# Vulnerabilities published in 2025


- [MAL-2025-143424](https://insights.sbomify.com/MAL-2025-143424/): Malicious code in husky-polaris-fusion-development (npm) (malicious package)
- [MAL-2025-143423](https://insights.sbomify.com/MAL-2025-143423/): Malicious code in husky-ophiuchus-despina-nebula (npm) (malicious package)
- [MAL-2025-143422](https://insights.sbomify.com/MAL-2025-143422/): Malicious code in husky-meteor-gemini-sirius (npm) (malicious package)
- [MAL-2025-143421](https://insights.sbomify.com/MAL-2025-143421/): Malicious code in husky-loop-writable-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-143420](https://insights.sbomify.com/MAL-2025-143420/): Malicious code in husky-less-ultra-despina (npm) (malicious package)
- [MAL-2025-14342](https://insights.sbomify.com/MAL-2025-14342/): Malicious code in alpha-0ai-project (npm) (malicious package)
- [MAL-2025-143419](https://insights.sbomify.com/MAL-2025-143419/): Malicious code in husky-global-lint-staged-callback (npm) (malicious package)
- [MAL-2025-143418](https://insights.sbomify.com/MAL-2025-143418/): Malicious code in husky-ganymede-pm2-react-bootstrap (npm) (malicious package)
- [MAL-2025-143417](https://insights.sbomify.com/MAL-2025-143417/): Malicious code in husky-fork-child-process-flare (npm) (malicious package)
- [MAL-2025-143416](https://insights.sbomify.com/MAL-2025-143416/): Malicious code in husky-figures-bellatrix-chai (npm) (malicious package)
- [MAL-2025-143415](https://insights.sbomify.com/MAL-2025-143415/): Malicious code in husky-element-ui-rest-eris (npm) (malicious package)
- [MAL-2025-143414](https://insights.sbomify.com/MAL-2025-143414/): Malicious code in husky-cross-env-miranda-eclipse (npm) (malicious package)
- [MAL-2025-143413](https://insights.sbomify.com/MAL-2025-143413/): Malicious code in husky-cli-axios-private (npm) (malicious package)
- [MAL-2025-143412](https://insights.sbomify.com/MAL-2025-143412/): Malicious code in husky-child-process-lint-staged-dynamo (npm) (malicious package)
- [MAL-2025-143411](https://insights.sbomify.com/MAL-2025-143411/): Malicious code in husky-callback-algol-sirius (npm) (malicious package)
- [MAL-2025-143410](https://insights.sbomify.com/MAL-2025-143410/): Malicious code in husky-backend-jovian-ophiuchus (npm) (malicious package)
- [MAL-2025-14341](https://insights.sbomify.com/MAL-2025-14341/): Malicious code in alpha-03t-project (npm) (malicious package)
- [MAL-2025-143409](https://insights.sbomify.com/MAL-2025-143409/): Malicious code in hugo-yonder-bellatrix-mensa (npm) (malicious package)
- [MAL-2025-143408](https://insights.sbomify.com/MAL-2025-143408/): Malicious code in hugo-uninstall-event-global (npm) (malicious package)
- [MAL-2025-143407](https://insights.sbomify.com/MAL-2025-143407/): Malicious code in hugo-transport-node-config-hermes (npm) (malicious package)
- [MAL-2025-143406](https://insights.sbomify.com/MAL-2025-143406/): Malicious code in hugo-tool-ignite-materialize (npm) (malicious package)
- [MAL-2025-143405](https://insights.sbomify.com/MAL-2025-143405/): Malicious code in hugo-toml-blitz-dotenv (npm) (malicious package)
- [MAL-2025-143404](https://insights.sbomify.com/MAL-2025-143404/): Malicious code in hugo-tethys-mini-css-extract-plugin-ceres (npm) (malicious package)
- [MAL-2025-143403](https://insights.sbomify.com/MAL-2025-143403/): Malicious code in hugo-spinner-optimize-css-assets-webpack-plugin-luna (npm) (malicious package)
- [MAL-2025-143402](https://insights.sbomify.com/MAL-2025-143402/): Malicious code in hugo-spectron-webdriver-oauth-husky (npm) (malicious package)
- [MAL-2025-143401](https://insights.sbomify.com/MAL-2025-143401/): Malicious code in hugo-solis-unuk-optimize-css-assets-webpack-plugin (npm) (malicious package)
- [MAL-2025-143400](https://insights.sbomify.com/MAL-2025-143400/): Malicious code in hugo-semantic-ui-halley-blitz (npm) (malicious package)
- [MAL-2025-14340](https://insights.sbomify.com/MAL-2025-14340/): Malicious code in alouer (npm) (malicious package)
- [MAL-2025-1434](https://insights.sbomify.com/MAL-2025-1434/): Malicious code in pionex-dev (npm) (malicious package)
- [MAL-2025-143399](https://insights.sbomify.com/MAL-2025-143399/): Malicious code in hugo-sedna-element-ui-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-143398](https://insights.sbomify.com/MAL-2025-143398/): Malicious code in hugo-rimraf-eslint-nightwatch (npm) (malicious package)
- [MAL-2025-143397](https://insights.sbomify.com/MAL-2025-143397/): Malicious code in hugo-react-bootstrap-nestjs-andromeda (npm) (malicious package)
- [MAL-2025-143396](https://insights.sbomify.com/MAL-2025-143396/): Malicious code in hugo-prompts-install-nodejs (npm) (malicious package)
- [MAL-2025-143395](https://insights.sbomify.com/MAL-2025-143395/): Malicious code in hugo-neptune-mui-terser-webpack-plugin (npm) (malicious package)
- [MAL-2025-143394](https://insights.sbomify.com/MAL-2025-143394/): Malicious code in hugo-neptune-bootstrap-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-143393](https://insights.sbomify.com/MAL-2025-143393/): Malicious code in hugo-mira-xenon-adonis (npm) (malicious package)
- [MAL-2025-143392](https://insights.sbomify.com/MAL-2025-143392/): Malicious code in hugo-mira-node-sass-nashira (npm) (malicious package)
- [MAL-2025-143391](https://insights.sbomify.com/MAL-2025-143391/): Malicious code in hugo-mini-css-extract-plugin-phoebe-chakra-ui (npm) (malicious package)
- [MAL-2025-143390](https://insights.sbomify.com/MAL-2025-143390/): Malicious code in hugo-loglevel-fomalhaut-optimize-css-assets-webpack-plugin (npm) (malicious package)
- [MAL-2025-14339](https://insights.sbomify.com/MAL-2025-14339/): Malicious code in alohye (npm) (malicious package)
- [MAL-2025-143389](https://insights.sbomify.com/MAL-2025-143389/): Malicious code in hugo-io-commitizen-shelljs (npm) (malicious package)
- [MAL-2025-143388](https://insights.sbomify.com/MAL-2025-143388/): Malicious code in hugo-eslint-config-rimraf-nodejs (npm) (malicious package)
- [MAL-2025-143387](https://insights.sbomify.com/MAL-2025-143387/): Malicious code in hugo-elektra-quantum-wasat (npm) (malicious package)
- [MAL-2025-143386](https://insights.sbomify.com/MAL-2025-143386/): Malicious code in hugo-dependencies-quantum-janus (npm) (malicious package)
- [MAL-2025-143385](https://insights.sbomify.com/MAL-2025-143385/): Malicious code in hugo-delphinus-mini-css-extract-plugin-hermes (npm) (malicious package)
- [MAL-2025-143384](https://insights.sbomify.com/MAL-2025-143384/): Malicious code in hugo-cosmiconfig-hugo-canopus (npm) (malicious package)
- [MAL-2025-143383](https://insights.sbomify.com/MAL-2025-143383/): Malicious code in hugo-chromedriver-koa-upgrade (npm) (malicious package)
- [MAL-2025-143382](https://insights.sbomify.com/MAL-2025-143382/): Malicious code in hugo-chariklo-oauth-carina (npm) (malicious package)
- [MAL-2025-143381](https://insights.sbomify.com/MAL-2025-143381/): Malicious code in hugo-chalk-rigel-phoebe (npm) (malicious package)
- [MAL-2025-143380](https://insights.sbomify.com/MAL-2025-143380/): Malicious code in hugo-cassini-gulp-flare (npm) (malicious package)
- [MAL-2025-14338](https://insights.sbomify.com/MAL-2025-14338/): Malicious code in almworks (npm) (malicious package)
- [MAL-2025-143379](https://insights.sbomify.com/MAL-2025-143379/): Malicious code in html-webpack-plugin-zenobia-terser-sqlite (npm) (malicious package)
- [MAL-2025-143378](https://insights.sbomify.com/MAL-2025-143378/): Malicious code in html-webpack-plugin-yakutsk-sass-loader-impulse (npm) (malicious package)
- [MAL-2025-143377](https://insights.sbomify.com/MAL-2025-143377/): Malicious code in html-webpack-plugin-xenon-gacrux-io (npm) (malicious package)
- [MAL-2025-143376](https://insights.sbomify.com/MAL-2025-143376/): Malicious code in html-webpack-plugin-wasat-fornax-eris (npm) (malicious package)
- [MAL-2025-143375](https://insights.sbomify.com/MAL-2025-143375/): Malicious code in html-webpack-plugin-upgrade-remark-enceladus (npm) (malicious package)
- [MAL-2025-143374](https://insights.sbomify.com/MAL-2025-143374/): Malicious code in html-webpack-plugin-transform-google-transport (npm) (malicious package)
- [MAL-2025-143373](https://insights.sbomify.com/MAL-2025-143373/): Malicious code in html-webpack-plugin-sync-perseus-castor (npm) (malicious package)
- [MAL-2025-143372](https://insights.sbomify.com/MAL-2025-143372/): Malicious code in html-webpack-plugin-slides-bunyan-node-config (npm) (malicious package)
- [MAL-2025-143371](https://insights.sbomify.com/MAL-2025-143371/): Malicious code in html-webpack-plugin-sedna-css-loader-nebula (npm) (malicious package)
- [MAL-2025-143370](https://insights.sbomify.com/MAL-2025-143370/): Malicious code in html-webpack-plugin-rigel-heka-gemini (npm) (malicious package)
- [MAL-2025-14337](https://insights.sbomify.com/MAL-2025-14337/): Malicious code in almond-ziggurat-5bco (npm) (malicious package)
- [MAL-2025-143369](https://insights.sbomify.com/MAL-2025-143369/): Malicious code in html-webpack-plugin-procyon-airbnb-relay (npm) (malicious package)
- [MAL-2025-143368](https://insights.sbomify.com/MAL-2025-143368/): Malicious code in html-webpack-plugin-postcss-aether-magellan (npm) (malicious package)
- [MAL-2025-143367](https://insights.sbomify.com/MAL-2025-143367/): Malicious code in html-webpack-plugin-kronos-phoenix-antd (npm) (malicious package)
- [MAL-2025-143366](https://insights.sbomify.com/MAL-2025-143366/): Malicious code in html-webpack-plugin-kastra-yakutsk-hyperion (npm) (malicious package)
- [MAL-2025-143365](https://insights.sbomify.com/MAL-2025-143365/): Malicious code in html-webpack-plugin-janus-nightwatch-epimetheus (npm) (malicious package)
- [MAL-2025-143364](https://insights.sbomify.com/MAL-2025-143364/): Malicious code in html-webpack-plugin-hyperion-vulcan-neptune (npm) (malicious package)
- [MAL-2025-143363](https://insights.sbomify.com/MAL-2025-143363/): Malicious code in html-webpack-plugin-hercules-aldebaran-electron (npm) (malicious package)
- [MAL-2025-143362](https://insights.sbomify.com/MAL-2025-143362/): Malicious code in html-webpack-plugin-ganymede-test-dione (npm) (malicious package)
- [MAL-2025-143361](https://insights.sbomify.com/MAL-2025-143361/): Malicious code in html-webpack-plugin-epimetheus-unuk-configstore (npm) (malicious package)
- [MAL-2025-143360](https://insights.sbomify.com/MAL-2025-143360/): Malicious code in html-webpack-plugin-epimetheus-async-vega (npm) (malicious package)
- [MAL-2025-14336](https://insights.sbomify.com/MAL-2025-14336/): Malicious code in almond-zamia-4ryi (npm) (malicious package)
- [MAL-2025-143359](https://insights.sbomify.com/MAL-2025-143359/): Malicious code in html-webpack-plugin-dagda-axios-jest (npm) (malicious package)
- [MAL-2025-143358](https://insights.sbomify.com/MAL-2025-143358/): Malicious code in html-webpack-plugin-csrf-link-changelog (npm) (malicious package)
- [MAL-2025-143357](https://insights.sbomify.com/MAL-2025-143357/): Malicious code in html-webpack-plugin-cache-spawn-jovian (npm) (malicious package)
- [MAL-2025-143356](https://insights.sbomify.com/MAL-2025-143356/): Malicious code in html-webpack-plugin-astro-blitz-procyon (npm) (malicious package)
- [MAL-2025-143355](https://insights.sbomify.com/MAL-2025-143355/): Malicious code in hexo-zenith-cypress-europa (npm) (malicious package)
- [MAL-2025-143354](https://insights.sbomify.com/MAL-2025-143354/): Malicious code in hexo-spectron-webdriver-odin-library (npm) (malicious package)
- [MAL-2025-143353](https://insights.sbomify.com/MAL-2025-143353/): Malicious code in hexo-sirius-karma-juno (npm) (malicious package)
- [MAL-2025-143352](https://insights.sbomify.com/MAL-2025-143352/): Malicious code in hexo-sails-element-ui-jsonp (npm) (malicious package)
- [MAL-2025-143351](https://insights.sbomify.com/MAL-2025-143351/): Malicious code in hexo-sagitta-commitlint-halley (npm) (malicious package)
- [MAL-2025-143350](https://insights.sbomify.com/MAL-2025-143350/): Malicious code in hexo-quantum-vuetify-update (npm) (malicious package)
- [MAL-2025-14335](https://insights.sbomify.com/MAL-2025-14335/): Malicious code in almond-sierra-rn4s (npm) (malicious package)
- [MAL-2025-143349](https://insights.sbomify.com/MAL-2025-143349/): Malicious code in hexo-procyon-neptune-spectron-webdriver (npm) (malicious package)
- [MAL-2025-143348](https://insights.sbomify.com/MAL-2025-143348/): Malicious code in hexo-ora-quark-loglevel (npm) (malicious package)
- [MAL-2025-143347](https://insights.sbomify.com/MAL-2025-143347/): Malicious code in hexo-norma-cygnus-child-process (npm) (malicious package)
- [MAL-2025-143346](https://insights.sbomify.com/MAL-2025-143346/): Malicious code in hexo-mocha-carpo-element-ui (npm) (malicious package)
- [MAL-2025-143345](https://insights.sbomify.com/MAL-2025-143345/): Malicious code in hexo-lacerta-colors-deneb (npm) (malicious package)
- [MAL-2025-143344](https://insights.sbomify.com/MAL-2025-143344/): Malicious code in hexo-json-auth-vuepress (npm) (malicious package)
- [MAL-2025-143343](https://insights.sbomify.com/MAL-2025-143343/): Malicious code in hexo-iota-release-it-epimetheus (npm) (malicious package)
- [MAL-2025-143342](https://insights.sbomify.com/MAL-2025-143342/): Malicious code in hexo-hugo-apollo-kronos (npm) (malicious package)
- [MAL-2025-143341](https://insights.sbomify.com/MAL-2025-143341/): Malicious code in hexo-fetch-jwt-typeorm (npm) (malicious package)
- [MAL-2025-143340](https://insights.sbomify.com/MAL-2025-143340/): Malicious code in hexo-docusaurus-hexo-rimraf (npm) (malicious package)
- [MAL-2025-14334](https://insights.sbomify.com/MAL-2025-14334/): Malicious code in almond-raspberry-fnt5 (npm) (malicious package)
- [MAL-2025-143339](https://insights.sbomify.com/MAL-2025-143339/): Malicious code in hexo-csrf-slides-install (npm) (malicious package)
- [MAL-2025-143338](https://insights.sbomify.com/MAL-2025-143338/): Malicious code in hexo-child-process-chromedriver-jupiter (npm) (malicious package)
- [MAL-2025-143337](https://insights.sbomify.com/MAL-2025-143337/): Malicious code in hexo-changelog-sagitta-nconf (npm) (malicious package)
- [MAL-2025-143336](https://insights.sbomify.com/MAL-2025-143336/): Malicious code in hexo-apollo-janus-pm2 (npm) (malicious package)
- [MAL-2025-143335](https://insights.sbomify.com/MAL-2025-143335/): Malicious code in hermes-zenobia-wasat-chai (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1450/