# Vulnerabilities published in 2025


- [MAL-2025-146485](https://insights.sbomify.com/MAL-2025-146485/): Malicious code in prettier-plugin-markdown-hyperion-xo-xanthus (npm) (malicious package)
- [MAL-2025-146484](https://insights.sbomify.com/MAL-2025-146484/): Malicious code in prettier-plugin-markdown-hydra-sass-loader-auth0 (npm) (malicious package)
- [MAL-2025-146483](https://insights.sbomify.com/MAL-2025-146483/): Malicious code in prettier-plugin-markdown-hermes-inquirer-rehype (npm) (malicious package)
- [MAL-2025-146482](https://insights.sbomify.com/MAL-2025-146482/): Malicious code in prettier-plugin-markdown-google-jekyll-dagda (npm) (malicious package)
- [MAL-2025-146481](https://insights.sbomify.com/MAL-2025-146481/): Malicious code in prettier-plugin-markdown-eslint-config-middleware-optimize-css-assets-webpack-plugin (npm) (malicious package)
- [MAL-2025-146480](https://insights.sbomify.com/MAL-2025-146480/): Malicious code in prettier-plugin-markdown-eris-bellatrix-oauth (npm) (malicious package)
- [MAL-2025-14648](https://insights.sbomify.com/MAL-2025-14648/): Malicious code in api-util (npm) (malicious package)
- [MAL-2025-146479](https://insights.sbomify.com/MAL-2025-146479/): Malicious code in prettier-plugin-markdown-concurrently-helmet-carina (npm) (malicious package)
- [MAL-2025-146478](https://insights.sbomify.com/MAL-2025-146478/): Malicious code in prettier-plugin-markdown-browserify-link-radiant (npm) (malicious package)
- [MAL-2025-146477](https://insights.sbomify.com/MAL-2025-146477/): Malicious code in prettier-plugin-markdown-backend-hyperion-vortex (npm) (malicious package)
- [MAL-2025-146476](https://insights.sbomify.com/MAL-2025-146476/): Malicious code in prettier-plugin-markdown-auth0-firebase-yildun (npm) (malicious package)
- [MAL-2025-146475](https://insights.sbomify.com/MAL-2025-146475/): Malicious code in prettier-plugin-markdown-async-taurus-xenon (npm) (malicious package)
- [MAL-2025-146474](https://insights.sbomify.com/MAL-2025-146474/): Malicious code in prettier-plugin-markdown-acamar-envconfig-thuban (npm) (malicious package)
- [MAL-2025-146473](https://insights.sbomify.com/MAL-2025-146473/): Malicious code in prettier-plugin-markdown-acamar-airbnb-wolf (npm) (malicious package)
- [MAL-2025-146472](https://insights.sbomify.com/MAL-2025-146472/): Malicious code in prettier-nuxtjs-metalsmith-miranda (npm) (malicious package)
- [MAL-2025-146471](https://insights.sbomify.com/MAL-2025-146471/): Malicious code in prettier-nightwatch-request-install (npm) (malicious package)
- [MAL-2025-146470](https://insights.sbomify.com/MAL-2025-146470/): Malicious code in prettier-json-tailwindcss-changelog (npm) (malicious package)
- [MAL-2025-14647](https://insights.sbomify.com/MAL-2025-14647/): Malicious code in api-usage_create-tensor (npm) (malicious package)
- [MAL-2025-146469](https://insights.sbomify.com/MAL-2025-146469/): Malicious code in prettier-ini-babel-mdx (npm) (malicious package)
- [MAL-2025-146468](https://insights.sbomify.com/MAL-2025-146468/): Malicious code in prettier-fornax-exec-halley (npm) (malicious package)
- [MAL-2025-146467](https://insights.sbomify.com/MAL-2025-146467/): Malicious code in prettier-europa-sequelize-neptune (npm) (malicious package)
- [MAL-2025-146466](https://insights.sbomify.com/MAL-2025-146466/): Malicious code in prettier-enceladus-pegasus-bunyan (npm) (malicious package)
- [MAL-2025-146465](https://insights.sbomify.com/MAL-2025-146465/): Malicious code in prettier-dione-hyperion-auriga (npm) (malicious package)
- [MAL-2025-146464](https://insights.sbomify.com/MAL-2025-146464/): Malicious code in prettier-dagda-repository-quito (npm) (malicious package)
- [MAL-2025-146463](https://insights.sbomify.com/MAL-2025-146463/): Malicious code in prettier-cosmiconfig-testcafe-lint-staged (npm) (malicious package)
- [MAL-2025-146462](https://insights.sbomify.com/MAL-2025-146462/): Malicious code in prettier-cordelia-soap-websockets (npm) (malicious package)
- [MAL-2025-146461](https://insights.sbomify.com/MAL-2025-146461/): Malicious code in prettier-cli-css-minimizer-webpack-plugin-node-sass (npm) (malicious package)
- [MAL-2025-146460](https://insights.sbomify.com/MAL-2025-146460/): Malicious code in prettier-cassini-epimetheus-websockets (npm) (malicious package)
- [MAL-2025-14646](https://insights.sbomify.com/MAL-2025-14646/): Malicious code in api-shoppe-demo (npm) (malicious package)
- [MAL-2025-146459](https://insights.sbomify.com/MAL-2025-146459/): Malicious code in prettier-callback-docusaurus-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-146458](https://insights.sbomify.com/MAL-2025-146458/): Malicious code in prettier-bootes-foundation-gacrux (npm) (malicious package)
- [MAL-2025-146457](https://insights.sbomify.com/MAL-2025-146457/): Malicious code in prettier-blaze-fusion-cors (npm) (malicious package)
- [MAL-2025-146456](https://insights.sbomify.com/MAL-2025-146456/): Malicious code in prettier-betelgeuse-element-ui-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-146455](https://insights.sbomify.com/MAL-2025-146455/): Malicious code in prettier-await-sedna-gravity (npm) (malicious package)
- [MAL-2025-146454](https://insights.sbomify.com/MAL-2025-146454/): Malicious code in preliminary-indigo-junglefowl (npm) (malicious package)
- [MAL-2025-146453](https://insights.sbomify.com/MAL-2025-146453/): Malicious code in postgres-zenith-gatsby-reveal-md (npm) (malicious package)
- [MAL-2025-146452](https://insights.sbomify.com/MAL-2025-146452/): Malicious code in postgres-xerxes-changelog-corvus (npm) (malicious package)
- [MAL-2025-146451](https://insights.sbomify.com/MAL-2025-146451/): Malicious code in postgres-websockets-rocket-xerxes (npm) (malicious package)
- [MAL-2025-146450](https://insights.sbomify.com/MAL-2025-146450/): Malicious code in postgres-webdriver-manager-cosmos-slidev (npm) (malicious package)
- [MAL-2025-14645](https://insights.sbomify.com/MAL-2025-14645/): Malicious code in api-services (npm) (malicious package)
- [MAL-2025-146449](https://insights.sbomify.com/MAL-2025-146449/): Malicious code in postgres-spinner-titan-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-146448](https://insights.sbomify.com/MAL-2025-146448/): Malicious code in postgres-spawn-rigel-private (npm) (malicious package)
- [MAL-2025-146447](https://insights.sbomify.com/MAL-2025-146447/): Malicious code in postgres-sails-jekyll-react-bootstrap (npm) (malicious package)
- [MAL-2025-146446](https://insights.sbomify.com/MAL-2025-146446/): Malicious code in postgres-rest-fornax-enceladus (npm) (malicious package)
- [MAL-2025-146445](https://insights.sbomify.com/MAL-2025-146445/): Malicious code in postgres-resolvers-luna-acamar (npm) (malicious package)
- [MAL-2025-146444](https://insights.sbomify.com/MAL-2025-146444/): Malicious code in postgres-phoebe-vulcan-algol (npm) (malicious package)
- [MAL-2025-146443](https://insights.sbomify.com/MAL-2025-146443/): Malicious code in postgres-perseus-karma-tool (npm) (malicious package)
- [MAL-2025-146442](https://insights.sbomify.com/MAL-2025-146442/): Malicious code in postgres-pavo-tool-procyon (npm) (malicious package)
- [MAL-2025-146441](https://insights.sbomify.com/MAL-2025-146441/): Malicious code in postgres-neptune-start-run-script (npm) (malicious package)
- [MAL-2025-146440](https://insights.sbomify.com/MAL-2025-146440/): Malicious code in postgres-neptune-bootes-query (npm) (malicious package)
- [MAL-2025-14644](https://insights.sbomify.com/MAL-2025-14644/): Malicious code in api-security-test (npm) (malicious package)
- [MAL-2025-146439](https://insights.sbomify.com/MAL-2025-146439/): Malicious code in postgres-meissa-install-markdownlint (npm) (malicious package)
- [MAL-2025-146438](https://insights.sbomify.com/MAL-2025-146438/): Malicious code in postgres-lynx-server-thuban (npm) (malicious package)
- [MAL-2025-146437](https://insights.sbomify.com/MAL-2025-146437/): Malicious code in postgres-iota-testcafe-chakra-ui (npm) (malicious package)
- [MAL-2025-146436](https://insights.sbomify.com/MAL-2025-146436/): Malicious code in postgres-inquirer-octans-halley (npm) (malicious package)
- [MAL-2025-146435](https://insights.sbomify.com/MAL-2025-146435/): Malicious code in postgres-hydra-weywot-sagitta (npm) (malicious package)
- [MAL-2025-146434](https://insights.sbomify.com/MAL-2025-146434/): Malicious code in postgres-google-europa-update (npm) (malicious package)
- [MAL-2025-146433](https://insights.sbomify.com/MAL-2025-146433/): Malicious code in postgres-gemini-acamar-unuk (npm) (malicious package)
- [MAL-2025-146432](https://insights.sbomify.com/MAL-2025-146432/): Malicious code in postgres-geckodriver-less-loader-quark (npm) (malicious package)
- [MAL-2025-146431](https://insights.sbomify.com/MAL-2025-146431/): Malicious code in postgres-figures-wezen-grus (npm) (malicious package)
- [MAL-2025-146430](https://insights.sbomify.com/MAL-2025-146430/): Malicious code in postgres-dione-helmet-chakra-ui (npm) (malicious package)
- [MAL-2025-14643](https://insights.sbomify.com/MAL-2025-14643/): Malicious code in api-manh (npm) (malicious package)
- [MAL-2025-146429](https://insights.sbomify.com/MAL-2025-146429/): Malicious code in postgres-canopus-supervisor-standard (npm) (malicious package)
- [MAL-2025-146428](https://insights.sbomify.com/MAL-2025-146428/): Malicious code in postgres-bulma-solis-deneb (npm) (malicious package)
- [MAL-2025-146427](https://insights.sbomify.com/MAL-2025-146427/): Malicious code in postcss-yaml-lynx-build (npm) (malicious package)
- [MAL-2025-146426](https://insights.sbomify.com/MAL-2025-146426/): Malicious code in postcss-xanthus-gulp-subscription (npm) (malicious package)
- [MAL-2025-146425](https://insights.sbomify.com/MAL-2025-146425/): Malicious code in postcss-xanadu-test-mira (npm) (malicious package)
- [MAL-2025-146424](https://insights.sbomify.com/MAL-2025-146424/): Malicious code in postcss-vuepress-nestjs-init (npm) (malicious package)
- [MAL-2025-146423](https://insights.sbomify.com/MAL-2025-146423/): Malicious code in postcss-start-hapi-hexo (npm) (malicious package)
- [MAL-2025-146422](https://insights.sbomify.com/MAL-2025-146422/): Malicious code in postcss-slides-browserify-less-loader (npm) (malicious package)
- [MAL-2025-146421](https://insights.sbomify.com/MAL-2025-146421/): Malicious code in postcss-relay-chromedriver-vega (npm) (malicious package)
- [MAL-2025-146420](https://insights.sbomify.com/MAL-2025-146420/): Malicious code in postcss-protractor-karma-configstore (npm) (malicious package)
- [MAL-2025-14642](https://insights.sbomify.com/MAL-2025-14642/): Malicious code in api-facebooknew (npm) (malicious package)
- [MAL-2025-146419](https://insights.sbomify.com/MAL-2025-146419/): Malicious code in postcss-procyon-xanadu-run-script (npm) (malicious package)
- [MAL-2025-146418](https://insights.sbomify.com/MAL-2025-146418/): Malicious code in postcss-postcss-package-impulse (npm) (malicious package)
- [MAL-2025-146417](https://insights.sbomify.com/MAL-2025-146417/): Malicious code in postcss-neptune-ursa-nextjs (npm) (malicious package)
- [MAL-2025-146416](https://insights.sbomify.com/MAL-2025-146416/): Malicious code in postcss-magellan-ursa-zenobia (npm) (malicious package)
- [MAL-2025-146415](https://insights.sbomify.com/MAL-2025-146415/): Malicious code in postcss-loader-yakutsk-europa-orbit (npm) (malicious package)
- [MAL-2025-146414](https://insights.sbomify.com/MAL-2025-146414/): Malicious code in postcss-loader-winston-transport-spinner (npm) (malicious package)
- [MAL-2025-146413](https://insights.sbomify.com/MAL-2025-146413/): Malicious code in postcss-loader-webdriver-manager-chalk-json (npm) (malicious package)
- [MAL-2025-146412](https://insights.sbomify.com/MAL-2025-146412/): Malicious code in postcss-loader-telesto-vulcan-phenomic (npm) (malicious package)
- [MAL-2025-146411](https://insights.sbomify.com/MAL-2025-146411/): Malicious code in postcss-loader-style-loader-foundation-ariel (npm) (malicious package)
- [MAL-2025-146410](https://insights.sbomify.com/MAL-2025-146410/): Malicious code in postcss-loader-slidev-gulp-bellatrix (npm) (malicious package)
- [MAL-2025-14641](https://insights.sbomify.com/MAL-2025-14641/): Malicious code in api-devices (npm) (malicious package)
- [MAL-2025-146409](https://insights.sbomify.com/MAL-2025-146409/): Malicious code in postcss-loader-semantic-release-slides-buffer (npm) (malicious package)
- [MAL-2025-146408](https://insights.sbomify.com/MAL-2025-146408/): Malicious code in postcss-loader-scorpius-centaurus-farout (npm) (malicious package)
- [MAL-2025-146407](https://insights.sbomify.com/MAL-2025-146407/): Malicious code in postcss-loader-sagitta-dynamo-altair (npm) (malicious package)
- [MAL-2025-146406](https://insights.sbomify.com/MAL-2025-146406/): Malicious code in postcss-loader-quito-iota-commitizen (npm) (malicious package)
- [MAL-2025-146405](https://insights.sbomify.com/MAL-2025-146405/): Malicious code in postcss-loader-pegasus-registry-chai (npm) (malicious package)
- [MAL-2025-146404](https://insights.sbomify.com/MAL-2025-146404/): Malicious code in postcss-loader-oauth-chai-miranda (npm) (malicious package)
- [MAL-2025-146403](https://insights.sbomify.com/MAL-2025-146403/): Malicious code in postcss-loader-npm-child-process-gravity (npm) (malicious package)
- [MAL-2025-146402](https://insights.sbomify.com/MAL-2025-146402/): Malicious code in postcss-loader-nightwatch-hugo-tethys (npm) (malicious package)
- [MAL-2025-146401](https://insights.sbomify.com/MAL-2025-146401/): Malicious code in postcss-loader-mutation-command-procyon (npm) (malicious package)
- [MAL-2025-146400](https://insights.sbomify.com/MAL-2025-146400/): Malicious code in postcss-loader-mini-css-extract-plugin-development-heka (npm) (malicious package)
- [MAL-2025-14640](https://insights.sbomify.com/MAL-2025-14640/): Malicious code in api-chatfb-test (npm) (malicious package)
- [MAL-2025-1464](https://insights.sbomify.com/MAL-2025-1464/): Malicious code in archon7 (npm) (malicious package)
- [MAL-2025-146399](https://insights.sbomify.com/MAL-2025-146399/): Malicious code in postcss-loader-meteor-mocha-phoenix (npm) (malicious package)
- [MAL-2025-146398](https://insights.sbomify.com/MAL-2025-146398/): Malicious code in postcss-loader-luna-eslint-despina (npm) (malicious package)
- [MAL-2025-146397](https://insights.sbomify.com/MAL-2025-146397/): Malicious code in postcss-loader-halley-middleware-xanadu (npm) (malicious package)
- [MAL-2025-146396](https://insights.sbomify.com/MAL-2025-146396/): Malicious code in postcss-loader-galaxy-kaus-cygnus (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1416/