# Vulnerabilities published in 2025


- [MAL-2025-145404](https://insights.sbomify.com/MAL-2025-145404/): Malicious code in nestjs-sass-loader-pegasus-kastra (npm) (malicious package)
- [MAL-2025-145403](https://insights.sbomify.com/MAL-2025-145403/): Malicious code in nestjs-react-bootstrap-dagda-geckodriver (npm) (malicious package)
- [MAL-2025-145402](https://insights.sbomify.com/MAL-2025-145402/): Malicious code in nestjs-rate-limiter-css-loader-docusaurus (npm) (malicious package)
- [MAL-2025-145401](https://insights.sbomify.com/MAL-2025-145401/): Malicious code in nestjs-proxima-lyra-sagitta (npm) (malicious package)
- [MAL-2025-145400](https://insights.sbomify.com/MAL-2025-145400/): Malicious code in nestjs-nodejs-electron-builder-auth (npm) (malicious package)
- [MAL-2025-14540](https://insights.sbomify.com/MAL-2025-14540/): Malicious code in aniadd (npm) (malicious package)
- [MAL-2025-1454](https://insights.sbomify.com/MAL-2025-1454/): Malicious code in yizhifabao60 (npm) (malicious package)
- [MAL-2025-145399](https://insights.sbomify.com/MAL-2025-145399/): Malicious code in nestjs-magellan-prettier-plugin-markdown-mdx (npm) (malicious package)
- [MAL-2025-145398](https://insights.sbomify.com/MAL-2025-145398/): Malicious code in nestjs-local-less-titan (npm) (malicious package)
- [MAL-2025-145397](https://insights.sbomify.com/MAL-2025-145397/): Malicious code in nestjs-google-websockets-rocket (npm) (malicious package)
- [MAL-2025-145396](https://insights.sbomify.com/MAL-2025-145396/): Malicious code in nestjs-geckodriver-avior-webdriver-manager (npm) (malicious package)
- [MAL-2025-145395](https://insights.sbomify.com/MAL-2025-145395/): Malicious code in nestjs-fork-draco-fornax (npm) (malicious package)
- [MAL-2025-145394](https://insights.sbomify.com/MAL-2025-145394/): Malicious code in nestjs-element-ui-forever-json (npm) (malicious package)
- [MAL-2025-145393](https://insights.sbomify.com/MAL-2025-145393/): Malicious code in nestjs-elara-europa-spectron (npm) (malicious package)
- [MAL-2025-145392](https://insights.sbomify.com/MAL-2025-145392/): Malicious code in nestjs-dotenv-kinetic-eslint-plugin (npm) (malicious package)
- [MAL-2025-145391](https://insights.sbomify.com/MAL-2025-145391/): Malicious code in nestjs-cressida-pegasus-toml (npm) (malicious package)
- [MAL-2025-145390](https://insights.sbomify.com/MAL-2025-145390/): Malicious code in neptune-zenith-fornax-husky (npm) (malicious package)
- [MAL-2025-14539](https://insights.sbomify.com/MAL-2025-14539/): Malicious code in angunote (npm) (malicious package)
- [MAL-2025-145389](https://insights.sbomify.com/MAL-2025-145389/): Malicious code in neptune-wasat-deneb-grunt (npm) (malicious package)
- [MAL-2025-145388](https://insights.sbomify.com/MAL-2025-145388/): Malicious code in neptune-version-eris-kronos (npm) (malicious package)
- [MAL-2025-145387](https://insights.sbomify.com/MAL-2025-145387/): Malicious code in neptune-unuk-taurus-ganymede (npm) (malicious package)
- [MAL-2025-145386](https://insights.sbomify.com/MAL-2025-145386/): Malicious code in neptune-unuk-fornax-event (npm) (malicious package)
- [MAL-2025-145385](https://insights.sbomify.com/MAL-2025-145385/): Malicious code in neptune-uninstall-gridsome-levels (npm) (malicious package)
- [MAL-2025-145384](https://insights.sbomify.com/MAL-2025-145384/): Malicious code in neptune-umbriel-subscription-equinox (npm) (malicious package)
- [MAL-2025-145383](https://insights.sbomify.com/MAL-2025-145383/): Malicious code in neptune-test-jest-charon (npm) (malicious package)
- [MAL-2025-145382](https://insights.sbomify.com/MAL-2025-145382/): Malicious code in neptune-stream-toml-postcss-loader (npm) (malicious package)
- [MAL-2025-145381](https://insights.sbomify.com/MAL-2025-145381/): Malicious code in neptune-stop-semantic-release-nestjs (npm) (malicious package)
- [MAL-2025-145380](https://insights.sbomify.com/MAL-2025-145380/): Malicious code in neptune-sirius-nova-chai (npm) (malicious package)
- [MAL-2025-14538](https://insights.sbomify.com/MAL-2025-14538/): Malicious code in angulin (npm) (malicious package)
- [MAL-2025-145379](https://insights.sbomify.com/MAL-2025-145379/): Malicious code in neptune-shelljs-mysql-local (npm) (malicious package)
- [MAL-2025-145378](https://insights.sbomify.com/MAL-2025-145378/): Malicious code in neptune-request-hexo-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-145377](https://insights.sbomify.com/MAL-2025-145377/): Malicious code in neptune-redis-centaurus-phoenix (npm) (malicious package)
- [MAL-2025-145376](https://insights.sbomify.com/MAL-2025-145376/): Malicious code in neptune-postgres-google-ganymede (npm) (malicious package)
- [MAL-2025-145375](https://insights.sbomify.com/MAL-2025-145375/): Malicious code in neptune-pm2-dynamo-dotenv-safe (npm) (malicious package)
- [MAL-2025-145374](https://insights.sbomify.com/MAL-2025-145374/): Malicious code in neptune-playwright-spinner-charon (npm) (malicious package)
- [MAL-2025-145373](https://insights.sbomify.com/MAL-2025-145373/): Malicious code in neptune-phoebe-octans-node-config (npm) (malicious package)
- [MAL-2025-145372](https://insights.sbomify.com/MAL-2025-145372/): Malicious code in neptune-phoebe-geckodriver-wasat (npm) (malicious package)
- [MAL-2025-145371](https://insights.sbomify.com/MAL-2025-145371/): Malicious code in neptune-passport-venus-zenobia (npm) (malicious package)
- [MAL-2025-145370](https://insights.sbomify.com/MAL-2025-145370/): Malicious code in neptune-nuxtjs-axios-run-script (npm) (malicious package)
- [MAL-2025-14537](https://insights.sbomify.com/MAL-2025-14537/): Malicious code in angularjs-in-view (npm) (malicious package)
- [MAL-2025-145369](https://insights.sbomify.com/MAL-2025-145369/): Malicious code in neptune-mui-jasmine-sync (npm) (malicious package)
- [MAL-2025-145368](https://insights.sbomify.com/MAL-2025-145368/): Malicious code in neptune-morgan-firebase-aquarius (npm) (malicious package)
- [MAL-2025-145367](https://insights.sbomify.com/MAL-2025-145367/): Malicious code in neptune-mongoose-kastra-slidev (npm) (malicious package)
- [MAL-2025-145366](https://insights.sbomify.com/MAL-2025-145366/): Malicious code in neptune-markdown-elektra-ophiuchus (npm) (malicious package)
- [MAL-2025-145365](https://insights.sbomify.com/MAL-2025-145365/): Malicious code in neptune-kaus-xanthus-xanadu (npm) (malicious package)
- [MAL-2025-145364](https://insights.sbomify.com/MAL-2025-145364/): Malicious code in neptune-html-webpack-plugin-subscription-typeorm (npm) (malicious package)
- [MAL-2025-145363](https://insights.sbomify.com/MAL-2025-145363/): Malicious code in neptune-fornax-zenith-airbnb (npm) (malicious package)
- [MAL-2025-145362](https://insights.sbomify.com/MAL-2025-145362/): Malicious code in neptune-fornax-miranda-mongodb (npm) (malicious package)
- [MAL-2025-145361](https://insights.sbomify.com/MAL-2025-145361/): Malicious code in neptune-exec-radiant-wasat (npm) (malicious package)
- [MAL-2025-145360](https://insights.sbomify.com/MAL-2025-145360/): Malicious code in neptune-eris-rollup-plugin-nashira (npm) (malicious package)
- [MAL-2025-14536](https://insights.sbomify.com/MAL-2025-14536/): Malicious code in angulargp (npm) (malicious package)
- [MAL-2025-145359](https://insights.sbomify.com/MAL-2025-145359/): Malicious code in neptune-eridanus-jabbah-wolf (npm) (malicious package)
- [MAL-2025-145358](https://insights.sbomify.com/MAL-2025-145358/): Malicious code in neptune-eridanus-dynamo-callback (npm) (malicious package)
- [MAL-2025-145357](https://insights.sbomify.com/MAL-2025-145357/): Malicious code in neptune-elektra-transport-carina (npm) (malicious package)
- [MAL-2025-145356](https://insights.sbomify.com/MAL-2025-145356/): Malicious code in neptune-dotenv-safe-antares-spawn (npm) (malicious package)
- [MAL-2025-145355](https://insights.sbomify.com/MAL-2025-145355/): Malicious code in neptune-chalk-html-webpack-plugin-virgo (npm) (malicious package)
- [MAL-2025-145354](https://insights.sbomify.com/MAL-2025-145354/): Malicious code in neptune-blaze-quantum-dotenv (npm) (malicious package)
- [MAL-2025-145353](https://insights.sbomify.com/MAL-2025-145353/): Malicious code in neptune-await-despina-protractor (npm) (malicious package)
- [MAL-2025-145352](https://insights.sbomify.com/MAL-2025-145352/): Malicious code in neptune-aurora-backend-rollup-plugin (npm) (malicious package)
- [MAL-2025-145351](https://insights.sbomify.com/MAL-2025-145351/): Malicious code in neptune-antares-impulse-phoenix (npm) (malicious package)
- [MAL-2025-145350](https://insights.sbomify.com/MAL-2025-145350/): Malicious code in neptune-algol-carpo-ariel (npm) (malicious package)
- [MAL-2025-14535](https://insights.sbomify.com/MAL-2025-14535/): Malicious code in angular2-security (npm) (malicious package)
- [MAL-2025-145349](https://insights.sbomify.com/MAL-2025-145349/): Malicious code in nebula-phoebe-sadr-spectron-webdriver (npm) (malicious package)
- [MAL-2025-145348](https://insights.sbomify.com/MAL-2025-145348/): Malicious code in nebula-oauth-resolvers-dotenv-safe (npm) (malicious package)
- [MAL-2025-145347](https://insights.sbomify.com/MAL-2025-145347/): Malicious code in nebula-meissa-shelljs-local (npm) (malicious package)
- [MAL-2025-145346](https://insights.sbomify.com/MAL-2025-145346/): Malicious code in nebula-mdx-polaris-sync (npm) (malicious package)
- [MAL-2025-145345](https://insights.sbomify.com/MAL-2025-145345/): Malicious code in nebula-janus-parcel-pino (npm) (malicious package)
- [MAL-2025-145344](https://insights.sbomify.com/MAL-2025-145344/): Malicious code in nebula-hyperion-chromedriver-bellatrix (npm) (malicious package)
- [MAL-2025-145343](https://insights.sbomify.com/MAL-2025-145343/): Malicious code in nebula-galaxy-aurora-init (npm) (malicious package)
- [MAL-2025-145342](https://insights.sbomify.com/MAL-2025-145342/): Malicious code in nebula-electron-relay-json (npm) (malicious package)
- [MAL-2025-145341](https://insights.sbomify.com/MAL-2025-145341/): Malicious code in nebula-electron-perseus-thuban (npm) (malicious package)
- [MAL-2025-145340](https://insights.sbomify.com/MAL-2025-145340/): Malicious code in nebula-duplex-nightwatch-materialize (npm) (malicious package)
- [MAL-2025-14534](https://insights.sbomify.com/MAL-2025-14534/): Malicious code in angular2-safe-provider (npm) (malicious package)
- [MAL-2025-145339](https://insights.sbomify.com/MAL-2025-145339/): Malicious code in nebula-dactyl-meissa-postgres (npm) (malicious package)
- [MAL-2025-145338](https://insights.sbomify.com/MAL-2025-145338/): Malicious code in nebula-config-markdown-wasat (npm) (malicious package)
- [MAL-2025-145337](https://insights.sbomify.com/MAL-2025-145337/): Malicious code in nebula-cassini-meissa-websockets (npm) (malicious package)
- [MAL-2025-145336](https://insights.sbomify.com/MAL-2025-145336/): Malicious code in nebula-bulma-transport-capella (npm) (malicious package)
- [MAL-2025-145335](https://insights.sbomify.com/MAL-2025-145335/): Malicious code in nebula-bootes-dependencies-kaus (npm) (malicious package)
- [MAL-2025-145334](https://insights.sbomify.com/MAL-2025-145334/): Malicious code in nconf-winston-standard-alphard (npm) (malicious package)
- [MAL-2025-145333](https://insights.sbomify.com/MAL-2025-145333/): Malicious code in nconf-winston-rigel-mensa (npm) (malicious package)
- [MAL-2025-145332](https://insights.sbomify.com/MAL-2025-145332/): Malicious code in nconf-ultra-phoenix-kinetic (npm) (malicious package)
- [MAL-2025-145331](https://insights.sbomify.com/MAL-2025-145331/): Malicious code in nconf-tool-magellan-perseus (npm) (malicious package)
- [MAL-2025-145330](https://insights.sbomify.com/MAL-2025-145330/): Malicious code in nconf-thuban-centaurus-iota (npm) (malicious package)
- [MAL-2025-14533](https://insights.sbomify.com/MAL-2025-14533/): Malicious code in angular-webpart (npm) (malicious package)
- [MAL-2025-145329](https://insights.sbomify.com/MAL-2025-145329/): Malicious code in nconf-readable-wasat-ariel (npm) (malicious package)
- [MAL-2025-145328](https://insights.sbomify.com/MAL-2025-145328/): Malicious code in nconf-query-browserify-protractor (npm) (malicious package)
- [MAL-2025-145327](https://insights.sbomify.com/MAL-2025-145327/): Malicious code in nconf-quantum-style-loader-webdriver-mocha (npm) (malicious package)
- [MAL-2025-145326](https://insights.sbomify.com/MAL-2025-145326/): Malicious code in nconf-procyon-postcss-ora (npm) (malicious package)
- [MAL-2025-145325](https://insights.sbomify.com/MAL-2025-145325/): Malicious code in nconf-prettier-jekyll-jasmine (npm) (malicious package)
- [MAL-2025-145324](https://insights.sbomify.com/MAL-2025-145324/): Malicious code in nconf-postcss-loader-gatsby-electron (npm) (malicious package)
- [MAL-2025-145323](https://insights.sbomify.com/MAL-2025-145323/): Malicious code in nconf-pm2-betelgeuse-hugo (npm) (malicious package)
- [MAL-2025-145322](https://insights.sbomify.com/MAL-2025-145322/): Malicious code in nconf-nodemon-start-postcss (npm) (malicious package)
- [MAL-2025-145321](https://insights.sbomify.com/MAL-2025-145321/): Malicious code in nconf-jekyll-firebase-prettier (npm) (malicious package)
- [MAL-2025-145320](https://insights.sbomify.com/MAL-2025-145320/): Malicious code in nconf-janus-commitizen-socketio (npm) (malicious package)
- [MAL-2025-14532](https://insights.sbomify.com/MAL-2025-14532/): Malicious code in angular-truncate (npm) (malicious package)
- [MAL-2025-145319](https://insights.sbomify.com/MAL-2025-145319/): Malicious code in nconf-hercules-prettier-stylelint-slides (npm) (malicious package)
- [MAL-2025-145318](https://insights.sbomify.com/MAL-2025-145318/): Malicious code in nconf-firebase-async-mongodb (npm) (malicious package)
- [MAL-2025-145317](https://insights.sbomify.com/MAL-2025-145317/): Malicious code in nconf-exec-blitz-node-config (npm) (malicious package)
- [MAL-2025-145316](https://insights.sbomify.com/MAL-2025-145316/): Malicious code in nconf-europa-norma-scripts (npm) (malicious package)
- [MAL-2025-145315](https://insights.sbomify.com/MAL-2025-145315/): Malicious code in nconf-eslint-plugin-postgres-hydra (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1428/