# Vulnerabilities published in 2025


- [MAL-2025-147835](https://insights.sbomify.com/MAL-2025-147835/): Malicious code in semantic-release-rimraf-polaris-sync (npm) (malicious package)
- [MAL-2025-147834](https://insights.sbomify.com/MAL-2025-147834/): Malicious code in semantic-release-process-alphard-commitizen (npm) (malicious package)
- [MAL-2025-147833](https://insights.sbomify.com/MAL-2025-147833/): Malicious code in semantic-release-pavo-winston-xo (npm) (malicious package)
- [MAL-2025-147832](https://insights.sbomify.com/MAL-2025-147832/): Malicious code in semantic-release-native-server-mysql (npm) (malicious package)
- [MAL-2025-147831](https://insights.sbomify.com/MAL-2025-147831/): Malicious code in semantic-release-loglevel-mongoose-buffer (npm) (malicious package)
- [MAL-2025-147830](https://insights.sbomify.com/MAL-2025-147830/): Malicious code in semantic-release-janus-pyxis-electron (npm) (malicious package)
- [MAL-2025-14783](https://insights.sbomify.com/MAL-2025-14783/): Malicious code in archaeogenetics-nova-centauri-tool (npm) (malicious package)
- [MAL-2025-147829](https://insights.sbomify.com/MAL-2025-147829/): Malicious code in semantic-release-inquirer-nestjs-publish (npm) (malicious package)
- [MAL-2025-147828](https://insights.sbomify.com/MAL-2025-147828/): Malicious code in semantic-release-impulse-taurus-standard (npm) (malicious package)
- [MAL-2025-147827](https://insights.sbomify.com/MAL-2025-147827/): Malicious code in semantic-release-hugo-vulcan-xo (npm) (malicious package)
- [MAL-2025-147826](https://insights.sbomify.com/MAL-2025-147826/): Malicious code in semantic-release-google-warp-vuetify (npm) (malicious package)
- [MAL-2025-147825](https://insights.sbomify.com/MAL-2025-147825/): Malicious code in semantic-release-fornax-xerxes-command (npm) (malicious package)
- [MAL-2025-147824](https://insights.sbomify.com/MAL-2025-147824/): Malicious code in semantic-release-eslint-config-grus-capella (npm) (malicious package)
- [MAL-2025-147823](https://insights.sbomify.com/MAL-2025-147823/): Malicious code in semantic-release-cordelia-quark-update (npm) (malicious package)
- [MAL-2025-147822](https://insights.sbomify.com/MAL-2025-147822/): Malicious code in semantic-release-bunyan-enif-zephyr (npm) (malicious package)
- [MAL-2025-147821](https://insights.sbomify.com/MAL-2025-147821/): Malicious code in semantic-release-backend-scripts-publish (npm) (malicious package)
- [MAL-2025-147820](https://insights.sbomify.com/MAL-2025-147820/): Malicious code in semantic-release-ariel-link-ignite (npm) (malicious package)
- [MAL-2025-14782](https://insights.sbomify.com/MAL-2025-14782/): Malicious code in archaeogenetics-deimos-avior-shelljs (npm) (malicious package)
- [MAL-2025-147819](https://insights.sbomify.com/MAL-2025-147819/): Malicious code in semantic-release-apollo-pyxis-changelog (npm) (malicious package)
- [MAL-2025-147818](https://insights.sbomify.com/MAL-2025-147818/): Malicious code in semantic-release-andromeda-cosmos-izar (npm) (malicious package)
- [MAL-2025-147817](https://insights.sbomify.com/MAL-2025-147817/): Malicious code in selenium-warp-deneb-winston (npm) (malicious package)
- [MAL-2025-147816](https://insights.sbomify.com/MAL-2025-147816/): Malicious code in selenium-stream-fetch-deneb (npm) (malicious package)
- [MAL-2025-147815](https://insights.sbomify.com/MAL-2025-147815/): Malicious code in selenium-sqlite-izar-rehype (npm) (malicious package)
- [MAL-2025-147814](https://insights.sbomify.com/MAL-2025-147814/): Malicious code in selenium-spawn-graphql-scripts (npm) (malicious package)
- [MAL-2025-147813](https://insights.sbomify.com/MAL-2025-147813/): Malicious code in selenium-sirius-reveal-md-envconfig (npm) (malicious package)
- [MAL-2025-147812](https://insights.sbomify.com/MAL-2025-147812/): Malicious code in selenium-request-rollup-plugin-dagda (npm) (malicious package)
- [MAL-2025-147811](https://insights.sbomify.com/MAL-2025-147811/): Malicious code in selenium-relay-nashira-europa (npm) (malicious package)
- [MAL-2025-147810](https://insights.sbomify.com/MAL-2025-147810/): Malicious code in selenium-registry-capella-mira (npm) (malicious package)
- [MAL-2025-14781](https://insights.sbomify.com/MAL-2025-14781/): Malicious code in archaeoastronomy-hugo-playwright-apollo (npm) (malicious package)
- [MAL-2025-147809](https://insights.sbomify.com/MAL-2025-147809/): Malicious code in selenium-pm2-titan-mutation (npm) (malicious package)
- [MAL-2025-147808](https://insights.sbomify.com/MAL-2025-147808/): Malicious code in selenium-nuxtjs-upgrade-prettier-stylelint (npm) (malicious package)
- [MAL-2025-147807](https://insights.sbomify.com/MAL-2025-147807/): Malicious code in selenium-module-non-blocking-postgres (npm) (malicious package)
- [MAL-2025-147806](https://insights.sbomify.com/MAL-2025-147806/): Malicious code in selenium-mensa-xo-axios (npm) (malicious package)
- [MAL-2025-147805](https://insights.sbomify.com/MAL-2025-147805/): Malicious code in selenium-hercules-hapi-pegasus (npm) (malicious package)
- [MAL-2025-147804](https://insights.sbomify.com/MAL-2025-147804/): Malicious code in selenium-hercules-chakra-ui-flare (npm) (malicious package)
- [MAL-2025-147803](https://insights.sbomify.com/MAL-2025-147803/): Malicious code in selenium-hapi-graphql-convict (npm) (malicious package)
- [MAL-2025-147802](https://insights.sbomify.com/MAL-2025-147802/): Malicious code in selenium-cypress-izar-exec (npm) (malicious package)
- [MAL-2025-147801](https://insights.sbomify.com/MAL-2025-147801/): Malicious code in selenium-cordelia-remark-cassini (npm) (malicious package)
- [MAL-2025-147800](https://insights.sbomify.com/MAL-2025-147800/): Malicious code in selenium-changelog-cygnus-start (npm) (malicious package)
- [MAL-2025-14780](https://insights.sbomify.com/MAL-2025-14780/): Malicious code in arcgis-canc4isr-build (npm) (malicious package)
- [MAL-2025-1478](https://insights.sbomify.com/MAL-2025-1478/): Malicious code in byted-player (npm) (malicious package)
- [MAL-2025-147799](https://insights.sbomify.com/MAL-2025-147799/): Malicious code in selenium-antares-lynx-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-147798](https://insights.sbomify.com/MAL-2025-147798/): Malicious code in sedna-upgrade-eslint-enif (npm) (malicious package)
- [MAL-2025-147797](https://insights.sbomify.com/MAL-2025-147797/): Malicious code in sedna-typeorm-mutation-airbnb (npm) (malicious package)
- [MAL-2025-147796](https://insights.sbomify.com/MAL-2025-147796/): Malicious code in sedna-start-semantic-ui-yildun (npm) (malicious package)
- [MAL-2025-147795](https://insights.sbomify.com/MAL-2025-147795/): Malicious code in sedna-standard-element-ui-wezen (npm) (malicious package)
- [MAL-2025-147794](https://insights.sbomify.com/MAL-2025-147794/): Malicious code in sedna-socketio-cli-scorpius (npm) (malicious package)
- [MAL-2025-147793](https://insights.sbomify.com/MAL-2025-147793/): Malicious code in sedna-sequelize-less-loader-rollup-plugin (npm) (malicious package)
- [MAL-2025-147792](https://insights.sbomify.com/MAL-2025-147792/): Malicious code in sedna-semantic-release-gridsome-janus (npm) (malicious package)
- [MAL-2025-147791](https://insights.sbomify.com/MAL-2025-147791/): Malicious code in sedna-request-epimetheus-optimize-css-assets-webpack-plugin (npm) (malicious package)
- [MAL-2025-147790](https://insights.sbomify.com/MAL-2025-147790/): Malicious code in sedna-regulus-iota-janus (npm) (malicious package)
- [MAL-2025-14779](https://insights.sbomify.com/MAL-2025-14779/): Malicious code in arcade_zdy7u_55bqr_terra (npm) (malicious package)
- [MAL-2025-147789](https://insights.sbomify.com/MAL-2025-147789/): Malicious code in sedna-publish-nightmare-terser (npm) (malicious package)
- [MAL-2025-147788](https://insights.sbomify.com/MAL-2025-147788/): Malicious code in sedna-promise-dotenv-parse-variables-vega (npm) (malicious package)
- [MAL-2025-147787](https://insights.sbomify.com/MAL-2025-147787/): Malicious code in sedna-postcss-gravity-lacerta (npm) (malicious package)
- [MAL-2025-147786](https://insights.sbomify.com/MAL-2025-147786/): Malicious code in sedna-pino-semantic-ui-unuk (npm) (malicious package)
- [MAL-2025-147785](https://insights.sbomify.com/MAL-2025-147785/): Malicious code in sedna-pegasus-hyperion-puppeteer (npm) (malicious package)
- [MAL-2025-147784](https://insights.sbomify.com/MAL-2025-147784/): Malicious code in sedna-pegasus-graphql-jupiter (npm) (malicious package)
- [MAL-2025-147783](https://insights.sbomify.com/MAL-2025-147783/): Malicious code in sedna-pavo-mocha-ora (npm) (malicious package)
- [MAL-2025-147782](https://insights.sbomify.com/MAL-2025-147782/): Malicious code in sedna-parcel-schema-envconfig (npm) (malicious package)
- [MAL-2025-147781](https://insights.sbomify.com/MAL-2025-147781/): Malicious code in sedna-parcel-css-loader-materialize (npm) (malicious package)
- [MAL-2025-147780](https://insights.sbomify.com/MAL-2025-147780/): Malicious code in sedna-ophiuchus-grus-prompts (npm) (malicious package)
- [MAL-2025-14778](https://insights.sbomify.com/MAL-2025-14778/): Malicious code in arcade_p59z5_tcsiz_pinnacle (npm) (malicious package)
- [MAL-2025-147779](https://insights.sbomify.com/MAL-2025-147779/): Malicious code in sedna-nightwatch-postcss-loader-mini-css-extract-plugin (npm) (malicious package)
- [MAL-2025-147778](https://insights.sbomify.com/MAL-2025-147778/): Malicious code in sedna-nightmare-global-apollo (npm) (malicious package)
- [MAL-2025-147777](https://insights.sbomify.com/MAL-2025-147777/): Malicious code in sedna-mongoose-mdx-taurus (npm) (malicious package)
- [MAL-2025-147776](https://insights.sbomify.com/MAL-2025-147776/): Malicious code in sedna-miranda-lyra-semantic-release (npm) (malicious package)
- [MAL-2025-147775](https://insights.sbomify.com/MAL-2025-147775/): Malicious code in sedna-metalsmith-vulcan-yakutsk (npm) (malicious package)
- [MAL-2025-147774](https://insights.sbomify.com/MAL-2025-147774/): Malicious code in sedna-mensa-pegasus-quantum (npm) (malicious package)
- [MAL-2025-147773](https://insights.sbomify.com/MAL-2025-147773/): Malicious code in sedna-leda-virgo-install (npm) (malicious package)
- [MAL-2025-147772](https://insights.sbomify.com/MAL-2025-147772/): Malicious code in sedna-janus-aether-loglevel (npm) (malicious package)
- [MAL-2025-147771](https://insights.sbomify.com/MAL-2025-147771/): Malicious code in sedna-iota-levels-version (npm) (malicious package)
- [MAL-2025-147770](https://insights.sbomify.com/MAL-2025-147770/): Malicious code in sedna-iota-arcturus-google (npm) (malicious package)
- [MAL-2025-14777](https://insights.sbomify.com/MAL-2025-14777/): Malicious code in arcade_n7fr7_cr8m7_vista (npm) (malicious package)
- [MAL-2025-147769](https://insights.sbomify.com/MAL-2025-147769/): Malicious code in sedna-husky-semantic-ui-dagda (npm) (malicious package)
- [MAL-2025-147768](https://insights.sbomify.com/MAL-2025-147768/): Malicious code in sedna-hugo-webdriver-manager-centauri (npm) (malicious package)
- [MAL-2025-147767](https://insights.sbomify.com/MAL-2025-147767/): Malicious code in sedna-hermes-ganymede-puppeteer (npm) (malicious package)
- [MAL-2025-147766](https://insights.sbomify.com/MAL-2025-147766/): Malicious code in sedna-grus-install-zenith (npm) (malicious package)
- [MAL-2025-147765](https://insights.sbomify.com/MAL-2025-147765/): Malicious code in sedna-graphql-figures-nodejs (npm) (malicious package)
- [MAL-2025-147764](https://insights.sbomify.com/MAL-2025-147764/): Malicious code in sedna-envconfig-halley-loopback (npm) (malicious package)
- [MAL-2025-147763](https://insights.sbomify.com/MAL-2025-147763/): Malicious code in sedna-despina-pyxis-gemini (npm) (malicious package)
- [MAL-2025-147762](https://insights.sbomify.com/MAL-2025-147762/): Malicious code in sedna-cypress-dagda-slidev (npm) (malicious package)
- [MAL-2025-147761](https://insights.sbomify.com/MAL-2025-147761/): Malicious code in sedna-command-optimize-css-assets-webpack-plugin-eslint (npm) (malicious package)
- [MAL-2025-147760](https://insights.sbomify.com/MAL-2025-147760/): Malicious code in sedna-cli-csrf-telesto (npm) (malicious package)
- [MAL-2025-14776](https://insights.sbomify.com/MAL-2025-14776/): Malicious code in arcade_jt9vr_apl2t_valley (npm) (malicious package)
- [MAL-2025-147759](https://insights.sbomify.com/MAL-2025-147759/): Malicious code in sedna-centaurus-algol-ini (npm) (malicious package)
- [MAL-2025-147758](https://insights.sbomify.com/MAL-2025-147758/): Malicious code in sedna-castor-nightwatch-barnard (npm) (malicious package)
- [MAL-2025-147757](https://insights.sbomify.com/MAL-2025-147757/): Malicious code in sedna-carpo-yaml-server (npm) (malicious package)
- [MAL-2025-147756](https://insights.sbomify.com/MAL-2025-147756/): Malicious code in sedna-carpo-command-postcss-loader (npm) (malicious package)
- [MAL-2025-147755](https://insights.sbomify.com/MAL-2025-147755/): Malicious code in sedna-cache-toml-async (npm) (malicious package)
- [MAL-2025-147754](https://insights.sbomify.com/MAL-2025-147754/): Malicious code in sedna-barnard-bunyan-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-147753](https://insights.sbomify.com/MAL-2025-147753/): Malicious code in sedna-altair-jupiter-hermes (npm) (malicious package)
- [MAL-2025-147752](https://insights.sbomify.com/MAL-2025-147752/): Malicious code in secure-amethyst-barracuda (npm) (malicious package)
- [MAL-2025-147751](https://insights.sbomify.com/MAL-2025-147751/): Malicious code in scripts-webdriver-mocha-promise-loglevel (npm) (malicious package)
- [MAL-2025-147750](https://insights.sbomify.com/MAL-2025-147750/): Malicious code in scripts-typeorm-thuban-perseus (npm) (malicious package)
- [MAL-2025-14775](https://insights.sbomify.com/MAL-2025-14775/): Malicious code in arcade_jpqzi_hjbx2_fountain (npm) (malicious package)
- [MAL-2025-147749](https://insights.sbomify.com/MAL-2025-147749/): Malicious code in scripts-transform-markdown-norma (npm) (malicious package)
- [MAL-2025-147748](https://insights.sbomify.com/MAL-2025-147748/): Malicious code in scripts-sequelize-init-publish (npm) (malicious package)
- [MAL-2025-147747](https://insights.sbomify.com/MAL-2025-147747/): Malicious code in scripts-semantic-release-galaxy-apollo (npm) (malicious package)
- [MAL-2025-147746](https://insights.sbomify.com/MAL-2025-147746/): Malicious code in scripts-sadr-parcel-markdown (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1401/