# Vulnerabilities published in 2025


- [MAL-2025-144234](https://insights.sbomify.com/MAL-2025-144234/): Malicious code in lacerta-callisto-orbit-umbriel (npm) (malicious package)
- [MAL-2025-144233](https://insights.sbomify.com/MAL-2025-144233/): Malicious code in lacerta-backend-soap-eslint-config (npm) (malicious package)
- [MAL-2025-144232](https://insights.sbomify.com/MAL-2025-144232/): Malicious code in lacerta-apex-weywot-socketio (npm) (malicious package)
- [MAL-2025-144231](https://insights.sbomify.com/MAL-2025-144231/): Malicious code in kronos-webdriver-manager-celeste-luna (npm) (malicious package)
- [MAL-2025-144230](https://insights.sbomify.com/MAL-2025-144230/): Malicious code in kronos-umbriel-sass-loader-cassini (npm) (malicious package)
- [MAL-2025-14423](https://insights.sbomify.com/MAL-2025-14423/): Malicious code in amazing-time-picker-ng6-view24h (npm) (malicious package)
- [MAL-2025-144229](https://insights.sbomify.com/MAL-2025-144229/): Malicious code in kronos-terser-carpo-nconf (npm) (malicious package)
- [MAL-2025-144228](https://insights.sbomify.com/MAL-2025-144228/): Malicious code in kronos-spinner-io-jekyll (npm) (malicious package)
- [MAL-2025-144227](https://insights.sbomify.com/MAL-2025-144227/): Malicious code in kronos-soap-mongoose-nightwatch (npm) (malicious package)
- [MAL-2025-144226](https://insights.sbomify.com/MAL-2025-144226/): Malicious code in kronos-sirius-process-koa (npm) (malicious package)
- [MAL-2025-144225](https://insights.sbomify.com/MAL-2025-144225/): Malicious code in kronos-sagitta-zenith-ganymede (npm) (malicious package)
- [MAL-2025-144224](https://insights.sbomify.com/MAL-2025-144224/): Malicious code in kronos-restart-csrf-jsonp (npm) (malicious package)
- [MAL-2025-144223](https://insights.sbomify.com/MAL-2025-144223/): Malicious code in kronos-odin-husky-impulse (npm) (malicious package)
- [MAL-2025-144222](https://insights.sbomify.com/MAL-2025-144222/): Malicious code in kronos-library-jasmine-spectron (npm) (malicious package)
- [MAL-2025-144221](https://insights.sbomify.com/MAL-2025-144221/): Malicious code in kronos-grus-scripts-helios (npm) (malicious package)
- [MAL-2025-144220](https://insights.sbomify.com/MAL-2025-144220/): Malicious code in kronos-grus-iota-eris (npm) (malicious package)
- [MAL-2025-14422](https://insights.sbomify.com/MAL-2025-14422/): Malicious code in AmateurJS (npm) (malicious package)
- [MAL-2025-144219](https://insights.sbomify.com/MAL-2025-144219/): Malicious code in kronos-grunt-sadr-event (npm) (malicious package)
- [MAL-2025-144218](https://insights.sbomify.com/MAL-2025-144218/): Malicious code in kronos-gridsome-eslint-plugin-forever (npm) (malicious package)
- [MAL-2025-144217](https://insights.sbomify.com/MAL-2025-144217/): Malicious code in kronos-fornax-terser-dotenv (npm) (malicious package)
- [MAL-2025-144216](https://insights.sbomify.com/MAL-2025-144216/): Malicious code in kronos-deimos-regulus-warp (npm) (malicious package)
- [MAL-2025-144215](https://insights.sbomify.com/MAL-2025-144215/): Malicious code in kronos-atlas-hermes-local (npm) (malicious package)
- [MAL-2025-144214](https://insights.sbomify.com/MAL-2025-144214/): Malicious code in kronos-async-library-io (npm) (malicious package)
- [MAL-2025-144213](https://insights.sbomify.com/MAL-2025-144213/): Malicious code in kronos-apollo-changelog-eslint-plugin (npm) (malicious package)
- [MAL-2025-144212](https://insights.sbomify.com/MAL-2025-144212/): Malicious code in kronos-antd-dorado-nextjs (npm) (malicious package)
- [MAL-2025-144211](https://insights.sbomify.com/MAL-2025-144211/): Malicious code in koa-zenobia-unuk-playwright (npm) (malicious package)
- [MAL-2025-144210](https://insights.sbomify.com/MAL-2025-144210/): Malicious code in koa-xml-chariklo-perseus (npm) (malicious package)
- [MAL-2025-14421](https://insights.sbomify.com/MAL-2025-14421/): Malicious code in amarium (npm) (malicious package)
- [MAL-2025-144209](https://insights.sbomify.com/MAL-2025-144209/): Malicious code in koa-testcafe-koa-zephyr (npm) (malicious package)
- [MAL-2025-144208](https://insights.sbomify.com/MAL-2025-144208/): Malicious code in koa-test-cygnus-airbnb (npm) (malicious package)
- [MAL-2025-144207](https://insights.sbomify.com/MAL-2025-144207/): Malicious code in koa-soap-loglevel-hyperion (npm) (malicious package)
- [MAL-2025-144206](https://insights.sbomify.com/MAL-2025-144206/): Malicious code in koa-schema-hyperion-indus (npm) (malicious package)
- [MAL-2025-144205](https://insights.sbomify.com/MAL-2025-144205/): Malicious code in koa-request-backend-cors (npm) (malicious package)
- [MAL-2025-144204](https://insights.sbomify.com/MAL-2025-144204/): Malicious code in koa-rate-limiter-terser-sedna (npm) (malicious package)
- [MAL-2025-144203](https://insights.sbomify.com/MAL-2025-144203/): Malicious code in koa-pyxis-xanadu-library (npm) (malicious package)
- [MAL-2025-144202](https://insights.sbomify.com/MAL-2025-144202/): Malicious code in koa-process-gatsby-stream (npm) (malicious package)
- [MAL-2025-144201](https://insights.sbomify.com/MAL-2025-144201/): Malicious code in koa-postgres-blaze-electron (npm) (malicious package)
- [MAL-2025-144200](https://insights.sbomify.com/MAL-2025-144200/): Malicious code in koa-polaris-wasat-pegasus (npm) (malicious package)
- [MAL-2025-14420](https://insights.sbomify.com/MAL-2025-14420/): Malicious code in amargir (npm) (malicious package)
- [MAL-2025-1442](https://insights.sbomify.com/MAL-2025-1442/): Malicious code in telegram-bot-hoster2 (npm) (malicious package)
- [MAL-2025-144199](https://insights.sbomify.com/MAL-2025-144199/): Malicious code in koa-pipe-dorado-adonis (npm) (malicious package)
- [MAL-2025-144198](https://insights.sbomify.com/MAL-2025-144198/): Malicious code in koa-odin-aquarius-cli (npm) (malicious package)
- [MAL-2025-144197](https://insights.sbomify.com/MAL-2025-144197/): Malicious code in koa-neptune-slidev-tool (npm) (malicious package)
- [MAL-2025-144196](https://insights.sbomify.com/MAL-2025-144196/): Malicious code in koa-module-bootstrap-spica (npm) (malicious package)
- [MAL-2025-144195](https://insights.sbomify.com/MAL-2025-144195/): Malicious code in koa-kaus-sirius-draco (npm) (malicious package)
- [MAL-2025-144194](https://insights.sbomify.com/MAL-2025-144194/): Malicious code in koa-husky-indus-europa (npm) (malicious package)
- [MAL-2025-144193](https://insights.sbomify.com/MAL-2025-144193/): Malicious code in koa-gravity-magellan-helmet (npm) (malicious package)
- [MAL-2025-144192](https://insights.sbomify.com/MAL-2025-144192/): Malicious code in koa-electron-reveal-md-pavo (npm) (malicious package)
- [MAL-2025-144191](https://insights.sbomify.com/MAL-2025-144191/): Malicious code in koa-dorado-webdriverio-lynx (npm) (malicious package)
- [MAL-2025-144190](https://insights.sbomify.com/MAL-2025-144190/): Malicious code in koa-development-nebula-perseus (npm) (malicious package)
- [MAL-2025-14419](https://insights.sbomify.com/MAL-2025-14419/): Malicious code in amanah (npm) (malicious package)
- [MAL-2025-144189](https://insights.sbomify.com/MAL-2025-144189/): Malicious code in koa-dependencies-jabbah-telesto (npm) (malicious package)
- [MAL-2025-144188](https://insights.sbomify.com/MAL-2025-144188/): Malicious code in koa-cassini-eclipse-lint-staged (npm) (malicious package)
- [MAL-2025-144187](https://insights.sbomify.com/MAL-2025-144187/): Malicious code in kinetic-typeorm-less-loader-markdownlint (npm) (malicious package)
- [MAL-2025-144186](https://insights.sbomify.com/MAL-2025-144186/): Malicious code in kinetic-spawn-stop-browserify (npm) (malicious package)
- [MAL-2025-144185](https://insights.sbomify.com/MAL-2025-144185/): Malicious code in kinetic-restart-json-meissa (npm) (malicious package)
- [MAL-2025-144184](https://insights.sbomify.com/MAL-2025-144184/): Malicious code in kinetic-registry-zephyr-corvus (npm) (malicious package)
- [MAL-2025-144183](https://insights.sbomify.com/MAL-2025-144183/): Malicious code in kinetic-redis-less-loader-jekyll (npm) (malicious package)
- [MAL-2025-144182](https://insights.sbomify.com/MAL-2025-144182/): Malicious code in kinetic-pulsar-nashira-equinox (npm) (malicious package)
- [MAL-2025-144181](https://insights.sbomify.com/MAL-2025-144181/): Malicious code in kinetic-pino-pretty-centauri-neptune (npm) (malicious package)
- [MAL-2025-144180](https://insights.sbomify.com/MAL-2025-144180/): Malicious code in kinetic-ophiuchus-antares-run-script (npm) (malicious package)
- [MAL-2025-14418](https://insights.sbomify.com/MAL-2025-14418/): Malicious code in amadeus-api (npm) (malicious package)
- [MAL-2025-144179](https://insights.sbomify.com/MAL-2025-144179/): Malicious code in kinetic-nestjs-callback-jovian (npm) (malicious package)
- [MAL-2025-144178](https://insights.sbomify.com/MAL-2025-144178/): Malicious code in kinetic-mocha-markdownlint-avior (npm) (malicious package)
- [MAL-2025-144177](https://insights.sbomify.com/MAL-2025-144177/): Malicious code in kinetic-mini-css-extract-plugin-winston-spectron (npm) (malicious package)
- [MAL-2025-144176](https://insights.sbomify.com/MAL-2025-144176/): Malicious code in kinetic-lint-staged-commitlint-config-angular-vortex (npm) (malicious package)
- [MAL-2025-144175](https://insights.sbomify.com/MAL-2025-144175/): Malicious code in kinetic-jabbah-chakra-ui-repository (npm) (malicious package)
- [MAL-2025-144174](https://insights.sbomify.com/MAL-2025-144174/): Malicious code in kinetic-impulse-polaris-webpack (npm) (malicious package)
- [MAL-2025-144173](https://insights.sbomify.com/MAL-2025-144173/): Malicious code in kinetic-gulp-leda-restart (npm) (malicious package)
- [MAL-2025-144172](https://insights.sbomify.com/MAL-2025-144172/): Malicious code in kinetic-frontend-csrf-unuk (npm) (malicious package)
- [MAL-2025-144171](https://insights.sbomify.com/MAL-2025-144171/): Malicious code in kinetic-exec-spectron-webdriver-child-process (npm) (malicious package)
- [MAL-2025-144170](https://insights.sbomify.com/MAL-2025-144170/): Malicious code in kinetic-europa-apex-sadr (npm) (malicious package)
- [MAL-2025-14417](https://insights.sbomify.com/MAL-2025-14417/): Malicious code in amabus (npm) (malicious package)
- [MAL-2025-144169](https://insights.sbomify.com/MAL-2025-144169/): Malicious code in kinetic-elektra-oauth-quark (npm) (malicious package)
- [MAL-2025-144168](https://insights.sbomify.com/MAL-2025-144168/): Malicious code in kinetic-development-mdx-eclipse (npm) (malicious package)
- [MAL-2025-144167](https://insights.sbomify.com/MAL-2025-144167/): Malicious code in kinetic-delphinus-farout-axios (npm) (malicious package)
- [MAL-2025-144166](https://insights.sbomify.com/MAL-2025-144166/): Malicious code in kinetic-cressida-schema-betelgeuse (npm) (malicious package)
- [MAL-2025-144165](https://insights.sbomify.com/MAL-2025-144165/): Malicious code in kinetic-bunyan-dotenv-safe-quantum (npm) (malicious package)
- [MAL-2025-144164](https://insights.sbomify.com/MAL-2025-144164/): Malicious code in kinetic-betelgeuse-relay-toml (npm) (malicious package)
- [MAL-2025-144163](https://insights.sbomify.com/MAL-2025-144163/): Malicious code in kinetic-atlas-run-script-delphinus (npm) (malicious package)
- [MAL-2025-144162](https://insights.sbomify.com/MAL-2025-144162/): Malicious code in kinetic-antares-weywot-virgo (npm) (malicious package)
- [MAL-2025-144161](https://insights.sbomify.com/MAL-2025-144161/): Malicious code in kaus-wolf-lacerta-aether (npm) (malicious package)
- [MAL-2025-144160](https://insights.sbomify.com/MAL-2025-144160/): Malicious code in kaus-vuetify-deneb-octans (npm) (malicious package)
- [MAL-2025-14416](https://insights.sbomify.com/MAL-2025-14416/): Malicious code in alummap (npm) (malicious package)
- [MAL-2025-144159](https://insights.sbomify.com/MAL-2025-144159/): Malicious code in kaus-venus-hydra-quantum (npm) (malicious package)
- [MAL-2025-144158](https://insights.sbomify.com/MAL-2025-144158/): Malicious code in kaus-vega-oauth-sqlite (npm) (malicious package)
- [MAL-2025-144157](https://insights.sbomify.com/MAL-2025-144157/): Malicious code in kaus-umbra-dotenv-safe-version (npm) (malicious package)
- [MAL-2025-144156](https://insights.sbomify.com/MAL-2025-144156/): Malicious code in kaus-uglify-js-version-node-config (npm) (malicious package)
- [MAL-2025-144155](https://insights.sbomify.com/MAL-2025-144155/): Malicious code in kaus-socketio-blaze-betelgeuse (npm) (malicious package)
- [MAL-2025-144154](https://insights.sbomify.com/MAL-2025-144154/): Malicious code in kaus-sagitta-less-zephyr (npm) (malicious package)
- [MAL-2025-144153](https://insights.sbomify.com/MAL-2025-144153/): Malicious code in kaus-ophiuchus-triton-passport (npm) (malicious package)
- [MAL-2025-144152](https://insights.sbomify.com/MAL-2025-144152/): Malicious code in kaus-nightwatch-uninstall-envconfig (npm) (malicious package)
- [MAL-2025-144151](https://insights.sbomify.com/MAL-2025-144151/): Malicious code in kaus-mdx-miranda-pavo (npm) (malicious package)
- [MAL-2025-144150](https://insights.sbomify.com/MAL-2025-144150/): Malicious code in kaus-materialize-event-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-14415](https://insights.sbomify.com/MAL-2025-14415/): Malicious code in aluito (npm) (malicious package)
- [MAL-2025-144149](https://insights.sbomify.com/MAL-2025-144149/): Malicious code in kaus-materialize-eridanus-bellatrix (npm) (malicious package)
- [MAL-2025-144148](https://insights.sbomify.com/MAL-2025-144148/): Malicious code in kaus-local-readable-csv (npm) (malicious package)
- [MAL-2025-144147](https://insights.sbomify.com/MAL-2025-144147/): Malicious code in kaus-jest-miranda-rate-limiter (npm) (malicious package)
- [MAL-2025-144146](https://insights.sbomify.com/MAL-2025-144146/): Malicious code in kaus-hyperion-polaris-eclipse (npm) (malicious package)
- [MAL-2025-144145](https://insights.sbomify.com/MAL-2025-144145/): Malicious code in kaus-hapi-css-loader-polaris (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1441/