# Vulnerabilities published in 2025


- [MAL-2025-145224](https://insights.sbomify.com/MAL-2025-145224/): Malicious code in mutation-ganymede-proxima-eslint (npm) (malicious package)
- [MAL-2025-145223](https://insights.sbomify.com/MAL-2025-145223/): Malicious code in mutation-gacrux-axios-gravity (npm) (malicious package)
- [MAL-2025-145222](https://insights.sbomify.com/MAL-2025-145222/): Malicious code in mutation-foundation-mocha-cosmos (npm) (malicious package)
- [MAL-2025-145221](https://insights.sbomify.com/MAL-2025-145221/): Malicious code in mutation-fork-module-bootstrap (npm) (malicious package)
- [MAL-2025-145220](https://insights.sbomify.com/MAL-2025-145220/): Malicious code in mutation-electron-ariel-nextjs (npm) (malicious package)
- [MAL-2025-14522](https://insights.sbomify.com/MAL-2025-14522/): Malicious code in angular-base (npm) (malicious package)
- [MAL-2025-145219](https://insights.sbomify.com/MAL-2025-145219/): Malicious code in mutation-configstore-fetch-polaris (npm) (malicious package)
- [MAL-2025-145218](https://insights.sbomify.com/MAL-2025-145218/): Malicious code in mutation-chromedriver-postcss-loader-proxima (npm) (malicious package)
- [MAL-2025-145217](https://insights.sbomify.com/MAL-2025-145217/): Malicious code in mutation-bunyan-materialize-style-loader (npm) (malicious package)
- [MAL-2025-145216](https://insights.sbomify.com/MAL-2025-145216/): Malicious code in mutation-altair-readable-janus (npm) (malicious package)
- [MAL-2025-145215](https://insights.sbomify.com/MAL-2025-145215/): Malicious code in mui-vuepress-blitz-weywot (npm) (malicious package)
- [MAL-2025-145214](https://insights.sbomify.com/MAL-2025-145214/): Malicious code in mui-uglify-js-ophiuchus-cluster (npm) (malicious package)
- [MAL-2025-145213](https://insights.sbomify.com/MAL-2025-145213/): Malicious code in mui-stream-jovian-canopus (npm) (malicious package)
- [MAL-2025-145212](https://insights.sbomify.com/MAL-2025-145212/): Malicious code in mui-spectron-webdriver-neptune-mocha (npm) (malicious package)
- [MAL-2025-145211](https://insights.sbomify.com/MAL-2025-145211/): Malicious code in mui-spectron-webdriver-csrf-apollo (npm) (malicious package)
- [MAL-2025-145210](https://insights.sbomify.com/MAL-2025-145210/): Malicious code in mui-rate-limiter-xanadu-avior (npm) (malicious package)
- [MAL-2025-14521](https://insights.sbomify.com/MAL-2025-14521/): Malicious code in angular-4-datatable-custom (npm) (malicious package)
- [MAL-2025-145209](https://insights.sbomify.com/MAL-2025-145209/): Malicious code in mui-pulsar-perseus-elektra (npm) (malicious package)
- [MAL-2025-145208](https://insights.sbomify.com/MAL-2025-145208/): Malicious code in mui-prettier-stylelint-vega-octans (npm) (malicious package)
- [MAL-2025-145207](https://insights.sbomify.com/MAL-2025-145207/): Malicious code in mui-phoebe-jekyll-typeorm (npm) (malicious package)
- [MAL-2025-145206](https://insights.sbomify.com/MAL-2025-145206/): Malicious code in mui-npm-typeorm-config (npm) (malicious package)
- [MAL-2025-145205](https://insights.sbomify.com/MAL-2025-145205/): Malicious code in mui-nebula-gemini-lint (npm) (malicious package)
- [MAL-2025-145204](https://insights.sbomify.com/MAL-2025-145204/): Malicious code in mui-mysql-mysql-sails (npm) (malicious package)
- [MAL-2025-145203](https://insights.sbomify.com/MAL-2025-145203/): Malicious code in mui-io-jupiter-passport (npm) (malicious package)
- [MAL-2025-145202](https://insights.sbomify.com/MAL-2025-145202/): Malicious code in mui-enif-octans-native (npm) (malicious package)
- [MAL-2025-145201](https://insights.sbomify.com/MAL-2025-145201/): Malicious code in mui-elektra-norma-dynamo (npm) (malicious package)
- [MAL-2025-145200](https://insights.sbomify.com/MAL-2025-145200/): Malicious code in mui-dagda-loopback-start (npm) (malicious package)
- [MAL-2025-14520](https://insights.sbomify.com/MAL-2025-14520/): Malicious code in angula (npm) (malicious package)
- [MAL-2025-1452](https://insights.sbomify.com/MAL-2025-1452/): Malicious code in yizhifabao58 (npm) (malicious package)
- [MAL-2025-145199](https://insights.sbomify.com/MAL-2025-145199/): Malicious code in mui-cypress-blitz-cygnus (npm) (malicious package)
- [MAL-2025-145198](https://insights.sbomify.com/MAL-2025-145198/): Malicious code in mui-css-minimizer-webpack-plugin-chariklo-nashira (npm) (malicious package)
- [MAL-2025-145197](https://insights.sbomify.com/MAL-2025-145197/): Malicious code in mui-cosmos-less-loader-duplex (npm) (malicious package)
- [MAL-2025-145196](https://insights.sbomify.com/MAL-2025-145196/): Malicious code in mui-carpo-publish-neptune (npm) (malicious package)
- [MAL-2025-145195](https://insights.sbomify.com/MAL-2025-145195/): Malicious code in mui-betelgeuse-chariklo-epimetheus (npm) (malicious package)
- [MAL-2025-145194](https://insights.sbomify.com/MAL-2025-145194/): Malicious code in mui-apollo-transport-node-sass (npm) (malicious package)
- [MAL-2025-145193](https://insights.sbomify.com/MAL-2025-145193/): Malicious code in mui-altair-winston-equinox (npm) (malicious package)
- [MAL-2025-145192](https://insights.sbomify.com/MAL-2025-145192/): Malicious code in morgan-xo-colors-hercules (npm) (malicious package)
- [MAL-2025-145191](https://insights.sbomify.com/MAL-2025-145191/): Malicious code in morgan-warp-gacrux-jest (npm) (malicious package)
- [MAL-2025-145190](https://insights.sbomify.com/MAL-2025-145190/): Malicious code in morgan-vuepress-corvus-celeste (npm) (malicious package)
- [MAL-2025-14519](https://insights.sbomify.com/MAL-2025-14519/): Malicious code in angstroms (npm) (malicious package)
- [MAL-2025-145189](https://insights.sbomify.com/MAL-2025-145189/): Malicious code in morgan-uglify-js-resolvers-xanadu (npm) (malicious package)
- [MAL-2025-145188](https://insights.sbomify.com/MAL-2025-145188/): Malicious code in morgan-typeorm-auth-bellatrix (npm) (malicious package)
- [MAL-2025-145187](https://insights.sbomify.com/MAL-2025-145187/): Malicious code in morgan-release-it-umbriel-pino-pretty (npm) (malicious package)
- [MAL-2025-145186](https://insights.sbomify.com/MAL-2025-145186/): Malicious code in morgan-regulus-xenon-gravity (npm) (malicious package)
- [MAL-2025-145185](https://insights.sbomify.com/MAL-2025-145185/): Malicious code in morgan-npm-json-react-bootstrap (npm) (malicious package)
- [MAL-2025-145184](https://insights.sbomify.com/MAL-2025-145184/): Malicious code in morgan-nightwatch-webpack-blaze (npm) (malicious package)
- [MAL-2025-145183](https://insights.sbomify.com/MAL-2025-145183/): Malicious code in morgan-miranda-galaxy-octans (npm) (malicious package)
- [MAL-2025-145182](https://insights.sbomify.com/MAL-2025-145182/): Malicious code in morgan-middleware-readable-electron (npm) (malicious package)
- [MAL-2025-145181](https://insights.sbomify.com/MAL-2025-145181/): Malicious code in morgan-magellan-pino-vuepress (npm) (malicious package)
- [MAL-2025-145180](https://insights.sbomify.com/MAL-2025-145180/): Malicious code in morgan-less-loader-fusion-transport (npm) (malicious package)
- [MAL-2025-14518](https://insights.sbomify.com/MAL-2025-14518/): Malicious code in angry-apes--nft-collection297 (npm) (malicious package)
- [MAL-2025-145179](https://insights.sbomify.com/MAL-2025-145179/): Malicious code in morgan-leda-nashira-dione (npm) (malicious package)
- [MAL-2025-145178](https://insights.sbomify.com/MAL-2025-145178/): Malicious code in morgan-init-auth0-rollup (npm) (malicious package)
- [MAL-2025-145177](https://insights.sbomify.com/MAL-2025-145177/): Malicious code in morgan-hyperion-hyperion-gatsby (npm) (malicious package)
- [MAL-2025-145176](https://insights.sbomify.com/MAL-2025-145176/): Malicious code in morgan-gravity-lint-altair (npm) (malicious package)
- [MAL-2025-145175](https://insights.sbomify.com/MAL-2025-145175/): Malicious code in morgan-exec-uninstall-janus (npm) (malicious package)
- [MAL-2025-145174](https://insights.sbomify.com/MAL-2025-145174/): Malicious code in morgan-eslint-config-dione-lint (npm) (malicious package)
- [MAL-2025-145173](https://insights.sbomify.com/MAL-2025-145173/): Malicious code in morgan-duplex-shelljs-odin (npm) (malicious package)
- [MAL-2025-145172](https://insights.sbomify.com/MAL-2025-145172/): Malicious code in morgan-dione-dactyl-achernar (npm) (malicious package)
- [MAL-2025-145171](https://insights.sbomify.com/MAL-2025-145171/): Malicious code in morgan-commitlint-config-angular-repository-dynamo (npm) (malicious package)
- [MAL-2025-145170](https://insights.sbomify.com/MAL-2025-145170/): Malicious code in morgan-browserify-install-cygnus (npm) (malicious package)
- [MAL-2025-14517](https://insights.sbomify.com/MAL-2025-14517/): Malicious code in angluarjs (npm) (malicious package)
- [MAL-2025-145169](https://insights.sbomify.com/MAL-2025-145169/): Malicious code in morgan-betelgeuse-development-indus (npm) (malicious package)
- [MAL-2025-145168](https://insights.sbomify.com/MAL-2025-145168/): Malicious code in morgan-backend-bootes-selenium (npm) (malicious package)
- [MAL-2025-145167](https://insights.sbomify.com/MAL-2025-145167/): Malicious code in mongoose-yakutsk-pegasus-sync (npm) (malicious package)
- [MAL-2025-145166](https://insights.sbomify.com/MAL-2025-145166/): Malicious code in mongoose-ursa-csrf-pino-pretty (npm) (malicious package)
- [MAL-2025-145165](https://insights.sbomify.com/MAL-2025-145165/): Malicious code in mongoose-sirius-bellatrix-pm2 (npm) (malicious package)
- [MAL-2025-145164](https://insights.sbomify.com/MAL-2025-145164/): Malicious code in mongoose-request-remark-spectron (npm) (malicious package)
- [MAL-2025-145163](https://insights.sbomify.com/MAL-2025-145163/): Malicious code in mongoose-prompts-spectron-lint-staged (npm) (malicious package)
- [MAL-2025-145162](https://insights.sbomify.com/MAL-2025-145162/): Malicious code in mongoose-pavo-arcturus-csv (npm) (malicious package)
- [MAL-2025-145161](https://insights.sbomify.com/MAL-2025-145161/): Malicious code in mongoose-nextjs-tailwindcss-xml (npm) (malicious package)
- [MAL-2025-145160](https://insights.sbomify.com/MAL-2025-145160/): Malicious code in mongoose-module-elektra-halley (npm) (malicious package)
- [MAL-2025-14516](https://insights.sbomify.com/MAL-2025-14516/): Malicious code in angeloz (npm) (malicious package)
- [MAL-2025-145159](https://insights.sbomify.com/MAL-2025-145159/): Malicious code in mongoose-meissa-typeorm-postgres (npm) (malicious package)
- [MAL-2025-145158](https://insights.sbomify.com/MAL-2025-145158/): Malicious code in mongoose-koa-jekyll-promise (npm) (malicious package)
- [MAL-2025-145157](https://insights.sbomify.com/MAL-2025-145157/): Malicious code in mongoose-jovian-prompts-bootes (npm) (malicious package)
- [MAL-2025-145156](https://insights.sbomify.com/MAL-2025-145156/): Malicious code in mongoose-jovian-perseus-polaris (npm) (malicious package)
- [MAL-2025-145155](https://insights.sbomify.com/MAL-2025-145155/): Malicious code in mongoose-javascript-cosmiconfig-mongoose (npm) (malicious package)
- [MAL-2025-145154](https://insights.sbomify.com/MAL-2025-145154/): Malicious code in mongoose-html-webpack-plugin-leda-semantic-ui (npm) (malicious package)
- [MAL-2025-145153](https://insights.sbomify.com/MAL-2025-145153/): Malicious code in mongoose-heka-vega-sequelize (npm) (malicious package)
- [MAL-2025-145152](https://insights.sbomify.com/MAL-2025-145152/): Malicious code in mongoose-firebase-local-uglify-js (npm) (malicious package)
- [MAL-2025-145151](https://insights.sbomify.com/MAL-2025-145151/): Malicious code in mongoose-enif-apollo-eris (npm) (malicious package)
- [MAL-2025-145150](https://insights.sbomify.com/MAL-2025-145150/): Malicious code in mongoose-dotenv-safe-fornax-xerxes (npm) (malicious package)
- [MAL-2025-14515](https://insights.sbomify.com/MAL-2025-14515/): Malicious code in anecdope (npm) (malicious package)
- [MAL-2025-145149](https://insights.sbomify.com/MAL-2025-145149/): Malicious code in mongoose-colors-private-metalsmith (npm) (malicious package)
- [MAL-2025-145148](https://insights.sbomify.com/MAL-2025-145148/): Malicious code in mongoose-atlas-levels-xenon (npm) (malicious package)
- [MAL-2025-145147](https://insights.sbomify.com/MAL-2025-145147/): Malicious code in mongoose-atlas-jsonp-equinox (npm) (malicious package)
- [MAL-2025-145146](https://insights.sbomify.com/MAL-2025-145146/): Malicious code in mongoose-andromeda-janus-chai (npm) (malicious package)
- [MAL-2025-145145](https://insights.sbomify.com/MAL-2025-145145/): Malicious code in mongoose-altair-carpo-release-it (npm) (malicious package)
- [MAL-2025-145144](https://insights.sbomify.com/MAL-2025-145144/): Malicious code in mongodb-yildun-event-procyon (npm) (malicious package)
- [MAL-2025-145143](https://insights.sbomify.com/MAL-2025-145143/): Malicious code in mongodb-winston-jovian-eclipse (npm) (malicious package)
- [MAL-2025-145142](https://insights.sbomify.com/MAL-2025-145142/): Malicious code in mongodb-vega-nova-weywot (npm) (malicious package)
- [MAL-2025-145141](https://insights.sbomify.com/MAL-2025-145141/): Malicious code in mongodb-spawn-ursa-jasmine (npm) (malicious package)
- [MAL-2025-145140](https://insights.sbomify.com/MAL-2025-145140/): Malicious code in mongodb-server-yakutsk-ignite (npm) (malicious package)
- [MAL-2025-14514](https://insights.sbomify.com/MAL-2025-14514/): Malicious code in andthen (npm) (malicious package)
- [MAL-2025-145139](https://insights.sbomify.com/MAL-2025-145139/): Malicious code in mongodb-semantic-release-elektra-delphinus (npm) (malicious package)
- [MAL-2025-145138](https://insights.sbomify.com/MAL-2025-145138/): Malicious code in mongodb-rate-limiter-sagitta-kinetic (npm) (malicious package)
- [MAL-2025-145137](https://insights.sbomify.com/MAL-2025-145137/): Malicious code in mongodb-prettier-stylelint-warp-google (npm) (malicious package)
- [MAL-2025-145136](https://insights.sbomify.com/MAL-2025-145136/): Malicious code in mongodb-postcss-loader-async-scorpius (npm) (malicious package)
- [MAL-2025-145135](https://insights.sbomify.com/MAL-2025-145135/): Malicious code in mongodb-package-quark-node-config (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1430/