# Vulnerabilities published in 2025


- [MAL-2025-143965](https://insights.sbomify.com/MAL-2025-143965/): Malicious code in json-bootes-ophiuchus-epimetheus (npm) (malicious package)
- [MAL-2025-143964](https://insights.sbomify.com/MAL-2025-143964/): Malicious code in json-blaze-venus-antd (npm) (malicious package)
- [MAL-2025-143963](https://insights.sbomify.com/MAL-2025-143963/): Malicious code in json-backend-cluster-webdriverio (npm) (malicious package)
- [MAL-2025-143962](https://insights.sbomify.com/MAL-2025-143962/): Malicious code in json-algol-antares-mutation (npm) (malicious package)
- [MAL-2025-143961](https://insights.sbomify.com/MAL-2025-143961/): Malicious code in jovian-version-wolf-jest (npm) (malicious package)
- [MAL-2025-143960](https://insights.sbomify.com/MAL-2025-143960/): Malicious code in jovian-sagitta-bellatrix-luna (npm) (malicious package)
- [MAL-2025-14396](https://insights.sbomify.com/MAL-2025-14396/): Malicious code in alpha-xigua-jq3q (npm) (malicious package)
- [MAL-2025-143959](https://insights.sbomify.com/MAL-2025-143959/): Malicious code in jovian-rollup-plugin-jest-polaris (npm) (malicious package)
- [MAL-2025-143958](https://insights.sbomify.com/MAL-2025-143958/): Malicious code in jovian-proxima-dotenv-ariel (npm) (malicious package)
- [MAL-2025-143957](https://insights.sbomify.com/MAL-2025-143957/): Malicious code in jovian-pipe-pegasus-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-143956](https://insights.sbomify.com/MAL-2025-143956/): Malicious code in jovian-pegasus-fork-figures (npm) (malicious package)
- [MAL-2025-143955](https://insights.sbomify.com/MAL-2025-143955/): Malicious code in jovian-native-google-altair (npm) (malicious package)
- [MAL-2025-143954](https://insights.sbomify.com/MAL-2025-143954/): Malicious code in jovian-mocha-postgres-typeorm (npm) (malicious package)
- [MAL-2025-143953](https://insights.sbomify.com/MAL-2025-143953/): Malicious code in jovian-mocha-ignite-zephyr (npm) (malicious package)
- [MAL-2025-143952](https://insights.sbomify.com/MAL-2025-143952/): Malicious code in jovian-mira-blaze-prompts (npm) (malicious package)
- [MAL-2025-143951](https://insights.sbomify.com/MAL-2025-143951/): Malicious code in jovian-loopback-terser-webpack-plugin-protractor (npm) (malicious package)
- [MAL-2025-143950](https://insights.sbomify.com/MAL-2025-143950/): Malicious code in jovian-izar-subscription-titan (npm) (malicious package)
- [MAL-2025-14395](https://insights.sbomify.com/MAL-2025-14395/): Malicious code in alpha-whiskey-gmaf (npm) (malicious package)
- [MAL-2025-143949](https://insights.sbomify.com/MAL-2025-143949/): Malicious code in jovian-hydra-chakra-ui-rimraf (npm) (malicious package)
- [MAL-2025-143948](https://insights.sbomify.com/MAL-2025-143948/): Malicious code in jovian-hercules-hydra-antares (npm) (malicious package)
- [MAL-2025-143947](https://insights.sbomify.com/MAL-2025-143947/): Malicious code in jovian-grus-webdriver-manager-library (npm) (malicious package)
- [MAL-2025-143946](https://insights.sbomify.com/MAL-2025-143946/): Malicious code in jovian-docusaurus-carpo-commitlint (npm) (malicious package)
- [MAL-2025-143945](https://insights.sbomify.com/MAL-2025-143945/): Malicious code in jovian-deneb-global-json (npm) (malicious package)
- [MAL-2025-143944](https://insights.sbomify.com/MAL-2025-143944/): Malicious code in jovian-cypress-jest-janus (npm) (malicious package)
- [MAL-2025-143943](https://insights.sbomify.com/MAL-2025-143943/): Malicious code in jovian-csrf-javascript-gridsome (npm) (malicious package)
- [MAL-2025-143942](https://insights.sbomify.com/MAL-2025-143942/): Malicious code in jovian-auth0-apex-element-ui (npm) (malicious package)
- [MAL-2025-143941](https://insights.sbomify.com/MAL-2025-143941/): Malicious code in jovian-astro-aldebaran-ignite (npm) (malicious package)
- [MAL-2025-143940](https://insights.sbomify.com/MAL-2025-143940/): Malicious code in jest-xenon-virgo-jest (npm) (malicious package)
- [MAL-2025-14394](https://insights.sbomify.com/MAL-2025-14394/): Malicious code in alpha-watermelon-zulu-rwjvq (npm) (malicious package)
- [MAL-2025-143939](https://insights.sbomify.com/MAL-2025-143939/): Malicious code in jest-wezen-corvus-nuxtjs (npm) (malicious package)
- [MAL-2025-143938](https://insights.sbomify.com/MAL-2025-143938/): Malicious code in jest-vortex-ini-foundation (npm) (malicious package)
- [MAL-2025-143937](https://insights.sbomify.com/MAL-2025-143937/): Malicious code in jest-venus-fetch-firebase (npm) (malicious package)
- [MAL-2025-143936](https://insights.sbomify.com/MAL-2025-143936/): Malicious code in jest-testcafe-stop-mutation (npm) (malicious package)
- [MAL-2025-143935](https://insights.sbomify.com/MAL-2025-143935/): Malicious code in jest-solis-aldebaran-markdownlint (npm) (malicious package)
- [MAL-2025-143934](https://insights.sbomify.com/MAL-2025-143934/): Malicious code in jest-slidev-express-cygnus (npm) (malicious package)
- [MAL-2025-143933](https://insights.sbomify.com/MAL-2025-143933/): Malicious code in jest-sass-loader-axios-algol (npm) (malicious package)
- [MAL-2025-143932](https://insights.sbomify.com/MAL-2025-143932/): Malicious code in jest-rigel-postcss-loader-sqlite (npm) (malicious package)
- [MAL-2025-143931](https://insights.sbomify.com/MAL-2025-143931/): Malicious code in jest-prompts-node-config-bunyan (npm) (malicious package)
- [MAL-2025-143930](https://insights.sbomify.com/MAL-2025-143930/): Malicious code in jest-pegasus-nightwatch-blaze (npm) (malicious package)
- [MAL-2025-14393](https://insights.sbomify.com/MAL-2025-14393/): Malicious code in alpha-watermelon-hpnx (npm) (malicious package)
- [MAL-2025-143929](https://insights.sbomify.com/MAL-2025-143929/): Malicious code in jest-meteor-centaurus-barnard (npm) (malicious package)
- [MAL-2025-143928](https://insights.sbomify.com/MAL-2025-143928/): Malicious code in jest-mdx-aurora-scorpius (npm) (malicious package)
- [MAL-2025-143927](https://insights.sbomify.com/MAL-2025-143927/): Malicious code in jest-markdown-loopback-superagent (npm) (malicious package)
- [MAL-2025-143926](https://insights.sbomify.com/MAL-2025-143926/): Malicious code in jest-hermes-configstore-supervisor (npm) (malicious package)
- [MAL-2025-143925](https://insights.sbomify.com/MAL-2025-143925/): Malicious code in jest-heka-wasat-rimraf (npm) (malicious package)
- [MAL-2025-143924](https://insights.sbomify.com/MAL-2025-143924/): Malicious code in jest-forever-adonis-orbit (npm) (malicious package)
- [MAL-2025-143923](https://insights.sbomify.com/MAL-2025-143923/): Malicious code in jest-flare-less-cli (npm) (malicious package)
- [MAL-2025-143922](https://insights.sbomify.com/MAL-2025-143922/): Malicious code in jest-epimetheus-kinetic-sagitta (npm) (malicious package)
- [MAL-2025-143921](https://insights.sbomify.com/MAL-2025-143921/): Malicious code in jest-electron-leda-electron (npm) (malicious package)
- [MAL-2025-143920](https://insights.sbomify.com/MAL-2025-143920/): Malicious code in jest-cygnus-chariklo-rimraf (npm) (malicious package)
- [MAL-2025-14392](https://insights.sbomify.com/MAL-2025-14392/): Malicious code in alpha-victor-honeydew-jvhvu (npm) (malicious package)
- [MAL-2025-143919](https://insights.sbomify.com/MAL-2025-143919/): Malicious code in jest-corvus-prettier-plugin-markdown-charon (npm) (malicious package)
- [MAL-2025-143918](https://insights.sbomify.com/MAL-2025-143918/): Malicious code in jest-castor-stream-altair (npm) (malicious package)
- [MAL-2025-143917](https://insights.sbomify.com/MAL-2025-143917/): Malicious code in jest-airbnb-remark-spawn (npm) (malicious package)
- [MAL-2025-143916](https://insights.sbomify.com/MAL-2025-143916/): Malicious code in jekyll-transport-fusion-css-loader (npm) (malicious package)
- [MAL-2025-143915](https://insights.sbomify.com/MAL-2025-143915/): Malicious code in jekyll-slides-nashira-rehype (npm) (malicious package)
- [MAL-2025-143914](https://insights.sbomify.com/MAL-2025-143914/): Malicious code in jekyll-selenium-prettier-plugin-markdown-uninstall (npm) (malicious package)
- [MAL-2025-143913](https://insights.sbomify.com/MAL-2025-143913/): Malicious code in jekyll-quark-sync-eclipse (npm) (malicious package)
- [MAL-2025-143912](https://insights.sbomify.com/MAL-2025-143912/): Malicious code in jekyll-proxima-titan-phoenix (npm) (malicious package)
- [MAL-2025-143911](https://insights.sbomify.com/MAL-2025-143911/): Malicious code in jekyll-norma-markdown-pdf-heka (npm) (malicious package)
- [MAL-2025-143910](https://insights.sbomify.com/MAL-2025-143910/): Malicious code in jekyll-nodemon-lint-enceladus (npm) (malicious package)
- [MAL-2025-14391](https://insights.sbomify.com/MAL-2025-14391/): Malicious code in alpha-vanilla-orange-qoopq (npm) (malicious package)
- [MAL-2025-143909](https://insights.sbomify.com/MAL-2025-143909/): Malicious code in jekyll-markdownlint-leda-phoenix (npm) (malicious package)
- [MAL-2025-143908](https://insights.sbomify.com/MAL-2025-143908/): Malicious code in jekyll-jsonp-slidev-bunyan (npm) (malicious package)
- [MAL-2025-143907](https://insights.sbomify.com/MAL-2025-143907/): Malicious code in jekyll-javascript-draco-nebula (npm) (malicious package)
- [MAL-2025-143906](https://insights.sbomify.com/MAL-2025-143906/): Malicious code in jekyll-jasmine-firebase-leda (npm) (malicious package)
- [MAL-2025-143905](https://insights.sbomify.com/MAL-2025-143905/): Malicious code in jekyll-framework-meteor-dotenv-safe (npm) (malicious package)
- [MAL-2025-143904](https://insights.sbomify.com/MAL-2025-143904/): Malicious code in jekyll-fetch-lyra-lint (npm) (malicious package)
- [MAL-2025-143903](https://insights.sbomify.com/MAL-2025-143903/): Malicious code in jekyll-elektra-vortex-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-143902](https://insights.sbomify.com/MAL-2025-143902/): Malicious code in jekyll-dione-algol-lint (npm) (malicious package)
- [MAL-2025-143901](https://insights.sbomify.com/MAL-2025-143901/): Malicious code in jekyll-delphinus-buffer-mensa (npm) (malicious package)
- [MAL-2025-143900](https://insights.sbomify.com/MAL-2025-143900/): Malicious code in jekyll-dagda-google-cross-env (npm) (malicious package)
- [MAL-2025-14390](https://insights.sbomify.com/MAL-2025-14390/): Malicious code in alpha-vanilla-india-dicka (npm) (malicious package)
- [MAL-2025-1439](https://insights.sbomify.com/MAL-2025-1439/): Malicious code in telegram-bo-host (npm) (malicious package)
- [MAL-2025-143899](https://insights.sbomify.com/MAL-2025-143899/): Malicious code in jekyll-castor-dependencies-nashira (npm) (malicious package)
- [MAL-2025-143898](https://insights.sbomify.com/MAL-2025-143898/): Malicious code in jekyll-aurora-superagent-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-143897](https://insights.sbomify.com/MAL-2025-143897/): Malicious code in javascript-zenobia-procyon-orbit (npm) (malicious package)
- [MAL-2025-143896](https://insights.sbomify.com/MAL-2025-143896/): Malicious code in javascript-yonder-mdx-cypress (npm) (malicious package)
- [MAL-2025-143895](https://insights.sbomify.com/MAL-2025-143895/): Malicious code in javascript-websockets-neptune-janus (npm) (malicious package)
- [MAL-2025-143894](https://insights.sbomify.com/MAL-2025-143894/): Malicious code in javascript-umbriel-kronos-native (npm) (malicious package)
- [MAL-2025-143893](https://insights.sbomify.com/MAL-2025-143893/): Malicious code in javascript-triton-babel-elektra (npm) (malicious package)
- [MAL-2025-143892](https://insights.sbomify.com/MAL-2025-143892/): Malicious code in javascript-taurus-transport-xenos (npm) (malicious package)
- [MAL-2025-143891](https://insights.sbomify.com/MAL-2025-143891/): Malicious code in javascript-stop-solis-magellan (npm) (malicious package)
- [MAL-2025-143890](https://insights.sbomify.com/MAL-2025-143890/): Malicious code in javascript-scorpius-global-framework (npm) (malicious package)
- [MAL-2025-14389](https://insights.sbomify.com/MAL-2025-14389/): Malicious code in alpha-tau-project (npm) (malicious package)
- [MAL-2025-143889](https://insights.sbomify.com/MAL-2025-143889/): Malicious code in javascript-readable-fetch-nconf (npm) (malicious package)
- [MAL-2025-143888](https://insights.sbomify.com/MAL-2025-143888/): Malicious code in javascript-procyon-nconf-odin (npm) (malicious package)
- [MAL-2025-143887](https://insights.sbomify.com/MAL-2025-143887/): Malicious code in javascript-postcss-loader-fornax-ariel (npm) (malicious package)
- [MAL-2025-143886](https://insights.sbomify.com/MAL-2025-143886/): Malicious code in javascript-pipe-docusaurus-nodemon (npm) (malicious package)
- [MAL-2025-143885](https://insights.sbomify.com/MAL-2025-143885/): Malicious code in javascript-pegasus-chariklo-standard (npm) (malicious package)
- [MAL-2025-143884](https://insights.sbomify.com/MAL-2025-143884/): Malicious code in javascript-nodejs-lint-staged-build (npm) (malicious package)
- [MAL-2025-143883](https://insights.sbomify.com/MAL-2025-143883/): Malicious code in javascript-nightmare-lint-staged-transform (npm) (malicious package)
- [MAL-2025-143882](https://insights.sbomify.com/MAL-2025-143882/): Malicious code in javascript-nconf-ursa-promise (npm) (malicious package)
- [MAL-2025-143881](https://insights.sbomify.com/MAL-2025-143881/): Malicious code in javascript-loglevel-chalk-soap (npm) (malicious package)
- [MAL-2025-143880](https://insights.sbomify.com/MAL-2025-143880/): Malicious code in javascript-indus-europa-child-process (npm) (malicious package)
- [MAL-2025-14388](https://insights.sbomify.com/MAL-2025-14388/): Malicious code in alpha-tango-pwpu (npm) (malicious package)
- [MAL-2025-143879](https://insights.sbomify.com/MAL-2025-143879/): Malicious code in javascript-indus-ceres-ophiuchus (npm) (malicious package)
- [MAL-2025-143878](https://insights.sbomify.com/MAL-2025-143878/): Malicious code in javascript-dotenv-quasar-spica (npm) (malicious package)
- [MAL-2025-143877](https://insights.sbomify.com/MAL-2025-143877/): Malicious code in javascript-chai-levels-meissa (npm) (malicious package)
- [MAL-2025-143876](https://insights.sbomify.com/MAL-2025-143876/): Malicious code in javascript-await-upgrade-venus (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1444/