# Vulnerabilities published in 2025


- [MAL-2025-143785](https://insights.sbomify.com/MAL-2025-143785/): Malicious code in jabbah-nuxtjs-spica-loopback (npm) (malicious package)
- [MAL-2025-143784](https://insights.sbomify.com/MAL-2025-143784/): Malicious code in jabbah-node-sass-neptune-sirius (npm) (malicious package)
- [MAL-2025-143783](https://insights.sbomify.com/MAL-2025-143783/): Malicious code in jabbah-miranda-standard-achernar (npm) (malicious package)
- [MAL-2025-143782](https://insights.sbomify.com/MAL-2025-143782/): Malicious code in jabbah-loop-corvus-style-loader (npm) (malicious package)
- [MAL-2025-143781](https://insights.sbomify.com/MAL-2025-143781/): Malicious code in jabbah-leda-install-eslint-config (npm) (malicious package)
- [MAL-2025-143780](https://insights.sbomify.com/MAL-2025-143780/): Malicious code in jabbah-hapi-eslint-config-centauri (npm) (malicious package)
- [MAL-2025-14378](https://insights.sbomify.com/MAL-2025-14378/): Malicious code in alpha-orange-jjww (npm) (malicious package)
- [MAL-2025-143779](https://insights.sbomify.com/MAL-2025-143779/): Malicious code in jabbah-gulp-cross-env-magellan (npm) (malicious package)
- [MAL-2025-143778](https://insights.sbomify.com/MAL-2025-143778/): Malicious code in jabbah-gravity-spectron-webdriver-cassini (npm) (malicious package)
- [MAL-2025-143777](https://insights.sbomify.com/MAL-2025-143777/): Malicious code in jabbah-foundation-auth-sails (npm) (malicious package)
- [MAL-2025-143776](https://insights.sbomify.com/MAL-2025-143776/): Malicious code in jabbah-farout-xanthus-adonis (npm) (malicious package)
- [MAL-2025-143775](https://insights.sbomify.com/MAL-2025-143775/): Malicious code in jabbah-despina-ganymede-indus (npm) (malicious package)
- [MAL-2025-143774](https://insights.sbomify.com/MAL-2025-143774/): Malicious code in jabbah-deimos-fornax-webdriver-mocha (npm) (malicious package)
- [MAL-2025-143773](https://insights.sbomify.com/MAL-2025-143773/): Malicious code in jabbah-cressida-eridanus-loglevel (npm) (malicious package)
- [MAL-2025-143772](https://insights.sbomify.com/MAL-2025-143772/): Malicious code in jabbah-chariklo-odin-zephyr (npm) (malicious package)
- [MAL-2025-143771](https://insights.sbomify.com/MAL-2025-143771/): Malicious code in jabbah-callback-lacerta-wasat (npm) (malicious package)
- [MAL-2025-143770](https://insights.sbomify.com/MAL-2025-143770/): Malicious code in jabbah-blitz-oauth-publish (npm) (malicious package)
- [MAL-2025-14377](https://insights.sbomify.com/MAL-2025-14377/): Malicious code in alpha-november-ogvb (npm) (malicious package)
- [MAL-2025-143769](https://insights.sbomify.com/MAL-2025-143769/): Malicious code in jabbah-astro-update-eleventy (npm) (malicious package)
- [MAL-2025-143768](https://insights.sbomify.com/MAL-2025-143768/): Malicious code in jabbah-aether-heka-library (npm) (malicious package)
- [MAL-2025-143767](https://insights.sbomify.com/MAL-2025-143767/): Malicious code in izar-virgo-library-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-143766](https://insights.sbomify.com/MAL-2025-143766/): Malicious code in izar-transport-transport-xerxes (npm) (malicious package)
- [MAL-2025-143765](https://insights.sbomify.com/MAL-2025-143765/): Malicious code in izar-thuban-lacerta-remark (npm) (malicious package)
- [MAL-2025-143764](https://insights.sbomify.com/MAL-2025-143764/): Malicious code in izar-subscription-bootes-kinetic (npm) (malicious package)
- [MAL-2025-143763](https://insights.sbomify.com/MAL-2025-143763/): Malicious code in izar-sails-eslint-plugin-bootstrap (npm) (malicious package)
- [MAL-2025-143762](https://insights.sbomify.com/MAL-2025-143762/): Malicious code in izar-pyxis-wasat-eris (npm) (malicious package)
- [MAL-2025-143761](https://insights.sbomify.com/MAL-2025-143761/): Malicious code in izar-phoenix-dione-mysql (npm) (malicious package)
- [MAL-2025-143760](https://insights.sbomify.com/MAL-2025-143760/): Malicious code in izar-meteor-nightwatch-callisto (npm) (malicious package)
- [MAL-2025-14376](https://insights.sbomify.com/MAL-2025-14376/): Malicious code in alpha-november-ivsh (npm) (malicious package)
- [MAL-2025-143759](https://insights.sbomify.com/MAL-2025-143759/): Malicious code in izar-mdx-csrf-nightmare (npm) (malicious package)
- [MAL-2025-143758](https://insights.sbomify.com/MAL-2025-143758/): Malicious code in izar-loglevel-unuk-typeorm (npm) (malicious package)
- [MAL-2025-143757](https://insights.sbomify.com/MAL-2025-143757/): Malicious code in izar-kronos-install-epimetheus (npm) (malicious package)
- [MAL-2025-143756](https://insights.sbomify.com/MAL-2025-143756/): Malicious code in izar-fusion-thuban-canopus (npm) (malicious package)
- [MAL-2025-143755](https://insights.sbomify.com/MAL-2025-143755/): Malicious code in izar-delphinus-ursa-hermes (npm) (malicious package)
- [MAL-2025-143754](https://insights.sbomify.com/MAL-2025-143754/): Malicious code in izar-corvus-babel-cors (npm) (malicious package)
- [MAL-2025-143753](https://insights.sbomify.com/MAL-2025-143753/): Malicious code in izar-cassini-ursa-sync (npm) (malicious package)
- [MAL-2025-143752](https://insights.sbomify.com/MAL-2025-143752/): Malicious code in izar-capella-deimos-enceladus (npm) (malicious package)
- [MAL-2025-143751](https://insights.sbomify.com/MAL-2025-143751/): Malicious code in izar-aether-mensa-socketio (npm) (malicious package)
- [MAL-2025-143750](https://insights.sbomify.com/MAL-2025-143750/): Malicious code in iota-wezen-sqlite-hugo (npm) (malicious package)
- [MAL-2025-14375](https://insights.sbomify.com/MAL-2025-14375/): Malicious code in alpha-nectarine-hekq (npm) (malicious package)
- [MAL-2025-143749](https://insights.sbomify.com/MAL-2025-143749/): Malicious code in iota-webdriverio-solis-sedna (npm) (malicious package)
- [MAL-2025-143748](https://insights.sbomify.com/MAL-2025-143748/): Malicious code in iota-vuepress-meissa-query (npm) (malicious package)
- [MAL-2025-143747](https://insights.sbomify.com/MAL-2025-143747/): Malicious code in iota-umbriel-webdriver-manager-ini (npm) (malicious package)
- [MAL-2025-143746](https://insights.sbomify.com/MAL-2025-143746/): Malicious code in iota-umbriel-duplex-selenium (npm) (malicious package)
- [MAL-2025-143745](https://insights.sbomify.com/MAL-2025-143745/): Malicious code in iota-umbra-upgrade-nodejs (npm) (malicious package)
- [MAL-2025-143744](https://insights.sbomify.com/MAL-2025-143744/): Malicious code in iota-triton-writable-cors (npm) (malicious package)
- [MAL-2025-143743](https://insights.sbomify.com/MAL-2025-143743/): Malicious code in iota-terser-webpack-plugin-grus-izar (npm) (malicious package)
- [MAL-2025-143742](https://insights.sbomify.com/MAL-2025-143742/): Malicious code in iota-spinner-dione-xml (npm) (malicious package)
- [MAL-2025-143741](https://insights.sbomify.com/MAL-2025-143741/): Malicious code in iota-restart-zephyr-jasmine (npm) (malicious package)
- [MAL-2025-143740](https://insights.sbomify.com/MAL-2025-143740/): Malicious code in iota-radiant-auth-celeste (npm) (malicious package)
- [MAL-2025-14374](https://insights.sbomify.com/MAL-2025-14374/): Malicious code in alpha-nb1-project (npm) (malicious package)
- [MAL-2025-143739](https://insights.sbomify.com/MAL-2025-143739/): Malicious code in iota-publish-farout-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-143738](https://insights.sbomify.com/MAL-2025-143738/): Malicious code in iota-proxima-luna-promise (npm) (malicious package)
- [MAL-2025-143737](https://insights.sbomify.com/MAL-2025-143737/): Malicious code in iota-pegasus-radiant-xenos (npm) (malicious package)
- [MAL-2025-143736](https://insights.sbomify.com/MAL-2025-143736/): Malicious code in iota-orbit-sirius-pegasus (npm) (malicious package)
- [MAL-2025-143735](https://insights.sbomify.com/MAL-2025-143735/): Malicious code in iota-node-config-nconf-zenith (npm) (malicious package)
- [MAL-2025-143734](https://insights.sbomify.com/MAL-2025-143734/): Malicious code in iota-nightmare-sqlite-bunyan (npm) (malicious package)
- [MAL-2025-143733](https://insights.sbomify.com/MAL-2025-143733/): Malicious code in iota-nestjs-firebase-rest (npm) (malicious package)
- [MAL-2025-143732](https://insights.sbomify.com/MAL-2025-143732/): Malicious code in iota-mira-blitz-celeste (npm) (malicious package)
- [MAL-2025-143731](https://insights.sbomify.com/MAL-2025-143731/): Malicious code in iota-jupiter-bellatrix-lyra (npm) (malicious package)
- [MAL-2025-143730](https://insights.sbomify.com/MAL-2025-143730/): Malicious code in iota-json-release-it-chai (npm) (malicious package)
- [MAL-2025-14373](https://insights.sbomify.com/MAL-2025-14373/): Malicious code in alpha-lima-ogju (npm) (malicious package)
- [MAL-2025-143729](https://insights.sbomify.com/MAL-2025-143729/): Malicious code in iota-jasmine-ini-lyra (npm) (malicious package)
- [MAL-2025-143728](https://insights.sbomify.com/MAL-2025-143728/): Malicious code in iota-iota-avior-postcss-loader (npm) (malicious package)
- [MAL-2025-143727](https://insights.sbomify.com/MAL-2025-143727/): Malicious code in iota-helmet-express-aurora (npm) (malicious package)
- [MAL-2025-143726](https://insights.sbomify.com/MAL-2025-143726/): Malicious code in iota-gulp-colors-library (npm) (malicious package)
- [MAL-2025-143725](https://insights.sbomify.com/MAL-2025-143725/): Malicious code in iota-fomalhaut-less-loader-repository (npm) (malicious package)
- [MAL-2025-143724](https://insights.sbomify.com/MAL-2025-143724/): Malicious code in iota-fetch-cressida-kronos (npm) (malicious package)
- [MAL-2025-143723](https://insights.sbomify.com/MAL-2025-143723/): Malicious code in iota-farout-aquarius-andromeda (npm) (malicious package)
- [MAL-2025-143722](https://insights.sbomify.com/MAL-2025-143722/): Malicious code in iota-event-lynx-semantic-ui (npm) (malicious package)
- [MAL-2025-143721](https://insights.sbomify.com/MAL-2025-143721/): Malicious code in iota-dotenv-safe-webdriver-mocha-mutation (npm) (malicious package)
- [MAL-2025-143720](https://insights.sbomify.com/MAL-2025-143720/): Malicious code in iota-dotenv-parse-variables-envconfig-mdx (npm) (malicious package)
- [MAL-2025-14372](https://insights.sbomify.com/MAL-2025-14372/): Malicious code in alpha-lima-090t (npm) (malicious package)
- [MAL-2025-143719](https://insights.sbomify.com/MAL-2025-143719/): Malicious code in iota-docusaurus-mdx-backend (npm) (malicious package)
- [MAL-2025-143718](https://insights.sbomify.com/MAL-2025-143718/): Malicious code in iota-deneb-quark-mocha (npm) (malicious package)
- [MAL-2025-143717](https://insights.sbomify.com/MAL-2025-143717/): Malicious code in iota-cross-env-socketio-child-process (npm) (malicious package)
- [MAL-2025-143716](https://insights.sbomify.com/MAL-2025-143716/): Malicious code in iota-configstore-sirius-tailwindcss (npm) (malicious package)
- [MAL-2025-143715](https://insights.sbomify.com/MAL-2025-143715/): Malicious code in iota-concurrently-docusaurus-procyon (npm) (malicious package)
- [MAL-2025-143714](https://insights.sbomify.com/MAL-2025-143714/): Malicious code in iota-centaurus-redis-terser (npm) (malicious package)
- [MAL-2025-143713](https://insights.sbomify.com/MAL-2025-143713/): Malicious code in iota-canopus-loopback-eleventy (npm) (malicious package)
- [MAL-2025-143712](https://insights.sbomify.com/MAL-2025-143712/): Malicious code in iota-bellatrix-husky-passport (npm) (malicious package)
- [MAL-2025-143711](https://insights.sbomify.com/MAL-2025-143711/): Malicious code in iota-babel-epimetheus-foundation (npm) (malicious package)
- [MAL-2025-143710](https://insights.sbomify.com/MAL-2025-143710/): Malicious code in iota-astro-ophiuchus-ini (npm) (malicious package)
- [MAL-2025-14371](https://insights.sbomify.com/MAL-2025-14371/): Malicious code in alpha-lemon-kiwi-ewiak (npm) (malicious package)
- [MAL-2025-143709](https://insights.sbomify.com/MAL-2025-143709/): Malicious code in iota-acamar-apollo-cosmos (npm) (malicious package)
- [MAL-2025-143708](https://insights.sbomify.com/MAL-2025-143708/): Malicious code in io-version-spinner-eclipse (npm) (malicious package)
- [MAL-2025-143707](https://insights.sbomify.com/MAL-2025-143707/): Malicious code in io-unuk-pegasus-concurrently (npm) (malicious package)
- [MAL-2025-143706](https://insights.sbomify.com/MAL-2025-143706/): Malicious code in io-sagitta-morgan-nightwatch (npm) (malicious package)
- [MAL-2025-143705](https://insights.sbomify.com/MAL-2025-143705/): Malicious code in io-restart-less-neptune (npm) (malicious package)
- [MAL-2025-143704](https://insights.sbomify.com/MAL-2025-143704/): Malicious code in io-pino-pretty-start-ultra (npm) (malicious package)
- [MAL-2025-143703](https://insights.sbomify.com/MAL-2025-143703/): Malicious code in io-non-blocking-hermes-mocha (npm) (malicious package)
- [MAL-2025-143702](https://insights.sbomify.com/MAL-2025-143702/): Malicious code in io-node-config-rate-limiter-concurrently (npm) (malicious package)
- [MAL-2025-143701](https://insights.sbomify.com/MAL-2025-143701/): Malicious code in io-nestjs-ora-wezen (npm) (malicious package)
- [MAL-2025-143700](https://insights.sbomify.com/MAL-2025-143700/): Malicious code in io-magellan-passport-kinetic (npm) (malicious package)
- [MAL-2025-14370](https://insights.sbomify.com/MAL-2025-14370/): Malicious code in alpha-kilo-whiskey-glryh (npm) (malicious package)
- [MAL-2025-1437](https://insights.sbomify.com/MAL-2025-1437/): Malicious code in pionex-test (npm) (malicious package)
- [MAL-2025-143699](https://insights.sbomify.com/MAL-2025-143699/): Malicious code in io-hercules-css-loader-sync (npm) (malicious package)
- [MAL-2025-143698](https://insights.sbomify.com/MAL-2025-143698/): Malicious code in io-geckodriver-local-publish (npm) (malicious package)
- [MAL-2025-143697](https://insights.sbomify.com/MAL-2025-143697/): Malicious code in io-gacrux-test-soap (npm) (malicious package)
- [MAL-2025-143696](https://insights.sbomify.com/MAL-2025-143696/): Malicious code in io-frontend-jasmine-ursa (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1446/