# Vulnerabilities published in 2025 - [MAL-2025-142074](https://insights.sbomify.com/MAL-2025-142074/): Malicious code in envconfig-halley-despina-barnard (npm) (malicious package) - [MAL-2025-142073](https://insights.sbomify.com/MAL-2025-142073/): Malicious code in envconfig-eleventy-node-config-hyperion (npm) (malicious package) - [MAL-2025-142072](https://insights.sbomify.com/MAL-2025-142072/): Malicious code in envconfig-csv-build-chai (npm) (malicious package) - [MAL-2025-142071](https://insights.sbomify.com/MAL-2025-142071/): Malicious code in envconfig-cosmos-zenith-upgrade (npm) (malicious package) - [MAL-2025-142070](https://insights.sbomify.com/MAL-2025-142070/): Malicious code in envconfig-bootstrap-uglify-js-colors (npm) (malicious package) - [MAL-2025-14207](https://insights.sbomify.com/MAL-2025-14207/): Malicious code in airplane-vinegar-vp9d (npm) (malicious package) - [MAL-2025-142069](https://insights.sbomify.com/MAL-2025-142069/): Malicious code in envconfig-auth-redis-quasar (npm) (malicious package) - [MAL-2025-142068](https://insights.sbomify.com/MAL-2025-142068/): Malicious code in enif-xml-ganymede-draco (npm) (malicious package) - [MAL-2025-142067](https://insights.sbomify.com/MAL-2025-142067/): Malicious code in enif-xanthus-spinner-run-script (npm) (malicious package) - [MAL-2025-142066](https://insights.sbomify.com/MAL-2025-142066/): Malicious code in enif-vulcan-dactyl-taurus (npm) (malicious package) - [MAL-2025-142065](https://insights.sbomify.com/MAL-2025-142065/): Malicious code in enif-ursa-chakra-ui-axios (npm) (malicious package) - [MAL-2025-142064](https://insights.sbomify.com/MAL-2025-142064/): Malicious code in enif-spectron-webdriver-quasar-lacerta (npm) (malicious package) - [MAL-2025-142063](https://insights.sbomify.com/MAL-2025-142063/): Malicious code in enif-sequelize-callisto-buffer (npm) (malicious package) - [MAL-2025-142062](https://insights.sbomify.com/MAL-2025-142062/): Malicious code in enif-sails-less-meissa (npm) (malicious package) - [MAL-2025-142061](https://insights.sbomify.com/MAL-2025-142061/): Malicious code in enif-rocket-despina-phoebe (npm) (malicious package) - [MAL-2025-142060](https://insights.sbomify.com/MAL-2025-142060/): Malicious code in enif-react-bootstrap-gravity-apollo (npm) (malicious package) - [MAL-2025-14206](https://insights.sbomify.com/MAL-2025-14206/): Malicious code in airplane-vinegar-mpxb (npm) (malicious package) - [MAL-2025-142059](https://insights.sbomify.com/MAL-2025-142059/): Malicious code in enif-quito-spectron-webdriver-hapi (npm) (malicious package) - [MAL-2025-142058](https://insights.sbomify.com/MAL-2025-142058/): Malicious code in enif-public-halley-arcturus (npm) (malicious package) - [MAL-2025-142057](https://insights.sbomify.com/MAL-2025-142057/): Malicious code in enif-process-solis-got (npm) (malicious package) - [MAL-2025-142056](https://insights.sbomify.com/MAL-2025-142056/): Malicious code in enif-postcss-winston-weywot (npm) (malicious package) - [MAL-2025-142055](https://insights.sbomify.com/MAL-2025-142055/): Malicious code in enif-postcss-nestjs-auth (npm) (malicious package) - [MAL-2025-142054](https://insights.sbomify.com/MAL-2025-142054/): Malicious code in enif-middleware-bellatrix-axios (npm) (malicious package) - [MAL-2025-142053](https://insights.sbomify.com/MAL-2025-142053/): Malicious code in enif-meteor-protractor-cross-env (npm) (malicious package) - [MAL-2025-142052](https://insights.sbomify.com/MAL-2025-142052/): Malicious code in enif-less-procyon-cache (npm) (malicious package) - [MAL-2025-142051](https://insights.sbomify.com/MAL-2025-142051/): Malicious code in enif-jest-loglevel-europa (npm) (malicious package) - [MAL-2025-142050](https://insights.sbomify.com/MAL-2025-142050/): Malicious code in enif-gatsby-fetch-lacerta (npm) (malicious package) - [MAL-2025-14205](https://insights.sbomify.com/MAL-2025-14205/): Malicious code in airplane-titan-lgjl (npm) (malicious package) - [MAL-2025-142049](https://insights.sbomify.com/MAL-2025-142049/): Malicious code in enif-fusion-chariklo-chai (npm) (malicious package) - [MAL-2025-142048](https://insights.sbomify.com/MAL-2025-142048/): Malicious code in enif-forever-materialize-resolvers (npm) (malicious package) - [MAL-2025-142047](https://insights.sbomify.com/MAL-2025-142047/): Malicious code in enif-forever-auth0-atlas (npm) (malicious package) - [MAL-2025-142046](https://insights.sbomify.com/MAL-2025-142046/): Malicious code in enif-elektra-uninstall-grunt (npm) (malicious package) - [MAL-2025-142045](https://insights.sbomify.com/MAL-2025-142045/): Malicious code in enif-cosmos-soap-zephyr (npm) (malicious package) - [MAL-2025-142044](https://insights.sbomify.com/MAL-2025-142044/): Malicious code in enif-axios-non-blocking-zenobia (npm) (malicious package) - [MAL-2025-142043](https://insights.sbomify.com/MAL-2025-142043/): Malicious code in enceladus-yaml-thuban-achernar (npm) (malicious package) - [MAL-2025-142042](https://insights.sbomify.com/MAL-2025-142042/): Malicious code in enceladus-websockets-iota-betelgeuse (npm) (malicious package) - [MAL-2025-142041](https://insights.sbomify.com/MAL-2025-142041/): Malicious code in enceladus-vuetify-foundation-jupiter (npm) (malicious package) - [MAL-2025-142040](https://insights.sbomify.com/MAL-2025-142040/): Malicious code in enceladus-ursa-bootes-rate-limiter (npm) (malicious package) - [MAL-2025-14204](https://insights.sbomify.com/MAL-2025-14204/): Malicious code in airplane-shack-bmni (npm) (malicious package) - [MAL-2025-142039](https://insights.sbomify.com/MAL-2025-142039/): Malicious code in enceladus-ultra-promise-helios (npm) (malicious package) - [MAL-2025-142038](https://insights.sbomify.com/MAL-2025-142038/): Malicious code in enceladus-toml-dotenv-safe-aether (npm) (malicious package) - [MAL-2025-142037](https://insights.sbomify.com/MAL-2025-142037/): Malicious code in enceladus-stream-chai-loglevel (npm) (malicious package) - [MAL-2025-142036](https://insights.sbomify.com/MAL-2025-142036/): Malicious code in enceladus-rocket-centaurus-sagitta (npm) (malicious package) - [MAL-2025-142035](https://insights.sbomify.com/MAL-2025-142035/): Malicious code in enceladus-registry-middleware-nova (npm) (malicious package) - [MAL-2025-142034](https://insights.sbomify.com/MAL-2025-142034/): Malicious code in enceladus-quito-global-style-loader (npm) (malicious package) - [MAL-2025-142033](https://insights.sbomify.com/MAL-2025-142033/): Malicious code in enceladus-process-sqlite-google (npm) (malicious package) - [MAL-2025-142032](https://insights.sbomify.com/MAL-2025-142032/): Malicious code in enceladus-pm2-metalsmith-apollo (npm) (malicious package) - [MAL-2025-142031](https://insights.sbomify.com/MAL-2025-142031/): Malicious code in enceladus-nebula-fornax-betelgeuse (npm) (malicious package) - [MAL-2025-142030](https://insights.sbomify.com/MAL-2025-142030/): Malicious code in enceladus-less-sequelize-start (npm) (malicious package) - [MAL-2025-14203](https://insights.sbomify.com/MAL-2025-14203/): Malicious code in airplane-redshift-ft5i (npm) (malicious package) - [MAL-2025-142029](https://insights.sbomify.com/MAL-2025-142029/): Malicious code in enceladus-grunt-jabbah-elektra (npm) (malicious package) - [MAL-2025-142028](https://insights.sbomify.com/MAL-2025-142028/): Malicious code in enceladus-gemini-xml-sails (npm) (malicious package) - [MAL-2025-142027](https://insights.sbomify.com/MAL-2025-142027/): Malicious code in enceladus-elara-antares-cluster (npm) (malicious package) - [MAL-2025-142026](https://insights.sbomify.com/MAL-2025-142026/): Malicious code in enceladus-delphinus-spawn-farout (npm) (malicious package) - [MAL-2025-142025](https://insights.sbomify.com/MAL-2025-142025/): Malicious code in enceladus-cz-conventional-changelog-slides-eslint-config (npm) (malicious package) - [MAL-2025-142024](https://insights.sbomify.com/MAL-2025-142024/): Malicious code in enceladus-css-loader-nuxtjs-eris (npm) (malicious package) - [MAL-2025-142023](https://insights.sbomify.com/MAL-2025-142023/): Malicious code in enceladus-betelgeuse-nodejs-centauri (npm) (malicious package) - [MAL-2025-142022](https://insights.sbomify.com/MAL-2025-142022/): Malicious code in enceladus-auth0-leda-sadr (npm) (malicious package) - [MAL-2025-142021](https://insights.sbomify.com/MAL-2025-142021/): Malicious code in enceladus-auriga-janus-spinner (npm) (malicious package) - [MAL-2025-142020](https://insights.sbomify.com/MAL-2025-142020/): Malicious code in enceladus-astro-changelog-transform (npm) (malicious package) - [MAL-2025-14202](https://insights.sbomify.com/MAL-2025-14202/): Malicious code in airplane-ocean-a3dr (npm) (malicious package) - [MAL-2025-142019](https://insights.sbomify.com/MAL-2025-142019/): Malicious code in enceladus-antares-gravity-quark (npm) (malicious package) - [MAL-2025-142018](https://insights.sbomify.com/MAL-2025-142018/): Malicious code in enceladus-alphard-tool-dione (npm) (malicious package) - [MAL-2025-142017](https://insights.sbomify.com/MAL-2025-142017/): Malicious code in eleventy-zephyr-radiant-subscription (npm) (malicious package) - [MAL-2025-142016](https://insights.sbomify.com/MAL-2025-142016/): Malicious code in eleventy-zenobia-repository-middleware (npm) (malicious package) - [MAL-2025-142015](https://insights.sbomify.com/MAL-2025-142015/): Malicious code in eleventy-websockets-restart-telesto (npm) (malicious package) - [MAL-2025-142014](https://insights.sbomify.com/MAL-2025-142014/): Malicious code in eleventy-ursa-vuetify-fornax (npm) (malicious package) - [MAL-2025-142013](https://insights.sbomify.com/MAL-2025-142013/): Malicious code in eleventy-spinner-gemini-framework (npm) (malicious package) - [MAL-2025-142012](https://insights.sbomify.com/MAL-2025-142012/): Malicious code in eleventy-sails-inquirer-javascript (npm) (malicious package) - [MAL-2025-142011](https://insights.sbomify.com/MAL-2025-142011/): Malicious code in eleventy-remark-jwt-dagda (npm) (malicious package) - [MAL-2025-142010](https://insights.sbomify.com/MAL-2025-142010/): Malicious code in eleventy-query-xanadu-heka (npm) (malicious package) - [MAL-2025-14201](https://insights.sbomify.com/MAL-2025-14201/): Malicious code in airplane-meteor-ei07 (npm) (malicious package) - [MAL-2025-142009](https://insights.sbomify.com/MAL-2025-142009/): Malicious code in eleventy-nodejs-luna-adonis (npm) (malicious package) - [MAL-2025-142008](https://insights.sbomify.com/MAL-2025-142008/): Malicious code in eleventy-nightwatch-tailwindcss-bellatrix (npm) (malicious package) - [MAL-2025-142007](https://insights.sbomify.com/MAL-2025-142007/): Malicious code in eleventy-nightwatch-betelgeuse-child-process (npm) (malicious package) - [MAL-2025-142006](https://insights.sbomify.com/MAL-2025-142006/): Malicious code in eleventy-mui-public-wasat (npm) (malicious package) - [MAL-2025-142005](https://insights.sbomify.com/MAL-2025-142005/): Malicious code in eleventy-mini-css-extract-plugin-cordelia-middleware (npm) (malicious package) - [MAL-2025-142004](https://insights.sbomify.com/MAL-2025-142004/): Malicious code in eleventy-mdx-cressida-sedna (npm) (malicious package) - [MAL-2025-142003](https://insights.sbomify.com/MAL-2025-142003/): Malicious code in eleventy-link-hermes-sagitta (npm) (malicious package) - [MAL-2025-142002](https://insights.sbomify.com/MAL-2025-142002/): Malicious code in eleventy-lacerta-private-alphard (npm) (malicious package) - [MAL-2025-142001](https://insights.sbomify.com/MAL-2025-142001/): Malicious code in eleventy-kaus-cz-conventional-changelog-websockets (npm) (malicious package) - [MAL-2025-142000](https://insights.sbomify.com/MAL-2025-142000/): Malicious code in eleventy-kastra-cli-sedna (npm) (malicious package) - [MAL-2025-14200](https://insights.sbomify.com/MAL-2025-14200/): Malicious code in airbnb-vortex-release-it-yonder (npm) (malicious package) - [MAL-2025-1420](https://insights.sbomify.com/MAL-2025-1420/): Malicious code in kcex-dev (npm) (malicious package) - [MAL-2025-142](https://insights.sbomify.com/MAL-2025-142/): Malicious code in next-refresh-token (npm) (malicious package) - [MAL-2025-141999](https://insights.sbomify.com/MAL-2025-141999/): Malicious code in eleventy-hyperion-nova-procyon (npm) (malicious package) - [MAL-2025-141998](https://insights.sbomify.com/MAL-2025-141998/): Malicious code in eleventy-global-gemini-ursa (npm) (malicious package) - [MAL-2025-141997](https://insights.sbomify.com/MAL-2025-141997/): Malicious code in eleventy-epimetheus-rate-limiter-aether (npm) (malicious package) - [MAL-2025-141996](https://insights.sbomify.com/MAL-2025-141996/): Malicious code in eleventy-envconfig-xml-private (npm) (malicious package) - [MAL-2025-141995](https://insights.sbomify.com/MAL-2025-141995/): Malicious code in eleventy-dotenv-node-config-restart (npm) (malicious package) - [MAL-2025-141994](https://insights.sbomify.com/MAL-2025-141994/): Malicious code in eleventy-development-tailwindcss-aether (npm) (malicious package) - [MAL-2025-141993](https://insights.sbomify.com/MAL-2025-141993/): Malicious code in eleventy-csv-envconfig-sagitta (npm) (malicious package) - [MAL-2025-141992](https://insights.sbomify.com/MAL-2025-141992/): Malicious code in eleventy-callisto-forever-docusaurus (npm) (malicious package) - [MAL-2025-141991](https://insights.sbomify.com/MAL-2025-141991/): Malicious code in eleventy-bootstrap-middleware-sails (npm) (malicious package) - [MAL-2025-141990](https://insights.sbomify.com/MAL-2025-141990/): Malicious code in eleventy-aurora-csrf-semantic-release (npm) (malicious package) - [MAL-2025-14199](https://insights.sbomify.com/MAL-2025-14199/): Malicious code in airbnb-typescript-prettier (npm) (malicious package) - [MAL-2025-141989](https://insights.sbomify.com/MAL-2025-141989/): Malicious code in eleventy-aether-package-halley (npm) (malicious package) - [MAL-2025-141988](https://insights.sbomify.com/MAL-2025-141988/): Malicious code in element-ui-xerxes-elara-eris (npm) (malicious package) - [MAL-2025-141987](https://insights.sbomify.com/MAL-2025-141987/): Malicious code in element-ui-winston-html-webpack-plugin-npm (npm) (malicious package) - [MAL-2025-141986](https://insights.sbomify.com/MAL-2025-141986/): Malicious code in element-ui-version-release-it-deneb (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1465/