# Vulnerabilities published in 2025


- [MAL-2025-140544](https://insights.sbomify.com/MAL-2025-140544/): Malicious code in centaurus-eslint-plugin-hapi-electron-builder (npm) (malicious package)
- [MAL-2025-140543](https://insights.sbomify.com/MAL-2025-140543/): Malicious code in centaurus-enif-registry-betelgeuse (npm) (malicious package)
- [MAL-2025-140542](https://insights.sbomify.com/MAL-2025-140542/): Malicious code in centaurus-despina-pipe-oauth (npm) (malicious package)
- [MAL-2025-140541](https://insights.sbomify.com/MAL-2025-140541/): Malicious code in centaurus-bootstrap-callback-webpack (npm) (malicious package)
- [MAL-2025-140540](https://insights.sbomify.com/MAL-2025-140540/): Malicious code in centaurus-arcturus-prettier-metalsmith (npm) (malicious package)
- [MAL-2025-14054](https://insights.sbomify.com/MAL-2025-14054/): Malicious code in activeresource-statsd (npm) (malicious package)
- [MAL-2025-140539](https://insights.sbomify.com/MAL-2025-140539/): Malicious code in centauri-transport-adonis-telesto (npm) (malicious package)
- [MAL-2025-140538](https://insights.sbomify.com/MAL-2025-140538/): Malicious code in centauri-semantic-release-rehype-quark (npm) (malicious package)
- [MAL-2025-140537](https://insights.sbomify.com/MAL-2025-140537/): Malicious code in centauri-selenium-cordelia-browserify (npm) (malicious package)
- [MAL-2025-140536](https://insights.sbomify.com/MAL-2025-140536/): Malicious code in centauri-resolvers-helmet-apollo (npm) (malicious package)
- [MAL-2025-140535](https://insights.sbomify.com/MAL-2025-140535/): Malicious code in centauri-passport-hermes-ignite (npm) (malicious package)
- [MAL-2025-140534](https://insights.sbomify.com/MAL-2025-140534/): Malicious code in centauri-orbit-ophiuchus-aether (npm) (malicious package)
- [MAL-2025-140533](https://insights.sbomify.com/MAL-2025-140533/): Malicious code in centauri-nconf-leda-cors (npm) (malicious package)
- [MAL-2025-140532](https://insights.sbomify.com/MAL-2025-140532/): Malicious code in centauri-nashira-command-proxima (npm) (malicious package)
- [MAL-2025-140531](https://insights.sbomify.com/MAL-2025-140531/): Malicious code in centauri-inquirer-playwright-scripts (npm) (malicious package)
- [MAL-2025-140530](https://insights.sbomify.com/MAL-2025-140530/): Malicious code in centauri-enceladus-playwright-comet (npm) (malicious package)
- [MAL-2025-14053](https://insights.sbomify.com/MAL-2025-14053/): Malicious code in activerecord-rescue_from_duplicate (npm) (malicious package)
- [MAL-2025-140529](https://insights.sbomify.com/MAL-2025-140529/): Malicious code in centauri-enceladus-fork-perseus (npm) (malicious package)
- [MAL-2025-140528](https://insights.sbomify.com/MAL-2025-140528/): Malicious code in centauri-element-ui-stream-sass-loader (npm) (malicious package)
- [MAL-2025-140527](https://insights.sbomify.com/MAL-2025-140527/): Malicious code in centauri-delphinus-cypress-spinner (npm) (malicious package)
- [MAL-2025-140526](https://insights.sbomify.com/MAL-2025-140526/): Malicious code in centauri-cosmos-sirius-soap (npm) (malicious package)
- [MAL-2025-140525](https://insights.sbomify.com/MAL-2025-140525/): Malicious code in centauri-configstore-postcss-mutation (npm) (malicious package)
- [MAL-2025-140524](https://insights.sbomify.com/MAL-2025-140524/): Malicious code in centauri-chakra-ui-upgrade-adonis (npm) (malicious package)
- [MAL-2025-140523](https://insights.sbomify.com/MAL-2025-140523/): Malicious code in centauri-achernar-xo-mui (npm) (malicious package)
- [MAL-2025-140522](https://insights.sbomify.com/MAL-2025-140522/): Malicious code in celeste-rocket-nightwatch-xo (npm) (malicious package)
- [MAL-2025-140521](https://insights.sbomify.com/MAL-2025-140521/): Malicious code in celeste-rimraf-despina-halley (npm) (malicious package)
- [MAL-2025-140520](https://insights.sbomify.com/MAL-2025-140520/): Malicious code in celeste-remark-readable-rocket (npm) (malicious package)
- [MAL-2025-14052](https://insights.sbomify.com/MAL-2025-14052/): Malicious code in activerecord-pedantmysql2-adapter (npm) (malicious package)
- [MAL-2025-140519](https://insights.sbomify.com/MAL-2025-140519/): Malicious code in celeste-pavo-sagitta-development (npm) (malicious package)
- [MAL-2025-140518](https://insights.sbomify.com/MAL-2025-140518/): Malicious code in celeste-optimize-css-assets-webpack-plugin-rollup-europa (npm) (malicious package)
- [MAL-2025-140517](https://insights.sbomify.com/MAL-2025-140517/): Malicious code in celeste-optimize-css-assets-webpack-plugin-bulma-ini (npm) (malicious package)
- [MAL-2025-140516](https://insights.sbomify.com/MAL-2025-140516/): Malicious code in celeste-ophiuchus-norma-loglevel (npm) (malicious package)
- [MAL-2025-140515](https://insights.sbomify.com/MAL-2025-140515/): Malicious code in celeste-nebula-less-loader-build (npm) (malicious package)
- [MAL-2025-140514](https://insights.sbomify.com/MAL-2025-140514/): Malicious code in celeste-mutation-private-rollup-plugin (npm) (malicious package)
- [MAL-2025-140513](https://insights.sbomify.com/MAL-2025-140513/): Malicious code in celeste-markdown-event-nconf (npm) (malicious package)
- [MAL-2025-140512](https://insights.sbomify.com/MAL-2025-140512/): Malicious code in celeste-loop-nightwatch-centaurus (npm) (malicious package)
- [MAL-2025-140511](https://insights.sbomify.com/MAL-2025-140511/): Malicious code in celeste-juno-restart-tethys (npm) (malicious package)
- [MAL-2025-140510](https://insights.sbomify.com/MAL-2025-140510/): Malicious code in celeste-iota-ophiuchus-epimetheus (npm) (malicious package)
- [MAL-2025-14051](https://insights.sbomify.com/MAL-2025-14051/): Malicious code in activerecord-firewall (npm) (malicious package)
- [MAL-2025-140509](https://insights.sbomify.com/MAL-2025-140509/): Malicious code in celeste-impulse-private-phoenix (npm) (malicious package)
- [MAL-2025-140508](https://insights.sbomify.com/MAL-2025-140508/): Malicious code in celeste-hexo-auth-ophiuchus (npm) (malicious package)
- [MAL-2025-140507](https://insights.sbomify.com/MAL-2025-140507/): Malicious code in celeste-gulp-quito-cluster (npm) (malicious package)
- [MAL-2025-140506](https://insights.sbomify.com/MAL-2025-140506/): Malicious code in celeste-forever-bootstrap-hexo (npm) (malicious package)
- [MAL-2025-140505](https://insights.sbomify.com/MAL-2025-140505/): Malicious code in celeste-cressida-sirius-cli (npm) (malicious package)
- [MAL-2025-140504](https://insights.sbomify.com/MAL-2025-140504/): Malicious code in celeste-config-selenium-package (npm) (malicious package)
- [MAL-2025-140503](https://insights.sbomify.com/MAL-2025-140503/): Malicious code in celeste-cli-uglify-js-update (npm) (malicious package)
- [MAL-2025-140502](https://insights.sbomify.com/MAL-2025-140502/): Malicious code in celeste-astro-corvus-docusaurus (npm) (malicious package)
- [MAL-2025-140501](https://insights.sbomify.com/MAL-2025-140501/): Malicious code in celeste-algol-jwt-csrf (npm) (malicious package)
- [MAL-2025-140500](https://insights.sbomify.com/MAL-2025-140500/): Malicious code in castor-yonder-prettier-plugin-markdown-kronos (npm) (malicious package)
- [MAL-2025-14050](https://insights.sbomify.com/MAL-2025-14050/): Malicious code in activerecord-databasevalidations (npm) (malicious package)
- [MAL-2025-1405](https://insights.sbomify.com/MAL-2025-1405/): Malicious code in coinw-dev (npm) (malicious package)
- [MAL-2025-140499](https://insights.sbomify.com/MAL-2025-140499/): Malicious code in castor-xo-process-yildun (npm) (malicious package)
- [MAL-2025-140498](https://insights.sbomify.com/MAL-2025-140498/): Malicious code in castor-weywot-kinetic-chalk (npm) (malicious package)
- [MAL-2025-140497](https://insights.sbomify.com/MAL-2025-140497/): Malicious code in castor-webdriverio-fornax-release-it (npm) (malicious package)
- [MAL-2025-140496](https://insights.sbomify.com/MAL-2025-140496/): Malicious code in castor-spinner-async-pulsar (npm) (malicious package)
- [MAL-2025-140495](https://insights.sbomify.com/MAL-2025-140495/): Malicious code in castor-soap-venus-adonis (npm) (malicious package)
- [MAL-2025-140494](https://insights.sbomify.com/MAL-2025-140494/): Malicious code in castor-reveal-md-react-bootstrap-soap (npm) (malicious package)
- [MAL-2025-140493](https://insights.sbomify.com/MAL-2025-140493/): Malicious code in castor-rest-orbit-xml (npm) (malicious package)
- [MAL-2025-140492](https://insights.sbomify.com/MAL-2025-140492/): Malicious code in castor-procyon-nova-development (npm) (malicious package)
- [MAL-2025-140491](https://insights.sbomify.com/MAL-2025-140491/): Malicious code in castor-ophiuchus-socketio-puppeteer (npm) (malicious package)
- [MAL-2025-140490](https://insights.sbomify.com/MAL-2025-140490/): Malicious code in castor-oberon-ursa-indus (npm) (malicious package)
- [MAL-2025-14049](https://insights.sbomify.com/MAL-2025-14049/): Malicious code in activepip (npm) (malicious package)
- [MAL-2025-140489](https://insights.sbomify.com/MAL-2025-140489/): Malicious code in castor-nashira-grunt-foundation (npm) (malicious package)
- [MAL-2025-140488](https://insights.sbomify.com/MAL-2025-140488/): Malicious code in castor-markdownlint-semantic-ui-neptune (npm) (malicious package)
- [MAL-2025-140487](https://insights.sbomify.com/MAL-2025-140487/): Malicious code in castor-leda-init-colors (npm) (malicious package)
- [MAL-2025-140486](https://insights.sbomify.com/MAL-2025-140486/): Malicious code in castor-kronos-jwt-convict (npm) (malicious package)
- [MAL-2025-140485](https://insights.sbomify.com/MAL-2025-140485/): Malicious code in castor-hyperion-semantic-release-fusion (npm) (malicious package)
- [MAL-2025-140484](https://insights.sbomify.com/MAL-2025-140484/): Malicious code in castor-fetch-webdriver-manager-mini-css-extract-plugin (npm) (malicious package)
- [MAL-2025-140483](https://insights.sbomify.com/MAL-2025-140483/): Malicious code in castor-cypress-figures-betelgeuse (npm) (malicious package)
- [MAL-2025-140482](https://insights.sbomify.com/MAL-2025-140482/): Malicious code in castor-cordelia-neptune-webpack (npm) (malicious package)
- [MAL-2025-140481](https://insights.sbomify.com/MAL-2025-140481/): Malicious code in castor-andromeda-spawn-gulp (npm) (malicious package)
- [MAL-2025-140480](https://insights.sbomify.com/MAL-2025-140480/): Malicious code in castor-alphard-sirius-cordelia (npm) (malicious package)
- [MAL-2025-14048](https://insights.sbomify.com/MAL-2025-14048/): Malicious code in activephp (npm) (malicious package)
- [MAL-2025-140479](https://insights.sbomify.com/MAL-2025-140479/): Malicious code in cassini-winston-helmet-juno (npm) (malicious package)
- [MAL-2025-140478](https://insights.sbomify.com/MAL-2025-140478/): Malicious code in cassini-uglify-js-terser-webpack-plugin-request (npm) (malicious package)
- [MAL-2025-140477](https://insights.sbomify.com/MAL-2025-140477/): Malicious code in cassini-titan-dotenv-babel (npm) (malicious package)
- [MAL-2025-140476](https://insights.sbomify.com/MAL-2025-140476/): Malicious code in cassini-taurus-init-eris (npm) (malicious package)
- [MAL-2025-140475](https://insights.sbomify.com/MAL-2025-140475/): Malicious code in cassini-repository-miranda-nightmare (npm) (malicious package)
- [MAL-2025-140474](https://insights.sbomify.com/MAL-2025-140474/): Malicious code in cassini-puppeteer-spica-cassini (npm) (malicious package)
- [MAL-2025-140473](https://insights.sbomify.com/MAL-2025-140473/): Malicious code in cassini-optimize-css-assets-webpack-plugin-callback-ignite (npm) (malicious package)
- [MAL-2025-140472](https://insights.sbomify.com/MAL-2025-140472/): Malicious code in cassini-nebula-sequelize-tool (npm) (malicious package)
- [MAL-2025-140471](https://insights.sbomify.com/MAL-2025-140471/): Malicious code in cassini-native-blitz-bunyan (npm) (malicious package)
- [MAL-2025-140470](https://insights.sbomify.com/MAL-2025-140470/): Malicious code in cassini-mensa-kastra-loopback (npm) (malicious package)
- [MAL-2025-14047](https://insights.sbomify.com/MAL-2025-14047/): Malicious code in activemerchant (npm) (malicious package)
- [MAL-2025-140469](https://insights.sbomify.com/MAL-2025-140469/): Malicious code in cassini-meissa-neptune-acamar (npm) (malicious package)
- [MAL-2025-140468](https://insights.sbomify.com/MAL-2025-140468/): Malicious code in cassini-koa-nuxtjs-eslint-plugin (npm) (malicious package)
- [MAL-2025-140467](https://insights.sbomify.com/MAL-2025-140467/): Malicious code in cassini-hyperion-fusion-postcss (npm) (malicious package)
- [MAL-2025-140466](https://insights.sbomify.com/MAL-2025-140466/): Malicious code in cassini-hexo-buffer-altair (npm) (malicious package)
- [MAL-2025-140465](https://insights.sbomify.com/MAL-2025-140465/): Malicious code in cassini-hapi-prettier-stylelint-configstore (npm) (malicious package)
- [MAL-2025-140464](https://insights.sbomify.com/MAL-2025-140464/): Malicious code in cassini-epimetheus-terser-reveal-md (npm) (malicious package)
- [MAL-2025-140463](https://insights.sbomify.com/MAL-2025-140463/): Malicious code in cassini-dependencies-leda-sequelize (npm) (malicious package)
- [MAL-2025-140462](https://insights.sbomify.com/MAL-2025-140462/): Malicious code in cassini-cors-postgres-antares (npm) (malicious package)
- [MAL-2025-140461](https://insights.sbomify.com/MAL-2025-140461/): Malicious code in cassini-cors-concurrently-nuxtjs (npm) (malicious package)
- [MAL-2025-140460](https://insights.sbomify.com/MAL-2025-140460/): Malicious code in cassini-concurrently-library-ariel (npm) (malicious package)
- [MAL-2025-14046](https://insights.sbomify.com/MAL-2025-14046/): Malicious code in activeextract (npm) (malicious package)
- [MAL-2025-140459](https://insights.sbomify.com/MAL-2025-140459/): Malicious code in cassini-bulma-process-materialize (npm) (malicious package)
- [MAL-2025-140458](https://insights.sbomify.com/MAL-2025-140458/): Malicious code in cassini-barnard-postcss-odin (npm) (malicious package)
- [MAL-2025-140457](https://insights.sbomify.com/MAL-2025-140457/): Malicious code in cassini-auth-phoebe-venus (npm) (malicious package)
- [MAL-2025-140456](https://insights.sbomify.com/MAL-2025-140456/): Malicious code in cassini-antares-zenobia-run-script (npm) (malicious package)
- [MAL-2025-140455](https://insights.sbomify.com/MAL-2025-140455/): Malicious code in carpo-typeorm-playwright-rimraf (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1482/