# Vulnerabilities published in 2025


- [MAL-2025-140003](https://insights.sbomify.com/MAL-2025-140003/): Malicious code in betelgeuse-run-script-remark-halley (npm) (malicious package)
- [MAL-2025-140002](https://insights.sbomify.com/MAL-2025-140002/): Malicious code in betelgeuse-rest-zenobia-chalk (npm) (malicious package)
- [MAL-2025-140001](https://insights.sbomify.com/MAL-2025-140001/): Malicious code in betelgeuse-request-browserify-atlas (npm) (malicious package)
- [MAL-2025-140000](https://insights.sbomify.com/MAL-2025-140000/): Malicious code in betelgeuse-registry-spawn-gulp (npm) (malicious package)
- [MAL-2025-14000](https://insights.sbomify.com/MAL-2025-14000/): Malicious code in achernar-typeorm-webdriver-manager-ursa (npm) (malicious package)
- [MAL-2025-1400](https://insights.sbomify.com/MAL-2025-1400/): Malicious code in coinstore-dev (npm) (malicious package)
- [MAL-2025-140](https://insights.sbomify.com/MAL-2025-140/): Malicious code in bc-nuxt-vue-starter (npm) (malicious package)
- [MAL-2025-14](https://insights.sbomify.com/MAL-2025-14/): Malicious code in zqdl222 (npm) (malicious package)
- [MAL-2025-139999](https://insights.sbomify.com/MAL-2025-139999/): Malicious code in betelgeuse-quantum-xenos-jovian (npm) (malicious package)
- [MAL-2025-139998](https://insights.sbomify.com/MAL-2025-139998/): Malicious code in betelgeuse-ora-grunt-leda (npm) (malicious package)
- [MAL-2025-139997](https://insights.sbomify.com/MAL-2025-139997/): Malicious code in betelgeuse-optimize-css-assets-webpack-plugin-graphql-neptune (npm) (malicious package)
- [MAL-2025-139996](https://insights.sbomify.com/MAL-2025-139996/): Malicious code in betelgeuse-ophiuchus-html-webpack-plugin-yakutsk (npm) (malicious package)
- [MAL-2025-139995](https://insights.sbomify.com/MAL-2025-139995/): Malicious code in betelgeuse-octans-venus-miranda (npm) (malicious package)
- [MAL-2025-139994](https://insights.sbomify.com/MAL-2025-139994/): Malicious code in betelgeuse-node-config-webdriver-mocha-auriga (npm) (malicious package)
- [MAL-2025-139993](https://insights.sbomify.com/MAL-2025-139993/): Malicious code in betelgeuse-neptune-eslint-pino-pretty (npm) (malicious package)
- [MAL-2025-139992](https://insights.sbomify.com/MAL-2025-139992/): Malicious code in betelgeuse-nconf-mongoose-flare (npm) (malicious package)
- [MAL-2025-139991](https://insights.sbomify.com/MAL-2025-139991/): Malicious code in betelgeuse-mongodb-command-grus (npm) (malicious package)
- [MAL-2025-139990](https://insights.sbomify.com/MAL-2025-139990/): Malicious code in betelgeuse-mocha-request-event (npm) (malicious package)
- [MAL-2025-13999](https://insights.sbomify.com/MAL-2025-13999/): Malicious code in achernar-soap-acamar-geomorphology (npm) (malicious package)
- [MAL-2025-139989](https://insights.sbomify.com/MAL-2025-139989/): Malicious code in betelgeuse-middleware-bellatrix-ursa (npm) (malicious package)
- [MAL-2025-139988](https://insights.sbomify.com/MAL-2025-139988/): Malicious code in betelgeuse-magellan-webdriver-manager-publish (npm) (malicious package)
- [MAL-2025-139987](https://insights.sbomify.com/MAL-2025-139987/): Malicious code in betelgeuse-jupiter-zenith-mocha (npm) (malicious package)
- [MAL-2025-139986](https://insights.sbomify.com/MAL-2025-139986/): Malicious code in betelgeuse-jovian-virgo-xanthus (npm) (malicious package)
- [MAL-2025-139985](https://insights.sbomify.com/MAL-2025-139985/): Malicious code in betelgeuse-jovian-galaxy-chakra-ui (npm) (malicious package)
- [MAL-2025-139984](https://insights.sbomify.com/MAL-2025-139984/): Malicious code in betelgeuse-hugo-promise-envconfig (npm) (malicious package)
- [MAL-2025-139983](https://insights.sbomify.com/MAL-2025-139983/): Malicious code in betelgeuse-hapi-dynamo-scripts (npm) (malicious package)
- [MAL-2025-139982](https://insights.sbomify.com/MAL-2025-139982/): Malicious code in betelgeuse-ganymede-norma-octans (npm) (malicious package)
- [MAL-2025-139981](https://insights.sbomify.com/MAL-2025-139981/): Malicious code in betelgeuse-fornax-europa-apex (npm) (malicious package)
- [MAL-2025-139980](https://insights.sbomify.com/MAL-2025-139980/): Malicious code in betelgeuse-farout-chakra-ui-hexo (npm) (malicious package)
- [MAL-2025-13998](https://insights.sbomify.com/MAL-2025-13998/): Malicious code in achernar-restart-futurology-bionics (npm) (malicious package)
- [MAL-2025-139979](https://insights.sbomify.com/MAL-2025-139979/): Malicious code in betelgeuse-exec-update-magellan (npm) (malicious package)
- [MAL-2025-139978](https://insights.sbomify.com/MAL-2025-139978/): Malicious code in betelgeuse-eslint-plugin-socketio-nova (npm) (malicious package)
- [MAL-2025-139977](https://insights.sbomify.com/MAL-2025-139977/): Malicious code in betelgeuse-eridanus-css-minimizer-webpack-plugin-zenobia (npm) (malicious package)
- [MAL-2025-139976](https://insights.sbomify.com/MAL-2025-139976/): Malicious code in betelgeuse-enceladus-comet-geckodriver (npm) (malicious package)
- [MAL-2025-139975](https://insights.sbomify.com/MAL-2025-139975/): Malicious code in betelgeuse-deneb-request-spectron-webdriver (npm) (malicious package)
- [MAL-2025-139974](https://insights.sbomify.com/MAL-2025-139974/): Malicious code in betelgeuse-css-loader-luna-dactyl (npm) (malicious package)
- [MAL-2025-139973](https://insights.sbomify.com/MAL-2025-139973/): Malicious code in betelgeuse-config-nuxtjs-aquarius (npm) (malicious package)
- [MAL-2025-139972](https://insights.sbomify.com/MAL-2025-139972/): Malicious code in betelgeuse-carina-orbit-dotenv (npm) (malicious package)
- [MAL-2025-139971](https://insights.sbomify.com/MAL-2025-139971/): Malicious code in betelgeuse-betelgeuse-unuk-buffer (npm) (malicious package)
- [MAL-2025-139970](https://insights.sbomify.com/MAL-2025-139970/): Malicious code in betelgeuse-betelgeuse-markdown-pdf-wezen (npm) (malicious package)
- [MAL-2025-13997](https://insights.sbomify.com/MAL-2025-13997/): Malicious code in achernar-pegasus-dactyl-carpo (npm) (malicious package)
- [MAL-2025-139969](https://insights.sbomify.com/MAL-2025-139969/): Malicious code in betelgeuse-betelgeuse-cassini-nodejs (npm) (malicious package)
- [MAL-2025-139968](https://insights.sbomify.com/MAL-2025-139968/): Malicious code in betelgeuse-betelgeuse-carpo-vortex (npm) (malicious package)
- [MAL-2025-139967](https://insights.sbomify.com/MAL-2025-139967/): Malicious code in betelgeuse-aquarius-sirius-chai (npm) (malicious package)
- [MAL-2025-139966](https://insights.sbomify.com/MAL-2025-139966/): Malicious code in betelgeuse-apex-async-parcel (npm) (malicious package)
- [MAL-2025-139965](https://insights.sbomify.com/MAL-2025-139965/): Malicious code in betelgeuse-andromeda-supervisor-solis (npm) (malicious package)
- [MAL-2025-139964](https://insights.sbomify.com/MAL-2025-139964/): Malicious code in betelgeuse-airbnb-cosmiconfig-loop (npm) (malicious package)
- [MAL-2025-139963](https://insights.sbomify.com/MAL-2025-139963/): Malicious code in bellatrix-yonder-umbra-polaris (npm) (malicious package)
- [MAL-2025-139962](https://insights.sbomify.com/MAL-2025-139962/): Malicious code in bellatrix-yildun-lint-staged-wolf (npm) (malicious package)
- [MAL-2025-139961](https://insights.sbomify.com/MAL-2025-139961/): Malicious code in bellatrix-upgrade-janus-dynamo (npm) (malicious package)
- [MAL-2025-139960](https://insights.sbomify.com/MAL-2025-139960/): Malicious code in bellatrix-tool-hyperion-prettier-stylelint (npm) (malicious package)
- [MAL-2025-13996](https://insights.sbomify.com/MAL-2025-13996/): Malicious code in achernar-mensa-umbra-delphinus (npm) (malicious package)
- [MAL-2025-139959](https://insights.sbomify.com/MAL-2025-139959/): Malicious code in bellatrix-titan-eslint-config-envconfig (npm) (malicious package)
- [MAL-2025-139958](https://insights.sbomify.com/MAL-2025-139958/): Malicious code in bellatrix-spica-rollup-forever (npm) (malicious package)
- [MAL-2025-139957](https://insights.sbomify.com/MAL-2025-139957/): Malicious code in bellatrix-spawn-iota-convict (npm) (malicious package)
- [MAL-2025-139956](https://insights.sbomify.com/MAL-2025-139956/): Malicious code in bellatrix-rest-blitz-style-loader (npm) (malicious package)
- [MAL-2025-139955](https://insights.sbomify.com/MAL-2025-139955/): Malicious code in bellatrix-resolvers-inquirer-orbit (npm) (malicious package)
- [MAL-2025-139954](https://insights.sbomify.com/MAL-2025-139954/): Malicious code in bellatrix-protractor-fomalhaut-css-loader (npm) (malicious package)
- [MAL-2025-139953](https://insights.sbomify.com/MAL-2025-139953/): Malicious code in bellatrix-process-buffer-sequelize (npm) (malicious package)
- [MAL-2025-139952](https://insights.sbomify.com/MAL-2025-139952/): Malicious code in bellatrix-polaris-resolvers-xenos (npm) (malicious package)
- [MAL-2025-139951](https://insights.sbomify.com/MAL-2025-139951/): Malicious code in bellatrix-pipe-dione-cordelia (npm) (malicious package)
- [MAL-2025-139950](https://insights.sbomify.com/MAL-2025-139950/): Malicious code in bellatrix-pino-nebula-comet (npm) (malicious package)
- [MAL-2025-13995](https://insights.sbomify.com/MAL-2025-13995/): Malicious code in achernar-local-nucleosynthesis-mesosphere (npm) (malicious package)
- [MAL-2025-139949](https://insights.sbomify.com/MAL-2025-139949/): Malicious code in bellatrix-passport-quantum-levels (npm) (malicious package)
- [MAL-2025-139948](https://insights.sbomify.com/MAL-2025-139948/): Malicious code in bellatrix-oberon-prettier-alphard (npm) (malicious package)
- [MAL-2025-139947](https://insights.sbomify.com/MAL-2025-139947/): Malicious code in bellatrix-oberon-halley-convict (npm) (malicious package)
- [MAL-2025-139946](https://insights.sbomify.com/MAL-2025-139946/): Malicious code in bellatrix-nightmare-sequelize-materialize (npm) (malicious package)
- [MAL-2025-139945](https://insights.sbomify.com/MAL-2025-139945/): Malicious code in bellatrix-nextjs-jupiter-dagda (npm) (malicious package)
- [MAL-2025-139944](https://insights.sbomify.com/MAL-2025-139944/): Malicious code in bellatrix-middleware-yildun-eslint-config (npm) (malicious package)
- [MAL-2025-139943](https://insights.sbomify.com/MAL-2025-139943/): Malicious code in bellatrix-luna-markdownlint-oberon (npm) (malicious package)
- [MAL-2025-139942](https://insights.sbomify.com/MAL-2025-139942/): Malicious code in bellatrix-library-ganymede-equinox (npm) (malicious package)
- [MAL-2025-139941](https://insights.sbomify.com/MAL-2025-139941/): Malicious code in bellatrix-less-blaze-uglify-js (npm) (malicious package)
- [MAL-2025-139940](https://insights.sbomify.com/MAL-2025-139940/): Malicious code in bellatrix-jsonp-octans-stream (npm) (malicious package)
- [MAL-2025-13994](https://insights.sbomify.com/MAL-2025-13994/): Malicious code in acghrom (npm) (malicious package)
- [MAL-2025-139939](https://insights.sbomify.com/MAL-2025-139939/): Malicious code in bellatrix-jabbah-websockets-ignite (npm) (malicious package)
- [MAL-2025-139938](https://insights.sbomify.com/MAL-2025-139938/): Malicious code in bellatrix-graphql-lynx-nova (npm) (malicious package)
- [MAL-2025-139937](https://insights.sbomify.com/MAL-2025-139937/): Malicious code in bellatrix-figures-mongodb-warp (npm) (malicious package)
- [MAL-2025-139936](https://insights.sbomify.com/MAL-2025-139936/): Malicious code in bellatrix-eris-yaml-celeste (npm) (malicious package)
- [MAL-2025-139935](https://insights.sbomify.com/MAL-2025-139935/): Malicious code in bellatrix-element-ui-native-graphql (npm) (malicious package)
- [MAL-2025-139934](https://insights.sbomify.com/MAL-2025-139934/): Malicious code in bellatrix-dorado-halley-sagitta (npm) (malicious package)
- [MAL-2025-139933](https://insights.sbomify.com/MAL-2025-139933/): Malicious code in bellatrix-cz-conventional-changelog-firebase-version (npm) (malicious package)
- [MAL-2025-139932](https://insights.sbomify.com/MAL-2025-139932/): Malicious code in bellatrix-cosmos-pulsar-foundation (npm) (malicious package)
- [MAL-2025-139931](https://insights.sbomify.com/MAL-2025-139931/): Malicious code in bellatrix-cosmiconfig-axios-polaris (npm) (malicious package)
- [MAL-2025-139930](https://insights.sbomify.com/MAL-2025-139930/): Malicious code in bellatrix-comet-spica-nightwatch (npm) (malicious package)
- [MAL-2025-13993](https://insights.sbomify.com/MAL-2025-13993/): Malicious code in acerta-calendar-gui (npm) (malicious package)
- [MAL-2025-139929](https://insights.sbomify.com/MAL-2025-139929/): Malicious code in bellatrix-chai-deneb-cross-env (npm) (malicious package)
- [MAL-2025-139928](https://insights.sbomify.com/MAL-2025-139928/): Malicious code in bellatrix-centaurus-toml-firebase (npm) (malicious package)
- [MAL-2025-139927](https://insights.sbomify.com/MAL-2025-139927/): Malicious code in bellatrix-bulma-postcss-deimos (npm) (malicious package)
- [MAL-2025-139926](https://insights.sbomify.com/MAL-2025-139926/): Malicious code in bellatrix-axios-babel-element-ui (npm) (malicious package)
- [MAL-2025-139925](https://insights.sbomify.com/MAL-2025-139925/): Malicious code in bellatrix-async-yildun-morgan (npm) (malicious package)
- [MAL-2025-139924](https://insights.sbomify.com/MAL-2025-139924/): Malicious code in bellatrix-astro-sedna-nightwatch (npm) (malicious package)
- [MAL-2025-139923](https://insights.sbomify.com/MAL-2025-139923/): Malicious code in bellatrix-antares-halley-ganymede (npm) (malicious package)
- [MAL-2025-139922](https://insights.sbomify.com/MAL-2025-139922/): Malicious code in bellatrix-aldebaran-mira-centauri (npm) (malicious package)
- [MAL-2025-139921](https://insights.sbomify.com/MAL-2025-139921/): Malicious code in bellatrix-aldebaran-hexo-prettier (npm) (malicious package)
- [MAL-2025-139920](https://insights.sbomify.com/MAL-2025-139920/): Malicious code in barnard-warp-auth0-canopus (npm) (malicious package)
- [MAL-2025-13992](https://insights.sbomify.com/MAL-2025-13992/): Malicious code in ace-one-widget-self-hosting (npm) (malicious package)
- [MAL-2025-139919](https://insights.sbomify.com/MAL-2025-139919/): Malicious code in barnard-vuetify-lyra-native (npm) (malicious package)
- [MAL-2025-139918](https://insights.sbomify.com/MAL-2025-139918/): Malicious code in barnard-sedna-scripts-protractor (npm) (malicious package)
- [MAL-2025-139917](https://insights.sbomify.com/MAL-2025-139917/): Malicious code in barnard-prettier-stylelint-testcafe-warp (npm) (malicious package)
- [MAL-2025-139916](https://insights.sbomify.com/MAL-2025-139916/): Malicious code in barnard-perseus-hugo-nuxtjs (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1488/