# Vulnerabilities published in 2025


- [MAL-2025-142795](https://insights.sbomify.com/MAL-2025-142795/): Malicious code in galaxy-virgo-reveal-md-ophiuchus (npm) (malicious package)
- [MAL-2025-142794](https://insights.sbomify.com/MAL-2025-142794/): Malicious code in galaxy-semantic-release-auriga-norma (npm) (malicious package)
- [MAL-2025-142793](https://insights.sbomify.com/MAL-2025-142793/): Malicious code in galaxy-nodejs-ultra-wasat (npm) (malicious package)
- [MAL-2025-142792](https://insights.sbomify.com/MAL-2025-142792/): Malicious code in galaxy-meissa-pino-blitz (npm) (malicious package)
- [MAL-2025-142791](https://insights.sbomify.com/MAL-2025-142791/): Malicious code in galaxy-materialize-morgan-meissa (npm) (malicious package)
- [MAL-2025-142790](https://insights.sbomify.com/MAL-2025-142790/): Malicious code in galaxy-karma-restart-wasat (npm) (malicious package)
- [MAL-2025-14279](https://insights.sbomify.com/MAL-2025-14279/): Malicious code in alchemy_99hu1_am3qx_coral (npm) (malicious package)
- [MAL-2025-142789](https://insights.sbomify.com/MAL-2025-142789/): Malicious code in galaxy-gulp-socketio-solis (npm) (malicious package)
- [MAL-2025-142788](https://insights.sbomify.com/MAL-2025-142788/): Malicious code in galaxy-csv-middleware-levels (npm) (malicious package)
- [MAL-2025-142787](https://insights.sbomify.com/MAL-2025-142787/): Malicious code in galaxy-centauri-iota-eslint-config (npm) (malicious package)
- [MAL-2025-142786](https://insights.sbomify.com/MAL-2025-142786/): Malicious code in galaxy-bulma-xo-halley (npm) (malicious package)
- [MAL-2025-142785](https://insights.sbomify.com/MAL-2025-142785/): Malicious code in galaxy-apollo-phoebe-draco (npm) (malicious package)
- [MAL-2025-142784](https://insights.sbomify.com/MAL-2025-142784/): Malicious code in galaxy-andromeda-non-blocking-xml (npm) (malicious package)
- [MAL-2025-142783](https://insights.sbomify.com/MAL-2025-142783/): Malicious code in gacrux-style-loader-cache-comet (npm) (malicious package)
- [MAL-2025-142782](https://insights.sbomify.com/MAL-2025-142782/): Malicious code in gacrux-sedna-nextjs-nconf (npm) (malicious package)
- [MAL-2025-142781](https://insights.sbomify.com/MAL-2025-142781/): Malicious code in gacrux-sadr-ophiuchus-yildun (npm) (malicious package)
- [MAL-2025-142780](https://insights.sbomify.com/MAL-2025-142780/): Malicious code in gacrux-publish-tailwindcss-bootes (npm) (malicious package)
- [MAL-2025-14278](https://insights.sbomify.com/MAL-2025-14278/): Malicious code in alchemy_7su4d_t39hw_antelope (npm) (malicious package)
- [MAL-2025-142779](https://insights.sbomify.com/MAL-2025-142779/): Malicious code in gacrux-proxima-callisto-acamar (npm) (malicious package)
- [MAL-2025-142778](https://insights.sbomify.com/MAL-2025-142778/): Malicious code in gacrux-promise-io-nodemon (npm) (malicious package)
- [MAL-2025-142777](https://insights.sbomify.com/MAL-2025-142777/): Malicious code in gacrux-phoebe-graphql-dagda (npm) (malicious package)
- [MAL-2025-142776](https://insights.sbomify.com/MAL-2025-142776/): Malicious code in gacrux-octans-install-global (npm) (malicious package)
- [MAL-2025-142775](https://insights.sbomify.com/MAL-2025-142775/): Malicious code in gacrux-oauth-yonder-neptune (npm) (malicious package)
- [MAL-2025-142774](https://insights.sbomify.com/MAL-2025-142774/): Malicious code in gacrux-nightwatch-nebula-graphql (npm) (malicious package)
- [MAL-2025-142773](https://insights.sbomify.com/MAL-2025-142773/): Malicious code in gacrux-nightmare-electron-builder-warp (npm) (malicious package)
- [MAL-2025-142772](https://insights.sbomify.com/MAL-2025-142772/): Malicious code in gacrux-loop-mira-electron (npm) (malicious package)
- [MAL-2025-142771](https://insights.sbomify.com/MAL-2025-142771/): Malicious code in gacrux-html-webpack-plugin-fornax-impulse (npm) (malicious package)
- [MAL-2025-142770](https://insights.sbomify.com/MAL-2025-142770/): Malicious code in gacrux-hermes-mysql-meteor (npm) (malicious package)
- [MAL-2025-14277](https://insights.sbomify.com/MAL-2025-14277/): Malicious code in alchemy-s89r2-1zvdy-lucid-project (npm) (malicious package)
- [MAL-2025-142769](https://insights.sbomify.com/MAL-2025-142769/): Malicious code in gacrux-halley-sagitta-mysql (npm) (malicious package)
- [MAL-2025-142768](https://insights.sbomify.com/MAL-2025-142768/): Malicious code in gacrux-gulp-proxima-prettier (npm) (malicious package)
- [MAL-2025-142767](https://insights.sbomify.com/MAL-2025-142767/): Malicious code in gacrux-google-build-convict (npm) (malicious package)
- [MAL-2025-142766](https://insights.sbomify.com/MAL-2025-142766/): Malicious code in gacrux-ganymede-fomalhaut-lint-staged (npm) (malicious package)
- [MAL-2025-142765](https://insights.sbomify.com/MAL-2025-142765/): Malicious code in gacrux-galaxy-loopback-elara (npm) (malicious package)
- [MAL-2025-142764](https://insights.sbomify.com/MAL-2025-142764/): Malicious code in gacrux-eslint-plugin-link-indus (npm) (malicious package)
- [MAL-2025-142763](https://insights.sbomify.com/MAL-2025-142763/): Malicious code in gacrux-dagda-koa-css-loader (npm) (malicious package)
- [MAL-2025-142762](https://insights.sbomify.com/MAL-2025-142762/): Malicious code in gacrux-dagda-electron-builder-ultra (npm) (malicious package)
- [MAL-2025-142761](https://insights.sbomify.com/MAL-2025-142761/): Malicious code in gacrux-dactyl-celeste-solis (npm) (malicious package)
- [MAL-2025-142760](https://insights.sbomify.com/MAL-2025-142760/): Malicious code in gacrux-csv-capella-pulsar (npm) (malicious package)
- [MAL-2025-14276](https://insights.sbomify.com/MAL-2025-14276/): Malicious code in alchemy-rg5mi-8o61m-gale-project (npm) (malicious package)
- [MAL-2025-142759](https://insights.sbomify.com/MAL-2025-142759/): Malicious code in gacrux-css-minimizer-webpack-plugin-flare-flare (npm) (malicious package)
- [MAL-2025-142758](https://insights.sbomify.com/MAL-2025-142758/): Malicious code in gacrux-css-loader-puppeteer-module (npm) (malicious package)
- [MAL-2025-142757](https://insights.sbomify.com/MAL-2025-142757/): Malicious code in gacrux-configstore-andromeda-jupiter (npm) (malicious package)
- [MAL-2025-142756](https://insights.sbomify.com/MAL-2025-142756/): Malicious code in gacrux-commitizen-uninstall-slides (npm) (malicious package)
- [MAL-2025-142755](https://insights.sbomify.com/MAL-2025-142755/): Malicious code in gacrux-chromedriver-cosmiconfig-markdownlint (npm) (malicious package)
- [MAL-2025-142754](https://insights.sbomify.com/MAL-2025-142754/): Malicious code in gacrux-capella-nconf-quito (npm) (malicious package)
- [MAL-2025-142753](https://insights.sbomify.com/MAL-2025-142753/): Malicious code in gacrux-astro-elara-quito (npm) (malicious package)
- [MAL-2025-142752](https://insights.sbomify.com/MAL-2025-142752/): Malicious code in gacrux-airbnb-dynamo-xenon (npm) (malicious package)
- [MAL-2025-142751](https://insights.sbomify.com/MAL-2025-142751/): Malicious code in fusion-zenobia-apollo-ariel (npm) (malicious package)
- [MAL-2025-142750](https://insights.sbomify.com/MAL-2025-142750/): Malicious code in fusion-xerxes-comet-auth (npm) (malicious package)
- [MAL-2025-14275](https://insights.sbomify.com/MAL-2025-14275/): Malicious code in alchemy-o0bup-rj9h1-drift-project (npm) (malicious package)
- [MAL-2025-142749](https://insights.sbomify.com/MAL-2025-142749/): Malicious code in fusion-vuetify-websockets-selenium (npm) (malicious package)
- [MAL-2025-142748](https://insights.sbomify.com/MAL-2025-142748/): Malicious code in fusion-umbra-farout-unuk (npm) (malicious package)
- [MAL-2025-142747](https://insights.sbomify.com/MAL-2025-142747/): Malicious code in fusion-rollup-plugin-hexo-grus (npm) (malicious package)
- [MAL-2025-142746](https://insights.sbomify.com/MAL-2025-142746/): Malicious code in fusion-restart-koa-nebula (npm) (malicious package)
- [MAL-2025-142745](https://insights.sbomify.com/MAL-2025-142745/): Malicious code in fusion-redis-transform-tailwindcss (npm) (malicious package)
- [MAL-2025-142744](https://insights.sbomify.com/MAL-2025-142744/): Malicious code in fusion-publish-nightwatch-cressida (npm) (malicious package)
- [MAL-2025-142743](https://insights.sbomify.com/MAL-2025-142743/): Malicious code in fusion-perseus-global-fornax (npm) (malicious package)
- [MAL-2025-142742](https://insights.sbomify.com/MAL-2025-142742/): Malicious code in fusion-non-blocking-hugo-commitlint (npm) (malicious package)
- [MAL-2025-142741](https://insights.sbomify.com/MAL-2025-142741/): Malicious code in fusion-nconf-venus-reveal-md (npm) (malicious package)
- [MAL-2025-142740](https://insights.sbomify.com/MAL-2025-142740/): Malicious code in fusion-lint-staged-chromedriver-aquarius (npm) (malicious package)
- [MAL-2025-14274](https://insights.sbomify.com/MAL-2025-14274/): Malicious code in alchemy-in4kp-dbli8-quasar-project (npm) (malicious package)
- [MAL-2025-142739](https://insights.sbomify.com/MAL-2025-142739/): Malicious code in fusion-link-hercules-warp (npm) (malicious package)
- [MAL-2025-142738](https://insights.sbomify.com/MAL-2025-142738/): Malicious code in fusion-jwt-eclipse-bunyan (npm) (malicious package)
- [MAL-2025-142737](https://insights.sbomify.com/MAL-2025-142737/): Malicious code in fusion-jsonp-solis-cors (npm) (malicious package)
- [MAL-2025-142736](https://insights.sbomify.com/MAL-2025-142736/): Malicious code in fusion-init-helios-hercules (npm) (malicious package)
- [MAL-2025-142735](https://insights.sbomify.com/MAL-2025-142735/): Malicious code in fusion-indus-atlas-iota (npm) (malicious package)
- [MAL-2025-142734](https://insights.sbomify.com/MAL-2025-142734/): Malicious code in fusion-geckodriver-server-less-loader (npm) (malicious package)
- [MAL-2025-142733](https://insights.sbomify.com/MAL-2025-142733/): Malicious code in fusion-ganymede-pipe-package (npm) (malicious package)
- [MAL-2025-142732](https://insights.sbomify.com/MAL-2025-142732/): Malicious code in fusion-flare-mensa-enceladus (npm) (malicious package)
- [MAL-2025-142731](https://insights.sbomify.com/MAL-2025-142731/): Malicious code in fusion-element-ui-browserify-odin (npm) (malicious package)
- [MAL-2025-142730](https://insights.sbomify.com/MAL-2025-142730/): Malicious code in fusion-dione-winston-hyperion (npm) (malicious package)
- [MAL-2025-14273](https://insights.sbomify.com/MAL-2025-14273/): Malicious code in alchemy-5p9dp-k62ml-zenith-project (npm) (malicious package)
- [MAL-2025-142729](https://insights.sbomify.com/MAL-2025-142729/): Malicious code in fusion-cygnus-xerxes-eridanus (npm) (malicious package)
- [MAL-2025-142728](https://insights.sbomify.com/MAL-2025-142728/): Malicious code in fusion-cygnus-scripts-carina (npm) (malicious package)
- [MAL-2025-142727](https://insights.sbomify.com/MAL-2025-142727/): Malicious code in fusion-callisto-parcel-nestjs (npm) (malicious package)
- [MAL-2025-142726](https://insights.sbomify.com/MAL-2025-142726/): Malicious code in fusion-callback-soap-markdownlint (npm) (malicious package)
- [MAL-2025-142725](https://insights.sbomify.com/MAL-2025-142725/): Malicious code in fusion-cache-nightwatch-csrf (npm) (malicious package)
- [MAL-2025-142724](https://insights.sbomify.com/MAL-2025-142724/): Malicious code in fusion-bellatrix-xanthus-upgrade (npm) (malicious package)
- [MAL-2025-142723](https://insights.sbomify.com/MAL-2025-142723/): Malicious code in fusion-barnard-vortex-tool (npm) (malicious package)
- [MAL-2025-142722](https://insights.sbomify.com/MAL-2025-142722/): Malicious code in fusion-arcturus-uglify-js-meissa (npm) (malicious package)
- [MAL-2025-142721](https://insights.sbomify.com/MAL-2025-142721/): Malicious code in fusion-aquarius-mui-galaxy (npm) (malicious package)
- [MAL-2025-142720](https://insights.sbomify.com/MAL-2025-142720/): Malicious code in fusion-apollo-style-loader-envconfig (npm) (malicious package)
- [MAL-2025-14272](https://insights.sbomify.com/MAL-2025-14272/): Malicious code in alchemy-5iqmn-ac151-nymph-project (npm) (malicious package)
- [MAL-2025-142719](https://insights.sbomify.com/MAL-2025-142719/): Malicious code in frontend-wasat-nodejs-nightwatch (npm) (malicious package)
- [MAL-2025-142718](https://insights.sbomify.com/MAL-2025-142718/): Malicious code in frontend-vega-scripts-cli (npm) (malicious package)
- [MAL-2025-142717](https://insights.sbomify.com/MAL-2025-142717/): Malicious code in frontend-rigel-wezen-rigel (npm) (malicious package)
- [MAL-2025-142716](https://insights.sbomify.com/MAL-2025-142716/): Malicious code in frontend-quark-antares-nova (npm) (malicious package)
- [MAL-2025-142715](https://insights.sbomify.com/MAL-2025-142715/): Malicious code in frontend-pulsar-nuxtjs-request (npm) (malicious package)
- [MAL-2025-142714](https://insights.sbomify.com/MAL-2025-142714/): Malicious code in frontend-proxima-xanthus-redis (npm) (malicious package)
- [MAL-2025-142713](https://insights.sbomify.com/MAL-2025-142713/): Malicious code in frontend-phoenix-hermes-wasat (npm) (malicious package)
- [MAL-2025-142712](https://insights.sbomify.com/MAL-2025-142712/): Malicious code in frontend-nuxtjs-configstore-middleware (npm) (malicious package)
- [MAL-2025-142711](https://insights.sbomify.com/MAL-2025-142711/): Malicious code in frontend-mysql-slidev-repository (npm) (malicious package)
- [MAL-2025-142710](https://insights.sbomify.com/MAL-2025-142710/): Malicious code in frontend-module-tailwindcss-sails (npm) (malicious package)
- [MAL-2025-14271](https://insights.sbomify.com/MAL-2025-14271/): Malicious code in alchemy-3k0rp-mvdxg-flora-project (npm) (malicious package)
- [MAL-2025-142709](https://insights.sbomify.com/MAL-2025-142709/): Malicious code in frontend-mira-indus-acamar (npm) (malicious package)
- [MAL-2025-142708](https://insights.sbomify.com/MAL-2025-142708/): Malicious code in frontend-meissa-scripts-charon (npm) (malicious package)
- [MAL-2025-142707](https://insights.sbomify.com/MAL-2025-142707/): Malicious code in frontend-magellan-metalsmith-chai (npm) (malicious package)
- [MAL-2025-142706](https://insights.sbomify.com/MAL-2025-142706/): Malicious code in frontend-jupiter-writable-dagda (npm) (malicious package)
- [MAL-2025-142705](https://insights.sbomify.com/MAL-2025-142705/): Malicious code in frontend-jekyll-commitizen-request (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1457/