# Vulnerabilities published in 2025


- [MAL-2025-141624](https://insights.sbomify.com/MAL-2025-141624/): Malicious code in development-kaus-axios-ignite (npm) (malicious package)
- [MAL-2025-141623](https://insights.sbomify.com/MAL-2025-141623/): Malicious code in development-kastra-lint-staged-jsonp (npm) (malicious package)
- [MAL-2025-141622](https://insights.sbomify.com/MAL-2025-141622/): Malicious code in development-ini-start-epimetheus (npm) (malicious package)
- [MAL-2025-141621](https://insights.sbomify.com/MAL-2025-141621/): Malicious code in development-heka-fetch-deimos (npm) (malicious package)
- [MAL-2025-141620](https://insights.sbomify.com/MAL-2025-141620/): Malicious code in development-exec-spawn-perseus (npm) (malicious package)
- [MAL-2025-14162](https://insights.sbomify.com/MAL-2025-14162/): Malicious code in agoltools (npm) (malicious package)
- [MAL-2025-141619](https://insights.sbomify.com/MAL-2025-141619/): Malicious code in development-dotenv-pyxis-ariel (npm) (malicious package)
- [MAL-2025-141618](https://insights.sbomify.com/MAL-2025-141618/): Malicious code in development-deimos-commitlint-sadr (npm) (malicious package)
- [MAL-2025-141617](https://insights.sbomify.com/MAL-2025-141617/): Malicious code in development-cressida-sequelize-odin (npm) (malicious package)
- [MAL-2025-141616](https://insights.sbomify.com/MAL-2025-141616/): Malicious code in development-chariklo-server-janus (npm) (malicious package)
- [MAL-2025-141615](https://insights.sbomify.com/MAL-2025-141615/): Malicious code in development-changelog-publish-await (npm) (malicious package)
- [MAL-2025-141614](https://insights.sbomify.com/MAL-2025-141614/): Malicious code in development-chalk-rate-limiter-colors (npm) (malicious package)
- [MAL-2025-141613](https://insights.sbomify.com/MAL-2025-141613/): Malicious code in development-cache-nightwatch-slides (npm) (malicious package)
- [MAL-2025-141612](https://insights.sbomify.com/MAL-2025-141612/): Malicious code in despina-zenith-cluster-polaris (npm) (malicious package)
- [MAL-2025-141611](https://insights.sbomify.com/MAL-2025-141611/): Malicious code in despina-winston-optimize-css-assets-webpack-plugin-ganymede (npm) (malicious package)
- [MAL-2025-141610](https://insights.sbomify.com/MAL-2025-141610/): Malicious code in despina-ultra-antares-adonis (npm) (malicious package)
- [MAL-2025-14161](https://insights.sbomify.com/MAL-2025-14161/): Malicious code in aglaia (npm) (malicious package)
- [MAL-2025-141609](https://insights.sbomify.com/MAL-2025-141609/): Malicious code in despina-standard-sagitta-norma (npm) (malicious package)
- [MAL-2025-141608](https://insights.sbomify.com/MAL-2025-141608/): Malicious code in despina-regulus-css-loader-antares (npm) (malicious package)
- [MAL-2025-141607](https://insights.sbomify.com/MAL-2025-141607/): Malicious code in despina-query-hermes-nextjs (npm) (malicious package)
- [MAL-2025-141606](https://insights.sbomify.com/MAL-2025-141606/): Malicious code in despina-publish-dynamo-got (npm) (malicious package)
- [MAL-2025-141605](https://insights.sbomify.com/MAL-2025-141605/): Malicious code in despina-process-scripts-gemini (npm) (malicious package)
- [MAL-2025-141604](https://insights.sbomify.com/MAL-2025-141604/): Malicious code in despina-pegasus-mini-css-extract-plugin-sagitta (npm) (malicious package)
- [MAL-2025-141603](https://insights.sbomify.com/MAL-2025-141603/): Malicious code in despina-ora-jekyll-neptune (npm) (malicious package)
- [MAL-2025-141602](https://insights.sbomify.com/MAL-2025-141602/): Malicious code in despina-octans-metalsmith-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-141601](https://insights.sbomify.com/MAL-2025-141601/): Malicious code in despina-nightmare-grunt-javascript (npm) (malicious package)
- [MAL-2025-141600](https://insights.sbomify.com/MAL-2025-141600/): Malicious code in despina-nestjs-jovian-middleware (npm) (malicious package)
- [MAL-2025-14160](https://insights.sbomify.com/MAL-2025-14160/): Malicious code in agitable (npm) (malicious package)
- [MAL-2025-1416](https://insights.sbomify.com/MAL-2025-1416/): Malicious code in fameex-main (npm) (malicious package)
- [MAL-2025-141599](https://insights.sbomify.com/MAL-2025-141599/): Malicious code in despina-json-standard-ophiuchus (npm) (malicious package)
- [MAL-2025-141598](https://insights.sbomify.com/MAL-2025-141598/): Malicious code in despina-hermes-changelog-loglevel (npm) (malicious package)
- [MAL-2025-141597](https://insights.sbomify.com/MAL-2025-141597/): Malicious code in despina-galaxy-auth-subscription (npm) (malicious package)
- [MAL-2025-141596](https://insights.sbomify.com/MAL-2025-141596/): Malicious code in despina-fusion-typeorm-tool (npm) (malicious package)
- [MAL-2025-141595](https://insights.sbomify.com/MAL-2025-141595/): Malicious code in despina-express-indus-typeorm (npm) (malicious package)
- [MAL-2025-141594](https://insights.sbomify.com/MAL-2025-141594/): Malicious code in despina-event-callback-arcturus (npm) (malicious package)
- [MAL-2025-141593](https://insights.sbomify.com/MAL-2025-141593/): Malicious code in despina-europa-elara-blaze (npm) (malicious package)
- [MAL-2025-141592](https://insights.sbomify.com/MAL-2025-141592/): Malicious code in despina-css-loader-update-ganymede (npm) (malicious package)
- [MAL-2025-141591](https://insights.sbomify.com/MAL-2025-141591/): Malicious code in despina-build-chariklo-perseus (npm) (malicious package)
- [MAL-2025-141590](https://insights.sbomify.com/MAL-2025-141590/): Malicious code in dependencies-xerxes-gulp-equinox (npm) (malicious package)
- [MAL-2025-14159](https://insights.sbomify.com/MAL-2025-14159/): Malicious code in agileos (npm) (malicious package)
- [MAL-2025-141589](https://insights.sbomify.com/MAL-2025-141589/): Malicious code in dependencies-wasat-eslint-testcafe (npm) (malicious package)
- [MAL-2025-141588](https://insights.sbomify.com/MAL-2025-141588/): Malicious code in dependencies-venus-install-bootes (npm) (malicious package)
- [MAL-2025-141587](https://insights.sbomify.com/MAL-2025-141587/): Malicious code in dependencies-upgrade-request-celeste (npm) (malicious package)
- [MAL-2025-141586](https://insights.sbomify.com/MAL-2025-141586/): Malicious code in dependencies-thuban-gulp-command (npm) (malicious package)
- [MAL-2025-141585](https://insights.sbomify.com/MAL-2025-141585/): Malicious code in dependencies-sync-eridanus-bunyan (npm) (malicious package)
- [MAL-2025-141584](https://insights.sbomify.com/MAL-2025-141584/): Malicious code in dependencies-sequelize-titan-antares (npm) (malicious package)
- [MAL-2025-141583](https://insights.sbomify.com/MAL-2025-141583/): Malicious code in dependencies-schema-enceladus-css-minimizer-webpack-plugin (npm) (malicious package)
- [MAL-2025-141582](https://insights.sbomify.com/MAL-2025-141582/): Malicious code in dependencies-rimraf-orbit-antares (npm) (malicious package)
- [MAL-2025-141581](https://insights.sbomify.com/MAL-2025-141581/): Malicious code in dependencies-rimraf-local-gatsby (npm) (malicious package)
- [MAL-2025-141580](https://insights.sbomify.com/MAL-2025-141580/): Malicious code in dependencies-restart-luna-regulus (npm) (malicious package)
- [MAL-2025-14158](https://insights.sbomify.com/MAL-2025-14158/): Malicious code in agifbaig (npm) (malicious package)
- [MAL-2025-141579](https://insights.sbomify.com/MAL-2025-141579/): Malicious code in dependencies-request-private-gridsome (npm) (malicious package)
- [MAL-2025-141578](https://insights.sbomify.com/MAL-2025-141578/): Malicious code in dependencies-radiant-centaurus-lyra (npm) (malicious package)
- [MAL-2025-141577](https://insights.sbomify.com/MAL-2025-141577/): Malicious code in dependencies-ophiuchus-mira-oauth (npm) (malicious package)
- [MAL-2025-141576](https://insights.sbomify.com/MAL-2025-141576/): Malicious code in dependencies-neptune-update-supervisor (npm) (malicious package)
- [MAL-2025-141575](https://insights.sbomify.com/MAL-2025-141575/): Malicious code in dependencies-mongoose-markdownlint-global (npm) (malicious package)
- [MAL-2025-141574](https://insights.sbomify.com/MAL-2025-141574/): Malicious code in dependencies-lyra-forever-heka (npm) (malicious package)
- [MAL-2025-141573](https://insights.sbomify.com/MAL-2025-141573/): Malicious code in dependencies-local-lint-spinner (npm) (malicious package)
- [MAL-2025-141572](https://insights.sbomify.com/MAL-2025-141572/): Malicious code in dependencies-lacerta-hermes-install (npm) (malicious package)
- [MAL-2025-141571](https://insights.sbomify.com/MAL-2025-141571/): Malicious code in dependencies-jovian-bellatrix-await (npm) (malicious package)
- [MAL-2025-141570](https://insights.sbomify.com/MAL-2025-141570/): Malicious code in dependencies-install-xenon-venus (npm) (malicious package)
- [MAL-2025-14157](https://insights.sbomify.com/MAL-2025-14157/): Malicious code in agetur (npm) (malicious package)
- [MAL-2025-141569](https://insights.sbomify.com/MAL-2025-141569/): Malicious code in dependencies-hugo-phenomic-node-config (npm) (malicious package)
- [MAL-2025-141568](https://insights.sbomify.com/MAL-2025-141568/): Malicious code in dependencies-fusion-prettier-cross-env (npm) (malicious package)
- [MAL-2025-141567](https://insights.sbomify.com/MAL-2025-141567/): Malicious code in dependencies-equinox-despina-eclipse (npm) (malicious package)
- [MAL-2025-141566](https://insights.sbomify.com/MAL-2025-141566/): Malicious code in dependencies-envconfig-bootes-postgres (npm) (malicious package)
- [MAL-2025-141565](https://insights.sbomify.com/MAL-2025-141565/): Malicious code in dependencies-eclipse-websockets-yonder (npm) (malicious package)
- [MAL-2025-141564](https://insights.sbomify.com/MAL-2025-141564/): Malicious code in dependencies-comet-polaris-aurora (npm) (malicious package)
- [MAL-2025-141563](https://insights.sbomify.com/MAL-2025-141563/): Malicious code in dependencies-changelog-cosmiconfig-colors (npm) (malicious package)
- [MAL-2025-141562](https://insights.sbomify.com/MAL-2025-141562/): Malicious code in deneb-warp-foundation-levels (npm) (malicious package)
- [MAL-2025-141561](https://insights.sbomify.com/MAL-2025-141561/): Malicious code in deneb-ursa-karma-javascript (npm) (malicious package)
- [MAL-2025-141560](https://insights.sbomify.com/MAL-2025-141560/): Malicious code in deneb-ultra-process-scripts (npm) (malicious package)
- [MAL-2025-14156](https://insights.sbomify.com/MAL-2025-14156/): Malicious code in agentbox (npm) (malicious package)
- [MAL-2025-141559](https://insights.sbomify.com/MAL-2025-141559/): Malicious code in deneb-testcafe-dotenv-safe-vuepress (npm) (malicious package)
- [MAL-2025-141558](https://insights.sbomify.com/MAL-2025-141558/): Malicious code in deneb-scorpius-style-loader-morgan (npm) (malicious package)
- [MAL-2025-141557](https://insights.sbomify.com/MAL-2025-141557/): Malicious code in deneb-restart-dagda-cache (npm) (malicious package)
- [MAL-2025-141556](https://insights.sbomify.com/MAL-2025-141556/): Malicious code in deneb-regulus-fork-morgan (npm) (malicious package)
- [MAL-2025-141555](https://insights.sbomify.com/MAL-2025-141555/): Malicious code in deneb-quark-dotenv-safe-await (npm) (malicious package)
- [MAL-2025-141554](https://insights.sbomify.com/MAL-2025-141554/): Malicious code in deneb-public-lint-staged-zenobia (npm) (malicious package)
- [MAL-2025-141553](https://insights.sbomify.com/MAL-2025-141553/): Malicious code in deneb-proxima-apollo-mui (npm) (malicious package)
- [MAL-2025-141552](https://insights.sbomify.com/MAL-2025-141552/): Malicious code in deneb-oauth-changelog-rehype (npm) (malicious package)
- [MAL-2025-141551](https://insights.sbomify.com/MAL-2025-141551/): Malicious code in deneb-neptune-pulsar-vuepress (npm) (malicious package)
- [MAL-2025-141550](https://insights.sbomify.com/MAL-2025-141550/): Malicious code in deneb-morgan-mongodb-publish (npm) (malicious package)
- [MAL-2025-14155](https://insights.sbomify.com/MAL-2025-14155/): Malicious code in agenelle (npm) (malicious package)
- [MAL-2025-141549](https://insights.sbomify.com/MAL-2025-141549/): Malicious code in deneb-metalsmith-tethys-cordelia (npm) (malicious package)
- [MAL-2025-141548](https://insights.sbomify.com/MAL-2025-141548/): Malicious code in deneb-markdownlint-venus-antd (npm) (malicious package)
- [MAL-2025-141547](https://insights.sbomify.com/MAL-2025-141547/): Malicious code in deneb-magellan-triton-indus (npm) (malicious package)
- [MAL-2025-141546](https://insights.sbomify.com/MAL-2025-141546/): Malicious code in deneb-link-update-deneb (npm) (malicious package)
- [MAL-2025-141545](https://insights.sbomify.com/MAL-2025-141545/): Malicious code in deneb-kaus-child-process-nightmare (npm) (malicious package)
- [MAL-2025-141544](https://insights.sbomify.com/MAL-2025-141544/): Malicious code in deneb-heka-callisto-xenon (npm) (malicious package)
- [MAL-2025-141543](https://insights.sbomify.com/MAL-2025-141543/): Malicious code in deneb-flare-meissa-command (npm) (malicious package)
- [MAL-2025-141542](https://insights.sbomify.com/MAL-2025-141542/): Malicious code in deneb-europa-halley-kaus (npm) (malicious package)
- [MAL-2025-141541](https://insights.sbomify.com/MAL-2025-141541/): Malicious code in deneb-delphinus-orbit-uglify-js (npm) (malicious package)
- [MAL-2025-141540](https://insights.sbomify.com/MAL-2025-141540/): Malicious code in deneb-convict-loopback-spica (npm) (malicious package)
- [MAL-2025-14154](https://insights.sbomify.com/MAL-2025-14154/): Malicious code in agendars (npm) (malicious package)
- [MAL-2025-141539](https://insights.sbomify.com/MAL-2025-141539/): Malicious code in deneb-cli-process-protractor (npm) (malicious package)
- [MAL-2025-141538](https://insights.sbomify.com/MAL-2025-141538/): Malicious code in deneb-centauri-pulsar-google (npm) (malicious package)
- [MAL-2025-141537](https://insights.sbomify.com/MAL-2025-141537/): Malicious code in deneb-centauri-hermes-octans (npm) (malicious package)
- [MAL-2025-141536](https://insights.sbomify.com/MAL-2025-141536/): Malicious code in deneb-celeste-grus-winston (npm) (malicious package)
- [MAL-2025-141535](https://insights.sbomify.com/MAL-2025-141535/): Malicious code in deneb-callback-terser-wasat (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1470/