# Vulnerabilities published in 2025


- [MAL-2025-139915](https://insights.sbomify.com/MAL-2025-139915/): Malicious code in barnard-nova-sass-loader-configstore (npm) (malicious package)
- [MAL-2025-139914](https://insights.sbomify.com/MAL-2025-139914/): Malicious code in barnard-neptune-celeste-kronos (npm) (malicious package)
- [MAL-2025-139913](https://insights.sbomify.com/MAL-2025-139913/): Malicious code in barnard-nebula-altair-gulp (npm) (malicious package)
- [MAL-2025-139912](https://insights.sbomify.com/MAL-2025-139912/): Malicious code in barnard-markdown-hapi-config (npm) (malicious package)
- [MAL-2025-139911](https://insights.sbomify.com/MAL-2025-139911/): Malicious code in barnard-luna-pulsar-native (npm) (malicious package)
- [MAL-2025-139910](https://insights.sbomify.com/MAL-2025-139910/): Malicious code in barnard-kastra-carina-envconfig (npm) (malicious package)
- [MAL-2025-13991](https://insights.sbomify.com/MAL-2025-13991/): Malicious code in accumunet (npm) (malicious package)
- [MAL-2025-139909](https://insights.sbomify.com/MAL-2025-139909/): Malicious code in barnard-izar-castor-fusion (npm) (malicious package)
- [MAL-2025-139908](https://insights.sbomify.com/MAL-2025-139908/): Malicious code in barnard-hyperion-warp-dagda (npm) (malicious package)
- [MAL-2025-139907](https://insights.sbomify.com/MAL-2025-139907/): Malicious code in barnard-html-webpack-plugin-commitlint-config-angular-prettier (npm) (malicious package)
- [MAL-2025-139906](https://insights.sbomify.com/MAL-2025-139906/): Malicious code in barnard-frontend-airbnb-io (npm) (malicious package)
- [MAL-2025-139905](https://insights.sbomify.com/MAL-2025-139905/): Malicious code in barnard-dotenv-safe-elara-registry (npm) (malicious package)
- [MAL-2025-139904](https://insights.sbomify.com/MAL-2025-139904/): Malicious code in barnard-css-minimizer-webpack-plugin-dependencies-commitlint-config-angular (npm) (malicious package)
- [MAL-2025-139903](https://insights.sbomify.com/MAL-2025-139903/): Malicious code in barnard-commitlint-hermes-enceladus (npm) (malicious package)
- [MAL-2025-139902](https://insights.sbomify.com/MAL-2025-139902/): Malicious code in barnard-chai-public-loglevel (npm) (malicious package)
- [MAL-2025-139901](https://insights.sbomify.com/MAL-2025-139901/): Malicious code in barnard-andromeda-indus-magellan (npm) (malicious package)
- [MAL-2025-139900](https://insights.sbomify.com/MAL-2025-139900/): Malicious code in barnard-aether-jsonp-farout (npm) (malicious package)
- [MAL-2025-13990](https://insights.sbomify.com/MAL-2025-13990/): Malicious code in acctla (npm) (malicious package)
- [MAL-2025-1399](https://insights.sbomify.com/MAL-2025-1399/): Malicious code in coinstore (npm) (malicious package)
- [MAL-2025-139899](https://insights.sbomify.com/MAL-2025-139899/): Malicious code in backend-yildun-fornax-shelljs (npm) (malicious package)
- [MAL-2025-139898](https://insights.sbomify.com/MAL-2025-139898/): Malicious code in backend-wasat-ceres-fusion (npm) (malicious package)
- [MAL-2025-139897](https://insights.sbomify.com/MAL-2025-139897/): Malicious code in backend-venus-server-indus (npm) (malicious package)
- [MAL-2025-139896](https://insights.sbomify.com/MAL-2025-139896/): Malicious code in backend-ursa-achernar-react-bootstrap (npm) (malicious package)
- [MAL-2025-139895](https://insights.sbomify.com/MAL-2025-139895/): Malicious code in backend-run-script-chariklo-centauri (npm) (malicious package)
- [MAL-2025-139894](https://insights.sbomify.com/MAL-2025-139894/): Malicious code in backend-phenomic-csrf-auriga (npm) (malicious package)
- [MAL-2025-139893](https://insights.sbomify.com/MAL-2025-139893/): Malicious code in backend-oberon-gulp-umbra (npm) (malicious package)
- [MAL-2025-139892](https://insights.sbomify.com/MAL-2025-139892/): Malicious code in backend-npm-jwt-concurrently (npm) (malicious package)
- [MAL-2025-139891](https://insights.sbomify.com/MAL-2025-139891/): Malicious code in backend-mongodb-pino-pretty-grus (npm) (malicious package)
- [MAL-2025-139890](https://insights.sbomify.com/MAL-2025-139890/): Malicious code in backend-ini-sedna-ophiuchus (npm) (malicious package)
- [MAL-2025-13989](https://insights.sbomify.com/MAL-2025-13989/): Malicious code in accretion-vulcan-testcafe-subscription (npm) (malicious package)
- [MAL-2025-139889](https://insights.sbomify.com/MAL-2025-139889/): Malicious code in backend-hyperion-nightmare-pipe (npm) (malicious package)
- [MAL-2025-139888](https://insights.sbomify.com/MAL-2025-139888/): Malicious code in backend-hercules-janus-leda (npm) (malicious package)
- [MAL-2025-139887](https://insights.sbomify.com/MAL-2025-139887/): Malicious code in backend-foundation-prettier-fornax (npm) (malicious package)
- [MAL-2025-139886](https://insights.sbomify.com/MAL-2025-139886/): Malicious code in backend-exec-readable-vulcan (npm) (malicious package)
- [MAL-2025-139885](https://insights.sbomify.com/MAL-2025-139885/): Malicious code in backend-dotenv-adonis-webdriver-manager (npm) (malicious package)
- [MAL-2025-139884](https://insights.sbomify.com/MAL-2025-139884/): Malicious code in backend-css-minimizer-webpack-plugin-mocha-fetch (npm) (malicious package)
- [MAL-2025-139883](https://insights.sbomify.com/MAL-2025-139883/): Malicious code in backend-configstore-ultra-parcel (npm) (malicious package)
- [MAL-2025-139882](https://insights.sbomify.com/MAL-2025-139882/): Malicious code in backend-configstore-node-sass-firebase (npm) (malicious package)
- [MAL-2025-139881](https://insights.sbomify.com/MAL-2025-139881/): Malicious code in backend-colors-less-loader-xanthus (npm) (malicious package)
- [MAL-2025-139880](https://insights.sbomify.com/MAL-2025-139880/): Malicious code in backend-chariklo-bellatrix-start (npm) (malicious package)
- [MAL-2025-13988](https://insights.sbomify.com/MAL-2025-13988/): Malicious code in accretion-puppeteer-pegasus-sync (npm) (malicious package)
- [MAL-2025-139879](https://insights.sbomify.com/MAL-2025-139879/): Malicious code in backend-build-dorado-antares (npm) (malicious package)
- [MAL-2025-139878](https://insights.sbomify.com/MAL-2025-139878/): Malicious code in backend-barnard-galaxy-foundation (npm) (malicious package)
- [MAL-2025-139877](https://insights.sbomify.com/MAL-2025-139877/): Malicious code in backend-andromeda-chakra-ui-callback (npm) (malicious package)
- [MAL-2025-139876](https://insights.sbomify.com/MAL-2025-139876/): Malicious code in babel-xml-config-hyperion (npm) (malicious package)
- [MAL-2025-139875](https://insights.sbomify.com/MAL-2025-139875/): Malicious code in babel-xanadu-nconf-nashira (npm) (malicious package)
- [MAL-2025-139874](https://insights.sbomify.com/MAL-2025-139874/): Malicious code in babel-stream-loop-corvus (npm) (malicious package)
- [MAL-2025-139873](https://insights.sbomify.com/MAL-2025-139873/): Malicious code in babel-standard-nightwatch-figures (npm) (malicious package)
- [MAL-2025-139872](https://insights.sbomify.com/MAL-2025-139872/): Malicious code in babel-rehype-mini-css-extract-plugin-aether (npm) (malicious package)
- [MAL-2025-139871](https://insights.sbomify.com/MAL-2025-139871/): Malicious code in babel-react-bootstrap-cache-rate-limiter (npm) (malicious package)
- [MAL-2025-139870](https://insights.sbomify.com/MAL-2025-139870/): Malicious code in babel-playwright-luna-oauth (npm) (malicious package)
- [MAL-2025-13987](https://insights.sbomify.com/MAL-2025-13987/): Malicious code in accretion-nightmare-rate-limiter-nuxtjs (npm) (malicious package)
- [MAL-2025-139869](https://insights.sbomify.com/MAL-2025-139869/): Malicious code in babel-phoebe-browserify-prompts (npm) (malicious package)
- [MAL-2025-139868](https://insights.sbomify.com/MAL-2025-139868/): Malicious code in babel-pegasus-xml-schema (npm) (malicious package)
- [MAL-2025-139867](https://insights.sbomify.com/MAL-2025-139867/): Malicious code in babel-markdown-graphql-jest (npm) (malicious package)
- [MAL-2025-139866](https://insights.sbomify.com/MAL-2025-139866/): Malicious code in babel-kronos-xenon-fetch (npm) (malicious package)
- [MAL-2025-139865](https://insights.sbomify.com/MAL-2025-139865/): Malicious code in babel-jovian-despina-slidev (npm) (malicious package)
- [MAL-2025-139864](https://insights.sbomify.com/MAL-2025-139864/): Malicious code in babel-jasmine-castor-sqlite (npm) (malicious package)
- [MAL-2025-139863](https://insights.sbomify.com/MAL-2025-139863/): Malicious code in babel-iota-command-bootes (npm) (malicious package)
- [MAL-2025-139862](https://insights.sbomify.com/MAL-2025-139862/): Malicious code in babel-inquirer-luna-corvus (npm) (malicious package)
- [MAL-2025-139861](https://insights.sbomify.com/MAL-2025-139861/): Malicious code in babel-init-element-ui-nebula (npm) (malicious package)
- [MAL-2025-139860](https://insights.sbomify.com/MAL-2025-139860/): Malicious code in babel-heka-virgo-despina (npm) (malicious package)
- [MAL-2025-13986](https://insights.sbomify.com/MAL-2025-13986/): Malicious code in accretion-luna-materialize-process (npm) (malicious package)
- [MAL-2025-139859](https://insights.sbomify.com/MAL-2025-139859/): Malicious code in babel-eridanus-taurus-kronos (npm) (malicious package)
- [MAL-2025-139858](https://insights.sbomify.com/MAL-2025-139858/): Malicious code in babel-equinox-global-xanthus (npm) (malicious package)
- [MAL-2025-139857](https://insights.sbomify.com/MAL-2025-139857/): Malicious code in babel-element-ui-scripts-pegasus (npm) (malicious package)
- [MAL-2025-139856](https://insights.sbomify.com/MAL-2025-139856/): Malicious code in babel-dotenv-safe-cosmos-resolvers (npm) (malicious package)
- [MAL-2025-139855](https://insights.sbomify.com/MAL-2025-139855/): Malicious code in babel-dotenv-mui-scorpius (npm) (malicious package)
- [MAL-2025-139854](https://insights.sbomify.com/MAL-2025-139854/): Malicious code in babel-dorado-firebase-readable (npm) (malicious package)
- [MAL-2025-139853](https://insights.sbomify.com/MAL-2025-139853/): Malicious code in babel-development-jabbah-lacerta (npm) (malicious package)
- [MAL-2025-139852](https://insights.sbomify.com/MAL-2025-139852/): Malicious code in babel-development-gatsby-aldebaran (npm) (malicious package)
- [MAL-2025-139851](https://insights.sbomify.com/MAL-2025-139851/): Malicious code in babel-delphinus-envconfig-halley (npm) (malicious package)
- [MAL-2025-139850](https://insights.sbomify.com/MAL-2025-139850/): Malicious code in babel-dactyl-axios-neptune (npm) (malicious package)
- [MAL-2025-13985](https://insights.sbomify.com/MAL-2025-13985/): Malicious code in accretion-ichnology-koa-husky (npm) (malicious package)
- [MAL-2025-139849](https://insights.sbomify.com/MAL-2025-139849/): Malicious code in babel-cluster-zenith-ursa (npm) (malicious package)
- [MAL-2025-139848](https://insights.sbomify.com/MAL-2025-139848/): Malicious code in babel-changelog-janus-webdriver-manager (npm) (malicious package)
- [MAL-2025-139847](https://insights.sbomify.com/MAL-2025-139847/): Malicious code in babel-bellatrix-lint-staged-json (npm) (malicious package)
- [MAL-2025-139846](https://insights.sbomify.com/MAL-2025-139846/): Malicious code in babel-barnard-celeste-ini (npm) (malicious package)
- [MAL-2025-139845](https://insights.sbomify.com/MAL-2025-139845/): Malicious code in babel-auth0-castor-csrf (npm) (malicious package)
- [MAL-2025-139844](https://insights.sbomify.com/MAL-2025-139844/): Malicious code in babel-atlas-cordelia-nashira (npm) (malicious package)
- [MAL-2025-139843](https://insights.sbomify.com/MAL-2025-139843/): Malicious code in axios-vulcan-alphard-config (npm) (malicious package)
- [MAL-2025-139842](https://insights.sbomify.com/MAL-2025-139842/): Malicious code in axios-virgo-registry-transport (npm) (malicious package)
- [MAL-2025-139841](https://insights.sbomify.com/MAL-2025-139841/): Malicious code in axios-thuban-eslint-plugin-got (npm) (malicious package)
- [MAL-2025-139840](https://insights.sbomify.com/MAL-2025-139840/): Malicious code in axios-taurus-dependencies-schema (npm) (malicious package)
- [MAL-2025-13984](https://insights.sbomify.com/MAL-2025-13984/): Malicious code in accretion-galaxy-accretion-eslint (npm) (malicious package)
- [MAL-2025-139839](https://insights.sbomify.com/MAL-2025-139839/): Malicious code in axios-spectron-webdriver-jsonp-phenomic (npm) (malicious package)
- [MAL-2025-139838](https://insights.sbomify.com/MAL-2025-139838/): Malicious code in axios-spawn-metalsmith-hyperion (npm) (malicious package)
- [MAL-2025-139837](https://insights.sbomify.com/MAL-2025-139837/): Malicious code in axios-protractor-loglevel-warp (npm) (malicious package)
- [MAL-2025-139836](https://insights.sbomify.com/MAL-2025-139836/): Malicious code in axios-pm2-xenon-hercules (npm) (malicious package)
- [MAL-2025-139835](https://insights.sbomify.com/MAL-2025-139835/): Malicious code in axios-non-blocking-concurrently-semantic-ui (npm) (malicious package)
- [MAL-2025-139834](https://insights.sbomify.com/MAL-2025-139834/): Malicious code in axios-native-concurrently-ursa (npm) (malicious package)
- [MAL-2025-139833](https://insights.sbomify.com/MAL-2025-139833/): Malicious code in axios-mutation-stop-testcafe (npm) (malicious package)
- [MAL-2025-139832](https://insights.sbomify.com/MAL-2025-139832/): Malicious code in axios-karma-mensa-magellan (npm) (malicious package)
- [MAL-2025-139831](https://insights.sbomify.com/MAL-2025-139831/): Malicious code in axios-javascript-miranda-zenith (npm) (malicious package)
- [MAL-2025-139830](https://insights.sbomify.com/MAL-2025-139830/): Malicious code in axios-ignite-ignite-release-it (npm) (malicious package)
- [MAL-2025-13983](https://insights.sbomify.com/MAL-2025-13983/): Malicious code in accretion-foundation-karma-paleoceanography (npm) (malicious package)
- [MAL-2025-139829](https://insights.sbomify.com/MAL-2025-139829/): Malicious code in axios-graphql-umbriel-uglify-js (npm) (malicious package)
- [MAL-2025-139828](https://insights.sbomify.com/MAL-2025-139828/): Malicious code in axios-exec-umbriel-meteor (npm) (malicious package)
- [MAL-2025-139827](https://insights.sbomify.com/MAL-2025-139827/): Malicious code in axios-electron-builder-module-css-loader (npm) (malicious package)
- [MAL-2025-139826](https://insights.sbomify.com/MAL-2025-139826/): Malicious code in axios-docusaurus-node-sass-html-webpack-plugin (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1489/