# Vulnerabilities published in 2025


- [MAL-2025-143604](https://insights.sbomify.com/MAL-2025-143604/): Malicious code in ini-release-it-pyxis-auriga (npm) (malicious package)
- [MAL-2025-143603](https://insights.sbomify.com/MAL-2025-143603/): Malicious code in ini-rehype-norma-weywot (npm) (malicious package)
- [MAL-2025-143602](https://insights.sbomify.com/MAL-2025-143602/): Malicious code in ini-query-bellatrix-quark (npm) (malicious package)
- [MAL-2025-143601](https://insights.sbomify.com/MAL-2025-143601/): Malicious code in ini-pyxis-arcturus-izar (npm) (malicious package)
- [MAL-2025-143600](https://insights.sbomify.com/MAL-2025-143600/): Malicious code in ini-puppeteer-sirius-heka (npm) (malicious package)
- [MAL-2025-14360](https://insights.sbomify.com/MAL-2025-14360/): Malicious code in alpha-gjs-project (npm) (malicious package)
- [MAL-2025-1436](https://insights.sbomify.com/MAL-2025-1436/): Malicious code in pionex-main (npm) (malicious package)
- [MAL-2025-143599](https://insights.sbomify.com/MAL-2025-143599/): Malicious code in ini-pulsar-cross-env-quantum (npm) (malicious package)
- [MAL-2025-143598](https://insights.sbomify.com/MAL-2025-143598/): Malicious code in ini-polaris-levels-iota (npm) (malicious package)
- [MAL-2025-143597](https://insights.sbomify.com/MAL-2025-143597/): Malicious code in ini-playwright-kaus-weywot (npm) (malicious package)
- [MAL-2025-143596](https://insights.sbomify.com/MAL-2025-143596/): Malicious code in ini-passport-quito-mongoose (npm) (malicious package)
- [MAL-2025-143595](https://insights.sbomify.com/MAL-2025-143595/): Malicious code in ini-neptune-mongodb-mensa (npm) (malicious package)
- [MAL-2025-143594](https://insights.sbomify.com/MAL-2025-143594/): Malicious code in ini-middleware-build-xo (npm) (malicious package)
- [MAL-2025-143593](https://insights.sbomify.com/MAL-2025-143593/): Malicious code in ini-meissa-taurus-avior (npm) (malicious package)
- [MAL-2025-143592](https://insights.sbomify.com/MAL-2025-143592/): Malicious code in ini-lynx-triton-forever (npm) (malicious package)
- [MAL-2025-143591](https://insights.sbomify.com/MAL-2025-143591/): Malicious code in ini-forever-foundation-framework (npm) (malicious package)
- [MAL-2025-143590](https://insights.sbomify.com/MAL-2025-143590/): Malicious code in ini-event-dependencies-umbriel (npm) (malicious package)
- [MAL-2025-14359](https://insights.sbomify.com/MAL-2025-14359/): Malicious code in alpha-foxtrot-zlmy (npm) (malicious package)
- [MAL-2025-143589](https://insights.sbomify.com/MAL-2025-143589/): Malicious code in ini-event-carpo-meteor (npm) (malicious package)
- [MAL-2025-143588](https://insights.sbomify.com/MAL-2025-143588/): Malicious code in ini-duplex-mini-css-extract-plugin-stream (npm) (malicious package)
- [MAL-2025-143587](https://insights.sbomify.com/MAL-2025-143587/): Malicious code in ini-draco-frontend-quark (npm) (malicious package)
- [MAL-2025-143586](https://insights.sbomify.com/MAL-2025-143586/): Malicious code in ini-delphinus-fetch-sync (npm) (malicious package)
- [MAL-2025-143585](https://insights.sbomify.com/MAL-2025-143585/): Malicious code in ini-cypress-celeste-pegasus (npm) (malicious package)
- [MAL-2025-143584](https://insights.sbomify.com/MAL-2025-143584/): Malicious code in ini-cors-barnard-xerxes (npm) (malicious package)
- [MAL-2025-143583](https://insights.sbomify.com/MAL-2025-143583/): Malicious code in ini-chalk-cors-colors (npm) (malicious package)
- [MAL-2025-143582](https://insights.sbomify.com/MAL-2025-143582/): Malicious code in ini-carpo-async-unuk (npm) (malicious package)
- [MAL-2025-143581](https://insights.sbomify.com/MAL-2025-143581/): Malicious code in ini-apex-ursa-gemini (npm) (malicious package)
- [MAL-2025-143580](https://insights.sbomify.com/MAL-2025-143580/): Malicious code in indus-vuepress-gravity-electron-builder (npm) (malicious package)
- [MAL-2025-14358](https://insights.sbomify.com/MAL-2025-14358/): Malicious code in alpha-foxtrot-tango-rucxx (npm) (malicious package)
- [MAL-2025-143579](https://insights.sbomify.com/MAL-2025-143579/): Malicious code in indus-transport-chakra-ui-ini (npm) (malicious package)
- [MAL-2025-143578](https://insights.sbomify.com/MAL-2025-143578/): Malicious code in indus-standard-semantic-release-prompts (npm) (malicious package)
- [MAL-2025-143577](https://insights.sbomify.com/MAL-2025-143577/): Malicious code in indus-server-eridanus-pino-pretty (npm) (malicious package)
- [MAL-2025-143576](https://insights.sbomify.com/MAL-2025-143576/): Malicious code in indus-sagitta-dagda-parcel (npm) (malicious package)
- [MAL-2025-143575](https://insights.sbomify.com/MAL-2025-143575/): Malicious code in indus-resolvers-regulus-mongoose (npm) (malicious package)
- [MAL-2025-143574](https://insights.sbomify.com/MAL-2025-143574/): Malicious code in indus-relay-nightwatch-google (npm) (malicious package)
- [MAL-2025-143573](https://insights.sbomify.com/MAL-2025-143573/): Malicious code in indus-perseus-publish-rate-limiter (npm) (malicious package)
- [MAL-2025-143572](https://insights.sbomify.com/MAL-2025-143572/): Malicious code in indus-passport-oauth-dotenv-safe (npm) (malicious package)
- [MAL-2025-143571](https://insights.sbomify.com/MAL-2025-143571/): Malicious code in indus-optimize-css-assets-webpack-plugin-antd-quasar (npm) (malicious package)
- [MAL-2025-143570](https://insights.sbomify.com/MAL-2025-143570/): Malicious code in indus-nconf-jekyll-yonder (npm) (malicious package)
- [MAL-2025-14357](https://insights.sbomify.com/MAL-2025-14357/): Malicious code in alpha-fig-hr5s (npm) (malicious package)
- [MAL-2025-143569](https://insights.sbomify.com/MAL-2025-143569/): Malicious code in indus-mini-css-extract-plugin-mysql-jupiter (npm) (malicious package)
- [MAL-2025-143568](https://insights.sbomify.com/MAL-2025-143568/): Malicious code in indus-meissa-jasmine-chai (npm) (malicious package)
- [MAL-2025-143567](https://insights.sbomify.com/MAL-2025-143567/): Malicious code in indus-install-procyon-xenos (npm) (malicious package)
- [MAL-2025-143566](https://insights.sbomify.com/MAL-2025-143566/): Malicious code in indus-hercules-configstore-wezen (npm) (malicious package)
- [MAL-2025-143565](https://insights.sbomify.com/MAL-2025-143565/): Malicious code in indus-global-library-parcel (npm) (malicious package)
- [MAL-2025-143564](https://insights.sbomify.com/MAL-2025-143564/): Malicious code in indus-fork-rimraf-forever (npm) (malicious package)
- [MAL-2025-143563](https://insights.sbomify.com/MAL-2025-143563/): Malicious code in indus-elara-selenium-release-it (npm) (malicious package)
- [MAL-2025-143562](https://insights.sbomify.com/MAL-2025-143562/): Malicious code in indus-commitlint-config-angular-cross-env-xanadu (npm) (malicious package)
- [MAL-2025-143561](https://insights.sbomify.com/MAL-2025-143561/): Malicious code in indus-child-process-apollo-karma (npm) (malicious package)
- [MAL-2025-143560](https://insights.sbomify.com/MAL-2025-143560/): Malicious code in indus-callback-achernar-dorado (npm) (malicious package)
- [MAL-2025-14356](https://insights.sbomify.com/MAL-2025-14356/): Malicious code in alpha-encrypt-process-alert-phi (npm) (malicious package)
- [MAL-2025-143559](https://insights.sbomify.com/MAL-2025-143559/): Malicious code in indus-bootes-release-it-mui (npm) (malicious package)
- [MAL-2025-143558](https://insights.sbomify.com/MAL-2025-143558/): Malicious code in indus-backend-sirius-fusion (npm) (malicious package)
- [MAL-2025-143557](https://insights.sbomify.com/MAL-2025-143557/): Malicious code in indus-auth-run-script-capella (npm) (malicious package)
- [MAL-2025-143556](https://insights.sbomify.com/MAL-2025-143556/): Malicious code in indus-astro-materialize-miranda (npm) (malicious package)
- [MAL-2025-143555](https://insights.sbomify.com/MAL-2025-143555/): Malicious code in indus-apex-spawn-europa (npm) (malicious package)
- [MAL-2025-143554](https://insights.sbomify.com/MAL-2025-143554/): Malicious code in impulse-sirius-quantum-local (npm) (malicious package)
- [MAL-2025-143553](https://insights.sbomify.com/MAL-2025-143553/): Malicious code in impulse-rimraf-schema-webdriver-manager (npm) (malicious package)
- [MAL-2025-143552](https://insights.sbomify.com/MAL-2025-143552/): Malicious code in impulse-react-bootstrap-gacrux-stream (npm) (malicious package)
- [MAL-2025-143551](https://insights.sbomify.com/MAL-2025-143551/): Malicious code in impulse-protractor-registry-reveal-md (npm) (malicious package)
- [MAL-2025-143550](https://insights.sbomify.com/MAL-2025-143550/): Malicious code in impulse-pino-eridanus-release-it (npm) (malicious package)
- [MAL-2025-14355](https://insights.sbomify.com/MAL-2025-14355/): Malicious code in alpha-elderberry-cyfo (npm) (malicious package)
- [MAL-2025-143549](https://insights.sbomify.com/MAL-2025-143549/): Malicious code in impulse-optimize-css-assets-webpack-plugin-hermes-sedna (npm) (malicious package)
- [MAL-2025-143548](https://insights.sbomify.com/MAL-2025-143548/): Malicious code in impulse-mdx-quantum-nextjs (npm) (malicious package)
- [MAL-2025-143547](https://insights.sbomify.com/MAL-2025-143547/): Malicious code in impulse-hugo-hermes-tailwindcss (npm) (malicious package)
- [MAL-2025-143546](https://insights.sbomify.com/MAL-2025-143546/): Malicious code in impulse-global-octans-jovian (npm) (malicious package)
- [MAL-2025-143545](https://insights.sbomify.com/MAL-2025-143545/): Malicious code in impulse-gemini-epimetheus-neptune (npm) (malicious package)
- [MAL-2025-143544](https://insights.sbomify.com/MAL-2025-143544/): Malicious code in impulse-fornax-mensa-process (npm) (malicious package)
- [MAL-2025-143543](https://insights.sbomify.com/MAL-2025-143543/): Malicious code in impulse-fornax-element-ui-aether (npm) (malicious package)
- [MAL-2025-143542](https://insights.sbomify.com/MAL-2025-143542/): Malicious code in impulse-event-stop-celeste (npm) (malicious package)
- [MAL-2025-143541](https://insights.sbomify.com/MAL-2025-143541/): Malicious code in impulse-dotenv-safe-prompts-miranda (npm) (malicious package)
- [MAL-2025-143540](https://insights.sbomify.com/MAL-2025-143540/): Malicious code in impulse-dotenv-parse-variables-jest-node-config (npm) (malicious package)
- [MAL-2025-14354](https://insights.sbomify.com/MAL-2025-14354/): Malicious code in alpha-eagle-er4t (npm) (malicious package)
- [MAL-2025-143539](https://insights.sbomify.com/MAL-2025-143539/): Malicious code in impulse-dorado-kinetic-loglevel (npm) (malicious package)
- [MAL-2025-143538](https://insights.sbomify.com/MAL-2025-143538/): Malicious code in impulse-dorado-despina-celeste (npm) (malicious package)
- [MAL-2025-143537](https://insights.sbomify.com/MAL-2025-143537/): Malicious code in impulse-chalk-browserify-loopback (npm) (malicious package)
- [MAL-2025-143536](https://insights.sbomify.com/MAL-2025-143536/): Malicious code in impulse-atlas-nightwatch-venus (npm) (malicious package)
- [MAL-2025-143535](https://insights.sbomify.com/MAL-2025-143535/): Malicious code in impulse-altair-iota-avior (npm) (malicious package)
- [MAL-2025-143534](https://insights.sbomify.com/MAL-2025-143534/): Malicious code in impulse-adonis-lyra-pino-pretty (npm) (malicious package)
- [MAL-2025-143533](https://insights.sbomify.com/MAL-2025-143533/): Malicious code in imperial_chipmunk_yellow-21 (npm) (malicious package)
- [MAL-2025-143532](https://insights.sbomify.com/MAL-2025-143532/): Malicious code in ignite-xenos-uglify-js-hugo (npm) (malicious package)
- [MAL-2025-143531](https://insights.sbomify.com/MAL-2025-143531/): Malicious code in ignite-test-less-loader-kaus (npm) (malicious package)
- [MAL-2025-143530](https://insights.sbomify.com/MAL-2025-143530/): Malicious code in ignite-terser-semantic-release-exec (npm) (malicious package)
- [MAL-2025-14353](https://insights.sbomify.com/MAL-2025-14353/): Malicious code in alpha-dwarf-7dhp (npm) (malicious package)
- [MAL-2025-143529](https://insights.sbomify.com/MAL-2025-143529/): Malicious code in ignite-supervisor-mocha-polaris (npm) (malicious package)
- [MAL-2025-143528](https://insights.sbomify.com/MAL-2025-143528/): Malicious code in ignite-stop-castor-triton (npm) (malicious package)
- [MAL-2025-143527](https://insights.sbomify.com/MAL-2025-143527/): Malicious code in ignite-sqlite-celeste-sass-loader (npm) (malicious package)
- [MAL-2025-143526](https://insights.sbomify.com/MAL-2025-143526/): Malicious code in ignite-spawn-fornax-umbriel (npm) (malicious package)
- [MAL-2025-143525](https://insights.sbomify.com/MAL-2025-143525/): Malicious code in ignite-request-bulma-thuban (npm) (malicious package)
- [MAL-2025-143524](https://insights.sbomify.com/MAL-2025-143524/): Malicious code in ignite-puppeteer-sedna-rimraf (npm) (malicious package)
- [MAL-2025-143523](https://insights.sbomify.com/MAL-2025-143523/): Malicious code in ignite-private-cosmos-nuxtjs (npm) (malicious package)
- [MAL-2025-143522](https://insights.sbomify.com/MAL-2025-143522/): Malicious code in ignite-pm2-postcss-transform (npm) (malicious package)
- [MAL-2025-143521](https://insights.sbomify.com/MAL-2025-143521/): Malicious code in ignite-package-axios-bootstrap (npm) (malicious package)
- [MAL-2025-143520](https://insights.sbomify.com/MAL-2025-143520/): Malicious code in ignite-nodemon-antares-publish (npm) (malicious package)
- [MAL-2025-14352](https://insights.sbomify.com/MAL-2025-14352/): Malicious code in alpha-d8y-project (npm) (malicious package)
- [MAL-2025-143519](https://insights.sbomify.com/MAL-2025-143519/): Malicious code in ignite-morgan-postcss-loader-morgan (npm) (malicious package)
- [MAL-2025-143518](https://insights.sbomify.com/MAL-2025-143518/): Malicious code in ignite-leda-framework-superagent (npm) (malicious package)
- [MAL-2025-143517](https://insights.sbomify.com/MAL-2025-143517/): Malicious code in ignite-jovian-carpo-ganymede (npm) (malicious package)
- [MAL-2025-143516](https://insights.sbomify.com/MAL-2025-143516/): Malicious code in ignite-jabbah-betelgeuse-pavo (npm) (malicious package)
- [MAL-2025-143515](https://insights.sbomify.com/MAL-2025-143515/): Malicious code in ignite-izar-hyperion-gatsby (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1448/