# Vulnerabilities published in 2025


- [MAL-2025-141534](https://insights.sbomify.com/MAL-2025-141534/): Malicious code in deneb-bootes-postcss-webdriver-mocha (npm) (malicious package)
- [MAL-2025-141533](https://insights.sbomify.com/MAL-2025-141533/): Malicious code in deneb-betelgeuse-prettier-stylelint-geckodriver (npm) (malicious package)
- [MAL-2025-141532](https://insights.sbomify.com/MAL-2025-141532/): Malicious code in deneb-astro-xenon-hugo (npm) (malicious package)
- [MAL-2025-141531](https://insights.sbomify.com/MAL-2025-141531/): Malicious code in delphinus-transform-event-mira (npm) (malicious package)
- [MAL-2025-141530](https://insights.sbomify.com/MAL-2025-141530/): Malicious code in delphinus-titan-ora-commitlint (npm) (malicious package)
- [MAL-2025-14153](https://insights.sbomify.com/MAL-2025-14153/): Malicious code in agendar (npm) (malicious package)
- [MAL-2025-141529](https://insights.sbomify.com/MAL-2025-141529/): Malicious code in delphinus-subscription-mongodb-airbnb (npm) (malicious package)
- [MAL-2025-141528](https://insights.sbomify.com/MAL-2025-141528/): Malicious code in delphinus-octans-process-mira (npm) (malicious package)
- [MAL-2025-141527](https://insights.sbomify.com/MAL-2025-141527/): Malicious code in delphinus-oberon-resolvers-kinetic (npm) (malicious package)
- [MAL-2025-141526](https://insights.sbomify.com/MAL-2025-141526/): Malicious code in delphinus-non-blocking-mysql-module (npm) (malicious package)
- [MAL-2025-141525](https://insights.sbomify.com/MAL-2025-141525/): Malicious code in delphinus-node-config-equinox-aquarius (npm) (malicious package)
- [MAL-2025-141524](https://insights.sbomify.com/MAL-2025-141524/): Malicious code in delphinus-markdown-antd-auth (npm) (malicious package)
- [MAL-2025-141523](https://insights.sbomify.com/MAL-2025-141523/): Malicious code in delphinus-leda-polaris-event (npm) (malicious package)
- [MAL-2025-141522](https://insights.sbomify.com/MAL-2025-141522/): Malicious code in delphinus-kaus-ariel-sqlite (npm) (malicious package)
- [MAL-2025-141521](https://insights.sbomify.com/MAL-2025-141521/): Malicious code in delphinus-jwt-vega-style-loader (npm) (malicious package)
- [MAL-2025-141520](https://insights.sbomify.com/MAL-2025-141520/): Malicious code in delphinus-jovian-proxima-luna (npm) (malicious package)
- [MAL-2025-14152](https://insights.sbomify.com/MAL-2025-14152/): Malicious code in agenbola (npm) (malicious package)
- [MAL-2025-141519](https://insights.sbomify.com/MAL-2025-141519/): Malicious code in delphinus-io-aldebaran-framework (npm) (malicious package)
- [MAL-2025-141518](https://insights.sbomify.com/MAL-2025-141518/): Malicious code in delphinus-gridsome-async-miranda (npm) (malicious package)
- [MAL-2025-141517](https://insights.sbomify.com/MAL-2025-141517/): Malicious code in delphinus-gatsby-halley-redis (npm) (malicious package)
- [MAL-2025-141516](https://insights.sbomify.com/MAL-2025-141516/): Malicious code in delphinus-elektra-google-stream (npm) (malicious package)
- [MAL-2025-141515](https://insights.sbomify.com/MAL-2025-141515/): Malicious code in delphinus-elara-arcturus-fetch (npm) (malicious package)
- [MAL-2025-141514](https://insights.sbomify.com/MAL-2025-141514/): Malicious code in delphinus-dotenv-safe-dagda-antares (npm) (malicious package)
- [MAL-2025-141513](https://insights.sbomify.com/MAL-2025-141513/): Malicious code in delphinus-browserify-playwright-apollo (npm) (malicious package)
- [MAL-2025-141512](https://insights.sbomify.com/MAL-2025-141512/): Malicious code in delphinus-auriga-helios-chakra-ui (npm) (malicious package)
- [MAL-2025-141511](https://insights.sbomify.com/MAL-2025-141511/): Malicious code in delphinus-ariel-apex-shelljs (npm) (malicious package)
- [MAL-2025-141510](https://insights.sbomify.com/MAL-2025-141510/): Malicious code in delphinus-andromeda-jasmine-slides (npm) (malicious package)
- [MAL-2025-14151](https://insights.sbomify.com/MAL-2025-14151/): Malicious code in agen-sbobet (npm) (malicious package)
- [MAL-2025-141509](https://insights.sbomify.com/MAL-2025-141509/): Malicious code in delphinus-altair-farout-lint (npm) (malicious package)
- [MAL-2025-141508](https://insights.sbomify.com/MAL-2025-141508/): Malicious code in deimos-webdriver-manager-public-lint (npm) (malicious package)
- [MAL-2025-141507](https://insights.sbomify.com/MAL-2025-141507/): Malicious code in deimos-semantic-release-atlas-query (npm) (malicious package)
- [MAL-2025-141506](https://insights.sbomify.com/MAL-2025-141506/): Malicious code in deimos-sass-loader-ursa-ini (npm) (malicious package)
- [MAL-2025-141505](https://insights.sbomify.com/MAL-2025-141505/): Malicious code in deimos-sass-loader-quark-dotenv (npm) (malicious package)
- [MAL-2025-141504](https://insights.sbomify.com/MAL-2025-141504/): Malicious code in deimos-rocket-lint-staged-cressida (npm) (malicious package)
- [MAL-2025-141503](https://insights.sbomify.com/MAL-2025-141503/): Malicious code in deimos-readable-winston-yonder (npm) (malicious package)
- [MAL-2025-141502](https://insights.sbomify.com/MAL-2025-141502/): Malicious code in deimos-ophiuchus-eslint-plugin-start (npm) (malicious package)
- [MAL-2025-141501](https://insights.sbomify.com/MAL-2025-141501/): Malicious code in deimos-mdx-publish-europa (npm) (malicious package)
- [MAL-2025-141500](https://insights.sbomify.com/MAL-2025-141500/): Malicious code in deimos-lint-staged-child-process-sedna (npm) (malicious package)
- [MAL-2025-14150](https://insights.sbomify.com/MAL-2025-14150/): Malicious code in agatha (npm) (malicious package)
- [MAL-2025-1415](https://insights.sbomify.com/MAL-2025-1415/): Malicious code in fameex-internal (npm) (malicious package)
- [MAL-2025-141499](https://insights.sbomify.com/MAL-2025-141499/): Malicious code in deimos-lint-mini-css-extract-plugin-kastra (npm) (malicious package)
- [MAL-2025-141498](https://insights.sbomify.com/MAL-2025-141498/): Malicious code in deimos-juno-sails-promise (npm) (malicious package)
- [MAL-2025-141497](https://insights.sbomify.com/MAL-2025-141497/): Malicious code in deimos-indus-ursa-cordelia (npm) (malicious package)
- [MAL-2025-141496](https://insights.sbomify.com/MAL-2025-141496/): Malicious code in deimos-hyperion-cressida-deimos (npm) (malicious package)
- [MAL-2025-141495](https://insights.sbomify.com/MAL-2025-141495/): Malicious code in deimos-gulp-convict-rimraf (npm) (malicious package)
- [MAL-2025-141494](https://insights.sbomify.com/MAL-2025-141494/): Malicious code in deimos-gravity-cache-elektra (npm) (malicious package)
- [MAL-2025-141493](https://insights.sbomify.com/MAL-2025-141493/): Malicious code in deimos-graphql-procyon-aurora (npm) (malicious package)
- [MAL-2025-141492](https://insights.sbomify.com/MAL-2025-141492/): Malicious code in deimos-gatsby-config-xanthus (npm) (malicious package)
- [MAL-2025-141491](https://insights.sbomify.com/MAL-2025-141491/): Malicious code in deimos-cressida-kronos-stop (npm) (malicious package)
- [MAL-2025-141490](https://insights.sbomify.com/MAL-2025-141490/): Malicious code in deimos-comet-ganymede-native (npm) (malicious package)
- [MAL-2025-14149](https://insights.sbomify.com/MAL-2025-14149/): Malicious code in agate-build (npm) (malicious package)
- [MAL-2025-141489](https://insights.sbomify.com/MAL-2025-141489/): Malicious code in deimos-babel-callisto-algol (npm) (malicious package)
- [MAL-2025-141488](https://insights.sbomify.com/MAL-2025-141488/): Malicious code in deimos-aurora-electron-unuk (npm) (malicious package)
- [MAL-2025-141487](https://insights.sbomify.com/MAL-2025-141487/): Malicious code in deimos-alphard-nestjs-oberon (npm) (malicious package)
- [MAL-2025-141486](https://insights.sbomify.com/MAL-2025-141486/): Malicious code in dagda-server-writable-gacrux (npm) (malicious package)
- [MAL-2025-141485](https://insights.sbomify.com/MAL-2025-141485/): Malicious code in dagda-scripts-callisto-magellan (npm) (malicious package)
- [MAL-2025-141484](https://insights.sbomify.com/MAL-2025-141484/): Malicious code in dagda-resolvers-express-foundation (npm) (malicious package)
- [MAL-2025-141483](https://insights.sbomify.com/MAL-2025-141483/): Malicious code in dagda-repository-postcss-loader-wolf (npm) (malicious package)
- [MAL-2025-141482](https://insights.sbomify.com/MAL-2025-141482/): Malicious code in dagda-rate-limiter-webpack-subscription (npm) (malicious package)
- [MAL-2025-141481](https://insights.sbomify.com/MAL-2025-141481/): Malicious code in dagda-protractor-lynx-corvus (npm) (malicious package)
- [MAL-2025-141480](https://insights.sbomify.com/MAL-2025-141480/): Malicious code in dagda-ora-vortex-rigel (npm) (malicious package)
- [MAL-2025-14148](https://insights.sbomify.com/MAL-2025-14148/): Malicious code in afwzctxndqmrluvi (npm) (malicious package)
- [MAL-2025-141479](https://insights.sbomify.com/MAL-2025-141479/): Malicious code in dagda-octans-airbnb-update (npm) (malicious package)
- [MAL-2025-141478](https://insights.sbomify.com/MAL-2025-141478/): Malicious code in dagda-nodejs-magellan-mysql (npm) (malicious package)
- [MAL-2025-141477](https://insights.sbomify.com/MAL-2025-141477/): Malicious code in dagda-mini-css-extract-plugin-ophiuchus-quantum (npm) (malicious package)
- [MAL-2025-141476](https://insights.sbomify.com/MAL-2025-141476/): Malicious code in dagda-magellan-cosmiconfig-forever (npm) (malicious package)
- [MAL-2025-141475](https://insights.sbomify.com/MAL-2025-141475/): Malicious code in dagda-less-loader-public-upgrade (npm) (malicious package)
- [MAL-2025-141474](https://insights.sbomify.com/MAL-2025-141474/): Malicious code in dagda-jabbah-xenos-dactyl (npm) (malicious package)
- [MAL-2025-141473](https://insights.sbomify.com/MAL-2025-141473/): Malicious code in dagda-install-global-library (npm) (malicious package)
- [MAL-2025-141472](https://insights.sbomify.com/MAL-2025-141472/): Malicious code in dagda-hydra-centaurus-hexo (npm) (malicious package)
- [MAL-2025-141471](https://insights.sbomify.com/MAL-2025-141471/): Malicious code in dagda-heka-phoebe-quantum (npm) (malicious package)
- [MAL-2025-141470](https://insights.sbomify.com/MAL-2025-141470/): Malicious code in dagda-gulp-quito-grunt (npm) (malicious package)
- [MAL-2025-14147](https://insights.sbomify.com/MAL-2025-14147/): Malicious code in after-time (npm) (malicious package)
- [MAL-2025-141469](https://insights.sbomify.com/MAL-2025-141469/): Malicious code in dagda-fusion-altair-rest (npm) (malicious package)
- [MAL-2025-141468](https://insights.sbomify.com/MAL-2025-141468/): Malicious code in dagda-forever-proxima-carpo (npm) (malicious package)
- [MAL-2025-141467](https://insights.sbomify.com/MAL-2025-141467/): Malicious code in dagda-eleventy-phoebe-cordelia (npm) (malicious package)
- [MAL-2025-141466](https://insights.sbomify.com/MAL-2025-141466/): Malicious code in dagda-deimos-janus-lacerta (npm) (malicious package)
- [MAL-2025-141465](https://insights.sbomify.com/MAL-2025-141465/): Malicious code in dagda-convict-nova-mongodb (npm) (malicious package)
- [MAL-2025-141464](https://insights.sbomify.com/MAL-2025-141464/): Malicious code in dagda-castor-xo-callback (npm) (malicious package)
- [MAL-2025-141463](https://insights.sbomify.com/MAL-2025-141463/): Malicious code in dagda-callisto-dagda-scripts (npm) (malicious package)
- [MAL-2025-141462](https://insights.sbomify.com/MAL-2025-141462/): Malicious code in dagda-ariel-lynx-fornax (npm) (malicious package)
- [MAL-2025-141461](https://insights.sbomify.com/MAL-2025-141461/): Malicious code in dagda-aquarius-postcss-loader-aquarius (npm) (malicious package)
- [MAL-2025-141460](https://insights.sbomify.com/MAL-2025-141460/): Malicious code in dagda-antares-bulma-mira (npm) (malicious package)
- [MAL-2025-14146](https://insights.sbomify.com/MAL-2025-14146/): Malicious code in afronosh (npm) (malicious package)
- [MAL-2025-141459](https://insights.sbomify.com/MAL-2025-141459/): Malicious code in dagda-algol-cli-telesto (npm) (malicious package)
- [MAL-2025-141458](https://insights.sbomify.com/MAL-2025-141458/): Malicious code in dactyl-webpack-loopback-winston (npm) (malicious package)
- [MAL-2025-141457](https://insights.sbomify.com/MAL-2025-141457/): Malicious code in dactyl-typeorm-chromedriver-node-config (npm) (malicious package)
- [MAL-2025-141456](https://insights.sbomify.com/MAL-2025-141456/): Malicious code in dactyl-titan-cz-conventional-changelog-mocha (npm) (malicious package)
- [MAL-2025-141455](https://insights.sbomify.com/MAL-2025-141455/): Malicious code in dactyl-superagent-csv-hermes (npm) (malicious package)
- [MAL-2025-141454](https://insights.sbomify.com/MAL-2025-141454/): Malicious code in dactyl-schema-commitizen-xanadu (npm) (malicious package)
- [MAL-2025-141453](https://insights.sbomify.com/MAL-2025-141453/): Malicious code in dactyl-remark-titan-yonder (npm) (malicious package)
- [MAL-2025-141452](https://insights.sbomify.com/MAL-2025-141452/): Malicious code in dactyl-rate-limiter-janus-spica (npm) (malicious package)
- [MAL-2025-141451](https://insights.sbomify.com/MAL-2025-141451/): Malicious code in dactyl-proxima-xenos-eslint (npm) (malicious package)
- [MAL-2025-141450](https://insights.sbomify.com/MAL-2025-141450/): Malicious code in dactyl-prompts-mongodb-equinox (npm) (malicious package)
- [MAL-2025-14145](https://insights.sbomify.com/MAL-2025-14145/): Malicious code in afrasa (npm) (malicious package)
- [MAL-2025-141449](https://insights.sbomify.com/MAL-2025-141449/): Malicious code in dactyl-postcss-slidev-phoebe (npm) (malicious package)
- [MAL-2025-141448](https://insights.sbomify.com/MAL-2025-141448/): Malicious code in dactyl-native-superagent-nextjs (npm) (malicious package)
- [MAL-2025-141447](https://insights.sbomify.com/MAL-2025-141447/): Malicious code in dactyl-meissa-cordelia-rehype (npm) (malicious package)
- [MAL-2025-141446](https://insights.sbomify.com/MAL-2025-141446/): Malicious code in dactyl-lint-staged-achernar-build (npm) (malicious package)
- [MAL-2025-141445](https://insights.sbomify.com/MAL-2025-141445/): Malicious code in dactyl-lacerta-inquirer-scorpius (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1471/