# Vulnerabilities published in 2025 - [MAL-2025-145314](https://insights.sbomify.com/MAL-2025-145314/): Malicious code in nconf-enif-tethys-europa (npm) (malicious package) - [MAL-2025-145313](https://insights.sbomify.com/MAL-2025-145313/): Malicious code in nconf-elektra-testcafe-soap (npm) (malicious package) - [MAL-2025-145312](https://insights.sbomify.com/MAL-2025-145312/): Malicious code in nconf-electron-commitizen-pegasus (npm) (malicious package) - [MAL-2025-145311](https://insights.sbomify.com/MAL-2025-145311/): Malicious code in nconf-dorado-blaze-cz-conventional-changelog (npm) (malicious package) - [MAL-2025-145310](https://insights.sbomify.com/MAL-2025-145310/): Malicious code in nconf-deimos-postcss-delphinus (npm) (malicious package) - [MAL-2025-14531](https://insights.sbomify.com/MAL-2025-14531/): Malicious code in angular-rs-alerts (npm) (malicious package) - [MAL-2025-145309](https://insights.sbomify.com/MAL-2025-145309/): Malicious code in nconf-commitlint-kastra-xanthus (npm) (malicious package) - [MAL-2025-145308](https://insights.sbomify.com/MAL-2025-145308/): Malicious code in nconf-commitizen-semantic-release-testcafe (npm) (malicious package) - [MAL-2025-145307](https://insights.sbomify.com/MAL-2025-145307/): Malicious code in nconf-chalk-jabbah-gacrux (npm) (malicious package) - [MAL-2025-145306](https://insights.sbomify.com/MAL-2025-145306/): Malicious code in nconf-ceres-css-minimizer-webpack-plugin-nuxtjs (npm) (malicious package) - [MAL-2025-145305](https://insights.sbomify.com/MAL-2025-145305/): Malicious code in nconf-backend-comet-phoenix (npm) (malicious package) - [MAL-2025-145304](https://insights.sbomify.com/MAL-2025-145304/): Malicious code in nconf-babel-leda-ganymede (npm) (malicious package) - [MAL-2025-145303](https://insights.sbomify.com/MAL-2025-145303/): Malicious code in nconf-apollo-ursa-callback (npm) (malicious package) - [MAL-2025-145302](https://insights.sbomify.com/MAL-2025-145302/): Malicious code in nconf-alphard-electron-duplex (npm) (malicious package) - [MAL-2025-145301](https://insights.sbomify.com/MAL-2025-145301/): Malicious code in nconf-airbnb-draco-magellan (npm) (malicious package) - [MAL-2025-145300](https://insights.sbomify.com/MAL-2025-145300/): Malicious code in naughty-peach-tortoise (npm) (malicious package) - [MAL-2025-14530](https://insights.sbomify.com/MAL-2025-14530/): Malicious code in angular-portal-azure (npm) (malicious package) - [MAL-2025-1453](https://insights.sbomify.com/MAL-2025-1453/): Malicious code in yizhifabao59 (npm) (malicious package) - [MAL-2025-145299](https://insights.sbomify.com/MAL-2025-145299/): Malicious code in natural-indigo-macaw (npm) (malicious package) - [MAL-2025-145298](https://insights.sbomify.com/MAL-2025-145298/): Malicious code in native-weywot-xenon-gatsby (npm) (malicious package) - [MAL-2025-145297](https://insights.sbomify.com/MAL-2025-145297/): Malicious code in native-venus-kastra-pino (npm) (malicious package) - [MAL-2025-145296](https://insights.sbomify.com/MAL-2025-145296/): Malicious code in native-terser-polaris-xml (npm) (malicious package) - [MAL-2025-145295](https://insights.sbomify.com/MAL-2025-145295/): Malicious code in native-spectron-mini-css-extract-plugin-loopback (npm) (malicious package) - [MAL-2025-145294](https://insights.sbomify.com/MAL-2025-145294/): Malicious code in native-quito-venus-semantic-release (npm) (malicious package) - [MAL-2025-145293](https://insights.sbomify.com/MAL-2025-145293/): Malicious code in native-puppeteer-sagitta-cosmiconfig (npm) (malicious package) - [MAL-2025-145292](https://insights.sbomify.com/MAL-2025-145292/): Malicious code in native-phoenix-antares-publish (npm) (malicious package) - [MAL-2025-145291](https://insights.sbomify.com/MAL-2025-145291/): Malicious code in native-oauth-fork-webdriverio (npm) (malicious package) - [MAL-2025-145290](https://insights.sbomify.com/MAL-2025-145290/): Malicious code in native-magellan-despina-callback (npm) (malicious package) - [MAL-2025-14529](https://insights.sbomify.com/MAL-2025-14529/): Malicious code in angular-leveled-reader (npm) (malicious package) - [MAL-2025-145289](https://insights.sbomify.com/MAL-2025-145289/): Malicious code in native-eslint-plugin-style-loader-got (npm) (malicious package) - [MAL-2025-145288](https://insights.sbomify.com/MAL-2025-145288/): Malicious code in native-enif-redis-redis (npm) (malicious package) - [MAL-2025-145287](https://insights.sbomify.com/MAL-2025-145287/): Malicious code in native-cz-conventional-changelog-meissa-atlas (npm) (malicious package) - [MAL-2025-145286](https://insights.sbomify.com/MAL-2025-145286/): Malicious code in native-cosmiconfig-sedna-callisto (npm) (malicious package) - [MAL-2025-145285](https://insights.sbomify.com/MAL-2025-145285/): Malicious code in native-backend-dotenv-safe-mongodb (npm) (malicious package) - [MAL-2025-145284](https://insights.sbomify.com/MAL-2025-145284/): Malicious code in nashira-xo-concurrently-slides (npm) (malicious package) - [MAL-2025-145283](https://insights.sbomify.com/MAL-2025-145283/): Malicious code in nashira-venus-magellan-umbra (npm) (malicious package) - [MAL-2025-145282](https://insights.sbomify.com/MAL-2025-145282/): Malicious code in nashira-sagitta-tailwindcss-sync (npm) (malicious package) - [MAL-2025-145281](https://insights.sbomify.com/MAL-2025-145281/): Malicious code in nashira-puppeteer-eris-axios (npm) (malicious package) - [MAL-2025-145280](https://insights.sbomify.com/MAL-2025-145280/): Malicious code in nashira-mui-server-pino (npm) (malicious package) - [MAL-2025-14528](https://insights.sbomify.com/MAL-2025-14528/): Malicious code in angular-hw-cache (npm) (malicious package) - [MAL-2025-145279](https://insights.sbomify.com/MAL-2025-145279/): Malicious code in nashira-kaus-xanadu-webdriverio (npm) (malicious package) - [MAL-2025-145278](https://insights.sbomify.com/MAL-2025-145278/): Malicious code in nashira-karma-husky-ceres (npm) (malicious package) - [MAL-2025-145277](https://insights.sbomify.com/MAL-2025-145277/): Malicious code in nashira-juno-markdown-janus (npm) (malicious package) - [MAL-2025-145276](https://insights.sbomify.com/MAL-2025-145276/): Malicious code in nashira-halley-eclipse-zenith (npm) (malicious package) - [MAL-2025-145275](https://insights.sbomify.com/MAL-2025-145275/): Malicious code in nashira-flare-rollup-plugin-despina (npm) (malicious package) - [MAL-2025-145274](https://insights.sbomify.com/MAL-2025-145274/): Malicious code in nashira-fetch-cressida-private (npm) (malicious package) - [MAL-2025-145273](https://insights.sbomify.com/MAL-2025-145273/): Malicious code in nashira-farout-sass-loader-private (npm) (malicious package) - [MAL-2025-145272](https://insights.sbomify.com/MAL-2025-145272/): Malicious code in nashira-enceladus-xo-zephyr (npm) (malicious package) - [MAL-2025-145271](https://insights.sbomify.com/MAL-2025-145271/): Malicious code in nashira-enceladus-hermes-cz-conventional-changelog (npm) (malicious package) - [MAL-2025-145270](https://insights.sbomify.com/MAL-2025-145270/): Malicious code in nashira-config-fork-cli (npm) (malicious package) - [MAL-2025-14527](https://insights.sbomify.com/MAL-2025-14527/): Malicious code in angular-dynamic-html (npm) (malicious package) - [MAL-2025-145269](https://insights.sbomify.com/MAL-2025-145269/): Malicious code in nashira-commitlint-config-angular-markdownlint-xerxes (npm) (malicious package) - [MAL-2025-145268](https://insights.sbomify.com/MAL-2025-145268/): Malicious code in nashira-betelgeuse-server-blaze (npm) (malicious package) - [MAL-2025-145267](https://insights.sbomify.com/MAL-2025-145267/): Malicious code in mysql-websockets-webdriverio-loglevel (npm) (malicious package) - [MAL-2025-145266](https://insights.sbomify.com/MAL-2025-145266/): Malicious code in mysql-ultra-meissa-cosmos (npm) (malicious package) - [MAL-2025-145265](https://insights.sbomify.com/MAL-2025-145265/): Malicious code in mysql-typeorm-zenobia-upgrade (npm) (malicious package) - [MAL-2025-145264](https://insights.sbomify.com/MAL-2025-145264/): Malicious code in mysql-superagent-less-loader-vuetify (npm) (malicious package) - [MAL-2025-145263](https://insights.sbomify.com/MAL-2025-145263/): Malicious code in mysql-sqlite-eslint-plugin-selenium (npm) (malicious package) - [MAL-2025-145262](https://insights.sbomify.com/MAL-2025-145262/): Malicious code in mysql-rimraf-registry-loopback (npm) (malicious package) - [MAL-2025-145261](https://insights.sbomify.com/MAL-2025-145261/): Malicious code in mysql-pm2-ceres-shelljs (npm) (malicious package) - [MAL-2025-145260](https://insights.sbomify.com/MAL-2025-145260/): Malicious code in mysql-pegasus-restart-rimraf (npm) (malicious package) - [MAL-2025-14526](https://insights.sbomify.com/MAL-2025-14526/): Malicious code in angular-dt-relay (npm) (malicious package) - [MAL-2025-145259](https://insights.sbomify.com/MAL-2025-145259/): Malicious code in mysql-pegasus-lyra-webdriverio (npm) (malicious package) - [MAL-2025-145258](https://insights.sbomify.com/MAL-2025-145258/): Malicious code in mysql-package-grus-jovian (npm) (malicious package) - [MAL-2025-145257](https://insights.sbomify.com/MAL-2025-145257/): Malicious code in mysql-optimize-css-assets-webpack-plugin-castor-css-minimizer-webpack-plugin (npm) (malicious package) - [MAL-2025-145256](https://insights.sbomify.com/MAL-2025-145256/): Malicious code in mysql-nodejs-callisto-framework (npm) (malicious package) - [MAL-2025-145255](https://insights.sbomify.com/MAL-2025-145255/): Malicious code in mysql-mongodb-non-blocking-equinox (npm) (malicious package) - [MAL-2025-145254](https://insights.sbomify.com/MAL-2025-145254/): Malicious code in mysql-meissa-react-bootstrap-dagda (npm) (malicious package) - [MAL-2025-145253](https://insights.sbomify.com/MAL-2025-145253/): Malicious code in mysql-lynx-bellatrix-karma (npm) (malicious package) - [MAL-2025-145252](https://insights.sbomify.com/MAL-2025-145252/): Malicious code in mysql-leda-supervisor-cordelia (npm) (malicious package) - [MAL-2025-145251](https://insights.sbomify.com/MAL-2025-145251/): Malicious code in mysql-kinetic-xenos-install (npm) (malicious package) - [MAL-2025-145250](https://insights.sbomify.com/MAL-2025-145250/): Malicious code in mysql-janus-non-blocking-stream (npm) (malicious package) - [MAL-2025-14525](https://insights.sbomify.com/MAL-2025-14525/): Malicious code in angular-cli-library-builder (npm) (malicious package) - [MAL-2025-145249](https://insights.sbomify.com/MAL-2025-145249/): Malicious code in mysql-janus-chromedriver-apex (npm) (malicious package) - [MAL-2025-145248](https://insights.sbomify.com/MAL-2025-145248/): Malicious code in mysql-jabbah-standard-chromedriver (npm) (malicious package) - [MAL-2025-145247](https://insights.sbomify.com/MAL-2025-145247/): Malicious code in mysql-halley-loop-jabbah (npm) (malicious package) - [MAL-2025-145246](https://insights.sbomify.com/MAL-2025-145246/): Malicious code in mysql-firebase-websockets-mini-css-extract-plugin (npm) (malicious package) - [MAL-2025-145245](https://insights.sbomify.com/MAL-2025-145245/): Malicious code in mysql-farout-morgan-supervisor (npm) (malicious package) - [MAL-2025-145244](https://insights.sbomify.com/MAL-2025-145244/): Malicious code in mysql-elara-kinetic-pino-pretty (npm) (malicious package) - [MAL-2025-145243](https://insights.sbomify.com/MAL-2025-145243/): Malicious code in mysql-dactyl-dotenv-safe-sadr (npm) (malicious package) - [MAL-2025-145242](https://insights.sbomify.com/MAL-2025-145242/): Malicious code in mysql-commitlint-json-standard (npm) (malicious package) - [MAL-2025-145241](https://insights.sbomify.com/MAL-2025-145241/): Malicious code in mysql-comet-alphard-halley (npm) (malicious package) - [MAL-2025-145240](https://insights.sbomify.com/MAL-2025-145240/): Malicious code in mysql-betelgeuse-barnard-non-blocking (npm) (malicious package) - [MAL-2025-14524](https://insights.sbomify.com/MAL-2025-14524/): Malicious code in angular-cli-autoprefixer (npm) (malicious package) - [MAL-2025-145239](https://insights.sbomify.com/MAL-2025-145239/): Malicious code in mysql-babel-cassini-chromedriver (npm) (malicious package) - [MAL-2025-145238](https://insights.sbomify.com/MAL-2025-145238/): Malicious code in mysql-atlas-heka-hydra (npm) (malicious package) - [MAL-2025-145237](https://insights.sbomify.com/MAL-2025-145237/): Malicious code in mysql-apollo-ganymede-helios (npm) (malicious package) - [MAL-2025-145236](https://insights.sbomify.com/MAL-2025-145236/): Malicious code in mysql-apex-nova-axios (npm) (malicious package) - [MAL-2025-145235](https://insights.sbomify.com/MAL-2025-145235/): Malicious code in mysql-algol-phenomic-sedna (npm) (malicious package) - [MAL-2025-145234](https://insights.sbomify.com/MAL-2025-145234/): Malicious code in mutation-telesto-mongodb-xml (npm) (malicious package) - [MAL-2025-145233](https://insights.sbomify.com/MAL-2025-145233/): Malicious code in mutation-tailwindcss-websockets-subscription (npm) (malicious package) - [MAL-2025-145232](https://insights.sbomify.com/MAL-2025-145232/): Malicious code in mutation-spectron-elektra-module (npm) (malicious package) - [MAL-2025-145231](https://insights.sbomify.com/MAL-2025-145231/): Malicious code in mutation-rest-mongoose-castor (npm) (malicious package) - [MAL-2025-145230](https://insights.sbomify.com/MAL-2025-145230/): Malicious code in mutation-rehype-semantic-ui-install (npm) (malicious package) - [MAL-2025-14523](https://insights.sbomify.com/MAL-2025-14523/): Malicious code in angular-bookly (npm) (malicious package) - [MAL-2025-145229](https://insights.sbomify.com/MAL-2025-145229/): Malicious code in mutation-puppeteer-dactyl-morgan (npm) (malicious package) - [MAL-2025-145228](https://insights.sbomify.com/MAL-2025-145228/): Malicious code in mutation-phoebe-janus-atlas (npm) (malicious package) - [MAL-2025-145227](https://insights.sbomify.com/MAL-2025-145227/): Malicious code in mutation-odin-barnard-altair (npm) (malicious package) - [MAL-2025-145226](https://insights.sbomify.com/MAL-2025-145226/): Malicious code in mutation-meteor-magellan-deneb (npm) (malicious package) - [MAL-2025-145225](https://insights.sbomify.com/MAL-2025-145225/): Malicious code in mutation-levels-antares-nightwatch (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1429/