# Vulnerabilities published in 2025


- [MAL-2025-144595](https://insights.sbomify.com/MAL-2025-144595/): Malicious code in lynx-lyra-airbnb-sagitta (npm) (malicious package)
- [MAL-2025-144594](https://insights.sbomify.com/MAL-2025-144594/): Malicious code in lynx-iota-cz-conventional-changelog-browserify (npm) (malicious package)
- [MAL-2025-144593](https://insights.sbomify.com/MAL-2025-144593/): Malicious code in lynx-install-nightmare-private (npm) (malicious package)
- [MAL-2025-144592](https://insights.sbomify.com/MAL-2025-144592/): Malicious code in lynx-element-ui-radiant-altair (npm) (malicious package)
- [MAL-2025-144591](https://insights.sbomify.com/MAL-2025-144591/): Malicious code in lynx-dotenv-safe-nodejs-json (npm) (malicious package)
- [MAL-2025-144590](https://insights.sbomify.com/MAL-2025-144590/): Malicious code in lynx-csv-bunyan-repository (npm) (malicious package)
- [MAL-2025-14459](https://insights.sbomify.com/MAL-2025-14459/): Malicious code in amongushacksv3 (npm) (malicious package)
- [MAL-2025-144589](https://insights.sbomify.com/MAL-2025-144589/): Malicious code in lynx-avior-pino-hydra (npm) (malicious package)
- [MAL-2025-144588](https://insights.sbomify.com/MAL-2025-144588/): Malicious code in luna-xenos-relay-carpo (npm) (malicious package)
- [MAL-2025-144587](https://insights.sbomify.com/MAL-2025-144587/): Malicious code in luna-umbra-chalk-auriga (npm) (malicious package)
- [MAL-2025-144586](https://insights.sbomify.com/MAL-2025-144586/): Malicious code in luna-ultra-fetch-odin (npm) (malicious package)
- [MAL-2025-144585](https://insights.sbomify.com/MAL-2025-144585/): Malicious code in luna-toml-bunyan-csrf (npm) (malicious package)
- [MAL-2025-144584](https://insights.sbomify.com/MAL-2025-144584/): Malicious code in luna-start-prettier-stylelint-rest (npm) (malicious package)
- [MAL-2025-144583](https://insights.sbomify.com/MAL-2025-144583/): Malicious code in luna-spectron-webdriver-miranda-scripts (npm) (malicious package)
- [MAL-2025-144582](https://insights.sbomify.com/MAL-2025-144582/): Malicious code in luna-sass-loader-centaurus-aether (npm) (malicious package)
- [MAL-2025-144581](https://insights.sbomify.com/MAL-2025-144581/): Malicious code in luna-request-triton-json (npm) (malicious package)
- [MAL-2025-144580](https://insights.sbomify.com/MAL-2025-144580/): Malicious code in luna-query-hyperion-hyperion (npm) (malicious package)
- [MAL-2025-14458](https://insights.sbomify.com/MAL-2025-14458/): Malicious code in amongushacksv2 (npm) (malicious package)
- [MAL-2025-144579](https://insights.sbomify.com/MAL-2025-144579/): Malicious code in luna-query-hyperion-cordelia (npm) (malicious package)
- [MAL-2025-144578](https://insights.sbomify.com/MAL-2025-144578/): Malicious code in luna-phoebe-despina-cosmos (npm) (malicious package)
- [MAL-2025-144577](https://insights.sbomify.com/MAL-2025-144577/): Malicious code in luna-perseus-process-pavo (npm) (malicious package)
- [MAL-2025-144576](https://insights.sbomify.com/MAL-2025-144576/): Malicious code in luna-pegasus-nconf-zephyr (npm) (malicious package)
- [MAL-2025-144575](https://insights.sbomify.com/MAL-2025-144575/): Malicious code in luna-orbit-inquirer-convict (npm) (malicious package)
- [MAL-2025-144574](https://insights.sbomify.com/MAL-2025-144574/): Malicious code in luna-oauth-ophiuchus-wezen (npm) (malicious package)
- [MAL-2025-144573](https://insights.sbomify.com/MAL-2025-144573/): Malicious code in luna-nightwatch-pegasus-magellan (npm) (malicious package)
- [MAL-2025-144572](https://insights.sbomify.com/MAL-2025-144572/): Malicious code in luna-module-polaris-farout (npm) (malicious package)
- [MAL-2025-144571](https://insights.sbomify.com/MAL-2025-144571/): Malicious code in luna-alphard-carpo-kastra (npm) (malicious package)
- [MAL-2025-144570](https://insights.sbomify.com/MAL-2025-144570/): Malicious code in loopback-weywot-style-loader-gemini (npm) (malicious package)
- [MAL-2025-14457](https://insights.sbomify.com/MAL-2025-14457/): Malicious code in amongushacksv1 (npm) (malicious package)
- [MAL-2025-144569](https://insights.sbomify.com/MAL-2025-144569/): Malicious code in loopback-uninstall-europa-vulcan (npm) (malicious package)
- [MAL-2025-144568](https://insights.sbomify.com/MAL-2025-144568/): Malicious code in loopback-umbra-atlas-perseus (npm) (malicious package)
- [MAL-2025-144567](https://insights.sbomify.com/MAL-2025-144567/): Malicious code in loopback-transport-telesto-gatsby (npm) (malicious package)
- [MAL-2025-144566](https://insights.sbomify.com/MAL-2025-144566/): Malicious code in loopback-test-mongodb-sagitta (npm) (malicious package)
- [MAL-2025-144565](https://insights.sbomify.com/MAL-2025-144565/): Malicious code in loopback-socketio-restart-resolvers (npm) (malicious package)
- [MAL-2025-144564](https://insights.sbomify.com/MAL-2025-144564/): Malicious code in loopback-server-grunt-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-144563](https://insights.sbomify.com/MAL-2025-144563/): Malicious code in loopback-sequelize-concurrently-server (npm) (malicious package)
- [MAL-2025-144562](https://insights.sbomify.com/MAL-2025-144562/): Malicious code in loopback-sedna-vulcan-hexo (npm) (malicious package)
- [MAL-2025-144561](https://insights.sbomify.com/MAL-2025-144561/): Malicious code in loopback-readable-meissa-miranda (npm) (malicious package)
- [MAL-2025-144560](https://insights.sbomify.com/MAL-2025-144560/): Malicious code in loopback-puppeteer-orbit-configstore (npm) (malicious package)
- [MAL-2025-14456](https://insights.sbomify.com/MAL-2025-14456/): Malicious code in amongushacks2021 (npm) (malicious package)
- [MAL-2025-144559](https://insights.sbomify.com/MAL-2025-144559/): Malicious code in loopback-neptune-draco-concurrently (npm) (malicious package)
- [MAL-2025-144558](https://insights.sbomify.com/MAL-2025-144558/): Malicious code in loopback-mutation-sagitta-titan (npm) (malicious package)
- [MAL-2025-144557](https://insights.sbomify.com/MAL-2025-144557/): Malicious code in loopback-mensa-chai-mongoose (npm) (malicious package)
- [MAL-2025-144556](https://insights.sbomify.com/MAL-2025-144556/): Malicious code in loopback-local-phoenix-magellan (npm) (malicious package)
- [MAL-2025-144555](https://insights.sbomify.com/MAL-2025-144555/): Malicious code in loopback-kastra-soap-bulma (npm) (malicious package)
- [MAL-2025-144554](https://insights.sbomify.com/MAL-2025-144554/): Malicious code in loopback-jest-oberon-jsonp (npm) (malicious package)
- [MAL-2025-144553](https://insights.sbomify.com/MAL-2025-144553/): Malicious code in loopback-install-cosmos-juno (npm) (malicious package)
- [MAL-2025-144552](https://insights.sbomify.com/MAL-2025-144552/): Malicious code in loopback-global-levels-dorado (npm) (malicious package)
- [MAL-2025-144551](https://insights.sbomify.com/MAL-2025-144551/): Malicious code in loopback-gemini-bellatrix-ora (npm) (malicious package)
- [MAL-2025-144550](https://insights.sbomify.com/MAL-2025-144550/): Malicious code in loopback-frontend-prettier-plugin-markdown-spectron (npm) (malicious package)
- [MAL-2025-14455](https://insights.sbomify.com/MAL-2025-14455/): Malicious code in amongushacks (npm) (malicious package)
- [MAL-2025-144549](https://insights.sbomify.com/MAL-2025-144549/): Malicious code in loopback-framework-loopback-janus (npm) (malicious package)
- [MAL-2025-144548](https://insights.sbomify.com/MAL-2025-144548/): Malicious code in loopback-forever-polaris-middleware (npm) (malicious package)
- [MAL-2025-144547](https://insights.sbomify.com/MAL-2025-144547/): Malicious code in loopback-firebase-postgres-luna (npm) (malicious package)
- [MAL-2025-144546](https://insights.sbomify.com/MAL-2025-144546/): Malicious code in loopback-elara-procyon-loop (npm) (malicious package)
- [MAL-2025-144545](https://insights.sbomify.com/MAL-2025-144545/): Malicious code in loopback-cors-scorpius-quasar (npm) (malicious package)
- [MAL-2025-144544](https://insights.sbomify.com/MAL-2025-144544/): Malicious code in loopback-changelog-nova-deimos (npm) (malicious package)
- [MAL-2025-144543](https://insights.sbomify.com/MAL-2025-144543/): Malicious code in loopback-bunyan-kinetic-neptune (npm) (malicious package)
- [MAL-2025-144542](https://insights.sbomify.com/MAL-2025-144542/): Malicious code in loopback-bootstrap-yonder-iota (npm) (malicious package)
- [MAL-2025-144541](https://insights.sbomify.com/MAL-2025-144541/): Malicious code in loop-zenith-chromedriver-kronos (npm) (malicious package)
- [MAL-2025-144540](https://insights.sbomify.com/MAL-2025-144540/): Malicious code in loop-yonder-betelgeuse-sync (npm) (malicious package)
- [MAL-2025-14454](https://insights.sbomify.com/MAL-2025-14454/): Malicious code in amnhcms (npm) (malicious package)
- [MAL-2025-144539](https://insights.sbomify.com/MAL-2025-144539/): Malicious code in loop-xerxes-markdown-fomalhaut (npm) (malicious package)
- [MAL-2025-144538](https://insights.sbomify.com/MAL-2025-144538/): Malicious code in loop-xenos-config-pegasus (npm) (malicious package)
- [MAL-2025-144537](https://insights.sbomify.com/MAL-2025-144537/): Malicious code in loop-virgo-impulse-magellan (npm) (malicious package)
- [MAL-2025-144536](https://insights.sbomify.com/MAL-2025-144536/): Malicious code in loop-style-loader-webpack-promise (npm) (malicious package)
- [MAL-2025-144535](https://insights.sbomify.com/MAL-2025-144535/): Malicious code in loop-solis-charon-react-bootstrap (npm) (malicious package)
- [MAL-2025-144534](https://insights.sbomify.com/MAL-2025-144534/): Malicious code in loop-scripts-koa-oauth (npm) (malicious package)
- [MAL-2025-144533](https://insights.sbomify.com/MAL-2025-144533/): Malicious code in loop-sails-commitizen-resolvers (npm) (malicious package)
- [MAL-2025-144532](https://insights.sbomify.com/MAL-2025-144532/): Malicious code in loop-sadr-mensa-cassini (npm) (malicious package)
- [MAL-2025-144531](https://insights.sbomify.com/MAL-2025-144531/): Malicious code in loop-quark-rimraf-hyperion (npm) (malicious package)
- [MAL-2025-144530](https://insights.sbomify.com/MAL-2025-144530/): Malicious code in loop-ophiuchus-fetch-antares (npm) (malicious package)
- [MAL-2025-14453](https://insights.sbomify.com/MAL-2025-14453/): Malicious code in amethyst-ztku8-20y7b-jungle-project (npm) (malicious package)
- [MAL-2025-144529](https://insights.sbomify.com/MAL-2025-144529/): Malicious code in loop-mensa-xml-winston (npm) (malicious package)
- [MAL-2025-144528](https://insights.sbomify.com/MAL-2025-144528/): Malicious code in loop-loglevel-rimraf-despina (npm) (malicious package)
- [MAL-2025-144527](https://insights.sbomify.com/MAL-2025-144527/): Malicious code in loop-hugo-cz-conventional-changelog-markdown (npm) (malicious package)
- [MAL-2025-144526](https://insights.sbomify.com/MAL-2025-144526/): Malicious code in loop-geckodriver-ceres-neptune (npm) (malicious package)
- [MAL-2025-144525](https://insights.sbomify.com/MAL-2025-144525/): Malicious code in loglevel-zenobia-uninstall-draco (npm) (malicious package)
- [MAL-2025-144524](https://insights.sbomify.com/MAL-2025-144524/): Malicious code in loglevel-xenos-norma-winston (npm) (malicious package)
- [MAL-2025-144523](https://insights.sbomify.com/MAL-2025-144523/): Malicious code in loglevel-xenos-child-process-zenith (npm) (malicious package)
- [MAL-2025-144522](https://insights.sbomify.com/MAL-2025-144522/): Malicious code in loglevel-testcafe-kinetic-testcafe (npm) (malicious package)
- [MAL-2025-144521](https://insights.sbomify.com/MAL-2025-144521/): Malicious code in loglevel-telesto-pino-pulsar (npm) (malicious package)
- [MAL-2025-144520](https://insights.sbomify.com/MAL-2025-144520/): Malicious code in loglevel-run-script-cross-env-superagent (npm) (malicious package)
- [MAL-2025-14452](https://insights.sbomify.com/MAL-2025-14452/): Malicious code in amethyst-kzlga-fybv8-ultra-project (npm) (malicious package)
- [MAL-2025-144519](https://insights.sbomify.com/MAL-2025-144519/): Malicious code in loglevel-rate-limiter-markdown-pdf-update (npm) (malicious package)
- [MAL-2025-144518](https://insights.sbomify.com/MAL-2025-144518/): Malicious code in loglevel-prompts-xenos-node-config (npm) (malicious package)
- [MAL-2025-144517](https://insights.sbomify.com/MAL-2025-144517/): Malicious code in loglevel-postcss-pm2-rollup (npm) (malicious package)
- [MAL-2025-144516](https://insights.sbomify.com/MAL-2025-144516/): Malicious code in loglevel-morgan-quito-altair (npm) (malicious package)
- [MAL-2025-144515](https://insights.sbomify.com/MAL-2025-144515/): Malicious code in loglevel-mensa-pegasus-semantic-ui (npm) (malicious package)
- [MAL-2025-144514](https://insights.sbomify.com/MAL-2025-144514/): Malicious code in loglevel-markdown-wolf-elektra (npm) (malicious package)
- [MAL-2025-144513](https://insights.sbomify.com/MAL-2025-144513/): Malicious code in loglevel-lynx-rate-limiter-webdriverio (npm) (malicious package)
- [MAL-2025-144512](https://insights.sbomify.com/MAL-2025-144512/): Malicious code in loglevel-kinetic-halley-nestjs (npm) (malicious package)
- [MAL-2025-144511](https://insights.sbomify.com/MAL-2025-144511/): Malicious code in loglevel-ini-puppeteer-lyra (npm) (malicious package)
- [MAL-2025-144510](https://insights.sbomify.com/MAL-2025-144510/): Malicious code in loglevel-indus-spawn-scorpius (npm) (malicious package)
- [MAL-2025-14451](https://insights.sbomify.com/MAL-2025-14451/): Malicious code in amethyst-4swde-b4vlx-lunar-project (npm) (malicious package)
- [MAL-2025-144509](https://insights.sbomify.com/MAL-2025-144509/): Malicious code in loglevel-impulse-taurus-morgan (npm) (malicious package)
- [MAL-2025-144508](https://insights.sbomify.com/MAL-2025-144508/): Malicious code in loglevel-hydra-lyra-shelljs (npm) (malicious package)
- [MAL-2025-144507](https://insights.sbomify.com/MAL-2025-144507/): Malicious code in loglevel-dorado-cygnus-apex (npm) (malicious package)
- [MAL-2025-144506](https://insights.sbomify.com/MAL-2025-144506/): Malicious code in loglevel-cross-env-exec-update (npm) (malicious package)
- [MAL-2025-144505](https://insights.sbomify.com/MAL-2025-144505/): Malicious code in loglevel-changelog-alphard-lint (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1437/