# Vulnerabilities published in 2025


- [MAL-2025-145855](https://insights.sbomify.com/MAL-2025-145855/): Malicious code in ophiuchus-zenobia-passport-lyra (npm) (malicious package)
- [MAL-2025-145854](https://insights.sbomify.com/MAL-2025-145854/): Malicious code in ophiuchus-zenith-superagent-publish (npm) (malicious package)
- [MAL-2025-145853](https://insights.sbomify.com/MAL-2025-145853/): Malicious code in ophiuchus-yildun-centauri-oauth (npm) (malicious package)
- [MAL-2025-145852](https://insights.sbomify.com/MAL-2025-145852/): Malicious code in ophiuchus-xml-sqlite-lyra (npm) (malicious package)
- [MAL-2025-145851](https://insights.sbomify.com/MAL-2025-145851/): Malicious code in ophiuchus-wasat-winston-levels (npm) (malicious package)
- [MAL-2025-145850](https://insights.sbomify.com/MAL-2025-145850/): Malicious code in ophiuchus-vulcan-quark-element-ui (npm) (malicious package)
- [MAL-2025-14585](https://insights.sbomify.com/MAL-2025-14585/): Malicious code in antares-stratosphere-darkmatter-oscillation (npm) (malicious package)
- [MAL-2025-145849](https://insights.sbomify.com/MAL-2025-145849/): Malicious code in ophiuchus-vuepress-colors-elara (npm) (malicious package)
- [MAL-2025-145848](https://insights.sbomify.com/MAL-2025-145848/): Malicious code in ophiuchus-vega-xml-graphql (npm) (malicious package)
- [MAL-2025-145847](https://insights.sbomify.com/MAL-2025-145847/): Malicious code in ophiuchus-uninstall-atlas-chai (npm) (malicious package)
- [MAL-2025-145846](https://insights.sbomify.com/MAL-2025-145846/): Malicious code in ophiuchus-ultra-janus-mysql (npm) (malicious package)
- [MAL-2025-145845](https://insights.sbomify.com/MAL-2025-145845/): Malicious code in ophiuchus-testcafe-auriga-markdown (npm) (malicious package)
- [MAL-2025-145844](https://insights.sbomify.com/MAL-2025-145844/): Malicious code in ophiuchus-spectron-webdriver-subscription-rocket (npm) (malicious package)
- [MAL-2025-145843](https://insights.sbomify.com/MAL-2025-145843/): Malicious code in ophiuchus-spawn-altair-terser (npm) (malicious package)
- [MAL-2025-145842](https://insights.sbomify.com/MAL-2025-145842/): Malicious code in ophiuchus-slides-betelgeuse-webdriver-mocha (npm) (malicious package)
- [MAL-2025-145841](https://insights.sbomify.com/MAL-2025-145841/): Malicious code in ophiuchus-sedna-ariel-spawn (npm) (malicious package)
- [MAL-2025-145840](https://insights.sbomify.com/MAL-2025-145840/): Malicious code in ophiuchus-reveal-md-apollo-ceres (npm) (malicious package)
- [MAL-2025-14584](https://insights.sbomify.com/MAL-2025-14584/): Malicious code in antares-sirius-hydra-auriga (npm) (malicious package)
- [MAL-2025-145839](https://insights.sbomify.com/MAL-2025-145839/): Malicious code in ophiuchus-rest-pyxis-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-145838](https://insights.sbomify.com/MAL-2025-145838/): Malicious code in ophiuchus-radiant-prompts-hyperion (npm) (malicious package)
- [MAL-2025-145837](https://insights.sbomify.com/MAL-2025-145837/): Malicious code in ophiuchus-publish-charon-private (npm) (malicious package)
- [MAL-2025-145836](https://insights.sbomify.com/MAL-2025-145836/): Malicious code in ophiuchus-pm2-framework-juno (npm) (malicious package)
- [MAL-2025-145835](https://insights.sbomify.com/MAL-2025-145835/): Malicious code in ophiuchus-phenomic-alphard-lyra (npm) (malicious package)
- [MAL-2025-145834](https://insights.sbomify.com/MAL-2025-145834/): Malicious code in ophiuchus-pegasus-process-achernar (npm) (malicious package)
- [MAL-2025-145833](https://insights.sbomify.com/MAL-2025-145833/): Malicious code in ophiuchus-pavo-docusaurus-babel (npm) (malicious package)
- [MAL-2025-145832](https://insights.sbomify.com/MAL-2025-145832/): Malicious code in ophiuchus-passport-process-sass-loader (npm) (malicious package)
- [MAL-2025-145831](https://insights.sbomify.com/MAL-2025-145831/): Malicious code in ophiuchus-ophiuchus-hydra-yakutsk (npm) (malicious package)
- [MAL-2025-145830](https://insights.sbomify.com/MAL-2025-145830/): Malicious code in ophiuchus-nconf-init-relay (npm) (malicious package)
- [MAL-2025-14583](https://insights.sbomify.com/MAL-2025-14583/): Malicious code in antares-non-blocking-inflation-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-145829](https://insights.sbomify.com/MAL-2025-145829/): Malicious code in ophiuchus-nashira-hexo-grunt (npm) (malicious package)
- [MAL-2025-145828](https://insights.sbomify.com/MAL-2025-145828/): Malicious code in ophiuchus-mongoose-warp-wolf (npm) (malicious package)
- [MAL-2025-145827](https://insights.sbomify.com/MAL-2025-145827/): Malicious code in ophiuchus-metalsmith-apollo-fomalhaut (npm) (malicious package)
- [MAL-2025-145826](https://insights.sbomify.com/MAL-2025-145826/): Malicious code in ophiuchus-loop-yaml-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-145825](https://insights.sbomify.com/MAL-2025-145825/): Malicious code in ophiuchus-kinetic-development-ursa (npm) (malicious package)
- [MAL-2025-145824](https://insights.sbomify.com/MAL-2025-145824/): Malicious code in ophiuchus-jest-update-hyperion (npm) (malicious package)
- [MAL-2025-145823](https://insights.sbomify.com/MAL-2025-145823/): Malicious code in ophiuchus-janus-middleware-grus (npm) (malicious package)
- [MAL-2025-145822](https://insights.sbomify.com/MAL-2025-145822/): Malicious code in ophiuchus-janus-bunyan-hexo (npm) (malicious package)
- [MAL-2025-145821](https://insights.sbomify.com/MAL-2025-145821/): Malicious code in ophiuchus-izar-kastra-weywot (npm) (malicious package)
- [MAL-2025-145820](https://insights.sbomify.com/MAL-2025-145820/): Malicious code in ophiuchus-impulse-google-element-ui (npm) (malicious package)
- [MAL-2025-14582](https://insights.sbomify.com/MAL-2025-14582/): Malicious code in antares-library-auth0-supervisor (npm) (malicious package)
- [MAL-2025-145819](https://insights.sbomify.com/MAL-2025-145819/): Malicious code in ophiuchus-hermes-link-lynx (npm) (malicious package)
- [MAL-2025-145818](https://insights.sbomify.com/MAL-2025-145818/): Malicious code in ophiuchus-halley-graphql-pavo (npm) (malicious package)
- [MAL-2025-145817](https://insights.sbomify.com/MAL-2025-145817/): Malicious code in ophiuchus-gulp-express-nightwatch (npm) (malicious package)
- [MAL-2025-145816](https://insights.sbomify.com/MAL-2025-145816/): Malicious code in ophiuchus-got-perseus-loopback (npm) (malicious package)
- [MAL-2025-145815](https://insights.sbomify.com/MAL-2025-145815/): Malicious code in ophiuchus-eris-wasat-middleware (npm) (malicious package)
- [MAL-2025-145814](https://insights.sbomify.com/MAL-2025-145814/): Malicious code in ophiuchus-enif-scripts-prettier-stylelint (npm) (malicious package)
- [MAL-2025-145813](https://insights.sbomify.com/MAL-2025-145813/): Malicious code in ophiuchus-duplex-koa-json (npm) (malicious package)
- [MAL-2025-145812](https://insights.sbomify.com/MAL-2025-145812/): Malicious code in ophiuchus-configstore-iota-dorado (npm) (malicious package)
- [MAL-2025-145811](https://insights.sbomify.com/MAL-2025-145811/): Malicious code in ophiuchus-chakra-ui-release-it-concurrently (npm) (malicious package)
- [MAL-2025-145810](https://insights.sbomify.com/MAL-2025-145810/): Malicious code in ophiuchus-chai-standard-xanadu (npm) (malicious package)
- [MAL-2025-14581](https://insights.sbomify.com/MAL-2025-14581/): Malicious code in antares-jsonp-blitz-proteomics (npm) (malicious package)
- [MAL-2025-145809](https://insights.sbomify.com/MAL-2025-145809/): Malicious code in ophiuchus-carina-neptune-auriga (npm) (malicious package)
- [MAL-2025-145808](https://insights.sbomify.com/MAL-2025-145808/): Malicious code in ophiuchus-callisto-leda-sqlite (npm) (malicious package)
- [MAL-2025-145807](https://insights.sbomify.com/MAL-2025-145807/): Malicious code in ophiuchus-bellatrix-dorado-rigel (npm) (malicious package)
- [MAL-2025-145806](https://insights.sbomify.com/MAL-2025-145806/): Malicious code in ophiuchus-await-ini-got (npm) (malicious package)
- [MAL-2025-145805](https://insights.sbomify.com/MAL-2025-145805/): Malicious code in ophiuchus-ariel-module-hercules (npm) (malicious package)
- [MAL-2025-145804](https://insights.sbomify.com/MAL-2025-145804/): Malicious code in odin-venus-enif-metalsmith (npm) (malicious package)
- [MAL-2025-145803](https://insights.sbomify.com/MAL-2025-145803/): Malicious code in odin-tethys-enceladus-rest (npm) (malicious package)
- [MAL-2025-145802](https://insights.sbomify.com/MAL-2025-145802/): Malicious code in odin-sequelize-cordelia-nova (npm) (malicious package)
- [MAL-2025-145801](https://insights.sbomify.com/MAL-2025-145801/): Malicious code in odin-run-script-scripts-bootstrap (npm) (malicious package)
- [MAL-2025-145800](https://insights.sbomify.com/MAL-2025-145800/): Malicious code in odin-mysql-nuxtjs-bellatrix (npm) (malicious package)
- [MAL-2025-14580](https://insights.sbomify.com/MAL-2025-14580/): Malicious code in antares-interstellarmedium-biohacking-markdown-pdf (npm) (malicious package)
- [MAL-2025-1458](https://insights.sbomify.com/MAL-2025-1458/): Malicious code in evoplay-spinential (npm) (malicious package)
- [MAL-2025-145799](https://insights.sbomify.com/MAL-2025-145799/): Malicious code in odin-mira-spawn-protractor (npm) (malicious package)
- [MAL-2025-145798](https://insights.sbomify.com/MAL-2025-145798/): Malicious code in odin-meteor-atlas-cli (npm) (malicious package)
- [MAL-2025-145797](https://insights.sbomify.com/MAL-2025-145797/): Malicious code in odin-loop-orbit-mensa (npm) (malicious package)
- [MAL-2025-145796](https://insights.sbomify.com/MAL-2025-145796/): Malicious code in odin-janus-procyon-xenos (npm) (malicious package)
- [MAL-2025-145795](https://insights.sbomify.com/MAL-2025-145795/): Malicious code in odin-hercules-enceladus-lacerta (npm) (malicious package)
- [MAL-2025-145794](https://insights.sbomify.com/MAL-2025-145794/): Malicious code in odin-grus-rigel-iota (npm) (malicious package)
- [MAL-2025-145793](https://insights.sbomify.com/MAL-2025-145793/): Malicious code in odin-cross-env-prettier-plugin-markdown-deimos (npm) (malicious package)
- [MAL-2025-145792](https://insights.sbomify.com/MAL-2025-145792/): Malicious code in odin-corvus-sirius-gacrux (npm) (malicious package)
- [MAL-2025-145791](https://insights.sbomify.com/MAL-2025-145791/): Malicious code in odin-corvus-proxima-triton (npm) (malicious package)
- [MAL-2025-145790](https://insights.sbomify.com/MAL-2025-145790/): Malicious code in odin-carpo-init-altair (npm) (malicious package)
- [MAL-2025-14579](https://insights.sbomify.com/MAL-2025-14579/): Malicious code in antares-geoarchaeology-robotics-geckodriver (npm) (malicious package)
- [MAL-2025-145789](https://insights.sbomify.com/MAL-2025-145789/): Malicious code in odin-auth0-spica-markdownlint (npm) (malicious package)
- [MAL-2025-145788](https://insights.sbomify.com/MAL-2025-145788/): Malicious code in odin-ariel-superagent-impulse (npm) (malicious package)
- [MAL-2025-145787](https://insights.sbomify.com/MAL-2025-145787/): Malicious code in odin-altair-ganymede-xerxes (npm) (malicious package)
- [MAL-2025-145786](https://insights.sbomify.com/MAL-2025-145786/): Malicious code in octans-virgo-polaris-less (npm) (malicious package)
- [MAL-2025-145785](https://insights.sbomify.com/MAL-2025-145785/): Malicious code in octans-venus-fetch-capella (npm) (malicious package)
- [MAL-2025-145784](https://insights.sbomify.com/MAL-2025-145784/): Malicious code in octans-upgrade-celeste-chai (npm) (malicious package)
- [MAL-2025-145783](https://insights.sbomify.com/MAL-2025-145783/): Malicious code in octans-ultra-hapi-yildun (npm) (malicious package)
- [MAL-2025-145782](https://insights.sbomify.com/MAL-2025-145782/): Malicious code in octans-transport-parcel-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-145781](https://insights.sbomify.com/MAL-2025-145781/): Malicious code in octans-selenium-aether-acamar (npm) (malicious package)
- [MAL-2025-145780](https://insights.sbomify.com/MAL-2025-145780/): Malicious code in octans-resolvers-inquirer-hydra (npm) (malicious package)
- [MAL-2025-14578](https://insights.sbomify.com/MAL-2025-14578/): Malicious code in antares-ganymede-archaeometry-titan (npm) (malicious package)
- [MAL-2025-145779](https://insights.sbomify.com/MAL-2025-145779/): Malicious code in octans-remark-sagitta-xenon (npm) (malicious package)
- [MAL-2025-145778](https://insights.sbomify.com/MAL-2025-145778/): Malicious code in octans-release-it-carina-query (npm) (malicious package)
- [MAL-2025-145777](https://insights.sbomify.com/MAL-2025-145777/): Malicious code in octans-pino-spawn-redis (npm) (malicious package)
- [MAL-2025-145776](https://insights.sbomify.com/MAL-2025-145776/): Malicious code in octans-mysql-titan-selenium (npm) (malicious package)
- [MAL-2025-145775](https://insights.sbomify.com/MAL-2025-145775/): Malicious code in octans-miranda-semantic-release-mongoose (npm) (malicious package)
- [MAL-2025-145774](https://insights.sbomify.com/MAL-2025-145774/): Malicious code in octans-mensa-public-firebase (npm) (malicious package)
- [MAL-2025-145773](https://insights.sbomify.com/MAL-2025-145773/): Malicious code in octans-juno-magellan-rigel (npm) (malicious package)
- [MAL-2025-145772](https://insights.sbomify.com/MAL-2025-145772/): Malicious code in octans-iota-version-rehype (npm) (malicious package)
- [MAL-2025-145771](https://insights.sbomify.com/MAL-2025-145771/): Malicious code in octans-hyperion-callback-kaus (npm) (malicious package)
- [MAL-2025-145770](https://insights.sbomify.com/MAL-2025-145770/): Malicious code in octans-halley-phenomic-celeste (npm) (malicious package)
- [MAL-2025-14577](https://insights.sbomify.com/MAL-2025-14577/): Malicious code in antares-chai-umbra-orbit (npm) (malicious package)
- [MAL-2025-145769](https://insights.sbomify.com/MAL-2025-145769/): Malicious code in octans-duplex-protractor-thuban (npm) (malicious package)
- [MAL-2025-145768](https://insights.sbomify.com/MAL-2025-145768/): Malicious code in octans-dagda-winston-envconfig (npm) (malicious package)
- [MAL-2025-145767](https://insights.sbomify.com/MAL-2025-145767/): Malicious code in octans-cross-env-json-janus (npm) (malicious package)
- [MAL-2025-145766](https://insights.sbomify.com/MAL-2025-145766/): Malicious code in octans-cross-env-config-cassini (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1423/