# Vulnerabilities published in 2025 - [MAL-2025-140184](https://insights.sbomify.com/MAL-2025-140184/): Malicious code in build-figures-module-acamar (npm) (malicious package) - [MAL-2025-140183](https://insights.sbomify.com/MAL-2025-140183/): Malicious code in build-eridanus-mini-css-extract-plugin-dynamo (npm) (malicious package) - [MAL-2025-140182](https://insights.sbomify.com/MAL-2025-140182/): Malicious code in build-configstore-kronos-dynamo (npm) (malicious package) - [MAL-2025-140181](https://insights.sbomify.com/MAL-2025-140181/): Malicious code in build-altair-winston-cli (npm) (malicious package) - [MAL-2025-140180](https://insights.sbomify.com/MAL-2025-140180/): Malicious code in buffer-xenon-meissa-server (npm) (malicious package) - [MAL-2025-14018](https://insights.sbomify.com/MAL-2025-14018/): Malicious code in acorn-echo-oqo5 (npm) (malicious package) - [MAL-2025-140179](https://insights.sbomify.com/MAL-2025-140179/): Malicious code in buffer-wasat-miranda-eridanus (npm) (malicious package) - [MAL-2025-140178](https://insights.sbomify.com/MAL-2025-140178/): Malicious code in buffer-virgo-eslint-plugin-centauri (npm) (malicious package) - [MAL-2025-140177](https://insights.sbomify.com/MAL-2025-140177/): Malicious code in buffer-venus-mongoose-jupiter (npm) (malicious package) - [MAL-2025-140176](https://insights.sbomify.com/MAL-2025-140176/): Malicious code in buffer-update-puppeteer-koa (npm) (malicious package) - [MAL-2025-140175](https://insights.sbomify.com/MAL-2025-140175/): Malicious code in buffer-transport-dotenv-thuban (npm) (malicious package) - [MAL-2025-140174](https://insights.sbomify.com/MAL-2025-140174/): Malicious code in buffer-stop-dynamo-docusaurus (npm) (malicious package) - [MAL-2025-140173](https://insights.sbomify.com/MAL-2025-140173/): Malicious code in buffer-sqlite-lint-telesto (npm) (malicious package) - [MAL-2025-140172](https://insights.sbomify.com/MAL-2025-140172/): Malicious code in buffer-soap-vortex-mini-css-extract-plugin (npm) (malicious package) - [MAL-2025-140171](https://insights.sbomify.com/MAL-2025-140171/): Malicious code in buffer-semantic-ui-neptune-aurora (npm) (malicious package) - [MAL-2025-140170](https://insights.sbomify.com/MAL-2025-140170/): Malicious code in buffer-readable-geckodriver-miranda (npm) (malicious package) - [MAL-2025-14017](https://insights.sbomify.com/MAL-2025-14017/): Malicious code in acorn-dolphin-wpx490-project (npm) (malicious package) - [MAL-2025-140169](https://insights.sbomify.com/MAL-2025-140169/): Malicious code in buffer-puppeteer-gacrux-nightwatch (npm) (malicious package) - [MAL-2025-140168](https://insights.sbomify.com/MAL-2025-140168/): Malicious code in buffer-phenomic-miranda-taurus (npm) (malicious package) - [MAL-2025-140167](https://insights.sbomify.com/MAL-2025-140167/): Malicious code in buffer-pavo-europa-gravity (npm) (malicious package) - [MAL-2025-140166](https://insights.sbomify.com/MAL-2025-140166/): Malicious code in buffer-oberon-dotenv-parse-variables-async (npm) (malicious package) - [MAL-2025-140165](https://insights.sbomify.com/MAL-2025-140165/): Malicious code in buffer-nuxtjs-webdriverio-standard (npm) (malicious package) - [MAL-2025-140164](https://insights.sbomify.com/MAL-2025-140164/): Malicious code in buffer-norma-fornax-sedna (npm) (malicious package) - [MAL-2025-140163](https://insights.sbomify.com/MAL-2025-140163/): Malicious code in buffer-nodejs-native-grunt (npm) (malicious package) - [MAL-2025-140162](https://insights.sbomify.com/MAL-2025-140162/): Malicious code in buffer-mutation-changelog-karma (npm) (malicious package) - [MAL-2025-140161](https://insights.sbomify.com/MAL-2025-140161/): Malicious code in buffer-materialize-config-subscription (npm) (malicious package) - [MAL-2025-140160](https://insights.sbomify.com/MAL-2025-140160/): Malicious code in buffer-levels-commitlint-config-angular-protractor (npm) (malicious package) - [MAL-2025-14016](https://insights.sbomify.com/MAL-2025-14016/): Malicious code in acorn-dolphin-ero908-project (npm) (malicious package) - [MAL-2025-140159](https://insights.sbomify.com/MAL-2025-140159/): Malicious code in buffer-hapi-rigel-websockets (npm) (malicious package) - [MAL-2025-140158](https://insights.sbomify.com/MAL-2025-140158/): Malicious code in buffer-google-polaris-pegasus (npm) (malicious package) - [MAL-2025-140157](https://insights.sbomify.com/MAL-2025-140157/): Malicious code in buffer-gatsby-less-sync (npm) (malicious package) - [MAL-2025-140156](https://insights.sbomify.com/MAL-2025-140156/): Malicious code in buffer-cypress-auth0-backend (npm) (malicious package) - [MAL-2025-140155](https://insights.sbomify.com/MAL-2025-140155/): Malicious code in buffer-config-miranda-chromedriver (npm) (malicious package) - [MAL-2025-140154](https://insights.sbomify.com/MAL-2025-140154/): Malicious code in buffer-celeste-prettier-plugin-markdown-auth (npm) (malicious package) - [MAL-2025-140153](https://insights.sbomify.com/MAL-2025-140153/): Malicious code in buffer-canopus-winston-repository (npm) (malicious package) - [MAL-2025-140152](https://insights.sbomify.com/MAL-2025-140152/): Malicious code in buffer-betelgeuse-frontend-rehype (npm) (malicious package) - [MAL-2025-140151](https://insights.sbomify.com/MAL-2025-140151/): Malicious code in buffer-airbnb-rollup-plugin-aether (npm) (malicious package) - [MAL-2025-140150](https://insights.sbomify.com/MAL-2025-140150/): Malicious code in buffer-achernar-winston-triton (npm) (malicious package) - [MAL-2025-14015](https://insights.sbomify.com/MAL-2025-14015/): Malicious code in acorn-boulder-awa769-project (npm) (malicious package) - [MAL-2025-140149](https://insights.sbomify.com/MAL-2025-140149/): Malicious code in browserify-zenobia-materialize-event (npm) (malicious package) - [MAL-2025-140148](https://insights.sbomify.com/MAL-2025-140148/): Malicious code in browserify-yonder-meissa-algol (npm) (malicious package) - [MAL-2025-140147](https://insights.sbomify.com/MAL-2025-140147/): Malicious code in browserify-xanadu-proxima-stop (npm) (malicious package) - [MAL-2025-140146](https://insights.sbomify.com/MAL-2025-140146/): Malicious code in browserify-winston-yaml-react-bootstrap (npm) (malicious package) - [MAL-2025-140145](https://insights.sbomify.com/MAL-2025-140145/): Malicious code in browserify-update-publish-puppeteer (npm) (malicious package) - [MAL-2025-140144](https://insights.sbomify.com/MAL-2025-140144/): Malicious code in browserify-titan-global-taurus (npm) (malicious package) - [MAL-2025-140143](https://insights.sbomify.com/MAL-2025-140143/): Malicious code in browserify-stop-sagitta-sirius (npm) (malicious package) - [MAL-2025-140142](https://insights.sbomify.com/MAL-2025-140142/): Malicious code in browserify-spectron-webdriver-electron-builder-delphinus (npm) (malicious package) - [MAL-2025-140141](https://insights.sbomify.com/MAL-2025-140141/): Malicious code in browserify-sadr-writable-triton (npm) (malicious package) - [MAL-2025-140140](https://insights.sbomify.com/MAL-2025-140140/): Malicious code in browserify-readable-mysql-standard (npm) (malicious package) - [MAL-2025-14014](https://insights.sbomify.com/MAL-2025-14014/): Malicious code in acollab (npm) (malicious package) - [MAL-2025-140139](https://insights.sbomify.com/MAL-2025-140139/): Malicious code in browserify-readable-kaus-dione (npm) (malicious package) - [MAL-2025-140138](https://insights.sbomify.com/MAL-2025-140138/): Malicious code in browserify-quantum-puppeteer-neptune (npm) (malicious package) - [MAL-2025-140137](https://insights.sbomify.com/MAL-2025-140137/): Malicious code in browserify-pegasus-cygnus-lyra (npm) (malicious package) - [MAL-2025-140136](https://insights.sbomify.com/MAL-2025-140136/): Malicious code in browserify-node-config-impulse-scripts (npm) (malicious package) - [MAL-2025-140135](https://insights.sbomify.com/MAL-2025-140135/): Malicious code in browserify-mongodb-warp-yonder (npm) (malicious package) - [MAL-2025-140134](https://insights.sbomify.com/MAL-2025-140134/): Malicious code in browserify-mongodb-eslint-config-pegasus (npm) (malicious package) - [MAL-2025-140133](https://insights.sbomify.com/MAL-2025-140133/): Malicious code in browserify-miranda-perseus-mira (npm) (malicious package) - [MAL-2025-140132](https://insights.sbomify.com/MAL-2025-140132/): Malicious code in browserify-meteor-exec-jsonp (npm) (malicious package) - [MAL-2025-140131](https://insights.sbomify.com/MAL-2025-140131/): Malicious code in browserify-less-loader-tethys-style-loader (npm) (malicious package) - [MAL-2025-140130](https://insights.sbomify.com/MAL-2025-140130/): Malicious code in browserify-commitizen-sagitta-dagda (npm) (malicious package) - [MAL-2025-14013](https://insights.sbomify.com/MAL-2025-14013/): Malicious code in acocgame (npm) (malicious package) - [MAL-2025-140129](https://insights.sbomify.com/MAL-2025-140129/): Malicious code in browserify-antd-electron-xerxes (npm) (malicious package) - [MAL-2025-140128](https://insights.sbomify.com/MAL-2025-140128/): Malicious code in browserify-aldebaran-xenos-titan (npm) (malicious package) - [MAL-2025-140127](https://insights.sbomify.com/MAL-2025-140127/): Malicious code in bright-jade-baboon (npm) (malicious package) - [MAL-2025-140126](https://insights.sbomify.com/MAL-2025-140126/): Malicious code in breezy-crimson-marten (npm) (malicious package) - [MAL-2025-140125](https://insights.sbomify.com/MAL-2025-140125/): Malicious code in bootstrap-wezen-selenium-configstore (npm) (malicious package) - [MAL-2025-140124](https://insights.sbomify.com/MAL-2025-140124/): Malicious code in bootstrap-uglify-js-proxima-transform (npm) (malicious package) - [MAL-2025-140123](https://insights.sbomify.com/MAL-2025-140123/): Malicious code in bootstrap-terser-webpack-plugin-winston-link (npm) (malicious package) - [MAL-2025-140122](https://insights.sbomify.com/MAL-2025-140122/): Malicious code in bootstrap-standard-yonder-miranda (npm) (malicious package) - [MAL-2025-140121](https://insights.sbomify.com/MAL-2025-140121/): Malicious code in bootstrap-slidev-luna-bellatrix (npm) (malicious package) - [MAL-2025-140120](https://insights.sbomify.com/MAL-2025-140120/): Malicious code in bootstrap-shelljs-enif-cassini (npm) (malicious package) - [MAL-2025-14012](https://insights.sbomify.com/MAL-2025-14012/): Malicious code in acme-react-components (npm) (malicious package) - [MAL-2025-140119](https://insights.sbomify.com/MAL-2025-140119/): Malicious code in bootstrap-rollup-figures-auriga (npm) (malicious package) - [MAL-2025-140118](https://insights.sbomify.com/MAL-2025-140118/): Malicious code in bootstrap-rate-limiter-prettier-stylelint-transport (npm) (malicious package) - [MAL-2025-140117](https://insights.sbomify.com/MAL-2025-140117/): Malicious code in bootstrap-playwright-levels-browserify (npm) (malicious package) - [MAL-2025-140116](https://insights.sbomify.com/MAL-2025-140116/): Malicious code in bootstrap-ora-auriga-cors (npm) (malicious package) - [MAL-2025-140115](https://insights.sbomify.com/MAL-2025-140115/): Malicious code in bootstrap-optimize-css-assets-webpack-plugin-jupiter-unuk (npm) (malicious package) - [MAL-2025-140114](https://insights.sbomify.com/MAL-2025-140114/): Malicious code in bootstrap-ophiuchus-elara-transport (npm) (malicious package) - [MAL-2025-140113](https://insights.sbomify.com/MAL-2025-140113/): Malicious code in bootstrap-link-pino-pretty-betelgeuse (npm) (malicious package) - [MAL-2025-140112](https://insights.sbomify.com/MAL-2025-140112/): Malicious code in bootstrap-leda-selenium-cressida (npm) (malicious package) - [MAL-2025-140111](https://insights.sbomify.com/MAL-2025-140111/): Malicious code in bootstrap-json-leda-thuban (npm) (malicious package) - [MAL-2025-140110](https://insights.sbomify.com/MAL-2025-140110/): Malicious code in bootstrap-janus-spica-docusaurus (npm) (malicious package) - [MAL-2025-14011](https://insights.sbomify.com/MAL-2025-14011/): Malicious code in acme-http-01-sequelize (npm) (malicious package) - [MAL-2025-140109](https://insights.sbomify.com/MAL-2025-140109/): Malicious code in bootstrap-jabbah-xenos-telesto (npm) (malicious package) - [MAL-2025-140108](https://insights.sbomify.com/MAL-2025-140108/): Malicious code in bootstrap-husky-meissa-backend (npm) (malicious package) - [MAL-2025-140107](https://insights.sbomify.com/MAL-2025-140107/): Malicious code in bootstrap-hugo-altair-rehype (npm) (malicious package) - [MAL-2025-140106](https://insights.sbomify.com/MAL-2025-140106/): Malicious code in bootstrap-gemini-carpo-registry (npm) (malicious package) - [MAL-2025-140105](https://insights.sbomify.com/MAL-2025-140105/): Malicious code in bootstrap-foundation-rehype-superagent (npm) (malicious package) - [MAL-2025-140104](https://insights.sbomify.com/MAL-2025-140104/): Malicious code in bootstrap-fornax-test-atlas (npm) (malicious package) - [MAL-2025-140103](https://insights.sbomify.com/MAL-2025-140103/): Malicious code in bootstrap-fornax-miranda-yakutsk (npm) (malicious package) - [MAL-2025-140102](https://insights.sbomify.com/MAL-2025-140102/): Malicious code in bootstrap-event-figures-eslint-config (npm) (malicious package) - [MAL-2025-140101](https://insights.sbomify.com/MAL-2025-140101/): Malicious code in bootstrap-enceladus-readable-mongoose (npm) (malicious package) - [MAL-2025-140100](https://insights.sbomify.com/MAL-2025-140100/): Malicious code in bootstrap-comet-convict-inquirer (npm) (malicious package) - [MAL-2025-14010](https://insights.sbomify.com/MAL-2025-14010/): Malicious code in acme-http-01-s3 (npm) (malicious package) - [MAL-2025-1401](https://insights.sbomify.com/MAL-2025-1401/): Malicious code in coinstore-internal (npm) (malicious package) - [MAL-2025-140099](https://insights.sbomify.com/MAL-2025-140099/): Malicious code in bootstrap-chakra-ui-wolf-protractor (npm) (malicious package) - [MAL-2025-140098](https://insights.sbomify.com/MAL-2025-140098/): Malicious code in bootstrap-blaze-betelgeuse-magellan (npm) (malicious package) - [MAL-2025-140097](https://insights.sbomify.com/MAL-2025-140097/): Malicious code in bootstrap-auriga-sequelize-backend (npm) (malicious package) - [MAL-2025-140096](https://insights.sbomify.com/MAL-2025-140096/): Malicious code in bootstrap-arcturus-helios-pino (npm) (malicious package) - [MAL-2025-140095](https://insights.sbomify.com/MAL-2025-140095/): Malicious code in bootes-vulcan-transport-lynx (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1486/