# Vulnerabilities published in 2025 - [MAL-2025-145044](https://insights.sbomify.com/MAL-2025-145044/): Malicious code in miranda-nightwatch-restart-nightwatch (npm) (malicious package) - [MAL-2025-145043](https://insights.sbomify.com/MAL-2025-145043/): Malicious code in miranda-nconf-package-puppeteer (npm) (malicious package) - [MAL-2025-145042](https://insights.sbomify.com/MAL-2025-145042/): Malicious code in miranda-loop-pino-chariklo (npm) (malicious package) - [MAL-2025-145041](https://insights.sbomify.com/MAL-2025-145041/): Malicious code in miranda-less-mensa-buffer (npm) (malicious package) - [MAL-2025-145040](https://insights.sbomify.com/MAL-2025-145040/): Malicious code in miranda-janus-lynx-resolvers (npm) (malicious package) - [MAL-2025-14504](https://insights.sbomify.com/MAL-2025-14504/): Malicious code in andrhello (npm) (malicious package) - [MAL-2025-145039](https://insights.sbomify.com/MAL-2025-145039/): Malicious code in miranda-jabbah-sirius-google (npm) (malicious package) - [MAL-2025-145038](https://insights.sbomify.com/MAL-2025-145038/): Malicious code in miranda-hydra-radiant-grunt (npm) (malicious package) - [MAL-2025-145037](https://insights.sbomify.com/MAL-2025-145037/): Malicious code in miranda-graphql-hyperion-io (npm) (malicious package) - [MAL-2025-145036](https://insights.sbomify.com/MAL-2025-145036/): Malicious code in miranda-gemini-jabbah-xenos (npm) (malicious package) - [MAL-2025-145035](https://insights.sbomify.com/MAL-2025-145035/): Malicious code in miranda-ganymede-rollup-plugin-grus (npm) (malicious package) - [MAL-2025-145034](https://insights.sbomify.com/MAL-2025-145034/): Malicious code in miranda-frontend-luna-webdriver-mocha (npm) (malicious package) - [MAL-2025-145033](https://insights.sbomify.com/MAL-2025-145033/): Malicious code in miranda-firebase-non-blocking-cygnus (npm) (malicious package) - [MAL-2025-145032](https://insights.sbomify.com/MAL-2025-145032/): Malicious code in miranda-europa-development-warp (npm) (malicious package) - [MAL-2025-145031](https://insights.sbomify.com/MAL-2025-145031/): Malicious code in miranda-elektra-wasat-halley (npm) (malicious package) - [MAL-2025-145030](https://insights.sbomify.com/MAL-2025-145030/): Malicious code in miranda-elektra-epimetheus-soap (npm) (malicious package) - [MAL-2025-14503](https://insights.sbomify.com/MAL-2025-14503/): Malicious code in andre-testing-a-thing (npm) (malicious package) - [MAL-2025-145029](https://insights.sbomify.com/MAL-2025-145029/): Malicious code in miranda-dotenv-parse-variables-middleware-link (npm) (malicious package) - [MAL-2025-145028](https://insights.sbomify.com/MAL-2025-145028/): Malicious code in miranda-dactyl-nextjs-commitlint (npm) (malicious package) - [MAL-2025-145027](https://insights.sbomify.com/MAL-2025-145027/): Malicious code in miranda-css-minimizer-webpack-plugin-soap-ora (npm) (malicious package) - [MAL-2025-145026](https://insights.sbomify.com/MAL-2025-145026/): Malicious code in miranda-config-odin-spectron (npm) (malicious package) - [MAL-2025-145025](https://insights.sbomify.com/MAL-2025-145025/): Malicious code in miranda-commitlint-config-angular-castor-thuban (npm) (malicious package) - [MAL-2025-145024](https://insights.sbomify.com/MAL-2025-145024/): Malicious code in miranda-capella-electron-neptune (npm) (malicious package) - [MAL-2025-145023](https://insights.sbomify.com/MAL-2025-145023/): Malicious code in miranda-callisto-buffer-proxima (npm) (malicious package) - [MAL-2025-145022](https://insights.sbomify.com/MAL-2025-145022/): Malicious code in miranda-cache-relay-non-blocking (npm) (malicious package) - [MAL-2025-145021](https://insights.sbomify.com/MAL-2025-145021/): Malicious code in miranda-browserify-dorado-winston (npm) (malicious package) - [MAL-2025-145020](https://insights.sbomify.com/MAL-2025-145020/): Malicious code in miranda-betelgeuse-envconfig-hyperion (npm) (malicious package) - [MAL-2025-14502](https://insights.sbomify.com/MAL-2025-14502/): Malicious code in andplugin (npm) (malicious package) - [MAL-2025-145019](https://insights.sbomify.com/MAL-2025-145019/): Malicious code in miranda-ariel-metalsmith-css-loader (npm) (malicious package) - [MAL-2025-145018](https://insights.sbomify.com/MAL-2025-145018/): Malicious code in miranda-adonis-uglify-js-gemini (npm) (malicious package) - [MAL-2025-145017](https://insights.sbomify.com/MAL-2025-145017/): Malicious code in mira-promise-foundation-hermes (npm) (malicious package) - [MAL-2025-145016](https://insights.sbomify.com/MAL-2025-145016/): Malicious code in mira-polaris-forever-pino (npm) (malicious package) - [MAL-2025-145015](https://insights.sbomify.com/MAL-2025-145015/): Malicious code in mira-pino-pretty-chakra-ui-virgo (npm) (malicious package) - [MAL-2025-145014](https://insights.sbomify.com/MAL-2025-145014/): Malicious code in mira-phoenix-testcafe-await (npm) (malicious package) - [MAL-2025-145013](https://insights.sbomify.com/MAL-2025-145013/): Malicious code in mira-perseus-delphinus-winston (npm) (malicious package) - [MAL-2025-145012](https://insights.sbomify.com/MAL-2025-145012/): Malicious code in mira-oauth-graphql-airbnb (npm) (malicious package) - [MAL-2025-145011](https://insights.sbomify.com/MAL-2025-145011/): Malicious code in mira-janus-mongoose-mui (npm) (malicious package) - [MAL-2025-145010](https://insights.sbomify.com/MAL-2025-145010/): Malicious code in mira-inquirer-lyra-eris (npm) (malicious package) - [MAL-2025-14501](https://insights.sbomify.com/MAL-2025-14501/): Malicious code in andnaviki (npm) (malicious package) - [MAL-2025-145009](https://insights.sbomify.com/MAL-2025-145009/): Malicious code in mira-global-docusaurus-webdriver-manager (npm) (malicious package) - [MAL-2025-145008](https://insights.sbomify.com/MAL-2025-145008/): Malicious code in mira-deneb-kaus-meissa (npm) (malicious package) - [MAL-2025-145007](https://insights.sbomify.com/MAL-2025-145007/): Malicious code in mira-cz-conventional-changelog-iota-webdriver-manager (npm) (malicious package) - [MAL-2025-145006](https://insights.sbomify.com/MAL-2025-145006/): Malicious code in mira-cypress-regulus-leda (npm) (malicious package) - [MAL-2025-145005](https://insights.sbomify.com/MAL-2025-145005/): Malicious code in mira-convict-element-ui-nebula (npm) (malicious package) - [MAL-2025-145004](https://insights.sbomify.com/MAL-2025-145004/): Malicious code in mira-cache-cross-env-babel (npm) (malicious package) - [MAL-2025-145003](https://insights.sbomify.com/MAL-2025-145003/): Malicious code in mira-aurora-jekyll-radiant (npm) (malicious package) - [MAL-2025-145002](https://insights.sbomify.com/MAL-2025-145002/): Malicious code in mira-atlas-event-betelgeuse (npm) (malicious package) - [MAL-2025-145001](https://insights.sbomify.com/MAL-2025-145001/): Malicious code in mira-andromeda-csrf-apollo (npm) (malicious package) - [MAL-2025-145000](https://insights.sbomify.com/MAL-2025-145000/): Malicious code in mira-altair-markdownlint-electron-builder (npm) (malicious package) - [MAL-2025-14500](https://insights.sbomify.com/MAL-2025-14500/): Malicious code in andi-tiwul81-sukiwir (npm) (malicious package) - [MAL-2025-1450](https://insights.sbomify.com/MAL-2025-1450/): Malicious code in yizhifabao56 (npm) (malicious package) - [MAL-2025-145](https://insights.sbomify.com/MAL-2025-145/): Malicious code in chipped (npm) (malicious package) - [MAL-2025-144999](https://insights.sbomify.com/MAL-2025-144999/): Malicious code in mini-css-extract-plugin-vega-astro-run-script (npm) (malicious package) - [MAL-2025-144998](https://insights.sbomify.com/MAL-2025-144998/): Malicious code in mini-css-extract-plugin-update-cassini-blaze (npm) (malicious package) - [MAL-2025-144997](https://insights.sbomify.com/MAL-2025-144997/): Malicious code in mini-css-extract-plugin-taurus-kastra-async (npm) (malicious package) - [MAL-2025-144996](https://insights.sbomify.com/MAL-2025-144996/): Malicious code in mini-css-extract-plugin-socketio-bellatrix-lint-staged (npm) (malicious package) - [MAL-2025-144995](https://insights.sbomify.com/MAL-2025-144995/): Malicious code in mini-css-extract-plugin-semantic-release-rimraf-hermes (npm) (malicious package) - [MAL-2025-144994](https://insights.sbomify.com/MAL-2025-144994/): Malicious code in mini-css-extract-plugin-sedna-fetch-adonis (npm) (malicious package) - [MAL-2025-144993](https://insights.sbomify.com/MAL-2025-144993/): Malicious code in mini-css-extract-plugin-release-it-antares-rollup (npm) (malicious package) - [MAL-2025-144992](https://insights.sbomify.com/MAL-2025-144992/): Malicious code in mini-css-extract-plugin-redis-tool-ignite (npm) (malicious package) - [MAL-2025-144991](https://insights.sbomify.com/MAL-2025-144991/): Malicious code in mini-css-extract-plugin-puppeteer-bellatrix-prompts (npm) (malicious package) - [MAL-2025-144990](https://insights.sbomify.com/MAL-2025-144990/): Malicious code in mini-css-extract-plugin-proxima-forever-altair (npm) (malicious package) - [MAL-2025-14499](https://insights.sbomify.com/MAL-2025-14499/): Malicious code in andi-sambel6-sukiwir (npm) (malicious package) - [MAL-2025-144989](https://insights.sbomify.com/MAL-2025-144989/): Malicious code in mini-css-extract-plugin-process-taurus-rollup-plugin (npm) (malicious package) - [MAL-2025-144988](https://insights.sbomify.com/MAL-2025-144988/): Malicious code in mini-css-extract-plugin-postcss-hapi-protractor (npm) (malicious package) - [MAL-2025-144987](https://insights.sbomify.com/MAL-2025-144987/): Malicious code in mini-css-extract-plugin-pino-changelog-adonis (npm) (malicious package) - [MAL-2025-144986](https://insights.sbomify.com/MAL-2025-144986/): Malicious code in mini-css-extract-plugin-passport-centaurus-eslint-plugin (npm) (malicious package) - [MAL-2025-144985](https://insights.sbomify.com/MAL-2025-144985/): Malicious code in mini-css-extract-plugin-orbit-meissa-cluster (npm) (malicious package) - [MAL-2025-144984](https://insights.sbomify.com/MAL-2025-144984/): Malicious code in mini-css-extract-plugin-ophiuchus-lyra-eslint-plugin (npm) (malicious package) - [MAL-2025-144983](https://insights.sbomify.com/MAL-2025-144983/): Malicious code in mini-css-extract-plugin-npm-lint-lacerta (npm) (malicious package) - [MAL-2025-144982](https://insights.sbomify.com/MAL-2025-144982/): Malicious code in mini-css-extract-plugin-nightwatch-ignite-capella (npm) (malicious package) - [MAL-2025-144981](https://insights.sbomify.com/MAL-2025-144981/): Malicious code in mini-css-extract-plugin-meteor-private-thuban (npm) (malicious package) - [MAL-2025-144980](https://insights.sbomify.com/MAL-2025-144980/): Malicious code in mini-css-extract-plugin-meteor-capella-nconf (npm) (malicious package) - [MAL-2025-14498](https://insights.sbomify.com/MAL-2025-14498/): Malicious code in andi-pisang21-breki (npm) (malicious package) - [MAL-2025-144979](https://insights.sbomify.com/MAL-2025-144979/): Malicious code in mini-css-extract-plugin-lint-websockets-polaris (npm) (malicious package) - [MAL-2025-144978](https://insights.sbomify.com/MAL-2025-144978/): Malicious code in mini-css-extract-plugin-library-proxima-ultra (npm) (malicious package) - [MAL-2025-144977](https://insights.sbomify.com/MAL-2025-144977/): Malicious code in mini-css-extract-plugin-koa-chromedriver-playwright (npm) (malicious package) - [MAL-2025-144976](https://insights.sbomify.com/MAL-2025-144976/): Malicious code in mini-css-extract-plugin-heka-miranda-dotenv (npm) (malicious package) - [MAL-2025-144975](https://insights.sbomify.com/MAL-2025-144975/): Malicious code in mini-css-extract-plugin-graphql-karma-nodejs (npm) (malicious package) - [MAL-2025-144974](https://insights.sbomify.com/MAL-2025-144974/): Malicious code in mini-css-extract-plugin-gatsby-transform-ceres (npm) (malicious package) - [MAL-2025-144973](https://insights.sbomify.com/MAL-2025-144973/): Malicious code in mini-css-extract-plugin-cygnus-centauri-buffer (npm) (malicious package) - [MAL-2025-144972](https://insights.sbomify.com/MAL-2025-144972/): Malicious code in mini-css-extract-plugin-commitlint-config-angular-local-jwt (npm) (malicious package) - [MAL-2025-144971](https://insights.sbomify.com/MAL-2025-144971/): Malicious code in mini-css-extract-plugin-cli-quasar-cache (npm) (malicious package) - [MAL-2025-144970](https://insights.sbomify.com/MAL-2025-144970/): Malicious code in mini-css-extract-plugin-capella-lacerta-castor (npm) (malicious package) - [MAL-2025-14497](https://insights.sbomify.com/MAL-2025-14497/): Malicious code in andi-nasi44-sukiwir (npm) (malicious package) - [MAL-2025-144969](https://insights.sbomify.com/MAL-2025-144969/): Malicious code in mini-css-extract-plugin-callisto-vulcan-apex (npm) (malicious package) - [MAL-2025-144968](https://insights.sbomify.com/MAL-2025-144968/): Malicious code in middleware-weywot-eslint-readable (npm) (malicious package) - [MAL-2025-144967](https://insights.sbomify.com/MAL-2025-144967/): Malicious code in middleware-vulcan-taurus-firebase (npm) (malicious package) - [MAL-2025-144966](https://insights.sbomify.com/MAL-2025-144966/): Malicious code in middleware-upgrade-request-zephyr (npm) (malicious package) - [MAL-2025-144965](https://insights.sbomify.com/MAL-2025-144965/): Malicious code in middleware-uninstall-dotenv-bulma (npm) (malicious package) - [MAL-2025-144964](https://insights.sbomify.com/MAL-2025-144964/): Malicious code in middleware-schema-venus-solis (npm) (malicious package) - [MAL-2025-144963](https://insights.sbomify.com/MAL-2025-144963/): Malicious code in middleware-postcss-loader-vulcan-configstore (npm) (malicious package) - [MAL-2025-144962](https://insights.sbomify.com/MAL-2025-144962/): Malicious code in middleware-nashira-install-loglevel (npm) (malicious package) - [MAL-2025-144961](https://insights.sbomify.com/MAL-2025-144961/): Malicious code in middleware-mongodb-leda-barnard (npm) (malicious package) - [MAL-2025-144960](https://insights.sbomify.com/MAL-2025-144960/): Malicious code in middleware-mocha-cassini-jabbah (npm) (malicious package) - [MAL-2025-14496](https://insights.sbomify.com/MAL-2025-14496/): Malicious code in andi-mendut88-breki (npm) (malicious package) - [MAL-2025-144959](https://insights.sbomify.com/MAL-2025-144959/): Malicious code in middleware-jwt-nodejs-less (npm) (malicious package) - [MAL-2025-144958](https://insights.sbomify.com/MAL-2025-144958/): Malicious code in middleware-jasmine-nightwatch-fornax (npm) (malicious package) - [MAL-2025-144957](https://insights.sbomify.com/MAL-2025-144957/): Malicious code in middleware-janus-perseus-weywot (npm) (malicious package) - [MAL-2025-144956](https://insights.sbomify.com/MAL-2025-144956/): Malicious code in middleware-fornax-cache-chariklo (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1432/