# Vulnerabilities published in 2025


- [MAL-2025-140364](https://insights.sbomify.com/MAL-2025-140364/): Malicious code in canopus-lint-altair-cross-env (npm) (malicious package)
- [MAL-2025-140363](https://insights.sbomify.com/MAL-2025-140363/): Malicious code in canopus-leda-postgres-cassini (npm) (malicious package)
- [MAL-2025-140362](https://insights.sbomify.com/MAL-2025-140362/): Malicious code in canopus-kronos-arcturus-toml (npm) (malicious package)
- [MAL-2025-140361](https://insights.sbomify.com/MAL-2025-140361/): Malicious code in canopus-kastra-arcturus-phoenix (npm) (malicious package)
- [MAL-2025-140360](https://insights.sbomify.com/MAL-2025-140360/): Malicious code in canopus-ini-carpo-standard (npm) (malicious package)
- [MAL-2025-14036](https://insights.sbomify.com/MAL-2025-14036/): Malicious code in acta365 (npm) (malicious package)
- [MAL-2025-140359](https://insights.sbomify.com/MAL-2025-140359/): Malicious code in canopus-hermes-postcss-loader-xanthus (npm) (malicious package)
- [MAL-2025-140358](https://insights.sbomify.com/MAL-2025-140358/): Malicious code in canopus-config-karma-dagda (npm) (malicious package)
- [MAL-2025-140357](https://insights.sbomify.com/MAL-2025-140357/): Malicious code in canopus-ceres-start-blaze (npm) (malicious package)
- [MAL-2025-140356](https://insights.sbomify.com/MAL-2025-140356/): Malicious code in canopus-centauri-yildun-framework (npm) (malicious package)
- [MAL-2025-140355](https://insights.sbomify.com/MAL-2025-140355/): Malicious code in callisto-zephyr-ini-sirius (npm) (malicious package)
- [MAL-2025-140354](https://insights.sbomify.com/MAL-2025-140354/): Malicious code in callisto-winston-socketio-dependencies (npm) (malicious package)
- [MAL-2025-140353](https://insights.sbomify.com/MAL-2025-140353/): Malicious code in callisto-titan-arcturus-buffer (npm) (malicious package)
- [MAL-2025-140352](https://insights.sbomify.com/MAL-2025-140352/): Malicious code in callisto-spectron-hercules-cypress (npm) (malicious package)
- [MAL-2025-140351](https://insights.sbomify.com/MAL-2025-140351/): Malicious code in callisto-spawn-parcel-jwt (npm) (malicious package)
- [MAL-2025-140350](https://insights.sbomify.com/MAL-2025-140350/): Malicious code in callisto-redis-miranda-uglify-js (npm) (malicious package)
- [MAL-2025-14035](https://insights.sbomify.com/MAL-2025-14035/): Malicious code in acrobatt (npm) (malicious package)
- [MAL-2025-140349](https://insights.sbomify.com/MAL-2025-140349/): Malicious code in callisto-readable-europa-pegasus (npm) (malicious package)
- [MAL-2025-140348](https://insights.sbomify.com/MAL-2025-140348/): Malicious code in callisto-quasar-dependencies-jekyll (npm) (malicious package)
- [MAL-2025-140347](https://insights.sbomify.com/MAL-2025-140347/): Malicious code in callisto-quark-electron-builder-markdown-pdf (npm) (malicious package)
- [MAL-2025-140346](https://insights.sbomify.com/MAL-2025-140346/): Malicious code in callisto-public-hyperion-meteor (npm) (malicious package)
- [MAL-2025-140345](https://insights.sbomify.com/MAL-2025-140345/): Malicious code in callisto-playwright-publish-sagitta (npm) (malicious package)
- [MAL-2025-140344](https://insights.sbomify.com/MAL-2025-140344/): Malicious code in callisto-pipe-sedna-terser (npm) (malicious package)
- [MAL-2025-140343](https://insights.sbomify.com/MAL-2025-140343/): Malicious code in callisto-oauth-rimraf-kinetic (npm) (malicious package)
- [MAL-2025-140342](https://insights.sbomify.com/MAL-2025-140342/): Malicious code in callisto-miranda-commitlint-library (npm) (malicious package)
- [MAL-2025-140341](https://insights.sbomify.com/MAL-2025-140341/): Malicious code in callisto-loglevel-electron-postgres (npm) (malicious package)
- [MAL-2025-140340](https://insights.sbomify.com/MAL-2025-140340/): Malicious code in callisto-levels-subscription-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-14034](https://insights.sbomify.com/MAL-2025-14034/): Malicious code in acornsdk (npm) (malicious package)
- [MAL-2025-140339](https://insights.sbomify.com/MAL-2025-140339/): Malicious code in callisto-less-fomalhaut-materialize (npm) (malicious package)
- [MAL-2025-140338](https://insights.sbomify.com/MAL-2025-140338/): Malicious code in callisto-koa-passport-init (npm) (malicious package)
- [MAL-2025-140337](https://insights.sbomify.com/MAL-2025-140337/): Malicious code in callisto-jwt-fomalhaut-triton (npm) (malicious package)
- [MAL-2025-140336](https://insights.sbomify.com/MAL-2025-140336/): Malicious code in callisto-jsonp-avior-comet (npm) (malicious package)
- [MAL-2025-140335](https://insights.sbomify.com/MAL-2025-140335/): Malicious code in callisto-init-astro-query (npm) (malicious package)
- [MAL-2025-140334](https://insights.sbomify.com/MAL-2025-140334/): Malicious code in callisto-husky-slidev-package (npm) (malicious package)
- [MAL-2025-140333](https://insights.sbomify.com/MAL-2025-140333/): Malicious code in callisto-global-kronos-remark (npm) (malicious package)
- [MAL-2025-140332](https://insights.sbomify.com/MAL-2025-140332/): Malicious code in callisto-fornax-yakutsk-nestjs (npm) (malicious package)
- [MAL-2025-140331](https://insights.sbomify.com/MAL-2025-140331/): Malicious code in callisto-event-tethys-loglevel (npm) (malicious package)
- [MAL-2025-140330](https://insights.sbomify.com/MAL-2025-140330/): Malicious code in callisto-envconfig-elektra-jabbah (npm) (malicious package)
- [MAL-2025-14033](https://insights.sbomify.com/MAL-2025-14033/): Malicious code in acorn-ziggurat-9qqq (npm) (malicious package)
- [MAL-2025-140329](https://insights.sbomify.com/MAL-2025-140329/): Malicious code in callisto-dotenv-passport-frontend (npm) (malicious package)
- [MAL-2025-140328](https://insights.sbomify.com/MAL-2025-140328/): Malicious code in callisto-cygnus-supervisor-blitz (npm) (malicious package)
- [MAL-2025-140327](https://insights.sbomify.com/MAL-2025-140327/): Malicious code in callisto-cordelia-winston-webdriver-manager (npm) (malicious package)
- [MAL-2025-140326](https://insights.sbomify.com/MAL-2025-140326/): Malicious code in callisto-cli-galaxy-centauri (npm) (malicious package)
- [MAL-2025-140325](https://insights.sbomify.com/MAL-2025-140325/): Malicious code in callisto-chakra-ui-nova-non-blocking (npm) (malicious package)
- [MAL-2025-140324](https://insights.sbomify.com/MAL-2025-140324/): Malicious code in callisto-async-readable-ignite (npm) (malicious package)
- [MAL-2025-140323](https://insights.sbomify.com/MAL-2025-140323/): Malicious code in callback-webpack-halley-eridanus (npm) (malicious package)
- [MAL-2025-140322](https://insights.sbomify.com/MAL-2025-140322/): Malicious code in callback-webdriver-mocha-apex-fusion (npm) (malicious package)
- [MAL-2025-140321](https://insights.sbomify.com/MAL-2025-140321/): Malicious code in callback-venus-flare-charon (npm) (malicious package)
- [MAL-2025-140320](https://insights.sbomify.com/MAL-2025-140320/): Malicious code in callback-vega-ganymede-yildun (npm) (malicious package)
- [MAL-2025-14032](https://insights.sbomify.com/MAL-2025-14032/): Malicious code in acorn-zenith-ggw565-project (npm) (malicious package)
- [MAL-2025-140319](https://insights.sbomify.com/MAL-2025-140319/): Malicious code in callback-transform-zenith-node-config (npm) (malicious package)
- [MAL-2025-140318](https://insights.sbomify.com/MAL-2025-140318/): Malicious code in callback-spica-rollup-schema (npm) (malicious package)
- [MAL-2025-140317](https://insights.sbomify.com/MAL-2025-140317/): Malicious code in callback-shelljs-antares-pavo (npm) (malicious package)
- [MAL-2025-140316](https://insights.sbomify.com/MAL-2025-140316/): Malicious code in callback-semantic-ui-pulsar-telesto (npm) (malicious package)
- [MAL-2025-140315](https://insights.sbomify.com/MAL-2025-140315/): Malicious code in callback-selenium-jekyll-leda (npm) (malicious package)
- [MAL-2025-140314](https://insights.sbomify.com/MAL-2025-140314/): Malicious code in callback-run-script-html-webpack-plugin-server (npm) (malicious package)
- [MAL-2025-140313](https://insights.sbomify.com/MAL-2025-140313/): Malicious code in callback-reveal-md-xml-shelljs (npm) (malicious package)
- [MAL-2025-140312](https://insights.sbomify.com/MAL-2025-140312/): Malicious code in callback-restart-spawn-cordelia (npm) (malicious package)
- [MAL-2025-140311](https://insights.sbomify.com/MAL-2025-140311/): Malicious code in callback-request-subscription-titan (npm) (malicious package)
- [MAL-2025-140310](https://insights.sbomify.com/MAL-2025-140310/): Malicious code in callback-request-server-node-config (npm) (malicious package)
- [MAL-2025-14031](https://insights.sbomify.com/MAL-2025-14031/): Malicious code in acorn-zenith-8zk2 (npm) (malicious package)
- [MAL-2025-140309](https://insights.sbomify.com/MAL-2025-140309/): Malicious code in callback-pyxis-jovian-ora (npm) (malicious package)
- [MAL-2025-140308](https://insights.sbomify.com/MAL-2025-140308/): Malicious code in callback-puppeteer-janus-global (npm) (malicious package)
- [MAL-2025-140307](https://insights.sbomify.com/MAL-2025-140307/): Malicious code in callback-process-upgrade-auth (npm) (malicious package)
- [MAL-2025-140306](https://insights.sbomify.com/MAL-2025-140306/): Malicious code in callback-private-tool-dotenv-safe (npm) (malicious package)
- [MAL-2025-140305](https://insights.sbomify.com/MAL-2025-140305/): Malicious code in callback-private-hermes-resolvers (npm) (malicious package)
- [MAL-2025-140304](https://insights.sbomify.com/MAL-2025-140304/): Malicious code in callback-package-tethys-less-loader (npm) (malicious package)
- [MAL-2025-140303](https://insights.sbomify.com/MAL-2025-140303/): Malicious code in callback-package-apollo-chariklo (npm) (malicious package)
- [MAL-2025-140302](https://insights.sbomify.com/MAL-2025-140302/): Malicious code in callback-ora-perseus-sadr (npm) (malicious package)
- [MAL-2025-140301](https://insights.sbomify.com/MAL-2025-140301/): Malicious code in callback-optimize-css-assets-webpack-plugin-indus-markdown (npm) (malicious package)
- [MAL-2025-140300](https://insights.sbomify.com/MAL-2025-140300/): Malicious code in callback-levels-cz-conventional-changelog-cache (npm) (malicious package)
- [MAL-2025-14030](https://insights.sbomify.com/MAL-2025-14030/): Malicious code in acorn-xerus-ttd391-project (npm) (malicious package)
- [MAL-2025-1403](https://insights.sbomify.com/MAL-2025-1403/): Malicious code in coinstore-test (npm) (malicious package)
- [MAL-2025-140299](https://insights.sbomify.com/MAL-2025-140299/): Malicious code in callback-jupiter-indus-procyon (npm) (malicious package)
- [MAL-2025-140298](https://insights.sbomify.com/MAL-2025-140298/): Malicious code in callback-centauri-enif-zephyr (npm) (malicious package)
- [MAL-2025-140297](https://insights.sbomify.com/MAL-2025-140297/): Malicious code in callback-carina-alphard-achernar (npm) (malicious package)
- [MAL-2025-140296](https://insights.sbomify.com/MAL-2025-140296/): Malicious code in callback-bellatrix-dotenv-safe-nextjs (npm) (malicious package)
- [MAL-2025-140295](https://insights.sbomify.com/MAL-2025-140295/): Malicious code in callback-avior-apollo-dorado (npm) (malicious package)
- [MAL-2025-140294](https://insights.sbomify.com/MAL-2025-140294/): Malicious code in callback-apollo-forever-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-140293](https://insights.sbomify.com/MAL-2025-140293/): Malicious code in callback-antd-transport-install (npm) (malicious package)
- [MAL-2025-140292](https://insights.sbomify.com/MAL-2025-140292/): Malicious code in callback-adonis-native-ophiuchus (npm) (malicious package)
- [MAL-2025-140291](https://insights.sbomify.com/MAL-2025-140291/): Malicious code in callback-acamar-meissa-mocha (npm) (malicious package)
- [MAL-2025-140290](https://insights.sbomify.com/MAL-2025-140290/): Malicious code in cache-xo-ini-wolf (npm) (malicious package)
- [MAL-2025-14029](https://insights.sbomify.com/MAL-2025-14029/): Malicious code in acorn-uranium-gfx680-project (npm) (malicious package)
- [MAL-2025-140289](https://insights.sbomify.com/MAL-2025-140289/): Malicious code in cache-xerxes-upgrade-hyperion (npm) (malicious package)
- [MAL-2025-140288](https://insights.sbomify.com/MAL-2025-140288/): Malicious code in cache-webdriver-mocha-await-magellan (npm) (malicious package)
- [MAL-2025-140287](https://insights.sbomify.com/MAL-2025-140287/): Malicious code in cache-wasat-kronos-websockets (npm) (malicious package)
- [MAL-2025-140286](https://insights.sbomify.com/MAL-2025-140286/): Malicious code in cache-telesto-antares-iota (npm) (malicious package)
- [MAL-2025-140285](https://insights.sbomify.com/MAL-2025-140285/): Malicious code in cache-slides-blaze-nightwatch (npm) (malicious package)
- [MAL-2025-140284](https://insights.sbomify.com/MAL-2025-140284/): Malicious code in cache-shelljs-europa-kinetic (npm) (malicious package)
- [MAL-2025-140283](https://insights.sbomify.com/MAL-2025-140283/): Malicious code in cache-semantic-release-uninstall-hapi (npm) (malicious package)
- [MAL-2025-140282](https://insights.sbomify.com/MAL-2025-140282/): Malicious code in cache-procyon-markdown-hermes (npm) (malicious package)
- [MAL-2025-140281](https://insights.sbomify.com/MAL-2025-140281/): Malicious code in cache-postcss-phoebe-xenos (npm) (malicious package)
- [MAL-2025-140280](https://insights.sbomify.com/MAL-2025-140280/): Malicious code in cache-optimize-css-assets-webpack-plugin-winston-mdx (npm) (malicious package)
- [MAL-2025-14028](https://insights.sbomify.com/MAL-2025-14028/): Malicious code in acorn-underpass-0v2r (npm) (malicious package)
- [MAL-2025-140279](https://insights.sbomify.com/MAL-2025-140279/): Malicious code in cache-ophiuchus-nova-atlas (npm) (malicious package)
- [MAL-2025-140278](https://insights.sbomify.com/MAL-2025-140278/): Malicious code in cache-ophiuchus-node-config-browserify (npm) (malicious package)
- [MAL-2025-140277](https://insights.sbomify.com/MAL-2025-140277/): Malicious code in cache-npm-terser-lint (npm) (malicious package)
- [MAL-2025-140276](https://insights.sbomify.com/MAL-2025-140276/): Malicious code in cache-mongodb-oberon-indus (npm) (malicious package)
- [MAL-2025-140275](https://insights.sbomify.com/MAL-2025-140275/): Malicious code in cache-luna-socketio-foundation (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1484/