# Vulnerabilities published in 2025


- [MAL-2025-145675](https://insights.sbomify.com/MAL-2025-145675/): Malicious code in npm-cressida-antares-sagitta (npm) (malicious package)
- [MAL-2025-145674](https://insights.sbomify.com/MAL-2025-145674/): Malicious code in npm-carpo-vulcan-proxima (npm) (malicious package)
- [MAL-2025-145673](https://insights.sbomify.com/MAL-2025-145673/): Malicious code in npm-alphard-mongodb-nodemon (npm) (malicious package)
- [MAL-2025-145672](https://insights.sbomify.com/MAL-2025-145672/): Malicious code in npm-algol-barnard-meteor (npm) (malicious package)
- [MAL-2025-145671](https://insights.sbomify.com/MAL-2025-145671/): Malicious code in npm-acamar-quantum-proxima (npm) (malicious package)
- [MAL-2025-145670](https://insights.sbomify.com/MAL-2025-145670/): Malicious code in nova-umbriel-axios-ganymede (npm) (malicious package)
- [MAL-2025-14567](https://insights.sbomify.com/MAL-2025-14567/): Malicious code in ant-opal-qdx297-project (npm) (malicious package)
- [MAL-2025-145669](https://insights.sbomify.com/MAL-2025-145669/): Malicious code in nova-spectron-impulse-writable (npm) (malicious package)
- [MAL-2025-145668](https://insights.sbomify.com/MAL-2025-145668/): Malicious code in nova-slides-concurrently-slidev (npm) (malicious package)
- [MAL-2025-145667](https://insights.sbomify.com/MAL-2025-145667/): Malicious code in nova-sirius-warp-csv (npm) (malicious package)
- [MAL-2025-145666](https://insights.sbomify.com/MAL-2025-145666/): Malicious code in nova-reveal-md-equinox-umbra (npm) (malicious package)
- [MAL-2025-145665](https://insights.sbomify.com/MAL-2025-145665/): Malicious code in nova-protractor-nightmare-quark (npm) (malicious package)
- [MAL-2025-145664](https://insights.sbomify.com/MAL-2025-145664/): Malicious code in nova-postcss-loader-nuxtjs-duplex (npm) (malicious package)
- [MAL-2025-145663](https://insights.sbomify.com/MAL-2025-145663/): Malicious code in nova-passport-hyperion-dotenv-safe (npm) (malicious package)
- [MAL-2025-145662](https://insights.sbomify.com/MAL-2025-145662/): Malicious code in nova-nebula-centauri-cosmos (npm) (malicious package)
- [MAL-2025-145661](https://insights.sbomify.com/MAL-2025-145661/): Malicious code in nova-lyra-io-draco (npm) (malicious package)
- [MAL-2025-145660](https://insights.sbomify.com/MAL-2025-145660/): Malicious code in nova-json-terser-vega (npm) (malicious package)
- [MAL-2025-14566](https://insights.sbomify.com/MAL-2025-14566/): Malicious code in ant-octopus-vug860-project (npm) (malicious package)
- [MAL-2025-145659](https://insights.sbomify.com/MAL-2025-145659/): Malicious code in nova-fornax-pegasus-orbit (npm) (malicious package)
- [MAL-2025-145658](https://insights.sbomify.com/MAL-2025-145658/): Malicious code in nova-farout-test-auth0 (npm) (malicious package)
- [MAL-2025-145657](https://insights.sbomify.com/MAL-2025-145657/): Malicious code in nova-delphinus-npm-janus (npm) (malicious package)
- [MAL-2025-145656](https://insights.sbomify.com/MAL-2025-145656/): Malicious code in nova-css-minimizer-webpack-plugin-prettier-meteor (npm) (malicious package)
- [MAL-2025-145655](https://insights.sbomify.com/MAL-2025-145655/): Malicious code in nova-configstore-envconfig-winston (npm) (malicious package)
- [MAL-2025-145654](https://insights.sbomify.com/MAL-2025-145654/): Malicious code in nova-cli-cosmos-phoebe (npm) (malicious package)
- [MAL-2025-145653](https://insights.sbomify.com/MAL-2025-145653/): Malicious code in nova-centaurus-telesto-aquarius (npm) (malicious package)
- [MAL-2025-145652](https://insights.sbomify.com/MAL-2025-145652/): Malicious code in nova-browserify-airbnb-jest (npm) (malicious package)
- [MAL-2025-145651](https://insights.sbomify.com/MAL-2025-145651/): Malicious code in norma-supervisor-epimetheus-aquarius (npm) (malicious package)
- [MAL-2025-145650](https://insights.sbomify.com/MAL-2025-145650/): Malicious code in norma-sirius-phoebe-jovian (npm) (malicious package)
- [MAL-2025-14565](https://insights.sbomify.com/MAL-2025-14565/): Malicious code in ant-nimbus-nhr067-project (npm) (malicious package)
- [MAL-2025-145649](https://insights.sbomify.com/MAL-2025-145649/): Malicious code in norma-rollup-websockets-draco (npm) (malicious package)
- [MAL-2025-145648](https://insights.sbomify.com/MAL-2025-145648/): Malicious code in norma-registry-async-geckodriver (npm) (malicious package)
- [MAL-2025-145647](https://insights.sbomify.com/MAL-2025-145647/): Malicious code in norma-react-bootstrap-commitlint-config-angular-dotenv (npm) (malicious package)
- [MAL-2025-145646](https://insights.sbomify.com/MAL-2025-145646/): Malicious code in norma-json-stop-quantum (npm) (malicious package)
- [MAL-2025-145645](https://insights.sbomify.com/MAL-2025-145645/): Malicious code in norma-janus-install-arcturus (npm) (malicious package)
- [MAL-2025-145644](https://insights.sbomify.com/MAL-2025-145644/): Malicious code in norma-iota-superagent-ora (npm) (malicious package)
- [MAL-2025-145643](https://insights.sbomify.com/MAL-2025-145643/): Malicious code in norma-html-webpack-plugin-version-juno (npm) (malicious package)
- [MAL-2025-145642](https://insights.sbomify.com/MAL-2025-145642/): Malicious code in norma-hermes-javascript-phenomic (npm) (malicious package)
- [MAL-2025-145641](https://insights.sbomify.com/MAL-2025-145641/): Malicious code in norma-fusion-corvus-postcss-loader (npm) (malicious package)
- [MAL-2025-145640](https://insights.sbomify.com/MAL-2025-145640/): Malicious code in norma-europa-prettier-plugin-markdown-link (npm) (malicious package)
- [MAL-2025-14564](https://insights.sbomify.com/MAL-2025-14564/): Malicious code in ant-mangrove-kah880-project (npm) (malicious package)
- [MAL-2025-145639](https://insights.sbomify.com/MAL-2025-145639/): Malicious code in norma-cz-conventional-changelog-changelog-colors (npm) (malicious package)
- [MAL-2025-145638](https://insights.sbomify.com/MAL-2025-145638/): Malicious code in norma-css-minimizer-webpack-plugin-await-gacrux (npm) (malicious package)
- [MAL-2025-145637](https://insights.sbomify.com/MAL-2025-145637/): Malicious code in norma-cressida-wezen-venus (npm) (malicious package)
- [MAL-2025-145636](https://insights.sbomify.com/MAL-2025-145636/): Malicious code in norma-command-slides-elektra (npm) (malicious package)
- [MAL-2025-145635](https://insights.sbomify.com/MAL-2025-145635/): Malicious code in norma-charon-cypress-oauth (npm) (malicious package)
- [MAL-2025-145634](https://insights.sbomify.com/MAL-2025-145634/): Malicious code in norma-antares-react-bootstrap-weywot (npm) (malicious package)
- [MAL-2025-145633](https://insights.sbomify.com/MAL-2025-145633/): Malicious code in norma-aether-thuban-triton (npm) (malicious package)
- [MAL-2025-145632](https://insights.sbomify.com/MAL-2025-145632/): Malicious code in non-blocking-xml-procyon-callback (npm) (malicious package)
- [MAL-2025-145631](https://insights.sbomify.com/MAL-2025-145631/): Malicious code in non-blocking-writable-soap-element-ui (npm) (malicious package)
- [MAL-2025-145630](https://insights.sbomify.com/MAL-2025-145630/): Malicious code in non-blocking-vega-jovian-csrf (npm) (malicious package)
- [MAL-2025-14563](https://insights.sbomify.com/MAL-2025-14563/): Malicious code in ant-jade-hfv892-project (npm) (malicious package)
- [MAL-2025-145629](https://insights.sbomify.com/MAL-2025-145629/): Malicious code in non-blocking-ursa-postgres-cygnus (npm) (malicious package)
- [MAL-2025-145628](https://insights.sbomify.com/MAL-2025-145628/): Malicious code in non-blocking-tailwindcss-virgo-buffer (npm) (malicious package)
- [MAL-2025-145627](https://insights.sbomify.com/MAL-2025-145627/): Malicious code in non-blocking-supervisor-ophiuchus-eclipse (npm) (malicious package)
- [MAL-2025-145626](https://insights.sbomify.com/MAL-2025-145626/): Malicious code in non-blocking-subscription-phoebe-hydra (npm) (malicious package)
- [MAL-2025-145625](https://insights.sbomify.com/MAL-2025-145625/): Malicious code in non-blocking-style-loader-grus-slidev (npm) (malicious package)
- [MAL-2025-145624](https://insights.sbomify.com/MAL-2025-145624/): Malicious code in non-blocking-stream-achernar-webdriver-mocha (npm) (malicious package)
- [MAL-2025-145623](https://insights.sbomify.com/MAL-2025-145623/): Malicious code in non-blocking-start-sequelize-fetch (npm) (malicious package)
- [MAL-2025-145622](https://insights.sbomify.com/MAL-2025-145622/): Malicious code in non-blocking-sqlite-toml-xo (npm) (malicious package)
- [MAL-2025-145621](https://insights.sbomify.com/MAL-2025-145621/): Malicious code in non-blocking-sqlite-comet-eclipse (npm) (malicious package)
- [MAL-2025-145620](https://insights.sbomify.com/MAL-2025-145620/): Malicious code in non-blocking-sass-loader-celeste-norma (npm) (malicious package)
- [MAL-2025-14562](https://insights.sbomify.com/MAL-2025-14562/): Malicious code in ant-galaxy-sti865-project (npm) (malicious package)
- [MAL-2025-145619](https://insights.sbomify.com/MAL-2025-145619/): Malicious code in non-blocking-prettier-plugin-markdown-enceladus-process (npm) (malicious package)
- [MAL-2025-145618](https://insights.sbomify.com/MAL-2025-145618/): Malicious code in non-blocking-phoenix-figures-algol (npm) (malicious package)
- [MAL-2025-145617](https://insights.sbomify.com/MAL-2025-145617/): Malicious code in non-blocking-norma-canopus-procyon (npm) (malicious package)
- [MAL-2025-145616](https://insights.sbomify.com/MAL-2025-145616/): Malicious code in non-blocking-meissa-toml-vortex (npm) (malicious package)
- [MAL-2025-145615](https://insights.sbomify.com/MAL-2025-145615/): Malicious code in non-blocking-magellan-carpo-aldebaran (npm) (malicious package)
- [MAL-2025-145614](https://insights.sbomify.com/MAL-2025-145614/): Malicious code in non-blocking-loop-semantic-ui-despina (npm) (malicious package)
- [MAL-2025-145613](https://insights.sbomify.com/MAL-2025-145613/): Malicious code in non-blocking-lacerta-halley-dependencies (npm) (malicious package)
- [MAL-2025-145612](https://insights.sbomify.com/MAL-2025-145612/): Malicious code in non-blocking-kastra-eslint-config-babel (npm) (malicious package)
- [MAL-2025-145611](https://insights.sbomify.com/MAL-2025-145611/): Malicious code in non-blocking-html-webpack-plugin-exec-epimetheus (npm) (malicious package)
- [MAL-2025-145610](https://insights.sbomify.com/MAL-2025-145610/): Malicious code in non-blocking-hapi-less-package (npm) (malicious package)
- [MAL-2025-14561](https://insights.sbomify.com/MAL-2025-14561/): Malicious code in ant-fox-fvm110-project (npm) (malicious package)
- [MAL-2025-145609](https://insights.sbomify.com/MAL-2025-145609/): Malicious code in non-blocking-halley-pm2-izar (npm) (malicious package)
- [MAL-2025-145608](https://insights.sbomify.com/MAL-2025-145608/): Malicious code in non-blocking-dotenv-safe-got-castor (npm) (malicious package)
- [MAL-2025-145607](https://insights.sbomify.com/MAL-2025-145607/): Malicious code in non-blocking-dorado-reveal-md-slides (npm) (malicious package)
- [MAL-2025-145606](https://insights.sbomify.com/MAL-2025-145606/): Malicious code in non-blocking-development-avior-deneb (npm) (malicious package)
- [MAL-2025-145605](https://insights.sbomify.com/MAL-2025-145605/): Malicious code in non-blocking-colors-xml-callisto (npm) (malicious package)
- [MAL-2025-145604](https://insights.sbomify.com/MAL-2025-145604/): Malicious code in non-blocking-chalk-fornax-spinner (npm) (malicious package)
- [MAL-2025-145603](https://insights.sbomify.com/MAL-2025-145603/): Malicious code in non-blocking-auriga-inquirer-graphql (npm) (malicious package)
- [MAL-2025-145602](https://insights.sbomify.com/MAL-2025-145602/): Malicious code in non-blocking-apollo-proxima-enceladus (npm) (malicious package)
- [MAL-2025-145601](https://insights.sbomify.com/MAL-2025-145601/): Malicious code in non-blocking-antares-ursa-gulp (npm) (malicious package)
- [MAL-2025-145600](https://insights.sbomify.com/MAL-2025-145600/): Malicious code in non-blocking-antares-configstore-dorado (npm) (malicious package)
- [MAL-2025-14560](https://insights.sbomify.com/MAL-2025-14560/): Malicious code in ant-forest-ucj519-project (npm) (malicious package)
- [MAL-2025-1456](https://insights.sbomify.com/MAL-2025-1456/): Malicious code in yizhifabao62 (npm) (malicious package)
- [MAL-2025-145599](https://insights.sbomify.com/MAL-2025-145599/): Malicious code in nodemon-triton-oberon-express (npm) (malicious package)
- [MAL-2025-145598](https://insights.sbomify.com/MAL-2025-145598/): Malicious code in nodemon-thuban-child-process-element-ui (npm) (malicious package)
- [MAL-2025-145597](https://insights.sbomify.com/MAL-2025-145597/): Malicious code in nodemon-test-cressida-duplex (npm) (malicious package)
- [MAL-2025-145596](https://insights.sbomify.com/MAL-2025-145596/): Malicious code in nodemon-sqlite-winston-webdriver-manager (npm) (malicious package)
- [MAL-2025-145595](https://insights.sbomify.com/MAL-2025-145595/): Malicious code in nodemon-sedna-elektra-optimize-css-assets-webpack-plugin (npm) (malicious package)
- [MAL-2025-145594](https://insights.sbomify.com/MAL-2025-145594/): Malicious code in nodemon-scorpius-ignite-development (npm) (malicious package)
- [MAL-2025-145593](https://insights.sbomify.com/MAL-2025-145593/): Malicious code in nodemon-rollup-dactyl-native (npm) (malicious package)
- [MAL-2025-145592](https://insights.sbomify.com/MAL-2025-145592/): Malicious code in nodemon-proxima-unuk-bellatrix (npm) (malicious package)
- [MAL-2025-145591](https://insights.sbomify.com/MAL-2025-145591/): Malicious code in nodemon-procyon-async-gatsby (npm) (malicious package)
- [MAL-2025-145590](https://insights.sbomify.com/MAL-2025-145590/): Malicious code in nodemon-optimize-css-assets-webpack-plugin-epimetheus-changelog (npm) (malicious package)
- [MAL-2025-14559](https://insights.sbomify.com/MAL-2025-14559/): Malicious code in ant-forest-hla676-project (npm) (malicious package)
- [MAL-2025-145589](https://insights.sbomify.com/MAL-2025-145589/): Malicious code in nodemon-odin-yildun-bunyan (npm) (malicious package)
- [MAL-2025-145588](https://insights.sbomify.com/MAL-2025-145588/): Malicious code in nodemon-node-config-writable-ceres (npm) (malicious package)
- [MAL-2025-145587](https://insights.sbomify.com/MAL-2025-145587/): Malicious code in nodemon-nestjs-juno-procyon (npm) (malicious package)
- [MAL-2025-145586](https://insights.sbomify.com/MAL-2025-145586/): Malicious code in nodemon-nconf-sadr-vuepress (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1425/