# Vulnerabilities published in 2025


- [MAL-2025-144775](https://insights.sbomify.com/MAL-2025-144775/): Malicious code in mdx-react-bootstrap-react-bootstrap-meissa (npm) (malicious package)
- [MAL-2025-144774](https://insights.sbomify.com/MAL-2025-144774/): Malicious code in mdx-react-bootstrap-javascript-impulse (npm) (malicious package)
- [MAL-2025-144773](https://insights.sbomify.com/MAL-2025-144773/): Malicious code in mdx-radiant-sagitta-react-bootstrap (npm) (malicious package)
- [MAL-2025-144772](https://insights.sbomify.com/MAL-2025-144772/): Malicious code in mdx-puppeteer-spectron-webdriver-leda (npm) (malicious package)
- [MAL-2025-144771](https://insights.sbomify.com/MAL-2025-144771/): Malicious code in mdx-process-eleventy-ceres (npm) (malicious package)
- [MAL-2025-144770](https://insights.sbomify.com/MAL-2025-144770/): Malicious code in mdx-miranda-apollo-nightwatch (npm) (malicious package)
- [MAL-2025-14477](https://insights.sbomify.com/MAL-2025-14477/): Malicious code in anan-d-widgets (npm) (malicious package)
- [MAL-2025-144769](https://insights.sbomify.com/MAL-2025-144769/): Malicious code in mdx-markdown-pdf-andromeda-bunyan (npm) (malicious package)
- [MAL-2025-144768](https://insights.sbomify.com/MAL-2025-144768/): Malicious code in mdx-markdown-less-izar (npm) (malicious package)
- [MAL-2025-144767](https://insights.sbomify.com/MAL-2025-144767/): Malicious code in mdx-loglevel-meissa-meissa (npm) (malicious package)
- [MAL-2025-144766](https://insights.sbomify.com/MAL-2025-144766/): Malicious code in mdx-gemini-miranda-mysql (npm) (malicious package)
- [MAL-2025-144765](https://insights.sbomify.com/MAL-2025-144765/): Malicious code in mdx-dotenv-safe-local-readable (npm) (malicious package)
- [MAL-2025-144764](https://insights.sbomify.com/MAL-2025-144764/): Malicious code in mdx-cressida-ini-async (npm) (malicious package)
- [MAL-2025-144763](https://insights.sbomify.com/MAL-2025-144763/): Malicious code in mdx-cors-eris-vuepress (npm) (malicious package)
- [MAL-2025-144762](https://insights.sbomify.com/MAL-2025-144762/): Malicious code in mdx-comet-vortex-karma (npm) (malicious package)
- [MAL-2025-144761](https://insights.sbomify.com/MAL-2025-144761/): Malicious code in mdx-colors-bunyan-bellatrix (npm) (malicious package)
- [MAL-2025-144760](https://insights.sbomify.com/MAL-2025-144760/): Malicious code in mdx-chai-indus-iota (npm) (malicious package)
- [MAL-2025-14476](https://insights.sbomify.com/MAL-2025-14476/): Malicious code in analyzer-importer (npm) (malicious package)
- [MAL-2025-144759](https://insights.sbomify.com/MAL-2025-144759/): Malicious code in mdx-ariel-stream-yaml (npm) (malicious package)
- [MAL-2025-144758](https://insights.sbomify.com/MAL-2025-144758/): Malicious code in materialize-winston-rate-limiter-webdriver-mocha (npm) (malicious package)
- [MAL-2025-144757](https://insights.sbomify.com/MAL-2025-144757/): Malicious code in materialize-titan-start-morgan (npm) (malicious package)
- [MAL-2025-144756](https://insights.sbomify.com/MAL-2025-144756/): Malicious code in materialize-spinner-superagent-castor (npm) (malicious package)
- [MAL-2025-144755](https://insights.sbomify.com/MAL-2025-144755/): Malicious code in materialize-sequelize-antd-rollup (npm) (malicious package)
- [MAL-2025-144754](https://insights.sbomify.com/MAL-2025-144754/): Malicious code in materialize-semantic-ui-cache-spinner (npm) (malicious package)
- [MAL-2025-144753](https://insights.sbomify.com/MAL-2025-144753/): Malicious code in materialize-rocket-standard-nestjs (npm) (malicious package)
- [MAL-2025-144752](https://insights.sbomify.com/MAL-2025-144752/): Malicious code in materialize-regulus-apollo-writable (npm) (malicious package)
- [MAL-2025-144751](https://insights.sbomify.com/MAL-2025-144751/): Malicious code in materialize-puppeteer-wasat-slides (npm) (malicious package)
- [MAL-2025-144750](https://insights.sbomify.com/MAL-2025-144750/): Malicious code in materialize-postcss-triton-dagda (npm) (malicious package)
- [MAL-2025-14475](https://insights.sbomify.com/MAL-2025-14475/): Malicious code in analyze-lambda-daemon-kappa-file (npm) (malicious package)
- [MAL-2025-144749](https://insights.sbomify.com/MAL-2025-144749/): Malicious code in materialize-polaris-gatsby-bunyan (npm) (malicious package)
- [MAL-2025-144748](https://insights.sbomify.com/MAL-2025-144748/): Malicious code in materialize-perseus-cors-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-144747](https://insights.sbomify.com/MAL-2025-144747/): Malicious code in materialize-meteor-frontend-centaurus (npm) (malicious package)
- [MAL-2025-144746](https://insights.sbomify.com/MAL-2025-144746/): Malicious code in materialize-materialize-mini-css-extract-plugin-readable (npm) (malicious package)
- [MAL-2025-144745](https://insights.sbomify.com/MAL-2025-144745/): Malicious code in materialize-lint-staged-supervisor-astro (npm) (malicious package)
- [MAL-2025-144744](https://insights.sbomify.com/MAL-2025-144744/): Malicious code in materialize-hyperion-restart-loglevel (npm) (malicious package)
- [MAL-2025-144743](https://insights.sbomify.com/MAL-2025-144743/): Malicious code in materialize-fork-redis-react-bootstrap (npm) (malicious package)
- [MAL-2025-144742](https://insights.sbomify.com/MAL-2025-144742/): Malicious code in materialize-farout-postcss-loader-umbra (npm) (malicious package)
- [MAL-2025-144741](https://insights.sbomify.com/MAL-2025-144741/): Malicious code in materialize-express-pipe-rest (npm) (malicious package)
- [MAL-2025-144740](https://insights.sbomify.com/MAL-2025-144740/): Malicious code in materialize-europa-metalsmith-izar (npm) (malicious package)
- [MAL-2025-14474](https://insights.sbomify.com/MAL-2025-14474/): Malicious code in analyze-key-await-process-gamma (npm) (malicious package)
- [MAL-2025-144739](https://insights.sbomify.com/MAL-2025-144739/): Malicious code in materialize-europa-install-query (npm) (malicious package)
- [MAL-2025-144738](https://insights.sbomify.com/MAL-2025-144738/): Malicious code in materialize-electron-builder-deimos-mui (npm) (malicious package)
- [MAL-2025-144737](https://insights.sbomify.com/MAL-2025-144737/): Malicious code in materialize-css-loader-install-dagda (npm) (malicious package)
- [MAL-2025-144736](https://insights.sbomify.com/MAL-2025-144736/): Malicious code in materialize-celeste-eridanus-aldebaran (npm) (malicious package)
- [MAL-2025-144735](https://insights.sbomify.com/MAL-2025-144735/): Malicious code in materialize-cache-socketio-eleventy (npm) (malicious package)
- [MAL-2025-144734](https://insights.sbomify.com/MAL-2025-144734/): Malicious code in materialize-await-equinox-parcel (npm) (malicious package)
- [MAL-2025-144733](https://insights.sbomify.com/MAL-2025-144733/): Malicious code in materialize-await-cosmiconfig-slides (npm) (malicious package)
- [MAL-2025-144732](https://insights.sbomify.com/MAL-2025-144732/): Malicious code in markdownlint-zephyr-perseus-mutation (npm) (malicious package)
- [MAL-2025-144731](https://insights.sbomify.com/MAL-2025-144731/): Malicious code in markdownlint-start-materialize-ceres (npm) (malicious package)
- [MAL-2025-144730](https://insights.sbomify.com/MAL-2025-144730/): Malicious code in markdownlint-standard-run-script-comet (npm) (malicious package)
- [MAL-2025-14473](https://insights.sbomify.com/MAL-2025-14473/): Malicious code in analytics-paypal (npm) (malicious package)
- [MAL-2025-144729](https://insights.sbomify.com/MAL-2025-144729/): Malicious code in markdownlint-solis-fornax-got (npm) (malicious package)
- [MAL-2025-144728](https://insights.sbomify.com/MAL-2025-144728/): Malicious code in markdownlint-sirius-rehype-farout (npm) (malicious package)
- [MAL-2025-144727](https://insights.sbomify.com/MAL-2025-144727/): Malicious code in markdownlint-sedna-flare-grus (npm) (malicious package)
- [MAL-2025-144726](https://insights.sbomify.com/MAL-2025-144726/): Malicious code in markdownlint-procyon-magellan-grunt (npm) (malicious package)
- [MAL-2025-144725](https://insights.sbomify.com/MAL-2025-144725/): Malicious code in markdownlint-prettier-stylelint-impulse-altair (npm) (malicious package)
- [MAL-2025-144724](https://insights.sbomify.com/MAL-2025-144724/): Malicious code in markdownlint-phoebe-aquarius-got (npm) (malicious package)
- [MAL-2025-144723](https://insights.sbomify.com/MAL-2025-144723/): Malicious code in markdownlint-lacerta-solis-nconf (npm) (malicious package)
- [MAL-2025-144722](https://insights.sbomify.com/MAL-2025-144722/): Malicious code in markdownlint-cache-kastra-webpack (npm) (malicious package)
- [MAL-2025-144721](https://insights.sbomify.com/MAL-2025-144721/): Malicious code in markdownlint-antares-google-koa (npm) (malicious package)
- [MAL-2025-144720](https://insights.sbomify.com/MAL-2025-144720/): Malicious code in markdownlint-antares-development-nuxtjs (npm) (malicious package)
- [MAL-2025-14472](https://insights.sbomify.com/MAL-2025-14472/): Malicious code in analytics-here-hac (npm) (malicious package)
- [MAL-2025-144719](https://insights.sbomify.com/MAL-2025-144719/): Malicious code in markdownlint-algol-chai-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-144718](https://insights.sbomify.com/MAL-2025-144718/): Malicious code in markdown-xanthus-less-loader-hermes (npm) (malicious package)
- [MAL-2025-144717](https://insights.sbomify.com/MAL-2025-144717/): Malicious code in markdown-warp-gridsome-jovian (npm) (malicious package)
- [MAL-2025-144716](https://insights.sbomify.com/MAL-2025-144716/): Malicious code in markdown-socketio-public-child-process (npm) (malicious package)
- [MAL-2025-144715](https://insights.sbomify.com/MAL-2025-144715/): Malicious code in markdown-rollup-plugin-quark-zephyr (npm) (malicious package)
- [MAL-2025-144714](https://insights.sbomify.com/MAL-2025-144714/): Malicious code in markdown-prompts-pegasus-sirius (npm) (malicious package)
- [MAL-2025-144713](https://insights.sbomify.com/MAL-2025-144713/): Malicious code in markdown-polaris-vega-sass-loader (npm) (malicious package)
- [MAL-2025-144712](https://insights.sbomify.com/MAL-2025-144712/): Malicious code in markdown-pdf-xerxes-janus-leda (npm) (malicious package)
- [MAL-2025-144711](https://insights.sbomify.com/MAL-2025-144711/): Malicious code in markdown-pdf-xerxes-eslint-config-nodejs (npm) (malicious package)
- [MAL-2025-144710](https://insights.sbomify.com/MAL-2025-144710/): Malicious code in markdown-pdf-wasat-luna-browserify (npm) (malicious package)
- [MAL-2025-14471](https://insights.sbomify.com/MAL-2025-14471/): Malicious code in analast (npm) (malicious package)
- [MAL-2025-144709](https://insights.sbomify.com/MAL-2025-144709/): Malicious code in markdown-pdf-umbriel-jekyll-io (npm) (malicious package)
- [MAL-2025-144708](https://insights.sbomify.com/MAL-2025-144708/): Malicious code in markdown-pdf-sqlite-zephyr-warp (npm) (malicious package)
- [MAL-2025-144707](https://insights.sbomify.com/MAL-2025-144707/): Malicious code in markdown-pdf-rimraf-kronos-orbit (npm) (malicious package)
- [MAL-2025-144706](https://insights.sbomify.com/MAL-2025-144706/): Malicious code in markdown-pdf-restart-scripts-yaml (npm) (malicious package)
- [MAL-2025-144705](https://insights.sbomify.com/MAL-2025-144705/): Malicious code in markdown-pdf-remark-oberon-phoenix (npm) (malicious package)
- [MAL-2025-144704](https://insights.sbomify.com/MAL-2025-144704/): Malicious code in markdown-pdf-perseus-aquarius-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-144703](https://insights.sbomify.com/MAL-2025-144703/): Malicious code in markdown-pdf-pavo-lyra-eslint (npm) (malicious package)
- [MAL-2025-144702](https://insights.sbomify.com/MAL-2025-144702/): Malicious code in markdown-pdf-passport-webdriverio-mocha (npm) (malicious package)
- [MAL-2025-144701](https://insights.sbomify.com/MAL-2025-144701/): Malicious code in markdown-pdf-ora-despina-pegasus (npm) (malicious package)
- [MAL-2025-144700](https://insights.sbomify.com/MAL-2025-144700/): Malicious code in markdown-pdf-optimize-css-assets-webpack-plugin-ursa-envconfig (npm) (malicious package)
- [MAL-2025-14470](https://insights.sbomify.com/MAL-2025-14470/): Malicious code in anairc (npm) (malicious package)
- [MAL-2025-1447](https://insights.sbomify.com/MAL-2025-1447/): Malicious code in weex-internal (npm) (malicious package)
- [MAL-2025-144699](https://insights.sbomify.com/MAL-2025-144699/): Malicious code in markdown-pdf-ophiuchus-lint-dynamo (npm) (malicious package)
- [MAL-2025-144698](https://insights.sbomify.com/MAL-2025-144698/): Malicious code in markdown-pdf-oberon-rest-atlas (npm) (malicious package)
- [MAL-2025-144697](https://insights.sbomify.com/MAL-2025-144697/): Malicious code in markdown-pdf-nebula-ursa-magellan (npm) (malicious package)
- [MAL-2025-144696](https://insights.sbomify.com/MAL-2025-144696/): Malicious code in markdown-pdf-mongoose-hapi-janus (npm) (malicious package)
- [MAL-2025-144695](https://insights.sbomify.com/MAL-2025-144695/): Malicious code in markdown-pdf-mocha-lynx-nightwatch (npm) (malicious package)
- [MAL-2025-144694](https://insights.sbomify.com/MAL-2025-144694/): Malicious code in markdown-pdf-metalsmith-vortex-geckodriver (npm) (malicious package)
- [MAL-2025-144693](https://insights.sbomify.com/MAL-2025-144693/): Malicious code in markdown-pdf-mdx-eclipse-hyperion (npm) (malicious package)
- [MAL-2025-144692](https://insights.sbomify.com/MAL-2025-144692/): Malicious code in markdown-pdf-ganymede-miranda-postcss (npm) (malicious package)
- [MAL-2025-144691](https://insights.sbomify.com/MAL-2025-144691/): Malicious code in markdown-pdf-frontend-rimraf-start (npm) (malicious package)
- [MAL-2025-144690](https://insights.sbomify.com/MAL-2025-144690/): Malicious code in markdown-pdf-dagda-equinox-xenos (npm) (malicious package)
- [MAL-2025-14469](https://insights.sbomify.com/MAL-2025-14469/): Malicious code in anacrusis (npm) (malicious package)
- [MAL-2025-144689](https://insights.sbomify.com/MAL-2025-144689/): Malicious code in markdown-pdf-dactyl-ini-fetch (npm) (malicious package)
- [MAL-2025-144688](https://insights.sbomify.com/MAL-2025-144688/): Malicious code in markdown-pdf-child-process-chakra-ui-winston (npm) (malicious package)
- [MAL-2025-144687](https://insights.sbomify.com/MAL-2025-144687/): Malicious code in markdown-pdf-callisto-lint-standard (npm) (malicious package)
- [MAL-2025-144686](https://insights.sbomify.com/MAL-2025-144686/): Malicious code in markdown-pdf-cache-apollo-cluster (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1435/