# Vulnerabilities published in 2025


- [MAL-2025-145765](https://insights.sbomify.com/MAL-2025-145765/): Malicious code in octans-concurrently-scripts-betelgeuse (npm) (malicious package)
- [MAL-2025-145764](https://insights.sbomify.com/MAL-2025-145764/): Malicious code in octans-command-html-webpack-plugin-build (npm) (malicious package)
- [MAL-2025-145763](https://insights.sbomify.com/MAL-2025-145763/): Malicious code in octans-blitz-meteor-non-blocking (npm) (malicious package)
- [MAL-2025-145762](https://insights.sbomify.com/MAL-2025-145762/): Malicious code in octans-axios-node-sass-pm2 (npm) (malicious package)
- [MAL-2025-145761](https://insights.sbomify.com/MAL-2025-145761/): Malicious code in octans-apollo-google-parcel (npm) (malicious package)
- [MAL-2025-145760](https://insights.sbomify.com/MAL-2025-145760/): Malicious code in octans-antares-ursa-inquirer (npm) (malicious package)
- [MAL-2025-14576](https://insights.sbomify.com/MAL-2025-14576/): Malicious code in antares-carpo-bionics-fermiparadox (npm) (malicious package)
- [MAL-2025-145759](https://insights.sbomify.com/MAL-2025-145759/): Malicious code in oberon-xenos-process-spawn (npm) (malicious package)
- [MAL-2025-145758](https://insights.sbomify.com/MAL-2025-145758/): Malicious code in oberon-xanthus-slides-farout (npm) (malicious package)
- [MAL-2025-145757](https://insights.sbomify.com/MAL-2025-145757/): Malicious code in oberon-sedna-css-loader-stop (npm) (malicious package)
- [MAL-2025-145756](https://insights.sbomify.com/MAL-2025-145756/): Malicious code in oberon-sass-loader-supervisor-ultra (npm) (malicious package)
- [MAL-2025-145755](https://insights.sbomify.com/MAL-2025-145755/): Malicious code in oberon-sadr-stream-solis (npm) (malicious package)
- [MAL-2025-145754](https://insights.sbomify.com/MAL-2025-145754/): Malicious code in oberon-redis-luna-passport (npm) (malicious package)
- [MAL-2025-145753](https://insights.sbomify.com/MAL-2025-145753/): Malicious code in oberon-redis-grunt-draco (npm) (malicious package)
- [MAL-2025-145752](https://insights.sbomify.com/MAL-2025-145752/): Malicious code in oberon-puppeteer-sync-eclipse (npm) (malicious package)
- [MAL-2025-145751](https://insights.sbomify.com/MAL-2025-145751/): Malicious code in oberon-passport-toml-framework (npm) (malicious package)
- [MAL-2025-145750](https://insights.sbomify.com/MAL-2025-145750/): Malicious code in oberon-parcel-titan-tool (npm) (malicious package)
- [MAL-2025-14575](https://insights.sbomify.com/MAL-2025-14575/): Malicious code in antares-biosignature-titan-impulse (npm) (malicious package)
- [MAL-2025-145749](https://insights.sbomify.com/MAL-2025-145749/): Malicious code in oberon-nebula-thuban-upgrade (npm) (malicious package)
- [MAL-2025-145748](https://insights.sbomify.com/MAL-2025-145748/): Malicious code in oberon-materialize-markdown-ignite (npm) (malicious package)
- [MAL-2025-145747](https://insights.sbomify.com/MAL-2025-145747/): Malicious code in oberon-io-thuban-draco (npm) (malicious package)
- [MAL-2025-145746](https://insights.sbomify.com/MAL-2025-145746/): Malicious code in oberon-firebase-tailwindcss-procyon (npm) (malicious package)
- [MAL-2025-145745](https://insights.sbomify.com/MAL-2025-145745/): Malicious code in oberon-firebase-jupiter-winston (npm) (malicious package)
- [MAL-2025-145744](https://insights.sbomify.com/MAL-2025-145744/): Malicious code in oberon-event-kaus-remark (npm) (malicious package)
- [MAL-2025-145743](https://insights.sbomify.com/MAL-2025-145743/): Malicious code in oberon-dynamo-mdx-sedna (npm) (malicious package)
- [MAL-2025-145742](https://insights.sbomify.com/MAL-2025-145742/): Malicious code in oberon-centaurus-eclipse-auth (npm) (malicious package)
- [MAL-2025-145741](https://insights.sbomify.com/MAL-2025-145741/): Malicious code in oberon-apex-react-bootstrap-json (npm) (malicious package)
- [MAL-2025-145740](https://insights.sbomify.com/MAL-2025-145740/): Malicious code in oberon-aether-weywot-less-loader (npm) (malicious package)
- [MAL-2025-14574](https://insights.sbomify.com/MAL-2025-14574/): Malicious code in ant-zeppelin-csy326-project (npm) (malicious package)
- [MAL-2025-145739](https://insights.sbomify.com/MAL-2025-145739/): Malicious code in oauth-zenith-pino-pretty-xenos (npm) (malicious package)
- [MAL-2025-145738](https://insights.sbomify.com/MAL-2025-145738/): Malicious code in oauth-yonder-galaxy-commitizen (npm) (malicious package)
- [MAL-2025-145737](https://insights.sbomify.com/MAL-2025-145737/): Malicious code in oauth-writable-aurora-docusaurus (npm) (malicious package)
- [MAL-2025-145736](https://insights.sbomify.com/MAL-2025-145736/): Malicious code in oauth-nextjs-winston-cli (npm) (malicious package)
- [MAL-2025-145735](https://insights.sbomify.com/MAL-2025-145735/): Malicious code in oauth-jsonp-figures-postcss-loader (npm) (malicious package)
- [MAL-2025-145734](https://insights.sbomify.com/MAL-2025-145734/): Malicious code in oauth-inquirer-farout-pulsar (npm) (malicious package)
- [MAL-2025-145733](https://insights.sbomify.com/MAL-2025-145733/): Malicious code in oauth-grunt-ignite-framework (npm) (malicious package)
- [MAL-2025-145732](https://insights.sbomify.com/MAL-2025-145732/): Malicious code in oauth-gatsby-titan-markdown-pdf (npm) (malicious package)
- [MAL-2025-145731](https://insights.sbomify.com/MAL-2025-145731/): Malicious code in oauth-figures-thuban-stream (npm) (malicious package)
- [MAL-2025-145730](https://insights.sbomify.com/MAL-2025-145730/): Malicious code in oauth-farout-corvus-init (npm) (malicious package)
- [MAL-2025-14573](https://insights.sbomify.com/MAL-2025-14573/): Malicious code in ant-yellow-yjs130-project (npm) (malicious package)
- [MAL-2025-145729](https://insights.sbomify.com/MAL-2025-145729/): Malicious code in oauth-eslint-event-levels (npm) (malicious package)
- [MAL-2025-145728](https://insights.sbomify.com/MAL-2025-145728/): Malicious code in oauth-eclipse-rest-rate-limiter (npm) (malicious package)
- [MAL-2025-145727](https://insights.sbomify.com/MAL-2025-145727/): Malicious code in oauth-dotenv-safe-sagitta-postgres (npm) (malicious package)
- [MAL-2025-145726](https://insights.sbomify.com/MAL-2025-145726/): Malicious code in oauth-dorado-gacrux-ora (npm) (malicious package)
- [MAL-2025-145725](https://insights.sbomify.com/MAL-2025-145725/): Malicious code in oauth-corvus-atlas-run-script (npm) (malicious package)
- [MAL-2025-145724](https://insights.sbomify.com/MAL-2025-145724/): Malicious code in oauth-browserify-nuxtjs-babel (npm) (malicious package)
- [MAL-2025-145723](https://insights.sbomify.com/MAL-2025-145723/): Malicious code in oauth-blitz-nestjs-pipe (npm) (malicious package)
- [MAL-2025-145722](https://insights.sbomify.com/MAL-2025-145722/): Malicious code in oauth-bellatrix-chalk-luna (npm) (malicious package)
- [MAL-2025-145721](https://insights.sbomify.com/MAL-2025-145721/): Malicious code in oauth-barnard-resolvers-cosmiconfig (npm) (malicious package)
- [MAL-2025-145720](https://insights.sbomify.com/MAL-2025-145720/): Malicious code in nuxtjs-webdriver-manager-nestjs-karma (npm) (malicious package)
- [MAL-2025-14572](https://insights.sbomify.com/MAL-2025-14572/): Malicious code in ant-yawn-wlv896-project (npm) (malicious package)
- [MAL-2025-145719](https://insights.sbomify.com/MAL-2025-145719/): Malicious code in nuxtjs-vortex-dotenv-parse-variables-carpo (npm) (malicious package)
- [MAL-2025-145718](https://insights.sbomify.com/MAL-2025-145718/): Malicious code in nuxtjs-uglify-js-loopback-comet (npm) (malicious package)
- [MAL-2025-145717](https://insights.sbomify.com/MAL-2025-145717/): Malicious code in nuxtjs-typeorm-odin-gulp (npm) (malicious package)
- [MAL-2025-145716](https://insights.sbomify.com/MAL-2025-145716/): Malicious code in nuxtjs-typeorm-apollo-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-145715](https://insights.sbomify.com/MAL-2025-145715/): Malicious code in nuxtjs-resolvers-procyon-bootstrap (npm) (malicious package)
- [MAL-2025-145714](https://insights.sbomify.com/MAL-2025-145714/): Malicious code in nuxtjs-repository-browserify-wolf (npm) (malicious package)
- [MAL-2025-145713](https://insights.sbomify.com/MAL-2025-145713/): Malicious code in nuxtjs-release-it-reveal-md-iota (npm) (malicious package)
- [MAL-2025-145712](https://insights.sbomify.com/MAL-2025-145712/): Malicious code in nuxtjs-redis-fork-mutation (npm) (malicious package)
- [MAL-2025-145711](https://insights.sbomify.com/MAL-2025-145711/): Malicious code in nuxtjs-prompts-venus-phoebe (npm) (malicious package)
- [MAL-2025-145710](https://insights.sbomify.com/MAL-2025-145710/): Malicious code in nuxtjs-polaris-google-style-loader (npm) (malicious package)
- [MAL-2025-14571](https://insights.sbomify.com/MAL-2025-14571/): Malicious code in ant-xenon-bat763-project (npm) (malicious package)
- [MAL-2025-145709](https://insights.sbomify.com/MAL-2025-145709/): Malicious code in nuxtjs-perseus-frontend-callisto (npm) (malicious package)
- [MAL-2025-145708](https://insights.sbomify.com/MAL-2025-145708/): Malicious code in nuxtjs-init-ora-xenon (npm) (malicious package)
- [MAL-2025-145707](https://insights.sbomify.com/MAL-2025-145707/): Malicious code in nuxtjs-hydra-betelgeuse-yildun (npm) (malicious package)
- [MAL-2025-145706](https://insights.sbomify.com/MAL-2025-145706/): Malicious code in nuxtjs-helmet-winston-registry (npm) (malicious package)
- [MAL-2025-145705](https://insights.sbomify.com/MAL-2025-145705/): Malicious code in nuxtjs-grus-heka-ignite (npm) (malicious package)
- [MAL-2025-145704](https://insights.sbomify.com/MAL-2025-145704/): Malicious code in nuxtjs-gridsome-uglify-js-terser (npm) (malicious package)
- [MAL-2025-145703](https://insights.sbomify.com/MAL-2025-145703/): Malicious code in nuxtjs-draco-jekyll-ursa (npm) (malicious package)
- [MAL-2025-145702](https://insights.sbomify.com/MAL-2025-145702/): Malicious code in nuxtjs-dotenv-parse-variables-release-it-nova (npm) (malicious package)
- [MAL-2025-145701](https://insights.sbomify.com/MAL-2025-145701/): Malicious code in nuxtjs-command-magellan-non-blocking (npm) (malicious package)
- [MAL-2025-145700](https://insights.sbomify.com/MAL-2025-145700/): Malicious code in nuxtjs-colors-update-delphinus (npm) (malicious package)
- [MAL-2025-14570](https://insights.sbomify.com/MAL-2025-14570/): Malicious code in ant-rose-klv704-project (npm) (malicious package)
- [MAL-2025-1457](https://insights.sbomify.com/MAL-2025-1457/): Malicious code in yizhifabao63 (npm) (malicious package)
- [MAL-2025-145699](https://insights.sbomify.com/MAL-2025-145699/): Malicious code in nuxtjs-chalk-start-jovian (npm) (malicious package)
- [MAL-2025-145698](https://insights.sbomify.com/MAL-2025-145698/): Malicious code in nuxtjs-bunyan-semantic-ui-warp (npm) (malicious package)
- [MAL-2025-145697](https://insights.sbomify.com/MAL-2025-145697/): Malicious code in nuxtjs-bellatrix-zenith-uninstall (npm) (malicious package)
- [MAL-2025-145696](https://insights.sbomify.com/MAL-2025-145696/): Malicious code in nuxtjs-aurora-bellatrix-jekyll (npm) (malicious package)
- [MAL-2025-145695](https://insights.sbomify.com/MAL-2025-145695/): Malicious code in nuxtjs-astro-dotenv-toml (npm) (malicious package)
- [MAL-2025-145694](https://insights.sbomify.com/MAL-2025-145694/): Malicious code in nuxtjs-apollo-gulp-nodejs (npm) (malicious package)
- [MAL-2025-145693](https://insights.sbomify.com/MAL-2025-145693/): Malicious code in nuxtjs-achernar-sadr-phoenix (npm) (malicious package)
- [MAL-2025-145692](https://insights.sbomify.com/MAL-2025-145692/): Malicious code in npm-taurus-canopus-electron-builder (npm) (malicious package)
- [MAL-2025-145691](https://insights.sbomify.com/MAL-2025-145691/): Malicious code in npm-standard-sagitta-nconf (npm) (malicious package)
- [MAL-2025-145690](https://insights.sbomify.com/MAL-2025-145690/): Malicious code in npm-server-mui-pm2 (npm) (malicious package)
- [MAL-2025-14569](https://insights.sbomify.com/MAL-2025-14569/): Malicious code in ant-peacock-wmb879-project (npm) (malicious package)
- [MAL-2025-145689](https://insights.sbomify.com/MAL-2025-145689/): Malicious code in npm-scripts-yildun-element-ui (npm) (malicious package)
- [MAL-2025-145688](https://insights.sbomify.com/MAL-2025-145688/): Malicious code in npm-pm2-prettier-eslint (npm) (malicious package)
- [MAL-2025-145687](https://insights.sbomify.com/MAL-2025-145687/): Malicious code in npm-package-octans-puppeteer (npm) (malicious package)
- [MAL-2025-145686](https://insights.sbomify.com/MAL-2025-145686/): Malicious code in npm-norma-remark-cluster (npm) (malicious package)
- [MAL-2025-145685](https://insights.sbomify.com/MAL-2025-145685/): Malicious code in npm-nodemon-docusaurus-scorpius (npm) (malicious package)
- [MAL-2025-145684](https://insights.sbomify.com/MAL-2025-145684/): Malicious code in npm-nodejs-umbriel-buffer (npm) (malicious package)
- [MAL-2025-145683](https://insights.sbomify.com/MAL-2025-145683/): Malicious code in npm-magellan-commitlint-vuepress (npm) (malicious package)
- [MAL-2025-145682](https://insights.sbomify.com/MAL-2025-145682/): Malicious code in npm-lynx-neptune-morgan (npm) (malicious package)
- [MAL-2025-145681](https://insights.sbomify.com/MAL-2025-145681/): Malicious code in npm-leda-cz-conventional-changelog-halley (npm) (malicious package)
- [MAL-2025-145680](https://insights.sbomify.com/MAL-2025-145680/): Malicious code in npm-ini-helios-luna (npm) (malicious package)
- [MAL-2025-14568](https://insights.sbomify.com/MAL-2025-14568/): Malicious code in ant-opaline-sqh328-project (npm) (malicious package)
- [MAL-2025-145679](https://insights.sbomify.com/MAL-2025-145679/): Malicious code in npm-helios-nuxtjs-gridsome (npm) (malicious package)
- [MAL-2025-145678](https://insights.sbomify.com/MAL-2025-145678/): Malicious code in npm-event-socketio-pavo (npm) (malicious package)
- [MAL-2025-145677](https://insights.sbomify.com/MAL-2025-145677/): Malicious code in npm-europa-cluster-postgres (npm) (malicious package)
- [MAL-2025-145676](https://insights.sbomify.com/MAL-2025-145676/): Malicious code in npm-dependencies-cypress-protractor (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1424/