# Vulnerabilities published in 2025 - [MAL-2025-144414](https://insights.sbomify.com/MAL-2025-144414/): Malicious code in link-meissa-colors-nightmare (npm) (malicious package) - [MAL-2025-144413](https://insights.sbomify.com/MAL-2025-144413/): Malicious code in link-local-node-sass-puppeteer (npm) (malicious package) - [MAL-2025-144412](https://insights.sbomify.com/MAL-2025-144412/): Malicious code in link-kinetic-phenomic-node-config (npm) (malicious package) - [MAL-2025-144411](https://insights.sbomify.com/MAL-2025-144411/): Malicious code in link-jovian-sedna-heka (npm) (malicious package) - [MAL-2025-144410](https://insights.sbomify.com/MAL-2025-144410/): Malicious code in link-gulp-warp-janus (npm) (malicious package) - [MAL-2025-14441](https://insights.sbomify.com/MAL-2025-14441/): Malicious code in amber-nugget-uvx187-project (npm) (malicious package) - [MAL-2025-144409](https://insights.sbomify.com/MAL-2025-144409/): Malicious code in link-gravity-css-loader-arcturus (npm) (malicious package) - [MAL-2025-144408](https://insights.sbomify.com/MAL-2025-144408/): Malicious code in link-gravity-cache-lyra (npm) (malicious package) - [MAL-2025-144407](https://insights.sbomify.com/MAL-2025-144407/): Malicious code in link-got-weywot-build (npm) (malicious package) - [MAL-2025-144406](https://insights.sbomify.com/MAL-2025-144406/): Malicious code in link-flare-loglevel-command (npm) (malicious package) - [MAL-2025-144405](https://insights.sbomify.com/MAL-2025-144405/): Malicious code in link-event-impulse-pulsar (npm) (malicious package) - [MAL-2025-144404](https://insights.sbomify.com/MAL-2025-144404/): Malicious code in link-csrf-cressida-achernar (npm) (malicious package) - [MAL-2025-144403](https://insights.sbomify.com/MAL-2025-144403/): Malicious code in link-commitizen-warp-nightmare (npm) (malicious package) - [MAL-2025-144402](https://insights.sbomify.com/MAL-2025-144402/): Malicious code in link-celeste-tool-protractor (npm) (malicious package) - [MAL-2025-144401](https://insights.sbomify.com/MAL-2025-144401/): Malicious code in link-bootes-framework-javascript (npm) (malicious package) - [MAL-2025-144400](https://insights.sbomify.com/MAL-2025-144400/): Malicious code in link-babel-test-upgrade (npm) (malicious package) - [MAL-2025-14440](https://insights.sbomify.com/MAL-2025-14440/): Malicious code in amber-mountain-gab870-project (npm) (malicious package) - [MAL-2025-1444](https://insights.sbomify.com/MAL-2025-1444/): Malicious code in telegram-bots (npm) (malicious package) - [MAL-2025-144399](https://insights.sbomify.com/MAL-2025-144399/): Malicious code in link-babel-rehype-bellatrix (npm) (malicious package) - [MAL-2025-144398](https://insights.sbomify.com/MAL-2025-144398/): Malicious code in link-await-hydra-bellatrix (npm) (malicious package) - [MAL-2025-144397](https://insights.sbomify.com/MAL-2025-144397/): Malicious code in link-async-global-reveal-md (npm) (malicious package) - [MAL-2025-144396](https://insights.sbomify.com/MAL-2025-144396/): Malicious code in link-algol-nuxtjs-cassini (npm) (malicious package) - [MAL-2025-144395](https://insights.sbomify.com/MAL-2025-144395/): Malicious code in link-aldebaran-library-cli (npm) (malicious package) - [MAL-2025-144394](https://insights.sbomify.com/MAL-2025-144394/): Malicious code in linear-plum-cephalopod (npm) (malicious package) - [MAL-2025-144393](https://insights.sbomify.com/MAL-2025-144393/): Malicious code in library-zenobia-native-cache (npm) (malicious package) - [MAL-2025-144392](https://insights.sbomify.com/MAL-2025-144392/): Malicious code in library-webdriverio-zephyr-gatsby (npm) (malicious package) - [MAL-2025-144391](https://insights.sbomify.com/MAL-2025-144391/): Malicious code in library-transport-iota-arcturus (npm) (malicious package) - [MAL-2025-144390](https://insights.sbomify.com/MAL-2025-144390/): Malicious code in library-thuban-galaxy-pino (npm) (malicious package) - [MAL-2025-14439](https://insights.sbomify.com/MAL-2025-14439/): Malicious code in amber-kbnjp-iif76-ice-project (npm) (malicious package) - [MAL-2025-144389](https://insights.sbomify.com/MAL-2025-144389/): Malicious code in library-slidev-test-radiant (npm) (malicious package) - [MAL-2025-144388](https://insights.sbomify.com/MAL-2025-144388/): Malicious code in library-quasar-andromeda-terser-webpack-plugin (npm) (malicious package) - [MAL-2025-144387](https://insights.sbomify.com/MAL-2025-144387/): Malicious code in library-pulsar-mini-css-extract-plugin-init (npm) (malicious package) - [MAL-2025-144386](https://insights.sbomify.com/MAL-2025-144386/): Malicious code in library-procyon-babel-chariklo (npm) (malicious package) - [MAL-2025-144385](https://insights.sbomify.com/MAL-2025-144385/): Malicious code in library-prettier-stylelint-semantic-release-centauri (npm) (malicious package) - [MAL-2025-144384](https://insights.sbomify.com/MAL-2025-144384/): Malicious code in library-prettier-plugin-markdown-alphard-betelgeuse (npm) (malicious package) - [MAL-2025-144383](https://insights.sbomify.com/MAL-2025-144383/): Malicious code in library-pavo-impulse-andromeda (npm) (malicious package) - [MAL-2025-144382](https://insights.sbomify.com/MAL-2025-144382/): Malicious code in library-package-chalk-commitizen (npm) (malicious package) - [MAL-2025-144381](https://insights.sbomify.com/MAL-2025-144381/): Malicious code in library-nconf-writable-odin (npm) (malicious package) - [MAL-2025-144380](https://insights.sbomify.com/MAL-2025-144380/): Malicious code in library-markdown-proxima-cluster (npm) (malicious package) - [MAL-2025-14438](https://insights.sbomify.com/MAL-2025-14438/): Malicious code in amber-jewel-kov220-project (npm) (malicious package) - [MAL-2025-144379](https://insights.sbomify.com/MAL-2025-144379/): Malicious code in library-magellan-telesto-mira (npm) (malicious package) - [MAL-2025-144378](https://insights.sbomify.com/MAL-2025-144378/): Malicious code in library-loop-centaurus-request (npm) (malicious package) - [MAL-2025-144377](https://insights.sbomify.com/MAL-2025-144377/): Malicious code in library-init-flare-pm2 (npm) (malicious package) - [MAL-2025-144376](https://insights.sbomify.com/MAL-2025-144376/): Malicious code in library-ganymede-axios-phoebe (npm) (malicious package) - [MAL-2025-144375](https://insights.sbomify.com/MAL-2025-144375/): Malicious code in library-fornax-start-yaml (npm) (malicious package) - [MAL-2025-144374](https://insights.sbomify.com/MAL-2025-144374/): Malicious code in library-eleventy-start-semantic-release (npm) (malicious package) - [MAL-2025-144373](https://insights.sbomify.com/MAL-2025-144373/): Malicious code in library-chai-carina-nuxtjs (npm) (malicious package) - [MAL-2025-144372](https://insights.sbomify.com/MAL-2025-144372/): Malicious code in library-cassini-apollo-request (npm) (malicious package) - [MAL-2025-144371](https://insights.sbomify.com/MAL-2025-144371/): Malicious code in library-blaze-heka-lint (npm) (malicious package) - [MAL-2025-144370](https://insights.sbomify.com/MAL-2025-144370/): Malicious code in library-betelgeuse-yonder-scorpius (npm) (malicious package) - [MAL-2025-14437](https://insights.sbomify.com/MAL-2025-14437/): Malicious code in amber-jasmine-psc655-project (npm) (malicious package) - [MAL-2025-144369](https://insights.sbomify.com/MAL-2025-144369/): Malicious code in library-apollo-sagitta-relay (npm) (malicious package) - [MAL-2025-144368](https://insights.sbomify.com/MAL-2025-144368/): Malicious code in levels-yaml-build-shelljs (npm) (malicious package) - [MAL-2025-144367](https://insights.sbomify.com/MAL-2025-144367/): Malicious code in levels-warp-mongodb-slides (npm) (malicious package) - [MAL-2025-144366](https://insights.sbomify.com/MAL-2025-144366/): Malicious code in levels-testcafe-janus-private (npm) (malicious package) - [MAL-2025-144365](https://insights.sbomify.com/MAL-2025-144365/): Malicious code in levels-telesto-eslint-postgres (npm) (malicious package) - [MAL-2025-144364](https://insights.sbomify.com/MAL-2025-144364/): Malicious code in levels-sync-galaxy-inquirer (npm) (malicious package) - [MAL-2025-144363](https://insights.sbomify.com/MAL-2025-144363/): Malicious code in levels-spectron-webdriver-callisto-babel (npm) (malicious package) - [MAL-2025-144362](https://insights.sbomify.com/MAL-2025-144362/): Malicious code in levels-slides-build-xanadu (npm) (malicious package) - [MAL-2025-144361](https://insights.sbomify.com/MAL-2025-144361/): Malicious code in levels-octans-octans-neptune (npm) (malicious package) - [MAL-2025-144360](https://insights.sbomify.com/MAL-2025-144360/): Malicious code in levels-octans-nova-warp (npm) (malicious package) - [MAL-2025-14436](https://insights.sbomify.com/MAL-2025-14436/): Malicious code in amber-island-zky964-project (npm) (malicious package) - [MAL-2025-144359](https://insights.sbomify.com/MAL-2025-144359/): Malicious code in levels-oberon-install-antares (npm) (malicious package) - [MAL-2025-144358](https://insights.sbomify.com/MAL-2025-144358/): Malicious code in levels-npm-yaml-xanadu (npm) (malicious package) - [MAL-2025-144357](https://insights.sbomify.com/MAL-2025-144357/): Malicious code in levels-node-config-nodejs-dione (npm) (malicious package) - [MAL-2025-144356](https://insights.sbomify.com/MAL-2025-144356/): Malicious code in levels-markdown-cli-cosmiconfig (npm) (malicious package) - [MAL-2025-144355](https://insights.sbomify.com/MAL-2025-144355/): Malicious code in levels-levels-ora-package (npm) (malicious package) - [MAL-2025-144354](https://insights.sbomify.com/MAL-2025-144354/): Malicious code in levels-got-react-bootstrap-selenium (npm) (malicious package) - [MAL-2025-144353](https://insights.sbomify.com/MAL-2025-144353/): Malicious code in levels-eclipse-await-cressida (npm) (malicious package) - [MAL-2025-144352](https://insights.sbomify.com/MAL-2025-144352/): Malicious code in levels-comet-axios-rate-limiter (npm) (malicious package) - [MAL-2025-144351](https://insights.sbomify.com/MAL-2025-144351/): Malicious code in levels-carpo-fusion-pulsar (npm) (malicious package) - [MAL-2025-144350](https://insights.sbomify.com/MAL-2025-144350/): Malicious code in levels-canopus-webdriver-mocha-spectron (npm) (malicious package) - [MAL-2025-14435](https://insights.sbomify.com/MAL-2025-14435/): Malicious code in amber-iscjq-l9twm-mirage-project (npm) (malicious package) - [MAL-2025-144349](https://insights.sbomify.com/MAL-2025-144349/): Malicious code in levels-bootes-charon-tool (npm) (malicious package) - [MAL-2025-144348](https://insights.sbomify.com/MAL-2025-144348/): Malicious code in levels-adonis-wezen-nodemon (npm) (malicious package) - [MAL-2025-144347](https://insights.sbomify.com/MAL-2025-144347/): Malicious code in less-toml-antares-halley (npm) (malicious package) - [MAL-2025-144346](https://insights.sbomify.com/MAL-2025-144346/): Malicious code in less-socketio-loglevel-carpo (npm) (malicious package) - [MAL-2025-144345](https://insights.sbomify.com/MAL-2025-144345/): Malicious code in less-selenium-sedna-buffer (npm) (malicious package) - [MAL-2025-144344](https://insights.sbomify.com/MAL-2025-144344/): Malicious code in less-request-farout-delphinus (npm) (malicious package) - [MAL-2025-144343](https://insights.sbomify.com/MAL-2025-144343/): Malicious code in less-protractor-nebula-figures (npm) (malicious package) - [MAL-2025-144342](https://insights.sbomify.com/MAL-2025-144342/): Malicious code in less-optimize-css-assets-webpack-plugin-miranda-algol (npm) (malicious package) - [MAL-2025-144341](https://insights.sbomify.com/MAL-2025-144341/): Malicious code in less-non-blocking-run-script-xanthus (npm) (malicious package) - [MAL-2025-144340](https://insights.sbomify.com/MAL-2025-144340/): Malicious code in less-nconf-global-hapi (npm) (malicious package) - [MAL-2025-14434](https://insights.sbomify.com/MAL-2025-14434/): Malicious code in amber-icicle-daq039-project (npm) (malicious package) - [MAL-2025-144339](https://insights.sbomify.com/MAL-2025-144339/): Malicious code in less-mocha-slides-umbriel (npm) (malicious package) - [MAL-2025-144338](https://insights.sbomify.com/MAL-2025-144338/): Malicious code in less-miranda-rocket-altair (npm) (malicious package) - [MAL-2025-144337](https://insights.sbomify.com/MAL-2025-144337/): Malicious code in less-loader-virgo-phenomic-typeorm (npm) (malicious package) - [MAL-2025-144336](https://insights.sbomify.com/MAL-2025-144336/): Malicious code in less-loader-update-spica-mongoose (npm) (malicious package) - [MAL-2025-144335](https://insights.sbomify.com/MAL-2025-144335/): Malicious code in less-loader-toml-private-soap (npm) (malicious package) - [MAL-2025-144334](https://insights.sbomify.com/MAL-2025-144334/): Malicious code in less-loader-terser-umbra-regulus (npm) (malicious package) - [MAL-2025-144333](https://insights.sbomify.com/MAL-2025-144333/): Malicious code in less-loader-stream-publish-aurora (npm) (malicious package) - [MAL-2025-144332](https://insights.sbomify.com/MAL-2025-144332/): Malicious code in less-loader-stream-apollo-impulse (npm) (malicious package) - [MAL-2025-144331](https://insights.sbomify.com/MAL-2025-144331/): Malicious code in less-loader-sqlite-cressida-leda (npm) (malicious package) - [MAL-2025-144330](https://insights.sbomify.com/MAL-2025-144330/): Malicious code in less-loader-sirius-perseus-loglevel (npm) (malicious package) - [MAL-2025-14433](https://insights.sbomify.com/MAL-2025-14433/): Malicious code in amber-elephant-tvc905-project (npm) (malicious package) - [MAL-2025-144329](https://insights.sbomify.com/MAL-2025-144329/): Malicious code in less-loader-sagitta-webdriver-manager-leda (npm) (malicious package) - [MAL-2025-144328](https://insights.sbomify.com/MAL-2025-144328/): Malicious code in less-loader-quantum-miranda-html-webpack-plugin (npm) (malicious package) - [MAL-2025-144327](https://insights.sbomify.com/MAL-2025-144327/): Malicious code in less-loader-prettier-plugin-markdown-pino-zephyr (npm) (malicious package) - [MAL-2025-144326](https://insights.sbomify.com/MAL-2025-144326/): Malicious code in less-loader-pino-dotenv-safe-quark (npm) (malicious package) - [MAL-2025-144325](https://insights.sbomify.com/MAL-2025-144325/): Malicious code in less-loader-phoebe-scripts-mysql (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1439/