# Vulnerabilities published in 2025 - [MAL-2025-140274](https://insights.sbomify.com/MAL-2025-140274/): Malicious code in cache-jekyll-pavo-centaurus (npm) (malicious package) - [MAL-2025-140273](https://insights.sbomify.com/MAL-2025-140273/): Malicious code in cache-jasmine-delphinus-fornax (npm) (malicious package) - [MAL-2025-140272](https://insights.sbomify.com/MAL-2025-140272/): Malicious code in cache-halley-ini-apollo (npm) (malicious package) - [MAL-2025-140271](https://insights.sbomify.com/MAL-2025-140271/): Malicious code in cache-galaxy-titan-ursa (npm) (malicious package) - [MAL-2025-140270](https://insights.sbomify.com/MAL-2025-140270/): Malicious code in cache-eridanus-auth-perseus (npm) (malicious package) - [MAL-2025-14027](https://insights.sbomify.com/MAL-2025-14027/): Malicious code in acorn-redshift-ai8b (npm) (malicious package) - [MAL-2025-140269](https://insights.sbomify.com/MAL-2025-140269/): Malicious code in cache-cz-conventional-changelog-meissa-express (npm) (malicious package) - [MAL-2025-140268](https://insights.sbomify.com/MAL-2025-140268/): Malicious code in cache-chariklo-gatsby-arcturus (npm) (malicious package) - [MAL-2025-140267](https://insights.sbomify.com/MAL-2025-140267/): Malicious code in cache-chakra-ui-leda-cygnus (npm) (malicious package) - [MAL-2025-140266](https://insights.sbomify.com/MAL-2025-140266/): Malicious code in cache-centaurus-dagda-centaurus (npm) (malicious package) - [MAL-2025-140265](https://insights.sbomify.com/MAL-2025-140265/): Malicious code in cache-centauri-cz-conventional-changelog-upgrade (npm) (malicious package) - [MAL-2025-140264](https://insights.sbomify.com/MAL-2025-140264/): Malicious code in cache-build-commitlint-leda (npm) (malicious package) - [MAL-2025-140263](https://insights.sbomify.com/MAL-2025-140263/): Malicious code in cache-auth0-ceres-yildun (npm) (malicious package) - [MAL-2025-140262](https://insights.sbomify.com/MAL-2025-140262/): Malicious code in cache-aquarius-nodejs-middleware (npm) (malicious package) - [MAL-2025-140261](https://insights.sbomify.com/MAL-2025-140261/): Malicious code in buzz-invasion (npm) (malicious package) - [MAL-2025-140260](https://insights.sbomify.com/MAL-2025-140260/): Malicious code in busy-chocolate-parakeet (npm) (malicious package) - [MAL-2025-14026](https://insights.sbomify.com/MAL-2025-14026/): Malicious code in acorn-orbit-0iwi (npm) (malicious package) - [MAL-2025-140259](https://insights.sbomify.com/MAL-2025-140259/): Malicious code in bunyan-vuetify-apex-subscription (npm) (malicious package) - [MAL-2025-140258](https://insights.sbomify.com/MAL-2025-140258/): Malicious code in bunyan-umbriel-relay-bellatrix (npm) (malicious package) - [MAL-2025-140257](https://insights.sbomify.com/MAL-2025-140257/): Malicious code in bunyan-spectron-webdriver-levels-node-config (npm) (malicious package) - [MAL-2025-140256](https://insights.sbomify.com/MAL-2025-140256/): Malicious code in bunyan-sirius-nashira-winston (npm) (malicious package) - [MAL-2025-140255](https://insights.sbomify.com/MAL-2025-140255/): Malicious code in bunyan-rollup-configstore-aldebaran (npm) (malicious package) - [MAL-2025-140254](https://insights.sbomify.com/MAL-2025-140254/): Malicious code in bunyan-quasar-centaurus-resolvers (npm) (malicious package) - [MAL-2025-140253](https://insights.sbomify.com/MAL-2025-140253/): Malicious code in bunyan-quark-loop-celeste (npm) (malicious package) - [MAL-2025-140252](https://insights.sbomify.com/MAL-2025-140252/): Malicious code in bunyan-promise-mongoose-restart (npm) (malicious package) - [MAL-2025-140251](https://insights.sbomify.com/MAL-2025-140251/): Malicious code in bunyan-ora-typeorm-terser (npm) (malicious package) - [MAL-2025-140250](https://insights.sbomify.com/MAL-2025-140250/): Malicious code in bunyan-nightwatch-frontend-query (npm) (malicious package) - [MAL-2025-14025](https://insights.sbomify.com/MAL-2025-14025/): Malicious code in acorn-opal-gwa884-project (npm) (malicious package) - [MAL-2025-140249](https://insights.sbomify.com/MAL-2025-140249/): Malicious code in bunyan-nestjs-gravity-atlas (npm) (malicious package) - [MAL-2025-140248](https://insights.sbomify.com/MAL-2025-140248/): Malicious code in bunyan-morgan-gatsby-prompts (npm) (malicious package) - [MAL-2025-140247](https://insights.sbomify.com/MAL-2025-140247/): Malicious code in bunyan-mongoose-protractor-mongodb (npm) (malicious package) - [MAL-2025-140246](https://insights.sbomify.com/MAL-2025-140246/): Malicious code in bunyan-levels-event-yonder (npm) (malicious package) - [MAL-2025-140245](https://insights.sbomify.com/MAL-2025-140245/): Malicious code in bunyan-less-loader-tethys-playwright (npm) (malicious package) - [MAL-2025-140244](https://insights.sbomify.com/MAL-2025-140244/): Malicious code in bunyan-jest-barnard-hyperion (npm) (malicious package) - [MAL-2025-140243](https://insights.sbomify.com/MAL-2025-140243/): Malicious code in bunyan-heka-spawn-json (npm) (malicious package) - [MAL-2025-140242](https://insights.sbomify.com/MAL-2025-140242/): Malicious code in bunyan-gridsome-init-andromeda (npm) (malicious package) - [MAL-2025-140241](https://insights.sbomify.com/MAL-2025-140241/): Malicious code in bunyan-dotenv-parse-variables-bootstrap-wasat (npm) (malicious package) - [MAL-2025-140240](https://insights.sbomify.com/MAL-2025-140240/): Malicious code in bunyan-canopus-kinetic-carpo (npm) (malicious package) - [MAL-2025-14024](https://insights.sbomify.com/MAL-2025-14024/): Malicious code in acorn-mist-hcf992-project (npm) (malicious package) - [MAL-2025-140239](https://insights.sbomify.com/MAL-2025-140239/): Malicious code in bunyan-apex-aether-farout (npm) (malicious package) - [MAL-2025-140238](https://insights.sbomify.com/MAL-2025-140238/): Malicious code in bunyan-airbnb-hercules-protractor (npm) (malicious package) - [MAL-2025-140237](https://insights.sbomify.com/MAL-2025-140237/): Malicious code in bunyan-aether-proxima-slides (npm) (malicious package) - [MAL-2025-140236](https://insights.sbomify.com/MAL-2025-140236/): Malicious code in bulma-xenon-loopback-rate-limiter (npm) (malicious package) - [MAL-2025-140235](https://insights.sbomify.com/MAL-2025-140235/): Malicious code in bulma-webdriver-mocha-chariklo-graphql (npm) (malicious package) - [MAL-2025-140234](https://insights.sbomify.com/MAL-2025-140234/): Malicious code in bulma-venus-test-halley (npm) (malicious package) - [MAL-2025-140233](https://insights.sbomify.com/MAL-2025-140233/): Malicious code in bulma-venus-galaxy-quantum (npm) (malicious package) - [MAL-2025-140232](https://insights.sbomify.com/MAL-2025-140232/): Malicious code in bulma-uninstall-loopback-sass-loader (npm) (malicious package) - [MAL-2025-140231](https://insights.sbomify.com/MAL-2025-140231/): Malicious code in bulma-umbra-jwt-solis (npm) (malicious package) - [MAL-2025-140230](https://insights.sbomify.com/MAL-2025-140230/): Malicious code in bulma-ultra-meteor-uglify-js (npm) (malicious package) - [MAL-2025-14023](https://insights.sbomify.com/MAL-2025-14023/): Malicious code in acorn-kale-wqm971-project (npm) (malicious package) - [MAL-2025-140229](https://insights.sbomify.com/MAL-2025-140229/): Malicious code in bulma-tool-yakutsk-lacerta (npm) (malicious package) - [MAL-2025-140228](https://insights.sbomify.com/MAL-2025-140228/): Malicious code in bulma-sadr-registry-regulus (npm) (malicious package) - [MAL-2025-140227](https://insights.sbomify.com/MAL-2025-140227/): Malicious code in bulma-rest-test-winston (npm) (malicious package) - [MAL-2025-140226](https://insights.sbomify.com/MAL-2025-140226/): Malicious code in bulma-remark-fork-equinox (npm) (malicious package) - [MAL-2025-140225](https://insights.sbomify.com/MAL-2025-140225/): Malicious code in bulma-postgres-fornax-buffer (npm) (malicious package) - [MAL-2025-140224](https://insights.sbomify.com/MAL-2025-140224/): Malicious code in bulma-phoebe-zenith-weywot (npm) (malicious package) - [MAL-2025-140223](https://insights.sbomify.com/MAL-2025-140223/): Malicious code in bulma-package-karma-pegasus (npm) (malicious package) - [MAL-2025-140222](https://insights.sbomify.com/MAL-2025-140222/): Malicious code in bulma-nodemon-lyra-enceladus (npm) (malicious package) - [MAL-2025-140221](https://insights.sbomify.com/MAL-2025-140221/): Malicious code in bulma-nextjs-playwright-superagent (npm) (malicious package) - [MAL-2025-140220](https://insights.sbomify.com/MAL-2025-140220/): Malicious code in bulma-mysql-polaris-config (npm) (malicious package) - [MAL-2025-14022](https://insights.sbomify.com/MAL-2025-14022/): Malicious code in acorn-jupiter-0uhr (npm) (malicious package) - [MAL-2025-140219](https://insights.sbomify.com/MAL-2025-140219/): Malicious code in bulma-mutation-server-ariel (npm) (malicious package) - [MAL-2025-140218](https://insights.sbomify.com/MAL-2025-140218/): Malicious code in bulma-middleware-procyon-buffer (npm) (malicious package) - [MAL-2025-140217](https://insights.sbomify.com/MAL-2025-140217/): Malicious code in bulma-link-vortex-xanadu (npm) (malicious package) - [MAL-2025-140216](https://insights.sbomify.com/MAL-2025-140216/): Malicious code in bulma-jest-native-loop (npm) (malicious package) - [MAL-2025-140215](https://insights.sbomify.com/MAL-2025-140215/): Malicious code in bulma-indus-mui-subscription (npm) (malicious package) - [MAL-2025-140214](https://insights.sbomify.com/MAL-2025-140214/): Malicious code in bulma-halley-gemini-less-loader (npm) (malicious package) - [MAL-2025-140213](https://insights.sbomify.com/MAL-2025-140213/): Malicious code in bulma-gatsby-gravity-css-loader (npm) (malicious package) - [MAL-2025-140212](https://insights.sbomify.com/MAL-2025-140212/): Malicious code in bulma-fornax-sails-supervisor (npm) (malicious package) - [MAL-2025-140211](https://insights.sbomify.com/MAL-2025-140211/): Malicious code in bulma-duplex-sails-blaze (npm) (malicious package) - [MAL-2025-140210](https://insights.sbomify.com/MAL-2025-140210/): Malicious code in bulma-config-kinetic-eslint-config (npm) (malicious package) - [MAL-2025-14021](https://insights.sbomify.com/MAL-2025-14021/): Malicious code in acorn-foxtrot-cohz (npm) (malicious package) - [MAL-2025-140209](https://insights.sbomify.com/MAL-2025-140209/): Malicious code in bulma-command-betelgeuse-hermes (npm) (malicious package) - [MAL-2025-140208](https://insights.sbomify.com/MAL-2025-140208/): Malicious code in bulma-chalk-rate-limiter-hapi (npm) (malicious package) - [MAL-2025-140207](https://insights.sbomify.com/MAL-2025-140207/): Malicious code in bulma-chalk-babel-oberon (npm) (malicious package) - [MAL-2025-140206](https://insights.sbomify.com/MAL-2025-140206/): Malicious code in bulma-buffer-janus-chariklo (npm) (malicious package) - [MAL-2025-140205](https://insights.sbomify.com/MAL-2025-140205/): Malicious code in bulma-blaze-europa-spawn (npm) (malicious package) - [MAL-2025-140204](https://insights.sbomify.com/MAL-2025-140204/): Malicious code in bulma-ariel-cosmos-taurus (npm) (malicious package) - [MAL-2025-140203](https://insights.sbomify.com/MAL-2025-140203/): Malicious code in bulma-aquarius-nestjs-axios (npm) (malicious package) - [MAL-2025-140202](https://insights.sbomify.com/MAL-2025-140202/): Malicious code in bulma-antares-update-node-sass (npm) (malicious package) - [MAL-2025-140201](https://insights.sbomify.com/MAL-2025-140201/): Malicious code in bulma-airbnb-node-sass-frontend (npm) (malicious package) - [MAL-2025-140200](https://insights.sbomify.com/MAL-2025-140200/): Malicious code in bulma-achernar-babel-bulma (npm) (malicious package) - [MAL-2025-14020](https://insights.sbomify.com/MAL-2025-14020/): Malicious code in acorn-evergreen-uki208-project (npm) (malicious package) - [MAL-2025-1402](https://insights.sbomify.com/MAL-2025-1402/): Malicious code in coinstore-main (npm) (malicious package) - [MAL-2025-140199](https://insights.sbomify.com/MAL-2025-140199/): Malicious code in build-yakutsk-relay-kinetic (npm) (malicious package) - [MAL-2025-140198](https://insights.sbomify.com/MAL-2025-140198/): Malicious code in build-wolf-kastra-lint-staged (npm) (malicious package) - [MAL-2025-140197](https://insights.sbomify.com/MAL-2025-140197/): Malicious code in build-webdriver-mocha-ganymede-luna (npm) (malicious package) - [MAL-2025-140196](https://insights.sbomify.com/MAL-2025-140196/): Malicious code in build-ursa-hugo-pulsar (npm) (malicious package) - [MAL-2025-140195](https://insights.sbomify.com/MAL-2025-140195/): Malicious code in build-unuk-uglify-js-configstore (npm) (malicious package) - [MAL-2025-140194](https://insights.sbomify.com/MAL-2025-140194/): Malicious code in build-triton-webpack-wezen (npm) (malicious package) - [MAL-2025-140193](https://insights.sbomify.com/MAL-2025-140193/): Malicious code in build-terser-chariklo-jsonp (npm) (malicious package) - [MAL-2025-140192](https://insights.sbomify.com/MAL-2025-140192/): Malicious code in build-socketio-enif-mutation (npm) (malicious package) - [MAL-2025-140191](https://insights.sbomify.com/MAL-2025-140191/): Malicious code in build-sails-postgres-commitizen (npm) (malicious package) - [MAL-2025-140190](https://insights.sbomify.com/MAL-2025-140190/): Malicious code in build-readable-react-bootstrap-barnard (npm) (malicious package) - [MAL-2025-14019](https://insights.sbomify.com/MAL-2025-14019/): Malicious code in acorn-emerald-kwg033-project (npm) (malicious package) - [MAL-2025-140189](https://insights.sbomify.com/MAL-2025-140189/): Malicious code in build-quantum-alphard-figures (npm) (malicious package) - [MAL-2025-140188](https://insights.sbomify.com/MAL-2025-140188/): Malicious code in build-publish-centaurus-antares (npm) (malicious package) - [MAL-2025-140187](https://insights.sbomify.com/MAL-2025-140187/): Malicious code in build-pino-pretty-frontend-rate-limiter (npm) (malicious package) - [MAL-2025-140186](https://insights.sbomify.com/MAL-2025-140186/): Malicious code in build-non-blocking-tailwindcss-spica (npm) (malicious package) - [MAL-2025-140185](https://insights.sbomify.com/MAL-2025-140185/): Malicious code in build-loopback-transform-publish (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1485/