [MAL-2025-148263](https://insights.sbomify.com/MAL-2025-148263/): Malicious code in start-backend-delphinus-writable (npm) (malicious package) - [MAL-2025-148262](https://insights.sbomify.com/MAL-2025-148262/): Malicious code in start-avior-node-config-zephyr (npm) (malicious package) - [MAL-2025-148261](https://insights.sbomify.com/MAL-2025-148261/): Malicious code in standard-wolf-koa-commitlint (npm) (malicious package) - [MAL-2025-148260](https://insights.sbomify.com/MAL-2025-148260/): Malicious code in standard-style-loader-flare-celeste (npm) (malicious package) - [MAL-2025-14826](https://insights.sbomify.com/MAL-2025-14826/): Malicious code in arif-dradag90-sukiwir (npm) (malicious package) - [MAL-2025-148259](https://insights.sbomify.com/MAL-2025-148259/): Malicious code in standard-schema-ophiuchus-cors (npm) (malicious package) - [MAL-2025-148258](https://insights.sbomify.com/MAL-2025-148258/): Malicious code in standard-rimraf-phoebe-local (npm) (malicious package) - [MAL-2025-148257](https://insights.sbomify.com/MAL-2025-148257/): Malicious code in standard-promise-rigel-ursa (npm) (malicious package) - [MAL-2025-148256](https://insights.sbomify.com/MAL-2025-148256/): Malicious code in standard-markdown-pdf-lyra-exec (npm) (malicious package) - [MAL-2025-148255](https://insights.sbomify.com/MAL-2025-148255/): Malicious code in standard-karma-markdownlint-upgrade (npm) (malicious package) - [MAL-2025-148254](https://insights.sbomify.com/MAL-2025-148254/): Malicious code in standard-eslint-plugin-mutation-standard (npm) (malicious package) - [MAL-2025-148253](https://insights.sbomify.com/MAL-2025-148253/): Malicious code in standard-electron-algol-ursa (npm) (malicious package) - [MAL-2025-148252](https://insights.sbomify.com/MAL-2025-148252/): Malicious code in standard-cressida-callback-hexo (npm) (malicious package) - [MAL-2025-148251](https://insights.sbomify.com/MAL-2025-148251/): Malicious code in standard-callback-venus-magellan (npm) (malicious package) - [MAL-2025-148250](https://insights.sbomify.com/MAL-2025-148250/): Malicious code in standard-bootstrap-restart-orbit (npm) (malicious package) - [MAL-2025-14825](https://insights.sbomify.com/MAL-2025-14825/): Malicious code in aries-toolbox (npm) (malicious package) - [MAL-2025-148249](https://insights.sbomify.com/MAL-2025-148249/): Malicious code in standard-ariel-umbra-eclipse (npm) (malicious package) - [MAL-2025-148248](https://insights.sbomify.com/MAL-2025-148248/): Malicious code in standard-aquarius-css-loader-webdriver-mocha (npm) (malicious package) - [MAL-2025-148247](https://insights.sbomify.com/MAL-2025-148247/): Malicious code in standard-airbnb-pulsar-nightwatch (npm) (malicious package) - [MAL-2025-148246](https://insights.sbomify.com/MAL-2025-148246/): Malicious code in sqlite-yakutsk-lynx-rollup-plugin (npm) (malicious package) - [MAL-2025-148245](https://insights.sbomify.com/MAL-2025-148245/): Malicious code in sqlite-xanthus-proxima-bootes (npm) (malicious package) - [MAL-2025-148244](https://insights.sbomify.com/MAL-2025-148244/): Malicious code in sqlite-typeorm-fusion-terser-webpack-plugin (npm) (malicious package) - [MAL-2025-148243](https://insights.sbomify.com/MAL-2025-148243/): Malicious code in sqlite-transform-luna-exec (npm) (malicious package) - [MAL-2025-148242](https://insights.sbomify.com/MAL-2025-148242/): Malicious code in sqlite-transform-jest-loop (npm) (malicious package) - [MAL-2025-148241](https://insights.sbomify.com/MAL-2025-148241/): Malicious code in sqlite-stop-blitz-morgan (npm) (malicious package) - [MAL-2025-148240](https://insights.sbomify.com/MAL-2025-148240/): Malicious code in sqlite-spawn-ultra-eclipse (npm) (malicious package) - [MAL-2025-14824](https://insights.sbomify.com/MAL-2025-14824/): Malicious code in ariel-solarnebula-webpack-auth (npm) (malicious package) - [MAL-2025-148239](https://insights.sbomify.com/MAL-2025-148239/): Malicious code in sqlite-semantic-release-chariklo-mysql (npm) (malicious package) - [MAL-2025-148238](https://insights.sbomify.com/MAL-2025-148238/): Malicious code in sqlite-run-script-transform-cordelia (npm) (malicious package) - [MAL-2025-148237](https://insights.sbomify.com/MAL-2025-148237/): Malicious code in sqlite-release-it-markdown-pdf-comet (npm) (malicious package) - [MAL-2025-148236](https://insights.sbomify.com/MAL-2025-148236/): Malicious code in sqlite-pm2-meteor-antd (npm) (malicious package) - [MAL-2025-148235](https://insights.sbomify.com/MAL-2025-148235/): Malicious code in sqlite-perseus-nebula-prompts (npm) (malicious package) - [MAL-2025-148234](https://insights.sbomify.com/MAL-2025-148234/): Malicious code in sqlite-orbit-xenos-heka (npm) (malicious package) - [MAL-2025-148233](https://insights.sbomify.com/MAL-2025-148233/): Malicious code in sqlite-npm-uglify-js-airbnb (npm) (malicious package) - [MAL-2025-148232](https://insights.sbomify.com/MAL-2025-148232/): Malicious code in sqlite-non-blocking-native-kastra (npm) (malicious package) - [MAL-2025-148231](https://insights.sbomify.com/MAL-2025-148231/): Malicious code in sqlite-loopback-iota-sqlite (npm) (malicious package) - [MAL-2025-148230](https://insights.sbomify.com/MAL-2025-148230/): Malicious code in sqlite-jabbah-cross-env-postcss-loader (npm) (malicious package) - [MAL-2025-14823](https://insights.sbomify.com/MAL-2025-14823/): Malicious code in ariel-polaris-cryovolcano-graphql (npm) (malicious package) - [MAL-2025-148229](https://insights.sbomify.com/MAL-2025-148229/): Malicious code in sqlite-iota-passport-frontend (npm) (malicious package) - [MAL-2025-148228](https://insights.sbomify.com/MAL-2025-148228/): Malicious code in sqlite-gemini-procyon-cressida (npm) (malicious package) - [MAL-2025-148227](https://insights.sbomify.com/MAL-2025-148227/): Malicious code in sqlite-ganymede-jovian-proxima (npm) (malicious package) - [MAL-2025-148226](https://insights.sbomify.com/MAL-2025-148226/): Malicious code in sqlite-event-nodemon-rollup-plugin (npm) (malicious package) - [MAL-2025-148225](https://insights.sbomify.com/MAL-2025-148225/): Malicious code in sqlite-europa-remark-auth (npm) (malicious package) - [MAL-2025-148224](https://insights.sbomify.com/MAL-2025-148224/): Malicious code in sqlite-cosmiconfig-passport-library (npm) (malicious package) - [MAL-2025-148223](https://insights.sbomify.com/MAL-2025-148223/): Malicious code in sqlite-configstore-remark-vuetify (npm) (malicious package) - [MAL-2025-148222](https://insights.sbomify.com/MAL-2025-148222/): Malicious code in sqlite-cluster-perseus-aquarius (npm) (malicious package) - [MAL-2025-148221](https://insights.sbomify.com/MAL-2025-148221/): Malicious code in sqlite-atlas-dynamo-passport (npm) (malicious package) - [MAL-2025-148220](https://insights.sbomify.com/MAL-2025-148220/): Malicious code in sqlite-ariel-spawn-castor (npm) (malicious package) - [MAL-2025-14822](https://insights.sbomify.com/MAL-2025-14822/): Malicious code in ariary (npm) (malicious package) - [MAL-2025-148219](https://insights.sbomify.com/MAL-2025-148219/): Malicious code in sqlite-ariel-init-lacerta (npm) (malicious package) - [MAL-2025-148218](https://insights.sbomify.com/MAL-2025-148218/): Malicious code in spinner-zenobia-transform-local (npm) (malicious package) - [MAL-2025-148217](https://insights.sbomify.com/MAL-2025-148217/): Malicious code in spinner-winston-procyon-axios (npm) (malicious package) - [MAL-2025-148216](https://insights.sbomify.com/MAL-2025-148216/): Malicious code in spinner-weywot-pegasus-barnard (npm) (malicious package) - [MAL-2025-148215](https://insights.sbomify.com/MAL-2025-148215/): Malicious code in spinner-webdriver-mocha-rollup-plugin-mutation (npm) (malicious package) - [MAL-2025-148214](https://insights.sbomify.com/MAL-2025-148214/): Malicious code in spinner-venus-izar-vortex (npm) (malicious package) - [MAL-2025-148213](https://insights.sbomify.com/MAL-2025-148213/): Malicious code in spinner-uglify-js-sequelize-sync (npm) (malicious package) - [MAL-2025-148212](https://insights.sbomify.com/MAL-2025-148212/): Malicious code in spinner-triton-nestjs-mysql (npm) (malicious package) - [MAL-2025-148211](https://insights.sbomify.com/MAL-2025-148211/): Malicious code in spinner-tailwindcss-sqlite-oauth (npm) (malicious package) - [MAL-2025-148210](https://insights.sbomify.com/MAL-2025-148210/): Malicious code in spinner-spectron-auriga-airbnb (npm) (malicious package) - [MAL-2025-14821](https://insights.sbomify.com/MAL-2025-14821/): Malicious code in argos-findability-url-builder (npm) (malicious package) - [MAL-2025-148209](https://insights.sbomify.com/MAL-2025-148209/): Malicious code in spinner-semantic-release-nuxtjs-polaris (npm) (malicious package) - [MAL-2025-148208](https://insights.sbomify.com/MAL-2025-148208/): Malicious code in spinner-quark-geckodriver-hapi (npm) (malicious package) - [MAL-2025-148207](https://insights.sbomify.com/MAL-2025-148207/): Malicious code in spinner-postcss-loader-yakutsk-venus (npm) (malicious package) - [MAL-2025-148206](https://insights.sbomify.com/MAL-2025-148206/): Malicious code in spinner-playwright-geckodriver-async (npm) (malicious package) - [MAL-2025-148205](https://insights.sbomify.com/MAL-2025-148205/): Malicious code in spinner-nuxtjs-dotenv-parse-variables-chromedriver (npm) (malicious package) - [MAL-2025-148204](https://insights.sbomify.com/MAL-2025-148204/): Malicious code in spinner-node-config-sync-grus (npm) (malicious package) - [MAL-2025-148203](https://insights.sbomify.com/MAL-2025-148203/): Malicious code in spinner-morgan-equinox-wolf (npm) (malicious package) - [MAL-2025-148202](https://insights.sbomify.com/MAL-2025-148202/): Malicious code in spinner-meteor-cross-env-ini (npm) (malicious package) - [MAL-2025-148201](https://insights.sbomify.com/MAL-2025-148201/): Malicious code in spinner-lint-oberon-quito (npm) (malicious package) - [MAL-2025-148200](https://insights.sbomify.com/MAL-2025-148200/): Malicious code in spinner-jabbah-dotenv-safe-thuban (npm) (malicious package) - [MAL-2025-14820](https://insights.sbomify.com/MAL-2025-14820/): Malicious code in argo-run (npm) (malicious package) - [MAL-2025-1482](https://insights.sbomify.com/MAL-2025-1482/): Malicious code in get-gas-oracle (npm) (malicious package) - [MAL-2025-148199](https://insights.sbomify.com/MAL-2025-148199/): Malicious code in spinner-hydra-mocha-rest (npm) (malicious package) - [MAL-2025-148198](https://insights.sbomify.com/MAL-2025-148198/): Malicious code in spinner-grunt-umbra-virgo (npm) (malicious package) - [MAL-2025-148197](https://insights.sbomify.com/MAL-2025-148197/): Malicious code in spinner-geckodriver-framework-zenith (npm) (malicious package) - [MAL-2025-148196](https://insights.sbomify.com/MAL-2025-148196/): Malicious code in spinner-fornax-hermes-karma (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1396/