# Vulnerabilities published in 2025


- [MAL-2025-143244](https://insights.sbomify.com/MAL-2025-143244/): Malicious code in helmet-atlas-dione-juno (npm) (malicious package)
- [MAL-2025-143243](https://insights.sbomify.com/MAL-2025-143243/): Malicious code in helios-xml-restart-dorado (npm) (malicious package)
- [MAL-2025-143242](https://insights.sbomify.com/MAL-2025-143242/): Malicious code in helios-vuetify-deneb-nebula (npm) (malicious package)
- [MAL-2025-143241](https://insights.sbomify.com/MAL-2025-143241/): Malicious code in helios-uglify-js-nextjs-kaus (npm) (malicious package)
- [MAL-2025-143240](https://insights.sbomify.com/MAL-2025-143240/): Malicious code in helios-quito-chai-commitizen (npm) (malicious package)
- [MAL-2025-14324](https://insights.sbomify.com/MAL-2025-14324/): Malicious code in allocab-marvin (npm) (malicious package)
- [MAL-2025-143239](https://insights.sbomify.com/MAL-2025-143239/): Malicious code in helios-quasar-karma-webdriver-mocha (npm) (malicious package)
- [MAL-2025-143238](https://insights.sbomify.com/MAL-2025-143238/): Malicious code in helios-procyon-acamar-andromeda (npm) (malicious package)
- [MAL-2025-143237](https://insights.sbomify.com/MAL-2025-143237/): Malicious code in helios-odin-start-stream (npm) (malicious package)
- [MAL-2025-143236](https://insights.sbomify.com/MAL-2025-143236/): Malicious code in helios-nightwatch-pavo-test (npm) (malicious package)
- [MAL-2025-143235](https://insights.sbomify.com/MAL-2025-143235/): Malicious code in helios-impulse-meteor-fomalhaut (npm) (malicious package)
- [MAL-2025-143234](https://insights.sbomify.com/MAL-2025-143234/): Malicious code in helios-html-webpack-plugin-colors-achernar (npm) (malicious package)
- [MAL-2025-143233](https://insights.sbomify.com/MAL-2025-143233/): Malicious code in helios-grus-morgan-tailwindcss (npm) (malicious package)
- [MAL-2025-143232](https://insights.sbomify.com/MAL-2025-143232/): Malicious code in helios-google-venus-library (npm) (malicious package)
- [MAL-2025-143231](https://insights.sbomify.com/MAL-2025-143231/): Malicious code in helios-event-carpo-apex (npm) (malicious package)
- [MAL-2025-143230](https://insights.sbomify.com/MAL-2025-143230/): Malicious code in helios-europa-soap-europa (npm) (malicious package)
- [MAL-2025-14323](https://insights.sbomify.com/MAL-2025-14323/): Malicious code in allianz-neo (npm) (malicious package)
- [MAL-2025-143229](https://insights.sbomify.com/MAL-2025-143229/): Malicious code in helios-css-loader-kastra-transform (npm) (malicious package)
- [MAL-2025-143228](https://insights.sbomify.com/MAL-2025-143228/): Malicious code in helios-configstore-orbit-meteor (npm) (malicious package)
- [MAL-2025-143227](https://insights.sbomify.com/MAL-2025-143227/): Malicious code in helios-concurrently-cordelia-proxima (npm) (malicious package)
- [MAL-2025-143226](https://insights.sbomify.com/MAL-2025-143226/): Malicious code in helios-arcturus-rocket-jovian (npm) (malicious package)
- [MAL-2025-143225](https://insights.sbomify.com/MAL-2025-143225/): Malicious code in helios-algol-norma-pipe (npm) (malicious package)
- [MAL-2025-143224](https://insights.sbomify.com/MAL-2025-143224/): Malicious code in helios-achernar-postcss-loader-cypress (npm) (malicious package)
- [MAL-2025-143223](https://insights.sbomify.com/MAL-2025-143223/): Malicious code in helios-acamar-cypress-phoenix (npm) (malicious package)
- [MAL-2025-143222](https://insights.sbomify.com/MAL-2025-143222/): Malicious code in heka-webpack-init-prompts (npm) (malicious package)
- [MAL-2025-143221](https://insights.sbomify.com/MAL-2025-143221/): Malicious code in heka-vulcan-spectron-express (npm) (malicious package)
- [MAL-2025-143220](https://insights.sbomify.com/MAL-2025-143220/): Malicious code in heka-umbra-typeorm-parcel (npm) (malicious package)
- [MAL-2025-14322](https://insights.sbomify.com/MAL-2025-14322/): Malicious code in allcodes (npm) (malicious package)
- [MAL-2025-143219](https://insights.sbomify.com/MAL-2025-143219/): Malicious code in heka-tool-fornax-schema (npm) (malicious package)
- [MAL-2025-143218](https://insights.sbomify.com/MAL-2025-143218/): Malicious code in heka-scorpius-module-registry (npm) (malicious package)
- [MAL-2025-143217](https://insights.sbomify.com/MAL-2025-143217/): Malicious code in heka-run-script-norma-mongodb (npm) (malicious package)
- [MAL-2025-143216](https://insights.sbomify.com/MAL-2025-143216/): Malicious code in heka-rehype-duplex-ursa (npm) (malicious package)
- [MAL-2025-143215](https://insights.sbomify.com/MAL-2025-143215/): Malicious code in heka-quito-pipe-eslint-config (npm) (malicious package)
- [MAL-2025-143214](https://insights.sbomify.com/MAL-2025-143214/): Malicious code in heka-private-electron-builder-gridsome (npm) (malicious package)
- [MAL-2025-143213](https://insights.sbomify.com/MAL-2025-143213/): Malicious code in heka-postgres-update-publish (npm) (malicious package)
- [MAL-2025-143212](https://insights.sbomify.com/MAL-2025-143212/): Malicious code in heka-perseus-jasmine-yonder (npm) (malicious package)
- [MAL-2025-143211](https://insights.sbomify.com/MAL-2025-143211/): Malicious code in heka-pegasus-pino-pretty-mira (npm) (malicious package)
- [MAL-2025-143210](https://insights.sbomify.com/MAL-2025-143210/): Malicious code in heka-ophiuchus-cache-europa (npm) (malicious package)
- [MAL-2025-14321](https://insights.sbomify.com/MAL-2025-14321/): Malicious code in allcash (npm) (malicious package)
- [MAL-2025-143209](https://insights.sbomify.com/MAL-2025-143209/): Malicious code in heka-nebula-rollup-plugin-inquirer (npm) (malicious package)
- [MAL-2025-143208](https://insights.sbomify.com/MAL-2025-143208/): Malicious code in heka-mini-css-extract-plugin-xenos-prompts (npm) (malicious package)
- [MAL-2025-143207](https://insights.sbomify.com/MAL-2025-143207/): Malicious code in heka-lint-pulsar-install (npm) (malicious package)
- [MAL-2025-143206](https://insights.sbomify.com/MAL-2025-143206/): Malicious code in heka-jsonp-triton-fetch (npm) (malicious package)
- [MAL-2025-143205](https://insights.sbomify.com/MAL-2025-143205/): Malicious code in heka-express-axios-eslint-plugin (npm) (malicious package)
- [MAL-2025-143204](https://insights.sbomify.com/MAL-2025-143204/): Malicious code in heka-exec-terser-webpack-plugin-start (npm) (malicious package)
- [MAL-2025-143203](https://insights.sbomify.com/MAL-2025-143203/): Malicious code in heka-europa-europa-gulp (npm) (malicious package)
- [MAL-2025-143202](https://insights.sbomify.com/MAL-2025-143202/): Malicious code in heka-chromedriver-relay-dorado (npm) (malicious package)
- [MAL-2025-143201](https://insights.sbomify.com/MAL-2025-143201/): Malicious code in heka-axios-norma-npm (npm) (malicious package)
- [MAL-2025-143200](https://insights.sbomify.com/MAL-2025-143200/): Malicious code in heka-apex-firebase-hyperion (npm) (malicious package)
- [MAL-2025-14320](https://insights.sbomify.com/MAL-2025-14320/): Malicious code in allbook (npm) (malicious package)
- [MAL-2025-1432](https://insights.sbomify.com/MAL-2025-1432/): Malicious code in p2pb2b-main (npm) (malicious package)
- [MAL-2025-143199](https://insights.sbomify.com/MAL-2025-143199/): Malicious code in hapi-winston-halley-fornax (npm) (malicious package)
- [MAL-2025-143198](https://insights.sbomify.com/MAL-2025-143198/): Malicious code in hapi-run-script-draco-hermes (npm) (malicious package)
- [MAL-2025-143197](https://insights.sbomify.com/MAL-2025-143197/): Malicious code in hapi-public-unuk-publish (npm) (malicious package)
- [MAL-2025-143196](https://insights.sbomify.com/MAL-2025-143196/): Malicious code in hapi-prompts-markdown-pdf-csrf (npm) (malicious package)
- [MAL-2025-143195](https://insights.sbomify.com/MAL-2025-143195/): Malicious code in hapi-pm2-event-element-ui (npm) (malicious package)
- [MAL-2025-143194](https://insights.sbomify.com/MAL-2025-143194/): Malicious code in hapi-phenomic-cors-nebula (npm) (malicious package)
- [MAL-2025-143193](https://insights.sbomify.com/MAL-2025-143193/): Malicious code in hapi-mutation-kronos-deimos (npm) (malicious package)
- [MAL-2025-143192](https://insights.sbomify.com/MAL-2025-143192/): Malicious code in hapi-morgan-dotenv-parse-variables-sirius (npm) (malicious package)
- [MAL-2025-143191](https://insights.sbomify.com/MAL-2025-143191/): Malicious code in hapi-miranda-changelog-ini (npm) (malicious package)
- [MAL-2025-143190](https://insights.sbomify.com/MAL-2025-143190/): Malicious code in hapi-meteor-chromedriver-karma (npm) (malicious package)
- [MAL-2025-14319](https://insights.sbomify.com/MAL-2025-14319/): Malicious code in alkdsjf (npm) (malicious package)
- [MAL-2025-143189](https://insights.sbomify.com/MAL-2025-143189/): Malicious code in hapi-markdown-dotenv-spinner (npm) (malicious package)
- [MAL-2025-143188](https://insights.sbomify.com/MAL-2025-143188/): Malicious code in hapi-lyra-europa-convict (npm) (malicious package)
- [MAL-2025-143187](https://insights.sbomify.com/MAL-2025-143187/): Malicious code in hapi-link-dotenv-registry (npm) (malicious package)
- [MAL-2025-143186](https://insights.sbomify.com/MAL-2025-143186/): Malicious code in hapi-jovian-hugo-umbriel (npm) (malicious package)
- [MAL-2025-143185](https://insights.sbomify.com/MAL-2025-143185/): Malicious code in hapi-iota-pipe-selenium (npm) (malicious package)
- [MAL-2025-143184](https://insights.sbomify.com/MAL-2025-143184/): Malicious code in hapi-impulse-dotenv-parse-variables-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-143183](https://insights.sbomify.com/MAL-2025-143183/): Malicious code in hapi-hyperion-corvus-upgrade (npm) (malicious package)
- [MAL-2025-143182](https://insights.sbomify.com/MAL-2025-143182/): Malicious code in hapi-dynamo-janus-altair (npm) (malicious package)
- [MAL-2025-143181](https://insights.sbomify.com/MAL-2025-143181/): Malicious code in hapi-csv-zenobia-xanadu (npm) (malicious package)
- [MAL-2025-143180](https://insights.sbomify.com/MAL-2025-143180/): Malicious code in hapi-cordelia-nightwatch-radiant (npm) (malicious package)
- [MAL-2025-14318](https://insights.sbomify.com/MAL-2025-14318/): Malicious code in aliya-database (npm) (malicious package)
- [MAL-2025-143179](https://insights.sbomify.com/MAL-2025-143179/): Malicious code in hapi-commitizen-update-semantic-release (npm) (malicious package)
- [MAL-2025-143178](https://insights.sbomify.com/MAL-2025-143178/): Malicious code in hapi-cluster-firebase-elektra (npm) (malicious package)
- [MAL-2025-143177](https://insights.sbomify.com/MAL-2025-143177/): Malicious code in hapi-charon-prettier-plugin-markdown-aquarius (npm) (malicious package)
- [MAL-2025-143176](https://insights.sbomify.com/MAL-2025-143176/): Malicious code in hapi-betelgeuse-elektra-auth0 (npm) (malicious package)
- [MAL-2025-143175](https://insights.sbomify.com/MAL-2025-143175/): Malicious code in hapi-antd-dione-xo (npm) (malicious package)
- [MAL-2025-143174](https://insights.sbomify.com/MAL-2025-143174/): Malicious code in halley-xenon-redis-auth0 (npm) (malicious package)
- [MAL-2025-143173](https://insights.sbomify.com/MAL-2025-143173/): Malicious code in halley-xanadu-rimraf-eris (npm) (malicious package)
- [MAL-2025-143172](https://insights.sbomify.com/MAL-2025-143172/): Malicious code in halley-weywot-publish-umbra (npm) (malicious package)
- [MAL-2025-143171](https://insights.sbomify.com/MAL-2025-143171/): Malicious code in halley-vulcan-nightwatch-nashira (npm) (malicious package)
- [MAL-2025-143170](https://insights.sbomify.com/MAL-2025-143170/): Malicious code in halley-sync-colors-loopback (npm) (malicious package)
- [MAL-2025-14317](https://insights.sbomify.com/MAL-2025-14317/): Malicious code in aliya-anup (npm) (malicious package)
- [MAL-2025-143169](https://insights.sbomify.com/MAL-2025-143169/): Malicious code in halley-superagent-hydra-sqlite (npm) (malicious package)
- [MAL-2025-143168](https://insights.sbomify.com/MAL-2025-143168/): Malicious code in halley-spectron-rimraf-antares (npm) (malicious package)
- [MAL-2025-143167](https://insights.sbomify.com/MAL-2025-143167/): Malicious code in halley-soap-cosmiconfig-axios (npm) (malicious package)
- [MAL-2025-143166](https://insights.sbomify.com/MAL-2025-143166/): Malicious code in halley-semantic-ui-proxima-axios (npm) (malicious package)
- [MAL-2025-143165](https://insights.sbomify.com/MAL-2025-143165/): Malicious code in halley-semantic-release-playwright-jupiter (npm) (malicious package)
- [MAL-2025-143164](https://insights.sbomify.com/MAL-2025-143164/): Malicious code in halley-repository-dorado-cluster (npm) (malicious package)
- [MAL-2025-143163](https://insights.sbomify.com/MAL-2025-143163/): Malicious code in halley-puppeteer-package-fornax (npm) (malicious package)
- [MAL-2025-143162](https://insights.sbomify.com/MAL-2025-143162/): Malicious code in halley-polaris-kinetic-async (npm) (malicious package)
- [MAL-2025-143161](https://insights.sbomify.com/MAL-2025-143161/): Malicious code in halley-pino-pretty-regulus-nightwatch (npm) (malicious package)
- [MAL-2025-143160](https://insights.sbomify.com/MAL-2025-143160/): Malicious code in halley-pino-pretty-delphinus-fusion (npm) (malicious package)
- [MAL-2025-14316](https://insights.sbomify.com/MAL-2025-14316/): Malicious code in alipayjsapi (npm) (malicious package)
- [MAL-2025-143159](https://insights.sbomify.com/MAL-2025-143159/): Malicious code in halley-phoenix-io-webdriverio (npm) (malicious package)
- [MAL-2025-143158](https://insights.sbomify.com/MAL-2025-143158/): Malicious code in halley-ophiuchus-markdownlint-figures (npm) (malicious package)
- [MAL-2025-143157](https://insights.sbomify.com/MAL-2025-143157/): Malicious code in halley-node-config-zenith-puppeteer (npm) (malicious package)
- [MAL-2025-143156](https://insights.sbomify.com/MAL-2025-143156/): Malicious code in halley-mysql-server-sync (npm) (malicious package)
- [MAL-2025-143155](https://insights.sbomify.com/MAL-2025-143155/): Malicious code in halley-mensa-prompts-fomalhaut (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1452/