# Vulnerabilities published in 2025


- [MAL-2025-139825](https://insights.sbomify.com/MAL-2025-139825/): Malicious code in axios-despina-karma-duplex (npm) (malicious package)
- [MAL-2025-139824](https://insights.sbomify.com/MAL-2025-139824/): Malicious code in axios-dagda-rollup-plugin-dotenv-parse-variables (npm) (malicious package)
- [MAL-2025-139823](https://insights.sbomify.com/MAL-2025-139823/): Malicious code in axios-css-minimizer-webpack-plugin-bulma-helios (npm) (malicious package)
- [MAL-2025-139822](https://insights.sbomify.com/MAL-2025-139822/): Malicious code in axios-concurrently-loglevel-spectron (npm) (malicious package)
- [MAL-2025-139821](https://insights.sbomify.com/MAL-2025-139821/): Malicious code in axios-canopus-yildun-socketio (npm) (malicious package)
- [MAL-2025-139820](https://insights.sbomify.com/MAL-2025-139820/): Malicious code in axios-canopus-kronos-rate-limiter (npm) (malicious package)
- [MAL-2025-13982](https://insights.sbomify.com/MAL-2025-13982/): Malicious code in accretion-cosmiconfig-telesto-pegasus (npm) (malicious package)
- [MAL-2025-139819](https://insights.sbomify.com/MAL-2025-139819/): Malicious code in axios-blaze-electron-builder-magellan (npm) (malicious package)
- [MAL-2025-139818](https://insights.sbomify.com/MAL-2025-139818/): Malicious code in axios-andromeda-dione-nightwatch (npm) (malicious package)
- [MAL-2025-139817](https://insights.sbomify.com/MAL-2025-139817/): Malicious code in await-yildun-canopus-fork (npm) (malicious package)
- [MAL-2025-139816](https://insights.sbomify.com/MAL-2025-139816/): Malicious code in await-xanadu-jupiter-vega (npm) (malicious package)
- [MAL-2025-139815](https://insights.sbomify.com/MAL-2025-139815/): Malicious code in await-writable-janus-sedna (npm) (malicious package)
- [MAL-2025-139814](https://insights.sbomify.com/MAL-2025-139814/): Malicious code in await-wezen-nconf-meteor (npm) (malicious package)
- [MAL-2025-139813](https://insights.sbomify.com/MAL-2025-139813/): Malicious code in await-vulcan-lyra-tethys (npm) (malicious package)
- [MAL-2025-139812](https://insights.sbomify.com/MAL-2025-139812/): Malicious code in await-venus-oauth-deneb (npm) (malicious package)
- [MAL-2025-139811](https://insights.sbomify.com/MAL-2025-139811/): Malicious code in await-umbra-selenium-perseus (npm) (malicious package)
- [MAL-2025-139810](https://insights.sbomify.com/MAL-2025-139810/): Malicious code in await-toml-jovian-hapi (npm) (malicious package)
- [MAL-2025-13981](https://insights.sbomify.com/MAL-2025-13981/): Malicious code in accounts-react-components (npm) (malicious package)
- [MAL-2025-139809](https://insights.sbomify.com/MAL-2025-139809/): Malicious code in await-sqlite-betelgeuse-fork (npm) (malicious package)
- [MAL-2025-139808](https://insights.sbomify.com/MAL-2025-139808/): Malicious code in await-spawn-galaxy-spica (npm) (malicious package)
- [MAL-2025-139807](https://insights.sbomify.com/MAL-2025-139807/): Malicious code in await-request-docusaurus-janus (npm) (malicious package)
- [MAL-2025-139806](https://insights.sbomify.com/MAL-2025-139806/): Malicious code in await-redis-bootes-pulsar (npm) (malicious package)
- [MAL-2025-139805](https://insights.sbomify.com/MAL-2025-139805/): Malicious code in await-quark-kronos-jsonp (npm) (malicious package)
- [MAL-2025-139804](https://insights.sbomify.com/MAL-2025-139804/): Malicious code in await-proxima-mui-exec (npm) (malicious package)
- [MAL-2025-139803](https://insights.sbomify.com/MAL-2025-139803/): Malicious code in await-nodemon-odin-draco (npm) (malicious package)
- [MAL-2025-139802](https://insights.sbomify.com/MAL-2025-139802/): Malicious code in await-nightwatch-atlas-envconfig (npm) (malicious package)
- [MAL-2025-139801](https://insights.sbomify.com/MAL-2025-139801/): Malicious code in await-markdownlint-axios-child-process (npm) (malicious package)
- [MAL-2025-139800](https://insights.sbomify.com/MAL-2025-139800/): Malicious code in await-less-xo-package (npm) (malicious package)
- [MAL-2025-13980](https://insights.sbomify.com/MAL-2025-13980/): Malicious code in accounts-fonts (npm) (malicious package)
- [MAL-2025-1398](https://insights.sbomify.com/MAL-2025-1398/): Malicious code in bitstamp-test (npm) (malicious package)
- [MAL-2025-139799](https://insights.sbomify.com/MAL-2025-139799/): Malicious code in await-janus-chalk-magellan (npm) (malicious package)
- [MAL-2025-139798](https://insights.sbomify.com/MAL-2025-139798/): Malicious code in await-frontend-duplex-html-webpack-plugin (npm) (malicious package)
- [MAL-2025-139797](https://insights.sbomify.com/MAL-2025-139797/): Malicious code in await-dynamo-europa-development (npm) (malicious package)
- [MAL-2025-139796](https://insights.sbomify.com/MAL-2025-139796/): Malicious code in await-dactyl-flare-halley (npm) (malicious package)
- [MAL-2025-139795](https://insights.sbomify.com/MAL-2025-139795/): Malicious code in await-css-loader-neptune-cosmiconfig (npm) (malicious package)
- [MAL-2025-139794](https://insights.sbomify.com/MAL-2025-139794/): Malicious code in await-castor-middleware-chakra-ui (npm) (malicious package)
- [MAL-2025-139793](https://insights.sbomify.com/MAL-2025-139793/): Malicious code in await-altair-got-graphql (npm) (malicious package)
- [MAL-2025-139792](https://insights.sbomify.com/MAL-2025-139792/): Malicious code in avior-zenobia-colors-mira (npm) (malicious package)
- [MAL-2025-139791](https://insights.sbomify.com/MAL-2025-139791/): Malicious code in avior-webdriverio-scorpius-webdriver-manager (npm) (malicious package)
- [MAL-2025-139790](https://insights.sbomify.com/MAL-2025-139790/): Malicious code in avior-webdriver-manager-tailwindcss-eslint-plugin (npm) (malicious package)
- [MAL-2025-13979](https://insights.sbomify.com/MAL-2025-13979/): Malicious code in account.propertyconnect (npm) (malicious package)
- [MAL-2025-139789](https://insights.sbomify.com/MAL-2025-139789/): Malicious code in avior-upgrade-frontend-yonder (npm) (malicious package)
- [MAL-2025-139788](https://insights.sbomify.com/MAL-2025-139788/): Malicious code in avior-sync-enif-protractor (npm) (malicious package)
- [MAL-2025-139787](https://insights.sbomify.com/MAL-2025-139787/): Malicious code in avior-superagent-electron-meissa (npm) (malicious package)
- [MAL-2025-139786](https://insights.sbomify.com/MAL-2025-139786/): Malicious code in avior-solis-grus-run-script (npm) (malicious package)
- [MAL-2025-139785](https://insights.sbomify.com/MAL-2025-139785/): Malicious code in avior-semantic-release-prettier-cz-conventional-changelog (npm) (malicious package)
- [MAL-2025-139784](https://insights.sbomify.com/MAL-2025-139784/): Malicious code in avior-sedna-adonis-hermes (npm) (malicious package)
- [MAL-2025-139783](https://insights.sbomify.com/MAL-2025-139783/): Malicious code in avior-rollup-stop-zephyr (npm) (malicious package)
- [MAL-2025-139782](https://insights.sbomify.com/MAL-2025-139782/): Malicious code in avior-rimraf-vortex-browserify (npm) (malicious package)
- [MAL-2025-139781](https://insights.sbomify.com/MAL-2025-139781/): Malicious code in avior-redis-tethys-miranda (npm) (malicious package)
- [MAL-2025-139780](https://insights.sbomify.com/MAL-2025-139780/): Malicious code in avior-quantum-quito-enceladus (npm) (malicious package)
- [MAL-2025-13978](https://insights.sbomify.com/MAL-2025-13978/): Malicious code in account-manager-ui (npm) (malicious package)
- [MAL-2025-139779](https://insights.sbomify.com/MAL-2025-139779/): Malicious code in avior-pegasus-concurrently-iota (npm) (malicious package)
- [MAL-2025-139778](https://insights.sbomify.com/MAL-2025-139778/): Malicious code in avior-ophiuchus-achernar-publish (npm) (malicious package)
- [MAL-2025-139777](https://insights.sbomify.com/MAL-2025-139777/): Malicious code in avior-neptune-io-redis (npm) (malicious package)
- [MAL-2025-139776](https://insights.sbomify.com/MAL-2025-139776/): Malicious code in avior-mui-vuetify-farout (npm) (malicious package)
- [MAL-2025-139775](https://insights.sbomify.com/MAL-2025-139775/): Malicious code in avior-materialize-arcturus-request (npm) (malicious package)
- [MAL-2025-139774](https://insights.sbomify.com/MAL-2025-139774/): Malicious code in avior-loglevel-hercules-mutation (npm) (malicious package)
- [MAL-2025-139773](https://insights.sbomify.com/MAL-2025-139773/): Malicious code in avior-leda-cordelia-middleware (npm) (malicious package)
- [MAL-2025-139772](https://insights.sbomify.com/MAL-2025-139772/): Malicious code in avior-kaus-sass-loader-pegasus (npm) (malicious package)
- [MAL-2025-139771](https://insights.sbomify.com/MAL-2025-139771/): Malicious code in avior-jasmine-graphql-equinox (npm) (malicious package)
- [MAL-2025-139770](https://insights.sbomify.com/MAL-2025-139770/): Malicious code in avior-jabbah-proxima-geckodriver (npm) (malicious package)
- [MAL-2025-13977](https://insights.sbomify.com/MAL-2025-13977/): Malicious code in acclogger (npm) (malicious package)
- [MAL-2025-139769](https://insights.sbomify.com/MAL-2025-139769/): Malicious code in avior-framework-hydra-frontend (npm) (malicious package)
- [MAL-2025-139768](https://insights.sbomify.com/MAL-2025-139768/): Malicious code in avior-equinox-xanadu-gacrux (npm) (malicious package)
- [MAL-2025-139767](https://insights.sbomify.com/MAL-2025-139767/): Malicious code in avior-element-ui-markdown-pdf-vuetify (npm) (malicious package)
- [MAL-2025-139766](https://insights.sbomify.com/MAL-2025-139766/): Malicious code in avior-dotenv-parse-variables-pegasus-meissa (npm) (malicious package)
- [MAL-2025-139765](https://insights.sbomify.com/MAL-2025-139765/): Malicious code in avior-dependencies-radiant-eridanus (npm) (malicious package)
- [MAL-2025-139764](https://insights.sbomify.com/MAL-2025-139764/): Malicious code in avior-cz-conventional-changelog-shelljs-zenobia (npm) (malicious package)
- [MAL-2025-139763](https://insights.sbomify.com/MAL-2025-139763/): Malicious code in avior-commitlint-config-angular-cypress-quark (npm) (malicious package)
- [MAL-2025-139762](https://insights.sbomify.com/MAL-2025-139762/): Malicious code in avior-axios-hydra-wezen (npm) (malicious package)
- [MAL-2025-139761](https://insights.sbomify.com/MAL-2025-139761/): Malicious code in avior-apollo-oauth-dependencies (npm) (malicious package)
- [MAL-2025-139760](https://insights.sbomify.com/MAL-2025-139760/): Malicious code in auth0-weywot-colors-css-loader (npm) (malicious package)
- [MAL-2025-13976](https://insights.sbomify.com/MAL-2025-13976/): Malicious code in accgen (npm) (malicious package)
- [MAL-2025-139759](https://insights.sbomify.com/MAL-2025-139759/): Malicious code in auth0-style-loader-polaris-gridsome (npm) (malicious package)
- [MAL-2025-139758](https://insights.sbomify.com/MAL-2025-139758/): Malicious code in auth0-spica-pegasus-dactyl (npm) (malicious package)
- [MAL-2025-139757](https://insights.sbomify.com/MAL-2025-139757/): Malicious code in auth0-schema-nightwatch-hydra (npm) (malicious package)
- [MAL-2025-139756](https://insights.sbomify.com/MAL-2025-139756/): Malicious code in auth0-sagitta-koa-kronos (npm) (malicious package)
- [MAL-2025-139755](https://insights.sbomify.com/MAL-2025-139755/): Malicious code in auth0-request-postcss-corvus (npm) (malicious package)
- [MAL-2025-139754](https://insights.sbomify.com/MAL-2025-139754/): Malicious code in auth0-remark-rimraf-gatsby (npm) (malicious package)
- [MAL-2025-139753](https://insights.sbomify.com/MAL-2025-139753/): Malicious code in auth0-mutation-websockets-ophiuchus (npm) (malicious package)
- [MAL-2025-139752](https://insights.sbomify.com/MAL-2025-139752/): Malicious code in auth0-materialize-electron-xerxes (npm) (malicious package)
- [MAL-2025-139751](https://insights.sbomify.com/MAL-2025-139751/): Malicious code in auth0-markdown-pdf-jovian-cluster (npm) (malicious package)
- [MAL-2025-139750](https://insights.sbomify.com/MAL-2025-139750/): Malicious code in auth0-kinetic-halley-xenon (npm) (malicious package)
- [MAL-2025-13975](https://insights.sbomify.com/MAL-2025-13975/): Malicious code in accelerate-cli (npm) (malicious package)
- [MAL-2025-139749](https://insights.sbomify.com/MAL-2025-139749/): Malicious code in auth0-jsonp-promise-buffer (npm) (malicious package)
- [MAL-2025-139748](https://insights.sbomify.com/MAL-2025-139748/): Malicious code in auth0-gacrux-gatsby-metalsmith (npm) (malicious package)
- [MAL-2025-139747](https://insights.sbomify.com/MAL-2025-139747/): Malicious code in auth0-forever-postgres-koa (npm) (malicious package)
- [MAL-2025-139746](https://insights.sbomify.com/MAL-2025-139746/): Malicious code in auth0-event-winston-alphard (npm) (malicious package)
- [MAL-2025-139745](https://insights.sbomify.com/MAL-2025-139745/): Malicious code in auth0-europa-weywot-rocket (npm) (malicious package)
- [MAL-2025-139744](https://insights.sbomify.com/MAL-2025-139744/): Malicious code in auth0-eleventy-sedna-delphinus (npm) (malicious package)
- [MAL-2025-139743](https://insights.sbomify.com/MAL-2025-139743/): Malicious code in auth0-cygnus-farout-cli (npm) (malicious package)
- [MAL-2025-139742](https://insights.sbomify.com/MAL-2025-139742/): Malicious code in auth0-cli-envconfig-capella (npm) (malicious package)
- [MAL-2025-139741](https://insights.sbomify.com/MAL-2025-139741/): Malicious code in auth0-chariklo-rimraf-publish (npm) (malicious package)
- [MAL-2025-139740](https://insights.sbomify.com/MAL-2025-139740/): Malicious code in auth0-carpo-npm-castor (npm) (malicious package)
- [MAL-2025-13974](https://insights.sbomify.com/MAL-2025-13974/): Malicious code in accela-ds-angular (npm) (malicious package)
- [MAL-2025-139739](https://insights.sbomify.com/MAL-2025-139739/): Malicious code in auth0-betelgeuse-phoebe-non-blocking (npm) (malicious package)
- [MAL-2025-139738](https://insights.sbomify.com/MAL-2025-139738/): Malicious code in auth0-bellatrix-orbit-eris (npm) (malicious package)
- [MAL-2025-139737](https://insights.sbomify.com/MAL-2025-139737/): Malicious code in auth0-bellatrix-flare-webdriver-manager (npm) (malicious package)
- [MAL-2025-139736](https://insights.sbomify.com/MAL-2025-139736/): Malicious code in auth0-atlas-bunyan-jsonp (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1490/