# Vulnerabilities published in 2025 - [MAL-2025-144685](https://insights.sbomify.com/MAL-2025-144685/): Malicious code in markdown-pdf-backend-colors-nightmare (npm) (malicious package) - [MAL-2025-144684](https://insights.sbomify.com/MAL-2025-144684/): Malicious code in markdown-morgan-aether-ini (npm) (malicious package) - [MAL-2025-144683](https://insights.sbomify.com/MAL-2025-144683/): Malicious code in markdown-loopback-ursa-zenith (npm) (malicious package) - [MAL-2025-144682](https://insights.sbomify.com/MAL-2025-144682/): Malicious code in markdown-elara-buffer-odin (npm) (malicious package) - [MAL-2025-144681](https://insights.sbomify.com/MAL-2025-144681/): Malicious code in markdown-bunyan-sass-loader-altair (npm) (malicious package) - [MAL-2025-144680](https://insights.sbomify.com/MAL-2025-144680/): Malicious code in markdown-async-chai-uninstall (npm) (malicious package) - [MAL-2025-14468](https://insights.sbomify.com/MAL-2025-14468/): Malicious code in an0n-chat-lib (npm) (malicious package) - [MAL-2025-144679](https://insights.sbomify.com/MAL-2025-144679/): Malicious code in markdown-apollo-transform-ora (npm) (malicious package) - [MAL-2025-144678](https://insights.sbomify.com/MAL-2025-144678/): Malicious code in markdown-antares-repository-apollo (npm) (malicious package) - [MAL-2025-144677](https://insights.sbomify.com/MAL-2025-144677/): Malicious code in magellan-yonder-library-miranda (npm) (malicious package) - [MAL-2025-144676](https://insights.sbomify.com/MAL-2025-144676/): Malicious code in magellan-xenon-bootes-xenos (npm) (malicious package) - [MAL-2025-144675](https://insights.sbomify.com/MAL-2025-144675/): Malicious code in magellan-webpack-global-vortex (npm) (malicious package) - [MAL-2025-144674](https://insights.sbomify.com/MAL-2025-144674/): Malicious code in magellan-webdriverio-shelljs-inquirer (npm) (malicious package) - [MAL-2025-144673](https://insights.sbomify.com/MAL-2025-144673/): Malicious code in magellan-vortex-update-ganymede (npm) (malicious package) - [MAL-2025-144672](https://insights.sbomify.com/MAL-2025-144672/): Malicious code in magellan-update-config-metalsmith (npm) (malicious package) - [MAL-2025-144671](https://insights.sbomify.com/MAL-2025-144671/): Malicious code in magellan-uninstall-centaurus-kronos (npm) (malicious package) - [MAL-2025-144670](https://insights.sbomify.com/MAL-2025-144670/): Malicious code in magellan-tool-materialize-oauth (npm) (malicious package) - [MAL-2025-14467](https://insights.sbomify.com/MAL-2025-14467/): Malicious code in amzn (npm) (malicious package) - [MAL-2025-144669](https://insights.sbomify.com/MAL-2025-144669/): Malicious code in magellan-toml-pyxis-spica (npm) (malicious package) - [MAL-2025-144668](https://insights.sbomify.com/MAL-2025-144668/): Malicious code in magellan-testcafe-jest-upgrade (npm) (malicious package) - [MAL-2025-144667](https://insights.sbomify.com/MAL-2025-144667/): Malicious code in magellan-standard-izar-nashira (npm) (malicious package) - [MAL-2025-144666](https://insights.sbomify.com/MAL-2025-144666/): Malicious code in magellan-socketio-selenium-request (npm) (malicious package) - [MAL-2025-144665](https://insights.sbomify.com/MAL-2025-144665/): Malicious code in magellan-slides-terser-mira (npm) (malicious package) - [MAL-2025-144664](https://insights.sbomify.com/MAL-2025-144664/): Malicious code in magellan-selenium-webdriver-manager-chromedriver (npm) (malicious package) - [MAL-2025-144663](https://insights.sbomify.com/MAL-2025-144663/): Malicious code in magellan-sedna-warp-cors (npm) (malicious package) - [MAL-2025-144662](https://insights.sbomify.com/MAL-2025-144662/): Malicious code in magellan-sedna-mysql-rimraf (npm) (malicious package) - [MAL-2025-144661](https://insights.sbomify.com/MAL-2025-144661/): Malicious code in magellan-sass-loader-hermes-vortex (npm) (malicious package) - [MAL-2025-144660](https://insights.sbomify.com/MAL-2025-144660/): Malicious code in magellan-rocket-chariklo-nconf (npm) (malicious package) - [MAL-2025-14466](https://insights.sbomify.com/MAL-2025-14466/): Malicious code in amsgroupl (npm) (malicious package) - [MAL-2025-144659](https://insights.sbomify.com/MAL-2025-144659/): Malicious code in magellan-reveal-md-release-it-mocha (npm) (malicious package) - [MAL-2025-144658](https://insights.sbomify.com/MAL-2025-144658/): Malicious code in magellan-protractor-wasat-wezen (npm) (malicious package) - [MAL-2025-144657](https://insights.sbomify.com/MAL-2025-144657/): Malicious code in magellan-prompts-spectron-react-bootstrap (npm) (malicious package) - [MAL-2025-144656](https://insights.sbomify.com/MAL-2025-144656/): Malicious code in magellan-playwright-sirius-leda (npm) (malicious package) - [MAL-2025-144655](https://insights.sbomify.com/MAL-2025-144655/): Malicious code in magellan-pavo-loopback-frontend (npm) (malicious package) - [MAL-2025-144654](https://insights.sbomify.com/MAL-2025-144654/): Malicious code in magellan-nodejs-upgrade-hyperion (npm) (malicious package) - [MAL-2025-144653](https://insights.sbomify.com/MAL-2025-144653/): Malicious code in magellan-mongodb-fornax-callback (npm) (malicious package) - [MAL-2025-144652](https://insights.sbomify.com/MAL-2025-144652/): Malicious code in magellan-module-apex-hyperion (npm) (malicious package) - [MAL-2025-144651](https://insights.sbomify.com/MAL-2025-144651/): Malicious code in magellan-mocha-xerxes-octans (npm) (malicious package) - [MAL-2025-144650](https://insights.sbomify.com/MAL-2025-144650/): Malicious code in magellan-miranda-element-ui-npm (npm) (malicious package) - [MAL-2025-14465](https://insights.sbomify.com/MAL-2025-14465/): Malicious code in ams-iframe-injector (npm) (malicious package) - [MAL-2025-144649](https://insights.sbomify.com/MAL-2025-144649/): Malicious code in magellan-middleware-protractor-postcss-loader (npm) (malicious package) - [MAL-2025-144648](https://insights.sbomify.com/MAL-2025-144648/): Malicious code in magellan-meissa-oauth-library (npm) (malicious package) - [MAL-2025-144647](https://insights.sbomify.com/MAL-2025-144647/): Malicious code in magellan-meissa-mini-css-extract-plugin-dorado (npm) (malicious package) - [MAL-2025-144646](https://insights.sbomify.com/MAL-2025-144646/): Malicious code in magellan-markdownlint-concurrently-wasat (npm) (malicious package) - [MAL-2025-144645](https://insights.sbomify.com/MAL-2025-144645/): Malicious code in magellan-levels-cosmos-solis (npm) (malicious package) - [MAL-2025-144644](https://insights.sbomify.com/MAL-2025-144644/): Malicious code in magellan-less-loader-proxima-commitlint (npm) (malicious package) - [MAL-2025-144643](https://insights.sbomify.com/MAL-2025-144643/): Malicious code in magellan-karma-barnard-lint (npm) (malicious package) - [MAL-2025-144642](https://insights.sbomify.com/MAL-2025-144642/): Malicious code in magellan-jupiter-jupiter-iota (npm) (malicious package) - [MAL-2025-144641](https://insights.sbomify.com/MAL-2025-144641/): Malicious code in magellan-ignite-dotenv-safe-foundation (npm) (malicious package) - [MAL-2025-144640](https://insights.sbomify.com/MAL-2025-144640/): Malicious code in magellan-halley-xenos-axios (npm) (malicious package) - [MAL-2025-14464](https://insights.sbomify.com/MAL-2025-14464/): Malicious code in amqplib-rpc2 (npm) (malicious package) - [MAL-2025-144639](https://insights.sbomify.com/MAL-2025-144639/): Malicious code in magellan-gravity-rehype-proxima (npm) (malicious package) - [MAL-2025-144638](https://insights.sbomify.com/MAL-2025-144638/): Malicious code in magellan-graphql-levels-inquirer (npm) (malicious package) - [MAL-2025-144637](https://insights.sbomify.com/MAL-2025-144637/): Malicious code in magellan-got-pm2-jest (npm) (malicious package) - [MAL-2025-144636](https://insights.sbomify.com/MAL-2025-144636/): Malicious code in magellan-frontend-loopback-cypress (npm) (malicious package) - [MAL-2025-144635](https://insights.sbomify.com/MAL-2025-144635/): Malicious code in magellan-fork-colors-fomalhaut (npm) (malicious package) - [MAL-2025-144634](https://insights.sbomify.com/MAL-2025-144634/): Malicious code in magellan-flare-duplex-izar (npm) (malicious package) - [MAL-2025-144633](https://insights.sbomify.com/MAL-2025-144633/): Malicious code in magellan-elara-galaxy-exec (npm) (malicious package) - [MAL-2025-144632](https://insights.sbomify.com/MAL-2025-144632/): Malicious code in magellan-dorado-puppeteer-gatsby (npm) (malicious package) - [MAL-2025-144631](https://insights.sbomify.com/MAL-2025-144631/): Malicious code in magellan-deneb-schema-soap (npm) (malicious package) - [MAL-2025-144630](https://insights.sbomify.com/MAL-2025-144630/): Malicious code in magellan-cross-env-fornax-firebase (npm) (malicious package) - [MAL-2025-14463](https://insights.sbomify.com/MAL-2025-14463/): Malicious code in ampulet (npm) (malicious package) - [MAL-2025-144629](https://insights.sbomify.com/MAL-2025-144629/): Malicious code in magellan-cosmiconfig-postgres-webdriver-manager (npm) (malicious package) - [MAL-2025-144628](https://insights.sbomify.com/MAL-2025-144628/): Malicious code in magellan-concurrently-markdown-less (npm) (malicious package) - [MAL-2025-144627](https://insights.sbomify.com/MAL-2025-144627/): Malicious code in magellan-cli-despina-xerxes (npm) (malicious package) - [MAL-2025-144626](https://insights.sbomify.com/MAL-2025-144626/): Malicious code in magellan-callisto-eridanus-ophiuchus (npm) (malicious package) - [MAL-2025-144625](https://insights.sbomify.com/MAL-2025-144625/): Malicious code in magellan-cache-backend-halley (npm) (malicious package) - [MAL-2025-144624](https://insights.sbomify.com/MAL-2025-144624/): Malicious code in magellan-blitz-atlas-child-process (npm) (malicious package) - [MAL-2025-144623](https://insights.sbomify.com/MAL-2025-144623/): Malicious code in magellan-auth0-markdownlint-puppeteer (npm) (malicious package) - [MAL-2025-144622](https://insights.sbomify.com/MAL-2025-144622/): Malicious code in magellan-astro-taurus-slides (npm) (malicious package) - [MAL-2025-144621](https://insights.sbomify.com/MAL-2025-144621/): Malicious code in magellan-alphard-cygnus-sirius (npm) (malicious package) - [MAL-2025-144620](https://insights.sbomify.com/MAL-2025-144620/): Malicious code in magellan-algol-websockets-commitlint (npm) (malicious package) - [MAL-2025-14462](https://insights.sbomify.com/MAL-2025-14462/): Malicious code in ampseed (npm) (malicious package) - [MAL-2025-144619](https://insights.sbomify.com/MAL-2025-144619/): Malicious code in lyra-winston-nightwatch-antd (npm) (malicious package) - [MAL-2025-144618](https://insights.sbomify.com/MAL-2025-144618/): Malicious code in lyra-wasat-hugo-nashira (npm) (malicious package) - [MAL-2025-144617](https://insights.sbomify.com/MAL-2025-144617/): Malicious code in lyra-unuk-rocket-upgrade (npm) (malicious package) - [MAL-2025-144616](https://insights.sbomify.com/MAL-2025-144616/): Malicious code in lyra-scripts-pavo-impulse (npm) (malicious package) - [MAL-2025-144615](https://insights.sbomify.com/MAL-2025-144615/): Malicious code in lyra-schema-carina-materialize (npm) (malicious package) - [MAL-2025-144614](https://insights.sbomify.com/MAL-2025-144614/): Malicious code in lyra-phoebe-backend-nestjs (npm) (malicious package) - [MAL-2025-144613](https://insights.sbomify.com/MAL-2025-144613/): Malicious code in lyra-leda-css-loader-orbit (npm) (malicious package) - [MAL-2025-144612](https://insights.sbomify.com/MAL-2025-144612/): Malicious code in lyra-kastra-nodemon-cz-conventional-changelog (npm) (malicious package) - [MAL-2025-144611](https://insights.sbomify.com/MAL-2025-144611/): Malicious code in lyra-jasmine-acamar-pyxis (npm) (malicious package) - [MAL-2025-144610](https://insights.sbomify.com/MAL-2025-144610/): Malicious code in lyra-hexo-elektra-acamar (npm) (malicious package) - [MAL-2025-14461](https://insights.sbomify.com/MAL-2025-14461/): Malicious code in ampscript (npm) (malicious package) - [MAL-2025-144609](https://insights.sbomify.com/MAL-2025-144609/): Malicious code in lyra-hapi-airbnb-protractor (npm) (malicious package) - [MAL-2025-144608](https://insights.sbomify.com/MAL-2025-144608/): Malicious code in lyra-grus-csv-dotenv-parse-variables (npm) (malicious package) - [MAL-2025-144607](https://insights.sbomify.com/MAL-2025-144607/): Malicious code in lyra-eleventy-phenomic-css-loader (npm) (malicious package) - [MAL-2025-144606](https://insights.sbomify.com/MAL-2025-144606/): Malicious code in lyra-elara-mongodb-firebase (npm) (malicious package) - [MAL-2025-144605](https://insights.sbomify.com/MAL-2025-144605/): Malicious code in lyra-castor-fornax-orbit (npm) (malicious package) - [MAL-2025-144604](https://insights.sbomify.com/MAL-2025-144604/): Malicious code in lyra-buffer-sirius-phoebe (npm) (malicious package) - [MAL-2025-144603](https://insights.sbomify.com/MAL-2025-144603/): Malicious code in lyra-backend-spectron-webdriver-prompts (npm) (malicious package) - [MAL-2025-144602](https://insights.sbomify.com/MAL-2025-144602/): Malicious code in lyra-aurora-optimize-css-assets-webpack-plugin-dagda (npm) (malicious package) - [MAL-2025-144601](https://insights.sbomify.com/MAL-2025-144601/): Malicious code in lynx-yildun-csv-xenon (npm) (malicious package) - [MAL-2025-144600](https://insights.sbomify.com/MAL-2025-144600/): Malicious code in lynx-superagent-neptune-venus (npm) (malicious package) - [MAL-2025-14460](https://insights.sbomify.com/MAL-2025-14460/): Malicious code in amphitryo (npm) (malicious package) - [MAL-2025-1446](https://insights.sbomify.com/MAL-2025-1446/): Malicious code in weex-dev (npm) (malicious package) - [MAL-2025-144599](https://insights.sbomify.com/MAL-2025-144599/): Malicious code in lynx-rollup-centaurus-start (npm) (malicious package) - [MAL-2025-144598](https://insights.sbomify.com/MAL-2025-144598/): Malicious code in lynx-parcel-telesto-postcss (npm) (malicious package) - [MAL-2025-144597](https://insights.sbomify.com/MAL-2025-144597/): Malicious code in lynx-node-sass-rocket-taurus (npm) (malicious package) - [MAL-2025-144596](https://insights.sbomify.com/MAL-2025-144596/): Malicious code in lynx-node-sass-hermes-json (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1436/