# Vulnerabilities published in 2025


- [MAL-2025-142885](https://insights.sbomify.com/MAL-2025-142885/): Malicious code in geckodriver-titan-weywot-nuxtjs (npm) (malicious package)
- [MAL-2025-142884](https://insights.sbomify.com/MAL-2025-142884/): Malicious code in geckodriver-taurus-foundation-procyon (npm) (malicious package)
- [MAL-2025-142883](https://insights.sbomify.com/MAL-2025-142883/): Malicious code in geckodriver-spectron-webdriver-chariklo-sequelize (npm) (malicious package)
- [MAL-2025-142882](https://insights.sbomify.com/MAL-2025-142882/): Malicious code in geckodriver-redis-proxima-cache (npm) (malicious package)
- [MAL-2025-142881](https://insights.sbomify.com/MAL-2025-142881/): Malicious code in geckodriver-readable-thuban-virgo (npm) (malicious package)
- [MAL-2025-142880](https://insights.sbomify.com/MAL-2025-142880/): Malicious code in geckodriver-rate-limiter-iota-test (npm) (malicious package)
- [MAL-2025-14288](https://insights.sbomify.com/MAL-2025-14288/): Malicious code in alegier (npm) (malicious package)
- [MAL-2025-142879](https://insights.sbomify.com/MAL-2025-142879/): Malicious code in geckodriver-process-module-draco (npm) (malicious package)
- [MAL-2025-142878](https://insights.sbomify.com/MAL-2025-142878/): Malicious code in geckodriver-pino-cz-conventional-changelog-tool (npm) (malicious package)
- [MAL-2025-142877](https://insights.sbomify.com/MAL-2025-142877/): Malicious code in geckodriver-nuxtjs-typeorm-virgo (npm) (malicious package)
- [MAL-2025-142876](https://insights.sbomify.com/MAL-2025-142876/): Malicious code in geckodriver-mysql-forever-scripts (npm) (malicious package)
- [MAL-2025-142875](https://insights.sbomify.com/MAL-2025-142875/): Malicious code in geckodriver-miranda-mongodb-schema (npm) (malicious package)
- [MAL-2025-142874](https://insights.sbomify.com/MAL-2025-142874/): Malicious code in geckodriver-miranda-development-colors (npm) (malicious package)
- [MAL-2025-142873](https://insights.sbomify.com/MAL-2025-142873/): Malicious code in geckodriver-markdownlint-websockets-repository (npm) (malicious package)
- [MAL-2025-142872](https://insights.sbomify.com/MAL-2025-142872/): Malicious code in geckodriver-magellan-csv-duplex (npm) (malicious package)
- [MAL-2025-142871](https://insights.sbomify.com/MAL-2025-142871/): Malicious code in geckodriver-lyra-terser-webpack-plugin-centauri (npm) (malicious package)
- [MAL-2025-142870](https://insights.sbomify.com/MAL-2025-142870/): Malicious code in geckodriver-kastra-public-deneb (npm) (malicious package)
- [MAL-2025-14287](https://insights.sbomify.com/MAL-2025-14287/): Malicious code in aldpjigfknkzvwry (npm) (malicious package)
- [MAL-2025-142869](https://insights.sbomify.com/MAL-2025-142869/): Malicious code in geckodriver-jabbah-middleware-test (npm) (malicious package)
- [MAL-2025-142868](https://insights.sbomify.com/MAL-2025-142868/): Malicious code in geckodriver-jabbah-ignite-xo (npm) (malicious package)
- [MAL-2025-142867](https://insights.sbomify.com/MAL-2025-142867/): Malicious code in geckodriver-indus-testcafe-barnard (npm) (malicious package)
- [MAL-2025-142866](https://insights.sbomify.com/MAL-2025-142866/): Malicious code in geckodriver-hyperion-aurora-schema (npm) (malicious package)
- [MAL-2025-142865](https://insights.sbomify.com/MAL-2025-142865/): Malicious code in geckodriver-hexo-node-config-element-ui (npm) (malicious package)
- [MAL-2025-142864](https://insights.sbomify.com/MAL-2025-142864/): Malicious code in geckodriver-forever-eslint-config-pino-pretty (npm) (malicious package)
- [MAL-2025-142863](https://insights.sbomify.com/MAL-2025-142863/): Malicious code in geckodriver-dependencies-ursa-thuban (npm) (malicious package)
- [MAL-2025-142862](https://insights.sbomify.com/MAL-2025-142862/): Malicious code in geckodriver-css-loader-transform-cli (npm) (malicious package)
- [MAL-2025-142861](https://insights.sbomify.com/MAL-2025-142861/): Malicious code in geckodriver-chromedriver-gridsome-callisto (npm) (malicious package)
- [MAL-2025-142860](https://insights.sbomify.com/MAL-2025-142860/): Malicious code in geckodriver-chai-hyperion-husky (npm) (malicious package)
- [MAL-2025-14286](https://insights.sbomify.com/MAL-2025-14286/): Malicious code in aldebaran-rocket-hyperion-wezen (npm) (malicious package)
- [MAL-2025-142859](https://insights.sbomify.com/MAL-2025-142859/): Malicious code in geckodriver-ceres-celeste-firebase (npm) (malicious package)
- [MAL-2025-142858](https://insights.sbomify.com/MAL-2025-142858/): Malicious code in geckodriver-centaurus-nextjs-figures (npm) (malicious package)
- [MAL-2025-142857](https://insights.sbomify.com/MAL-2025-142857/): Malicious code in geckodriver-bunyan-json-spectron (npm) (malicious package)
- [MAL-2025-142856](https://insights.sbomify.com/MAL-2025-142856/): Malicious code in geckodriver-betelgeuse-child-process-leda (npm) (malicious package)
- [MAL-2025-142855](https://insights.sbomify.com/MAL-2025-142855/): Malicious code in gatsby-yonder-polaris-readable (npm) (malicious package)
- [MAL-2025-142854](https://insights.sbomify.com/MAL-2025-142854/): Malicious code in gatsby-vulcan-lacerta-alphard (npm) (malicious package)
- [MAL-2025-142853](https://insights.sbomify.com/MAL-2025-142853/): Malicious code in gatsby-vuetify-development-wasat (npm) (malicious package)
- [MAL-2025-142852](https://insights.sbomify.com/MAL-2025-142852/): Malicious code in gatsby-tethys-private-capella (npm) (malicious package)
- [MAL-2025-142851](https://insights.sbomify.com/MAL-2025-142851/): Malicious code in gatsby-registry-quantum-ultra (npm) (malicious package)
- [MAL-2025-142850](https://insights.sbomify.com/MAL-2025-142850/): Malicious code in gatsby-registry-ganymede-lyra (npm) (malicious package)
- [MAL-2025-14285](https://insights.sbomify.com/MAL-2025-14285/): Malicious code in aldebaran-hologram-resonance-enif (npm) (malicious package)
- [MAL-2025-142849](https://insights.sbomify.com/MAL-2025-142849/): Malicious code in gatsby-redis-sirius-halley (npm) (malicious package)
- [MAL-2025-142848](https://insights.sbomify.com/MAL-2025-142848/): Malicious code in gatsby-quark-prettier-stylelint-subscription (npm) (malicious package)
- [MAL-2025-142847](https://insights.sbomify.com/MAL-2025-142847/): Malicious code in gatsby-postgres-eridanus-bellatrix (npm) (malicious package)
- [MAL-2025-142846](https://insights.sbomify.com/MAL-2025-142846/): Malicious code in gatsby-polaris-deneb-mdx (npm) (malicious package)
- [MAL-2025-142845](https://insights.sbomify.com/MAL-2025-142845/): Malicious code in gatsby-miranda-iota-barnard (npm) (malicious package)
- [MAL-2025-142844](https://insights.sbomify.com/MAL-2025-142844/): Malicious code in gatsby-geckodriver-registry-meteor (npm) (malicious package)
- [MAL-2025-142843](https://insights.sbomify.com/MAL-2025-142843/): Malicious code in gatsby-fork-soap-promise (npm) (malicious package)
- [MAL-2025-142842](https://insights.sbomify.com/MAL-2025-142842/): Malicious code in gatsby-exec-foundation-gulp (npm) (malicious package)
- [MAL-2025-142841](https://insights.sbomify.com/MAL-2025-142841/): Malicious code in gatsby-enif-auth0-proxima (npm) (malicious package)
- [MAL-2025-142840](https://insights.sbomify.com/MAL-2025-142840/): Malicious code in gatsby-enceladus-kronos-ariel (npm) (malicious package)
- [MAL-2025-14284](https://insights.sbomify.com/MAL-2025-14284/): Malicious code in aldebaran-antd-babel-futurology (npm) (malicious package)
- [MAL-2025-142839](https://insights.sbomify.com/MAL-2025-142839/): Malicious code in gatsby-deimos-procyon-forever (npm) (malicious package)
- [MAL-2025-142838](https://insights.sbomify.com/MAL-2025-142838/): Malicious code in gatsby-css-minimizer-webpack-plugin-kinetic-aldebaran (npm) (malicious package)
- [MAL-2025-142837](https://insights.sbomify.com/MAL-2025-142837/): Malicious code in gatsby-commitizen-centauri-slidev (npm) (malicious package)
- [MAL-2025-142836](https://insights.sbomify.com/MAL-2025-142836/): Malicious code in gatsby-capella-cli-titan (npm) (malicious package)
- [MAL-2025-142835](https://insights.sbomify.com/MAL-2025-142835/): Malicious code in gatsby-cache-koa-eridanus (npm) (malicious package)
- [MAL-2025-142834](https://insights.sbomify.com/MAL-2025-142834/): Malicious code in gatsby-bootes-aurora-aquarius (npm) (malicious package)
- [MAL-2025-142833](https://insights.sbomify.com/MAL-2025-142833/): Malicious code in gatsby-betelgeuse-exec-halley (npm) (malicious package)
- [MAL-2025-142832](https://insights.sbomify.com/MAL-2025-142832/): Malicious code in gatsby-axios-terser-webpack-plugin-nconf (npm) (malicious package)
- [MAL-2025-142831](https://insights.sbomify.com/MAL-2025-142831/): Malicious code in gatsby-antares-writable-centaurus (npm) (malicious package)
- [MAL-2025-142830](https://insights.sbomify.com/MAL-2025-142830/): Malicious code in gatsby-antares-metalsmith-eris (npm) (malicious package)
- [MAL-2025-14283](https://insights.sbomify.com/MAL-2025-14283/): Malicious code in alcquery (npm) (malicious package)
- [MAL-2025-142829](https://insights.sbomify.com/MAL-2025-142829/): Malicious code in ganymede-xenon-public-csv (npm) (malicious package)
- [MAL-2025-142828](https://insights.sbomify.com/MAL-2025-142828/): Malicious code in ganymede-winston-enif-lacerta (npm) (malicious package)
- [MAL-2025-142827](https://insights.sbomify.com/MAL-2025-142827/): Malicious code in ganymede-umbriel-hexo-writable (npm) (malicious package)
- [MAL-2025-142826](https://insights.sbomify.com/MAL-2025-142826/): Malicious code in ganymede-uglify-js-quark-dotenv (npm) (malicious package)
- [MAL-2025-142825](https://insights.sbomify.com/MAL-2025-142825/): Malicious code in ganymede-transport-yildun-npm (npm) (malicious package)
- [MAL-2025-142824](https://insights.sbomify.com/MAL-2025-142824/): Malicious code in ganymede-titan-rollup-plugin-antares (npm) (malicious package)
- [MAL-2025-142823](https://insights.sbomify.com/MAL-2025-142823/): Malicious code in ganymede-sqlite-proxima-cli (npm) (malicious package)
- [MAL-2025-142822](https://insights.sbomify.com/MAL-2025-142822/): Malicious code in ganymede-sirius-triton-grus (npm) (malicious package)
- [MAL-2025-142821](https://insights.sbomify.com/MAL-2025-142821/): Malicious code in ganymede-sagitta-mui-stop (npm) (malicious package)
- [MAL-2025-142820](https://insights.sbomify.com/MAL-2025-142820/): Malicious code in ganymede-rest-phenomic-event (npm) (malicious package)
- [MAL-2025-14282](https://insights.sbomify.com/MAL-2025-14282/): Malicious code in alchemy_tzh7o_dpfx8_whirlwind (npm) (malicious package)
- [MAL-2025-142819](https://insights.sbomify.com/MAL-2025-142819/): Malicious code in ganymede-rehype-phoebe-webdriver-manager (npm) (malicious package)
- [MAL-2025-142818](https://insights.sbomify.com/MAL-2025-142818/): Malicious code in ganymede-regulus-nova-auriga (npm) (malicious package)
- [MAL-2025-142817](https://insights.sbomify.com/MAL-2025-142817/): Malicious code in ganymede-prompts-winston-stream (npm) (malicious package)
- [MAL-2025-142816](https://insights.sbomify.com/MAL-2025-142816/): Malicious code in ganymede-procyon-phoebe-meteor (npm) (malicious package)
- [MAL-2025-142815](https://insights.sbomify.com/MAL-2025-142815/): Malicious code in ganymede-procyon-gulp-webdriver-mocha (npm) (malicious package)
- [MAL-2025-142814](https://insights.sbomify.com/MAL-2025-142814/): Malicious code in ganymede-nodemon-leda-markdown-pdf (npm) (malicious package)
- [MAL-2025-142813](https://insights.sbomify.com/MAL-2025-142813/): Malicious code in ganymede-nebula-playwright-nodemon (npm) (malicious package)
- [MAL-2025-142812](https://insights.sbomify.com/MAL-2025-142812/): Malicious code in ganymede-nebula-jovian-dagda (npm) (malicious package)
- [MAL-2025-142811](https://insights.sbomify.com/MAL-2025-142811/): Malicious code in ganymede-morgan-child-process-mysql (npm) (malicious package)
- [MAL-2025-142810](https://insights.sbomify.com/MAL-2025-142810/): Malicious code in ganymede-mocha-colors-publish (npm) (malicious package)
- [MAL-2025-14281](https://insights.sbomify.com/MAL-2025-14281/): Malicious code in alchemy_ttdza_0m309_nebula (npm) (malicious package)
- [MAL-2025-142809](https://insights.sbomify.com/MAL-2025-142809/): Malicious code in ganymede-lyra-arcturus-firebase (npm) (malicious package)
- [MAL-2025-142808](https://insights.sbomify.com/MAL-2025-142808/): Malicious code in ganymede-luna-solis-grunt (npm) (malicious package)
- [MAL-2025-142807](https://insights.sbomify.com/MAL-2025-142807/): Malicious code in ganymede-luna-mui-got (npm) (malicious package)
- [MAL-2025-142806](https://insights.sbomify.com/MAL-2025-142806/): Malicious code in ganymede-kronos-oauth-eslint-plugin (npm) (malicious package)
- [MAL-2025-142805](https://insights.sbomify.com/MAL-2025-142805/): Malicious code in ganymede-io-canopus-sync (npm) (malicious package)
- [MAL-2025-142804](https://insights.sbomify.com/MAL-2025-142804/): Malicious code in ganymede-impulse-dotenv-parse-variables-nova (npm) (malicious package)
- [MAL-2025-142803](https://insights.sbomify.com/MAL-2025-142803/): Malicious code in ganymede-impulse-avior-dorado (npm) (malicious package)
- [MAL-2025-142802](https://insights.sbomify.com/MAL-2025-142802/): Malicious code in ganymede-hugo-phoebe-nova (npm) (malicious package)
- [MAL-2025-142801](https://insights.sbomify.com/MAL-2025-142801/): Malicious code in ganymede-hexo-gemini-winston (npm) (malicious package)
- [MAL-2025-142800](https://insights.sbomify.com/MAL-2025-142800/): Malicious code in ganymede-got-got-release-it (npm) (malicious package)
- [MAL-2025-14280](https://insights.sbomify.com/MAL-2025-14280/): Malicious code in alchemy_f5b90_dctgw_quartz (npm) (malicious package)
- [MAL-2025-1428](https://insights.sbomify.com/MAL-2025-1428/): Malicious code in orangex-test (npm) (malicious package)
- [MAL-2025-142799](https://insights.sbomify.com/MAL-2025-142799/): Malicious code in ganymede-epimetheus-terser-webpack-plugin-css-loader (npm) (malicious package)
- [MAL-2025-142798](https://insights.sbomify.com/MAL-2025-142798/): Malicious code in galaxy-websockets-sagitta-prettier-stylelint (npm) (malicious package)
- [MAL-2025-142797](https://insights.sbomify.com/MAL-2025-142797/): Malicious code in galaxy-webdriverio-fetch-ganymede (npm) (malicious package)
- [MAL-2025-142796](https://insights.sbomify.com/MAL-2025-142796/): Malicious code in galaxy-vuetify-kaus-global (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1456/