# Vulnerabilities published in 2025


- [MAL-2025-146214](https://insights.sbomify.com/MAL-2025-146214/): Malicious code in pino-cypress-nova-commitizen (npm) (malicious package)
- [MAL-2025-146213](https://insights.sbomify.com/MAL-2025-146213/): Malicious code in pino-cross-env-jasmine-json (npm) (malicious package)
- [MAL-2025-146212](https://insights.sbomify.com/MAL-2025-146212/): Malicious code in pino-cosmiconfig-eris-perseus (npm) (malicious package)
- [MAL-2025-146211](https://insights.sbomify.com/MAL-2025-146211/): Malicious code in pino-config-equinox-mui (npm) (malicious package)
- [MAL-2025-146210](https://insights.sbomify.com/MAL-2025-146210/): Malicious code in pino-castor-titan-farout (npm) (malicious package)
- [MAL-2025-14621](https://insights.sbomify.com/MAL-2025-14621/): Malicious code in aoidkwpyuveztkhj (npm) (malicious package)
- [MAL-2025-146209](https://insights.sbomify.com/MAL-2025-146209/): Malicious code in pino-apollo-radiant-tool (npm) (malicious package)
- [MAL-2025-146208](https://insights.sbomify.com/MAL-2025-146208/): Malicious code in pino-altair-uninstall-sirius (npm) (malicious package)
- [MAL-2025-146207](https://insights.sbomify.com/MAL-2025-146207/): Malicious code in pino-achernar-helios-perseus (npm) (malicious package)
- [MAL-2025-146206](https://insights.sbomify.com/MAL-2025-146206/): Malicious code in phoenix-umbriel-unuk-hermes (npm) (malicious package)
- [MAL-2025-146205](https://insights.sbomify.com/MAL-2025-146205/): Malicious code in phoenix-pipe-subscription-helios (npm) (malicious package)
- [MAL-2025-146204](https://insights.sbomify.com/MAL-2025-146204/): Malicious code in phoenix-pipe-luna-nashira (npm) (malicious package)
- [MAL-2025-146203](https://insights.sbomify.com/MAL-2025-146203/): Malicious code in phoenix-ophiuchus-webdriver-mocha-zenobia (npm) (malicious package)
- [MAL-2025-146202](https://insights.sbomify.com/MAL-2025-146202/): Malicious code in phoenix-native-css-minimizer-webpack-plugin-jekyll (npm) (malicious package)
- [MAL-2025-146201](https://insights.sbomify.com/MAL-2025-146201/): Malicious code in phoenix-markdown-javascript-sagitta (npm) (malicious package)
- [MAL-2025-146200](https://insights.sbomify.com/MAL-2025-146200/): Malicious code in phoenix-lint-staged-auth-aldebaran (npm) (malicious package)
- [MAL-2025-14620](https://insights.sbomify.com/MAL-2025-14620/): Malicious code in aog-control-panel (npm) (malicious package)
- [MAL-2025-1462](https://insights.sbomify.com/MAL-2025-1462/): Malicious code in ab-typescript-app (npm) (malicious package)
- [MAL-2025-146199](https://insights.sbomify.com/MAL-2025-146199/): Malicious code in phoenix-lint-global-andromeda (npm) (malicious package)
- [MAL-2025-146198](https://insights.sbomify.com/MAL-2025-146198/): Malicious code in phoenix-koa-delphinus-passport (npm) (malicious package)
- [MAL-2025-146197](https://insights.sbomify.com/MAL-2025-146197/): Malicious code in phoenix-json-markdown-triton (npm) (malicious package)
- [MAL-2025-146196](https://insights.sbomify.com/MAL-2025-146196/): Malicious code in phoenix-gulp-process-kaus (npm) (malicious package)
- [MAL-2025-146195](https://insights.sbomify.com/MAL-2025-146195/): Malicious code in phoenix-fornax-dagda-release-it (npm) (malicious package)
- [MAL-2025-146194](https://insights.sbomify.com/MAL-2025-146194/): Malicious code in phoenix-flare-config-altair (npm) (malicious package)
- [MAL-2025-146193](https://insights.sbomify.com/MAL-2025-146193/): Malicious code in phoenix-cypress-bootstrap-webdriverio (npm) (malicious package)
- [MAL-2025-146192](https://insights.sbomify.com/MAL-2025-146192/): Malicious code in phoenix-achernar-nightmare-eridanus (npm) (malicious package)
- [MAL-2025-146191](https://insights.sbomify.com/MAL-2025-146191/): Malicious code in phoebe-zephyr-repository-bunyan (npm) (malicious package)
- [MAL-2025-146190](https://insights.sbomify.com/MAL-2025-146190/): Malicious code in phoebe-yaml-mongodb-umbra (npm) (malicious package)
- [MAL-2025-14619](https://insights.sbomify.com/MAL-2025-14619/): Malicious code in aofl-os (npm) (malicious package)
- [MAL-2025-146189](https://insights.sbomify.com/MAL-2025-146189/): Malicious code in phoebe-xerxes-gemini-buffer (npm) (malicious package)
- [MAL-2025-146188](https://insights.sbomify.com/MAL-2025-146188/): Malicious code in phoebe-wolf-ceres-process (npm) (malicious package)
- [MAL-2025-146187](https://insights.sbomify.com/MAL-2025-146187/): Malicious code in phoebe-webdriver-mocha-dotenv-safe-nebula (npm) (malicious package)
- [MAL-2025-146186](https://insights.sbomify.com/MAL-2025-146186/): Malicious code in phoebe-vuepress-magellan-spectron (npm) (malicious package)
- [MAL-2025-146185](https://insights.sbomify.com/MAL-2025-146185/): Malicious code in phoebe-triton-parcel-javascript (npm) (malicious package)
- [MAL-2025-146184](https://insights.sbomify.com/MAL-2025-146184/): Malicious code in phoebe-style-loader-cli-jupiter (npm) (malicious package)
- [MAL-2025-146183](https://insights.sbomify.com/MAL-2025-146183/): Malicious code in phoebe-spectron-webdriver-eleventy-envconfig (npm) (malicious package)
- [MAL-2025-146182](https://insights.sbomify.com/MAL-2025-146182/): Malicious code in phoebe-spectron-halley-promise (npm) (malicious package)
- [MAL-2025-146181](https://insights.sbomify.com/MAL-2025-146181/): Malicious code in phoebe-sequelize-meissa-restart (npm) (malicious package)
- [MAL-2025-146180](https://insights.sbomify.com/MAL-2025-146180/): Malicious code in phoebe-sass-loader-luna-reveal-md (npm) (malicious package)
- [MAL-2025-14618](https://insights.sbomify.com/MAL-2025-14618/): Malicious code in aofeaofe (npm) (malicious package)
- [MAL-2025-146179](https://insights.sbomify.com/MAL-2025-146179/): Malicious code in phoebe-sass-loader-async-europa (npm) (malicious package)
- [MAL-2025-146178](https://insights.sbomify.com/MAL-2025-146178/): Malicious code in phoebe-sagitta-gridsome-child-process (npm) (malicious package)
- [MAL-2025-146177](https://insights.sbomify.com/MAL-2025-146177/): Malicious code in phoebe-run-script-subscription-karma (npm) (malicious package)
- [MAL-2025-146176](https://insights.sbomify.com/MAL-2025-146176/): Malicious code in phoebe-rimraf-transport-gravity (npm) (malicious package)
- [MAL-2025-146175](https://insights.sbomify.com/MAL-2025-146175/): Malicious code in phoebe-rehype-style-loader-nightwatch (npm) (malicious package)
- [MAL-2025-146174](https://insights.sbomify.com/MAL-2025-146174/): Malicious code in phoebe-pyxis-cassini-relay (npm) (malicious package)
- [MAL-2025-146173](https://insights.sbomify.com/MAL-2025-146173/): Malicious code in phoebe-publish-gemini-kastra (npm) (malicious package)
- [MAL-2025-146172](https://insights.sbomify.com/MAL-2025-146172/): Malicious code in phoebe-prompts-hercules-cache (npm) (malicious package)
- [MAL-2025-146171](https://insights.sbomify.com/MAL-2025-146171/): Malicious code in phoebe-polaris-meissa-phenomic (npm) (malicious package)
- [MAL-2025-146170](https://insights.sbomify.com/MAL-2025-146170/): Malicious code in phoebe-pipe-repository-spectron (npm) (malicious package)
- [MAL-2025-14617](https://insights.sbomify.com/MAL-2025-14617/): Malicious code in anykeeper (npm) (malicious package)
- [MAL-2025-146169](https://insights.sbomify.com/MAL-2025-146169/): Malicious code in phoebe-pavo-grus-pegasus (npm) (malicious package)
- [MAL-2025-146168](https://insights.sbomify.com/MAL-2025-146168/): Malicious code in phoebe-orbit-redis-javascript (npm) (malicious package)
- [MAL-2025-146167](https://insights.sbomify.com/MAL-2025-146167/): Malicious code in phoebe-oberon-mongodb-wolf (npm) (malicious package)
- [MAL-2025-146166](https://insights.sbomify.com/MAL-2025-146166/): Malicious code in phoebe-oauth-blitz-playwright (npm) (malicious package)
- [MAL-2025-146165](https://insights.sbomify.com/MAL-2025-146165/): Malicious code in phoebe-nightmare-npm-less-loader (npm) (malicious package)
- [MAL-2025-146164](https://insights.sbomify.com/MAL-2025-146164/): Malicious code in phoebe-morgan-install-concurrently (npm) (malicious package)
- [MAL-2025-146163](https://insights.sbomify.com/MAL-2025-146163/): Malicious code in phoebe-mongodb-css-loader-inquirer (npm) (malicious package)
- [MAL-2025-146162](https://insights.sbomify.com/MAL-2025-146162/): Malicious code in phoebe-metalsmith-css-minimizer-webpack-plugin-umbra (npm) (malicious package)
- [MAL-2025-146161](https://insights.sbomify.com/MAL-2025-146161/): Malicious code in phoebe-metalsmith-antares-cluster (npm) (malicious package)
- [MAL-2025-146160](https://insights.sbomify.com/MAL-2025-146160/): Malicious code in phoebe-mensa-nebula-unuk (npm) (malicious package)
- [MAL-2025-14616](https://insights.sbomify.com/MAL-2025-14616/): Malicious code in anviltop (npm) (malicious package)
- [MAL-2025-146159](https://insights.sbomify.com/MAL-2025-146159/): Malicious code in phoebe-mensa-commitizen-juno (npm) (malicious package)
- [MAL-2025-146158](https://insights.sbomify.com/MAL-2025-146158/): Malicious code in phoebe-lyra-jovian-pegasus (npm) (malicious package)
- [MAL-2025-146157](https://insights.sbomify.com/MAL-2025-146157/): Malicious code in phoebe-lynx-less-loader-passport (npm) (malicious package)
- [MAL-2025-146156](https://insights.sbomify.com/MAL-2025-146156/): Malicious code in phoebe-link-changelog-rollup-plugin (npm) (malicious package)
- [MAL-2025-146155](https://insights.sbomify.com/MAL-2025-146155/): Malicious code in phoebe-less-loader-miranda-parcel (npm) (malicious package)
- [MAL-2025-146154](https://insights.sbomify.com/MAL-2025-146154/): Malicious code in phoebe-jasmine-betelgeuse-duplex (npm) (malicious package)
- [MAL-2025-146153](https://insights.sbomify.com/MAL-2025-146153/): Malicious code in phoebe-heka-procyon-nova (npm) (malicious package)
- [MAL-2025-146152](https://insights.sbomify.com/MAL-2025-146152/): Malicious code in phoebe-gravity-pegasus-webdriver-mocha (npm) (malicious package)
- [MAL-2025-146151](https://insights.sbomify.com/MAL-2025-146151/): Malicious code in phoebe-fusion-soap-stop (npm) (malicious package)
- [MAL-2025-146150](https://insights.sbomify.com/MAL-2025-146150/): Malicious code in phoebe-electron-spinner-ophiuchus (npm) (malicious package)
- [MAL-2025-14615](https://insights.sbomify.com/MAL-2025-14615/): Malicious code in anushok (npm) (malicious package)
- [MAL-2025-146149](https://insights.sbomify.com/MAL-2025-146149/): Malicious code in phoebe-dotenv-parse-variables-command-tool (npm) (malicious package)
- [MAL-2025-146148](https://insights.sbomify.com/MAL-2025-146148/): Malicious code in phoebe-dactyl-hydra-uglify-js (npm) (malicious package)
- [MAL-2025-146147](https://insights.sbomify.com/MAL-2025-146147/): Malicious code in phoebe-cypress-telesto-pino (npm) (malicious package)
- [MAL-2025-146146](https://insights.sbomify.com/MAL-2025-146146/): Malicious code in phoebe-chai-markdownlint-deneb (npm) (malicious package)
- [MAL-2025-146145](https://insights.sbomify.com/MAL-2025-146145/): Malicious code in phoebe-ceres-terser-pavo (npm) (malicious package)
- [MAL-2025-146144](https://insights.sbomify.com/MAL-2025-146144/): Malicious code in phoebe-centaurus-pipe-gravity (npm) (malicious package)
- [MAL-2025-146143](https://insights.sbomify.com/MAL-2025-146143/): Malicious code in phoebe-celeste-luna-equinox (npm) (malicious package)
- [MAL-2025-146142](https://insights.sbomify.com/MAL-2025-146142/): Malicious code in phoebe-callback-javascript-sequelize (npm) (malicious package)
- [MAL-2025-146141](https://insights.sbomify.com/MAL-2025-146141/): Malicious code in phoebe-bootes-aquarius-sqlite (npm) (malicious package)
- [MAL-2025-146140](https://insights.sbomify.com/MAL-2025-146140/): Malicious code in phenomic-webdriver-mocha-eclipse-fork (npm) (malicious package)
- [MAL-2025-14614](https://insights.sbomify.com/MAL-2025-14614/): Malicious code in anupam-action-test (npm) (malicious package)
- [MAL-2025-146139](https://insights.sbomify.com/MAL-2025-146139/): Malicious code in phenomic-upgrade-library-loop (npm) (malicious package)
- [MAL-2025-146138](https://insights.sbomify.com/MAL-2025-146138/): Malicious code in phenomic-spectron-webdriver-sqlite-andromeda (npm) (malicious package)
- [MAL-2025-146137](https://insights.sbomify.com/MAL-2025-146137/): Malicious code in phenomic-passport-cluster-wezen (npm) (malicious package)
- [MAL-2025-146136](https://insights.sbomify.com/MAL-2025-146136/): Malicious code in phenomic-json-nodejs-configstore (npm) (malicious package)
- [MAL-2025-146135](https://insights.sbomify.com/MAL-2025-146135/): Malicious code in phenomic-javascript-remark-csv (npm) (malicious package)
- [MAL-2025-146134](https://insights.sbomify.com/MAL-2025-146134/): Malicious code in phenomic-got-uninstall-pm2 (npm) (malicious package)
- [MAL-2025-146133](https://insights.sbomify.com/MAL-2025-146133/): Malicious code in phenomic-fomalhaut-xenos-solis (npm) (malicious package)
- [MAL-2025-146132](https://insights.sbomify.com/MAL-2025-146132/): Malicious code in phenomic-eleventy-dynamo-mini-css-extract-plugin (npm) (malicious package)
- [MAL-2025-146131](https://insights.sbomify.com/MAL-2025-146131/): Malicious code in phenomic-element-ui-publish-fetch (npm) (malicious package)
- [MAL-2025-146130](https://insights.sbomify.com/MAL-2025-146130/): Malicious code in phenomic-dorado-bulma-taurus (npm) (malicious package)
- [MAL-2025-14613](https://insights.sbomify.com/MAL-2025-14613/): Malicious code in anup-database (npm) (malicious package)
- [MAL-2025-146129](https://insights.sbomify.com/MAL-2025-146129/): Malicious code in phenomic-despina-dagda-xenon (npm) (malicious package)
- [MAL-2025-146128](https://insights.sbomify.com/MAL-2025-146128/): Malicious code in phenomic-css-minimizer-webpack-plugin-titan-vulcan (npm) (malicious package)
- [MAL-2025-146127](https://insights.sbomify.com/MAL-2025-146127/): Malicious code in phenomic-cordelia-xerxes-lacerta (npm) (malicious package)
- [MAL-2025-146126](https://insights.sbomify.com/MAL-2025-146126/): Malicious code in phenomic-ceres-uninstall-nodemon (npm) (malicious package)
- [MAL-2025-146125](https://insights.sbomify.com/MAL-2025-146125/): Malicious code in perseus-yakutsk-frontend-gridsome (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1419/