# Vulnerabilities published in 2025


- [MAL-2025-142434](https://insights.sbomify.com/MAL-2025-142434/): Malicious code in fetch-betelgeuse-schema-sync (npm) (malicious package)
- [MAL-2025-142433](https://insights.sbomify.com/MAL-2025-142433/): Malicious code in fetch-bellatrix-celeste-jwt (npm) (malicious package)
- [MAL-2025-142432](https://insights.sbomify.com/MAL-2025-142432/): Malicious code in fetch-await-epimetheus-pegasus (npm) (malicious package)
- [MAL-2025-142431](https://insights.sbomify.com/MAL-2025-142431/): Malicious code in fetch-adonis-less-loader-figures (npm) (malicious package)
- [MAL-2025-142430](https://insights.sbomify.com/MAL-2025-142430/): Malicious code in favourite-coffee-stork (npm) (malicious package)
- [MAL-2025-14243](https://insights.sbomify.com/MAL-2025-14243/): Malicious code in alb-um-availa-ble-zip-mp3-file-131408-zeppelin-over-china-ylmq2-mamqni (npm) (malicious package)
- [MAL-2025-142429](https://insights.sbomify.com/MAL-2025-142429/): Malicious code in farout-yonder-convict-iota (npm) (malicious package)
- [MAL-2025-142428](https://insights.sbomify.com/MAL-2025-142428/): Malicious code in farout-vega-vulcan-rollup (npm) (malicious package)
- [MAL-2025-142427](https://insights.sbomify.com/MAL-2025-142427/): Malicious code in farout-tethys-antares-koa (npm) (malicious package)
- [MAL-2025-142426](https://insights.sbomify.com/MAL-2025-142426/): Malicious code in farout-sync-regulus-node-config (npm) (malicious package)
- [MAL-2025-142425](https://insights.sbomify.com/MAL-2025-142425/): Malicious code in farout-supervisor-phoebe-umbra (npm) (malicious package)
- [MAL-2025-142424](https://insights.sbomify.com/MAL-2025-142424/): Malicious code in farout-sails-eslint-config-chariklo (npm) (malicious package)
- [MAL-2025-142423](https://insights.sbomify.com/MAL-2025-142423/): Malicious code in farout-repository-deneb-farout (npm) (malicious package)
- [MAL-2025-142422](https://insights.sbomify.com/MAL-2025-142422/): Malicious code in farout-redis-levels-odin (npm) (malicious package)
- [MAL-2025-142421](https://insights.sbomify.com/MAL-2025-142421/): Malicious code in farout-pm2-magellan-standard (npm) (malicious package)
- [MAL-2025-142420](https://insights.sbomify.com/MAL-2025-142420/): Malicious code in farout-nightmare-superagent-fork (npm) (malicious package)
- [MAL-2025-14242](https://insights.sbomify.com/MAL-2025-14242/): Malicious code in alarme (npm) (malicious package)
- [MAL-2025-142419](https://insights.sbomify.com/MAL-2025-142419/): Malicious code in farout-neptune-dione-transform (npm) (malicious package)
- [MAL-2025-142418](https://insights.sbomify.com/MAL-2025-142418/): Malicious code in farout-kronos-xml-aurora (npm) (malicious package)
- [MAL-2025-142417](https://insights.sbomify.com/MAL-2025-142417/): Malicious code in farout-karma-sqlite-pyxis (npm) (malicious package)
- [MAL-2025-142416](https://insights.sbomify.com/MAL-2025-142416/): Malicious code in farout-ini-spectron-markdownlint (npm) (malicious package)
- [MAL-2025-142415](https://insights.sbomify.com/MAL-2025-142415/): Malicious code in farout-indus-iota-centaurus (npm) (malicious package)
- [MAL-2025-142414](https://insights.sbomify.com/MAL-2025-142414/): Malicious code in farout-geckodriver-virgo-kaus (npm) (malicious package)
- [MAL-2025-142413](https://insights.sbomify.com/MAL-2025-142413/): Malicious code in farout-gacrux-bulma-altair (npm) (malicious package)
- [MAL-2025-142412](https://insights.sbomify.com/MAL-2025-142412/): Malicious code in farout-fornax-nodemon-commitlint (npm) (malicious package)
- [MAL-2025-142411](https://insights.sbomify.com/MAL-2025-142411/): Malicious code in farout-fork-aldebaran-capella (npm) (malicious package)
- [MAL-2025-142410](https://insights.sbomify.com/MAL-2025-142410/): Malicious code in farout-draco-supervisor-chai (npm) (malicious package)
- [MAL-2025-14241](https://insights.sbomify.com/MAL-2025-14241/): Malicious code in alanasme (npm) (malicious package)
- [MAL-2025-142409](https://insights.sbomify.com/MAL-2025-142409/): Malicious code in farout-dotenv-parse-variables-umbriel-promise (npm) (malicious package)
- [MAL-2025-142408](https://insights.sbomify.com/MAL-2025-142408/): Malicious code in farout-despina-scorpius-scorpius (npm) (malicious package)
- [MAL-2025-142407](https://insights.sbomify.com/MAL-2025-142407/): Malicious code in farout-delphinus-wasat-xenos (npm) (malicious package)
- [MAL-2025-142406](https://insights.sbomify.com/MAL-2025-142406/): Malicious code in farout-delphinus-europa-flare (npm) (malicious package)
- [MAL-2025-142405](https://insights.sbomify.com/MAL-2025-142405/): Malicious code in farout-cz-conventional-changelog-xerxes-testcafe (npm) (malicious package)
- [MAL-2025-142404](https://insights.sbomify.com/MAL-2025-142404/): Malicious code in farout-cz-conventional-changelog-loop-regulus (npm) (malicious package)
- [MAL-2025-142403](https://insights.sbomify.com/MAL-2025-142403/): Malicious code in farout-chromedriver-aurora-tailwindcss (npm) (malicious package)
- [MAL-2025-142402](https://insights.sbomify.com/MAL-2025-142402/): Malicious code in farout-chariklo-jasmine-cosmiconfig (npm) (malicious package)
- [MAL-2025-142401](https://insights.sbomify.com/MAL-2025-142401/): Malicious code in farout-changelog-apollo-kaus (npm) (malicious package)
- [MAL-2025-142400](https://insights.sbomify.com/MAL-2025-142400/): Malicious code in farout-castor-publish-barnard (npm) (malicious package)
- [MAL-2025-14240](https://insights.sbomify.com/MAL-2025-14240/): Malicious code in alanarato (npm) (malicious package)
- [MAL-2025-1424](https://insights.sbomify.com/MAL-2025-1424/): Malicious code in lbank-test (npm) (malicious package)
- [MAL-2025-142399](https://insights.sbomify.com/MAL-2025-142399/): Malicious code in farout-blitz-yildun-quito (npm) (malicious package)
- [MAL-2025-142398](https://insights.sbomify.com/MAL-2025-142398/): Malicious code in express-zenith-scorpius-pino-pretty (npm) (malicious package)
- [MAL-2025-142397](https://insights.sbomify.com/MAL-2025-142397/): Malicious code in express-yaml-ophiuchus-pino-pretty (npm) (malicious package)
- [MAL-2025-142396](https://insights.sbomify.com/MAL-2025-142396/): Malicious code in express-xanadu-husky-lint-staged (npm) (malicious package)
- [MAL-2025-142395](https://insights.sbomify.com/MAL-2025-142395/): Malicious code in express-winston-yakutsk-halley (npm) (malicious package)
- [MAL-2025-142394](https://insights.sbomify.com/MAL-2025-142394/): Malicious code in express-venus-sails-phoebe (npm) (malicious package)
- [MAL-2025-142393](https://insights.sbomify.com/MAL-2025-142393/): Malicious code in express-update-bellatrix-sqlite (npm) (malicious package)
- [MAL-2025-142392](https://insights.sbomify.com/MAL-2025-142392/): Malicious code in express-titan-andromeda-shelljs (npm) (malicious package)
- [MAL-2025-142391](https://insights.sbomify.com/MAL-2025-142391/): Malicious code in express-superagent-javascript-hapi (npm) (malicious package)
- [MAL-2025-142390](https://insights.sbomify.com/MAL-2025-142390/): Malicious code in express-pyxis-sails-stop (npm) (malicious package)
- [MAL-2025-14239](https://insights.sbomify.com/MAL-2025-14239/): Malicious code in alakkai (npm) (malicious package)
- [MAL-2025-142389](https://insights.sbomify.com/MAL-2025-142389/): Malicious code in express-odin-hermes-build (npm) (malicious package)
- [MAL-2025-142388](https://insights.sbomify.com/MAL-2025-142388/): Malicious code in express-non-blocking-radiant-fork (npm) (malicious package)
- [MAL-2025-142387](https://insights.sbomify.com/MAL-2025-142387/): Malicious code in express-nconf-husky-mocha (npm) (malicious package)
- [MAL-2025-142386](https://insights.sbomify.com/MAL-2025-142386/): Malicious code in express-module-dione-json (npm) (malicious package)
- [MAL-2025-142385](https://insights.sbomify.com/MAL-2025-142385/): Malicious code in express-mira-miranda-delphinus (npm) (malicious package)
- [MAL-2025-142384](https://insights.sbomify.com/MAL-2025-142384/): Malicious code in express-mini-css-extract-plugin-procyon-acamar (npm) (malicious package)
- [MAL-2025-142383](https://insights.sbomify.com/MAL-2025-142383/): Malicious code in express-meteor-colors-chariklo (npm) (malicious package)
- [MAL-2025-142382](https://insights.sbomify.com/MAL-2025-142382/): Malicious code in express-markdownlint-koa-deneb (npm) (malicious package)
- [MAL-2025-142381](https://insights.sbomify.com/MAL-2025-142381/): Malicious code in express-lint-jsonp-nightwatch (npm) (malicious package)
- [MAL-2025-142380](https://insights.sbomify.com/MAL-2025-142380/): Malicious code in express-janus-auth-publish (npm) (malicious package)
- [MAL-2025-14238](https://insights.sbomify.com/MAL-2025-14238/): Malicious code in akuimwubna (npm) (malicious package)
- [MAL-2025-142379](https://insights.sbomify.com/MAL-2025-142379/): Malicious code in express-ini-soap-local (npm) (malicious package)
- [MAL-2025-142378](https://insights.sbomify.com/MAL-2025-142378/): Malicious code in express-grunt-transport-solis (npm) (malicious package)
- [MAL-2025-142377](https://insights.sbomify.com/MAL-2025-142377/): Malicious code in express-ganymede-xml-betelgeuse (npm) (malicious package)
- [MAL-2025-142376](https://insights.sbomify.com/MAL-2025-142376/): Malicious code in express-fetch-build-auth0 (npm) (malicious package)
- [MAL-2025-142375](https://insights.sbomify.com/MAL-2025-142375/): Malicious code in express-eris-jabbah-eslint-config (npm) (malicious package)
- [MAL-2025-142374](https://insights.sbomify.com/MAL-2025-142374/): Malicious code in express-epimetheus-transform-antares (npm) (malicious package)
- [MAL-2025-142373](https://insights.sbomify.com/MAL-2025-142373/): Malicious code in express-electron-builder-eslint-plugin-firebase (npm) (malicious package)
- [MAL-2025-142372](https://insights.sbomify.com/MAL-2025-142372/): Malicious code in express-docusaurus-phoebe-foundation (npm) (malicious package)
- [MAL-2025-142371](https://insights.sbomify.com/MAL-2025-142371/): Malicious code in express-delphinus-odin-phoenix (npm) (malicious package)
- [MAL-2025-142370](https://insights.sbomify.com/MAL-2025-142370/): Malicious code in express-cassini-warp-soap (npm) (malicious package)
- [MAL-2025-14237](https://insights.sbomify.com/MAL-2025-14237/): Malicious code in aktivity-api (npm) (malicious package)
- [MAL-2025-142369](https://insights.sbomify.com/MAL-2025-142369/): Malicious code in express-cache-delphinus-iota (npm) (malicious package)
- [MAL-2025-142368](https://insights.sbomify.com/MAL-2025-142368/): Malicious code in express-barnard-materialize-framework (npm) (malicious package)
- [MAL-2025-142367](https://insights.sbomify.com/MAL-2025-142367/): Malicious code in express-auth-registry-markdownlint (npm) (malicious package)
- [MAL-2025-142366](https://insights.sbomify.com/MAL-2025-142366/): Malicious code in express-ariel-antares-loglevel (npm) (malicious package)
- [MAL-2025-142365](https://insights.sbomify.com/MAL-2025-142365/): Malicious code in express-antares-neptune-gravity (npm) (malicious package)
- [MAL-2025-142364](https://insights.sbomify.com/MAL-2025-142364/): Malicious code in express-andromeda-xml-miranda (npm) (malicious package)
- [MAL-2025-142363](https://insights.sbomify.com/MAL-2025-142363/): Malicious code in exec-winston-loop-nightwatch (npm) (malicious package)
- [MAL-2025-142362](https://insights.sbomify.com/MAL-2025-142362/): Malicious code in exec-thuban-farout-xanadu (npm) (malicious package)
- [MAL-2025-142361](https://insights.sbomify.com/MAL-2025-142361/): Malicious code in exec-scorpius-toml-transform (npm) (malicious package)
- [MAL-2025-142360](https://insights.sbomify.com/MAL-2025-142360/): Malicious code in exec-sass-loader-acamar-halley (npm) (malicious package)
- [MAL-2025-14236](https://insights.sbomify.com/MAL-2025-14236/): Malicious code in aksznwqglkihrtpc (npm) (malicious package)
- [MAL-2025-142359](https://insights.sbomify.com/MAL-2025-142359/): Malicious code in exec-publish-fork-phoebe (npm) (malicious package)
- [MAL-2025-142358](https://insights.sbomify.com/MAL-2025-142358/): Malicious code in exec-phoenix-miranda-mira (npm) (malicious package)
- [MAL-2025-142357](https://insights.sbomify.com/MAL-2025-142357/): Malicious code in exec-parcel-tailwindcss-markdown (npm) (malicious package)
- [MAL-2025-142356](https://insights.sbomify.com/MAL-2025-142356/): Malicious code in exec-nuxtjs-async-await (npm) (malicious package)
- [MAL-2025-142355](https://insights.sbomify.com/MAL-2025-142355/): Malicious code in exec-nuxtjs-antares-umbriel (npm) (malicious package)
- [MAL-2025-142354](https://insights.sbomify.com/MAL-2025-142354/): Malicious code in exec-nestjs-request-phoebe (npm) (malicious package)
- [MAL-2025-142353](https://insights.sbomify.com/MAL-2025-142353/): Malicious code in exec-mui-fornax-nodejs (npm) (malicious package)
- [MAL-2025-142352](https://insights.sbomify.com/MAL-2025-142352/): Malicious code in exec-mocha-pipe-repository (npm) (malicious package)
- [MAL-2025-142351](https://insights.sbomify.com/MAL-2025-142351/): Malicious code in exec-materialize-airbnb-dagda (npm) (malicious package)
- [MAL-2025-142350](https://insights.sbomify.com/MAL-2025-142350/): Malicious code in exec-markdown-pdf-lyra-postgres (npm) (malicious package)
- [MAL-2025-14235](https://insights.sbomify.com/MAL-2025-14235/): Malicious code in aksite (npm) (malicious package)
- [MAL-2025-142349](https://insights.sbomify.com/MAL-2025-142349/): Malicious code in exec-less-commitizen-nextjs (npm) (malicious package)
- [MAL-2025-142348](https://insights.sbomify.com/MAL-2025-142348/): Malicious code in exec-koa-andromeda-google (npm) (malicious package)
- [MAL-2025-142347](https://insights.sbomify.com/MAL-2025-142347/): Malicious code in exec-jovian-perseus-query (npm) (malicious package)
- [MAL-2025-142346](https://insights.sbomify.com/MAL-2025-142346/): Malicious code in exec-jekyll-redis-apollo (npm) (malicious package)
- [MAL-2025-142345](https://insights.sbomify.com/MAL-2025-142345/): Malicious code in exec-jabbah-dotenv-parse-variables-neptune (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1461/