# Vulnerabilities published in 2025


- [MAL-2025-143695](https://insights.sbomify.com/MAL-2025-143695/): Malicious code in io-eslint-plugin-yonder-unuk (npm) (malicious package)
- [MAL-2025-143694](https://insights.sbomify.com/MAL-2025-143694/): Malicious code in io-elektra-chakra-ui-configstore (npm) (malicious package)
- [MAL-2025-143693](https://insights.sbomify.com/MAL-2025-143693/): Malicious code in io-charon-dactyl-pyxis (npm) (malicious package)
- [MAL-2025-143692](https://insights.sbomify.com/MAL-2025-143692/): Malicious code in io-cache-webdriverio-carina (npm) (malicious package)
- [MAL-2025-143691](https://insights.sbomify.com/MAL-2025-143691/): Malicious code in install-writable-centaurus-wolf (npm) (malicious package)
- [MAL-2025-143690](https://insights.sbomify.com/MAL-2025-143690/): Malicious code in install-uninstall-mira-sass-loader (npm) (malicious package)
- [MAL-2025-14369](https://insights.sbomify.com/MAL-2025-14369/): Malicious code in alpha-juliet-ygjk (npm) (malicious package)
- [MAL-2025-143689](https://insights.sbomify.com/MAL-2025-143689/): Malicious code in install-uninstall-eridanus-nightwatch (npm) (malicious package)
- [MAL-2025-143688](https://insights.sbomify.com/MAL-2025-143688/): Malicious code in install-umbriel-quark-octans (npm) (malicious package)
- [MAL-2025-143687](https://insights.sbomify.com/MAL-2025-143687/): Malicious code in install-testcafe-quark-meissa (npm) (malicious package)
- [MAL-2025-143686](https://insights.sbomify.com/MAL-2025-143686/): Malicious code in install-spinner-dagda-fusion (npm) (malicious package)
- [MAL-2025-143685](https://insights.sbomify.com/MAL-2025-143685/): Malicious code in install-semantic-ui-warp-fork (npm) (malicious package)
- [MAL-2025-143684](https://insights.sbomify.com/MAL-2025-143684/): Malicious code in install-sagitta-forever-repository (npm) (malicious package)
- [MAL-2025-143683](https://insights.sbomify.com/MAL-2025-143683/): Malicious code in install-rollup-spectron-webdriver-proxima (npm) (malicious package)
- [MAL-2025-143682](https://insights.sbomify.com/MAL-2025-143682/): Malicious code in install-rimraf-nova-antares (npm) (malicious package)
- [MAL-2025-143681](https://insights.sbomify.com/MAL-2025-143681/): Malicious code in install-release-it-celeste-xanadu (npm) (malicious package)
- [MAL-2025-143680](https://insights.sbomify.com/MAL-2025-143680/): Malicious code in install-pyxis-rest-prettier (npm) (malicious package)
- [MAL-2025-14368](https://insights.sbomify.com/MAL-2025-14368/): Malicious code in alpha-jqg-project (npm) (malicious package)
- [MAL-2025-143679](https://insights.sbomify.com/MAL-2025-143679/): Malicious code in install-mini-css-extract-plugin-test-sqlite (npm) (malicious package)
- [MAL-2025-143678](https://insights.sbomify.com/MAL-2025-143678/): Malicious code in install-got-dorado-flare (npm) (malicious package)
- [MAL-2025-143677](https://insights.sbomify.com/MAL-2025-143677/): Malicious code in install-europa-arcturus-csv (npm) (malicious package)
- [MAL-2025-143676](https://insights.sbomify.com/MAL-2025-143676/): Malicious code in install-europa-aquarius-cli (npm) (malicious package)
- [MAL-2025-143675](https://insights.sbomify.com/MAL-2025-143675/): Malicious code in install-enif-yildun-pegasus (npm) (malicious package)
- [MAL-2025-143674](https://insights.sbomify.com/MAL-2025-143674/): Malicious code in install-eclipse-supervisor-markdown-pdf (npm) (malicious package)
- [MAL-2025-143673](https://insights.sbomify.com/MAL-2025-143673/): Malicious code in install-cross-env-ultra-radiant (npm) (malicious package)
- [MAL-2025-143672](https://insights.sbomify.com/MAL-2025-143672/): Malicious code in install-config-hydra-pm2 (npm) (malicious package)
- [MAL-2025-143671](https://insights.sbomify.com/MAL-2025-143671/): Malicious code in install-chakra-ui-loopback-antares (npm) (malicious package)
- [MAL-2025-143670](https://insights.sbomify.com/MAL-2025-143670/): Malicious code in install-build-readable-gacrux (npm) (malicious package)
- [MAL-2025-14367](https://insights.sbomify.com/MAL-2025-14367/): Malicious code in alpha-jpx-project (npm) (malicious package)
- [MAL-2025-143669](https://insights.sbomify.com/MAL-2025-143669/): Malicious code in install-betelgeuse-zenith-nodemon (npm) (malicious package)
- [MAL-2025-143668](https://insights.sbomify.com/MAL-2025-143668/): Malicious code in install-bellatrix-firebase-webpack (npm) (malicious package)
- [MAL-2025-143667](https://insights.sbomify.com/MAL-2025-143667/): Malicious code in install-aquarius-jasmine-thuban (npm) (malicious package)
- [MAL-2025-143666](https://insights.sbomify.com/MAL-2025-143666/): Malicious code in inquirer-virgo-global-regulus (npm) (malicious package)
- [MAL-2025-143665](https://insights.sbomify.com/MAL-2025-143665/): Malicious code in inquirer-uglify-js-enceladus-cassini (npm) (malicious package)
- [MAL-2025-143664](https://insights.sbomify.com/MAL-2025-143664/): Malicious code in inquirer-tailwindcss-sqlite-sirius (npm) (malicious package)
- [MAL-2025-143663](https://insights.sbomify.com/MAL-2025-143663/): Malicious code in inquirer-subscription-atlas-nestjs (npm) (malicious package)
- [MAL-2025-143662](https://insights.sbomify.com/MAL-2025-143662/): Malicious code in inquirer-stop-spectron-tethys (npm) (malicious package)
- [MAL-2025-143661](https://insights.sbomify.com/MAL-2025-143661/): Malicious code in inquirer-spinner-telesto-dione (npm) (malicious package)
- [MAL-2025-143660](https://insights.sbomify.com/MAL-2025-143660/): Malicious code in inquirer-sails-bulma-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-14366](https://insights.sbomify.com/MAL-2025-14366/): Malicious code in alpha-horseradish-20ha (npm) (malicious package)
- [MAL-2025-143659](https://insights.sbomify.com/MAL-2025-143659/): Malicious code in inquirer-remark-upgrade-run-script (npm) (malicious package)
- [MAL-2025-143658](https://insights.sbomify.com/MAL-2025-143658/): Malicious code in inquirer-rehype-wezen-relay (npm) (malicious package)
- [MAL-2025-143657](https://insights.sbomify.com/MAL-2025-143657/): Malicious code in inquirer-redis-nebula-public (npm) (malicious package)
- [MAL-2025-143656](https://insights.sbomify.com/MAL-2025-143656/): Malicious code in inquirer-publish-mysql-antares (npm) (malicious package)
- [MAL-2025-143655](https://insights.sbomify.com/MAL-2025-143655/): Malicious code in inquirer-prettier-plugin-markdown-writable-fomalhaut (npm) (malicious package)
- [MAL-2025-143654](https://insights.sbomify.com/MAL-2025-143654/): Malicious code in inquirer-pm2-graphql-miranda (npm) (malicious package)
- [MAL-2025-143653](https://insights.sbomify.com/MAL-2025-143653/): Malicious code in inquirer-optimize-css-assets-webpack-plugin-umbra-repository (npm) (malicious package)
- [MAL-2025-143652](https://insights.sbomify.com/MAL-2025-143652/): Malicious code in inquirer-nextjs-galaxy-hyperion (npm) (malicious package)
- [MAL-2025-143651](https://insights.sbomify.com/MAL-2025-143651/): Malicious code in inquirer-loglevel-meissa-oauth (npm) (malicious package)
- [MAL-2025-143650](https://insights.sbomify.com/MAL-2025-143650/): Malicious code in inquirer-lacerta-build-octans (npm) (malicious package)
- [MAL-2025-14365](https://insights.sbomify.com/MAL-2025-14365/): Malicious code in alpha-honeydew-zucchini-dhnsr (npm) (malicious package)
- [MAL-2025-143649](https://insights.sbomify.com/MAL-2025-143649/): Malicious code in inquirer-hugo-jupiter-envconfig (npm) (malicious package)
- [MAL-2025-143648](https://insights.sbomify.com/MAL-2025-143648/): Malicious code in inquirer-gemini-ultra-version (npm) (malicious package)
- [MAL-2025-143647](https://insights.sbomify.com/MAL-2025-143647/): Malicious code in inquirer-frontend-changelog-lynx (npm) (malicious package)
- [MAL-2025-143646](https://insights.sbomify.com/MAL-2025-143646/): Malicious code in inquirer-duplex-process-hyperion (npm) (malicious package)
- [MAL-2025-143645](https://insights.sbomify.com/MAL-2025-143645/): Malicious code in inquirer-despina-arcturus-sedna (npm) (malicious package)
- [MAL-2025-143644](https://insights.sbomify.com/MAL-2025-143644/): Malicious code in inquirer-cosmos-sqlite-shelljs (npm) (malicious package)
- [MAL-2025-143643](https://insights.sbomify.com/MAL-2025-143643/): Malicious code in inquirer-cli-spinner-antd (npm) (malicious package)
- [MAL-2025-143642](https://insights.sbomify.com/MAL-2025-143642/): Malicious code in inquirer-cli-hermes-commitizen (npm) (malicious package)
- [MAL-2025-143641](https://insights.sbomify.com/MAL-2025-143641/): Malicious code in inquirer-child-process-concurrently-despina (npm) (malicious package)
- [MAL-2025-143640](https://insights.sbomify.com/MAL-2025-143640/): Malicious code in inquirer-chalk-commitlint-config-angular-loopback (npm) (malicious package)
- [MAL-2025-14364](https://insights.sbomify.com/MAL-2025-14364/): Malicious code in alpha-honeydew-whiskey-kgxfc (npm) (malicious package)
- [MAL-2025-143639](https://insights.sbomify.com/MAL-2025-143639/): Malicious code in inquirer-betelgeuse-perseus-centaurus (npm) (malicious package)
- [MAL-2025-143638](https://insights.sbomify.com/MAL-2025-143638/): Malicious code in inquirer-aquarius-lacerta-colors (npm) (malicious package)
- [MAL-2025-143637](https://insights.sbomify.com/MAL-2025-143637/): Malicious code in init-yildun-proxima-async (npm) (malicious package)
- [MAL-2025-143636](https://insights.sbomify.com/MAL-2025-143636/): Malicious code in init-xenos-forever-grus (npm) (malicious package)
- [MAL-2025-143635](https://insights.sbomify.com/MAL-2025-143635/): Malicious code in init-writable-pino-semantic-release (npm) (malicious package)
- [MAL-2025-143634](https://insights.sbomify.com/MAL-2025-143634/): Malicious code in init-wezen-umbriel-hyperion (npm) (malicious package)
- [MAL-2025-143633](https://insights.sbomify.com/MAL-2025-143633/): Malicious code in init-titan-rollup-sagitta (npm) (malicious package)
- [MAL-2025-143632](https://insights.sbomify.com/MAL-2025-143632/): Malicious code in init-subscription-callisto-europa (npm) (malicious package)
- [MAL-2025-143631](https://insights.sbomify.com/MAL-2025-143631/): Malicious code in init-solis-gravity-proxima (npm) (malicious package)
- [MAL-2025-143630](https://insights.sbomify.com/MAL-2025-143630/): Malicious code in init-quito-farout-non-blocking (npm) (malicious package)
- [MAL-2025-14363](https://insights.sbomify.com/MAL-2025-14363/): Malicious code in alpha-honeydew-kxxc (npm) (malicious package)
- [MAL-2025-143629](https://insights.sbomify.com/MAL-2025-143629/): Malicious code in init-postcss-markdown-pdf-sequelize (npm) (malicious package)
- [MAL-2025-143628](https://insights.sbomify.com/MAL-2025-143628/): Malicious code in init-ora-cypress-sails (npm) (malicious package)
- [MAL-2025-143627](https://insights.sbomify.com/MAL-2025-143627/): Malicious code in init-nestjs-loopback-pino (npm) (malicious package)
- [MAL-2025-143626](https://insights.sbomify.com/MAL-2025-143626/): Malicious code in init-kastra-leda-canopus (npm) (malicious package)
- [MAL-2025-143625](https://insights.sbomify.com/MAL-2025-143625/): Malicious code in init-ignite-weywot-webpack (npm) (malicious package)
- [MAL-2025-143624](https://insights.sbomify.com/MAL-2025-143624/): Malicious code in init-hugo-markdownlint-hydra (npm) (malicious package)
- [MAL-2025-143623](https://insights.sbomify.com/MAL-2025-143623/): Malicious code in init-halley-non-blocking-frontend (npm) (malicious package)
- [MAL-2025-143622](https://insights.sbomify.com/MAL-2025-143622/): Malicious code in init-gulp-eslint-config-thuban (npm) (malicious package)
- [MAL-2025-143621](https://insights.sbomify.com/MAL-2025-143621/): Malicious code in init-gemini-cassini-warp (npm) (malicious package)
- [MAL-2025-143620](https://insights.sbomify.com/MAL-2025-143620/): Malicious code in init-europa-cressida-yonder (npm) (malicious package)
- [MAL-2025-14362](https://insights.sbomify.com/MAL-2025-14362/): Malicious code in alpha-grape-quince-wnoma (npm) (malicious package)
- [MAL-2025-143619](https://insights.sbomify.com/MAL-2025-143619/): Malicious code in init-dione-server-pegasus (npm) (malicious package)
- [MAL-2025-143618](https://insights.sbomify.com/MAL-2025-143618/): Malicious code in init-development-barnard-telesto (npm) (malicious package)
- [MAL-2025-143617](https://insights.sbomify.com/MAL-2025-143617/): Malicious code in init-cosmos-corvus-pavo (npm) (malicious package)
- [MAL-2025-143616](https://insights.sbomify.com/MAL-2025-143616/): Malicious code in init-carpo-kastra-auth0 (npm) (malicious package)
- [MAL-2025-143615](https://insights.sbomify.com/MAL-2025-143615/): Malicious code in init-bootes-radiant-aether (npm) (malicious package)
- [MAL-2025-143614](https://insights.sbomify.com/MAL-2025-143614/): Malicious code in init-arcturus-native-server (npm) (malicious package)
- [MAL-2025-143613](https://insights.sbomify.com/MAL-2025-143613/): Malicious code in init-antares-deneb-orbit (npm) (malicious package)
- [MAL-2025-143612](https://insights.sbomify.com/MAL-2025-143612/): Malicious code in ini-xenos-stream-webdriverio (npm) (malicious package)
- [MAL-2025-143611](https://insights.sbomify.com/MAL-2025-143611/): Malicious code in ini-wasat-react-bootstrap-javascript (npm) (malicious package)
- [MAL-2025-143610](https://insights.sbomify.com/MAL-2025-143610/): Malicious code in ini-vuetify-test-chakra-ui (npm) (malicious package)
- [MAL-2025-14361](https://insights.sbomify.com/MAL-2025-14361/): Malicious code in alpha-golf-sihv (npm) (malicious package)
- [MAL-2025-143609](https://insights.sbomify.com/MAL-2025-143609/): Malicious code in ini-tailwindcss-playwright-nova (npm) (malicious package)
- [MAL-2025-143608](https://insights.sbomify.com/MAL-2025-143608/): Malicious code in ini-supervisor-ini-enif (npm) (malicious package)
- [MAL-2025-143607](https://insights.sbomify.com/MAL-2025-143607/): Malicious code in ini-sirius-ursa-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-143606](https://insights.sbomify.com/MAL-2025-143606/): Malicious code in ini-rollup-plugin-gulp-semantic-ui (npm) (malicious package)
- [MAL-2025-143605](https://insights.sbomify.com/MAL-2025-143605/): Malicious code in ini-rigel-framework-helmet (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1447/