# Vulnerabilities published in 2025


- [MAL-2025-142704](https://insights.sbomify.com/MAL-2025-142704/): Malicious code in frontend-hydra-morgan-chromedriver (npm) (malicious package)
- [MAL-2025-142703](https://insights.sbomify.com/MAL-2025-142703/): Malicious code in frontend-firebase-websockets-ursa (npm) (malicious package)
- [MAL-2025-142702](https://insights.sbomify.com/MAL-2025-142702/): Malicious code in frontend-epimetheus-flare-lynx (npm) (malicious package)
- [MAL-2025-142701](https://insights.sbomify.com/MAL-2025-142701/): Malicious code in frontend-chakra-ui-standard-colors (npm) (malicious package)
- [MAL-2025-142700](https://insights.sbomify.com/MAL-2025-142700/): Malicious code in frontend-carpo-yaml-hyperion (npm) (malicious package)
- [MAL-2025-14270](https://insights.sbomify.com/MAL-2025-14270/): Malicious code in alcarin-lib (npm) (malicious package)
- [MAL-2025-1427](https://insights.sbomify.com/MAL-2025-1427/): Malicious code in orangex-main (npm) (malicious package)
- [MAL-2025-142699](https://insights.sbomify.com/MAL-2025-142699/): Malicious code in frontend-build-css-loader-europa (npm) (malicious package)
- [MAL-2025-142698](https://insights.sbomify.com/MAL-2025-142698/): Malicious code in frontend-betelgeuse-restart-orbit (npm) (malicious package)
- [MAL-2025-142697](https://insights.sbomify.com/MAL-2025-142697/): Malicious code in frontend-aldebaran-hydra-frontend (npm) (malicious package)
- [MAL-2025-142696](https://insights.sbomify.com/MAL-2025-142696/): Malicious code in framework-wolf-yaml-electron-builder (npm) (malicious package)
- [MAL-2025-142695](https://insights.sbomify.com/MAL-2025-142695/): Malicious code in framework-vuetify-antd-cluster (npm) (malicious package)
- [MAL-2025-142694](https://insights.sbomify.com/MAL-2025-142694/): Malicious code in framework-rigel-xenos-jest (npm) (malicious package)
- [MAL-2025-142693](https://insights.sbomify.com/MAL-2025-142693/): Malicious code in framework-react-bootstrap-alphard-supervisor (npm) (malicious package)
- [MAL-2025-142692](https://insights.sbomify.com/MAL-2025-142692/): Malicious code in framework-quasar-spawn-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-142691](https://insights.sbomify.com/MAL-2025-142691/): Malicious code in framework-public-redis-test (npm) (malicious package)
- [MAL-2025-142690](https://insights.sbomify.com/MAL-2025-142690/): Malicious code in framework-optimize-css-assets-webpack-plugin-start-postgres (npm) (malicious package)
- [MAL-2025-14269](https://insights.sbomify.com/MAL-2025-14269/): Malicious code in albatross-zenith-xbc036-project (npm) (malicious package)
- [MAL-2025-142689](https://insights.sbomify.com/MAL-2025-142689/): Malicious code in framework-oauth-postgres-fetch (npm) (malicious package)
- [MAL-2025-142688](https://insights.sbomify.com/MAL-2025-142688/): Malicious code in framework-nuxtjs-sedna-build (npm) (malicious package)
- [MAL-2025-142687](https://insights.sbomify.com/MAL-2025-142687/): Malicious code in framework-mysql-regulus-element-ui (npm) (malicious package)
- [MAL-2025-142686](https://insights.sbomify.com/MAL-2025-142686/): Malicious code in framework-middleware-lacerta-loop (npm) (malicious package)
- [MAL-2025-142685](https://insights.sbomify.com/MAL-2025-142685/): Malicious code in framework-magellan-mocha-lynx (npm) (malicious package)
- [MAL-2025-142684](https://insights.sbomify.com/MAL-2025-142684/): Malicious code in framework-jekyll-colors-library (npm) (malicious package)
- [MAL-2025-142683](https://insights.sbomify.com/MAL-2025-142683/): Malicious code in framework-hapi-sequelize-jovian (npm) (malicious package)
- [MAL-2025-142682](https://insights.sbomify.com/MAL-2025-142682/): Malicious code in framework-halley-phoebe-grunt (npm) (malicious package)
- [MAL-2025-142681](https://insights.sbomify.com/MAL-2025-142681/): Malicious code in framework-eris-nuxtjs-grus (npm) (malicious package)
- [MAL-2025-142680](https://insights.sbomify.com/MAL-2025-142680/): Malicious code in framework-epimetheus-dynamo-radiant (npm) (malicious package)
- [MAL-2025-14268](https://insights.sbomify.com/MAL-2025-14268/): Malicious code in albatross-zenith-ecd814-project (npm) (malicious package)
- [MAL-2025-142679](https://insights.sbomify.com/MAL-2025-142679/): Malicious code in framework-dynamo-react-bootstrap-react-bootstrap (npm) (malicious package)
- [MAL-2025-142678](https://insights.sbomify.com/MAL-2025-142678/): Malicious code in framework-dactyl-exec-development (npm) (malicious package)
- [MAL-2025-142677](https://insights.sbomify.com/MAL-2025-142677/): Malicious code in framework-css-loader-enceladus-chai (npm) (malicious package)
- [MAL-2025-142676](https://insights.sbomify.com/MAL-2025-142676/): Malicious code in framework-astro-library-wasat (npm) (malicious package)
- [MAL-2025-142675](https://insights.sbomify.com/MAL-2025-142675/): Malicious code in foundation-vortex-semantic-ui-astro (npm) (malicious package)
- [MAL-2025-142674](https://insights.sbomify.com/MAL-2025-142674/): Malicious code in foundation-taurus-perseus-quark (npm) (malicious package)
- [MAL-2025-142673](https://insights.sbomify.com/MAL-2025-142673/): Malicious code in foundation-sync-jwt-dependencies (npm) (malicious package)
- [MAL-2025-142672](https://insights.sbomify.com/MAL-2025-142672/): Malicious code in foundation-supervisor-carina-ophiuchus (npm) (malicious package)
- [MAL-2025-142671](https://insights.sbomify.com/MAL-2025-142671/): Malicious code in foundation-sagitta-meissa-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-142670](https://insights.sbomify.com/MAL-2025-142670/): Malicious code in foundation-nodemon-capella-jupiter (npm) (malicious package)
- [MAL-2025-14267](https://insights.sbomify.com/MAL-2025-14267/): Malicious code in albatross-yonder-ijj186-project (npm) (malicious package)
- [MAL-2025-142669](https://insights.sbomify.com/MAL-2025-142669/): Malicious code in foundation-canopus-charon-adonis (npm) (malicious package)
- [MAL-2025-142668](https://insights.sbomify.com/MAL-2025-142668/): Malicious code in foundation-blaze-airbnb-helmet (npm) (malicious package)
- [MAL-2025-142667](https://insights.sbomify.com/MAL-2025-142667/): Malicious code in foundation-backend-enif-async (npm) (malicious package)
- [MAL-2025-142666](https://insights.sbomify.com/MAL-2025-142666/): Malicious code in foundation-antares-yaml-vega (npm) (malicious package)
- [MAL-2025-142665](https://insights.sbomify.com/MAL-2025-142665/): Malicious code in foundation-aether-fornax-duplex (npm) (malicious package)
- [MAL-2025-142664](https://insights.sbomify.com/MAL-2025-142664/): Malicious code in foundation-adonis-duplex-bootstrap (npm) (malicious package)
- [MAL-2025-142663](https://insights.sbomify.com/MAL-2025-142663/): Malicious code in fornax-winston-browserify-registry (npm) (malicious package)
- [MAL-2025-142662](https://insights.sbomify.com/MAL-2025-142662/): Malicious code in fornax-wezen-celeste-auriga (npm) (malicious package)
- [MAL-2025-142661](https://insights.sbomify.com/MAL-2025-142661/): Malicious code in fornax-webpack-pyxis-webdriverio (npm) (malicious package)
- [MAL-2025-142660](https://insights.sbomify.com/MAL-2025-142660/): Malicious code in fornax-unuk-element-ui-pyxis (npm) (malicious package)
- [MAL-2025-14266](https://insights.sbomify.com/MAL-2025-14266/): Malicious code in albatross-yonder-fbt620-project (npm) (malicious package)
- [MAL-2025-142659](https://insights.sbomify.com/MAL-2025-142659/): Malicious code in fornax-uninstall-epimetheus-writable (npm) (malicious package)
- [MAL-2025-142658](https://insights.sbomify.com/MAL-2025-142658/): Malicious code in fornax-umbriel-magellan-graphql (npm) (malicious package)
- [MAL-2025-142657](https://insights.sbomify.com/MAL-2025-142657/): Malicious code in fornax-ultra-hexo-algol (npm) (malicious package)
- [MAL-2025-142656](https://insights.sbomify.com/MAL-2025-142656/): Malicious code in fornax-test-kronos-ganymede (npm) (malicious package)
- [MAL-2025-142655](https://insights.sbomify.com/MAL-2025-142655/): Malicious code in fornax-terser-webpack-plugin-sedna-dynamo (npm) (malicious package)
- [MAL-2025-142654](https://insights.sbomify.com/MAL-2025-142654/): Malicious code in fornax-tailwindcss-start-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-142653](https://insights.sbomify.com/MAL-2025-142653/): Malicious code in fornax-selenium-postcss-loader-middleware (npm) (malicious package)
- [MAL-2025-142652](https://insights.sbomify.com/MAL-2025-142652/): Malicious code in fornax-repository-json-hermes (npm) (malicious package)
- [MAL-2025-142651](https://insights.sbomify.com/MAL-2025-142651/): Malicious code in fornax-react-bootstrap-phoenix-ignite (npm) (malicious package)
- [MAL-2025-142650](https://insights.sbomify.com/MAL-2025-142650/): Malicious code in fornax-react-bootstrap-halley-fork (npm) (malicious package)
- [MAL-2025-14265](https://insights.sbomify.com/MAL-2025-14265/): Malicious code in albatross-volcano-knk019-project (npm) (malicious package)
- [MAL-2025-142649](https://insights.sbomify.com/MAL-2025-142649/): Malicious code in fornax-radiant-buffer-sequelize (npm) (malicious package)
- [MAL-2025-142648](https://insights.sbomify.com/MAL-2025-142648/): Malicious code in fornax-quark-meteor-ursa (npm) (malicious package)
- [MAL-2025-142647](https://insights.sbomify.com/MAL-2025-142647/): Malicious code in fornax-pulsar-phenomic-quito (npm) (malicious package)
- [MAL-2025-142646](https://insights.sbomify.com/MAL-2025-142646/): Malicious code in fornax-promise-less-heka (npm) (malicious package)
- [MAL-2025-142645](https://insights.sbomify.com/MAL-2025-142645/): Malicious code in fornax-postcss-loader-umbra-webdriver-manager (npm) (malicious package)
- [MAL-2025-142644](https://insights.sbomify.com/MAL-2025-142644/): Malicious code in fornax-polaris-nodejs-ignite (npm) (malicious package)
- [MAL-2025-142643](https://insights.sbomify.com/MAL-2025-142643/): Malicious code in fornax-phoebe-release-it-ganymede (npm) (malicious package)
- [MAL-2025-142642](https://insights.sbomify.com/MAL-2025-142642/): Malicious code in fornax-octans-grunt-metalsmith (npm) (malicious package)
- [MAL-2025-142641](https://insights.sbomify.com/MAL-2025-142641/): Malicious code in fornax-neptune-telesto-farout (npm) (malicious package)
- [MAL-2025-142640](https://insights.sbomify.com/MAL-2025-142640/): Malicious code in fornax-mysql-bellatrix-spawn (npm) (malicious package)
- [MAL-2025-14264](https://insights.sbomify.com/MAL-2025-14264/): Malicious code in albatross-volcano-ciq357-project (npm) (malicious package)
- [MAL-2025-142639](https://insights.sbomify.com/MAL-2025-142639/): Malicious code in fornax-mongodb-ini-sass-loader (npm) (malicious package)
- [MAL-2025-142638](https://insights.sbomify.com/MAL-2025-142638/): Malicious code in fornax-miranda-dotenv-parse-variables-proxima (npm) (malicious package)
- [MAL-2025-142637](https://insights.sbomify.com/MAL-2025-142637/): Malicious code in fornax-metalsmith-fork-hydra (npm) (malicious package)
- [MAL-2025-142636](https://insights.sbomify.com/MAL-2025-142636/): Malicious code in fornax-mdx-antares-csv (npm) (malicious package)
- [MAL-2025-142635](https://insights.sbomify.com/MAL-2025-142635/): Malicious code in fornax-markdown-pdf-fornax-europa (npm) (malicious package)
- [MAL-2025-142634](https://insights.sbomify.com/MAL-2025-142634/): Malicious code in fornax-markdown-mutation-got (npm) (malicious package)
- [MAL-2025-142633](https://insights.sbomify.com/MAL-2025-142633/): Malicious code in fornax-loopback-npm-wolf (npm) (malicious package)
- [MAL-2025-142632](https://insights.sbomify.com/MAL-2025-142632/): Malicious code in fornax-loopback-google-selenium (npm) (malicious package)
- [MAL-2025-142631](https://insights.sbomify.com/MAL-2025-142631/): Malicious code in fornax-loglevel-xanadu-jupiter (npm) (malicious package)
- [MAL-2025-142630](https://insights.sbomify.com/MAL-2025-142630/): Malicious code in fornax-link-framework-meteor (npm) (malicious package)
- [MAL-2025-14263](https://insights.sbomify.com/MAL-2025-14263/): Malicious code in albatross-tiger-fst792-project (npm) (malicious package)
- [MAL-2025-142629](https://insights.sbomify.com/MAL-2025-142629/): Malicious code in fornax-leda-algol-publish (npm) (malicious package)
- [MAL-2025-142628](https://insights.sbomify.com/MAL-2025-142628/): Malicious code in fornax-izar-wasat-proxima (npm) (malicious package)
- [MAL-2025-142627](https://insights.sbomify.com/MAL-2025-142627/): Malicious code in fornax-iota-protractor-betelgeuse (npm) (malicious package)
- [MAL-2025-142626](https://insights.sbomify.com/MAL-2025-142626/): Malicious code in fornax-html-webpack-plugin-child-process-rollup-plugin (npm) (malicious package)
- [MAL-2025-142625](https://insights.sbomify.com/MAL-2025-142625/): Malicious code in fornax-hermes-soap-eleventy (npm) (malicious package)
- [MAL-2025-142624](https://insights.sbomify.com/MAL-2025-142624/): Malicious code in fornax-halley-antares-betelgeuse (npm) (malicious package)
- [MAL-2025-142623](https://insights.sbomify.com/MAL-2025-142623/): Malicious code in fornax-gulp-cross-env-miranda (npm) (malicious package)
- [MAL-2025-142622](https://insights.sbomify.com/MAL-2025-142622/): Malicious code in fornax-grunt-zephyr-bunyan (npm) (malicious package)
- [MAL-2025-142621](https://insights.sbomify.com/MAL-2025-142621/): Malicious code in fornax-global-nightwatch-sirius (npm) (malicious package)
- [MAL-2025-142620](https://insights.sbomify.com/MAL-2025-142620/): Malicious code in fornax-fomalhaut-forever-ursa (npm) (malicious package)
- [MAL-2025-14262](https://insights.sbomify.com/MAL-2025-14262/): Malicious code in albatross-sunset-jfj328-project (npm) (malicious package)
- [MAL-2025-142619](https://insights.sbomify.com/MAL-2025-142619/): Malicious code in fornax-epimetheus-uninstall-spectron-webdriver (npm) (malicious package)
- [MAL-2025-142618](https://insights.sbomify.com/MAL-2025-142618/): Malicious code in fornax-enceladus-tool-meteor (npm) (malicious package)
- [MAL-2025-142617](https://insights.sbomify.com/MAL-2025-142617/): Malicious code in fornax-electron-builder-electron-sass-loader (npm) (malicious package)
- [MAL-2025-142616](https://insights.sbomify.com/MAL-2025-142616/): Malicious code in fornax-dotenv-safe-delphinus-kronos (npm) (malicious package)
- [MAL-2025-142615](https://insights.sbomify.com/MAL-2025-142615/): Malicious code in fornax-csrf-buffer-remark (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1458/