# Vulnerabilities published in 2025


- [MAL-2025-144144](https://insights.sbomify.com/MAL-2025-144144/): Malicious code in kaus-gatsby-mysql-eris (npm) (malicious package)
- [MAL-2025-144143](https://insights.sbomify.com/MAL-2025-144143/): Malicious code in kaus-firebase-jabbah-bellatrix (npm) (malicious package)
- [MAL-2025-144142](https://insights.sbomify.com/MAL-2025-144142/): Malicious code in kaus-eris-regulus-rollup (npm) (malicious package)
- [MAL-2025-144141](https://insights.sbomify.com/MAL-2025-144141/): Malicious code in kaus-elara-relay-development (npm) (malicious package)
- [MAL-2025-144140](https://insights.sbomify.com/MAL-2025-144140/): Malicious code in kaus-dorado-hyperion-ursa (npm) (malicious package)
- [MAL-2025-14414](https://insights.sbomify.com/MAL-2025-14414/): Malicious code in aluedeke (npm) (malicious package)
- [MAL-2025-144139](https://insights.sbomify.com/MAL-2025-144139/): Malicious code in kaus-cluster-superagent-slidev (npm) (malicious package)
- [MAL-2025-144138](https://insights.sbomify.com/MAL-2025-144138/): Malicious code in kaus-cassini-pulsar-tool (npm) (malicious package)
- [MAL-2025-144137](https://insights.sbomify.com/MAL-2025-144137/): Malicious code in kaus-bellatrix-async-astro (npm) (malicious package)
- [MAL-2025-144136](https://insights.sbomify.com/MAL-2025-144136/): Malicious code in kaus-auth0-dione-redis (npm) (malicious package)
- [MAL-2025-144135](https://insights.sbomify.com/MAL-2025-144135/): Malicious code in kastra-version-sagitta-taurus (npm) (malicious package)
- [MAL-2025-144134](https://insights.sbomify.com/MAL-2025-144134/): Malicious code in kastra-style-loader-scorpius-mui (npm) (malicious package)
- [MAL-2025-144133](https://insights.sbomify.com/MAL-2025-144133/): Malicious code in kastra-stop-vuetify-jest (npm) (malicious package)
- [MAL-2025-144132](https://insights.sbomify.com/MAL-2025-144132/): Malicious code in kastra-scorpius-mocha-fetch (npm) (malicious package)
- [MAL-2025-144131](https://insights.sbomify.com/MAL-2025-144131/): Malicious code in kastra-run-script-firebase-blaze (npm) (malicious package)
- [MAL-2025-144130](https://insights.sbomify.com/MAL-2025-144130/): Malicious code in kastra-quantum-public-restart (npm) (malicious package)
- [MAL-2025-14413](https://insights.sbomify.com/MAL-2025-14413/): Malicious code in altlux (npm) (malicious package)
- [MAL-2025-144129](https://insights.sbomify.com/MAL-2025-144129/): Malicious code in kastra-pyxis-materialize-socketio (npm) (malicious package)
- [MAL-2025-144128](https://insights.sbomify.com/MAL-2025-144128/): Malicious code in kastra-procyon-typeorm-auriga (npm) (malicious package)
- [MAL-2025-144127](https://insights.sbomify.com/MAL-2025-144127/): Malicious code in kastra-pino-equinox-iota (npm) (malicious package)
- [MAL-2025-144126](https://insights.sbomify.com/MAL-2025-144126/): Malicious code in kastra-phenomic-eridanus-hexo (npm) (malicious package)
- [MAL-2025-144125](https://insights.sbomify.com/MAL-2025-144125/): Malicious code in kastra-nextjs-tethys-acamar (npm) (malicious package)
- [MAL-2025-144124](https://insights.sbomify.com/MAL-2025-144124/): Malicious code in kastra-nebula-markdown-delphinus (npm) (malicious package)
- [MAL-2025-144123](https://insights.sbomify.com/MAL-2025-144123/): Malicious code in karma-websockets-kastra-europa (npm) (malicious package)
- [MAL-2025-144122](https://insights.sbomify.com/MAL-2025-144122/): Malicious code in karma-upgrade-backend-hermes (npm) (malicious package)
- [MAL-2025-144121](https://insights.sbomify.com/MAL-2025-144121/): Malicious code in karma-taurus-browserify-prompts (npm) (malicious package)
- [MAL-2025-144120](https://insights.sbomify.com/MAL-2025-144120/): Malicious code in karma-spawn-webpack-yonder (npm) (malicious package)
- [MAL-2025-14412](https://insights.sbomify.com/MAL-2025-14412/): Malicious code in altiora (npm) (malicious package)
- [MAL-2025-144119](https://insights.sbomify.com/MAL-2025-144119/): Malicious code in karma-rimraf-start-hercules (npm) (malicious package)
- [MAL-2025-144118](https://insights.sbomify.com/MAL-2025-144118/): Malicious code in karma-quasar-io-europa (npm) (malicious package)
- [MAL-2025-144117](https://insights.sbomify.com/MAL-2025-144117/): Malicious code in karma-prettier-slidev-forever (npm) (malicious package)
- [MAL-2025-144116](https://insights.sbomify.com/MAL-2025-144116/): Malicious code in karma-pipe-leda-ignite (npm) (malicious package)
- [MAL-2025-144115](https://insights.sbomify.com/MAL-2025-144115/): Malicious code in karma-phenomic-standard-mdx (npm) (malicious package)
- [MAL-2025-144114](https://insights.sbomify.com/MAL-2025-144114/): Malicious code in karma-pegasus-config-europa (npm) (malicious package)
- [MAL-2025-144113](https://insights.sbomify.com/MAL-2025-144113/): Malicious code in karma-lacerta-loopback-karma (npm) (malicious package)
- [MAL-2025-144112](https://insights.sbomify.com/MAL-2025-144112/): Malicious code in karma-kronos-protractor-graphql (npm) (malicious package)
- [MAL-2025-144111](https://insights.sbomify.com/MAL-2025-144111/): Malicious code in karma-hermes-supervisor-sedna (npm) (malicious package)
- [MAL-2025-144110](https://insights.sbomify.com/MAL-2025-144110/): Malicious code in karma-heka-shelljs-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-14411](https://insights.sbomify.com/MAL-2025-14411/): Malicious code in altimo (npm) (malicious package)
- [MAL-2025-144109](https://insights.sbomify.com/MAL-2025-144109/): Malicious code in karma-gridsome-backend-hydra (npm) (malicious package)
- [MAL-2025-144108](https://insights.sbomify.com/MAL-2025-144108/): Malicious code in karma-ganymede-chalk-flare (npm) (malicious package)
- [MAL-2025-144107](https://insights.sbomify.com/MAL-2025-144107/): Malicious code in karma-galaxy-proxima-bunyan (npm) (malicious package)
- [MAL-2025-144106](https://insights.sbomify.com/MAL-2025-144106/): Malicious code in karma-fornax-sequelize-ophiuchus (npm) (malicious package)
- [MAL-2025-144105](https://insights.sbomify.com/MAL-2025-144105/): Malicious code in karma-fornax-react-bootstrap-draco (npm) (malicious package)
- [MAL-2025-144104](https://insights.sbomify.com/MAL-2025-144104/): Malicious code in karma-europa-janus-hercules (npm) (malicious package)
- [MAL-2025-144103](https://insights.sbomify.com/MAL-2025-144103/): Malicious code in karma-electron-builder-blitz-lacerta (npm) (malicious package)
- [MAL-2025-144102](https://insights.sbomify.com/MAL-2025-144102/): Malicious code in karma-dependencies-geckodriver-sirius (npm) (malicious package)
- [MAL-2025-144101](https://insights.sbomify.com/MAL-2025-144101/): Malicious code in karma-deneb-umbra-yaml (npm) (malicious package)
- [MAL-2025-144100](https://insights.sbomify.com/MAL-2025-144100/): Malicious code in karma-deneb-eslint-plugin-public (npm) (malicious package)
- [MAL-2025-14410](https://insights.sbomify.com/MAL-2025-14410/): Malicious code in altenberg (npm) (malicious package)
- [MAL-2025-1441](https://insights.sbomify.com/MAL-2025-1441/): Malicious code in telegram-bot-hoster (npm) (malicious package)
- [MAL-2025-144099](https://insights.sbomify.com/MAL-2025-144099/): Malicious code in karma-delphinus-materialize-dotenv-safe (npm) (malicious package)
- [MAL-2025-144098](https://insights.sbomify.com/MAL-2025-144098/): Malicious code in karma-cypress-pyxis-redis (npm) (malicious package)
- [MAL-2025-144097](https://insights.sbomify.com/MAL-2025-144097/): Malicious code in karma-cordelia-private-izar (npm) (malicious package)
- [MAL-2025-144096](https://insights.sbomify.com/MAL-2025-144096/): Malicious code in karma-centauri-nodejs-jupiter (npm) (malicious package)
- [MAL-2025-144095](https://insights.sbomify.com/MAL-2025-144095/): Malicious code in karma-build-sass-loader-kastra (npm) (malicious package)
- [MAL-2025-144094](https://insights.sbomify.com/MAL-2025-144094/): Malicious code in karma-atlas-bulma-ini (npm) (malicious package)
- [MAL-2025-144093](https://insights.sbomify.com/MAL-2025-144093/): Malicious code in karma-aether-betelgeuse-webdriver-manager (npm) (malicious package)
- [MAL-2025-144092](https://insights.sbomify.com/MAL-2025-144092/): Malicious code in jwt-wolf-solis-query (npm) (malicious package)
- [MAL-2025-144091](https://insights.sbomify.com/MAL-2025-144091/): Malicious code in jwt-webdriverio-pulsar-graphql (npm) (malicious package)
- [MAL-2025-144090](https://insights.sbomify.com/MAL-2025-144090/): Malicious code in jwt-webdriver-mocha-regulus-umbra (npm) (malicious package)
- [MAL-2025-14409](https://insights.sbomify.com/MAL-2025-14409/): Malicious code in altech (npm) (malicious package)
- [MAL-2025-144089](https://insights.sbomify.com/MAL-2025-144089/): Malicious code in jwt-tethys-eleventy-request (npm) (malicious package)
- [MAL-2025-144088](https://insights.sbomify.com/MAL-2025-144088/): Malicious code in jwt-test-elektra-sails (npm) (malicious package)
- [MAL-2025-144087](https://insights.sbomify.com/MAL-2025-144087/): Malicious code in jwt-telesto-bootstrap-ophiuchus (npm) (malicious package)
- [MAL-2025-144086](https://insights.sbomify.com/MAL-2025-144086/): Malicious code in jwt-spectron-global-hercules (npm) (malicious package)
- [MAL-2025-144085](https://insights.sbomify.com/MAL-2025-144085/): Malicious code in jwt-semantic-ui-nuxtjs-library (npm) (malicious package)
- [MAL-2025-144084](https://insights.sbomify.com/MAL-2025-144084/): Malicious code in jwt-readable-registry-soap (npm) (malicious package)
- [MAL-2025-144083](https://insights.sbomify.com/MAL-2025-144083/): Malicious code in jwt-publish-hermes-miranda (npm) (malicious package)
- [MAL-2025-144082](https://insights.sbomify.com/MAL-2025-144082/): Malicious code in jwt-pm2-sirius-dione (npm) (malicious package)
- [MAL-2025-144081](https://insights.sbomify.com/MAL-2025-144081/): Malicious code in jwt-nebula-module-colors (npm) (malicious package)
- [MAL-2025-144080](https://insights.sbomify.com/MAL-2025-144080/): Malicious code in jwt-markdownlint-chakra-ui-sadr (npm) (malicious package)
- [MAL-2025-14408](https://insights.sbomify.com/MAL-2025-14408/): Malicious code in altaris (npm) (malicious package)
- [MAL-2025-144079](https://insights.sbomify.com/MAL-2025-144079/): Malicious code in jwt-magellan-sedna-stop (npm) (malicious package)
- [MAL-2025-144078](https://insights.sbomify.com/MAL-2025-144078/): Malicious code in jwt-leda-framework-module (npm) (malicious package)
- [MAL-2025-144077](https://insights.sbomify.com/MAL-2025-144077/): Malicious code in jwt-json-commitlint-config-angular-quark (npm) (malicious package)
- [MAL-2025-144076](https://insights.sbomify.com/MAL-2025-144076/): Malicious code in jwt-grunt-got-module (npm) (malicious package)
- [MAL-2025-144075](https://insights.sbomify.com/MAL-2025-144075/): Malicious code in jwt-gravity-europa-hexo (npm) (malicious package)
- [MAL-2025-144074](https://insights.sbomify.com/MAL-2025-144074/): Malicious code in jwt-ganymede-meissa-playwright (npm) (malicious package)
- [MAL-2025-144073](https://insights.sbomify.com/MAL-2025-144073/): Malicious code in jwt-foundation-kronos-gravity (npm) (malicious package)
- [MAL-2025-144072](https://insights.sbomify.com/MAL-2025-144072/): Malicious code in jwt-figures-ora-commitizen (npm) (malicious package)
- [MAL-2025-144071](https://insights.sbomify.com/MAL-2025-144071/): Malicious code in jwt-element-ui-jekyll-style-loader (npm) (malicious package)
- [MAL-2025-144070](https://insights.sbomify.com/MAL-2025-144070/): Malicious code in jwt-bulma-private-passport (npm) (malicious package)
- [MAL-2025-14407](https://insights.sbomify.com/MAL-2025-14407/): Malicious code in altair-publish-semantic-ui-prompts (npm) (malicious package)
- [MAL-2025-144069](https://insights.sbomify.com/MAL-2025-144069/): Malicious code in jwt-atlas-betelgeuse-socketio (npm) (malicious package)
- [MAL-2025-144068](https://insights.sbomify.com/MAL-2025-144068/): Malicious code in jwt-alphard-cz-conventional-changelog-registry (npm) (malicious package)
- [MAL-2025-144067](https://insights.sbomify.com/MAL-2025-144067/): Malicious code in jupiter-xanadu-optimize-css-assets-webpack-plugin-cressida (npm) (malicious package)
- [MAL-2025-144066](https://insights.sbomify.com/MAL-2025-144066/): Malicious code in jupiter-wasat-blitz-foundation (npm) (malicious package)
- [MAL-2025-144065](https://insights.sbomify.com/MAL-2025-144065/): Malicious code in jupiter-tailwindcss-unuk-oberon (npm) (malicious package)
- [MAL-2025-144064](https://insights.sbomify.com/MAL-2025-144064/): Malicious code in jupiter-sqlite-centaurus-mira (npm) (malicious package)
- [MAL-2025-144063](https://insights.sbomify.com/MAL-2025-144063/): Malicious code in jupiter-socketio-sadr-cosmos (npm) (malicious package)
- [MAL-2025-144062](https://insights.sbomify.com/MAL-2025-144062/): Malicious code in jupiter-quito-library-slidev (npm) (malicious package)
- [MAL-2025-144061](https://insights.sbomify.com/MAL-2025-144061/): Malicious code in jupiter-prettier-cordelia-dotenv-safe (npm) (malicious package)
- [MAL-2025-144060](https://insights.sbomify.com/MAL-2025-144060/): Malicious code in jupiter-lynx-pipe-miranda (npm) (malicious package)
- [MAL-2025-14406](https://insights.sbomify.com/MAL-2025-14406/): Malicious code in altair-prettier-stylelint-mdx-aurora (npm) (malicious package)
- [MAL-2025-144059](https://insights.sbomify.com/MAL-2025-144059/): Malicious code in jupiter-leda-sadr-global (npm) (malicious package)
- [MAL-2025-144058](https://insights.sbomify.com/MAL-2025-144058/): Malicious code in jupiter-install-selenium-dotenv (npm) (malicious package)
- [MAL-2025-144057](https://insights.sbomify.com/MAL-2025-144057/): Malicious code in jupiter-hexo-nestjs-electron (npm) (malicious package)
- [MAL-2025-144056](https://insights.sbomify.com/MAL-2025-144056/): Malicious code in jupiter-grus-terser-mysql (npm) (malicious package)
- [MAL-2025-144055](https://insights.sbomify.com/MAL-2025-144055/): Malicious code in jupiter-frontend-io-ceres (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1442/