# Vulnerabilities published in 2025


- [MAL-2025-139735](https://insights.sbomify.com/MAL-2025-139735/): Malicious code in auth0-algol-playwright-polaris (npm) (malicious package)
- [MAL-2025-139734](https://insights.sbomify.com/MAL-2025-139734/): Malicious code in auth-yaml-slides-socketio (npm) (malicious package)
- [MAL-2025-139733](https://insights.sbomify.com/MAL-2025-139733/): Malicious code in auth-venus-request-vega (npm) (malicious package)
- [MAL-2025-139732](https://insights.sbomify.com/MAL-2025-139732/): Malicious code in auth-thuban-despina-io (npm) (malicious package)
- [MAL-2025-139731](https://insights.sbomify.com/MAL-2025-139731/): Malicious code in auth-tethys-duplex-selenium (npm) (malicious package)
- [MAL-2025-139730](https://insights.sbomify.com/MAL-2025-139730/): Malicious code in auth-radiant-kastra-standard (npm) (malicious package)
- [MAL-2025-13973](https://insights.sbomify.com/MAL-2025-13973/): Malicious code in acamar-paleoecology-upgrade-cosmology (npm) (malicious package)
- [MAL-2025-139729](https://insights.sbomify.com/MAL-2025-139729/): Malicious code in auth-protractor-jasmine-pm2 (npm) (malicious package)
- [MAL-2025-139728](https://insights.sbomify.com/MAL-2025-139728/): Malicious code in auth-non-blocking-ini-middleware (npm) (malicious package)
- [MAL-2025-139727](https://insights.sbomify.com/MAL-2025-139727/): Malicious code in auth-nightwatch-grunt-forever (npm) (malicious package)
- [MAL-2025-139726](https://insights.sbomify.com/MAL-2025-139726/): Malicious code in auth-neptune-cypress-cordelia (npm) (malicious package)
- [MAL-2025-139725](https://insights.sbomify.com/MAL-2025-139725/): Malicious code in auth-mysql-element-ui-sedna (npm) (malicious package)
- [MAL-2025-139724](https://insights.sbomify.com/MAL-2025-139724/): Malicious code in auth-middleware-phoebe-bootstrap (npm) (malicious package)
- [MAL-2025-139723](https://insights.sbomify.com/MAL-2025-139723/): Malicious code in auth-install-express-prompts (npm) (malicious package)
- [MAL-2025-139722](https://insights.sbomify.com/MAL-2025-139722/): Malicious code in auth-europa-json-cosmiconfig (npm) (malicious package)
- [MAL-2025-139721](https://insights.sbomify.com/MAL-2025-139721/): Malicious code in auth-equinox-orbit-charon (npm) (malicious package)
- [MAL-2025-139720](https://insights.sbomify.com/MAL-2025-139720/): Malicious code in auth-delphinus-yildun-kronos (npm) (malicious package)
- [MAL-2025-13972](https://insights.sbomify.com/MAL-2025-13972/): Malicious code in acamar-acamar-cz-conventional-changelog-solis (npm) (malicious package)
- [MAL-2025-139719](https://insights.sbomify.com/MAL-2025-139719/): Malicious code in auth-css-loader-node-sass-gacrux (npm) (malicious package)
- [MAL-2025-139718](https://insights.sbomify.com/MAL-2025-139718/): Malicious code in auth-cordelia-helios-prompts (npm) (malicious package)
- [MAL-2025-139717](https://insights.sbomify.com/MAL-2025-139717/): Malicious code in auth-convict-passport-loop (npm) (malicious package)
- [MAL-2025-139716](https://insights.sbomify.com/MAL-2025-139716/): Malicious code in auth-await-vortex-lynx (npm) (malicious package)
- [MAL-2025-139715](https://insights.sbomify.com/MAL-2025-139715/): Malicious code in auth-atlas-oauth-nova (npm) (malicious package)
- [MAL-2025-139714](https://insights.sbomify.com/MAL-2025-139714/): Malicious code in aurora-yildun-karma-xanadu (npm) (malicious package)
- [MAL-2025-139713](https://insights.sbomify.com/MAL-2025-139713/): Malicious code in aurora-upgrade-venus-barnard (npm) (malicious package)
- [MAL-2025-139712](https://insights.sbomify.com/MAL-2025-139712/): Malicious code in aurora-tailwindcss-nodejs-lynx (npm) (malicious package)
- [MAL-2025-139711](https://insights.sbomify.com/MAL-2025-139711/): Malicious code in aurora-sails-orbit-proxima (npm) (malicious package)
- [MAL-2025-139710](https://insights.sbomify.com/MAL-2025-139710/): Malicious code in aurora-run-script-ophiuchus-rehype (npm) (malicious package)
- [MAL-2025-13971](https://insights.sbomify.com/MAL-2025-13971/): Malicious code in acadgild (npm) (malicious package)
- [MAL-2025-139709](https://insights.sbomify.com/MAL-2025-139709/): Malicious code in aurora-readable-callisto-betelgeuse (npm) (malicious package)
- [MAL-2025-139708](https://insights.sbomify.com/MAL-2025-139708/): Malicious code in aurora-publish-markdown-barnard (npm) (malicious package)
- [MAL-2025-139707](https://insights.sbomify.com/MAL-2025-139707/): Malicious code in aurora-procyon-non-blocking-update (npm) (malicious package)
- [MAL-2025-139706](https://insights.sbomify.com/MAL-2025-139706/): Malicious code in aurora-process-markdownlint-cluster (npm) (malicious package)
- [MAL-2025-139705](https://insights.sbomify.com/MAL-2025-139705/): Malicious code in aurora-pino-pretty-meissa-despina (npm) (malicious package)
- [MAL-2025-139704](https://insights.sbomify.com/MAL-2025-139704/): Malicious code in aurora-perseus-publish-protractor (npm) (malicious package)
- [MAL-2025-139703](https://insights.sbomify.com/MAL-2025-139703/): Malicious code in aurora-package-concurrently-vega (npm) (malicious package)
- [MAL-2025-139702](https://insights.sbomify.com/MAL-2025-139702/): Malicious code in aurora-odin-ultra-fomalhaut (npm) (malicious package)
- [MAL-2025-139701](https://insights.sbomify.com/MAL-2025-139701/): Malicious code in aurora-luna-ophiuchus-auriga (npm) (malicious package)
- [MAL-2025-139700](https://insights.sbomify.com/MAL-2025-139700/): Malicious code in aurora-juno-grunt-chakra-ui (npm) (malicious package)
- [MAL-2025-13970](https://insights.sbomify.com/MAL-2025-13970/): Malicious code in ac1 (npm) (malicious package)
- [MAL-2025-1397](https://insights.sbomify.com/MAL-2025-1397/): Malicious code in bitstamp-main (npm) (malicious package)
- [MAL-2025-139699](https://insights.sbomify.com/MAL-2025-139699/): Malicious code in aurora-fomalhaut-ultra-mini-css-extract-plugin (npm) (malicious package)
- [MAL-2025-139698](https://insights.sbomify.com/MAL-2025-139698/): Malicious code in aurora-firebase-magellan-colors (npm) (malicious package)
- [MAL-2025-139697](https://insights.sbomify.com/MAL-2025-139697/): Malicious code in aurora-chai-csrf-mocha (npm) (malicious package)
- [MAL-2025-139696](https://insights.sbomify.com/MAL-2025-139696/): Malicious code in aurora-cache-soap-solis (npm) (malicious package)
- [MAL-2025-139695](https://insights.sbomify.com/MAL-2025-139695/): Malicious code in aurora-aquarius-process-grus (npm) (malicious package)
- [MAL-2025-139694](https://insights.sbomify.com/MAL-2025-139694/): Malicious code in auriga-zephyr-cosmiconfig-shelljs (npm) (malicious package)
- [MAL-2025-139693](https://insights.sbomify.com/MAL-2025-139693/): Malicious code in auriga-xenos-command-markdownlint (npm) (malicious package)
- [MAL-2025-139692](https://insights.sbomify.com/MAL-2025-139692/): Malicious code in auriga-umbra-webdriver-manager-selenium (npm) (malicious package)
- [MAL-2025-139691](https://insights.sbomify.com/MAL-2025-139691/): Malicious code in auriga-triton-passport-delphinus (npm) (malicious package)
- [MAL-2025-139690](https://insights.sbomify.com/MAL-2025-139690/): Malicious code in auriga-stop-superagent-vortex (npm) (malicious package)
- [MAL-2025-13969](https://insights.sbomify.com/MAL-2025-13969/): Malicious code in ac-window-delegate (npm) (malicious package)
- [MAL-2025-139689](https://insights.sbomify.com/MAL-2025-139689/): Malicious code in auriga-shelljs-titan-janus (npm) (malicious package)
- [MAL-2025-139688](https://insights.sbomify.com/MAL-2025-139688/): Malicious code in auriga-sagitta-sagitta-jekyll (npm) (malicious package)
- [MAL-2025-139687](https://insights.sbomify.com/MAL-2025-139687/): Malicious code in auriga-remark-carina-npm (npm) (malicious package)
- [MAL-2025-139686](https://insights.sbomify.com/MAL-2025-139686/): Malicious code in auriga-query-solis-carpo (npm) (malicious package)
- [MAL-2025-139685](https://insights.sbomify.com/MAL-2025-139685/): Malicious code in auriga-norma-test-comet (npm) (malicious package)
- [MAL-2025-139684](https://insights.sbomify.com/MAL-2025-139684/): Malicious code in auriga-nightwatch-yakutsk-toml (npm) (malicious package)
- [MAL-2025-139683](https://insights.sbomify.com/MAL-2025-139683/): Malicious code in auriga-lint-staged-janus-dotenv-safe (npm) (malicious package)
- [MAL-2025-139682](https://insights.sbomify.com/MAL-2025-139682/): Malicious code in auriga-library-nightwatch-odin (npm) (malicious package)
- [MAL-2025-139681](https://insights.sbomify.com/MAL-2025-139681/): Malicious code in auriga-less-cz-conventional-changelog-axios (npm) (malicious package)
- [MAL-2025-139680](https://insights.sbomify.com/MAL-2025-139680/): Malicious code in auriga-jovian-webdriver-mocha-barnard (npm) (malicious package)
- [MAL-2025-13968](https://insights.sbomify.com/MAL-2025-13968/): Malicious code in ac-element-tracker (npm) (malicious package)
- [MAL-2025-139679](https://insights.sbomify.com/MAL-2025-139679/): Malicious code in auriga-install-express-toml (npm) (malicious package)
- [MAL-2025-139678](https://insights.sbomify.com/MAL-2025-139678/): Malicious code in auriga-fork-jupiter-hyperion (npm) (malicious package)
- [MAL-2025-139677](https://insights.sbomify.com/MAL-2025-139677/): Malicious code in auriga-figures-karma-ursa (npm) (malicious package)
- [MAL-2025-139676](https://insights.sbomify.com/MAL-2025-139676/): Malicious code in auriga-eleventy-venus-neptune (npm) (malicious package)
- [MAL-2025-139675](https://insights.sbomify.com/MAL-2025-139675/): Malicious code in auriga-dotenv-draco-rollup-plugin (npm) (malicious package)
- [MAL-2025-139674](https://insights.sbomify.com/MAL-2025-139674/): Malicious code in auriga-carina-iota-configstore (npm) (malicious package)
- [MAL-2025-139673](https://insights.sbomify.com/MAL-2025-139673/): Malicious code in auriga-babel-ceres-sequelize (npm) (malicious package)
- [MAL-2025-139672](https://insights.sbomify.com/MAL-2025-139672/): Malicious code in auriga-alphard-farout-typeorm (npm) (malicious package)
- [MAL-2025-139671](https://insights.sbomify.com/MAL-2025-139671/): Malicious code in auriga-algol-bootstrap-upgrade (npm) (malicious package)
- [MAL-2025-139670](https://insights.sbomify.com/MAL-2025-139670/): Malicious code in auriga-aldebaran-toml-charon (npm) (malicious package)
- [MAL-2025-13967](https://insights.sbomify.com/MAL-2025-13967/): Malicious code in ac-dom-traversal (npm) (malicious package)
- [MAL-2025-139669](https://insights.sbomify.com/MAL-2025-139669/): Malicious code in atlas-yonder-carina-spinner (npm) (malicious package)
- [MAL-2025-139668](https://insights.sbomify.com/MAL-2025-139668/): Malicious code in atlas-yaml-ursa-eslint-config (npm) (malicious package)
- [MAL-2025-139667](https://insights.sbomify.com/MAL-2025-139667/): Malicious code in atlas-virgo-mui-ursa (npm) (malicious package)
- [MAL-2025-139666](https://insights.sbomify.com/MAL-2025-139666/): Malicious code in atlas-update-npm-enceladus (npm) (malicious package)
- [MAL-2025-139665](https://insights.sbomify.com/MAL-2025-139665/): Malicious code in atlas-uninstall-warp-thuban (npm) (malicious package)
- [MAL-2025-139664](https://insights.sbomify.com/MAL-2025-139664/): Malicious code in atlas-uglify-js-dependencies-playwright (npm) (malicious package)
- [MAL-2025-139663](https://insights.sbomify.com/MAL-2025-139663/): Malicious code in atlas-typeorm-jsonp-repository (npm) (malicious package)
- [MAL-2025-139662](https://insights.sbomify.com/MAL-2025-139662/): Malicious code in atlas-transform-taurus-xanthus (npm) (malicious package)
- [MAL-2025-139661](https://insights.sbomify.com/MAL-2025-139661/): Malicious code in atlas-terser-webpack-plugin-auth-rocket (npm) (malicious package)
- [MAL-2025-139660](https://insights.sbomify.com/MAL-2025-139660/): Malicious code in atlas-terser-uglify-js-solis (npm) (malicious package)
- [MAL-2025-13966](https://insights.sbomify.com/MAL-2025-13966/): Malicious code in ac-dom-metrics (npm) (malicious package)
- [MAL-2025-139659](https://insights.sbomify.com/MAL-2025-139659/): Malicious code in atlas-standard-global-jekyll (npm) (malicious package)
- [MAL-2025-139658](https://insights.sbomify.com/MAL-2025-139658/): Malicious code in atlas-sirius-comet-europa (npm) (malicious package)
- [MAL-2025-139657](https://insights.sbomify.com/MAL-2025-139657/): Malicious code in atlas-rest-quantum-toml (npm) (malicious package)
- [MAL-2025-139656](https://insights.sbomify.com/MAL-2025-139656/): Malicious code in atlas-redis-axios-europa (npm) (malicious package)
- [MAL-2025-139655](https://insights.sbomify.com/MAL-2025-139655/): Malicious code in atlas-radiant-sirius-ora (npm) (malicious package)
- [MAL-2025-139654](https://insights.sbomify.com/MAL-2025-139654/): Malicious code in atlas-radiant-equinox-spectron-webdriver (npm) (malicious package)
- [MAL-2025-139653](https://insights.sbomify.com/MAL-2025-139653/): Malicious code in atlas-pyxis-prompts-development (npm) (malicious package)
- [MAL-2025-139652](https://insights.sbomify.com/MAL-2025-139652/): Malicious code in atlas-orbit-ceres-request (npm) (malicious package)
- [MAL-2025-139651](https://insights.sbomify.com/MAL-2025-139651/): Malicious code in atlas-odin-registry-weywot (npm) (malicious package)
- [MAL-2025-139650](https://insights.sbomify.com/MAL-2025-139650/): Malicious code in atlas-neptune-postcss-private (npm) (malicious package)
- [MAL-2025-13965](https://insights.sbomify.com/MAL-2025-13965/): Malicious code in ac-dom-emitter (npm) (malicious package)
- [MAL-2025-139649](https://insights.sbomify.com/MAL-2025-139649/): Malicious code in atlas-mini-css-extract-plugin-equinox-stream (npm) (malicious package)
- [MAL-2025-139648](https://insights.sbomify.com/MAL-2025-139648/): Malicious code in atlas-mdx-pyxis-process (npm) (malicious package)
- [MAL-2025-139647](https://insights.sbomify.com/MAL-2025-139647/): Malicious code in atlas-karma-sync-galaxy (npm) (malicious package)
- [MAL-2025-139646](https://insights.sbomify.com/MAL-2025-139646/): Malicious code in atlas-jwt-antares-lint (npm) (malicious package)

---
From sbomify Insights: https://insights.sbomify.com/years/2025/page/1491/