# Vulnerabilities published in 2025


- [MAL-2025-145945](https://insights.sbomify.com/MAL-2025-145945/): Malicious code in package-scorpius-kastra-enceladus (npm) (malicious package)
- [MAL-2025-145944](https://insights.sbomify.com/MAL-2025-145944/): Malicious code in package-registry-restart-schema (npm) (malicious package)
- [MAL-2025-145943](https://insights.sbomify.com/MAL-2025-145943/): Malicious code in package-prompts-jwt-ophiuchus (npm) (malicious package)
- [MAL-2025-145942](https://insights.sbomify.com/MAL-2025-145942/): Malicious code in package-playwright-webpack-antares (npm) (malicious package)
- [MAL-2025-145941](https://insights.sbomify.com/MAL-2025-145941/): Malicious code in package-perseus-weywot-cross-env (npm) (malicious package)
- [MAL-2025-145940](https://insights.sbomify.com/MAL-2025-145940/): Malicious code in package-norma-thuban-oberon (npm) (malicious package)
- [MAL-2025-14594](https://insights.sbomify.com/MAL-2025-14594/): Malicious code in antelope_cdxnp_ajowy_harmony (npm) (malicious package)
- [MAL-2025-145939](https://insights.sbomify.com/MAL-2025-145939/): Malicious code in package-lyra-postgres-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-145938](https://insights.sbomify.com/MAL-2025-145938/): Malicious code in package-luna-prettier-plugin-markdown-readable (npm) (malicious package)
- [MAL-2025-145937](https://insights.sbomify.com/MAL-2025-145937/): Malicious code in package-levels-loglevel-procyon (npm) (malicious package)
- [MAL-2025-145936](https://insights.sbomify.com/MAL-2025-145936/): Malicious code in package-leda-regulus-bootes (npm) (malicious package)
- [MAL-2025-145935](https://insights.sbomify.com/MAL-2025-145935/): Malicious code in package-lacerta-flare-telesto (npm) (malicious package)
- [MAL-2025-145934](https://insights.sbomify.com/MAL-2025-145934/): Malicious code in package-karma-europa-izar (npm) (malicious package)
- [MAL-2025-145933](https://insights.sbomify.com/MAL-2025-145933/): Malicious code in package-jupiter-dotenv-safe-carpo (npm) (malicious package)
- [MAL-2025-145932](https://insights.sbomify.com/MAL-2025-145932/): Malicious code in package-hugo-event-impulse (npm) (malicious package)
- [MAL-2025-145931](https://insights.sbomify.com/MAL-2025-145931/): Malicious code in package-ganymede-aurora-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-145930](https://insights.sbomify.com/MAL-2025-145930/): Malicious code in package-framework-aurora-hermes (npm) (malicious package)
- [MAL-2025-14593](https://insights.sbomify.com/MAL-2025-14593/): Malicious code in antelope_4t8ud_z3i7p_fern (npm) (malicious package)
- [MAL-2025-145929](https://insights.sbomify.com/MAL-2025-145929/): Malicious code in package-europa-antares-eslint (npm) (malicious package)
- [MAL-2025-145928](https://insights.sbomify.com/MAL-2025-145928/): Malicious code in package-dorado-soap-docusaurus (npm) (malicious package)
- [MAL-2025-145927](https://insights.sbomify.com/MAL-2025-145927/): Malicious code in package-dactyl-callisto-nuxtjs (npm) (malicious package)
- [MAL-2025-145926](https://insights.sbomify.com/MAL-2025-145926/): Malicious code in package-canopus-cluster-grus (npm) (malicious package)
- [MAL-2025-145925](https://insights.sbomify.com/MAL-2025-145925/): Malicious code in package-bunyan-uninstall-gridsome (npm) (malicious package)
- [MAL-2025-145924](https://insights.sbomify.com/MAL-2025-145924/): Malicious code in package-await-dotenv-safe-acamar (npm) (malicious package)
- [MAL-2025-145923](https://insights.sbomify.com/MAL-2025-145923/): Malicious code in package-avior-backend-release-it (npm) (malicious package)
- [MAL-2025-145922](https://insights.sbomify.com/MAL-2025-145922/): Malicious code in package-auth-xanthus-frontend (npm) (malicious package)
- [MAL-2025-145921](https://insights.sbomify.com/MAL-2025-145921/): Malicious code in package-antares-selenium-nebula (npm) (malicious package)
- [MAL-2025-145920](https://insights.sbomify.com/MAL-2025-145920/): Malicious code in orbit-xml-nightwatch-chakra-ui (npm) (malicious package)
- [MAL-2025-14592](https://insights.sbomify.com/MAL-2025-14592/): Malicious code in antd-socketio-mui-palynology (npm) (malicious package)
- [MAL-2025-145919](https://insights.sbomify.com/MAL-2025-145919/): Malicious code in orbit-xanthus-apollo-private (npm) (malicious package)
- [MAL-2025-145918](https://insights.sbomify.com/MAL-2025-145918/): Malicious code in orbit-websockets-scripts-pegasus (npm) (malicious package)
- [MAL-2025-145917](https://insights.sbomify.com/MAL-2025-145917/): Malicious code in orbit-venus-stop-jovian (npm) (malicious package)
- [MAL-2025-145916](https://insights.sbomify.com/MAL-2025-145916/): Malicious code in orbit-uglify-js-jsonp-jekyll (npm) (malicious package)
- [MAL-2025-145915](https://insights.sbomify.com/MAL-2025-145915/): Malicious code in orbit-triton-request-andromeda (npm) (malicious package)
- [MAL-2025-145914](https://insights.sbomify.com/MAL-2025-145914/): Malicious code in orbit-transport-pulsar-fornax (npm) (malicious package)
- [MAL-2025-145913](https://insights.sbomify.com/MAL-2025-145913/): Malicious code in orbit-thuban-child-process-writable (npm) (malicious package)
- [MAL-2025-145912](https://insights.sbomify.com/MAL-2025-145912/): Malicious code in orbit-reveal-md-charon-cygnus (npm) (malicious package)
- [MAL-2025-145911](https://insights.sbomify.com/MAL-2025-145911/): Malicious code in orbit-pegasus-sync-shelljs (npm) (malicious package)
- [MAL-2025-145910](https://insights.sbomify.com/MAL-2025-145910/): Malicious code in orbit-odin-browserify-nightwatch (npm) (malicious package)
- [MAL-2025-14591](https://insights.sbomify.com/MAL-2025-14591/): Malicious code in antd-lint-loopback-spawn (npm) (malicious package)
- [MAL-2025-145909](https://insights.sbomify.com/MAL-2025-145909/): Malicious code in orbit-native-dotenv-oauth (npm) (malicious package)
- [MAL-2025-145908](https://insights.sbomify.com/MAL-2025-145908/): Malicious code in orbit-markdown-pdf-octans-convict (npm) (malicious package)
- [MAL-2025-145907](https://insights.sbomify.com/MAL-2025-145907/): Malicious code in orbit-hydra-test-venus (npm) (malicious package)
- [MAL-2025-145906](https://insights.sbomify.com/MAL-2025-145906/): Malicious code in orbit-europa-dorado-postcss-loader (npm) (malicious package)
- [MAL-2025-145905](https://insights.sbomify.com/MAL-2025-145905/): Malicious code in orbit-delphinus-convict-antd (npm) (malicious package)
- [MAL-2025-145904](https://insights.sbomify.com/MAL-2025-145904/): Malicious code in orbit-configstore-bellatrix-pavo (npm) (malicious package)
- [MAL-2025-145903](https://insights.sbomify.com/MAL-2025-145903/): Malicious code in orbit-command-geckodriver-ini (npm) (malicious package)
- [MAL-2025-145902](https://insights.sbomify.com/MAL-2025-145902/): Malicious code in orbit-carpo-stop-heka (npm) (malicious package)
- [MAL-2025-145901](https://insights.sbomify.com/MAL-2025-145901/): Malicious code in orbit-bellatrix-titan-kronos (npm) (malicious package)
- [MAL-2025-145900](https://insights.sbomify.com/MAL-2025-145900/): Malicious code in ora-yaml-yildun-node-sass (npm) (malicious package)
- [MAL-2025-14590](https://insights.sbomify.com/MAL-2025-14590/): Malicious code in antd-geodynamo-karma-darkenergy (npm) (malicious package)
- [MAL-2025-1459](https://insights.sbomify.com/MAL-2025-1459/): Malicious code in archon2 (npm) (malicious package)
- [MAL-2025-145899](https://insights.sbomify.com/MAL-2025-145899/): Malicious code in ora-webdriver-mocha-koa-server (npm) (malicious package)
- [MAL-2025-145898](https://insights.sbomify.com/MAL-2025-145898/): Malicious code in ora-style-loader-miranda-husky (npm) (malicious package)
- [MAL-2025-145897](https://insights.sbomify.com/MAL-2025-145897/): Malicious code in ora-sagitta-callback-markdown-pdf (npm) (malicious package)
- [MAL-2025-145896](https://insights.sbomify.com/MAL-2025-145896/): Malicious code in ora-rest-markdown-sedna (npm) (malicious package)
- [MAL-2025-145895](https://insights.sbomify.com/MAL-2025-145895/): Malicious code in ora-request-io-celeste (npm) (malicious package)
- [MAL-2025-145894](https://insights.sbomify.com/MAL-2025-145894/): Malicious code in ora-react-bootstrap-development-cressida (npm) (malicious package)
- [MAL-2025-145893](https://insights.sbomify.com/MAL-2025-145893/): Malicious code in ora-quito-grus-rocket (npm) (malicious package)
- [MAL-2025-145892](https://insights.sbomify.com/MAL-2025-145892/): Malicious code in ora-postcss-dotenv-server (npm) (malicious package)
- [MAL-2025-145891](https://insights.sbomify.com/MAL-2025-145891/): Malicious code in ora-polaris-antares-comet (npm) (malicious package)
- [MAL-2025-145890](https://insights.sbomify.com/MAL-2025-145890/): Malicious code in ora-perseus-quark-meteor (npm) (malicious package)
- [MAL-2025-14589](https://insights.sbomify.com/MAL-2025-14589/): Malicious code in antd-cloud (npm) (malicious package)
- [MAL-2025-145889](https://insights.sbomify.com/MAL-2025-145889/): Malicious code in ora-markdown-janus-redis (npm) (malicious package)
- [MAL-2025-145888](https://insights.sbomify.com/MAL-2025-145888/): Malicious code in ora-kastra-fomalhaut-quito (npm) (malicious package)
- [MAL-2025-145887](https://insights.sbomify.com/MAL-2025-145887/): Malicious code in ora-jest-nodemon-levels (npm) (malicious package)
- [MAL-2025-145886](https://insights.sbomify.com/MAL-2025-145886/): Malicious code in ora-jekyll-nodejs-antd (npm) (malicious package)
- [MAL-2025-145885](https://insights.sbomify.com/MAL-2025-145885/): Malicious code in ora-hyperion-websockets-chromedriver (npm) (malicious package)
- [MAL-2025-145884](https://insights.sbomify.com/MAL-2025-145884/): Malicious code in ora-halley-equinox-helios (npm) (malicious package)
- [MAL-2025-145883](https://insights.sbomify.com/MAL-2025-145883/): Malicious code in ora-europa-tool-norma (npm) (malicious package)
- [MAL-2025-145882](https://insights.sbomify.com/MAL-2025-145882/): Malicious code in ora-eslint-config-gemini-epimetheus (npm) (malicious package)
- [MAL-2025-145881](https://insights.sbomify.com/MAL-2025-145881/): Malicious code in ora-electron-builder-postcss-umbra (npm) (malicious package)
- [MAL-2025-145880](https://insights.sbomify.com/MAL-2025-145880/): Malicious code in ora-draco-phoebe-odin (npm) (malicious package)
- [MAL-2025-14588](https://insights.sbomify.com/MAL-2025-14588/): Malicious code in antbot (npm) (malicious package)
- [MAL-2025-145879](https://insights.sbomify.com/MAL-2025-145879/): Malicious code in ora-dotenv-safe-nodemon-postgres (npm) (malicious package)
- [MAL-2025-145878](https://insights.sbomify.com/MAL-2025-145878/): Malicious code in ora-bellatrix-global-sequelize (npm) (malicious package)
- [MAL-2025-145877](https://insights.sbomify.com/MAL-2025-145877/): Malicious code in ora-aquarius-typeorm-electron (npm) (malicious package)
- [MAL-2025-145876](https://insights.sbomify.com/MAL-2025-145876/): Malicious code in ora-altair-vega-selenium (npm) (malicious package)
- [MAL-2025-145875](https://insights.sbomify.com/MAL-2025-145875/): Malicious code in ora-achernar-kinetic-postgres (npm) (malicious package)
- [MAL-2025-145874](https://insights.sbomify.com/MAL-2025-145874/): Malicious code in optimize-css-assets-webpack-plugin-yildun-hugo-nova (npm) (malicious package)
- [MAL-2025-145873](https://insights.sbomify.com/MAL-2025-145873/): Malicious code in optimize-css-assets-webpack-plugin-xerxes-delphinus-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-145872](https://insights.sbomify.com/MAL-2025-145872/): Malicious code in optimize-css-assets-webpack-plugin-terser-webpack-plugin-rigel-loop (npm) (malicious package)
- [MAL-2025-145871](https://insights.sbomify.com/MAL-2025-145871/): Malicious code in optimize-css-assets-webpack-plugin-semantic-ui-postgres-middleware (npm) (malicious package)
- [MAL-2025-145870](https://insights.sbomify.com/MAL-2025-145870/): Malicious code in optimize-css-assets-webpack-plugin-semantic-ui-css-loader-mysql (npm) (malicious package)
- [MAL-2025-14587](https://insights.sbomify.com/MAL-2025-14587/): Malicious code in antares-wavefunction-biosignature-magellan (npm) (malicious package)
- [MAL-2025-145869](https://insights.sbomify.com/MAL-2025-145869/): Malicious code in optimize-css-assets-webpack-plugin-regulus-vulcan-fornax (npm) (malicious package)
- [MAL-2025-145868](https://insights.sbomify.com/MAL-2025-145868/): Malicious code in optimize-css-assets-webpack-plugin-radiant-aquarius-development (npm) (malicious package)
- [MAL-2025-145867](https://insights.sbomify.com/MAL-2025-145867/): Malicious code in optimize-css-assets-webpack-plugin-perseus-altair-restart (npm) (malicious package)
- [MAL-2025-145866](https://insights.sbomify.com/MAL-2025-145866/): Malicious code in optimize-css-assets-webpack-plugin-markdown-octans-blaze (npm) (malicious package)
- [MAL-2025-145865](https://insights.sbomify.com/MAL-2025-145865/): Malicious code in optimize-css-assets-webpack-plugin-magellan-grus-unuk (npm) (malicious package)
- [MAL-2025-145864](https://insights.sbomify.com/MAL-2025-145864/): Malicious code in optimize-css-assets-webpack-plugin-lint-redis-scorpius (npm) (malicious package)
- [MAL-2025-145863](https://insights.sbomify.com/MAL-2025-145863/): Malicious code in optimize-css-assets-webpack-plugin-lacerta-non-blocking-antares (npm) (malicious package)
- [MAL-2025-145862](https://insights.sbomify.com/MAL-2025-145862/): Malicious code in optimize-css-assets-webpack-plugin-hyperion-dotenv-async (npm) (malicious package)
- [MAL-2025-145861](https://insights.sbomify.com/MAL-2025-145861/): Malicious code in optimize-css-assets-webpack-plugin-global-titan-ganymede (npm) (malicious package)
- [MAL-2025-145860](https://insights.sbomify.com/MAL-2025-145860/): Malicious code in optimize-css-assets-webpack-plugin-config-bunyan-library (npm) (malicious package)
- [MAL-2025-14586](https://insights.sbomify.com/MAL-2025-14586/): Malicious code in antares-tethys-cygnus-antimatter (npm) (malicious package)
- [MAL-2025-145859](https://insights.sbomify.com/MAL-2025-145859/): Malicious code in optimize-css-assets-webpack-plugin-commitizen-envconfig-charon (npm) (malicious package)
- [MAL-2025-145858](https://insights.sbomify.com/MAL-2025-145858/): Malicious code in optimize-css-assets-webpack-plugin-cli-gatsby-aether (npm) (malicious package)
- [MAL-2025-145857](https://insights.sbomify.com/MAL-2025-145857/): Malicious code in optimize-css-assets-webpack-plugin-betelgeuse-commitlint-config-angular-apex (npm) (malicious package)
- [MAL-2025-145856](https://insights.sbomify.com/MAL-2025-145856/): Malicious code in optimize-css-assets-webpack-plugin-achernar-non-blocking-mensa (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1422/