# Vulnerabilities published in 2025 - [MAL-2025-145495](https://insights.sbomify.com/MAL-2025-145495/): Malicious code in nightwatch-vega-pm2-magellan (npm) (malicious package) - [MAL-2025-145494](https://insights.sbomify.com/MAL-2025-145494/): Malicious code in nightwatch-ursa-triton-frontend (npm) (malicious package) - [MAL-2025-145493](https://insights.sbomify.com/MAL-2025-145493/): Malicious code in nightwatch-ursa-centaurus-pino-pretty (npm) (malicious package) - [MAL-2025-145492](https://insights.sbomify.com/MAL-2025-145492/): Malicious code in nightwatch-triton-equinox-native (npm) (malicious package) - [MAL-2025-145491](https://insights.sbomify.com/MAL-2025-145491/): Malicious code in nightwatch-triton-chromedriver-rigel (npm) (malicious package) - [MAL-2025-145490](https://insights.sbomify.com/MAL-2025-145490/): Malicious code in nightwatch-tethys-leda-eris (npm) (malicious package) - [MAL-2025-14549](https://insights.sbomify.com/MAL-2025-14549/): Malicious code in annisazanniba-tea (npm) (malicious package) - [MAL-2025-145489](https://insights.sbomify.com/MAL-2025-145489/): Malicious code in nightwatch-terser-webpack-plugin-auth-callisto (npm) (malicious package) - [MAL-2025-145488](https://insights.sbomify.com/MAL-2025-145488/): Malicious code in nightwatch-subscription-gemini-regulus (npm) (malicious package) - [MAL-2025-145487](https://insights.sbomify.com/MAL-2025-145487/): Malicious code in nightwatch-sqlite-frontend-ceres (npm) (malicious package) - [MAL-2025-145486](https://insights.sbomify.com/MAL-2025-145486/): Malicious code in nightwatch-shelljs-optimize-css-assets-webpack-plugin-meissa (npm) (malicious package) - [MAL-2025-145485](https://insights.sbomify.com/MAL-2025-145485/): Malicious code in nightwatch-sails-ganymede-chai (npm) (malicious package) - [MAL-2025-145484](https://insights.sbomify.com/MAL-2025-145484/): Malicious code in nightwatch-sagitta-react-bootstrap-xanadu (npm) (malicious package) - [MAL-2025-145483](https://insights.sbomify.com/MAL-2025-145483/): Malicious code in nightwatch-quantum-eleventy-got (npm) (malicious package) - [MAL-2025-145482](https://insights.sbomify.com/MAL-2025-145482/): Malicious code in nightwatch-quantum-cosmos-axios (npm) (malicious package) - [MAL-2025-145481](https://insights.sbomify.com/MAL-2025-145481/): Malicious code in nightwatch-postgres-forever-gemini (npm) (malicious package) - [MAL-2025-145480](https://insights.sbomify.com/MAL-2025-145480/): Malicious code in nightwatch-pm2-vega-ceres (npm) (malicious package) - [MAL-2025-14548](https://insights.sbomify.com/MAL-2025-14548/): Malicious code in annexcv (npm) (malicious package) - [MAL-2025-145479](https://insights.sbomify.com/MAL-2025-145479/): Malicious code in nightwatch-pino-pretty-publish-nodemon (npm) (malicious package) - [MAL-2025-145478](https://insights.sbomify.com/MAL-2025-145478/): Malicious code in nightwatch-phoebe-transport-zenith (npm) (malicious package) - [MAL-2025-145477](https://insights.sbomify.com/MAL-2025-145477/): Malicious code in nightwatch-parcel-cypress-quantum (npm) (malicious package) - [MAL-2025-145476](https://insights.sbomify.com/MAL-2025-145476/): Malicious code in nightwatch-ophiuchus-html-webpack-plugin-resolvers (npm) (malicious package) - [MAL-2025-145475](https://insights.sbomify.com/MAL-2025-145475/): Malicious code in nightwatch-node-config-node-config-scorpius (npm) (malicious package) - [MAL-2025-145474](https://insights.sbomify.com/MAL-2025-145474/): Malicious code in nightwatch-nightmare-cosmiconfig-andromeda (npm) (malicious package) - [MAL-2025-145473](https://insights.sbomify.com/MAL-2025-145473/): Malicious code in nightwatch-mongodb-subscription-css-minimizer-webpack-plugin (npm) (malicious package) - [MAL-2025-145472](https://insights.sbomify.com/MAL-2025-145472/): Malicious code in nightwatch-leda-phoebe-titan (npm) (malicious package) - [MAL-2025-145471](https://insights.sbomify.com/MAL-2025-145471/): Malicious code in nightwatch-jest-titan-mongoose (npm) (malicious package) - [MAL-2025-145470](https://insights.sbomify.com/MAL-2025-145470/): Malicious code in nightwatch-iota-oberon-stop (npm) (malicious package) - [MAL-2025-14547](https://insights.sbomify.com/MAL-2025-14547/): Malicious code in annex_29 (npm) (malicious package) - [MAL-2025-145469](https://insights.sbomify.com/MAL-2025-145469/): Malicious code in nightwatch-gulp-rest-private (npm) (malicious package) - [MAL-2025-145468](https://insights.sbomify.com/MAL-2025-145468/): Malicious code in nightwatch-fornax-vuepress-sadr (npm) (malicious package) - [MAL-2025-145467](https://insights.sbomify.com/MAL-2025-145467/): Malicious code in nightwatch-fomalhaut-less-deimos (npm) (malicious package) - [MAL-2025-145466](https://insights.sbomify.com/MAL-2025-145466/): Malicious code in nightwatch-figures-postcss-gacrux (npm) (malicious package) - [MAL-2025-145465](https://insights.sbomify.com/MAL-2025-145465/): Malicious code in nightwatch-element-ui-wezen-shelljs (npm) (malicious package) - [MAL-2025-145464](https://insights.sbomify.com/MAL-2025-145464/): Malicious code in nightwatch-elektra-impulse-exec (npm) (malicious package) - [MAL-2025-145463](https://insights.sbomify.com/MAL-2025-145463/): Malicious code in nightwatch-deimos-leda-yildun (npm) (malicious package) - [MAL-2025-145462](https://insights.sbomify.com/MAL-2025-145462/): Malicious code in nightwatch-cz-conventional-changelog-pulsar-supervisor (npm) (malicious package) - [MAL-2025-145461](https://insights.sbomify.com/MAL-2025-145461/): Malicious code in nightwatch-css-loader-charon-gemini (npm) (malicious package) - [MAL-2025-145460](https://insights.sbomify.com/MAL-2025-145460/): Malicious code in nightwatch-cosmiconfig-semantic-ui-development (npm) (malicious package) - [MAL-2025-14546](https://insights.sbomify.com/MAL-2025-14546/): Malicious code in ankerias (npm) (malicious package) - [MAL-2025-145459](https://insights.sbomify.com/MAL-2025-145459/): Malicious code in nightwatch-chai-query-leda (npm) (malicious package) - [MAL-2025-145458](https://insights.sbomify.com/MAL-2025-145458/): Malicious code in nightwatch-chai-nuxtjs-registry (npm) (malicious package) - [MAL-2025-145457](https://insights.sbomify.com/MAL-2025-145457/): Malicious code in nightwatch-antares-metalsmith-library (npm) (malicious package) - [MAL-2025-145456](https://insights.sbomify.com/MAL-2025-145456/): Malicious code in nightwatch-aldebaran-centaurus-oauth (npm) (malicious package) - [MAL-2025-145455](https://insights.sbomify.com/MAL-2025-145455/): Malicious code in nightwatch-airbnb-deimos-pegasus (npm) (malicious package) - [MAL-2025-145454](https://insights.sbomify.com/MAL-2025-145454/): Malicious code in nightwatch-adonis-quasar-procyon (npm) (malicious package) - [MAL-2025-145453](https://insights.sbomify.com/MAL-2025-145453/): Malicious code in nightwatch-achernar-cordelia-sirius (npm) (malicious package) - [MAL-2025-145452](https://insights.sbomify.com/MAL-2025-145452/): Malicious code in nightmare-xanthus-axios-levels (npm) (malicious package) - [MAL-2025-145451](https://insights.sbomify.com/MAL-2025-145451/): Malicious code in nightmare-ursa-non-blocking-subscription (npm) (malicious package) - [MAL-2025-145450](https://insights.sbomify.com/MAL-2025-145450/): Malicious code in nightmare-superagent-foundation-dynamo (npm) (malicious package) - [MAL-2025-14545](https://insights.sbomify.com/MAL-2025-14545/): Malicious code in anivid (npm) (malicious package) - [MAL-2025-145449](https://insights.sbomify.com/MAL-2025-145449/): Malicious code in nightmare-start-iota-resolvers (npm) (malicious package) - [MAL-2025-145448](https://insights.sbomify.com/MAL-2025-145448/): Malicious code in nightmare-sequelize-proxima-eslint (npm) (malicious package) - [MAL-2025-145447](https://insights.sbomify.com/MAL-2025-145447/): Malicious code in nightmare-sagitta-public-lint (npm) (malicious package) - [MAL-2025-145446](https://insights.sbomify.com/MAL-2025-145446/): Malicious code in nightmare-run-script-cosmiconfig-non-blocking (npm) (malicious package) - [MAL-2025-145445](https://insights.sbomify.com/MAL-2025-145445/): Malicious code in nightmare-rigel-playwright-markdown (npm) (malicious package) - [MAL-2025-145444](https://insights.sbomify.com/MAL-2025-145444/): Malicious code in nightmare-quark-cygnus-antares (npm) (malicious package) - [MAL-2025-145443](https://insights.sbomify.com/MAL-2025-145443/): Malicious code in nightmare-node-config-update-meissa (npm) (malicious package) - [MAL-2025-145442](https://insights.sbomify.com/MAL-2025-145442/): Malicious code in nightmare-node-config-eridanus-configstore (npm) (malicious package) - [MAL-2025-145441](https://insights.sbomify.com/MAL-2025-145441/): Malicious code in nightmare-nightwatch-sagitta-apollo (npm) (malicious package) - [MAL-2025-145440](https://insights.sbomify.com/MAL-2025-145440/): Malicious code in nightmare-nebula-axios-radiant (npm) (malicious package) - [MAL-2025-14544](https://insights.sbomify.com/MAL-2025-14544/): Malicious code in anionic (npm) (malicious package) - [MAL-2025-145439](https://insights.sbomify.com/MAL-2025-145439/): Malicious code in nightmare-janus-europa-polaris (npm) (malicious package) - [MAL-2025-145438](https://insights.sbomify.com/MAL-2025-145438/): Malicious code in nightmare-indus-nodejs-xenos (npm) (malicious package) - [MAL-2025-145437](https://insights.sbomify.com/MAL-2025-145437/): Malicious code in nightmare-flare-karma-perseus (npm) (malicious package) - [MAL-2025-145436](https://insights.sbomify.com/MAL-2025-145436/): Malicious code in nightmare-event-blitz-cosmiconfig (npm) (malicious package) - [MAL-2025-145435](https://insights.sbomify.com/MAL-2025-145435/): Malicious code in nightmare-eslint-procyon-halley (npm) (malicious package) - [MAL-2025-145434](https://insights.sbomify.com/MAL-2025-145434/): Malicious code in nightmare-envconfig-nestjs-firebase (npm) (malicious package) - [MAL-2025-145433](https://insights.sbomify.com/MAL-2025-145433/): Malicious code in nightmare-dynamo-meissa-radiant (npm) (malicious package) - [MAL-2025-145432](https://insights.sbomify.com/MAL-2025-145432/): Malicious code in nightmare-commitlint-gridsome-zenobia (npm) (malicious package) - [MAL-2025-145431](https://insights.sbomify.com/MAL-2025-145431/): Malicious code in nightmare-cli-ursa-phenomic (npm) (malicious package) - [MAL-2025-145430](https://insights.sbomify.com/MAL-2025-145430/): Malicious code in nightmare-callisto-phenomic-semantic-ui (npm) (malicious package) - [MAL-2025-14543](https://insights.sbomify.com/MAL-2025-14543/): Malicious code in aninha (npm) (malicious package) - [MAL-2025-145429](https://insights.sbomify.com/MAL-2025-145429/): Malicious code in nightmare-build-norma-pegasus (npm) (malicious package) - [MAL-2025-145428](https://insights.sbomify.com/MAL-2025-145428/): Malicious code in nightmare-backend-babel-leda (npm) (malicious package) - [MAL-2025-145427](https://insights.sbomify.com/MAL-2025-145427/): Malicious code in nextjs-xml-yaml-fork (npm) (malicious package) - [MAL-2025-145426](https://insights.sbomify.com/MAL-2025-145426/): Malicious code in nextjs-rest-elektra-neptune (npm) (malicious package) - [MAL-2025-145425](https://insights.sbomify.com/MAL-2025-145425/): Malicious code in nextjs-react-bootstrap-dependencies-nova (npm) (malicious package) - [MAL-2025-145424](https://insights.sbomify.com/MAL-2025-145424/): Malicious code in nextjs-procyon-rehype-jest (npm) (malicious package) - [MAL-2025-145423](https://insights.sbomify.com/MAL-2025-145423/): Malicious code in nextjs-procyon-postcss-chai (npm) (malicious package) - [MAL-2025-145422](https://insights.sbomify.com/MAL-2025-145422/): Malicious code in nextjs-postcss-galaxy-triton (npm) (malicious package) - [MAL-2025-145421](https://insights.sbomify.com/MAL-2025-145421/): Malicious code in nextjs-phoebe-commitizen-dagda (npm) (malicious package) - [MAL-2025-145420](https://insights.sbomify.com/MAL-2025-145420/): Malicious code in nextjs-ophiuchus-promise-umbriel (npm) (malicious package) - [MAL-2025-14542](https://insights.sbomify.com/MAL-2025-14542/): Malicious code in animalrightshistory_888 (npm) (malicious package) - [MAL-2025-145419](https://insights.sbomify.com/MAL-2025-145419/): Malicious code in nextjs-nestjs-html-webpack-plugin-vuetify (npm) (malicious package) - [MAL-2025-145418](https://insights.sbomify.com/MAL-2025-145418/): Malicious code in nextjs-mdx-auriga-rate-limiter (npm) (malicious package) - [MAL-2025-145417](https://insights.sbomify.com/MAL-2025-145417/): Malicious code in nextjs-iota-hercules-regulus (npm) (malicious package) - [MAL-2025-145416](https://insights.sbomify.com/MAL-2025-145416/): Malicious code in nextjs-hermes-sails-acamar (npm) (malicious package) - [MAL-2025-145415](https://insights.sbomify.com/MAL-2025-145415/): Malicious code in nextjs-figures-hermes-spinner (npm) (malicious package) - [MAL-2025-145414](https://insights.sbomify.com/MAL-2025-145414/): Malicious code in nextjs-dynamo-gemini-version (npm) (malicious package) - [MAL-2025-145413](https://insights.sbomify.com/MAL-2025-145413/): Malicious code in nextjs-dorado-postgres-zephyr (npm) (malicious package) - [MAL-2025-145412](https://insights.sbomify.com/MAL-2025-145412/): Malicious code in nextjs-changelog-hexo-polaris (npm) (malicious package) - [MAL-2025-145411](https://insights.sbomify.com/MAL-2025-145411/): Malicious code in nextjs-carina-pino-algol (npm) (malicious package) - [MAL-2025-145410](https://insights.sbomify.com/MAL-2025-145410/): Malicious code in nextjs-callisto-xanthus-auth0 (npm) (malicious package) - [MAL-2025-14541](https://insights.sbomify.com/MAL-2025-14541/): Malicious code in animalrightshistory (npm) (malicious package) - [MAL-2025-145409](https://insights.sbomify.com/MAL-2025-145409/): Malicious code in nextjs-betelgeuse-fornax-superagent (npm) (malicious package) - [MAL-2025-145408](https://insights.sbomify.com/MAL-2025-145408/): Malicious code in nextjs-adonis-kastra-rollup (npm) (malicious package) - [MAL-2025-145407](https://insights.sbomify.com/MAL-2025-145407/): Malicious code in net_halibut_azure-65 (npm) (malicious package) - [MAL-2025-145406](https://insights.sbomify.com/MAL-2025-145406/): Malicious code in nestjs-webpack-passport-browserify (npm) (malicious package) - [MAL-2025-145405](https://insights.sbomify.com/MAL-2025-145405/): Malicious code in nestjs-terser-postcss-loader-await (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1427/