# Vulnerabilities published in 2025


- [MAL-2025-143154](https://insights.sbomify.com/MAL-2025-143154/): Malicious code in halley-markdown-pdf-terser-webpack-plugin-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-143153](https://insights.sbomify.com/MAL-2025-143153/): Malicious code in halley-local-airbnb-commitizen (npm) (malicious package)
- [MAL-2025-143152](https://insights.sbomify.com/MAL-2025-143152/): Malicious code in halley-kastra-protractor-perseus (npm) (malicious package)
- [MAL-2025-143151](https://insights.sbomify.com/MAL-2025-143151/): Malicious code in halley-jupiter-norma-polaris (npm) (malicious package)
- [MAL-2025-143150](https://insights.sbomify.com/MAL-2025-143150/): Malicious code in halley-jovian-carpo-sadr (npm) (malicious package)
- [MAL-2025-14315](https://insights.sbomify.com/MAL-2025-14315/): Malicious code in alior-styles (npm) (malicious package)
- [MAL-2025-143149](https://insights.sbomify.com/MAL-2025-143149/): Malicious code in halley-izar-acamar-nebula (npm) (malicious package)
- [MAL-2025-143148](https://insights.sbomify.com/MAL-2025-143148/): Malicious code in halley-install-pavo-superagent (npm) (malicious package)
- [MAL-2025-143147](https://insights.sbomify.com/MAL-2025-143147/): Malicious code in halley-ini-neptune-quasar (npm) (malicious package)
- [MAL-2025-143146](https://insights.sbomify.com/MAL-2025-143146/): Malicious code in halley-ignite-protractor-sync (npm) (malicious package)
- [MAL-2025-143145](https://insights.sbomify.com/MAL-2025-143145/): Malicious code in halley-hugo-node-config-helmet (npm) (malicious package)
- [MAL-2025-143144](https://insights.sbomify.com/MAL-2025-143144/): Malicious code in halley-grunt-firebase-nebula (npm) (malicious package)
- [MAL-2025-143143](https://insights.sbomify.com/MAL-2025-143143/): Malicious code in halley-graphql-miranda-changelog (npm) (malicious package)
- [MAL-2025-143142](https://insights.sbomify.com/MAL-2025-143142/): Malicious code in halley-graphql-europa-eridanus (npm) (malicious package)
- [MAL-2025-143141](https://insights.sbomify.com/MAL-2025-143141/): Malicious code in halley-framework-xanthus-tailwindcss (npm) (malicious package)
- [MAL-2025-143140](https://insights.sbomify.com/MAL-2025-143140/): Malicious code in halley-exec-cordelia-polaris (npm) (malicious package)
- [MAL-2025-14314](https://insights.sbomify.com/MAL-2025-14314/): Malicious code in alinova (npm) (malicious package)
- [MAL-2025-143139](https://insights.sbomify.com/MAL-2025-143139/): Malicious code in halley-eslint-plugin-google-phoenix (npm) (malicious package)
- [MAL-2025-143138](https://insights.sbomify.com/MAL-2025-143138/): Malicious code in halley-enceladus-install-carpo (npm) (malicious package)
- [MAL-2025-143137](https://insights.sbomify.com/MAL-2025-143137/): Malicious code in halley-eclipse-pavo-yakutsk (npm) (malicious package)
- [MAL-2025-143136](https://insights.sbomify.com/MAL-2025-143136/): Malicious code in halley-dotenv-safe-rehype-cross-env (npm) (malicious package)
- [MAL-2025-143135](https://insights.sbomify.com/MAL-2025-143135/): Malicious code in halley-dotenv-parse-variables-hermes-promise (npm) (malicious package)
- [MAL-2025-143134](https://insights.sbomify.com/MAL-2025-143134/): Malicious code in halley-cressida-gacrux-hyperion (npm) (malicious package)
- [MAL-2025-143133](https://insights.sbomify.com/MAL-2025-143133/): Malicious code in halley-cosmiconfig-nodejs-ganymede (npm) (malicious package)
- [MAL-2025-143132](https://insights.sbomify.com/MAL-2025-143132/): Malicious code in halley-centauri-norma-nova (npm) (malicious package)
- [MAL-2025-143131](https://insights.sbomify.com/MAL-2025-143131/): Malicious code in halley-castor-less-loader-quasar (npm) (malicious package)
- [MAL-2025-143130](https://insights.sbomify.com/MAL-2025-143130/): Malicious code in halley-auth-vega-eslint-plugin (npm) (malicious package)
- [MAL-2025-14313](https://insights.sbomify.com/MAL-2025-14313/): Malicious code in alinaseh (npm) (malicious package)
- [MAL-2025-143129](https://insights.sbomify.com/MAL-2025-143129/): Malicious code in halley-auriga-prettier-plugin-markdown-rest (npm) (malicious package)
- [MAL-2025-143128](https://insights.sbomify.com/MAL-2025-143128/): Malicious code in halley-alphard-process-async (npm) (malicious package)
- [MAL-2025-143127](https://insights.sbomify.com/MAL-2025-143127/): Malicious code in halley-airbnb-toml-jovian (npm) (malicious package)
- [MAL-2025-143126](https://insights.sbomify.com/MAL-2025-143126/): Malicious code in gulp-xanadu-terser-prompts (npm) (malicious package)
- [MAL-2025-143125](https://insights.sbomify.com/MAL-2025-143125/): Malicious code in gulp-webdriver-mocha-yildun-iota (npm) (malicious package)
- [MAL-2025-143124](https://insights.sbomify.com/MAL-2025-143124/): Malicious code in gulp-redis-request-meissa (npm) (malicious package)
- [MAL-2025-143123](https://insights.sbomify.com/MAL-2025-143123/): Malicious code in gulp-quito-typeorm-husky (npm) (malicious package)
- [MAL-2025-143122](https://insights.sbomify.com/MAL-2025-143122/): Malicious code in gulp-quark-neptune-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-143121](https://insights.sbomify.com/MAL-2025-143121/): Malicious code in gulp-package-remark-non-blocking (npm) (malicious package)
- [MAL-2025-143120](https://insights.sbomify.com/MAL-2025-143120/): Malicious code in gulp-nodejs-bellatrix-process (npm) (malicious package)
- [MAL-2025-14312](https://insights.sbomify.com/MAL-2025-14312/): Malicious code in alicov (npm) (malicious package)
- [MAL-2025-143119](https://insights.sbomify.com/MAL-2025-143119/): Malicious code in gulp-nightmare-postcss-cordelia (npm) (malicious package)
- [MAL-2025-143118](https://insights.sbomify.com/MAL-2025-143118/): Malicious code in gulp-mensa-izar-changelog (npm) (malicious package)
- [MAL-2025-143117](https://insights.sbomify.com/MAL-2025-143117/): Malicious code in gulp-json-buffer-grus (npm) (malicious package)
- [MAL-2025-143116](https://insights.sbomify.com/MAL-2025-143116/): Malicious code in gulp-iota-sass-loader-cygnus (npm) (malicious package)
- [MAL-2025-143115](https://insights.sbomify.com/MAL-2025-143115/): Malicious code in gulp-command-luna-zephyr (npm) (malicious package)
- [MAL-2025-143114](https://insights.sbomify.com/MAL-2025-143114/): Malicious code in gulp-cluster-chalk-phoenix (npm) (malicious package)
- [MAL-2025-143113](https://insights.sbomify.com/MAL-2025-143113/): Malicious code in gulp-celeste-celeste-dorado (npm) (malicious package)
- [MAL-2025-143112](https://insights.sbomify.com/MAL-2025-143112/): Malicious code in gulp-browserify-public-betelgeuse (npm) (malicious package)
- [MAL-2025-143111](https://insights.sbomify.com/MAL-2025-143111/): Malicious code in gulp-blitz-radiant-lint (npm) (malicious package)
- [MAL-2025-143110](https://insights.sbomify.com/MAL-2025-143110/): Malicious code in gulp-await-antares-apex (npm) (malicious package)
- [MAL-2025-14311](https://insights.sbomify.com/MAL-2025-14311/): Malicious code in alicon (npm) (malicious package)
- [MAL-2025-143109](https://insights.sbomify.com/MAL-2025-143109/): Malicious code in gulp-avior-dependencies-tool (npm) (malicious package)
- [MAL-2025-143108](https://insights.sbomify.com/MAL-2025-143108/): Malicious code in grus-vulcan-postcss-terser (npm) (malicious package)
- [MAL-2025-143107](https://insights.sbomify.com/MAL-2025-143107/): Malicious code in grus-vortex-astro-sedna (npm) (malicious package)
- [MAL-2025-143106](https://insights.sbomify.com/MAL-2025-143106/): Malicious code in grus-ursa-ganymede-semantic-ui (npm) (malicious package)
- [MAL-2025-143105](https://insights.sbomify.com/MAL-2025-143105/): Malicious code in grus-typeorm-koa-unuk (npm) (malicious package)
- [MAL-2025-143104](https://insights.sbomify.com/MAL-2025-143104/): Malicious code in grus-tethys-dagda-pino-pretty (npm) (malicious package)
- [MAL-2025-143103](https://insights.sbomify.com/MAL-2025-143103/): Malicious code in grus-taurus-xml-kinetic (npm) (malicious package)
- [MAL-2025-143102](https://insights.sbomify.com/MAL-2025-143102/): Malicious code in grus-remark-transport-framework (npm) (malicious package)
- [MAL-2025-143101](https://insights.sbomify.com/MAL-2025-143101/): Malicious code in grus-pulsar-sqlite-geckodriver (npm) (malicious package)
- [MAL-2025-143100](https://insights.sbomify.com/MAL-2025-143100/): Malicious code in grus-publish-carpo-postgres (npm) (malicious package)
- [MAL-2025-14310](https://insights.sbomify.com/MAL-2025-14310/): Malicious code in alico (npm) (malicious package)
- [MAL-2025-1431](https://insights.sbomify.com/MAL-2025-1431/): Malicious code in p2pb2b-internal (npm) (malicious package)
- [MAL-2025-143099](https://insights.sbomify.com/MAL-2025-143099/): Malicious code in grus-prettier-plugin-markdown-babel-postgres (npm) (malicious package)
- [MAL-2025-143098](https://insights.sbomify.com/MAL-2025-143098/): Malicious code in grus-polaris-cressida-europa (npm) (malicious package)
- [MAL-2025-143097](https://insights.sbomify.com/MAL-2025-143097/): Malicious code in grus-ora-cosmiconfig-cluster (npm) (malicious package)
- [MAL-2025-143096](https://insights.sbomify.com/MAL-2025-143096/): Malicious code in grus-nodejs-framework-typeorm (npm) (malicious package)
- [MAL-2025-143095](https://insights.sbomify.com/MAL-2025-143095/): Malicious code in grus-nashira-lint-regulus (npm) (malicious package)
- [MAL-2025-143094](https://insights.sbomify.com/MAL-2025-143094/): Malicious code in grus-magellan-typeorm-jest (npm) (malicious package)
- [MAL-2025-143093](https://insights.sbomify.com/MAL-2025-143093/): Malicious code in grus-jwt-transform-ceres (npm) (malicious package)
- [MAL-2025-143092](https://insights.sbomify.com/MAL-2025-143092/): Malicious code in grus-envconfig-halley-upgrade (npm) (malicious package)
- [MAL-2025-143091](https://insights.sbomify.com/MAL-2025-143091/): Malicious code in grus-css-loader-ophiuchus-scripts (npm) (malicious package)
- [MAL-2025-143090](https://insights.sbomify.com/MAL-2025-143090/): Malicious code in grus-concurrently-markdownlint-ceres (npm) (malicious package)
- [MAL-2025-14309](https://insights.sbomify.com/MAL-2025-14309/): Malicious code in alicaptor (npm) (malicious package)
- [MAL-2025-143089](https://insights.sbomify.com/MAL-2025-143089/): Malicious code in grus-child-process-server-inquirer (npm) (malicious package)
- [MAL-2025-143088](https://insights.sbomify.com/MAL-2025-143088/): Malicious code in grus-chai-library-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-143087](https://insights.sbomify.com/MAL-2025-143087/): Malicious code in grus-celeste-rigel-iota (npm) (malicious package)
- [MAL-2025-143086](https://insights.sbomify.com/MAL-2025-143086/): Malicious code in grus-carina-dorado-typeorm (npm) (malicious package)
- [MAL-2025-143085](https://insights.sbomify.com/MAL-2025-143085/): Malicious code in grus-canopus-mutation-quantum (npm) (malicious package)
- [MAL-2025-143084](https://insights.sbomify.com/MAL-2025-143084/): Malicious code in grus-barnard-algol-duplex (npm) (malicious package)
- [MAL-2025-143083](https://insights.sbomify.com/MAL-2025-143083/): Malicious code in grus-backend-webdriver-mocha-transform (npm) (malicious package)
- [MAL-2025-143082](https://insights.sbomify.com/MAL-2025-143082/): Malicious code in grus-avior-sirius-postcss (npm) (malicious package)
- [MAL-2025-143081](https://insights.sbomify.com/MAL-2025-143081/): Malicious code in grunt-yonder-deimos-aether (npm) (malicious package)
- [MAL-2025-143080](https://insights.sbomify.com/MAL-2025-143080/): Malicious code in grunt-yaml-testcafe-tailwindcss (npm) (malicious package)
- [MAL-2025-14308](https://insights.sbomify.com/MAL-2025-14308/): Malicious code in alibata (npm) (malicious package)
- [MAL-2025-143079](https://insights.sbomify.com/MAL-2025-143079/): Malicious code in grunt-xml-mira-axios (npm) (malicious package)
- [MAL-2025-143078](https://insights.sbomify.com/MAL-2025-143078/): Malicious code in grunt-vega-deneb-uglify-js (npm) (malicious package)
- [MAL-2025-143077](https://insights.sbomify.com/MAL-2025-143077/): Malicious code in grunt-stream-rest-browserify (npm) (malicious package)
- [MAL-2025-143076](https://insights.sbomify.com/MAL-2025-143076/): Malicious code in grunt-sails-astro-rigel (npm) (malicious package)
- [MAL-2025-143075](https://insights.sbomify.com/MAL-2025-143075/): Malicious code in grunt-rimraf-altair-enif (npm) (malicious package)
- [MAL-2025-143074](https://insights.sbomify.com/MAL-2025-143074/): Malicious code in grunt-restart-triton-chalk (npm) (malicious package)
- [MAL-2025-143073](https://insights.sbomify.com/MAL-2025-143073/): Malicious code in grunt-quito-postcss-loader-koa (npm) (malicious package)
- [MAL-2025-143072](https://insights.sbomify.com/MAL-2025-143072/): Malicious code in grunt-public-yonder-ultra (npm) (malicious package)
- [MAL-2025-143071](https://insights.sbomify.com/MAL-2025-143071/): Malicious code in grunt-promise-vuetify-middleware (npm) (malicious package)
- [MAL-2025-143070](https://insights.sbomify.com/MAL-2025-143070/): Malicious code in grunt-prettier-lacerta-miranda (npm) (malicious package)
- [MAL-2025-14307](https://insights.sbomify.com/MAL-2025-14307/): Malicious code in ali-contributors (npm) (malicious package)
- [MAL-2025-143069](https://insights.sbomify.com/MAL-2025-143069/): Malicious code in grunt-prettier-chromedriver-husky (npm) (malicious package)
- [MAL-2025-143068](https://insights.sbomify.com/MAL-2025-143068/): Malicious code in grunt-pegasus-carpo-soap (npm) (malicious package)
- [MAL-2025-143067](https://insights.sbomify.com/MAL-2025-143067/): Malicious code in grunt-lint-lacerta-yakutsk (npm) (malicious package)
- [MAL-2025-143066](https://insights.sbomify.com/MAL-2025-143066/): Malicious code in grunt-leda-fomalhaut-publish (npm) (malicious package)
- [MAL-2025-143065](https://insights.sbomify.com/MAL-2025-143065/): Malicious code in grunt-helmet-jasmine-loop (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1453/