# Vulnerabilities published in 2025


- [MAL-2025-148014](https://insights.sbomify.com/MAL-2025-148014/): Malicious code in soap-antd-antares-parcel (npm) (malicious package)
- [MAL-2025-148013](https://insights.sbomify.com/MAL-2025-148013/): Malicious code in slidev-xanadu-xo-castor (npm) (malicious package)
- [MAL-2025-148012](https://insights.sbomify.com/MAL-2025-148012/): Malicious code in slidev-postcss-loader-non-blocking-dagda (npm) (malicious package)
- [MAL-2025-148011](https://insights.sbomify.com/MAL-2025-148011/): Malicious code in slidev-nightwatch-uninstall-xanthus (npm) (malicious package)
- [MAL-2025-148010](https://insights.sbomify.com/MAL-2025-148010/): Malicious code in slidev-nestjs-jekyll-framework (npm) (malicious package)
- [MAL-2025-14801](https://insights.sbomify.com/MAL-2025-14801/): Malicious code in arcturus-astrophysics-cluster-eris (npm) (malicious package)
- [MAL-2025-148009](https://insights.sbomify.com/MAL-2025-148009/): Malicious code in slidev-mongoose-middleware-pegasus (npm) (malicious package)
- [MAL-2025-148008](https://insights.sbomify.com/MAL-2025-148008/): Malicious code in slidev-markdown-pdf-vuepress-optimize-css-assets-webpack-plugin (npm) (malicious package)
- [MAL-2025-148007](https://insights.sbomify.com/MAL-2025-148007/): Malicious code in slidev-janus-aquarius-corvus (npm) (malicious package)
- [MAL-2025-148006](https://insights.sbomify.com/MAL-2025-148006/): Malicious code in slidev-io-bellatrix-sass-loader (npm) (malicious package)
- [MAL-2025-148005](https://insights.sbomify.com/MAL-2025-148005/): Malicious code in slidev-html-webpack-plugin-mini-css-extract-plugin-markdown (npm) (malicious package)
- [MAL-2025-148004](https://insights.sbomify.com/MAL-2025-148004/): Malicious code in slidev-duplex-polaris-celeste (npm) (malicious package)
- [MAL-2025-148003](https://insights.sbomify.com/MAL-2025-148003/): Malicious code in slidev-cypress-blaze-upgrade (npm) (malicious package)
- [MAL-2025-148002](https://insights.sbomify.com/MAL-2025-148002/): Malicious code in slidev-convict-heka-iota (npm) (malicious package)
- [MAL-2025-148001](https://insights.sbomify.com/MAL-2025-148001/): Malicious code in slidev-config-prettier-plugin-markdown-start (npm) (malicious package)
- [MAL-2025-148000](https://insights.sbomify.com/MAL-2025-148000/): Malicious code in slidev-blaze-zenobia-avior (npm) (malicious package)
- [MAL-2025-14800](https://insights.sbomify.com/MAL-2025-14800/): Malicious code in arcturo (npm) (malicious package)
- [MAL-2025-1480](https://insights.sbomify.com/MAL-2025-1480/): Malicious code in fohost (npm) (malicious package)
- [MAL-2025-148](https://insights.sbomify.com/MAL-2025-148/): Malicious code in 3cx-call-control-apps (npm) (malicious package)
- [MAL-2025-147999](https://insights.sbomify.com/MAL-2025-147999/): Malicious code in slides-xerxes-neptune-await (npm) (malicious package)
- [MAL-2025-147998](https://insights.sbomify.com/MAL-2025-147998/): Malicious code in slides-venus-auth-cygnus (npm) (malicious package)
- [MAL-2025-147997](https://insights.sbomify.com/MAL-2025-147997/): Malicious code in slides-supervisor-apollo-sync (npm) (malicious package)
- [MAL-2025-147996](https://insights.sbomify.com/MAL-2025-147996/): Malicious code in slides-slides-build-yonder (npm) (malicious package)
- [MAL-2025-147995](https://insights.sbomify.com/MAL-2025-147995/): Malicious code in slides-semantic-release-auth-ursa (npm) (malicious package)
- [MAL-2025-147994](https://insights.sbomify.com/MAL-2025-147994/): Malicious code in slides-selenium-middleware-module (npm) (malicious package)
- [MAL-2025-147993](https://insights.sbomify.com/MAL-2025-147993/): Malicious code in slides-regulus-octans-husky (npm) (malicious package)
- [MAL-2025-147992](https://insights.sbomify.com/MAL-2025-147992/): Malicious code in slides-polaris-version-mongodb (npm) (malicious package)
- [MAL-2025-147991](https://insights.sbomify.com/MAL-2025-147991/): Malicious code in slides-non-blocking-dotenv-safe-loopback (npm) (malicious package)
- [MAL-2025-147990](https://insights.sbomify.com/MAL-2025-147990/): Malicious code in slides-module-node-sass-venus (npm) (malicious package)
- [MAL-2025-14799](https://insights.sbomify.com/MAL-2025-14799/): Malicious code in arctic-unicorn-qdk488-project (npm) (malicious package)
- [MAL-2025-147989](https://insights.sbomify.com/MAL-2025-147989/): Malicious code in slides-loopback-remark-apollo (npm) (malicious package)
- [MAL-2025-147988](https://insights.sbomify.com/MAL-2025-147988/): Malicious code in slides-inquirer-delphinus-auriga (npm) (malicious package)
- [MAL-2025-147987](https://insights.sbomify.com/MAL-2025-147987/): Malicious code in slides-hydra-cordelia-rate-limiter (npm) (malicious package)
- [MAL-2025-147986](https://insights.sbomify.com/MAL-2025-147986/): Malicious code in slides-graphql-markdown-pdf-dynamo (npm) (malicious package)
- [MAL-2025-147985](https://insights.sbomify.com/MAL-2025-147985/): Malicious code in slides-geckodriver-sass-loader-webpack (npm) (malicious package)
- [MAL-2025-147984](https://insights.sbomify.com/MAL-2025-147984/): Malicious code in slides-css-loader-callisto-server (npm) (malicious package)
- [MAL-2025-147983](https://insights.sbomify.com/MAL-2025-147983/): Malicious code in slides-callisto-pegasus-dagda (npm) (malicious package)
- [MAL-2025-147982](https://insights.sbomify.com/MAL-2025-147982/): Malicious code in slides-apollo-cors-cordelia (npm) (malicious package)
- [MAL-2025-147981](https://insights.sbomify.com/MAL-2025-147981/): Malicious code in sirius-transport-barnard-centaurus (npm) (malicious package)
- [MAL-2025-147980](https://insights.sbomify.com/MAL-2025-147980/): Malicious code in sirius-taurus-achernar-dactyl (npm) (malicious package)
- [MAL-2025-14798](https://insights.sbomify.com/MAL-2025-14798/): Malicious code in arctic-river-nts792-project (npm) (malicious package)
- [MAL-2025-147979](https://insights.sbomify.com/MAL-2025-147979/): Malicious code in sirius-standard-mensa-element-ui (npm) (malicious package)
- [MAL-2025-147978](https://insights.sbomify.com/MAL-2025-147978/): Malicious code in sirius-spawn-chromedriver-ini (npm) (malicious package)
- [MAL-2025-147977](https://insights.sbomify.com/MAL-2025-147977/): Malicious code in sirius-sedna-sass-loader-mongoose (npm) (malicious package)
- [MAL-2025-147976](https://insights.sbomify.com/MAL-2025-147976/): Malicious code in sirius-rollup-despina-meissa (npm) (malicious package)
- [MAL-2025-147975](https://insights.sbomify.com/MAL-2025-147975/): Malicious code in sirius-rest-atlas-rate-limiter (npm) (malicious package)
- [MAL-2025-147974](https://insights.sbomify.com/MAL-2025-147974/): Malicious code in sirius-resolvers-quantum-rollup-plugin (npm) (malicious package)
- [MAL-2025-147973](https://insights.sbomify.com/MAL-2025-147973/): Malicious code in sirius-resolvers-pm2-halley (npm) (malicious package)
- [MAL-2025-147972](https://insights.sbomify.com/MAL-2025-147972/): Malicious code in sirius-repository-yaml-oberon (npm) (malicious package)
- [MAL-2025-147971](https://insights.sbomify.com/MAL-2025-147971/): Malicious code in sirius-readable-centaurus-firebase (npm) (malicious package)
- [MAL-2025-147970](https://insights.sbomify.com/MAL-2025-147970/): Malicious code in sirius-pyxis-cypress-cressida (npm) (malicious package)
- [MAL-2025-14797](https://insights.sbomify.com/MAL-2025-14797/): Malicious code in arctic-orangutan-nka823-project (npm) (malicious package)
- [MAL-2025-147969](https://insights.sbomify.com/MAL-2025-147969/): Malicious code in sirius-prompts-thuban-aether (npm) (malicious package)
- [MAL-2025-147968](https://insights.sbomify.com/MAL-2025-147968/): Malicious code in sirius-prettier-stylelint-dotenv-parse-variables-wolf (npm) (malicious package)
- [MAL-2025-147967](https://insights.sbomify.com/MAL-2025-147967/): Malicious code in sirius-pm2-sedna-rollup (npm) (malicious package)
- [MAL-2025-147966](https://insights.sbomify.com/MAL-2025-147966/): Malicious code in sirius-pavo-xenos-luna (npm) (malicious package)
- [MAL-2025-147965](https://insights.sbomify.com/MAL-2025-147965/): Malicious code in sirius-parcel-electron-builder-rate-limiter (npm) (malicious package)
- [MAL-2025-147964](https://insights.sbomify.com/MAL-2025-147964/): Malicious code in sirius-optimize-css-assets-webpack-plugin-auth-loglevel (npm) (malicious package)
- [MAL-2025-147963](https://insights.sbomify.com/MAL-2025-147963/): Malicious code in sirius-nodejs-pino-chalk (npm) (malicious package)
- [MAL-2025-147962](https://insights.sbomify.com/MAL-2025-147962/): Malicious code in sirius-magellan-middleware-less-loader (npm) (malicious package)
- [MAL-2025-147961](https://insights.sbomify.com/MAL-2025-147961/): Malicious code in sirius-loop-axios-hydra (npm) (malicious package)
- [MAL-2025-147960](https://insights.sbomify.com/MAL-2025-147960/): Malicious code in sirius-leda-algol-flare (npm) (malicious package)
- [MAL-2025-14796](https://insights.sbomify.com/MAL-2025-14796/): Malicious code in arctic-opal-xxr872-project (npm) (malicious package)
- [MAL-2025-147959](https://insights.sbomify.com/MAL-2025-147959/): Malicious code in sirius-lacerta-cache-callisto (npm) (malicious package)
- [MAL-2025-147958](https://insights.sbomify.com/MAL-2025-147958/): Malicious code in sirius-jsonp-dotenv-parse-variables-perseus (npm) (malicious package)
- [MAL-2025-147957](https://insights.sbomify.com/MAL-2025-147957/): Malicious code in sirius-impulse-node-config-spica (npm) (malicious package)
- [MAL-2025-147956](https://insights.sbomify.com/MAL-2025-147956/): Malicious code in sirius-html-webpack-plugin-izar-europa (npm) (malicious package)
- [MAL-2025-147955](https://insights.sbomify.com/MAL-2025-147955/): Malicious code in sirius-gulp-playwright-jovian (npm) (malicious package)
- [MAL-2025-147954](https://insights.sbomify.com/MAL-2025-147954/): Malicious code in sirius-geckodriver-enif-child-process (npm) (malicious package)
- [MAL-2025-147953](https://insights.sbomify.com/MAL-2025-147953/): Malicious code in sirius-gatsby-subscription-nodemon (npm) (malicious package)
- [MAL-2025-147952](https://insights.sbomify.com/MAL-2025-147952/): Malicious code in sirius-foundation-sagitta-eslint (npm) (malicious package)
- [MAL-2025-147951](https://insights.sbomify.com/MAL-2025-147951/): Malicious code in sirius-fornax-process-typeorm (npm) (malicious package)
- [MAL-2025-147950](https://insights.sbomify.com/MAL-2025-147950/): Malicious code in sirius-fork-nodejs-bellatrix (npm) (malicious package)
- [MAL-2025-14795](https://insights.sbomify.com/MAL-2025-14795/): Malicious code in arctic-nimbus-rcn239-project (npm) (malicious package)
- [MAL-2025-147949](https://insights.sbomify.com/MAL-2025-147949/): Malicious code in sirius-eridanus-slidev-xo (npm) (malicious package)
- [MAL-2025-147948](https://insights.sbomify.com/MAL-2025-147948/): Malicious code in sirius-enceladus-bellatrix-link (npm) (malicious package)
- [MAL-2025-147947](https://insights.sbomify.com/MAL-2025-147947/): Malicious code in sirius-dynamo-cordelia-proxima (npm) (malicious package)
- [MAL-2025-147946](https://insights.sbomify.com/MAL-2025-147946/): Malicious code in sirius-development-gemini-graphql (npm) (malicious package)
- [MAL-2025-147945](https://insights.sbomify.com/MAL-2025-147945/): Malicious code in sirius-css-minimizer-webpack-plugin-gulp-apex (npm) (malicious package)
- [MAL-2025-147944](https://insights.sbomify.com/MAL-2025-147944/): Malicious code in sirius-cressida-gulp-subscription (npm) (malicious package)
- [MAL-2025-147943](https://insights.sbomify.com/MAL-2025-147943/): Malicious code in sirius-config-npm-restart (npm) (malicious package)
- [MAL-2025-147942](https://insights.sbomify.com/MAL-2025-147942/): Malicious code in sirius-config-levels-umbriel (npm) (malicious package)
- [MAL-2025-147941](https://insights.sbomify.com/MAL-2025-147941/): Malicious code in sirius-colors-betelgeuse-gravity (npm) (malicious package)
- [MAL-2025-147940](https://insights.sbomify.com/MAL-2025-147940/): Malicious code in sirius-chromedriver-cygnus-start (npm) (malicious package)
- [MAL-2025-14794](https://insights.sbomify.com/MAL-2025-14794/): Malicious code in arctic-lava-ezb031-project (npm) (malicious package)
- [MAL-2025-147939](https://insights.sbomify.com/MAL-2025-147939/): Malicious code in sirius-chai-draco-taurus (npm) (malicious package)
- [MAL-2025-147938](https://insights.sbomify.com/MAL-2025-147938/): Malicious code in sirius-ceres-fornax-nebula (npm) (malicious package)
- [MAL-2025-147937](https://insights.sbomify.com/MAL-2025-147937/): Malicious code in sirius-cache-jasmine-cache (npm) (malicious package)
- [MAL-2025-147936](https://insights.sbomify.com/MAL-2025-147936/): Malicious code in sirius-aurora-warp-native (npm) (malicious package)
- [MAL-2025-147935](https://insights.sbomify.com/MAL-2025-147935/): Malicious code in sirius-antares-quito-meissa (npm) (malicious package)
- [MAL-2025-147934](https://insights.sbomify.com/MAL-2025-147934/): Malicious code in single-bronze-baboon (npm) (malicious package)
- [MAL-2025-147933](https://insights.sbomify.com/MAL-2025-147933/): Malicious code in silly_whippet_gray-50 (npm) (malicious package)
- [MAL-2025-147932](https://insights.sbomify.com/MAL-2025-147932/): Malicious code in shelljs-warp-mongoose-betelgeuse (npm) (malicious package)
- [MAL-2025-147931](https://insights.sbomify.com/MAL-2025-147931/): Malicious code in shelljs-ursa-fornax-luna (npm) (malicious package)
- [MAL-2025-147930](https://insights.sbomify.com/MAL-2025-147930/): Malicious code in shelljs-ultra-venus-stop (npm) (malicious package)
- [MAL-2025-14793](https://insights.sbomify.com/MAL-2025-14793/): Malicious code in arctic-kale-ntw066-project (npm) (malicious package)
- [MAL-2025-147929](https://insights.sbomify.com/MAL-2025-147929/): Malicious code in shelljs-tailwindcss-lint-proxima (npm) (malicious package)
- [MAL-2025-147928](https://insights.sbomify.com/MAL-2025-147928/): Malicious code in shelljs-sedna-kaus-callback (npm) (malicious package)
- [MAL-2025-147927](https://insights.sbomify.com/MAL-2025-147927/): Malicious code in shelljs-sagitta-forever-iota (npm) (malicious package)
- [MAL-2025-147926](https://insights.sbomify.com/MAL-2025-147926/): Malicious code in shelljs-prompts-meteor-pavo (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1399/