# Vulnerabilities published in 2025


- [MAL-2025-141985](https://insights.sbomify.com/MAL-2025-141985/): Malicious code in element-ui-venus-avior-orbit (npm) (malicious package)
- [MAL-2025-141984](https://insights.sbomify.com/MAL-2025-141984/): Malicious code in element-ui-spinner-bootstrap-build (npm) (malicious package)
- [MAL-2025-141983](https://insights.sbomify.com/MAL-2025-141983/): Malicious code in element-ui-spectron-webdriver-mdx-flare (npm) (malicious package)
- [MAL-2025-141982](https://insights.sbomify.com/MAL-2025-141982/): Malicious code in element-ui-rocket-vuetify-quark (npm) (malicious package)
- [MAL-2025-141981](https://insights.sbomify.com/MAL-2025-141981/): Malicious code in element-ui-radiant-procyon-xml (npm) (malicious package)
- [MAL-2025-141980](https://insights.sbomify.com/MAL-2025-141980/): Malicious code in element-ui-proxima-sync-spawn (npm) (malicious package)
- [MAL-2025-14198](https://insights.sbomify.com/MAL-2025-14198/): Malicious code in airbnb-typescript (npm) (malicious package)
- [MAL-2025-141979](https://insights.sbomify.com/MAL-2025-141979/): Malicious code in element-ui-prettier-css-loader-elara (npm) (malicious package)
- [MAL-2025-141978](https://insights.sbomify.com/MAL-2025-141978/): Malicious code in element-ui-postcss-less-elara (npm) (malicious package)
- [MAL-2025-141977](https://insights.sbomify.com/MAL-2025-141977/): Malicious code in element-ui-pino-pretty-miranda-adonis (npm) (malicious package)
- [MAL-2025-141976](https://insights.sbomify.com/MAL-2025-141976/): Malicious code in element-ui-nextjs-charon-leda (npm) (malicious package)
- [MAL-2025-141975](https://insights.sbomify.com/MAL-2025-141975/): Malicious code in element-ui-nestjs-draco-hyperion (npm) (malicious package)
- [MAL-2025-141974](https://insights.sbomify.com/MAL-2025-141974/): Malicious code in element-ui-mdx-mongoose-local (npm) (malicious package)
- [MAL-2025-141973](https://insights.sbomify.com/MAL-2025-141973/): Malicious code in element-ui-luna-betelgeuse-markdownlint (npm) (malicious package)
- [MAL-2025-141972](https://insights.sbomify.com/MAL-2025-141972/): Malicious code in element-ui-lint-staged-apollo-cordelia (npm) (malicious package)
- [MAL-2025-141971](https://insights.sbomify.com/MAL-2025-141971/): Malicious code in element-ui-jwt-uninstall-iota (npm) (malicious package)
- [MAL-2025-141970](https://insights.sbomify.com/MAL-2025-141970/): Malicious code in element-ui-html-webpack-plugin-impulse-odin (npm) (malicious package)
- [MAL-2025-14197](https://insights.sbomify.com/MAL-2025-14197/): Malicious code in airbnb-tracking (npm) (malicious package)
- [MAL-2025-141969](https://insights.sbomify.com/MAL-2025-141969/): Malicious code in element-ui-gemini-got-ursa (npm) (malicious package)
- [MAL-2025-141968](https://insights.sbomify.com/MAL-2025-141968/): Malicious code in element-ui-fornax-telesto-local (npm) (malicious package)
- [MAL-2025-141967](https://insights.sbomify.com/MAL-2025-141967/): Malicious code in element-ui-exec-magellan-aurora (npm) (malicious package)
- [MAL-2025-141966](https://insights.sbomify.com/MAL-2025-141966/): Malicious code in element-ui-eslint-config-public-miranda (npm) (malicious package)
- [MAL-2025-141965](https://insights.sbomify.com/MAL-2025-141965/): Malicious code in element-ui-cypress-rimraf-zenobia (npm) (malicious package)
- [MAL-2025-141964](https://insights.sbomify.com/MAL-2025-141964/): Malicious code in element-ui-charon-juno-hermes (npm) (malicious package)
- [MAL-2025-141963](https://insights.sbomify.com/MAL-2025-141963/): Malicious code in element-ui-chariklo-cosmos-chariklo (npm) (malicious package)
- [MAL-2025-141962](https://insights.sbomify.com/MAL-2025-141962/): Malicious code in element-ui-ceres-aquarius-websockets (npm) (malicious package)
- [MAL-2025-141961](https://insights.sbomify.com/MAL-2025-141961/): Malicious code in element-ui-castor-janus-quito (npm) (malicious package)
- [MAL-2025-141960](https://insights.sbomify.com/MAL-2025-141960/): Malicious code in element-ui-blitz-rehype-perseus (npm) (malicious package)
- [MAL-2025-14196](https://insights.sbomify.com/MAL-2025-14196/): Malicious code in airbnb-relaxed (npm) (malicious package)
- [MAL-2025-141959](https://insights.sbomify.com/MAL-2025-141959/): Malicious code in element-ui-aquarius-pulsar-readable (npm) (malicious package)
- [MAL-2025-141958](https://insights.sbomify.com/MAL-2025-141958/): Malicious code in element-ui-antares-browserify-helmet (npm) (malicious package)
- [MAL-2025-141957](https://insights.sbomify.com/MAL-2025-141957/): Malicious code in elektra-zenobia-webdriver-mocha-async (npm) (malicious package)
- [MAL-2025-141956](https://insights.sbomify.com/MAL-2025-141956/): Malicious code in elektra-xenos-hyperion-spinner (npm) (malicious package)
- [MAL-2025-141955](https://insights.sbomify.com/MAL-2025-141955/): Malicious code in elektra-webdriver-mocha-xanadu-javascript (npm) (malicious package)
- [MAL-2025-141954](https://insights.sbomify.com/MAL-2025-141954/): Malicious code in elektra-toml-chalk-lint (npm) (malicious package)
- [MAL-2025-141953](https://insights.sbomify.com/MAL-2025-141953/): Malicious code in elektra-tethys-perseus-ursa (npm) (malicious package)
- [MAL-2025-141952](https://insights.sbomify.com/MAL-2025-141952/): Malicious code in elektra-start-apex-radiant (npm) (malicious package)
- [MAL-2025-141951](https://insights.sbomify.com/MAL-2025-141951/): Malicious code in elektra-ophiuchus-hermes-publish (npm) (malicious package)
- [MAL-2025-141950](https://insights.sbomify.com/MAL-2025-141950/): Malicious code in elektra-mensa-astro-halley (npm) (malicious package)
- [MAL-2025-14195](https://insights.sbomify.com/MAL-2025-14195/): Malicious code in airbnb-quasarjet-biogeochemistry-primatology (npm) (malicious package)
- [MAL-2025-141949](https://insights.sbomify.com/MAL-2025-141949/): Malicious code in elektra-link-postcss-loader-cordelia (npm) (malicious package)
- [MAL-2025-141948](https://insights.sbomify.com/MAL-2025-141948/): Malicious code in elektra-janus-slidev-schema (npm) (malicious package)
- [MAL-2025-141947](https://insights.sbomify.com/MAL-2025-141947/): Malicious code in elektra-init-protractor-ursa (npm) (malicious package)
- [MAL-2025-141946](https://insights.sbomify.com/MAL-2025-141946/): Malicious code in elektra-fornax-csrf-csv (npm) (malicious package)
- [MAL-2025-141945](https://insights.sbomify.com/MAL-2025-141945/): Malicious code in elektra-draco-kinetic-backend (npm) (malicious package)
- [MAL-2025-141944](https://insights.sbomify.com/MAL-2025-141944/): Malicious code in elektra-dotenv-safe-playwright-bellatrix (npm) (malicious package)
- [MAL-2025-141943](https://insights.sbomify.com/MAL-2025-141943/): Malicious code in elektra-despina-farout-bellatrix (npm) (malicious package)
- [MAL-2025-141942](https://insights.sbomify.com/MAL-2025-141942/): Malicious code in elektra-dactyl-request-envconfig (npm) (malicious package)
- [MAL-2025-141941](https://insights.sbomify.com/MAL-2025-141941/): Malicious code in elektra-css-minimizer-webpack-plugin-janus-semantic-ui (npm) (malicious package)
- [MAL-2025-141940](https://insights.sbomify.com/MAL-2025-141940/): Malicious code in elektra-comet-kaus-request (npm) (malicious package)
- [MAL-2025-14194](https://insights.sbomify.com/MAL-2025-14194/): Malicious code in airbnb-navigation (npm) (malicious package)
- [MAL-2025-141939](https://insights.sbomify.com/MAL-2025-141939/): Malicious code in elektra-changelog-spinner-celeste (npm) (malicious package)
- [MAL-2025-141938](https://insights.sbomify.com/MAL-2025-141938/): Malicious code in elektra-blitz-development-rocket (npm) (malicious package)
- [MAL-2025-141937](https://insights.sbomify.com/MAL-2025-141937/): Malicious code in elektra-aldebaran-eslint-leda (npm) (malicious package)
- [MAL-2025-141936](https://insights.sbomify.com/MAL-2025-141936/): Malicious code in elektra-aether-rocket-thuban (npm) (malicious package)
- [MAL-2025-141935](https://insights.sbomify.com/MAL-2025-141935/): Malicious code in elektra-acamar-equinox-comet (npm) (malicious package)
- [MAL-2025-141934](https://insights.sbomify.com/MAL-2025-141934/): Malicious code in electron-virgo-izar-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-141933](https://insights.sbomify.com/MAL-2025-141933/): Malicious code in electron-soap-magellan-heka (npm) (malicious package)
- [MAL-2025-141932](https://insights.sbomify.com/MAL-2025-141932/): Malicious code in electron-semantic-ui-local-package (npm) (malicious package)
- [MAL-2025-141931](https://insights.sbomify.com/MAL-2025-141931/): Malicious code in electron-sadr-quasar-init (npm) (malicious package)
- [MAL-2025-141930](https://insights.sbomify.com/MAL-2025-141930/): Malicious code in electron-rimraf-orbit-javascript (npm) (malicious package)
- [MAL-2025-14193](https://insights.sbomify.com/MAL-2025-14193/): Malicious code in airbnb-lite (npm) (malicious package)
- [MAL-2025-141929](https://insights.sbomify.com/MAL-2025-141929/): Malicious code in electron-rigel-bootstrap-meteor (npm) (malicious package)
- [MAL-2025-141928](https://insights.sbomify.com/MAL-2025-141928/): Malicious code in electron-reveal-md-gravity-puppeteer (npm) (malicious package)
- [MAL-2025-141927](https://insights.sbomify.com/MAL-2025-141927/): Malicious code in electron-polaris-sirius-apex (npm) (malicious package)
- [MAL-2025-141926](https://insights.sbomify.com/MAL-2025-141926/): Malicious code in electron-phoebe-electron-builder-slides (npm) (malicious package)
- [MAL-2025-141925](https://insights.sbomify.com/MAL-2025-141925/): Malicious code in electron-pegasus-perseus-slides (npm) (malicious package)
- [MAL-2025-141924](https://insights.sbomify.com/MAL-2025-141924/): Malicious code in electron-orbit-eris-sagitta (npm) (malicious package)
- [MAL-2025-141923](https://insights.sbomify.com/MAL-2025-141923/): Malicious code in electron-nashira-deneb-norma (npm) (malicious package)
- [MAL-2025-141922](https://insights.sbomify.com/MAL-2025-141922/): Malicious code in electron-meteor-command-concurrently (npm) (malicious package)
- [MAL-2025-141921](https://insights.sbomify.com/MAL-2025-141921/): Malicious code in electron-init-vulcan-wolf (npm) (malicious package)
- [MAL-2025-141920](https://insights.sbomify.com/MAL-2025-141920/): Malicious code in electron-hugo-link-config (npm) (malicious package)
- [MAL-2025-14192](https://insights.sbomify.com/MAL-2025-14192/): Malicious code in airbnb-hooks (npm) (malicious package)
- [MAL-2025-141919](https://insights.sbomify.com/MAL-2025-141919/): Malicious code in electron-hapi-sedna-cross-env (npm) (malicious package)
- [MAL-2025-141918](https://insights.sbomify.com/MAL-2025-141918/): Malicious code in electron-frontend-polaris-aquarius (npm) (malicious package)
- [MAL-2025-141917](https://insights.sbomify.com/MAL-2025-141917/): Malicious code in electron-fornax-testcafe-centauri (npm) (malicious package)
- [MAL-2025-141916](https://insights.sbomify.com/MAL-2025-141916/): Malicious code in electron-fornax-quito-mensa (npm) (malicious package)
- [MAL-2025-141915](https://insights.sbomify.com/MAL-2025-141915/): Malicious code in electron-fork-mira-yakutsk (npm) (malicious package)
- [MAL-2025-141914](https://insights.sbomify.com/MAL-2025-141914/): Malicious code in electron-forever-cypress-proxima (npm) (malicious package)
- [MAL-2025-141913](https://insights.sbomify.com/MAL-2025-141913/): Malicious code in electron-eslint-aether-style-loader (npm) (malicious package)
- [MAL-2025-141912](https://insights.sbomify.com/MAL-2025-141912/): Malicious code in electron-builder-spica-halley-winston (npm) (malicious package)
- [MAL-2025-141911](https://insights.sbomify.com/MAL-2025-141911/): Malicious code in electron-builder-package-remark-wasat (npm) (malicious package)
- [MAL-2025-141910](https://insights.sbomify.com/MAL-2025-141910/): Malicious code in electron-builder-optimize-css-assets-webpack-plugin-betelgeuse-css-loader (npm) (malicious package)
- [MAL-2025-14191](https://insights.sbomify.com/MAL-2025-14191/): Malicious code in airbnb-hermes-redis-umbriel (npm) (malicious package)
- [MAL-2025-141909](https://insights.sbomify.com/MAL-2025-141909/): Malicious code in electron-builder-nconf-warp-fetch (npm) (malicious package)
- [MAL-2025-141908](https://insights.sbomify.com/MAL-2025-141908/): Malicious code in electron-builder-mensa-capella-fork (npm) (malicious package)
- [MAL-2025-141907](https://insights.sbomify.com/MAL-2025-141907/): Malicious code in electron-builder-leda-astro-restart (npm) (malicious package)
- [MAL-2025-141906](https://insights.sbomify.com/MAL-2025-141906/): Malicious code in electron-builder-jupiter-markdown-schema (npm) (malicious package)
- [MAL-2025-141905](https://insights.sbomify.com/MAL-2025-141905/): Malicious code in electron-builder-hydra-mensa-stream (npm) (malicious package)
- [MAL-2025-141904](https://insights.sbomify.com/MAL-2025-141904/): Malicious code in electron-builder-gulp-tailwindcss-nova (npm) (malicious package)
- [MAL-2025-141903](https://insights.sbomify.com/MAL-2025-141903/): Malicious code in electron-builder-gridsome-callback-aldebaran (npm) (malicious package)
- [MAL-2025-141902](https://insights.sbomify.com/MAL-2025-141902/): Malicious code in electron-builder-ganymede-tethys-module (npm) (malicious package)
- [MAL-2025-141901](https://insights.sbomify.com/MAL-2025-141901/): Malicious code in electron-builder-galaxy-xo-pavo (npm) (malicious package)
- [MAL-2025-141900](https://insights.sbomify.com/MAL-2025-141900/): Malicious code in electron-builder-dactyl-duplex-ignite (npm) (malicious package)
- [MAL-2025-14190](https://insights.sbomify.com/MAL-2025-14190/): Malicious code in airbnb-fornax-draco-electron-builder (npm) (malicious package)
- [MAL-2025-1419](https://insights.sbomify.com/MAL-2025-1419/): Malicious code in htx-test (npm) (malicious package)
- [MAL-2025-141899](https://insights.sbomify.com/MAL-2025-141899/): Malicious code in electron-builder-cz-conventional-changelog-markdown-pdf-rigel (npm) (malicious package)
- [MAL-2025-141898](https://insights.sbomify.com/MAL-2025-141898/): Malicious code in electron-builder-cassini-mutation-postcss-loader (npm) (malicious package)
- [MAL-2025-141897](https://insights.sbomify.com/MAL-2025-141897/): Malicious code in electron-builder-async-titan-neptune (npm) (malicious package)
- [MAL-2025-141896](https://insights.sbomify.com/MAL-2025-141896/): Malicious code in electron-builder-async-hyperion-eridanus (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1466/