# Vulnerabilities published in 2025


- [MAL-2025-146665](https://insights.sbomify.com/MAL-2025-146665/): Malicious code in prompts-jekyll-vortex-dione (npm) (malicious package)
- [MAL-2025-146664](https://insights.sbomify.com/MAL-2025-146664/): Malicious code in prompts-hercules-markdownlint-jekyll (npm) (malicious package)
- [MAL-2025-146663](https://insights.sbomify.com/MAL-2025-146663/): Malicious code in prompts-elara-neptune-middleware (npm) (malicious package)
- [MAL-2025-146662](https://insights.sbomify.com/MAL-2025-146662/): Malicious code in prompts-dotenv-safe-meteor-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-146661](https://insights.sbomify.com/MAL-2025-146661/): Malicious code in prompts-chromedriver-protractor-alphard (npm) (malicious package)
- [MAL-2025-146660](https://insights.sbomify.com/MAL-2025-146660/): Malicious code in prompts-await-phoenix-deneb (npm) (malicious package)
- [MAL-2025-14666](https://insights.sbomify.com/MAL-2025-14666/): Malicious code in app_name (npm) (malicious package)
- [MAL-2025-146659](https://insights.sbomify.com/MAL-2025-146659/): Malicious code in prompts-andromeda-dynamo-halley (npm) (malicious package)
- [MAL-2025-146658](https://insights.sbomify.com/MAL-2025-146658/): Malicious code in promise-yildun-html-webpack-plugin-mocha (npm) (malicious package)
- [MAL-2025-146657](https://insights.sbomify.com/MAL-2025-146657/): Malicious code in promise-yaml-scripts-quark (npm) (malicious package)
- [MAL-2025-146656](https://insights.sbomify.com/MAL-2025-146656/): Malicious code in promise-xenos-semantic-release-grus (npm) (malicious package)
- [MAL-2025-146655](https://insights.sbomify.com/MAL-2025-146655/): Malicious code in promise-ursa-testcafe-spawn (npm) (malicious package)
- [MAL-2025-146654](https://insights.sbomify.com/MAL-2025-146654/): Malicious code in promise-umbra-achernar-child-process (npm) (malicious package)
- [MAL-2025-146653](https://insights.sbomify.com/MAL-2025-146653/): Malicious code in promise-uglify-js-chalk-sagitta (npm) (malicious package)
- [MAL-2025-146652](https://insights.sbomify.com/MAL-2025-146652/): Malicious code in promise-typeorm-halley-ursa (npm) (malicious package)
- [MAL-2025-146651](https://insights.sbomify.com/MAL-2025-146651/): Malicious code in promise-subscription-pipe-bellatrix (npm) (malicious package)
- [MAL-2025-146650](https://insights.sbomify.com/MAL-2025-146650/): Malicious code in promise-standard-phoenix-venus (npm) (malicious package)
- [MAL-2025-14665](https://insights.sbomify.com/MAL-2025-14665/): Malicious code in app8888888888 (npm) (malicious package)
- [MAL-2025-146649](https://insights.sbomify.com/MAL-2025-146649/): Malicious code in promise-rollup-miranda-nodemon (npm) (malicious package)
- [MAL-2025-146648](https://insights.sbomify.com/MAL-2025-146648/): Malicious code in promise-rimraf-supervisor-graphql (npm) (malicious package)
- [MAL-2025-146647](https://insights.sbomify.com/MAL-2025-146647/): Malicious code in promise-registry-bellatrix-element-ui (npm) (malicious package)
- [MAL-2025-146646](https://insights.sbomify.com/MAL-2025-146646/): Malicious code in promise-protractor-concurrently-passport (npm) (malicious package)
- [MAL-2025-146645](https://insights.sbomify.com/MAL-2025-146645/): Malicious code in promise-nuxtjs-umbra-express (npm) (malicious package)
- [MAL-2025-146644](https://insights.sbomify.com/MAL-2025-146644/): Malicious code in promise-meteor-dotenv-antd (npm) (malicious package)
- [MAL-2025-146643](https://insights.sbomify.com/MAL-2025-146643/): Malicious code in promise-markdown-zephyr-gacrux (npm) (malicious package)
- [MAL-2025-146642](https://insights.sbomify.com/MAL-2025-146642/): Malicious code in promise-loop-server-farout (npm) (malicious package)
- [MAL-2025-146641](https://insights.sbomify.com/MAL-2025-146641/): Malicious code in promise-graphql-start-superagent (npm) (malicious package)
- [MAL-2025-146640](https://insights.sbomify.com/MAL-2025-146640/): Malicious code in promise-global-wolf-arcturus (npm) (malicious package)
- [MAL-2025-14664](https://insights.sbomify.com/MAL-2025-14664/): Malicious code in app-shell-startpagina (npm) (malicious package)
- [MAL-2025-146639](https://insights.sbomify.com/MAL-2025-146639/): Malicious code in promise-galaxy-express-css-loader (npm) (malicious package)
- [MAL-2025-146638](https://insights.sbomify.com/MAL-2025-146638/): Malicious code in promise-equinox-materialize-fornax (npm) (malicious package)
- [MAL-2025-146637](https://insights.sbomify.com/MAL-2025-146637/): Malicious code in promise-draco-radiant-aldebaran (npm) (malicious package)
- [MAL-2025-146636](https://insights.sbomify.com/MAL-2025-146636/): Malicious code in promise-delphinus-dotenv-parse-variables-ursa (npm) (malicious package)
- [MAL-2025-146635](https://insights.sbomify.com/MAL-2025-146635/): Malicious code in promise-cressida-link-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-146634](https://insights.sbomify.com/MAL-2025-146634/): Malicious code in promise-castor-pyxis-pipe (npm) (malicious package)
- [MAL-2025-146633](https://insights.sbomify.com/MAL-2025-146633/): Malicious code in promise-bellatrix-helios-acamar (npm) (malicious package)
- [MAL-2025-146632](https://insights.sbomify.com/MAL-2025-146632/): Malicious code in promise-antares-nconf-elara (npm) (malicious package)
- [MAL-2025-146631](https://insights.sbomify.com/MAL-2025-146631/): Malicious code in promise-aether-private-non-blocking (npm) (malicious package)
- [MAL-2025-146630](https://insights.sbomify.com/MAL-2025-146630/): Malicious code in procyon-zephyr-gacrux-fork (npm) (malicious package)
- [MAL-2025-14663](https://insights.sbomify.com/MAL-2025-14663/): Malicious code in app-seed (npm) (malicious package)
- [MAL-2025-146629](https://insights.sbomify.com/MAL-2025-146629/): Malicious code in procyon-zephyr-antares-element-ui (npm) (malicious package)
- [MAL-2025-146628](https://insights.sbomify.com/MAL-2025-146628/): Malicious code in procyon-xml-phoebe-parcel (npm) (malicious package)
- [MAL-2025-146627](https://insights.sbomify.com/MAL-2025-146627/): Malicious code in procyon-xanadu-carina-antares (npm) (malicious package)
- [MAL-2025-146626](https://insights.sbomify.com/MAL-2025-146626/): Malicious code in procyon-wolf-middleware-resolvers (npm) (malicious package)
- [MAL-2025-146625](https://insights.sbomify.com/MAL-2025-146625/): Malicious code in procyon-wezen-html-webpack-plugin-wezen (npm) (malicious package)
- [MAL-2025-146624](https://insights.sbomify.com/MAL-2025-146624/): Malicious code in procyon-wezen-europa-vuetify (npm) (malicious package)
- [MAL-2025-146623](https://insights.sbomify.com/MAL-2025-146623/): Malicious code in procyon-websockets-child-process-webdriver-manager (npm) (malicious package)
- [MAL-2025-146622](https://insights.sbomify.com/MAL-2025-146622/): Malicious code in procyon-update-nestjs-tailwindcss (npm) (malicious package)
- [MAL-2025-146621](https://insights.sbomify.com/MAL-2025-146621/): Malicious code in procyon-transport-antares-readable (npm) (malicious package)
- [MAL-2025-146620](https://insights.sbomify.com/MAL-2025-146620/): Malicious code in procyon-tethys-vulcan-gulp (npm) (malicious package)
- [MAL-2025-14662](https://insights.sbomify.com/MAL-2025-14662/): Malicious code in app-pulse-style (npm) (malicious package)
- [MAL-2025-146619](https://insights.sbomify.com/MAL-2025-146619/): Malicious code in procyon-tethys-epimetheus-stop (npm) (malicious package)
- [MAL-2025-146618](https://insights.sbomify.com/MAL-2025-146618/): Malicious code in procyon-test-dactyl-nightwatch (npm) (malicious package)
- [MAL-2025-146617](https://insights.sbomify.com/MAL-2025-146617/): Malicious code in procyon-supervisor-mongoose-hugo (npm) (malicious package)
- [MAL-2025-146616](https://insights.sbomify.com/MAL-2025-146616/): Malicious code in procyon-stream-registry-perseus (npm) (malicious package)
- [MAL-2025-146615](https://insights.sbomify.com/MAL-2025-146615/): Malicious code in procyon-sadr-bellatrix-proxima (npm) (malicious package)
- [MAL-2025-146614](https://insights.sbomify.com/MAL-2025-146614/): Malicious code in procyon-rehype-promise-apollo (npm) (malicious package)
- [MAL-2025-146613](https://insights.sbomify.com/MAL-2025-146613/): Malicious code in procyon-query-chakra-ui-sirius (npm) (malicious package)
- [MAL-2025-146612](https://insights.sbomify.com/MAL-2025-146612/): Malicious code in procyon-quantum-ganymede-typeorm (npm) (malicious package)
- [MAL-2025-146611](https://insights.sbomify.com/MAL-2025-146611/): Malicious code in procyon-procyon-quito-norma (npm) (malicious package)
- [MAL-2025-146610](https://insights.sbomify.com/MAL-2025-146610/): Malicious code in procyon-perseus-hermes-achernar (npm) (malicious package)
- [MAL-2025-14661](https://insights.sbomify.com/MAL-2025-14661/): Malicious code in app-bridge-testing-library (npm) (malicious package)
- [MAL-2025-146609](https://insights.sbomify.com/MAL-2025-146609/): Malicious code in procyon-non-blocking-mongoose-version (npm) (malicious package)
- [MAL-2025-146608](https://insights.sbomify.com/MAL-2025-146608/): Malicious code in procyon-nodejs-link-metalsmith (npm) (malicious package)
- [MAL-2025-146607](https://insights.sbomify.com/MAL-2025-146607/): Malicious code in procyon-nashira-husky-vortex (npm) (malicious package)
- [MAL-2025-146606](https://insights.sbomify.com/MAL-2025-146606/): Malicious code in procyon-mongoose-meteor-castor (npm) (malicious package)
- [MAL-2025-146605](https://insights.sbomify.com/MAL-2025-146605/): Malicious code in procyon-meteor-chai-xenon (npm) (malicious package)
- [MAL-2025-146604](https://insights.sbomify.com/MAL-2025-146604/): Malicious code in procyon-materialize-non-blocking-sqlite (npm) (malicious package)
- [MAL-2025-146603](https://insights.sbomify.com/MAL-2025-146603/): Malicious code in procyon-local-npm-cassini (npm) (malicious package)
- [MAL-2025-146602](https://insights.sbomify.com/MAL-2025-146602/): Malicious code in procyon-kronos-materialize-halley (npm) (malicious package)
- [MAL-2025-146601](https://insights.sbomify.com/MAL-2025-146601/): Malicious code in procyon-kastra-jwt-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-146600](https://insights.sbomify.com/MAL-2025-146600/): Malicious code in procyon-kastra-adonis-ultra (npm) (malicious package)
- [MAL-2025-14660](https://insights.sbomify.com/MAL-2025-14660/): Malicious code in app-bridge-core (npm) (malicious package)
- [MAL-2025-1466](https://insights.sbomify.com/MAL-2025-1466/): Malicious code in testapi1232 (npm) (malicious package)
- [MAL-2025-146599](https://insights.sbomify.com/MAL-2025-146599/): Malicious code in procyon-jest-ursa-rehype (npm) (malicious package)
- [MAL-2025-146598](https://insights.sbomify.com/MAL-2025-146598/): Malicious code in procyon-izar-uninstall-hyperion (npm) (malicious package)
- [MAL-2025-146597](https://insights.sbomify.com/MAL-2025-146597/): Malicious code in procyon-iota-mui-proxima (npm) (malicious package)
- [MAL-2025-146596](https://insights.sbomify.com/MAL-2025-146596/): Malicious code in procyon-hyperion-dotenv-parse-variables-blaze (npm) (malicious package)
- [MAL-2025-146595](https://insights.sbomify.com/MAL-2025-146595/): Malicious code in procyon-html-webpack-plugin-nodemon-phoebe (npm) (malicious package)
- [MAL-2025-146594](https://insights.sbomify.com/MAL-2025-146594/): Malicious code in procyon-hapi-csv-flare (npm) (malicious package)
- [MAL-2025-146593](https://insights.sbomify.com/MAL-2025-146593/): Malicious code in procyon-ganymede-foundation-graphql (npm) (malicious package)
- [MAL-2025-146592](https://insights.sbomify.com/MAL-2025-146592/): Malicious code in procyon-flare-webpack-bootes (npm) (malicious package)
- [MAL-2025-146591](https://insights.sbomify.com/MAL-2025-146591/): Malicious code in procyon-envconfig-readable-meissa (npm) (malicious package)
- [MAL-2025-146590](https://insights.sbomify.com/MAL-2025-146590/): Malicious code in procyon-element-ui-uninstall-less (npm) (malicious package)
- [MAL-2025-14659](https://insights.sbomify.com/MAL-2025-14659/): Malicious code in apollo-yakutsk-paleoanthropology-aurora (npm) (malicious package)
- [MAL-2025-146589](https://insights.sbomify.com/MAL-2025-146589/): Malicious code in procyon-element-ui-leda-arcturus (npm) (malicious package)
- [MAL-2025-146588](https://insights.sbomify.com/MAL-2025-146588/): Malicious code in procyon-electron-private-public (npm) (malicious package)
- [MAL-2025-146587](https://insights.sbomify.com/MAL-2025-146587/): Malicious code in procyon-electron-builder-reveal-md-changelog (npm) (malicious package)
- [MAL-2025-146586](https://insights.sbomify.com/MAL-2025-146586/): Malicious code in procyon-docusaurus-leda-convict (npm) (malicious package)
- [MAL-2025-146585](https://insights.sbomify.com/MAL-2025-146585/): Malicious code in procyon-css-minimizer-webpack-plugin-testcafe-markdown (npm) (malicious package)
- [MAL-2025-146584](https://insights.sbomify.com/MAL-2025-146584/): Malicious code in procyon-commitlint-resolvers-protractor (npm) (malicious package)
- [MAL-2025-146583](https://insights.sbomify.com/MAL-2025-146583/): Malicious code in procyon-commitizen-transform-celeste (npm) (malicious package)
- [MAL-2025-146582](https://insights.sbomify.com/MAL-2025-146582/): Malicious code in procyon-chakra-ui-comet-init (npm) (malicious package)
- [MAL-2025-146581](https://insights.sbomify.com/MAL-2025-146581/): Malicious code in procyon-castor-rate-limiter-europa (npm) (malicious package)
- [MAL-2025-146580](https://insights.sbomify.com/MAL-2025-146580/): Malicious code in procyon-cassini-loop-kinetic (npm) (malicious package)
- [MAL-2025-14658](https://insights.sbomify.com/MAL-2025-14658/): Malicious code in apollo-spectron-cladistics-geochemistry (npm) (malicious package)
- [MAL-2025-146579](https://insights.sbomify.com/MAL-2025-146579/): Malicious code in procyon-capella-astro-request (npm) (malicious package)
- [MAL-2025-146578](https://insights.sbomify.com/MAL-2025-146578/): Malicious code in procyon-axios-babel-eleventy (npm) (malicious package)
- [MAL-2025-146577](https://insights.sbomify.com/MAL-2025-146577/): Malicious code in procyon-atlas-jest-halley (npm) (malicious package)
- [MAL-2025-146576](https://insights.sbomify.com/MAL-2025-146576/): Malicious code in procyon-algol-procyon-prettier-stylelint (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1414/