# Vulnerabilities published in 2025


- [MAL-2025-147655](https://insights.sbomify.com/MAL-2025-147655/): Malicious code in sails-node-config-ganymede-cors (npm) (malicious package)
- [MAL-2025-147654](https://insights.sbomify.com/MAL-2025-147654/): Malicious code in sails-nightwatch-lint-fornax (npm) (malicious package)
- [MAL-2025-147653](https://insights.sbomify.com/MAL-2025-147653/): Malicious code in sails-neptune-scripts-auth0 (npm) (malicious package)
- [MAL-2025-147652](https://insights.sbomify.com/MAL-2025-147652/): Malicious code in sails-markdownlint-husky-module (npm) (malicious package)
- [MAL-2025-147651](https://insights.sbomify.com/MAL-2025-147651/): Malicious code in sails-lint-staged-dotenv-rollup-plugin (npm) (malicious package)
- [MAL-2025-147650](https://insights.sbomify.com/MAL-2025-147650/): Malicious code in sails-juno-bulma-gatsby (npm) (malicious package)
- [MAL-2025-14765](https://insights.sbomify.com/MAL-2025-14765/): Malicious code in arandroid (npm) (malicious package)
- [MAL-2025-147649](https://insights.sbomify.com/MAL-2025-147649/): Malicious code in sails-javascript-nodejs-achernar (npm) (malicious package)
- [MAL-2025-147648](https://insights.sbomify.com/MAL-2025-147648/): Malicious code in sails-jabbah-pegasus-orbit (npm) (malicious package)
- [MAL-2025-147647](https://insights.sbomify.com/MAL-2025-147647/): Malicious code in sails-farout-nightwatch-typeorm (npm) (malicious package)
- [MAL-2025-147646](https://insights.sbomify.com/MAL-2025-147646/): Malicious code in sails-duplex-postgres-geckodriver (npm) (malicious package)
- [MAL-2025-147645](https://insights.sbomify.com/MAL-2025-147645/): Malicious code in sails-dotenv-safe-centaurus-juno (npm) (malicious package)
- [MAL-2025-147644](https://insights.sbomify.com/MAL-2025-147644/): Malicious code in sails-dependencies-metalsmith-equinox (npm) (malicious package)
- [MAL-2025-147643](https://insights.sbomify.com/MAL-2025-147643/): Malicious code in sails-delphinus-build-react-bootstrap (npm) (malicious package)
- [MAL-2025-147642](https://insights.sbomify.com/MAL-2025-147642/): Malicious code in sails-cygnus-aquarius-react-bootstrap (npm) (malicious package)
- [MAL-2025-147641](https://insights.sbomify.com/MAL-2025-147641/): Malicious code in sails-cosmos-run-script-envconfig (npm) (malicious package)
- [MAL-2025-147640](https://insights.sbomify.com/MAL-2025-147640/): Malicious code in sails-configstore-umbriel-magellan (npm) (malicious package)
- [MAL-2025-14764](https://insights.sbomify.com/MAL-2025-14764/): Malicious code in arakapub (npm) (malicious package)
- [MAL-2025-147639](https://insights.sbomify.com/MAL-2025-147639/): Malicious code in sails-concurrently-css-minimizer-webpack-plugin-wasat (npm) (malicious package)
- [MAL-2025-147638](https://insights.sbomify.com/MAL-2025-147638/): Malicious code in sails-colors-aquarius-cache (npm) (malicious package)
- [MAL-2025-147637](https://insights.sbomify.com/MAL-2025-147637/): Malicious code in sails-changelog-gulp-lint-staged (npm) (malicious package)
- [MAL-2025-147636](https://insights.sbomify.com/MAL-2025-147636/): Malicious code in sails-atlas-achernar-start (npm) (malicious package)
- [MAL-2025-147635](https://insights.sbomify.com/MAL-2025-147635/): Malicious code in sails-aquarius-elektra-koa (npm) (malicious package)
- [MAL-2025-147634](https://insights.sbomify.com/MAL-2025-147634/): Malicious code in sagitta-zephyr-prettier-stylelint-levels (npm) (malicious package)
- [MAL-2025-147633](https://insights.sbomify.com/MAL-2025-147633/): Malicious code in sagitta-zephyr-andromeda-postcss-loader (npm) (malicious package)
- [MAL-2025-147632](https://insights.sbomify.com/MAL-2025-147632/): Malicious code in sagitta-yakutsk-celeste-procyon (npm) (malicious package)
- [MAL-2025-147631](https://insights.sbomify.com/MAL-2025-147631/): Malicious code in sagitta-xml-child-process-loopback (npm) (malicious package)
- [MAL-2025-147630](https://insights.sbomify.com/MAL-2025-147630/): Malicious code in sagitta-xenon-chariklo-eleventy (npm) (malicious package)
- [MAL-2025-14763](https://insights.sbomify.com/MAL-2025-14763/): Malicious code in arabicstring (npm) (malicious package)
- [MAL-2025-147629](https://insights.sbomify.com/MAL-2025-147629/): Malicious code in sagitta-webpack-karma-materialize (npm) (malicious package)
- [MAL-2025-147628](https://insights.sbomify.com/MAL-2025-147628/): Malicious code in sagitta-vuepress-delphinus-init (npm) (malicious package)
- [MAL-2025-147627](https://insights.sbomify.com/MAL-2025-147627/): Malicious code in sagitta-vortex-norma-mini-css-extract-plugin (npm) (malicious package)
- [MAL-2025-147626](https://insights.sbomify.com/MAL-2025-147626/): Malicious code in sagitta-umbriel-aldebaran-auriga (npm) (malicious package)
- [MAL-2025-147625](https://insights.sbomify.com/MAL-2025-147625/): Malicious code in sagitta-triton-umbra-inquirer (npm) (malicious package)
- [MAL-2025-147624](https://insights.sbomify.com/MAL-2025-147624/): Malicious code in sagitta-triton-rehype-octans (npm) (malicious package)
- [MAL-2025-147623](https://insights.sbomify.com/MAL-2025-147623/): Malicious code in sagitta-supervisor-publish-bunyan (npm) (malicious package)
- [MAL-2025-147622](https://insights.sbomify.com/MAL-2025-147622/): Malicious code in sagitta-superagent-non-blocking-titan (npm) (malicious package)
- [MAL-2025-147621](https://insights.sbomify.com/MAL-2025-147621/): Malicious code in sagitta-standard-corvus-slides (npm) (malicious package)
- [MAL-2025-147620](https://insights.sbomify.com/MAL-2025-147620/): Malicious code in sagitta-spica-acamar-spawn (npm) (malicious package)
- [MAL-2025-14762](https://insights.sbomify.com/MAL-2025-14762/): Malicious code in ar_transaction_changes (npm) (malicious package)
- [MAL-2025-147619](https://insights.sbomify.com/MAL-2025-147619/): Malicious code in sagitta-soap-jabbah-perseus (npm) (malicious package)
- [MAL-2025-147618](https://insights.sbomify.com/MAL-2025-147618/): Malicious code in sagitta-sirius-express-async (npm) (malicious package)
- [MAL-2025-147617](https://insights.sbomify.com/MAL-2025-147617/): Malicious code in sagitta-sadr-taurus-event (npm) (malicious package)
- [MAL-2025-147616](https://insights.sbomify.com/MAL-2025-147616/): Malicious code in sagitta-relay-soap-development (npm) (malicious package)
- [MAL-2025-147615](https://insights.sbomify.com/MAL-2025-147615/): Malicious code in sagitta-registry-andromeda-postcss (npm) (malicious package)
- [MAL-2025-147614](https://insights.sbomify.com/MAL-2025-147614/): Malicious code in sagitta-quito-norma-iota (npm) (malicious package)
- [MAL-2025-147613](https://insights.sbomify.com/MAL-2025-147613/): Malicious code in sagitta-quark-browserify-ariel (npm) (malicious package)
- [MAL-2025-147612](https://insights.sbomify.com/MAL-2025-147612/): Malicious code in sagitta-publish-npm-foundation (npm) (malicious package)
- [MAL-2025-147611](https://insights.sbomify.com/MAL-2025-147611/): Malicious code in sagitta-publish-less-figures (npm) (malicious package)
- [MAL-2025-147610](https://insights.sbomify.com/MAL-2025-147610/): Malicious code in sagitta-postcss-uninstall-delphinus (npm) (malicious package)
- [MAL-2025-14761](https://insights.sbomify.com/MAL-2025-14761/): Malicious code in ar9_atm_project_03 (npm) (malicious package)
- [MAL-2025-147609](https://insights.sbomify.com/MAL-2025-147609/): Malicious code in sagitta-polaris-markdownlint-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-147608](https://insights.sbomify.com/MAL-2025-147608/): Malicious code in sagitta-perseus-figures-loop (npm) (malicious package)
- [MAL-2025-147607](https://insights.sbomify.com/MAL-2025-147607/): Malicious code in sagitta-oberon-json-sadr (npm) (malicious package)
- [MAL-2025-147606](https://insights.sbomify.com/MAL-2025-147606/): Malicious code in sagitta-module-oberon-phenomic (npm) (malicious package)
- [MAL-2025-147605](https://insights.sbomify.com/MAL-2025-147605/): Malicious code in sagitta-lyra-leda-xml (npm) (malicious package)
- [MAL-2025-147604](https://insights.sbomify.com/MAL-2025-147604/): Malicious code in sagitta-luna-uninstall-sadr (npm) (malicious package)
- [MAL-2025-147603](https://insights.sbomify.com/MAL-2025-147603/): Malicious code in sagitta-lint-staged-toml-eleventy (npm) (malicious package)
- [MAL-2025-147602](https://insights.sbomify.com/MAL-2025-147602/): Malicious code in sagitta-link-cz-conventional-changelog-hyperion (npm) (malicious package)
- [MAL-2025-147601](https://insights.sbomify.com/MAL-2025-147601/): Malicious code in sagitta-koa-io-axios (npm) (malicious package)
- [MAL-2025-147600](https://insights.sbomify.com/MAL-2025-147600/): Malicious code in sagitta-io-mutation-process (npm) (malicious package)
- [MAL-2025-14760](https://insights.sbomify.com/MAL-2025-14760/): Malicious code in aquarius-proxima-grunt-eclipse (npm) (malicious package)
- [MAL-2025-1476](https://insights.sbomify.com/MAL-2025-1476/): Malicious code in @idps/contrib-client (npm) (malicious package)
- [MAL-2025-147599](https://insights.sbomify.com/MAL-2025-147599/): Malicious code in sagitta-indus-supervisor-non-blocking (npm) (malicious package)
- [MAL-2025-147598](https://insights.sbomify.com/MAL-2025-147598/): Malicious code in sagitta-helmet-vuepress-spectron (npm) (malicious package)
- [MAL-2025-147597](https://insights.sbomify.com/MAL-2025-147597/): Malicious code in sagitta-ganymede-ganymede-dactyl (npm) (malicious package)
- [MAL-2025-147596](https://insights.sbomify.com/MAL-2025-147596/): Malicious code in sagitta-express-reveal-md-orbit (npm) (malicious package)
- [MAL-2025-147595](https://insights.sbomify.com/MAL-2025-147595/): Malicious code in sagitta-europa-xerxes-relay (npm) (malicious package)
- [MAL-2025-147594](https://insights.sbomify.com/MAL-2025-147594/): Malicious code in sagitta-elara-yonder-testcafe (npm) (malicious package)
- [MAL-2025-147593](https://insights.sbomify.com/MAL-2025-147593/): Malicious code in sagitta-elara-dotenv-safe-yakutsk (npm) (malicious package)
- [MAL-2025-147592](https://insights.sbomify.com/MAL-2025-147592/): Malicious code in sagitta-dotenv-parse-variables-sedna-mutation (npm) (malicious package)
- [MAL-2025-147591](https://insights.sbomify.com/MAL-2025-147591/): Malicious code in sagitta-development-deneb-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-147590](https://insights.sbomify.com/MAL-2025-147590/): Malicious code in sagitta-dependencies-helios-kinetic (npm) (malicious package)
- [MAL-2025-14759](https://insights.sbomify.com/MAL-2025-14759/): Malicious code in aquarius-pino-aurora-eridanus (npm) (malicious package)
- [MAL-2025-147589](https://insights.sbomify.com/MAL-2025-147589/): Malicious code in sagitta-commitizen-xanthus-cache (npm) (malicious package)
- [MAL-2025-147588](https://insights.sbomify.com/MAL-2025-147588/): Malicious code in sagitta-colors-titan-canopus (npm) (malicious package)
- [MAL-2025-147587](https://insights.sbomify.com/MAL-2025-147587/): Malicious code in sagitta-child-process-zenith-fork (npm) (malicious package)
- [MAL-2025-147586](https://insights.sbomify.com/MAL-2025-147586/): Malicious code in sagitta-chariklo-neptune-sirius (npm) (malicious package)
- [MAL-2025-147585](https://insights.sbomify.com/MAL-2025-147585/): Malicious code in sagitta-chakra-ui-nightmare-oauth (npm) (malicious package)
- [MAL-2025-147584](https://insights.sbomify.com/MAL-2025-147584/): Malicious code in sagitta-cache-cressida-schema (npm) (malicious package)
- [MAL-2025-147583](https://insights.sbomify.com/MAL-2025-147583/): Malicious code in sagitta-bunyan-warp-remark (npm) (malicious package)
- [MAL-2025-147582](https://insights.sbomify.com/MAL-2025-147582/): Malicious code in sagitta-browserify-zephyr-quark (npm) (malicious package)
- [MAL-2025-147581](https://insights.sbomify.com/MAL-2025-147581/): Malicious code in sagitta-bellatrix-procyon-fork (npm) (malicious package)
- [MAL-2025-147580](https://insights.sbomify.com/MAL-2025-147580/): Malicious code in sagitta-await-nightwatch-stream (npm) (malicious package)
- [MAL-2025-14758](https://insights.sbomify.com/MAL-2025-14758/): Malicious code in aquarius-entanglement-hydrogeology-geodynamo (npm) (malicious package)
- [MAL-2025-147579](https://insights.sbomify.com/MAL-2025-147579/): Malicious code in sagitta-altair-winston-pipe (npm) (malicious package)
- [MAL-2025-147578](https://insights.sbomify.com/MAL-2025-147578/): Malicious code in sadr-upgrade-airbnb-carina (npm) (malicious package)
- [MAL-2025-147577](https://insights.sbomify.com/MAL-2025-147577/): Malicious code in sadr-scripts-css-loader-version (npm) (malicious package)
- [MAL-2025-147576](https://insights.sbomify.com/MAL-2025-147576/): Malicious code in sadr-scorpius-quito-fusion (npm) (malicious package)
- [MAL-2025-147575](https://insights.sbomify.com/MAL-2025-147575/): Malicious code in sadr-query-phoenix-configstore (npm) (malicious package)
- [MAL-2025-147574](https://insights.sbomify.com/MAL-2025-147574/): Malicious code in sadr-process-ini-sync (npm) (malicious package)
- [MAL-2025-147573](https://insights.sbomify.com/MAL-2025-147573/): Malicious code in sadr-private-cache-cygnus (npm) (malicious package)
- [MAL-2025-147572](https://insights.sbomify.com/MAL-2025-147572/): Malicious code in sadr-prettier-plugin-markdown-luna-playwright (npm) (malicious package)
- [MAL-2025-147571](https://insights.sbomify.com/MAL-2025-147571/): Malicious code in sadr-prettier-plugin-markdown-carpo-husky (npm) (malicious package)
- [MAL-2025-147570](https://insights.sbomify.com/MAL-2025-147570/): Malicious code in sadr-orbit-publish-request (npm) (malicious package)
- [MAL-2025-14757](https://insights.sbomify.com/MAL-2025-14757/): Malicious code in aquarius-elara-andromeda-equinox (npm) (malicious package)
- [MAL-2025-147569](https://insights.sbomify.com/MAL-2025-147569/): Malicious code in sadr-oauth-less-magellan (npm) (malicious package)
- [MAL-2025-147568](https://insights.sbomify.com/MAL-2025-147568/): Malicious code in sadr-nightwatch-version-subscription (npm) (malicious package)
- [MAL-2025-147567](https://insights.sbomify.com/MAL-2025-147567/): Malicious code in sadr-lyra-eclipse-eslint-plugin (npm) (malicious package)
- [MAL-2025-147566](https://insights.sbomify.com/MAL-2025-147566/): Malicious code in sadr-loglevel-bootstrap-betelgeuse (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1403/