# Vulnerabilities published in 2025


- [MAL-2025-142614](https://insights.sbomify.com/MAL-2025-142614/): Malicious code in fornax-corvus-socketio-antd (npm) (malicious package)
- [MAL-2025-142613](https://insights.sbomify.com/MAL-2025-142613/): Malicious code in fornax-commitlint-tool-docusaurus (npm) (malicious package)
- [MAL-2025-142612](https://insights.sbomify.com/MAL-2025-142612/): Malicious code in fornax-commitlint-config-angular-commitlint-warp (npm) (malicious package)
- [MAL-2025-142611](https://insights.sbomify.com/MAL-2025-142611/): Malicious code in fornax-chakra-ui-wasat-xml (npm) (malicious package)
- [MAL-2025-142610](https://insights.sbomify.com/MAL-2025-142610/): Malicious code in fornax-centauri-ceres-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-14261](https://insights.sbomify.com/MAL-2025-14261/): Malicious code in albatross-savanna-eks601-project (npm) (malicious package)
- [MAL-2025-142609](https://insights.sbomify.com/MAL-2025-142609/): Malicious code in fornax-bulma-css-minimizer-webpack-plugin-slides (npm) (malicious package)
- [MAL-2025-142608](https://insights.sbomify.com/MAL-2025-142608/): Malicious code in fornax-blaze-regulus-bunyan (npm) (malicious package)
- [MAL-2025-142607](https://insights.sbomify.com/MAL-2025-142607/): Malicious code in fornax-aquarius-prompts-nconf (npm) (malicious package)
- [MAL-2025-142606](https://insights.sbomify.com/MAL-2025-142606/): Malicious code in fornax-apollo-dependencies-sirius (npm) (malicious package)
- [MAL-2025-142605](https://insights.sbomify.com/MAL-2025-142605/): Malicious code in fornax-airbnb-callback-stream (npm) (malicious package)
- [MAL-2025-142604](https://insights.sbomify.com/MAL-2025-142604/): Malicious code in fornax-adonis-odin-exec (npm) (malicious package)
- [MAL-2025-142603](https://insights.sbomify.com/MAL-2025-142603/): Malicious code in fork-writable-miranda-dorado (npm) (malicious package)
- [MAL-2025-142602](https://insights.sbomify.com/MAL-2025-142602/): Malicious code in fork-vega-kaus-xanthus (npm) (malicious package)
- [MAL-2025-142601](https://insights.sbomify.com/MAL-2025-142601/): Malicious code in fork-update-stop-pegasus (npm) (malicious package)
- [MAL-2025-142600](https://insights.sbomify.com/MAL-2025-142600/): Malicious code in fork-start-node-sass-neptune (npm) (malicious package)
- [MAL-2025-14260](https://insights.sbomify.com/MAL-2025-14260/): Malicious code in albatross-nectar-lhr501-project (npm) (malicious package)
- [MAL-2025-1426](https://insights.sbomify.com/MAL-2025-1426/): Malicious code in orangex-internal (npm) (malicious package)
- [MAL-2025-142599](https://insights.sbomify.com/MAL-2025-142599/): Malicious code in fork-spectron-dependencies-stop (npm) (malicious package)
- [MAL-2025-142598](https://insights.sbomify.com/MAL-2025-142598/): Malicious code in fork-semantic-ui-version-transform (npm) (malicious package)
- [MAL-2025-142597](https://insights.sbomify.com/MAL-2025-142597/): Malicious code in fork-sedna-nightwatch-cors (npm) (malicious package)
- [MAL-2025-142596](https://insights.sbomify.com/MAL-2025-142596/): Malicious code in fork-run-script-json-bootstrap (npm) (malicious package)
- [MAL-2025-142595](https://insights.sbomify.com/MAL-2025-142595/): Malicious code in fork-publish-node-config-mini-css-extract-plugin (npm) (malicious package)
- [MAL-2025-142594](https://insights.sbomify.com/MAL-2025-142594/): Malicious code in fork-mocha-yonder-eslint-plugin (npm) (malicious package)
- [MAL-2025-142593](https://insights.sbomify.com/MAL-2025-142593/): Malicious code in fork-link-galaxy-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-142592](https://insights.sbomify.com/MAL-2025-142592/): Malicious code in fork-less-loader-stream-spinner (npm) (malicious package)
- [MAL-2025-142591](https://insights.sbomify.com/MAL-2025-142591/): Malicious code in fork-juno-link-fornax (npm) (malicious package)
- [MAL-2025-142590](https://insights.sbomify.com/MAL-2025-142590/): Malicious code in fork-helmet-telesto-cluster (npm) (malicious package)
- [MAL-2025-14259](https://insights.sbomify.com/MAL-2025-14259/): Malicious code in albatross-iris-taa438-project (npm) (malicious package)
- [MAL-2025-142589](https://insights.sbomify.com/MAL-2025-142589/): Malicious code in fork-gulp-bellatrix-semantic-release (npm) (malicious package)
- [MAL-2025-142588](https://insights.sbomify.com/MAL-2025-142588/): Malicious code in fork-foundation-enceladus-avior (npm) (malicious package)
- [MAL-2025-142587](https://insights.sbomify.com/MAL-2025-142587/): Malicious code in fork-eslint-plugin-procyon-fusion (npm) (malicious package)
- [MAL-2025-142586](https://insights.sbomify.com/MAL-2025-142586/): Malicious code in fork-duplex-request-triton (npm) (malicious package)
- [MAL-2025-142585](https://insights.sbomify.com/MAL-2025-142585/): Malicious code in fork-deneb-markdownlint-child-process (npm) (malicious package)
- [MAL-2025-142584](https://insights.sbomify.com/MAL-2025-142584/): Malicious code in fork-csv-standard-async (npm) (malicious package)
- [MAL-2025-142583](https://insights.sbomify.com/MAL-2025-142583/): Malicious code in fork-css-loader-halley-markdown-pdf (npm) (malicious package)
- [MAL-2025-142582](https://insights.sbomify.com/MAL-2025-142582/): Malicious code in fork-cordelia-gacrux-titan (npm) (malicious package)
- [MAL-2025-142581](https://insights.sbomify.com/MAL-2025-142581/): Malicious code in fork-carpo-xenos-element-ui (npm) (malicious package)
- [MAL-2025-142580](https://insights.sbomify.com/MAL-2025-142580/): Malicious code in fork-carpo-commitlint-gulp (npm) (malicious package)
- [MAL-2025-14258](https://insights.sbomify.com/MAL-2025-14258/): Malicious code in albatross-infinity-erv465-project (npm) (malicious package)
- [MAL-2025-142579](https://insights.sbomify.com/MAL-2025-142579/): Malicious code in fork-betelgeuse-levels-pavo (npm) (malicious package)
- [MAL-2025-142578](https://insights.sbomify.com/MAL-2025-142578/): Malicious code in forever-webpack-toml-rest (npm) (malicious package)
- [MAL-2025-142577](https://insights.sbomify.com/MAL-2025-142577/): Malicious code in forever-webdriver-mocha-testcafe-chai (npm) (malicious package)
- [MAL-2025-142576](https://insights.sbomify.com/MAL-2025-142576/): Malicious code in forever-tool-achernar-bellatrix (npm) (malicious package)
- [MAL-2025-142575](https://insights.sbomify.com/MAL-2025-142575/): Malicious code in forever-tailwindcss-orbit-element-ui (npm) (malicious package)
- [MAL-2025-142574](https://insights.sbomify.com/MAL-2025-142574/): Malicious code in forever-release-it-iota-virgo (npm) (malicious package)
- [MAL-2025-142573](https://insights.sbomify.com/MAL-2025-142573/): Malicious code in forever-proxima-node-config-leda (npm) (malicious package)
- [MAL-2025-142572](https://insights.sbomify.com/MAL-2025-142572/): Malicious code in forever-phoebe-framework-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-142571](https://insights.sbomify.com/MAL-2025-142571/): Malicious code in forever-ophiuchus-geckodriver-atlas (npm) (malicious package)
- [MAL-2025-142570](https://insights.sbomify.com/MAL-2025-142570/): Malicious code in forever-lint-carina-readable (npm) (malicious package)
- [MAL-2025-14257](https://insights.sbomify.com/MAL-2025-14257/): Malicious code in albatross-igloo-qfw656-project (npm) (malicious package)
- [MAL-2025-142569](https://insights.sbomify.com/MAL-2025-142569/): Malicious code in forever-init-hermes-electron (npm) (malicious package)
- [MAL-2025-142568](https://insights.sbomify.com/MAL-2025-142568/): Malicious code in forever-fornax-nuxtjs-europa (npm) (malicious package)
- [MAL-2025-142567](https://insights.sbomify.com/MAL-2025-142567/): Malicious code in forever-fetch-flare-farout (npm) (malicious package)
- [MAL-2025-142566](https://insights.sbomify.com/MAL-2025-142566/): Malicious code in forever-enceladus-ganymede-semantic-ui (npm) (malicious package)
- [MAL-2025-142565](https://insights.sbomify.com/MAL-2025-142565/): Malicious code in forever-configstore-markdownlint-webdriver-mocha (npm) (malicious package)
- [MAL-2025-142564](https://insights.sbomify.com/MAL-2025-142564/): Malicious code in forever-bootes-betelgeuse-bunyan (npm) (malicious package)
- [MAL-2025-142563](https://insights.sbomify.com/MAL-2025-142563/): Malicious code in forever-barnard-style-loader-scorpius (npm) (malicious package)
- [MAL-2025-142562](https://insights.sbomify.com/MAL-2025-142562/): Malicious code in forever-await-despina-eslint-config (npm) (malicious package)
- [MAL-2025-142561](https://insights.sbomify.com/MAL-2025-142561/): Malicious code in forever-astro-element-ui-epimetheus (npm) (malicious package)
- [MAL-2025-142560](https://insights.sbomify.com/MAL-2025-142560/): Malicious code in forever-apollo-oauth-async (npm) (malicious package)
- [MAL-2025-14256](https://insights.sbomify.com/MAL-2025-14256/): Malicious code in albatross-boulder-ekx837-project (npm) (malicious package)
- [MAL-2025-142559](https://insights.sbomify.com/MAL-2025-142559/): Malicious code in forever-andromeda-sadr-barnard (npm) (malicious package)
- [MAL-2025-142558](https://insights.sbomify.com/MAL-2025-142558/): Malicious code in forever-alphard-zenobia-leda (npm) (malicious package)
- [MAL-2025-142557](https://insights.sbomify.com/MAL-2025-142557/): Malicious code in forever-algol-react-bootstrap-chakra-ui (npm) (malicious package)
- [MAL-2025-142556](https://insights.sbomify.com/MAL-2025-142556/): Malicious code in fomalhaut-zenobia-lacerta-babel (npm) (malicious package)
- [MAL-2025-142555](https://insights.sbomify.com/MAL-2025-142555/): Malicious code in fomalhaut-ultra-google-dorado (npm) (malicious package)
- [MAL-2025-142554](https://insights.sbomify.com/MAL-2025-142554/): Malicious code in fomalhaut-standard-slidev-achernar (npm) (malicious package)
- [MAL-2025-142553](https://insights.sbomify.com/MAL-2025-142553/): Malicious code in fomalhaut-spinner-capella-less (npm) (malicious package)
- [MAL-2025-142552](https://insights.sbomify.com/MAL-2025-142552/): Malicious code in fomalhaut-rest-xenos-vortex (npm) (malicious package)
- [MAL-2025-142551](https://insights.sbomify.com/MAL-2025-142551/): Malicious code in fomalhaut-rehype-reveal-md-bulma (npm) (malicious package)
- [MAL-2025-142550](https://insights.sbomify.com/MAL-2025-142550/): Malicious code in fomalhaut-pyxis-child-process-terser (npm) (malicious package)
- [MAL-2025-14255](https://insights.sbomify.com/MAL-2025-14255/): Malicious code in alb-um-availa-ble-zip-mp3-file-on-a-mission-xj0aa-uvytiy (npm) (malicious package)
- [MAL-2025-142549](https://insights.sbomify.com/MAL-2025-142549/): Malicious code in fomalhaut-prettier-bootes-bootes (npm) (malicious package)
- [MAL-2025-142548](https://insights.sbomify.com/MAL-2025-142548/): Malicious code in fomalhaut-phoebe-mocha-miranda (npm) (malicious package)
- [MAL-2025-142547](https://insights.sbomify.com/MAL-2025-142547/): Malicious code in fomalhaut-nova-celeste-farout (npm) (malicious package)
- [MAL-2025-142546](https://insights.sbomify.com/MAL-2025-142546/): Malicious code in fomalhaut-lyra-public-hydra (npm) (malicious package)
- [MAL-2025-142545](https://insights.sbomify.com/MAL-2025-142545/): Malicious code in fomalhaut-lint-kastra-gacrux (npm) (malicious package)
- [MAL-2025-142544](https://insights.sbomify.com/MAL-2025-142544/): Malicious code in fomalhaut-library-carina-eslint-config (npm) (malicious package)
- [MAL-2025-142543](https://insights.sbomify.com/MAL-2025-142543/): Malicious code in fomalhaut-hugo-rollup-plugin-concurrently (npm) (malicious package)
- [MAL-2025-142542](https://insights.sbomify.com/MAL-2025-142542/): Malicious code in fomalhaut-hapi-request-vortex (npm) (malicious package)
- [MAL-2025-142541](https://insights.sbomify.com/MAL-2025-142541/): Malicious code in fomalhaut-gridsome-sagitta-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-142540](https://insights.sbomify.com/MAL-2025-142540/): Malicious code in fomalhaut-ganymede-yildun-mysql (npm) (malicious package)
- [MAL-2025-14254](https://insights.sbomify.com/MAL-2025-14254/): Malicious code in alb-um-availa-ble-zip-mp3-file-central-market-ilx22-uynmjv (npm) (malicious package)
- [MAL-2025-142539](https://insights.sbomify.com/MAL-2025-142539/): Malicious code in fomalhaut-eslint-plugin-winston-cors (npm) (malicious package)
- [MAL-2025-142538](https://insights.sbomify.com/MAL-2025-142538/): Malicious code in fomalhaut-dynamo-luna-tailwindcss (npm) (malicious package)
- [MAL-2025-142537](https://insights.sbomify.com/MAL-2025-142537/): Malicious code in fomalhaut-chalk-hugo-dione (npm) (malicious package)
- [MAL-2025-142536](https://insights.sbomify.com/MAL-2025-142536/): Malicious code in fomalhaut-bulma-markdown-less-loader (npm) (malicious package)
- [MAL-2025-142535](https://insights.sbomify.com/MAL-2025-142535/): Malicious code in flexible_hummingbird_sapphire-15 (npm) (malicious package)
- [MAL-2025-142534](https://insights.sbomify.com/MAL-2025-142534/): Malicious code in flare-solis-forever-jwt (npm) (malicious package)
- [MAL-2025-142533](https://insights.sbomify.com/MAL-2025-142533/): Malicious code in flare-pm2-capella-webpack (npm) (malicious package)
- [MAL-2025-142532](https://insights.sbomify.com/MAL-2025-142532/): Malicious code in flare-materialize-passport-nightwatch (npm) (malicious package)
- [MAL-2025-142531](https://insights.sbomify.com/MAL-2025-142531/): Malicious code in flare-markdown-nuxtjs-bootstrap (npm) (malicious package)
- [MAL-2025-142530](https://insights.sbomify.com/MAL-2025-142530/): Malicious code in flare-koa-version-aether (npm) (malicious package)
- [MAL-2025-14253](https://insights.sbomify.com/MAL-2025-14253/): Malicious code in alb-um-availa-ble-zip-mp3-file-9399-tigermilk-1am0w-pkhmun (npm) (malicious package)
- [MAL-2025-142529](https://insights.sbomify.com/MAL-2025-142529/): Malicious code in flare-hugo-build-loopback (npm) (malicious package)
- [MAL-2025-142528](https://insights.sbomify.com/MAL-2025-142528/): Malicious code in flare-hermes-halley-despina (npm) (malicious package)
- [MAL-2025-142527](https://insights.sbomify.com/MAL-2025-142527/): Malicious code in flare-halley-meissa-jupiter (npm) (malicious package)
- [MAL-2025-142526](https://insights.sbomify.com/MAL-2025-142526/): Malicious code in flare-grunt-sass-loader-callback (npm) (malicious package)
- [MAL-2025-142525](https://insights.sbomify.com/MAL-2025-142525/): Malicious code in flare-gridsome-sirius-ini (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1459/