# Vulnerabilities published in 2025 - [MAL-2025-144955](https://insights.sbomify.com/MAL-2025-144955/): Malicious code in middleware-eslint-pavo-got (npm) (malicious package) - [MAL-2025-144954](https://insights.sbomify.com/MAL-2025-144954/): Malicious code in middleware-elektra-webdriver-manager-sedna (npm) (malicious package) - [MAL-2025-144953](https://insights.sbomify.com/MAL-2025-144953/): Malicious code in middleware-electron-builder-arcturus-lint (npm) (malicious package) - [MAL-2025-144952](https://insights.sbomify.com/MAL-2025-144952/): Malicious code in middleware-dotenv-pegasus-mensa (npm) (malicious package) - [MAL-2025-144951](https://insights.sbomify.com/MAL-2025-144951/): Malicious code in middleware-dorado-arcturus-bulma (npm) (malicious package) - [MAL-2025-144950](https://insights.sbomify.com/MAL-2025-144950/): Malicious code in middleware-despina-geckodriver-auth0 (npm) (malicious package) - [MAL-2025-14495](https://insights.sbomify.com/MAL-2025-14495/): Malicious code in andi-esdoger21-sukiwir (npm) (malicious package) - [MAL-2025-144949](https://insights.sbomify.com/MAL-2025-144949/): Malicious code in middleware-blitz-mutation-transform (npm) (malicious package) - [MAL-2025-144948](https://insights.sbomify.com/MAL-2025-144948/): Malicious code in middleware-bellatrix-pm2-npm (npm) (malicious package) - [MAL-2025-144947](https://insights.sbomify.com/MAL-2025-144947/): Malicious code in middleware-barnard-update-semantic-release (npm) (malicious package) - [MAL-2025-144946](https://insights.sbomify.com/MAL-2025-144946/): Malicious code in middleware-antares-graphql-cors (npm) (malicious package) - [MAL-2025-144945](https://insights.sbomify.com/MAL-2025-144945/): Malicious code in middleware-antares-bulma-sedna (npm) (malicious package) - [MAL-2025-144944](https://insights.sbomify.com/MAL-2025-144944/): Malicious code in middleware-andromeda-yaml-inquirer (npm) (malicious package) - [MAL-2025-144943](https://insights.sbomify.com/MAL-2025-144943/): Malicious code in meteor-xml-equinox-mini-css-extract-plugin (npm) (malicious package) - [MAL-2025-144942](https://insights.sbomify.com/MAL-2025-144942/): Malicious code in meteor-writable-jekyll-io (npm) (malicious package) - [MAL-2025-144941](https://insights.sbomify.com/MAL-2025-144941/): Malicious code in meteor-webpack-europa-phoebe (npm) (malicious package) - [MAL-2025-144940](https://insights.sbomify.com/MAL-2025-144940/): Malicious code in meteor-start-query-cressida (npm) (malicious package) - [MAL-2025-14494](https://insights.sbomify.com/MAL-2025-14494/): Malicious code in andi-dradag80-breki (npm) (malicious package) - [MAL-2025-144939](https://insights.sbomify.com/MAL-2025-144939/): Malicious code in meteor-start-aether-neptune (npm) (malicious package) - [MAL-2025-144938](https://insights.sbomify.com/MAL-2025-144938/): Malicious code in meteor-standard-xerxes-nebula (npm) (malicious package) - [MAL-2025-144937](https://insights.sbomify.com/MAL-2025-144937/): Malicious code in meteor-spectron-remark-xanthus (npm) (malicious package) - [MAL-2025-144936](https://insights.sbomify.com/MAL-2025-144936/): Malicious code in meteor-shelljs-miranda-oauth (npm) (malicious package) - [MAL-2025-144935](https://insights.sbomify.com/MAL-2025-144935/): Malicious code in meteor-semantic-release-inquirer-pegasus (npm) (malicious package) - [MAL-2025-144934](https://insights.sbomify.com/MAL-2025-144934/): Malicious code in meteor-sedna-markdownlint-native (npm) (malicious package) - [MAL-2025-144933](https://insights.sbomify.com/MAL-2025-144933/): Malicious code in meteor-sagitta-gravity-webpack (npm) (malicious package) - [MAL-2025-144932](https://insights.sbomify.com/MAL-2025-144932/): Malicious code in meteor-rollup-plugin-io-carina (npm) (malicious package) - [MAL-2025-144931](https://insights.sbomify.com/MAL-2025-144931/): Malicious code in meteor-rigel-ursa-hermes (npm) (malicious package) - [MAL-2025-144930](https://insights.sbomify.com/MAL-2025-144930/): Malicious code in meteor-registry-html-webpack-plugin-gravity (npm) (malicious package) - [MAL-2025-14493](https://insights.sbomify.com/MAL-2025-14493/): Malicious code in andi-dodol30-kuki (npm) (malicious package) - [MAL-2025-144929](https://insights.sbomify.com/MAL-2025-144929/): Malicious code in meteor-readable-norma-native (npm) (malicious package) - [MAL-2025-144928](https://insights.sbomify.com/MAL-2025-144928/): Malicious code in meteor-readable-dactyl-chalk (npm) (malicious package) - [MAL-2025-144927](https://insights.sbomify.com/MAL-2025-144927/): Malicious code in meteor-quark-scorpius-framework (npm) (malicious package) - [MAL-2025-144926](https://insights.sbomify.com/MAL-2025-144926/): Malicious code in meteor-pulsar-prompts-test (npm) (malicious package) - [MAL-2025-144925](https://insights.sbomify.com/MAL-2025-144925/): Malicious code in meteor-procyon-cz-conventional-changelog-less (npm) (malicious package) - [MAL-2025-144924](https://insights.sbomify.com/MAL-2025-144924/): Malicious code in meteor-postcss-galaxy-markdown (npm) (malicious package) - [MAL-2025-144923](https://insights.sbomify.com/MAL-2025-144923/): Malicious code in meteor-odin-kastra-blaze (npm) (malicious package) - [MAL-2025-144922](https://insights.sbomify.com/MAL-2025-144922/): Malicious code in meteor-node-sass-optimize-css-assets-webpack-plugin-soap (npm) (malicious package) - [MAL-2025-144921](https://insights.sbomify.com/MAL-2025-144921/): Malicious code in meteor-node-config-hugo-fomalhaut (npm) (malicious package) - [MAL-2025-144920](https://insights.sbomify.com/MAL-2025-144920/): Malicious code in meteor-nconf-eslint-orbit (npm) (malicious package) - [MAL-2025-14492](https://insights.sbomify.com/MAL-2025-14492/): Malicious code in andi-bubursumsum43-breki (npm) (malicious package) - [MAL-2025-144919](https://insights.sbomify.com/MAL-2025-144919/): Malicious code in meteor-kronos-xanthus-nebula (npm) (malicious package) - [MAL-2025-144918](https://insights.sbomify.com/MAL-2025-144918/): Malicious code in meteor-jupiter-command-lyra (npm) (malicious package) - [MAL-2025-144917](https://insights.sbomify.com/MAL-2025-144917/): Malicious code in meteor-janus-await-airbnb (npm) (malicious package) - [MAL-2025-144916](https://insights.sbomify.com/MAL-2025-144916/): Malicious code in meteor-iota-xanadu-babel (npm) (malicious package) - [MAL-2025-144915](https://insights.sbomify.com/MAL-2025-144915/): Malicious code in meteor-iota-ophiuchus-magellan (npm) (malicious package) - [MAL-2025-144914](https://insights.sbomify.com/MAL-2025-144914/): Malicious code in meteor-hyperion-fetch-heka (npm) (malicious package) - [MAL-2025-144913](https://insights.sbomify.com/MAL-2025-144913/): Malicious code in meteor-html-webpack-plugin-mui-selenium (npm) (malicious package) - [MAL-2025-144912](https://insights.sbomify.com/MAL-2025-144912/): Malicious code in meteor-google-jekyll-query (npm) (malicious package) - [MAL-2025-144911](https://insights.sbomify.com/MAL-2025-144911/): Malicious code in meteor-global-xo-sequelize (npm) (malicious package) - [MAL-2025-144910](https://insights.sbomify.com/MAL-2025-144910/): Malicious code in meteor-foundation-callback-grus (npm) (malicious package) - [MAL-2025-14491](https://insights.sbomify.com/MAL-2025-14491/): Malicious code in andgame (npm) (malicious package) - [MAL-2025-144909](https://insights.sbomify.com/MAL-2025-144909/): Malicious code in meteor-fomalhaut-nightwatch-eleventy (npm) (malicious package) - [MAL-2025-144908](https://insights.sbomify.com/MAL-2025-144908/): Malicious code in meteor-dotenv-safe-rollup-pino-pretty (npm) (malicious package) - [MAL-2025-144907](https://insights.sbomify.com/MAL-2025-144907/): Malicious code in meteor-despina-octans-izar (npm) (malicious package) - [MAL-2025-144906](https://insights.sbomify.com/MAL-2025-144906/): Malicious code in meteor-cross-env-promise-comet (npm) (malicious package) - [MAL-2025-144905](https://insights.sbomify.com/MAL-2025-144905/): Malicious code in meteor-corvus-heka-terser-webpack-plugin (npm) (malicious package) - [MAL-2025-144904](https://insights.sbomify.com/MAL-2025-144904/): Malicious code in meteor-config-csv-yakutsk (npm) (malicious package) - [MAL-2025-144903](https://insights.sbomify.com/MAL-2025-144903/): Malicious code in meteor-comet-mdx-cygnus (npm) (malicious package) - [MAL-2025-144902](https://insights.sbomify.com/MAL-2025-144902/): Malicious code in meteor-chalk-csrf-sagitta (npm) (malicious package) - [MAL-2025-144901](https://insights.sbomify.com/MAL-2025-144901/): Malicious code in meteor-canopus-upgrade-eleventy (npm) (malicious package) - [MAL-2025-144900](https://insights.sbomify.com/MAL-2025-144900/): Malicious code in meteor-bootstrap-impulse-flare (npm) (malicious package) - [MAL-2025-14490](https://insights.sbomify.com/MAL-2025-14490/): Malicious code in andamio_eru (npm) (malicious package) - [MAL-2025-1449](https://insights.sbomify.com/MAL-2025-1449/): Malicious code in yizhifabao55 (npm) (malicious package) - [MAL-2025-144899](https://insights.sbomify.com/MAL-2025-144899/): Malicious code in meteor-apollo-xanadu-kinetic (npm) (malicious package) - [MAL-2025-144898](https://insights.sbomify.com/MAL-2025-144898/): Malicious code in meteor-apollo-upgrade-zenobia (npm) (malicious package) - [MAL-2025-144897](https://insights.sbomify.com/MAL-2025-144897/): Malicious code in metalsmith-yildun-rocket-install (npm) (malicious package) - [MAL-2025-144896](https://insights.sbomify.com/MAL-2025-144896/): Malicious code in metalsmith-yakutsk-juno-dagda (npm) (malicious package) - [MAL-2025-144895](https://insights.sbomify.com/MAL-2025-144895/): Malicious code in metalsmith-xml-thuban-winston (npm) (malicious package) - [MAL-2025-144894](https://insights.sbomify.com/MAL-2025-144894/): Malicious code in metalsmith-xenos-spica-elara (npm) (malicious package) - [MAL-2025-144893](https://insights.sbomify.com/MAL-2025-144893/): Malicious code in metalsmith-warp-lacerta-cors (npm) (malicious package) - [MAL-2025-144892](https://insights.sbomify.com/MAL-2025-144892/): Malicious code in metalsmith-vulcan-lint-staged-acamar (npm) (malicious package) - [MAL-2025-144891](https://insights.sbomify.com/MAL-2025-144891/): Malicious code in metalsmith-ultra-ceres-fomalhaut (npm) (malicious package) - [MAL-2025-144890](https://insights.sbomify.com/MAL-2025-144890/): Malicious code in metalsmith-scripts-spectron-cygnus (npm) (malicious package) - [MAL-2025-14489](https://insights.sbomify.com/MAL-2025-14489/): Malicious code in anchor-xigua-5yhn (npm) (malicious package) - [MAL-2025-144889](https://insights.sbomify.com/MAL-2025-144889/): Malicious code in metalsmith-sagitta-less-loader-xanadu (npm) (malicious package) - [MAL-2025-144888](https://insights.sbomify.com/MAL-2025-144888/): Malicious code in metalsmith-regulus-xanthus-levels (npm) (malicious package) - [MAL-2025-144887](https://insights.sbomify.com/MAL-2025-144887/): Malicious code in metalsmith-polaris-browserify-zenith (npm) (malicious package) - [MAL-2025-144886](https://insights.sbomify.com/MAL-2025-144886/): Malicious code in metalsmith-optimize-css-assets-webpack-plugin-kinetic-slidev (npm) (malicious package) - [MAL-2025-144885](https://insights.sbomify.com/MAL-2025-144885/): Malicious code in metalsmith-octans-update-oauth (npm) (malicious package) - [MAL-2025-144884](https://insights.sbomify.com/MAL-2025-144884/): Malicious code in metalsmith-nashira-antares-shelljs (npm) (malicious package) - [MAL-2025-144883](https://insights.sbomify.com/MAL-2025-144883/): Malicious code in metalsmith-mui-less-loader-docusaurus (npm) (malicious package) - [MAL-2025-144882](https://insights.sbomify.com/MAL-2025-144882/): Malicious code in metalsmith-materialize-gacrux-commitizen (npm) (malicious package) - [MAL-2025-144881](https://insights.sbomify.com/MAL-2025-144881/): Malicious code in metalsmith-jekyll-async-express (npm) (malicious package) - [MAL-2025-144880](https://insights.sbomify.com/MAL-2025-144880/): Malicious code in metalsmith-janus-solis-hapi (npm) (malicious package) - [MAL-2025-14488](https://insights.sbomify.com/MAL-2025-14488/): Malicious code in anchor-supernova-57s4 (npm) (malicious package) - [MAL-2025-144879](https://insights.sbomify.com/MAL-2025-144879/): Malicious code in metalsmith-jabbah-sails-acamar (npm) (malicious package) - [MAL-2025-144878](https://insights.sbomify.com/MAL-2025-144878/): Malicious code in metalsmith-iota-oberon-schema (npm) (malicious package) - [MAL-2025-144877](https://insights.sbomify.com/MAL-2025-144877/): Malicious code in metalsmith-graphql-pegasus-hermes (npm) (malicious package) - [MAL-2025-144876](https://insights.sbomify.com/MAL-2025-144876/): Malicious code in metalsmith-elektra-fetch-event (npm) (malicious package) - [MAL-2025-144875](https://insights.sbomify.com/MAL-2025-144875/): Malicious code in metalsmith-dione-phoebe-ignite (npm) (malicious package) - [MAL-2025-144874](https://insights.sbomify.com/MAL-2025-144874/): Malicious code in metalsmith-dagda-ganymede-semantic-release (npm) (malicious package) - [MAL-2025-144873](https://insights.sbomify.com/MAL-2025-144873/): Malicious code in metalsmith-cluster-epimetheus-backend (npm) (malicious package) - [MAL-2025-144872](https://insights.sbomify.com/MAL-2025-144872/): Malicious code in metalsmith-celeste-commitlint-config-angular-gacrux (npm) (malicious package) - [MAL-2025-144871](https://insights.sbomify.com/MAL-2025-144871/): Malicious code in metalsmith-build-cressida-superagent (npm) (malicious package) - [MAL-2025-144870](https://insights.sbomify.com/MAL-2025-144870/): Malicious code in metalsmith-arcturus-chakra-ui-fomalhaut (npm) (malicious package) - [MAL-2025-14487](https://insights.sbomify.com/MAL-2025-14487/): Malicious code in anchor-sierra-xn3u (npm) (malicious package) - [MAL-2025-144869](https://insights.sbomify.com/MAL-2025-144869/): Malicious code in metalsmith-apollo-mongodb-rimraf (npm) (malicious package) - [MAL-2025-144868](https://insights.sbomify.com/MAL-2025-144868/): Malicious code in mensa-wezen-nightmare-mongoose (npm) (malicious package) - [MAL-2025-144867](https://insights.sbomify.com/MAL-2025-144867/): Malicious code in mensa-typeorm-node-sass-ursa (npm) (malicious package) - [MAL-2025-144866](https://insights.sbomify.com/MAL-2025-144866/): Malicious code in mensa-titan-nightwatch-celeste (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1433/