# Vulnerabilities published in 2025


- [MAL-2025-144865](https://insights.sbomify.com/MAL-2025-144865/): Malicious code in mensa-tethys-local-cordelia (npm) (malicious package)
- [MAL-2025-144864](https://insights.sbomify.com/MAL-2025-144864/): Malicious code in mensa-run-script-got-lyra (npm) (malicious package)
- [MAL-2025-144863](https://insights.sbomify.com/MAL-2025-144863/): Malicious code in mensa-request-thuban-element-ui (npm) (malicious package)
- [MAL-2025-144862](https://insights.sbomify.com/MAL-2025-144862/): Malicious code in mensa-readable-nuxtjs-procyon (npm) (malicious package)
- [MAL-2025-144861](https://insights.sbomify.com/MAL-2025-144861/): Malicious code in mensa-protractor-json-ganymede (npm) (malicious package)
- [MAL-2025-144860](https://insights.sbomify.com/MAL-2025-144860/): Malicious code in mensa-process-nightwatch-webdriver-manager (npm) (malicious package)
- [MAL-2025-14486](https://insights.sbomify.com/MAL-2025-14486/): Malicious code in anchor-papaya-co25 (npm) (malicious package)
- [MAL-2025-144859](https://insights.sbomify.com/MAL-2025-144859/): Malicious code in mensa-pm2-metalsmith-eslint-config (npm) (malicious package)
- [MAL-2025-144858](https://insights.sbomify.com/MAL-2025-144858/): Malicious code in mensa-pm2-enceladus-fork (npm) (malicious package)
- [MAL-2025-144857](https://insights.sbomify.com/MAL-2025-144857/): Malicious code in mensa-passport-module-shelljs (npm) (malicious package)
- [MAL-2025-144856](https://insights.sbomify.com/MAL-2025-144856/): Malicious code in mensa-janus-chalk-nebula (npm) (malicious package)
- [MAL-2025-144855](https://insights.sbomify.com/MAL-2025-144855/): Malicious code in mensa-hydra-ophiuchus-kinetic (npm) (malicious package)
- [MAL-2025-144854](https://insights.sbomify.com/MAL-2025-144854/): Malicious code in mensa-halley-bootstrap-rocket (npm) (malicious package)
- [MAL-2025-144853](https://insights.sbomify.com/MAL-2025-144853/): Malicious code in mensa-global-promise-upgrade (npm) (malicious package)
- [MAL-2025-144852](https://insights.sbomify.com/MAL-2025-144852/): Malicious code in mensa-frontend-sedna-markdownlint (npm) (malicious package)
- [MAL-2025-144851](https://insights.sbomify.com/MAL-2025-144851/): Malicious code in mensa-foundation-apex-dione (npm) (malicious package)
- [MAL-2025-144850](https://insights.sbomify.com/MAL-2025-144850/): Malicious code in mensa-fornax-dagda-testcafe (npm) (malicious package)
- [MAL-2025-14485](https://insights.sbomify.com/MAL-2025-14485/): Malicious code in anchor-meteor-42nk (npm) (malicious package)
- [MAL-2025-144849](https://insights.sbomify.com/MAL-2025-144849/): Malicious code in mensa-eslint-plugin-schema-corvus (npm) (malicious package)
- [MAL-2025-144848](https://insights.sbomify.com/MAL-2025-144848/): Malicious code in mensa-enif-magellan-umbriel (npm) (malicious package)
- [MAL-2025-144847](https://insights.sbomify.com/MAL-2025-144847/): Malicious code in mensa-deneb-global-mui (npm) (malicious package)
- [MAL-2025-144846](https://insights.sbomify.com/MAL-2025-144846/): Malicious code in mensa-cosmiconfig-sass-loader-meissa (npm) (malicious package)
- [MAL-2025-144845](https://insights.sbomify.com/MAL-2025-144845/): Malicious code in mensa-cli-chai-radiant (npm) (malicious package)
- [MAL-2025-144844](https://insights.sbomify.com/MAL-2025-144844/): Malicious code in mensa-chalk-neptune-config (npm) (malicious package)
- [MAL-2025-144843](https://insights.sbomify.com/MAL-2025-144843/): Malicious code in mensa-chakra-ui-acamar-ariel (npm) (malicious package)
- [MAL-2025-144842](https://insights.sbomify.com/MAL-2025-144842/): Malicious code in mensa-apollo-firebase-lint-staged (npm) (malicious package)
- [MAL-2025-144841](https://insights.sbomify.com/MAL-2025-144841/): Malicious code in mensa-antares-yaml-jasmine (npm) (malicious package)
- [MAL-2025-144840](https://insights.sbomify.com/MAL-2025-144840/): Malicious code in meissa-xerxes-ora-mira (npm) (malicious package)
- [MAL-2025-14484](https://insights.sbomify.com/MAL-2025-14484/): Malicious code in anchor-maple-g2od (npm) (malicious package)
- [MAL-2025-144839](https://insights.sbomify.com/MAL-2025-144839/): Malicious code in meissa-wolf-server-sass-loader (npm) (malicious package)
- [MAL-2025-144838](https://insights.sbomify.com/MAL-2025-144838/): Malicious code in meissa-wasat-optimize-css-assets-webpack-plugin-iota (npm) (malicious package)
- [MAL-2025-144837](https://insights.sbomify.com/MAL-2025-144837/): Malicious code in meissa-supervisor-markdown-transform (npm) (malicious package)
- [MAL-2025-144836](https://insights.sbomify.com/MAL-2025-144836/): Malicious code in meissa-superagent-nuxtjs-bunyan (npm) (malicious package)
- [MAL-2025-144835](https://insights.sbomify.com/MAL-2025-144835/): Malicious code in meissa-stream-commitlint-config-angular-webdriver-mocha (npm) (malicious package)
- [MAL-2025-144834](https://insights.sbomify.com/MAL-2025-144834/): Malicious code in meissa-slides-event-cypress (npm) (malicious package)
- [MAL-2025-144833](https://insights.sbomify.com/MAL-2025-144833/): Malicious code in meissa-sirius-mensa-stop (npm) (malicious package)
- [MAL-2025-144832](https://insights.sbomify.com/MAL-2025-144832/): Malicious code in meissa-semantic-ui-javascript-webdriver-mocha (npm) (malicious package)
- [MAL-2025-144831](https://insights.sbomify.com/MAL-2025-144831/): Malicious code in meissa-rate-limiter-materialize-forever (npm) (malicious package)
- [MAL-2025-144830](https://insights.sbomify.com/MAL-2025-144830/): Malicious code in meissa-prompts-winston-luna (npm) (malicious package)
- [MAL-2025-14483](https://insights.sbomify.com/MAL-2025-14483/): Malicious code in anchor-jalapeno-vcui (npm) (malicious package)
- [MAL-2025-144829](https://insights.sbomify.com/MAL-2025-144829/): Malicious code in meissa-process-query-janus (npm) (malicious package)
- [MAL-2025-144828](https://insights.sbomify.com/MAL-2025-144828/): Malicious code in meissa-prettier-plugin-markdown-celeste-vortex (npm) (malicious package)
- [MAL-2025-144827](https://insights.sbomify.com/MAL-2025-144827/): Malicious code in meissa-polaris-upgrade-prompts (npm) (malicious package)
- [MAL-2025-144826](https://insights.sbomify.com/MAL-2025-144826/): Malicious code in meissa-pm2-middleware-socketio (npm) (malicious package)
- [MAL-2025-144825](https://insights.sbomify.com/MAL-2025-144825/): Malicious code in meissa-pipe-dependencies-promise (npm) (malicious package)
- [MAL-2025-144824](https://insights.sbomify.com/MAL-2025-144824/): Malicious code in meissa-pino-supervisor-rocket (npm) (malicious package)
- [MAL-2025-144823](https://insights.sbomify.com/MAL-2025-144823/): Malicious code in meissa-phenomic-eslint-config-sync (npm) (malicious package)
- [MAL-2025-144822](https://insights.sbomify.com/MAL-2025-144822/): Malicious code in meissa-passport-nightwatch-mui (npm) (malicious package)
- [MAL-2025-144821](https://insights.sbomify.com/MAL-2025-144821/): Malicious code in meissa-package-spica-iota (npm) (malicious package)
- [MAL-2025-144820](https://insights.sbomify.com/MAL-2025-144820/): Malicious code in meissa-orbit-bootes-javascript (npm) (malicious package)
- [MAL-2025-14482](https://insights.sbomify.com/MAL-2025-14482/): Malicious code in anchor-hazel-p2fo (npm) (malicious package)
- [MAL-2025-144819](https://insights.sbomify.com/MAL-2025-144819/): Malicious code in meissa-ophiuchus-less-nestjs (npm) (malicious package)
- [MAL-2025-144818](https://insights.sbomify.com/MAL-2025-144818/): Malicious code in meissa-nightwatch-csv-publish (npm) (malicious package)
- [MAL-2025-144817](https://insights.sbomify.com/MAL-2025-144817/): Malicious code in meissa-mui-webdriver-manager-promise (npm) (malicious package)
- [MAL-2025-144816](https://insights.sbomify.com/MAL-2025-144816/): Malicious code in meissa-mocha-jsonp-pegasus (npm) (malicious package)
- [MAL-2025-144815](https://insights.sbomify.com/MAL-2025-144815/): Malicious code in meissa-miranda-mongodb-pegasus (npm) (malicious package)
- [MAL-2025-144814](https://insights.sbomify.com/MAL-2025-144814/): Malicious code in meissa-loopback-dactyl-avior (npm) (malicious package)
- [MAL-2025-144813](https://insights.sbomify.com/MAL-2025-144813/): Malicious code in meissa-loop-uglify-js-protractor (npm) (malicious package)
- [MAL-2025-144812](https://insights.sbomify.com/MAL-2025-144812/): Malicious code in meissa-lint-charon-ceres (npm) (malicious package)
- [MAL-2025-144811](https://insights.sbomify.com/MAL-2025-144811/): Malicious code in meissa-levels-telesto-spawn (npm) (malicious package)
- [MAL-2025-144810](https://insights.sbomify.com/MAL-2025-144810/): Malicious code in meissa-ini-zenith-zenobia (npm) (malicious package)
- [MAL-2025-14481](https://insights.sbomify.com/MAL-2025-14481/): Malicious code in anchor-airplane-zrm3 (npm) (malicious package)
- [MAL-2025-144809](https://insights.sbomify.com/MAL-2025-144809/): Malicious code in meissa-ini-xo-fomalhaut (npm) (malicious package)
- [MAL-2025-144808](https://insights.sbomify.com/MAL-2025-144808/): Malicious code in meissa-hugo-express-uninstall (npm) (malicious package)
- [MAL-2025-144807](https://insights.sbomify.com/MAL-2025-144807/): Malicious code in meissa-heka-wolf-fornax (npm) (malicious package)
- [MAL-2025-144806](https://insights.sbomify.com/MAL-2025-144806/): Malicious code in meissa-fornax-ini-loglevel (npm) (malicious package)
- [MAL-2025-144805](https://insights.sbomify.com/MAL-2025-144805/): Malicious code in meissa-fomalhaut-unuk-forever (npm) (malicious package)
- [MAL-2025-144804](https://insights.sbomify.com/MAL-2025-144804/): Malicious code in meissa-flare-thuban-gemini (npm) (malicious package)
- [MAL-2025-144803](https://insights.sbomify.com/MAL-2025-144803/): Malicious code in meissa-europa-forever-helios (npm) (malicious package)
- [MAL-2025-144802](https://insights.sbomify.com/MAL-2025-144802/): Malicious code in meissa-cypress-acamar-prettier-stylelint (npm) (malicious package)
- [MAL-2025-144801](https://insights.sbomify.com/MAL-2025-144801/): Malicious code in meissa-css-minimizer-webpack-plugin-kinetic-apex (npm) (malicious package)
- [MAL-2025-144800](https://insights.sbomify.com/MAL-2025-144800/): Malicious code in meissa-cordelia-ursa-bootes (npm) (malicious package)
- [MAL-2025-14480](https://insights.sbomify.com/MAL-2025-14480/): Malicious code in anatrafa (npm) (malicious package)
- [MAL-2025-1448](https://insights.sbomify.com/MAL-2025-1448/): Malicious code in weex-main (npm) (malicious package)
- [MAL-2025-144799](https://insights.sbomify.com/MAL-2025-144799/): Malicious code in meissa-chakra-ui-mensa-readable (npm) (malicious package)
- [MAL-2025-144798](https://insights.sbomify.com/MAL-2025-144798/): Malicious code in meissa-chakra-ui-delphinus-phenomic (npm) (malicious package)
- [MAL-2025-144797](https://insights.sbomify.com/MAL-2025-144797/): Malicious code in meissa-chakra-ui-cz-conventional-changelog-loopback (npm) (malicious package)
- [MAL-2025-144796](https://insights.sbomify.com/MAL-2025-144796/): Malicious code in meissa-chai-rocket-corvus (npm) (malicious package)
- [MAL-2025-144795](https://insights.sbomify.com/MAL-2025-144795/): Malicious code in meissa-bunyan-loop-ophiuchus (npm) (malicious package)
- [MAL-2025-144794](https://insights.sbomify.com/MAL-2025-144794/): Malicious code in meissa-bellatrix-izar-chariklo (npm) (malicious package)
- [MAL-2025-144793](https://insights.sbomify.com/MAL-2025-144793/): Malicious code in meissa-atlas-algol-sqlite (npm) (malicious package)
- [MAL-2025-144792](https://insights.sbomify.com/MAL-2025-144792/): Malicious code in meissa-async-meissa-perseus (npm) (malicious package)
- [MAL-2025-144791](https://insights.sbomify.com/MAL-2025-144791/): Malicious code in meissa-async-backend-scripts (npm) (malicious package)
- [MAL-2025-144790](https://insights.sbomify.com/MAL-2025-144790/): Malicious code in meissa-antares-supervisor-publish (npm) (malicious package)
- [MAL-2025-14479](https://insights.sbomify.com/MAL-2025-14479/): Malicious code in anastasia (npm) (malicious package)
- [MAL-2025-144789](https://insights.sbomify.com/MAL-2025-144789/): Malicious code in meissa-antares-fusion-bulma (npm) (malicious package)
- [MAL-2025-144788](https://insights.sbomify.com/MAL-2025-144788/): Malicious code in meissa-altair-tool-node-sass (npm) (malicious package)
- [MAL-2025-144787](https://insights.sbomify.com/MAL-2025-144787/): Malicious code in meissa-alphard-xanadu-graphql (npm) (malicious package)
- [MAL-2025-144786](https://insights.sbomify.com/MAL-2025-144786/): Malicious code in meissa-achernar-betelgeuse-arcturus (npm) (malicious package)
- [MAL-2025-144785](https://insights.sbomify.com/MAL-2025-144785/): Malicious code in mdx-xanthus-publish-mutation (npm) (malicious package)
- [MAL-2025-144784](https://insights.sbomify.com/MAL-2025-144784/): Malicious code in mdx-wezen-umbriel-europa (npm) (malicious package)
- [MAL-2025-144783](https://insights.sbomify.com/MAL-2025-144783/): Malicious code in mdx-vortex-node-sass-redis (npm) (malicious package)
- [MAL-2025-144782](https://insights.sbomify.com/MAL-2025-144782/): Malicious code in mdx-terser-webpack-plugin-electron-builder-venus (npm) (malicious package)
- [MAL-2025-144781](https://insights.sbomify.com/MAL-2025-144781/): Malicious code in mdx-telesto-dotenv-elara (npm) (malicious package)
- [MAL-2025-144780](https://insights.sbomify.com/MAL-2025-144780/): Malicious code in mdx-standard-carina-global (npm) (malicious package)
- [MAL-2025-14478](https://insights.sbomify.com/MAL-2025-14478/): Malicious code in anarchy (npm) (malicious package)
- [MAL-2025-144779](https://insights.sbomify.com/MAL-2025-144779/): Malicious code in mdx-sirius-buffer-dione (npm) (malicious package)
- [MAL-2025-144778](https://insights.sbomify.com/MAL-2025-144778/): Malicious code in mdx-schema-chai-foundation (npm) (malicious package)
- [MAL-2025-144777](https://insights.sbomify.com/MAL-2025-144777/): Malicious code in mdx-sadr-chai-npm (npm) (malicious package)
- [MAL-2025-144776](https://insights.sbomify.com/MAL-2025-144776/): Malicious code in mdx-rimraf-subscription-build (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1434/