# Vulnerabilities published in 2025


- [MAL-2025-142975](https://insights.sbomify.com/MAL-2025-142975/): Malicious code in got-aurora-altair-atlas (npm) (malicious package)
- [MAL-2025-142974](https://insights.sbomify.com/MAL-2025-142974/): Malicious code in got-antares-jest-adonis (npm) (malicious package)
- [MAL-2025-142973](https://insights.sbomify.com/MAL-2025-142973/): Malicious code in google-xerxes-dotenv-safe-jabbah (npm) (malicious package)
- [MAL-2025-142972](https://insights.sbomify.com/MAL-2025-142972/): Malicious code in google-typeorm-public-neptune (npm) (malicious package)
- [MAL-2025-142971](https://insights.sbomify.com/MAL-2025-142971/): Malicious code in google-testcafe-proxima-inquirer (npm) (malicious package)
- [MAL-2025-142970](https://insights.sbomify.com/MAL-2025-142970/): Malicious code in google-testcafe-apollo-mysql (npm) (malicious package)
- [MAL-2025-14297](https://insights.sbomify.com/MAL-2025-14297/): Malicious code in algerb (npm) (malicious package)
- [MAL-2025-142969](https://insights.sbomify.com/MAL-2025-142969/): Malicious code in google-sagitta-nodejs-nightwatch (npm) (malicious package)
- [MAL-2025-142968](https://insights.sbomify.com/MAL-2025-142968/): Malicious code in google-pavo-xo-draco (npm) (malicious package)
- [MAL-2025-142967](https://insights.sbomify.com/MAL-2025-142967/): Malicious code in google-nova-spectron-webdriver-config (npm) (malicious package)
- [MAL-2025-142966](https://insights.sbomify.com/MAL-2025-142966/): Malicious code in google-mensa-meteor-nconf (npm) (malicious package)
- [MAL-2025-142965](https://insights.sbomify.com/MAL-2025-142965/): Malicious code in google-magellan-config-avior (npm) (malicious package)
- [MAL-2025-142964](https://insights.sbomify.com/MAL-2025-142964/): Malicious code in google-juno-toml-socketio (npm) (malicious package)
- [MAL-2025-142963](https://insights.sbomify.com/MAL-2025-142963/): Malicious code in google-izar-venus-canopus (npm) (malicious package)
- [MAL-2025-142962](https://insights.sbomify.com/MAL-2025-142962/): Malicious code in google-install-octans-webpack (npm) (malicious package)
- [MAL-2025-142961](https://insights.sbomify.com/MAL-2025-142961/): Malicious code in google-inquirer-hapi-metalsmith (npm) (malicious package)
- [MAL-2025-142960](https://insights.sbomify.com/MAL-2025-142960/): Malicious code in google-hermes-telesto-materialize (npm) (malicious package)
- [MAL-2025-14296](https://insights.sbomify.com/MAL-2025-14296/): Malicious code in alface (npm) (malicious package)
- [MAL-2025-142959](https://insights.sbomify.com/MAL-2025-142959/): Malicious code in google-helios-tethys-hercules (npm) (malicious package)
- [MAL-2025-142958](https://insights.sbomify.com/MAL-2025-142958/): Malicious code in google-element-ui-public-europa (npm) (malicious package)
- [MAL-2025-142957](https://insights.sbomify.com/MAL-2025-142957/): Malicious code in google-csv-bellatrix-chariklo (npm) (malicious package)
- [MAL-2025-142956](https://insights.sbomify.com/MAL-2025-142956/): Malicious code in google-backend-lyra-ophiuchus (npm) (malicious package)
- [MAL-2025-142955](https://insights.sbomify.com/MAL-2025-142955/): Malicious code in global-zenith-cz-conventional-changelog-reveal-md (npm) (malicious package)
- [MAL-2025-142954](https://insights.sbomify.com/MAL-2025-142954/): Malicious code in global-zenith-child-process-await (npm) (malicious package)
- [MAL-2025-142953](https://insights.sbomify.com/MAL-2025-142953/): Malicious code in global-writable-hugo-yonder (npm) (malicious package)
- [MAL-2025-142952](https://insights.sbomify.com/MAL-2025-142952/): Malicious code in global-uninstall-sadr-duplex (npm) (malicious package)
- [MAL-2025-142951](https://insights.sbomify.com/MAL-2025-142951/): Malicious code in global-toml-vuepress-middleware (npm) (malicious package)
- [MAL-2025-142950](https://insights.sbomify.com/MAL-2025-142950/): Malicious code in global-tethys-nextjs-iota (npm) (malicious package)
- [MAL-2025-14295](https://insights.sbomify.com/MAL-2025-14295/): Malicious code in alexr-locator-test (npm) (malicious package)
- [MAL-2025-142949](https://insights.sbomify.com/MAL-2025-142949/): Malicious code in global-shelljs-socketio-passport (npm) (malicious package)
- [MAL-2025-142948](https://insights.sbomify.com/MAL-2025-142948/): Malicious code in global-pyxis-janus-epimetheus (npm) (malicious package)
- [MAL-2025-142947](https://insights.sbomify.com/MAL-2025-142947/): Malicious code in global-phoenix-proxima-rest (npm) (malicious package)
- [MAL-2025-142946](https://insights.sbomify.com/MAL-2025-142946/): Malicious code in global-phoebe-hermes-mira (npm) (malicious package)
- [MAL-2025-142945](https://insights.sbomify.com/MAL-2025-142945/): Malicious code in global-nuxtjs-antares-koa (npm) (malicious package)
- [MAL-2025-142944](https://insights.sbomify.com/MAL-2025-142944/): Malicious code in global-norma-toml-cypress (npm) (malicious package)
- [MAL-2025-142943](https://insights.sbomify.com/MAL-2025-142943/): Malicious code in global-metalsmith-luna-gulp (npm) (malicious package)
- [MAL-2025-142942](https://insights.sbomify.com/MAL-2025-142942/): Malicious code in global-loglevel-lacerta-figures (npm) (malicious package)
- [MAL-2025-142941](https://insights.sbomify.com/MAL-2025-142941/): Malicious code in global-leda-xenon-supervisor (npm) (malicious package)
- [MAL-2025-142940](https://insights.sbomify.com/MAL-2025-142940/): Malicious code in global-lacerta-sagitta-nextjs (npm) (malicious package)
- [MAL-2025-14294](https://insights.sbomify.com/MAL-2025-14294/): Malicious code in alexbirsantest (npm) (malicious package)
- [MAL-2025-142939](https://insights.sbomify.com/MAL-2025-142939/): Malicious code in global-karma-socketio-algol (npm) (malicious package)
- [MAL-2025-142938](https://insights.sbomify.com/MAL-2025-142938/): Malicious code in global-hyperion-grunt-apex (npm) (malicious package)
- [MAL-2025-142937](https://insights.sbomify.com/MAL-2025-142937/): Malicious code in global-hyperion-antd-iota (npm) (malicious package)
- [MAL-2025-142936](https://insights.sbomify.com/MAL-2025-142936/): Malicious code in global-got-sirius-antd (npm) (malicious package)
- [MAL-2025-142935](https://insights.sbomify.com/MAL-2025-142935/): Malicious code in global-fornax-supervisor-react-bootstrap (npm) (malicious package)
- [MAL-2025-142934](https://insights.sbomify.com/MAL-2025-142934/): Malicious code in global-fomalhaut-protractor-csv (npm) (malicious package)
- [MAL-2025-142933](https://insights.sbomify.com/MAL-2025-142933/): Malicious code in global-eris-dactyl-dependencies (npm) (malicious package)
- [MAL-2025-142932](https://insights.sbomify.com/MAL-2025-142932/): Malicious code in global-draco-virgo-bellatrix (npm) (malicious package)
- [MAL-2025-142931](https://insights.sbomify.com/MAL-2025-142931/): Malicious code in global-dotenv-safe-mysql-mira (npm) (malicious package)
- [MAL-2025-142930](https://insights.sbomify.com/MAL-2025-142930/): Malicious code in global-dione-eleventy-grunt (npm) (malicious package)
- [MAL-2025-14293](https://insights.sbomify.com/MAL-2025-14293/): Malicious code in alexandrevvotest2 (npm) (malicious package)
- [MAL-2025-142929](https://insights.sbomify.com/MAL-2025-142929/): Malicious code in global-despina-markdown-csrf (npm) (malicious package)
- [MAL-2025-142928](https://insights.sbomify.com/MAL-2025-142928/): Malicious code in global-cygnus-carpo-dagda (npm) (malicious package)
- [MAL-2025-142927](https://insights.sbomify.com/MAL-2025-142927/): Malicious code in global-csrf-xml-package (npm) (malicious package)
- [MAL-2025-142926](https://insights.sbomify.com/MAL-2025-142926/): Malicious code in global-browserify-pino-aldebaran (npm) (malicious package)
- [MAL-2025-142925](https://insights.sbomify.com/MAL-2025-142925/): Malicious code in global-babel-sagitta-miranda (npm) (malicious package)
- [MAL-2025-142924](https://insights.sbomify.com/MAL-2025-142924/): Malicious code in global-await-version-prettier-stylelint (npm) (malicious package)
- [MAL-2025-142923](https://insights.sbomify.com/MAL-2025-142923/): Malicious code in global-apex-repository-atlas (npm) (malicious package)
- [MAL-2025-142922](https://insights.sbomify.com/MAL-2025-142922/): Malicious code in global-andromeda-publish-nashira (npm) (malicious package)
- [MAL-2025-142921](https://insights.sbomify.com/MAL-2025-142921/): Malicious code in global-algol-adonis-zenobia (npm) (malicious package)
- [MAL-2025-142920](https://insights.sbomify.com/MAL-2025-142920/): Malicious code in gemini-wolf-subscription-adonis (npm) (malicious package)
- [MAL-2025-14292](https://insights.sbomify.com/MAL-2025-14292/): Malicious code in alexandrevvotest (npm) (malicious package)
- [MAL-2025-142919](https://insights.sbomify.com/MAL-2025-142919/): Malicious code in gemini-websockets-pino-pretty-gridsome (npm) (malicious package)
- [MAL-2025-142918](https://insights.sbomify.com/MAL-2025-142918/): Malicious code in gemini-server-ini-sagitta (npm) (malicious package)
- [MAL-2025-142917](https://insights.sbomify.com/MAL-2025-142917/): Malicious code in gemini-sedna-postgres-proxima (npm) (malicious package)
- [MAL-2025-142916](https://insights.sbomify.com/MAL-2025-142916/): Malicious code in gemini-rest-framework-quasar (npm) (malicious package)
- [MAL-2025-142915](https://insights.sbomify.com/MAL-2025-142915/): Malicious code in gemini-relay-readable-sadr (npm) (malicious package)
- [MAL-2025-142914](https://insights.sbomify.com/MAL-2025-142914/): Malicious code in gemini-pulsar-sadr-testcafe (npm) (malicious package)
- [MAL-2025-142913](https://insights.sbomify.com/MAL-2025-142913/): Malicious code in gemini-publish-gacrux-morgan (npm) (malicious package)
- [MAL-2025-142912](https://insights.sbomify.com/MAL-2025-142912/): Malicious code in gemini-postcss-loader-typeorm-procyon (npm) (malicious package)
- [MAL-2025-142911](https://insights.sbomify.com/MAL-2025-142911/): Malicious code in gemini-postcss-loader-quantum-resolvers (npm) (malicious package)
- [MAL-2025-142910](https://insights.sbomify.com/MAL-2025-142910/): Malicious code in gemini-polaris-publish-development (npm) (malicious package)
- [MAL-2025-14291](https://insights.sbomify.com/MAL-2025-14291/): Malicious code in alerttest (npm) (malicious package)
- [MAL-2025-142909](https://insights.sbomify.com/MAL-2025-142909/): Malicious code in gemini-perseus-spica-passport (npm) (malicious package)
- [MAL-2025-142908](https://insights.sbomify.com/MAL-2025-142908/): Malicious code in gemini-nova-postcss-loader-grus (npm) (malicious package)
- [MAL-2025-142907](https://insights.sbomify.com/MAL-2025-142907/): Malicious code in gemini-nightwatch-janus-lyra (npm) (malicious package)
- [MAL-2025-142906](https://insights.sbomify.com/MAL-2025-142906/): Malicious code in gemini-mongoose-mini-css-extract-plugin-dependencies (npm) (malicious package)
- [MAL-2025-142905](https://insights.sbomify.com/MAL-2025-142905/): Malicious code in gemini-mocha-impulse-grus (npm) (malicious package)
- [MAL-2025-142904](https://insights.sbomify.com/MAL-2025-142904/): Malicious code in gemini-mini-css-extract-plugin-style-loader-achernar (npm) (malicious package)
- [MAL-2025-142903](https://insights.sbomify.com/MAL-2025-142903/): Malicious code in gemini-lyra-stop-meteor (npm) (malicious package)
- [MAL-2025-142902](https://insights.sbomify.com/MAL-2025-142902/): Malicious code in gemini-less-loader-schema-foundation (npm) (malicious package)
- [MAL-2025-142901](https://insights.sbomify.com/MAL-2025-142901/): Malicious code in gemini-lacerta-procyon-flare (npm) (malicious package)
- [MAL-2025-142900](https://insights.sbomify.com/MAL-2025-142900/): Malicious code in gemini-indus-chai-public (npm) (malicious package)
- [MAL-2025-14290](https://insights.sbomify.com/MAL-2025-14290/): Malicious code in AlertLogic (npm) (malicious package)
- [MAL-2025-1429](https://insights.sbomify.com/MAL-2025-1429/): Malicious code in p2pb2b (npm) (malicious package)
- [MAL-2025-142899](https://insights.sbomify.com/MAL-2025-142899/): Malicious code in gemini-hexo-blaze-slidev (npm) (malicious package)
- [MAL-2025-142898](https://insights.sbomify.com/MAL-2025-142898/): Malicious code in gemini-grunt-spectron-webdriver-tethys (npm) (malicious package)
- [MAL-2025-142897](https://insights.sbomify.com/MAL-2025-142897/): Malicious code in gemini-enceladus-thuban-cygnus (npm) (malicious package)
- [MAL-2025-142896](https://insights.sbomify.com/MAL-2025-142896/): Malicious code in gemini-dynamo-mongodb-exec (npm) (malicious package)
- [MAL-2025-142895](https://insights.sbomify.com/MAL-2025-142895/): Malicious code in gemini-despina-polaris-async (npm) (malicious package)
- [MAL-2025-142894](https://insights.sbomify.com/MAL-2025-142894/): Malicious code in gemini-despina-express-google (npm) (malicious package)
- [MAL-2025-142893](https://insights.sbomify.com/MAL-2025-142893/): Malicious code in gemini-callisto-regulus-hercules (npm) (malicious package)
- [MAL-2025-142892](https://insights.sbomify.com/MAL-2025-142892/): Malicious code in gemini-build-regulus-airbnb (npm) (malicious package)
- [MAL-2025-142891](https://insights.sbomify.com/MAL-2025-142891/): Malicious code in gemini-arcturus-ursa-sass-loader (npm) (malicious package)
- [MAL-2025-142890](https://insights.sbomify.com/MAL-2025-142890/): Malicious code in geckodriver-xerxes-capella-luna (npm) (malicious package)
- [MAL-2025-14289](https://insights.sbomify.com/MAL-2025-14289/): Malicious code in alerte (npm) (malicious package)
- [MAL-2025-142889](https://insights.sbomify.com/MAL-2025-142889/): Malicious code in geckodriver-xenon-nova-auth0 (npm) (malicious package)
- [MAL-2025-142888](https://insights.sbomify.com/MAL-2025-142888/): Malicious code in geckodriver-venus-halley-hercules (npm) (malicious package)
- [MAL-2025-142887](https://insights.sbomify.com/MAL-2025-142887/): Malicious code in geckodriver-upgrade-upgrade-iota (npm) (malicious package)
- [MAL-2025-142886](https://insights.sbomify.com/MAL-2025-142886/): Malicious code in geckodriver-uninstall-husky-sirius (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1455/