# Vulnerabilities published in 2025


- [MAL-2025-142164](https://insights.sbomify.com/MAL-2025-142164/): Malicious code in eris-carpo-changelog-winston (npm) (malicious package)
- [MAL-2025-142163](https://insights.sbomify.com/MAL-2025-142163/): Malicious code in eris-blaze-pegasus-electron (npm) (malicious package)
- [MAL-2025-142162](https://insights.sbomify.com/MAL-2025-142162/): Malicious code in eris-barnard-passport-webdriver-manager (npm) (malicious package)
- [MAL-2025-142161](https://insights.sbomify.com/MAL-2025-142161/): Malicious code in eris-auth-fusion-nodemon (npm) (malicious package)
- [MAL-2025-142160](https://insights.sbomify.com/MAL-2025-142160/): Malicious code in eridanus-xenos-publish-json (npm) (malicious package)
- [MAL-2025-14216](https://insights.sbomify.com/MAL-2025-14216/): Malicious code in aisohio (npm) (malicious package)
- [MAL-2025-142159](https://insights.sbomify.com/MAL-2025-142159/): Malicious code in eridanus-wezen-module-unuk (npm) (malicious package)
- [MAL-2025-142158](https://insights.sbomify.com/MAL-2025-142158/): Malicious code in eridanus-virgo-quark-vuepress (npm) (malicious package)
- [MAL-2025-142157](https://insights.sbomify.com/MAL-2025-142157/): Malicious code in eridanus-typeorm-pino-pretty-hapi (npm) (malicious package)
- [MAL-2025-142156](https://insights.sbomify.com/MAL-2025-142156/): Malicious code in eridanus-superagent-enif-nestjs (npm) (malicious package)
- [MAL-2025-142155](https://insights.sbomify.com/MAL-2025-142155/): Malicious code in eridanus-shelljs-oberon-epimetheus (npm) (malicious package)
- [MAL-2025-142154](https://insights.sbomify.com/MAL-2025-142154/): Malicious code in eridanus-registry-nightmare-miranda (npm) (malicious package)
- [MAL-2025-142153](https://insights.sbomify.com/MAL-2025-142153/): Malicious code in eridanus-nightwatch-draco-convict (npm) (malicious package)
- [MAL-2025-142152](https://insights.sbomify.com/MAL-2025-142152/): Malicious code in eridanus-miranda-cors-galaxy (npm) (malicious package)
- [MAL-2025-142151](https://insights.sbomify.com/MAL-2025-142151/): Malicious code in eridanus-meissa-non-blocking-aquarius (npm) (malicious package)
- [MAL-2025-142150](https://insights.sbomify.com/MAL-2025-142150/): Malicious code in eridanus-markdown-pdf-regulus-equinox (npm) (malicious package)
- [MAL-2025-14215](https://insights.sbomify.com/MAL-2025-14215/): Malicious code in aiskao (npm) (malicious package)
- [MAL-2025-142149](https://insights.sbomify.com/MAL-2025-142149/): Malicious code in eridanus-jovian-ophiuchus-nextjs (npm) (malicious package)
- [MAL-2025-142148](https://insights.sbomify.com/MAL-2025-142148/): Malicious code in eridanus-io-andromeda-pegasus (npm) (malicious package)
- [MAL-2025-142147](https://insights.sbomify.com/MAL-2025-142147/): Malicious code in eridanus-install-supervisor-deneb (npm) (malicious package)
- [MAL-2025-142146](https://insights.sbomify.com/MAL-2025-142146/): Malicious code in eridanus-hyperion-vuepress-janus (npm) (malicious package)
- [MAL-2025-142145](https://insights.sbomify.com/MAL-2025-142145/): Malicious code in eridanus-ganymede-hugo-io (npm) (malicious package)
- [MAL-2025-142144](https://insights.sbomify.com/MAL-2025-142144/): Malicious code in eridanus-fusion-winston-blaze (npm) (malicious package)
- [MAL-2025-142143](https://insights.sbomify.com/MAL-2025-142143/): Malicious code in eridanus-enif-magellan-electron (npm) (malicious package)
- [MAL-2025-142142](https://insights.sbomify.com/MAL-2025-142142/): Malicious code in eridanus-blaze-selenium-cosmos (npm) (malicious package)
- [MAL-2025-142141](https://insights.sbomify.com/MAL-2025-142141/): Malicious code in eridanus-atlas-jasmine-nashira (npm) (malicious package)
- [MAL-2025-142140](https://insights.sbomify.com/MAL-2025-142140/): Malicious code in eridanus-apollo-webpack-ursa (npm) (malicious package)
- [MAL-2025-14214](https://insights.sbomify.com/MAL-2025-14214/): Malicious code in airxmail (npm) (malicious package)
- [MAL-2025-142139](https://insights.sbomify.com/MAL-2025-142139/): Malicious code in equinox-xerxes-convict-ignite (npm) (malicious package)
- [MAL-2025-142138](https://insights.sbomify.com/MAL-2025-142138/): Malicious code in equinox-wezen-mocha-cors (npm) (malicious package)
- [MAL-2025-142137](https://insights.sbomify.com/MAL-2025-142137/): Malicious code in equinox-terser-webpack-plugin-dione-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-142136](https://insights.sbomify.com/MAL-2025-142136/): Malicious code in equinox-spectron-less-loader-meteor (npm) (malicious package)
- [MAL-2025-142135](https://insights.sbomify.com/MAL-2025-142135/): Malicious code in equinox-selenium-sagitta-umbra (npm) (malicious package)
- [MAL-2025-142134](https://insights.sbomify.com/MAL-2025-142134/): Malicious code in equinox-sedna-lacerta-upgrade (npm) (malicious package)
- [MAL-2025-142133](https://insights.sbomify.com/MAL-2025-142133/): Malicious code in equinox-sagitta-changelog-start (npm) (malicious package)
- [MAL-2025-142132](https://insights.sbomify.com/MAL-2025-142132/): Malicious code in equinox-restart-webdriverio-got (npm) (malicious package)
- [MAL-2025-142131](https://insights.sbomify.com/MAL-2025-142131/): Malicious code in equinox-playwright-xenos-solis (npm) (malicious package)
- [MAL-2025-142130](https://insights.sbomify.com/MAL-2025-142130/): Malicious code in equinox-parcel-blaze-docusaurus (npm) (malicious package)
- [MAL-2025-14213](https://insights.sbomify.com/MAL-2025-14213/): Malicious code in airwave (npm) (malicious package)
- [MAL-2025-142129](https://insights.sbomify.com/MAL-2025-142129/): Malicious code in equinox-ophiuchus-winston-webdriverio (npm) (malicious package)
- [MAL-2025-142128](https://insights.sbomify.com/MAL-2025-142128/): Malicious code in equinox-nodejs-csrf-dagda (npm) (malicious package)
- [MAL-2025-142127](https://insights.sbomify.com/MAL-2025-142127/): Malicious code in equinox-miranda-achernar-xo (npm) (malicious package)
- [MAL-2025-142126](https://insights.sbomify.com/MAL-2025-142126/): Malicious code in equinox-meissa-europa-magellan (npm) (malicious package)
- [MAL-2025-142125](https://insights.sbomify.com/MAL-2025-142125/): Malicious code in equinox-kronos-kinetic-dactyl (npm) (malicious package)
- [MAL-2025-142124](https://insights.sbomify.com/MAL-2025-142124/): Malicious code in equinox-iota-scorpius-non-blocking (npm) (malicious package)
- [MAL-2025-142123](https://insights.sbomify.com/MAL-2025-142123/): Malicious code in equinox-hermes-farout-auriga (npm) (malicious package)
- [MAL-2025-142122](https://insights.sbomify.com/MAL-2025-142122/): Malicious code in equinox-hapi-perseus-nodemon (npm) (malicious package)
- [MAL-2025-142121](https://insights.sbomify.com/MAL-2025-142121/): Malicious code in equinox-geckodriver-helmet-dependencies (npm) (malicious package)
- [MAL-2025-142120](https://insights.sbomify.com/MAL-2025-142120/): Malicious code in equinox-electron-mutation-dotenv (npm) (malicious package)
- [MAL-2025-14212](https://insights.sbomify.com/MAL-2025-14212/): Malicious code in airwallex-online-payments-gateway (npm) (malicious package)
- [MAL-2025-142119](https://insights.sbomify.com/MAL-2025-142119/): Malicious code in equinox-eclipse-stream-mira (npm) (malicious package)
- [MAL-2025-142118](https://insights.sbomify.com/MAL-2025-142118/): Malicious code in equinox-child-process-deneb-changelog (npm) (malicious package)
- [MAL-2025-142117](https://insights.sbomify.com/MAL-2025-142117/): Malicious code in equinox-centauri-lacerta-callisto (npm) (malicious package)
- [MAL-2025-142116](https://insights.sbomify.com/MAL-2025-142116/): Malicious code in equinox-aether-enceladus-node-config (npm) (malicious package)
- [MAL-2025-142115](https://insights.sbomify.com/MAL-2025-142115/): Malicious code in equinox-acamar-ora-ultra (npm) (malicious package)
- [MAL-2025-142114](https://insights.sbomify.com/MAL-2025-142114/): Malicious code in epimetheus-zephyr-cygnus-cypress (npm) (malicious package)
- [MAL-2025-142113](https://insights.sbomify.com/MAL-2025-142113/): Malicious code in epimetheus-yakutsk-cors-cassini (npm) (malicious package)
- [MAL-2025-142112](https://insights.sbomify.com/MAL-2025-142112/): Malicious code in epimetheus-uglify-js-figures-rest (npm) (malicious package)
- [MAL-2025-142111](https://insights.sbomify.com/MAL-2025-142111/): Malicious code in epimetheus-triton-lacerta-altair (npm) (malicious package)
- [MAL-2025-142110](https://insights.sbomify.com/MAL-2025-142110/): Malicious code in epimetheus-superagent-flare-fornax (npm) (malicious package)
- [MAL-2025-14211](https://insights.sbomify.com/MAL-2025-14211/): Malicious code in airship.com (npm) (malicious package)
- [MAL-2025-142109](https://insights.sbomify.com/MAL-2025-142109/): Malicious code in epimetheus-superagent-altair-foundation (npm) (malicious package)
- [MAL-2025-142108](https://insights.sbomify.com/MAL-2025-142108/): Malicious code in epimetheus-solis-perseus-mutation (npm) (malicious package)
- [MAL-2025-142107](https://insights.sbomify.com/MAL-2025-142107/): Malicious code in epimetheus-rigel-rollup-schema (npm) (malicious package)
- [MAL-2025-142106](https://insights.sbomify.com/MAL-2025-142106/): Malicious code in epimetheus-repository-package-nestjs (npm) (malicious package)
- [MAL-2025-142105](https://insights.sbomify.com/MAL-2025-142105/): Malicious code in epimetheus-regulus-sass-loader-uglify-js (npm) (malicious package)
- [MAL-2025-142104](https://insights.sbomify.com/MAL-2025-142104/): Malicious code in epimetheus-public-version-ganymede (npm) (malicious package)
- [MAL-2025-142103](https://insights.sbomify.com/MAL-2025-142103/): Malicious code in epimetheus-pipe-janus-cli (npm) (malicious package)
- [MAL-2025-142102](https://insights.sbomify.com/MAL-2025-142102/): Malicious code in epimetheus-perseus-jabbah-vuepress (npm) (malicious package)
- [MAL-2025-142101](https://insights.sbomify.com/MAL-2025-142101/): Malicious code in epimetheus-nashira-node-config-forever (npm) (malicious package)
- [MAL-2025-142100](https://insights.sbomify.com/MAL-2025-142100/): Malicious code in epimetheus-mutation-google-neptune (npm) (malicious package)
- [MAL-2025-14210](https://insights.sbomify.com/MAL-2025-14210/): Malicious code in airscope (npm) (malicious package)
- [MAL-2025-1421](https://insights.sbomify.com/MAL-2025-1421/): Malicious code in kcex-internal (npm) (malicious package)
- [MAL-2025-142099](https://insights.sbomify.com/MAL-2025-142099/): Malicious code in epimetheus-mui-eridanus-heka (npm) (malicious package)
- [MAL-2025-142098](https://insights.sbomify.com/MAL-2025-142098/): Malicious code in epimetheus-mini-css-extract-plugin-barnard-apollo (npm) (malicious package)
- [MAL-2025-142097](https://insights.sbomify.com/MAL-2025-142097/): Malicious code in epimetheus-library-framework-mutation (npm) (malicious package)
- [MAL-2025-142096](https://insights.sbomify.com/MAL-2025-142096/): Malicious code in epimetheus-kinetic-spectron-webdriver-spectron (npm) (malicious package)
- [MAL-2025-142095](https://insights.sbomify.com/MAL-2025-142095/): Malicious code in epimetheus-ganymede-native-superagent (npm) (malicious package)
- [MAL-2025-142094](https://insights.sbomify.com/MAL-2025-142094/): Malicious code in epimetheus-fomalhaut-got-duplex (npm) (malicious package)
- [MAL-2025-142093](https://insights.sbomify.com/MAL-2025-142093/): Malicious code in epimetheus-enceladus-commitlint-antares (npm) (malicious package)
- [MAL-2025-142092](https://insights.sbomify.com/MAL-2025-142092/): Malicious code in epimetheus-cors-rate-limiter-fork (npm) (malicious package)
- [MAL-2025-142091](https://insights.sbomify.com/MAL-2025-142091/): Malicious code in epimetheus-betelgeuse-toml-node-config (npm) (malicious package)
- [MAL-2025-142090](https://insights.sbomify.com/MAL-2025-142090/): Malicious code in epimetheus-apollo-commitlint-config-angular-relay (npm) (malicious package)
- [MAL-2025-14209](https://insights.sbomify.com/MAL-2025-14209/): Malicious code in airplane-xylophone-vyq0 (npm) (malicious package)
- [MAL-2025-142089](https://insights.sbomify.com/MAL-2025-142089/): Malicious code in envconfig-writable-spectron-webdriver-sirius (npm) (malicious package)
- [MAL-2025-142088](https://insights.sbomify.com/MAL-2025-142088/): Malicious code in envconfig-wasat-bootstrap-rocket (npm) (malicious package)
- [MAL-2025-142087](https://insights.sbomify.com/MAL-2025-142087/): Malicious code in envconfig-triton-perseus-tailwindcss (npm) (malicious package)
- [MAL-2025-142086](https://insights.sbomify.com/MAL-2025-142086/): Malicious code in envconfig-sagitta-procyon-process (npm) (malicious package)
- [MAL-2025-142085](https://insights.sbomify.com/MAL-2025-142085/): Malicious code in envconfig-relay-request-weywot (npm) (malicious package)
- [MAL-2025-142084](https://insights.sbomify.com/MAL-2025-142084/): Malicious code in envconfig-pulsar-ganymede-norma (npm) (malicious package)
- [MAL-2025-142083](https://insights.sbomify.com/MAL-2025-142083/): Malicious code in envconfig-package-socketio-gacrux (npm) (malicious package)
- [MAL-2025-142082](https://insights.sbomify.com/MAL-2025-142082/): Malicious code in envconfig-oberon-pegasus-writable (npm) (malicious package)
- [MAL-2025-142081](https://insights.sbomify.com/MAL-2025-142081/): Malicious code in envconfig-neptune-supervisor-lint (npm) (malicious package)
- [MAL-2025-142080](https://insights.sbomify.com/MAL-2025-142080/): Malicious code in envconfig-nconf-magellan-gemini (npm) (malicious package)
- [MAL-2025-14208](https://insights.sbomify.com/MAL-2025-14208/): Malicious code in airplane-xerophyte-v1m9 (npm) (malicious package)
- [MAL-2025-142079](https://insights.sbomify.com/MAL-2025-142079/): Malicious code in envconfig-mira-carpo-procyon (npm) (malicious package)
- [MAL-2025-142078](https://insights.sbomify.com/MAL-2025-142078/): Malicious code in envconfig-magellan-magellan-eslint (npm) (malicious package)
- [MAL-2025-142077](https://insights.sbomify.com/MAL-2025-142077/): Malicious code in envconfig-loglevel-odin-sequelize (npm) (malicious package)
- [MAL-2025-142076](https://insights.sbomify.com/MAL-2025-142076/): Malicious code in envconfig-leda-websockets-unuk (npm) (malicious package)
- [MAL-2025-142075](https://insights.sbomify.com/MAL-2025-142075/): Malicious code in envconfig-ini-zephyr-iota (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1464/