# Vulnerabilities published in 2025


- [MAL-2025-141895](https://insights.sbomify.com/MAL-2025-141895/): Malicious code in electron-builder-aldebaran-betelgeuse-publish (npm) (malicious package)
- [MAL-2025-141894](https://insights.sbomify.com/MAL-2025-141894/): Malicious code in electron-bellatrix-foundation-tailwindcss (npm) (malicious package)
- [MAL-2025-141893](https://insights.sbomify.com/MAL-2025-141893/): Malicious code in electron-axios-pyxis-axios (npm) (malicious package)
- [MAL-2025-141892](https://insights.sbomify.com/MAL-2025-141892/): Malicious code in electron-altair-dependencies-capella (npm) (malicious package)
- [MAL-2025-141891](https://insights.sbomify.com/MAL-2025-141891/): Malicious code in electron-altair-charon-pegasus (npm) (malicious package)
- [MAL-2025-141890](https://insights.sbomify.com/MAL-2025-141890/): Malicious code in electron-alphard-sedna-kastra (npm) (malicious package)
- [MAL-2025-14189](https://insights.sbomify.com/MAL-2025-14189/): Malicious code in airbnb-flow (npm) (malicious package)
- [MAL-2025-141889](https://insights.sbomify.com/MAL-2025-141889/): Malicious code in elara-style-loader-comet-async (npm) (malicious package)
- [MAL-2025-141888](https://insights.sbomify.com/MAL-2025-141888/): Malicious code in elara-rocket-pipe-update (npm) (malicious package)
- [MAL-2025-141887](https://insights.sbomify.com/MAL-2025-141887/): Malicious code in elara-prettier-plugin-markdown-figures-await (npm) (malicious package)
- [MAL-2025-141886](https://insights.sbomify.com/MAL-2025-141886/): Malicious code in elara-perseus-xo-relay (npm) (malicious package)
- [MAL-2025-141885](https://insights.sbomify.com/MAL-2025-141885/): Malicious code in elara-package-ini-colors (npm) (malicious package)
- [MAL-2025-141884](https://insights.sbomify.com/MAL-2025-141884/): Malicious code in elara-miranda-loglevel-magellan (npm) (malicious package)
- [MAL-2025-141883](https://insights.sbomify.com/MAL-2025-141883/): Malicious code in elara-mini-css-extract-plugin-lynx-grus (npm) (malicious package)
- [MAL-2025-141882](https://insights.sbomify.com/MAL-2025-141882/): Malicious code in elara-lint-staged-ophiuchus-galaxy (npm) (malicious package)
- [MAL-2025-141881](https://insights.sbomify.com/MAL-2025-141881/): Malicious code in elara-leda-xenon-carina (npm) (malicious package)
- [MAL-2025-141880](https://insights.sbomify.com/MAL-2025-141880/): Malicious code in elara-jovian-fornax-sass-loader (npm) (malicious package)
- [MAL-2025-14188](https://insights.sbomify.com/MAL-2025-14188/): Malicious code in airbnb-es5 (npm) (malicious package)
- [MAL-2025-141879](https://insights.sbomify.com/MAL-2025-141879/): Malicious code in elara-impulse-galaxy-quark (npm) (malicious package)
- [MAL-2025-141878](https://insights.sbomify.com/MAL-2025-141878/): Malicious code in elara-hermes-octans-uninstall (npm) (malicious package)
- [MAL-2025-141877](https://insights.sbomify.com/MAL-2025-141877/): Malicious code in elara-hermes-element-ui-ini (npm) (malicious package)
- [MAL-2025-141876](https://insights.sbomify.com/MAL-2025-141876/): Malicious code in elara-google-auth0-galaxy (npm) (malicious package)
- [MAL-2025-141875](https://insights.sbomify.com/MAL-2025-141875/): Malicious code in elara-fornax-pegasus-playwright (npm) (malicious package)
- [MAL-2025-141874](https://insights.sbomify.com/MAL-2025-141874/): Malicious code in elara-equinox-mutation-hercules (npm) (malicious package)
- [MAL-2025-141873](https://insights.sbomify.com/MAL-2025-141873/): Malicious code in elara-enif-local-loop (npm) (malicious package)
- [MAL-2025-141872](https://insights.sbomify.com/MAL-2025-141872/): Malicious code in elara-cypress-pyxis-readable (npm) (malicious package)
- [MAL-2025-141871](https://insights.sbomify.com/MAL-2025-141871/): Malicious code in elara-css-loader-tool-yonder (npm) (malicious package)
- [MAL-2025-141870](https://insights.sbomify.com/MAL-2025-141870/): Malicious code in elara-css-loader-commitlint-config-angular-webdriver-manager (npm) (malicious package)
- [MAL-2025-14187](https://insights.sbomify.com/MAL-2025-14187/): Malicious code in airbnb-cryovolcano-steganography-hexo (npm) (malicious package)
- [MAL-2025-141869](https://insights.sbomify.com/MAL-2025-141869/): Malicious code in elara-centauri-ini-draco (npm) (malicious package)
- [MAL-2025-141868](https://insights.sbomify.com/MAL-2025-141868/): Malicious code in elara-centauri-csrf-unuk (npm) (malicious package)
- [MAL-2025-141867](https://insights.sbomify.com/MAL-2025-141867/): Malicious code in elara-celeste-unuk-lynx (npm) (malicious package)
- [MAL-2025-141866](https://insights.sbomify.com/MAL-2025-141866/): Malicious code in elara-canopus-markdown-pdf-native (npm) (malicious package)
- [MAL-2025-141865](https://insights.sbomify.com/MAL-2025-141865/): Malicious code in elara-betelgeuse-frontend-gemini (npm) (malicious package)
- [MAL-2025-141864](https://insights.sbomify.com/MAL-2025-141864/): Malicious code in elara-barnard-koa-fusion (npm) (malicious package)
- [MAL-2025-141863](https://insights.sbomify.com/MAL-2025-141863/): Malicious code in elara-backend-mira-corvus (npm) (malicious package)
- [MAL-2025-141862](https://insights.sbomify.com/MAL-2025-141862/): Malicious code in elara-aurora-yaml-ophiuchus (npm) (malicious package)
- [MAL-2025-141861](https://insights.sbomify.com/MAL-2025-141861/): Malicious code in eclipse-zephyr-meteor-iota (npm) (malicious package)
- [MAL-2025-141860](https://insights.sbomify.com/MAL-2025-141860/): Malicious code in eclipse-umbra-levels-yildun (npm) (malicious package)
- [MAL-2025-14186](https://insights.sbomify.com/MAL-2025-14186/): Malicious code in airbnb-bundle (npm) (malicious package)
- [MAL-2025-141859](https://insights.sbomify.com/MAL-2025-141859/): Malicious code in eclipse-publish-algol-despina (npm) (malicious package)
- [MAL-2025-141858](https://insights.sbomify.com/MAL-2025-141858/): Malicious code in eclipse-pm2-middleware-registry (npm) (malicious package)
- [MAL-2025-141857](https://insights.sbomify.com/MAL-2025-141857/): Malicious code in eclipse-nightwatch-nashira-janus (npm) (malicious package)
- [MAL-2025-141856](https://insights.sbomify.com/MAL-2025-141856/): Malicious code in eclipse-nightmare-framework-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-141855](https://insights.sbomify.com/MAL-2025-141855/): Malicious code in eclipse-meteor-stop-antares (npm) (malicious package)
- [MAL-2025-141854](https://insights.sbomify.com/MAL-2025-141854/): Malicious code in eclipse-meissa-react-bootstrap-vortex (npm) (malicious package)
- [MAL-2025-141853](https://insights.sbomify.com/MAL-2025-141853/): Malicious code in eclipse-gulp-terser-inquirer (npm) (malicious package)
- [MAL-2025-141852](https://insights.sbomify.com/MAL-2025-141852/): Malicious code in eclipse-google-yildun-nestjs (npm) (malicious package)
- [MAL-2025-141851](https://insights.sbomify.com/MAL-2025-141851/): Malicious code in eclipse-frontend-janus-mira (npm) (malicious package)
- [MAL-2025-141850](https://insights.sbomify.com/MAL-2025-141850/): Malicious code in eclipse-forever-prompts-convict (npm) (malicious package)
- [MAL-2025-14185](https://insights.sbomify.com/MAL-2025-14185/): Malicious code in airbnb-base (npm) (malicious package)
- [MAL-2025-141849](https://insights.sbomify.com/MAL-2025-141849/): Malicious code in eclipse-enceladus-relay-spinner (npm) (malicious package)
- [MAL-2025-141848](https://insights.sbomify.com/MAL-2025-141848/): Malicious code in eclipse-electron-event-barnard (npm) (malicious package)
- [MAL-2025-141847](https://insights.sbomify.com/MAL-2025-141847/): Malicious code in eclipse-dotenv-sagitta-dynamo (npm) (malicious package)
- [MAL-2025-141846](https://insights.sbomify.com/MAL-2025-141846/): Malicious code in eclipse-alphard-promise-commitizen (npm) (malicious package)
- [MAL-2025-141845](https://insights.sbomify.com/MAL-2025-141845/): Malicious code in eclipse-aether-metalsmith-nconf (npm) (malicious package)
- [MAL-2025-141844](https://insights.sbomify.com/MAL-2025-141844/): Malicious code in eager-aquamarine-aardwolf (npm) (malicious package)
- [MAL-2025-141843](https://insights.sbomify.com/MAL-2025-141843/): Malicious code in dynamo-winston-less-fornax (npm) (malicious package)
- [MAL-2025-141842](https://insights.sbomify.com/MAL-2025-141842/): Malicious code in dynamo-venus-exec-publish (npm) (malicious package)
- [MAL-2025-141841](https://insights.sbomify.com/MAL-2025-141841/): Malicious code in dynamo-ursa-soap-update (npm) (malicious package)
- [MAL-2025-141840](https://insights.sbomify.com/MAL-2025-141840/): Malicious code in dynamo-spectron-proxima-dagda (npm) (malicious package)
- [MAL-2025-14184](https://insights.sbomify.com/MAL-2025-14184/): Malicious code in airbnb-angular (npm) (malicious package)
- [MAL-2025-141839](https://insights.sbomify.com/MAL-2025-141839/): Malicious code in dynamo-slidev-slidev-kastra (npm) (malicious package)
- [MAL-2025-141838](https://insights.sbomify.com/MAL-2025-141838/): Malicious code in dynamo-sirius-envconfig-link (npm) (malicious package)
- [MAL-2025-141837](https://insights.sbomify.com/MAL-2025-141837/): Malicious code in dynamo-sequelize-hermes-playwright (npm) (malicious package)
- [MAL-2025-141836](https://insights.sbomify.com/MAL-2025-141836/): Malicious code in dynamo-run-script-nashira-markdownlint (npm) (malicious package)
- [MAL-2025-141835](https://insights.sbomify.com/MAL-2025-141835/): Malicious code in dynamo-phoebe-yildun-nebula (npm) (malicious package)
- [MAL-2025-141834](https://insights.sbomify.com/MAL-2025-141834/): Malicious code in dynamo-parcel-helios-centauri (npm) (malicious package)
- [MAL-2025-141833](https://insights.sbomify.com/MAL-2025-141833/): Malicious code in dynamo-optimize-css-assets-webpack-plugin-postcss-cluster (npm) (malicious package)
- [MAL-2025-141832](https://insights.sbomify.com/MAL-2025-141832/): Malicious code in dynamo-nuxtjs-webdriver-mocha-reveal-md (npm) (malicious package)
- [MAL-2025-141831](https://insights.sbomify.com/MAL-2025-141831/): Malicious code in dynamo-nodemon-bulma-dependencies (npm) (malicious package)
- [MAL-2025-141830](https://insights.sbomify.com/MAL-2025-141830/): Malicious code in dynamo-meteor-slides-elektra (npm) (malicious package)
- [MAL-2025-14183](https://insights.sbomify.com/MAL-2025-14183/): Malicious code in air-deploy-air-stub-bash (npm) (malicious package)
- [MAL-2025-141829](https://insights.sbomify.com/MAL-2025-141829/): Malicious code in dynamo-magellan-standard-dorado (npm) (malicious package)
- [MAL-2025-141828](https://insights.sbomify.com/MAL-2025-141828/): Malicious code in dynamo-kronos-loop-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-141827](https://insights.sbomify.com/MAL-2025-141827/): Malicious code in dynamo-jwt-figures-convict (npm) (malicious package)
- [MAL-2025-141826](https://insights.sbomify.com/MAL-2025-141826/): Malicious code in dynamo-express-quito-avior (npm) (malicious package)
- [MAL-2025-141825](https://insights.sbomify.com/MAL-2025-141825/): Malicious code in dynamo-docusaurus-iota-restart (npm) (malicious package)
- [MAL-2025-141824](https://insights.sbomify.com/MAL-2025-141824/): Malicious code in dynamo-betelgeuse-chromedriver-buffer (npm) (malicious package)
- [MAL-2025-141823](https://insights.sbomify.com/MAL-2025-141823/): Malicious code in dynamo-axios-vuetify-jasmine (npm) (malicious package)
- [MAL-2025-141822](https://insights.sbomify.com/MAL-2025-141822/): Malicious code in duplex-winston-loop-hyperion (npm) (malicious package)
- [MAL-2025-141821](https://insights.sbomify.com/MAL-2025-141821/): Malicious code in duplex-vuepress-ini-nightwatch (npm) (malicious package)
- [MAL-2025-141820](https://insights.sbomify.com/MAL-2025-141820/): Malicious code in duplex-sequelize-blitz-odin (npm) (malicious package)
- [MAL-2025-14182](https://insights.sbomify.com/MAL-2025-14182/): Malicious code in air-cron-moon-compress-hash (npm) (malicious package)
- [MAL-2025-141819](https://insights.sbomify.com/MAL-2025-141819/): Malicious code in duplex-protractor-npm-element-ui (npm) (malicious package)
- [MAL-2025-141818](https://insights.sbomify.com/MAL-2025-141818/): Malicious code in duplex-procyon-polaris-mutation (npm) (malicious package)
- [MAL-2025-141817](https://insights.sbomify.com/MAL-2025-141817/): Malicious code in duplex-perseus-local-repository (npm) (malicious package)
- [MAL-2025-141816](https://insights.sbomify.com/MAL-2025-141816/): Malicious code in duplex-octans-proxima-aether (npm) (malicious package)
- [MAL-2025-141815](https://insights.sbomify.com/MAL-2025-141815/): Malicious code in duplex-lyra-ganymede-mysql (npm) (malicious package)
- [MAL-2025-141814](https://insights.sbomify.com/MAL-2025-141814/): Malicious code in duplex-link-test-xanadu (npm) (malicious package)
- [MAL-2025-141813](https://insights.sbomify.com/MAL-2025-141813/): Malicious code in duplex-jsonp-zenobia-gemini (npm) (malicious package)
- [MAL-2025-141812](https://insights.sbomify.com/MAL-2025-141812/): Malicious code in duplex-jekyll-janus-postcss-loader (npm) (malicious package)
- [MAL-2025-141811](https://insights.sbomify.com/MAL-2025-141811/): Malicious code in duplex-hyperion-arcturus-nestjs (npm) (malicious package)
- [MAL-2025-141810](https://insights.sbomify.com/MAL-2025-141810/): Malicious code in duplex-gridsome-antares-express (npm) (malicious package)
- [MAL-2025-14181](https://insights.sbomify.com/MAL-2025-14181/): Malicious code in air-container-await-mock-final (npm) (malicious package)
- [MAL-2025-141809](https://insights.sbomify.com/MAL-2025-141809/): Malicious code in duplex-galaxy-postgres-bellatrix (npm) (malicious package)
- [MAL-2025-141808](https://insights.sbomify.com/MAL-2025-141808/): Malicious code in duplex-elara-charon-pegasus (npm) (malicious package)
- [MAL-2025-141807](https://insights.sbomify.com/MAL-2025-141807/): Malicious code in duplex-duplex-nightwatch-dagda (npm) (malicious package)
- [MAL-2025-141806](https://insights.sbomify.com/MAL-2025-141806/): Malicious code in duplex-cordelia-package-mysql (npm) (malicious package)
- [MAL-2025-141805](https://insights.sbomify.com/MAL-2025-141805/): Malicious code in duplex-config-capella-postcss-loader (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1467/