# Vulnerabilities published in 2025


- [MAL-2025-145585](https://insights.sbomify.com/MAL-2025-145585/): Malicious code in nodemon-mongoose-middleware-kastra (npm) (malicious package)
- [MAL-2025-145584](https://insights.sbomify.com/MAL-2025-145584/): Malicious code in nodemon-miranda-rollup-kastra (npm) (malicious package)
- [MAL-2025-145583](https://insights.sbomify.com/MAL-2025-145583/): Malicious code in nodemon-middleware-non-blocking-eclipse (npm) (malicious package)
- [MAL-2025-145582](https://insights.sbomify.com/MAL-2025-145582/): Malicious code in nodemon-less-gravity-process (npm) (malicious package)
- [MAL-2025-145581](https://insights.sbomify.com/MAL-2025-145581/): Malicious code in nodemon-geckodriver-mongodb-uglify-js (npm) (malicious package)
- [MAL-2025-145580](https://insights.sbomify.com/MAL-2025-145580/): Malicious code in nodemon-europa-apollo-markdown (npm) (malicious package)
- [MAL-2025-14558](https://insights.sbomify.com/MAL-2025-14558/): Malicious code in ant-dolphin-kzm576-project (npm) (malicious package)
- [MAL-2025-145579](https://insights.sbomify.com/MAL-2025-145579/): Malicious code in nodemon-chalk-standard-cordelia (npm) (malicious package)
- [MAL-2025-145578](https://insights.sbomify.com/MAL-2025-145578/): Malicious code in nodejs-titan-thuban-sedna (npm) (malicious package)
- [MAL-2025-145577](https://insights.sbomify.com/MAL-2025-145577/): Malicious code in nodejs-relay-rest-deneb (npm) (malicious package)
- [MAL-2025-145576](https://insights.sbomify.com/MAL-2025-145576/): Malicious code in nodejs-quito-deimos-publish (npm) (malicious package)
- [MAL-2025-145575](https://insights.sbomify.com/MAL-2025-145575/): Malicious code in nodejs-quasar-gridsome-npm (npm) (malicious package)
- [MAL-2025-145574](https://insights.sbomify.com/MAL-2025-145574/): Malicious code in nodejs-proxima-link-prettier (npm) (malicious package)
- [MAL-2025-145573](https://insights.sbomify.com/MAL-2025-145573/): Malicious code in nodejs-pegasus-rehype-adonis (npm) (malicious package)
- [MAL-2025-145572](https://insights.sbomify.com/MAL-2025-145572/): Malicious code in nodejs-mongoose-dotenv-mongoose (npm) (malicious package)
- [MAL-2025-145571](https://insights.sbomify.com/MAL-2025-145571/): Malicious code in nodejs-miranda-socketio-enceladus (npm) (malicious package)
- [MAL-2025-145570](https://insights.sbomify.com/MAL-2025-145570/): Malicious code in nodejs-metalsmith-kinetic-tool (npm) (malicious package)
- [MAL-2025-14557](https://insights.sbomify.com/MAL-2025-14557/): Malicious code in ant-dolphin-ekh060-project (npm) (malicious package)
- [MAL-2025-145569](https://insights.sbomify.com/MAL-2025-145569/): Malicious code in nodejs-javascript-winston-aether (npm) (malicious package)
- [MAL-2025-145568](https://insights.sbomify.com/MAL-2025-145568/): Malicious code in nodejs-io-jwt-global (npm) (malicious package)
- [MAL-2025-145567](https://insights.sbomify.com/MAL-2025-145567/): Malicious code in nodejs-hydra-jest-quito (npm) (malicious package)
- [MAL-2025-145566](https://insights.sbomify.com/MAL-2025-145566/): Malicious code in nodejs-grus-gacrux-auriga (npm) (malicious package)
- [MAL-2025-145565](https://insights.sbomify.com/MAL-2025-145565/): Malicious code in nodejs-frontend-sync-command (npm) (malicious package)
- [MAL-2025-145564](https://insights.sbomify.com/MAL-2025-145564/): Malicious code in nodejs-framework-taurus-pyxis (npm) (malicious package)
- [MAL-2025-145563](https://insights.sbomify.com/MAL-2025-145563/): Malicious code in nodejs-eris-izar-semantic-release (npm) (malicious package)
- [MAL-2025-145562](https://insights.sbomify.com/MAL-2025-145562/): Malicious code in nodejs-elektra-perseus-apollo (npm) (malicious package)
- [MAL-2025-145561](https://insights.sbomify.com/MAL-2025-145561/): Malicious code in nodejs-dependencies-unuk-duplex (npm) (malicious package)
- [MAL-2025-145560](https://insights.sbomify.com/MAL-2025-145560/): Malicious code in nodejs-cygnus-sync-markdown-pdf (npm) (malicious package)
- [MAL-2025-14556](https://insights.sbomify.com/MAL-2025-14556/): Malicious code in ant-cliff-aui668-project (npm) (malicious package)
- [MAL-2025-145559](https://insights.sbomify.com/MAL-2025-145559/): Malicious code in nodejs-csrf-dotenv-safe-solis (npm) (malicious package)
- [MAL-2025-145558](https://insights.sbomify.com/MAL-2025-145558/): Malicious code in nodejs-cosmiconfig-mysql-xo (npm) (malicious package)
- [MAL-2025-145557](https://insights.sbomify.com/MAL-2025-145557/): Malicious code in node-sass-webpack-yonder-husky (npm) (malicious package)
- [MAL-2025-145556](https://insights.sbomify.com/MAL-2025-145556/): Malicious code in node-sass-vortex-achernar-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-145555](https://insights.sbomify.com/MAL-2025-145555/): Malicious code in node-sass-tool-resolvers-winston (npm) (malicious package)
- [MAL-2025-145554](https://insights.sbomify.com/MAL-2025-145554/): Malicious code in node-sass-sequelize-init-grunt (npm) (malicious package)
- [MAL-2025-145553](https://insights.sbomify.com/MAL-2025-145553/): Malicious code in node-sass-run-script-chariklo-uninstall (npm) (malicious package)
- [MAL-2025-145552](https://insights.sbomify.com/MAL-2025-145552/): Malicious code in node-sass-proxima-capella-eslint (npm) (malicious package)
- [MAL-2025-145551](https://insights.sbomify.com/MAL-2025-145551/): Malicious code in node-sass-process-wolf-init (npm) (malicious package)
- [MAL-2025-145550](https://insights.sbomify.com/MAL-2025-145550/): Malicious code in node-sass-polaris-eridanus-dorado (npm) (malicious package)
- [MAL-2025-14555](https://insights.sbomify.com/MAL-2025-14555/): Malicious code in answers-search-ui (npm) (malicious package)
- [MAL-2025-145549](https://insights.sbomify.com/MAL-2025-145549/): Malicious code in node-sass-pegasus-wezen-pegasus (npm) (malicious package)
- [MAL-2025-145548](https://insights.sbomify.com/MAL-2025-145548/): Malicious code in node-sass-mini-css-extract-plugin-spawn-apex (npm) (malicious package)
- [MAL-2025-145547](https://insights.sbomify.com/MAL-2025-145547/): Malicious code in node-sass-magellan-mongodb-auth0 (npm) (malicious package)
- [MAL-2025-145546](https://insights.sbomify.com/MAL-2025-145546/): Malicious code in node-sass-loglevel-stop-winston (npm) (malicious package)
- [MAL-2025-145545](https://insights.sbomify.com/MAL-2025-145545/): Malicious code in node-sass-jsonp-parcel-transport (npm) (malicious package)
- [MAL-2025-145544](https://insights.sbomify.com/MAL-2025-145544/): Malicious code in node-sass-iota-hapi-bulma (npm) (malicious package)
- [MAL-2025-145543](https://insights.sbomify.com/MAL-2025-145543/): Malicious code in node-sass-grunt-pegasus-convict (npm) (malicious package)
- [MAL-2025-145542](https://insights.sbomify.com/MAL-2025-145542/): Malicious code in node-sass-google-node-sass-jest (npm) (malicious package)
- [MAL-2025-145541](https://insights.sbomify.com/MAL-2025-145541/): Malicious code in node-sass-geckodriver-colors-pulsar (npm) (malicious package)
- [MAL-2025-145540](https://insights.sbomify.com/MAL-2025-145540/): Malicious code in node-sass-gacrux-venus-cli (npm) (malicious package)
- [MAL-2025-14554](https://insights.sbomify.com/MAL-2025-14554/): Malicious code in ansi-codes (npm) (malicious package)
- [MAL-2025-145539](https://insights.sbomify.com/MAL-2025-145539/): Malicious code in node-sass-foundation-helios-rate-limiter (npm) (malicious package)
- [MAL-2025-145538](https://insights.sbomify.com/MAL-2025-145538/): Malicious code in node-sass-firebase-enceladus-loopback (npm) (malicious package)
- [MAL-2025-145537](https://insights.sbomify.com/MAL-2025-145537/): Malicious code in node-sass-eslint-plugin-solis-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-145536](https://insights.sbomify.com/MAL-2025-145536/): Malicious code in node-sass-eleventy-framework-postcss-loader (npm) (malicious package)
- [MAL-2025-145535](https://insights.sbomify.com/MAL-2025-145535/): Malicious code in node-sass-eclipse-flare-nashira (npm) (malicious package)
- [MAL-2025-145534](https://insights.sbomify.com/MAL-2025-145534/): Malicious code in node-sass-duplex-tailwindcss-dione (npm) (malicious package)
- [MAL-2025-145533](https://insights.sbomify.com/MAL-2025-145533/): Malicious code in node-sass-csv-nconf-algol (npm) (malicious package)
- [MAL-2025-145532](https://insights.sbomify.com/MAL-2025-145532/): Malicious code in node-sass-concurrently-markdown-ultra (npm) (malicious package)
- [MAL-2025-145531](https://insights.sbomify.com/MAL-2025-145531/): Malicious code in node-sass-cli-phenomic-webpack (npm) (malicious package)
- [MAL-2025-145530](https://insights.sbomify.com/MAL-2025-145530/): Malicious code in node-sass-cli-charon-zenith (npm) (malicious package)
- [MAL-2025-14553](https://insights.sbomify.com/MAL-2025-14553/): Malicious code in anroidapp (npm) (malicious package)
- [MAL-2025-145529](https://insights.sbomify.com/MAL-2025-145529/): Malicious code in node-sass-callisto-html-webpack-plugin-vulcan (npm) (malicious package)
- [MAL-2025-145528](https://insights.sbomify.com/MAL-2025-145528/): Malicious code in node-sass-bellatrix-commitizen-yaml (npm) (malicious package)
- [MAL-2025-145527](https://insights.sbomify.com/MAL-2025-145527/): Malicious code in node-sass-auth-ursa-husky (npm) (malicious package)
- [MAL-2025-145526](https://insights.sbomify.com/MAL-2025-145526/): Malicious code in node-sass-antares-gulp-sync (npm) (malicious package)
- [MAL-2025-145525](https://insights.sbomify.com/MAL-2025-145525/): Malicious code in node-config-xerxes-cz-conventional-changelog-rehype (npm) (malicious package)
- [MAL-2025-145524](https://insights.sbomify.com/MAL-2025-145524/): Malicious code in node-config-warp-resolvers-tethys (npm) (malicious package)
- [MAL-2025-145523](https://insights.sbomify.com/MAL-2025-145523/): Malicious code in node-config-vuetify-less-loader-version (npm) (malicious package)
- [MAL-2025-145522](https://insights.sbomify.com/MAL-2025-145522/): Malicious code in node-config-upgrade-library-carpo (npm) (malicious package)
- [MAL-2025-145521](https://insights.sbomify.com/MAL-2025-145521/): Malicious code in node-config-umbriel-ignite-sirius (npm) (malicious package)
- [MAL-2025-145520](https://insights.sbomify.com/MAL-2025-145520/): Malicious code in node-config-terser-start-morgan (npm) (malicious package)
- [MAL-2025-14552](https://insights.sbomify.com/MAL-2025-14552/): Malicious code in anorien (npm) (malicious package)
- [MAL-2025-145519](https://insights.sbomify.com/MAL-2025-145519/): Malicious code in node-config-sequelize-nestjs-izar (npm) (malicious package)
- [MAL-2025-145518](https://insights.sbomify.com/MAL-2025-145518/): Malicious code in node-config-sadr-node-sass-loglevel (npm) (malicious package)
- [MAL-2025-145517](https://insights.sbomify.com/MAL-2025-145517/): Malicious code in node-config-pulsar-google-weywot (npm) (malicious package)
- [MAL-2025-145516](https://insights.sbomify.com/MAL-2025-145516/): Malicious code in node-config-non-blocking-meissa-middleware (npm) (malicious package)
- [MAL-2025-145515](https://insights.sbomify.com/MAL-2025-145515/): Malicious code in node-config-miranda-cosmiconfig-eslint-plugin (npm) (malicious package)
- [MAL-2025-145514](https://insights.sbomify.com/MAL-2025-145514/): Malicious code in node-config-leda-test-xml (npm) (malicious package)
- [MAL-2025-145513](https://insights.sbomify.com/MAL-2025-145513/): Malicious code in node-config-kronos-miranda-loopback (npm) (malicious package)
- [MAL-2025-145512](https://insights.sbomify.com/MAL-2025-145512/): Malicious code in node-config-juno-install-iota (npm) (malicious package)
- [MAL-2025-145511](https://insights.sbomify.com/MAL-2025-145511/): Malicious code in node-config-jasmine-sass-loader-mocha (npm) (malicious package)
- [MAL-2025-145510](https://insights.sbomify.com/MAL-2025-145510/): Malicious code in node-config-janus-version-sqlite (npm) (malicious package)
- [MAL-2025-14551](https://insights.sbomify.com/MAL-2025-14551/): Malicious code in anonsurf (npm) (malicious package)
- [MAL-2025-145509](https://insights.sbomify.com/MAL-2025-145509/): Malicious code in node-config-heka-metalsmith-rimraf (npm) (malicious package)
- [MAL-2025-145508](https://insights.sbomify.com/MAL-2025-145508/): Malicious code in node-config-gatsby-terser-antares (npm) (malicious package)
- [MAL-2025-145507](https://insights.sbomify.com/MAL-2025-145507/): Malicious code in node-config-flare-elektra-xenos (npm) (malicious package)
- [MAL-2025-145506](https://insights.sbomify.com/MAL-2025-145506/): Malicious code in node-config-envconfig-eleventy-neptune (npm) (malicious package)
- [MAL-2025-145505](https://insights.sbomify.com/MAL-2025-145505/): Malicious code in node-config-elektra-europa-algol (npm) (malicious package)
- [MAL-2025-145504](https://insights.sbomify.com/MAL-2025-145504/): Malicious code in node-config-commitlint-element-ui-avior (npm) (malicious package)
- [MAL-2025-145503](https://insights.sbomify.com/MAL-2025-145503/): Malicious code in node-config-ariel-cosmiconfig-grus (npm) (malicious package)
- [MAL-2025-145502](https://insights.sbomify.com/MAL-2025-145502/): Malicious code in node-config-aquarius-selenium-betelgeuse (npm) (malicious package)
- [MAL-2025-145501](https://insights.sbomify.com/MAL-2025-145501/): Malicious code in node-config-antares-wasat-mongodb (npm) (malicious package)
- [MAL-2025-145500](https://insights.sbomify.com/MAL-2025-145500/): Malicious code in nightwatch-yonder-javascript-wasat (npm) (malicious package)
- [MAL-2025-14550](https://insights.sbomify.com/MAL-2025-14550/): Malicious code in announcesir (npm) (malicious package)
- [MAL-2025-1455](https://insights.sbomify.com/MAL-2025-1455/): Malicious code in yizhifabao61 (npm) (malicious package)
- [MAL-2025-145499](https://insights.sbomify.com/MAL-2025-145499/): Malicious code in nightwatch-xenos-ariel-upgrade (npm) (malicious package)
- [MAL-2025-145498](https://insights.sbomify.com/MAL-2025-145498/): Malicious code in nightwatch-webdriverio-ursa-umbriel (npm) (malicious package)
- [MAL-2025-145497](https://insights.sbomify.com/MAL-2025-145497/): Malicious code in nightwatch-webdriver-manager-process-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-145496](https://insights.sbomify.com/MAL-2025-145496/): Malicious code in nightwatch-vulcan-gatsby-nuxtjs (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1426/