# Vulnerabilities published in 2025


- [MAL-2025-146755](https://insights.sbomify.com/MAL-2025-146755/): Malicious code in public-bootes-quito-registry (npm) (malicious package)
- [MAL-2025-146754](https://insights.sbomify.com/MAL-2025-146754/): Malicious code in public-auth-dotenv-parse-variables-prettier-stylelint (npm) (malicious package)
- [MAL-2025-146753](https://insights.sbomify.com/MAL-2025-146753/): Malicious code in public-antares-publish-neptune (npm) (malicious package)
- [MAL-2025-146752](https://insights.sbomify.com/MAL-2025-146752/): Malicious code in proxima-xerxes-phoenix-adonis (npm) (malicious package)
- [MAL-2025-146751](https://insights.sbomify.com/MAL-2025-146751/): Malicious code in proxima-xerxes-await-parcel (npm) (malicious package)
- [MAL-2025-146750](https://insights.sbomify.com/MAL-2025-146750/): Malicious code in proxima-xenon-transport-janus (npm) (malicious package)
- [MAL-2025-14675](https://insights.sbomify.com/MAL-2025-14675/): Malicious code in apple-3zd-project (npm) (malicious package)
- [MAL-2025-146749](https://insights.sbomify.com/MAL-2025-146749/): Malicious code in proxima-wezen-jabbah-dagda (npm) (malicious package)
- [MAL-2025-146748](https://insights.sbomify.com/MAL-2025-146748/): Malicious code in proxima-vortex-buffer-sync (npm) (malicious package)
- [MAL-2025-146747](https://insights.sbomify.com/MAL-2025-146747/): Malicious code in proxima-transport-pulsar-canopus (npm) (malicious package)
- [MAL-2025-146746](https://insights.sbomify.com/MAL-2025-146746/): Malicious code in proxima-testcafe-passport-jabbah (npm) (malicious package)
- [MAL-2025-146745](https://insights.sbomify.com/MAL-2025-146745/): Malicious code in proxima-terser-webpack-plugin-materialize-rollup (npm) (malicious package)
- [MAL-2025-146744](https://insights.sbomify.com/MAL-2025-146744/): Malicious code in proxima-stop-chariklo-puppeteer (npm) (malicious package)
- [MAL-2025-146743](https://insights.sbomify.com/MAL-2025-146743/): Malicious code in proxima-sqlite-module-alphard (npm) (malicious package)
- [MAL-2025-146742](https://insights.sbomify.com/MAL-2025-146742/): Malicious code in proxima-soap-nuxtjs-cygnus (npm) (malicious package)
- [MAL-2025-146741](https://insights.sbomify.com/MAL-2025-146741/): Malicious code in proxima-slidev-spinner-winston (npm) (malicious package)
- [MAL-2025-146740](https://insights.sbomify.com/MAL-2025-146740/): Malicious code in proxima-slidev-middleware-adonis (npm) (malicious package)
- [MAL-2025-14674](https://insights.sbomify.com/MAL-2025-14674/): Malicious code in apple-2zb-project (npm) (malicious package)
- [MAL-2025-146739](https://insights.sbomify.com/MAL-2025-146739/): Malicious code in proxima-sirius-sirius-jwt (npm) (malicious package)
- [MAL-2025-146738](https://insights.sbomify.com/MAL-2025-146738/): Malicious code in proxima-shelljs-rate-limiter-standard (npm) (malicious package)
- [MAL-2025-146737](https://insights.sbomify.com/MAL-2025-146737/): Malicious code in proxima-scripts-wezen-slidev (npm) (malicious package)
- [MAL-2025-146736](https://insights.sbomify.com/MAL-2025-146736/): Malicious code in proxima-scorpius-hercules-chromedriver (npm) (malicious package)
- [MAL-2025-146735](https://insights.sbomify.com/MAL-2025-146735/): Malicious code in proxima-request-forever-optimize-css-assets-webpack-plugin (npm) (malicious package)
- [MAL-2025-146734](https://insights.sbomify.com/MAL-2025-146734/): Malicious code in proxima-quito-middleware-library (npm) (malicious package)
- [MAL-2025-146733](https://insights.sbomify.com/MAL-2025-146733/): Malicious code in proxima-quark-metalsmith-jasmine (npm) (malicious package)
- [MAL-2025-146732](https://insights.sbomify.com/MAL-2025-146732/): Malicious code in proxima-proxima-relay-style-loader (npm) (malicious package)
- [MAL-2025-146731](https://insights.sbomify.com/MAL-2025-146731/): Malicious code in proxima-protractor-mira-jabbah (npm) (malicious package)
- [MAL-2025-146730](https://insights.sbomify.com/MAL-2025-146730/): Malicious code in proxima-promise-meteor-jest (npm) (malicious package)
- [MAL-2025-14673](https://insights.sbomify.com/MAL-2025-14673/): Malicious code in appkeys (npm) (malicious package)
- [MAL-2025-146729](https://insights.sbomify.com/MAL-2025-146729/): Malicious code in proxima-process-grus-fomalhaut (npm) (malicious package)
- [MAL-2025-146728](https://insights.sbomify.com/MAL-2025-146728/): Malicious code in proxima-playwright-callisto-toml (npm) (malicious package)
- [MAL-2025-146727](https://insights.sbomify.com/MAL-2025-146727/): Malicious code in proxima-pipe-jabbah-cosmos (npm) (malicious package)
- [MAL-2025-146726](https://insights.sbomify.com/MAL-2025-146726/): Malicious code in proxima-oberon-magellan-uninstall (npm) (malicious package)
- [MAL-2025-146725](https://insights.sbomify.com/MAL-2025-146725/): Malicious code in proxima-norma-quantum-eridanus (npm) (malicious package)
- [MAL-2025-146724](https://insights.sbomify.com/MAL-2025-146724/): Malicious code in proxima-node-config-server-electron (npm) (malicious package)
- [MAL-2025-146723](https://insights.sbomify.com/MAL-2025-146723/): Malicious code in proxima-mdx-hugo-draco (npm) (malicious package)
- [MAL-2025-146722](https://insights.sbomify.com/MAL-2025-146722/): Malicious code in proxima-luna-janus-morgan (npm) (malicious package)
- [MAL-2025-146721](https://insights.sbomify.com/MAL-2025-146721/): Malicious code in proxima-library-solis-levels (npm) (malicious package)
- [MAL-2025-146720](https://insights.sbomify.com/MAL-2025-146720/): Malicious code in proxima-ignite-izar-titan (npm) (malicious package)
- [MAL-2025-14672](https://insights.sbomify.com/MAL-2025-14672/): Malicious code in appeler (npm) (malicious package)
- [MAL-2025-146719](https://insights.sbomify.com/MAL-2025-146719/): Malicious code in proxima-hyperion-vortex-event (npm) (malicious package)
- [MAL-2025-146718](https://insights.sbomify.com/MAL-2025-146718/): Malicious code in proxima-hermes-ganymede-selenium (npm) (malicious package)
- [MAL-2025-146717](https://insights.sbomify.com/MAL-2025-146717/): Malicious code in proxima-helmet-schema-rollup (npm) (malicious package)
- [MAL-2025-146716](https://insights.sbomify.com/MAL-2025-146716/): Malicious code in proxima-gacrux-markdown-pdf-kastra (npm) (malicious package)
- [MAL-2025-146715](https://insights.sbomify.com/MAL-2025-146715/): Malicious code in proxima-fornax-lynx-xml (npm) (malicious package)
- [MAL-2025-146714](https://insights.sbomify.com/MAL-2025-146714/): Malicious code in proxima-figures-axios-shelljs (npm) (malicious package)
- [MAL-2025-146713](https://insights.sbomify.com/MAL-2025-146713/): Malicious code in proxima-eslint-plugin-xanadu-jupiter (npm) (malicious package)
- [MAL-2025-146712](https://insights.sbomify.com/MAL-2025-146712/): Malicious code in proxima-enceladus-passport-zenobia (npm) (malicious package)
- [MAL-2025-146711](https://insights.sbomify.com/MAL-2025-146711/): Malicious code in proxima-dotenv-safe-callback-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-146710](https://insights.sbomify.com/MAL-2025-146710/): Malicious code in proxima-configstore-postgres-altair (npm) (malicious package)
- [MAL-2025-14671](https://insights.sbomify.com/MAL-2025-14671/): Malicious code in appdirect-universal-search (npm) (malicious package)
- [MAL-2025-146709](https://insights.sbomify.com/MAL-2025-146709/): Malicious code in proxima-commitlint-config-angular-pyxis-fork (npm) (malicious package)
- [MAL-2025-146708](https://insights.sbomify.com/MAL-2025-146708/): Malicious code in proxima-child-process-bootes-rimraf (npm) (malicious package)
- [MAL-2025-146707](https://insights.sbomify.com/MAL-2025-146707/): Malicious code in proxima-backend-solis-arcturus (npm) (malicious package)
- [MAL-2025-146706](https://insights.sbomify.com/MAL-2025-146706/): Malicious code in proxima-auriga-luna-zephyr (npm) (malicious package)
- [MAL-2025-146705](https://insights.sbomify.com/MAL-2025-146705/): Malicious code in proxima-antares-fork-pino-pretty (npm) (malicious package)
- [MAL-2025-146704](https://insights.sbomify.com/MAL-2025-146704/): Malicious code in protractor-zenobia-npm-upgrade (npm) (malicious package)
- [MAL-2025-146703](https://insights.sbomify.com/MAL-2025-146703/): Malicious code in protractor-xenon-docusaurus-inquirer (npm) (malicious package)
- [MAL-2025-146702](https://insights.sbomify.com/MAL-2025-146702/): Malicious code in protractor-webdriver-mocha-bootstrap-venus (npm) (malicious package)
- [MAL-2025-146701](https://insights.sbomify.com/MAL-2025-146701/): Malicious code in protractor-ursa-stop-sedna (npm) (malicious package)
- [MAL-2025-146700](https://insights.sbomify.com/MAL-2025-146700/): Malicious code in protractor-semantic-ui-cli-pyxis (npm) (malicious package)
- [MAL-2025-14670](https://insights.sbomify.com/MAL-2025-14670/): Malicious code in appcompat (npm) (malicious package)
- [MAL-2025-1467](https://insights.sbomify.com/MAL-2025-1467/): Malicious code in @xenial-ux/services (npm) (malicious package)
- [MAL-2025-146699](https://insights.sbomify.com/MAL-2025-146699/): Malicious code in protractor-sass-loader-test-gemini (npm) (malicious package)
- [MAL-2025-146698](https://insights.sbomify.com/MAL-2025-146698/): Malicious code in protractor-sagitta-xenos-javascript (npm) (malicious package)
- [MAL-2025-146697](https://insights.sbomify.com/MAL-2025-146697/): Malicious code in protractor-rocket-terser-postgres (npm) (malicious package)
- [MAL-2025-146696](https://insights.sbomify.com/MAL-2025-146696/): Malicious code in protractor-regulus-xo-framework (npm) (malicious package)
- [MAL-2025-146695](https://insights.sbomify.com/MAL-2025-146695/): Malicious code in protractor-pm2-cosmiconfig-dorado (npm) (malicious package)
- [MAL-2025-146694](https://insights.sbomify.com/MAL-2025-146694/): Malicious code in protractor-pipe-puppeteer-cressida (npm) (malicious package)
- [MAL-2025-146693](https://insights.sbomify.com/MAL-2025-146693/): Malicious code in protractor-parcel-wasat-chariklo (npm) (malicious package)
- [MAL-2025-146692](https://insights.sbomify.com/MAL-2025-146692/): Malicious code in protractor-optimize-css-assets-webpack-plugin-rest-cosmos (npm) (malicious package)
- [MAL-2025-146691](https://insights.sbomify.com/MAL-2025-146691/): Malicious code in protractor-oauth-izar-rimraf (npm) (malicious package)
- [MAL-2025-146690](https://insights.sbomify.com/MAL-2025-146690/): Malicious code in protractor-miranda-mensa-io (npm) (malicious package)
- [MAL-2025-14669](https://insights.sbomify.com/MAL-2025-14669/): Malicious code in appcapsule (npm) (malicious package)
- [MAL-2025-146689](https://insights.sbomify.com/MAL-2025-146689/): Malicious code in protractor-markdown-pdf-epimetheus-chromedriver (npm) (malicious package)
- [MAL-2025-146688](https://insights.sbomify.com/MAL-2025-146688/): Malicious code in protractor-loglevel-telesto-module (npm) (malicious package)
- [MAL-2025-146687](https://insights.sbomify.com/MAL-2025-146687/): Malicious code in protractor-hyperion-soap-halley (npm) (malicious package)
- [MAL-2025-146686](https://insights.sbomify.com/MAL-2025-146686/): Malicious code in protractor-gridsome-levels-aquarius (npm) (malicious package)
- [MAL-2025-146685](https://insights.sbomify.com/MAL-2025-146685/): Malicious code in protractor-event-meteor-ganymede (npm) (malicious package)
- [MAL-2025-146684](https://insights.sbomify.com/MAL-2025-146684/): Malicious code in protractor-europa-elektra-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-146683](https://insights.sbomify.com/MAL-2025-146683/): Malicious code in protractor-eslint-plugin-nestjs-altair (npm) (malicious package)
- [MAL-2025-146682](https://insights.sbomify.com/MAL-2025-146682/): Malicious code in protractor-dynamo-lyra-supervisor (npm) (malicious package)
- [MAL-2025-146681](https://insights.sbomify.com/MAL-2025-146681/): Malicious code in protractor-docusaurus-prettier-cassini (npm) (malicious package)
- [MAL-2025-146680](https://insights.sbomify.com/MAL-2025-146680/): Malicious code in protractor-dactyl-nightmare-jekyll (npm) (malicious package)
- [MAL-2025-14668](https://insights.sbomify.com/MAL-2025-14668/): Malicious code in apparea (npm) (malicious package)
- [MAL-2025-146679](https://insights.sbomify.com/MAL-2025-146679/): Malicious code in protractor-ceres-pipe-dagda (npm) (malicious package)
- [MAL-2025-146678](https://insights.sbomify.com/MAL-2025-146678/): Malicious code in protractor-aldebaran-native-quito (npm) (malicious package)
- [MAL-2025-146677](https://insights.sbomify.com/MAL-2025-146677/): Malicious code in prompts-zenobia-promise-stream (npm) (malicious package)
- [MAL-2025-146676](https://insights.sbomify.com/MAL-2025-146676/): Malicious code in prompts-wasat-charon-cosmiconfig (npm) (malicious package)
- [MAL-2025-146675](https://insights.sbomify.com/MAL-2025-146675/): Malicious code in prompts-schema-lint-staged-dorado (npm) (malicious package)
- [MAL-2025-146674](https://insights.sbomify.com/MAL-2025-146674/): Malicious code in prompts-rehype-got-bootes (npm) (malicious package)
- [MAL-2025-146673](https://insights.sbomify.com/MAL-2025-146673/): Malicious code in prompts-playwright-cli-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-146672](https://insights.sbomify.com/MAL-2025-146672/): Malicious code in prompts-ophiuchus-indus-ignite (npm) (malicious package)
- [MAL-2025-146671](https://insights.sbomify.com/MAL-2025-146671/): Malicious code in prompts-nashira-pulsar-jekyll (npm) (malicious package)
- [MAL-2025-146670](https://insights.sbomify.com/MAL-2025-146670/): Malicious code in prompts-mocha-norma-testcafe (npm) (malicious package)
- [MAL-2025-14667](https://insights.sbomify.com/MAL-2025-14667/): Malicious code in app_profiler (npm) (malicious package)
- [MAL-2025-146669](https://insights.sbomify.com/MAL-2025-146669/): Malicious code in prompts-miranda-ganymede-sails (npm) (malicious package)
- [MAL-2025-146668](https://insights.sbomify.com/MAL-2025-146668/): Malicious code in prompts-meteor-superagent-meissa (npm) (malicious package)
- [MAL-2025-146667](https://insights.sbomify.com/MAL-2025-146667/): Malicious code in prompts-less-loader-child-process-sedna (npm) (malicious package)
- [MAL-2025-146666](https://insights.sbomify.com/MAL-2025-146666/): Malicious code in prompts-jest-regulus-library (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1413/