# Vulnerabilities published in 2025


- [MAL-2025-144324](https://insights.sbomify.com/MAL-2025-144324/): Malicious code in less-loader-lint-staged-csv-local (npm) (malicious package)
- [MAL-2025-144323](https://insights.sbomify.com/MAL-2025-144323/): Malicious code in less-loader-karma-scorpius-config (npm) (malicious package)
- [MAL-2025-144322](https://insights.sbomify.com/MAL-2025-144322/): Malicious code in less-loader-jekyll-deneb-luna (npm) (malicious package)
- [MAL-2025-144321](https://insights.sbomify.com/MAL-2025-144321/): Malicious code in less-loader-hercules-phoenix-miranda (npm) (malicious package)
- [MAL-2025-144320](https://insights.sbomify.com/MAL-2025-144320/): Malicious code in less-loader-element-ui-telesto-uninstall (npm) (malicious package)
- [MAL-2025-14432](https://insights.sbomify.com/MAL-2025-14432/): Malicious code in amber-dewdrop-fao020-project (npm) (malicious package)
- [MAL-2025-144319](https://insights.sbomify.com/MAL-2025-144319/): Malicious code in less-loader-dotenv-parse-variables-ophiuchus-antd (npm) (malicious package)
- [MAL-2025-144318](https://insights.sbomify.com/MAL-2025-144318/): Malicious code in less-loader-despina-helios-websockets (npm) (malicious package)
- [MAL-2025-144317](https://insights.sbomify.com/MAL-2025-144317/): Malicious code in less-loader-cross-env-nebula-ceres (npm) (malicious package)
- [MAL-2025-144316](https://insights.sbomify.com/MAL-2025-144316/): Malicious code in less-loader-cosmiconfig-prompts-ganymede (npm) (malicious package)
- [MAL-2025-144315](https://insights.sbomify.com/MAL-2025-144315/): Malicious code in less-loader-config-quantum-equinox (npm) (malicious package)
- [MAL-2025-144314](https://insights.sbomify.com/MAL-2025-144314/): Malicious code in less-loader-centauri-subscription-config (npm) (malicious package)
- [MAL-2025-144313](https://insights.sbomify.com/MAL-2025-144313/): Malicious code in less-loader-andromeda-less-loader-envconfig (npm) (malicious package)
- [MAL-2025-144312](https://insights.sbomify.com/MAL-2025-144312/): Malicious code in less-json-sync-readable (npm) (malicious package)
- [MAL-2025-144311](https://insights.sbomify.com/MAL-2025-144311/): Malicious code in less-html-webpack-plugin-phoebe-neptune (npm) (malicious package)
- [MAL-2025-144310](https://insights.sbomify.com/MAL-2025-144310/): Malicious code in less-farout-spawn-odin (npm) (malicious package)
- [MAL-2025-14431](https://insights.sbomify.com/MAL-2025-14431/): Malicious code in amber-c01v5-2pxof-mosaic-project (npm) (malicious package)
- [MAL-2025-144309](https://insights.sbomify.com/MAL-2025-144309/): Malicious code in less-cross-env-enif-pm2 (npm) (malicious package)
- [MAL-2025-144308](https://insights.sbomify.com/MAL-2025-144308/): Malicious code in less-cors-bootstrap-lyra (npm) (malicious package)
- [MAL-2025-144307](https://insights.sbomify.com/MAL-2025-144307/): Malicious code in less-centauri-prettier-antares (npm) (malicious package)
- [MAL-2025-144306](https://insights.sbomify.com/MAL-2025-144306/): Malicious code in less-avior-cluster-callisto (npm) (malicious package)
- [MAL-2025-144305](https://insights.sbomify.com/MAL-2025-144305/): Malicious code in less-arcturus-charon-markdown-pdf (npm) (malicious package)
- [MAL-2025-144304](https://insights.sbomify.com/MAL-2025-144304/): Malicious code in leda-yildun-impulse-eslint-config (npm) (malicious package)
- [MAL-2025-144303](https://insights.sbomify.com/MAL-2025-144303/): Malicious code in leda-xerxes-farout-procyon (npm) (malicious package)
- [MAL-2025-144302](https://insights.sbomify.com/MAL-2025-144302/): Malicious code in leda-xenos-redis-spinner (npm) (malicious package)
- [MAL-2025-144301](https://insights.sbomify.com/MAL-2025-144301/): Malicious code in leda-version-charon-command (npm) (malicious package)
- [MAL-2025-144300](https://insights.sbomify.com/MAL-2025-144300/): Malicious code in leda-vega-forever-airbnb (npm) (malicious package)
- [MAL-2025-14430](https://insights.sbomify.com/MAL-2025-14430/): Malicious code in amber-bamboo-hbl309-project (npm) (malicious package)
- [MAL-2025-1443](https://insights.sbomify.com/MAL-2025-1443/): Malicious code in telegram-bot-hoster3 (npm) (malicious package)
- [MAL-2025-144299](https://insights.sbomify.com/MAL-2025-144299/): Malicious code in leda-ursa-ganymede-arcturus (npm) (malicious package)
- [MAL-2025-144298](https://insights.sbomify.com/MAL-2025-144298/): Malicious code in leda-tethys-webdriver-manager-hexo (npm) (malicious package)
- [MAL-2025-144297](https://insights.sbomify.com/MAL-2025-144297/): Malicious code in leda-terser-element-ui-sails (npm) (malicious package)
- [MAL-2025-144296](https://insights.sbomify.com/MAL-2025-144296/): Malicious code in leda-style-loader-pyxis-izar (npm) (malicious package)
- [MAL-2025-144295](https://insights.sbomify.com/MAL-2025-144295/): Malicious code in leda-sirius-ultra-pegasus (npm) (malicious package)
- [MAL-2025-144294](https://insights.sbomify.com/MAL-2025-144294/): Malicious code in leda-sequelize-pm2-sagitta (npm) (malicious package)
- [MAL-2025-144293](https://insights.sbomify.com/MAL-2025-144293/): Malicious code in leda-scorpius-hapi-pino-pretty (npm) (malicious package)
- [MAL-2025-144292](https://insights.sbomify.com/MAL-2025-144292/): Malicious code in leda-scorpius-fusion-docusaurus (npm) (malicious package)
- [MAL-2025-144291](https://insights.sbomify.com/MAL-2025-144291/): Malicious code in leda-rollup-mongodb-heka (npm) (malicious package)
- [MAL-2025-144290](https://insights.sbomify.com/MAL-2025-144290/): Malicious code in leda-rigel-antares-non-blocking (npm) (malicious package)
- [MAL-2025-14429](https://insights.sbomify.com/MAL-2025-14429/): Malicious code in amber-5r5lg-4vcob-reef-project (npm) (malicious package)
- [MAL-2025-144289](https://insights.sbomify.com/MAL-2025-144289/): Malicious code in leda-regulus-standard-stop (npm) (malicious package)
- [MAL-2025-144288](https://insights.sbomify.com/MAL-2025-144288/): Malicious code in leda-publish-koa-arcturus (npm) (malicious package)
- [MAL-2025-144287](https://insights.sbomify.com/MAL-2025-144287/): Malicious code in leda-prettier-sedna-elara (npm) (malicious package)
- [MAL-2025-144286](https://insights.sbomify.com/MAL-2025-144286/): Malicious code in leda-prettier-antd-convict (npm) (malicious package)
- [MAL-2025-144285](https://insights.sbomify.com/MAL-2025-144285/): Malicious code in leda-pino-pretty-command-postcss (npm) (malicious package)
- [MAL-2025-144284](https://insights.sbomify.com/MAL-2025-144284/): Malicious code in leda-phoenix-bellatrix-pegasus (npm) (malicious package)
- [MAL-2025-144283](https://insights.sbomify.com/MAL-2025-144283/): Malicious code in leda-npm-chai-sync (npm) (malicious package)
- [MAL-2025-144282](https://insights.sbomify.com/MAL-2025-144282/): Malicious code in leda-nodejs-nextjs-sirius (npm) (malicious package)
- [MAL-2025-144281](https://insights.sbomify.com/MAL-2025-144281/): Malicious code in leda-miranda-oberon-capella (npm) (malicious package)
- [MAL-2025-144280](https://insights.sbomify.com/MAL-2025-144280/): Malicious code in leda-mini-css-extract-plugin-backend-radiant (npm) (malicious package)
- [MAL-2025-14428](https://insights.sbomify.com/MAL-2025-14428/): Malicious code in amber-4k3vc-ldzlm-silk-project (npm) (malicious package)
- [MAL-2025-144279](https://insights.sbomify.com/MAL-2025-144279/): Malicious code in leda-metalsmith-cassini-avior (npm) (malicious package)
- [MAL-2025-144278](https://insights.sbomify.com/MAL-2025-144278/): Malicious code in leda-koa-dotenv-safe-atlas (npm) (malicious package)
- [MAL-2025-144277](https://insights.sbomify.com/MAL-2025-144277/): Malicious code in leda-javascript-stream-husky (npm) (malicious package)
- [MAL-2025-144276](https://insights.sbomify.com/MAL-2025-144276/): Malicious code in leda-janus-solis-dynamo (npm) (malicious package)
- [MAL-2025-144275](https://insights.sbomify.com/MAL-2025-144275/): Malicious code in leda-jabbah-google-rigel (npm) (malicious package)
- [MAL-2025-144274](https://insights.sbomify.com/MAL-2025-144274/): Malicious code in leda-jabbah-exec-prettier-stylelint (npm) (malicious package)
- [MAL-2025-144273](https://insights.sbomify.com/MAL-2025-144273/): Malicious code in leda-hydra-pm2-indus (npm) (malicious package)
- [MAL-2025-144272](https://insights.sbomify.com/MAL-2025-144272/): Malicious code in leda-grus-bellatrix-docusaurus (npm) (malicious package)
- [MAL-2025-144271](https://insights.sbomify.com/MAL-2025-144271/): Malicious code in leda-geckodriver-miranda-helios (npm) (malicious package)
- [MAL-2025-144270](https://insights.sbomify.com/MAL-2025-144270/): Malicious code in leda-farout-alphard-kastra (npm) (malicious package)
- [MAL-2025-14427](https://insights.sbomify.com/MAL-2025-14427/): Malicious code in amber-3xkmt-i6kwj-moondust-project (npm) (malicious package)
- [MAL-2025-144269](https://insights.sbomify.com/MAL-2025-144269/): Malicious code in leda-eslint-leda-electron (npm) (malicious package)
- [MAL-2025-144268](https://insights.sbomify.com/MAL-2025-144268/): Malicious code in leda-envconfig-odin-sass-loader (npm) (malicious package)
- [MAL-2025-144267](https://insights.sbomify.com/MAL-2025-144267/): Malicious code in leda-element-ui-radiant-sagitta (npm) (malicious package)
- [MAL-2025-144266](https://insights.sbomify.com/MAL-2025-144266/): Malicious code in leda-docusaurus-dactyl-ignite (npm) (malicious package)
- [MAL-2025-144265](https://insights.sbomify.com/MAL-2025-144265/): Malicious code in leda-dependencies-fomalhaut-rocket (npm) (malicious package)
- [MAL-2025-144264](https://insights.sbomify.com/MAL-2025-144264/): Malicious code in leda-convict-commitizen-cassini (npm) (malicious package)
- [MAL-2025-144263](https://insights.sbomify.com/MAL-2025-144263/): Malicious code in leda-configstore-fornax-mui (npm) (malicious package)
- [MAL-2025-144262](https://insights.sbomify.com/MAL-2025-144262/): Malicious code in leda-commitizen-markdown-ariel (npm) (malicious package)
- [MAL-2025-144261](https://insights.sbomify.com/MAL-2025-144261/): Malicious code in leda-command-superagent-cache (npm) (malicious package)
- [MAL-2025-144260](https://insights.sbomify.com/MAL-2025-144260/): Malicious code in leda-cassini-wasat-aldebaran (npm) (malicious package)
- [MAL-2025-14426](https://insights.sbomify.com/MAL-2025-14426/): Malicious code in ambassador-robots (npm) (malicious package)
- [MAL-2025-144259](https://insights.sbomify.com/MAL-2025-144259/): Malicious code in leda-capella-celeste-spawn (npm) (malicious package)
- [MAL-2025-144258](https://insights.sbomify.com/MAL-2025-144258/): Malicious code in leda-bulma-rate-limiter-delphinus (npm) (malicious package)
- [MAL-2025-144257](https://insights.sbomify.com/MAL-2025-144257/): Malicious code in leda-async-nodejs-izar (npm) (malicious package)
- [MAL-2025-144256](https://insights.sbomify.com/MAL-2025-144256/): Malicious code in leda-andromeda-spectron-neptune (npm) (malicious package)
- [MAL-2025-144255](https://insights.sbomify.com/MAL-2025-144255/): Malicious code in leda-acamar-sequelize-sass-loader (npm) (malicious package)
- [MAL-2025-144254](https://insights.sbomify.com/MAL-2025-144254/): Malicious code in lacerta-warp-perseus-forever (npm) (malicious package)
- [MAL-2025-144253](https://insights.sbomify.com/MAL-2025-144253/): Malicious code in lacerta-vulcan-lacerta-hercules (npm) (malicious package)
- [MAL-2025-144252](https://insights.sbomify.com/MAL-2025-144252/): Malicious code in lacerta-ursa-process-epimetheus (npm) (malicious package)
- [MAL-2025-144251](https://insights.sbomify.com/MAL-2025-144251/): Malicious code in lacerta-thuban-dynamo-loopback (npm) (malicious package)
- [MAL-2025-144250](https://insights.sbomify.com/MAL-2025-144250/): Malicious code in lacerta-rest-mocha-foundation (npm) (malicious package)
- [MAL-2025-14425](https://insights.sbomify.com/MAL-2025-14425/): Malicious code in ambassador-node (npm) (malicious package)
- [MAL-2025-144249](https://insights.sbomify.com/MAL-2025-144249/): Malicious code in lacerta-optimize-css-assets-webpack-plugin-unuk-prettier (npm) (malicious package)
- [MAL-2025-144248](https://insights.sbomify.com/MAL-2025-144248/): Malicious code in lacerta-mutation-lyra-loop (npm) (malicious package)
- [MAL-2025-144247](https://insights.sbomify.com/MAL-2025-144247/): Malicious code in lacerta-middleware-procyon-exec (npm) (malicious package)
- [MAL-2025-144246](https://insights.sbomify.com/MAL-2025-144246/): Malicious code in lacerta-magellan-sagitta-dotenv (npm) (malicious package)
- [MAL-2025-144245](https://insights.sbomify.com/MAL-2025-144245/): Malicious code in lacerta-luna-writable-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-144244](https://insights.sbomify.com/MAL-2025-144244/): Malicious code in lacerta-luna-install-alphard (npm) (malicious package)
- [MAL-2025-144243](https://insights.sbomify.com/MAL-2025-144243/): Malicious code in lacerta-hyperion-cors-sass-loader (npm) (malicious package)
- [MAL-2025-144242](https://insights.sbomify.com/MAL-2025-144242/): Malicious code in lacerta-html-webpack-plugin-socketio-jabbah (npm) (malicious package)
- [MAL-2025-144241](https://insights.sbomify.com/MAL-2025-144241/): Malicious code in lacerta-google-superagent-elektra (npm) (malicious package)
- [MAL-2025-144240](https://insights.sbomify.com/MAL-2025-144240/): Malicious code in lacerta-geckodriver-tool-private (npm) (malicious package)
- [MAL-2025-14424](https://insights.sbomify.com/MAL-2025-14424/): Malicious code in amazon-titan-inpainting-pipeline (npm) (malicious package)
- [MAL-2025-144239](https://insights.sbomify.com/MAL-2025-144239/): Malicious code in lacerta-electron-taurus-triton (npm) (malicious package)
- [MAL-2025-144238](https://insights.sbomify.com/MAL-2025-144238/): Malicious code in lacerta-electron-gemini-passport (npm) (malicious package)
- [MAL-2025-144237](https://insights.sbomify.com/MAL-2025-144237/): Malicious code in lacerta-dotenv-parse-variables-charon-bootstrap (npm) (malicious package)
- [MAL-2025-144236](https://insights.sbomify.com/MAL-2025-144236/): Malicious code in lacerta-deneb-react-bootstrap-gravity (npm) (malicious package)
- [MAL-2025-144235](https://insights.sbomify.com/MAL-2025-144235/): Malicious code in lacerta-configstore-cz-conventional-changelog-janus (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1440/