# Vulnerabilities published in 2025 - [MAL-2025-141354](https://insights.sbomify.com/MAL-2025-141354/): Malicious code in csv-pulsar-hexo-bunyan (npm) (malicious package) - [MAL-2025-141353](https://insights.sbomify.com/MAL-2025-141353/): Malicious code in csv-pulsar-epimetheus-telesto (npm) (malicious package) - [MAL-2025-141352](https://insights.sbomify.com/MAL-2025-141352/): Malicious code in csv-ora-relay-canopus (npm) (malicious package) - [MAL-2025-141351](https://insights.sbomify.com/MAL-2025-141351/): Malicious code in csv-nova-eridanus-neptune (npm) (malicious package) - [MAL-2025-141350](https://insights.sbomify.com/MAL-2025-141350/): Malicious code in csv-nestjs-mdx-link (npm) (malicious package) - [MAL-2025-14135](https://insights.sbomify.com/MAL-2025-14135/): Malicious code in afficheur (npm) (malicious package) - [MAL-2025-141349](https://insights.sbomify.com/MAL-2025-141349/): Malicious code in csv-neptune-fetch-meteor (npm) (malicious package) - [MAL-2025-141348](https://insights.sbomify.com/MAL-2025-141348/): Malicious code in csv-nashira-scorpius-indus (npm) (malicious package) - [MAL-2025-141347](https://insights.sbomify.com/MAL-2025-141347/): Malicious code in csv-markdownlint-npm-grus (npm) (malicious package) - [MAL-2025-141346](https://insights.sbomify.com/MAL-2025-141346/): Malicious code in csv-luna-loglevel-buffer (npm) (malicious package) - [MAL-2025-141345](https://insights.sbomify.com/MAL-2025-141345/): Malicious code in csv-kastra-install-winston (npm) (malicious package) - [MAL-2025-141344](https://insights.sbomify.com/MAL-2025-141344/): Malicious code in csv-europa-bellatrix-janus (npm) (malicious package) - [MAL-2025-141343](https://insights.sbomify.com/MAL-2025-141343/): Malicious code in csv-cors-sadr-browserify (npm) (malicious package) - [MAL-2025-141342](https://insights.sbomify.com/MAL-2025-141342/): Malicious code in csv-changelog-dagda-rimraf (npm) (malicious package) - [MAL-2025-141341](https://insights.sbomify.com/MAL-2025-141341/): Malicious code in csv-build-rigel-superagent (npm) (malicious package) - [MAL-2025-141340](https://insights.sbomify.com/MAL-2025-141340/): Malicious code in csv-ariel-sirius-wezen (npm) (malicious package) - [MAL-2025-14134](https://insights.sbomify.com/MAL-2025-14134/): Malicious code in affectv (npm) (malicious package) - [MAL-2025-141339](https://insights.sbomify.com/MAL-2025-141339/): Malicious code in csv-antares-halley-kastra (npm) (malicious package) - [MAL-2025-141338](https://insights.sbomify.com/MAL-2025-141338/): Malicious code in css-minimizer-webpack-plugin-yaml-sails-test (npm) (malicious package) - [MAL-2025-141337](https://insights.sbomify.com/MAL-2025-141337/): Malicious code in css-minimizer-webpack-plugin-winston-jwt-phoebe (npm) (malicious package) - [MAL-2025-141336](https://insights.sbomify.com/MAL-2025-141336/): Malicious code in css-minimizer-webpack-plugin-winston-jovian-sadr (npm) (malicious package) - [MAL-2025-141335](https://insights.sbomify.com/MAL-2025-141335/): Malicious code in css-minimizer-webpack-plugin-ursa-hexo-antares (npm) (malicious package) - [MAL-2025-141334](https://insights.sbomify.com/MAL-2025-141334/): Malicious code in css-minimizer-webpack-plugin-transport-spawn-command (npm) (malicious package) - [MAL-2025-141333](https://insights.sbomify.com/MAL-2025-141333/): Malicious code in css-minimizer-webpack-plugin-scripts-procyon-passport (npm) (malicious package) - [MAL-2025-141332](https://insights.sbomify.com/MAL-2025-141332/): Malicious code in css-minimizer-webpack-plugin-pm2-react-bootstrap-webdriverio (npm) (malicious package) - [MAL-2025-141331](https://insights.sbomify.com/MAL-2025-141331/): Malicious code in css-minimizer-webpack-plugin-perseus-phoebe-betelgeuse (npm) (malicious package) - [MAL-2025-141330](https://insights.sbomify.com/MAL-2025-141330/): Malicious code in css-minimizer-webpack-plugin-nextjs-ignite-pipe (npm) (malicious package) - [MAL-2025-14133](https://insights.sbomify.com/MAL-2025-14133/): Malicious code in aeynrshfkolcvpjq (npm) (malicious package) - [MAL-2025-141329](https://insights.sbomify.com/MAL-2025-141329/): Malicious code in css-minimizer-webpack-plugin-meissa-shelljs-tailwindcss (npm) (malicious package) - [MAL-2025-141328](https://insights.sbomify.com/MAL-2025-141328/): Malicious code in css-minimizer-webpack-plugin-hyperion-websockets-husky (npm) (malicious package) - [MAL-2025-141327](https://insights.sbomify.com/MAL-2025-141327/): Malicious code in css-minimizer-webpack-plugin-helmet-yonder-version (npm) (malicious package) - [MAL-2025-141326](https://insights.sbomify.com/MAL-2025-141326/): Malicious code in css-minimizer-webpack-plugin-ganymede-quark-yaml (npm) (malicious package) - [MAL-2025-141325](https://insights.sbomify.com/MAL-2025-141325/): Malicious code in css-minimizer-webpack-plugin-eleventy-writable-public (npm) (malicious package) - [MAL-2025-141324](https://insights.sbomify.com/MAL-2025-141324/): Malicious code in css-minimizer-webpack-plugin-docusaurus-react-bootstrap-dagda (npm) (malicious package) - [MAL-2025-141323](https://insights.sbomify.com/MAL-2025-141323/): Malicious code in css-minimizer-webpack-plugin-command-hyperion-typeorm (npm) (malicious package) - [MAL-2025-141322](https://insights.sbomify.com/MAL-2025-141322/): Malicious code in css-minimizer-webpack-plugin-comet-impulse-loop (npm) (malicious package) - [MAL-2025-141321](https://insights.sbomify.com/MAL-2025-141321/): Malicious code in css-minimizer-webpack-plugin-bellatrix-jabbah-commitlint-config-angular (npm) (malicious package) - [MAL-2025-141320](https://insights.sbomify.com/MAL-2025-141320/): Malicious code in css-minimizer-webpack-plugin-babel-shelljs-convict (npm) (malicious package) - [MAL-2025-14132](https://insights.sbomify.com/MAL-2025-14132/): Malicious code in aetherlog (npm) (malicious package) - [MAL-2025-141319](https://insights.sbomify.com/MAL-2025-141319/): Malicious code in css-loader-terser-rimraf-lyra (npm) (malicious package) - [MAL-2025-141318](https://insights.sbomify.com/MAL-2025-141318/): Malicious code in css-loader-tailwindcss-sadr-prompts (npm) (malicious package) - [MAL-2025-141317](https://insights.sbomify.com/MAL-2025-141317/): Malicious code in css-loader-spinner-hermes-hydra (npm) (malicious package) - [MAL-2025-141316](https://insights.sbomify.com/MAL-2025-141316/): Malicious code in css-loader-soap-elektra-andromeda (npm) (malicious package) - [MAL-2025-141315](https://insights.sbomify.com/MAL-2025-141315/): Malicious code in css-loader-reveal-md-non-blocking-nightwatch (npm) (malicious package) - [MAL-2025-141314](https://insights.sbomify.com/MAL-2025-141314/): Malicious code in css-loader-relay-element-ui-gulp (npm) (malicious package) - [MAL-2025-141313](https://insights.sbomify.com/MAL-2025-141313/): Malicious code in css-loader-quantum-eslint-betelgeuse (npm) (malicious package) - [MAL-2025-141312](https://insights.sbomify.com/MAL-2025-141312/): Malicious code in css-loader-procyon-promise-taurus (npm) (malicious package) - [MAL-2025-141311](https://insights.sbomify.com/MAL-2025-141311/): Malicious code in css-loader-pm2-meissa-gravity (npm) (malicious package) - [MAL-2025-141310](https://insights.sbomify.com/MAL-2025-141310/): Malicious code in css-loader-phenomic-phoebe-node-config (npm) (malicious package) - [MAL-2025-14131](https://insights.sbomify.com/MAL-2025-14131/): Malicious code in aether-rollup-triton-fetch (npm) (malicious package) - [MAL-2025-141309](https://insights.sbomify.com/MAL-2025-141309/): Malicious code in css-loader-octans-acamar-colors (npm) (malicious package) - [MAL-2025-141308](https://insights.sbomify.com/MAL-2025-141308/): Malicious code in css-loader-metalsmith-reveal-md-zenobia (npm) (malicious package) - [MAL-2025-141307](https://insights.sbomify.com/MAL-2025-141307/): Malicious code in css-loader-metalsmith-rest-tailwindcss (npm) (malicious package) - [MAL-2025-141306](https://insights.sbomify.com/MAL-2025-141306/): Malicious code in css-loader-kaus-prettier-plugin-markdown-schema (npm) (malicious package) - [MAL-2025-141305](https://insights.sbomify.com/MAL-2025-141305/): Malicious code in css-loader-hapi-webpack-library (npm) (malicious package) - [MAL-2025-141304](https://insights.sbomify.com/MAL-2025-141304/): Malicious code in css-loader-gridsome-postcss-loader-yaml (npm) (malicious package) - [MAL-2025-141303](https://insights.sbomify.com/MAL-2025-141303/): Malicious code in css-loader-gatsby-oberon-got (npm) (malicious package) - [MAL-2025-141302](https://insights.sbomify.com/MAL-2025-141302/): Malicious code in css-loader-flare-koa-react-bootstrap (npm) (malicious package) - [MAL-2025-141301](https://insights.sbomify.com/MAL-2025-141301/): Malicious code in css-loader-dione-barnard-slidev (npm) (malicious package) - [MAL-2025-141300](https://insights.sbomify.com/MAL-2025-141300/): Malicious code in css-loader-cygnus-restart-cluster (npm) (malicious package) - [MAL-2025-14130](https://insights.sbomify.com/MAL-2025-14130/): Malicious code in aestest (npm) (malicious package) - [MAL-2025-1413](https://insights.sbomify.com/MAL-2025-1413/): Malicious code in fameex (npm) (malicious package) - [MAL-2025-141299](https://insights.sbomify.com/MAL-2025-141299/): Malicious code in csrf-winston-koa-nextjs (npm) (malicious package) - [MAL-2025-141298](https://insights.sbomify.com/MAL-2025-141298/): Malicious code in csrf-uglify-js-library-procyon (npm) (malicious package) - [MAL-2025-141297](https://insights.sbomify.com/MAL-2025-141297/): Malicious code in csrf-sirius-webpack-iota (npm) (malicious package) - [MAL-2025-141296](https://insights.sbomify.com/MAL-2025-141296/): Malicious code in csrf-rollup-plugin-halley-lynx (npm) (malicious package) - [MAL-2025-141295](https://insights.sbomify.com/MAL-2025-141295/): Malicious code in csrf-pulsar-config-centaurus (npm) (malicious package) - [MAL-2025-141294](https://insights.sbomify.com/MAL-2025-141294/): Malicious code in csrf-process-janus-package (npm) (malicious package) - [MAL-2025-141293](https://insights.sbomify.com/MAL-2025-141293/): Malicious code in csrf-postcss-dependencies-upgrade (npm) (malicious package) - [MAL-2025-141292](https://insights.sbomify.com/MAL-2025-141292/): Malicious code in csrf-oauth-zenobia-build (npm) (malicious package) - [MAL-2025-141291](https://insights.sbomify.com/MAL-2025-141291/): Malicious code in csrf-nconf-halley-jest (npm) (malicious package) - [MAL-2025-141290](https://insights.sbomify.com/MAL-2025-141290/): Malicious code in csrf-miranda-miranda-lynx (npm) (malicious package) - [MAL-2025-14129](https://insights.sbomify.com/MAL-2025-14129/): Malicious code in aertcuhmnpkyqxjf (npm) (malicious package) - [MAL-2025-141289](https://insights.sbomify.com/MAL-2025-141289/): Malicious code in csrf-meissa-nodemon-neptune (npm) (malicious package) - [MAL-2025-141288](https://insights.sbomify.com/MAL-2025-141288/): Malicious code in csrf-levels-terser-zephyr (npm) (malicious package) - [MAL-2025-141287](https://insights.sbomify.com/MAL-2025-141287/): Malicious code in csrf-izar-resolvers-nightmare (npm) (malicious package) - [MAL-2025-141286](https://insights.sbomify.com/MAL-2025-141286/): Malicious code in csrf-init-apollo-hyperion (npm) (malicious package) - [MAL-2025-141285](https://insights.sbomify.com/MAL-2025-141285/): Malicious code in csrf-html-webpack-plugin-postgres-webdriver-manager (npm) (malicious package) - [MAL-2025-141284](https://insights.sbomify.com/MAL-2025-141284/): Malicious code in csrf-gulp-standard-commitlint (npm) (malicious package) - [MAL-2025-141283](https://insights.sbomify.com/MAL-2025-141283/): Malicious code in csrf-fornax-xanthus-auth (npm) (malicious package) - [MAL-2025-141282](https://insights.sbomify.com/MAL-2025-141282/): Malicious code in csrf-cressida-graphql-rest (npm) (malicious package) - [MAL-2025-141281](https://insights.sbomify.com/MAL-2025-141281/): Malicious code in csrf-commitlint-config-angular-axios-lacerta (npm) (malicious package) - [MAL-2025-141280](https://insights.sbomify.com/MAL-2025-141280/): Malicious code in csrf-blitz-canopus-farout (npm) (malicious package) - [MAL-2025-14128](https://insights.sbomify.com/MAL-2025-14128/): Malicious code in aerisjs (npm) (malicious package) - [MAL-2025-141279](https://insights.sbomify.com/MAL-2025-141279/): Malicious code in csrf-betelgeuse-cygnus-meissa (npm) (malicious package) - [MAL-2025-141278](https://insights.sbomify.com/MAL-2025-141278/): Malicious code in cross-env-zenith-dotenv-safe-cypress (npm) (malicious package) - [MAL-2025-141277](https://insights.sbomify.com/MAL-2025-141277/): Malicious code in cross-env-yaml-meteor-aurora (npm) (malicious package) - [MAL-2025-141276](https://insights.sbomify.com/MAL-2025-141276/): Malicious code in cross-env-yakutsk-octans-graphql (npm) (malicious package) - [MAL-2025-141275](https://insights.sbomify.com/MAL-2025-141275/): Malicious code in cross-env-umbriel-pyxis-nashira (npm) (malicious package) - [MAL-2025-141274](https://insights.sbomify.com/MAL-2025-141274/): Malicious code in cross-env-tailwindcss-got-corvus (npm) (malicious package) - [MAL-2025-141273](https://insights.sbomify.com/MAL-2025-141273/): Malicious code in cross-env-soap-winston-fomalhaut (npm) (malicious package) - [MAL-2025-141272](https://insights.sbomify.com/MAL-2025-141272/): Malicious code in cross-env-semantic-ui-dependencies-europa (npm) (malicious package) - [MAL-2025-141271](https://insights.sbomify.com/MAL-2025-141271/): Malicious code in cross-env-scorpius-octans-vulcan (npm) (malicious package) - [MAL-2025-141270](https://insights.sbomify.com/MAL-2025-141270/): Malicious code in cross-env-sails-pino-pretty-neptune (npm) (malicious package) - [MAL-2025-14127](https://insights.sbomify.com/MAL-2025-14127/): Malicious code in aeqbdkzxvsthfuoc (npm) (malicious package) - [MAL-2025-141269](https://insights.sbomify.com/MAL-2025-141269/): Malicious code in cross-env-rocket-delphinus-betelgeuse (npm) (malicious package) - [MAL-2025-141268](https://insights.sbomify.com/MAL-2025-141268/): Malicious code in cross-env-restart-ophiuchus-google (npm) (malicious package) - [MAL-2025-141267](https://insights.sbomify.com/MAL-2025-141267/): Malicious code in cross-env-request-markdown-magellan (npm) (malicious package) - [MAL-2025-141266](https://insights.sbomify.com/MAL-2025-141266/): Malicious code in cross-env-quantum-nightwatch-bunyan (npm) (malicious package) - [MAL-2025-141265](https://insights.sbomify.com/MAL-2025-141265/): Malicious code in cross-env-prompts-equinox-mdx (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1473/