# Vulnerabilities published in 2025 - [MAL-2025-145134](https://insights.sbomify.com/MAL-2025-145134/): Malicious code in mongodb-meteor-readable-dorado (npm) (malicious package) - [MAL-2025-145133](https://insights.sbomify.com/MAL-2025-145133/): Malicious code in mongodb-materialize-lint-staged-aether (npm) (malicious package) - [MAL-2025-145132](https://insights.sbomify.com/MAL-2025-145132/): Malicious code in mongodb-jupiter-yildun-delphinus (npm) (malicious package) - [MAL-2025-145131](https://insights.sbomify.com/MAL-2025-145131/): Malicious code in mongodb-impulse-cz-conventional-changelog-odin (npm) (malicious package) - [MAL-2025-145130](https://insights.sbomify.com/MAL-2025-145130/): Malicious code in mongodb-halley-pavo-hyperion (npm) (malicious package) - [MAL-2025-14513](https://insights.sbomify.com/MAL-2025-14513/): Malicious code in androtica (npm) (malicious package) - [MAL-2025-145129](https://insights.sbomify.com/MAL-2025-145129/): Malicious code in mongodb-grus-despina-apollo (npm) (malicious package) - [MAL-2025-145128](https://insights.sbomify.com/MAL-2025-145128/): Malicious code in mongodb-graphql-atlas-tailwindcss (npm) (malicious package) - [MAL-2025-145127](https://insights.sbomify.com/MAL-2025-145127/): Malicious code in mongodb-europa-apollo-envconfig (npm) (malicious package) - [MAL-2025-145126](https://insights.sbomify.com/MAL-2025-145126/): Malicious code in mongodb-element-ui-apollo-hermes (npm) (malicious package) - [MAL-2025-145125](https://insights.sbomify.com/MAL-2025-145125/): Malicious code in mongodb-dotenv-transform-alphard (npm) (malicious package) - [MAL-2025-145124](https://insights.sbomify.com/MAL-2025-145124/): Malicious code in mongodb-cz-conventional-changelog-ora-tethys (npm) (malicious package) - [MAL-2025-145123](https://insights.sbomify.com/MAL-2025-145123/): Malicious code in mongodb-cz-conventional-changelog-mensa-cors (npm) (malicious package) - [MAL-2025-145122](https://insights.sbomify.com/MAL-2025-145122/): Malicious code in mongodb-csv-hexo-kronos (npm) (malicious package) - [MAL-2025-145121](https://insights.sbomify.com/MAL-2025-145121/): Malicious code in mongodb-cosmiconfig-impulse-frontend (npm) (malicious package) - [MAL-2025-145120](https://insights.sbomify.com/MAL-2025-145120/): Malicious code in mongodb-achernar-module-neptune (npm) (malicious package) - [MAL-2025-14512](https://insights.sbomify.com/MAL-2025-14512/): Malicious code in andromeda-on-framework-webdriver-manager (npm) (malicious package) - [MAL-2025-145119](https://insights.sbomify.com/MAL-2025-145119/): Malicious code in module-xml-meteor-meissa (npm) (malicious package) - [MAL-2025-145118](https://insights.sbomify.com/MAL-2025-145118/): Malicious code in module-terser-rimraf-arcturus (npm) (malicious package) - [MAL-2025-145117](https://insights.sbomify.com/MAL-2025-145117/): Malicious code in module-standard-ora-mocha (npm) (malicious package) - [MAL-2025-145116](https://insights.sbomify.com/MAL-2025-145116/): Malicious code in module-slidev-webdriver-mocha-halley (npm) (malicious package) - [MAL-2025-145115](https://insights.sbomify.com/MAL-2025-145115/): Malicious code in module-run-script-telesto-writable (npm) (malicious package) - [MAL-2025-145114](https://insights.sbomify.com/MAL-2025-145114/): Malicious code in module-polaris-scorpius-deneb (npm) (malicious package) - [MAL-2025-145113](https://insights.sbomify.com/MAL-2025-145113/): Malicious code in module-polaris-dactyl-cors (npm) (malicious package) - [MAL-2025-145112](https://insights.sbomify.com/MAL-2025-145112/): Malicious code in module-ora-polaris-winston (npm) (malicious package) - [MAL-2025-145111](https://insights.sbomify.com/MAL-2025-145111/): Malicious code in module-nestjs-convict-configstore (npm) (malicious package) - [MAL-2025-145110](https://insights.sbomify.com/MAL-2025-145110/): Malicious code in module-module-puppeteer-zephyr (npm) (malicious package) - [MAL-2025-14511](https://insights.sbomify.com/MAL-2025-14511/): Malicious code in andromeda-middleware-lightyear-photon (npm) (malicious package) - [MAL-2025-145109](https://insights.sbomify.com/MAL-2025-145109/): Malicious code in module-markdown-nightmare-deimos (npm) (malicious package) - [MAL-2025-145108](https://insights.sbomify.com/MAL-2025-145108/): Malicious code in module-lint-rehype-optimize-css-assets-webpack-plugin (npm) (malicious package) - [MAL-2025-145107](https://insights.sbomify.com/MAL-2025-145107/): Malicious code in module-koa-metalsmith-xenon (npm) (malicious package) - [MAL-2025-145106](https://insights.sbomify.com/MAL-2025-145106/): Malicious code in module-gulp-eris-cosmiconfig (npm) (malicious package) - [MAL-2025-145105](https://insights.sbomify.com/MAL-2025-145105/): Malicious code in module-grunt-async-ophiuchus (npm) (malicious package) - [MAL-2025-145104](https://insights.sbomify.com/MAL-2025-145104/): Malicious code in module-frontend-toml-tool (npm) (malicious package) - [MAL-2025-145103](https://insights.sbomify.com/MAL-2025-145103/): Malicious code in module-eslint-plugin-cypress-nodemon (npm) (malicious package) - [MAL-2025-145102](https://insights.sbomify.com/MAL-2025-145102/): Malicious code in module-envconfig-xerxes-server (npm) (malicious package) - [MAL-2025-145101](https://insights.sbomify.com/MAL-2025-145101/): Malicious code in module-cypress-phoebe-process (npm) (malicious package) - [MAL-2025-145100](https://insights.sbomify.com/MAL-2025-145100/): Malicious code in module-commitizen-ursa-protractor (npm) (malicious package) - [MAL-2025-14510](https://insights.sbomify.com/MAL-2025-14510/): Malicious code in andromeda-eslint-config-graviton-ophiuchus (npm) (malicious package) - [MAL-2025-1451](https://insights.sbomify.com/MAL-2025-1451/): Malicious code in yizhifabao57 (npm) (malicious package) - [MAL-2025-145099](https://insights.sbomify.com/MAL-2025-145099/): Malicious code in module-blitz-process-eridanus (npm) (malicious package) - [MAL-2025-145098](https://insights.sbomify.com/MAL-2025-145098/): Malicious code in module-axios-quantum-cache (npm) (malicious package) - [MAL-2025-145097](https://insights.sbomify.com/MAL-2025-145097/): Malicious code in module-algol-npm-quantum (npm) (malicious package) - [MAL-2025-145096](https://insights.sbomify.com/MAL-2025-145096/): Malicious code in mocha-zenobia-prettier-stylelint-style-loader (npm) (malicious package) - [MAL-2025-145095](https://insights.sbomify.com/MAL-2025-145095/): Malicious code in mocha-typeorm-regulus-proxima (npm) (malicious package) - [MAL-2025-145094](https://insights.sbomify.com/MAL-2025-145094/): Malicious code in mocha-transport-indus-miranda (npm) (malicious package) - [MAL-2025-145093](https://insights.sbomify.com/MAL-2025-145093/): Malicious code in mocha-thuban-miranda-juno (npm) (malicious package) - [MAL-2025-145092](https://insights.sbomify.com/MAL-2025-145092/): Malicious code in mocha-sedna-css-minimizer-webpack-plugin-perseus (npm) (malicious package) - [MAL-2025-145091](https://insights.sbomify.com/MAL-2025-145091/): Malicious code in mocha-reveal-md-nextjs-duplex (npm) (malicious package) - [MAL-2025-145090](https://insights.sbomify.com/MAL-2025-145090/): Malicious code in mocha-private-cassini-xo (npm) (malicious package) - [MAL-2025-14509](https://insights.sbomify.com/MAL-2025-14509/): Malicious code in andromeda-child-process-local-firebase (npm) (malicious package) - [MAL-2025-145089](https://insights.sbomify.com/MAL-2025-145089/): Malicious code in mocha-pino-pretty-json-kronos (npm) (malicious package) - [MAL-2025-145088](https://insights.sbomify.com/MAL-2025-145088/): Malicious code in mocha-nightwatch-yildun-websockets (npm) (malicious package) - [MAL-2025-145087](https://insights.sbomify.com/MAL-2025-145087/): Malicious code in mocha-luna-mdx-prettier (npm) (malicious package) - [MAL-2025-145086](https://insights.sbomify.com/MAL-2025-145086/): Malicious code in mocha-levels-buffer-css-minimizer-webpack-plugin (npm) (malicious package) - [MAL-2025-145085](https://insights.sbomify.com/MAL-2025-145085/): Malicious code in mocha-less-loader-axios-npm (npm) (malicious package) - [MAL-2025-145084](https://insights.sbomify.com/MAL-2025-145084/): Malicious code in mocha-kastra-proxima-lynx (npm) (malicious package) - [MAL-2025-145083](https://insights.sbomify.com/MAL-2025-145083/): Malicious code in mocha-karma-canopus-rate-limiter (npm) (malicious package) - [MAL-2025-145082](https://insights.sbomify.com/MAL-2025-145082/): Malicious code in mocha-hydra-semantic-ui-celeste (npm) (malicious package) - [MAL-2025-145081](https://insights.sbomify.com/MAL-2025-145081/): Malicious code in mocha-hercules-auth0-weywot (npm) (malicious package) - [MAL-2025-145080](https://insights.sbomify.com/MAL-2025-145080/): Malicious code in mocha-gulp-cordelia-buffer (npm) (malicious package) - [MAL-2025-14508](https://insights.sbomify.com/MAL-2025-14508/): Malicious code in andromail (npm) (malicious package) - [MAL-2025-145079](https://insights.sbomify.com/MAL-2025-145079/): Malicious code in mocha-grus-got-testcafe (npm) (malicious package) - [MAL-2025-145078](https://insights.sbomify.com/MAL-2025-145078/): Malicious code in mocha-graphql-alphard-sirius (npm) (malicious package) - [MAL-2025-145077](https://insights.sbomify.com/MAL-2025-145077/): Malicious code in mocha-geckodriver-lint-pino (npm) (malicious package) - [MAL-2025-145076](https://insights.sbomify.com/MAL-2025-145076/): Malicious code in mocha-ganymede-dependencies-hapi (npm) (malicious package) - [MAL-2025-145075](https://insights.sbomify.com/MAL-2025-145075/): Malicious code in mocha-fornax-umbriel-release-it (npm) (malicious package) - [MAL-2025-145074](https://insights.sbomify.com/MAL-2025-145074/): Malicious code in mocha-eris-spectron-forever (npm) (malicious package) - [MAL-2025-145073](https://insights.sbomify.com/MAL-2025-145073/): Malicious code in mocha-dotenv-node-sass-sagitta (npm) (malicious package) - [MAL-2025-145072](https://insights.sbomify.com/MAL-2025-145072/): Malicious code in mocha-dorado-europa-configstore (npm) (malicious package) - [MAL-2025-145071](https://insights.sbomify.com/MAL-2025-145071/): Malicious code in mocha-commitlint-enif-mysql (npm) (malicious package) - [MAL-2025-145070](https://insights.sbomify.com/MAL-2025-145070/): Malicious code in mocha-chariklo-callback-pulsar (npm) (malicious package) - [MAL-2025-14507](https://insights.sbomify.com/MAL-2025-14507/): Malicious code in androidsc (npm) (malicious package) - [MAL-2025-145069](https://insights.sbomify.com/MAL-2025-145069/): Malicious code in mocha-async-heka-eclipse (npm) (malicious package) - [MAL-2025-145068](https://insights.sbomify.com/MAL-2025-145068/): Malicious code in mocha-ariel-wolf-auriga (npm) (malicious package) - [MAL-2025-145067](https://insights.sbomify.com/MAL-2025-145067/): Malicious code in mocha-andromeda-castor-loopback (npm) (malicious package) - [MAL-2025-145066](https://insights.sbomify.com/MAL-2025-145066/): Malicious code in mocha-aldebaran-sass-loader-antd (npm) (malicious package) - [MAL-2025-145065](https://insights.sbomify.com/MAL-2025-145065/): Malicious code in mocha-aldebaran-nashira-node-config (npm) (malicious package) - [MAL-2025-145064](https://insights.sbomify.com/MAL-2025-145064/): Malicious code in miranda-yonder-css-loader-hercules (npm) (malicious package) - [MAL-2025-145063](https://insights.sbomify.com/MAL-2025-145063/): Malicious code in miranda-xenos-cz-conventional-changelog-betelgeuse (npm) (malicious package) - [MAL-2025-145062](https://insights.sbomify.com/MAL-2025-145062/): Malicious code in miranda-umbriel-jasmine-cluster (npm) (malicious package) - [MAL-2025-145061](https://insights.sbomify.com/MAL-2025-145061/): Malicious code in miranda-toml-xenon-commitizen (npm) (malicious package) - [MAL-2025-145060](https://insights.sbomify.com/MAL-2025-145060/): Malicious code in miranda-sync-despina-auth0 (npm) (malicious package) - [MAL-2025-14506](https://insights.sbomify.com/MAL-2025-14506/): Malicious code in androidip (npm) (malicious package) - [MAL-2025-145059](https://insights.sbomify.com/MAL-2025-145059/): Malicious code in miranda-stream-node-config-inquirer (npm) (malicious package) - [MAL-2025-145058](https://insights.sbomify.com/MAL-2025-145058/): Malicious code in miranda-sirius-jasmine-gatsby (npm) (malicious package) - [MAL-2025-145057](https://insights.sbomify.com/MAL-2025-145057/): Malicious code in miranda-sagitta-package-elektra (npm) (malicious package) - [MAL-2025-145056](https://insights.sbomify.com/MAL-2025-145056/): Malicious code in miranda-rigel-webdriver-manager-phoebe (npm) (malicious package) - [MAL-2025-145055](https://insights.sbomify.com/MAL-2025-145055/): Malicious code in miranda-resolvers-wolf-xanadu (npm) (malicious package) - [MAL-2025-145054](https://insights.sbomify.com/MAL-2025-145054/): Malicious code in miranda-resolvers-pyxis-iota (npm) (malicious package) - [MAL-2025-145053](https://insights.sbomify.com/MAL-2025-145053/): Malicious code in miranda-repository-adonis-apollo (npm) (malicious package) - [MAL-2025-145052](https://insights.sbomify.com/MAL-2025-145052/): Malicious code in miranda-rehype-node-config-docusaurus (npm) (malicious package) - [MAL-2025-145051](https://insights.sbomify.com/MAL-2025-145051/): Malicious code in miranda-promise-odin-rehype (npm) (malicious package) - [MAL-2025-145050](https://insights.sbomify.com/MAL-2025-145050/): Malicious code in miranda-procyon-bulma-module (npm) (malicious package) - [MAL-2025-14505](https://insights.sbomify.com/MAL-2025-14505/): Malicious code in andrii.bulat.ably (npm) (malicious package) - [MAL-2025-145049](https://insights.sbomify.com/MAL-2025-145049/): Malicious code in miranda-postgres-helios-package (npm) (malicious package) - [MAL-2025-145048](https://insights.sbomify.com/MAL-2025-145048/): Malicious code in miranda-polaris-async-magellan (npm) (malicious package) - [MAL-2025-145047](https://insights.sbomify.com/MAL-2025-145047/): Malicious code in miranda-pino-pretty-janus-hermes (npm) (malicious package) - [MAL-2025-145046](https://insights.sbomify.com/MAL-2025-145046/): Malicious code in miranda-ora-module-nodejs (npm) (malicious package) - [MAL-2025-145045](https://insights.sbomify.com/MAL-2025-145045/): Malicious code in miranda-octans-gulp-restart (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1431/