# Vulnerabilities published in 2025 - [MAL-2025-140094](https://insights.sbomify.com/MAL-2025-140094/): Malicious code in bootes-tool-ophiuchus-webdriverio (npm) (malicious package) - [MAL-2025-140093](https://insights.sbomify.com/MAL-2025-140093/): Malicious code in bootes-toml-non-blocking-version (npm) (malicious package) - [MAL-2025-140092](https://insights.sbomify.com/MAL-2025-140092/): Malicious code in bootes-stop-transform-kronos (npm) (malicious package) - [MAL-2025-140091](https://insights.sbomify.com/MAL-2025-140091/): Malicious code in bootes-sagitta-sync-sirius (npm) (malicious package) - [MAL-2025-140090](https://insights.sbomify.com/MAL-2025-140090/): Malicious code in bootes-sadr-epimetheus-module (npm) (malicious package) - [MAL-2025-14009](https://insights.sbomify.com/MAL-2025-14009/): Malicious code in acme-http-01-reddis (npm) (malicious package) - [MAL-2025-140089](https://insights.sbomify.com/MAL-2025-140089/): Malicious code in bootes-request-meteor-hyperion (npm) (malicious package) - [MAL-2025-140088](https://insights.sbomify.com/MAL-2025-140088/): Malicious code in bootes-postgres-module-ursa (npm) (malicious package) - [MAL-2025-140087](https://insights.sbomify.com/MAL-2025-140087/): Malicious code in bootes-ophiuchus-phoenix-pyxis (npm) (malicious package) - [MAL-2025-140086](https://insights.sbomify.com/MAL-2025-140086/): Malicious code in bootes-npm-nightwatch-despina (npm) (malicious package) - [MAL-2025-140085](https://insights.sbomify.com/MAL-2025-140085/): Malicious code in bootes-nestjs-heka-gridsome (npm) (malicious package) - [MAL-2025-140084](https://insights.sbomify.com/MAL-2025-140084/): Malicious code in bootes-nebula-cordelia-slides (npm) (malicious package) - [MAL-2025-140083](https://insights.sbomify.com/MAL-2025-140083/): Malicious code in bootes-magellan-yakutsk-spawn (npm) (malicious package) - [MAL-2025-140082](https://insights.sbomify.com/MAL-2025-140082/): Malicious code in bootes-iota-sagitta-cross-env (npm) (malicious package) - [MAL-2025-140081](https://insights.sbomify.com/MAL-2025-140081/): Malicious code in bootes-install-impulse-phenomic (npm) (malicious package) - [MAL-2025-140080](https://insights.sbomify.com/MAL-2025-140080/): Malicious code in bootes-gacrux-koa-npm (npm) (malicious package) - [MAL-2025-14008](https://insights.sbomify.com/MAL-2025-14008/): Malicious code in acme-dns-01-lightsail (npm) (malicious package) - [MAL-2025-140079](https://insights.sbomify.com/MAL-2025-140079/): Malicious code in bootes-enceladus-gulp-antares (npm) (malicious package) - [MAL-2025-140078](https://insights.sbomify.com/MAL-2025-140078/): Malicious code in bootes-electron-builder-ariel-enceladus (npm) (malicious package) - [MAL-2025-140077](https://insights.sbomify.com/MAL-2025-140077/): Malicious code in bootes-docusaurus-europa-changelog (npm) (malicious package) - [MAL-2025-140076](https://insights.sbomify.com/MAL-2025-140076/): Malicious code in bootes-despina-capella-pavo (npm) (malicious package) - [MAL-2025-140075](https://insights.sbomify.com/MAL-2025-140075/): Malicious code in bootes-deneb-exec-axios (npm) (malicious package) - [MAL-2025-140074](https://insights.sbomify.com/MAL-2025-140074/): Malicious code in bootes-deimos-tethys-io (npm) (malicious package) - [MAL-2025-140073](https://insights.sbomify.com/MAL-2025-140073/): Malicious code in bootes-commitlint-config-angular-eris-nestjs (npm) (malicious package) - [MAL-2025-140072](https://insights.sbomify.com/MAL-2025-140072/): Malicious code in bootes-browserify-browserify-elara (npm) (malicious package) - [MAL-2025-140071](https://insights.sbomify.com/MAL-2025-140071/): Malicious code in bootes-betelgeuse-forever-xml (npm) (malicious package) - [MAL-2025-140070](https://insights.sbomify.com/MAL-2025-140070/): Malicious code in bootes-algol-promise-spinner (npm) (malicious package) - [MAL-2025-14007](https://insights.sbomify.com/MAL-2025-14007/): Malicious code in acme-dns-01-freedns (npm) (malicious package) - [MAL-2025-140069](https://insights.sbomify.com/MAL-2025-140069/): Malicious code in bootes-aldebaran-link-tool (npm) (malicious package) - [MAL-2025-140068](https://insights.sbomify.com/MAL-2025-140068/): Malicious code in blitz-zenith-flare-hapi (npm) (malicious package) - [MAL-2025-140067](https://insights.sbomify.com/MAL-2025-140067/): Malicious code in blitz-winston-vuetify-lyra (npm) (malicious package) - [MAL-2025-140066](https://insights.sbomify.com/MAL-2025-140066/): Malicious code in blitz-weywot-wasat-buffer (npm) (malicious package) - [MAL-2025-140065](https://insights.sbomify.com/MAL-2025-140065/): Malicious code in blitz-ultra-spinner-capella (npm) (malicious package) - [MAL-2025-140064](https://insights.sbomify.com/MAL-2025-140064/): Malicious code in blitz-thuban-mongoose-janus (npm) (malicious package) - [MAL-2025-140063](https://insights.sbomify.com/MAL-2025-140063/): Malicious code in blitz-tailwindcss-json-start (npm) (malicious package) - [MAL-2025-140062](https://insights.sbomify.com/MAL-2025-140062/): Malicious code in blitz-supervisor-frontend-bunyan (npm) (malicious package) - [MAL-2025-140061](https://insights.sbomify.com/MAL-2025-140061/): Malicious code in blitz-stream-less-yakutsk (npm) (malicious package) - [MAL-2025-140060](https://insights.sbomify.com/MAL-2025-140060/): Malicious code in blitz-solis-mdx-pegasus (npm) (malicious package) - [MAL-2025-14006](https://insights.sbomify.com/MAL-2025-14006/): Malicious code in acme-dns-01-dyndns (npm) (malicious package) - [MAL-2025-140059](https://insights.sbomify.com/MAL-2025-140059/): Malicious code in blitz-regulus-phoebe-cosmiconfig (npm) (malicious package) - [MAL-2025-140058](https://insights.sbomify.com/MAL-2025-140058/): Malicious code in blitz-pulsar-bootes-dagda (npm) (malicious package) - [MAL-2025-140057](https://insights.sbomify.com/MAL-2025-140057/): Malicious code in blitz-prettier-stylelint-yildun-despina (npm) (malicious package) - [MAL-2025-140056](https://insights.sbomify.com/MAL-2025-140056/): Malicious code in blitz-pm2-mutation-koa (npm) (malicious package) - [MAL-2025-140055](https://insights.sbomify.com/MAL-2025-140055/): Malicious code in blitz-pegasus-convict-orbit (npm) (malicious package) - [MAL-2025-140054](https://insights.sbomify.com/MAL-2025-140054/): Malicious code in blitz-orbit-iota-css-minimizer-webpack-plugin (npm) (malicious package) - [MAL-2025-140053](https://insights.sbomify.com/MAL-2025-140053/): Malicious code in blitz-oberon-ophiuchus-miranda (npm) (malicious package) - [MAL-2025-140052](https://insights.sbomify.com/MAL-2025-140052/): Malicious code in blitz-nodejs-postcss-umbra (npm) (malicious package) - [MAL-2025-140051](https://insights.sbomify.com/MAL-2025-140051/): Malicious code in blitz-magellan-betelgeuse-equinox (npm) (malicious package) - [MAL-2025-140050](https://insights.sbomify.com/MAL-2025-140050/): Malicious code in blitz-lint-odin-cache (npm) (malicious package) - [MAL-2025-14005](https://insights.sbomify.com/MAL-2025-14005/): Malicious code in acmapi (npm) (malicious package) - [MAL-2025-140049](https://insights.sbomify.com/MAL-2025-140049/): Malicious code in blitz-leda-meteor-spawn (npm) (malicious package) - [MAL-2025-140048](https://insights.sbomify.com/MAL-2025-140048/): Malicious code in blitz-koa-umbra-fork (npm) (malicious package) - [MAL-2025-140047](https://insights.sbomify.com/MAL-2025-140047/): Malicious code in blitz-impulse-geckodriver-polaris (npm) (malicious package) - [MAL-2025-140046](https://insights.sbomify.com/MAL-2025-140046/): Malicious code in blitz-hyperion-leda-supervisor (npm) (malicious package) - [MAL-2025-140045](https://insights.sbomify.com/MAL-2025-140045/): Malicious code in blitz-fork-umbra-toml (npm) (malicious package) - [MAL-2025-140044](https://insights.sbomify.com/MAL-2025-140044/): Malicious code in blitz-enceladus-ophiuchus-kaus (npm) (malicious package) - [MAL-2025-140043](https://insights.sbomify.com/MAL-2025-140043/): Malicious code in blitz-enceladus-hercules-spica (npm) (malicious package) - [MAL-2025-140042](https://insights.sbomify.com/MAL-2025-140042/): Malicious code in blitz-dotenv-safe-chai-ganymede (npm) (malicious package) - [MAL-2025-140041](https://insights.sbomify.com/MAL-2025-140041/): Malicious code in blitz-cross-env-ini-electron-builder (npm) (malicious package) - [MAL-2025-140040](https://insights.sbomify.com/MAL-2025-140040/): Malicious code in blitz-cressida-cross-env-postcss (npm) (malicious package) - [MAL-2025-14004](https://insights.sbomify.com/MAL-2025-14004/): Malicious code in acmake (npm) (malicious package) - [MAL-2025-140039](https://insights.sbomify.com/MAL-2025-140039/): Malicious code in blitz-cosmos-scripts-lynx (npm) (malicious package) - [MAL-2025-140038](https://insights.sbomify.com/MAL-2025-140038/): Malicious code in blitz-cosmiconfig-google-pino-pretty (npm) (malicious package) - [MAL-2025-140037](https://insights.sbomify.com/MAL-2025-140037/): Malicious code in blitz-celeste-slidev-got (npm) (malicious package) - [MAL-2025-140036](https://insights.sbomify.com/MAL-2025-140036/): Malicious code in blaze-winston-mensa-betelgeuse (npm) (malicious package) - [MAL-2025-140035](https://insights.sbomify.com/MAL-2025-140035/): Malicious code in blaze-uninstall-pino-pretty-nestjs (npm) (malicious package) - [MAL-2025-140034](https://insights.sbomify.com/MAL-2025-140034/): Malicious code in blaze-uglify-js-schema-subscription (npm) (malicious package) - [MAL-2025-140033](https://insights.sbomify.com/MAL-2025-140033/): Malicious code in blaze-terser-webpack-plugin-polaris-readable (npm) (malicious package) - [MAL-2025-140032](https://insights.sbomify.com/MAL-2025-140032/): Malicious code in blaze-reveal-md-auriga-ini (npm) (malicious package) - [MAL-2025-140031](https://insights.sbomify.com/MAL-2025-140031/): Malicious code in blaze-request-xml-tethys (npm) (malicious package) - [MAL-2025-140030](https://insights.sbomify.com/MAL-2025-140030/): Malicious code in blaze-release-it-cross-env-yakutsk (npm) (malicious package) - [MAL-2025-14003](https://insights.sbomify.com/MAL-2025-14003/): Malicious code in ackwovziyxkrehjt (npm) (malicious package) - [MAL-2025-140029](https://insights.sbomify.com/MAL-2025-140029/): Malicious code in blaze-private-module-eris (npm) (malicious package) - [MAL-2025-140028](https://insights.sbomify.com/MAL-2025-140028/): Malicious code in blaze-pegasus-test-meteor (npm) (malicious package) - [MAL-2025-140027](https://insights.sbomify.com/MAL-2025-140027/): Malicious code in blaze-octans-morgan-readable (npm) (malicious package) - [MAL-2025-140026](https://insights.sbomify.com/MAL-2025-140026/): Malicious code in blaze-morgan-phoenix-scorpius (npm) (malicious package) - [MAL-2025-140025](https://insights.sbomify.com/MAL-2025-140025/): Malicious code in blaze-lacerta-semantic-ui-yonder (npm) (malicious package) - [MAL-2025-140024](https://insights.sbomify.com/MAL-2025-140024/): Malicious code in blaze-io-spectron-rigel (npm) (malicious package) - [MAL-2025-140023](https://insights.sbomify.com/MAL-2025-140023/): Malicious code in blaze-hapi-cordelia-start (npm) (malicious package) - [MAL-2025-140022](https://insights.sbomify.com/MAL-2025-140022/): Malicious code in blaze-grus-cross-env-winston (npm) (malicious package) - [MAL-2025-140021](https://insights.sbomify.com/MAL-2025-140021/): Malicious code in blaze-eris-fornax-vortex (npm) (malicious package) - [MAL-2025-140020](https://insights.sbomify.com/MAL-2025-140020/): Malicious code in blaze-equinox-ceres-nightmare (npm) (malicious package) - [MAL-2025-14002](https://insights.sbomify.com/MAL-2025-14002/): Malicious code in acidwater (npm) (malicious package) - [MAL-2025-140019](https://insights.sbomify.com/MAL-2025-140019/): Malicious code in blaze-electron-ganymede-library (npm) (malicious package) - [MAL-2025-140018](https://insights.sbomify.com/MAL-2025-140018/): Malicious code in blaze-bootes-concurrently-gemini (npm) (malicious package) - [MAL-2025-140017](https://insights.sbomify.com/MAL-2025-140017/): Malicious code in blaze-antd-halley-pulsar (npm) (malicious package) - [MAL-2025-140016](https://insights.sbomify.com/MAL-2025-140016/): Malicious code in betelgeuse-xanadu-deimos-loopback (npm) (malicious package) - [MAL-2025-140015](https://insights.sbomify.com/MAL-2025-140015/): Malicious code in betelgeuse-writable-grus-build (npm) (malicious package) - [MAL-2025-140014](https://insights.sbomify.com/MAL-2025-140014/): Malicious code in betelgeuse-wolf-octans-blitz (npm) (malicious package) - [MAL-2025-140013](https://insights.sbomify.com/MAL-2025-140013/): Malicious code in betelgeuse-weywot-cache-tool (npm) (malicious package) - [MAL-2025-140012](https://insights.sbomify.com/MAL-2025-140012/): Malicious code in betelgeuse-transport-phoebe-io (npm) (malicious package) - [MAL-2025-140011](https://insights.sbomify.com/MAL-2025-140011/): Malicious code in betelgeuse-transport-cosmiconfig-sails (npm) (malicious package) - [MAL-2025-140010](https://insights.sbomify.com/MAL-2025-140010/): Malicious code in betelgeuse-toml-test-sirius (npm) (malicious package) - [MAL-2025-14001](https://insights.sbomify.com/MAL-2025-14001/): Malicious code in achsynku (npm) (malicious package) - [MAL-2025-140009](https://insights.sbomify.com/MAL-2025-140009/): Malicious code in betelgeuse-test-wasat-iota (npm) (malicious package) - [MAL-2025-140008](https://insights.sbomify.com/MAL-2025-140008/): Malicious code in betelgeuse-spica-figures-hapi (npm) (malicious package) - [MAL-2025-140007](https://insights.sbomify.com/MAL-2025-140007/): Malicious code in betelgeuse-spectron-npm-triton (npm) (malicious package) - [MAL-2025-140006](https://insights.sbomify.com/MAL-2025-140006/): Malicious code in betelgeuse-slidev-webdriver-mocha-duplex (npm) (malicious package) - [MAL-2025-140005](https://insights.sbomify.com/MAL-2025-140005/): Malicious code in betelgeuse-semantic-release-jekyll-release-it (npm) (malicious package) - [MAL-2025-140004](https://insights.sbomify.com/MAL-2025-140004/): Malicious code in betelgeuse-scorpius-postcss-loader-telesto (npm) (malicious package) --- From sbomify Insights: https://insights.sbomify.com/years/2025/page/1487/