# Vulnerabilities published in 2025


- [MAL-2025-147925](https://insights.sbomify.com/MAL-2025-147925/): Malicious code in shelljs-procyon-jsonp-nova (npm) (malicious package)
- [MAL-2025-147924](https://insights.sbomify.com/MAL-2025-147924/): Malicious code in shelljs-nova-xenon-got (npm) (malicious package)
- [MAL-2025-147923](https://insights.sbomify.com/MAL-2025-147923/): Malicious code in shelljs-nightmare-perseus-elektra (npm) (malicious package)
- [MAL-2025-147922](https://insights.sbomify.com/MAL-2025-147922/): Malicious code in shelljs-nestjs-orbit-release-it (npm) (malicious package)
- [MAL-2025-147921](https://insights.sbomify.com/MAL-2025-147921/): Malicious code in shelljs-mongodb-eridanus-gemini (npm) (malicious package)
- [MAL-2025-147920](https://insights.sbomify.com/MAL-2025-147920/): Malicious code in shelljs-markdown-webdriver-mocha-prettier-stylelint (npm) (malicious package)
- [MAL-2025-14792](https://insights.sbomify.com/MAL-2025-14792/): Malicious code in arcpubs (npm) (malicious package)
- [MAL-2025-147919](https://insights.sbomify.com/MAL-2025-147919/): Malicious code in shelljs-luna-sadr-wezen (npm) (malicious package)
- [MAL-2025-147918](https://insights.sbomify.com/MAL-2025-147918/): Malicious code in shelljs-library-development-commitlint (npm) (malicious package)
- [MAL-2025-147917](https://insights.sbomify.com/MAL-2025-147917/): Malicious code in shelljs-jabbah-prettier-triton (npm) (malicious package)
- [MAL-2025-147916](https://insights.sbomify.com/MAL-2025-147916/): Malicious code in shelljs-install-shelljs-proxima (npm) (malicious package)
- [MAL-2025-147915](https://insights.sbomify.com/MAL-2025-147915/): Malicious code in shelljs-hydra-element-ui-supervisor (npm) (malicious package)
- [MAL-2025-147914](https://insights.sbomify.com/MAL-2025-147914/): Malicious code in shelljs-heka-sass-loader-gemini (npm) (malicious package)
- [MAL-2025-147913](https://insights.sbomify.com/MAL-2025-147913/): Malicious code in shelljs-farout-indus-version (npm) (malicious package)
- [MAL-2025-147912](https://insights.sbomify.com/MAL-2025-147912/): Malicious code in shelljs-europa-cosmiconfig-concurrently (npm) (malicious package)
- [MAL-2025-147911](https://insights.sbomify.com/MAL-2025-147911/): Malicious code in shelljs-csv-antares-changelog (npm) (malicious package)
- [MAL-2025-147910](https://insights.sbomify.com/MAL-2025-147910/): Malicious code in shelljs-chai-remark-delphinus (npm) (malicious package)
- [MAL-2025-14791](https://insights.sbomify.com/MAL-2025-14791/): Malicious code in archdoom (npm) (malicious package)
- [MAL-2025-147909](https://insights.sbomify.com/MAL-2025-147909/): Malicious code in shelljs-bootes-regulus-sedna (npm) (malicious package)
- [MAL-2025-147908](https://insights.sbomify.com/MAL-2025-147908/): Malicious code in shelljs-ariel-ophiuchus-sails (npm) (malicious package)
- [MAL-2025-147907](https://insights.sbomify.com/MAL-2025-147907/): Malicious code in shelljs-airbnb-morgan-protractor (npm) (malicious package)
- [MAL-2025-147906](https://insights.sbomify.com/MAL-2025-147906/): Malicious code in server-weywot-cosmos-mysql (npm) (malicious package)
- [MAL-2025-147905](https://insights.sbomify.com/MAL-2025-147905/): Malicious code in server-sagitta-andromeda-centaurus (npm) (malicious package)
- [MAL-2025-147904](https://insights.sbomify.com/MAL-2025-147904/): Malicious code in server-publish-meissa-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-147903](https://insights.sbomify.com/MAL-2025-147903/): Malicious code in server-passport-run-script-acamar (npm) (malicious package)
- [MAL-2025-147902](https://insights.sbomify.com/MAL-2025-147902/): Malicious code in server-nova-iota-duplex (npm) (malicious package)
- [MAL-2025-147901](https://insights.sbomify.com/MAL-2025-147901/): Malicious code in server-nashira-xml-nightwatch (npm) (malicious package)
- [MAL-2025-147900](https://insights.sbomify.com/MAL-2025-147900/): Malicious code in server-helios-pino-pretty-ganymede (npm) (malicious package)
- [MAL-2025-14790](https://insights.sbomify.com/MAL-2025-14790/): Malicious code in archbsd (npm) (malicious package)
- [MAL-2025-1479](https://insights.sbomify.com/MAL-2025-1479/): Malicious code in byted-player-service (npm) (malicious package)
- [MAL-2025-147899](https://insights.sbomify.com/MAL-2025-147899/): Malicious code in server-framework-andromeda-aurora (npm) (malicious package)
- [MAL-2025-147898](https://insights.sbomify.com/MAL-2025-147898/): Malicious code in server-envconfig-registry-concurrently (npm) (malicious package)
- [MAL-2025-147897](https://insights.sbomify.com/MAL-2025-147897/): Malicious code in server-eleventy-centauri-wolf (npm) (malicious package)
- [MAL-2025-147896](https://insights.sbomify.com/MAL-2025-147896/): Malicious code in server-element-ui-aldebaran-spectron (npm) (malicious package)
- [MAL-2025-147895](https://insights.sbomify.com/MAL-2025-147895/): Malicious code in server-elektra-query-remark (npm) (malicious package)
- [MAL-2025-147894](https://insights.sbomify.com/MAL-2025-147894/): Malicious code in server-electron-blitz-await (npm) (malicious package)
- [MAL-2025-147893](https://insights.sbomify.com/MAL-2025-147893/): Malicious code in server-despina-polaris-yildun (npm) (malicious package)
- [MAL-2025-147892](https://insights.sbomify.com/MAL-2025-147892/): Malicious code in server-command-lyra-loop (npm) (malicious package)
- [MAL-2025-147891](https://insights.sbomify.com/MAL-2025-147891/): Malicious code in server-cassini-fornax-prettier (npm) (malicious package)
- [MAL-2025-147890](https://insights.sbomify.com/MAL-2025-147890/): Malicious code in server-astro-publish-capella (npm) (malicious package)
- [MAL-2025-14789](https://insights.sbomify.com/MAL-2025-14789/): Malicious code in archana (npm) (malicious package)
- [MAL-2025-147889](https://insights.sbomify.com/MAL-2025-147889/): Malicious code in server-apollo-markdown-install (npm) (malicious package)
- [MAL-2025-147888](https://insights.sbomify.com/MAL-2025-147888/): Malicious code in server-acamar-izar-react-bootstrap (npm) (malicious package)
- [MAL-2025-147887](https://insights.sbomify.com/MAL-2025-147887/): Malicious code in server-acamar-ganymede-commitizen (npm) (malicious package)
- [MAL-2025-147886](https://insights.sbomify.com/MAL-2025-147886/): Malicious code in sequelize-websockets-uninstall-achernar (npm) (malicious package)
- [MAL-2025-147885](https://insights.sbomify.com/MAL-2025-147885/): Malicious code in sequelize-webpack-electron-sqlite (npm) (malicious package)
- [MAL-2025-147884](https://insights.sbomify.com/MAL-2025-147884/): Malicious code in sequelize-version-build-thuban (npm) (malicious package)
- [MAL-2025-147883](https://insights.sbomify.com/MAL-2025-147883/): Malicious code in sequelize-update-umbra-xenos (npm) (malicious package)
- [MAL-2025-147882](https://insights.sbomify.com/MAL-2025-147882/): Malicious code in sequelize-transport-wezen-auriga (npm) (malicious package)
- [MAL-2025-147881](https://insights.sbomify.com/MAL-2025-147881/): Malicious code in sequelize-transform-jsonp-sync (npm) (malicious package)
- [MAL-2025-147880](https://insights.sbomify.com/MAL-2025-147880/): Malicious code in sequelize-tool-gemini-arcturus (npm) (malicious package)
- [MAL-2025-14788](https://insights.sbomify.com/MAL-2025-14788/): Malicious code in archaeometry-umbriel-callback-io (npm) (malicious package)
- [MAL-2025-147879](https://insights.sbomify.com/MAL-2025-147879/): Malicious code in sequelize-standard-terser-webpack-plugin-rest (npm) (malicious package)
- [MAL-2025-147878](https://insights.sbomify.com/MAL-2025-147878/): Malicious code in sequelize-spectron-webdriver-blitz-ursa (npm) (malicious package)
- [MAL-2025-147877](https://insights.sbomify.com/MAL-2025-147877/): Malicious code in sequelize-socketio-juno-andromeda (npm) (malicious package)
- [MAL-2025-147876](https://insights.sbomify.com/MAL-2025-147876/): Malicious code in sequelize-semantic-ui-farout-public (npm) (malicious package)
- [MAL-2025-147875](https://insights.sbomify.com/MAL-2025-147875/): Malicious code in sequelize-private-triton-rimraf (npm) (malicious package)
- [MAL-2025-147874](https://insights.sbomify.com/MAL-2025-147874/): Malicious code in sequelize-neptune-await-metalsmith (npm) (malicious package)
- [MAL-2025-147873](https://insights.sbomify.com/MAL-2025-147873/): Malicious code in sequelize-nashira-rigel-uglify-js (npm) (malicious package)
- [MAL-2025-147872](https://insights.sbomify.com/MAL-2025-147872/): Malicious code in sequelize-janus-phoebe-library (npm) (malicious package)
- [MAL-2025-147871](https://insights.sbomify.com/MAL-2025-147871/): Malicious code in sequelize-indus-weywot-concurrently (npm) (malicious package)
- [MAL-2025-147870](https://insights.sbomify.com/MAL-2025-147870/): Malicious code in sequelize-grunt-public-magellan (npm) (malicious package)
- [MAL-2025-14787](https://insights.sbomify.com/MAL-2025-14787/): Malicious code in archaeometry-javascript-jsonp-isostasy (npm) (malicious package)
- [MAL-2025-147869](https://insights.sbomify.com/MAL-2025-147869/): Malicious code in sequelize-gravity-jasmine-publish (npm) (malicious package)
- [MAL-2025-147868](https://insights.sbomify.com/MAL-2025-147868/): Malicious code in sequelize-global-regulus-neptune (npm) (malicious package)
- [MAL-2025-147867](https://insights.sbomify.com/MAL-2025-147867/): Malicious code in sequelize-express-draco-xanthus (npm) (malicious package)
- [MAL-2025-147866](https://insights.sbomify.com/MAL-2025-147866/): Malicious code in sequelize-eslint-protractor-miranda (npm) (malicious package)
- [MAL-2025-147865](https://insights.sbomify.com/MAL-2025-147865/): Malicious code in sequelize-equinox-lacerta-nightwatch (npm) (malicious package)
- [MAL-2025-147864](https://insights.sbomify.com/MAL-2025-147864/): Malicious code in sequelize-deimos-cressida-hapi (npm) (malicious package)
- [MAL-2025-147863](https://insights.sbomify.com/MAL-2025-147863/): Malicious code in sequelize-convict-wasat-antares (npm) (malicious package)
- [MAL-2025-147862](https://insights.sbomify.com/MAL-2025-147862/): Malicious code in sequelize-auth0-publish-dotenv (npm) (malicious package)
- [MAL-2025-147861](https://insights.sbomify.com/MAL-2025-147861/): Malicious code in semantic-ui-yildun-dagda-luna (npm) (malicious package)
- [MAL-2025-147860](https://insights.sbomify.com/MAL-2025-147860/): Malicious code in semantic-ui-weywot-helmet-pino-pretty (npm) (malicious package)
- [MAL-2025-14786](https://insights.sbomify.com/MAL-2025-14786/): Malicious code in archaeometry-elektra-neutronstar-promise (npm) (malicious package)
- [MAL-2025-147859](https://insights.sbomify.com/MAL-2025-147859/): Malicious code in semantic-ui-version-cordelia-sass-loader (npm) (malicious package)
- [MAL-2025-147858](https://insights.sbomify.com/MAL-2025-147858/): Malicious code in semantic-ui-tool-fornax-package (npm) (malicious package)
- [MAL-2025-147857](https://insights.sbomify.com/MAL-2025-147857/): Malicious code in semantic-ui-test-test-sirius (npm) (malicious package)
- [MAL-2025-147856](https://insights.sbomify.com/MAL-2025-147856/): Malicious code in semantic-ui-schema-kastra-bulma (npm) (malicious package)
- [MAL-2025-147855](https://insights.sbomify.com/MAL-2025-147855/): Malicious code in semantic-ui-pulsar-reveal-md-leda (npm) (malicious package)
- [MAL-2025-147854](https://insights.sbomify.com/MAL-2025-147854/): Malicious code in semantic-ui-perseus-firebase-cypress (npm) (malicious package)
- [MAL-2025-147853](https://insights.sbomify.com/MAL-2025-147853/): Malicious code in semantic-ui-morgan-node-config-iota (npm) (malicious package)
- [MAL-2025-147852](https://insights.sbomify.com/MAL-2025-147852/): Malicious code in semantic-ui-link-firebase-bunyan (npm) (malicious package)
- [MAL-2025-147851](https://insights.sbomify.com/MAL-2025-147851/): Malicious code in semantic-ui-leda-dependencies-rate-limiter (npm) (malicious package)
- [MAL-2025-147850](https://insights.sbomify.com/MAL-2025-147850/): Malicious code in semantic-ui-kaus-install-centaurus (npm) (malicious package)
- [MAL-2025-14785](https://insights.sbomify.com/MAL-2025-14785/): Malicious code in archaeometry-crust-rate-limiter-sirius (npm) (malicious package)
- [MAL-2025-147849](https://insights.sbomify.com/MAL-2025-147849/): Malicious code in semantic-ui-jupiter-celeste-chai (npm) (malicious package)
- [MAL-2025-147848](https://insights.sbomify.com/MAL-2025-147848/): Malicious code in semantic-ui-gridsome-soap-europa (npm) (malicious package)
- [MAL-2025-147847](https://insights.sbomify.com/MAL-2025-147847/): Malicious code in semantic-ui-global-orbit-event (npm) (malicious package)
- [MAL-2025-147846](https://insights.sbomify.com/MAL-2025-147846/): Malicious code in semantic-ui-fork-development-jest (npm) (malicious package)
- [MAL-2025-147845](https://insights.sbomify.com/MAL-2025-147845/): Malicious code in semantic-ui-dorado-install-version (npm) (malicious package)
- [MAL-2025-147844](https://insights.sbomify.com/MAL-2025-147844/): Malicious code in semantic-ui-dione-graphql-kinetic (npm) (malicious package)
- [MAL-2025-147843](https://insights.sbomify.com/MAL-2025-147843/): Malicious code in semantic-ui-convict-centaurus-husky (npm) (malicious package)
- [MAL-2025-147842](https://insights.sbomify.com/MAL-2025-147842/): Malicious code in semantic-ui-concurrently-enceladus-toml (npm) (malicious package)
- [MAL-2025-147841](https://insights.sbomify.com/MAL-2025-147841/): Malicious code in semantic-ui-cluster-hermes-postcss-loader (npm) (malicious package)
- [MAL-2025-147840](https://insights.sbomify.com/MAL-2025-147840/): Malicious code in semantic-ui-charon-sirius-yakutsk (npm) (malicious package)
- [MAL-2025-14784](https://insights.sbomify.com/MAL-2025-14784/): Malicious code in archaeogenetics-resolvers-orogeny-electron-builder (npm) (malicious package)
- [MAL-2025-147839](https://insights.sbomify.com/MAL-2025-147839/): Malicious code in semantic-release-update-kronos-rest (npm) (malicious package)
- [MAL-2025-147838](https://insights.sbomify.com/MAL-2025-147838/): Malicious code in semantic-release-umbriel-enif-foundation (npm) (malicious package)
- [MAL-2025-147837](https://insights.sbomify.com/MAL-2025-147837/): Malicious code in semantic-release-sass-loader-commitizen-eslint-config (npm) (malicious package)
- [MAL-2025-147836](https://insights.sbomify.com/MAL-2025-147836/): Malicious code in semantic-release-sails-webdriver-mocha-npm (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1400/