# Vulnerabilities published in 2025


- [MAL-2025-143514](https://insights.sbomify.com/MAL-2025-143514/): Malicious code in ignite-halley-jovian-flare (npm) (malicious package)
- [MAL-2025-143513](https://insights.sbomify.com/MAL-2025-143513/): Malicious code in ignite-foundation-cluster-spinner (npm) (malicious package)
- [MAL-2025-143512](https://insights.sbomify.com/MAL-2025-143512/): Malicious code in ignite-event-electron-testcafe (npm) (malicious package)
- [MAL-2025-143511](https://insights.sbomify.com/MAL-2025-143511/): Malicious code in ignite-cosmos-nova-farout (npm) (malicious package)
- [MAL-2025-143510](https://insights.sbomify.com/MAL-2025-143510/): Malicious code in ignite-commitlint-config-angular-iota-corvus (npm) (malicious package)
- [MAL-2025-14351](https://insights.sbomify.com/MAL-2025-14351/): Malicious code in alpha-charlie-uniform-bjbtl (npm) (malicious package)
- [MAL-2025-143509](https://insights.sbomify.com/MAL-2025-143509/): Malicious code in ignite-ceres-element-ui-rollup (npm) (malicious package)
- [MAL-2025-143508](https://insights.sbomify.com/MAL-2025-143508/): Malicious code in ignite-cassini-polaris-module (npm) (malicious package)
- [MAL-2025-143507](https://insights.sbomify.com/MAL-2025-143507/): Malicious code in ignite-callback-node-config-tool (npm) (malicious package)
- [MAL-2025-143506](https://insights.sbomify.com/MAL-2025-143506/): Malicious code in ignite-babel-juno-wezen (npm) (malicious package)
- [MAL-2025-143505](https://insights.sbomify.com/MAL-2025-143505/): Malicious code in ignite-antares-terser-webpack-plugin-mini-css-extract-plugin (npm) (malicious package)
- [MAL-2025-143504](https://insights.sbomify.com/MAL-2025-143504/): Malicious code in hyperion-zenith-ganymede-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-143503](https://insights.sbomify.com/MAL-2025-143503/): Malicious code in hyperion-yakutsk-pino-apex (npm) (malicious package)
- [MAL-2025-143502](https://insights.sbomify.com/MAL-2025-143502/): Malicious code in hyperion-wezen-gatsby-elara (npm) (malicious package)
- [MAL-2025-143501](https://insights.sbomify.com/MAL-2025-143501/): Malicious code in hyperion-terser-spica-element-ui (npm) (malicious package)
- [MAL-2025-143500](https://insights.sbomify.com/MAL-2025-143500/): Malicious code in hyperion-server-eclipse-aether (npm) (malicious package)
- [MAL-2025-14350](https://insights.sbomify.com/MAL-2025-14350/): Malicious code in alpha-car-wke3 (npm) (malicious package)
- [MAL-2025-1435](https://insights.sbomify.com/MAL-2025-1435/): Malicious code in pionex-internal (npm) (malicious package)
- [MAL-2025-143499](https://insights.sbomify.com/MAL-2025-143499/): Malicious code in hyperion-sedna-umbra-ursa (npm) (malicious package)
- [MAL-2025-143498](https://insights.sbomify.com/MAL-2025-143498/): Malicious code in hyperion-scorpius-xerxes-cli (npm) (malicious package)
- [MAL-2025-143497](https://insights.sbomify.com/MAL-2025-143497/): Malicious code in hyperion-rollup-plugin-loop-testcafe (npm) (malicious package)
- [MAL-2025-143496](https://insights.sbomify.com/MAL-2025-143496/): Malicious code in hyperion-repository-canopus-aldebaran (npm) (malicious package)
- [MAL-2025-143495](https://insights.sbomify.com/MAL-2025-143495/): Malicious code in hyperion-release-it-halley-radiant (npm) (malicious package)
- [MAL-2025-143494](https://insights.sbomify.com/MAL-2025-143494/): Malicious code in hyperion-pino-pretty-levels-shelljs (npm) (malicious package)
- [MAL-2025-143493](https://insights.sbomify.com/MAL-2025-143493/): Malicious code in hyperion-odin-element-ui-fornax (npm) (malicious package)
- [MAL-2025-143492](https://insights.sbomify.com/MAL-2025-143492/): Malicious code in hyperion-norma-lyra-equinox (npm) (malicious package)
- [MAL-2025-143491](https://insights.sbomify.com/MAL-2025-143491/): Malicious code in hyperion-nightmare-markdown-pdf-gravity (npm) (malicious package)
- [MAL-2025-143490](https://insights.sbomify.com/MAL-2025-143490/): Malicious code in hyperion-nebula-eleventy-betelgeuse (npm) (malicious package)
- [MAL-2025-14349](https://insights.sbomify.com/MAL-2025-14349/): Malicious code in alpha-bravo-06o1 (npm) (malicious package)
- [MAL-2025-143489](https://insights.sbomify.com/MAL-2025-143489/): Malicious code in hyperion-morgan-start-update (npm) (malicious package)
- [MAL-2025-143488](https://insights.sbomify.com/MAL-2025-143488/): Malicious code in hyperion-mocha-start-hermes (npm) (malicious package)
- [MAL-2025-143487](https://insights.sbomify.com/MAL-2025-143487/): Malicious code in hyperion-materialize-nodemon-fork (npm) (malicious package)
- [MAL-2025-143486](https://insights.sbomify.com/MAL-2025-143486/): Malicious code in hyperion-markdown-process-nextjs (npm) (malicious package)
- [MAL-2025-143485](https://insights.sbomify.com/MAL-2025-143485/): Malicious code in hyperion-markdown-pdf-janus-server (npm) (malicious package)
- [MAL-2025-143484](https://insights.sbomify.com/MAL-2025-143484/): Malicious code in hyperion-loglevel-quark-auth0 (npm) (malicious package)
- [MAL-2025-143483](https://insights.sbomify.com/MAL-2025-143483/): Malicious code in hyperion-link-request-meissa (npm) (malicious package)
- [MAL-2025-143482](https://insights.sbomify.com/MAL-2025-143482/): Malicious code in hyperion-jsonp-rimraf-hapi (npm) (malicious package)
- [MAL-2025-143481](https://insights.sbomify.com/MAL-2025-143481/): Malicious code in hyperion-janus-mutation-callback (npm) (malicious package)
- [MAL-2025-143480](https://insights.sbomify.com/MAL-2025-143480/): Malicious code in hyperion-janus-install-markdown-pdf (npm) (malicious package)
- [MAL-2025-14348](https://insights.sbomify.com/MAL-2025-14348/): Malicious code in alpha-banana-eudo (npm) (malicious package)
- [MAL-2025-143479](https://insights.sbomify.com/MAL-2025-143479/): Malicious code in hyperion-iota-hyperion-grus (npm) (malicious package)
- [MAL-2025-143478](https://insights.sbomify.com/MAL-2025-143478/): Malicious code in hyperion-hermes-xerxes-yakutsk (npm) (malicious package)
- [MAL-2025-143477](https://insights.sbomify.com/MAL-2025-143477/): Malicious code in hyperion-hermes-oauth-non-blocking (npm) (malicious package)
- [MAL-2025-143476](https://insights.sbomify.com/MAL-2025-143476/): Malicious code in hyperion-hermes-jsonp-ceres (npm) (malicious package)
- [MAL-2025-143475](https://insights.sbomify.com/MAL-2025-143475/): Malicious code in hyperion-grus-aether-exec (npm) (malicious package)
- [MAL-2025-143474](https://insights.sbomify.com/MAL-2025-143474/): Malicious code in hyperion-ganymede-perseus-middleware (npm) (malicious package)
- [MAL-2025-143473](https://insights.sbomify.com/MAL-2025-143473/): Malicious code in hyperion-express-levels-global (npm) (malicious package)
- [MAL-2025-143472](https://insights.sbomify.com/MAL-2025-143472/): Malicious code in hyperion-eslint-config-oberon-babel (npm) (malicious package)
- [MAL-2025-143471](https://insights.sbomify.com/MAL-2025-143471/): Malicious code in hyperion-epimetheus-pavo-toml (npm) (malicious package)
- [MAL-2025-143470](https://insights.sbomify.com/MAL-2025-143470/): Malicious code in hyperion-elara-weywot-react-bootstrap (npm) (malicious package)
- [MAL-2025-14347](https://insights.sbomify.com/MAL-2025-14347/): Malicious code in alpha-9ly-project (npm) (malicious package)
- [MAL-2025-143469](https://insights.sbomify.com/MAL-2025-143469/): Malicious code in hyperion-dependencies-query-castor (npm) (malicious package)
- [MAL-2025-143468](https://insights.sbomify.com/MAL-2025-143468/): Malicious code in hyperion-cosmos-avior-leda (npm) (malicious package)
- [MAL-2025-143467](https://insights.sbomify.com/MAL-2025-143467/): Malicious code in hyperion-blaze-acamar-equinox (npm) (malicious package)
- [MAL-2025-143466](https://insights.sbomify.com/MAL-2025-143466/): Malicious code in hyperion-bellatrix-carina-carpo (npm) (malicious package)
- [MAL-2025-143465](https://insights.sbomify.com/MAL-2025-143465/): Malicious code in hyperion-auth-concurrently-request (npm) (malicious package)
- [MAL-2025-143464](https://insights.sbomify.com/MAL-2025-143464/): Malicious code in hyperion-auriga-mensa-process (npm) (malicious package)
- [MAL-2025-143463](https://insights.sbomify.com/MAL-2025-143463/): Malicious code in hyperion-aldebaran-node-config-cross-env (npm) (malicious package)
- [MAL-2025-143462](https://insights.sbomify.com/MAL-2025-143462/): Malicious code in hydra-xanadu-yildun-csrf (npm) (malicious package)
- [MAL-2025-143461](https://insights.sbomify.com/MAL-2025-143461/): Malicious code in hydra-wasat-venus-ini (npm) (malicious package)
- [MAL-2025-143460](https://insights.sbomify.com/MAL-2025-143460/): Malicious code in hydra-uninstall-cli-pyxis (npm) (malicious package)
- [MAL-2025-14346](https://insights.sbomify.com/MAL-2025-14346/): Malicious code in alpha-9lp-project (npm) (malicious package)
- [MAL-2025-143459](https://insights.sbomify.com/MAL-2025-143459/): Malicious code in hydra-stream-express-lynx (npm) (malicious package)
- [MAL-2025-143458](https://insights.sbomify.com/MAL-2025-143458/): Malicious code in hydra-standard-dependencies-fornax (npm) (malicious package)
- [MAL-2025-143457](https://insights.sbomify.com/MAL-2025-143457/): Malicious code in hydra-socketio-fornax-firebase (npm) (malicious package)
- [MAL-2025-143456](https://insights.sbomify.com/MAL-2025-143456/): Malicious code in hydra-semantic-release-flare-mutation (npm) (malicious package)
- [MAL-2025-143455](https://insights.sbomify.com/MAL-2025-143455/): Malicious code in hydra-sails-jekyll-pm2 (npm) (malicious package)
- [MAL-2025-143454](https://insights.sbomify.com/MAL-2025-143454/): Malicious code in hydra-rimraf-apollo-gacrux (npm) (malicious package)
- [MAL-2025-143453](https://insights.sbomify.com/MAL-2025-143453/): Malicious code in hydra-rigel-eris-module (npm) (malicious package)
- [MAL-2025-143452](https://insights.sbomify.com/MAL-2025-143452/): Malicious code in hydra-private-quantum-test (npm) (malicious package)
- [MAL-2025-143451](https://insights.sbomify.com/MAL-2025-143451/): Malicious code in hydra-postcss-heka-rigel (npm) (malicious package)
- [MAL-2025-143450](https://insights.sbomify.com/MAL-2025-143450/): Malicious code in hydra-pipe-lint-yonder (npm) (malicious package)
- [MAL-2025-14345](https://insights.sbomify.com/MAL-2025-14345/): Malicious code in alpha-7dd-project (npm) (malicious package)
- [MAL-2025-143449](https://insights.sbomify.com/MAL-2025-143449/): Malicious code in hydra-pavo-taurus-betelgeuse (npm) (malicious package)
- [MAL-2025-143448](https://insights.sbomify.com/MAL-2025-143448/): Malicious code in hydra-ora-npm-nashira (npm) (malicious package)
- [MAL-2025-143447](https://insights.sbomify.com/MAL-2025-143447/): Malicious code in hydra-neptune-ursa-jest (npm) (malicious package)
- [MAL-2025-143446](https://insights.sbomify.com/MAL-2025-143446/): Malicious code in hydra-magellan-forever-astro (npm) (malicious package)
- [MAL-2025-143445](https://insights.sbomify.com/MAL-2025-143445/): Malicious code in hydra-iota-metalsmith-dotenv-safe (npm) (malicious package)
- [MAL-2025-143444](https://insights.sbomify.com/MAL-2025-143444/): Malicious code in hydra-hermes-weywot-hercules (npm) (malicious package)
- [MAL-2025-143443](https://insights.sbomify.com/MAL-2025-143443/): Malicious code in hydra-hapi-webdriver-manager-async (npm) (malicious package)
- [MAL-2025-143442](https://insights.sbomify.com/MAL-2025-143442/): Malicious code in hydra-frontend-testcafe-zenith (npm) (malicious package)
- [MAL-2025-143441](https://insights.sbomify.com/MAL-2025-143441/): Malicious code in hydra-eslint-config-nodejs-triton (npm) (malicious package)
- [MAL-2025-143440](https://insights.sbomify.com/MAL-2025-143440/): Malicious code in hydra-equinox-auriga-enif (npm) (malicious package)
- [MAL-2025-14344](https://insights.sbomify.com/MAL-2025-14344/): Malicious code in alpha-2wb-project (npm) (malicious package)
- [MAL-2025-143439](https://insights.sbomify.com/MAL-2025-143439/): Malicious code in hydra-duplex-ursa-less (npm) (malicious package)
- [MAL-2025-143438](https://insights.sbomify.com/MAL-2025-143438/): Malicious code in hydra-cressida-wasat-polaris (npm) (malicious package)
- [MAL-2025-143437](https://insights.sbomify.com/MAL-2025-143437/): Malicious code in hydra-canopus-subscription-fornax (npm) (malicious package)
- [MAL-2025-143436](https://insights.sbomify.com/MAL-2025-143436/): Malicious code in hydra-browserify-oberon-umbriel (npm) (malicious package)
- [MAL-2025-143435](https://insights.sbomify.com/MAL-2025-143435/): Malicious code in hydra-betelgeuse-prompts-soap (npm) (malicious package)
- [MAL-2025-143434](https://insights.sbomify.com/MAL-2025-143434/): Malicious code in hydra-bellatrix-backend-sadr (npm) (malicious package)
- [MAL-2025-143433](https://insights.sbomify.com/MAL-2025-143433/): Malicious code in husky-xml-kastra-await (npm) (malicious package)
- [MAL-2025-143432](https://insights.sbomify.com/MAL-2025-143432/): Malicious code in husky-xml-dagda-redis (npm) (malicious package)
- [MAL-2025-143431](https://insights.sbomify.com/MAL-2025-143431/): Malicious code in husky-wezen-lyra-deneb (npm) (malicious package)
- [MAL-2025-143430](https://insights.sbomify.com/MAL-2025-143430/): Malicious code in husky-upgrade-soap-jekyll (npm) (malicious package)
- [MAL-2025-14343](https://insights.sbomify.com/MAL-2025-14343/): Malicious code in alpha-1es-project (npm) (malicious package)
- [MAL-2025-143429](https://insights.sbomify.com/MAL-2025-143429/): Malicious code in husky-semantic-release-zenith-iota (npm) (malicious package)
- [MAL-2025-143428](https://insights.sbomify.com/MAL-2025-143428/): Malicious code in husky-remark-sedna-hercules (npm) (malicious package)
- [MAL-2025-143427](https://insights.sbomify.com/MAL-2025-143427/): Malicious code in husky-readable-eleventy-babel (npm) (malicious package)
- [MAL-2025-143426](https://insights.sbomify.com/MAL-2025-143426/): Malicious code in husky-quito-electron-frontend (npm) (malicious package)
- [MAL-2025-143425](https://insights.sbomify.com/MAL-2025-143425/): Malicious code in husky-pyxis-browserify-ganymede (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1449/