# Vulnerabilities published in 2025


- [MAL-2025-147565](https://insights.sbomify.com/MAL-2025-147565/): Malicious code in sadr-jupiter-jovian-halley (npm) (malicious package)
- [MAL-2025-147564](https://insights.sbomify.com/MAL-2025-147564/): Malicious code in sadr-jest-tool-wezen (npm) (malicious package)
- [MAL-2025-147563](https://insights.sbomify.com/MAL-2025-147563/): Malicious code in sadr-jest-await-elektra (npm) (malicious package)
- [MAL-2025-147562](https://insights.sbomify.com/MAL-2025-147562/): Malicious code in sadr-hyperion-process-phoenix (npm) (malicious package)
- [MAL-2025-147561](https://insights.sbomify.com/MAL-2025-147561/): Malicious code in sadr-hermes-fornax-europa (npm) (malicious package)
- [MAL-2025-147560](https://insights.sbomify.com/MAL-2025-147560/): Malicious code in sadr-envconfig-auth0-webpack (npm) (malicious package)
- [MAL-2025-14756](https://insights.sbomify.com/MAL-2025-14756/): Malicious code in aquarius-delphinus-less-iota (npm) (malicious package)
- [MAL-2025-147559](https://insights.sbomify.com/MAL-2025-147559/): Malicious code in sadr-css-loader-kaus-leda (npm) (malicious package)
- [MAL-2025-147558](https://insights.sbomify.com/MAL-2025-147558/): Malicious code in sadr-corvus-canopus-express (npm) (malicious package)
- [MAL-2025-147557](https://insights.sbomify.com/MAL-2025-147557/): Malicious code in sadr-async-rimraf-blaze (npm) (malicious package)
- [MAL-2025-147556](https://insights.sbomify.com/MAL-2025-147556/): Malicious code in run-script-yakutsk-halley-wasat (npm) (malicious package)
- [MAL-2025-147555](https://insights.sbomify.com/MAL-2025-147555/): Malicious code in run-script-vuepress-bootes-enceladus (npm) (malicious package)
- [MAL-2025-147554](https://insights.sbomify.com/MAL-2025-147554/): Malicious code in run-script-update-tethys-jovian (npm) (malicious package)
- [MAL-2025-147553](https://insights.sbomify.com/MAL-2025-147553/): Malicious code in run-script-testcafe-leda-update (npm) (malicious package)
- [MAL-2025-147552](https://insights.sbomify.com/MAL-2025-147552/): Malicious code in run-script-testcafe-astro-ursa (npm) (malicious package)
- [MAL-2025-147551](https://insights.sbomify.com/MAL-2025-147551/): Malicious code in run-script-pyxis-chromedriver-sqlite (npm) (malicious package)
- [MAL-2025-147550](https://insights.sbomify.com/MAL-2025-147550/): Malicious code in run-script-ophiuchus-cors-neptune (npm) (malicious package)
- [MAL-2025-14755](https://insights.sbomify.com/MAL-2025-14755/): Malicious code in aquarius-async-prettier-gulp (npm) (malicious package)
- [MAL-2025-147549](https://insights.sbomify.com/MAL-2025-147549/): Malicious code in run-script-nconf-hermes-commitizen (npm) (malicious package)
- [MAL-2025-147548](https://insights.sbomify.com/MAL-2025-147548/): Malicious code in run-script-mysql-antd-csv (npm) (malicious package)
- [MAL-2025-147547](https://insights.sbomify.com/MAL-2025-147547/): Malicious code in run-script-metalsmith-init-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-147546](https://insights.sbomify.com/MAL-2025-147546/): Malicious code in run-script-halley-reveal-md-passport (npm) (malicious package)
- [MAL-2025-147545](https://insights.sbomify.com/MAL-2025-147545/): Malicious code in run-script-gulp-hydra-jekyll (npm) (malicious package)
- [MAL-2025-147544](https://insights.sbomify.com/MAL-2025-147544/): Malicious code in run-script-got-cross-env-yaml (npm) (malicious package)
- [MAL-2025-147543](https://insights.sbomify.com/MAL-2025-147543/): Malicious code in run-script-fornax-buffer-inquirer (npm) (malicious package)
- [MAL-2025-147542](https://insights.sbomify.com/MAL-2025-147542/): Malicious code in run-script-eclipse-library-blaze (npm) (malicious package)
- [MAL-2025-147541](https://insights.sbomify.com/MAL-2025-147541/): Malicious code in run-script-charon-rigel-koa (npm) (malicious package)
- [MAL-2025-147540](https://insights.sbomify.com/MAL-2025-147540/): Malicious code in run-script-changelog-publish-canopus (npm) (malicious package)
- [MAL-2025-14754](https://insights.sbomify.com/MAL-2025-14754/): Malicious code in apwimgr (npm) (malicious package)
- [MAL-2025-147539](https://insights.sbomify.com/MAL-2025-147539/): Malicious code in run-script-bulma-jupiter-magellan (npm) (malicious package)
- [MAL-2025-147538](https://insights.sbomify.com/MAL-2025-147538/): Malicious code in run-script-await-ini-ariel (npm) (malicious package)
- [MAL-2025-147537](https://insights.sbomify.com/MAL-2025-147537/): Malicious code in rollup-terser-local-neptune (npm) (malicious package)
- [MAL-2025-147536](https://insights.sbomify.com/MAL-2025-147536/): Malicious code in rollup-taurus-antd-bootstrap (npm) (malicious package)
- [MAL-2025-147535](https://insights.sbomify.com/MAL-2025-147535/): Malicious code in rollup-supervisor-fornax-vortex (npm) (malicious package)
- [MAL-2025-147534](https://insights.sbomify.com/MAL-2025-147534/): Malicious code in rollup-standard-dotenv-safe-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-147533](https://insights.sbomify.com/MAL-2025-147533/): Malicious code in rollup-spectron-acamar-cli (npm) (malicious package)
- [MAL-2025-147532](https://insights.sbomify.com/MAL-2025-147532/): Malicious code in rollup-proxima-semantic-ui-jasmine (npm) (malicious package)
- [MAL-2025-147531](https://insights.sbomify.com/MAL-2025-147531/): Malicious code in rollup-proxima-norma-less-loader (npm) (malicious package)
- [MAL-2025-147530](https://insights.sbomify.com/MAL-2025-147530/): Malicious code in rollup-postcss-loader-xanadu-relay (npm) (malicious package)
- [MAL-2025-14753](https://insights.sbomify.com/MAL-2025-14753/): Malicious code in apuntes (npm) (malicious package)
- [MAL-2025-147529](https://insights.sbomify.com/MAL-2025-147529/): Malicious code in rollup-plugin-zenobia-cypress-nebula (npm) (malicious package)
- [MAL-2025-147528](https://insights.sbomify.com/MAL-2025-147528/): Malicious code in rollup-plugin-yonder-draco-fork (npm) (malicious package)
- [MAL-2025-147527](https://insights.sbomify.com/MAL-2025-147527/): Malicious code in rollup-plugin-xanthus-loglevel-dagda (npm) (malicious package)
- [MAL-2025-147526](https://insights.sbomify.com/MAL-2025-147526/): Malicious code in rollup-plugin-wolf-markdownlint-pegasus (npm) (malicious package)
- [MAL-2025-147525](https://insights.sbomify.com/MAL-2025-147525/): Malicious code in rollup-plugin-virgo-uninstall-hercules (npm) (malicious package)
- [MAL-2025-147524](https://insights.sbomify.com/MAL-2025-147524/): Malicious code in rollup-plugin-version-mini-css-extract-plugin-got (npm) (malicious package)
- [MAL-2025-147523](https://insights.sbomify.com/MAL-2025-147523/): Malicious code in rollup-plugin-ultra-ganymede-vega (npm) (malicious package)
- [MAL-2025-147522](https://insights.sbomify.com/MAL-2025-147522/): Malicious code in rollup-plugin-tool-await-stop (npm) (malicious package)
- [MAL-2025-147521](https://insights.sbomify.com/MAL-2025-147521/): Malicious code in rollup-plugin-style-loader-fornax-mdx (npm) (malicious package)
- [MAL-2025-147520](https://insights.sbomify.com/MAL-2025-147520/): Malicious code in rollup-plugin-solis-nashira-ophiuchus (npm) (malicious package)
- [MAL-2025-14752](https://insights.sbomify.com/MAL-2025-14752/): Malicious code in apui (npm) (malicious package)
- [MAL-2025-147519](https://insights.sbomify.com/MAL-2025-147519/): Malicious code in rollup-plugin-sagitta-css-minimizer-webpack-plugin-standard (npm) (malicious package)
- [MAL-2025-147518](https://insights.sbomify.com/MAL-2025-147518/): Malicious code in rollup-plugin-optimize-css-assets-webpack-plugin-process-convict (npm) (malicious package)
- [MAL-2025-147517](https://insights.sbomify.com/MAL-2025-147517/): Malicious code in rollup-plugin-nashira-vuepress-rehype (npm) (malicious package)
- [MAL-2025-147516](https://insights.sbomify.com/MAL-2025-147516/): Malicious code in rollup-plugin-fomalhaut-pegasus-hyperion (npm) (malicious package)
- [MAL-2025-147515](https://insights.sbomify.com/MAL-2025-147515/): Malicious code in rollup-plugin-event-reveal-md-cors (npm) (malicious package)
- [MAL-2025-147514](https://insights.sbomify.com/MAL-2025-147514/): Malicious code in rollup-plugin-europa-loopback-dorado (npm) (malicious package)
- [MAL-2025-147513](https://insights.sbomify.com/MAL-2025-147513/): Malicious code in rollup-plugin-eridanus-blitz-jsonp (npm) (malicious package)
- [MAL-2025-147512](https://insights.sbomify.com/MAL-2025-147512/): Malicious code in rollup-plugin-cosmiconfig-axios-chromedriver (npm) (malicious package)
- [MAL-2025-147511](https://insights.sbomify.com/MAL-2025-147511/): Malicious code in rollup-plugin-changelog-oberon-nextjs (npm) (malicious package)
- [MAL-2025-147510](https://insights.sbomify.com/MAL-2025-147510/): Malicious code in rollup-plugin-callisto-figures-cosmos (npm) (malicious package)
- [MAL-2025-14751](https://insights.sbomify.com/MAL-2025-14751/): Malicious code in aptrental (npm) (malicious package)
- [MAL-2025-147509](https://insights.sbomify.com/MAL-2025-147509/): Malicious code in rollup-plugin-async-shelljs-procyon (npm) (malicious package)
- [MAL-2025-147508](https://insights.sbomify.com/MAL-2025-147508/): Malicious code in rollup-plugin-antares-pulsar-dynamo (npm) (malicious package)
- [MAL-2025-147507](https://insights.sbomify.com/MAL-2025-147507/): Malicious code in rollup-plugin-aldebaran-zephyr-betelgeuse (npm) (malicious package)
- [MAL-2025-147506](https://insights.sbomify.com/MAL-2025-147506/): Malicious code in rollup-package-duplex-superagent (npm) (malicious package)
- [MAL-2025-147505](https://insights.sbomify.com/MAL-2025-147505/): Malicious code in rollup-nova-inquirer-magellan (npm) (malicious package)
- [MAL-2025-147504](https://insights.sbomify.com/MAL-2025-147504/): Malicious code in rollup-nightmare-nodejs-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-147503](https://insights.sbomify.com/MAL-2025-147503/): Malicious code in rollup-mui-canopus-phoenix (npm) (malicious package)
- [MAL-2025-147502](https://insights.sbomify.com/MAL-2025-147502/): Malicious code in rollup-magellan-hapi-puppeteer (npm) (malicious package)
- [MAL-2025-147501](https://insights.sbomify.com/MAL-2025-147501/): Malicious code in rollup-lynx-halley-local (npm) (malicious package)
- [MAL-2025-147500](https://insights.sbomify.com/MAL-2025-147500/): Malicious code in rollup-izar-polaris-pino (npm) (malicious package)
- [MAL-2025-14750](https://insights.sbomify.com/MAL-2025-14750/): Malicious code in aptman (npm) (malicious package)
- [MAL-2025-1475](https://insights.sbomify.com/MAL-2025-1475/): Malicious code in @roku-web-ui/standard-footer (npm) (malicious package)
- [MAL-2025-147499](https://insights.sbomify.com/MAL-2025-147499/): Malicious code in rollup-inquirer-draco-rigel (npm) (malicious package)
- [MAL-2025-147498](https://insights.sbomify.com/MAL-2025-147498/): Malicious code in rollup-global-indus-testcafe (npm) (malicious package)
- [MAL-2025-147497](https://insights.sbomify.com/MAL-2025-147497/): Malicious code in rollup-gatsby-carpo-json (npm) (malicious package)
- [MAL-2025-147496](https://insights.sbomify.com/MAL-2025-147496/): Malicious code in rollup-ganymede-impulse-dagda (npm) (malicious package)
- [MAL-2025-147495](https://insights.sbomify.com/MAL-2025-147495/): Malicious code in rollup-eclipse-equinox-phoenix (npm) (malicious package)
- [MAL-2025-147494](https://insights.sbomify.com/MAL-2025-147494/): Malicious code in rollup-ceres-nashira-fornax (npm) (malicious package)
- [MAL-2025-147493](https://insights.sbomify.com/MAL-2025-147493/): Malicious code in rollup-buffer-superagent-start (npm) (malicious package)
- [MAL-2025-147492](https://insights.sbomify.com/MAL-2025-147492/): Malicious code in rollup-bellatrix-telesto-jasmine (npm) (malicious package)
- [MAL-2025-147491](https://insights.sbomify.com/MAL-2025-147491/): Malicious code in rollup-barnard-cz-conventional-changelog-regulus (npm) (malicious package)
- [MAL-2025-147490](https://insights.sbomify.com/MAL-2025-147490/): Malicious code in rollup-barnard-chakra-ui-flare (npm) (malicious package)
- [MAL-2025-14749](https://insights.sbomify.com/MAL-2025-14749/): Malicious code in aptest (npm) (malicious package)
- [MAL-2025-147489](https://insights.sbomify.com/MAL-2025-147489/): Malicious code in rollup-babel-jabbah-wolf (npm) (malicious package)
- [MAL-2025-147488](https://insights.sbomify.com/MAL-2025-147488/): Malicious code in rollup-atlas-electron-pino (npm) (malicious package)
- [MAL-2025-147487](https://insights.sbomify.com/MAL-2025-147487/): Malicious code in rocket-yaml-vortex-rollup-plugin (npm) (malicious package)
- [MAL-2025-147486](https://insights.sbomify.com/MAL-2025-147486/): Malicious code in rocket-xanadu-nightwatch-process (npm) (malicious package)
- [MAL-2025-147485](https://insights.sbomify.com/MAL-2025-147485/): Malicious code in rocket-unuk-atlas-winston (npm) (malicious package)
- [MAL-2025-147484](https://insights.sbomify.com/MAL-2025-147484/): Malicious code in rocket-ultra-playwright-titan (npm) (malicious package)
- [MAL-2025-147483](https://insights.sbomify.com/MAL-2025-147483/): Malicious code in rocket-tethys-restart-eris (npm) (malicious package)
- [MAL-2025-147482](https://insights.sbomify.com/MAL-2025-147482/): Malicious code in rocket-sync-jovian-charon (npm) (malicious package)
- [MAL-2025-147481](https://insights.sbomify.com/MAL-2025-147481/): Malicious code in rocket-socketio-altair-module (npm) (malicious package)
- [MAL-2025-147480](https://insights.sbomify.com/MAL-2025-147480/): Malicious code in rocket-server-repository-janus (npm) (malicious package)
- [MAL-2025-14748](https://insights.sbomify.com/MAL-2025-14748/): Malicious code in appytw (npm) (malicious package)
- [MAL-2025-147479](https://insights.sbomify.com/MAL-2025-147479/): Malicious code in rocket-semantic-release-spectron-polaris (npm) (malicious package)
- [MAL-2025-147478](https://insights.sbomify.com/MAL-2025-147478/): Malicious code in rocket-rocket-rate-limiter-gravity (npm) (malicious package)
- [MAL-2025-147477](https://insights.sbomify.com/MAL-2025-147477/): Malicious code in rocket-phoebe-phoebe-perseus (npm) (malicious package)
- [MAL-2025-147476](https://insights.sbomify.com/MAL-2025-147476/): Malicious code in rocket-phoebe-norma-mui (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1404/