# Vulnerabilities published in 2025 - [MAL-2025-144504](https://insights.sbomify.com/MAL-2025-144504/): Malicious code in loglevel-chakra-ui-galaxy-ophiuchus (npm) (malicious package) - [MAL-2025-144503](https://insights.sbomify.com/MAL-2025-144503/): Malicious code in loglevel-ceres-quito-kinetic (npm) (malicious package) - [MAL-2025-144502](https://insights.sbomify.com/MAL-2025-144502/): Malicious code in local-xo-supervisor-prettier-stylelint (npm) (malicious package) - [MAL-2025-144501](https://insights.sbomify.com/MAL-2025-144501/): Malicious code in local-wezen-dotenv-safe-ultra (npm) (malicious package) - [MAL-2025-144500](https://insights.sbomify.com/MAL-2025-144500/): Malicious code in local-solis-spinner-aldebaran (npm) (malicious package) - [MAL-2025-14450](https://insights.sbomify.com/MAL-2025-14450/): Malicious code in amethyst-301km-w9k8k-indigo-project (npm) (malicious package) - [MAL-2025-1445](https://insights.sbomify.com/MAL-2025-1445/): Malicious code in toobit (npm) (malicious package) - [MAL-2025-144499](https://insights.sbomify.com/MAL-2025-144499/): Malicious code in local-sequelize-spectron-magellan (npm) (malicious package) - [MAL-2025-144498](https://insights.sbomify.com/MAL-2025-144498/): Malicious code in local-sequelize-canopus-janus (npm) (malicious package) - [MAL-2025-144497](https://insights.sbomify.com/MAL-2025-144497/): Malicious code in local-run-script-ophiuchus-global (npm) (malicious package) - [MAL-2025-144496](https://insights.sbomify.com/MAL-2025-144496/): Malicious code in local-relay-arcturus-rollup (npm) (malicious package) - [MAL-2025-144495](https://insights.sbomify.com/MAL-2025-144495/): Malicious code in local-registry-vega-prettier-plugin-markdown (npm) (malicious package) - [MAL-2025-144494](https://insights.sbomify.com/MAL-2025-144494/): Malicious code in local-prompts-webdriver-mocha-dotenv-safe (npm) (malicious package) - [MAL-2025-144493](https://insights.sbomify.com/MAL-2025-144493/): Malicious code in local-phoebe-ophiuchus-telesto (npm) (malicious package) - [MAL-2025-144492](https://insights.sbomify.com/MAL-2025-144492/): Malicious code in local-ophiuchus-nestjs-hyperion (npm) (malicious package) - [MAL-2025-144491](https://insights.sbomify.com/MAL-2025-144491/): Malicious code in local-odin-sync-public (npm) (malicious package) - [MAL-2025-144490](https://insights.sbomify.com/MAL-2025-144490/): Malicious code in local-loopback-lynx-titan (npm) (malicious package) - [MAL-2025-14449](https://insights.sbomify.com/MAL-2025-14449/): Malicious code in amethyst-2b7d4-vsh0l-dusk-project (npm) (malicious package) - [MAL-2025-144489](https://insights.sbomify.com/MAL-2025-144489/): Malicious code in local-less-local-parcel (npm) (malicious package) - [MAL-2025-144488](https://insights.sbomify.com/MAL-2025-144488/): Malicious code in local-hydra-lint-cypress (npm) (malicious package) - [MAL-2025-144487](https://insights.sbomify.com/MAL-2025-144487/): Malicious code in local-galaxy-css-loader-chariklo (npm) (malicious package) - [MAL-2025-144486](https://insights.sbomify.com/MAL-2025-144486/): Malicious code in local-fork-postgres-html-webpack-plugin (npm) (malicious package) - [MAL-2025-144485](https://insights.sbomify.com/MAL-2025-144485/): Malicious code in local-css-loader-ursa-venus (npm) (malicious package) - [MAL-2025-144484](https://insights.sbomify.com/MAL-2025-144484/): Malicious code in local-child-process-supervisor-miranda (npm) (malicious package) - [MAL-2025-144483](https://insights.sbomify.com/MAL-2025-144483/): Malicious code in local-callback-miranda-venus (npm) (malicious package) - [MAL-2025-144482](https://insights.sbomify.com/MAL-2025-144482/): Malicious code in local-auriga-miranda-xanadu (npm) (malicious package) - [MAL-2025-144481](https://insights.sbomify.com/MAL-2025-144481/): Malicious code in local-atlas-rate-limiter-yakutsk (npm) (malicious package) - [MAL-2025-144480](https://insights.sbomify.com/MAL-2025-144480/): Malicious code in local-aquarius-callback-airbnb (npm) (malicious package) - [MAL-2025-14448](https://insights.sbomify.com/MAL-2025-14448/): Malicious code in ambula (npm) (malicious package) - [MAL-2025-144479](https://insights.sbomify.com/MAL-2025-144479/): Malicious code in live-magenta-porcupine (npm) (malicious package) - [MAL-2025-144478](https://insights.sbomify.com/MAL-2025-144478/): Malicious code in lint-yaml-sirius-soap (npm) (malicious package) - [MAL-2025-144477](https://insights.sbomify.com/MAL-2025-144477/): Malicious code in lint-xo-ceres-mini-css-extract-plugin (npm) (malicious package) - [MAL-2025-144476](https://insights.sbomify.com/MAL-2025-144476/): Malicious code in lint-winston-schema-passport (npm) (malicious package) - [MAL-2025-144475](https://insights.sbomify.com/MAL-2025-144475/): Malicious code in lint-winston-browserify-airbnb (npm) (malicious package) - [MAL-2025-144474](https://insights.sbomify.com/MAL-2025-144474/): Malicious code in lint-toml-janus-cross-env (npm) (malicious package) - [MAL-2025-144473](https://insights.sbomify.com/MAL-2025-144473/): Malicious code in lint-standard-dependencies-meteor (npm) (malicious package) - [MAL-2025-144472](https://insights.sbomify.com/MAL-2025-144472/): Malicious code in lint-staged-xerxes-repository-metalsmith (npm) (malicious package) - [MAL-2025-144471](https://insights.sbomify.com/MAL-2025-144471/): Malicious code in lint-staged-xanadu-aldebaran-subscription (npm) (malicious package) - [MAL-2025-144470](https://insights.sbomify.com/MAL-2025-144470/): Malicious code in lint-staged-virgo-hyperion-tool (npm) (malicious package) - [MAL-2025-14447](https://insights.sbomify.com/MAL-2025-14447/): Malicious code in amber-w4un6-443ll-verdure-project (npm) (malicious package) - [MAL-2025-144469](https://insights.sbomify.com/MAL-2025-144469/): Malicious code in lint-staged-ultra-vega-polaris (npm) (malicious package) - [MAL-2025-144468](https://insights.sbomify.com/MAL-2025-144468/): Malicious code in lint-staged-terser-chakra-ui-node-config (npm) (malicious package) - [MAL-2025-144467](https://insights.sbomify.com/MAL-2025-144467/): Malicious code in lint-staged-sync-global-test (npm) (malicious package) - [MAL-2025-144466](https://insights.sbomify.com/MAL-2025-144466/): Malicious code in lint-staged-start-electron-builder-spectron (npm) (malicious package) - [MAL-2025-144465](https://insights.sbomify.com/MAL-2025-144465/): Malicious code in lint-staged-sirius-xo-juno (npm) (malicious package) - [MAL-2025-144464](https://insights.sbomify.com/MAL-2025-144464/): Malicious code in lint-staged-pyxis-webdriver-manager-solis (npm) (malicious package) - [MAL-2025-144463](https://insights.sbomify.com/MAL-2025-144463/): Malicious code in lint-staged-pegasus-chalk-spectron (npm) (malicious package) - [MAL-2025-144462](https://insights.sbomify.com/MAL-2025-144462/): Malicious code in lint-staged-mutation-orbit-triton (npm) (malicious package) - [MAL-2025-144461](https://insights.sbomify.com/MAL-2025-144461/): Malicious code in lint-staged-module-redis-ursa (npm) (malicious package) - [MAL-2025-144460](https://insights.sbomify.com/MAL-2025-144460/): Malicious code in lint-staged-link-promise-iota (npm) (malicious package) - [MAL-2025-14446](https://insights.sbomify.com/MAL-2025-14446/): Malicious code in amber-sunset-sha689-project (npm) (malicious package) - [MAL-2025-144459](https://insights.sbomify.com/MAL-2025-144459/): Malicious code in lint-staged-library-fork-perseus (npm) (malicious package) - [MAL-2025-144458](https://insights.sbomify.com/MAL-2025-144458/): Malicious code in lint-staged-gridsome-less-loader-standard (npm) (malicious package) - [MAL-2025-144457](https://insights.sbomify.com/MAL-2025-144457/): Malicious code in lint-staged-ganymede-titan-gulp (npm) (malicious package) - [MAL-2025-144456](https://insights.sbomify.com/MAL-2025-144456/): Malicious code in lint-staged-fork-writable-flare (npm) (malicious package) - [MAL-2025-144455](https://insights.sbomify.com/MAL-2025-144455/): Malicious code in lint-staged-eslint-mensa-development (npm) (malicious package) - [MAL-2025-144454](https://insights.sbomify.com/MAL-2025-144454/): Malicious code in lint-staged-dotenv-safe-pulsar-restart (npm) (malicious package) - [MAL-2025-144453](https://insights.sbomify.com/MAL-2025-144453/): Malicious code in lint-staged-despina-async-xml (npm) (malicious package) - [MAL-2025-144452](https://insights.sbomify.com/MAL-2025-144452/): Malicious code in lint-staged-delphinus-typeorm-framework (npm) (malicious package) - [MAL-2025-144451](https://insights.sbomify.com/MAL-2025-144451/): Malicious code in lint-staged-deimos-alphard-sirius (npm) (malicious package) - [MAL-2025-144450](https://insights.sbomify.com/MAL-2025-144450/): Malicious code in lint-staged-dactyl-optimize-css-assets-webpack-plugin-less (npm) (malicious package) - [MAL-2025-14445](https://insights.sbomify.com/MAL-2025-14445/): Malicious code in amber-river-ckc313-project (npm) (malicious package) - [MAL-2025-144449](https://insights.sbomify.com/MAL-2025-144449/): Malicious code in lint-staged-commitlint-global-superagent (npm) (malicious package) - [MAL-2025-144448](https://insights.sbomify.com/MAL-2025-144448/): Malicious code in lint-staged-carpo-webdriver-mocha-start (npm) (malicious package) - [MAL-2025-144447](https://insights.sbomify.com/MAL-2025-144447/): Malicious code in lint-staged-blaze-concurrently-cordelia (npm) (malicious package) - [MAL-2025-144446](https://insights.sbomify.com/MAL-2025-144446/): Malicious code in lint-staged-auth0-blitz-cors (npm) (malicious package) - [MAL-2025-144445](https://insights.sbomify.com/MAL-2025-144445/): Malicious code in lint-prettier-stylelint-phenomic-arcturus (npm) (malicious package) - [MAL-2025-144444](https://insights.sbomify.com/MAL-2025-144444/): Malicious code in lint-perseus-betelgeuse-izar (npm) (malicious package) - [MAL-2025-144443](https://insights.sbomify.com/MAL-2025-144443/): Malicious code in lint-pavo-meissa-aquarius (npm) (malicious package) - [MAL-2025-144442](https://insights.sbomify.com/MAL-2025-144442/): Malicious code in lint-jupiter-prompts-version (npm) (malicious package) - [MAL-2025-144441](https://insights.sbomify.com/MAL-2025-144441/): Malicious code in lint-jabbah-elektra-scripts (npm) (malicious package) - [MAL-2025-144440](https://insights.sbomify.com/MAL-2025-144440/): Malicious code in lint-ini-carpo-aldebaran (npm) (malicious package) - [MAL-2025-14444](https://insights.sbomify.com/MAL-2025-14444/): Malicious code in amber-qx1i3-7cfzu-ultra-project (npm) (malicious package) - [MAL-2025-144439](https://insights.sbomify.com/MAL-2025-144439/): Malicious code in lint-hapi-stop-nightwatch (npm) (malicious package) - [MAL-2025-144438](https://insights.sbomify.com/MAL-2025-144438/): Malicious code in lint-fusion-relay-cors (npm) (malicious package) - [MAL-2025-144437](https://insights.sbomify.com/MAL-2025-144437/): Malicious code in lint-fomalhaut-commitizen-pino (npm) (malicious package) - [MAL-2025-144436](https://insights.sbomify.com/MAL-2025-144436/): Malicious code in lint-duplex-bellatrix-deimos (npm) (malicious package) - [MAL-2025-144435](https://insights.sbomify.com/MAL-2025-144435/): Malicious code in lint-dione-publish-prettier-plugin-markdown (npm) (malicious package) - [MAL-2025-144434](https://insights.sbomify.com/MAL-2025-144434/): Malicious code in lint-centaurus-vuetify-dotenv-parse-variables (npm) (malicious package) - [MAL-2025-144433](https://insights.sbomify.com/MAL-2025-144433/): Malicious code in lint-async-ophiuchus-ganymede (npm) (malicious package) - [MAL-2025-144432](https://insights.sbomify.com/MAL-2025-144432/): Malicious code in lint-aquarius-morgan-ora (npm) (malicious package) - [MAL-2025-144431](https://insights.sbomify.com/MAL-2025-144431/): Malicious code in link-yonder-nebula-centaurus (npm) (malicious package) - [MAL-2025-144430](https://insights.sbomify.com/MAL-2025-144430/): Malicious code in link-ursa-nova-rimraf (npm) (malicious package) - [MAL-2025-14443](https://insights.sbomify.com/MAL-2025-14443/): Malicious code in amber-pulse-olu886-project (npm) (malicious package) - [MAL-2025-144429](https://insights.sbomify.com/MAL-2025-144429/): Malicious code in link-update-jwt-chai (npm) (malicious package) - [MAL-2025-144428](https://insights.sbomify.com/MAL-2025-144428/): Malicious code in link-umbra-spectron-tool (npm) (malicious package) - [MAL-2025-144427](https://insights.sbomify.com/MAL-2025-144427/): Malicious code in link-taurus-callisto-cygnus (npm) (malicious package) - [MAL-2025-144426](https://insights.sbomify.com/MAL-2025-144426/): Malicious code in link-stream-global-upgrade (npm) (malicious package) - [MAL-2025-144425](https://insights.sbomify.com/MAL-2025-144425/): Malicious code in link-solis-promise-elektra (npm) (malicious package) - [MAL-2025-144424](https://insights.sbomify.com/MAL-2025-144424/): Malicious code in link-server-bootes-spawn (npm) (malicious package) - [MAL-2025-144423](https://insights.sbomify.com/MAL-2025-144423/): Malicious code in link-sequelize-arcturus-nightwatch (npm) (malicious package) - [MAL-2025-144422](https://insights.sbomify.com/MAL-2025-144422/): Malicious code in link-sails-promise-dynamo (npm) (malicious package) - [MAL-2025-144421](https://insights.sbomify.com/MAL-2025-144421/): Malicious code in link-rigel-lint-leda (npm) (malicious package) - [MAL-2025-144420](https://insights.sbomify.com/MAL-2025-144420/): Malicious code in link-pino-pretty-react-bootstrap-cordelia (npm) (malicious package) - [MAL-2025-14442](https://insights.sbomify.com/MAL-2025-14442/): Malicious code in amber-pinnacle-xei075-project (npm) (malicious package) - [MAL-2025-144419](https://insights.sbomify.com/MAL-2025-144419/): Malicious code in link-passport-prettier-plugin-markdown-commitizen (npm) (malicious package) - [MAL-2025-144418](https://insights.sbomify.com/MAL-2025-144418/): Malicious code in link-ora-loglevel-andromeda (npm) (malicious package) - [MAL-2025-144417](https://insights.sbomify.com/MAL-2025-144417/): Malicious code in link-ora-gatsby-babel (npm) (malicious package) - [MAL-2025-144416](https://insights.sbomify.com/MAL-2025-144416/): Malicious code in link-non-blocking-query-canopus (npm) (malicious package) - [MAL-2025-144415](https://insights.sbomify.com/MAL-2025-144415/): Malicious code in link-nightwatch-aquarius-ora (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1438/