# Vulnerabilities published in 2025


- [MAL-2025-148104](https://insights.sbomify.com/MAL-2025-148104/): Malicious code in spawn-nuxtjs-titan-public (npm) (malicious package)
- [MAL-2025-148103](https://insights.sbomify.com/MAL-2025-148103/): Malicious code in spawn-mira-canopus-optimize-css-assets-webpack-plugin (npm) (malicious package)
- [MAL-2025-148102](https://insights.sbomify.com/MAL-2025-148102/): Malicious code in spawn-mensa-nestjs-mini-css-extract-plugin (npm) (malicious package)
- [MAL-2025-148101](https://insights.sbomify.com/MAL-2025-148101/): Malicious code in spawn-lynx-phenomic-proxima (npm) (malicious package)
- [MAL-2025-148100](https://insights.sbomify.com/MAL-2025-148100/): Malicious code in spawn-kastra-got-json (npm) (malicious package)
- [MAL-2025-14810](https://insights.sbomify.com/MAL-2025-14810/): Malicious code in ardril712 (npm) (malicious package)
- [MAL-2025-1481](https://insights.sbomify.com/MAL-2025-1481/): Malicious code in gas-oracler (npm) (malicious package)
- [MAL-2025-148099](https://insights.sbomify.com/MAL-2025-148099/): Malicious code in spawn-javascript-octans-cordelia (npm) (malicious package)
- [MAL-2025-148098](https://insights.sbomify.com/MAL-2025-148098/): Malicious code in spawn-io-cosmiconfig-jest (npm) (malicious package)
- [MAL-2025-148097](https://insights.sbomify.com/MAL-2025-148097/): Malicious code in spawn-gemini-mongoose-transform (npm) (malicious package)
- [MAL-2025-148096](https://insights.sbomify.com/MAL-2025-148096/): Malicious code in spawn-figures-async-loglevel (npm) (malicious package)
- [MAL-2025-148095](https://insights.sbomify.com/MAL-2025-148095/): Malicious code in spawn-dotenv-dactyl-sirius (npm) (malicious package)
- [MAL-2025-148094](https://insights.sbomify.com/MAL-2025-148094/): Malicious code in spawn-chai-ursa-eslint (npm) (malicious package)
- [MAL-2025-148093](https://insights.sbomify.com/MAL-2025-148093/): Malicious code in spawn-apollo-envconfig-jabbah (npm) (malicious package)
- [MAL-2025-148092](https://insights.sbomify.com/MAL-2025-148092/): Malicious code in solis-vulcan-rollup-xenos (npm) (malicious package)
- [MAL-2025-148091](https://insights.sbomify.com/MAL-2025-148091/): Malicious code in solis-ultra-electron-builder-toml (npm) (malicious package)
- [MAL-2025-148090](https://insights.sbomify.com/MAL-2025-148090/): Malicious code in solis-sqlite-phoebe-juno (npm) (malicious package)
- [MAL-2025-14809](https://insights.sbomify.com/MAL-2025-14809/): Malicious code in ardosubs (npm) (malicious package)
- [MAL-2025-148089](https://insights.sbomify.com/MAL-2025-148089/): Malicious code in solis-spinner-canopus-ganymede (npm) (malicious package)
- [MAL-2025-148088](https://insights.sbomify.com/MAL-2025-148088/): Malicious code in solis-spica-optimize-css-assets-webpack-plugin-babel (npm) (malicious package)
- [MAL-2025-148087](https://insights.sbomify.com/MAL-2025-148087/): Malicious code in solis-spawn-vuetify-triton (npm) (malicious package)
- [MAL-2025-148086](https://insights.sbomify.com/MAL-2025-148086/): Malicious code in solis-sequelize-koa-cygnus (npm) (malicious package)
- [MAL-2025-148085](https://insights.sbomify.com/MAL-2025-148085/): Malicious code in solis-sedna-loopback-gridsome (npm) (malicious package)
- [MAL-2025-148084](https://insights.sbomify.com/MAL-2025-148084/): Malicious code in solis-repository-envconfig-exec (npm) (malicious package)
- [MAL-2025-148083](https://insights.sbomify.com/MAL-2025-148083/): Malicious code in solis-release-it-altair-betelgeuse (npm) (malicious package)
- [MAL-2025-148082](https://insights.sbomify.com/MAL-2025-148082/): Malicious code in solis-polaris-playwright-pipe (npm) (malicious package)
- [MAL-2025-148081](https://insights.sbomify.com/MAL-2025-148081/): Malicious code in solis-phoenix-webdriver-mocha-apex (npm) (malicious package)
- [MAL-2025-148080](https://insights.sbomify.com/MAL-2025-148080/): Malicious code in solis-node-config-antares-levels (npm) (malicious package)
- [MAL-2025-14808](https://insights.sbomify.com/MAL-2025-14808/): Malicious code in arddroid (npm) (malicious package)
- [MAL-2025-148079](https://insights.sbomify.com/MAL-2025-148079/): Malicious code in solis-meteor-element-ui-cluster (npm) (malicious package)
- [MAL-2025-148078](https://insights.sbomify.com/MAL-2025-148078/): Malicious code in solis-levels-html-webpack-plugin-release-it (npm) (malicious package)
- [MAL-2025-148077](https://insights.sbomify.com/MAL-2025-148077/): Malicious code in solis-husky-gacrux-iota (npm) (malicious package)
- [MAL-2025-148076](https://insights.sbomify.com/MAL-2025-148076/): Malicious code in solis-graphql-postgres-luna (npm) (malicious package)
- [MAL-2025-148075](https://insights.sbomify.com/MAL-2025-148075/): Malicious code in solis-graphql-figures-mysql (npm) (malicious package)
- [MAL-2025-148074](https://insights.sbomify.com/MAL-2025-148074/): Malicious code in solis-gatsby-antares-eslint-config (npm) (malicious package)
- [MAL-2025-148073](https://insights.sbomify.com/MAL-2025-148073/): Malicious code in solis-forever-framework-prettier (npm) (malicious package)
- [MAL-2025-148072](https://insights.sbomify.com/MAL-2025-148072/): Malicious code in solis-cosmos-commitlint-ganymede (npm) (malicious package)
- [MAL-2025-148071](https://insights.sbomify.com/MAL-2025-148071/): Malicious code in solis-bunyan-cordelia-impulse (npm) (malicious package)
- [MAL-2025-148070](https://insights.sbomify.com/MAL-2025-148070/): Malicious code in solis-buffer-vuetify-got (npm) (malicious package)
- [MAL-2025-14807](https://insights.sbomify.com/MAL-2025-14807/): Malicious code in arcturus-server-neptunology-centaurus (npm) (malicious package)
- [MAL-2025-148069](https://insights.sbomify.com/MAL-2025-148069/): Malicious code in solis-axios-update-ganymede (npm) (malicious package)
- [MAL-2025-148068](https://insights.sbomify.com/MAL-2025-148068/): Malicious code in solis-arcturus-dotenv-upgrade (npm) (malicious package)
- [MAL-2025-148067](https://insights.sbomify.com/MAL-2025-148067/): Malicious code in solis-antares-altair-wolf (npm) (malicious package)
- [MAL-2025-148066](https://insights.sbomify.com/MAL-2025-148066/): Malicious code in socketio-webdriverio-mira-stop (npm) (malicious package)
- [MAL-2025-148065](https://insights.sbomify.com/MAL-2025-148065/): Malicious code in socketio-webdriver-manager-subscription-eclipse (npm) (malicious package)
- [MAL-2025-148064](https://insights.sbomify.com/MAL-2025-148064/): Malicious code in socketio-sedna-centauri-atlas (npm) (malicious package)
- [MAL-2025-148063](https://insights.sbomify.com/MAL-2025-148063/): Malicious code in socketio-rollup-plugin-vuetify-auth (npm) (malicious package)
- [MAL-2025-148062](https://insights.sbomify.com/MAL-2025-148062/): Malicious code in socketio-proxima-tethys-query (npm) (malicious package)
- [MAL-2025-148061](https://insights.sbomify.com/MAL-2025-148061/): Malicious code in socketio-proxima-ini-venus (npm) (malicious package)
- [MAL-2025-148060](https://insights.sbomify.com/MAL-2025-148060/): Malicious code in socketio-pavo-prettier-stylelint-global (npm) (malicious package)
- [MAL-2025-14806](https://insights.sbomify.com/MAL-2025-14806/): Malicious code in arcturus-paleoecology-proxima-eventhoriz (npm) (malicious package)
- [MAL-2025-148059](https://insights.sbomify.com/MAL-2025-148059/): Malicious code in socketio-meteor-warp-apollo (npm) (malicious package)
- [MAL-2025-148058](https://insights.sbomify.com/MAL-2025-148058/): Malicious code in socketio-lyra-selenium-child-process (npm) (malicious package)
- [MAL-2025-148057](https://insights.sbomify.com/MAL-2025-148057/): Malicious code in socketio-lint-staged-cressida-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-148056](https://insights.sbomify.com/MAL-2025-148056/): Malicious code in socketio-levels-izar-cypress (npm) (malicious package)
- [MAL-2025-148055](https://insights.sbomify.com/MAL-2025-148055/): Malicious code in socketio-less-pino-promise (npm) (malicious package)
- [MAL-2025-148054](https://insights.sbomify.com/MAL-2025-148054/): Malicious code in socketio-geckodriver-child-process-exec (npm) (malicious package)
- [MAL-2025-148053](https://insights.sbomify.com/MAL-2025-148053/): Malicious code in socketio-fetch-jekyll-bellatrix (npm) (malicious package)
- [MAL-2025-148052](https://insights.sbomify.com/MAL-2025-148052/): Malicious code in socketio-fetch-deneb-redis (npm) (malicious package)
- [MAL-2025-148051](https://insights.sbomify.com/MAL-2025-148051/): Malicious code in socketio-eslint-koa-typeorm (npm) (malicious package)
- [MAL-2025-148050](https://insights.sbomify.com/MAL-2025-148050/): Malicious code in socketio-eris-delphinus-sass-loader (npm) (malicious package)
- [MAL-2025-14805](https://insights.sbomify.com/MAL-2025-14805/): Malicious code in arcturus-global-hermes-less-loader (npm) (malicious package)
- [MAL-2025-148049](https://insights.sbomify.com/MAL-2025-148049/): Malicious code in socketio-draco-blitz-pavo (npm) (malicious package)
- [MAL-2025-148048](https://insights.sbomify.com/MAL-2025-148048/): Malicious code in socketio-dotenv-parse-variables-phoenix-chalk (npm) (malicious package)
- [MAL-2025-148047](https://insights.sbomify.com/MAL-2025-148047/): Malicious code in socketio-command-andromeda-async (npm) (malicious package)
- [MAL-2025-148046](https://insights.sbomify.com/MAL-2025-148046/): Malicious code in socketio-buffer-version-luna (npm) (malicious package)
- [MAL-2025-148045](https://insights.sbomify.com/MAL-2025-148045/): Malicious code in socketio-auriga-native-less-loader (npm) (malicious package)
- [MAL-2025-148044](https://insights.sbomify.com/MAL-2025-148044/): Malicious code in socketio-adonis-neptune-reveal-md (npm) (malicious package)
- [MAL-2025-148043](https://insights.sbomify.com/MAL-2025-148043/): Malicious code in socketio-acamar-pino-ceres (npm) (malicious package)
- [MAL-2025-148042](https://insights.sbomify.com/MAL-2025-148042/): Malicious code in soap-zenith-commitlint-airbnb (npm) (malicious package)
- [MAL-2025-148041](https://insights.sbomify.com/MAL-2025-148041/): Malicious code in soap-zenith-barnard-mui (npm) (malicious package)
- [MAL-2025-148040](https://insights.sbomify.com/MAL-2025-148040/): Malicious code in soap-winston-antares-nodejs (npm) (malicious package)
- [MAL-2025-14804](https://insights.sbomify.com/MAL-2025-14804/): Malicious code in arcturus-genomics-nestjs-boson (npm) (malicious package)
- [MAL-2025-148039](https://insights.sbomify.com/MAL-2025-148039/): Malicious code in soap-vega-hydra-jasmine (npm) (malicious package)
- [MAL-2025-148038](https://insights.sbomify.com/MAL-2025-148038/): Malicious code in soap-triton-solis-nconf (npm) (malicious package)
- [MAL-2025-148037](https://insights.sbomify.com/MAL-2025-148037/): Malicious code in soap-taurus-alphard-await (npm) (malicious package)
- [MAL-2025-148036](https://insights.sbomify.com/MAL-2025-148036/): Malicious code in soap-style-loader-eris-rate-limiter (npm) (malicious package)
- [MAL-2025-148035](https://insights.sbomify.com/MAL-2025-148035/): Malicious code in soap-spica-gemini-ganymede (npm) (malicious package)
- [MAL-2025-148034](https://insights.sbomify.com/MAL-2025-148034/): Malicious code in soap-sass-loader-sirius-cache (npm) (malicious package)
- [MAL-2025-148033](https://insights.sbomify.com/MAL-2025-148033/): Malicious code in soap-sagitta-perseus-cassini (npm) (malicious package)
- [MAL-2025-148032](https://insights.sbomify.com/MAL-2025-148032/): Malicious code in soap-promise-kronos-nextjs (npm) (malicious package)
- [MAL-2025-148031](https://insights.sbomify.com/MAL-2025-148031/): Malicious code in soap-postcss-kaus-concurrently (npm) (malicious package)
- [MAL-2025-148030](https://insights.sbomify.com/MAL-2025-148030/): Malicious code in soap-pavo-terser-got (npm) (malicious package)
- [MAL-2025-14803](https://insights.sbomify.com/MAL-2025-14803/): Malicious code in arcturus-carina-eslint-proxima (npm) (malicious package)
- [MAL-2025-148029](https://insights.sbomify.com/MAL-2025-148029/): Malicious code in soap-pavo-barnard-pegasus (npm) (malicious package)
- [MAL-2025-148028](https://insights.sbomify.com/MAL-2025-148028/): Malicious code in soap-nextjs-init-tool (npm) (malicious package)
- [MAL-2025-148027](https://insights.sbomify.com/MAL-2025-148027/): Malicious code in soap-neptune-xml-virgo (npm) (malicious package)
- [MAL-2025-148026](https://insights.sbomify.com/MAL-2025-148026/): Malicious code in soap-loop-terser-luna (npm) (malicious package)
- [MAL-2025-148025](https://insights.sbomify.com/MAL-2025-148025/): Malicious code in soap-lacerta-development-element-ui (npm) (malicious package)
- [MAL-2025-148024](https://insights.sbomify.com/MAL-2025-148024/): Malicious code in soap-kronos-altair-husky (npm) (malicious package)
- [MAL-2025-148023](https://insights.sbomify.com/MAL-2025-148023/): Malicious code in soap-hyperion-juno-mysql (npm) (malicious package)
- [MAL-2025-148022](https://insights.sbomify.com/MAL-2025-148022/): Malicious code in soap-husky-playwright-rate-limiter (npm) (malicious package)
- [MAL-2025-148021](https://insights.sbomify.com/MAL-2025-148021/): Malicious code in soap-hermes-farout-canopus (npm) (malicious package)
- [MAL-2025-148020](https://insights.sbomify.com/MAL-2025-148020/): Malicious code in soap-fornax-await-blitz (npm) (malicious package)
- [MAL-2025-14802](https://insights.sbomify.com/MAL-2025-14802/): Malicious code in arcturus-brane-test-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-148019](https://insights.sbomify.com/MAL-2025-148019/): Malicious code in soap-firebase-nightwatch-publish (npm) (malicious package)
- [MAL-2025-148018](https://insights.sbomify.com/MAL-2025-148018/): Malicious code in soap-csrf-sync-nextjs (npm) (malicious package)
- [MAL-2025-148017](https://insights.sbomify.com/MAL-2025-148017/): Malicious code in soap-cross-env-norma-subscription (npm) (malicious package)
- [MAL-2025-148016](https://insights.sbomify.com/MAL-2025-148016/): Malicious code in soap-cross-env-dotenv-parse-variables-stop (npm) (malicious package)
- [MAL-2025-148015](https://insights.sbomify.com/MAL-2025-148015/): Malicious code in soap-chakra-ui-phenomic-bootstrap (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1398/