# Vulnerabilities published in 2025


- [MAL-2025-143064](https://insights.sbomify.com/MAL-2025-143064/): Malicious code in grunt-geckodriver-puppeteer-optimize-css-assets-webpack-plugin (npm) (malicious package)
- [MAL-2025-143063](https://insights.sbomify.com/MAL-2025-143063/): Malicious code in grunt-fornax-scripts-vulcan (npm) (malicious package)
- [MAL-2025-143062](https://insights.sbomify.com/MAL-2025-143062/): Malicious code in grunt-envconfig-bootes-eslint-plugin (npm) (malicious package)
- [MAL-2025-143061](https://insights.sbomify.com/MAL-2025-143061/): Malicious code in grunt-element-ui-sqlite-request (npm) (malicious package)
- [MAL-2025-143060](https://insights.sbomify.com/MAL-2025-143060/): Malicious code in grunt-electron-pulsar-kinetic (npm) (malicious package)
- [MAL-2025-14306](https://insights.sbomify.com/MAL-2025-14306/): Malicious code in ali-contributor (npm) (malicious package)
- [MAL-2025-143059](https://insights.sbomify.com/MAL-2025-143059/): Malicious code in grunt-development-postcss-loader-hydra (npm) (malicious package)
- [MAL-2025-143058](https://insights.sbomify.com/MAL-2025-143058/): Malicious code in grunt-cross-env-init-phenomic (npm) (malicious package)
- [MAL-2025-143057](https://insights.sbomify.com/MAL-2025-143057/): Malicious code in grunt-cosmiconfig-inquirer-cosmos (npm) (malicious package)
- [MAL-2025-143056](https://insights.sbomify.com/MAL-2025-143056/): Malicious code in grunt-chai-impulse-centauri (npm) (malicious package)
- [MAL-2025-143055](https://insights.sbomify.com/MAL-2025-143055/): Malicious code in grunt-bunyan-convict-forever (npm) (malicious package)
- [MAL-2025-143054](https://insights.sbomify.com/MAL-2025-143054/): Malicious code in grunt-bootstrap-mongoose-elektra (npm) (malicious package)
- [MAL-2025-143053](https://insights.sbomify.com/MAL-2025-143053/): Malicious code in grunt-astro-geckodriver-standard (npm) (malicious package)
- [MAL-2025-143052](https://insights.sbomify.com/MAL-2025-143052/): Malicious code in grunt-ariel-chakra-ui-hugo (npm) (malicious package)
- [MAL-2025-143051](https://insights.sbomify.com/MAL-2025-143051/): Malicious code in gridsome-sails-celeste-publish (npm) (malicious package)
- [MAL-2025-143050](https://insights.sbomify.com/MAL-2025-143050/): Malicious code in gridsome-release-it-cluster-antares (npm) (malicious package)
- [MAL-2025-14305](https://insights.sbomify.com/MAL-2025-14305/): Malicious code in algomath (npm) (malicious package)
- [MAL-2025-143049](https://insights.sbomify.com/MAL-2025-143049/): Malicious code in gridsome-orbit-sqlite-redis (npm) (malicious package)
- [MAL-2025-143048](https://insights.sbomify.com/MAL-2025-143048/): Malicious code in gridsome-optimize-css-assets-webpack-plugin-request-aurora (npm) (malicious package)
- [MAL-2025-143047](https://insights.sbomify.com/MAL-2025-143047/): Malicious code in gridsome-oauth-bulma-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-143046](https://insights.sbomify.com/MAL-2025-143046/): Malicious code in gridsome-library-jsonp-terser (npm) (malicious package)
- [MAL-2025-143045](https://insights.sbomify.com/MAL-2025-143045/): Malicious code in gridsome-hermes-nightwatch-aldebaran (npm) (malicious package)
- [MAL-2025-143044](https://insights.sbomify.com/MAL-2025-143044/): Malicious code in gridsome-hapi-comet-jovian (npm) (malicious package)
- [MAL-2025-143043](https://insights.sbomify.com/MAL-2025-143043/): Malicious code in gridsome-grunt-lynx-readable (npm) (malicious package)
- [MAL-2025-143042](https://insights.sbomify.com/MAL-2025-143042/): Malicious code in gridsome-gridsome-centaurus-helios (npm) (malicious package)
- [MAL-2025-143041](https://insights.sbomify.com/MAL-2025-143041/): Malicious code in gridsome-geckodriver-envconfig-nebula (npm) (malicious package)
- [MAL-2025-143040](https://insights.sbomify.com/MAL-2025-143040/): Malicious code in gridsome-eslint-plugin-neptune-quito (npm) (malicious package)
- [MAL-2025-14304](https://insights.sbomify.com/MAL-2025-14304/): Malicious code in algol-sagitta-sass-loader-jovian (npm) (malicious package)
- [MAL-2025-143039](https://insights.sbomify.com/MAL-2025-143039/): Malicious code in gridsome-eslint-config-native-sails (npm) (malicious package)
- [MAL-2025-143038](https://insights.sbomify.com/MAL-2025-143038/): Malicious code in gridsome-docusaurus-module-ursa (npm) (malicious package)
- [MAL-2025-143037](https://insights.sbomify.com/MAL-2025-143037/): Malicious code in gridsome-dependencies-hugo-ganymede (npm) (malicious package)
- [MAL-2025-143036](https://insights.sbomify.com/MAL-2025-143036/): Malicious code in gridsome-css-minimizer-webpack-plugin-graphql-cors (npm) (malicious package)
- [MAL-2025-143035](https://insights.sbomify.com/MAL-2025-143035/): Malicious code in gridsome-cluster-pipe-elektra (npm) (malicious package)
- [MAL-2025-143034](https://insights.sbomify.com/MAL-2025-143034/): Malicious code in gridsome-barnard-express-vuetify (npm) (malicious package)
- [MAL-2025-143033](https://insights.sbomify.com/MAL-2025-143033/): Malicious code in gridsome-auriga-hugo-query (npm) (malicious package)
- [MAL-2025-143032](https://insights.sbomify.com/MAL-2025-143032/): Malicious code in gravity-xenos-postgres-concurrently (npm) (malicious package)
- [MAL-2025-143031](https://insights.sbomify.com/MAL-2025-143031/): Malicious code in gravity-sadr-uninstall-ursa (npm) (malicious package)
- [MAL-2025-143030](https://insights.sbomify.com/MAL-2025-143030/): Malicious code in gravity-release-it-grus-hermes (npm) (malicious package)
- [MAL-2025-14303](https://insights.sbomify.com/MAL-2025-14303/): Malicious code in algol-forever-less-exoplanet (npm) (malicious package)
- [MAL-2025-143029](https://insights.sbomify.com/MAL-2025-143029/): Malicious code in gravity-react-bootstrap-commitlint-dynamo (npm) (malicious package)
- [MAL-2025-143028](https://insights.sbomify.com/MAL-2025-143028/): Malicious code in gravity-pm2-cosmiconfig-cli (npm) (malicious package)
- [MAL-2025-143027](https://insights.sbomify.com/MAL-2025-143027/): Malicious code in gravity-jabbah-magellan-zephyr (npm) (malicious package)
- [MAL-2025-143026](https://insights.sbomify.com/MAL-2025-143026/): Malicious code in gravity-gridsome-equinox-playwright (npm) (malicious package)
- [MAL-2025-143025](https://insights.sbomify.com/MAL-2025-143025/): Malicious code in gravity-got-xenos-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-143024](https://insights.sbomify.com/MAL-2025-143024/): Malicious code in gravity-flare-async-foundation (npm) (malicious package)
- [MAL-2025-143023](https://insights.sbomify.com/MAL-2025-143023/): Malicious code in gravity-dotenv-safe-quark-publish (npm) (malicious package)
- [MAL-2025-143022](https://insights.sbomify.com/MAL-2025-143022/): Malicious code in gravity-csrf-shelljs-celeste (npm) (malicious package)
- [MAL-2025-143021](https://insights.sbomify.com/MAL-2025-143021/): Malicious code in gravity-chariklo-library-rimraf (npm) (malicious package)
- [MAL-2025-143020](https://insights.sbomify.com/MAL-2025-143020/): Malicious code in gravity-centauri-helios-antares (npm) (malicious package)
- [MAL-2025-14302](https://insights.sbomify.com/MAL-2025-14302/): Malicious code in algol-duplex-winston-mui (npm) (malicious package)
- [MAL-2025-143019](https://insights.sbomify.com/MAL-2025-143019/): Malicious code in gravity-centauri-docusaurus-upgrade (npm) (malicious package)
- [MAL-2025-143018](https://insights.sbomify.com/MAL-2025-143018/): Malicious code in gravity-bellatrix-farout-magellan (npm) (malicious package)
- [MAL-2025-143017](https://insights.sbomify.com/MAL-2025-143017/): Malicious code in gravity-babel-lint-spectron (npm) (malicious package)
- [MAL-2025-143016](https://insights.sbomify.com/MAL-2025-143016/): Malicious code in gravity-arcturus-auriga-xanadu (npm) (malicious package)
- [MAL-2025-143015](https://insights.sbomify.com/MAL-2025-143015/): Malicious code in graphql-webdriverio-neptune-phenomic (npm) (malicious package)
- [MAL-2025-143014](https://insights.sbomify.com/MAL-2025-143014/): Malicious code in graphql-webdriverio-husky-magellan (npm) (malicious package)
- [MAL-2025-143013](https://insights.sbomify.com/MAL-2025-143013/): Malicious code in graphql-vuepress-husky-bellatrix (npm) (malicious package)
- [MAL-2025-143012](https://insights.sbomify.com/MAL-2025-143012/): Malicious code in graphql-virgo-prettier-ursa (npm) (malicious package)
- [MAL-2025-143011](https://insights.sbomify.com/MAL-2025-143011/): Malicious code in graphql-umbriel-enceladus-umbriel (npm) (malicious package)
- [MAL-2025-143010](https://insights.sbomify.com/MAL-2025-143010/): Malicious code in graphql-transport-umbriel-mini-css-extract-plugin (npm) (malicious package)
- [MAL-2025-14301](https://insights.sbomify.com/MAL-2025-14301/): Malicious code in algol-centaurus-less-betelgeuse (npm) (malicious package)
- [MAL-2025-143009](https://insights.sbomify.com/MAL-2025-143009/): Malicious code in graphql-selenium-antares-luna (npm) (malicious package)
- [MAL-2025-143008](https://insights.sbomify.com/MAL-2025-143008/): Malicious code in graphql-registry-sedna-configstore (npm) (malicious package)
- [MAL-2025-143007](https://insights.sbomify.com/MAL-2025-143007/): Malicious code in graphql-pegasus-yildun-reveal-md (npm) (malicious package)
- [MAL-2025-143006](https://insights.sbomify.com/MAL-2025-143006/): Malicious code in graphql-orbit-csrf-yaml (npm) (malicious package)
- [MAL-2025-143005](https://insights.sbomify.com/MAL-2025-143005/): Malicious code in graphql-loop-module-ultra (npm) (malicious package)
- [MAL-2025-143004](https://insights.sbomify.com/MAL-2025-143004/): Malicious code in graphql-javascript-sedna-weywot (npm) (malicious package)
- [MAL-2025-143003](https://insights.sbomify.com/MAL-2025-143003/): Malicious code in graphql-gatsby-aquarius-phoebe (npm) (malicious package)
- [MAL-2025-143002](https://insights.sbomify.com/MAL-2025-143002/): Malicious code in graphql-enceladus-meteor-jasmine (npm) (malicious package)
- [MAL-2025-143001](https://insights.sbomify.com/MAL-2025-143001/): Malicious code in graphql-deimos-vulcan-helios (npm) (malicious package)
- [MAL-2025-143000](https://insights.sbomify.com/MAL-2025-143000/): Malicious code in graphql-cordelia-flare-slidev (npm) (malicious package)
- [MAL-2025-14300](https://insights.sbomify.com/MAL-2025-14300/): Malicious code in algol-atlas-bionics-ultra (npm) (malicious package)
- [MAL-2025-1430](https://insights.sbomify.com/MAL-2025-1430/): Malicious code in p2pb2b-dev (npm) (malicious package)
- [MAL-2025-143](https://insights.sbomify.com/MAL-2025-143/): Malicious code in bridge-transaction-parser (npm) (malicious package)
- [MAL-2025-142999](https://insights.sbomify.com/MAL-2025-142999/): Malicious code in graphql-charon-element-ui-iota (npm) (malicious package)
- [MAL-2025-142998](https://insights.sbomify.com/MAL-2025-142998/): Malicious code in graphql-chakra-ui-luna-proxima (npm) (malicious package)
- [MAL-2025-142997](https://insights.sbomify.com/MAL-2025-142997/): Malicious code in graphql-chai-schema-elara (npm) (malicious package)
- [MAL-2025-142996](https://insights.sbomify.com/MAL-2025-142996/): Malicious code in graphql-cache-dactyl-meteor (npm) (malicious package)
- [MAL-2025-142995](https://insights.sbomify.com/MAL-2025-142995/): Malicious code in graphql-apollo-europa-test (npm) (malicious package)
- [MAL-2025-142994](https://insights.sbomify.com/MAL-2025-142994/): Malicious code in graphql-altair-antares-juno (npm) (malicious package)
- [MAL-2025-142993](https://insights.sbomify.com/MAL-2025-142993/): Malicious code in got-ursa-css-minimizer-webpack-plugin-redis (npm) (malicious package)
- [MAL-2025-142992](https://insights.sbomify.com/MAL-2025-142992/): Malicious code in got-uninstall-dotenv-safe-test (npm) (malicious package)
- [MAL-2025-142991](https://insights.sbomify.com/MAL-2025-142991/): Malicious code in got-umbriel-bootes-init (npm) (malicious package)
- [MAL-2025-142990](https://insights.sbomify.com/MAL-2025-142990/): Malicious code in got-terser-webpack-plugin-ursa-wolf (npm) (malicious package)
- [MAL-2025-14299](https://insights.sbomify.com/MAL-2025-14299/): Malicious code in algoera (npm) (malicious package)
- [MAL-2025-142989](https://insights.sbomify.com/MAL-2025-142989/): Malicious code in got-superagent-winston-rollup (npm) (malicious package)
- [MAL-2025-142988](https://insights.sbomify.com/MAL-2025-142988/): Malicious code in got-superagent-passport-chai (npm) (malicious package)
- [MAL-2025-142987](https://insights.sbomify.com/MAL-2025-142987/): Malicious code in got-sadr-mocha-sync (npm) (malicious package)
- [MAL-2025-142986](https://insights.sbomify.com/MAL-2025-142986/): Malicious code in got-run-script-proxima-await (npm) (malicious package)
- [MAL-2025-142985](https://insights.sbomify.com/MAL-2025-142985/): Malicious code in got-rocket-build-callback (npm) (malicious package)
- [MAL-2025-142984](https://insights.sbomify.com/MAL-2025-142984/): Malicious code in got-release-it-nodemon-callisto (npm) (malicious package)
- [MAL-2025-142983](https://insights.sbomify.com/MAL-2025-142983/): Malicious code in got-quark-charon-prettier-plugin-markdown (npm) (malicious package)
- [MAL-2025-142982](https://insights.sbomify.com/MAL-2025-142982/): Malicious code in got-prettier-stylelint-server-nextjs (npm) (malicious package)
- [MAL-2025-142981](https://insights.sbomify.com/MAL-2025-142981/): Malicious code in got-jasmine-zenobia-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-142980](https://insights.sbomify.com/MAL-2025-142980/): Malicious code in got-izar-acamar-google (npm) (malicious package)
- [MAL-2025-14298](https://insights.sbomify.com/MAL-2025-14298/): Malicious code in algodoo (npm) (malicious package)
- [MAL-2025-142979](https://insights.sbomify.com/MAL-2025-142979/): Malicious code in got-gulp-docusaurus-geckodriver (npm) (malicious package)
- [MAL-2025-142978](https://insights.sbomify.com/MAL-2025-142978/): Malicious code in got-enceladus-aether-terser (npm) (malicious package)
- [MAL-2025-142977](https://insights.sbomify.com/MAL-2025-142977/): Malicious code in got-cz-conventional-changelog-sequelize-yildun (npm) (malicious package)
- [MAL-2025-142976](https://insights.sbomify.com/MAL-2025-142976/): Malicious code in got-carina-hyperion-norma (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1454/