# Vulnerabilities published in 2025


- [MAL-2025-146034](https://insights.sbomify.com/MAL-2025-146034/): Malicious code in pegasus-helios-bootstrap-meissa (npm) (malicious package)
- [MAL-2025-146033](https://insights.sbomify.com/MAL-2025-146033/): Malicious code in pegasus-heka-eris-magellan (npm) (malicious package)
- [MAL-2025-146032](https://insights.sbomify.com/MAL-2025-146032/): Malicious code in pegasus-grus-fomalhaut-weywot (npm) (malicious package)
- [MAL-2025-146031](https://insights.sbomify.com/MAL-2025-146031/): Malicious code in pegasus-graphql-playwright-husky (npm) (malicious package)
- [MAL-2025-146030](https://insights.sbomify.com/MAL-2025-146030/): Malicious code in pegasus-geckodriver-octans-kaus (npm) (malicious package)
- [MAL-2025-14603](https://insights.sbomify.com/MAL-2025-14603/): Malicious code in antimatter-rest-gacrux-blueshift (npm) (malicious package)
- [MAL-2025-146029](https://insights.sbomify.com/MAL-2025-146029/): Malicious code in pegasus-ganymede-native-taurus (npm) (malicious package)
- [MAL-2025-146028](https://insights.sbomify.com/MAL-2025-146028/): Malicious code in pegasus-forever-jwt-cache (npm) (malicious package)
- [MAL-2025-146027](https://insights.sbomify.com/MAL-2025-146027/): Malicious code in pegasus-eslint-plugin-postcss-iota (npm) (malicious package)
- [MAL-2025-146026](https://insights.sbomify.com/MAL-2025-146026/): Malicious code in pegasus-envconfig-wasat-supervisor (npm) (malicious package)
- [MAL-2025-146025](https://insights.sbomify.com/MAL-2025-146025/): Malicious code in pegasus-eclipse-electron-builder-materialize (npm) (malicious package)
- [MAL-2025-146024](https://insights.sbomify.com/MAL-2025-146024/): Malicious code in pegasus-dotenv-safe-build-wolf (npm) (malicious package)
- [MAL-2025-146023](https://insights.sbomify.com/MAL-2025-146023/): Malicious code in pegasus-cygnus-pegasus-pegasus (npm) (malicious package)
- [MAL-2025-146022](https://insights.sbomify.com/MAL-2025-146022/): Malicious code in pegasus-csv-concurrently-sedna (npm) (malicious package)
- [MAL-2025-146021](https://insights.sbomify.com/MAL-2025-146021/): Malicious code in pegasus-chakra-ui-spectron-cache (npm) (malicious package)
- [MAL-2025-146020](https://insights.sbomify.com/MAL-2025-146020/): Malicious code in pegasus-centauri-dione-sedna (npm) (malicious package)
- [MAL-2025-14602](https://insights.sbomify.com/MAL-2025-14602/): Malicious code in antimatter-gravitationalwave-kuiperbelt-geckodriver (npm) (malicious package)
- [MAL-2025-146019](https://insights.sbomify.com/MAL-2025-146019/): Malicious code in pegasus-callback-build-sequelize (npm) (malicious package)
- [MAL-2025-146018](https://insights.sbomify.com/MAL-2025-146018/): Malicious code in pegasus-backend-event-install (npm) (malicious package)
- [MAL-2025-146017](https://insights.sbomify.com/MAL-2025-146017/): Malicious code in pegasus-backend-enif-cygnus (npm) (malicious package)
- [MAL-2025-146016](https://insights.sbomify.com/MAL-2025-146016/): Malicious code in pegasus-antares-hydra-phoenix (npm) (malicious package)
- [MAL-2025-146015](https://insights.sbomify.com/MAL-2025-146015/): Malicious code in pavo-zenobia-forever-run-script (npm) (malicious package)
- [MAL-2025-146014](https://insights.sbomify.com/MAL-2025-146014/): Malicious code in pavo-xenon-alphard-spica (npm) (malicious package)
- [MAL-2025-146013](https://insights.sbomify.com/MAL-2025-146013/): Malicious code in pavo-tethys-stop-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-146012](https://insights.sbomify.com/MAL-2025-146012/): Malicious code in pavo-taurus-miranda-warp (npm) (malicious package)
- [MAL-2025-146011](https://insights.sbomify.com/MAL-2025-146011/): Malicious code in pavo-supervisor-cors-start (npm) (malicious package)
- [MAL-2025-146010](https://insights.sbomify.com/MAL-2025-146010/): Malicious code in pavo-subscription-hyperion-impulse (npm) (malicious package)
- [MAL-2025-14601](https://insights.sbomify.com/MAL-2025-14601/): Malicious code in antimatter-cryonics-virgo-leda (npm) (malicious package)
- [MAL-2025-146009](https://insights.sbomify.com/MAL-2025-146009/): Malicious code in pavo-stop-aether-indus (npm) (malicious package)
- [MAL-2025-146008](https://insights.sbomify.com/MAL-2025-146008/): Malicious code in pavo-registry-sass-loader-barnard (npm) (malicious package)
- [MAL-2025-146007](https://insights.sbomify.com/MAL-2025-146007/): Malicious code in pavo-process-socketio-husky (npm) (malicious package)
- [MAL-2025-146006](https://insights.sbomify.com/MAL-2025-146006/): Malicious code in pavo-pm2-neptune-axios (npm) (malicious package)
- [MAL-2025-146005](https://insights.sbomify.com/MAL-2025-146005/): Malicious code in pavo-pino-pretty-chariklo-repository (npm) (malicious package)
- [MAL-2025-146004](https://insights.sbomify.com/MAL-2025-146004/): Malicious code in pavo-nightwatch-electron-query (npm) (malicious package)
- [MAL-2025-146003](https://insights.sbomify.com/MAL-2025-146003/): Malicious code in pavo-mongoose-yaml-development (npm) (malicious package)
- [MAL-2025-146002](https://insights.sbomify.com/MAL-2025-146002/): Malicious code in pavo-miranda-oberon-bunyan (npm) (malicious package)
- [MAL-2025-146001](https://insights.sbomify.com/MAL-2025-146001/): Malicious code in pavo-loopback-proxima-gatsby (npm) (malicious package)
- [MAL-2025-146000](https://insights.sbomify.com/MAL-2025-146000/): Malicious code in pavo-less-loader-convict-uglify-js (npm) (malicious package)
- [MAL-2025-14600](https://insights.sbomify.com/MAL-2025-14600/): Malicious code in antilag (npm) (malicious package)
- [MAL-2025-1460](https://insights.sbomify.com/MAL-2025-1460/): Malicious code in archon3 (npm) (malicious package)
- [MAL-2025-146](https://insights.sbomify.com/MAL-2025-146/): Malicious code in showcase-server (npm) (malicious package)
- [MAL-2025-145999](https://insights.sbomify.com/MAL-2025-145999/): Malicious code in pavo-hugo-winston-iota (npm) (malicious package)
- [MAL-2025-145998](https://insights.sbomify.com/MAL-2025-145998/): Malicious code in pavo-graphql-leda-semantic-ui (npm) (malicious package)
- [MAL-2025-145997](https://insights.sbomify.com/MAL-2025-145997/): Malicious code in pavo-eleventy-aquarius-quito (npm) (malicious package)
- [MAL-2025-145996](https://insights.sbomify.com/MAL-2025-145996/): Malicious code in pavo-dotenv-safe-cosmos-cordelia (npm) (malicious package)
- [MAL-2025-145995](https://insights.sbomify.com/MAL-2025-145995/): Malicious code in pavo-delphinus-winston-link (npm) (malicious package)
- [MAL-2025-145994](https://insights.sbomify.com/MAL-2025-145994/): Malicious code in pavo-changelog-neptune-bellatrix (npm) (malicious package)
- [MAL-2025-145993](https://insights.sbomify.com/MAL-2025-145993/): Malicious code in pavo-buffer-terser-webpack-plugin-nightmare (npm) (malicious package)
- [MAL-2025-145992](https://insights.sbomify.com/MAL-2025-145992/): Malicious code in pavo-bootes-capella-meissa (npm) (malicious package)
- [MAL-2025-145991](https://insights.sbomify.com/MAL-2025-145991/): Malicious code in pavo-backend-neptune-semantic-release (npm) (malicious package)
- [MAL-2025-145990](https://insights.sbomify.com/MAL-2025-145990/): Malicious code in pavo-antares-run-script-lyra (npm) (malicious package)
- [MAL-2025-14599](https://insights.sbomify.com/MAL-2025-14599/): Malicious code in antfiles (npm) (malicious package)
- [MAL-2025-145989](https://insights.sbomify.com/MAL-2025-145989/): Malicious code in pavo-altair-native-achernar (npm) (malicious package)
- [MAL-2025-145988](https://insights.sbomify.com/MAL-2025-145988/): Malicious code in passport-websockets-apollo-pipe (npm) (malicious package)
- [MAL-2025-145987](https://insights.sbomify.com/MAL-2025-145987/): Malicious code in passport-sedna-envconfig-gridsome (npm) (malicious package)
- [MAL-2025-145986](https://insights.sbomify.com/MAL-2025-145986/): Malicious code in passport-rate-limiter-cypress-rimraf (npm) (malicious package)
- [MAL-2025-145985](https://insights.sbomify.com/MAL-2025-145985/): Malicious code in passport-pulsar-virgo-apollo (npm) (malicious package)
- [MAL-2025-145984](https://insights.sbomify.com/MAL-2025-145984/): Malicious code in passport-less-loader-carpo-acamar (npm) (malicious package)
- [MAL-2025-145983](https://insights.sbomify.com/MAL-2025-145983/): Malicious code in passport-leda-spectron-spawn (npm) (malicious package)
- [MAL-2025-145982](https://insights.sbomify.com/MAL-2025-145982/): Malicious code in passport-io-gatsby-nconf (npm) (malicious package)
- [MAL-2025-145981](https://insights.sbomify.com/MAL-2025-145981/): Malicious code in passport-helios-vulcan-nightwatch (npm) (malicious package)
- [MAL-2025-145980](https://insights.sbomify.com/MAL-2025-145980/): Malicious code in passport-galaxy-jovian-sedna (npm) (malicious package)
- [MAL-2025-14598](https://insights.sbomify.com/MAL-2025-14598/): Malicious code in antelope_xmlub_1t8ud_jigsaw (npm) (malicious package)
- [MAL-2025-145979](https://insights.sbomify.com/MAL-2025-145979/): Malicious code in passport-enif-mui-install (npm) (malicious package)
- [MAL-2025-145978](https://insights.sbomify.com/MAL-2025-145978/): Malicious code in passport-cassini-scorpius-nextjs (npm) (malicious package)
- [MAL-2025-145977](https://insights.sbomify.com/MAL-2025-145977/): Malicious code in passport-barnard-server-transport (npm) (malicious package)
- [MAL-2025-145976](https://insights.sbomify.com/MAL-2025-145976/): Malicious code in passport-auth-mongoose-phoebe (npm) (malicious package)
- [MAL-2025-145975](https://insights.sbomify.com/MAL-2025-145975/): Malicious code in passport-aquarius-gatsby-resolvers (npm) (malicious package)
- [MAL-2025-145974](https://insights.sbomify.com/MAL-2025-145974/): Malicious code in parcel-winston-janus-janus (npm) (malicious package)
- [MAL-2025-145973](https://insights.sbomify.com/MAL-2025-145973/): Malicious code in parcel-subscription-aquarius-puppeteer (npm) (malicious package)
- [MAL-2025-145972](https://insights.sbomify.com/MAL-2025-145972/): Malicious code in parcel-spawn-dotenv-parse-variables-ultra (npm) (malicious package)
- [MAL-2025-145971](https://insights.sbomify.com/MAL-2025-145971/): Malicious code in parcel-sedna-react-bootstrap-nodejs (npm) (malicious package)
- [MAL-2025-145970](https://insights.sbomify.com/MAL-2025-145970/): Malicious code in parcel-scorpius-mdx-umbriel (npm) (malicious package)
- [MAL-2025-14597](https://insights.sbomify.com/MAL-2025-14597/): Malicious code in antelope_rd0s2_uv1ld_zenith (npm) (malicious package)
- [MAL-2025-145969](https://insights.sbomify.com/MAL-2025-145969/): Malicious code in parcel-rollup-plugin-andromeda-betelgeuse (npm) (malicious package)
- [MAL-2025-145968](https://insights.sbomify.com/MAL-2025-145968/): Malicious code in parcel-pino-ganymede-cygnus (npm) (malicious package)
- [MAL-2025-145967](https://insights.sbomify.com/MAL-2025-145967/): Malicious code in parcel-phoebe-link-version (npm) (malicious package)
- [MAL-2025-145966](https://insights.sbomify.com/MAL-2025-145966/): Malicious code in parcel-mui-event-callback (npm) (malicious package)
- [MAL-2025-145965](https://insights.sbomify.com/MAL-2025-145965/): Malicious code in parcel-mensa-vuetify-proxima (npm) (malicious package)
- [MAL-2025-145964](https://insights.sbomify.com/MAL-2025-145964/): Malicious code in parcel-markdownlint-start-uglify-js (npm) (malicious package)
- [MAL-2025-145963](https://insights.sbomify.com/MAL-2025-145963/): Malicious code in parcel-markdown-pdf-cli-centauri (npm) (malicious package)
- [MAL-2025-145962](https://insights.sbomify.com/MAL-2025-145962/): Malicious code in parcel-luna-markdown-vega (npm) (malicious package)
- [MAL-2025-145961](https://insights.sbomify.com/MAL-2025-145961/): Malicious code in parcel-karma-remark-castor (npm) (malicious package)
- [MAL-2025-145960](https://insights.sbomify.com/MAL-2025-145960/): Malicious code in parcel-impulse-dotenv-cosmos (npm) (malicious package)
- [MAL-2025-14596](https://insights.sbomify.com/MAL-2025-14596/): Malicious code in antelope_r9x25_1ixrg_dawn (npm) (malicious package)
- [MAL-2025-145959](https://insights.sbomify.com/MAL-2025-145959/): Malicious code in parcel-gravity-lynx-triton (npm) (malicious package)
- [MAL-2025-145958](https://insights.sbomify.com/MAL-2025-145958/): Malicious code in parcel-europa-publish-carina (npm) (malicious package)
- [MAL-2025-145957](https://insights.sbomify.com/MAL-2025-145957/): Malicious code in parcel-eslint-plugin-jovian-tailwindcss (npm) (malicious package)
- [MAL-2025-145956](https://insights.sbomify.com/MAL-2025-145956/): Malicious code in parcel-eslint-config-castor-eleventy (npm) (malicious package)
- [MAL-2025-145955](https://insights.sbomify.com/MAL-2025-145955/): Malicious code in parcel-colors-package-carina (npm) (malicious package)
- [MAL-2025-145954](https://insights.sbomify.com/MAL-2025-145954/): Malicious code in parcel-chariklo-uninstall-regulus (npm) (malicious package)
- [MAL-2025-145953](https://insights.sbomify.com/MAL-2025-145953/): Malicious code in parcel-carpo-cypress-sync (npm) (malicious package)
- [MAL-2025-145952](https://insights.sbomify.com/MAL-2025-145952/): Malicious code in parcel-bunyan-weywot-nightwatch (npm) (malicious package)
- [MAL-2025-145951](https://insights.sbomify.com/MAL-2025-145951/): Malicious code in parcel-build-castor-prompts (npm) (malicious package)
- [MAL-2025-145950](https://insights.sbomify.com/MAL-2025-145950/): Malicious code in parcel-aurora-pegasus-version (npm) (malicious package)
- [MAL-2025-14595](https://insights.sbomify.com/MAL-2025-14595/): Malicious code in antelope_h1x5l_5jmi8_fern (npm) (malicious package)
- [MAL-2025-145949](https://insights.sbomify.com/MAL-2025-145949/): Malicious code in parcel-auriga-express-metalsmith (npm) (malicious package)
- [MAL-2025-145948](https://insights.sbomify.com/MAL-2025-145948/): Malicious code in parcel-async-ophiuchus-ganymede (npm) (malicious package)
- [MAL-2025-145947](https://insights.sbomify.com/MAL-2025-145947/): Malicious code in parcel-apollo-framework-venus (npm) (malicious package)
- [MAL-2025-145946](https://insights.sbomify.com/MAL-2025-145946/): Malicious code in parcel-algol-websockets-delphinus (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1421/