# Vulnerabilities published in 2025 - [MAL-2025-146304](https://insights.sbomify.com/MAL-2025-146304/): Malicious code in pm2-odin-carina-spinner (npm) (malicious package) - [MAL-2025-146303](https://insights.sbomify.com/MAL-2025-146303/): Malicious code in pm2-loopback-update-corvus (npm) (malicious package) - [MAL-2025-146302](https://insights.sbomify.com/MAL-2025-146302/): Malicious code in pm2-loop-izar-zenobia (npm) (malicious package) - [MAL-2025-146301](https://insights.sbomify.com/MAL-2025-146301/): Malicious code in pm2-hyperion-mysql-gatsby (npm) (malicious package) - [MAL-2025-146300](https://insights.sbomify.com/MAL-2025-146300/): Malicious code in pm2-helios-alphard-farout (npm) (malicious package) - [MAL-2025-14630](https://insights.sbomify.com/MAL-2025-14630/): Malicious code in ape-portal-public (npm) (malicious package) - [MAL-2025-1463](https://insights.sbomify.com/MAL-2025-1463/): Malicious code in sysaid-infra-analytics (npm) (malicious package) - [MAL-2025-146299](https://insights.sbomify.com/MAL-2025-146299/): Malicious code in pm2-halley-vega-eclipse (npm) (malicious package) - [MAL-2025-146298](https://insights.sbomify.com/MAL-2025-146298/): Malicious code in pm2-grus-castor-hermes (npm) (malicious package) - [MAL-2025-146297](https://insights.sbomify.com/MAL-2025-146297/): Malicious code in pm2-eleventy-google-epimetheus (npm) (malicious package) - [MAL-2025-146296](https://insights.sbomify.com/MAL-2025-146296/): Malicious code in pm2-draco-pulsar-yildun (npm) (malicious package) - [MAL-2025-146295](https://insights.sbomify.com/MAL-2025-146295/): Malicious code in pm2-cz-conventional-changelog-config-release-it (npm) (malicious package) - [MAL-2025-146294](https://insights.sbomify.com/MAL-2025-146294/): Malicious code in pm2-convict-lint-rimraf (npm) (malicious package) - [MAL-2025-146293](https://insights.sbomify.com/MAL-2025-146293/): Malicious code in pm2-colors-pm2-betelgeuse (npm) (malicious package) - [MAL-2025-146292](https://insights.sbomify.com/MAL-2025-146292/): Malicious code in pm2-apex-antd-axios (npm) (malicious package) - [MAL-2025-146291](https://insights.sbomify.com/MAL-2025-146291/): Malicious code in pm2-algol-flare-jekyll (npm) (malicious package) - [MAL-2025-146290](https://insights.sbomify.com/MAL-2025-146290/): Malicious code in pm2-airbnb-rollup-chalk (npm) (malicious package) - [MAL-2025-14629](https://insights.sbomify.com/MAL-2025-14629/): Malicious code in aparapi (npm) (malicious package) - [MAL-2025-146289](https://insights.sbomify.com/MAL-2025-146289/): Malicious code in playwright-yonder-module-nodemon (npm) (malicious package) - [MAL-2025-146288](https://insights.sbomify.com/MAL-2025-146288/): Malicious code in playwright-wasat-sagitta-xenon (npm) (malicious package) - [MAL-2025-146287](https://insights.sbomify.com/MAL-2025-146287/): Malicious code in playwright-stream-playwright-acamar (npm) (malicious package) - [MAL-2025-146286](https://insights.sbomify.com/MAL-2025-146286/): Malicious code in playwright-proxima-dactyl-umbriel (npm) (malicious package) - [MAL-2025-146285](https://insights.sbomify.com/MAL-2025-146285/): Malicious code in playwright-pipe-jwt-middleware (npm) (malicious package) - [MAL-2025-146284](https://insights.sbomify.com/MAL-2025-146284/): Malicious code in playwright-meteor-loglevel-enif (npm) (malicious package) - [MAL-2025-146283](https://insights.sbomify.com/MAL-2025-146283/): Malicious code in playwright-mensa-build-ganymede (npm) (malicious package) - [MAL-2025-146282](https://insights.sbomify.com/MAL-2025-146282/): Malicious code in playwright-library-build-yaml (npm) (malicious package) - [MAL-2025-146281](https://insights.sbomify.com/MAL-2025-146281/): Malicious code in playwright-fornax-enif-ultra (npm) (malicious package) - [MAL-2025-146280](https://insights.sbomify.com/MAL-2025-146280/): Malicious code in playwright-delphinus-javascript-loopback (npm) (malicious package) - [MAL-2025-14628](https://insights.sbomify.com/MAL-2025-14628/): Malicious code in apar (npm) (malicious package) - [MAL-2025-146279](https://insights.sbomify.com/MAL-2025-146279/): Malicious code in playwright-cressida-rehype-dotenv-safe (npm) (malicious package) - [MAL-2025-146278](https://insights.sbomify.com/MAL-2025-146278/): Malicious code in playwright-cosmiconfig-helios-jabbah (npm) (malicious package) - [MAL-2025-146277](https://insights.sbomify.com/MAL-2025-146277/): Malicious code in playwright-cors-bulma-mensa (npm) (malicious package) - [MAL-2025-146276](https://insights.sbomify.com/MAL-2025-146276/): Malicious code in playwright-cli-antares-lynx (npm) (malicious package) - [MAL-2025-146275](https://insights.sbomify.com/MAL-2025-146275/): Malicious code in playwright-chakra-ui-ora-hapi (npm) (malicious package) - [MAL-2025-146274](https://insights.sbomify.com/MAL-2025-146274/): Malicious code in playwright-centaurus-mira-weywot (npm) (malicious package) - [MAL-2025-146273](https://insights.sbomify.com/MAL-2025-146273/): Malicious code in playwright-bellatrix-postcss-loader-query (npm) (malicious package) - [MAL-2025-146272](https://insights.sbomify.com/MAL-2025-146272/): Malicious code in playwright-achernar-fork-quantum (npm) (malicious package) - [MAL-2025-146271](https://insights.sbomify.com/MAL-2025-146271/): Malicious code in pipe-umbra-mira-concurrently (npm) (malicious package) - [MAL-2025-146270](https://insights.sbomify.com/MAL-2025-146270/): Malicious code in pipe-testcafe-oauth-uninstall (npm) (malicious package) - [MAL-2025-14627](https://insights.sbomify.com/MAL-2025-14627/): Malicious code in ap607 (npm) (malicious package) - [MAL-2025-146269](https://insights.sbomify.com/MAL-2025-146269/): Malicious code in pipe-release-it-hermes-rollup-plugin (npm) (malicious package) - [MAL-2025-146268](https://insights.sbomify.com/MAL-2025-146268/): Malicious code in pipe-rehype-browserify-express (npm) (malicious package) - [MAL-2025-146267](https://insights.sbomify.com/MAL-2025-146267/): Malicious code in pipe-query-puppeteer-postcss (npm) (malicious package) - [MAL-2025-146266](https://insights.sbomify.com/MAL-2025-146266/): Malicious code in pipe-prettier-stylelint-fomalhaut-telesto (npm) (malicious package) - [MAL-2025-146265](https://insights.sbomify.com/MAL-2025-146265/): Malicious code in pipe-phenomic-zenith-dotenv-safe (npm) (malicious package) - [MAL-2025-146264](https://insights.sbomify.com/MAL-2025-146264/): Malicious code in pipe-mini-css-extract-plugin-vuepress-phoebe (npm) (malicious package) - [MAL-2025-146263](https://insights.sbomify.com/MAL-2025-146263/): Malicious code in pipe-jabbah-prettier-stylelint-ganymede (npm) (malicious package) - [MAL-2025-146262](https://insights.sbomify.com/MAL-2025-146262/): Malicious code in pipe-dynamo-nodejs-stream (npm) (malicious package) - [MAL-2025-146261](https://insights.sbomify.com/MAL-2025-146261/): Malicious code in pipe-docusaurus-docusaurus-pino (npm) (malicious package) - [MAL-2025-146260](https://insights.sbomify.com/MAL-2025-146260/): Malicious code in pipe-cygnus-telesto-postcss (npm) (malicious package) - [MAL-2025-14626](https://insights.sbomify.com/MAL-2025-14626/): Malicious code in ap-is-required-by-the-labour-digital-membership-card (npm) (malicious package) - [MAL-2025-146259](https://insights.sbomify.com/MAL-2025-146259/): Malicious code in pipe-await-got-prettier-plugin-markdown (npm) (malicious package) - [MAL-2025-146258](https://insights.sbomify.com/MAL-2025-146258/): Malicious code in pipe-apex-cypress-uninstall (npm) (malicious package) - [MAL-2025-146257](https://insights.sbomify.com/MAL-2025-146257/): Malicious code in pipe-antares-iota-registry (npm) (malicious package) - [MAL-2025-146256](https://insights.sbomify.com/MAL-2025-146256/): Malicious code in pino-xanthus-got-transform (npm) (malicious package) - [MAL-2025-146255](https://insights.sbomify.com/MAL-2025-146255/): Malicious code in pino-venus-markdownlint-express (npm) (malicious package) - [MAL-2025-146254](https://insights.sbomify.com/MAL-2025-146254/): Malicious code in pino-uglify-js-uninstall-cli (npm) (malicious package) - [MAL-2025-146253](https://insights.sbomify.com/MAL-2025-146253/): Malicious code in pino-spica-leda-hyperion (npm) (malicious package) - [MAL-2025-146252](https://insights.sbomify.com/MAL-2025-146252/): Malicious code in pino-scripts-pm2-package (npm) (malicious package) - [MAL-2025-146251](https://insights.sbomify.com/MAL-2025-146251/): Malicious code in pino-rigel-google-antares (npm) (malicious package) - [MAL-2025-146250](https://insights.sbomify.com/MAL-2025-146250/): Malicious code in pino-regulus-centaurus-equinox (npm) (malicious package) - [MAL-2025-14625](https://insights.sbomify.com/MAL-2025-14625/): Malicious code in aoxkqljgedbycsif (npm) (malicious package) - [MAL-2025-146249](https://insights.sbomify.com/MAL-2025-146249/): Malicious code in pino-rate-limiter-nconf-subscription (npm) (malicious package) - [MAL-2025-146248](https://insights.sbomify.com/MAL-2025-146248/): Malicious code in pino-pretty-yonder-wasat-lyra (npm) (malicious package) - [MAL-2025-146247](https://insights.sbomify.com/MAL-2025-146247/): Malicious code in pino-pretty-xerxes-rate-limiter-nextjs (npm) (malicious package) - [MAL-2025-146246](https://insights.sbomify.com/MAL-2025-146246/): Malicious code in pino-pretty-winston-json-acamar (npm) (malicious package) - [MAL-2025-146245](https://insights.sbomify.com/MAL-2025-146245/): Malicious code in pino-pretty-webdriverio-sails-rollup-plugin (npm) (malicious package) - [MAL-2025-146244](https://insights.sbomify.com/MAL-2025-146244/): Malicious code in pino-pretty-sirius-query-lynx (npm) (malicious package) - [MAL-2025-146243](https://insights.sbomify.com/MAL-2025-146243/): Malicious code in pino-pretty-rate-limiter-xerxes-flare (npm) (malicious package) - [MAL-2025-146242](https://insights.sbomify.com/MAL-2025-146242/): Malicious code in pino-pretty-procyon-redis-prettier (npm) (malicious package) - [MAL-2025-146241](https://insights.sbomify.com/MAL-2025-146241/): Malicious code in pino-pretty-package-markdown-mysql (npm) (malicious package) - [MAL-2025-146240](https://insights.sbomify.com/MAL-2025-146240/): Malicious code in pino-pretty-markdown-pdf-altair-sirius (npm) (malicious package) - [MAL-2025-14624](https://insights.sbomify.com/MAL-2025-14624/): Malicious code in aou-ui-angular (npm) (malicious package) - [MAL-2025-146239](https://insights.sbomify.com/MAL-2025-146239/): Malicious code in pino-pretty-less-janus-kastra (npm) (malicious package) - [MAL-2025-146238](https://insights.sbomify.com/MAL-2025-146238/): Malicious code in pino-pretty-jasmine-warp-enif (npm) (malicious package) - [MAL-2025-146237](https://insights.sbomify.com/MAL-2025-146237/): Malicious code in pino-pretty-inquirer-ultra-vortex (npm) (malicious package) - [MAL-2025-146236](https://insights.sbomify.com/MAL-2025-146236/): Malicious code in pino-pretty-hyperion-terser-barnard (npm) (malicious package) - [MAL-2025-146235](https://insights.sbomify.com/MAL-2025-146235/): Malicious code in pino-pretty-husky-development-deimos (npm) (malicious package) - [MAL-2025-146234](https://insights.sbomify.com/MAL-2025-146234/): Malicious code in pino-pretty-hapi-solis-markdown-pdf (npm) (malicious package) - [MAL-2025-146233](https://insights.sbomify.com/MAL-2025-146233/): Malicious code in pino-pretty-gemini-blaze-stream (npm) (malicious package) - [MAL-2025-146232](https://insights.sbomify.com/MAL-2025-146232/): Malicious code in pino-pretty-frontend-sqlite-hydra (npm) (malicious package) - [MAL-2025-146231](https://insights.sbomify.com/MAL-2025-146231/): Malicious code in pino-pretty-comet-apollo-perseus (npm) (malicious package) - [MAL-2025-146230](https://insights.sbomify.com/MAL-2025-146230/): Malicious code in pino-pretty-bunyan-aquarius-markdown (npm) (malicious package) - [MAL-2025-14623](https://insights.sbomify.com/MAL-2025-14623/): Malicious code in aoo-component (npm) (malicious package) - [MAL-2025-146229](https://insights.sbomify.com/MAL-2025-146229/): Malicious code in pino-pretty-antares-wolf-async (npm) (malicious package) - [MAL-2025-146228](https://insights.sbomify.com/MAL-2025-146228/): Malicious code in pino-orbit-bootes-janus (npm) (malicious package) - [MAL-2025-146227](https://insights.sbomify.com/MAL-2025-146227/): Malicious code in pino-nebula-metalsmith-spectron (npm) (malicious package) - [MAL-2025-146226](https://insights.sbomify.com/MAL-2025-146226/): Malicious code in pino-mongodb-query-kaus (npm) (malicious package) - [MAL-2025-146225](https://insights.sbomify.com/MAL-2025-146225/): Malicious code in pino-middleware-zephyr-auth0 (npm) (malicious package) - [MAL-2025-146224](https://insights.sbomify.com/MAL-2025-146224/): Malicious code in pino-meteor-mdx-despina (npm) (malicious package) - [MAL-2025-146223](https://insights.sbomify.com/MAL-2025-146223/): Malicious code in pino-meissa-izar-nextjs (npm) (malicious package) - [MAL-2025-146222](https://insights.sbomify.com/MAL-2025-146222/): Malicious code in pino-loopback-uninstall-eslint-plugin (npm) (malicious package) - [MAL-2025-146221](https://insights.sbomify.com/MAL-2025-146221/): Malicious code in pino-loop-relay-xml (npm) (malicious package) - [MAL-2025-146220](https://insights.sbomify.com/MAL-2025-146220/): Malicious code in pino-jwt-spawn-koa (npm) (malicious package) - [MAL-2025-14622](https://insights.sbomify.com/MAL-2025-14622/): Malicious code in aoisa (npm) (malicious package) - [MAL-2025-146219](https://insights.sbomify.com/MAL-2025-146219/): Malicious code in pino-gridsome-lyra-browserify (npm) (malicious package) - [MAL-2025-146218](https://insights.sbomify.com/MAL-2025-146218/): Malicious code in pino-foundation-norma-lint (npm) (malicious package) - [MAL-2025-146217](https://insights.sbomify.com/MAL-2025-146217/): Malicious code in pino-electron-mongodb-mocha (npm) (malicious package) - [MAL-2025-146216](https://insights.sbomify.com/MAL-2025-146216/): Malicious code in pino-dione-bellatrix-dactyl (npm) (malicious package) - [MAL-2025-146215](https://insights.sbomify.com/MAL-2025-146215/): Malicious code in pino-cz-conventional-changelog-sass-loader-mongodb (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1418/