# Vulnerabilities published in 2025


- [MAL-2025-144054](https://insights.sbomify.com/MAL-2025-144054/): Malicious code in jupiter-europa-test-jovian (npm) (malicious package)
- [MAL-2025-144053](https://insights.sbomify.com/MAL-2025-144053/): Malicious code in jupiter-chromedriver-semantic-release-chai (npm) (malicious package)
- [MAL-2025-144052](https://insights.sbomify.com/MAL-2025-144052/): Malicious code in jupiter-charon-concurrently-hermes (npm) (malicious package)
- [MAL-2025-144051](https://insights.sbomify.com/MAL-2025-144051/): Malicious code in jupiter-bunyan-tool-charon (npm) (malicious package)
- [MAL-2025-144050](https://insights.sbomify.com/MAL-2025-144050/): Malicious code in jupiter-bellatrix-version-galaxy (npm) (malicious package)
- [MAL-2025-14405](https://insights.sbomify.com/MAL-2025-14405/): Malicious code in altair-prettier-node-config-prosthetics (npm) (malicious package)
- [MAL-2025-144049](https://insights.sbomify.com/MAL-2025-144049/): Malicious code in jupiter-ariel-start-janus (npm) (malicious package)
- [MAL-2025-144048](https://insights.sbomify.com/MAL-2025-144048/): Malicious code in jupiter-arcturus-heka-fusion (npm) (malicious package)
- [MAL-2025-144047](https://insights.sbomify.com/MAL-2025-144047/): Malicious code in jupiter-altair-sagitta-leda (npm) (malicious package)
- [MAL-2025-144046](https://insights.sbomify.com/MAL-2025-144046/): Malicious code in juno-zenobia-kinetic-titan (npm) (malicious package)
- [MAL-2025-144045](https://insights.sbomify.com/MAL-2025-144045/): Malicious code in juno-yaml-neptune-node-config (npm) (malicious package)
- [MAL-2025-144044](https://insights.sbomify.com/MAL-2025-144044/): Malicious code in juno-webpack-ceres-mensa (npm) (malicious package)
- [MAL-2025-144043](https://insights.sbomify.com/MAL-2025-144043/): Malicious code in juno-wasat-npm-semantic-release (npm) (malicious package)
- [MAL-2025-144042](https://insights.sbomify.com/MAL-2025-144042/): Malicious code in juno-unuk-indus-webpack (npm) (malicious package)
- [MAL-2025-144041](https://insights.sbomify.com/MAL-2025-144041/): Malicious code in juno-sync-middleware-ini (npm) (malicious package)
- [MAL-2025-144040](https://insights.sbomify.com/MAL-2025-144040/): Malicious code in juno-superagent-stop-antares (npm) (malicious package)
- [MAL-2025-14404](https://insights.sbomify.com/MAL-2025-14404/): Malicious code in altair-helios-start-sass-loader (npm) (malicious package)
- [MAL-2025-144039](https://insights.sbomify.com/MAL-2025-144039/): Malicious code in juno-style-loader-sedna-janus (npm) (malicious package)
- [MAL-2025-144038](https://insights.sbomify.com/MAL-2025-144038/): Malicious code in juno-sirius-react-bootstrap-weywot (npm) (malicious package)
- [MAL-2025-144037](https://insights.sbomify.com/MAL-2025-144037/): Malicious code in juno-sadr-geckodriver-vulcan (npm) (malicious package)
- [MAL-2025-144036](https://insights.sbomify.com/MAL-2025-144036/): Malicious code in juno-quark-semantic-ui-eclipse (npm) (malicious package)
- [MAL-2025-144035](https://insights.sbomify.com/MAL-2025-144035/): Malicious code in juno-pegasus-pegasus-meteor (npm) (malicious package)
- [MAL-2025-144034](https://insights.sbomify.com/MAL-2025-144034/): Malicious code in juno-nconf-odin-xanadu (npm) (malicious package)
- [MAL-2025-144033](https://insights.sbomify.com/MAL-2025-144033/): Malicious code in juno-middleware-wolf-webdriverio (npm) (malicious package)
- [MAL-2025-144032](https://insights.sbomify.com/MAL-2025-144032/): Malicious code in juno-meissa-electron-builder-janus (npm) (malicious package)
- [MAL-2025-144031](https://insights.sbomify.com/MAL-2025-144031/): Malicious code in juno-magellan-acamar-karma (npm) (malicious package)
- [MAL-2025-144030](https://insights.sbomify.com/MAL-2025-144030/): Malicious code in juno-loopback-tailwindcss-blitz (npm) (malicious package)
- [MAL-2025-14403](https://insights.sbomify.com/MAL-2025-14403/): Malicious code in alsrep (npm) (malicious package)
- [MAL-2025-144029](https://insights.sbomify.com/MAL-2025-144029/): Malicious code in juno-levels-bunyan-transform (npm) (malicious package)
- [MAL-2025-144028](https://insights.sbomify.com/MAL-2025-144028/): Malicious code in juno-leda-pino-toml (npm) (malicious package)
- [MAL-2025-144027](https://insights.sbomify.com/MAL-2025-144027/): Malicious code in juno-hyperion-fornax-cache (npm) (malicious package)
- [MAL-2025-144026](https://insights.sbomify.com/MAL-2025-144026/): Malicious code in juno-eslint-plugin-webdriver-mocha-start (npm) (malicious package)
- [MAL-2025-144025](https://insights.sbomify.com/MAL-2025-144025/): Malicious code in juno-epimetheus-selenium-child-process (npm) (malicious package)
- [MAL-2025-144024](https://insights.sbomify.com/MAL-2025-144024/): Malicious code in juno-elektra-tethys-unuk (npm) (malicious package)
- [MAL-2025-144023](https://insights.sbomify.com/MAL-2025-144023/): Malicious code in juno-dactyl-spectron-webdriver-magellan (npm) (malicious package)
- [MAL-2025-144022](https://insights.sbomify.com/MAL-2025-144022/): Malicious code in juno-comet-meissa-oberon (npm) (malicious package)
- [MAL-2025-144021](https://insights.sbomify.com/MAL-2025-144021/): Malicious code in juno-child-process-izar-betelgeuse (npm) (malicious package)
- [MAL-2025-144020](https://insights.sbomify.com/MAL-2025-144020/): Malicious code in juno-callback-pegasus-xanadu (npm) (malicious package)
- [MAL-2025-14402](https://insights.sbomify.com/MAL-2025-14402/): Malicious code in alpharex (npm) (malicious package)
- [MAL-2025-144019](https://insights.sbomify.com/MAL-2025-144019/): Malicious code in juno-buffer-telesto-javascript (npm) (malicious package)
- [MAL-2025-144018](https://insights.sbomify.com/MAL-2025-144018/): Malicious code in juno-blaze-rehype-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-144017](https://insights.sbomify.com/MAL-2025-144017/): Malicious code in juno-atlas-mongodb-publish (npm) (malicious package)
- [MAL-2025-144016](https://insights.sbomify.com/MAL-2025-144016/): Malicious code in juno-antares-gravity-prompts (npm) (malicious package)
- [MAL-2025-144015](https://insights.sbomify.com/MAL-2025-144015/): Malicious code in juno-antares-flare-mocha (npm) (malicious package)
- [MAL-2025-144014](https://insights.sbomify.com/MAL-2025-144014/): Malicious code in jsonp-writable-grus-cli (npm) (malicious package)
- [MAL-2025-144013](https://insights.sbomify.com/MAL-2025-144013/): Malicious code in jsonp-winston-rollup-plugin-spica (npm) (malicious package)
- [MAL-2025-144012](https://insights.sbomify.com/MAL-2025-144012/): Malicious code in jsonp-vuetify-enif-yaml (npm) (malicious package)
- [MAL-2025-144011](https://insights.sbomify.com/MAL-2025-144011/): Malicious code in jsonp-vuepress-uninstall-ceres (npm) (malicious package)
- [MAL-2025-144010](https://insights.sbomify.com/MAL-2025-144010/): Malicious code in jsonp-spinner-dotenv-dotenv-safe (npm) (malicious package)
- [MAL-2025-14401](https://insights.sbomify.com/MAL-2025-14401/): Malicious code in alphard-transhumanism-venus-configstore (npm) (malicious package)
- [MAL-2025-144009](https://insights.sbomify.com/MAL-2025-144009/): Malicious code in jsonp-spawn-cypress-solis (npm) (malicious package)
- [MAL-2025-144008](https://insights.sbomify.com/MAL-2025-144008/): Malicious code in jsonp-semantic-ui-indus-prettier (npm) (malicious package)
- [MAL-2025-144007](https://insights.sbomify.com/MAL-2025-144007/): Malicious code in jsonp-sagitta-proxima-adonis (npm) (malicious package)
- [MAL-2025-144006](https://insights.sbomify.com/MAL-2025-144006/): Malicious code in jsonp-sagitta-comet-module (npm) (malicious package)
- [MAL-2025-144005](https://insights.sbomify.com/MAL-2025-144005/): Malicious code in jsonp-pino-orbit-elara (npm) (malicious package)
- [MAL-2025-144004](https://insights.sbomify.com/MAL-2025-144004/): Malicious code in jsonp-pegasus-metalsmith-dynamo (npm) (malicious package)
- [MAL-2025-144003](https://insights.sbomify.com/MAL-2025-144003/): Malicious code in jsonp-ophiuchus-sequelize-miranda (npm) (malicious package)
- [MAL-2025-144002](https://insights.sbomify.com/MAL-2025-144002/): Malicious code in jsonp-nightmare-leda-rollup (npm) (malicious package)
- [MAL-2025-144001](https://insights.sbomify.com/MAL-2025-144001/): Malicious code in jsonp-miranda-carina-cordelia (npm) (malicious package)
- [MAL-2025-144000](https://insights.sbomify.com/MAL-2025-144000/): Malicious code in jsonp-lint-meissa-dotenv-safe (npm) (malicious package)
- [MAL-2025-14400](https://insights.sbomify.com/MAL-2025-14400/): Malicious code in alphard-ganymede-xanadu-apollo (npm) (malicious package)
- [MAL-2025-1440](https://insights.sbomify.com/MAL-2025-1440/): Malicious code in telegram-bot-host (npm) (malicious package)
- [MAL-2025-144](https://insights.sbomify.com/MAL-2025-144/): Malicious code in classic-theme (npm) (malicious package)
- [MAL-2025-143999](https://insights.sbomify.com/MAL-2025-143999/): Malicious code in jsonp-jwt-avior-postcss-loader (npm) (malicious package)
- [MAL-2025-143998](https://insights.sbomify.com/MAL-2025-143998/): Malicious code in jsonp-ignite-sync-link (npm) (malicious package)
- [MAL-2025-143997](https://insights.sbomify.com/MAL-2025-143997/): Malicious code in jsonp-html-webpack-plugin-epimetheus-spica (npm) (malicious package)
- [MAL-2025-143996](https://insights.sbomify.com/MAL-2025-143996/): Malicious code in jsonp-framework-izar-update (npm) (malicious package)
- [MAL-2025-143995](https://insights.sbomify.com/MAL-2025-143995/): Malicious code in jsonp-cross-env-terser-webpack-plugin-grunt (npm) (malicious package)
- [MAL-2025-143994](https://insights.sbomify.com/MAL-2025-143994/): Malicious code in jsonp-configstore-janus-semantic-ui (npm) (malicious package)
- [MAL-2025-143993](https://insights.sbomify.com/MAL-2025-143993/): Malicious code in jsonp-charon-warp-fetch (npm) (malicious package)
- [MAL-2025-143992](https://insights.sbomify.com/MAL-2025-143992/): Malicious code in jsonp-charon-jasmine-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-143991](https://insights.sbomify.com/MAL-2025-143991/): Malicious code in jsonp-centaurus-lyra-markdown (npm) (malicious package)
- [MAL-2025-143990](https://insights.sbomify.com/MAL-2025-143990/): Malicious code in jsonp-celeste-jupiter-public (npm) (malicious package)
- [MAL-2025-14399](https://insights.sbomify.com/MAL-2025-14399/): Malicious code in alphacore (npm) (malicious package)
- [MAL-2025-143989](https://insights.sbomify.com/MAL-2025-143989/): Malicious code in jsonp-blitz-cordelia-less-loader (npm) (malicious package)
- [MAL-2025-143988](https://insights.sbomify.com/MAL-2025-143988/): Malicious code in jsonp-barnard-wolf-thuban (npm) (malicious package)
- [MAL-2025-143987](https://insights.sbomify.com/MAL-2025-143987/): Malicious code in json-ursa-css-loader-dotenv (npm) (malicious package)
- [MAL-2025-143986](https://insights.sbomify.com/MAL-2025-143986/): Malicious code in json-umbriel-procyon-delphinus (npm) (malicious package)
- [MAL-2025-143985](https://insights.sbomify.com/MAL-2025-143985/): Malicious code in json-umbriel-orbit-europa (npm) (malicious package)
- [MAL-2025-143984](https://insights.sbomify.com/MAL-2025-143984/): Malicious code in json-thuban-nodemon-nova (npm) (malicious package)
- [MAL-2025-143983](https://insights.sbomify.com/MAL-2025-143983/): Malicious code in json-sirius-enceladus-scorpius (npm) (malicious package)
- [MAL-2025-143982](https://insights.sbomify.com/MAL-2025-143982/): Malicious code in json-quito-iota-global (npm) (malicious package)
- [MAL-2025-143981](https://insights.sbomify.com/MAL-2025-143981/): Malicious code in json-proxima-tailwindcss-typeorm (npm) (malicious package)
- [MAL-2025-143980](https://insights.sbomify.com/MAL-2025-143980/): Malicious code in json-prettier-stylelint-leda-halley (npm) (malicious package)
- [MAL-2025-14398](https://insights.sbomify.com/MAL-2025-14398/): Malicious code in alpha-zucchini-qshi (npm) (malicious package)
- [MAL-2025-143979](https://insights.sbomify.com/MAL-2025-143979/): Malicious code in json-passport-eslint-config-chalk (npm) (malicious package)
- [MAL-2025-143978](https://insights.sbomify.com/MAL-2025-143978/): Malicious code in json-ophiuchus-jovian-writable (npm) (malicious package)
- [MAL-2025-143977](https://insights.sbomify.com/MAL-2025-143977/): Malicious code in json-nashira-kinetic-castor (npm) (malicious package)
- [MAL-2025-143976](https://insights.sbomify.com/MAL-2025-143976/): Malicious code in json-janus-ultra-aurora (npm) (malicious package)
- [MAL-2025-143975](https://insights.sbomify.com/MAL-2025-143975/): Malicious code in json-impulse-websockets-corvus (npm) (malicious package)
- [MAL-2025-143974](https://insights.sbomify.com/MAL-2025-143974/): Malicious code in json-gatsby-eslint-plugin-parcel (npm) (malicious package)
- [MAL-2025-143973](https://insights.sbomify.com/MAL-2025-143973/): Malicious code in json-figures-gatsby-standard (npm) (malicious package)
- [MAL-2025-143972](https://insights.sbomify.com/MAL-2025-143972/): Malicious code in json-dorado-leda-public (npm) (malicious package)
- [MAL-2025-143971](https://insights.sbomify.com/MAL-2025-143971/): Malicious code in json-docusaurus-cosmiconfig-deimos (npm) (malicious package)
- [MAL-2025-143970](https://insights.sbomify.com/MAL-2025-143970/): Malicious code in json-development-publish-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-14397](https://insights.sbomify.com/MAL-2025-14397/): Malicious code in alpha-xray-mango-onsij (npm) (malicious package)
- [MAL-2025-143969](https://insights.sbomify.com/MAL-2025-143969/): Malicious code in json-configstore-venus-yakutsk (npm) (malicious package)
- [MAL-2025-143968](https://insights.sbomify.com/MAL-2025-143968/): Malicious code in json-chromedriver-pegasus-got (npm) (malicious package)
- [MAL-2025-143967](https://insights.sbomify.com/MAL-2025-143967/): Malicious code in json-centaurus-yakutsk-comet (npm) (malicious package)
- [MAL-2025-143966](https://insights.sbomify.com/MAL-2025-143966/): Malicious code in json-bootes-spectron-pegasus (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1443/