# Vulnerabilities published in 2025


- [MAL-2025-146575](https://insights.sbomify.com/MAL-2025-146575/): Malicious code in process-xo-triton-farout (npm) (malicious package)
- [MAL-2025-146574](https://insights.sbomify.com/MAL-2025-146574/): Malicious code in process-writable-gacrux-semantic-ui (npm) (malicious package)
- [MAL-2025-146573](https://insights.sbomify.com/MAL-2025-146573/): Malicious code in process-titan-mira-middleware (npm) (malicious package)
- [MAL-2025-146572](https://insights.sbomify.com/MAL-2025-146572/): Malicious code in process-standard-miranda-standard (npm) (malicious package)
- [MAL-2025-146571](https://insights.sbomify.com/MAL-2025-146571/): Malicious code in process-spinner-node-config-meteor (npm) (malicious package)
- [MAL-2025-146570](https://insights.sbomify.com/MAL-2025-146570/): Malicious code in process-shelljs-neptune-taurus (npm) (malicious package)
- [MAL-2025-14657](https://insights.sbomify.com/MAL-2025-14657/): Malicious code in apollo-regulus-commitizen-webdriverio (npm) (malicious package)
- [MAL-2025-146569](https://insights.sbomify.com/MAL-2025-146569/): Malicious code in process-selenium-quasar-cors (npm) (malicious package)
- [MAL-2025-146568](https://insights.sbomify.com/MAL-2025-146568/): Malicious code in process-selenium-chariklo-sails (npm) (malicious package)
- [MAL-2025-146567](https://insights.sbomify.com/MAL-2025-146567/): Malicious code in process-sagitta-public-apollo (npm) (malicious package)
- [MAL-2025-146566](https://insights.sbomify.com/MAL-2025-146566/): Malicious code in process-rehype-gatsby-rocket (npm) (malicious package)
- [MAL-2025-146565](https://insights.sbomify.com/MAL-2025-146565/): Malicious code in process-radiant-frontend-version (npm) (malicious package)
- [MAL-2025-146564](https://insights.sbomify.com/MAL-2025-146564/): Malicious code in process-prettier-plugin-markdown-ganymede-hydra (npm) (malicious package)
- [MAL-2025-146563](https://insights.sbomify.com/MAL-2025-146563/): Malicious code in process-parcel-pino-pretty-csrf (npm) (malicious package)
- [MAL-2025-146562](https://insights.sbomify.com/MAL-2025-146562/): Malicious code in process-ophiuchus-ganymede-sedna (npm) (malicious package)
- [MAL-2025-146561](https://insights.sbomify.com/MAL-2025-146561/): Malicious code in process-nightmare-corvus-google (npm) (malicious package)
- [MAL-2025-146560](https://insights.sbomify.com/MAL-2025-146560/): Malicious code in process-nashira-alphard-dotenv-safe (npm) (malicious package)
- [MAL-2025-14656](https://insights.sbomify.com/MAL-2025-14656/): Malicious code in apollo-nucleosynthesis-inflation-cassini (npm) (malicious package)
- [MAL-2025-146559](https://insights.sbomify.com/MAL-2025-146559/): Malicious code in process-mysql-graphql-achernar (npm) (malicious package)
- [MAL-2025-146558](https://insights.sbomify.com/MAL-2025-146558/): Malicious code in process-mysql-cosmiconfig-npm (npm) (malicious package)
- [MAL-2025-146557](https://insights.sbomify.com/MAL-2025-146557/): Malicious code in process-mocha-loop-colors (npm) (malicious package)
- [MAL-2025-146556](https://insights.sbomify.com/MAL-2025-146556/): Malicious code in process-local-jest-rollup-plugin (npm) (malicious package)
- [MAL-2025-146555](https://insights.sbomify.com/MAL-2025-146555/): Malicious code in process-jsonp-build-concurrently (npm) (malicious package)
- [MAL-2025-146554](https://insights.sbomify.com/MAL-2025-146554/): Malicious code in process-install-rollup-plugin-readable (npm) (malicious package)
- [MAL-2025-146553](https://insights.sbomify.com/MAL-2025-146553/): Malicious code in process-init-ignite-regulus (npm) (malicious package)
- [MAL-2025-146552](https://insights.sbomify.com/MAL-2025-146552/): Malicious code in process-hapi-luna-perseus (npm) (malicious package)
- [MAL-2025-146551](https://insights.sbomify.com/MAL-2025-146551/): Malicious code in process-fornax-local-sync (npm) (malicious package)
- [MAL-2025-146550](https://insights.sbomify.com/MAL-2025-146550/): Malicious code in process-figures-run-script-node-config (npm) (malicious package)
- [MAL-2025-14655](https://insights.sbomify.com/MAL-2025-14655/): Malicious code in apollo-mongodb-darkmatter-whitedwarf (npm) (malicious package)
- [MAL-2025-146549](https://insights.sbomify.com/MAL-2025-146549/): Malicious code in process-enif-event-juno (npm) (malicious package)
- [MAL-2025-146548](https://insights.sbomify.com/MAL-2025-146548/): Malicious code in process-eleventy-tool-semantic-release (npm) (malicious package)
- [MAL-2025-146547](https://insights.sbomify.com/MAL-2025-146547/): Malicious code in process-convict-auriga-magellan (npm) (malicious package)
- [MAL-2025-146546](https://insights.sbomify.com/MAL-2025-146546/): Malicious code in process-apollo-axios-airbnb (npm) (malicious package)
- [MAL-2025-146545](https://insights.sbomify.com/MAL-2025-146545/): Malicious code in process-airbnb-ophiuchus-galaxy (npm) (malicious package)
- [MAL-2025-146544](https://insights.sbomify.com/MAL-2025-146544/): Malicious code in private-ursa-terser-capella (npm) (malicious package)
- [MAL-2025-146543](https://insights.sbomify.com/MAL-2025-146543/): Malicious code in private-slides-postgres-blitz (npm) (malicious package)
- [MAL-2025-146542](https://insights.sbomify.com/MAL-2025-146542/): Malicious code in private-semantic-ui-lynx-query (npm) (malicious package)
- [MAL-2025-146541](https://insights.sbomify.com/MAL-2025-146541/): Malicious code in private-readable-quantum-triton (npm) (malicious package)
- [MAL-2025-146540](https://insights.sbomify.com/MAL-2025-146540/): Malicious code in private-radiant-cosmos-kronos (npm) (malicious package)
- [MAL-2025-14654](https://insights.sbomify.com/MAL-2025-14654/): Malicious code in apollo-gmail-grabber (npm) (malicious package)
- [MAL-2025-146539](https://insights.sbomify.com/MAL-2025-146539/): Malicious code in private-protractor-geckodriver-babel (npm) (malicious package)
- [MAL-2025-146538](https://insights.sbomify.com/MAL-2025-146538/): Malicious code in private-phoebe-package-jupiter (npm) (malicious package)
- [MAL-2025-146537](https://insights.sbomify.com/MAL-2025-146537/): Malicious code in private-ora-react-bootstrap-library (npm) (malicious package)
- [MAL-2025-146536](https://insights.sbomify.com/MAL-2025-146536/): Malicious code in private-norma-firebase-pipe (npm) (malicious package)
- [MAL-2025-146535](https://insights.sbomify.com/MAL-2025-146535/): Malicious code in private-node-config-less-loader-parcel (npm) (malicious package)
- [MAL-2025-146534](https://insights.sbomify.com/MAL-2025-146534/): Malicious code in private-install-radiant-version (npm) (malicious package)
- [MAL-2025-146533](https://insights.sbomify.com/MAL-2025-146533/): Malicious code in private-halley-nodejs-subscription (npm) (malicious package)
- [MAL-2025-146532](https://insights.sbomify.com/MAL-2025-146532/): Malicious code in private-figures-package-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-146531](https://insights.sbomify.com/MAL-2025-146531/): Malicious code in private-eris-express-parcel (npm) (malicious package)
- [MAL-2025-146530](https://insights.sbomify.com/MAL-2025-146530/): Malicious code in private-cordelia-quark-sass-loader (npm) (malicious package)
- [MAL-2025-14653](https://insights.sbomify.com/MAL-2025-14653/): Malicious code in apollo-auriga-eslint-config-version (npm) (malicious package)
- [MAL-2025-146529](https://insights.sbomify.com/MAL-2025-146529/): Malicious code in private-apex-async-exec (npm) (malicious package)
- [MAL-2025-146528](https://insights.sbomify.com/MAL-2025-146528/): Malicious code in private-antares-command-remark (npm) (malicious package)
- [MAL-2025-146527](https://insights.sbomify.com/MAL-2025-146527/): Malicious code in prettier-yaml-commitlint-kinetic (npm) (malicious package)
- [MAL-2025-146526](https://insights.sbomify.com/MAL-2025-146526/): Malicious code in prettier-xanthus-mira-polaris (npm) (malicious package)
- [MAL-2025-146525](https://insights.sbomify.com/MAL-2025-146525/): Malicious code in prettier-vega-semantic-ui-celeste (npm) (malicious package)
- [MAL-2025-146524](https://insights.sbomify.com/MAL-2025-146524/): Malicious code in prettier-stylelint-winston-xenos-capella (npm) (malicious package)
- [MAL-2025-146523](https://insights.sbomify.com/MAL-2025-146523/): Malicious code in prettier-stylelint-webdriverio-xerxes-nightwatch (npm) (malicious package)
- [MAL-2025-146522](https://insights.sbomify.com/MAL-2025-146522/): Malicious code in prettier-stylelint-tool-ora-solis (npm) (malicious package)
- [MAL-2025-146521](https://insights.sbomify.com/MAL-2025-146521/): Malicious code in prettier-stylelint-titan-geckodriver-loopback (npm) (malicious package)
- [MAL-2025-146520](https://insights.sbomify.com/MAL-2025-146520/): Malicious code in prettier-stylelint-sync-install-loopback (npm) (malicious package)
- [MAL-2025-14652](https://insights.sbomify.com/MAL-2025-14652/): Malicious code in aplay-audio (npm) (malicious package)
- [MAL-2025-146519](https://insights.sbomify.com/MAL-2025-146519/): Malicious code in prettier-stylelint-slides-ursa-package (npm) (malicious package)
- [MAL-2025-146518](https://insights.sbomify.com/MAL-2025-146518/): Malicious code in prettier-stylelint-semantic-release-concurrently-vega (npm) (malicious package)
- [MAL-2025-146517](https://insights.sbomify.com/MAL-2025-146517/): Malicious code in prettier-stylelint-sails-eridanus-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-146516](https://insights.sbomify.com/MAL-2025-146516/): Malicious code in prettier-stylelint-rocket-ursa-grus (npm) (malicious package)
- [MAL-2025-146515](https://insights.sbomify.com/MAL-2025-146515/): Malicious code in prettier-stylelint-publish-ganymede-regulus (npm) (malicious package)
- [MAL-2025-146514](https://insights.sbomify.com/MAL-2025-146514/): Malicious code in prettier-stylelint-odin-hexo-init (npm) (malicious package)
- [MAL-2025-146513](https://insights.sbomify.com/MAL-2025-146513/): Malicious code in prettier-stylelint-oauth-dagda-venus (npm) (malicious package)
- [MAL-2025-146512](https://insights.sbomify.com/MAL-2025-146512/): Malicious code in prettier-stylelint-nashira-start-eslint-config (npm) (malicious package)
- [MAL-2025-146511](https://insights.sbomify.com/MAL-2025-146511/): Malicious code in prettier-stylelint-mysql-ultra-winston (npm) (malicious package)
- [MAL-2025-146510](https://insights.sbomify.com/MAL-2025-146510/): Malicious code in prettier-stylelint-miranda-rollup-plugin-csv (npm) (malicious package)
- [MAL-2025-14651](https://insights.sbomify.com/MAL-2025-14651/): Malicious code in apkplug (npm) (malicious package)
- [MAL-2025-146509](https://insights.sbomify.com/MAL-2025-146509/): Malicious code in prettier-stylelint-mensa-xerxes-ophiuchus (npm) (malicious package)
- [MAL-2025-146508](https://insights.sbomify.com/MAL-2025-146508/): Malicious code in prettier-stylelint-hermes-package-bootstrap (npm) (malicious package)
- [MAL-2025-146507](https://insights.sbomify.com/MAL-2025-146507/): Malicious code in prettier-stylelint-enif-ophiuchus-taurus (npm) (malicious package)
- [MAL-2025-146506](https://insights.sbomify.com/MAL-2025-146506/): Malicious code in prettier-stylelint-chai-sadr-middleware (npm) (malicious package)
- [MAL-2025-146505](https://insights.sbomify.com/MAL-2025-146505/): Malicious code in prettier-stop-query-indus (npm) (malicious package)
- [MAL-2025-146504](https://insights.sbomify.com/MAL-2025-146504/): Malicious code in prettier-soap-io-hermes (npm) (malicious package)
- [MAL-2025-146503](https://insights.sbomify.com/MAL-2025-146503/): Malicious code in prettier-semantic-ui-sagitta-tethys (npm) (malicious package)
- [MAL-2025-146502](https://insights.sbomify.com/MAL-2025-146502/): Malicious code in prettier-rollup-plugin-astro-virgo (npm) (malicious package)
- [MAL-2025-146501](https://insights.sbomify.com/MAL-2025-146501/): Malicious code in prettier-rehype-aquarius-node-sass (npm) (malicious package)
- [MAL-2025-146500](https://insights.sbomify.com/MAL-2025-146500/): Malicious code in prettier-polaris-avior-chalk (npm) (malicious package)
- [MAL-2025-14650](https://insights.sbomify.com/MAL-2025-14650/): Malicious code in apizoo (npm) (malicious package)
- [MAL-2025-1465](https://insights.sbomify.com/MAL-2025-1465/): Malicious code in ing-open-banking-cli-js (npm) (malicious package)
- [MAL-2025-146499](https://insights.sbomify.com/MAL-2025-146499/): Malicious code in prettier-plugin-markdown-xml-ursa-magellan (npm) (malicious package)
- [MAL-2025-146498](https://insights.sbomify.com/MAL-2025-146498/): Malicious code in prettier-plugin-markdown-winston-phenomic-airbnb (npm) (malicious package)
- [MAL-2025-146497](https://insights.sbomify.com/MAL-2025-146497/): Malicious code in prettier-plugin-markdown-uninstall-jupiter-umbriel (npm) (malicious package)
- [MAL-2025-146496](https://insights.sbomify.com/MAL-2025-146496/): Malicious code in prettier-plugin-markdown-sqlite-jest-publish (npm) (malicious package)
- [MAL-2025-146495](https://insights.sbomify.com/MAL-2025-146495/): Malicious code in prettier-plugin-markdown-sedna-sagitta-markdownlint (npm) (malicious package)
- [MAL-2025-146494](https://insights.sbomify.com/MAL-2025-146494/): Malicious code in prettier-plugin-markdown-sails-process-graphql (npm) (malicious package)
- [MAL-2025-146493](https://insights.sbomify.com/MAL-2025-146493/): Malicious code in prettier-plugin-markdown-rocket-jwt-spica (npm) (malicious package)
- [MAL-2025-146492](https://insights.sbomify.com/MAL-2025-146492/): Malicious code in prettier-plugin-markdown-proxima-webdriver-manager-kastra (npm) (malicious package)
- [MAL-2025-146491](https://insights.sbomify.com/MAL-2025-146491/): Malicious code in prettier-plugin-markdown-procyon-non-blocking-exec (npm) (malicious package)
- [MAL-2025-146490](https://insights.sbomify.com/MAL-2025-146490/): Malicious code in prettier-plugin-markdown-nebula-indus-dependencies (npm) (malicious package)
- [MAL-2025-14649](https://insights.sbomify.com/MAL-2025-14649/): Malicious code in apiportal-backend (npm) (malicious package)
- [MAL-2025-146489](https://insights.sbomify.com/MAL-2025-146489/): Malicious code in prettier-plugin-markdown-nashira-vega-elara (npm) (malicious package)
- [MAL-2025-146488](https://insights.sbomify.com/MAL-2025-146488/): Malicious code in prettier-plugin-markdown-miranda-firebase-ariel (npm) (malicious package)
- [MAL-2025-146487](https://insights.sbomify.com/MAL-2025-146487/): Malicious code in prettier-plugin-markdown-mira-rollup-plugin-slides (npm) (malicious package)
- [MAL-2025-146486](https://insights.sbomify.com/MAL-2025-146486/): Malicious code in prettier-plugin-markdown-indus-wasat-leda (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1415/