# Vulnerabilities published in 2025


- [MAL-2025-146845](https://insights.sbomify.com/MAL-2025-146845/): Malicious code in pulsar-terser-publish-oauth (npm) (malicious package)
- [MAL-2025-146844](https://insights.sbomify.com/MAL-2025-146844/): Malicious code in pulsar-run-script-redis-convict (npm) (malicious package)
- [MAL-2025-146843](https://insights.sbomify.com/MAL-2025-146843/): Malicious code in pulsar-repository-uglify-js-webdriverio (npm) (malicious package)
- [MAL-2025-146842](https://insights.sbomify.com/MAL-2025-146842/): Malicious code in pulsar-radiant-cypress-dione (npm) (malicious package)
- [MAL-2025-146841](https://insights.sbomify.com/MAL-2025-146841/): Malicious code in pulsar-quito-standard-pegasus (npm) (malicious package)
- [MAL-2025-146840](https://insights.sbomify.com/MAL-2025-146840/): Malicious code in pulsar-process-postgres-sedna (npm) (malicious package)
- [MAL-2025-14684](https://insights.sbomify.com/MAL-2025-14684/): Malicious code in apple-fig-india-uecxa (npm) (malicious package)
- [MAL-2025-146839](https://insights.sbomify.com/MAL-2025-146839/): Malicious code in pulsar-pegasus-aurora-proxima (npm) (malicious package)
- [MAL-2025-146838](https://insights.sbomify.com/MAL-2025-146838/): Malicious code in pulsar-orbit-capella-indus (npm) (malicious package)
- [MAL-2025-146837](https://insights.sbomify.com/MAL-2025-146837/): Malicious code in pulsar-nodemon-lint-staged-prettier (npm) (malicious package)
- [MAL-2025-146836](https://insights.sbomify.com/MAL-2025-146836/): Malicious code in pulsar-mongoose-aquarius-betelgeuse (npm) (malicious package)
- [MAL-2025-146835](https://insights.sbomify.com/MAL-2025-146835/): Malicious code in pulsar-jwt-warp-morgan (npm) (malicious package)
- [MAL-2025-146834](https://insights.sbomify.com/MAL-2025-146834/): Malicious code in pulsar-iota-fork-publish (npm) (malicious package)
- [MAL-2025-146833](https://insights.sbomify.com/MAL-2025-146833/): Malicious code in pulsar-html-webpack-plugin-yaml-passport (npm) (malicious package)
- [MAL-2025-146832](https://insights.sbomify.com/MAL-2025-146832/): Malicious code in pulsar-gacrux-geckodriver-quantum (npm) (malicious package)
- [MAL-2025-146831](https://insights.sbomify.com/MAL-2025-146831/): Malicious code in pulsar-farout-pegasus-publish (npm) (malicious package)
- [MAL-2025-146830](https://insights.sbomify.com/MAL-2025-146830/): Malicious code in pulsar-europa-phoebe-mocha (npm) (malicious package)
- [MAL-2025-14683](https://insights.sbomify.com/MAL-2025-14683/): Malicious code in apple-elderberry-rslf (npm) (malicious package)
- [MAL-2025-146829](https://insights.sbomify.com/MAL-2025-146829/): Malicious code in pulsar-envconfig-nuxtjs-comet (npm) (malicious package)
- [MAL-2025-146828](https://insights.sbomify.com/MAL-2025-146828/): Malicious code in pulsar-duplex-chakra-ui-equinox (npm) (malicious package)
- [MAL-2025-146827](https://insights.sbomify.com/MAL-2025-146827/): Malicious code in pulsar-despina-apollo-cosmiconfig (npm) (malicious package)
- [MAL-2025-146826](https://insights.sbomify.com/MAL-2025-146826/): Malicious code in pulsar-astro-backend-xenon (npm) (malicious package)
- [MAL-2025-146825](https://insights.sbomify.com/MAL-2025-146825/): Malicious code in publish-zenith-cygnus-nashira (npm) (malicious package)
- [MAL-2025-146824](https://insights.sbomify.com/MAL-2025-146824/): Malicious code in publish-xo-deimos-xenon (npm) (malicious package)
- [MAL-2025-146823](https://insights.sbomify.com/MAL-2025-146823/): Malicious code in publish-writable-remark-miranda (npm) (malicious package)
- [MAL-2025-146822](https://insights.sbomify.com/MAL-2025-146822/): Malicious code in publish-webpack-configstore-dependencies (npm) (malicious package)
- [MAL-2025-146821](https://insights.sbomify.com/MAL-2025-146821/): Malicious code in publish-vuetify-deimos-bulma (npm) (malicious package)
- [MAL-2025-146820](https://insights.sbomify.com/MAL-2025-146820/): Malicious code in publish-vega-spawn-enceladus (npm) (malicious package)
- [MAL-2025-14682](https://insights.sbomify.com/MAL-2025-14682/): Malicious code in apple-e4v-project (npm) (malicious package)
- [MAL-2025-146819](https://insights.sbomify.com/MAL-2025-146819/): Malicious code in publish-ultra-webdriver-manager-leda (npm) (malicious package)
- [MAL-2025-146818](https://insights.sbomify.com/MAL-2025-146818/): Malicious code in publish-taurus-css-loader-mensa (npm) (malicious package)
- [MAL-2025-146817](https://insights.sbomify.com/MAL-2025-146817/): Malicious code in publish-stream-radiant-yaml (npm) (malicious package)
- [MAL-2025-146816](https://insights.sbomify.com/MAL-2025-146816/): Malicious code in publish-start-mui-nova (npm) (malicious package)
- [MAL-2025-146815](https://insights.sbomify.com/MAL-2025-146815/): Malicious code in publish-spectron-europa-enif (npm) (malicious package)
- [MAL-2025-146814](https://insights.sbomify.com/MAL-2025-146814/): Malicious code in publish-sirius-phoebe-build (npm) (malicious package)
- [MAL-2025-146813](https://insights.sbomify.com/MAL-2025-146813/): Malicious code in publish-shelljs-hexo-css-loader (npm) (malicious package)
- [MAL-2025-146812](https://insights.sbomify.com/MAL-2025-146812/): Malicious code in publish-schema-scorpius-shelljs (npm) (malicious package)
- [MAL-2025-146811](https://insights.sbomify.com/MAL-2025-146811/): Malicious code in publish-sails-yildun-sagitta (npm) (malicious package)
- [MAL-2025-146810](https://insights.sbomify.com/MAL-2025-146810/): Malicious code in publish-redis-bellatrix-spectron-webdriver (npm) (malicious package)
- [MAL-2025-14681](https://insights.sbomify.com/MAL-2025-14681/): Malicious code in apple-delta-ohyg (npm) (malicious package)
- [MAL-2025-146809](https://insights.sbomify.com/MAL-2025-146809/): Malicious code in publish-publish-miranda-sagitta (npm) (malicious package)
- [MAL-2025-146808](https://insights.sbomify.com/MAL-2025-146808/): Malicious code in publish-publish-auth-nestjs (npm) (malicious package)
- [MAL-2025-146807](https://insights.sbomify.com/MAL-2025-146807/): Malicious code in publish-prompts-dynamo-firebase (npm) (malicious package)
- [MAL-2025-146806](https://insights.sbomify.com/MAL-2025-146806/): Malicious code in publish-process-proxima-geckodriver (npm) (malicious package)
- [MAL-2025-146805](https://insights.sbomify.com/MAL-2025-146805/): Malicious code in publish-postgres-despina-start (npm) (malicious package)
- [MAL-2025-146804](https://insights.sbomify.com/MAL-2025-146804/): Malicious code in publish-postcss-blaze-buffer (npm) (malicious package)
- [MAL-2025-146803](https://insights.sbomify.com/MAL-2025-146803/): Malicious code in publish-polaris-graphql-rimraf (npm) (malicious package)
- [MAL-2025-146802](https://insights.sbomify.com/MAL-2025-146802/): Malicious code in publish-polaris-elara-relay (npm) (malicious package)
- [MAL-2025-146801](https://insights.sbomify.com/MAL-2025-146801/): Malicious code in publish-pipe-antares-shelljs (npm) (malicious package)
- [MAL-2025-146800](https://insights.sbomify.com/MAL-2025-146800/): Malicious code in publish-phenomic-phenomic-lint (npm) (malicious package)
- [MAL-2025-14680](https://insights.sbomify.com/MAL-2025-14680/): Malicious code in apple-date-quince-qnivq (npm) (malicious package)
- [MAL-2025-1468](https://insights.sbomify.com/MAL-2025-1468/): Malicious code in react-spectrum-monorepo (npm) (malicious package)
- [MAL-2025-146799](https://insights.sbomify.com/MAL-2025-146799/): Malicious code in publish-parcel-mysql-hermes (npm) (malicious package)
- [MAL-2025-146798](https://insights.sbomify.com/MAL-2025-146798/): Malicious code in publish-nova-aether-bellatrix (npm) (malicious package)
- [MAL-2025-146797](https://insights.sbomify.com/MAL-2025-146797/): Malicious code in publish-node-sass-deimos-node-sass (npm) (malicious package)
- [MAL-2025-146796](https://insights.sbomify.com/MAL-2025-146796/): Malicious code in publish-nextjs-halley-nashira (npm) (malicious package)
- [MAL-2025-146795](https://insights.sbomify.com/MAL-2025-146795/): Malicious code in publish-miranda-hugo-hermes (npm) (malicious package)
- [MAL-2025-146794](https://insights.sbomify.com/MAL-2025-146794/): Malicious code in publish-materialize-spawn-quark (npm) (malicious package)
- [MAL-2025-146793](https://insights.sbomify.com/MAL-2025-146793/): Malicious code in publish-magellan-gridsome-bellatrix (npm) (malicious package)
- [MAL-2025-146792](https://insights.sbomify.com/MAL-2025-146792/): Malicious code in publish-local-typeorm-node-sass (npm) (malicious package)
- [MAL-2025-146791](https://insights.sbomify.com/MAL-2025-146791/): Malicious code in publish-karma-ora-node-config (npm) (malicious package)
- [MAL-2025-146790](https://insights.sbomify.com/MAL-2025-146790/): Malicious code in publish-jekyll-miranda-exec (npm) (malicious package)
- [MAL-2025-14679](https://insights.sbomify.com/MAL-2025-14679/): Malicious code in apple-date-hhyd (npm) (malicious package)
- [MAL-2025-146789](https://insights.sbomify.com/MAL-2025-146789/): Malicious code in publish-impulse-package-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-146788](https://insights.sbomify.com/MAL-2025-146788/): Malicious code in publish-hermes-oauth-sqlite (npm) (malicious package)
- [MAL-2025-146787](https://insights.sbomify.com/MAL-2025-146787/): Malicious code in publish-hermes-halley-draco (npm) (malicious package)
- [MAL-2025-146786](https://insights.sbomify.com/MAL-2025-146786/): Malicious code in publish-halley-antares-loop (npm) (malicious package)
- [MAL-2025-146785](https://insights.sbomify.com/MAL-2025-146785/): Malicious code in publish-gulp-nestjs-yonder (npm) (malicious package)
- [MAL-2025-146784](https://insights.sbomify.com/MAL-2025-146784/): Malicious code in publish-ganymede-magellan-dione (npm) (malicious package)
- [MAL-2025-146783](https://insights.sbomify.com/MAL-2025-146783/): Malicious code in publish-ganymede-cosmiconfig-xerxes (npm) (malicious package)
- [MAL-2025-146782](https://insights.sbomify.com/MAL-2025-146782/): Malicious code in publish-epimetheus-redis-firebase (npm) (malicious package)
- [MAL-2025-146781](https://insights.sbomify.com/MAL-2025-146781/): Malicious code in publish-css-minimizer-webpack-plugin-nuxtjs-rocket (npm) (malicious package)
- [MAL-2025-146780](https://insights.sbomify.com/MAL-2025-146780/): Malicious code in publish-concurrently-gacrux-sirius (npm) (malicious package)
- [MAL-2025-14678](https://insights.sbomify.com/MAL-2025-14678/): Malicious code in apple-charlie-ugli-uicpb (npm) (malicious package)
- [MAL-2025-146779](https://insights.sbomify.com/MAL-2025-146779/): Malicious code in publish-child-process-halley-andromeda (npm) (malicious package)
- [MAL-2025-146778](https://insights.sbomify.com/MAL-2025-146778/): Malicious code in publish-child-process-fornax-airbnb (npm) (malicious package)
- [MAL-2025-146777](https://insights.sbomify.com/MAL-2025-146777/): Malicious code in publish-carina-centauri-babel (npm) (malicious package)
- [MAL-2025-146776](https://insights.sbomify.com/MAL-2025-146776/): Malicious code in publish-browserify-callback-await (npm) (malicious package)
- [MAL-2025-146775](https://insights.sbomify.com/MAL-2025-146775/): Malicious code in publish-auth-nova-socketio (npm) (malicious package)
- [MAL-2025-146774](https://insights.sbomify.com/MAL-2025-146774/): Malicious code in publish-apex-sqlite-cross-env (npm) (malicious package)
- [MAL-2025-146773](https://insights.sbomify.com/MAL-2025-146773/): Malicious code in publish-alphard-css-minimizer-webpack-plugin-gatsby (npm) (malicious package)
- [MAL-2025-146772](https://insights.sbomify.com/MAL-2025-146772/): Malicious code in publish-achernar-rollup-plugin-miranda (npm) (malicious package)
- [MAL-2025-146771](https://insights.sbomify.com/MAL-2025-146771/): Malicious code in public-zephyr-neptune-bulma (npm) (malicious package)
- [MAL-2025-146770](https://insights.sbomify.com/MAL-2025-146770/): Malicious code in public-supervisor-semantic-release-rate-limiter (npm) (malicious package)
- [MAL-2025-14677](https://insights.sbomify.com/MAL-2025-14677/): Malicious code in apple-carrot-fzlq (npm) (malicious package)
- [MAL-2025-146769](https://insights.sbomify.com/MAL-2025-146769/): Malicious code in public-semantic-release-ophiuchus-jovian (npm) (malicious package)
- [MAL-2025-146768](https://insights.sbomify.com/MAL-2025-146768/): Malicious code in public-proxima-juno-polaris (npm) (malicious package)
- [MAL-2025-146767](https://insights.sbomify.com/MAL-2025-146767/): Malicious code in public-prettier-deneb-ophiuchus (npm) (malicious package)
- [MAL-2025-146766](https://insights.sbomify.com/MAL-2025-146766/): Malicious code in public-postcss-loader-nconf-fusion (npm) (malicious package)
- [MAL-2025-146765](https://insights.sbomify.com/MAL-2025-146765/): Malicious code in public-passport-event-hapi (npm) (malicious package)
- [MAL-2025-146764](https://insights.sbomify.com/MAL-2025-146764/): Malicious code in public-oberon-tailwindcss-grus (npm) (malicious package)
- [MAL-2025-146763](https://insights.sbomify.com/MAL-2025-146763/): Malicious code in public-npm-leda-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-146762](https://insights.sbomify.com/MAL-2025-146762/): Malicious code in public-meteor-xanthus-jabbah (npm) (malicious package)
- [MAL-2025-146761](https://insights.sbomify.com/MAL-2025-146761/): Malicious code in public-magellan-elektra-dotenv (npm) (malicious package)
- [MAL-2025-146760](https://insights.sbomify.com/MAL-2025-146760/): Malicious code in public-kastra-odin-dotenv (npm) (malicious package)
- [MAL-2025-14676](https://insights.sbomify.com/MAL-2025-14676/): Malicious code in apple-bravo-pfsh (npm) (malicious package)
- [MAL-2025-146759](https://insights.sbomify.com/MAL-2025-146759/): Malicious code in public-gatsby-figures-hugo (npm) (malicious package)
- [MAL-2025-146758](https://insights.sbomify.com/MAL-2025-146758/): Malicious code in public-eslint-plugin-blitz-init (npm) (malicious package)
- [MAL-2025-146757](https://insights.sbomify.com/MAL-2025-146757/): Malicious code in public-deneb-capella-eleventy (npm) (malicious package)
- [MAL-2025-146756](https://insights.sbomify.com/MAL-2025-146756/): Malicious code in public-cors-blitz-loopback (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1412/