# Vulnerabilities published in 2025


- [MAL-2025-148195](https://insights.sbomify.com/MAL-2025-148195/): Malicious code in spinner-fomalhaut-postcss-loader-private (npm) (malicious package)
- [MAL-2025-148194](https://insights.sbomify.com/MAL-2025-148194/): Malicious code in spinner-envconfig-regulus-readable (npm) (malicious package)
- [MAL-2025-148193](https://insights.sbomify.com/MAL-2025-148193/): Malicious code in spinner-enif-spica-fork (npm) (malicious package)
- [MAL-2025-148192](https://insights.sbomify.com/MAL-2025-148192/): Malicious code in spinner-dione-fork-hercules (npm) (malicious package)
- [MAL-2025-148191](https://insights.sbomify.com/MAL-2025-148191/): Malicious code in spinner-development-cassini-umbriel (npm) (malicious package)
- [MAL-2025-148190](https://insights.sbomify.com/MAL-2025-148190/): Malicious code in spinner-dagda-xml-public (npm) (malicious package)
- [MAL-2025-14819](https://insights.sbomify.com/MAL-2025-14819/): Malicious code in argo-post-purchase (npm) (malicious package)
- [MAL-2025-148189](https://insights.sbomify.com/MAL-2025-148189/): Malicious code in spinner-configstore-lynx-rate-limiter (npm) (malicious package)
- [MAL-2025-148188](https://insights.sbomify.com/MAL-2025-148188/): Malicious code in spinner-commitlint-wezen-gulp (npm) (malicious package)
- [MAL-2025-148187](https://insights.sbomify.com/MAL-2025-148187/): Malicious code in spinner-castor-commitizen-dependencies (npm) (malicious package)
- [MAL-2025-148186](https://insights.sbomify.com/MAL-2025-148186/): Malicious code in spinner-build-castor-hermes (npm) (malicious package)
- [MAL-2025-148185](https://insights.sbomify.com/MAL-2025-148185/): Malicious code in spinner-apex-vega-dotenv (npm) (malicious package)
- [MAL-2025-148184](https://insights.sbomify.com/MAL-2025-148184/): Malicious code in spinner-adonis-jest-callisto (npm) (malicious package)
- [MAL-2025-148183](https://insights.sbomify.com/MAL-2025-148183/): Malicious code in spica-yakutsk-hapi-gatsby (npm) (malicious package)
- [MAL-2025-148182](https://insights.sbomify.com/MAL-2025-148182/): Malicious code in spica-terser-rimraf-cypress (npm) (malicious package)
- [MAL-2025-148181](https://insights.sbomify.com/MAL-2025-148181/): Malicious code in spica-terser-configstore-taurus (npm) (malicious package)
- [MAL-2025-148180](https://insights.sbomify.com/MAL-2025-148180/): Malicious code in spica-spinner-rimraf-process (npm) (malicious package)
- [MAL-2025-14818](https://insights.sbomify.com/MAL-2025-14818/): Malicious code in argo-checkout-vue (npm) (malicious package)
- [MAL-2025-148179](https://insights.sbomify.com/MAL-2025-148179/): Malicious code in spica-slidev-ultra-indus (npm) (malicious package)
- [MAL-2025-148178](https://insights.sbomify.com/MAL-2025-148178/): Malicious code in spica-rocket-css-minimizer-webpack-plugin-flare (npm) (malicious package)
- [MAL-2025-148177](https://insights.sbomify.com/MAL-2025-148177/): Malicious code in spica-radiant-await-docusaurus (npm) (malicious package)
- [MAL-2025-148176](https://insights.sbomify.com/MAL-2025-148176/): Malicious code in spica-quantum-await-phenomic (npm) (malicious package)
- [MAL-2025-148175](https://insights.sbomify.com/MAL-2025-148175/): Malicious code in spica-publish-bootes-odin (npm) (malicious package)
- [MAL-2025-148174](https://insights.sbomify.com/MAL-2025-148174/): Malicious code in spica-promise-halley-chariklo (npm) (malicious package)
- [MAL-2025-148173](https://insights.sbomify.com/MAL-2025-148173/): Malicious code in spica-postcss-init-auth (npm) (malicious package)
- [MAL-2025-148172](https://insights.sbomify.com/MAL-2025-148172/): Malicious code in spica-oauth-dagda-vuetify (npm) (malicious package)
- [MAL-2025-148171](https://insights.sbomify.com/MAL-2025-148171/): Malicious code in spica-nightwatch-solis-eridanus (npm) (malicious package)
- [MAL-2025-148170](https://insights.sbomify.com/MAL-2025-148170/): Malicious code in spica-nextjs-draco-despina (npm) (malicious package)
- [MAL-2025-14817](https://insights.sbomify.com/MAL-2025-14817/): Malicious code in ares-api-search (npm) (malicious package)
- [MAL-2025-148169](https://insights.sbomify.com/MAL-2025-148169/): Malicious code in spica-mocha-castor-inquirer (npm) (malicious package)
- [MAL-2025-148168](https://insights.sbomify.com/MAL-2025-148168/): Malicious code in spica-magellan-sagitta-ceres (npm) (malicious package)
- [MAL-2025-148167](https://insights.sbomify.com/MAL-2025-148167/): Malicious code in spica-magellan-css-loader-eslint (npm) (malicious package)
- [MAL-2025-148166](https://insights.sbomify.com/MAL-2025-148166/): Malicious code in spica-lint-solis-command (npm) (malicious package)
- [MAL-2025-148165](https://insights.sbomify.com/MAL-2025-148165/): Malicious code in spica-link-iota-start (npm) (malicious package)
- [MAL-2025-148164](https://insights.sbomify.com/MAL-2025-148164/): Malicious code in spica-leda-mongodb-vortex (npm) (malicious package)
- [MAL-2025-148163](https://insights.sbomify.com/MAL-2025-148163/): Malicious code in spica-json-umbra-commitizen (npm) (malicious package)
- [MAL-2025-148162](https://insights.sbomify.com/MAL-2025-148162/): Malicious code in spica-jovian-norma-css-loader (npm) (malicious package)
- [MAL-2025-148161](https://insights.sbomify.com/MAL-2025-148161/): Malicious code in spica-eris-spica-exec (npm) (malicious package)
- [MAL-2025-148160](https://insights.sbomify.com/MAL-2025-148160/): Malicious code in spica-elara-halley-aquarius (npm) (malicious package)
- [MAL-2025-14816](https://insights.sbomify.com/MAL-2025-14816/): Malicious code in ares-api-integrations (npm) (malicious package)
- [MAL-2025-148159](https://insights.sbomify.com/MAL-2025-148159/): Malicious code in spica-cypress-barnard-bootstrap (npm) (malicious package)
- [MAL-2025-148158](https://insights.sbomify.com/MAL-2025-148158/): Malicious code in spica-css-loader-testcafe-backend (npm) (malicious package)
- [MAL-2025-148157](https://insights.sbomify.com/MAL-2025-148157/): Malicious code in spica-convict-got-typeorm (npm) (malicious package)
- [MAL-2025-148156](https://insights.sbomify.com/MAL-2025-148156/): Malicious code in spica-cli-heka-cressida (npm) (malicious package)
- [MAL-2025-148155](https://insights.sbomify.com/MAL-2025-148155/): Malicious code in spica-charon-perseus-local (npm) (malicious package)
- [MAL-2025-148154](https://insights.sbomify.com/MAL-2025-148154/): Malicious code in spica-ceres-semantic-release-janus (npm) (malicious package)
- [MAL-2025-148153](https://insights.sbomify.com/MAL-2025-148153/): Malicious code in spica-carpo-event-pegasus (npm) (malicious package)
- [MAL-2025-148152](https://insights.sbomify.com/MAL-2025-148152/): Malicious code in spica-capella-optimize-css-assets-webpack-plugin-local (npm) (malicious package)
- [MAL-2025-148151](https://insights.sbomify.com/MAL-2025-148151/): Malicious code in spica-apollo-iota-tool (npm) (malicious package)
- [MAL-2025-148150](https://insights.sbomify.com/MAL-2025-148150/): Malicious code in spica-andromeda-loglevel-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-14815](https://insights.sbomify.com/MAL-2025-14815/): Malicious code in areology-nightmare-selenology-configstore (npm) (malicious package)
- [MAL-2025-148149](https://insights.sbomify.com/MAL-2025-148149/): Malicious code in spica-airbnb-pino-nestjs (npm) (malicious package)
- [MAL-2025-148148](https://insights.sbomify.com/MAL-2025-148148/): Malicious code in spica-airbnb-elara-solis (npm) (malicious package)
- [MAL-2025-148147](https://insights.sbomify.com/MAL-2025-148147/): Malicious code in spectron-webdriver-xenon-repository-quantum (npm) (malicious package)
- [MAL-2025-148146](https://insights.sbomify.com/MAL-2025-148146/): Malicious code in spectron-webdriver-winston-vega-venus (npm) (malicious package)
- [MAL-2025-148145](https://insights.sbomify.com/MAL-2025-148145/): Malicious code in spectron-webdriver-unuk-eridanus-ini (npm) (malicious package)
- [MAL-2025-148144](https://insights.sbomify.com/MAL-2025-148144/): Malicious code in spectron-webdriver-uglify-js-figures-auriga (npm) (malicious package)
- [MAL-2025-148143](https://insights.sbomify.com/MAL-2025-148143/): Malicious code in spectron-webdriver-typeorm-xanthus-convict (npm) (malicious package)
- [MAL-2025-148142](https://insights.sbomify.com/MAL-2025-148142/): Malicious code in spectron-webdriver-telesto-aether-prettier (npm) (malicious package)
- [MAL-2025-148141](https://insights.sbomify.com/MAL-2025-148141/): Malicious code in spectron-webdriver-start-docusaurus-sails (npm) (malicious package)
- [MAL-2025-148140](https://insights.sbomify.com/MAL-2025-148140/): Malicious code in spectron-webdriver-sedna-charon-iota (npm) (malicious package)
- [MAL-2025-14814](https://insights.sbomify.com/MAL-2025-14814/): Malicious code in areology-mantle-lithosphere-zephyr (npm) (malicious package)
- [MAL-2025-148139](https://insights.sbomify.com/MAL-2025-148139/): Malicious code in spectron-webdriver-reveal-md-enif-jasmine (npm) (malicious package)
- [MAL-2025-148138](https://insights.sbomify.com/MAL-2025-148138/): Malicious code in spectron-webdriver-restart-cluster-repository (npm) (malicious package)
- [MAL-2025-148137](https://insights.sbomify.com/MAL-2025-148137/): Malicious code in spectron-webdriver-process-yonder-antd (npm) (malicious package)
- [MAL-2025-148136](https://insights.sbomify.com/MAL-2025-148136/): Malicious code in spectron-webdriver-oauth-spectron-webdriver-commitlint (npm) (malicious package)
- [MAL-2025-148135](https://insights.sbomify.com/MAL-2025-148135/): Malicious code in spectron-webdriver-meissa-yakutsk-firebase (npm) (malicious package)
- [MAL-2025-148134](https://insights.sbomify.com/MAL-2025-148134/): Malicious code in spectron-webdriver-less-loader-jest-gridsome (npm) (malicious package)
- [MAL-2025-148133](https://insights.sbomify.com/MAL-2025-148133/): Malicious code in spectron-webdriver-init-wasat-yildun (npm) (malicious package)
- [MAL-2025-148132](https://insights.sbomify.com/MAL-2025-148132/): Malicious code in spectron-webdriver-gulp-quasar-janus (npm) (malicious package)
- [MAL-2025-148131](https://insights.sbomify.com/MAL-2025-148131/): Malicious code in spectron-webdriver-global-hugo-semantic-ui (npm) (malicious package)
- [MAL-2025-148130](https://insights.sbomify.com/MAL-2025-148130/): Malicious code in spectron-webdriver-galaxy-avior-repository (npm) (malicious package)
- [MAL-2025-14813](https://insights.sbomify.com/MAL-2025-14813/): Malicious code in areology-biogeochemistry-non-blocking-commitlint (npm) (malicious package)
- [MAL-2025-148129](https://insights.sbomify.com/MAL-2025-148129/): Malicious code in spectron-webdriver-fusion-nightmare-metalsmith (npm) (malicious package)
- [MAL-2025-148128](https://insights.sbomify.com/MAL-2025-148128/): Malicious code in spectron-webdriver-chromedriver-sagitta-heka (npm) (malicious package)
- [MAL-2025-148127](https://insights.sbomify.com/MAL-2025-148127/): Malicious code in spectron-webdriver-bootstrap-auth0-sadr (npm) (malicious package)
- [MAL-2025-148126](https://insights.sbomify.com/MAL-2025-148126/): Malicious code in spectron-webdriver-betelgeuse-odin-cypress (npm) (malicious package)
- [MAL-2025-148125](https://insights.sbomify.com/MAL-2025-148125/): Malicious code in spectron-webdriver-andromeda-test-cors (npm) (malicious package)
- [MAL-2025-148124](https://insights.sbomify.com/MAL-2025-148124/): Malicious code in spectron-regulus-superagent-rollup-plugin (npm) (malicious package)
- [MAL-2025-148123](https://insights.sbomify.com/MAL-2025-148123/): Malicious code in spectron-redis-xo-test (npm) (malicious package)
- [MAL-2025-148122](https://insights.sbomify.com/MAL-2025-148122/): Malicious code in spectron-protractor-nconf-mongoose (npm) (malicious package)
- [MAL-2025-148121](https://insights.sbomify.com/MAL-2025-148121/): Malicious code in spectron-node-config-prettier-selenium (npm) (malicious package)
- [MAL-2025-148120](https://insights.sbomify.com/MAL-2025-148120/): Malicious code in spectron-nextjs-element-ui-passport (npm) (malicious package)
- [MAL-2025-14812](https://insights.sbomify.com/MAL-2025-14812/): Malicious code in arenalog (npm) (malicious package)
- [MAL-2025-148119](https://insights.sbomify.com/MAL-2025-148119/): Malicious code in spectron-nebula-sedna-triton (npm) (malicious package)
- [MAL-2025-148118](https://insights.sbomify.com/MAL-2025-148118/): Malicious code in spectron-jwt-test-castor (npm) (malicious package)
- [MAL-2025-148117](https://insights.sbomify.com/MAL-2025-148117/): Malicious code in spectron-juno-sync-venus (npm) (malicious package)
- [MAL-2025-148116](https://insights.sbomify.com/MAL-2025-148116/): Malicious code in spectron-ignite-arcturus-hapi (npm) (malicious package)
- [MAL-2025-148115](https://insights.sbomify.com/MAL-2025-148115/): Malicious code in spectron-dotenv-safe-titan-lynx (npm) (malicious package)
- [MAL-2025-148114](https://insights.sbomify.com/MAL-2025-148114/): Malicious code in spectron-docusaurus-nodejs-postgres (npm) (malicious package)
- [MAL-2025-148113](https://insights.sbomify.com/MAL-2025-148113/): Malicious code in spectron-cordelia-vortex-cassini (npm) (malicious package)
- [MAL-2025-148112](https://insights.sbomify.com/MAL-2025-148112/): Malicious code in spectron-cordelia-adonis-solis (npm) (malicious package)
- [MAL-2025-148111](https://insights.sbomify.com/MAL-2025-148111/): Malicious code in spectron-ceres-loglevel-eclipse (npm) (malicious package)
- [MAL-2025-148110](https://insights.sbomify.com/MAL-2025-148110/): Malicious code in spectron-celeste-release-it-sqlite (npm) (malicious package)
- [MAL-2025-14811](https://insights.sbomify.com/MAL-2025-14811/): Malicious code in arduboard (npm) (malicious package)
- [MAL-2025-148109](https://insights.sbomify.com/MAL-2025-148109/): Malicious code in spectron-bootstrap-yaml-iota (npm) (malicious package)
- [MAL-2025-148108](https://insights.sbomify.com/MAL-2025-148108/): Malicious code in spawn-wasat-kronos-child-process (npm) (malicious package)
- [MAL-2025-148107](https://insights.sbomify.com/MAL-2025-148107/): Malicious code in spawn-tool-concurrently-umbra (npm) (malicious package)
- [MAL-2025-148106](https://insights.sbomify.com/MAL-2025-148106/): Malicious code in spawn-sirius-venus-jovian (npm) (malicious package)
- [MAL-2025-148105](https://insights.sbomify.com/MAL-2025-148105/): Malicious code in spawn-registry-hapi-stream (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1397/