# Vulnerabilities published in 2025 - [MAL-2025-147745](https://insights.sbomify.com/MAL-2025-147745/): Malicious code in scripts-quark-antares-nuxtjs (npm) (malicious package) - [MAL-2025-147744](https://insights.sbomify.com/MAL-2025-147744/): Malicious code in scripts-quantum-andromeda-meteor (npm) (malicious package) - [MAL-2025-147743](https://insights.sbomify.com/MAL-2025-147743/): Malicious code in scripts-prompts-umbra-charon (npm) (malicious package) - [MAL-2025-147742](https://insights.sbomify.com/MAL-2025-147742/): Malicious code in scripts-pino-event-regulus (npm) (malicious package) - [MAL-2025-147741](https://insights.sbomify.com/MAL-2025-147741/): Malicious code in scripts-oberon-draco-pavo (npm) (malicious package) - [MAL-2025-147740](https://insights.sbomify.com/MAL-2025-147740/): Malicious code in scripts-neptune-sails-ganymede (npm) (malicious package) - [MAL-2025-14774](https://insights.sbomify.com/MAL-2025-14774/): Malicious code in arcade_j6cyb_yyz51_aroma (npm) (malicious package) - [MAL-2025-147739](https://insights.sbomify.com/MAL-2025-147739/): Malicious code in scripts-native-materialize-europa (npm) (malicious package) - [MAL-2025-147738](https://insights.sbomify.com/MAL-2025-147738/): Malicious code in scripts-mui-browserify-bellatrix (npm) (malicious package) - [MAL-2025-147737](https://insights.sbomify.com/MAL-2025-147737/): Malicious code in scripts-miranda-nconf-apollo (npm) (malicious package) - [MAL-2025-147736](https://insights.sbomify.com/MAL-2025-147736/): Malicious code in scripts-markdown-celeste-atlas (npm) (malicious package) - [MAL-2025-147735](https://insights.sbomify.com/MAL-2025-147735/): Malicious code in scripts-loop-zephyr-lynx (npm) (malicious package) - [MAL-2025-147734](https://insights.sbomify.com/MAL-2025-147734/): Malicious code in scripts-grunt-figures-sirius (npm) (malicious package) - [MAL-2025-147733](https://insights.sbomify.com/MAL-2025-147733/): Malicious code in scripts-got-electron-quark (npm) (malicious package) - [MAL-2025-147732](https://insights.sbomify.com/MAL-2025-147732/): Malicious code in scripts-foundation-resolvers-bulma (npm) (malicious package) - [MAL-2025-147731](https://insights.sbomify.com/MAL-2025-147731/): Malicious code in scripts-fork-duplex-meteor (npm) (malicious package) - [MAL-2025-147730](https://insights.sbomify.com/MAL-2025-147730/): Malicious code in scripts-eridanus-duplex-spawn (npm) (malicious package) - [MAL-2025-14773](https://insights.sbomify.com/MAL-2025-14773/): Malicious code in arcade_ceg1b_stu4q_twilight (npm) (malicious package) - [MAL-2025-147729](https://insights.sbomify.com/MAL-2025-147729/): Malicious code in scripts-equinox-achernar-init (npm) (malicious package) - [MAL-2025-147728](https://insights.sbomify.com/MAL-2025-147728/): Malicious code in scripts-concurrently-grunt-yildun (npm) (malicious package) - [MAL-2025-147727](https://insights.sbomify.com/MAL-2025-147727/): Malicious code in scripts-ceres-command-grus (npm) (malicious package) - [MAL-2025-147726](https://insights.sbomify.com/MAL-2025-147726/): Malicious code in scripts-build-ganymede-altair (npm) (malicious package) - [MAL-2025-147725](https://insights.sbomify.com/MAL-2025-147725/): Malicious code in scripts-blaze-css-loader-venus (npm) (malicious package) - [MAL-2025-147724](https://insights.sbomify.com/MAL-2025-147724/): Malicious code in scripts-arcturus-capella-query (npm) (malicious package) - [MAL-2025-147723](https://insights.sbomify.com/MAL-2025-147723/): Malicious code in scorpius-yaml-ignite-process (npm) (malicious package) - [MAL-2025-147722](https://insights.sbomify.com/MAL-2025-147722/): Malicious code in scorpius-xenon-ariel-delphinus (npm) (malicious package) - [MAL-2025-147721](https://insights.sbomify.com/MAL-2025-147721/): Malicious code in scorpius-vuetify-metalsmith-mini-css-extract-plugin (npm) (malicious package) - [MAL-2025-147720](https://insights.sbomify.com/MAL-2025-147720/): Malicious code in scorpius-upgrade-spica-virgo (npm) (malicious package) - [MAL-2025-14772](https://insights.sbomify.com/MAL-2025-14772/): Malicious code in arcade_bjchx_77fv1_pulse (npm) (malicious package) - [MAL-2025-147719](https://insights.sbomify.com/MAL-2025-147719/): Malicious code in scorpius-umbra-electron-builder-elektra (npm) (malicious package) - [MAL-2025-147718](https://insights.sbomify.com/MAL-2025-147718/): Malicious code in scorpius-uglify-js-grunt-mdx (npm) (malicious package) - [MAL-2025-147717](https://insights.sbomify.com/MAL-2025-147717/): Malicious code in scorpius-thuban-algol-bootstrap (npm) (malicious package) - [MAL-2025-147716](https://insights.sbomify.com/MAL-2025-147716/): Malicious code in scorpius-shelljs-jekyll-meissa (npm) (malicious package) - [MAL-2025-147715](https://insights.sbomify.com/MAL-2025-147715/): Malicious code in scorpius-scripts-flare-gatsby (npm) (malicious package) - [MAL-2025-147714](https://insights.sbomify.com/MAL-2025-147714/): Malicious code in scorpius-sass-loader-jekyll-upgrade (npm) (malicious package) - [MAL-2025-147713](https://insights.sbomify.com/MAL-2025-147713/): Malicious code in scorpius-puppeteer-gravity-webdriverio (npm) (malicious package) - [MAL-2025-147712](https://insights.sbomify.com/MAL-2025-147712/): Malicious code in scorpius-publish-scripts-xerxes (npm) (malicious package) - [MAL-2025-147711](https://insights.sbomify.com/MAL-2025-147711/): Malicious code in scorpius-nodejs-sagitta-cz-conventional-changelog (npm) (malicious package) - [MAL-2025-147710](https://insights.sbomify.com/MAL-2025-147710/): Malicious code in scorpius-miranda-await-polaris (npm) (malicious package) - [MAL-2025-14771](https://insights.sbomify.com/MAL-2025-14771/): Malicious code in arcade_a86zh_bj10r_mirage (npm) (malicious package) - [MAL-2025-147709](https://insights.sbomify.com/MAL-2025-147709/): Malicious code in scorpius-ganymede-nightmare-semantic-ui (npm) (malicious package) - [MAL-2025-147708](https://insights.sbomify.com/MAL-2025-147708/): Malicious code in scorpius-europa-nightwatch-child-process (npm) (malicious package) - [MAL-2025-147707](https://insights.sbomify.com/MAL-2025-147707/): Malicious code in scorpius-deimos-hugo-csv (npm) (malicious package) - [MAL-2025-147706](https://insights.sbomify.com/MAL-2025-147706/): Malicious code in scorpius-config-ursa-install (npm) (malicious package) - [MAL-2025-147705](https://insights.sbomify.com/MAL-2025-147705/): Malicious code in scorpius-chariklo-nextjs-nodemon (npm) (malicious package) - [MAL-2025-147704](https://insights.sbomify.com/MAL-2025-147704/): Malicious code in scorpius-centauri-europa-superagent (npm) (malicious package) - [MAL-2025-147703](https://insights.sbomify.com/MAL-2025-147703/): Malicious code in scorpius-browserify-yaml-eris (npm) (malicious package) - [MAL-2025-147702](https://insights.sbomify.com/MAL-2025-147702/): Malicious code in scorpius-betelgeuse-repository-nodejs (npm) (malicious package) - [MAL-2025-147701](https://insights.sbomify.com/MAL-2025-147701/): Malicious code in schema-zenobia-lint-staged-postcss (npm) (malicious package) - [MAL-2025-147700](https://insights.sbomify.com/MAL-2025-147700/): Malicious code in schema-websockets-loglevel-readable (npm) (malicious package) - [MAL-2025-14770](https://insights.sbomify.com/MAL-2025-14770/): Malicious code in arcade_3kkqt_wa5m2_bramble (npm) (malicious package) - [MAL-2025-1477](https://insights.sbomify.com/MAL-2025-1477/): Malicious code in buzzblocks (npm) (malicious package) - [MAL-2025-147699](https://insights.sbomify.com/MAL-2025-147699/): Malicious code in schema-tethys-vortex-corvus (npm) (malicious package) - [MAL-2025-147698](https://insights.sbomify.com/MAL-2025-147698/): Malicious code in schema-semantic-release-andromeda-celeste (npm) (malicious package) - [MAL-2025-147697](https://insights.sbomify.com/MAL-2025-147697/): Malicious code in schema-init-less-loader-cosmos (npm) (malicious package) - [MAL-2025-147696](https://insights.sbomify.com/MAL-2025-147696/): Malicious code in schema-init-cosmiconfig-postcss-loader (npm) (malicious package) - [MAL-2025-147695](https://insights.sbomify.com/MAL-2025-147695/): Malicious code in schema-husky-webpack-acamar (npm) (malicious package) - [MAL-2025-147694](https://insights.sbomify.com/MAL-2025-147694/): Malicious code in schema-hermes-protractor-figures (npm) (malicious package) - [MAL-2025-147693](https://insights.sbomify.com/MAL-2025-147693/): Malicious code in schema-helmet-ursa-eleventy (npm) (malicious package) - [MAL-2025-147692](https://insights.sbomify.com/MAL-2025-147692/): Malicious code in schema-dotenv-safe-europa-castor (npm) (malicious package) - [MAL-2025-147691](https://insights.sbomify.com/MAL-2025-147691/): Malicious code in schema-dione-meissa-kronos (npm) (malicious package) - [MAL-2025-147690](https://insights.sbomify.com/MAL-2025-147690/): Malicious code in schema-csv-octans-eslint-plugin (npm) (malicious package) - [MAL-2025-14769](https://insights.sbomify.com/MAL-2025-14769/): Malicious code in arc-macro-s3-bucket (npm) (malicious package) - [MAL-2025-147689](https://insights.sbomify.com/MAL-2025-147689/): Malicious code in schema-corvus-bunyan-slidev (npm) (malicious package) - [MAL-2025-147688](https://insights.sbomify.com/MAL-2025-147688/): Malicious code in schema-arcturus-relay-hugo (npm) (malicious package) - [MAL-2025-147687](https://insights.sbomify.com/MAL-2025-147687/): Malicious code in schema-andromeda-typeorm-link (npm) (malicious package) - [MAL-2025-147686](https://insights.sbomify.com/MAL-2025-147686/): Malicious code in sass-loader-zephyr-hexo-zephyr (npm) (malicious package) - [MAL-2025-147685](https://insights.sbomify.com/MAL-2025-147685/): Malicious code in sass-loader-xml-altair-dotenv-safe (npm) (malicious package) - [MAL-2025-147684](https://insights.sbomify.com/MAL-2025-147684/): Malicious code in sass-loader-redis-atlas-command (npm) (malicious package) - [MAL-2025-147683](https://insights.sbomify.com/MAL-2025-147683/): Malicious code in sass-loader-rate-limiter-aurora-playwright (npm) (malicious package) - [MAL-2025-147682](https://insights.sbomify.com/MAL-2025-147682/): Malicious code in sass-loader-quasar-transport-upgrade (npm) (malicious package) - [MAL-2025-147681](https://insights.sbomify.com/MAL-2025-147681/): Malicious code in sass-loader-package-sync-parcel (npm) (malicious package) - [MAL-2025-147680](https://insights.sbomify.com/MAL-2025-147680/): Malicious code in sass-loader-npm-markdownlint-apollo (npm) (malicious package) - [MAL-2025-14768](https://insights.sbomify.com/MAL-2025-14768/): Malicious code in arc-branch-to-cmsg (npm) (malicious package) - [MAL-2025-147679](https://insights.sbomify.com/MAL-2025-147679/): Malicious code in sass-loader-nightwatch-await-hermes (npm) (malicious package) - [MAL-2025-147678](https://insights.sbomify.com/MAL-2025-147678/): Malicious code in sass-loader-native-jsonp-callisto (npm) (malicious package) - [MAL-2025-147677](https://insights.sbomify.com/MAL-2025-147677/): Malicious code in sass-loader-mui-library-optimize-css-assets-webpack-plugin (npm) (malicious package) - [MAL-2025-147676](https://insights.sbomify.com/MAL-2025-147676/): Malicious code in sass-loader-mongodb-elara-norma (npm) (malicious package) - [MAL-2025-147675](https://insights.sbomify.com/MAL-2025-147675/): Malicious code in sass-loader-meissa-pino-pretty-zenobia (npm) (malicious package) - [MAL-2025-147674](https://insights.sbomify.com/MAL-2025-147674/): Malicious code in sass-loader-magellan-build-reveal-md (npm) (malicious package) - [MAL-2025-147673](https://insights.sbomify.com/MAL-2025-147673/): Malicious code in sass-loader-leda-spica-antares (npm) (malicious package) - [MAL-2025-147672](https://insights.sbomify.com/MAL-2025-147672/): Malicious code in sass-loader-lacerta-axios-scripts (npm) (malicious package) - [MAL-2025-147671](https://insights.sbomify.com/MAL-2025-147671/): Malicious code in sass-loader-jovian-axios-framework (npm) (malicious package) - [MAL-2025-147670](https://insights.sbomify.com/MAL-2025-147670/): Malicious code in sass-loader-husky-kaus-cz-conventional-changelog (npm) (malicious package) - [MAL-2025-14767](https://insights.sbomify.com/MAL-2025-14767/): Malicious code in arbprov (npm) (malicious package) - [MAL-2025-147669](https://insights.sbomify.com/MAL-2025-147669/): Malicious code in sass-loader-gravity-draco-miranda (npm) (malicious package) - [MAL-2025-147668](https://insights.sbomify.com/MAL-2025-147668/): Malicious code in sass-loader-gatsby-chariklo-postcss-loader (npm) (malicious package) - [MAL-2025-147667](https://insights.sbomify.com/MAL-2025-147667/): Malicious code in sass-loader-foundation-jsonp-react-bootstrap (npm) (malicious package) - [MAL-2025-147666](https://insights.sbomify.com/MAL-2025-147666/): Malicious code in sass-loader-forever-vulcan-mysql (npm) (malicious package) - [MAL-2025-147665](https://insights.sbomify.com/MAL-2025-147665/): Malicious code in sass-loader-corvus-kastra-jest (npm) (malicious package) - [MAL-2025-147664](https://insights.sbomify.com/MAL-2025-147664/): Malicious code in sass-loader-cors-forever-firebase (npm) (malicious package) - [MAL-2025-147663](https://insights.sbomify.com/MAL-2025-147663/): Malicious code in sass-loader-chromedriver-atlas-webdriver-mocha (npm) (malicious package) - [MAL-2025-147662](https://insights.sbomify.com/MAL-2025-147662/): Malicious code in sass-loader-cassini-socketio-wasat (npm) (malicious package) - [MAL-2025-147661](https://insights.sbomify.com/MAL-2025-147661/): Malicious code in sass-loader-callback-oauth-sagitta (npm) (malicious package) - [MAL-2025-147660](https://insights.sbomify.com/MAL-2025-147660/): Malicious code in sass-loader-bulma-eleventy-vuepress (npm) (malicious package) - [MAL-2025-14766](https://insights.sbomify.com/MAL-2025-14766/): Malicious code in arbolgen (npm) (malicious package) - [MAL-2025-147659](https://insights.sbomify.com/MAL-2025-147659/): Malicious code in sass-loader-algol-perseus-event (npm) (malicious package) - [MAL-2025-147658](https://insights.sbomify.com/MAL-2025-147658/): Malicious code in sails-vuetify-remark-nconf (npm) (malicious package) - [MAL-2025-147657](https://insights.sbomify.com/MAL-2025-147657/): Malicious code in sails-terser-bulma-dependencies (npm) (malicious package) - [MAL-2025-147656](https://insights.sbomify.com/MAL-2025-147656/): Malicious code in sails-nodemon-apollo-hugo (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1402/