# Vulnerabilities published in 2025 - [MAL-2025-142254](https://insights.sbomify.com/MAL-2025-142254/): Malicious code in eslint-uglify-js-prettier-stylelint-apex (npm) (malicious package) - [MAL-2025-142253](https://insights.sbomify.com/MAL-2025-142253/): Malicious code in eslint-transform-terser-oberon (npm) (malicious package) - [MAL-2025-142252](https://insights.sbomify.com/MAL-2025-142252/): Malicious code in eslint-testcafe-readable-readable (npm) (malicious package) - [MAL-2025-142251](https://insights.sbomify.com/MAL-2025-142251/): Malicious code in eslint-terser-webpack-plugin-nightwatch-csrf (npm) (malicious package) - [MAL-2025-142250](https://insights.sbomify.com/MAL-2025-142250/): Malicious code in eslint-supervisor-rollup-plugin-hapi (npm) (malicious package) - [MAL-2025-14225](https://insights.sbomify.com/MAL-2025-14225/): Malicious code in akeljtyxpnvckhdr (npm) (malicious package) - [MAL-2025-142249](https://insights.sbomify.com/MAL-2025-142249/): Malicious code in eslint-spinner-websockets-frontend (npm) (malicious package) - [MAL-2025-142248](https://insights.sbomify.com/MAL-2025-142248/): Malicious code in eslint-soap-csv-commitizen (npm) (malicious package) - [MAL-2025-142247](https://insights.sbomify.com/MAL-2025-142247/): Malicious code in eslint-plugin-zephyr-xenos-betelgeuse (npm) (malicious package) - [MAL-2025-142246](https://insights.sbomify.com/MAL-2025-142246/): Malicious code in eslint-plugin-transform-semantic-ui-yakutsk (npm) (malicious package) - [MAL-2025-142245](https://insights.sbomify.com/MAL-2025-142245/): Malicious code in eslint-plugin-tool-rest-firebase (npm) (malicious package) - [MAL-2025-142244](https://insights.sbomify.com/MAL-2025-142244/): Malicious code in eslint-plugin-thuban-firebase-centauri (npm) (malicious package) - [MAL-2025-142243](https://insights.sbomify.com/MAL-2025-142243/): Malicious code in eslint-plugin-tailwindcss-cosmiconfig-alphard (npm) (malicious package) - [MAL-2025-142242](https://insights.sbomify.com/MAL-2025-142242/): Malicious code in eslint-plugin-spectron-csv-aether (npm) (malicious package) - [MAL-2025-142241](https://insights.sbomify.com/MAL-2025-142241/): Malicious code in eslint-plugin-sadr-commitizen-testcafe (npm) (malicious package) - [MAL-2025-142240](https://insights.sbomify.com/MAL-2025-142240/): Malicious code in eslint-plugin-request-indus-magellan (npm) (malicious package) - [MAL-2025-14224](https://insights.sbomify.com/MAL-2025-14224/): Malicious code in akbgfuywmeqxsjip (npm) (malicious package) - [MAL-2025-142239](https://insights.sbomify.com/MAL-2025-142239/): Malicious code in eslint-plugin-quito-wezen-npm (npm) (malicious package) - [MAL-2025-142238](https://insights.sbomify.com/MAL-2025-142238/): Malicious code in eslint-plugin-public-forever-pegasus (npm) (malicious package) - [MAL-2025-142237](https://insights.sbomify.com/MAL-2025-142237/): Malicious code in eslint-plugin-process-sails-update (npm) (malicious package) - [MAL-2025-142236](https://insights.sbomify.com/MAL-2025-142236/): Malicious code in eslint-plugin-phoebe-chariklo-pegasus (npm) (malicious package) - [MAL-2025-142235](https://insights.sbomify.com/MAL-2025-142235/): Malicious code in eslint-plugin-perseus-css-loader-eclipse (npm) (malicious package) - [MAL-2025-142234](https://insights.sbomify.com/MAL-2025-142234/): Malicious code in eslint-plugin-nightwatch-javascript-restart (npm) (malicious package) - [MAL-2025-142233](https://insights.sbomify.com/MAL-2025-142233/): Malicious code in eslint-plugin-ignite-carina-hydra (npm) (malicious package) - [MAL-2025-142232](https://insights.sbomify.com/MAL-2025-142232/): Malicious code in eslint-plugin-galaxy-xml-canopus (npm) (malicious package) - [MAL-2025-142231](https://insights.sbomify.com/MAL-2025-142231/): Malicious code in eslint-plugin-element-ui-hyperion-dagda (npm) (malicious package) - [MAL-2025-142230](https://insights.sbomify.com/MAL-2025-142230/): Malicious code in eslint-plugin-dynamo-axios-lint (npm) (malicious package) - [MAL-2025-14223](https://insights.sbomify.com/MAL-2025-14223/): Malicious code in akaudit (npm) (malicious package) - [MAL-2025-142229](https://insights.sbomify.com/MAL-2025-142229/): Malicious code in eslint-plugin-despina-xanthus-ultra (npm) (malicious package) - [MAL-2025-142228](https://insights.sbomify.com/MAL-2025-142228/): Malicious code in eslint-plugin-chai-lacerta-quasar (npm) (malicious package) - [MAL-2025-142227](https://insights.sbomify.com/MAL-2025-142227/): Malicious code in eslint-plugin-carina-telesto-got (npm) (malicious package) - [MAL-2025-142226](https://insights.sbomify.com/MAL-2025-142226/): Malicious code in eslint-plugin-capella-pm2-antares (npm) (malicious package) - [MAL-2025-142225](https://insights.sbomify.com/MAL-2025-142225/): Malicious code in eslint-plugin-apollo-supervisor-aquarius (npm) (malicious package) - [MAL-2025-142224](https://insights.sbomify.com/MAL-2025-142224/): Malicious code in eslint-pipe-rigel-websockets (npm) (malicious package) - [MAL-2025-142223](https://insights.sbomify.com/MAL-2025-142223/): Malicious code in eslint-markdown-pdf-gulp-eleventy (npm) (malicious package) - [MAL-2025-142222](https://insights.sbomify.com/MAL-2025-142222/): Malicious code in eslint-hugo-indus-process (npm) (malicious package) - [MAL-2025-142221](https://insights.sbomify.com/MAL-2025-142221/): Malicious code in eslint-html-webpack-plugin-eslint-plugin-auth0 (npm) (malicious package) - [MAL-2025-142220](https://insights.sbomify.com/MAL-2025-142220/): Malicious code in eslint-gemini-unuk-nightwatch (npm) (malicious package) - [MAL-2025-14222](https://insights.sbomify.com/MAL-2025-14222/): Malicious code in akarichan (npm) (malicious package) - [MAL-2025-142219](https://insights.sbomify.com/MAL-2025-142219/): Malicious code in eslint-gatsby-init-express (npm) (malicious package) - [MAL-2025-142218](https://insights.sbomify.com/MAL-2025-142218/): Malicious code in eslint-fomalhaut-lint-staged-meteor (npm) (malicious package) - [MAL-2025-142217](https://insights.sbomify.com/MAL-2025-142217/): Malicious code in eslint-enif-webpack-event (npm) (malicious package) - [MAL-2025-142216](https://insights.sbomify.com/MAL-2025-142216/): Malicious code in eslint-element-ui-buffer-figures (npm) (malicious package) - [MAL-2025-142215](https://insights.sbomify.com/MAL-2025-142215/): Malicious code in eslint-csv-galaxy-protractor (npm) (malicious package) - [MAL-2025-142214](https://insights.sbomify.com/MAL-2025-142214/): Malicious code in eslint-configstore-transform-zenith (npm) (malicious package) - [MAL-2025-142213](https://insights.sbomify.com/MAL-2025-142213/): Malicious code in eslint-config-wezen-orbit-toml (npm) (malicious package) - [MAL-2025-142212](https://insights.sbomify.com/MAL-2025-142212/): Malicious code in eslint-config-thuban-repository-hexo (npm) (malicious package) - [MAL-2025-142211](https://insights.sbomify.com/MAL-2025-142211/): Malicious code in eslint-config-supervisor-figures-sails (npm) (malicious package) - [MAL-2025-142210](https://insights.sbomify.com/MAL-2025-142210/): Malicious code in eslint-config-socketio-development-event (npm) (malicious package) - [MAL-2025-14221](https://insights.sbomify.com/MAL-2025-14221/): Malicious code in ajaxnotes (npm) (malicious package) - [MAL-2025-142209](https://insights.sbomify.com/MAL-2025-142209/): Malicious code in eslint-config-quito-spectron-webdriver-dotenv-parse-variables (npm) (malicious package) - [MAL-2025-142208](https://insights.sbomify.com/MAL-2025-142208/): Malicious code in eslint-config-query-cosmiconfig-kastra (npm) (malicious package) - [MAL-2025-142207](https://insights.sbomify.com/MAL-2025-142207/): Malicious code in eslint-config-promise-jest-winston (npm) (malicious package) - [MAL-2025-142206](https://insights.sbomify.com/MAL-2025-142206/): Malicious code in eslint-config-prettier-plugin-markdown-zephyr-airbnb (npm) (malicious package) - [MAL-2025-142205](https://insights.sbomify.com/MAL-2025-142205/): Malicious code in eslint-config-postcss-loader-ignite-webdriver-mocha (npm) (malicious package) - [MAL-2025-142204](https://insights.sbomify.com/MAL-2025-142204/): Malicious code in eslint-config-pegasus-nebula-hydra (npm) (malicious package) - [MAL-2025-142203](https://insights.sbomify.com/MAL-2025-142203/): Malicious code in eslint-config-morgan-javascript-umbra (npm) (malicious package) - [MAL-2025-142202](https://insights.sbomify.com/MAL-2025-142202/): Malicious code in eslint-config-materialize-adonis-webdriverio (npm) (malicious package) - [MAL-2025-142201](https://insights.sbomify.com/MAL-2025-142201/): Malicious code in eslint-config-inquirer-commitlint-config-angular-sirius (npm) (malicious package) - [MAL-2025-142200](https://insights.sbomify.com/MAL-2025-142200/): Malicious code in eslint-config-got-loop-airbnb (npm) (malicious package) - [MAL-2025-14220](https://insights.sbomify.com/MAL-2025-14220/): Malicious code in ajakumar (npm) (malicious package) - [MAL-2025-1422](https://insights.sbomify.com/MAL-2025-1422/): Malicious code in kcex-main (npm) (malicious package) - [MAL-2025-142199](https://insights.sbomify.com/MAL-2025-142199/): Malicious code in eslint-config-galaxy-postcss-loader-meissa (npm) (malicious package) - [MAL-2025-142198](https://insights.sbomify.com/MAL-2025-142198/): Malicious code in eslint-config-event-convict-zenith (npm) (malicious package) - [MAL-2025-142197](https://insights.sbomify.com/MAL-2025-142197/): Malicious code in eslint-config-europa-yaml-triton (npm) (malicious package) - [MAL-2025-142196](https://insights.sbomify.com/MAL-2025-142196/): Malicious code in eslint-config-cygnus-mocha-optimize-css-assets-webpack-plugin (npm) (malicious package) - [MAL-2025-142195](https://insights.sbomify.com/MAL-2025-142195/): Malicious code in eslint-config-cygnus-iota-link (npm) (malicious package) - [MAL-2025-142194](https://insights.sbomify.com/MAL-2025-142194/): Malicious code in eslint-config-carpo-wezen-foundation (npm) (malicious package) - [MAL-2025-142193](https://insights.sbomify.com/MAL-2025-142193/): Malicious code in eslint-config-bootstrap-cosmos-eclipse (npm) (malicious package) - [MAL-2025-142192](https://insights.sbomify.com/MAL-2025-142192/): Malicious code in eslint-config-betelgeuse-leda-eslint (npm) (malicious package) - [MAL-2025-142191](https://insights.sbomify.com/MAL-2025-142191/): Malicious code in eslint-config-bellatrix-protractor-procyon (npm) (malicious package) - [MAL-2025-142190](https://insights.sbomify.com/MAL-2025-142190/): Malicious code in eslint-config-apollo-uglify-js-metalsmith (npm) (malicious package) - [MAL-2025-14219](https://insights.sbomify.com/MAL-2025-14219/): Malicious code in aixdlkqsmfbwyzhn (npm) (malicious package) - [MAL-2025-142189](https://insights.sbomify.com/MAL-2025-142189/): Malicious code in eslint-cluster-cypress-sedna (npm) (malicious package) - [MAL-2025-142188](https://insights.sbomify.com/MAL-2025-142188/): Malicious code in eslint-carina-forever-hermes (npm) (malicious package) - [MAL-2025-142187](https://insights.sbomify.com/MAL-2025-142187/): Malicious code in eslint-antd-babel-playwright (npm) (malicious package) - [MAL-2025-142186](https://insights.sbomify.com/MAL-2025-142186/): Malicious code in eris-yildun-readable-frontend (npm) (malicious package) - [MAL-2025-142185](https://insights.sbomify.com/MAL-2025-142185/): Malicious code in eris-vuepress-aurora-local (npm) (malicious package) - [MAL-2025-142184](https://insights.sbomify.com/MAL-2025-142184/): Malicious code in eris-spawn-lynx-testcafe (npm) (malicious package) - [MAL-2025-142183](https://insights.sbomify.com/MAL-2025-142183/): Malicious code in eris-slides-less-wasat (npm) (malicious package) - [MAL-2025-142182](https://insights.sbomify.com/MAL-2025-142182/): Malicious code in eris-pyxis-draco-bulma (npm) (malicious package) - [MAL-2025-142181](https://insights.sbomify.com/MAL-2025-142181/): Malicious code in eris-public-metalsmith-ganymede (npm) (malicious package) - [MAL-2025-142180](https://insights.sbomify.com/MAL-2025-142180/): Malicious code in eris-prompts-aurora-jupiter (npm) (malicious package) - [MAL-2025-14218](https://insights.sbomify.com/MAL-2025-14218/): Malicious code in aiwbgukjcplesthm (npm) (malicious package) - [MAL-2025-142179](https://insights.sbomify.com/MAL-2025-142179/): Malicious code in eris-postcss-meissa-orbit (npm) (malicious package) - [MAL-2025-142178](https://insights.sbomify.com/MAL-2025-142178/): Malicious code in eris-nightwatch-axios-dotenv-safe (npm) (malicious package) - [MAL-2025-142177](https://insights.sbomify.com/MAL-2025-142177/): Malicious code in eris-miranda-csv-halley (npm) (malicious package) - [MAL-2025-142176](https://insights.sbomify.com/MAL-2025-142176/): Malicious code in eris-meteor-dependencies-halley (npm) (malicious package) - [MAL-2025-142175](https://insights.sbomify.com/MAL-2025-142175/): Malicious code in eris-hermes-nextjs-spinner (npm) (malicious package) - [MAL-2025-142174](https://insights.sbomify.com/MAL-2025-142174/): Malicious code in eris-forever-nestjs-aquarius (npm) (malicious package) - [MAL-2025-142173](https://insights.sbomify.com/MAL-2025-142173/): Malicious code in eris-firebase-uglify-js-csrf (npm) (malicious package) - [MAL-2025-142172](https://insights.sbomify.com/MAL-2025-142172/): Malicious code in eris-eslint-plugin-zenobia-lint-staged (npm) (malicious package) - [MAL-2025-142171](https://insights.sbomify.com/MAL-2025-142171/): Malicious code in eris-eslint-plugin-slidev-resolvers (npm) (malicious package) - [MAL-2025-142170](https://insights.sbomify.com/MAL-2025-142170/): Malicious code in eris-elara-acamar-cz-conventional-changelog (npm) (malicious package) - [MAL-2025-14217](https://insights.sbomify.com/MAL-2025-14217/): Malicious code in aitnkcwpuysdfmjz (npm) (malicious package) - [MAL-2025-142169](https://insights.sbomify.com/MAL-2025-142169/): Malicious code in eris-duplex-firebase-eslint-config (npm) (malicious package) - [MAL-2025-142168](https://insights.sbomify.com/MAL-2025-142168/): Malicious code in eris-dotenv-safe-express-jest (npm) (malicious package) - [MAL-2025-142167](https://insights.sbomify.com/MAL-2025-142167/): Malicious code in eris-command-rate-limiter-xanthus (npm) (malicious package) - [MAL-2025-142166](https://insights.sbomify.com/MAL-2025-142166/): Malicious code in eris-chalk-kaus-winston (npm) (malicious package) - [MAL-2025-142165](https://insights.sbomify.com/MAL-2025-142165/): Malicious code in eris-chakra-ui-sass-loader-fornax (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1463/